llm-relay 0.35.0 → 0.37.0

package/dist/session-pin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-pin.js","sourceRoot":"","sources":["../src/session-pin.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,MAAM,CAAC,MAAM,qBAAqB,GAAG,qBAAqB,CAAC;AAC3D,MAAM,CAAC,MAAM,wBAAwB,GAAG,oBAAoB,CAAC;AAC7D,MAAM,sBAAsB,GAAG,wBAAwB,CAAC;AAgBxD,MAAM,CAAC,MAAM,qBAAqB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpD,MAAM,CAAC,MAAM,2BAA2B,GAAG,IAAI,CAAC;AAEhD,6DAA6D;AAC7D,MAAM,OAAO,oBAAoB;IACd,IAAI,GAAG,IAAI,GAAG,EAAsB,CAAC;IACrC,KAAK,CAAS;IACd,WAAW,CAAS;IAErC,YAAY,UAAuC,EAAE;QACnD,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,qBAAqB,CAAC;QACpD,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,2BAA2B,CAAC;IACxE,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QAClC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC;QACxB,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK,EAAE,CAAC;YACxC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACtB,OAAO,IAAI,CAAC;QACd,CAAC;QACD,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC;QACvB,KAAK,CAAC,QAAQ,EAAE,CAAC;QACjB,OAAO,KAAK,CAAC,UAAU,CAAC;IAC1B,CAAC;IAED,MAAM,CAAC,GAAW,EAAE,UAAkB,EAAE,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE;QACtD,IAAI,CAAC,GAAG,IAAI,CAAC,UAAU;YAAE,OAAO;QAChC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE;YACjB,UAAU;YACV,QAAQ,EAAE,GAAG;YACb,UAAU,EAAE,GAAG;YACf,QAAQ,EAAE,CAAC;SACZ,CAAC,CAAC;QACH,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,CAAC;IAED,SAAS,CAAC,GAAW;QACnB,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,GAAW;QACvB,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE/C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACrC,IAAI,GAAG,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,CAAC,KAAK;gBAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QACjE,CAAC;QACD,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,WAAW;YAAE,OAAO;QAE/C,MAAM,MAAM,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC;QAC1F,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,WAAW,CAAC;QACjD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,MAAM,EAAE,KAAK,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QACtC,CAAC;IACH,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAA0C,EAAE,OAAgB;IAC3F,MAAM,OAAO,GAAG,gBAAgB,CAAC,OAAO,EAAE,sBAAsB,CAAC,CAAC;IAClE,MAAM,QAAQ,GAAG,gBAAgB,CAAC,OAAO,EAAE,qBAAqB,CAAC,CAAC;IAClE,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,QAAQ,EAAE,EAAE,OAAO,CAAC,CAAC;IAE1D,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,IAAI,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC/F,OAAO,QAAQ,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY,EAAE,OAAsB;IACpD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAChD,CAAC;AAED,SAAS,gBAAgB,CAAC,OAA0C,EAAE,IAAY;IAChF,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;IACjG,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC;IAC3C,MAAM,UAAU,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAChC,OAAO,UAAU,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;AACnD,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IACrC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACjE,MAAM,IAAI,GAAG,OAAkD,CAAC;IAEhE,MAAM,WAAW,GAAG,oBAAoB,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAE7C,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChE,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACvC,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAK,IAA2B,CAAC,IAAI,KAAK,MAAM;YAAE,SAAS;QACxG,OAAO,WAAW,CAAE,IAA8B,CAAC,OAAO,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,WAAW,CAAC,OAAgB;IACnC,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC1D,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,IAAI,CAAC;IAEzC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;YAAE,SAAS;QAC1D,MAAM,KAAK,GAAG,KAA2C,CAAC;QAC1D,gFAAgF;QAChF,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY;YAAE,SAAS;QACnE,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ;YAAE,SAAS;QAC7C,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC,UAAU,CAAC,mBAAmB,CAAC;YAAE,SAAS;QAC3F,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9D,CAAC;AAED,SAAS,QAAQ,CAAC,IAAY;IAC5B,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IAC5B,OAAO,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC"}

package/dist/stream-commit.d.ts

@@ -0,0 +1,34 @@
+/**
+ * Final-wire streamed response commit probe.
+ *
+ * A structurally valid SSE preamble is not yet an answer.  Keep the downstream head provisional
+ * until the client-facing protocol carries meaningful assistant output, then replay every byte
+ * exactly as received.  Before that point, an in-band error or an empty completion is safe to
+ * fail over because the client has observed nothing.
+ */
+export type StreamCommitProtocol = "anthropic-messages" | "openai-chat" | "openai-responses";
+export type StreamCommitProbe = {
+    kind: "ready";
+    body: ReadableStream<Uint8Array>;
+} | {
+    kind: "dead";
+    reason: string;
+    provenance: "upstream" | "local";
+} | {
+    kind: "cancelled";
+};
+export interface StreamCommitProbeOptions {
+    /** Client cancellation wins races with EOF/read failures and must never start another target. */
+    isCancelled?: () => boolean;
+    /** Malformed final wire produced by a response mapper is a local defect, not target health. */
+    malformedProvenance?: "upstream" | "local";
+    /** A rejected body read is normally transport/upstream even when parsing is mapper-local. */
+    readFailureProvenance?: "upstream" | "local";
+}
+/** Shared by structural preflight and final-wire commit probing. */
+export declare const STREAM_PREFLIGHT_LIMIT: number;
+/**
+ * Read through metadata-only SSE events until the final wire contains meaningful assistant output.
+ * The returned stream replays the exact raw chunks and continues on the same locked reader.
+ */
+export declare function probeStreamForCommit(body: ReadableStream<Uint8Array>, protocol: StreamCommitProtocol, options?: StreamCommitProbeOptions): Promise<StreamCommitProbe>;

package/dist/stream-commit.js

@@ -0,0 +1,325 @@
+/**
+ * Final-wire streamed response commit probe.
+ *
+ * A structurally valid SSE preamble is not yet an answer.  Keep the downstream head provisional
+ * until the client-facing protocol carries meaningful assistant output, then replay every byte
+ * exactly as received.  Before that point, an in-band error or an empty completion is safe to
+ * fail over because the client has observed nothing.
+ */
+/** Shared by structural preflight and final-wire commit probing. */
+export const STREAM_PREFLIGHT_LIMIT = 64 * 1024;
+const HOLD = { kind: "hold" };
+const READY = { kind: "ready" };
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function nonWhitespace(value) {
+    return typeof value === "string" && value.trim().length > 0;
+}
+function substantive(value) {
+    if (nonWhitespace(value))
+        return true;
+    if (typeof value === "number" || typeof value === "boolean")
+        return true;
+    if (Array.isArray(value))
+        return value.some(substantive);
+    if (isRecord(value))
+        return Object.values(value).some(substantive);
+    return false;
+}
+function substantiveFields(value, ignored) {
+    return Object.entries(value).some(([key, field]) => !ignored.has(key) && substantive(field));
+}
+function boundedError(value) {
+    const error = isRecord(value.error) ? value.error : value;
+    const message = typeof error.message === "string" ? error.message.trim().slice(0, 200) : "";
+    return message ? `in-band error before meaningful content: ${message}` : "in-band error before meaningful content";
+}
+function anthropicVerdict(value) {
+    const type = typeof value.type === "string" ? value.type : "";
+    if (type === "error" || isRecord(value.error)) {
+        return { kind: "dead", reason: boundedError(value), provenance: "upstream" };
+    }
+    if (type === "message_stop") {
+        return { kind: "dead", reason: "stream completed without meaningful content", provenance: "upstream" };
+    }
+    if (type === "content_block_start") {
+        if (!isRecord(value.content_block))
+            return HOLD;
+        const block = value.content_block;
+        const blockType = typeof block.type === "string" ? block.type : "";
+        if (blockType === "tool_use") {
+            return nonWhitespace(block.id) || nonWhitespace(block.name) ? READY : HOLD;
+        }
+        if (blockType === "text")
+            return nonWhitespace(block.text) ? READY : HOLD;
+        if (blockType === "thinking")
+            return nonWhitespace(block.thinking) ? READY : HOLD;
+        // Redacted thinking and future opaque content blocks are output only when they carry an
+        // actual payload; a type/index skeleton remains provisional.
+        return substantiveFields(block, new Set(["type", "index"])) ? READY : HOLD;
+    }
+    if (type === "content_block_delta") {
+        if (!isRecord(value.delta))
+            return HOLD;
+        const delta = value.delta;
+        const deltaType = typeof delta.type === "string" ? delta.type : "";
+        if (deltaType === "text_delta")
+            return nonWhitespace(delta.text) ? READY : HOLD;
+        if (deltaType === "thinking_delta")
+            return nonWhitespace(delta.thinking) ? READY : HOLD;
+        // Tool arguments follow a meaningful tool_use start. Signatures are metadata, not content.
+        if (deltaType === "input_json_delta" || deltaType === "signature_delta")
+            return HOLD;
+        return substantiveFields(delta, new Set(["type", "index"])) ? READY : HOLD;
+    }
+    // Unknown future Anthropic content events are allowed to commit only when their content-shaped
+    // payload is substantive. Metadata-only event records stay held.
+    if (type.startsWith("content_block_")) {
+        if (isRecord(value.content_block) && substantiveFields(value.content_block, new Set(["type", "index"])))
+            return READY;
+        if (isRecord(value.delta) && substantiveFields(value.delta, new Set(["type", "index"])))
+            return READY;
+    }
+    return HOLD;
+}
+function chatToolCallMeaningful(value) {
+    if (!isRecord(value))
+        return false;
+    if (nonWhitespace(value.id))
+        return true;
+    if (!isRecord(value.function))
+        return false;
+    return nonWhitespace(value.function.name) || nonWhitespace(value.function.arguments);
+}
+function openAiChatVerdict(value) {
+    if (isRecord(value.error) || value.type === "error") {
+        return { kind: "dead", reason: boundedError(value), provenance: "upstream" };
+    }
+    if (!Array.isArray(value.choices)) {
+        return { kind: "dead", reason: "OpenAI stream event is missing choices", provenance: "upstream" };
+    }
+    if (value.choices.length === 0)
+        return HOLD; // usage-only frame
+    let finished = false;
+    for (const rawChoice of value.choices) {
+        if (!isRecord(rawChoice)) {
+            return { kind: "dead", reason: "OpenAI stream choice is not an object", provenance: "upstream" };
+        }
+        if (rawChoice.finish_reason !== null && rawChoice.finish_reason !== undefined)
+            finished = true;
+        if (!isRecord(rawChoice.delta))
+            continue;
+        const delta = rawChoice.delta;
+        if (nonWhitespace(delta.content) ||
+            nonWhitespace(delta.refusal) ||
+            nonWhitespace(delta.reasoning_content) ||
+            nonWhitespace(delta.reasoning))
+            return READY;
+        if (Array.isArray(delta.tool_calls) && delta.tool_calls.some(chatToolCallMeaningful))
+            return READY;
+        if (substantiveFields(delta, new Set(["role", "content", "refusal", "reasoning_content", "reasoning", "tool_calls"])))
+            return READY;
+    }
+    return finished
+        ? { kind: "dead", reason: "stream completed without meaningful content", provenance: "upstream" }
+        : HOLD;
+}
+function responsesItemMeaningful(value) {
+    if (!isRecord(value))
+        return false;
+    const type = typeof value.type === "string" ? value.type : "";
+    if (type === "function_call") {
+        return nonWhitespace(value.id) || nonWhitespace(value.call_id) || nonWhitespace(value.name) || nonWhitespace(value.arguments);
+    }
+    if (type === "output_text" || type === "refusal" || type === "reasoning") {
+        return nonWhitespace(value.text) || nonWhitespace(value.refusal) || substantive(value.content);
+    }
+    if (type === "message" && Array.isArray(value.content))
+        return value.content.some(responsesItemMeaningful);
+    return substantiveFields(value, new Set(["type", "id", "status", "role", "index"]));
+}
+function openAiResponsesVerdict(value) {
+    const type = typeof value.type === "string" ? value.type : "";
+    if (type === "error" || type === "response.failed" || isRecord(value.error)) {
+        return { kind: "dead", reason: boundedError(value), provenance: "upstream" };
+    }
+    if (type === "response.incomplete" || type === "response.cancelled") {
+        return { kind: "dead", reason: `${type} before meaningful content`, provenance: "upstream" };
+    }
+    if (type === "response.output_text.delta" ||
+        type === "response.refusal.delta" ||
+        type === "response.reasoning.delta" ||
+        type === "response.reasoning_text.delta")
+        return nonWhitespace(value.delta) || nonWhitespace(value.text) ? READY : HOLD;
+    if (type === "response.function_call_arguments.delta")
+        return nonWhitespace(value.delta) ? READY : HOLD;
+    if (type === "response.output_item.added" || type === "response.output_item.done") {
+        return responsesItemMeaningful(value.item) ? READY : HOLD;
+    }
+    if (type === "response.content_part.added" || type === "response.content_part.done") {
+        return responsesItemMeaningful(value.part) ? READY : HOLD;
+    }
+    if (type === "response.completed") {
+        const response = isRecord(value.response) ? value.response : {};
+        if (response.status === "failed" || response.status === "incomplete" || response.status === "cancelled") {
+            return { kind: "dead", reason: "response completed unsuccessfully before meaningful content", provenance: "upstream" };
+        }
+        if (Array.isArray(response.output) && response.output.some(responsesItemMeaningful))
+            return READY;
+        return { kind: "dead", reason: "stream completed without meaningful content", provenance: "upstream" };
+    }
+    if (type.endsWith(".delta")) {
+        return substantiveFields(value, new Set(["type", "sequence_number", "output_index", "content_index", "item_id"]))
+            ? READY
+            : HOLD;
+    }
+    if (type.endsWith(".done")) {
+        return nonWhitespace(value.text) || nonWhitespace(value.refusal) || responsesItemMeaningful(value.item) ? READY : HOLD;
+    }
+    return HOLD;
+}
+function classifyEvent(event, protocol, malformedProvenance) {
+    const lines = event.split(/\r?\n/);
+    const eventName = lines.find((line) => line.startsWith("event:"))?.slice(6).trim() ?? "";
+    const data = lines
+        .filter((line) => line.startsWith("data:"))
+        .map((line) => line.slice(5).replace(/^ /, ""))
+        .join("\n")
+        .trim();
+    if (!data)
+        return eventName === "error"
+            ? { kind: "dead", reason: "in-band error before meaningful content", provenance: "upstream" }
+            : HOLD;
+    if (data === "[DONE]") {
+        return { kind: "dead", reason: "stream completed without meaningful content", provenance: "upstream" };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(data);
+    }
+    catch {
+        return { kind: "dead", reason: "stream event before meaningful content is not valid JSON", provenance: malformedProvenance };
+    }
+    if (!isRecord(parsed)) {
+        return { kind: "dead", reason: "stream event before meaningful content is not an object", provenance: malformedProvenance };
+    }
+    if (eventName === "error" && parsed.type !== "error" && !isRecord(parsed.error)) {
+        return { kind: "dead", reason: boundedError(parsed), provenance: "upstream" };
+    }
+    switch (protocol) {
+        case "anthropic-messages": return anthropicVerdict(parsed);
+        case "openai-chat": return openAiChatVerdict(parsed);
+        case "openai-responses": return openAiResponsesVerdict(parsed);
+    }
+}
+function firstBoundary(value) {
+    const match = /\r?\n\r?\n/.exec(value);
+    return match ? { index: match.index, length: match[0].length } : null;
+}
+/**
+ * Read through metadata-only SSE events until the final wire contains meaningful assistant output.
+ * The returned stream replays the exact raw chunks and continues on the same locked reader.
+ */
+export async function probeStreamForCommit(body, protocol, options = {}) {
+    const reader = body.getReader();
+    const chunks = [];
+    const decoder = new TextDecoder();
+    const malformedProvenance = options.malformedProvenance ?? "upstream";
+    const readFailureProvenance = options.readFailureProvenance ?? "upstream";
+    let buffered = "";
+    let inspectedBytes = 0;
+    const isCancelled = () => options.isCancelled?.() ?? false;
+    const cancelled = async () => {
+        await reader.cancel("client disconnected before stream commit").catch(() => { });
+        return { kind: "cancelled" };
+    };
+    const dead = async (reason, provenance = "upstream") => {
+        if (isCancelled())
+            return cancelled();
+        await reader.cancel(reason).catch(() => { });
+        return { kind: "dead", reason, provenance };
+    };
+    const ready = () => {
+        let prefixIndex = 0;
+        return {
+            kind: "ready",
+            body: new ReadableStream({
+                async pull(controller) {
+                    if (prefixIndex < chunks.length) {
+                        controller.enqueue(chunks[prefixIndex++]);
+                        return;
+                    }
+                    try {
+                        const next = await reader.read();
+                        if (next.done)
+                            controller.close();
+                        else
+                            controller.enqueue(next.value);
+                    }
+                    catch (error) {
+                        controller.error(error);
+                    }
+                },
+                async cancel(reason) {
+                    await reader.cancel(reason).catch(() => { });
+                },
+            }),
+        };
+    };
+    const inspectCompleteEvents = (final = false) => {
+        while (true) {
+            const boundary = firstBoundary(buffered);
+            if (!boundary)
+                break;
+            const event = buffered.slice(0, boundary.index);
+            buffered = buffered.slice(boundary.index + boundary.length);
+            const verdict = classifyEvent(event, protocol, malformedProvenance);
+            if (verdict.kind !== "hold")
+                return verdict;
+        }
+        if (final && buffered.trim().length > 0) {
+            const event = buffered;
+            buffered = "";
+            return classifyEvent(event, protocol, malformedProvenance);
+        }
+        return HOLD;
+    };
+    while (inspectedBytes < STREAM_PREFLIGHT_LIMIT) {
+        let next;
+        try {
+            next = await reader.read();
+        }
+        catch {
+            if (isCancelled())
+                return cancelled();
+            return dead("stream failed before meaningful content", readFailureProvenance);
+        }
+        if (isCancelled())
+            return cancelled();
+        if (next.done) {
+            buffered += decoder.decode();
+            const verdict = inspectCompleteEvents(true);
+            if (verdict.kind === "ready")
+                return ready();
+            if (verdict.kind === "dead")
+                return dead(verdict.reason, verdict.provenance);
+            return dead("stream ended before meaningful content");
+        }
+        chunks.push(next.value);
+        const remaining = STREAM_PREFLIGHT_LIMIT - inspectedBytes;
+        const inspectBytes = next.value.byteLength > remaining ? next.value.subarray(0, remaining) : next.value;
+        inspectedBytes += inspectBytes.byteLength;
+        buffered += decoder.decode(inspectBytes, { stream: true });
+        const verdict = inspectCompleteEvents();
+        if (verdict.kind === "ready")
+            return isCancelled() ? cancelled() : ready();
+        if (verdict.kind === "dead")
+            return dead(verdict.reason, verdict.provenance);
+        if (next.value.byteLength > inspectBytes.byteLength) {
+            return dead("no meaningful content within commit probe limit");
+        }
+    }
+    return dead("no meaningful content within commit probe limit");
+}
+//# sourceMappingURL=stream-commit.js.map

package/dist/stream-commit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stream-commit.js","sourceRoot":"","sources":["../src/stream-commit.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAkBH,oEAAoE;AACpE,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,IAAI,CAAC;AAOhD,MAAM,IAAI,GAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5C,MAAM,KAAK,GAAiB,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAE9C,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,WAAW,CAAC,KAAc;IACjC,IAAI,aAAa,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACzE,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACzD,IAAI,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACnE,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B,EAAE,OAA4B;IACrF,OAAO,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,SAAS,YAAY,CAAC,KAA8B;IAClD,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC;IAC1D,MAAM,OAAO,GAAG,OAAO,KAAK,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC5F,OAAO,OAAO,CAAC,CAAC,CAAC,4CAA4C,OAAO,EAAE,CAAC,CAAC,CAAC,yCAAyC,CAAC;AACrH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAA8B;IACtD,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,IAAI,KAAK,OAAO,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;IAED,IAAI,IAAI,KAAK,cAAc,EAAE,CAAC;QAC5B,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACzG,CAAC;IAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC;YAAE,OAAO,IAAI,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,aAAa,CAAC;QAClC,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,SAAS,KAAK,UAAU,EAAE,CAAC;YAC7B,OAAO,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC7E,CAAC;QACD,IAAI,SAAS,KAAK,MAAM;YAAE,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAC1E,IAAI,SAAS,KAAK,UAAU;YAAE,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAClF,wFAAwF;QACxF,6DAA6D;QAC7D,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;IAED,IAAI,IAAI,KAAK,qBAAqB,EAAE,CAAC;QACnC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QACxC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;QAC1B,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,IAAI,SAAS,KAAK,YAAY;YAAE,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QAChF,IAAI,SAAS,KAAK,gBAAgB;YAAE,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;QACxF,2FAA2F;QAC3F,IAAI,SAAS,KAAK,kBAAkB,IAAI,SAAS,KAAK,iBAAiB;YAAE,OAAO,IAAI,CAAC;QACrF,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7E,CAAC;IAED,+FAA+F;IAC/F,iEAAiE;IACjE,IAAI,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,EAAE,CAAC;QACtC,IAAI,QAAQ,CAAC,KAAK,CAAC,aAAa,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,aAAa,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;QACtH,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,iBAAiB,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YAAE,OAAO,KAAK,CAAC;IACxG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,sBAAsB,CAAC,KAAc;IAC5C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACvF,CAAC;AAED,SAAS,iBAAiB,CAAC,KAA8B;IACvD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,wCAAwC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACpG,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,mBAAmB;IAEhE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,SAAS,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QACtC,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,uCAAuC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACnG,CAAC;QACD,IAAI,SAAS,CAAC,aAAa,KAAK,IAAI,IAAI,SAAS,CAAC,aAAa,KAAK,SAAS;YAAE,QAAQ,GAAG,IAAI,CAAC;QAC/F,IAAI,CAAC,QAAQ,CAAC,SAAS,CAAC,KAAK,CAAC;YAAE,SAAS;QACzC,MAAM,KAAK,GAAG,SAAS,CAAC,KAAK,CAAC;QAC9B,IACE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC;YAC5B,aAAa,CAAC,KAAK,CAAC,iBAAiB,CAAC;YACtC,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,sBAAsB,CAAC;YAAE,OAAO,KAAK,CAAC;QACnG,IAAI,iBAAiB,CACnB,KAAK,EACL,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,mBAAmB,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC,CACxF;YAAE,OAAO,KAAK,CAAC;IAClB,CAAC;IACD,OAAO,QAAQ;QACb,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,UAAU,EAAE,UAAU,EAAE;QACjG,CAAC,CAAC,IAAI,CAAC;AACX,CAAC;AAED,SAAS,uBAAuB,CAAC,KAAc;IAC7C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,OAAO,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAChI,CAAC;IACD,IAAI,IAAI,KAAK,aAAa,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;QACzE,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,WAAW,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACjG,CAAC;IACD,IAAI,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,uBAAuB,CAAC,CAAC;IAC3G,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;AACtF,CAAC;AAED,SAAS,sBAAsB,CAAC,KAA8B;IAC5D,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,IAAI,KAAK,OAAO,IAAI,IAAI,KAAK,iBAAiB,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,KAAK,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC/E,CAAC;IACD,IAAI,IAAI,KAAK,qBAAqB,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACpE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,4BAA4B,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAC/F,CAAC;IAED,IACE,IAAI,KAAK,4BAA4B;QACrC,IAAI,KAAK,wBAAwB;QACjC,IAAI,KAAK,0BAA0B;QACnC,IAAI,KAAK,+BAA+B;QACxC,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAEhF,IAAI,IAAI,KAAK,wCAAwC;QAAE,OAAO,aAAa,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAExG,IAAI,IAAI,KAAK,4BAA4B,IAAI,IAAI,KAAK,2BAA2B,EAAE,CAAC;QAClF,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IACD,IAAI,IAAI,KAAK,6BAA6B,IAAI,IAAI,KAAK,4BAA4B,EAAE,CAAC;QACpF,OAAO,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5D,CAAC;IAED,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QAClC,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;QAChE,IAAI,QAAQ,CAAC,MAAM,KAAK,QAAQ,IAAI,QAAQ,CAAC,MAAM,KAAK,YAAY,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;YACxG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6DAA6D,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACzH,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC;YAAE,OAAO,KAAK,CAAC;QAClG,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACzG,CAAC;IAED,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC5B,OAAO,iBAAiB,CAAC,KAAK,EAAE,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,iBAAiB,EAAE,cAAc,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC,CAAC;YAC/G,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IACD,IAAI,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC3B,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,uBAAuB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC;IACzH,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,aAAa,CACpB,KAAa,EACb,QAA8B,EAC9B,mBAAyC;IAEzC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC;IACzF,MAAM,IAAI,GAAG,KAAK;SACf,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;SAC1C,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;SAC9C,IAAI,CAAC,IAAI,CAAC;SACV,IAAI,EAAE,CAAC;IAEV,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,KAAK,OAAO;YACrC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yCAAyC,EAAE,UAAU,EAAE,UAAU,EAAE;YAC7F,CAAC,CAAC,IAAI,CAAC;IACT,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,6CAA6C,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IACzG,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,0DAA0D,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAC/H,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,yDAAyD,EAAE,UAAU,EAAE,mBAAmB,EAAE,CAAC;IAC9H,CAAC;IACD,IAAI,SAAS,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,YAAY,CAAC,MAAM,CAAC,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;IAChF,CAAC;IAED,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,oBAAoB,CAAC,CAAC,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC;QAC3D,KAAK,aAAa,CAAC,CAAC,OAAO,iBAAiB,CAAC,MAAM,CAAC,CAAC;QACrD,KAAK,kBAAkB,CAAC,CAAC,OAAO,sBAAsB,CAAC,MAAM,CAAC,CAAC;IACjE,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAa;IAClC,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvC,OAAO,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxE,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAgC,EAChC,QAA8B,EAC9B,UAAoC,EAAE;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;IAChC,MAAM,MAAM,GAAiB,EAAE,CAAC;IAChC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,MAAM,mBAAmB,GAAG,OAAO,CAAC,mBAAmB,IAAI,UAAU,CAAC;IACtE,MAAM,qBAAqB,GAAG,OAAO,CAAC,qBAAqB,IAAI,UAAU,CAAC;IAC1E,IAAI,QAAQ,GAAG,EAAE,CAAC;IAClB,IAAI,cAAc,GAAG,CAAC,CAAC;IAEvB,MAAM,WAAW,GAAG,GAAY,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,IAAI,KAAK,CAAC;IAEpE,MAAM,SAAS,GAAG,KAAK,IAAgC,EAAE;QACvD,MAAM,MAAM,CAAC,MAAM,CAAC,0CAA0C,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAChF,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAC/B,CAAC,CAAC;IAEF,MAAM,IAAI,GAAG,KAAK,EAAE,MAAc,EAAE,aAAmC,UAAU,EAA8B,EAAE;QAC/G,IAAI,WAAW,EAAE;YAAE,OAAO,SAAS,EAAE,CAAC;QACtC,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAC9C,CAAC,CAAC;IAEF,MAAM,KAAK,GAAG,GAAsB,EAAE;QACpC,IAAI,WAAW,GAAG,CAAC,CAAC;QACpB,OAAO;YACL,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,IAAI,cAAc,CAAa;gBACnC,KAAK,CAAC,IAAI,CAAC,UAAU;oBACnB,IAAI,WAAW,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC;wBAChC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,WAAW,EAAE,CAAE,CAAC,CAAC;wBAC3C,OAAO;oBACT,CAAC;oBACD,IAAI,CAAC;wBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;wBACjC,IAAI,IAAI,CAAC,IAAI;4BAAE,UAAU,CAAC,KAAK,EAAE,CAAC;;4BAC7B,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;oBACtC,CAAC;oBAAC,OAAO,KAAK,EAAE,CAAC;wBACf,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;oBAC1B,CAAC;gBACH,CAAC;gBACD,KAAK,CAAC,MAAM,CAAC,MAAM;oBACjB,MAAM,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;gBAC9C,CAAC;aACF,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;IAEF,MAAM,qBAAqB,GAAG,CAAC,KAAK,GAAG,KAAK,EAAgB,EAAE;QAC5D,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,QAAQ,GAAG,aAAa,CAAC,QAAQ,CAAC,CAAC;YACzC,IAAI,CAAC,QAAQ;gBAAE,MAAM;YACrB,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,KAAK,CAAC,CAAC;YAChD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5D,MAAM,OAAO,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;YACpE,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,OAAO,CAAC;QAC9C,CAAC;QACD,IAAI,KAAK,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,KAAK,GAAG,QAAQ,CAAC;YACvB,QAAQ,GAAG,EAAE,CAAC;YACd,OAAO,aAAa,CAAC,KAAK,EAAE,QAAQ,EAAE,mBAAmB,CAAC,CAAC;QAC7D,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,cAAc,GAAG,sBAAsB,EAAE,CAAC;QAC/C,IAAI,IAA6C,CAAC;QAClD,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QAC7B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,WAAW,EAAE;gBAAE,OAAO,SAAS,EAAE,CAAC;YACtC,OAAO,IAAI,CAAC,yCAAyC,EAAE,qBAAqB,CAAC,CAAC;QAChF,CAAC;QAED,IAAI,WAAW,EAAE;YAAE,OAAO,SAAS,EAAE,CAAC;QACtC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;YACd,QAAQ,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YAC7B,MAAM,OAAO,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;YAC5C,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;gBAAE,OAAO,KAAK,EAAE,CAAC;YAC7C,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;gBAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;YAC7E,OAAO,IAAI,CAAC,wCAAwC,CAAC,CAAC;QACxD,CAAC;QAED,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxB,MAAM,SAAS,GAAG,sBAAsB,GAAG,cAAc,CAAC;QAC1D,MAAM,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC;QACxG,cAAc,IAAI,YAAY,CAAC,UAAU,CAAC;QAC1C,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,YAAY,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;QAE3D,MAAM,OAAO,GAAG,qBAAqB,EAAE,CAAC;QACxC,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO;YAAE,OAAO,WAAW,EAAE,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC3E,IAAI,OAAO,CAAC,IAAI,KAAK,MAAM;YAAE,OAAO,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,UAAU,CAAC,CAAC;QAC7E,IAAI,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,YAAY,CAAC,UAAU,EAAE,CAAC;YACpD,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;QACjE,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC,iDAAiD,CAAC,CAAC;AACjE,CAAC"}

package/dist/target-facts.d.ts

@@ -1,86 +1,28 @@
+import { type CredentialId } from "./credential-id.js";
+/** A learned condition or measurement about a routing target. */
+export type FactKind = "not-servable" | "subscription-required" | "allowance-exhausted" | "credential-invalid" | "rate-limited" | "context-limit";
 /**
- * Learned facts about routing targets, each carrying the SCOPE it actually applies to.
- *
- * The problem this exists to stop recurring: a fact's natural scope and its storage keying kept
- * drifting apart, independently, in every store that learned something. Measured 2026-08-08:
- *
- *   - a HuggingFace credit balance is stated per ACCOUNT, and was being rediscovered once per
- *     model — six pool members, six round-trips, six expiries, to learn one number;
- *   - a revoked key is a fact about the CREDENTIAL, and `credentialFaultUntil` is keyed per
- *     deployment, so every model on that provider must independently discover the same 401;
- *   - an account-level 429 is the same shape again.
- *
- * Each was a separate patch waiting to be written. So scope is now part of the fact rather than a
- * property of whichever module happened to record it, and every lookup resolves MOST SPECIFIC
- * FIRST with its provenance attached — the shape `metadata.ts` already uses for limits and prices
- * (serving provider's own figure → another provider's figure for the same id → null).
- *
- * ⚠ **Scope comes from EVIDENCE, never from inference.** "Three models on this provider returned
- * 401" is not proof the key is bad — it is equally three gated models under a working credential,
- * which is the false accusation `key-checker.ts` exists to avoid. A provider-scoped fact requires
- * something that *states* an account-level condition; when a situation is ambiguous it goes to the
- * offline review tier in `refusal-interpretation.ts` and binds only once accepted. Nothing here
- * promotes a fact by counting failures.
- */
-/**
- * What was learned. Deliberately one enum across fact kinds, because the consequence of a fact is
- * a property of the fact and not of the store it came from.
- *
- * ⚠ `allowance-exhausted` is TEMPORAL, not a cost verdict — a free lane that has spent this
- * period's credits is the normal state of a working free lane. It demotes and expires; it must
- * never evict anything from a free pool, or the eviction outlives the exhaustion. `isCostBlocked`
- * is the enforcement of that and deliberately cannot see it.
- */
-export type FactKind = 
-/** The deployment does not exist (404/400 "does not exist", "not found for account"). */
-"not-servable"
-/** It exists, but is not covered by the plan we hold (403 naming a subscription). */
- | "subscription-required"
-/** Free, and spent until the allowance refreshes (402 naming a credit balance). */
- | "allowance-exhausted"
-/** The credential itself is rejected — stated, e.g. "invalid api key". NOT inferred from 401s. */
- | "credential-invalid"
-/**
- * Rate limited at a scope the response STATED — "your account has exceeded its rate limit".
- *
- * ⚠ This is not where ordinary 429s go. A bare 429 is one deployment's back-pressure and belongs
- * to the breaker's per-target cooldown, which already handles it well. This kind exists only for
- * the case the breaker cannot express: a limit the provider says belongs to the ACCOUNT, where
- * every sibling is equally throttled and discovering that once per model is the waste.
- */
- | "rate-limited"
-/**
- * The context ceiling a deployment STATED when it refused an over-length request, in tokens.
- *
- * ⚠ A MEASUREMENT, not a condition — and the distinction is load-bearing. Every other kind here
- * describes something that is currently true and stops being true: a success disproves it. A
- * context window is a property of the deployment, so a successful request says nothing about it
- * and must not clear it. See `CONDITIONS` below.
- */
- | "context-limit";
-/**
- * Who a fact applies to, specific → general. Resolution walks this order and stops at the first
- * live hit, so a deployment's own verdict always beats its provider's.
- *
- *   deployment — this (provider, model) alone.
- *   group      — an explicit set of models on one provider. ⚠ The membership travels WITH the
- *                fact rather than being inferred from id prefixes: prefix matching is the
- *                heuristic `authEnv.ts` refuses, and one bad match evicts a working family. A
- *                group verdict is reviewed with its member list visible before it binds.
- *   provider   — every deployment behind that credential. Balances, revoked keys, account rate
- *                limits. This is the scope that turns N discoveries into one.
- *   model      — the same model id wherever it is served. Reference-grade only, and never used for
- *                cost or availability: the same id on two providers is two deployments with
- *                different ceilings, prices and entitlements (see `metadata.ts`).
+ * The evidence scope, in lookup order. `provider` deliberately means every credential for the
+ * provider; credential-wide evidence must use `credential` instead.
  */
 export type FactScope = {
-    kind: "deployment";
+    kind: "attempt";
     provider: string;
+    credentialId: CredentialId;
     model: string;
 } | {
     kind: "group";
     provider: string;
+    credentialId?: CredentialId;
     members: string[];
+} | {
+    kind: "deployment";
+    provider: string;
+    model: string;
+} | {
+    kind: "credential";
+    provider: string;
+    credentialId: CredentialId;
 } | {
     kind: "provider";
     provider: string;
@@ -88,45 +30,18 @@ export type FactScope = {
     kind: "model";
     model: string;
 };
-/** Scope names in resolution order. Exported so callers cannot invent a different precedence. */
 export declare const SCOPE_PRECEDENCE: Array<FactScope["kind"]>;
-/**
- * How long each kind is believed without re-checking. All expire, because all are reversible: a
- * de-listed model returns, a plan is upgraded, an allowance refreshes, a key is rotated.
- *
- * `allowance-exhausted` is deliberately the SHORTEST despite monthly credit cycles — cooling a
- * whole provider for a month on one 402 would be catastrophic if the balance were topped up an
- * hour later, and one re-probe an hour is cheap and self-correcting. It also matches the breaker's
- * `QUOTA_EXHAUSTED_COOLDOWN_MS`, so the two cannot disagree about when to try again.
- * `credential-invalid` is short for the same reason from the other direction: a rotated key must
- * recover quickly, and any success clears it outright.
- */
 export declare const FACT_TTL_MS: Record<FactKind, number>;
-/**
- * Every fact kind, for callers that must enumerate them (the review CLI's `--class` validation).
- *
- * Derived from `FACT_TTL_MS`, which is a `Record<FactKind, …>` and therefore exhaustive by
- * compiler enforcement — so this list cannot fall behind the type. A hand-maintained copy already
- * did: `rate-limited` existed in the store while the CLI rejected it, which made the review
- * command unusable for the one kind it had just gained.
- */
 export declare const FACT_KINDS: FactKind[];
-/**
- * Record a fact at the scope its evidence supports.
- *
- * A fresh observation replaces an older one at the SAME scope: the target is the authority on
- * itself, and one that changed its answer is telling us so. Facts at different scopes coexist —
- * a deployment can be `subscription-required` while its provider is `allowance-exhausted`, and
- * resolution decides which applies.
- */
+/** Canonical persisted key. Kept exported so persistence tests cannot duplicate it. */
+export declare function keyOf(scope: FactScope): string;
 export declare function recordFact(kind: FactKind, scope: FactScope, opts?: {
     path?: string;
     now?: number;
     retryAfterMs?: number | null;
     value?: number;
 }): void;
-/** Every live fact covering a deployment, most specific first. */
-export declare function factsFor(provider: string, model: string | null | undefined, opts?: {
+export declare function factsFor(provider: string, credentialId: CredentialId | null, model: string | null | undefined, opts?: {
     path?: string;
     now?: number;
 }): Array<{
@@ -135,43 +50,18 @@ export declare function factsFor(provider: string, model: string | null | undefi
     until: number;
     value?: number;
 }>;
-/**
- * Has this deployment been PROVEN unfit for a free pool?
- *
- * ⚠ True only for facts in `COST_BLOCKING`. `allowance-exhausted` is deliberately excluded and
- * must stay excluded — see the `FactKind` note. `credential-invalid` is excluded too: a bad key is
- * a configuration problem, not a statement that the deployment costs money, and removing members
- * from a pool over it would empty the pool on a mistake that a rotation fixes in seconds.
- */
-export declare function isCostBlocked(provider: string, model: string | null | undefined, opts?: {
+export declare function isCostBlocked(provider: string, credentialId: CredentialId | null, model: string | null | undefined, opts?: {
     path?: string;
     now?: number;
 }): boolean;
-/**
- * When a temporarily-unusable target is worth trying again, or null when nothing is cooling it.
- * Only `COOLING` kinds produce this — the others are exclusions, not cooldowns, and a caller that
- * wants those wants `isCostBlocked`.
- */
-export declare function cooldownUntil(provider: string, model: string | null | undefined, opts?: {
+export declare function cooldownUntil(provider: string, credentialId: CredentialId | null, model: string | null | undefined, opts?: {
     path?: string;
     now?: number;
 }): number | null;
-/**
- * A success clears every fact covering this deployment — including its PROVIDER-scoped ones.
- *
- * A served request is first-party proof that the deployment exists, the credential authenticates,
- * and the allowance is not spent. That is strictly better evidence than any stored refusal, and it
- * covers the cases that matter most: credits topped up, a key rotated, a month rolled over, all
- * well before the TTL would have expired. Same contract as the breaker clearing a credential fault
- * on success.
- *
- * ⚠ A group fact is cleared only if this model is IN the group — one member serving says nothing
- * about the others, and dropping the whole verdict would re-admit models that are genuinely gated.
- */
-export declare function clearFacts(provider: string, model: string | null | undefined, opts?: {
+/** A success retracts conditions covering this credential/model cell, never measurements. */
+export declare function clearFacts(provider: string, credentialId: CredentialId | null, model: string | null | undefined, opts?: {
     path?: string;
 }): FactKind[];
-/** Every live fact, for `llm-relay eligibility`. Expired entries are omitted, not reported. */
 export declare function allFacts(opts?: {
     path?: string;
     now?: number;
@@ -181,11 +71,8 @@ export declare function allFacts(opts?: {
     at: number;
     until: number;
 }>;
-/** A human-readable label for a scope — used by the CLI and by nothing that makes decisions. */
 export declare function describeScope(scope: FactScope): string;
-/** Flush pending writes. Called on shutdown, like the other write-behind stores. */
 export declare function flushFacts(opts?: {
     path?: string;
 }): void;
-/** Test seam: drop the in-memory store so a suite can point at a fresh path. */
 export declare function resetFacts(): void;