offrouter-core 0.2.1 → 0.2.2

package/dist/policy.js

@@ -0,0 +1,318 @@
+const HEALTHY_SUBSCRIPTION_STATUSES = new Set([
+    "active",
+]);
+const UNAVAILABLE_SUBSCRIPTION_STATUSES = new Set(["exhausted", "rate-limited", "expired", "unconfigured", "unknown"]);
+function candidateId(c) {
+    return `${c.providerId}:${c.modelId}`;
+}
+function matchesGlob(pattern, value) {
+    // Escape regex special chars except *, then turn * into .*
+    const escaped = pattern.replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+    const re = new RegExp(`^${escaped.replace(/\*/g, ".*")}$`);
+    return re.test(value);
+}
+function isWorkProfileDenied(profile, patterns) {
+    // Work profiles are denied by default. Custom patterns are additive.
+    // Align with the Claude installer: a profile is work-like if it ends with
+    // "-work" (e.g. claude-work) or contains "-work-" (e.g. claude-work-staging).
+    const effectivePatterns = ["*-work", ...(patterns ?? [])];
+    return (profile.endsWith("-work") ||
+        profile.includes("-work-") ||
+        effectivePatterns.some((pattern) => matchesGlob(pattern, profile)));
+}
+function isAllowedProfile(profile, config) {
+    return config.allowlistedProfiles.includes(profile);
+}
+/**
+ * Whether a candidate meets hard capability requirements from the task.
+ */
+export function meetsCapabilities(candidate, request) {
+    const { task } = request;
+    if (task.requiresTools && !candidate.supportsTools)
+        return false;
+    if (task.requiresImages && !candidate.supportsImages)
+        return false;
+    if (task.requiresStreaming && !candidate.supportsStreaming)
+        return false;
+    if (task.requiresJson && !candidate.supportsJson)
+        return false;
+    // Task kind shortcuts when requires* not set explicitly
+    if (task.kind === "tools" && task.requiresTools !== false && !candidate.supportsTools) {
+        return false;
+    }
+    if (task.kind === "image" && task.requiresImages !== false && !candidate.supportsImages) {
+        return false;
+    }
+    return true;
+}
+function missingCapabilityMessage(candidate, request) {
+    const missing = [];
+    if ((request.task.requiresTools || request.task.kind === "tools") &&
+        !candidate.supportsTools) {
+        missing.push("tools");
+    }
+    if ((request.task.requiresImages || request.task.kind === "image") &&
+        !candidate.supportsImages) {
+        missing.push("images");
+    }
+    if (request.task.requiresStreaming && !candidate.supportsStreaming) {
+        missing.push("streaming");
+    }
+    if (request.task.requiresJson && !candidate.supportsJson) {
+        missing.push("json");
+    }
+    return `Candidate ${candidateId(candidate)} missing required capabilities: ${missing.join(", ") || "unknown"}.`;
+}
+/**
+ * Healthy subscription capacity: active status (or omitted treated carefully)
+ * with non-dead health, and policy/capability eligible.
+ *
+ * Degraded health is still "usable" for routing later but is not treated as
+ * fully healthy capacity for blocking API-key candidates when another healthy
+ * subscription exists — that nuance lives in the router score. For policy
+ * gatekeeping "can a healthy subscription satisfy the task?", we accept
+ * health === "healthy" and subscriptionStatus in active (defaulting missing
+ * status on subscription tier to unknown, not healthy).
+ */
+export function isHealthySubscriptionCapacity(candidate, request, config) {
+    if (candidate.authTier !== "subscription")
+        return false;
+    if (candidate.health !== "healthy")
+        return false;
+    const status = candidate.subscriptionStatus ?? "unknown";
+    if (!HEALTHY_SUBSCRIPTION_STATUSES.has(status))
+        return false;
+    if (candidate.authScope === "third-party" &&
+        !config.allowThirdPartySubscriptionAdapters) {
+        return false;
+    }
+    if (candidate.authScope === "unknown") {
+        return false;
+    }
+    if (!meetsCapabilities(candidate, request))
+        return false;
+    // Subscription positions are never local; localOnly excludes them.
+    if (request.constraints.localOnly) {
+        return false;
+    }
+    if (request.constraints.maxCostUsd !== undefined &&
+        candidate.estimatedCostUsd !== undefined &&
+        candidate.estimatedCostUsd > request.constraints.maxCostUsd) {
+        return false;
+    }
+    if (config.deniedProviders?.includes(candidate.providerId)) {
+        return false;
+    }
+    return true;
+}
+/**
+ * Whether any remaining subscription candidate has healthy capacity after hard
+ * filters, so API-key stays blocked only while a healthy subscription route can
+ * satisfy the task.
+ */
+function hasUsableSubscriptionForTask(candidates, request, config) {
+    return candidates.some((c) => {
+        if (c.authTier !== "subscription")
+            return false;
+        if (c.health !== "healthy")
+            return false;
+        const status = c.subscriptionStatus ?? "unknown";
+        // Only active + healthy subscription capacity blocks API-key candidates
+        // under subscription-first.
+        if (!HEALTHY_SUBSCRIPTION_STATUSES.has(status))
+            return false;
+        if (c.authScope === "third-party" &&
+            !config.allowThirdPartySubscriptionAdapters) {
+            return false;
+        }
+        if (c.authScope === "unknown")
+            return false;
+        if (!meetsCapabilities(c, request))
+            return false;
+        if (request.constraints.localOnly)
+            return false;
+        if (request.constraints.maxCostUsd !== undefined &&
+            c.estimatedCostUsd !== undefined &&
+            c.estimatedCostUsd > request.constraints.maxCostUsd) {
+            return false;
+        }
+        if (config.deniedProviders?.includes(c.providerId))
+            return false;
+        return true;
+    });
+}
+function hardFilterDenial(candidate, request, config) {
+    const id = candidateId(candidate);
+    if (config.deniedProviders?.includes(candidate.providerId)) {
+        return {
+            code: "provider_denied",
+            target: "provider",
+            id: candidate.providerId,
+            message: `Provider ${candidate.providerId} is denied by policy.`,
+        };
+    }
+    if (request.constraints.localOnly && candidate.authTier !== "local") {
+        return {
+            code: "local_only_required",
+            target: "candidate",
+            id,
+            message: `Candidate ${id} is not a local runtime; localOnly is required.`,
+        };
+    }
+    if (request.constraints.maxCostUsd !== undefined &&
+        candidate.authTier === "api-key" &&
+        candidate.estimatedCostUsd === undefined) {
+        return {
+            code: "cost_cap_exceeded",
+            target: "candidate",
+            id,
+            message: `API-key candidate ${id} has unknown cost and cannot satisfy maxCostUsd ${request.constraints.maxCostUsd}.`,
+        };
+    }
+    if (request.constraints.maxCostUsd !== undefined &&
+        candidate.estimatedCostUsd !== undefined &&
+        candidate.estimatedCostUsd > request.constraints.maxCostUsd) {
+        return {
+            code: "cost_cap_exceeded",
+            target: "candidate",
+            id,
+            message: `Candidate ${id} estimated cost ${candidate.estimatedCostUsd} exceeds maxCostUsd ${request.constraints.maxCostUsd}.`,
+        };
+    }
+    if (!meetsCapabilities(candidate, request)) {
+        return {
+            code: "capability_missing",
+            target: "candidate",
+            id,
+            message: missingCapabilityMessage(candidate, request),
+        };
+    }
+    // First-party subscription surface via third-party adapter
+    if (candidate.authTier === "subscription" &&
+        candidate.authScope === "third-party" &&
+        !config.allowThirdPartySubscriptionAdapters) {
+        return {
+            code: "subscription_scope_denied",
+            target: "candidate",
+            id,
+            message: `Subscription candidate ${id} uses a third-party adapter surface without policy allow.`,
+        };
+    }
+    if (candidate.authTier === "subscription" &&
+        candidate.authScope === "unknown") {
+        return {
+            code: "subscription_scope_denied",
+            target: "candidate",
+            id,
+            message: `Subscription candidate ${id} has unknown auth scope and cannot route until the adapter proves support.`,
+        };
+    }
+    // Dead candidates never route
+    if (candidate.health === "dead") {
+        // Treat as policy-ineligible for selection; keep as structured denial so
+        // explain paths can show why. Prefer provider_denied-ish message without
+        // inventing a new code — map to provider_denied for dead health is
+        // slightly imprecise; capability isn't right. Use provider_denied for
+        // explicit denylist only. For dead, we skip without adding denial so
+        // they simply don't appear as allowed. Router will then handle empty set.
+        // Actually: don't allow them, no denial needed for "dead" — just exclude.
+        return {
+            code: "provider_denied",
+            target: "candidate",
+            id,
+            message: `Candidate ${id} is dead and cannot be selected.`,
+        };
+    }
+    // Exhausted/rate-limited/expired subscription tiers are not allowed as primary
+    if (candidate.authTier === "subscription") {
+        const status = candidate.subscriptionStatus ?? "unknown";
+        if (UNAVAILABLE_SUBSCRIPTION_STATUSES.has(status)) {
+            return {
+                code: "provider_denied",
+                target: "candidate",
+                id,
+                message: `Subscription candidate ${id} is ${status} and cannot satisfy the task.`,
+            };
+        }
+    }
+    return null;
+}
+/**
+ * Evaluate profile and candidate policy.
+ * Returns allowed candidates plus structured denials (never string-only).
+ */
+export function evaluatePolicy(request, candidates, config) {
+    const denials = [];
+    const profile = request.harness.profile;
+    // 1. Profile gates
+    if (isWorkProfileDenied(profile, config.deniedProfilePatterns)) {
+        denials.push({
+            code: "work_profile_denied",
+            target: "profile",
+            id: profile,
+            message: `Work profile ${profile} is denied by default. OffRouter V1 only routes allowlisted personal profiles.`,
+        });
+        return { allowed: [], denials };
+    }
+    if (!isAllowedProfile(profile, config)) {
+        denials.push({
+            code: "profile_not_allowlisted",
+            target: "profile",
+            id: profile,
+            message: `Profile ${profile} is not allowlisted. Add it explicitly before installing or routing.`,
+        });
+        return { allowed: [], denials };
+    }
+    // Workspace trust is a hard filter when untrusted
+    if (!request.workspace.trusted) {
+        denials.push({
+            code: "project_untrusted",
+            target: "workspace",
+            id: request.workspace.cwd,
+            message: `Workspace ${request.workspace.cwd} is untrusted; routing is blocked.`,
+        });
+        return { allowed: [], denials };
+    }
+    // 2. Hard filters per candidate
+    const hardPassed = [];
+    for (const c of candidates) {
+        const denial = hardFilterDenial(c, request, config);
+        if (denial) {
+            denials.push(denial);
+        }
+        else {
+            hardPassed.push(c);
+        }
+    }
+    // 3. Subscription-first: gate API-key when usable subscription capacity exists,
+    //    or when allowApiKeyFallback is false.
+    const subscriptionFirst = request.constraints.subscriptionFirst !== false;
+    const allowApiKeyFallback = request.constraints.allowApiKeyFallback === true;
+    const usableSubscription = hasUsableSubscriptionForTask(hardPassed, request, config);
+    const allowed = [];
+    for (const c of hardPassed) {
+        if (c.authTier === "api-key") {
+            if (subscriptionFirst && usableSubscription) {
+                denials.push({
+                    code: "api_key_blocked_by_subscription_first_policy",
+                    target: "candidate",
+                    id: candidateId(c),
+                    message: `API-key candidate ${candidateId(c)} blocked while healthy subscription capacity remains.`,
+                });
+                continue;
+            }
+            if (subscriptionFirst && !allowApiKeyFallback) {
+                denials.push({
+                    code: "api_key_blocked_by_subscription_first_policy",
+                    target: "candidate",
+                    id: candidateId(c),
+                    message: `API-key candidate ${candidateId(c)} blocked: allowApiKeyFallback is false.`,
+                });
+                continue;
+            }
+        }
+        allowed.push(c);
+    }
+    return { allowed, denials };
+}
+//# sourceMappingURL=policy.js.map

package/dist/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../src/policy.ts"],"names":[],"mappings":"AA+BA,MAAM,6BAA6B,GAAoC,IAAI,GAAG,CAAC;IAC7E,QAAQ;CACT,CAAC,CAAC;AAEH,MAAM,iCAAiC,GACrC,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,EAAE,SAAS,CAAC,CAAC,CAAC;AAE/E,SAAS,WAAW,CAAC,CAAoB;IACvC,OAAO,GAAG,CAAC,CAAC,UAAU,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,WAAW,CAAC,OAAe,EAAE,KAAa;IACjD,2DAA2D;IAC3D,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;IAC9D,MAAM,EAAE,GAAG,IAAI,MAAM,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC;IAC3D,OAAO,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AACxB,CAAC;AAED,SAAS,mBAAmB,CAC1B,OAAe,EACf,QAA8B;IAE9B,qEAAqE;IACrE,0EAA0E;IAC1E,8EAA8E;IAC9E,MAAM,iBAAiB,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,CAAC;IAC1D,OAAO,CACL,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC;QACzB,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC1B,iBAAiB,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CACnE,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CAAC,OAAe,EAAE,MAAoB;IAC7D,OAAO,MAAM,CAAC,mBAAmB,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACtD,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAC/B,SAA4B,EAC5B,OAAqB;IAErB,MAAM,EAAE,IAAI,EAAE,GAAG,OAAO,CAAC;IACzB,IAAI,IAAI,CAAC,aAAa,IAAI,CAAC,SAAS,CAAC,aAAa;QAAE,OAAO,KAAK,CAAC;IACjE,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,CAAC,cAAc;QAAE,OAAO,KAAK,CAAC;IACnE,IAAI,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,iBAAiB;QAAE,OAAO,KAAK,CAAC;IACzE,IAAI,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,YAAY;QAAE,OAAO,KAAK,CAAC;IAC/D,wDAAwD;IACxD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,aAAa,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,aAAa,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,cAAc,KAAK,KAAK,IAAI,CAAC,SAAS,CAAC,cAAc,EAAE,CAAC;QACxF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,wBAAwB,CAC/B,SAA4B,EAC5B,OAAqB;IAErB,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;QAC7D,CAAC,SAAS,CAAC,aAAa,EACxB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IACxB,CAAC;IACD,IACE,CAAC,OAAO,CAAC,IAAI,CAAC,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC;QAC9D,CAAC,SAAS,CAAC,cAAc,EACzB,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,iBAAiB,EAAE,CAAC;QACnE,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAC5B,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,YAAY,IAAI,CAAC,SAAS,CAAC,YAAY,EAAE,CAAC;QACzD,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,aAAa,WAAW,CAAC,SAAS,CAAC,mCAAmC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,SAAS,GAAG,CAAC;AAClH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,SAA4B,EAC5B,OAAqB,EACrB,MAAoB;IAEpB,IAAI,SAAS,CAAC,QAAQ,KAAK,cAAc;QAAE,OAAO,KAAK,CAAC;IACxD,IAAI,SAAS,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAEjD,MAAM,MAAM,GAAG,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC;IACzD,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAE7D,IACE,SAAS,CAAC,SAAS,KAAK,aAAa;QACrC,CAAC,MAAM,CAAC,mCAAmC,EAC3C,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,SAAS,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAEzD,mEAAmE;IACnE,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS,EAAE,CAAC;QAClC,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IACE,OAAO,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;QAC5C,SAAS,CAAC,gBAAgB,KAAK,SAAS;QACxC,SAAS,CAAC,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,EAC3D,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAS,4BAA4B,CACnC,UAA+B,EAC/B,OAAqB,EACrB,MAAoB;IAEpB,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QAC3B,IAAI,CAAC,CAAC,QAAQ,KAAK,cAAc;YAAE,OAAO,KAAK,CAAC;QAChD,IAAI,CAAC,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QACzC,MAAM,MAAM,GAAG,CAAC,CAAC,kBAAkB,IAAI,SAAS,CAAC;QACjD,wEAAwE;QACxE,4BAA4B;QAC5B,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAC;QAC7D,IACE,CAAC,CAAC,SAAS,KAAK,aAAa;YAC7B,CAAC,MAAM,CAAC,mCAAmC,EAC3C,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC;YAAE,OAAO,KAAK,CAAC;QACjD,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAChD,IACE,OAAO,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;YAC5C,CAAC,CAAC,gBAAgB,KAAK,SAAS;YAChC,CAAC,CAAC,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,EACnD,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QACD,IAAI,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC;YAAE,OAAO,KAAK,CAAC;QACjE,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,gBAAgB,CACvB,SAA4B,EAC5B,OAAqB,EACrB,MAAoB;IAEpB,MAAM,EAAE,GAAG,WAAW,CAAC,SAAS,CAAC,CAAC;IAElC,IAAI,MAAM,CAAC,eAAe,EAAE,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAC,EAAE,CAAC;QAC3D,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,UAAU;YAClB,EAAE,EAAE,SAAS,CAAC,UAAU;YACxB,OAAO,EAAE,YAAY,SAAS,CAAC,UAAU,uBAAuB;SACjE,CAAC;IACJ,CAAC;IAED,IAAI,OAAO,CAAC,WAAW,CAAC,SAAS,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACpE,OAAO;YACL,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,WAAW;YACnB,EAAE;YACF,OAAO,EAAE,aAAa,EAAE,iDAAiD;SAC1E,CAAC;IACJ,CAAC;IAED,IACE,OAAO,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;QAC5C,SAAS,CAAC,QAAQ,KAAK,SAAS;QAChC,SAAS,CAAC,gBAAgB,KAAK,SAAS,EACxC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,WAAW;YACnB,EAAE;YACF,OAAO,EAAE,qBAAqB,EAAE,mDAAmD,OAAO,CAAC,WAAW,CAAC,UAAU,GAAG;SACrH,CAAC;IACJ,CAAC;IAED,IACE,OAAO,CAAC,WAAW,CAAC,UAAU,KAAK,SAAS;QAC5C,SAAS,CAAC,gBAAgB,KAAK,SAAS;QACxC,SAAS,CAAC,gBAAgB,GAAG,OAAO,CAAC,WAAW,CAAC,UAAU,EAC3D,CAAC;QACD,OAAO;YACL,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,WAAW;YACnB,EAAE;YACF,OAAO,EAAE,aAAa,EAAE,mBAAmB,SAAS,CAAC,gBAAgB,uBAAuB,OAAO,CAAC,WAAW,CAAC,UAAU,GAAG;SAC9H,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC,EAAE,CAAC;QAC3C,OAAO;YACL,IAAI,EAAE,oBAAoB;YAC1B,MAAM,EAAE,WAAW;YACnB,EAAE;YACF,OAAO,EAAE,wBAAwB,CAAC,SAAS,EAAE,OAAO,CAAC;SACtD,CAAC;IACJ,CAAC;IAED,2DAA2D;IAC3D,IACE,SAAS,CAAC,QAAQ,KAAK,cAAc;QACrC,SAAS,CAAC,SAAS,KAAK,aAAa;QACrC,CAAC,MAAM,CAAC,mCAAmC,EAC3C,CAAC;QACD,OAAO;YACL,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,WAAW;YACnB,EAAE;YACF,OAAO,EAAE,0BAA0B,EAAE,2DAA2D;SACjG,CAAC;IACJ,CAAC;IAED,IACE,SAAS,CAAC,QAAQ,KAAK,cAAc;QACrC,SAAS,CAAC,SAAS,KAAK,SAAS,EACjC,CAAC;QACD,OAAO;YACL,IAAI,EAAE,2BAA2B;YACjC,MAAM,EAAE,WAAW;YACnB,EAAE;YACF,OAAO,EAAE,0BAA0B,EAAE,4EAA4E;SAClH,CAAC;IACJ,CAAC;IAED,8BAA8B;IAC9B,IAAI,SAAS,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;QAChC,yEAAyE;QACzE,yEAAyE;QACzE,mEAAmE;QACnE,sEAAsE;QACtE,qEAAqE;QACrE,0EAA0E;QAC1E,0EAA0E;QAC1E,OAAO;YACL,IAAI,EAAE,iBAAiB;YACvB,MAAM,EAAE,WAAW;YACnB,EAAE;YACF,OAAO,EAAE,aAAa,EAAE,kCAAkC;SAC3D,CAAC;IACJ,CAAC;IAED,+EAA+E;IAC/E,IAAI,SAAS,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;QAC1C,MAAM,MAAM,GAAG,SAAS,CAAC,kBAAkB,IAAI,SAAS,CAAC;QACzD,IAAI,iCAAiC,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,OAAO;gBACL,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,WAAW;gBACnB,EAAE;gBACF,OAAO,EAAE,0BAA0B,EAAE,OAAO,MAAM,+BAA+B;aAClF,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAqB,EACrB,UAA+B,EAC/B,MAAoB;IAEpB,MAAM,OAAO,GAAmB,EAAE,CAAC;IACnC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;IAExC,mBAAmB;IACnB,IAAI,mBAAmB,CAAC,OAAO,EAAE,MAAM,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAC/D,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,qBAAqB;YAC3B,MAAM,EAAE,SAAS;YACjB,EAAE,EAAE,OAAO;YACX,OAAO,EAAE,gBAAgB,OAAO,gFAAgF;SACjH,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAED,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,MAAM,CAAC,EAAE,CAAC;QACvC,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,yBAAyB;YAC/B,MAAM,EAAE,SAAS;YACjB,EAAE,EAAE,OAAO;YACX,OAAO,EAAE,WAAW,OAAO,sEAAsE;SAClG,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAED,kDAAkD;IAClD,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,OAAO,EAAE,CAAC;QAC/B,OAAO,CAAC,IAAI,CAAC;YACX,IAAI,EAAE,mBAAmB;YACzB,MAAM,EAAE,WAAW;YACnB,EAAE,EAAE,OAAO,CAAC,SAAS,CAAC,GAAG;YACzB,OAAO,EAAE,aAAa,OAAO,CAAC,SAAS,CAAC,GAAG,oCAAoC;SAChF,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IAED,gCAAgC;IAChC,MAAM,UAAU,GAAwB,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,MAAM,MAAM,GAAG,gBAAgB,CAAC,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;QACpD,IAAI,MAAM,EAAE,CAAC;YACX,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACvB,CAAC;aAAM,CAAC;YACN,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,gFAAgF;IAChF,2CAA2C;IAC3C,MAAM,iBAAiB,GAAG,OAAO,CAAC,WAAW,CAAC,iBAAiB,KAAK,KAAK,CAAC;IAC1E,MAAM,mBAAmB,GAAG,OAAO,CAAC,WAAW,CAAC,mBAAmB,KAAK,IAAI,CAAC;IAE7E,MAAM,kBAAkB,GAAG,4BAA4B,CACrD,UAAU,EACV,OAAO,EACP,MAAM,CACP,CAAC;IAEF,MAAM,OAAO,GAAwB,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;QAC3B,IAAI,CAAC,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC7B,IAAI,iBAAiB,IAAI,kBAAkB,EAAE,CAAC;gBAC5C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,8CAA8C;oBACpD,MAAM,EAAE,WAAW;oBACnB,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;oBAClB,OAAO,EAAE,qBAAqB,WAAW,CAAC,CAAC,CAAC,uDAAuD;iBACpG,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,IAAI,iBAAiB,IAAI,CAAC,mBAAmB,EAAE,CAAC;gBAC9C,OAAO,CAAC,IAAI,CAAC;oBACX,IAAI,EAAE,8CAA8C;oBACpD,MAAM,EAAE,WAAW;oBACnB,EAAE,EAAE,WAAW,CAAC,CAAC,CAAC;oBAClB,OAAO,EAAE,qBAAqB,WAAW,CAAC,CAAC,CAAC,yCAAyC;iBACtF,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;QACH,CAAC;QACD,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;AAC9B,CAAC"}

package/{src/protocol.ts → dist/protocol.d.ts}

@@ -2,6 +2,6 @@
  * OffRouter V1 route protocol constants.
  * Wire vocabulary: docs/contracts/v1-routing-contract.md
  */
-export const ROUTE_PROTOCOL_VERSION = "offrouter.route.v1" as const;
-
+export declare const ROUTE_PROTOCOL_VERSION: "offrouter.route.v1";
 export type RouteProtocolVersion = typeof ROUTE_PROTOCOL_VERSION;
+//# sourceMappingURL=protocol.d.ts.map

package/dist/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,eAAO,MAAM,sBAAsB,EAAG,oBAA6B,CAAC;AAEpE,MAAM,MAAM,oBAAoB,GAAG,OAAO,sBAAsB,CAAC"}

package/dist/protocol.js

@@ -0,0 +1,6 @@
+/**
+ * OffRouter V1 route protocol constants.
+ * Wire vocabulary: docs/contracts/v1-routing-contract.md
+ */
+export const ROUTE_PROTOCOL_VERSION = "offrouter.route.v1";
+//# sourceMappingURL=protocol.js.map

package/dist/protocol.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.js","sourceRoot":"","sources":["../src/protocol.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,oBAA6B,CAAC"}

package/dist/providers/adapter.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Provider adapter contract shared by fake and OpenAI-compatible backends.
+ * Keeps harness-specific shapes out of the core router.
+ */
+import type { AuthScope, AuthTier, ProviderCandidate, ProviderHealth, RouteRequest, SubscriptionStatus } from "../types.js";
+export type ProviderErrorCode = "auth_failed" | "rate_limited" | "quota_exhausted" | "billing" | "overload" | "model_not_found" | "context_window" | "safety_refusal" | "stream_interrupted" | "cancelled" | "timeout" | "network" | "invalid_request" | "unknown";
+export interface ProviderErrorOptions {
+    code: ProviderErrorCode;
+    message: string;
+    retryable?: boolean;
+    httpStatus?: number;
+    providerCode?: string;
+    cause?: unknown;
+}
+export declare class ProviderError extends Error {
+    readonly code: ProviderErrorCode;
+    readonly retryable: boolean;
+    readonly httpStatus?: number;
+    readonly providerCode?: string;
+    constructor(options: ProviderErrorOptions);
+}
+export declare function isProviderError(value: unknown): value is ProviderError;
+/**
+ * Map HTTP status + optional provider body into a ProviderError.
+ * Presence-only; never logs credential material.
+ */
+export declare function mapHttpToProviderError(status: number, bodyText?: string, providerCode?: string): ProviderError;
+export interface ModelCapability {
+    modelId: string;
+    displayName?: string;
+    supportsTools: boolean;
+    supportsStreaming: boolean;
+    supportsJson: boolean;
+    supportsImages: boolean;
+    contextWindowTokens?: number;
+    maxOutputTokens?: number;
+    estimatedCostUsd?: number;
+}
+export interface AuthStatus {
+    authTier: AuthTier;
+    authScope: AuthScope;
+    configured: boolean;
+    /** Presence-only; never returns key material. */
+    hasApiKey: boolean;
+    subscriptionStatus?: SubscriptionStatus;
+    limitsDiscoverable: boolean;
+    health: ProviderHealth;
+    accountId?: string;
+    detail?: string;
+    /**
+     * Which credential source satisfied auth (if any).
+     * "none" when no credential was found.
+     */
+    credentialSource?: "env" | "config" | "keychain" | "oauth" | "none";
+    /** Whether this auth path uses a subscription-backed credential. */
+    subscriptionEligible: boolean;
+}
+/**
+ * Limit snapshot. Opaque providers report discoverable=false and omit remaining.
+ */
+export interface LimitSnapshot {
+    authTier: AuthTier;
+    /** When false, remaining/reset fields are unknown; rely on errors for fallback. */
+    discoverable: boolean;
+    opaque: boolean;
+    remaining?: number;
+    limit?: number;
+    resetAt?: string;
+    unit?: string;
+    accountId?: string;
+    metadata?: Record<string, string | number | boolean | null>;
+}
+export interface CostEstimate {
+    model: string;
+    authTier: AuthTier;
+    estimatedCostUsd: number;
+    currency: "USD";
+    inputTokensEstimate?: number;
+    outputTokensEstimate?: number;
+    note?: string;
+}
+export interface ProviderInvokeMessage {
+    role: "system" | "user" | "assistant" | "tool";
+    content: string;
+}
+export interface ProviderInvokeRequest {
+    callId: string;
+    model: string;
+    messages: ProviderInvokeMessage[];
+    stream?: boolean;
+    maxOutputTokens?: number;
+    temperature?: number;
+    /** Optional abort signal for cancellation races. */
+    signal?: AbortSignal;
+}
+export type ProviderEvent = {
+    type: "start";
+    callId: string;
+    model: string;
+} | {
+    type: "text-delta";
+    callId: string;
+    text: string;
+} | {
+    type: "tool-call";
+    callId: string;
+    name: string;
+    arguments: string;
+} | {
+    type: "usage";
+    callId: string;
+    inputTokens?: number;
+    outputTokens?: number;
+    totalTokens?: number;
+} | {
+    type: "done";
+    callId: string;
+    finishReason?: string;
+} | {
+    type: "error";
+    callId: string;
+    error: ProviderError;
+};
+export interface ProviderAdapter {
+    readonly id: string;
+    listModels(): Promise<ModelCapability[]>;
+    checkAuth(): Promise<AuthStatus>;
+    queryLimits(authTier: AuthTier): Promise<LimitSnapshot>;
+    estimate(request: RouteRequest, model: string, authTier: AuthTier): Promise<CostEstimate>;
+    invoke(request: ProviderInvokeRequest): AsyncIterable<ProviderEvent>;
+    cancel(callId: string): Promise<void>;
+}
+/** Required method names on every adapter. */
+export declare const PROVIDER_ADAPTER_METHODS: readonly ["listModels", "checkAuth", "queryLimits", "estimate", "invoke", "cancel"];
+/** Convert catalog models to ProviderCandidate rows for routing tests. */
+export declare function capabilityToCandidate(providerId: string, capability: ModelCapability, extras: Pick<ProviderCandidate, "authTier" | "authScope"> & Partial<ProviderCandidate>): ProviderCandidate;
+//# sourceMappingURL=adapter.d.ts.map

package/dist/providers/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../src/providers/adapter.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,SAAS,EACT,QAAQ,EACR,iBAAiB,EACjB,cAAc,EACd,YAAY,EACZ,kBAAkB,EACnB,MAAM,aAAa,CAAC;AAOrB,MAAM,MAAM,iBAAiB,GACzB,aAAa,GACb,cAAc,GACd,iBAAiB,GACjB,SAAS,GACT,UAAU,GACV,iBAAiB,GACjB,gBAAgB,GAChB,gBAAgB,GAChB,oBAAoB,GACpB,WAAW,GACX,SAAS,GACT,SAAS,GACT,iBAAiB,GACjB,SAAS,CAAC;AAEd,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,iBAAiB,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,KAAK,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,qBAAa,aAAc,SAAQ,KAAK;IACtC,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAEnB,OAAO,EAAE,oBAAoB;CAW1C;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,aAAa,CAEtE;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,MAAM,EACd,QAAQ,CAAC,EAAE,MAAM,EACjB,YAAY,CAAC,EAAE,MAAM,GACpB,aAAa,CA6Gf;AAMD,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,iBAAiB,EAAE,OAAO,CAAC;IAC3B,YAAY,EAAE,OAAO,CAAC;IACtB,cAAc,EAAE,OAAO,CAAC;IACxB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,gBAAgB,CAAC,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,UAAU;IACzB,QAAQ,EAAE,QAAQ,CAAC;IACnB,SAAS,EAAE,SAAS,CAAC;IACrB,UAAU,EAAE,OAAO,CAAC;IACpB,iDAAiD;IACjD,SAAS,EAAE,OAAO,CAAC;IACnB,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;IACxC,kBAAkB,EAAE,OAAO,CAAC;IAC5B,MAAM,EAAE,cAAc,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB;;;OAGG;IACH,gBAAgB,CAAC,EAAE,KAAK,GAAG,QAAQ,GAAG,UAAU,GAAG,OAAO,GAAG,MAAM,CAAC;IACpE,oEAAoE;IACpE,oBAAoB,EAAE,OAAO,CAAC;CAC/B;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B,QAAQ,EAAE,QAAQ,CAAC;IACnB,mFAAmF;IACnF,YAAY,EAAE,OAAO,CAAC;IACtB,MAAM,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,IAAI,CAAC,CAAC;CAC7D;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,QAAQ,CAAC;IACnB,gBAAgB,EAAE,MAAM,CAAC;IACzB,QAAQ,EAAE,KAAK,CAAC;IAChB,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAC7B,oBAAoB,CAAC,EAAE,MAAM,CAAC;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,qBAAqB;IACpC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,qBAAqB,EAAE,CAAC;IAClC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,oDAAoD;IACpD,MAAM,CAAC,EAAE,WAAW,CAAC;CACtB;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAChD;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACpD;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACtE;IACE,IAAI,EAAE,OAAO,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB,GACD;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,aAAa,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,UAAU,IAAI,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC;IACzC,SAAS,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IACjC,WAAW,CAAC,QAAQ,EAAE,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IACxD,QAAQ,CACN,OAAO,EAAE,YAAY,EACrB,KAAK,EAAE,MAAM,EACb,QAAQ,EAAE,QAAQ,GACjB,OAAO,CAAC,YAAY,CAAC,CAAC;IACzB,MAAM,CAAC,OAAO,EAAE,qBAAqB,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;IACrE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC;AAED,8CAA8C;AAC9C,eAAO,MAAM,wBAAwB,qFAOkB,CAAC;AAExD,0EAA0E;AAC1E,wBAAgB,qBAAqB,CACnC,UAAU,EAAE,MAAM,EAClB,UAAU,EAAE,eAAe,EAC3B,MAAM,EAAE,IAAI,CAAC,iBAAiB,EAAE,UAAU,GAAG,WAAW,CAAC,GACvD,OAAO,CAAC,iBAAiB,CAAC,GAC3B,iBAAiB,CAmBnB"}

package/dist/providers/adapter.js

@@ -0,0 +1,163 @@
+/**
+ * Provider adapter contract shared by fake and OpenAI-compatible backends.
+ * Keeps harness-specific shapes out of the core router.
+ */
+import { redact } from "../secrets.js";
+export class ProviderError extends Error {
+    code;
+    retryable;
+    httpStatus;
+    providerCode;
+    constructor(options) {
+        super(options.message, options.cause !== undefined ? { cause: options.cause } : undefined);
+        this.name = "ProviderError";
+        this.code = options.code;
+        this.retryable = options.retryable ?? false;
+        this.httpStatus = options.httpStatus;
+        this.providerCode = options.providerCode;
+    }
+}
+export function isProviderError(value) {
+    return value instanceof ProviderError;
+}
+/**
+ * Map HTTP status + optional provider body into a ProviderError.
+ * Presence-only; never logs credential material.
+ */
+export function mapHttpToProviderError(status, bodyText, providerCode) {
+    const snippet = typeof bodyText === "string" && bodyText.length > 0
+        ? redact(bodyText.slice(0, 240))
+        : undefined;
+    const base = snippet ?? `HTTP ${status}`;
+    if (status === 401 || status === 403) {
+        return new ProviderError({
+            code: "auth_failed",
+            message: base,
+            retryable: false,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status === 404) {
+        return new ProviderError({
+            code: "model_not_found",
+            message: base,
+            retryable: false,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status === 408 || status === 504) {
+        return new ProviderError({
+            code: "timeout",
+            message: base,
+            retryable: true,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status === 429) {
+        const lower = (bodyText ?? "").toLowerCase();
+        if (lower.includes("quota") ||
+            lower.includes("billing") ||
+            lower.includes("insufficient")) {
+            return new ProviderError({
+                code: "quota_exhausted",
+                message: base,
+                retryable: false,
+                httpStatus: status,
+                providerCode,
+            });
+        }
+        return new ProviderError({
+            code: "rate_limited",
+            message: base,
+            retryable: true,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status === 402) {
+        return new ProviderError({
+            code: "billing",
+            message: base,
+            retryable: false,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status === 413) {
+        return new ProviderError({
+            code: "context_window",
+            message: base,
+            retryable: false,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status === 503 || status === 529) {
+        return new ProviderError({
+            code: "overload",
+            message: base,
+            retryable: true,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status >= 500) {
+        return new ProviderError({
+            code: "network",
+            message: base,
+            retryable: true,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    if (status >= 400) {
+        return new ProviderError({
+            code: "invalid_request",
+            message: base,
+            retryable: false,
+            httpStatus: status,
+            providerCode,
+        });
+    }
+    return new ProviderError({
+        code: "unknown",
+        message: base,
+        retryable: false,
+        httpStatus: status,
+        providerCode,
+    });
+}
+/** Required method names on every adapter. */
+export const PROVIDER_ADAPTER_METHODS = [
+    "listModels",
+    "checkAuth",
+    "queryLimits",
+    "estimate",
+    "invoke",
+    "cancel",
+];
+/** Convert catalog models to ProviderCandidate rows for routing tests. */
+export function capabilityToCandidate(providerId, capability, extras) {
+    return {
+        providerId,
+        modelId: capability.modelId,
+        displayName: capability.displayName,
+        authTier: extras.authTier,
+        authScope: extras.authScope,
+        subscriptionStatus: extras.subscriptionStatus,
+        health: extras.health ?? "healthy",
+        supportsTools: capability.supportsTools,
+        supportsStreaming: capability.supportsStreaming,
+        supportsJson: capability.supportsJson,
+        supportsImages: capability.supportsImages,
+        contextWindowTokens: capability.contextWindowTokens,
+        maxOutputTokens: capability.maxOutputTokens,
+        estimatedCostUsd: extras.estimatedCostUsd ?? capability.estimatedCostUsd,
+        accountId: extras.accountId,
+        subscriptionQuotaPercentRemaining: extras.subscriptionQuotaPercentRemaining,
+    };
+}
+//# sourceMappingURL=adapter.js.map