offrouter-core 0.5.1 → 0.6.0

package/dist/schemas.d.ts

@@ -11,24 +11,25 @@ export declare const FallbackReasonSchema: z.ZodEnum<["primary", "subscription_e
 export declare const HarnessKindSchema: z.ZodEnum<["claude", "codex", "gemini", "grok", "cursor", "pi", "other"]>;
 export declare const TaskKindSchema: z.ZodEnum<["explain", "code", "review", "plan", "research", "image", "tools", "other"]>;
 export declare const RiskLevelSchema: z.ZodEnum<["low", "medium", "high"]>;
-export declare const PolicyDenialCodeSchema: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing"]>;
+export declare const PolicyDenialCodeSchema: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "spend_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing", "model_not_allowed", "api_spend_approval_required", "subscription_switch_requires_ack"]>;
 export declare const PolicyDenialTargetSchema: z.ZodEnum<["profile", "provider", "model", "workspace", "candidate"]>;
 export declare const PolicyDenialSchema: z.ZodObject<{
-    code: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing"]>;
+    code: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "spend_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing", "model_not_allowed", "api_spend_approval_required", "subscription_switch_requires_ack"]>;
     target: z.ZodEnum<["profile", "provider", "model", "workspace", "candidate"]>;
     id: z.ZodString;
     message: z.ZodString;
 }, "strict", z.ZodTypeAny, {
-    code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+    code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
     target: "profile" | "provider" | "model" | "workspace" | "candidate";
     id: string;
     message: string;
 }, {
-    code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+    code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
     target: "profile" | "provider" | "model" | "workspace" | "candidate";
     id: string;
     message: string;
 }>;
+export declare const LogicalModelFamilySchema: z.ZodEnum<["frontier-coder", "fast-coder", "local-coder", "vision-helper"]>;
 export declare const ProviderCandidateSchema: z.ZodObject<{
     providerId: z.ZodString;
     modelId: z.ZodString;
@@ -46,16 +47,18 @@ export declare const ProviderCandidateSchema: z.ZodObject<{
     contextWindowTokens: z.ZodOptional<z.ZodNumber>;
     maxOutputTokens: z.ZodOptional<z.ZodNumber>;
     estimatedCostUsd: z.ZodOptional<z.ZodNumber>;
+    family: z.ZodOptional<z.ZodEnum<["frontier-coder", "fast-coder", "local-coder", "vision-helper"]>>;
 }, "strict", z.ZodTypeAny, {
-    authTier: "subscription" | "local" | "api-key";
-    authScope: "first-party" | "third-party" | "unknown";
     providerId: string;
     modelId: string;
+    authTier: "subscription" | "local" | "api-key";
+    authScope: "first-party" | "third-party" | "unknown";
     health: "healthy" | "degraded" | "dead";
     supportsTools: boolean;
     supportsStreaming: boolean;
     supportsJson: boolean;
     supportsImages: boolean;
+    family?: "frontier-coder" | "fast-coder" | "local-coder" | "vision-helper" | undefined;
     displayName?: string | undefined;
     subscriptionStatus?: "unknown" | "active" | "near-limit" | "exhausted" | "rate-limited" | "expired" | "unconfigured" | undefined;
     accountId?: string | undefined;
@@ -64,15 +67,16 @@ export declare const ProviderCandidateSchema: z.ZodObject<{
     maxOutputTokens?: number | undefined;
     estimatedCostUsd?: number | undefined;
 }, {
-    authTier: "subscription" | "local" | "api-key";
-    authScope: "first-party" | "third-party" | "unknown";
     providerId: string;
     modelId: string;
+    authTier: "subscription" | "local" | "api-key";
+    authScope: "first-party" | "third-party" | "unknown";
     health: "healthy" | "degraded" | "dead";
     supportsTools: boolean;
     supportsStreaming: boolean;
     supportsJson: boolean;
     supportsImages: boolean;
+    family?: "frontier-coder" | "fast-coder" | "local-coder" | "vision-helper" | undefined;
     displayName?: string | undefined;
     subscriptionStatus?: "unknown" | "active" | "near-limit" | "exhausted" | "rate-limited" | "expired" | "unconfigured" | undefined;
     accountId?: string | undefined;
@@ -81,6 +85,21 @@ export declare const ProviderCandidateSchema: z.ZodObject<{
     maxOutputTokens?: number | undefined;
     estimatedCostUsd?: number | undefined;
 }>;
+/** Classifier signal block on RouteDecision — never contains prompt text. */
+export declare const RouteClassificationSchema: z.ZodObject<{
+    recommendedFamily: z.ZodEnum<["fast-coder", "frontier-coder"]>;
+    confidence: z.ZodEnum<["low", "medium", "high"]>;
+    signals: z.ZodArray<z.ZodString, "many">;
+}, "strict", z.ZodTypeAny, {
+    recommendedFamily: "frontier-coder" | "fast-coder";
+    confidence: "low" | "medium" | "high";
+    signals: string[];
+}, {
+    recommendedFamily: "frontier-coder" | "fast-coder";
+    confidence: "low" | "medium" | "high";
+    signals: string[];
+}>;
+export declare const ClassifierNameSchema: z.ZodEnum<["heuristic", "llm", "llm-fallback-heuristic"]>;
 export declare const HarnessRefSchema: z.ZodObject<{
     kind: z.ZodEnum<["claude", "codex", "gemini", "grok", "cursor", "pi", "other"]>;
     profile: z.ZodString;
@@ -303,16 +322,19 @@ export declare const FallbackChainEntrySchema: z.ZodObject<{
     model: z.ZodString;
     authTier: z.ZodEnum<["subscription", "local", "api-key"]>;
     reason: z.ZodEnum<["primary", "subscription_exhausted", "subscription_degraded", "subscription_unconfigured", "subscription_scope_denied", "local_preferred", "api_key_fallback", "policy_denied", "provider_error"]>;
+    healthScore: z.ZodOptional<z.ZodNumber>;
 }, "strict", z.ZodTypeAny, {
     provider: string;
     model: string;
     authTier: "subscription" | "local" | "api-key";
     reason: "primary" | "subscription_exhausted" | "subscription_degraded" | "subscription_unconfigured" | "subscription_scope_denied" | "local_preferred" | "api_key_fallback" | "policy_denied" | "provider_error";
+    healthScore?: number | undefined;
 }, {
     provider: string;
     model: string;
     authTier: "subscription" | "local" | "api-key";
     reason: "primary" | "subscription_exhausted" | "subscription_degraded" | "subscription_unconfigured" | "subscription_scope_denied" | "local_preferred" | "api_key_fallback" | "policy_denied" | "provider_error";
+    healthScore?: number | undefined;
 }>;
 export declare const RouteDecisionSchema: z.ZodObject<{
     protocolVersion: z.ZodLiteral<"offrouter.route.v1">;
@@ -344,29 +366,32 @@ export declare const RouteDecisionSchema: z.ZodObject<{
         model: z.ZodString;
         authTier: z.ZodEnum<["subscription", "local", "api-key"]>;
         reason: z.ZodEnum<["primary", "subscription_exhausted", "subscription_degraded", "subscription_unconfigured", "subscription_scope_denied", "local_preferred", "api_key_fallback", "policy_denied", "provider_error"]>;
+        healthScore: z.ZodOptional<z.ZodNumber>;
     }, "strict", z.ZodTypeAny, {
         provider: string;
         model: string;
         authTier: "subscription" | "local" | "api-key";
         reason: "primary" | "subscription_exhausted" | "subscription_degraded" | "subscription_unconfigured" | "subscription_scope_denied" | "local_preferred" | "api_key_fallback" | "policy_denied" | "provider_error";
+        healthScore?: number | undefined;
     }, {
         provider: string;
         model: string;
         authTier: "subscription" | "local" | "api-key";
         reason: "primary" | "subscription_exhausted" | "subscription_degraded" | "subscription_unconfigured" | "subscription_scope_denied" | "local_preferred" | "api_key_fallback" | "policy_denied" | "provider_error";
+        healthScore?: number | undefined;
     }>, "many">>;
     policyDenials: z.ZodOptional<z.ZodArray<z.ZodObject<{
-        code: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing"]>;
+        code: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "spend_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing", "model_not_allowed", "api_spend_approval_required", "subscription_switch_requires_ack"]>;
         target: z.ZodEnum<["profile", "provider", "model", "workspace", "candidate"]>;
         id: z.ZodString;
         message: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;
     }, {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;
@@ -376,12 +401,46 @@ export declare const RouteDecisionSchema: z.ZodObject<{
     blocked: z.ZodOptional<z.ZodBoolean>;
     needsConfiguration: z.ZodOptional<z.ZodBoolean>;
     nearLimitWarning: z.ZodOptional<z.ZodString>;
+    classification: z.ZodOptional<z.ZodObject<{
+        recommendedFamily: z.ZodEnum<["fast-coder", "frontier-coder"]>;
+        confidence: z.ZodEnum<["low", "medium", "high"]>;
+        signals: z.ZodArray<z.ZodString, "many">;
+    }, "strict", z.ZodTypeAny, {
+        recommendedFamily: "frontier-coder" | "fast-coder";
+        confidence: "low" | "medium" | "high";
+        signals: string[];
+    }, {
+        recommendedFamily: "frontier-coder" | "fast-coder";
+        confidence: "low" | "medium" | "high";
+        signals: string[];
+    }>>;
+    classifierName: z.ZodOptional<z.ZodEnum<["heuristic", "llm", "llm-fallback-heuristic"]>>;
+    routingRule: z.ZodOptional<z.ZodObject<{
+        index: z.ZodNumber;
+        matchedKeys: z.ZodArray<z.ZodEnum<["role", "family"]>, "many">;
+        target: z.ZodEnum<["model", "provider", "tier"]>;
+    }, "strict", z.ZodTypeAny, {
+        target: "provider" | "model" | "tier";
+        index: number;
+        matchedKeys: ("role" | "family")[];
+    }, {
+        target: "provider" | "model" | "tier";
+        index: number;
+        matchedKeys: ("role" | "family")[];
+    }>>;
 }, "strict", z.ZodTypeAny, {
-    reason: string;
-    explanation: string;
     protocolVersion: "offrouter.route.v1";
-    requestId: string;
     decisionId: string;
+    requestId: string;
+    reason: string;
+    explanation: string;
+    confidence?: number | undefined;
+    classification?: {
+        recommendedFamily: "frontier-coder" | "fast-coder";
+        confidence: "low" | "medium" | "high";
+        signals: string[];
+    } | undefined;
+    classifierName?: "heuristic" | "llm" | "llm-fallback-heuristic" | undefined;
     route?: {
         provider: string;
         model: string;
@@ -394,24 +453,36 @@ export declare const RouteDecisionSchema: z.ZodObject<{
         model: string;
         authTier: "subscription" | "local" | "api-key";
         reason: "primary" | "subscription_exhausted" | "subscription_degraded" | "subscription_unconfigured" | "subscription_scope_denied" | "local_preferred" | "api_key_fallback" | "policy_denied" | "provider_error";
+        healthScore?: number | undefined;
     }[] | undefined;
     policyDenials?: {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;
     }[] | undefined;
-    confidence?: number | undefined;
     auditSummary?: string | undefined;
     blocked?: boolean | undefined;
     needsConfiguration?: boolean | undefined;
     nearLimitWarning?: string | undefined;
+    routingRule?: {
+        target: "provider" | "model" | "tier";
+        index: number;
+        matchedKeys: ("role" | "family")[];
+    } | undefined;
 }, {
-    reason: string;
-    explanation: string;
     protocolVersion: "offrouter.route.v1";
-    requestId: string;
     decisionId: string;
+    requestId: string;
+    reason: string;
+    explanation: string;
+    confidence?: number | undefined;
+    classification?: {
+        recommendedFamily: "frontier-coder" | "fast-coder";
+        confidence: "low" | "medium" | "high";
+        signals: string[];
+    } | undefined;
+    classifierName?: "heuristic" | "llm" | "llm-fallback-heuristic" | undefined;
     route?: {
         provider: string;
         model: string;
@@ -424,18 +495,23 @@ export declare const RouteDecisionSchema: z.ZodObject<{
         model: string;
         authTier: "subscription" | "local" | "api-key";
         reason: "primary" | "subscription_exhausted" | "subscription_degraded" | "subscription_unconfigured" | "subscription_scope_denied" | "local_preferred" | "api_key_fallback" | "policy_denied" | "provider_error";
+        healthScore?: number | undefined;
     }[] | undefined;
     policyDenials?: {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;
     }[] | undefined;
-    confidence?: number | undefined;
     auditSummary?: string | undefined;
     blocked?: boolean | undefined;
     needsConfiguration?: boolean | undefined;
     nearLimitWarning?: string | undefined;
+    routingRule?: {
+        target: "provider" | "model" | "tier";
+        index: number;
+        matchedKeys: ("role" | "family")[];
+    } | undefined;
 }>;
 export declare const PolicyDecisionSchema: z.ZodObject<{
     allowed: z.ZodArray<z.ZodObject<{
@@ -455,16 +531,18 @@ export declare const PolicyDecisionSchema: z.ZodObject<{
         contextWindowTokens: z.ZodOptional<z.ZodNumber>;
         maxOutputTokens: z.ZodOptional<z.ZodNumber>;
         estimatedCostUsd: z.ZodOptional<z.ZodNumber>;
+        family: z.ZodOptional<z.ZodEnum<["frontier-coder", "fast-coder", "local-coder", "vision-helper"]>>;
     }, "strict", z.ZodTypeAny, {
-        authTier: "subscription" | "local" | "api-key";
-        authScope: "first-party" | "third-party" | "unknown";
         providerId: string;
         modelId: string;
+        authTier: "subscription" | "local" | "api-key";
+        authScope: "first-party" | "third-party" | "unknown";
         health: "healthy" | "degraded" | "dead";
         supportsTools: boolean;
         supportsStreaming: boolean;
         supportsJson: boolean;
         supportsImages: boolean;
+        family?: "frontier-coder" | "fast-coder" | "local-coder" | "vision-helper" | undefined;
         displayName?: string | undefined;
         subscriptionStatus?: "unknown" | "active" | "near-limit" | "exhausted" | "rate-limited" | "expired" | "unconfigured" | undefined;
         accountId?: string | undefined;
@@ -473,15 +551,16 @@ export declare const PolicyDecisionSchema: z.ZodObject<{
         maxOutputTokens?: number | undefined;
         estimatedCostUsd?: number | undefined;
     }, {
-        authTier: "subscription" | "local" | "api-key";
-        authScope: "first-party" | "third-party" | "unknown";
         providerId: string;
         modelId: string;
+        authTier: "subscription" | "local" | "api-key";
+        authScope: "first-party" | "third-party" | "unknown";
         health: "healthy" | "degraded" | "dead";
         supportsTools: boolean;
         supportsStreaming: boolean;
         supportsJson: boolean;
         supportsImages: boolean;
+        family?: "frontier-coder" | "fast-coder" | "local-coder" | "vision-helper" | undefined;
         displayName?: string | undefined;
         subscriptionStatus?: "unknown" | "active" | "near-limit" | "exhausted" | "rate-limited" | "expired" | "unconfigured" | undefined;
         accountId?: string | undefined;
@@ -491,32 +570,33 @@ export declare const PolicyDecisionSchema: z.ZodObject<{
         estimatedCostUsd?: number | undefined;
     }>, "many">;
     denials: z.ZodArray<z.ZodObject<{
-        code: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing"]>;
+        code: z.ZodEnum<["profile_not_allowlisted", "work_profile_denied", "provider_denied", "project_untrusted", "privacy_label_denied", "local_only_required", "cost_cap_exceeded", "spend_cap_exceeded", "api_key_blocked_by_subscription_first_policy", "subscription_scope_denied", "capability_missing", "model_not_allowed", "api_spend_approval_required", "subscription_switch_requires_ack"]>;
         target: z.ZodEnum<["profile", "provider", "model", "workspace", "candidate"]>;
         id: z.ZodString;
         message: z.ZodString;
     }, "strict", z.ZodTypeAny, {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;
     }, {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;
     }>, "many">;
 }, "strict", z.ZodTypeAny, {
     allowed: {
-        authTier: "subscription" | "local" | "api-key";
-        authScope: "first-party" | "third-party" | "unknown";
         providerId: string;
         modelId: string;
+        authTier: "subscription" | "local" | "api-key";
+        authScope: "first-party" | "third-party" | "unknown";
         health: "healthy" | "degraded" | "dead";
         supportsTools: boolean;
         supportsStreaming: boolean;
         supportsJson: boolean;
         supportsImages: boolean;
+        family?: "frontier-coder" | "fast-coder" | "local-coder" | "vision-helper" | undefined;
         displayName?: string | undefined;
         subscriptionStatus?: "unknown" | "active" | "near-limit" | "exhausted" | "rate-limited" | "expired" | "unconfigured" | undefined;
         accountId?: string | undefined;
@@ -526,22 +606,23 @@ export declare const PolicyDecisionSchema: z.ZodObject<{
         estimatedCostUsd?: number | undefined;
     }[];
     denials: {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;
     }[];
 }, {
     allowed: {
-        authTier: "subscription" | "local" | "api-key";
-        authScope: "first-party" | "third-party" | "unknown";
         providerId: string;
         modelId: string;
+        authTier: "subscription" | "local" | "api-key";
+        authScope: "first-party" | "third-party" | "unknown";
         health: "healthy" | "degraded" | "dead";
         supportsTools: boolean;
         supportsStreaming: boolean;
         supportsJson: boolean;
         supportsImages: boolean;
+        family?: "frontier-coder" | "fast-coder" | "local-coder" | "vision-helper" | undefined;
         displayName?: string | undefined;
         subscriptionStatus?: "unknown" | "active" | "near-limit" | "exhausted" | "rate-limited" | "expired" | "unconfigured" | undefined;
         accountId?: string | undefined;
@@ -551,7 +632,7 @@ export declare const PolicyDecisionSchema: z.ZodObject<{
         estimatedCostUsd?: number | undefined;
     }[];
     denials: {
-        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing";
+        code: "subscription_scope_denied" | "profile_not_allowlisted" | "work_profile_denied" | "provider_denied" | "project_untrusted" | "privacy_label_denied" | "local_only_required" | "cost_cap_exceeded" | "spend_cap_exceeded" | "api_key_blocked_by_subscription_first_policy" | "capability_missing" | "model_not_allowed" | "api_spend_approval_required" | "subscription_switch_requires_ack";
         target: "profile" | "provider" | "model" | "workspace" | "candidate";
         id: string;
         message: string;

package/dist/schemas.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,cAAc,iDAA+C,CAAC;AAE3E,eAAO,MAAM,eAAe,sDAI1B,CAAC;AAEH,eAAO,MAAM,wBAAwB,wGAQnC,CAAC;AAEH,eAAO,MAAM,oBAAoB,4CAA0C,CAAC;AAE5E,eAAO,MAAM,oBAAoB,+MAU/B,CAAC;AAEH,eAAO,MAAM,iBAAiB,2EAQ5B,CAAC;AAEH,eAAO,MAAM,cAAc,yFASzB,CAAC;AAEH,eAAO,MAAM,eAAe,sCAAoC,CAAC;AAEjE,eAAO,MAAM,sBAAsB,8QAWjC,CAAC;AAEH,eAAO,MAAM,wBAAwB,uEAMnC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAOpB,CAAC;AAEZ,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAmBzB,CAAC;AAEZ,eAAO,MAAM,gBAAgB;;;;;;;;;EAKlB,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWjB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAMpB,CAAC;AAEZ,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;EAOxB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASpB,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAQrB,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;EAO1B,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAgBrB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtB,CAAC"}
+{"version":3,"file":"schemas.d.ts","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,eAAO,MAAM,cAAc,iDAA+C,CAAC;AAE3E,eAAO,MAAM,eAAe,sDAI1B,CAAC;AAEH,eAAO,MAAM,wBAAwB,wGAQnC,CAAC;AAEH,eAAO,MAAM,oBAAoB,4CAA0C,CAAC;AAE5E,eAAO,MAAM,oBAAoB,+MAU/B,CAAC;AAEH,eAAO,MAAM,iBAAiB,2EAQ5B,CAAC;AAEH,eAAO,MAAM,cAAc,yFASzB,CAAC;AAEH,eAAO,MAAM,eAAe,sCAAoC,CAAC;AAEjE,eAAO,MAAM,sBAAsB,4XAejC,CAAC;AAEH,eAAO,MAAM,wBAAwB,uEAMnC,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;EAOpB,CAAC;AAEZ,eAAO,MAAM,wBAAwB,6EAKnC,CAAC;AAEH,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAoBzB,CAAC;AAEZ,6EAA6E;AAC7E,eAAO,MAAM,yBAAyB;;;;;;;;;;;;EAM3B,CAAC;AAEZ,eAAO,MAAM,oBAAoB,2DAI/B,CAAC;AAEH,eAAO,MAAM,gBAAgB;;;;;;;;;EAKlB,CAAC;AAEZ;;;GAGG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;;;;EAWjB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;EAMpB,CAAC;AAEZ,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;EAOxB,CAAC;AAEZ,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EASpB,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;EAQrB,CAAC;AAEZ,eAAO,MAAM,wBAAwB;;;;;;;;;;;;;;;;;;EAQ1B,CAAC;AAEZ,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA0BrB,CAAC;AAEZ,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAKtB,CAAC"}

package/dist/schemas.js

@@ -59,9 +59,13 @@ export const PolicyDenialCodeSchema = z.enum([
     "privacy_label_denied",
     "local_only_required",
     "cost_cap_exceeded",
+    "spend_cap_exceeded",
     "api_key_blocked_by_subscription_first_policy",
     "subscription_scope_denied",
     "capability_missing",
+    "model_not_allowed",
+    "api_spend_approval_required",
+    "subscription_switch_requires_ack",
 ]);
 export const PolicyDenialTargetSchema = z.enum([
     "profile",
@@ -78,6 +82,12 @@ export const PolicyDenialSchema = z
     message: z.string().min(1),
 })
     .strict();
+export const LogicalModelFamilySchema = z.enum([
+    "frontier-coder",
+    "fast-coder",
+    "local-coder",
+    "vision-helper",
+]);
 export const ProviderCandidateSchema = z
     .object({
     providerId: z.string().min(1),
@@ -96,8 +106,22 @@ export const ProviderCandidateSchema = z
     contextWindowTokens: z.number().nonnegative().optional(),
     maxOutputTokens: z.number().nonnegative().optional(),
     estimatedCostUsd: z.number().nonnegative().optional(),
+    family: LogicalModelFamilySchema.optional(),
 })
     .strict();
+/** Classifier signal block on RouteDecision — never contains prompt text. */
+export const RouteClassificationSchema = z
+    .object({
+    recommendedFamily: z.enum(["fast-coder", "frontier-coder"]),
+    confidence: z.enum(["low", "medium", "high"]),
+    signals: z.array(z.string().min(1)),
+})
+    .strict();
+export const ClassifierNameSchema = z.enum([
+    "heuristic",
+    "llm",
+    "llm-fallback-heuristic",
+]);
 export const HarnessRefSchema = z
     .object({
     kind: HarnessKindSchema,
@@ -160,6 +184,7 @@ export const FallbackChainEntrySchema = z
     model: z.string().min(1),
     authTier: AuthTierSchema,
     reason: FallbackReasonSchema,
+    healthScore: z.number().optional(),
 })
     .strict();
 export const RouteDecisionSchema = z
@@ -177,6 +202,16 @@ export const RouteDecisionSchema = z
     blocked: z.boolean().optional(),
     needsConfiguration: z.boolean().optional(),
     nearLimitWarning: z.string().optional(),
+    classification: RouteClassificationSchema.optional(),
+    classifierName: ClassifierNameSchema.optional(),
+    routingRule: z
+        .object({
+        index: z.number().int().nonnegative(),
+        matchedKeys: z.array(z.enum(["role", "family"])),
+        target: z.enum(["model", "provider", "tier"]),
+    })
+        .strict()
+        .optional(),
 })
     .strict();
 export const PolicyDecisionSchema = z

package/dist/schemas.js.map

@@ -1 +1 @@
-{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,aAAa;IACb,aAAa;IACb,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;IACd,SAAS;IACT,cAAc;IACd,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,SAAS;IACT,wBAAwB;IACxB,uBAAuB;IACvB,2BAA2B;IAC3B,2BAA2B;IAC3B,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,OAAO;IACP,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3C,yBAAyB;IACzB,qBAAqB;IACrB,iBAAiB;IACjB,mBAAmB;IACnB,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;IACnB,8CAA8C;IAC9C,2BAA2B;IAC3B,oBAAoB;CACrB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,SAAS;IACT,UAAU;IACV,OAAO;IACP,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,sBAAsB;IAC5B,MAAM,EAAE,wBAAwB;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,eAAe;IAC1B,kBAAkB,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACvD,MAAM,EAAE,oBAAoB;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,iCAAiC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;CACtD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,eAAe;IACrB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3C,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,gBAAgB;IACzB,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,kBAAkB;IAC7B,WAAW,EAAE,sBAAsB;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,oBAAoB;CAC7B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,mBAAmB,CAAC,OAAO,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC3D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACrC,CAAC;KACD,MAAM,EAAE,CAAC"}
+{"version":3,"file":"schemas.js","sourceRoot":"","sources":["../src/schemas.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,cAAc,EAAE,OAAO,EAAE,SAAS,CAAC,CAAC,CAAC;AAE3E,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC;IACpC,aAAa;IACb,aAAa;IACb,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,QAAQ;IACR,YAAY;IACZ,WAAW;IACX,cAAc;IACd,SAAS;IACT,cAAc;IACd,SAAS;CACV,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;AAE5E,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,SAAS;IACT,wBAAwB;IACxB,uBAAuB;IACvB,2BAA2B;IAC3B,2BAA2B;IAC3B,iBAAiB;IACjB,kBAAkB;IAClB,eAAe;IACf,gBAAgB;CACjB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,IAAI,CAAC;IACtC,QAAQ;IACR,OAAO;IACP,QAAQ;IACR,MAAM;IACN,QAAQ;IACR,IAAI;IACJ,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC;IACnC,SAAS;IACT,MAAM;IACN,QAAQ;IACR,MAAM;IACN,UAAU;IACV,OAAO;IACP,OAAO;IACP,OAAO;CACR,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAEjE,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3C,yBAAyB;IACzB,qBAAqB;IACrB,iBAAiB;IACjB,mBAAmB;IACnB,sBAAsB;IACtB,qBAAqB;IACrB,mBAAmB;IACnB,oBAAoB;IACpB,8CAA8C;IAC9C,2BAA2B;IAC3B,oBAAoB;IACpB,mBAAmB;IACnB,6BAA6B;IAC7B,kCAAkC;CACnC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,SAAS;IACT,UAAU;IACV,OAAO;IACP,WAAW;IACX,WAAW;CACZ,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,sBAAsB;IAC5B,MAAM,EAAE,wBAAwB;IAChC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC7C,gBAAgB;IAChB,YAAY;IACZ,aAAa;IACb,eAAe;CAChB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC;KACrC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,eAAe;IAC1B,kBAAkB,EAAE,wBAAwB,CAAC,QAAQ,EAAE;IACvD,MAAM,EAAE,oBAAoB;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IACvC,iCAAiC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACxE,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE;IAC1B,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE;IAC9B,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE;IACzB,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE;IAC3B,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACxD,eAAe,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACpD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IACrD,MAAM,EAAE,wBAAwB,CAAC,QAAQ,EAAE;CAC5C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,6EAA6E;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC;KACvC,MAAM,CAAC;IACN,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,gBAAgB,CAAC,CAAC;IAC3D,UAAU,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,IAAI,CAAC;IACzC,WAAW;IACX,KAAK;IACL,wBAAwB;CACzB,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC;KAC9B,MAAM,CAAC;IACN,IAAI,EAAE,iBAAiB;IACvB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC3B,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;GAGG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,CAAC;KAC7B,MAAM,CAAC;IACN,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,IAAI,EAAE,cAAc;IACpB,IAAI,EAAE,eAAe;IACrB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACrC,cAAc,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACtC,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACzC,YAAY,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CACrC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,GAAG,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACtB,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE;IACpB,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC;KACpC,MAAM,CAAC;IACN,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE;IAC/C,SAAS,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IACjC,mBAAmB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC3C,iBAAiB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;CAC1C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC;KAChC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,OAAO,EAAE,gBAAgB;IACzB,IAAI,EAAE,eAAe;IACrB,SAAS,EAAE,kBAAkB;IAC7B,WAAW,EAAE,sBAAsB;CACpC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,cAAc;IACxB,SAAS,EAAE,eAAe,CAAC,QAAQ,EAAE;IACrC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAC;KACtC,MAAM,CAAC;IACN,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACxB,QAAQ,EAAE,cAAc;IACxB,MAAM,EAAE,oBAAoB;IAC5B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACnC,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,mBAAmB,GAAG,CAAC;KACjC,MAAM,CAAC;IACN,eAAe,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC;IAClD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,KAAK,EAAE,mBAAmB,CAAC,OAAO,EAAE;IACpC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACzB,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9B,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,wBAAwB,CAAC,CAAC,QAAQ,EAAE;IAC3D,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC,CAAC,QAAQ,EAAE;IACrD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/C,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACnC,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC/B,kBAAkB,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;IAC1C,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACvC,cAAc,EAAE,yBAAyB,CAAC,QAAQ,EAAE;IACpD,cAAc,EAAE,oBAAoB,CAAC,QAAQ,EAAE;IAC/C,WAAW,EAAE,CAAC;SACX,MAAM,CAAC;QACN,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;QACrC,WAAW,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;QAChD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC;KAC9C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC;KAClC,MAAM,CAAC;IACN,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,uBAAuB,CAAC;IACzC,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,kBAAkB,CAAC;CACrC,CAAC;KACD,MAAM,EAAE,CAAC"}

package/dist/secret-scan.d.ts

@@ -0,0 +1,40 @@
+/** Default when policy omits outbound_secret_scan. */
+export type OutboundSecretScanMode = "block" | "warn" | "off";
+export declare const DEFAULT_OUTBOUND_SECRET_SCAN: OutboundSecretScanMode;
+export interface SecretFinding {
+    /** Pattern name from SECRET_PATTERNS (e.g. "openai_api_key"). */
+    patternName: string;
+    /**
+     * Surrounding context with the match replaced by REDACTED.
+     * Never includes the matched credential value itself.
+     */
+    redactedExcerpt: string;
+}
+/**
+ * Thrown when policy.outboundSecretScan === "block" and findings are present.
+ * Message and `patternNames` name kinds only — never matched content.
+ */
+export declare class OutboundSecretBlockedError extends Error {
+    readonly code: "outbound_secret_blocked";
+    readonly patternNames: string[];
+    constructor(patternNames: string[]);
+}
+/**
+ * Scan free text for known credential shapes.
+ * Returns findings with pattern names and redacted excerpts only.
+ */
+export declare function scanForSecrets(text: string): SecretFinding[];
+/**
+ * Join message contents (system/user/assistant/tool) for a single scan pass.
+ */
+export declare function collectOutboundText(messages: ReadonlyArray<{
+    content: string;
+}>): string;
+/**
+ * Apply scan mode to findings collected from outbound text.
+ * - "off": empty result, no throw
+ * - "warn": return findings (caller audits / attaches warnings)
+ * - "block": throw OutboundSecretBlockedError when findings exist
+ */
+export declare function enforceOutboundSecretScan(text: string, mode: OutboundSecretScanMode | undefined): SecretFinding[];
+//# sourceMappingURL=secret-scan.d.ts.map

package/dist/secret-scan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secret-scan.d.ts","sourceRoot":"","sources":["../src/secret-scan.ts"],"names":[],"mappings":"AAYA,sDAAsD;AACtD,MAAM,MAAM,sBAAsB,GAAG,OAAO,GAAG,MAAM,GAAG,KAAK,CAAC;AAE9D,eAAO,MAAM,4BAA4B,EAAE,sBAA+B,CAAC;AAE3E,MAAM,WAAW,aAAa;IAC5B,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAC;IACpB;;;OAGG;IACH,eAAe,EAAE,MAAM,CAAC;CACzB;AAED;;;GAGG;AACH,qBAAa,0BAA2B,SAAQ,KAAK;IACnD,QAAQ,CAAC,IAAI,EAAG,yBAAyB,CAAU;IACnD,QAAQ,CAAC,YAAY,EAAE,MAAM,EAAE,CAAC;gBAEpB,YAAY,EAAE,MAAM,EAAE;CASnC;AAID;;;GAGG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,aAAa,EAAE,CAoC5D;AAED;;GAEG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,aAAa,CAAC;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC,GAC3C,MAAM,CAKR;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,EACZ,IAAI,EAAE,sBAAsB,GAAG,SAAS,GACvC,aAAa,EAAE,CAiBjB"}