omk-agent-core 0.98.3 → 0.98.4

package/dist/provider-request-types.d.ts

@@ -0,0 +1,46 @@
+import type { SimpleStreamOptions } from "omk-ai";
+type ContractThinkingLevel = "off" | NonNullable<SimpleStreamOptions["reasoning"]>;
+export interface ModelIdentity {
+    readonly provider: string;
+    readonly id: string;
+}
+/** Logical dispatch policy, not endpoint, credential, or serialized-payload attestation. */
+export interface ModelContract {
+    readonly allowedModels: readonly ModelIdentity[];
+    readonly allowedProviders: readonly string[];
+    readonly allowedAuthOrigins: readonly string[];
+    readonly thinking: boolean;
+    readonly maxOutputTokens: number;
+    readonly thinkingLevel?: ContractThinkingLevel;
+}
+export interface RouteRequest {
+    readonly model: ModelIdentity;
+    readonly provider: string;
+    readonly thinking: boolean;
+    readonly maxOutputTokens?: number;
+    /** Logical credential resolver identity; omission means request.provider. */
+    readonly authOrigin?: string;
+    readonly thinkingLevel?: ContractThinkingLevel;
+}
+export type ModelContractViolationCode = "invalid-contract" | "invalid-contract-limit" | "invalid-request" | "invalid-request-limit" | "model-not-allowed" | "provider-not-allowed" | "provider-mismatch" | "auth-origin-not-allowed" | "thinking-not-allowed" | "thinking-level-mismatch" | "output-limit-exceeded";
+export type ProviderRequestEvent = {
+    readonly type: "provider_denied";
+    readonly requestId: string;
+    readonly deniedReason: "contract-violation" | "aborted";
+} | {
+    readonly type: "provider_request";
+    readonly requestId: string;
+    readonly provider: string;
+    readonly model: string;
+    readonly maxOutputTokens: number;
+    /** Tool attachments replaced by explicit text placeholders in this provider view. */
+    readonly omittedToolImages?: number;
+    readonly boundary: "stream-dispatch";
+} | {
+    readonly type: "provider_request_end";
+    readonly requestId: string;
+    readonly outcome: "completed" | "error" | "aborted";
+    readonly boundary: "stream-dispatch";
+};
+export {};
+//# sourceMappingURL=provider-request-types.d.ts.map

package/dist/provider-request-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-request-types.d.ts","sourceRoot":"","sources":["../src/provider-request-types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,QAAQ,CAAC;AAElD,KAAK,qBAAqB,GAAG,KAAK,GAAG,WAAW,CAAC,mBAAmB,CAAC,WAAW,CAAC,CAAC,CAAC;AACnF,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACpB;AAED,4FAA4F;AAC5F,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,aAAa,EAAE,SAAS,aAAa,EAAE,CAAC;IACjD,QAAQ,CAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC/C,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,WAAW,YAAY;IAC5B,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAC;IAC9B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,6EAA6E;IAC7E,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,CAAC,EAAE,qBAAqB,CAAC;CAC/C;AAED,MAAM,MAAM,0BAA0B,GACnC,kBAAkB,GAClB,wBAAwB,GACxB,iBAAiB,GACjB,uBAAuB,GACvB,mBAAmB,GACnB,sBAAsB,GACtB,mBAAmB,GACnB,yBAAyB,GACzB,sBAAsB,GACtB,yBAAyB,GACzB,uBAAuB,CAAC;AAE3B,MAAM,MAAM,oBAAoB,GAC7B;IACA,QAAQ,CAAC,IAAI,EAAE,iBAAiB,CAAC;IACjC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,oBAAoB,GAAG,SAAS,CAAC;CACvD,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,qFAAqF;IACrF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACpC,GACD;IACA,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,GAAG,SAAS,CAAC;IACpD,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;CACpC,CAAC","sourcesContent":["import type { SimpleStreamOptions } from \"omk-ai\";\n\ntype ContractThinkingLevel = \"off\" | NonNullable<SimpleStreamOptions[\"reasoning\"]>;\nexport interface ModelIdentity {\n\treadonly provider: string;\n\treadonly id: string;\n}\n\n/** Logical dispatch policy, not endpoint, credential, or serialized-payload attestation. */\nexport interface ModelContract {\n\treadonly allowedModels: readonly ModelIdentity[];\n\treadonly allowedProviders: readonly string[];\n\treadonly allowedAuthOrigins: readonly string[];\n\treadonly thinking: boolean;\n\treadonly maxOutputTokens: number;\n\treadonly thinkingLevel?: ContractThinkingLevel;\n}\n\nexport interface RouteRequest {\n\treadonly model: ModelIdentity;\n\treadonly provider: string;\n\treadonly thinking: boolean;\n\treadonly maxOutputTokens?: number;\n\t/** Logical credential resolver identity; omission means request.provider. */\n\treadonly authOrigin?: string;\n\treadonly thinkingLevel?: ContractThinkingLevel;\n}\n\nexport type ModelContractViolationCode =\n\t| \"invalid-contract\"\n\t| \"invalid-contract-limit\"\n\t| \"invalid-request\"\n\t| \"invalid-request-limit\"\n\t| \"model-not-allowed\"\n\t| \"provider-not-allowed\"\n\t| \"provider-mismatch\"\n\t| \"auth-origin-not-allowed\"\n\t| \"thinking-not-allowed\"\n\t| \"thinking-level-mismatch\"\n\t| \"output-limit-exceeded\";\n\nexport type ProviderRequestEvent =\n\t| {\n\t\t\treadonly type: \"provider_denied\";\n\t\t\treadonly requestId: string;\n\t\t\treadonly deniedReason: \"contract-violation\" | \"aborted\";\n\t  }\n\t| {\n\t\t\treadonly type: \"provider_request\";\n\t\t\treadonly requestId: string;\n\t\t\treadonly provider: string;\n\t\t\treadonly model: string;\n\t\t\treadonly maxOutputTokens: number;\n\t\t\t/** Tool attachments replaced by explicit text placeholders in this provider view. */\n\t\t\treadonly omittedToolImages?: number;\n\t\t\treadonly boundary: \"stream-dispatch\";\n\t  }\n\t| {\n\t\t\treadonly type: \"provider_request_end\";\n\t\t\treadonly requestId: string;\n\t\t\treadonly outcome: \"completed\" | \"error\" | \"aborted\";\n\t\t\treadonly boundary: \"stream-dispatch\";\n\t  };\n"]}

package/dist/provider-request-types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=provider-request-types.js.map

package/dist/provider-request-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-request-types.js","sourceRoot":"","sources":["../src/provider-request-types.ts"],"names":[],"mappings":"","sourcesContent":["import type { SimpleStreamOptions } from \"omk-ai\";\n\ntype ContractThinkingLevel = \"off\" | NonNullable<SimpleStreamOptions[\"reasoning\"]>;\nexport interface ModelIdentity {\n\treadonly provider: string;\n\treadonly id: string;\n}\n\n/** Logical dispatch policy, not endpoint, credential, or serialized-payload attestation. */\nexport interface ModelContract {\n\treadonly allowedModels: readonly ModelIdentity[];\n\treadonly allowedProviders: readonly string[];\n\treadonly allowedAuthOrigins: readonly string[];\n\treadonly thinking: boolean;\n\treadonly maxOutputTokens: number;\n\treadonly thinkingLevel?: ContractThinkingLevel;\n}\n\nexport interface RouteRequest {\n\treadonly model: ModelIdentity;\n\treadonly provider: string;\n\treadonly thinking: boolean;\n\treadonly maxOutputTokens?: number;\n\t/** Logical credential resolver identity; omission means request.provider. */\n\treadonly authOrigin?: string;\n\treadonly thinkingLevel?: ContractThinkingLevel;\n}\n\nexport type ModelContractViolationCode =\n\t| \"invalid-contract\"\n\t| \"invalid-contract-limit\"\n\t| \"invalid-request\"\n\t| \"invalid-request-limit\"\n\t| \"model-not-allowed\"\n\t| \"provider-not-allowed\"\n\t| \"provider-mismatch\"\n\t| \"auth-origin-not-allowed\"\n\t| \"thinking-not-allowed\"\n\t| \"thinking-level-mismatch\"\n\t| \"output-limit-exceeded\";\n\nexport type ProviderRequestEvent =\n\t| {\n\t\t\treadonly type: \"provider_denied\";\n\t\t\treadonly requestId: string;\n\t\t\treadonly deniedReason: \"contract-violation\" | \"aborted\";\n\t  }\n\t| {\n\t\t\treadonly type: \"provider_request\";\n\t\t\treadonly requestId: string;\n\t\t\treadonly provider: string;\n\t\t\treadonly model: string;\n\t\t\treadonly maxOutputTokens: number;\n\t\t\t/** Tool attachments replaced by explicit text placeholders in this provider view. */\n\t\t\treadonly omittedToolImages?: number;\n\t\t\treadonly boundary: \"stream-dispatch\";\n\t  }\n\t| {\n\t\t\treadonly type: \"provider_request_end\";\n\t\t\treadonly requestId: string;\n\t\t\treadonly outcome: \"completed\" | \"error\" | \"aborted\";\n\t\t\treadonly boundary: \"stream-dispatch\";\n\t  };\n"]}

package/dist/provider-request.d.ts

@@ -0,0 +1,17 @@
+import { type Api, type AssistantMessage, type AssistantMessageEventStream, type Context, type Model, type SimpleStreamOptions } from "omk-ai";
+import { type ModelContract } from "./run-model-contract.ts";
+import type { AgentEvent, AgentLoopConfig, StreamFn } from "./types.ts";
+export type { ProviderRequestEvent } from "./provider-request-types.ts";
+/** Pin policy before any lifecycle subscriber can alter caller-owned configuration. */
+export declare function pinProviderConfig(config: AgentLoopConfig, emit: (event: AgentEvent) => Promise<void> | void): Promise<AgentLoopConfig>;
+/** Restrict logical dispatch and attach the supported final-payload checks. */
+export declare function applyModelContract(contract: ModelContract, model: Model<Api>, options: SimpleStreamOptions): SimpleStreamOptions;
+interface ProviderRuntime {
+    readonly signal?: AbortSignal;
+    readonly emit: (event: AgentEvent) => Promise<void> | void;
+    readonly streamFn?: StreamFn;
+    readonly consume: (stream: AssistantMessageEventStream) => Promise<AssistantMessage>;
+}
+/** Emit only bounded dispatch metadata; never payloads, headers, keys, or raw failures. */
+export declare function requestAssistantResponse(context: Context, config: AgentLoopConfig, runtime: ProviderRuntime): Promise<AssistantMessage>;
+//# sourceMappingURL=provider-request.d.ts.map

package/dist/provider-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-request.d.ts","sourceRoot":"","sources":["../src/provider-request.ts"],"names":[],"mappings":"AAAA,OAAO,EACN,KAAK,GAAG,EACR,KAAK,gBAAgB,EACrB,KAAK,2BAA2B,EAChC,KAAK,OAAO,EACZ,KAAK,KAAK,EACV,KAAK,mBAAmB,EAExB,MAAM,QAAQ,CAAC;AAGhB,OAAO,EAEN,KAAK,aAAa,EAGlB,MAAM,yBAAyB,CAAC;AACjC,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAGxE,YAAY,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AAExE,uFAAuF;AACvF,wBAAsB,iBAAiB,CACtC,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,GAC/C,OAAO,CAAC,eAAe,CAAC,CAU1B;AAED,+EAA+E;AAC/E,wBAAgB,kBAAkB,CACjC,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EACjB,OAAO,EAAE,mBAAmB,GAC1B,mBAAmB,CAerB;AAED,UAAU,eAAe;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,EAAE,UAAU,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;IAC3D,QAAQ,CAAC,QAAQ,CAAC,EAAE,QAAQ,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,2BAA2B,KAAK,OAAO,CAAC,gBAAgB,CAAC,CAAC;CACrF;AAED,2FAA2F;AAC3F,wBAAsB,wBAAwB,CAC7C,OAAO,EAAE,OAAO,EAChB,MAAM,EAAE,eAAe,EACvB,OAAO,EAAE,eAAe,GACtB,OAAO,CAAC,gBAAgB,CAAC,CAsE3B","sourcesContent":["import {\n\ttype Api,\n\ttype AssistantMessage,\n\ttype AssistantMessageEventStream,\n\ttype Context,\n\ttype Model,\n\ttype SimpleStreamOptions,\n\tstreamSimple,\n} from \"omk-ai\";\nimport { projectToolImagesForModel } from \"./provider-input.ts\";\nimport { createContractPayloadHook } from \"./provider-payload-contract.ts\";\nimport {\n\tassertModelContract,\n\ttype ModelContract,\n\tModelContractViolation,\n\tsnapshotModelContract,\n} from \"./run-model-contract.ts\";\nimport type { AgentEvent, AgentLoopConfig, StreamFn } from \"./types.ts\";\nimport { getVisionRouteModel } from \"./vision-route.ts\";\n\nexport type { ProviderRequestEvent } from \"./provider-request-types.ts\";\n\n/** Pin policy before any lifecycle subscriber can alter caller-owned configuration. */\nexport async function pinProviderConfig(\n\tconfig: AgentLoopConfig,\n\temit: (event: AgentEvent) => Promise<void> | void,\n): Promise<AgentLoopConfig> {\n\tif (config.modelContract === undefined) return config;\n\ttry {\n\t\treturn { ...config, modelContract: snapshotModelContract(config.modelContract) };\n\t} catch (error) {\n\t\tif (error instanceof ModelContractViolation) {\n\t\t\tawait emit({ type: \"provider_denied\", requestId: crypto.randomUUID(), deniedReason: \"contract-violation\" });\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n/** Restrict logical dispatch and attach the supported final-payload checks. */\nexport function applyModelContract(\n\tcontract: ModelContract,\n\tmodel: Model<Api>,\n\toptions: SimpleStreamOptions,\n): SimpleStreamOptions {\n\tconst maxTokens = options.maxTokens ?? Math.min(model.maxTokens, contract.maxOutputTokens);\n\tassertModelContract(contract, {\n\t\tmodel,\n\t\tprovider: model.provider,\n\t\tauthOrigin: model.provider,\n\t\tthinking: options.reasoning !== undefined,\n\t\tthinkingLevel: options.reasoning ?? \"off\",\n\t\tmaxOutputTokens: maxTokens,\n\t});\n\treturn {\n\t\t...options,\n\t\tmaxTokens,\n\t\tonPayload: createContractPayloadHook(model, maxTokens, options.onPayload),\n\t};\n}\n\ninterface ProviderRuntime {\n\treadonly signal?: AbortSignal;\n\treadonly emit: (event: AgentEvent) => Promise<void> | void;\n\treadonly streamFn?: StreamFn;\n\treadonly consume: (stream: AssistantMessageEventStream) => Promise<AssistantMessage>;\n}\n\n/** Emit only bounded dispatch metadata; never payloads, headers, keys, or raw failures. */\nexport async function requestAssistantResponse(\n\tcontext: Context,\n\tconfig: AgentLoopConfig,\n\truntime: ProviderRuntime,\n): Promise<AssistantMessage> {\n\tconst { signal, emit, consume } = runtime;\n\tconst needsVisionRoute = context.messages.some(\n\t\t(message) =>\n\t\t\t(!config.modelContract || message.role !== \"toolResult\") &&\n\t\t\tArray.isArray(message.content) &&\n\t\t\tmessage.content.some((part) => part.type === \"image\"),\n\t);\n\tconst model =\n\t\tneedsVisionRoute && !(config.model.input ?? []).includes(\"image\")\n\t\t\t? getVisionRouteModel(config.model)\n\t\t\t: config.model;\n\tconst projection = config.modelContract\n\t\t? projectToolImagesForModel(context, model)\n\t\t: { context, omittedToolImages: 0 };\n\tconst changedProvider = model.provider !== config.model.provider;\n\tconst requestId = crypto.randomUUID();\n\tconst { modelContract, ...configured } = config;\n\tlet options: SimpleStreamOptions = configured;\n\ttry {\n\t\tif (signal?.aborted) {\n\t\t\tif (modelContract) await emit({ type: \"provider_denied\", requestId, deniedReason: \"aborted\" });\n\t\t\tsignal.throwIfAborted();\n\t\t}\n\t\tif (modelContract) options = applyModelContract(modelContract, model, configured);\n\t} catch (error) {\n\t\tif (error instanceof ModelContractViolation) {\n\t\t\tawait emit({ type: \"provider_denied\", requestId, deniedReason: \"contract-violation\" });\n\t\t}\n\t\tthrow error;\n\t}\n\tconst key = await config.getApiKey?.(model.provider);\n\tif (signal?.aborted) {\n\t\tif (modelContract) await emit({ type: \"provider_denied\", requestId, deniedReason: \"aborted\" });\n\t\tsignal.throwIfAborted();\n\t}\n\tconst requestOptions: SimpleStreamOptions = {\n\t\t...options,\n\t\tapiKey: key || (changedProvider ? undefined : options.apiKey),\n\t\theaders: changedProvider ? undefined : options.headers,\n\t\tsignal,\n\t};\n\tlet outcome: \"completed\" | \"error\" | \"aborted\" = \"error\";\n\ttry {\n\t\tif (modelContract) {\n\t\t\tawait emit({\n\t\t\t\ttype: \"provider_request\",\n\t\t\t\trequestId,\n\t\t\t\tprovider: model.provider,\n\t\t\t\tmodel: model.id,\n\t\t\t\tmaxOutputTokens: requestOptions.maxTokens ?? modelContract.maxOutputTokens,\n\t\t\t\t...(projection.omittedToolImages > 0 ? { omittedToolImages: projection.omittedToolImages } : {}),\n\t\t\t\tboundary: \"stream-dispatch\",\n\t\t\t});\n\t\t}\n\t\tsignal?.throwIfAborted();\n\t\tconst response = await (runtime.streamFn ?? streamSimple)(model, projection.context, requestOptions);\n\t\tconst message = await consume(response);\n\t\toutcome = message.stopReason === \"aborted\" ? \"aborted\" : message.stopReason === \"error\" ? \"error\" : \"completed\";\n\t\treturn message;\n\t} finally {\n\t\tif (modelContract) {\n\t\t\tawait emit({\n\t\t\t\ttype: \"provider_request_end\",\n\t\t\t\trequestId,\n\t\t\t\toutcome: signal?.aborted ? \"aborted\" : outcome,\n\t\t\t\tboundary: \"stream-dispatch\",\n\t\t\t});\n\t\t}\n\t}\n}\n"]}

package/dist/provider-request.js

@@ -0,0 +1,110 @@
+import { streamSimple, } from "omk-ai";
+import { projectToolImagesForModel } from "./provider-input.js";
+import { createContractPayloadHook } from "./provider-payload-contract.js";
+import { assertModelContract, ModelContractViolation, snapshotModelContract, } from "./run-model-contract.js";
+import { getVisionRouteModel } from "./vision-route.js";
+/** Pin policy before any lifecycle subscriber can alter caller-owned configuration. */
+export async function pinProviderConfig(config, emit) {
+    if (config.modelContract === undefined)
+        return config;
+    try {
+        return { ...config, modelContract: snapshotModelContract(config.modelContract) };
+    }
+    catch (error) {
+        if (error instanceof ModelContractViolation) {
+            await emit({ type: "provider_denied", requestId: crypto.randomUUID(), deniedReason: "contract-violation" });
+        }
+        throw error;
+    }
+}
+/** Restrict logical dispatch and attach the supported final-payload checks. */
+export function applyModelContract(contract, model, options) {
+    const maxTokens = options.maxTokens ?? Math.min(model.maxTokens, contract.maxOutputTokens);
+    assertModelContract(contract, {
+        model,
+        provider: model.provider,
+        authOrigin: model.provider,
+        thinking: options.reasoning !== undefined,
+        thinkingLevel: options.reasoning ?? "off",
+        maxOutputTokens: maxTokens,
+    });
+    return {
+        ...options,
+        maxTokens,
+        onPayload: createContractPayloadHook(model, maxTokens, options.onPayload),
+    };
+}
+/** Emit only bounded dispatch metadata; never payloads, headers, keys, or raw failures. */
+export async function requestAssistantResponse(context, config, runtime) {
+    const { signal, emit, consume } = runtime;
+    const needsVisionRoute = context.messages.some((message) => (!config.modelContract || message.role !== "toolResult") &&
+        Array.isArray(message.content) &&
+        message.content.some((part) => part.type === "image"));
+    const model = needsVisionRoute && !(config.model.input ?? []).includes("image")
+        ? getVisionRouteModel(config.model)
+        : config.model;
+    const projection = config.modelContract
+        ? projectToolImagesForModel(context, model)
+        : { context, omittedToolImages: 0 };
+    const changedProvider = model.provider !== config.model.provider;
+    const requestId = crypto.randomUUID();
+    const { modelContract, ...configured } = config;
+    let options = configured;
+    try {
+        if (signal?.aborted) {
+            if (modelContract)
+                await emit({ type: "provider_denied", requestId, deniedReason: "aborted" });
+            signal.throwIfAborted();
+        }
+        if (modelContract)
+            options = applyModelContract(modelContract, model, configured);
+    }
+    catch (error) {
+        if (error instanceof ModelContractViolation) {
+            await emit({ type: "provider_denied", requestId, deniedReason: "contract-violation" });
+        }
+        throw error;
+    }
+    const key = await config.getApiKey?.(model.provider);
+    if (signal?.aborted) {
+        if (modelContract)
+            await emit({ type: "provider_denied", requestId, deniedReason: "aborted" });
+        signal.throwIfAborted();
+    }
+    const requestOptions = {
+        ...options,
+        apiKey: key || (changedProvider ? undefined : options.apiKey),
+        headers: changedProvider ? undefined : options.headers,
+        signal,
+    };
+    let outcome = "error";
+    try {
+        if (modelContract) {
+            await emit({
+                type: "provider_request",
+                requestId,
+                provider: model.provider,
+                model: model.id,
+                maxOutputTokens: requestOptions.maxTokens ?? modelContract.maxOutputTokens,
+                ...(projection.omittedToolImages > 0 ? { omittedToolImages: projection.omittedToolImages } : {}),
+                boundary: "stream-dispatch",
+            });
+        }
+        signal?.throwIfAborted();
+        const response = await (runtime.streamFn ?? streamSimple)(model, projection.context, requestOptions);
+        const message = await consume(response);
+        outcome = message.stopReason === "aborted" ? "aborted" : message.stopReason === "error" ? "error" : "completed";
+        return message;
+    }
+    finally {
+        if (modelContract) {
+            await emit({
+                type: "provider_request_end",
+                requestId,
+                outcome: signal?.aborted ? "aborted" : outcome,
+                boundary: "stream-dispatch",
+            });
+        }
+    }
+}
+//# sourceMappingURL=provider-request.js.map

package/dist/provider-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-request.js","sourceRoot":"","sources":["../src/provider-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAON,YAAY,GACZ,MAAM,QAAQ,CAAC;AAChB,OAAO,EAAE,yBAAyB,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,yBAAyB,EAAE,MAAM,gCAAgC,CAAC;AAC3E,OAAO,EACN,mBAAmB,EAEnB,sBAAsB,EACtB,qBAAqB,GACrB,MAAM,yBAAyB,CAAC;AAEjC,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAC;AAIxD,uFAAuF;AACvF,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACtC,MAAuB,EACvB,IAAiD,EACtB;IAC3B,IAAI,MAAM,CAAC,aAAa,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IACtD,IAAI,CAAC;QACJ,OAAO,EAAE,GAAG,MAAM,EAAE,aAAa,EAAE,qBAAqB,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,CAAC;QAC7G,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;AAAA,CACD;AAED,+EAA+E;AAC/E,MAAM,UAAU,kBAAkB,CACjC,QAAuB,EACvB,KAAiB,EACjB,OAA4B,EACN;IACtB,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,QAAQ,CAAC,eAAe,CAAC,CAAC;IAC3F,mBAAmB,CAAC,QAAQ,EAAE;QAC7B,KAAK;QACL,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,UAAU,EAAE,KAAK,CAAC,QAAQ;QAC1B,QAAQ,EAAE,OAAO,CAAC,SAAS,KAAK,SAAS;QACzC,aAAa,EAAE,OAAO,CAAC,SAAS,IAAI,KAAK;QACzC,eAAe,EAAE,SAAS;KAC1B,CAAC,CAAC;IACH,OAAO;QACN,GAAG,OAAO;QACV,SAAS;QACT,SAAS,EAAE,yBAAyB,CAAC,KAAK,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,CAAC;KACzE,CAAC;AAAA,CACF;AASD,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAC7C,OAAgB,EAChB,MAAuB,EACvB,OAAwB,EACI;IAC5B,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,OAAO,CAAC;IAC1C,MAAM,gBAAgB,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAC7C,CAAC,OAAO,EAAE,EAAE,CACX,CAAC,CAAC,MAAM,CAAC,aAAa,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,CAAC;QACxD,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC;QAC9B,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,OAAO,CAAC,CACtD,CAAC;IACF,MAAM,KAAK,GACV,gBAAgB,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAChE,CAAC,CAAC,mBAAmB,CAAC,MAAM,CAAC,KAAK,CAAC;QACnC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;IACjB,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa;QACtC,CAAC,CAAC,yBAAyB,CAAC,OAAO,EAAE,KAAK,CAAC;QAC3C,CAAC,CAAC,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,EAAE,CAAC;IACrC,MAAM,eAAe,GAAG,KAAK,CAAC,QAAQ,KAAK,MAAM,CAAC,KAAK,CAAC,QAAQ,CAAC;IACjE,MAAM,SAAS,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC;IACtC,MAAM,EAAE,aAAa,EAAE,GAAG,UAAU,EAAE,GAAG,MAAM,CAAC;IAChD,IAAI,OAAO,GAAwB,UAAU,CAAC;IAC9C,IAAI,CAAC;QACJ,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACrB,IAAI,aAAa;gBAAE,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;YAC/F,MAAM,CAAC,cAAc,EAAE,CAAC;QACzB,CAAC;QACD,IAAI,aAAa;YAAE,OAAO,GAAG,kBAAkB,CAAC,aAAa,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;IACnF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAI,KAAK,YAAY,sBAAsB,EAAE,CAAC;YAC7C,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,EAAE,oBAAoB,EAAE,CAAC,CAAC;QACxF,CAAC;QACD,MAAM,KAAK,CAAC;IACb,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACrD,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;QACrB,IAAI,aAAa;YAAE,MAAM,IAAI,CAAC,EAAE,IAAI,EAAE,iBAAiB,EAAE,SAAS,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC;QAC/F,MAAM,CAAC,cAAc,EAAE,CAAC;IACzB,CAAC;IACD,MAAM,cAAc,GAAwB;QAC3C,GAAG,OAAO;QACV,MAAM,EAAE,GAAG,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;QAC7D,OAAO,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO;QACtD,MAAM;KACN,CAAC;IACF,IAAI,OAAO,GAAsC,OAAO,CAAC;IACzD,IAAI,CAAC;QACJ,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC;gBACV,IAAI,EAAE,kBAAkB;gBACxB,SAAS;gBACT,QAAQ,EAAE,KAAK,CAAC,QAAQ;gBACxB,KAAK,EAAE,KAAK,CAAC,EAAE;gBACf,eAAe,EAAE,cAAc,CAAC,SAAS,IAAI,aAAa,CAAC,eAAe;gBAC1E,GAAG,CAAC,UAAU,CAAC,iBAAiB,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAChG,QAAQ,EAAE,iBAAiB;aAC3B,CAAC,CAAC;QACJ,CAAC;QACD,MAAM,EAAE,cAAc,EAAE,CAAC;QACzB,MAAM,QAAQ,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,IAAI,YAAY,CAAC,CAAC,KAAK,EAAE,UAAU,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;QACrG,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,QAAQ,CAAC,CAAC;QACxC,OAAO,GAAG,OAAO,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC;QAChH,OAAO,OAAO,CAAC;IAChB,CAAC;YAAS,CAAC;QACV,IAAI,aAAa,EAAE,CAAC;YACnB,MAAM,IAAI,CAAC;gBACV,IAAI,EAAE,sBAAsB;gBAC5B,SAAS;gBACT,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO;gBAC9C,QAAQ,EAAE,iBAAiB;aAC3B,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;AAAA,CACD","sourcesContent":["import {\n\ttype Api,\n\ttype AssistantMessage,\n\ttype AssistantMessageEventStream,\n\ttype Context,\n\ttype Model,\n\ttype SimpleStreamOptions,\n\tstreamSimple,\n} from \"omk-ai\";\nimport { projectToolImagesForModel } from \"./provider-input.ts\";\nimport { createContractPayloadHook } from \"./provider-payload-contract.ts\";\nimport {\n\tassertModelContract,\n\ttype ModelContract,\n\tModelContractViolation,\n\tsnapshotModelContract,\n} from \"./run-model-contract.ts\";\nimport type { AgentEvent, AgentLoopConfig, StreamFn } from \"./types.ts\";\nimport { getVisionRouteModel } from \"./vision-route.ts\";\n\nexport type { ProviderRequestEvent } from \"./provider-request-types.ts\";\n\n/** Pin policy before any lifecycle subscriber can alter caller-owned configuration. */\nexport async function pinProviderConfig(\n\tconfig: AgentLoopConfig,\n\temit: (event: AgentEvent) => Promise<void> | void,\n): Promise<AgentLoopConfig> {\n\tif (config.modelContract === undefined) return config;\n\ttry {\n\t\treturn { ...config, modelContract: snapshotModelContract(config.modelContract) };\n\t} catch (error) {\n\t\tif (error instanceof ModelContractViolation) {\n\t\t\tawait emit({ type: \"provider_denied\", requestId: crypto.randomUUID(), deniedReason: \"contract-violation\" });\n\t\t}\n\t\tthrow error;\n\t}\n}\n\n/** Restrict logical dispatch and attach the supported final-payload checks. */\nexport function applyModelContract(\n\tcontract: ModelContract,\n\tmodel: Model<Api>,\n\toptions: SimpleStreamOptions,\n): SimpleStreamOptions {\n\tconst maxTokens = options.maxTokens ?? Math.min(model.maxTokens, contract.maxOutputTokens);\n\tassertModelContract(contract, {\n\t\tmodel,\n\t\tprovider: model.provider,\n\t\tauthOrigin: model.provider,\n\t\tthinking: options.reasoning !== undefined,\n\t\tthinkingLevel: options.reasoning ?? \"off\",\n\t\tmaxOutputTokens: maxTokens,\n\t});\n\treturn {\n\t\t...options,\n\t\tmaxTokens,\n\t\tonPayload: createContractPayloadHook(model, maxTokens, options.onPayload),\n\t};\n}\n\ninterface ProviderRuntime {\n\treadonly signal?: AbortSignal;\n\treadonly emit: (event: AgentEvent) => Promise<void> | void;\n\treadonly streamFn?: StreamFn;\n\treadonly consume: (stream: AssistantMessageEventStream) => Promise<AssistantMessage>;\n}\n\n/** Emit only bounded dispatch metadata; never payloads, headers, keys, or raw failures. */\nexport async function requestAssistantResponse(\n\tcontext: Context,\n\tconfig: AgentLoopConfig,\n\truntime: ProviderRuntime,\n): Promise<AssistantMessage> {\n\tconst { signal, emit, consume } = runtime;\n\tconst needsVisionRoute = context.messages.some(\n\t\t(message) =>\n\t\t\t(!config.modelContract || message.role !== \"toolResult\") &&\n\t\t\tArray.isArray(message.content) &&\n\t\t\tmessage.content.some((part) => part.type === \"image\"),\n\t);\n\tconst model =\n\t\tneedsVisionRoute && !(config.model.input ?? []).includes(\"image\")\n\t\t\t? getVisionRouteModel(config.model)\n\t\t\t: config.model;\n\tconst projection = config.modelContract\n\t\t? projectToolImagesForModel(context, model)\n\t\t: { context, omittedToolImages: 0 };\n\tconst changedProvider = model.provider !== config.model.provider;\n\tconst requestId = crypto.randomUUID();\n\tconst { modelContract, ...configured } = config;\n\tlet options: SimpleStreamOptions = configured;\n\ttry {\n\t\tif (signal?.aborted) {\n\t\t\tif (modelContract) await emit({ type: \"provider_denied\", requestId, deniedReason: \"aborted\" });\n\t\t\tsignal.throwIfAborted();\n\t\t}\n\t\tif (modelContract) options = applyModelContract(modelContract, model, configured);\n\t} catch (error) {\n\t\tif (error instanceof ModelContractViolation) {\n\t\t\tawait emit({ type: \"provider_denied\", requestId, deniedReason: \"contract-violation\" });\n\t\t}\n\t\tthrow error;\n\t}\n\tconst key = await config.getApiKey?.(model.provider);\n\tif (signal?.aborted) {\n\t\tif (modelContract) await emit({ type: \"provider_denied\", requestId, deniedReason: \"aborted\" });\n\t\tsignal.throwIfAborted();\n\t}\n\tconst requestOptions: SimpleStreamOptions = {\n\t\t...options,\n\t\tapiKey: key || (changedProvider ? undefined : options.apiKey),\n\t\theaders: changedProvider ? undefined : options.headers,\n\t\tsignal,\n\t};\n\tlet outcome: \"completed\" | \"error\" | \"aborted\" = \"error\";\n\ttry {\n\t\tif (modelContract) {\n\t\t\tawait emit({\n\t\t\t\ttype: \"provider_request\",\n\t\t\t\trequestId,\n\t\t\t\tprovider: model.provider,\n\t\t\t\tmodel: model.id,\n\t\t\t\tmaxOutputTokens: requestOptions.maxTokens ?? modelContract.maxOutputTokens,\n\t\t\t\t...(projection.omittedToolImages > 0 ? { omittedToolImages: projection.omittedToolImages } : {}),\n\t\t\t\tboundary: \"stream-dispatch\",\n\t\t\t});\n\t\t}\n\t\tsignal?.throwIfAborted();\n\t\tconst response = await (runtime.streamFn ?? streamSimple)(model, projection.context, requestOptions);\n\t\tconst message = await consume(response);\n\t\toutcome = message.stopReason === \"aborted\" ? \"aborted\" : message.stopReason === \"error\" ? \"error\" : \"completed\";\n\t\treturn message;\n\t} finally {\n\t\tif (modelContract) {\n\t\t\tawait emit({\n\t\t\t\ttype: \"provider_request_end\",\n\t\t\t\trequestId,\n\t\t\t\toutcome: signal?.aborted ? \"aborted\" : outcome,\n\t\t\t\tboundary: \"stream-dispatch\",\n\t\t\t});\n\t\t}\n\t}\n}\n"]}

package/dist/run-model-contract.d.ts

@@ -0,0 +1,11 @@
+import type { ModelContract, ModelContractViolationCode, RouteRequest } from "./provider-request-types.ts";
+export type { ModelContract, ModelContractViolationCode, RouteRequest } from "./provider-request-types.ts";
+export declare class ModelContractViolation extends Error {
+    readonly code: ModelContractViolationCode;
+    constructor(code: ModelContractViolationCode);
+}
+/** Compatibility validator: an omitted limit is not evidence of an effective cap. */
+export declare function assertModelContract(contract: ModelContract, request: RouteRequest): void;
+/** Copy only policy fields, never full model metadata or credential-bearing headers. */
+export declare function snapshotModelContract(contract: unknown): ModelContract;
+//# sourceMappingURL=run-model-contract.d.ts.map

package/dist/run-model-contract.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-model-contract.d.ts","sourceRoot":"","sources":["../src/run-model-contract.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACX,aAAa,EACb,0BAA0B,EAE1B,YAAY,EACZ,MAAM,6BAA6B,CAAC;AAErC,YAAY,EAAE,aAAa,EAAE,0BAA0B,EAAE,YAAY,EAAE,MAAM,6BAA6B,CAAC;AAiB3G,qBAAa,sBAAuB,SAAQ,KAAK;IAChD,QAAQ,CAAC,IAAI,EAAE,0BAA0B,CAAC;IAE1C,YAAY,IAAI,EAAE,0BAA0B,EAK3C;CACD;AA4DD,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,aAAa,EAAE,OAAO,EAAE,YAAY,GAAG,IAAI,CAmCxF;AAED,wFAAwF;AACxF,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,OAAO,GAAG,aAAa,CAUtE","sourcesContent":["import { createImmutableSnapshot } from \"./plain-data.ts\";\nimport type {\n\tModelContract,\n\tModelContractViolationCode,\n\tModelIdentity,\n\tRouteRequest,\n} from \"./provider-request-types.ts\";\n\nexport type { ModelContract, ModelContractViolationCode, RouteRequest } from \"./provider-request-types.ts\";\n\nconst MESSAGES: Record<ModelContractViolationCode, string> = {\n\t\"invalid-contract\": \"Invalid model contract shape\",\n\t\"invalid-contract-limit\": \"contract maxOutputTokens must be a positive safe integer\",\n\t\"invalid-request\": \"Invalid model contract request shape\",\n\t\"invalid-request-limit\": \"request maxOutputTokens must be a positive safe integer\",\n\t\"model-not-allowed\": \"Model is not allowed by the model contract\",\n\t\"provider-not-allowed\": \"Provider is not allowed by the model contract\",\n\t\"provider-mismatch\": \"Request provider does not match model provider\",\n\t\"auth-origin-not-allowed\": \"Credential resolver origin is not allowed by the model contract\",\n\t\"thinking-not-allowed\": \"Thinking is not allowed by the model contract\",\n\t\"thinking-level-mismatch\": \"Thinking level does not match the model contract\",\n\t\"output-limit-exceeded\": \"Request output limit exceeds the model contract\",\n};\nconst LEVELS: readonly string[] = [\"off\", \"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\", \"ultra\"];\n\nexport class ModelContractViolation extends Error {\n\treadonly code: ModelContractViolationCode;\n\n\tconstructor(code: ModelContractViolationCode) {\n\t\tconst safeCode = typeof code === \"string\" && Object.hasOwn(MESSAGES, code) ? code : \"invalid-contract\";\n\t\tsuper(MESSAGES[safeCode]);\n\t\tthis.name = \"ModelContractViolation\";\n\t\tthis.code = safeCode;\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isIdentifier(value: unknown): value is string {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\tvalue.length > 0 &&\n\t\tvalue.length <= 256 &&\n\t\tvalue.trim() === value &&\n\t\t!/[\\u0000-\\u001f\\u007f]/u.test(value)\n\t);\n}\n\nfunction isIdentity(value: unknown): value is ModelIdentity {\n\treturn isRecord(value) && isIdentifier(value.provider) && isIdentifier(value.id);\n}\n\nfunction isBoundedList<T>(value: unknown, guard: (entry: unknown) => entry is T): value is readonly T[] {\n\tif (!Array.isArray(value) || value.length < 1 || value.length > 64) return false;\n\t// Array.every skips holes; a sparse allowlist must not silently pass validation.\n\tfor (const entry of value) if (!guard(entry)) return false;\n\treturn true;\n}\n\nfunction validateContract(contract: unknown): asserts contract is ModelContract {\n\tif (!isRecord(contract)) throw new ModelContractViolation(\"invalid-contract\");\n\tif (\n\t\ttypeof contract.maxOutputTokens !== \"number\" ||\n\t\t!Number.isSafeInteger(contract.maxOutputTokens) ||\n\t\tcontract.maxOutputTokens <= 0\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-contract-limit\");\n\t}\n\tif (\n\t\t!isBoundedList(contract.allowedModels, isIdentity) ||\n\t\t!isBoundedList(contract.allowedProviders, isIdentifier) ||\n\t\t!isBoundedList(contract.allowedAuthOrigins, isIdentifier) ||\n\t\ttypeof contract.thinking !== \"boolean\" ||\n\t\tObject.keys(contract).some(\n\t\t\t(key) =>\n\t\t\t\t![\n\t\t\t\t\t\"allowedModels\",\n\t\t\t\t\t\"allowedProviders\",\n\t\t\t\t\t\"allowedAuthOrigins\",\n\t\t\t\t\t\"thinking\",\n\t\t\t\t\t\"maxOutputTokens\",\n\t\t\t\t\t\"thinkingLevel\",\n\t\t\t\t].includes(key),\n\t\t) ||\n\t\t(contract.thinkingLevel !== undefined &&\n\t\t\t(typeof contract.thinkingLevel !== \"string\" || !LEVELS.includes(contract.thinkingLevel))) ||\n\t\t(contract.thinkingLevel !== undefined && contract.thinkingLevel !== \"off\" && !contract.thinking)\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-contract\");\n\t}\n}\n\n/** Compatibility validator: an omitted limit is not evidence of an effective cap. */\nexport function assertModelContract(contract: ModelContract, request: RouteRequest): void {\n\tvalidateContract(contract);\n\tif (\n\t\t!isRecord(request) ||\n\t\t!isIdentity(request.model) ||\n\t\t!isIdentifier(request.provider) ||\n\t\ttypeof request.thinking !== \"boolean\" ||\n\t\t(request.authOrigin !== undefined && !isIdentifier(request.authOrigin)) ||\n\t\t(request.thinkingLevel !== undefined &&\n\t\t\t(!LEVELS.includes(request.thinkingLevel) || (request.thinkingLevel !== \"off\") !== request.thinking))\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-request\");\n\t}\n\tif (\n\t\trequest.maxOutputTokens !== undefined &&\n\t\t(!Number.isSafeInteger(request.maxOutputTokens) || request.maxOutputTokens <= 0)\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-request-limit\");\n\t}\n\tif (request.provider !== request.model.provider) throw new ModelContractViolation(\"provider-mismatch\");\n\tif (!contract.allowedProviders.includes(request.provider)) throw new ModelContractViolation(\"provider-not-allowed\");\n\tif (!contract.allowedModels.some((entry) => entry.provider === request.provider && entry.id === request.model.id)) {\n\t\tthrow new ModelContractViolation(\"model-not-allowed\");\n\t}\n\tif (!contract.allowedAuthOrigins.includes(request.authOrigin ?? request.provider)) {\n\t\tthrow new ModelContractViolation(\"auth-origin-not-allowed\");\n\t}\n\tif (request.thinking && !contract.thinking) throw new ModelContractViolation(\"thinking-not-allowed\");\n\tconst effectiveLevel = request.thinkingLevel ?? \"off\";\n\tif (contract.thinkingLevel !== undefined && contract.thinkingLevel !== effectiveLevel) {\n\t\tthrow new ModelContractViolation(\"thinking-level-mismatch\");\n\t}\n\tif (request.maxOutputTokens !== undefined && request.maxOutputTokens > contract.maxOutputTokens) {\n\t\tthrow new ModelContractViolation(\"output-limit-exceeded\");\n\t}\n}\n\n/** Copy only policy fields, never full model metadata or credential-bearing headers. */\nexport function snapshotModelContract(contract: unknown): ModelContract {\n\tvalidateContract(contract);\n\treturn createImmutableSnapshot({\n\t\tallowedModels: contract.allowedModels.map(({ provider, id }) => ({ provider, id })),\n\t\tallowedProviders: [...contract.allowedProviders],\n\t\tallowedAuthOrigins: [...contract.allowedAuthOrigins],\n\t\tthinking: contract.thinking,\n\t\tmaxOutputTokens: contract.maxOutputTokens,\n\t\t...(contract.thinkingLevel === undefined ? {} : { thinkingLevel: contract.thinkingLevel }),\n\t});\n}\n"]}

package/dist/run-model-contract.js

@@ -0,0 +1,121 @@
+import { createImmutableSnapshot } from "./plain-data.js";
+const MESSAGES = {
+    "invalid-contract": "Invalid model contract shape",
+    "invalid-contract-limit": "contract maxOutputTokens must be a positive safe integer",
+    "invalid-request": "Invalid model contract request shape",
+    "invalid-request-limit": "request maxOutputTokens must be a positive safe integer",
+    "model-not-allowed": "Model is not allowed by the model contract",
+    "provider-not-allowed": "Provider is not allowed by the model contract",
+    "provider-mismatch": "Request provider does not match model provider",
+    "auth-origin-not-allowed": "Credential resolver origin is not allowed by the model contract",
+    "thinking-not-allowed": "Thinking is not allowed by the model contract",
+    "thinking-level-mismatch": "Thinking level does not match the model contract",
+    "output-limit-exceeded": "Request output limit exceeds the model contract",
+};
+const LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh", "max", "ultra"];
+export class ModelContractViolation extends Error {
+    code;
+    constructor(code) {
+        const safeCode = typeof code === "string" && Object.hasOwn(MESSAGES, code) ? code : "invalid-contract";
+        super(MESSAGES[safeCode]);
+        this.name = "ModelContractViolation";
+        this.code = safeCode;
+    }
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isIdentifier(value) {
+    return (typeof value === "string" &&
+        value.length > 0 &&
+        value.length <= 256 &&
+        value.trim() === value &&
+        !/[\u0000-\u001f\u007f]/u.test(value));
+}
+function isIdentity(value) {
+    return isRecord(value) && isIdentifier(value.provider) && isIdentifier(value.id);
+}
+function isBoundedList(value, guard) {
+    if (!Array.isArray(value) || value.length < 1 || value.length > 64)
+        return false;
+    // Array.every skips holes; a sparse allowlist must not silently pass validation.
+    for (const entry of value)
+        if (!guard(entry))
+            return false;
+    return true;
+}
+function validateContract(contract) {
+    if (!isRecord(contract))
+        throw new ModelContractViolation("invalid-contract");
+    if (typeof contract.maxOutputTokens !== "number" ||
+        !Number.isSafeInteger(contract.maxOutputTokens) ||
+        contract.maxOutputTokens <= 0) {
+        throw new ModelContractViolation("invalid-contract-limit");
+    }
+    if (!isBoundedList(contract.allowedModels, isIdentity) ||
+        !isBoundedList(contract.allowedProviders, isIdentifier) ||
+        !isBoundedList(contract.allowedAuthOrigins, isIdentifier) ||
+        typeof contract.thinking !== "boolean" ||
+        Object.keys(contract).some((key) => ![
+            "allowedModels",
+            "allowedProviders",
+            "allowedAuthOrigins",
+            "thinking",
+            "maxOutputTokens",
+            "thinkingLevel",
+        ].includes(key)) ||
+        (contract.thinkingLevel !== undefined &&
+            (typeof contract.thinkingLevel !== "string" || !LEVELS.includes(contract.thinkingLevel))) ||
+        (contract.thinkingLevel !== undefined && contract.thinkingLevel !== "off" && !contract.thinking)) {
+        throw new ModelContractViolation("invalid-contract");
+    }
+}
+/** Compatibility validator: an omitted limit is not evidence of an effective cap. */
+export function assertModelContract(contract, request) {
+    validateContract(contract);
+    if (!isRecord(request) ||
+        !isIdentity(request.model) ||
+        !isIdentifier(request.provider) ||
+        typeof request.thinking !== "boolean" ||
+        (request.authOrigin !== undefined && !isIdentifier(request.authOrigin)) ||
+        (request.thinkingLevel !== undefined &&
+            (!LEVELS.includes(request.thinkingLevel) || (request.thinkingLevel !== "off") !== request.thinking))) {
+        throw new ModelContractViolation("invalid-request");
+    }
+    if (request.maxOutputTokens !== undefined &&
+        (!Number.isSafeInteger(request.maxOutputTokens) || request.maxOutputTokens <= 0)) {
+        throw new ModelContractViolation("invalid-request-limit");
+    }
+    if (request.provider !== request.model.provider)
+        throw new ModelContractViolation("provider-mismatch");
+    if (!contract.allowedProviders.includes(request.provider))
+        throw new ModelContractViolation("provider-not-allowed");
+    if (!contract.allowedModels.some((entry) => entry.provider === request.provider && entry.id === request.model.id)) {
+        throw new ModelContractViolation("model-not-allowed");
+    }
+    if (!contract.allowedAuthOrigins.includes(request.authOrigin ?? request.provider)) {
+        throw new ModelContractViolation("auth-origin-not-allowed");
+    }
+    if (request.thinking && !contract.thinking)
+        throw new ModelContractViolation("thinking-not-allowed");
+    const effectiveLevel = request.thinkingLevel ?? "off";
+    if (contract.thinkingLevel !== undefined && contract.thinkingLevel !== effectiveLevel) {
+        throw new ModelContractViolation("thinking-level-mismatch");
+    }
+    if (request.maxOutputTokens !== undefined && request.maxOutputTokens > contract.maxOutputTokens) {
+        throw new ModelContractViolation("output-limit-exceeded");
+    }
+}
+/** Copy only policy fields, never full model metadata or credential-bearing headers. */
+export function snapshotModelContract(contract) {
+    validateContract(contract);
+    return createImmutableSnapshot({
+        allowedModels: contract.allowedModels.map(({ provider, id }) => ({ provider, id })),
+        allowedProviders: [...contract.allowedProviders],
+        allowedAuthOrigins: [...contract.allowedAuthOrigins],
+        thinking: contract.thinking,
+        maxOutputTokens: contract.maxOutputTokens,
+        ...(contract.thinkingLevel === undefined ? {} : { thinkingLevel: contract.thinkingLevel }),
+    });
+}
+//# sourceMappingURL=run-model-contract.js.map

package/dist/run-model-contract.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-model-contract.js","sourceRoot":"","sources":["../src/run-model-contract.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,iBAAiB,CAAC;AAU1D,MAAM,QAAQ,GAA+C;IAC5D,kBAAkB,EAAE,8BAA8B;IAClD,wBAAwB,EAAE,0DAA0D;IACpF,iBAAiB,EAAE,sCAAsC;IACzD,uBAAuB,EAAE,yDAAyD;IAClF,mBAAmB,EAAE,4CAA4C;IACjE,sBAAsB,EAAE,+CAA+C;IACvE,mBAAmB,EAAE,gDAAgD;IACrE,yBAAyB,EAAE,iEAAiE;IAC5F,sBAAsB,EAAE,+CAA+C;IACvE,yBAAyB,EAAE,kDAAkD;IAC7E,uBAAuB,EAAE,iDAAiD;CAC1E,CAAC;AACF,MAAM,MAAM,GAAsB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;AAEvG,MAAM,OAAO,sBAAuB,SAAQ,KAAK;IACvC,IAAI,CAA6B;IAE1C,YAAY,IAAgC,EAAE;QAC7C,MAAM,QAAQ,GAAG,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,kBAAkB,CAAC;QACvG,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC;QAC1B,IAAI,CAAC,IAAI,GAAG,wBAAwB,CAAC;QACrC,IAAI,CAAC,IAAI,GAAG,QAAQ,CAAC;IAAA,CACrB;CACD;AAED,SAAS,QAAQ,CAAC,KAAc,EAAoC;IACnE,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAAA,CAC5E;AAED,SAAS,YAAY,CAAC,KAAc,EAAmB;IACtD,OAAO,CACN,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,CAAC,MAAM,IAAI,GAAG;QACnB,KAAK,CAAC,IAAI,EAAE,KAAK,KAAK;QACtB,CAAC,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,CACrC,CAAC;AAAA,CACF;AAED,SAAS,UAAU,CAAC,KAAc,EAA0B;IAC3D,OAAO,QAAQ,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,YAAY,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;AAAA,CACjF;AAED,SAAS,aAAa,CAAI,KAAc,EAAE,KAAqC,EAAyB;IACvG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,EAAE;QAAE,OAAO,KAAK,CAAC;IACjF,iFAAiF;IACjF,KAAK,MAAM,KAAK,IAAI,KAAK;QAAE,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC;YAAE,OAAO,KAAK,CAAC;IAC3D,OAAO,IAAI,CAAC;AAAA,CACZ;AAED,SAAS,gBAAgB,CAAC,QAAiB,EAAqC;IAC/E,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;IAC9E,IACC,OAAO,QAAQ,CAAC,eAAe,KAAK,QAAQ;QAC5C,CAAC,MAAM,CAAC,aAAa,CAAC,QAAQ,CAAC,eAAe,CAAC;QAC/C,QAAQ,CAAC,eAAe,IAAI,CAAC,EAC5B,CAAC;QACF,MAAM,IAAI,sBAAsB,CAAC,wBAAwB,CAAC,CAAC;IAC5D,CAAC;IACD,IACC,CAAC,aAAa,CAAC,QAAQ,CAAC,aAAa,EAAE,UAAU,CAAC;QAClD,CAAC,aAAa,CAAC,QAAQ,CAAC,gBAAgB,EAAE,YAAY,CAAC;QACvD,CAAC,aAAa,CAAC,QAAQ,CAAC,kBAAkB,EAAE,YAAY,CAAC;QACzD,OAAO,QAAQ,CAAC,QAAQ,KAAK,SAAS;QACtC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,IAAI,CACzB,CAAC,GAAG,EAAE,EAAE,CACP,CAAC;YACA,eAAe;YACf,kBAAkB;YAClB,oBAAoB;YACpB,UAAU;YACV,iBAAiB;YACjB,eAAe;SACf,CAAC,QAAQ,CAAC,GAAG,CAAC,CAChB;QACD,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS;YACpC,CAAC,OAAO,QAAQ,CAAC,aAAa,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,CAAC;QAC1F,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAC/F,CAAC;QACF,MAAM,IAAI,sBAAsB,CAAC,kBAAkB,CAAC,CAAC;IACtD,CAAC;AAAA,CACD;AAED,qFAAqF;AACrF,MAAM,UAAU,mBAAmB,CAAC,QAAuB,EAAE,OAAqB,EAAQ;IACzF,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,IACC,CAAC,QAAQ,CAAC,OAAO,CAAC;QAClB,CAAC,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC;QAC1B,CAAC,YAAY,CAAC,OAAO,CAAC,QAAQ,CAAC;QAC/B,OAAO,OAAO,CAAC,QAAQ,KAAK,SAAS;QACrC,CAAC,OAAO,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACvE,CAAC,OAAO,CAAC,aAAa,KAAK,SAAS;YACnC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,KAAK,KAAK,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC,EACpG,CAAC;QACF,MAAM,IAAI,sBAAsB,CAAC,iBAAiB,CAAC,CAAC;IACrD,CAAC;IACD,IACC,OAAO,CAAC,eAAe,KAAK,SAAS;QACrC,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,OAAO,CAAC,eAAe,CAAC,IAAI,OAAO,CAAC,eAAe,IAAI,CAAC,CAAC,EAC/E,CAAC;QACF,MAAM,IAAI,sBAAsB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IACvG,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;IACpH,IAAI,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,OAAO,CAAC,QAAQ,IAAI,KAAK,CAAC,EAAE,KAAK,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,EAAE,CAAC;QACnH,MAAM,IAAI,sBAAsB,CAAC,mBAAmB,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,kBAAkB,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,IAAI,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnF,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ;QAAE,MAAM,IAAI,sBAAsB,CAAC,sBAAsB,CAAC,CAAC;IACrG,MAAM,cAAc,GAAG,OAAO,CAAC,aAAa,IAAI,KAAK,CAAC;IACtD,IAAI,QAAQ,CAAC,aAAa,KAAK,SAAS,IAAI,QAAQ,CAAC,aAAa,KAAK,cAAc,EAAE,CAAC;QACvF,MAAM,IAAI,sBAAsB,CAAC,yBAAyB,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,CAAC,eAAe,GAAG,QAAQ,CAAC,eAAe,EAAE,CAAC;QACjG,MAAM,IAAI,sBAAsB,CAAC,uBAAuB,CAAC,CAAC;IAC3D,CAAC;AAAA,CACD;AAED,wFAAwF;AACxF,MAAM,UAAU,qBAAqB,CAAC,QAAiB,EAAiB;IACvE,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IAC3B,OAAO,uBAAuB,CAAC;QAC9B,aAAa,EAAE,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC;QACnF,gBAAgB,EAAE,CAAC,GAAG,QAAQ,CAAC,gBAAgB,CAAC;QAChD,kBAAkB,EAAE,CAAC,GAAG,QAAQ,CAAC,kBAAkB,CAAC;QACpD,QAAQ,EAAE,QAAQ,CAAC,QAAQ;QAC3B,eAAe,EAAE,QAAQ,CAAC,eAAe;QACzC,GAAG,CAAC,QAAQ,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,QAAQ,CAAC,aAAa,EAAE,CAAC;KAC1F,CAAC,CAAC;AAAA,CACH","sourcesContent":["import { createImmutableSnapshot } from \"./plain-data.ts\";\nimport type {\n\tModelContract,\n\tModelContractViolationCode,\n\tModelIdentity,\n\tRouteRequest,\n} from \"./provider-request-types.ts\";\n\nexport type { ModelContract, ModelContractViolationCode, RouteRequest } from \"./provider-request-types.ts\";\n\nconst MESSAGES: Record<ModelContractViolationCode, string> = {\n\t\"invalid-contract\": \"Invalid model contract shape\",\n\t\"invalid-contract-limit\": \"contract maxOutputTokens must be a positive safe integer\",\n\t\"invalid-request\": \"Invalid model contract request shape\",\n\t\"invalid-request-limit\": \"request maxOutputTokens must be a positive safe integer\",\n\t\"model-not-allowed\": \"Model is not allowed by the model contract\",\n\t\"provider-not-allowed\": \"Provider is not allowed by the model contract\",\n\t\"provider-mismatch\": \"Request provider does not match model provider\",\n\t\"auth-origin-not-allowed\": \"Credential resolver origin is not allowed by the model contract\",\n\t\"thinking-not-allowed\": \"Thinking is not allowed by the model contract\",\n\t\"thinking-level-mismatch\": \"Thinking level does not match the model contract\",\n\t\"output-limit-exceeded\": \"Request output limit exceeds the model contract\",\n};\nconst LEVELS: readonly string[] = [\"off\", \"minimal\", \"low\", \"medium\", \"high\", \"xhigh\", \"max\", \"ultra\"];\n\nexport class ModelContractViolation extends Error {\n\treadonly code: ModelContractViolationCode;\n\n\tconstructor(code: ModelContractViolationCode) {\n\t\tconst safeCode = typeof code === \"string\" && Object.hasOwn(MESSAGES, code) ? code : \"invalid-contract\";\n\t\tsuper(MESSAGES[safeCode]);\n\t\tthis.name = \"ModelContractViolation\";\n\t\tthis.code = safeCode;\n\t}\n}\n\nfunction isRecord(value: unknown): value is Record<string, unknown> {\n\treturn typeof value === \"object\" && value !== null && !Array.isArray(value);\n}\n\nfunction isIdentifier(value: unknown): value is string {\n\treturn (\n\t\ttypeof value === \"string\" &&\n\t\tvalue.length > 0 &&\n\t\tvalue.length <= 256 &&\n\t\tvalue.trim() === value &&\n\t\t!/[\\u0000-\\u001f\\u007f]/u.test(value)\n\t);\n}\n\nfunction isIdentity(value: unknown): value is ModelIdentity {\n\treturn isRecord(value) && isIdentifier(value.provider) && isIdentifier(value.id);\n}\n\nfunction isBoundedList<T>(value: unknown, guard: (entry: unknown) => entry is T): value is readonly T[] {\n\tif (!Array.isArray(value) || value.length < 1 || value.length > 64) return false;\n\t// Array.every skips holes; a sparse allowlist must not silently pass validation.\n\tfor (const entry of value) if (!guard(entry)) return false;\n\treturn true;\n}\n\nfunction validateContract(contract: unknown): asserts contract is ModelContract {\n\tif (!isRecord(contract)) throw new ModelContractViolation(\"invalid-contract\");\n\tif (\n\t\ttypeof contract.maxOutputTokens !== \"number\" ||\n\t\t!Number.isSafeInteger(contract.maxOutputTokens) ||\n\t\tcontract.maxOutputTokens <= 0\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-contract-limit\");\n\t}\n\tif (\n\t\t!isBoundedList(contract.allowedModels, isIdentity) ||\n\t\t!isBoundedList(contract.allowedProviders, isIdentifier) ||\n\t\t!isBoundedList(contract.allowedAuthOrigins, isIdentifier) ||\n\t\ttypeof contract.thinking !== \"boolean\" ||\n\t\tObject.keys(contract).some(\n\t\t\t(key) =>\n\t\t\t\t![\n\t\t\t\t\t\"allowedModels\",\n\t\t\t\t\t\"allowedProviders\",\n\t\t\t\t\t\"allowedAuthOrigins\",\n\t\t\t\t\t\"thinking\",\n\t\t\t\t\t\"maxOutputTokens\",\n\t\t\t\t\t\"thinkingLevel\",\n\t\t\t\t].includes(key),\n\t\t) ||\n\t\t(contract.thinkingLevel !== undefined &&\n\t\t\t(typeof contract.thinkingLevel !== \"string\" || !LEVELS.includes(contract.thinkingLevel))) ||\n\t\t(contract.thinkingLevel !== undefined && contract.thinkingLevel !== \"off\" && !contract.thinking)\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-contract\");\n\t}\n}\n\n/** Compatibility validator: an omitted limit is not evidence of an effective cap. */\nexport function assertModelContract(contract: ModelContract, request: RouteRequest): void {\n\tvalidateContract(contract);\n\tif (\n\t\t!isRecord(request) ||\n\t\t!isIdentity(request.model) ||\n\t\t!isIdentifier(request.provider) ||\n\t\ttypeof request.thinking !== \"boolean\" ||\n\t\t(request.authOrigin !== undefined && !isIdentifier(request.authOrigin)) ||\n\t\t(request.thinkingLevel !== undefined &&\n\t\t\t(!LEVELS.includes(request.thinkingLevel) || (request.thinkingLevel !== \"off\") !== request.thinking))\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-request\");\n\t}\n\tif (\n\t\trequest.maxOutputTokens !== undefined &&\n\t\t(!Number.isSafeInteger(request.maxOutputTokens) || request.maxOutputTokens <= 0)\n\t) {\n\t\tthrow new ModelContractViolation(\"invalid-request-limit\");\n\t}\n\tif (request.provider !== request.model.provider) throw new ModelContractViolation(\"provider-mismatch\");\n\tif (!contract.allowedProviders.includes(request.provider)) throw new ModelContractViolation(\"provider-not-allowed\");\n\tif (!contract.allowedModels.some((entry) => entry.provider === request.provider && entry.id === request.model.id)) {\n\t\tthrow new ModelContractViolation(\"model-not-allowed\");\n\t}\n\tif (!contract.allowedAuthOrigins.includes(request.authOrigin ?? request.provider)) {\n\t\tthrow new ModelContractViolation(\"auth-origin-not-allowed\");\n\t}\n\tif (request.thinking && !contract.thinking) throw new ModelContractViolation(\"thinking-not-allowed\");\n\tconst effectiveLevel = request.thinkingLevel ?? \"off\";\n\tif (contract.thinkingLevel !== undefined && contract.thinkingLevel !== effectiveLevel) {\n\t\tthrow new ModelContractViolation(\"thinking-level-mismatch\");\n\t}\n\tif (request.maxOutputTokens !== undefined && request.maxOutputTokens > contract.maxOutputTokens) {\n\t\tthrow new ModelContractViolation(\"output-limit-exceeded\");\n\t}\n}\n\n/** Copy only policy fields, never full model metadata or credential-bearing headers. */\nexport function snapshotModelContract(contract: unknown): ModelContract {\n\tvalidateContract(contract);\n\treturn createImmutableSnapshot({\n\t\tallowedModels: contract.allowedModels.map(({ provider, id }) => ({ provider, id })),\n\t\tallowedProviders: [...contract.allowedProviders],\n\t\tallowedAuthOrigins: [...contract.allowedAuthOrigins],\n\t\tthinking: contract.thinking,\n\t\tmaxOutputTokens: contract.maxOutputTokens,\n\t\t...(contract.thinkingLevel === undefined ? {} : { thinkingLevel: contract.thinkingLevel }),\n\t});\n}\n"]}

package/dist/types.d.ts

@@ -1,5 +1,6 @@
 import type { AssistantMessage, AssistantMessageEvent, ImageContent, Message, Model, SimpleStreamOptions, streamSimple, TextContent, Tool, ToolResultMessage } from "omk-ai";
 import type { Static, TSchema } from "typebox";
+import type { ModelContract, ProviderRequestEvent } from "./provider-request-types.ts";
 /**
  * Stream function used by the agent loop.
  *
@@ -126,6 +127,8 @@ export interface PrepareNextTurnContext extends ShouldStopAfterTurnContext {
 }
 export interface AgentLoopConfig extends SimpleStreamOptions {
     model: Model<any>;
+    /** Optional logical dispatch contract, pinned for the loop invocation. Not a wire attestation. */
+    modelContract?: ModelContract;
     /**
      * Maximum provider turns allowed in one loop invocation.
      *
@@ -573,7 +576,7 @@ export interface AgentContext {
  * part of run settlement. `tool_execution_update` delivery is observation-only:
  * subscriber promises are detached and cannot delay timeout/abort terminality.
  */
-export type AgentEvent = {
+export type AgentEvent = ProviderRequestEvent | {
     type: "agent_start";
 } | {
     type: "agent_end";