system-one 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Luke Ramsden
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,172 @@
+# system-one
+
+Typed decisions from System-1-style models — TypeSafe **Jev** (directly or via **Cloudflare AI Gateway**) and **Laya** (via a bridge you run) — with a plain Promise client and an **Effect-native** service that share one set of question definitions.
+
+`system-one` is a decision API, not a chat SDK. You send **state** and **typed questions**; you get back **typed answers with probabilities**; your code decides what to do. The library never invents a probability, a threshold, a selected level, or a model version it was not given.
+
+```
+pnpm add system-one                       # Promise API, zero runtime deps
+pnpm add effect @effect/platform       # optional, only for system-one/effect
+```
+
+Node ≥ 22.18, ESM only.
+
+## Define questions once
+
+```ts
+import { Question, defineQuestions } from "system-one";
+
+const triage = defineQuestions({
+  urgent: Question.boolean({
+    instructions: "Does this need urgent attention?",
+    criteria: { true: "Time-sensitive harm or an ongoing outage", false: "Routine request" },
+  }),
+  department: Question.choice({
+    instructions: "Which department should handle this?",
+    options: {
+      billing: "Payments, refunds, invoices",
+      technical: "Bugs, outages",
+      sales: "Pricing",
+    },
+  }),
+  frustration: Question.ordinal({
+    instructions: "How frustrated is the customer?",
+    levels: ["Calm", "Frustrated", "Very angry"],
+  }),
+});
+```
+
+Definitions are validated, deep-copied, and frozen. Literal keys are preserved: `answers.department.value` is `"billing" | "technical" | "sales"`.
+
+## Promise API
+
+```ts
+import { createClient } from "system-one";
+import { jev } from "system-one/adapters/typesafe";
+
+const client = createClient({
+  model: jev({ apiKey: process.env.TYPESAFE_API_KEY!, model: "jev-1.13.0" }),
+});
+
+const result = await client.evaluate(
+  { state: { message: "My payouts have failed for three days!" }, questions: triage },
+  { signal: controller.signal, timeoutMs: 10_000 }, // both optional
+);
+
+result.answers.department.value; // "billing" | "technical" | "sales"
+result.answers.department.probabilities; // { billing: 0.87, technical: 0.13, sales: 0 } | undefined
+result.answers.urgent.probabilityTrue; // 0.95 | undefined — you pick the threshold
+result.answers.frustration.expectedIndex; // 1.04 — a position on your scale, NOT a selected level
+result.model; // { adapter: "typesafe", requestedModel: "jev-1.13.0", resolvedModel: "jev-1.13.0" }
+result.usage; // { inputTokens: 426, outputTokens: 73 } | undefined
+```
+
+Need distributions guaranteed? Ask, and the type tightens:
+
+```ts
+const r = await client.evaluate({
+  state,
+  questions: triage,
+  requirements: { probabilities: "required" },
+});
+r.answers.urgent.probabilityTrue; // number (not number | undefined)
+```
+
+If the adapter cannot deliver that, you get `UnsupportedCapability` **before** any network call.
+
+One attempt per `evaluate`, no hidden retries, redirects refused. Cancellation via `AbortSignal` reaches the HTTP request.
+
+## Effect API
+
+```ts
+import { Effect } from "effect";
+import { FetchHttpClient } from "@effect/platform";
+import { System1, layer } from "system-one/effect";
+import { jev } from "system-one/adapters/typesafe";
+
+const program = Effect.gen(function* () {
+  const system1 = yield* System1;
+  return yield* system1.evaluate({ state: { message: "…" }, questions: triage });
+});
+
+const runnable = program.pipe(
+  Effect.provide(layer(jev({ apiKey: "…" }))),
+  Effect.provide(FetchHttpClient.layer), // or any HttpClient — tests inject their own
+);
+```
+
+- Lazy; interruption cancels the in-flight HTTP request.
+- `System1Error` in the error channel; adapter bugs stay defects.
+- Span `system1.evaluate` with `system1.adapter` / `system1.model` attributes.
+- `testLayer({ capabilities, evaluate })` for fixtures — still runs full validation, so tests cannot make invalid shapes look typed.
+
+Swap the model by swapping the layer; the program does not change.
+
+## Adapters
+
+| Import                           | Constructor                                                               | Notes                                                                                                                                                                                                                                                                                                            |
+| -------------------------------- | ------------------------------------------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| `system-one/adapters/typesafe`   | `jev({ apiKey, model?: "jev-latest", endpoint? })`                        | Direct `POST https://api.typesafe.ai/v1/systemone`. Confidence definition `typesafe:distribution-confidence`.                                                                                                                                                                                                    |
+| `system-one/adapters/cloudflare` | `cloudflare({ accountId, apiToken, gatewayId?, model?: "typesafe/jev" })` | Universal `POST …/ai/run` envelope; `gatewayId` → `cf-aig-gateway-id`. Token needs **Workers AI** permission. Classifies code `2021` (no credits/BYOK) as `QuotaExceeded`. **Routing verified; a funded success response has not been observed yet** — see [specs](specs/2026-09-19-cloudflare-route-status.md). |
+| `system-one/adapters/laya`       | `laya({ endpoint, model, apiKey? })`                                      | Talks to **your own bridge** speaking the `system1-laya-v1` contract around `laya.predict()`. There is no public Laya HTTP API — see [specs](specs/2026-09-19-laya-bridge-contract.md).                                                                                                                          |
+
+All endpoints must be HTTPS (HTTP allowed on loopback only). Credentials live in closures; `JSON.stringify(adapter)` never contains them.
+
+Write your own: [docs/writing-an-adapter.md](docs/writing-an-adapter.md).
+
+## Errors
+
+Everything operational is a `System1Error` with a `_tag`:
+
+| `_tag`                  | When                                                      |
+| ----------------------- | --------------------------------------------------------- |
+| `InvalidRequest`        | bad state/definitions/requirements, or provider 400/422   |
+| `UnsupportedCapability` | adapter cannot meet the requested contract                |
+| `AuthenticationError`   | 401/403, Cloudflare `10000`                               |
+| `QuotaExceeded`         | 402, Cloudflare `2021`                                    |
+| `RateLimited`           | 429/529 — `details.retryAfterMs` when the header is valid |
+| `ContextLimitExceeded`  | 413                                                       |
+| `TransportError`        | fetch failure or timeout (fixed message, no leak)         |
+| `InvalidResponse`       | provider output violates the answer contract              |
+| `ProviderError`         | anything else upstream                                    |
+
+Messages are fixed strings; `details` never contains headers, bodies, state, or tokens. Low confidence is a **result**, not an error. Retries are yours to compose (e.g. `Effect.retry` keyed on `_tag`) — repeating inference can be billed again.
+
+## What it deliberately does not do
+
+No chat, streaming, tool calling, batching, caching, routing, or LLM fallback. No truncation, question dropping, or request splitting. No calibration guarantee. No label→probability or probability→label conversion. No cross-provider confidence normalisation. Details: [docs/semantics.md](docs/semantics.md).
+
+## Repository
+
+```
+packages/system1   the published package
+examples/triage    runnable example: same questions through Promise and Effect (`pnpm example`)
+docs/              writing-an-adapter.md, semantics.md, snippets.ts (type-checked)
+specs/             dated design decisions (YYYY-MM-DD-*.md)
+scripts/smoke.mjs  packs the tarball and imports it from a fresh consumer, with and without Effect
+```
+
+```
+pnpm install
+pnpm verify        # check + typecheck + test + build + example + smoke
+```
+
+### Publishing
+
+Releases are tag-driven via [`.github/workflows/publish.yml`](.github/workflows/publish.yml). From a clean, green `master`:
+
+```
+# 1. bump packages/system1/package.json version and add a CHANGELOG.md entry, commit
+# 2. tag with the same semver, prefixed v
+git tag v0.1.0 && git push origin master v0.1.0
+```
+
+The workflow checks the tag matches `package.json`, runs `pnpm verify`, publishes `system-one` to npm with provenance (pre-release tags → `next` dist-tag), and creates a GitHub Release from the matching CHANGELOG section.
+
+Auth is npm **trusted publishing** (OIDC; configure the repo/workflow as a trusted publisher on npmjs.com), or a repository secret `NPM_TOKEN` as fallback.
+
+### Live checks
+
+Tests are offline. Live inference against TypeSafe (needs `TYPESAFE_API_KEY`) and Cloudflare (needs Unified Billing credits or a BYOK key) has **not** been run in this repository and is tracked as blocked, not passed.
+
+MIT © Luke Ramsden

package/dist/adapter-DndZN8Se.d.mts

@@ -0,0 +1,30 @@
+import { a as Capabilities, d as EvaluationRequest, l as DecodedEvaluation } from "./core-DwacbzM7.mjs";
+//#region src/adapter.d.ts
+interface PreparedRequest {
+  readonly url: string;
+  readonly method: "POST";
+  readonly headers: Readonly<Record<string, string>>;
+  readonly body: string;
+}
+interface ReceivedResponse {
+  readonly status: number;
+  readonly headers: Readonly<Record<string, string>>;
+  readonly body: unknown;
+}
+/** Trusted adapter code may throw System1Error; unexpected exceptions remain defects. */
+interface ModelProtocol {
+  readonly id: string;
+  readonly model: string;
+  readonly capabilities: Capabilities;
+  encode(request: EvaluationRequest): PreparedRequest;
+  decode(response: ReceivedResponse, request: EvaluationRequest): DecodedEvaluation;
+}
+declare function defineAdapter(protocol: ModelProtocol): ModelProtocol;
+/** Sanitized generic HTTP classification. Adapters may classify documented provider codes first. */
+declare function checkHttp(response: ReceivedResponse): void;
+/** Reject accidental credential forwarding through redirects and non-HTTP URLs. */
+declare function endpoint(value: string): string;
+declare function bearer(value: string): string;
+//#endregion
+export { checkHttp as a, bearer as i, PreparedRequest as n, defineAdapter as o, ReceivedResponse as r, endpoint as s, ModelProtocol as t };
+//# sourceMappingURL=adapter-DndZN8Se.d.mts.map

package/dist/adapter.d.mts

@@ -0,0 +1,3 @@
+import { E as record, a as Capabilities, d as EvaluationRequest, j as System1Error, l as DecodedEvaluation } from "./core-DwacbzM7.mjs";
+import { a as checkHttp, i as bearer, n as PreparedRequest, o as defineAdapter, r as ReceivedResponse, s as endpoint, t as ModelProtocol } from "./adapter-DndZN8Se.mjs";
+export { type Capabilities, type DecodedEvaluation, type EvaluationRequest, ModelProtocol, PreparedRequest, ReceivedResponse, System1Error, bearer, checkHttp, defineAdapter, endpoint, record };

package/dist/adapter.mjs

@@ -0,0 +1,43 @@
+import { l as System1Error, o as record } from "./core-D7i-WVU7.mjs";
+//#region src/adapter.ts
+function defineAdapter(protocol) {
+	if (!protocol.id.trim() || !protocol.model.trim()) throw new System1Error("InvalidRequest", "Adapter and model identifiers are required");
+	return Object.freeze(protocol);
+}
+/** Sanitized generic HTTP classification. Adapters may classify documented provider codes first. */
+function checkHttp(response) {
+	const { status, headers } = response;
+	if (status >= 200 && status < 300) return;
+	const retry = headers["retry-after"];
+	const seconds = retry === void 0 ? NaN : Number(retry);
+	const delay = retry === void 0 ? NaN : Number.isFinite(seconds) ? seconds * 1e3 : Date.parse(retry) - Date.now();
+	const details = {
+		status,
+		...Number.isFinite(delay) ? { retryAfterMs: Math.max(0, delay) } : {}
+	};
+	throw new System1Error(status === 401 || status === 403 ? "AuthenticationError" : status === 402 ? "QuotaExceeded" : status === 429 || status === 529 ? "RateLimited" : status === 413 ? "ContextLimitExceeded" : status === 400 || status === 422 ? "InvalidRequest" : "ProviderError", `Provider returned HTTP ${status}`, details);
+}
+/** Reject accidental credential forwarding through redirects and non-HTTP URLs. */
+function endpoint(value) {
+	let url;
+	try {
+		url = new URL(value);
+	} catch {
+		throw new System1Error("InvalidRequest", "Invalid endpoint URL");
+	}
+	if (!["https:", "http:"].includes(url.protocol) || url.username || url.password || url.hash) throw new System1Error("InvalidRequest", "Endpoint must be an HTTP URL without embedded credentials or fragment");
+	if (url.protocol === "http:" && ![
+		"localhost",
+		"127.0.0.1",
+		"[::1]"
+	].includes(url.hostname)) throw new System1Error("InvalidRequest", "Use HTTPS except for loopback development servers");
+	return url.toString();
+}
+function bearer(value) {
+	if (!value.trim() || /[\r\n]/.test(value)) throw new System1Error("AuthenticationError", "A valid API credential is required");
+	return `Bearer ${value}`;
+}
+//#endregion
+export { System1Error, bearer, checkHttp, defineAdapter, endpoint, record };
+
+//# sourceMappingURL=adapter.mjs.map

package/dist/adapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.mjs","names":[],"sources":["../src/adapter.ts"],"sourcesContent":["import type { Capabilities, DecodedEvaluation, EvaluationRequest } from \"./core.js\";\nimport { System1Error } from \"./errors.js\";\nexport type { Capabilities, DecodedEvaluation, EvaluationRequest } from \"./core.js\";\nexport { record } from \"./core.js\";\nexport { System1Error } from \"./errors.js\";\n\nexport interface PreparedRequest {\n  readonly url: string;\n  readonly method: \"POST\";\n  readonly headers: Readonly<Record<string, string>>;\n  readonly body: string;\n}\nexport interface ReceivedResponse {\n  readonly status: number;\n  readonly headers: Readonly<Record<string, string>>;\n  readonly body: unknown;\n}\n/** Trusted adapter code may throw System1Error; unexpected exceptions remain defects. */\nexport interface ModelProtocol {\n  readonly id: string;\n  readonly model: string;\n  readonly capabilities: Capabilities;\n  encode(request: EvaluationRequest): PreparedRequest;\n  decode(response: ReceivedResponse, request: EvaluationRequest): DecodedEvaluation;\n}\nexport function defineAdapter(protocol: ModelProtocol): ModelProtocol {\n  if (!protocol.id.trim() || !protocol.model.trim())\n    throw new System1Error(\"InvalidRequest\", \"Adapter and model identifiers are required\");\n  return Object.freeze(protocol);\n}\n\n/** Sanitized generic HTTP classification. Adapters may classify documented provider codes first. */\nexport function checkHttp(response: ReceivedResponse): void {\n  const { status, headers } = response;\n  if (status >= 200 && status < 300) return;\n  const retry = headers[\"retry-after\"];\n  const seconds = retry === undefined ? NaN : Number(retry);\n  const delay =\n    retry === undefined\n      ? NaN\n      : Number.isFinite(seconds)\n        ? seconds * 1000\n        : Date.parse(retry) - Date.now();\n  const details = {\n    status,\n    ...(Number.isFinite(delay) ? { retryAfterMs: Math.max(0, delay) } : {}),\n  };\n  const tag =\n    status === 401 || status === 403\n      ? \"AuthenticationError\"\n      : status === 402\n        ? \"QuotaExceeded\"\n        : status === 429 || status === 529\n          ? \"RateLimited\"\n          : status === 413\n            ? \"ContextLimitExceeded\"\n            : status === 400 || status === 422\n              ? \"InvalidRequest\"\n              : \"ProviderError\";\n  throw new System1Error(tag, `Provider returned HTTP ${status}`, details);\n}\n\n/** Reject accidental credential forwarding through redirects and non-HTTP URLs. */\nexport function endpoint(value: string): string {\n  let url: URL;\n  try {\n    url = new URL(value);\n  } catch {\n    throw new System1Error(\"InvalidRequest\", \"Invalid endpoint URL\");\n  }\n  if (![\"https:\", \"http:\"].includes(url.protocol) || url.username || url.password || url.hash)\n    throw new System1Error(\n      \"InvalidRequest\",\n      \"Endpoint must be an HTTP URL without embedded credentials or fragment\",\n    );\n  if (url.protocol === \"http:\" && ![\"localhost\", \"127.0.0.1\", \"[::1]\"].includes(url.hostname))\n    throw new System1Error(\"InvalidRequest\", \"Use HTTPS except for loopback development servers\");\n  return url.toString();\n}\n\nexport function bearer(value: string): string {\n  if (!value.trim() || /[\\r\\n]/.test(value))\n    throw new System1Error(\"AuthenticationError\", \"A valid API credential is required\");\n  return `Bearer ${value}`;\n}\n"],"mappings":";;AAyBA,SAAgB,cAAc,UAAwC;CACpE,IAAI,CAAC,SAAS,GAAG,KAAK,KAAK,CAAC,SAAS,MAAM,KAAK,GAC9C,MAAM,IAAI,aAAa,kBAAkB,4CAA4C;CACvF,OAAO,OAAO,OAAO,QAAQ;AAC/B;;AAGA,SAAgB,UAAU,UAAkC;CAC1D,MAAM,EAAE,QAAQ,YAAY;CAC5B,IAAI,UAAU,OAAO,SAAS,KAAK;CACnC,MAAM,QAAQ,QAAQ;CACtB,MAAM,UAAU,UAAU,KAAA,IAAY,MAAM,OAAO,KAAK;CACxD,MAAM,QACJ,UAAU,KAAA,IACN,MACA,OAAO,SAAS,OAAO,IACrB,UAAU,MACV,KAAK,MAAM,KAAK,IAAI,KAAK,IAAI;CACrC,MAAM,UAAU;EACd;EACA,GAAI,OAAO,SAAS,KAAK,IAAI,EAAE,cAAc,KAAK,IAAI,GAAG,KAAK,EAAE,IAAI,CAAC;CACvE;CAaA,MAAM,IAAI,aAXR,WAAW,OAAO,WAAW,MACzB,wBACA,WAAW,MACT,kBACA,WAAW,OAAO,WAAW,MAC3B,gBACA,WAAW,MACT,yBACA,WAAW,OAAO,WAAW,MAC3B,mBACA,iBACc,0BAA0B,UAAU,OAAO;AACzE;;AAGA,SAAgB,SAAS,OAAuB;CAC9C,IAAI;CACJ,IAAI;EACF,MAAM,IAAI,IAAI,KAAK;CACrB,QAAQ;EACN,MAAM,IAAI,aAAa,kBAAkB,sBAAsB;CACjE;CACA,IAAI,CAAC,CAAC,UAAU,OAAO,CAAC,CAAC,SAAS,IAAI,QAAQ,KAAK,IAAI,YAAY,IAAI,YAAY,IAAI,MACrF,MAAM,IAAI,aACR,kBACA,uEACF;CACF,IAAI,IAAI,aAAa,WAAW,CAAC;EAAC;EAAa;EAAa;CAAO,CAAC,CAAC,SAAS,IAAI,QAAQ,GACxF,MAAM,IAAI,aAAa,kBAAkB,mDAAmD;CAC9F,OAAO,IAAI,SAAS;AACtB;AAEA,SAAgB,OAAO,OAAuB;CAC5C,IAAI,CAAC,MAAM,KAAK,KAAK,SAAS,KAAK,KAAK,GACtC,MAAM,IAAI,aAAa,uBAAuB,oCAAoC;CACpF,OAAO,UAAU;AACnB"}

package/dist/adapters/cloudflare.d.mts

@@ -0,0 +1,12 @@
+import { t as ModelProtocol } from "../adapter-DndZN8Se.mjs";
+//#region src/adapters/cloudflare.d.ts
+export interface CloudflareOptions {
+  readonly accountId: string;
+  readonly apiToken: string;
+  readonly gatewayId?: string;
+  readonly model?: "typesafe/jev";
+}
+/** The gateway envelope supports many models; this adapter only claims Jev semantics. */
+export declare function cloudflare(options: CloudflareOptions): ModelProtocol;
+//#endregion
+//# sourceMappingURL=cloudflare.d.mts.map

package/dist/adapters/cloudflare.mjs

@@ -0,0 +1,67 @@
+import { l as System1Error, o as record } from "../core-D7i-WVU7.mjs";
+import { bearer, checkHttp, defineAdapter, endpoint } from "../adapter.mjs";
+import { n as encodeQuestions, r as typedCapabilities, t as decodeTyped } from "../typed-decisions-W30cNQUJ.mjs";
+//#region src/adapters/cloudflare.ts
+/** The gateway envelope supports many models; this adapter only claims Jev semantics. */
+function cloudflare(options) {
+	if (!/^[a-f\d]{32}$/i.test(options.accountId)) throw new System1Error("InvalidRequest", "Cloudflare accountId must be 32 hexadecimal characters");
+	if (options.gatewayId !== void 0 && !/^[a-zA-Z0-9_-]+$/.test(options.gatewayId)) throw new System1Error("InvalidRequest", "Invalid gateway identifier");
+	const url = endpoint(`https://api.cloudflare.com/client/v4/accounts/${options.accountId}/ai/run`);
+	const authorization = bearer(options.apiToken);
+	const model = options.model ?? "typesafe/jev";
+	if (model !== "typesafe/jev") throw new System1Error("UnsupportedCapability", "Cloudflare adapter currently supports typesafe/jev only");
+	const headers = {
+		authorization,
+		"content-type": "application/json",
+		...options.gatewayId ? { "cf-aig-gateway-id": options.gatewayId } : {}
+	};
+	return defineAdapter({
+		id: "cloudflare",
+		model,
+		capabilities: typedCapabilities,
+		encode: (request) => ({
+			url,
+			method: "POST",
+			headers,
+			body: JSON.stringify({
+				model,
+				input: {
+					state: request.state,
+					questions: encodeQuestions(request)
+				}
+			})
+		}),
+		decode: (response, request) => {
+			const body = response.body;
+			if (body !== null && typeof body === "object" && !Array.isArray(body)) {
+				const envelope = record(body);
+				if (envelope.success === false) {
+					const codes = (Array.isArray(envelope.errors) ? envelope.errors : []).map((e) => e && typeof e === "object" ? String(e.code) : "");
+					if (codes.includes("2021")) throw new System1Error("QuotaExceeded", "Cloudflare requires credits or provider credentials", {
+						providerCode: "2021",
+						status: response.status
+					});
+					if (codes.includes("10000")) throw new System1Error("AuthenticationError", "Cloudflare authentication or permissions failed", {
+						providerCode: "10000",
+						status: response.status
+					});
+					checkHttp(response);
+					throw new System1Error("ProviderError", "Cloudflare reported an unsuccessful evaluation", { status: response.status });
+				}
+			}
+			checkHttp(response);
+			const envelope = record(body);
+			const payload = Object.hasOwn(envelope, "result") ? envelope.success === true ? envelope.result : void 0 : envelope;
+			const decoded = decodeTyped(payload, request, "typesafe:distribution-confidence");
+			const requestId = response.headers["cf-aig-log-id"] ?? response.headers["cf-ray"];
+			return {
+				...decoded,
+				...requestId ? { requestId } : {}
+			};
+		}
+	});
+}
+//#endregion
+export { cloudflare };
+
+//# sourceMappingURL=cloudflare.mjs.map

package/dist/adapters/cloudflare.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloudflare.mjs","names":[],"sources":["../../src/adapters/cloudflare.ts"],"sourcesContent":["import { bearer, checkHttp, defineAdapter, endpoint } from \"../adapter.js\";\nimport { record } from \"../core.js\";\nimport { System1Error } from \"../errors.js\";\nimport { decodeTyped, encodeQuestions, typedCapabilities } from \"./typed-decisions.js\";\n\nexport interface CloudflareOptions {\n  readonly accountId: string;\n  readonly apiToken: string;\n  readonly gatewayId?: string;\n  readonly model?: \"typesafe/jev\";\n}\n/** The gateway envelope supports many models; this adapter only claims Jev semantics. */\nexport function cloudflare(options: CloudflareOptions) {\n  if (!/^[a-f\\d]{32}$/i.test(options.accountId))\n    throw new System1Error(\n      \"InvalidRequest\",\n      \"Cloudflare accountId must be 32 hexadecimal characters\",\n    );\n  if (options.gatewayId !== undefined && !/^[a-zA-Z0-9_-]+$/.test(options.gatewayId))\n    throw new System1Error(\"InvalidRequest\", \"Invalid gateway identifier\");\n  const url = endpoint(`https://api.cloudflare.com/client/v4/accounts/${options.accountId}/ai/run`);\n  const authorization = bearer(options.apiToken);\n  const model = options.model ?? \"typesafe/jev\";\n  if (model !== \"typesafe/jev\")\n    throw new System1Error(\n      \"UnsupportedCapability\",\n      \"Cloudflare adapter currently supports typesafe/jev only\",\n    );\n  const headers = {\n    authorization,\n    \"content-type\": \"application/json\",\n    ...(options.gatewayId ? { \"cf-aig-gateway-id\": options.gatewayId } : {}),\n  };\n  return defineAdapter({\n    id: \"cloudflare\",\n    model,\n    capabilities: typedCapabilities,\n    encode: (request) => ({\n      url,\n      method: \"POST\",\n      headers,\n      body: JSON.stringify({\n        model,\n        input: { state: request.state, questions: encodeQuestions(request) },\n      }),\n    }),\n    decode: (response, request) => {\n      const body = response.body;\n      if (body !== null && typeof body === \"object\" && !Array.isArray(body)) {\n        const envelope = record(body);\n        if (envelope.success === false) {\n          const errors = Array.isArray(envelope.errors) ? envelope.errors : [];\n          const codes = errors.map((e) =>\n            e && typeof e === \"object\" ? String((e as Record<string, unknown>).code) : \"\",\n          );\n          if (codes.includes(\"2021\"))\n            throw new System1Error(\n              \"QuotaExceeded\",\n              \"Cloudflare requires credits or provider credentials\",\n              { providerCode: \"2021\", status: response.status },\n            );\n          if (codes.includes(\"10000\"))\n            throw new System1Error(\n              \"AuthenticationError\",\n              \"Cloudflare authentication or permissions failed\",\n              { providerCode: \"10000\", status: response.status },\n            );\n          checkHttp(response);\n          throw new System1Error(\n            \"ProviderError\",\n            \"Cloudflare reported an unsuccessful evaluation\",\n            { status: response.status },\n          );\n        }\n      }\n      checkHttp(response);\n      const envelope = record(body);\n      // Cloudflare documents model-native output and also uses API result envelopes.\n      const payload = Object.hasOwn(envelope, \"result\")\n        ? envelope.success === true\n          ? envelope.result\n          : undefined\n        : envelope;\n      const decoded = decodeTyped(payload, request, \"typesafe:distribution-confidence\");\n      const requestId = response.headers[\"cf-aig-log-id\"] ?? response.headers[\"cf-ray\"];\n      return { ...decoded, ...(requestId ? { requestId } : {}) };\n    },\n  });\n}\n"],"mappings":";;;;;AAYA,SAAgB,WAAW,SAA4B;CACrD,IAAI,CAAC,iBAAiB,KAAK,QAAQ,SAAS,GAC1C,MAAM,IAAI,aACR,kBACA,wDACF;CACF,IAAI,QAAQ,cAAc,KAAA,KAAa,CAAC,mBAAmB,KAAK,QAAQ,SAAS,GAC/E,MAAM,IAAI,aAAa,kBAAkB,4BAA4B;CACvE,MAAM,MAAM,SAAS,iDAAiD,QAAQ,UAAU,QAAQ;CAChG,MAAM,gBAAgB,OAAO,QAAQ,QAAQ;CAC7C,MAAM,QAAQ,QAAQ,SAAS;CAC/B,IAAI,UAAU,gBACZ,MAAM,IAAI,aACR,yBACA,yDACF;CACF,MAAM,UAAU;EACd;EACA,gBAAgB;EAChB,GAAI,QAAQ,YAAY,EAAE,qBAAqB,QAAQ,UAAU,IAAI,CAAC;CACxE;CACA,OAAO,cAAc;EACnB,IAAI;EACJ;EACA,cAAc;EACd,SAAS,aAAa;GACpB;GACA,QAAQ;GACR;GACA,MAAM,KAAK,UAAU;IACnB;IACA,OAAO;KAAE,OAAO,QAAQ;KAAO,WAAW,gBAAgB,OAAO;IAAE;GACrE,CAAC;EACH;EACA,SAAS,UAAU,YAAY;GAC7B,MAAM,OAAO,SAAS;GACtB,IAAI,SAAS,QAAQ,OAAO,SAAS,YAAY,CAAC,MAAM,QAAQ,IAAI,GAAG;IACrE,MAAM,WAAW,OAAO,IAAI;IAC5B,IAAI,SAAS,YAAY,OAAO;KAE9B,MAAM,SADS,MAAM,QAAQ,SAAS,MAAM,IAAI,SAAS,SAAS,CAAC,EAAA,CAC9C,KAAK,MACxB,KAAK,OAAO,MAAM,WAAW,OAAQ,EAA8B,IAAI,IAAI,EAC7E;KACA,IAAI,MAAM,SAAS,MAAM,GACvB,MAAM,IAAI,aACR,iBACA,uDACA;MAAE,cAAc;MAAQ,QAAQ,SAAS;KAAO,CAClD;KACF,IAAI,MAAM,SAAS,OAAO,GACxB,MAAM,IAAI,aACR,uBACA,mDACA;MAAE,cAAc;MAAS,QAAQ,SAAS;KAAO,CACnD;KACF,UAAU,QAAQ;KAClB,MAAM,IAAI,aACR,iBACA,kDACA,EAAE,QAAQ,SAAS,OAAO,CAC5B;IACF;GACF;GACA,UAAU,QAAQ;GAClB,MAAM,WAAW,OAAO,IAAI;GAE5B,MAAM,UAAU,OAAO,OAAO,UAAU,QAAQ,IAC5C,SAAS,YAAY,OACnB,SAAS,SACT,KAAA,IACF;GACJ,MAAM,UAAU,YAAY,SAAS,SAAS,kCAAkC;GAChF,MAAM,YAAY,SAAS,QAAQ,oBAAoB,SAAS,QAAQ;GACxE,OAAO;IAAE,GAAG;IAAS,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;GAAG;EAC3D;CACF,CAAC;AACH"}

package/dist/adapters/laya.d.mts

@@ -0,0 +1,12 @@
+import { t as ModelProtocol } from "../adapter-DndZN8Se.mjs";
+//#region src/adapters/laya.d.ts
+export interface LayaOptions {
+  /** Full URL of your explicitly compatible bridge, not a Hugging Face inference URL. */
+  readonly endpoint: string;
+  readonly model: string;
+  readonly apiKey?: string;
+}
+/** Opt-in system1 Laya bridge v1 contract. No public hosted Laya API is assumed. */
+export declare function laya(options: LayaOptions): ModelProtocol;
+//#endregion
+//# sourceMappingURL=laya.d.mts.map

package/dist/adapters/laya.mjs

@@ -0,0 +1,36 @@
+import { bearer, checkHttp, defineAdapter, endpoint } from "../adapter.mjs";
+import { n as encodeQuestions, r as typedCapabilities, t as decodeTyped } from "../typed-decisions-W30cNQUJ.mjs";
+//#region src/adapters/laya.ts
+/** Opt-in system1 Laya bridge v1 contract. No public hosted Laya API is assumed. */
+function laya(options) {
+	const url = endpoint(options.endpoint);
+	const headers = {
+		"content-type": "application/json",
+		...options.apiKey ? { authorization: bearer(options.apiKey) } : {}
+	};
+	const model = options.model;
+	return defineAdapter({
+		id: "laya-bridge-v1",
+		model,
+		capabilities: typedCapabilities,
+		encode: (request) => ({
+			url,
+			method: "POST",
+			headers,
+			body: JSON.stringify({
+				protocol: "system1-laya-v1",
+				model,
+				state: request.state,
+				questions: encodeQuestions(request)
+			})
+		}),
+		decode: (response, request) => {
+			checkHttp(response);
+			return decodeTyped(response.body, request, "laya:reported-confidence");
+		}
+	});
+}
+//#endregion
+export { laya };
+
+//# sourceMappingURL=laya.mjs.map

package/dist/adapters/laya.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"laya.mjs","names":[],"sources":["../../src/adapters/laya.ts"],"sourcesContent":["import { bearer, checkHttp, defineAdapter, endpoint } from \"../adapter.js\";\nimport { decodeTyped, encodeQuestions, typedCapabilities } from \"./typed-decisions.js\";\n\nexport interface LayaOptions {\n  /** Full URL of your explicitly compatible bridge, not a Hugging Face inference URL. */\n  readonly endpoint: string;\n  readonly model: string;\n  readonly apiKey?: string;\n}\n/** Opt-in system1 Laya bridge v1 contract. No public hosted Laya API is assumed. */\nexport function laya(options: LayaOptions) {\n  const url = endpoint(options.endpoint);\n  const headers = {\n    \"content-type\": \"application/json\",\n    ...(options.apiKey ? { authorization: bearer(options.apiKey) } : {}),\n  };\n  const model = options.model;\n  return defineAdapter({\n    id: \"laya-bridge-v1\",\n    model,\n    capabilities: typedCapabilities,\n    encode: (request) => ({\n      url,\n      method: \"POST\",\n      headers,\n      body: JSON.stringify({\n        protocol: \"system1-laya-v1\",\n        model,\n        state: request.state,\n        questions: encodeQuestions(request),\n      }),\n    }),\n    decode: (response, request) => {\n      checkHttp(response);\n      return decodeTyped(response.body, request, \"laya:reported-confidence\");\n    },\n  });\n}\n"],"mappings":";;;;AAUA,SAAgB,KAAK,SAAsB;CACzC,MAAM,MAAM,SAAS,QAAQ,QAAQ;CACrC,MAAM,UAAU;EACd,gBAAgB;EAChB,GAAI,QAAQ,SAAS,EAAE,eAAe,OAAO,QAAQ,MAAM,EAAE,IAAI,CAAC;CACpE;CACA,MAAM,QAAQ,QAAQ;CACtB,OAAO,cAAc;EACnB,IAAI;EACJ;EACA,cAAc;EACd,SAAS,aAAa;GACpB;GACA,QAAQ;GACR;GACA,MAAM,KAAK,UAAU;IACnB,UAAU;IACV;IACA,OAAO,QAAQ;IACf,WAAW,gBAAgB,OAAO;GACpC,CAAC;EACH;EACA,SAAS,UAAU,YAAY;GAC7B,UAAU,QAAQ;GAClB,OAAO,YAAY,SAAS,MAAM,SAAS,0BAA0B;EACvE;CACF,CAAC;AACH"}

package/dist/adapters/typesafe.d.mts

@@ -0,0 +1,11 @@
+import { t as ModelProtocol } from "../adapter-DndZN8Se.mjs";
+//#region src/adapters/typesafe.d.ts
+export interface JevOptions {
+  readonly apiKey: string;
+  readonly model?: string;
+  /** Full native endpoint, for explicitly trusted compatible services. */
+  readonly endpoint?: string;
+}
+export declare function jev(options: JevOptions): ModelProtocol;
+//#endregion
+//# sourceMappingURL=typesafe.d.mts.map

package/dist/adapters/typesafe.mjs

@@ -0,0 +1,39 @@
+import { bearer, checkHttp, defineAdapter, endpoint } from "../adapter.mjs";
+import { n as encodeQuestions, r as typedCapabilities, t as decodeTyped } from "../typed-decisions-W30cNQUJ.mjs";
+//#region src/adapters/typesafe.ts
+function jev(options) {
+	const url = endpoint(options.endpoint ?? "https://api.typesafe.ai/v1/systemone");
+	const authorization = bearer(options.apiKey);
+	const model = options.model ?? "jev-latest";
+	return defineAdapter({
+		id: "typesafe",
+		model,
+		capabilities: typedCapabilities,
+		encode: (request) => ({
+			url,
+			method: "POST",
+			headers: {
+				authorization,
+				"content-type": "application/json"
+			},
+			body: JSON.stringify({
+				model,
+				state: request.state,
+				questions: encodeQuestions(request)
+			})
+		}),
+		decode: (response, request) => {
+			checkHttp(response);
+			const result = decodeTyped(response.body, request, "typesafe:distribution-confidence");
+			const requestId = response.headers["x-request-id"];
+			return {
+				...result,
+				...requestId ? { requestId } : {}
+			};
+		}
+	});
+}
+//#endregion
+export { jev };
+
+//# sourceMappingURL=typesafe.mjs.map

package/dist/adapters/typesafe.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"typesafe.mjs","names":[],"sources":["../../src/adapters/typesafe.ts"],"sourcesContent":["import { bearer, checkHttp, defineAdapter, endpoint } from \"../adapter.js\";\nimport { decodeTyped, encodeQuestions, typedCapabilities } from \"./typed-decisions.js\";\n\nexport interface JevOptions {\n  readonly apiKey: string;\n  readonly model?: string;\n  /** Full native endpoint, for explicitly trusted compatible services. */\n  readonly endpoint?: string;\n}\nexport function jev(options: JevOptions) {\n  const url = endpoint(options.endpoint ?? \"https://api.typesafe.ai/v1/systemone\");\n  const authorization = bearer(options.apiKey);\n  const model = options.model ?? \"jev-latest\";\n  return defineAdapter({\n    id: \"typesafe\",\n    model,\n    capabilities: typedCapabilities,\n    encode: (request) => ({\n      url,\n      method: \"POST\",\n      headers: { authorization, \"content-type\": \"application/json\" },\n      body: JSON.stringify({ model, state: request.state, questions: encodeQuestions(request) }),\n    }),\n    decode: (response, request) => {\n      checkHttp(response);\n      const result = decodeTyped(response.body, request, \"typesafe:distribution-confidence\");\n      const requestId = response.headers[\"x-request-id\"];\n      return { ...result, ...(requestId ? { requestId } : {}) };\n    },\n  });\n}\n"],"mappings":";;;AASA,SAAgB,IAAI,SAAqB;CACvC,MAAM,MAAM,SAAS,QAAQ,YAAY,sCAAsC;CAC/E,MAAM,gBAAgB,OAAO,QAAQ,MAAM;CAC3C,MAAM,QAAQ,QAAQ,SAAS;CAC/B,OAAO,cAAc;EACnB,IAAI;EACJ;EACA,cAAc;EACd,SAAS,aAAa;GACpB;GACA,QAAQ;GACR,SAAS;IAAE;IAAe,gBAAgB;GAAmB;GAC7D,MAAM,KAAK,UAAU;IAAE;IAAO,OAAO,QAAQ;IAAO,WAAW,gBAAgB,OAAO;GAAE,CAAC;EAC3F;EACA,SAAS,UAAU,YAAY;GAC7B,UAAU,QAAQ;GAClB,MAAM,SAAS,YAAY,SAAS,MAAM,SAAS,kCAAkC;GACrF,MAAM,YAAY,SAAS,QAAQ;GACnC,OAAO;IAAE,GAAG;IAAQ,GAAI,YAAY,EAAE,UAAU,IAAI,CAAC;GAAG;EAC1D;CACF,CAAC;AACH"}