veto-sdk 2.5.1 → 2.7.0

package/dist/custom/providers/openai.js

@@ -1,47 +1,46 @@
-/**
- * OpenAI provider adapter for custom validation.
- *
- * @module custom/providers/openai
- */
-import { CustomError } from '../types.js';
-/**
- * Call OpenAI API with the given prompt.
- *
- * @param messages - Provider-specific message structure
- * @param config - Resolved custom configuration
- * @param logger - Logger instance
- * @returns Raw text response from OpenAI
- */
-export async function callOpenAI(messages, config, logger) {
+import { CustomError, CustomProviderPackageError } from '../types.js';
+import { withProviderRetry } from './utils.js';
+async function loadOpenAI() {
     try {
-        const OpenAI = (await import('openai')).default;
-        const client = new OpenAI({
-            apiKey: config.apiKey,
-            baseURL: config.baseUrl,
-        });
-        logger.debug('Calling OpenAI API', {
-            model: config.model,
-            temperature: config.temperature,
-            maxTokens: config.maxTokens,
-        });
-        const response = await client.chat.completions.create({
-            model: config.model,
-            messages: messages.messages,
-            temperature: config.temperature,
-            max_tokens: config.maxTokens,
-            response_format: { type: 'json_object' }, // Force JSON output
-        });
-        const content = response.choices[0]?.message?.content;
-        if (!content) {
-            throw new CustomError('Empty response from OpenAI');
-        }
-        return content;
+        const module = await import('openai');
+        return module.default;
     }
     catch (error) {
-        if (error instanceof CustomError) {
-            throw error;
-        }
-        throw new CustomError(`OpenAI API call failed: ${error instanceof Error ? error.message : String(error)}`, error instanceof Error ? error : undefined);
+        throw new CustomProviderPackageError('openai', 'openai', error instanceof Error ? error : undefined);
+    }
+}
+export async function callOpenAI(messages, config, logger) {
+    const OpenAI = await loadOpenAI();
+    const client = new OpenAI({
+        apiKey: config.apiKey,
+        baseURL: config.baseUrl,
+        timeout: config.timeout,
+        maxRetries: 0,
+    });
+    logger.debug('Calling OpenAI API', {
+        model: config.model,
+        temperature: config.temperature,
+        maxTokens: config.maxTokens,
+        timeout: config.timeout,
+    });
+    const response = await withProviderRetry(() => client.chat.completions.create({
+        model: config.model,
+        messages: messages.messages ?? [],
+        temperature: config.temperature,
+        max_tokens: config.maxTokens,
+        response_format: { type: 'json_object' },
+    }, {
+        timeout: config.timeout,
+        maxRetries: 0,
+    }), {
+        providerLabel: 'OpenAI',
+        timeoutMs: config.timeout,
+        logger,
+    });
+    const content = response.choices[0]?.message?.content;
+    if (!content) {
+        throw new CustomError('Empty response from OpenAI');
     }
+    return content;
 }
 //# sourceMappingURL=openai.js.map

package/dist/custom/providers/openai.js.map

@@ -1 +1 @@
-{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/custom/providers/openai.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAKH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA0B,EAC1B,MAA4B,EAC5B,MAAc;IAEd,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,CAAC,MAAM,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;QAChD,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;YACxB,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,OAAO,EAAE,MAAM,CAAC,OAAO;SACxB,CAAC,CAAC;QAEH,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;YACjC,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;SAC5B,CAAC,CAAC;QAEH,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC;YACpD,KAAK,EAAE,MAAM,CAAC,KAAK;YACnB,QAAQ,EAAE,QAAQ,CAAC,QAAgB;YACnC,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;YAC5B,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,oBAAoB;SAC/D,CAAC,CAAC;QAEH,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;QACtD,IAAI,CAAC,OAAO,EAAE,CAAC;YACb,MAAM,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC;QACtD,CAAC;QAED,OAAO,OAAO,CAAC;IACjB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,WAAW,EAAE,CAAC;YACjC,MAAM,KAAK,CAAC;QACd,CAAC;QAED,MAAM,IAAI,WAAW,CACnB,2BAA2B,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,EACnF,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC"}
+{"version":3,"file":"openai.js","sourceRoot":"","sources":["../../../src/custom/providers/openai.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,MAAM,aAAa,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AA4B/C,KAAK,UAAU,UAAU;IACvB,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,QAAQ,CAA8C,CAAC;QACnF,OAAO,MAAM,CAAC,OAAO,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,0BAA0B,CAClC,QAAQ,EACR,QAAQ,EACR,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAC3C,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,QAA0B,EAC1B,MAA4B,EAC5B,MAAc;IAEd,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;IAClC,MAAM,MAAM,GAAG,IAAI,MAAM,CAAC;QACxB,MAAM,EAAE,MAAM,CAAC,MAAM;QACrB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,CAAC;KACd,CAAC,CAAC;IAEH,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;QACjC,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,MAAM,CAAC,OAAO;KACxB,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CACtC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,MAAM,CAClC;QACE,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,QAAQ,EAAE,QAAQ,CAAC,QAAQ,IAAI,EAAE;QACjC,WAAW,EAAE,MAAM,CAAC,WAAW;QAC/B,UAAU,EAAE,MAAM,CAAC,SAAS;QAC5B,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE;KACzC,EACD;QACE,OAAO,EAAE,MAAM,CAAC,OAAO;QACvB,UAAU,EAAE,CAAC;KACd,CACF,EACD;QACE,aAAa,EAAE,QAAQ;QACvB,SAAS,EAAE,MAAM,CAAC,OAAO;QACzB,MAAM;KACP,CACF,CAAC;IAEF,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC;IACtD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,4BAA4B,CAAC,CAAC;IACtD,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/dist/custom/providers/utils.d.ts

@@ -0,0 +1,10 @@
+import type { Logger } from '../../utils/logger.js';
+export interface ProviderRetryOptions {
+    providerLabel: string;
+    timeoutMs: number;
+    logger: Logger;
+    maxRetries?: number;
+    retryDelayMs?: number;
+}
+export declare function withProviderRetry<T>(operation: () => Promise<T>, options: ProviderRetryOptions): Promise<T>;
+//# sourceMappingURL=utils.d.ts.map

package/dist/custom/providers/utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.d.ts","sourceRoot":"","sources":["../../../src/custom/providers/utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAyBpD,MAAM,WAAW,oBAAoB;IACnC,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAwID,wBAAsB,iBAAiB,CAAC,CAAC,EACvC,SAAS,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAC3B,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,CAAC,CAAC,CAgCZ"}

package/dist/custom/providers/utils.js

@@ -0,0 +1,130 @@
+import { CustomError } from '../types.js';
+const DEFAULT_MAX_RETRIES = 2;
+const DEFAULT_RETRY_DELAY_MS = 100;
+const TRANSIENT_NETWORK_CODES = new Set([
+    'ETIMEDOUT',
+    'ECONNRESET',
+    'ECONNREFUSED',
+    'EAI_AGAIN',
+    'ENOTFOUND',
+    'UND_ERR_CONNECT_TIMEOUT',
+    'APIConnectionError',
+    'APIConnectionTimeoutError',
+]);
+function getErrorRecord(error) {
+    if (!error || typeof error !== 'object') {
+        return {};
+    }
+    return error;
+}
+function getStatus(error) {
+    const record = getErrorRecord(error);
+    const status = record.status ?? record.statusCode;
+    if (typeof status === 'number') {
+        return status;
+    }
+    const response = record.response;
+    if (response && typeof response === 'object') {
+        const responseStatus = response.status;
+        if (typeof responseStatus === 'number') {
+            return responseStatus;
+        }
+    }
+    return undefined;
+}
+function getCode(error) {
+    const record = getErrorRecord(error);
+    const code = record.code ?? record.name ?? record.type;
+    return typeof code === 'string' ? code : undefined;
+}
+function getMessage(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+function isTimeoutError(error, code) {
+    const message = getMessage(error).toLowerCase();
+    const normalizedCode = code?.toLowerCase() ?? '';
+    return normalizedCode.includes('timeout')
+        || normalizedCode === 'etimedout'
+        || normalizedCode === 'aborterror'
+        || message.includes('timed out')
+        || message.includes('timeout');
+}
+function isNetworkError(error, code) {
+    if (code && TRANSIENT_NETWORK_CODES.has(code)) {
+        return true;
+    }
+    const message = getMessage(error).toLowerCase();
+    return message.includes('fetch failed')
+        || message.includes('network')
+        || message.includes('socket hang up')
+        || message.includes('connection reset');
+}
+function classifyProviderError(error) {
+    const status = getStatus(error);
+    const code = getCode(error);
+    if (isTimeoutError(error, code)) {
+        return { kind: 'timeout', retryable: true, status, code };
+    }
+    if (status === 401 || status === 403) {
+        return { kind: 'auth', retryable: false, status, code };
+    }
+    if (status === 429) {
+        return { kind: 'rate_limit', retryable: true, status, code };
+    }
+    if (status !== undefined && status >= 500) {
+        return { kind: 'server', retryable: true, status, code };
+    }
+    if (isNetworkError(error, code)) {
+        return { kind: 'network', retryable: true, status, code };
+    }
+    return { kind: 'other', retryable: false, status, code };
+}
+function buildProviderError(error, classification, providerLabel, timeoutMs, attempts) {
+    const cause = error instanceof Error ? error : undefined;
+    const attemptSuffix = attempts > 1 ? ` after ${attempts} attempts` : '';
+    switch (classification.kind) {
+        case 'timeout':
+            return new CustomError(`${providerLabel} request timed out after ${timeoutMs}ms${attemptSuffix}.`, cause);
+        case 'auth':
+            return new CustomError(`${providerLabel} authentication failed with status ${classification.status}. Check the configured API key and provider permissions.`, cause);
+        case 'rate_limit':
+            return new CustomError(`${providerLabel} rate limited the request with status 429${attemptSuffix}.`, cause);
+        case 'server':
+            return new CustomError(`${providerLabel} provider server error with status ${classification.status}${attemptSuffix}.`, cause);
+        case 'network':
+            return new CustomError(`${providerLabel} transient network error${attemptSuffix}: ${getMessage(error)}`, cause);
+        case 'other':
+            return new CustomError(`${providerLabel} API call failed: ${getMessage(error)}`, cause);
+    }
+}
+function delay(milliseconds) {
+    return new Promise((resolve) => {
+        setTimeout(resolve, milliseconds);
+    });
+}
+export async function withProviderRetry(operation, options) {
+    const maxRetries = options.maxRetries ?? DEFAULT_MAX_RETRIES;
+    const retryDelayMs = options.retryDelayMs ?? DEFAULT_RETRY_DELAY_MS;
+    let attempt = 0;
+    while (true) {
+        try {
+            return await operation();
+        }
+        catch (error) {
+            const classification = classifyProviderError(error);
+            const attempts = attempt + 1;
+            if (!classification.retryable || attempt >= maxRetries) {
+                throw buildProviderError(error, classification, options.providerLabel, options.timeoutMs, attempts);
+            }
+            options.logger.warn(`${options.providerLabel} request failed, retrying`, {
+                attempt: attempts,
+                maxRetries,
+                status: classification.status,
+                code: classification.code,
+            });
+            attempt += 1;
+            await delay(retryDelayMs);
+        }
+    }
+}
+//# sourceMappingURL=utils.js.map

package/dist/custom/providers/utils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"utils.js","sourceRoot":"","sources":["../../../src/custom/providers/utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAE1C,MAAM,mBAAmB,GAAG,CAAC,CAAC;AAC9B,MAAM,sBAAsB,GAAG,GAAG,CAAC;AACnC,MAAM,uBAAuB,GAAG,IAAI,GAAG,CAAC;IACtC,WAAW;IACX,YAAY;IACZ,cAAc;IACd,WAAW;IACX,WAAW;IACX,yBAAyB;IACzB,oBAAoB;IACpB,2BAA2B;CAC5B,CAAC,CAAC;AAmBH,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,EAAE,CAAC;IACZ,CAAC;IACD,OAAO,KAAgC,CAAC;AAC1C,CAAC;AAED,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,UAAU,CAAC;IAClD,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC/B,OAAO,MAAM,CAAC;IAChB,CAAC;IAED,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,IAAI,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAC7C,MAAM,cAAc,GAAI,QAAoC,CAAC,MAAM,CAAC;QACpE,IAAI,OAAO,cAAc,KAAK,QAAQ,EAAE,CAAC;YACvC,OAAO,cAAc,CAAC;QACxB,CAAC;IACH,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,OAAO,CAAC,KAAc;IAC7B,MAAM,MAAM,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IACrC,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC;IACvD,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED,SAAS,UAAU,CAAC,KAAc;IAChC,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAa;IACnD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,MAAM,cAAc,GAAG,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACjD,OAAO,cAAc,CAAC,QAAQ,CAAC,SAAS,CAAC;WACpC,cAAc,KAAK,WAAW;WAC9B,cAAc,KAAK,YAAY;WAC/B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;WAC7B,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;AACnC,CAAC;AAED,SAAS,cAAc,CAAC,KAAc,EAAE,IAAa;IACnD,IAAI,IAAI,IAAI,uBAAuB,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IAChD,OAAO,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC;WAClC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAC;WAC3B,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC;WAClC,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,MAAM,MAAM,GAAG,SAAS,CAAC,KAAK,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC;IAE5B,IAAI,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACrC,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC/D,CAAC;IAED,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,IAAI,GAAG,EAAE,CAAC;QAC1C,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC3D,CAAC;IAED,IAAI,cAAc,CAAC,KAAK,EAAE,IAAI,CAAC,EAAE,CAAC;QAChC,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IAC5D,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAC3D,CAAC;AAED,SAAS,kBAAkB,CACzB,KAAc,EACd,cAA2C,EAC3C,aAAqB,EACrB,SAAiB,EACjB,QAAgB;IAEhB,MAAM,KAAK,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACzD,MAAM,aAAa,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,CAAC,UAAU,QAAQ,WAAW,CAAC,CAAC,CAAC,EAAE,CAAC;IAExE,QAAQ,cAAc,CAAC,IAAI,EAAE,CAAC;QAC5B,KAAK,SAAS;YACZ,OAAO,IAAI,WAAW,CACpB,GAAG,aAAa,4BAA4B,SAAS,KAAK,aAAa,GAAG,EAC1E,KAAK,CACN,CAAC;QACJ,KAAK,MAAM;YACT,OAAO,IAAI,WAAW,CACpB,GAAG,aAAa,sCAAsC,cAAc,CAAC,MAAM,0DAA0D,EACrI,KAAK,CACN,CAAC;QACJ,KAAK,YAAY;YACf,OAAO,IAAI,WAAW,CACpB,GAAG,aAAa,4CAA4C,aAAa,GAAG,EAC5E,KAAK,CACN,CAAC;QACJ,KAAK,QAAQ;YACX,OAAO,IAAI,WAAW,CACpB,GAAG,aAAa,sCAAsC,cAAc,CAAC,MAAM,GAAG,aAAa,GAAG,EAC9F,KAAK,CACN,CAAC;QACJ,KAAK,SAAS;YACZ,OAAO,IAAI,WAAW,CACpB,GAAG,aAAa,2BAA2B,aAAa,KAAK,UAAU,CAAC,KAAK,CAAC,EAAE,EAChF,KAAK,CACN,CAAC;QACJ,KAAK,OAAO;YACV,OAAO,IAAI,WAAW,CACpB,GAAG,aAAa,qBAAqB,UAAU,CAAC,KAAK,CAAC,EAAE,EACxD,KAAK,CACN,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,KAAK,CAAC,YAAoB;IACjC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,UAAU,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IACpC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,SAA2B,EAC3B,OAA6B;IAE7B,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,mBAAmB,CAAC;IAC7D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,IAAI,OAAO,GAAG,CAAC,CAAC;IAEhB,OAAO,IAAI,EAAE,CAAC;QACZ,IAAI,CAAC;YACH,OAAO,MAAM,SAAS,EAAE,CAAC;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAC;YACpD,MAAM,QAAQ,GAAG,OAAO,GAAG,CAAC,CAAC;YAE7B,IAAI,CAAC,cAAc,CAAC,SAAS,IAAI,OAAO,IAAI,UAAU,EAAE,CAAC;gBACvD,MAAM,kBAAkB,CACtB,KAAK,EACL,cAAc,EACd,OAAO,CAAC,aAAa,EACrB,OAAO,CAAC,SAAS,EACjB,QAAQ,CACT,CAAC;YACJ,CAAC;YAED,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,aAAa,2BAA2B,EAAE;gBACvE,OAAO,EAAE,QAAQ;gBACjB,UAAU;gBACV,MAAM,EAAE,cAAc,CAAC,MAAM;gBAC7B,IAAI,EAAE,cAAc,CAAC,IAAI;aAC1B,CAAC,CAAC;YACH,OAAO,IAAI,CAAC,CAAC;YACb,MAAM,KAAK,CAAC,YAAY,CAAC,CAAC;QAC5B,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/custom/types.d.ts

@@ -71,33 +71,26 @@ export declare const CUSTOM_DEFAULTS: {
     readonly maxTokens: 500;
     readonly timeout: 30000;
 };
-/**
- * Base error class for custom provider errors.
- */
 export declare class CustomError extends Error {
     readonly cause?: Error;
     constructor(message: string, cause?: Error);
 }
-/**
- * Error thrown when response parsing fails.
- */
+export declare class CustomConfigError extends CustomError {
+    constructor(message: string);
+}
 export declare class CustomParseError extends CustomError {
     readonly rawResponse: string;
     constructor(message: string, rawResponse: string);
 }
-/**
- * Error thrown when API key is missing.
- */
-export declare class CustomAPIKeyError extends CustomError {
+export declare class CustomAPIKeyError extends CustomConfigError {
     readonly provider: CustomProvider;
-    constructor(provider: CustomProvider, envVar: string);
+    readonly envVar: string;
+    constructor(provider: CustomProvider, envVar: string, configuredEnvVar?: boolean);
+}
+export declare class CustomProviderPackageError extends CustomError {
+    readonly provider: CustomProvider;
+    readonly packageName: string;
+    constructor(provider: CustomProvider, packageName: string, cause?: Error);
 }
-/**
- * Resolve custom configuration with defaults and validation.
- *
- * @param config - User-provided configuration
- * @returns Resolved configuration with all required fields
- * @throws {CustomAPIKeyError} If API key is not found
- */
 export declare function resolveCustomConfig(config: CustomConfig): ResolvedCustomConfig;
 //# sourceMappingURL=types.d.ts.map

package/dist/custom/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/custom/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAK5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAKzE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX;;GAEG;AACH,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAK3C;AAED;;GAEG;AACH,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAKjD;AAED;;GAEG;AACH,qBAAa,iBAAkB,SAAQ,WAAW;IAChD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;gBAEtB,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM;CAOrD;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,oBAAoB,CAkB9E"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/custom/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH;;GAEG;AACH,MAAM,MAAM,cAAc,GAAG,QAAQ,GAAG,YAAY,GAAG,QAAQ,GAAG,WAAW,CAAC;AAE9E;;GAEG;AACH,MAAM,WAAW,YAAY;IAC3B,0BAA0B;IAC1B,QAAQ,EAAE,cAAc,CAAC;IACzB,uEAAuE;IACvE,KAAK,EAAE,MAAM,CAAC;IACd,mDAAmD;IACnD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,+CAA+C;IAC/C,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iDAAiD;IACjD,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,uDAAuD;IACvD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2DAA2D;IAC3D,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,EAAE,cAAc,CAAC;IACzB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,aAAa,CAAC,EAAE,MAAM,EAAE,CAAC;CAC1B;AAED;;GAEG;AACH,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACpC;AAED;;GAEG;AACH,eAAO,MAAM,iBAAiB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,CAK5D,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,kBAAkB,EAAE,MAAM,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,CAKzE,CAAC;AAEF;;GAEG;AACH,eAAO,MAAM,eAAe;;;;CAIlB,CAAC;AAEX,qBAAa,WAAY,SAAQ,KAAK;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,KAAK,CAAC;gBAEX,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CAK3C;AAED,qBAAa,iBAAkB,SAAQ,WAAW;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,qBAAa,gBAAiB,SAAQ,WAAW;IAC/C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM;CAKjD;AAED,qBAAa,iBAAkB,SAAQ,iBAAiB;IACtD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;gBAEZ,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,gBAAgB,UAAQ;CAS/E;AAED,qBAAa,0BAA2B,SAAQ,WAAW;IACzD,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;gBAEjB,QAAQ,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK;CASzE;AA0CD,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,YAAY,GAAG,oBAAoB,CA8B9E"}

package/dist/custom/types.js

@@ -29,9 +29,6 @@ export const CUSTOM_DEFAULTS = {
     maxTokens: 500,
     timeout: 30000,
 };
-/**
- * Base error class for custom provider errors.
- */
 export class CustomError extends Error {
     cause;
     constructor(message, cause) {
@@ -40,9 +37,12 @@ export class CustomError extends Error {
         this.cause = cause;
     }
 }
-/**
- * Error thrown when response parsing fails.
- */
+export class CustomConfigError extends CustomError {
+    constructor(message) {
+        super(message);
+        this.name = 'CustomConfigError';
+    }
+}
 export class CustomParseError extends CustomError {
     rawResponse;
     constructor(message, rawResponse) {
@@ -51,39 +51,81 @@ export class CustomParseError extends CustomError {
         this.rawResponse = rawResponse;
     }
 }
-/**
- * Error thrown when API key is missing.
- */
-export class CustomAPIKeyError extends CustomError {
+export class CustomAPIKeyError extends CustomConfigError {
     provider;
-    constructor(provider, envVar) {
-        super(`API key for ${provider} not found. Set ${envVar} environment variable or provide apiKey in config.`);
+    envVar;
+    constructor(provider, envVar, configuredEnvVar = false) {
+        const message = configuredEnvVar
+            ? `API key env var ${envVar} for custom provider ${provider} is not set or empty. Set ${envVar} or configure custom.apiKey with a literal secret.`
+            : `Missing API key for custom provider ${provider}. Set ${envVar} environment variable or configure custom.apiKey.`;
+        super(message);
         this.name = 'CustomAPIKeyError';
         this.provider = provider;
+        this.envVar = envVar;
     }
 }
-/**
- * Resolve custom configuration with defaults and validation.
- *
- * @param config - User-provided configuration
- * @returns Resolved configuration with all required fields
- * @throws {CustomAPIKeyError} If API key is not found
- */
-export function resolveCustomConfig(config) {
-    // Resolve API key: use provided key or environment variable
-    const envVar = PROVIDER_ENV_VARS[config.provider];
-    const apiKey = config.apiKey || process.env[envVar];
+export class CustomProviderPackageError extends CustomError {
+    provider;
+    packageName;
+    constructor(provider, packageName, cause) {
+        super(`Custom provider package "${packageName}" is not installed. Install ${packageName} to use custom.provider="${provider}".`, cause);
+        this.name = 'CustomProviderPackageError';
+        this.provider = provider;
+        this.packageName = packageName;
+    }
+}
+const ENV_VAR_NAME_PATTERN = /^[A-Z_][A-Z0-9_]*$/;
+const SUPPORTED_PROVIDERS = new Set([
+    'gemini',
+    'openrouter',
+    'openai',
+    'anthropic',
+]);
+function isSupportedProvider(provider) {
+    return typeof provider === 'string' && SUPPORTED_PROVIDERS.has(provider);
+}
+function looksLikeEnvVarName(value) {
+    return ENV_VAR_NAME_PATTERN.test(value);
+}
+function resolveApiKey(provider, configuredApiKey) {
+    const trimmedApiKey = configuredApiKey?.trim();
+    if (trimmedApiKey) {
+        if (looksLikeEnvVarName(trimmedApiKey)) {
+            const resolvedApiKey = process.env[trimmedApiKey];
+            if (!resolvedApiKey) {
+                throw new CustomAPIKeyError(provider, trimmedApiKey, true);
+            }
+            return resolvedApiKey;
+        }
+        return trimmedApiKey;
+    }
+    const envVar = PROVIDER_ENV_VARS[provider];
+    const apiKey = process.env[envVar];
     if (!apiKey) {
-        throw new CustomAPIKeyError(config.provider, envVar);
+        throw new CustomAPIKeyError(provider, envVar);
+    }
+    return apiKey;
+}
+export function resolveCustomConfig(config) {
+    const provider = config.provider;
+    if (!provider) {
+        throw new CustomConfigError('Missing custom.provider for custom validation. Set custom.provider to one of: openai, anthropic, gemini, openrouter.');
+    }
+    if (!isSupportedProvider(provider)) {
+        throw new CustomConfigError(`Unsupported custom.provider "${String(provider)}". Supported providers: openai, anthropic, gemini, openrouter.`);
+    }
+    const model = config.model;
+    if (!model || model.trim() === '') {
+        throw new CustomConfigError(`Missing custom.model for custom provider ${provider}. Set custom.model in veto.config.yaml.`);
     }
     return {
-        provider: config.provider,
-        model: config.model,
-        apiKey,
+        provider,
+        model,
+        apiKey: resolveApiKey(provider, config.apiKey),
         temperature: config.temperature ?? CUSTOM_DEFAULTS.temperature,
         maxTokens: config.maxTokens ?? CUSTOM_DEFAULTS.maxTokens,
         timeout: config.timeout ?? CUSTOM_DEFAULTS.timeout,
-        baseUrl: config.baseUrl ?? PROVIDER_BASE_URLS[config.provider],
+        baseUrl: config.baseUrl ?? PROVIDER_BASE_URLS[provider],
     };
 }
 //# sourceMappingURL=types.js.map

package/dist/custom/types.js.map

@@ -1 +1 @@
-{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/custom/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2DH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAC/D,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,oBAAoB;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C;IAC5E,MAAM,EAAE,2BAA2B;IACnC,SAAS,EAAE,SAAS,EAAE,mBAAmB;IACzC,MAAM,EAAE,SAAS,EAAE,mBAAmB;IACtC,UAAU,EAAE,8BAA8B;CAC3C,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW,EAAE,GAAG;IAChB,SAAS,EAAE,GAAG;IACd,OAAO,EAAE,KAAK;CACN,CAAC;AAEX;;GAEG;AACH,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,KAAK,CAAS;IAEvB,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,gBAAiB,SAAQ,WAAW;IACtC,WAAW,CAAS;IAE7B,YAAY,OAAe,EAAE,WAAmB;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED;;GAEG;AACH,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IACvC,QAAQ,CAAiB;IAElC,YAAY,QAAwB,EAAE,MAAc;QAClD,KAAK,CACH,eAAe,QAAQ,mBAAmB,MAAM,oDAAoD,CACrG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;IAC3B,CAAC;CACF;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,4DAA4D;IAC5D,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAEpD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAiB,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvD,CAAC;IAED,OAAO;QACL,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,KAAK,EAAE,MAAM,CAAC,KAAK;QACnB,MAAM;QACN,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,eAAe,CAAC,WAAW;QAC9D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC,SAAS;QACxD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;QAClD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,MAAM,CAAC,QAAQ,CAAC;KAC/D,CAAC;AACJ,CAAC"}
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/custom/types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AA2DH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAmC;IAC/D,MAAM,EAAE,gBAAgB;IACxB,SAAS,EAAE,mBAAmB;IAC9B,MAAM,EAAE,gBAAgB;IACxB,UAAU,EAAE,oBAAoB;CACjC,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAA+C;IAC5E,MAAM,EAAE,2BAA2B;IACnC,SAAS,EAAE,SAAS,EAAE,mBAAmB;IACzC,MAAM,EAAE,SAAS,EAAE,mBAAmB;IACtC,UAAU,EAAE,8BAA8B;CAC3C,CAAC;AAEF;;GAEG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG;IAC7B,WAAW,EAAE,GAAG;IAChB,SAAS,EAAE,GAAG;IACd,OAAO,EAAE,KAAK;CACN,CAAC;AAEX,MAAM,OAAO,WAAY,SAAQ,KAAK;IAC3B,KAAK,CAAS;IAEvB,YAAY,OAAe,EAAE,KAAa;QACxC,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,aAAa,CAAC;QAC1B,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;IACrB,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,WAAW;IAChD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,MAAM,OAAO,gBAAiB,SAAQ,WAAW;IACtC,WAAW,CAAS;IAE7B,YAAY,OAAe,EAAE,WAAmB;QAC9C,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,MAAM,OAAO,iBAAkB,SAAQ,iBAAiB;IAC7C,QAAQ,CAAiB;IACzB,MAAM,CAAS;IAExB,YAAY,QAAwB,EAAE,MAAc,EAAE,gBAAgB,GAAG,KAAK;QAC5E,MAAM,OAAO,GAAG,gBAAgB;YAC9B,CAAC,CAAC,mBAAmB,MAAM,wBAAwB,QAAQ,6BAA6B,MAAM,oDAAoD;YAClJ,CAAC,CAAC,uCAAuC,QAAQ,SAAS,MAAM,mDAAmD,CAAC;QACtH,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,mBAAmB,CAAC;QAChC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;CACF;AAED,MAAM,OAAO,0BAA2B,SAAQ,WAAW;IAChD,QAAQ,CAAiB;IACzB,WAAW,CAAS;IAE7B,YAAY,QAAwB,EAAE,WAAmB,EAAE,KAAa;QACtE,KAAK,CACH,4BAA4B,WAAW,+BAA+B,WAAW,4BAA4B,QAAQ,IAAI,EACzH,KAAK,CACN,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;CACF;AAED,MAAM,oBAAoB,GAAG,oBAAoB,CAAC;AAClD,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAiB;IAClD,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,WAAW;CACZ,CAAC,CAAC;AAEH,SAAS,mBAAmB,CAAC,QAAiB;IAC5C,OAAO,OAAO,QAAQ,KAAK,QAAQ,IAAI,mBAAmB,CAAC,GAAG,CAAC,QAA0B,CAAC,CAAC;AAC7F,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAa;IACxC,OAAO,oBAAoB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,aAAa,CAAC,QAAwB,EAAE,gBAAyB;IACxE,MAAM,aAAa,GAAG,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAE/C,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,mBAAmB,CAAC,aAAa,CAAC,EAAE,CAAC;YACvC,MAAM,cAAc,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAClD,IAAI,CAAC,cAAc,EAAE,CAAC;gBACpB,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,aAAa,EAAE,IAAI,CAAC,CAAC;YAC7D,CAAC;YACD,OAAO,cAAc,CAAC;QACxB,CAAC;QAED,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,MAAM,MAAM,GAAG,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAC3C,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACnC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,iBAAiB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,MAAoB;IACtD,MAAM,QAAQ,GAAI,MAAgC,CAAC,QAAQ,CAAC;IAC5D,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,iBAAiB,CACzB,sHAAsH,CACvH,CAAC;IACJ,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,QAAQ,CAAC,EAAE,CAAC;QACnC,MAAM,IAAI,iBAAiB,CACzB,gCAAgC,MAAM,CAAC,QAAQ,CAAC,gEAAgE,CACjH,CAAC;IACJ,CAAC;IAED,MAAM,KAAK,GAAI,MAAgC,CAAC,KAAK,CAAC;IACtD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,IAAI,iBAAiB,CACzB,4CAA4C,QAAQ,yCAAyC,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO;QACL,QAAQ;QACR,KAAK;QACL,MAAM,EAAE,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC;QAC9C,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,eAAe,CAAC,WAAW;QAC9D,SAAS,EAAE,MAAM,CAAC,SAAS,IAAI,eAAe,CAAC,SAAS;QACxD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO;QAClD,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,kBAAkB,CAAC,QAAQ,CAAC;KACxD,CAAC;AACJ,CAAC"}

package/dist/rules/feed-provider.d.ts

@@ -0,0 +1,39 @@
+/**
+ * Feed provider utilities for the local evaluator.
+ *
+ * The evaluator itself is sync and accepts any object implementing the
+ * FeedProvider interface declared in `./types.ts`. This module ships an
+ * in-memory reference provider suitable for tests, the CLI, and SDK
+ * consumers who manage refreshes externally.
+ *
+ * @module rules/feed-provider
+ */
+import type { FeedConditionValue, FeedProvider, FeedSnapshot, PipelineConditionValue } from './types.js';
+/**
+ * Trivial in-memory provider. Caller `put()`s snapshots; evaluator `get()`s them.
+ *
+ * Not thread-safe. Not persistent. Intended for tests and single-process
+ * SDK usage. Platform code should provide its own Redis/KV-backed
+ * implementation.
+ */
+export declare class InMemoryFeedProvider implements FeedProvider {
+    private readonly store;
+    put(feedId: string, snapshot: FeedSnapshot): void;
+    get(feedId: string, _version?: string): FeedSnapshot | undefined;
+    clear(): void;
+    size(): number;
+}
+/**
+ * Resolve a FeedRef / PipelineRef to an array comparand suitable for
+ * set-membership operators.
+ *
+ * Returns `{ resolved: unknown[] }` on hit, `{ fallback: "fail_open" | "fail_closed" }`
+ * on miss/stale. Caller decides enforcement semantics per the ref's
+ * `fallback` field.
+ */
+export declare function resolveFeedRef(ref: FeedConditionValue | PipelineConditionValue, provider: FeedProvider | undefined, now_ms?: number): {
+    resolved: unknown[];
+} | {
+    fallback: 'fail_open' | 'fail_closed';
+};
+//# sourceMappingURL=feed-provider.d.ts.map

package/dist/rules/feed-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-provider.d.ts","sourceRoot":"","sources":["../../src/rules/feed-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,KAAK,EACV,kBAAkB,EAClB,YAAY,EACZ,YAAY,EACZ,sBAAsB,EACvB,MAAM,YAAY,CAAC;AAEpB;;;;;;GAMG;AACH,qBAAa,oBAAqB,YAAW,YAAY;IACvD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAmC;IAEzD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,YAAY,GAAG,IAAI;IAIjD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,YAAY,GAAG,SAAS;IAIhE,KAAK,IAAI,IAAI;IAIb,IAAI,IAAI,MAAM;CAGf;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAC5B,GAAG,EAAE,kBAAkB,GAAG,sBAAsB,EAChD,QAAQ,EAAE,YAAY,GAAG,SAAS,EAClC,MAAM,GAAE,MAAmB,GAC1B;IAAE,QAAQ,EAAE,OAAO,EAAE,CAAA;CAAE,GAAG;IAAE,QAAQ,EAAE,WAAW,GAAG,aAAa,CAAA;CAAE,CA2BrE"}

package/dist/rules/feed-provider.js

@@ -0,0 +1,65 @@
+/**
+ * Feed provider utilities for the local evaluator.
+ *
+ * The evaluator itself is sync and accepts any object implementing the
+ * FeedProvider interface declared in `./types.ts`. This module ships an
+ * in-memory reference provider suitable for tests, the CLI, and SDK
+ * consumers who manage refreshes externally.
+ *
+ * @module rules/feed-provider
+ */
+/**
+ * Trivial in-memory provider. Caller `put()`s snapshots; evaluator `get()`s them.
+ *
+ * Not thread-safe. Not persistent. Intended for tests and single-process
+ * SDK usage. Platform code should provide its own Redis/KV-backed
+ * implementation.
+ */
+export class InMemoryFeedProvider {
+    store = new Map();
+    put(feedId, snapshot) {
+        this.store.set(feedId, snapshot);
+    }
+    get(feedId, _version) {
+        return this.store.get(feedId);
+    }
+    clear() {
+        this.store.clear();
+    }
+    size() {
+        return this.store.size;
+    }
+}
+/**
+ * Resolve a FeedRef / PipelineRef to an array comparand suitable for
+ * set-membership operators.
+ *
+ * Returns `{ resolved: unknown[] }` on hit, `{ fallback: "fail_open" | "fail_closed" }`
+ * on miss/stale. Caller decides enforcement semantics per the ref's
+ * `fallback` field.
+ */
+export function resolveFeedRef(ref, provider, now_ms = Date.now()) {
+    const fallbackRoute = () => ({
+        fallback: ref.fallback === 'fail_closed' ? 'fail_closed' : 'fail_open',
+    });
+    if (provider === undefined)
+        return fallbackRoute();
+    const id = ref.kind === 'feed' ? ref.feed_id : ref.pipeline_id;
+    const snapshot = provider.get(id, ref.version);
+    if (snapshot === undefined)
+        return fallbackRoute();
+    // Defensive: a non-finite clock (NaN/Infinity) would make the staleness
+    // check meaningless and could let a stale snapshot through silently.
+    if (!Number.isFinite(now_ms) || !Number.isFinite(snapshot.refreshed_at_ms)) {
+        return ref.fallback === 'last_known_good'
+            ? { resolved: snapshot.data }
+            : fallbackRoute();
+    }
+    const age_sec = Math.max(0, Math.floor((now_ms - snapshot.refreshed_at_ms) / 1000));
+    const stale = age_sec > ref.max_staleness_sec;
+    // last_known_good explicitly opts into stale snapshots.
+    if (stale && ref.fallback !== 'last_known_good')
+        return fallbackRoute();
+    return { resolved: snapshot.data };
+}
+//# sourceMappingURL=feed-provider.js.map

package/dist/rules/feed-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feed-provider.js","sourceRoot":"","sources":["../../src/rules/feed-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AASH;;;;;;GAMG;AACH,MAAM,OAAO,oBAAoB;IACd,KAAK,GAAG,IAAI,GAAG,EAAwB,CAAC;IAEzD,GAAG,CAAC,MAAc,EAAE,QAAsB;QACxC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,GAAG,CAAC,MAAc,EAAE,QAAiB;QACnC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAED,KAAK;QACH,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;IACrB,CAAC;IAED,IAAI;QACF,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC;IACzB,CAAC;CACF;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAC5B,GAAgD,EAChD,QAAkC,EAClC,SAAiB,IAAI,CAAC,GAAG,EAAE;IAE3B,MAAM,aAAa,GAAG,GAA8C,EAAE,CAAC,CAAC;QACtE,QAAQ,EAAE,GAAG,CAAC,QAAQ,KAAK,aAAa,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,WAAW;KACvE,CAAC,CAAC;IAEH,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,aAAa,EAAE,CAAC;IAEnD,MAAM,EAAE,GAAG,GAAG,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,WAAW,CAAC;IAC/D,MAAM,QAAQ,GAAG,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,OAAO,CAAC,CAAC;IAE/C,IAAI,QAAQ,KAAK,SAAS;QAAE,OAAO,aAAa,EAAE,CAAC;IAEnD,wEAAwE;IACxE,qEAAqE;IACrE,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC;QAC3E,OAAO,GAAG,CAAC,QAAQ,KAAK,iBAAiB;YACvC,CAAC,CAAC,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE;YAC7B,CAAC,CAAC,aAAa,EAAE,CAAC;IACtB,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC;IACpF,MAAM,KAAK,GAAG,OAAO,GAAG,GAAG,CAAC,iBAAiB,CAAC;IAE9C,wDAAwD;IACxD,IAAI,KAAK,IAAI,GAAG,CAAC,QAAQ,KAAK,iBAAiB;QAAE,OAAO,aAAa,EAAE,CAAC;IAExE,OAAO,EAAE,QAAQ,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC;AACrC,CAAC"}

package/dist/rules/index.d.ts

@@ -12,5 +12,7 @@ export * from './schema-validator.js';
 export * from './policy-ir-schema.js';
 export * from './condition-evaluator.js';
 export * from './patterns.js';
-export { evaluateRulesLocally, evaluateCondition as evaluateConditionLocally, resolveFieldPath as resolveLocalFieldPath, type LocalEvalResult, } from './local-evaluator.js';
+export { InMemoryFeedProvider, resolveFeedRef } from './feed-provider.js';
+export { evaluateRulesLocally, evaluateCondition as evaluateConditionLocally, resolveFieldPath as resolveLocalFieldPath, type LocalEvalResult, type LocalEvalOptions, } from './local-evaluator.js';
+export { getBuiltInPolicyPackNames, normalizePolicyPackName, resolveBuiltInPolicyPackPath, } from './policy-packs.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/rules/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,EACzC,KAAK,eAAe,GACrB,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAK9B,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,EACzC,KAAK,eAAe,EACpB,KAAK,gBAAgB,GACtB,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC"}

package/dist/rules/index.js

@@ -12,5 +12,11 @@ export * from './schema-validator.js';
 export * from './policy-ir-schema.js';
 export * from './condition-evaluator.js';
 export * from './patterns.js';
+// NOTE: `./pipeline-dsl.js` is deliberately NOT re-exported here. It depends
+// on `zod` (optional peerDep) and `node:crypto`. Consumers import it via the
+// dedicated `veto-sdk/rules/pipeline-dsl` subpath so that the rules barrel
+// remains zod-free for existing callers.
+export { InMemoryFeedProvider, resolveFeedRef } from './feed-provider.js';
 export { evaluateRulesLocally, evaluateCondition as evaluateConditionLocally, resolveFieldPath as resolveLocalFieldPath, } from './local-evaluator.js';
+export { getBuiltInPolicyPackNames, normalizePolicyPackName, resolveBuiltInPolicyPackPath, } from './policy-packs.js';
 //# sourceMappingURL=index.js.map

package/dist/rules/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,GAE1C,MAAM,sBAAsB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/rules/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,qBAAqB,CAAC;AACpC,cAAc,2BAA2B,CAAC;AAC1C,cAAc,uBAAuB,CAAC;AACtC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,eAAe,CAAC;AAC9B,6EAA6E;AAC7E,6EAA6E;AAC7E,2EAA2E;AAC3E,yCAAyC;AACzC,OAAO,EAAE,oBAAoB,EAAE,cAAc,EAAE,MAAM,oBAAoB,CAAC;AAC1E,OAAO,EACL,oBAAoB,EACpB,iBAAiB,IAAI,wBAAwB,EAC7C,gBAAgB,IAAI,qBAAqB,GAG1C,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EACL,yBAAyB,EACzB,uBAAuB,EACvB,4BAA4B,GAC7B,MAAM,mBAAmB,CAAC"}