AbstractCreates the driver.
The vendor's API key, or an AI Credential's values in JSON.
OptionalendpointURL: stringOverrides the credential's endpoint and DefaultEndpoint.
ProtectedapiOnly sub-classes can access the API key
Protected AbstractAPIWhat the credential's apiKey must be, for the missing-key message, such as 'a Perplexity API key'.
ProtectedCredentialThe credential, read from the API key with ParseSystemOneCredential.
Protected AbstractDefaultThe vendor's endpoint, used when neither the constructor nor the credential gives one.
Protected AbstractDefaultThe model used when DecisionParams.Model is empty.
The Decisions API endpoint URL: the constructor's, else the credential's, else DefaultEndpoint, without trailing slashes.
Protected AbstractLegacyThe legacy environment variable that can hold the key, such as 'AI_VENDOR_API_KEY__PERPLEXITYDECISION'.
ProtectedSecretsThe secrets an error message must never show, each removed with RedactSecret. Defaults to the credential's API key; a driver that sends only part of it (Cloudflare's token) adds that part.
Protected AbstractServiceThe API's name in error messages, such as 'OpenRouter Decisions API'.
ProtectedBuildThe request body: { model, state, questions }.
Executes a typed decision request across one or more questions about a given state. This method wraps driver execution with input validation, output verification, execution timing, and structured error handling. It never throws.
Decision request parameters including state, questions, and model.
A Promise resolving to a DecisionResult.
ProtectedDescribeThe vendor's message when the body has one; otherwise the base default, the status and the start of the body.
ProtectedDoSends the questions and maps the typed answers.
ProtectedFailMarks the result failed because the response could not be mapped. Another model may still answer, so the failure allows failover (and is not 'Fatal', which would stop the failover loop).
ProtectedGetNo API key stops the call before any request, as a NoCredentials error that allows failover.
ProtectedGetThe one endpoint, whatever the model: the model travels in the body.
ProtectedGetThe error type for a non-2xx status whose ErrorAnalyzer reading is wrong for this API, or
undefined (the default) to leave it to ErrorAnalyzer, which reads the message and the status. A
type returned here is attached to the thrown error as a Retriable error that allows failover:
another candidate may answer what this API refused.
The HTTP status.
ProtectedGetThe request headers. Defaults to the credential's API key as a bearer token and a JSON content type.
The model being asked.
ProtectedGetThe request body's model field. Defaults to the model unchanged.
The model being asked.
ProtectedResolveThe model to ask: DecisionParams.Model trimmed, or DefaultModel when it is empty.
ProtectedSendSends the request. This is the driver's only network call; a test double overrides it to stand in for the network.
The endpoint from GetEndpointURL.
The POST: method, headers, JSON body and the caller's cancellation signal.
ProtectedUnwrapReturns the System One response ({ model, answers, usage }) from a parsed 2xx body. Defaults to
the body itself. A vendor that wraps the response in an envelope unwraps it here, and throws
(with CreateSystemOneHTTPError) when the envelope reports a failure.
The parsed JSON body.
The HTTP status, for an error thrown from here.
ProtectedValidateValidates driver output DecisionResult against the requested questions.
Original decision request parameters.
Result returned by the driver.
An array of error descriptions, empty if valid.
ProtectedValidateValidates input DecisionParams against the decision contract.
Parameters to validate.
An array of error descriptions, empty if valid.
A BaseSystemOneDecision for a hosted System One API at one fixed URL that requires an API key, such as Perplexity's, SubQ's and Inception's Decisions APIs. It owns what those drivers share:
endpoint(anAPI Key with Endpointcredential), else DefaultEndpoint. Each is the full request URL, used for every model, since the model travels in the body. Trailing slashes are removed.NoCredentialserror that allows failover, since another candidate may be configured.A subclass supplies ServiceName, DefaultModel, DefaultEndpoint, APIKeyDescription and LegacyKeyVariable, and, when
ErrorAnalyzermisreads one of its vendor's statuses, GetHTTPErrorType.