AbstractCreates the driver.
The vendor credential: a raw API key, or an AI Credential's values in JSON. The default GetRequestHeaders sends its API key as a bearer token.
ProtectedapiOnly sub-classes can access the API key
ProtectedCredentialThe credential, read from the API key with ParseSystemOneCredential.
Protected AbstractDefaultThe model used when DecisionParams.Model is empty.
ProtectedSecretsThe secrets an error message must never show, each removed with RedactSecret. Defaults to the credential's API key; a driver that sends only part of it (Cloudflare's token) adds that part.
Protected AbstractServiceThe API's name in error messages, such as 'OpenRouter Decisions API'.
ProtectedBuildThe request body: { model, state, questions }.
Executes a typed decision request across one or more questions about a given state. This method wraps driver execution with input validation, output verification, execution timing, and structured error handling. It never throws.
Decision request parameters including state, questions, and model.
A Promise resolving to a DecisionResult.
ProtectedDescribeThe message of the error thrown for a non-2xx response. Defaults to the status and the first 500 characters of the body.
The HTTP status.
The response body as text, possibly empty, with the API key already redacted (RedactSecret).
ProtectedDoSends the questions and maps the typed answers.
ProtectedFailMarks the result failed because the response could not be mapped. Another model may still answer, so the failure allows failover (and is not 'Fatal', which would stop the failover loop).
ProtectedGetWhat stops a call before any request, such as a credential without a part the driver needs, or undefined when nothing does. Defaults to undefined. DoDecide turns it into a failure that allows failover, since another candidate may be configured correctly.
Protected AbstractGetThe URL the request is POSTed to.
The model being asked: DecisionParams.Model, or DefaultModel when that is empty.
ProtectedGetThe error type for a non-2xx status whose ErrorAnalyzer reading is wrong for this API, or
undefined (the default) to leave it to ErrorAnalyzer, which reads the message and the status. A
type returned here is attached to the thrown error as a Retriable error that allows failover:
another candidate may answer what this API refused.
The HTTP status.
ProtectedGetThe request headers. Defaults to the credential's API key as a bearer token and a JSON content type.
The model being asked.
ProtectedGetThe request body's model field. Defaults to the model unchanged.
The model being asked.
ProtectedResolveThe model to ask: DecisionParams.Model trimmed, or DefaultModel when it is empty.
ProtectedSendSends the request. This is the driver's only network call; a test double overrides it to stand in for the network.
The endpoint from GetEndpointURL.
The POST: method, headers, JSON body and the caller's cancellation signal.
ProtectedUnwrapReturns the System One response ({ model, answers, usage }) from a parsed 2xx body. Defaults to
the body itself. A vendor that wraps the response in an envelope unwraps it here, and throws
(with CreateSystemOneHTTPError) when the envelope reports a failure.
The parsed JSON body.
The HTTP status, for an error thrown from here.
ProtectedValidateValidates driver output DecisionResult against the requested questions.
Original decision request parameters.
Result returned by the driver.
An array of error descriptions, empty if valid.
ProtectedValidateValidates input DecisionParams against the decision contract.
Parameters to validate.
An array of error descriptions, empty if valid.
A
BaseDecisiondriver for an API that speaks the System One decisions wire format. It maps MJ's questions onto the wire (a Likelihood asnoul, a Choice's options as{ value: description }, a Score's levels as an array), maps the typed answers back, and records the dated model and usage. Choice and Score distributions are renormalised, because these APIs round each probability.A subclass supplies, through protected hooks:
ErrorAnalyzer) and GetConfigurationError (default: none).Credential is the API key read with ParseSystemOneCredential, so a credential resolved from an AI Credential sends its
apiKey, not its JSON.SendRequest is the one network call, so a test double overrides only it.
An HTTP or network error is thrown, carrying the HTTP
status, soDecide()classifies it and rate limits and server errors allow failover. A 2xx response that cannot be mapped fails the result with a failover-eligible error (see FailResult).