@acosmi/sdk-ts 1.0.0

package/dist/node/sanitize/index.cjs

@@ -0,0 +1,248 @@
+'use strict';
+
+// src/sanitize/types.ts
+var BlockText = "text";
+var BlockImage = "image";
+var BlockVideo = "video";
+var BlockDocument = "document";
+var BlockSearchResult = "search_result";
+var BlockThinking = "thinking";
+var BlockRedactedThinking = "redacted_thinking";
+var BlockToolUse = "tool_use";
+var BlockToolResult = "tool_result";
+var BlockToolReference = "tool_reference";
+var BlockServerToolUse = "server_tool_use";
+var BlockWebSearchToolResult = "web_search_tool_result";
+var BlockCodeExecutionToolResult = "code_execution_tool_result";
+var BlockMCPToolUse = "mcp_tool_use";
+var BlockMCPToolResult = "mcp_tool_result";
+var BlockContainerUpload = "container_upload";
+var DeltaText = "text_delta";
+var DeltaInputJSON = "input_json_delta";
+var DeltaThinking = "thinking_delta";
+var DeltaSignature = "signature_delta";
+var DeltaCitations = "citations_delta";
+var EphemeralMarkerField = "acosmi_ephemeral";
+
+// src/sanitize/config.ts
+var HistoryTooDeepError = class extends Error {
+  constructor() {
+    super("sanitize: messages history exceeds configured depth");
+    this.name = "HistoryTooDeepError";
+  }
+};
+var BlockDeniedError = class extends Error {
+  constructor() {
+    super("sanitize: block type permanently denied");
+    this.name = "BlockDeniedError";
+  }
+};
+var SizeError = class extends Error {
+  blockType;
+  actual;
+  limit;
+  constructor(blockType, actual, limit) {
+    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);
+    this.name = "SizeError";
+    this.blockType = blockType;
+    this.actual = actual;
+    this.limit = limit;
+  }
+};
+var ErrHistoryTooDeep = new HistoryTooDeepError();
+var ErrBlockDenied = new BlockDeniedError();
+
+// src/sanitize/history.ts
+function dropBlocks(messages, pred) {
+  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);
+  const out = [];
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) {
+      out.push(msg);
+      continue;
+    }
+    const content = msg["content"];
+    if (!Array.isArray(content)) {
+      out.push(msg);
+      continue;
+    }
+    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);
+    if (!changed) {
+      out.push(msg);
+      continue;
+    }
+    if (kept.length === 0) {
+      continue;
+    }
+    const newMsg = { ...msg };
+    newMsg["content"] = kept;
+    out.push(newMsg);
+  }
+  return out;
+}
+function collectDroppedToolUseIDs(messages, pred) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject(raw)) continue;
+      if (!pred(raw)) continue;
+      const t = raw["type"];
+      if (typeof t !== "string") continue;
+      if (t === "tool_use" || t === "server_tool_use" || t === "mcp_tool_use") {
+        const id = raw["id"];
+        if (typeof id === "string" && id !== "") ids.add(id);
+      }
+    }
+  }
+  return ids;
+}
+function filterBlocks(content, pred, droppedToolUseIDs) {
+  const kept = [];
+  let changed = false;
+  for (const raw of content) {
+    if (!isPlainObject(raw)) {
+      kept.push(raw);
+      continue;
+    }
+    if (pred(raw)) {
+      changed = true;
+      continue;
+    }
+    if (droppedToolUseIDs.size > 0) {
+      const t = raw["type"];
+      if (t === "tool_result" || t === "mcp_tool_result") {
+        const id = raw["tool_use_id"];
+        if (typeof id === "string" && id !== "" && droppedToolUseIDs.has(id)) {
+          changed = true;
+          continue;
+        }
+      }
+    }
+    kept.push(raw);
+  }
+  return { kept, changed };
+}
+function stripEphemeral(messages) {
+  return dropBlocks(messages, (b) => {
+    const t = b["type"];
+    if (t === "thinking" || t === "redacted_thinking") {
+      return false;
+    }
+    const v = b[EphemeralMarkerField];
+    return v === true;
+  });
+}
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+// src/sanitize/defensive.ts
+function sanitize(messages, cfg) {
+  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > cfg.maxMessagesTurns) {
+    throw ErrHistoryTooDeep;
+  }
+  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {
+    checkMediaSizes(messages, cfg);
+  }
+  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {
+    const denySet = /* @__PURE__ */ new Set();
+    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt);
+    messages = dropBlocks(messages, (b) => {
+      const t = b["type"];
+      return typeof t === "string" && denySet.has(t);
+    });
+  }
+  return messages;
+}
+function checkMediaSizes(messages, cfg) {
+  for (const msg of messages) {
+    if (!isPlainObject2(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject2(raw)) continue;
+      const bt = raw["type"];
+      if (typeof bt !== "string") continue;
+      let limit = 0;
+      switch (bt) {
+        case "image":
+          limit = cfg.maxImageBytes ?? 0;
+          break;
+        case "video":
+          limit = cfg.maxVideoBytes ?? 0;
+          break;
+        case "document":
+          limit = cfg.maxPDFBytes ?? 0;
+          break;
+        default:
+          continue;
+      }
+      if (limit <= 0) continue;
+      const data = extractBase64Data(raw);
+      if (data === "") continue;
+      const actual = base64DecodedLen(data);
+      if (actual > limit) {
+        throw new SizeError(bt, actual, limit);
+      }
+    }
+  }
+}
+function extractBase64Data(block) {
+  const src = block["source"];
+  if (!isPlainObject2(src)) return "";
+  if (src["type"] !== "base64") return "";
+  const dataRaw = src["data"];
+  if (typeof dataRaw !== "string") return "";
+  let data = dataRaw;
+  const i = data.indexOf("base64,");
+  if (i >= 0) {
+    data = data.slice(i + "base64,".length);
+  }
+  return data;
+}
+function base64DecodedLen(b64) {
+  const n = b64.length;
+  let pad = 0;
+  if (n >= 1 && b64[n - 1] === "=") pad++;
+  if (n >= 2 && b64[n - 2] === "=") pad++;
+  return Math.floor(n * 3 / 4) - pad;
+}
+function isPlainObject2(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+exports.BlockCodeExecutionToolResult = BlockCodeExecutionToolResult;
+exports.BlockContainerUpload = BlockContainerUpload;
+exports.BlockDeniedError = BlockDeniedError;
+exports.BlockDocument = BlockDocument;
+exports.BlockImage = BlockImage;
+exports.BlockMCPToolResult = BlockMCPToolResult;
+exports.BlockMCPToolUse = BlockMCPToolUse;
+exports.BlockRedactedThinking = BlockRedactedThinking;
+exports.BlockSearchResult = BlockSearchResult;
+exports.BlockServerToolUse = BlockServerToolUse;
+exports.BlockText = BlockText;
+exports.BlockThinking = BlockThinking;
+exports.BlockToolReference = BlockToolReference;
+exports.BlockToolResult = BlockToolResult;
+exports.BlockToolUse = BlockToolUse;
+exports.BlockVideo = BlockVideo;
+exports.BlockWebSearchToolResult = BlockWebSearchToolResult;
+exports.DeltaCitations = DeltaCitations;
+exports.DeltaInputJSON = DeltaInputJSON;
+exports.DeltaSignature = DeltaSignature;
+exports.DeltaText = DeltaText;
+exports.DeltaThinking = DeltaThinking;
+exports.EphemeralMarkerField = EphemeralMarkerField;
+exports.ErrBlockDenied = ErrBlockDenied;
+exports.ErrHistoryTooDeep = ErrHistoryTooDeep;
+exports.HistoryTooDeepError = HistoryTooDeepError;
+exports.SizeError = SizeError;
+exports.dropBlocks = dropBlocks;
+exports.sanitize = sanitize;
+exports.stripEphemeral = stripEphemeral;
+//# sourceMappingURL=index.cjs.map
+//# sourceMappingURL=index.cjs.map

package/dist/node/sanitize/index.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/sanitize/types.ts","../../../src/sanitize/config.ts","../../../src/sanitize/history.ts","../../../src/sanitize/defensive.ts"],"names":["isPlainObject"],"mappings":";;;AA0BO,IAAM,SAAA,GAAuB;AAC7B,IAAM,UAAA,GAAwB;AAC9B,IAAM,UAAA,GAAwB;AAC9B,IAAM,aAAA,GAA2B;AACjC,IAAM,iBAAA,GAA+B;AACrC,IAAM,aAAA,GAA2B;AACjC,IAAM,qBAAA,GAAmC;AACzC,IAAM,YAAA,GAA0B;AAChC,IAAM,eAAA,GAA6B;AACnC,IAAM,kBAAA,GAAgC;AACtC,IAAM,kBAAA,GAAgC;AACtC,IAAM,wBAAA,GAAsC;AAC5C,IAAM,4BAAA,GAA0C;AAChD,IAAM,eAAA,GAA6B;AACnC,IAAM,kBAAA,GAAgC;AACtC,IAAM,oBAAA,GAAkC;AAUxC,IAAM,SAAA,GAAuB;AAC7B,IAAM,cAAA,GAA4B;AAClC,IAAM,aAAA,GAA2B;AACjC,IAAM,cAAA,GAA4B;AAClC,IAAM,cAAA,GAA4B;AAUlC,IAAM,oBAAA,GAAuB;;;AC1C7B,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,qDAAqD,CAAA;AAC3D,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AACF;AAEO,IAAM,gBAAA,GAAN,cAA+B,KAAA,CAAM;AAAA,EAC1C,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,yCAAyC,CAAA;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AAAA,EACd;AACF;AAGO,IAAM,SAAA,GAAN,cAAwB,KAAA,CAAM;AAAA,EACnC,SAAA;AAAA,EACA,MAAA;AAAA,EACA,KAAA;AAAA,EAEA,WAAA,CAAY,SAAA,EAAsB,MAAA,EAAgB,KAAA,EAAe;AAC/D,IAAA,KAAA,CAAM,aAAa,SAAS,CAAA,aAAA,EAAgB,MAAM,CAAA,eAAA,EAAkB,KAAK,CAAA,CAAE,CAAA;AAC3E,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF;AAIO,IAAM,iBAAA,GAAoB,IAAI,mBAAA;AAC9B,IAAM,cAAA,GAAiB,IAAI,gBAAA;;;ACvC3B,SAAS,UAAA,CAAW,UAAqB,IAAA,EAAiC;AAC/E,EAAA,MAAM,iBAAA,GAAoB,wBAAA,CAAyB,QAAA,EAAU,IAAI,CAAA;AAEjE,EAAA,MAAM,MAAiB,EAAC;AACxB,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AACZ,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,IAAI,SAAS,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC3B,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AACZ,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,EAAE,IAAA,EAAM,OAAA,KAAY,YAAA,CAAa,OAAA,EAAS,MAAM,iBAAiB,CAAA;AACvE,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AACZ,MAAA;AAAA,IACF;AAIA,IAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,MAAA,GAAkC,EAAE,GAAG,GAAA,EAAI;AACjD,IAAA,MAAA,CAAO,SAAS,CAAA,GAAI,IAAA;AACpB,IAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,EACjB;AACA,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,wBAAA,CAAyB,UAAqB,IAAA,EAAmC;AACxF,EAAA,MAAM,GAAA,uBAAU,GAAA,EAAY;AAC5B,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACzB,IAAA,MAAM,OAAA,GAAU,IAAI,SAAS,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7B,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,MAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACzB,MAAA,IAAI,CAAC,IAAA,CAAK,GAAG,CAAA,EAAG;AAChB,MAAA,MAAM,CAAA,GAAI,IAAI,MAAM,CAAA;AACpB,MAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AAC3B,MAAA,IAAI,CAAA,KAAM,UAAA,IAAc,CAAA,KAAM,iBAAA,IAAqB,MAAM,cAAA,EAAgB;AACvE,QAAA,MAAM,EAAA,GAAK,IAAI,IAAI,CAAA;AACnB,QAAA,IAAI,OAAO,EAAA,KAAO,QAAA,IAAY,OAAO,EAAA,EAAI,GAAA,CAAI,IAAI,EAAE,CAAA;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAMA,SAAS,YAAA,CACP,OAAA,EACA,IAAA,EACA,iBAAA,EACuC;AACvC,EAAA,MAAM,OAAkB,EAAC;AACzB,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,IAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AACb,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,GAAG,CAAA,EAAG;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,iBAAA,CAAkB,OAAO,CAAA,EAAG;AAC9B,MAAA,MAAM,CAAA,GAAI,IAAI,MAAM,CAAA;AACpB,MAAA,IAAI,CAAA,KAAM,aAAA,IAAiB,CAAA,KAAM,iBAAA,EAAmB;AAClD,QAAA,MAAM,EAAA,GAAK,IAAI,aAAa,CAAA;AAC5B,QAAA,IAAI,OAAO,OAAO,QAAA,IAAY,EAAA,KAAO,MAAM,iBAAA,CAAkB,GAAA,CAAI,EAAE,CAAA,EAAG;AACpE,UAAA,OAAA,GAAU,IAAA;AACV,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,EACf;AACA,EAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AACzB;AAeO,SAAS,eAAe,QAAA,EAAgC;AAC7D,EAAA,OAAO,UAAA,CAAW,QAAA,EAAU,CAAC,CAAA,KAAM;AACjC,IAAA,MAAM,CAAA,GAAI,EAAE,MAAM,CAAA;AAClB,IAAA,IAAI,CAAA,KAAM,UAAA,IAAc,CAAA,KAAM,mBAAA,EAAqB;AACjD,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,CAAA,GAAI,EAAE,oBAAoB,CAAA;AAChC,IAAA,OAAO,CAAA,KAAM,IAAA;AAAA,EACf,CAAC,CAAA;AACH;AAEA,SAAS,cAAc,CAAA,EAA0C;AAC/D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;;;ACtHO,SAAS,QAAA,CAAS,UAAqB,GAAA,EAAuC;AACnF,EAAA,IAAA,CAAK,IAAI,gBAAA,IAAoB,CAAA,IAAK,KAAK,QAAA,CAAS,MAAA,GAAU,IAAI,gBAAA,EAA6B;AACzF,IAAA,MAAM,iBAAA;AAAA,EACR;AAGA,EAAA,IAAA,CAAK,GAAA,CAAI,aAAA,IAAiB,CAAA,IAAK,CAAA,IAAA,CAAM,GAAA,CAAI,aAAA,IAAiB,CAAA,IAAK,CAAA,IAAA,CAAM,GAAA,CAAI,WAAA,IAAe,CAAA,IAAK,CAAA,EAAG;AAC9F,IAAA,eAAA,CAAgB,UAAU,GAAG,CAAA;AAAA,EAC/B;AAGA,EAAA,IAAI,GAAA,CAAI,mBAAA,IAAuB,GAAA,CAAI,mBAAA,CAAoB,SAAS,CAAA,EAAG;AACjE,IAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,IAAA,KAAA,MAAW,EAAA,IAAM,GAAA,CAAI,mBAAA,EAAqB,OAAA,CAAQ,IAAI,EAAY,CAAA;AAClE,IAAA,QAAA,GAAW,UAAA,CAAW,QAAA,EAAU,CAAC,CAAA,KAAM;AACrC,MAAA,MAAM,CAAA,GAAK,EAA8B,MAAM,CAAA;AAC/C,MAAA,OAAO,OAAO,CAAA,KAAM,QAAA,IAAY,OAAA,CAAQ,IAAI,CAAC,CAAA;AAAA,IAC/C,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,QAAA;AACT;AAMA,SAAS,eAAA,CAAgB,UAAqB,GAAA,EAAkC;AAC9E,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,CAACA,cAAAA,CAAc,GAAG,CAAA,EAAG;AACzB,IAAA,MAAM,OAAA,GAAU,IAAI,SAAS,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7B,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,MAAA,IAAI,CAACA,cAAAA,CAAc,GAAG,CAAA,EAAG;AACzB,MAAA,MAAM,EAAA,GAAK,IAAI,MAAM,CAAA;AACrB,MAAA,IAAI,OAAO,OAAO,QAAA,EAAU;AAE5B,MAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,MAAA,QAAQ,EAAA;AAAiB,QACvB,KAAK,OAAA;AACH,UAAA,KAAA,GAAQ,IAAI,aAAA,IAAiB,CAAA;AAC7B,UAAA;AAAA,QACF,KAAK,OAAA;AACH,UAAA,KAAA,GAAQ,IAAI,aAAA,IAAiB,CAAA;AAC7B,UAAA;AAAA,QACF,KAAK,UAAA;AACH,UAAA,KAAA,GAAQ,IAAI,WAAA,IAAe,CAAA;AAC3B,UAAA;AAAA,QACF;AACE,UAAA;AAAA;AAEJ,MAAA,IAAI,SAAS,CAAA,EAAG;AAEhB,MAAA,MAAM,IAAA,GAAO,kBAAkB,GAAG,CAAA;AAClC,MAAA,IAAI,SAAS,EAAA,EAAI;AACjB,MAAA,MAAM,MAAA,GAAS,iBAAiB,IAAI,CAAA;AACpC,MAAA,IAAI,SAAS,KAAA,EAAO;AAClB,QAAA,MAAM,IAAI,SAAA,CAAU,EAAA,EAAiB,MAAA,EAAQ,KAAK,CAAA;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACF;AAYA,SAAS,kBAAkB,KAAA,EAAwC;AACjE,EAAA,MAAM,GAAA,GAAM,MAAM,QAAQ,CAAA;AAC1B,EAAA,IAAI,CAACA,cAAAA,CAAc,GAAG,CAAA,EAAG,OAAO,EAAA;AAChC,EAAA,IAAI,GAAA,CAAI,MAAM,CAAA,KAAM,QAAA,EAAU,OAAO,EAAA;AACrC,EAAA,MAAM,OAAA,GAAU,IAAI,MAAM,CAAA;AAC1B,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,EAAU,OAAO,EAAA;AACxC,EAAA,IAAI,IAAA,GAAe,OAAA;AAGnB,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,SAAS,CAAA;AAChC,EAAA,IAAI,KAAK,CAAA,EAAG;AACV,IAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,GAAI,SAAA,CAAU,MAAM,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,iBAAiB,GAAA,EAAqB;AAE7C,EAAA,MAAM,IAAI,GAAA,CAAI,MAAA;AACd,EAAA,IAAI,GAAA,GAAM,CAAA;AACV,EAAA,IAAI,KAAK,CAAA,IAAK,GAAA,CAAI,CAAA,GAAI,CAAC,MAAM,GAAA,EAAK,GAAA,EAAA;AAClC,EAAA,IAAI,KAAK,CAAA,IAAK,GAAA,CAAI,CAAA,GAAI,CAAC,MAAM,GAAA,EAAK,GAAA,EAAA;AAClC,EAAA,OAAO,IAAA,CAAK,KAAA,CAAO,CAAA,GAAI,CAAA,GAAK,CAAC,CAAA,GAAI,GAAA;AACnC;AAEA,SAASA,eAAc,CAAA,EAA0C;AAC/D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE","file":"index.cjs","sourcesContent":["// sanitize/types.ts — 端口自 acosmi-sdk-go/sanitize/types.go\n//\n// Provider 无关的 content-block 防御性处理。\n// 职责边界:\n//   - SDK 层: 只做所有下游 provider 都不可能接受的底线剥除 + 早失败\n//   - Gateway 层: 按 provider preset 精细剥除 (不在本包内)\n\n/** Anthropic content block 类型 (请求 + 响应 + ephemeral) */\nexport type BlockType =\n  | 'text'\n  | 'image'\n  | 'video'\n  | 'document'\n  | 'search_result'\n  | 'thinking'\n  | 'redacted_thinking'\n  | 'tool_use'\n  | 'tool_result'\n  | 'tool_reference'\n  | 'server_tool_use'\n  | 'web_search_tool_result'\n  | 'code_execution_tool_result'\n  | 'mcp_tool_use'\n  | 'mcp_tool_result'\n  | 'container_upload';\n\nexport const BlockText: BlockType = 'text';\nexport const BlockImage: BlockType = 'image';\nexport const BlockVideo: BlockType = 'video';\nexport const BlockDocument: BlockType = 'document';\nexport const BlockSearchResult: BlockType = 'search_result';\nexport const BlockThinking: BlockType = 'thinking';\nexport const BlockRedactedThinking: BlockType = 'redacted_thinking';\nexport const BlockToolUse: BlockType = 'tool_use';\nexport const BlockToolResult: BlockType = 'tool_result';\nexport const BlockToolReference: BlockType = 'tool_reference';\nexport const BlockServerToolUse: BlockType = 'server_tool_use';\nexport const BlockWebSearchToolResult: BlockType = 'web_search_tool_result';\nexport const BlockCodeExecutionToolResult: BlockType = 'code_execution_tool_result';\nexport const BlockMCPToolUse: BlockType = 'mcp_tool_use';\nexport const BlockMCPToolResult: BlockType = 'mcp_tool_result';\nexport const BlockContainerUpload: BlockType = 'container_upload';\n\n/** 流式响应 delta 类型 (与 BlockType 正交) */\nexport type DeltaType =\n  | 'text_delta'\n  | 'input_json_delta'\n  | 'thinking_delta'\n  | 'signature_delta'\n  | 'citations_delta';\n\nexport const DeltaText: DeltaType = 'text_delta';\nexport const DeltaInputJSON: DeltaType = 'input_json_delta';\nexport const DeltaThinking: DeltaType = 'thinking_delta';\nexport const DeltaSignature: DeltaType = 'signature_delta';\nexport const DeltaCitations: DeltaType = 'citations_delta';\n\n/**\n * 网关在 block JSON 中注入的 in-band 标记字段名。\n * 存在且值为 true 时代表该 block 不应回传下一轮。\n *\n * 选择 in-band 标记而非独立 SSE 事件的理由:\n *   - 零缓冲 / 零顺序依赖 / 零延迟\n *   - history 剥离天然可做\n */\nexport const EphemeralMarkerField = 'acosmi_ephemeral';\n","// sanitize/config.ts — 端口自 acosmi-sdk-go/sanitize/config.go\n\nimport type { BlockType } from './types';\n\n/**\n * SDK 层防御性配置。只做所有下游 provider 都不可能接受的底线剥除;\n * 具体 provider 适配由网关承担。\n *\n * 零值 = 不校验 / 不剥除, 等价于未启用。\n */\nexport interface MinimalSanitizeConfig {\n  /** 体积上限 (字节, 仅对 base64 内联媒体生效; URL 版交网关把关). 0 = 不校验. */\n  maxImageBytes?: number;\n  maxVideoBytes?: number;\n  maxPDFBytes?: number;\n\n  /** history 轮次硬上限 (防止内存爆炸 / 上行带宽). 0 = 不校验. 超限抛 ErrHistoryTooDeep. */\n  maxMessagesTurns?: number;\n\n  /** 公共黑名单 (所有 provider 均拒绝的 block 类型). 默认空. */\n  permanentDenyBlocks?: BlockType[];\n}\n\nexport class HistoryTooDeepError extends Error {\n  constructor() {\n    super('sanitize: messages history exceeds configured depth');\n    this.name = 'HistoryTooDeepError';\n  }\n}\n\nexport class BlockDeniedError extends Error {\n  constructor() {\n    super('sanitize: block type permanently denied');\n    this.name = 'BlockDeniedError';\n  }\n}\n\n/** 体积超限错误, 携带实际/上限字节数以便上游展示。 */\nexport class SizeError extends Error {\n  blockType: BlockType;\n  actual: number;\n  limit: number;\n\n  constructor(blockType: BlockType, actual: number, limit: number) {\n    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);\n    this.name = 'SizeError';\n    this.blockType = blockType;\n    this.actual = actual;\n    this.limit = limit;\n  }\n}\n\n// 单例实例 — 与 Go 侧 var ErrHistoryTooDeep / ErrBlockDenied 等价的\"哨兵\"用法\n// 但 TS class 实例不能 const 哨兵化, 调用方应用 instanceof 判断。\nexport const ErrHistoryTooDeep = new HistoryTooDeepError();\nexport const ErrBlockDenied = new BlockDeniedError();\n","// sanitize/history.ts — 端口自 acosmi-sdk-go/sanitize/history.go\n\nimport { EphemeralMarkerField } from './types';\n\n/** 判定一个 block 是否应被剥除 */\nexport type BlockPredicate = (block: Record<string, unknown>) => boolean;\n\n/**\n * 按 pred 从 messages 中剥除 block, 并联动剥除对应的 tool_result (user 轮)。\n *\n * 收敛两步: 先扫收集 droppedToolUseIDs, 再整体剥; 这样顺序不影响正确性\n * (即使 tool_result 在 tool_use 之前出现也能捕获)。\n *\n * 不修改入参 messages 中任何 map 的 key, 只重构数组。\n * 未被修改的 message 保持原引用 (零拷贝优化)。\n */\nexport function dropBlocks(messages: unknown[], pred: BlockPredicate): unknown[] {\n  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);\n\n  const out: unknown[] = [];\n  for (const msg of messages) {\n    if (!isPlainObject(msg)) {\n      out.push(msg);\n      continue;\n    }\n    const content = msg['content'];\n    if (!Array.isArray(content)) {\n      out.push(msg);\n      continue;\n    }\n\n    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);\n    if (!changed) {\n      out.push(msg);\n      continue;\n    }\n\n    // content 空了的消息整条丢弃 (assistant 本轮全是 ephemeral 块;\n    // 或 user 轮全是联动剥的 tool_result)。避免产生空消息让 provider 报错。\n    if (kept.length === 0) {\n      continue;\n    }\n\n    // 浅拷贝 msg, 只改 content, 避免污染调用方数据。\n    const newMsg: Record<string, unknown> = { ...msg };\n    newMsg['content'] = kept;\n    out.push(newMsg);\n  }\n  return out;\n}\n\n/** 第一遍扫描, 仅收集\"本次被 pred 命中的 tool_use 类 block 的 id\", 以便联动剥 tool_result。 */\nfunction collectDroppedToolUseIDs(messages: unknown[], pred: BlockPredicate): Set<string> {\n  const ids = new Set<string>();\n  for (const msg of messages) {\n    if (!isPlainObject(msg)) continue;\n    const content = msg['content'];\n    if (!Array.isArray(content)) continue;\n    for (const raw of content) {\n      if (!isPlainObject(raw)) continue;\n      if (!pred(raw)) continue;\n      const t = raw['type'];\n      if (typeof t !== 'string') continue;\n      if (t === 'tool_use' || t === 'server_tool_use' || t === 'mcp_tool_use') {\n        const id = raw['id'];\n        if (typeof id === 'string' && id !== '') ids.add(id);\n      }\n    }\n  }\n  return ids;\n}\n\n/**\n * 对单条消息的 content 数组剥除 pred 命中的 block, 以及\n * tool_use_id 在 droppedToolUseIDs 中的 tool_result。返回 (新数组, 是否变更)。\n */\nfunction filterBlocks(\n  content: unknown[],\n  pred: BlockPredicate,\n  droppedToolUseIDs: Set<string>,\n): { kept: unknown[]; changed: boolean } {\n  const kept: unknown[] = [];\n  let changed = false;\n  for (const raw of content) {\n    if (!isPlainObject(raw)) {\n      kept.push(raw);\n      continue;\n    }\n    if (pred(raw)) {\n      changed = true;\n      continue;\n    }\n    // 联动剥 tool_result / mcp_tool_result (仅当 tool_use_id 命中)\n    if (droppedToolUseIDs.size > 0) {\n      const t = raw['type'];\n      if (t === 'tool_result' || t === 'mcp_tool_result') {\n        const id = raw['tool_use_id'];\n        if (typeof id === 'string' && id !== '' && droppedToolUseIDs.has(id)) {\n          changed = true;\n          continue;\n        }\n      }\n    }\n    kept.push(raw);\n  }\n  return { kept, changed };\n}\n\n/**\n * 从 messages 中剥除带 acosmi_ephemeral:true 标记的 block, 以及对应的 tool_result。\n *\n * 硬豁免: thinking / redacted_thinking 块永不剥, 即使携带 ephemeral 标记。\n *\n * 理由: Anthropic extended thinking + tool_use 续轮场景下, 上游强制要求\n * assistant 历史中保留原始 thinking 块, 否则返回:\n *   \"The content[].thinking in the thinking mode must be passed back to the API.\"\n *\n * 历史污染防御: 即使旧版网关 / 历史响应里 thinking 块带了 ephemeral=true,\n * 客户端在调用 stripEphemeral 时也不应剥除。网关侧 anthropic preset 已停止注入此标记,\n * 本豁免兜底历史会话与第三方调用方两类已污染场景。\n */\nexport function stripEphemeral(messages: unknown[]): unknown[] {\n  return dropBlocks(messages, (b) => {\n    const t = b['type'];\n    if (t === 'thinking' || t === 'redacted_thinking') {\n      return false; // 硬豁免, 不可被 ephemeral 标记覆盖\n    }\n    const v = b[EphemeralMarkerField];\n    return v === true;\n  });\n}\n\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === 'object' && v !== null && !Array.isArray(v);\n}\n","// sanitize/defensive.ts — 端口自 acosmi-sdk-go/sanitize/defensive.go\n\nimport type { BlockType } from './types';\nimport type { MinimalSanitizeConfig } from './config';\nimport { ErrHistoryTooDeep, SizeError } from './config';\nimport { dropBlocks } from './history';\n\n/**\n * 对已经解析为 unknown[] 的 messages 做底线防御: 深度校验 +\n * 体积校验 + deny-list 剥除 + tool_use_id 联动剥除 tool_result。\n *\n * 入参形态: messages 的每个元素预期是 object (含 role / content); content 为 string (plain text)\n * 或 unknown[] (block 数组)。形态异常的元素原样透传, 不抛错。\n *\n * 通过返回新 messages (可能 block 数组被缩减); 早失败抛错 (调用方应放弃本次请求)。\n */\nexport function sanitize(messages: unknown[], cfg: MinimalSanitizeConfig): unknown[] {\n  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > (cfg.maxMessagesTurns as number)) {\n    throw ErrHistoryTooDeep;\n  }\n\n  // 体积校验: 先扫一遍, 任何违规直接早失败 (不修改 messages)\n  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {\n    checkMediaSizes(messages, cfg);\n  }\n\n  // deny-list 剥除 + tool_use_id 联动\n  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {\n    const denySet = new Set<string>();\n    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt as string);\n    messages = dropBlocks(messages, (b) => {\n      const t = (b as Record<string, unknown>)['type'];\n      return typeof t === 'string' && denySet.has(t);\n    });\n  }\n\n  return messages;\n}\n\n/**\n * 遍历所有 block, 对 base64 内联 image/video/document 类型校验解码后字节数。\n * URL 版无法本地量体积, 跳过 (交网关把关)。违规直接抛 SizeError。\n */\nfunction checkMediaSizes(messages: unknown[], cfg: MinimalSanitizeConfig): void {\n  for (const msg of messages) {\n    if (!isPlainObject(msg)) continue;\n    const content = msg['content'];\n    if (!Array.isArray(content)) continue;\n    for (const raw of content) {\n      if (!isPlainObject(raw)) continue;\n      const bt = raw['type'];\n      if (typeof bt !== 'string') continue;\n\n      let limit = 0;\n      switch (bt as BlockType) {\n        case 'image':\n          limit = cfg.maxImageBytes ?? 0;\n          break;\n        case 'video':\n          limit = cfg.maxVideoBytes ?? 0;\n          break;\n        case 'document':\n          limit = cfg.maxPDFBytes ?? 0;\n          break;\n        default:\n          continue;\n      }\n      if (limit <= 0) continue;\n\n      const data = extractBase64Data(raw);\n      if (data === '') continue; // URL 版或形态异常, 跳过\n      const actual = base64DecodedLen(data);\n      if (actual > limit) {\n        throw new SizeError(bt as BlockType, actual, limit);\n      }\n    }\n  }\n}\n\n/**\n * 从 Anthropic block 结构中抽 base64 data 字段。\n *\n * 形态:\n *   image:    {source:{type:\"base64\", data:\"...\"}}\n *   video:    {source:{type:\"base64\", data:\"...\"}}\n *   document: {source:{type:\"base64\", data:\"...\"}}\n *\n * 若是 URL 版 (source.type=\"url\") 或缺字段, 返回 \"\"。\n */\nfunction extractBase64Data(block: Record<string, unknown>): string {\n  const src = block['source'];\n  if (!isPlainObject(src)) return '';\n  if (src['type'] !== 'base64') return '';\n  const dataRaw = src['data'];\n  if (typeof dataRaw !== 'string') return '';\n  let data: string = dataRaw;\n  // 防御性: 某些上游把 \"data:image/jpeg;base64,...\" 整串塞进 data,\n  // 虽非标准但兜底去掉前缀, 保证字节数估算正确。\n  const i = data.indexOf('base64,');\n  if (i >= 0) {\n    data = data.slice(i + 'base64,'.length);\n  }\n  return data;\n}\n\n/** Go base64.StdEncoding.DecodedLen 等价: ceil(n*3/4) 减去 padding */\nfunction base64DecodedLen(b64: string): number {\n  // Go 的 DecodedLen(n) = (n / 4) * 3 - paddingCount\n  const n = b64.length;\n  let pad = 0;\n  if (n >= 1 && b64[n - 1] === '=') pad++;\n  if (n >= 2 && b64[n - 2] === '=') pad++;\n  return Math.floor((n * 3) / 4) - pad;\n}\n\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === 'object' && v !== null && !Array.isArray(v);\n}\n"]}

package/dist/node/sanitize/index.d.cts

@@ -0,0 +1 @@
+export { B as BlockCodeExecutionToolResult, a as BlockContainerUpload, b as BlockDeniedError, c as BlockDocument, d as BlockImage, e as BlockMCPToolResult, f as BlockMCPToolUse, g as BlockPredicate, h as BlockRedactedThinking, j as BlockSearchResult, k as BlockServerToolUse, l as BlockText, m as BlockThinking, n as BlockToolReference, o as BlockToolResult, p as BlockToolUse, q as BlockType, r as BlockVideo, s as BlockWebSearchToolResult, D as DeltaCitations, t as DeltaInputJSON, u as DeltaSignature, v as DeltaText, w as DeltaThinking, x as DeltaType, E as EphemeralMarkerField, y as ErrBlockDenied, z as ErrHistoryTooDeep, H as HistoryTooDeepError, M as MinimalSanitizeConfig, S as SizeError, A as dropBlocks, C as sanitize, F as stripEphemeral } from '../index-nvLKgCm9.cjs';

package/dist/node/sanitize/index.d.ts

@@ -0,0 +1 @@
+export { B as BlockCodeExecutionToolResult, a as BlockContainerUpload, b as BlockDeniedError, c as BlockDocument, d as BlockImage, e as BlockMCPToolResult, f as BlockMCPToolUse, g as BlockPredicate, h as BlockRedactedThinking, j as BlockSearchResult, k as BlockServerToolUse, l as BlockText, m as BlockThinking, n as BlockToolReference, o as BlockToolResult, p as BlockToolUse, q as BlockType, r as BlockVideo, s as BlockWebSearchToolResult, D as DeltaCitations, t as DeltaInputJSON, u as DeltaSignature, v as DeltaText, w as DeltaThinking, x as DeltaType, E as EphemeralMarkerField, y as ErrBlockDenied, z as ErrHistoryTooDeep, H as HistoryTooDeepError, M as MinimalSanitizeConfig, S as SizeError, A as dropBlocks, C as sanitize, F as stripEphemeral } from '../index-nvLKgCm9.js';

package/dist/node/sanitize/index.js

@@ -0,0 +1,217 @@
+// src/sanitize/types.ts
+var BlockText = "text";
+var BlockImage = "image";
+var BlockVideo = "video";
+var BlockDocument = "document";
+var BlockSearchResult = "search_result";
+var BlockThinking = "thinking";
+var BlockRedactedThinking = "redacted_thinking";
+var BlockToolUse = "tool_use";
+var BlockToolResult = "tool_result";
+var BlockToolReference = "tool_reference";
+var BlockServerToolUse = "server_tool_use";
+var BlockWebSearchToolResult = "web_search_tool_result";
+var BlockCodeExecutionToolResult = "code_execution_tool_result";
+var BlockMCPToolUse = "mcp_tool_use";
+var BlockMCPToolResult = "mcp_tool_result";
+var BlockContainerUpload = "container_upload";
+var DeltaText = "text_delta";
+var DeltaInputJSON = "input_json_delta";
+var DeltaThinking = "thinking_delta";
+var DeltaSignature = "signature_delta";
+var DeltaCitations = "citations_delta";
+var EphemeralMarkerField = "acosmi_ephemeral";
+
+// src/sanitize/config.ts
+var HistoryTooDeepError = class extends Error {
+  constructor() {
+    super("sanitize: messages history exceeds configured depth");
+    this.name = "HistoryTooDeepError";
+  }
+};
+var BlockDeniedError = class extends Error {
+  constructor() {
+    super("sanitize: block type permanently denied");
+    this.name = "BlockDeniedError";
+  }
+};
+var SizeError = class extends Error {
+  blockType;
+  actual;
+  limit;
+  constructor(blockType, actual, limit) {
+    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);
+    this.name = "SizeError";
+    this.blockType = blockType;
+    this.actual = actual;
+    this.limit = limit;
+  }
+};
+var ErrHistoryTooDeep = new HistoryTooDeepError();
+var ErrBlockDenied = new BlockDeniedError();
+
+// src/sanitize/history.ts
+function dropBlocks(messages, pred) {
+  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);
+  const out = [];
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) {
+      out.push(msg);
+      continue;
+    }
+    const content = msg["content"];
+    if (!Array.isArray(content)) {
+      out.push(msg);
+      continue;
+    }
+    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);
+    if (!changed) {
+      out.push(msg);
+      continue;
+    }
+    if (kept.length === 0) {
+      continue;
+    }
+    const newMsg = { ...msg };
+    newMsg["content"] = kept;
+    out.push(newMsg);
+  }
+  return out;
+}
+function collectDroppedToolUseIDs(messages, pred) {
+  const ids = /* @__PURE__ */ new Set();
+  for (const msg of messages) {
+    if (!isPlainObject(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject(raw)) continue;
+      if (!pred(raw)) continue;
+      const t = raw["type"];
+      if (typeof t !== "string") continue;
+      if (t === "tool_use" || t === "server_tool_use" || t === "mcp_tool_use") {
+        const id = raw["id"];
+        if (typeof id === "string" && id !== "") ids.add(id);
+      }
+    }
+  }
+  return ids;
+}
+function filterBlocks(content, pred, droppedToolUseIDs) {
+  const kept = [];
+  let changed = false;
+  for (const raw of content) {
+    if (!isPlainObject(raw)) {
+      kept.push(raw);
+      continue;
+    }
+    if (pred(raw)) {
+      changed = true;
+      continue;
+    }
+    if (droppedToolUseIDs.size > 0) {
+      const t = raw["type"];
+      if (t === "tool_result" || t === "mcp_tool_result") {
+        const id = raw["tool_use_id"];
+        if (typeof id === "string" && id !== "" && droppedToolUseIDs.has(id)) {
+          changed = true;
+          continue;
+        }
+      }
+    }
+    kept.push(raw);
+  }
+  return { kept, changed };
+}
+function stripEphemeral(messages) {
+  return dropBlocks(messages, (b) => {
+    const t = b["type"];
+    if (t === "thinking" || t === "redacted_thinking") {
+      return false;
+    }
+    const v = b[EphemeralMarkerField];
+    return v === true;
+  });
+}
+function isPlainObject(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+// src/sanitize/defensive.ts
+function sanitize(messages, cfg) {
+  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > cfg.maxMessagesTurns) {
+    throw ErrHistoryTooDeep;
+  }
+  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {
+    checkMediaSizes(messages, cfg);
+  }
+  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {
+    const denySet = /* @__PURE__ */ new Set();
+    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt);
+    messages = dropBlocks(messages, (b) => {
+      const t = b["type"];
+      return typeof t === "string" && denySet.has(t);
+    });
+  }
+  return messages;
+}
+function checkMediaSizes(messages, cfg) {
+  for (const msg of messages) {
+    if (!isPlainObject2(msg)) continue;
+    const content = msg["content"];
+    if (!Array.isArray(content)) continue;
+    for (const raw of content) {
+      if (!isPlainObject2(raw)) continue;
+      const bt = raw["type"];
+      if (typeof bt !== "string") continue;
+      let limit = 0;
+      switch (bt) {
+        case "image":
+          limit = cfg.maxImageBytes ?? 0;
+          break;
+        case "video":
+          limit = cfg.maxVideoBytes ?? 0;
+          break;
+        case "document":
+          limit = cfg.maxPDFBytes ?? 0;
+          break;
+        default:
+          continue;
+      }
+      if (limit <= 0) continue;
+      const data = extractBase64Data(raw);
+      if (data === "") continue;
+      const actual = base64DecodedLen(data);
+      if (actual > limit) {
+        throw new SizeError(bt, actual, limit);
+      }
+    }
+  }
+}
+function extractBase64Data(block) {
+  const src = block["source"];
+  if (!isPlainObject2(src)) return "";
+  if (src["type"] !== "base64") return "";
+  const dataRaw = src["data"];
+  if (typeof dataRaw !== "string") return "";
+  let data = dataRaw;
+  const i = data.indexOf("base64,");
+  if (i >= 0) {
+    data = data.slice(i + "base64,".length);
+  }
+  return data;
+}
+function base64DecodedLen(b64) {
+  const n = b64.length;
+  let pad = 0;
+  if (n >= 1 && b64[n - 1] === "=") pad++;
+  if (n >= 2 && b64[n - 2] === "=") pad++;
+  return Math.floor(n * 3 / 4) - pad;
+}
+function isPlainObject2(v) {
+  return typeof v === "object" && v !== null && !Array.isArray(v);
+}
+
+export { BlockCodeExecutionToolResult, BlockContainerUpload, BlockDeniedError, BlockDocument, BlockImage, BlockMCPToolResult, BlockMCPToolUse, BlockRedactedThinking, BlockSearchResult, BlockServerToolUse, BlockText, BlockThinking, BlockToolReference, BlockToolResult, BlockToolUse, BlockVideo, BlockWebSearchToolResult, DeltaCitations, DeltaInputJSON, DeltaSignature, DeltaText, DeltaThinking, EphemeralMarkerField, ErrBlockDenied, ErrHistoryTooDeep, HistoryTooDeepError, SizeError, dropBlocks, sanitize, stripEphemeral };
+//# sourceMappingURL=index.js.map
+//# sourceMappingURL=index.js.map

package/dist/node/sanitize/index.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../../src/sanitize/types.ts","../../../src/sanitize/config.ts","../../../src/sanitize/history.ts","../../../src/sanitize/defensive.ts"],"names":["isPlainObject"],"mappings":";AA0BO,IAAM,SAAA,GAAuB;AAC7B,IAAM,UAAA,GAAwB;AAC9B,IAAM,UAAA,GAAwB;AAC9B,IAAM,aAAA,GAA2B;AACjC,IAAM,iBAAA,GAA+B;AACrC,IAAM,aAAA,GAA2B;AACjC,IAAM,qBAAA,GAAmC;AACzC,IAAM,YAAA,GAA0B;AAChC,IAAM,eAAA,GAA6B;AACnC,IAAM,kBAAA,GAAgC;AACtC,IAAM,kBAAA,GAAgC;AACtC,IAAM,wBAAA,GAAsC;AAC5C,IAAM,4BAAA,GAA0C;AAChD,IAAM,eAAA,GAA6B;AACnC,IAAM,kBAAA,GAAgC;AACtC,IAAM,oBAAA,GAAkC;AAUxC,IAAM,SAAA,GAAuB;AAC7B,IAAM,cAAA,GAA4B;AAClC,IAAM,aAAA,GAA2B;AACjC,IAAM,cAAA,GAA4B;AAClC,IAAM,cAAA,GAA4B;AAUlC,IAAM,oBAAA,GAAuB;;;AC1C7B,IAAM,mBAAA,GAAN,cAAkC,KAAA,CAAM;AAAA,EAC7C,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,qDAAqD,CAAA;AAC3D,IAAA,IAAA,CAAK,IAAA,GAAO,qBAAA;AAAA,EACd;AACF;AAEO,IAAM,gBAAA,GAAN,cAA+B,KAAA,CAAM;AAAA,EAC1C,WAAA,GAAc;AACZ,IAAA,KAAA,CAAM,yCAAyC,CAAA;AAC/C,IAAA,IAAA,CAAK,IAAA,GAAO,kBAAA;AAAA,EACd;AACF;AAGO,IAAM,SAAA,GAAN,cAAwB,KAAA,CAAM;AAAA,EACnC,SAAA;AAAA,EACA,MAAA;AAAA,EACA,KAAA;AAAA,EAEA,WAAA,CAAY,SAAA,EAAsB,MAAA,EAAgB,KAAA,EAAe;AAC/D,IAAA,KAAA,CAAM,aAAa,SAAS,CAAA,aAAA,EAAgB,MAAM,CAAA,eAAA,EAAkB,KAAK,CAAA,CAAE,CAAA;AAC3E,IAAA,IAAA,CAAK,IAAA,GAAO,WAAA;AACZ,IAAA,IAAA,CAAK,SAAA,GAAY,SAAA;AACjB,IAAA,IAAA,CAAK,MAAA,GAAS,MAAA;AACd,IAAA,IAAA,CAAK,KAAA,GAAQ,KAAA;AAAA,EACf;AACF;AAIO,IAAM,iBAAA,GAAoB,IAAI,mBAAA;AAC9B,IAAM,cAAA,GAAiB,IAAI,gBAAA;;;ACvC3B,SAAS,UAAA,CAAW,UAAqB,IAAA,EAAiC;AAC/E,EAAA,MAAM,iBAAA,GAAoB,wBAAA,CAAyB,QAAA,EAAU,IAAI,CAAA;AAEjE,EAAA,MAAM,MAAiB,EAAC;AACxB,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AACZ,MAAA;AAAA,IACF;AACA,IAAA,MAAM,OAAA,GAAU,IAAI,SAAS,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC3B,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AACZ,MAAA;AAAA,IACF;AAEA,IAAA,MAAM,EAAE,IAAA,EAAM,OAAA,KAAY,YAAA,CAAa,OAAA,EAAS,MAAM,iBAAiB,CAAA;AACvE,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,GAAA,CAAI,KAAK,GAAG,CAAA;AACZ,MAAA;AAAA,IACF;AAIA,IAAA,IAAI,IAAA,CAAK,WAAW,CAAA,EAAG;AACrB,MAAA;AAAA,IACF;AAGA,IAAA,MAAM,MAAA,GAAkC,EAAE,GAAG,GAAA,EAAI;AACjD,IAAA,MAAA,CAAO,SAAS,CAAA,GAAI,IAAA;AACpB,IAAA,GAAA,CAAI,KAAK,MAAM,CAAA;AAAA,EACjB;AACA,EAAA,OAAO,GAAA;AACT;AAGA,SAAS,wBAAA,CAAyB,UAAqB,IAAA,EAAmC;AACxF,EAAA,MAAM,GAAA,uBAAU,GAAA,EAAY;AAC5B,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACzB,IAAA,MAAM,OAAA,GAAU,IAAI,SAAS,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7B,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,MAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACzB,MAAA,IAAI,CAAC,IAAA,CAAK,GAAG,CAAA,EAAG;AAChB,MAAA,MAAM,CAAA,GAAI,IAAI,MAAM,CAAA;AACpB,MAAA,IAAI,OAAO,MAAM,QAAA,EAAU;AAC3B,MAAA,IAAI,CAAA,KAAM,UAAA,IAAc,CAAA,KAAM,iBAAA,IAAqB,MAAM,cAAA,EAAgB;AACvE,QAAA,MAAM,EAAA,GAAK,IAAI,IAAI,CAAA;AACnB,QAAA,IAAI,OAAO,EAAA,KAAO,QAAA,IAAY,OAAO,EAAA,EAAI,GAAA,CAAI,IAAI,EAAE,CAAA;AAAA,MACrD;AAAA,IACF;AAAA,EACF;AACA,EAAA,OAAO,GAAA;AACT;AAMA,SAAS,YAAA,CACP,OAAA,EACA,IAAA,EACA,iBAAA,EACuC;AACvC,EAAA,MAAM,OAAkB,EAAC;AACzB,EAAA,IAAI,OAAA,GAAU,KAAA;AACd,EAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,IAAA,IAAI,CAAC,aAAA,CAAc,GAAG,CAAA,EAAG;AACvB,MAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AACb,MAAA;AAAA,IACF;AACA,IAAA,IAAI,IAAA,CAAK,GAAG,CAAA,EAAG;AACb,MAAA,OAAA,GAAU,IAAA;AACV,MAAA;AAAA,IACF;AAEA,IAAA,IAAI,iBAAA,CAAkB,OAAO,CAAA,EAAG;AAC9B,MAAA,MAAM,CAAA,GAAI,IAAI,MAAM,CAAA;AACpB,MAAA,IAAI,CAAA,KAAM,aAAA,IAAiB,CAAA,KAAM,iBAAA,EAAmB;AAClD,QAAA,MAAM,EAAA,GAAK,IAAI,aAAa,CAAA;AAC5B,QAAA,IAAI,OAAO,OAAO,QAAA,IAAY,EAAA,KAAO,MAAM,iBAAA,CAAkB,GAAA,CAAI,EAAE,CAAA,EAAG;AACpE,UAAA,OAAA,GAAU,IAAA;AACV,UAAA;AAAA,QACF;AAAA,MACF;AAAA,IACF;AACA,IAAA,IAAA,CAAK,KAAK,GAAG,CAAA;AAAA,EACf;AACA,EAAA,OAAO,EAAE,MAAM,OAAA,EAAQ;AACzB;AAeO,SAAS,eAAe,QAAA,EAAgC;AAC7D,EAAA,OAAO,UAAA,CAAW,QAAA,EAAU,CAAC,CAAA,KAAM;AACjC,IAAA,MAAM,CAAA,GAAI,EAAE,MAAM,CAAA;AAClB,IAAA,IAAI,CAAA,KAAM,UAAA,IAAc,CAAA,KAAM,mBAAA,EAAqB;AACjD,MAAA,OAAO,KAAA;AAAA,IACT;AACA,IAAA,MAAM,CAAA,GAAI,EAAE,oBAAoB,CAAA;AAChC,IAAA,OAAO,CAAA,KAAM,IAAA;AAAA,EACf,CAAC,CAAA;AACH;AAEA,SAAS,cAAc,CAAA,EAA0C;AAC/D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE;;;ACtHO,SAAS,QAAA,CAAS,UAAqB,GAAA,EAAuC;AACnF,EAAA,IAAA,CAAK,IAAI,gBAAA,IAAoB,CAAA,IAAK,KAAK,QAAA,CAAS,MAAA,GAAU,IAAI,gBAAA,EAA6B;AACzF,IAAA,MAAM,iBAAA;AAAA,EACR;AAGA,EAAA,IAAA,CAAK,GAAA,CAAI,aAAA,IAAiB,CAAA,IAAK,CAAA,IAAA,CAAM,GAAA,CAAI,aAAA,IAAiB,CAAA,IAAK,CAAA,IAAA,CAAM,GAAA,CAAI,WAAA,IAAe,CAAA,IAAK,CAAA,EAAG;AAC9F,IAAA,eAAA,CAAgB,UAAU,GAAG,CAAA;AAAA,EAC/B;AAGA,EAAA,IAAI,GAAA,CAAI,mBAAA,IAAuB,GAAA,CAAI,mBAAA,CAAoB,SAAS,CAAA,EAAG;AACjE,IAAA,MAAM,OAAA,uBAAc,GAAA,EAAY;AAChC,IAAA,KAAA,MAAW,EAAA,IAAM,GAAA,CAAI,mBAAA,EAAqB,OAAA,CAAQ,IAAI,EAAY,CAAA;AAClE,IAAA,QAAA,GAAW,UAAA,CAAW,QAAA,EAAU,CAAC,CAAA,KAAM;AACrC,MAAA,MAAM,CAAA,GAAK,EAA8B,MAAM,CAAA;AAC/C,MAAA,OAAO,OAAO,CAAA,KAAM,QAAA,IAAY,OAAA,CAAQ,IAAI,CAAC,CAAA;AAAA,IAC/C,CAAC,CAAA;AAAA,EACH;AAEA,EAAA,OAAO,QAAA;AACT;AAMA,SAAS,eAAA,CAAgB,UAAqB,GAAA,EAAkC;AAC9E,EAAA,KAAA,MAAW,OAAO,QAAA,EAAU;AAC1B,IAAA,IAAI,CAACA,cAAAA,CAAc,GAAG,CAAA,EAAG;AACzB,IAAA,MAAM,OAAA,GAAU,IAAI,SAAS,CAAA;AAC7B,IAAA,IAAI,CAAC,KAAA,CAAM,OAAA,CAAQ,OAAO,CAAA,EAAG;AAC7B,IAAA,KAAA,MAAW,OAAO,OAAA,EAAS;AACzB,MAAA,IAAI,CAACA,cAAAA,CAAc,GAAG,CAAA,EAAG;AACzB,MAAA,MAAM,EAAA,GAAK,IAAI,MAAM,CAAA;AACrB,MAAA,IAAI,OAAO,OAAO,QAAA,EAAU;AAE5B,MAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,MAAA,QAAQ,EAAA;AAAiB,QACvB,KAAK,OAAA;AACH,UAAA,KAAA,GAAQ,IAAI,aAAA,IAAiB,CAAA;AAC7B,UAAA;AAAA,QACF,KAAK,OAAA;AACH,UAAA,KAAA,GAAQ,IAAI,aAAA,IAAiB,CAAA;AAC7B,UAAA;AAAA,QACF,KAAK,UAAA;AACH,UAAA,KAAA,GAAQ,IAAI,WAAA,IAAe,CAAA;AAC3B,UAAA;AAAA,QACF;AACE,UAAA;AAAA;AAEJ,MAAA,IAAI,SAAS,CAAA,EAAG;AAEhB,MAAA,MAAM,IAAA,GAAO,kBAAkB,GAAG,CAAA;AAClC,MAAA,IAAI,SAAS,EAAA,EAAI;AACjB,MAAA,MAAM,MAAA,GAAS,iBAAiB,IAAI,CAAA;AACpC,MAAA,IAAI,SAAS,KAAA,EAAO;AAClB,QAAA,MAAM,IAAI,SAAA,CAAU,EAAA,EAAiB,MAAA,EAAQ,KAAK,CAAA;AAAA,MACpD;AAAA,IACF;AAAA,EACF;AACF;AAYA,SAAS,kBAAkB,KAAA,EAAwC;AACjE,EAAA,MAAM,GAAA,GAAM,MAAM,QAAQ,CAAA;AAC1B,EAAA,IAAI,CAACA,cAAAA,CAAc,GAAG,CAAA,EAAG,OAAO,EAAA;AAChC,EAAA,IAAI,GAAA,CAAI,MAAM,CAAA,KAAM,QAAA,EAAU,OAAO,EAAA;AACrC,EAAA,MAAM,OAAA,GAAU,IAAI,MAAM,CAAA;AAC1B,EAAA,IAAI,OAAO,OAAA,KAAY,QAAA,EAAU,OAAO,EAAA;AACxC,EAAA,IAAI,IAAA,GAAe,OAAA;AAGnB,EAAA,MAAM,CAAA,GAAI,IAAA,CAAK,OAAA,CAAQ,SAAS,CAAA;AAChC,EAAA,IAAI,KAAK,CAAA,EAAG;AACV,IAAA,IAAA,GAAO,IAAA,CAAK,KAAA,CAAM,CAAA,GAAI,SAAA,CAAU,MAAM,CAAA;AAAA,EACxC;AACA,EAAA,OAAO,IAAA;AACT;AAGA,SAAS,iBAAiB,GAAA,EAAqB;AAE7C,EAAA,MAAM,IAAI,GAAA,CAAI,MAAA;AACd,EAAA,IAAI,GAAA,GAAM,CAAA;AACV,EAAA,IAAI,KAAK,CAAA,IAAK,GAAA,CAAI,CAAA,GAAI,CAAC,MAAM,GAAA,EAAK,GAAA,EAAA;AAClC,EAAA,IAAI,KAAK,CAAA,IAAK,GAAA,CAAI,CAAA,GAAI,CAAC,MAAM,GAAA,EAAK,GAAA,EAAA;AAClC,EAAA,OAAO,IAAA,CAAK,KAAA,CAAO,CAAA,GAAI,CAAA,GAAK,CAAC,CAAA,GAAI,GAAA;AACnC;AAEA,SAASA,eAAc,CAAA,EAA0C;AAC/D,EAAA,OAAO,OAAO,MAAM,QAAA,IAAY,CAAA,KAAM,QAAQ,CAAC,KAAA,CAAM,QAAQ,CAAC,CAAA;AAChE","file":"index.js","sourcesContent":["// sanitize/types.ts — 端口自 acosmi-sdk-go/sanitize/types.go\n//\n// Provider 无关的 content-block 防御性处理。\n// 职责边界:\n//   - SDK 层: 只做所有下游 provider 都不可能接受的底线剥除 + 早失败\n//   - Gateway 层: 按 provider preset 精细剥除 (不在本包内)\n\n/** Anthropic content block 类型 (请求 + 响应 + ephemeral) */\nexport type BlockType =\n  | 'text'\n  | 'image'\n  | 'video'\n  | 'document'\n  | 'search_result'\n  | 'thinking'\n  | 'redacted_thinking'\n  | 'tool_use'\n  | 'tool_result'\n  | 'tool_reference'\n  | 'server_tool_use'\n  | 'web_search_tool_result'\n  | 'code_execution_tool_result'\n  | 'mcp_tool_use'\n  | 'mcp_tool_result'\n  | 'container_upload';\n\nexport const BlockText: BlockType = 'text';\nexport const BlockImage: BlockType = 'image';\nexport const BlockVideo: BlockType = 'video';\nexport const BlockDocument: BlockType = 'document';\nexport const BlockSearchResult: BlockType = 'search_result';\nexport const BlockThinking: BlockType = 'thinking';\nexport const BlockRedactedThinking: BlockType = 'redacted_thinking';\nexport const BlockToolUse: BlockType = 'tool_use';\nexport const BlockToolResult: BlockType = 'tool_result';\nexport const BlockToolReference: BlockType = 'tool_reference';\nexport const BlockServerToolUse: BlockType = 'server_tool_use';\nexport const BlockWebSearchToolResult: BlockType = 'web_search_tool_result';\nexport const BlockCodeExecutionToolResult: BlockType = 'code_execution_tool_result';\nexport const BlockMCPToolUse: BlockType = 'mcp_tool_use';\nexport const BlockMCPToolResult: BlockType = 'mcp_tool_result';\nexport const BlockContainerUpload: BlockType = 'container_upload';\n\n/** 流式响应 delta 类型 (与 BlockType 正交) */\nexport type DeltaType =\n  | 'text_delta'\n  | 'input_json_delta'\n  | 'thinking_delta'\n  | 'signature_delta'\n  | 'citations_delta';\n\nexport const DeltaText: DeltaType = 'text_delta';\nexport const DeltaInputJSON: DeltaType = 'input_json_delta';\nexport const DeltaThinking: DeltaType = 'thinking_delta';\nexport const DeltaSignature: DeltaType = 'signature_delta';\nexport const DeltaCitations: DeltaType = 'citations_delta';\n\n/**\n * 网关在 block JSON 中注入的 in-band 标记字段名。\n * 存在且值为 true 时代表该 block 不应回传下一轮。\n *\n * 选择 in-band 标记而非独立 SSE 事件的理由:\n *   - 零缓冲 / 零顺序依赖 / 零延迟\n *   - history 剥离天然可做\n */\nexport const EphemeralMarkerField = 'acosmi_ephemeral';\n","// sanitize/config.ts — 端口自 acosmi-sdk-go/sanitize/config.go\n\nimport type { BlockType } from './types';\n\n/**\n * SDK 层防御性配置。只做所有下游 provider 都不可能接受的底线剥除;\n * 具体 provider 适配由网关承担。\n *\n * 零值 = 不校验 / 不剥除, 等价于未启用。\n */\nexport interface MinimalSanitizeConfig {\n  /** 体积上限 (字节, 仅对 base64 内联媒体生效; URL 版交网关把关). 0 = 不校验. */\n  maxImageBytes?: number;\n  maxVideoBytes?: number;\n  maxPDFBytes?: number;\n\n  /** history 轮次硬上限 (防止内存爆炸 / 上行带宽). 0 = 不校验. 超限抛 ErrHistoryTooDeep. */\n  maxMessagesTurns?: number;\n\n  /** 公共黑名单 (所有 provider 均拒绝的 block 类型). 默认空. */\n  permanentDenyBlocks?: BlockType[];\n}\n\nexport class HistoryTooDeepError extends Error {\n  constructor() {\n    super('sanitize: messages history exceeds configured depth');\n    this.name = 'HistoryTooDeepError';\n  }\n}\n\nexport class BlockDeniedError extends Error {\n  constructor() {\n    super('sanitize: block type permanently denied');\n    this.name = 'BlockDeniedError';\n  }\n}\n\n/** 体积超限错误, 携带实际/上限字节数以便上游展示。 */\nexport class SizeError extends Error {\n  blockType: BlockType;\n  actual: number;\n  limit: number;\n\n  constructor(blockType: BlockType, actual: number, limit: number) {\n    super(`sanitize: ${blockType} base64 size ${actual} exceeds limit ${limit}`);\n    this.name = 'SizeError';\n    this.blockType = blockType;\n    this.actual = actual;\n    this.limit = limit;\n  }\n}\n\n// 单例实例 — 与 Go 侧 var ErrHistoryTooDeep / ErrBlockDenied 等价的\"哨兵\"用法\n// 但 TS class 实例不能 const 哨兵化, 调用方应用 instanceof 判断。\nexport const ErrHistoryTooDeep = new HistoryTooDeepError();\nexport const ErrBlockDenied = new BlockDeniedError();\n","// sanitize/history.ts — 端口自 acosmi-sdk-go/sanitize/history.go\n\nimport { EphemeralMarkerField } from './types';\n\n/** 判定一个 block 是否应被剥除 */\nexport type BlockPredicate = (block: Record<string, unknown>) => boolean;\n\n/**\n * 按 pred 从 messages 中剥除 block, 并联动剥除对应的 tool_result (user 轮)。\n *\n * 收敛两步: 先扫收集 droppedToolUseIDs, 再整体剥; 这样顺序不影响正确性\n * (即使 tool_result 在 tool_use 之前出现也能捕获)。\n *\n * 不修改入参 messages 中任何 map 的 key, 只重构数组。\n * 未被修改的 message 保持原引用 (零拷贝优化)。\n */\nexport function dropBlocks(messages: unknown[], pred: BlockPredicate): unknown[] {\n  const droppedToolUseIDs = collectDroppedToolUseIDs(messages, pred);\n\n  const out: unknown[] = [];\n  for (const msg of messages) {\n    if (!isPlainObject(msg)) {\n      out.push(msg);\n      continue;\n    }\n    const content = msg['content'];\n    if (!Array.isArray(content)) {\n      out.push(msg);\n      continue;\n    }\n\n    const { kept, changed } = filterBlocks(content, pred, droppedToolUseIDs);\n    if (!changed) {\n      out.push(msg);\n      continue;\n    }\n\n    // content 空了的消息整条丢弃 (assistant 本轮全是 ephemeral 块;\n    // 或 user 轮全是联动剥的 tool_result)。避免产生空消息让 provider 报错。\n    if (kept.length === 0) {\n      continue;\n    }\n\n    // 浅拷贝 msg, 只改 content, 避免污染调用方数据。\n    const newMsg: Record<string, unknown> = { ...msg };\n    newMsg['content'] = kept;\n    out.push(newMsg);\n  }\n  return out;\n}\n\n/** 第一遍扫描, 仅收集\"本次被 pred 命中的 tool_use 类 block 的 id\", 以便联动剥 tool_result。 */\nfunction collectDroppedToolUseIDs(messages: unknown[], pred: BlockPredicate): Set<string> {\n  const ids = new Set<string>();\n  for (const msg of messages) {\n    if (!isPlainObject(msg)) continue;\n    const content = msg['content'];\n    if (!Array.isArray(content)) continue;\n    for (const raw of content) {\n      if (!isPlainObject(raw)) continue;\n      if (!pred(raw)) continue;\n      const t = raw['type'];\n      if (typeof t !== 'string') continue;\n      if (t === 'tool_use' || t === 'server_tool_use' || t === 'mcp_tool_use') {\n        const id = raw['id'];\n        if (typeof id === 'string' && id !== '') ids.add(id);\n      }\n    }\n  }\n  return ids;\n}\n\n/**\n * 对单条消息的 content 数组剥除 pred 命中的 block, 以及\n * tool_use_id 在 droppedToolUseIDs 中的 tool_result。返回 (新数组, 是否变更)。\n */\nfunction filterBlocks(\n  content: unknown[],\n  pred: BlockPredicate,\n  droppedToolUseIDs: Set<string>,\n): { kept: unknown[]; changed: boolean } {\n  const kept: unknown[] = [];\n  let changed = false;\n  for (const raw of content) {\n    if (!isPlainObject(raw)) {\n      kept.push(raw);\n      continue;\n    }\n    if (pred(raw)) {\n      changed = true;\n      continue;\n    }\n    // 联动剥 tool_result / mcp_tool_result (仅当 tool_use_id 命中)\n    if (droppedToolUseIDs.size > 0) {\n      const t = raw['type'];\n      if (t === 'tool_result' || t === 'mcp_tool_result') {\n        const id = raw['tool_use_id'];\n        if (typeof id === 'string' && id !== '' && droppedToolUseIDs.has(id)) {\n          changed = true;\n          continue;\n        }\n      }\n    }\n    kept.push(raw);\n  }\n  return { kept, changed };\n}\n\n/**\n * 从 messages 中剥除带 acosmi_ephemeral:true 标记的 block, 以及对应的 tool_result。\n *\n * 硬豁免: thinking / redacted_thinking 块永不剥, 即使携带 ephemeral 标记。\n *\n * 理由: Anthropic extended thinking + tool_use 续轮场景下, 上游强制要求\n * assistant 历史中保留原始 thinking 块, 否则返回:\n *   \"The content[].thinking in the thinking mode must be passed back to the API.\"\n *\n * 历史污染防御: 即使旧版网关 / 历史响应里 thinking 块带了 ephemeral=true,\n * 客户端在调用 stripEphemeral 时也不应剥除。网关侧 anthropic preset 已停止注入此标记,\n * 本豁免兜底历史会话与第三方调用方两类已污染场景。\n */\nexport function stripEphemeral(messages: unknown[]): unknown[] {\n  return dropBlocks(messages, (b) => {\n    const t = b['type'];\n    if (t === 'thinking' || t === 'redacted_thinking') {\n      return false; // 硬豁免, 不可被 ephemeral 标记覆盖\n    }\n    const v = b[EphemeralMarkerField];\n    return v === true;\n  });\n}\n\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === 'object' && v !== null && !Array.isArray(v);\n}\n","// sanitize/defensive.ts — 端口自 acosmi-sdk-go/sanitize/defensive.go\n\nimport type { BlockType } from './types';\nimport type { MinimalSanitizeConfig } from './config';\nimport { ErrHistoryTooDeep, SizeError } from './config';\nimport { dropBlocks } from './history';\n\n/**\n * 对已经解析为 unknown[] 的 messages 做底线防御: 深度校验 +\n * 体积校验 + deny-list 剥除 + tool_use_id 联动剥除 tool_result。\n *\n * 入参形态: messages 的每个元素预期是 object (含 role / content); content 为 string (plain text)\n * 或 unknown[] (block 数组)。形态异常的元素原样透传, 不抛错。\n *\n * 通过返回新 messages (可能 block 数组被缩减); 早失败抛错 (调用方应放弃本次请求)。\n */\nexport function sanitize(messages: unknown[], cfg: MinimalSanitizeConfig): unknown[] {\n  if ((cfg.maxMessagesTurns ?? 0) > 0 && messages.length > (cfg.maxMessagesTurns as number)) {\n    throw ErrHistoryTooDeep;\n  }\n\n  // 体积校验: 先扫一遍, 任何违规直接早失败 (不修改 messages)\n  if ((cfg.maxImageBytes ?? 0) > 0 || (cfg.maxVideoBytes ?? 0) > 0 || (cfg.maxPDFBytes ?? 0) > 0) {\n    checkMediaSizes(messages, cfg);\n  }\n\n  // deny-list 剥除 + tool_use_id 联动\n  if (cfg.permanentDenyBlocks && cfg.permanentDenyBlocks.length > 0) {\n    const denySet = new Set<string>();\n    for (const bt of cfg.permanentDenyBlocks) denySet.add(bt as string);\n    messages = dropBlocks(messages, (b) => {\n      const t = (b as Record<string, unknown>)['type'];\n      return typeof t === 'string' && denySet.has(t);\n    });\n  }\n\n  return messages;\n}\n\n/**\n * 遍历所有 block, 对 base64 内联 image/video/document 类型校验解码后字节数。\n * URL 版无法本地量体积, 跳过 (交网关把关)。违规直接抛 SizeError。\n */\nfunction checkMediaSizes(messages: unknown[], cfg: MinimalSanitizeConfig): void {\n  for (const msg of messages) {\n    if (!isPlainObject(msg)) continue;\n    const content = msg['content'];\n    if (!Array.isArray(content)) continue;\n    for (const raw of content) {\n      if (!isPlainObject(raw)) continue;\n      const bt = raw['type'];\n      if (typeof bt !== 'string') continue;\n\n      let limit = 0;\n      switch (bt as BlockType) {\n        case 'image':\n          limit = cfg.maxImageBytes ?? 0;\n          break;\n        case 'video':\n          limit = cfg.maxVideoBytes ?? 0;\n          break;\n        case 'document':\n          limit = cfg.maxPDFBytes ?? 0;\n          break;\n        default:\n          continue;\n      }\n      if (limit <= 0) continue;\n\n      const data = extractBase64Data(raw);\n      if (data === '') continue; // URL 版或形态异常, 跳过\n      const actual = base64DecodedLen(data);\n      if (actual > limit) {\n        throw new SizeError(bt as BlockType, actual, limit);\n      }\n    }\n  }\n}\n\n/**\n * 从 Anthropic block 结构中抽 base64 data 字段。\n *\n * 形态:\n *   image:    {source:{type:\"base64\", data:\"...\"}}\n *   video:    {source:{type:\"base64\", data:\"...\"}}\n *   document: {source:{type:\"base64\", data:\"...\"}}\n *\n * 若是 URL 版 (source.type=\"url\") 或缺字段, 返回 \"\"。\n */\nfunction extractBase64Data(block: Record<string, unknown>): string {\n  const src = block['source'];\n  if (!isPlainObject(src)) return '';\n  if (src['type'] !== 'base64') return '';\n  const dataRaw = src['data'];\n  if (typeof dataRaw !== 'string') return '';\n  let data: string = dataRaw;\n  // 防御性: 某些上游把 \"data:image/jpeg;base64,...\" 整串塞进 data,\n  // 虽非标准但兜底去掉前缀, 保证字节数估算正确。\n  const i = data.indexOf('base64,');\n  if (i >= 0) {\n    data = data.slice(i + 'base64,'.length);\n  }\n  return data;\n}\n\n/** Go base64.StdEncoding.DecodedLen 等价: ceil(n*3/4) 减去 padding */\nfunction base64DecodedLen(b64: string): number {\n  // Go 的 DecodedLen(n) = (n / 4) * 3 - paddingCount\n  const n = b64.length;\n  let pad = 0;\n  if (n >= 1 && b64[n - 1] === '=') pad++;\n  if (n >= 2 && b64[n - 2] === '=') pad++;\n  return Math.floor((n * 3) / 4) - pad;\n}\n\nfunction isPlainObject(v: unknown): v is Record<string, unknown> {\n  return typeof v === 'object' && v !== null && !Array.isArray(v);\n}\n"]}

package/package.json

@@ -0,0 +1,84 @@
+{
+  "name": "@acosmi/sdk-ts",
+  "version": "1.0.0",
+  "description": "Acosmi 模型网关 TypeScript SDK — 双格式 (Anthropic + OpenAI) 多端 (浏览器 / Node ≥18 / Deno / Bun)。Go SDK 全量端口, 1.0 稳定测试版。",
+  "type": "module",
+  "main": "./dist/node/index.cjs",
+  "module": "./dist/node/index.mjs",
+  "types": "./dist/node/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/node/index.d.ts",
+      "browser": "./dist/browser/index.mjs",
+      "deno": "./dist/index.mjs",
+      "node": {
+        "types": "./dist/node/index.d.ts",
+        "import": "./dist/node/index.mjs",
+        "require": "./dist/node/index.cjs"
+      },
+      "default": "./dist/index.mjs"
+    },
+    "./adapters/anthropic": {
+      "types": "./dist/node/adapters/anthropic.d.ts",
+      "import": "./dist/node/adapters/anthropic.mjs",
+      "require": "./dist/node/adapters/anthropic.cjs"
+    },
+    "./adapters/openai": {
+      "types": "./dist/node/adapters/openai.d.ts",
+      "import": "./dist/node/adapters/openai.mjs",
+      "require": "./dist/node/adapters/openai.cjs"
+    },
+    "./sanitize": {
+      "types": "./dist/node/sanitize/index.d.ts",
+      "import": "./dist/node/sanitize/index.mjs",
+      "require": "./dist/node/sanitize/index.cjs"
+    },
+    "./package.json": "./package.json"
+  },
+  "files": ["dist", "README.md", "LICENSE"],
+  "scripts": {
+    "build": "tsup",
+    "test": "vitest run",
+    "test:watch": "vitest",
+    "lint": "eslint src --ext .ts",
+    "format": "prettier --write \"src/**/*.{ts,json}\"",
+    "typecheck": "tsc --noEmit",
+    "prepublishOnly": "npm run typecheck && npm run lint && npm test && npm run build"
+  },
+  "engines": {
+    "node": ">=18"
+  },
+  "keywords": [
+    "acosmi",
+    "anthropic",
+    "openai",
+    "llm",
+    "sdk",
+    "claude",
+    "crabcode",
+    "crabclaw"
+  ],
+  "license": "MIT",
+  "author": "Acosmi",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/acosmi/sdk-ts.git"
+  },
+  "homepage": "https://github.com/acosmi/sdk-ts#readme",
+  "bugs": {
+    "url": "https://github.com/acosmi/sdk-ts/issues"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "devDependencies": {
+    "@types/node": "^20.0.0",
+    "@typescript-eslint/eslint-plugin": "^7.0.0",
+    "@typescript-eslint/parser": "^7.0.0",
+    "eslint": "^8.57.0",
+    "prettier": "^3.0.0",
+    "tsup": "^8.0.0",
+    "typescript": "^5.4.0",
+    "vitest": "^1.0.0"
+  }
+}