@actuate-media/cms-core 0.41.0 → 0.43.0

package/dist/ai/feature-defaults.js

@@ -0,0 +1,104 @@
+/**
+ * Default AI feature catalog. These are the global feature flags surfaced in
+ * Settings > AI and (from Phase 3) enforced across CMS modules via
+ * `isAiFeatureEnabled(key)`. Seeded into the `__ai_config__` document on first
+ * write; admins toggle `enabled` per feature.
+ *
+ * Keys follow the `ai.features.*` convention so a single shared service governs
+ * every module instead of per-module flags.
+ */
+export const AI_FEATURE_DEFAULTS = [
+    {
+        key: 'ai.features.seo404Recovery',
+        label: '404 Recovery suggestions',
+        description: 'Recommend redirect targets for broken URLs that still receive traffic.',
+        enabled: true,
+        category: 'seo',
+        requiredCapabilities: ['text', 'reasoning'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.contentWriting',
+        label: 'Content writing suggestions',
+        description: 'Draft, rewrite, summarize, and improve content in the editor.',
+        enabled: true,
+        category: 'content',
+        requiredCapabilities: ['text'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.mediaAltText',
+        label: 'Auto alt-text for media',
+        description: 'Generate descriptive alt text for images on upload or in the SEO drawer.',
+        enabled: true,
+        category: 'media',
+        requiredCapabilities: ['vision'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.seoMetaGeneration',
+        label: 'SEO meta generation',
+        description: 'Generate SEO titles, meta descriptions, and focus keywords from content.',
+        enabled: true,
+        category: 'seo',
+        requiredCapabilities: ['text'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN', 'EDITOR'],
+        permissionsRequired: ['ai.use'],
+    },
+    {
+        key: 'ai.features.redirectChainFlattening',
+        label: 'Redirect chain flattening',
+        description: 'Suggest direct single-hop redirects to collapse redirect chains.',
+        enabled: false,
+        category: 'seo',
+        requiredCapabilities: ['text', 'reasoning'],
+        approvalRequired: true,
+        allowBulkApply: false,
+        rolesAllowed: ['ADMIN'],
+        permissionsRequired: ['ai.use'],
+    },
+];
+/** Deep clone so callers can't mutate the shared default array. */
+export function cloneFeatureDefaults() {
+    return AI_FEATURE_DEFAULTS.map((f) => ({
+        ...f,
+        requiredCapabilities: [...f.requiredCapabilities],
+        rolesAllowed: [...f.rolesAllowed],
+        permissionsRequired: [...f.permissionsRequired],
+        fallbackModelIds: f.fallbackModelIds ? [...f.fallbackModelIds] : undefined,
+    }));
+}
+/**
+ * Merge stored feature toggles over the current defaults so newly-added features
+ * appear automatically and removed/renamed ones drop off, while preserving the
+ * admin's `enabled`/routing choices for features that still exist.
+ */
+export function mergeFeatures(stored) {
+    const byKey = new Map((stored ?? []).map((f) => [f.key, f]));
+    return cloneFeatureDefaults().map((def) => {
+        const prev = byKey.get(def.key);
+        if (!prev)
+            return def;
+        return {
+            ...def,
+            enabled: typeof prev.enabled === 'boolean' ? prev.enabled : def.enabled,
+            providerId: prev.providerId ?? def.providerId,
+            modelId: prev.modelId ?? def.modelId,
+            fallbackModelIds: prev.fallbackModelIds ?? def.fallbackModelIds,
+            maxMonthlyTokens: prev.maxMonthlyTokens ?? def.maxMonthlyTokens,
+            maxRequestsPerDay: prev.maxRequestsPerDay ?? def.maxRequestsPerDay,
+        };
+    });
+}
+//# sourceMappingURL=feature-defaults.js.map

package/dist/ai/feature-defaults.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"feature-defaults.js","sourceRoot":"","sources":["../../src/ai/feature-defaults.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAIH,MAAM,CAAC,MAAM,mBAAmB,GAAsB;IACpD;QACE,GAAG,EAAE,4BAA4B;QACjC,KAAK,EAAE,0BAA0B;QACjC,WAAW,EAAE,wEAAwE;QACrF,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,oBAAoB,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;QAC3C,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,4BAA4B;QACjC,KAAK,EAAE,6BAA6B;QACpC,WAAW,EAAE,+DAA+D;QAC5E,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,SAAS;QACnB,oBAAoB,EAAE,CAAC,MAAM,CAAC;QAC9B,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,0BAA0B;QAC/B,KAAK,EAAE,yBAAyB;QAChC,WAAW,EAAE,0EAA0E;QACvF,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,OAAO;QACjB,oBAAoB,EAAE,CAAC,QAAQ,CAAC;QAChC,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,+BAA+B;QACpC,KAAK,EAAE,qBAAqB;QAC5B,WAAW,EAAE,0EAA0E;QACvF,OAAO,EAAE,IAAI;QACb,QAAQ,EAAE,KAAK;QACf,oBAAoB,EAAE,CAAC,MAAM,CAAC;QAC9B,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,CAAC;QACjC,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;IACD;QACE,GAAG,EAAE,qCAAqC;QAC1C,KAAK,EAAE,2BAA2B;QAClC,WAAW,EAAE,kEAAkE;QAC/E,OAAO,EAAE,KAAK;QACd,QAAQ,EAAE,KAAK;QACf,oBAAoB,EAAE,CAAC,MAAM,EAAE,WAAW,CAAC;QAC3C,gBAAgB,EAAE,IAAI;QACtB,cAAc,EAAE,KAAK;QACrB,YAAY,EAAE,CAAC,OAAO,CAAC;QACvB,mBAAmB,EAAE,CAAC,QAAQ,CAAC;KAChC;CACF,CAAA;AAED,mEAAmE;AACnE,MAAM,UAAU,oBAAoB;IAClC,OAAO,mBAAmB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrC,GAAG,CAAC;QACJ,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,oBAAoB,CAAC;QACjD,YAAY,EAAE,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC;QACjC,mBAAmB,EAAE,CAAC,GAAG,CAAC,CAAC,mBAAmB,CAAC;QAC/C,gBAAgB,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,SAAS;KAC3E,CAAC,CAAC,CAAA;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqC;IACjE,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC5D,OAAO,oBAAoB,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE;QACxC,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC/B,IAAI,CAAC,IAAI;YAAE,OAAO,GAAG,CAAA;QACrB,OAAO;YACL,GAAG,GAAG;YACN,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO;YACvE,UAAU,EAAE,IAAI,CAAC,UAAU,IAAI,GAAG,CAAC,UAAU;YAC7C,OAAO,EAAE,IAAI,CAAC,OAAO,IAAI,GAAG,CAAC,OAAO;YACpC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB;YAC/D,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,IAAI,GAAG,CAAC,gBAAgB;YAC/D,iBAAiB,EAAE,IAAI,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB;SACnE,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/dist/ai/index.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Barrel for the Settings > AI governance layer (Phases 1-2): provider
+ * connections + dynamic model catalog. Feature enforcement and per-run metering
+ * arrive in later phases.
+ */
+export * from './types.js';
+export { AI_CONFIG_COLLECTION, DEFAULT_AI_BUDGET, defaultAISettings, encryptProviderKey, getAIConfig, getEnvApiKey, last4, putAIConfig, resolveKeySource, resolveProviderKey, toPublicConfig, toPublicProvider, } from './config-store.js';
+export { AI_FEATURE_DEFAULTS, cloneFeatureDefaults, mergeFeatures } from './feature-defaults.js';
+export { curatedFallbackCatalog, normalizeModel } from './catalog.js';
+export { getModels, resolveModelOrUnavailable, syncModels, type SyncModelsResult, } from './models.js';
+export { getUsageSummary } from './usage.js';
+export { getAdapter, listModels as adapterListModels, testConnection as adapterTestConnection, type AdapterContext, } from './providers/index.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,EACL,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAChG,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,UAAU,EACV,KAAK,gBAAgB,GACtB,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EACL,UAAU,EACV,UAAU,IAAI,iBAAiB,EAC/B,cAAc,IAAI,qBAAqB,EACvC,KAAK,cAAc,GACpB,MAAM,sBAAsB,CAAA"}

package/dist/ai/index.js

@@ -0,0 +1,13 @@
+/**
+ * Barrel for the Settings > AI governance layer (Phases 1-2): provider
+ * connections + dynamic model catalog. Feature enforcement and per-run metering
+ * arrive in later phases.
+ */
+export * from './types.js';
+export { AI_CONFIG_COLLECTION, DEFAULT_AI_BUDGET, defaultAISettings, encryptProviderKey, getAIConfig, getEnvApiKey, last4, putAIConfig, resolveKeySource, resolveProviderKey, toPublicConfig, toPublicProvider, } from './config-store.js';
+export { AI_FEATURE_DEFAULTS, cloneFeatureDefaults, mergeFeatures } from './feature-defaults.js';
+export { curatedFallbackCatalog, normalizeModel } from './catalog.js';
+export { getModels, resolveModelOrUnavailable, syncModels, } from './models.js';
+export { getUsageSummary } from './usage.js';
+export { getAdapter, listModels as adapterListModels, testConnection as adapterTestConnection, } from './providers/index.js';
+//# sourceMappingURL=index.js.map

package/dist/ai/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/ai/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,cAAc,YAAY,CAAA;AAC1B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,iBAAiB,EACjB,kBAAkB,EAClB,WAAW,EACX,YAAY,EACZ,KAAK,EACL,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,cAAc,EACd,gBAAgB,GACjB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,mBAAmB,EAAE,oBAAoB,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAA;AAChG,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EACL,SAAS,EACT,yBAAyB,EACzB,UAAU,GAEX,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAA;AAC5C,OAAO,EACL,UAAU,EACV,UAAU,IAAI,iBAAiB,EAC/B,cAAc,IAAI,qBAAqB,GAExC,MAAM,sBAAsB,CAAA"}

package/dist/ai/models.d.ts

@@ -0,0 +1,37 @@
+/**
+ * Model catalog orchestration: live sync (with curated normalization), curated
+ * fallback, and resolution of a configured-but-missing model to an `unavailable`
+ * entry so the UI can warn without silently dropping the admin's choice.
+ */
+import { AI_CONFIG_COLLECTION } from './config-store.js';
+import type { AIModel } from './types.js';
+export { AI_CONFIG_COLLECTION };
+export interface SyncModelsResult {
+    models: AIModel[];
+    fromFallback: boolean;
+    /** Present when the live listing failed and we fell back to curated data. */
+    warning?: string;
+}
+/**
+ * Sync the model catalog for a provider connection. Attempts a live listing;
+ * on any failure falls back to the curated catalog so the selector is never
+ * empty. Persists the result on the `__ai_config__` document under
+ * `catalog[connectionId]` and stamps `lastModelSyncAt`.
+ */
+export declare function syncModels(db: unknown, connectionId: string): Promise<SyncModelsResult>;
+/**
+ * Read the cached catalog for a connection (or all connections). Falls back to
+ * the curated catalog for connections that have never been synced so the UI
+ * always has something to show.
+ */
+export declare function getModels(db: unknown, params?: {
+    connectionId?: string;
+    provider?: string;
+}): Promise<AIModel[]>;
+/**
+ * Resolve a configured model id to a catalog entry. When the id is no longer in
+ * the catalog (provider removed/renamed it) returns a synthesized `unavailable`
+ * model so the caller can keep the setting and warn the user.
+ */
+export declare function resolveModelOrUnavailable(modelId: string | undefined, catalog: AIModel[]): AIModel | null;
+//# sourceMappingURL=models.d.ts.map

package/dist/ai/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/ai/models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EAIrB,MAAM,mBAAmB,CAAA;AAI1B,OAAO,KAAK,EAAkB,OAAO,EAAwB,MAAM,YAAY,CAAA;AAE/E,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAW/B,MAAM,WAAW,gBAAgB;IAC/B,MAAM,EAAE,OAAO,EAAE,CAAA;IACjB,YAAY,EAAE,OAAO,CAAA;IACrB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAAC,EAAE,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA2D7F;AAED;;;;GAIG;AACH,wBAAsB,SAAS,CAC7B,EAAE,EAAE,OAAO,EACX,MAAM,CAAC,EAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;CAAE,GACpD,OAAO,CAAC,OAAO,EAAE,CAAC,CAiBpB;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,MAAM,GAAG,SAAS,EAC3B,OAAO,EAAE,OAAO,EAAE,GACjB,OAAO,GAAG,IAAI,CAgBhB"}

package/dist/ai/models.js

@@ -0,0 +1,126 @@
+/**
+ * Model catalog orchestration: live sync (with curated normalization), curated
+ * fallback, and resolution of a configured-but-missing model to an `unavailable`
+ * entry so the UI can warn without silently dropping the admin's choice.
+ */
+import { AI_CONFIG_COLLECTION, getAIConfig, putAIConfig, resolveProviderKey, } from './config-store.js';
+import { curatedFallbackCatalog, normalizeModel } from './catalog.js';
+import { listModels as adapterListModels } from './providers/index.js';
+export { AI_CONFIG_COLLECTION };
+function adapterContextFor(conn, apiKey) {
+    return {
+        apiKey,
+        baseUrl: conn.baseUrl,
+        organizationId: conn.organizationId,
+        projectId: conn.projectId,
+    };
+}
+/**
+ * Sync the model catalog for a provider connection. Attempts a live listing;
+ * on any failure falls back to the curated catalog so the selector is never
+ * empty. Persists the result on the `__ai_config__` document under
+ * `catalog[connectionId]` and stamps `lastModelSyncAt`.
+ */
+export async function syncModels(db, connectionId) {
+    const config = await getAIConfig(db);
+    const conn = config.providers.find((p) => p.id === connectionId);
+    if (!conn)
+        throw new Error('Provider connection not found');
+    const now = new Date().toISOString();
+    const apiKey = await resolveProviderKey(conn);
+    let models;
+    let fromFallback = false;
+    let warning;
+    if (!apiKey) {
+        models = curatedFallbackCatalog(conn.provider, now);
+        fromFallback = true;
+        warning = 'No API key configured; showing the curated model list.';
+    }
+    else {
+        try {
+            const ids = await adapterListModels(conn.provider, adapterContextFor(conn, apiKey));
+            if (ids.length === 0) {
+                models = curatedFallbackCatalog(conn.provider, now);
+                fromFallback = true;
+                warning = 'The provider returned no models; showing the curated list.';
+            }
+            else {
+                models = ids.map((providerModelId) => normalizeModel({
+                    provider: conn.provider,
+                    providerModelId,
+                    source: 'provider',
+                    status: 'available',
+                    lastSyncedAt: now,
+                }));
+            }
+        }
+        catch (err) {
+            models = curatedFallbackCatalog(conn.provider, now);
+            fromFallback = true;
+            warning =
+                err instanceof Error
+                    ? `Live model listing failed (${err.message}); showing the curated list.`
+                    : 'Live model listing failed; showing the curated list.';
+        }
+    }
+    const entry = { models, lastSyncedAt: now, fromFallback };
+    const nextProviders = config.providers.map((p) => p.id === connectionId ? { ...p, lastModelSyncAt: now } : p);
+    await putAIConfig(db, {
+        ...config,
+        providers: nextProviders,
+        catalog: { ...(config.catalog ?? {}), [connectionId]: entry },
+    }, conn.updatedBy || 'system');
+    return { models, fromFallback, warning };
+}
+/**
+ * Read the cached catalog for a connection (or all connections). Falls back to
+ * the curated catalog for connections that have never been synced so the UI
+ * always has something to show.
+ */
+export async function getModels(db, params) {
+    const config = await getAIConfig(db);
+    const now = new Date().toISOString();
+    const out = [];
+    const conns = config.providers.filter((p) => {
+        if (params?.connectionId)
+            return p.id === params.connectionId;
+        if (params?.provider)
+            return p.provider === params.provider;
+        return true;
+    });
+    for (const conn of conns) {
+        const cached = config.catalog?.[conn.id];
+        if (cached?.models?.length)
+            out.push(...cached.models);
+        else
+            out.push(...curatedFallbackCatalog(conn.provider, now));
+    }
+    // De-dupe by normalized id, preferring the first (cached/live) occurrence.
+    const seen = new Set();
+    return out.filter((m) => (seen.has(m.id) ? false : (seen.add(m.id), true)));
+}
+/**
+ * Resolve a configured model id to a catalog entry. When the id is no longer in
+ * the catalog (provider removed/renamed it) returns a synthesized `unavailable`
+ * model so the caller can keep the setting and warn the user.
+ */
+export function resolveModelOrUnavailable(modelId, catalog) {
+    if (!modelId)
+        return null;
+    const found = catalog.find((m) => m.id === modelId || m.providerModelId === modelId);
+    if (found)
+        return found;
+    const parts = modelId.split(':');
+    const provider = parts[0] ?? '';
+    const providerModelId = parts.slice(1).join(':') || modelId;
+    return normalizeModel({
+        provider: (['openai', 'anthropic', 'xai', 'custom'].includes(provider)
+            ? provider
+            : 'custom'),
+        providerModelId,
+        source: 'config',
+        status: 'unavailable',
+        lastSyncedAt: new Date().toISOString(),
+    });
+}
+//# sourceMappingURL=models.js.map

package/dist/ai/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/ai/models.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,EACL,oBAAoB,EACpB,WAAW,EACX,WAAW,EACX,kBAAkB,GACnB,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,sBAAsB,EAAE,cAAc,EAAE,MAAM,cAAc,CAAA;AACrE,OAAO,EAAE,UAAU,IAAI,iBAAiB,EAAE,MAAM,sBAAsB,CAAA;AAItE,OAAO,EAAE,oBAAoB,EAAE,CAAA;AAE/B,SAAS,iBAAiB,CAAC,IAA0B,EAAE,MAAc;IACnE,OAAO;QACL,MAAM;QACN,OAAO,EAAE,IAAI,CAAC,OAAO;QACrB,cAAc,EAAE,IAAI,CAAC,cAAc;QACnC,SAAS,EAAE,IAAI,CAAC,SAAS;KAC1B,CAAA;AACH,CAAC;AASD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,EAAW,EAAE,YAAoB;IAChE,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAA;IAChE,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAA;IAE3D,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,MAAM,GAAG,MAAM,kBAAkB,CAAC,IAAI,CAAC,CAAA;IAE7C,IAAI,MAAiB,CAAA;IACrB,IAAI,YAAY,GAAG,KAAK,CAAA;IACxB,IAAI,OAA2B,CAAA;IAE/B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;QACnD,YAAY,GAAG,IAAI,CAAA;QACnB,OAAO,GAAG,wDAAwD,CAAA;IACpE,CAAC;SAAM,CAAC;QACN,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,iBAAiB,CAAC,IAAI,CAAC,QAAQ,EAAE,iBAAiB,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAA;YACnF,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;gBACrB,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;gBACnD,YAAY,GAAG,IAAI,CAAA;gBACnB,OAAO,GAAG,4DAA4D,CAAA;YACxE,CAAC;iBAAM,CAAC;gBACN,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,eAAe,EAAE,EAAE,CACnC,cAAc,CAAC;oBACb,QAAQ,EAAE,IAAI,CAAC,QAAQ;oBACvB,eAAe;oBACf,MAAM,EAAE,UAAU;oBAClB,MAAM,EAAE,WAAW;oBACnB,YAAY,EAAE,GAAG;iBAClB,CAAC,CACH,CAAA;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAA;YACnD,YAAY,GAAG,IAAI,CAAA;YACnB,OAAO;gBACL,GAAG,YAAY,KAAK;oBAClB,CAAC,CAAC,8BAA8B,GAAG,CAAC,OAAO,8BAA8B;oBACzE,CAAC,CAAC,sDAAsD,CAAA;QAC9D,CAAC;IACH,CAAC;IAED,MAAM,KAAK,GAAmB,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,EAAE,YAAY,EAAE,CAAA;IACzE,MAAM,aAAa,GAAG,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAC/C,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,eAAe,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAC3D,CAAA;IACD,MAAM,WAAW,CACf,EAAE,EACF;QACE,GAAG,MAAM;QACT,SAAS,EAAE,aAAa;QACxB,OAAO,EAAE,EAAE,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC,YAAY,CAAC,EAAE,KAAK,EAAE;KAC9D,EACD,IAAI,CAAC,SAAS,IAAI,QAAQ,CAC3B,CAAA;IAED,OAAO,EAAE,MAAM,EAAE,YAAY,EAAE,OAAO,EAAE,CAAA;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,EAAW,EACX,MAAqD;IAErD,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACpC,MAAM,GAAG,GAAc,EAAE,CAAA;IACzB,MAAM,KAAK,GAAG,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE;QAC1C,IAAI,MAAM,EAAE,YAAY;YAAE,OAAO,CAAC,CAAC,EAAE,KAAK,MAAM,CAAC,YAAY,CAAA;QAC7D,IAAI,MAAM,EAAE,QAAQ;YAAE,OAAO,CAAC,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,CAAA;QAC3D,OAAO,IAAI,CAAA;IACb,CAAC,CAAC,CAAA;IACF,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QACxC,IAAI,MAAM,EAAE,MAAM,EAAE,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,MAAM,CAAC,CAAA;;YACjD,GAAG,CAAC,IAAI,CAAC,GAAG,sBAAsB,CAAC,IAAI,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC;IACD,2EAA2E;IAC3E,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAA;IAC9B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAA;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA2B,EAC3B,OAAkB;IAElB,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAA;IACzB,MAAM,KAAK,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,eAAe,KAAK,OAAO,CAAC,CAAA;IACpF,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAChC,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAC/B,MAAM,eAAe,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,CAAA;IAC3D,OAAO,cAAc,CAAC;QACpB,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACpE,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,QAAQ,CAAwB;QACpC,eAAe;QACf,MAAM,EAAE,QAAQ;QAChB,MAAM,EAAE,aAAa;QACrB,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACvC,CAAC,CAAA;AACJ,CAAC"}

package/dist/ai/providers/anthropic.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Anthropic adapter. Uses the `/v1/models` listing endpoint with `x-api-key`
+ * and the required `anthropic-version` header. Hostname is fixed.
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/ai/providers/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EAKpB,MAAM,WAAW,CAAA;AASlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAqBzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAQvE"}

package/dist/ai/providers/anthropic.js

@@ -0,0 +1,36 @@
+/**
+ * Anthropic adapter. Uses the `/v1/models` listing endpoint with `x-api-key`
+ * and the required `anthropic-version` header. Hostname is fixed.
+ */
+import { extractModelIds, messageFromStatus, statusFromHttp, timedFetch, } from './http.js';
+const ANTHROPIC_BASE = 'https://api.anthropic.com/v1';
+const ANTHROPIC_VERSION = '2023-06-01';
+function headers(ctx) {
+    return { 'x-api-key': ctx.apiKey, 'anthropic-version': ANTHROPIC_VERSION };
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${ANTHROPIC_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    const res = await timedFetch(`${ANTHROPIC_BASE}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (!res.ok)
+        throw new Error(`Anthropic model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/ai/providers/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../../src/ai/providers/anthropic.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAGH,OAAO,EAEL,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,UAAU,GACX,MAAM,WAAW,CAAA;AAElB,MAAM,cAAc,GAAG,8BAA8B,CAAA;AACrD,MAAM,iBAAiB,GAAG,YAAY,CAAA;AAEtC,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,CAAA;AAC5E,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,cAAc,SAAS,EAC1B,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,cAAc,SAAS,EAC1B,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;IACD,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IAC9E,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/ai/providers/custom.d.ts

@@ -0,0 +1,11 @@
+/**
+ * Custom OpenAI-compatible provider adapter. The base URL is admin-controlled,
+ * so it is SSRF-validated and DNS-resolved before any request. Falls back to an
+ * empty model list (manual entry in the UI) when the endpoint doesn't support
+ * `/models`.
+ */
+import type { AIConnectionTestResult } from '../types.js';
+import { type AdapterContext } from './http.js';
+export declare function testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(ctx: AdapterContext): Promise<string[]>;
+//# sourceMappingURL=custom.d.ts.map

package/dist/ai/providers/custom.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/custom.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,KAAK,cAAc,EAOpB,MAAM,WAAW,CAAA;AAMlB,wBAAsB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAiDzF;AAED,wBAAsB,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAWvE"}

package/dist/ai/providers/custom.js

@@ -0,0 +1,70 @@
+/**
+ * Custom OpenAI-compatible provider adapter. The base URL is admin-controlled,
+ * so it is SSRF-validated and DNS-resolved before any request. Falls back to an
+ * empty model list (manual entry in the UI) when the endpoint doesn't support
+ * `/models`.
+ */
+import { assertSafeBaseUrl, extractModelIds, messageFromStatus, statusFromHttp, timedFetch, trimTrailingSlash, } from './http.js';
+function headers(ctx) {
+    return { authorization: `Bearer ${ctx.apiKey}` };
+}
+export async function testConnection(ctx) {
+    const testedAt = new Date().toISOString();
+    if (!ctx.baseUrl) {
+        return {
+            ok: false,
+            status: 'needs_setup',
+            message: 'A base URL is required for a custom provider.',
+            testedAt,
+        };
+    }
+    try {
+        await assertSafeBaseUrl(ctx.baseUrl);
+    }
+    catch (err) {
+        return {
+            ok: false,
+            status: 'unknown',
+            message: err instanceof Error ? err.message : 'Invalid base URL.',
+            testedAt,
+        };
+    }
+    if (!ctx.apiKey) {
+        return { ok: false, status: 'needs_setup', message: messageFromStatus('needs_setup'), testedAt };
+    }
+    try {
+        const res = await timedFetch(`${trimTrailingSlash(ctx.baseUrl)}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+        // A 404 likely means the endpoint doesn't implement /models; the connection
+        // itself may still be usable with a manually-entered model id.
+        if (res.status === 404) {
+            return {
+                ok: true,
+                status: 'connected',
+                message: 'Connected. This endpoint does not list models; enter a model id manually.',
+                testedAt,
+            };
+        }
+        const status = statusFromHttp(res.status);
+        return { ok: status === 'connected', status, message: messageFromStatus(status), testedAt };
+    }
+    catch {
+        return {
+            ok: false,
+            status: 'provider_down',
+            message: messageFromStatus('provider_down'),
+            testedAt,
+        };
+    }
+}
+export async function listModels(ctx) {
+    if (!ctx.baseUrl)
+        return [];
+    await assertSafeBaseUrl(ctx.baseUrl);
+    const res = await timedFetch(`${trimTrailingSlash(ctx.baseUrl)}/models`, { method: 'GET', headers: headers(ctx) }, ctx);
+    if (res.status === 404)
+        return [];
+    if (!res.ok)
+        throw new Error(`Custom provider model listing failed (${res.status})`);
+    return extractModelIds(await res.json());
+}
+//# sourceMappingURL=custom.js.map

package/dist/ai/providers/custom.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"custom.js","sourceRoot":"","sources":["../../../src/ai/providers/custom.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,EAEL,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,cAAc,EACd,UAAU,EACV,iBAAiB,GAClB,MAAM,WAAW,CAAA;AAElB,SAAS,OAAO,CAAC,GAAmB;IAClC,OAAO,EAAE,aAAa,EAAE,UAAU,GAAG,CAAC,MAAM,EAAE,EAAE,CAAA;AAClD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,GAAmB;IACtD,MAAM,QAAQ,GAAG,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,CAAA;IACzC,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC;QACjB,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE,+CAA+C;YACxD,QAAQ;SACT,CAAA;IACH,CAAC;IACD,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,SAAS;YACjB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,mBAAmB;YACjE,QAAQ;SACT,CAAA;IACH,CAAC;IACD,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,CAAC;QAChB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,OAAO,EAAE,iBAAiB,CAAC,aAAa,CAAC,EAAE,QAAQ,EAAE,CAAA;IAClG,CAAC;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAC1C,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;QACD,4EAA4E;QAC5E,+DAA+D;QAC/D,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvB,OAAO;gBACL,EAAE,EAAE,IAAI;gBACR,MAAM,EAAE,WAAW;gBACnB,OAAO,EAAE,2EAA2E;gBACpF,QAAQ;aACT,CAAA;QACH,CAAC;QACD,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;QACzC,OAAO,EAAE,EAAE,EAAE,MAAM,KAAK,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,EAAE,QAAQ,EAAE,CAAA;IAC7F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,eAAe;YACvB,OAAO,EAAE,iBAAiB,CAAC,eAAe,CAAC;YAC3C,QAAQ;SACT,CAAA;IACH,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAmB;IAClD,IAAI,CAAC,GAAG,CAAC,OAAO;QAAE,OAAO,EAAE,CAAA;IAC3B,MAAM,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,CAAA;IACpC,MAAM,GAAG,GAAG,MAAM,UAAU,CAC1B,GAAG,iBAAiB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAC1C,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,CAAC,GAAG,CAAC,EAAE,EACxC,GAAG,CACJ,CAAA;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,CAAA;IACjC,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,GAAG,CAAC,MAAM,GAAG,CAAC,CAAA;IACpF,OAAO,eAAe,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,CAAA;AAC1C,CAAC"}

package/dist/ai/providers/http.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Shared HTTP helpers for AI provider adapters: a timeout-bounded fetch, a
+ * status->AIConnectionStatus mapper, and an SSRF guard for custom base URLs.
+ * Built-in providers use fixed hostnames; only custom endpoints are
+ * admin-controlled and therefore validated/resolved.
+ */
+import type { AIConnectionStatus } from '../types.js';
+export interface AdapterContext {
+    apiKey: string;
+    baseUrl?: string;
+    organizationId?: string;
+    projectId?: string;
+    /** Injectable fetch for tests; defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+}
+/** Map an HTTP response status to a connection-health value. */
+export declare function statusFromHttp(status: number): AIConnectionStatus;
+/** A short, safe message for a status (never contains the key). */
+export declare function messageFromStatus(status: AIConnectionStatus): string;
+export declare function timedFetch(url: string, init: RequestInit, ctx: AdapterContext): Promise<Response>;
+/**
+ * Validate a custom provider base URL against SSRF (no private/internal hosts,
+ * https/http only) AND resolve its DNS to defend against rebinding. Throws on
+ * rejection with a safe message.
+ */
+export declare function assertSafeBaseUrl(baseUrl: string): Promise<void>;
+/** Strip a trailing slash so we can append `/models` etc. cleanly. */
+export declare function trimTrailingSlash(url: string): string;
+/** Best-effort extraction of model ids from an OpenAI-compatible list payload. */
+export declare function extractModelIds(payload: unknown): string[];
+//# sourceMappingURL=http.d.ts.map

package/dist/ai/providers/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAGH,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAA;AAErD,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,8DAA8D;IAC9D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;IACxB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,gEAAgE;AAChE,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,CAMjE;AAED,mEAAmE;AACnE,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAepE;AAED,wBAAsB,UAAU,CAC9B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,WAAW,EACjB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,QAAQ,CAAC,CAYnB;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAetE;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,kFAAkF;AAClF,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,EAAE,CAS1D"}

package/dist/ai/providers/http.js

@@ -0,0 +1,90 @@
+/**
+ * Shared HTTP helpers for AI provider adapters: a timeout-bounded fetch, a
+ * status->AIConnectionStatus mapper, and an SSRF guard for custom base URLs.
+ * Built-in providers use fixed hostnames; only custom endpoints are
+ * admin-controlled and therefore validated/resolved.
+ */
+import { resolveAndCheck, validateWebhookUrl } from '../../security/webhook.js';
+/** Map an HTTP response status to a connection-health value. */
+export function statusFromHttp(status) {
+    if (status >= 200 && status < 300)
+        return 'connected';
+    if (status === 401 || status === 403)
+        return 'invalid_key';
+    if (status === 429)
+        return 'rate_limited';
+    if (status >= 500)
+        return 'provider_down';
+    return 'unknown';
+}
+/** A short, safe message for a status (never contains the key). */
+export function messageFromStatus(status) {
+    switch (status) {
+        case 'connected':
+            return 'Connection successful.';
+        case 'invalid_key':
+            return 'The API key was rejected (invalid or unauthorized).';
+        case 'rate_limited':
+            return 'The provider rate-limited the request. Try again shortly.';
+        case 'provider_down':
+            return 'The provider returned a server error. It may be temporarily unavailable.';
+        case 'needs_setup':
+            return 'No API key is configured for this provider.';
+        default:
+            return 'Could not determine connection status.';
+    }
+}
+export async function timedFetch(url, init, ctx) {
+    const doFetch = ctx.fetchImpl ?? globalThis.fetch;
+    if (typeof doFetch !== 'function') {
+        throw new Error('fetch is not available in this runtime');
+    }
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), ctx.timeoutMs ?? 10_000);
+    try {
+        return await doFetch(url, { ...init, redirect: 'error', signal: controller.signal });
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * Validate a custom provider base URL against SSRF (no private/internal hosts,
+ * https/http only) AND resolve its DNS to defend against rebinding. Throws on
+ * rejection with a safe message.
+ */
+export async function assertSafeBaseUrl(baseUrl) {
+    const check = validateWebhookUrl(baseUrl);
+    if (!check.valid) {
+        throw new Error(`Unsafe base URL: ${check.error ?? 'invalid'}`);
+    }
+    let host;
+    try {
+        host = new URL(baseUrl).hostname;
+    }
+    catch {
+        throw new Error('Unsafe base URL: invalid URL');
+    }
+    const resolved = await resolveAndCheck(host);
+    if (!resolved.safe) {
+        throw new Error(`Unsafe base URL: ${resolved.error ?? 'resolves to a private address'}`);
+    }
+}
+/** Strip a trailing slash so we can append `/models` etc. cleanly. */
+export function trimTrailingSlash(url) {
+    return url.replace(/\/+$/, '');
+}
+/** Best-effort extraction of model ids from an OpenAI-compatible list payload. */
+export function extractModelIds(payload) {
+    const data = payload?.data;
+    if (!Array.isArray(data))
+        return [];
+    const ids = [];
+    for (const entry of data) {
+        const id = entry?.id;
+        if (typeof id === 'string' && id.trim())
+            ids.push(id.trim());
+    }
+    return ids;
+}
+//# sourceMappingURL=http.js.map

package/dist/ai/providers/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../../src/ai/providers/http.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,eAAe,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAA;AAa/E,gEAAgE;AAChE,MAAM,UAAU,cAAc,CAAC,MAAc;IAC3C,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG;QAAE,OAAO,WAAW,CAAA;IACrD,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,aAAa,CAAA;IAC1D,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,cAAc,CAAA;IACzC,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,eAAe,CAAA;IACzC,OAAO,SAAS,CAAA;AAClB,CAAC;AAED,mEAAmE;AACnE,MAAM,UAAU,iBAAiB,CAAC,MAA0B;IAC1D,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,wBAAwB,CAAA;QACjC,KAAK,aAAa;YAChB,OAAO,qDAAqD,CAAA;QAC9D,KAAK,cAAc;YACjB,OAAO,2DAA2D,CAAA;QACpE,KAAK,eAAe;YAClB,OAAO,0EAA0E,CAAA;QACnF,KAAK,aAAa;YAChB,OAAO,6CAA6C,CAAA;QACtD;YACE,OAAO,wCAAwC,CAAA;IACnD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAC9B,GAAW,EACX,IAAiB,EACjB,GAAmB;IAEnB,MAAM,OAAO,GAAG,GAAG,CAAC,SAAS,IAAI,UAAU,CAAC,KAAK,CAAA;IACjD,IAAI,OAAO,OAAO,KAAK,UAAU,EAAE,CAAC;QAClC,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IAC3D,CAAC;IACD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,SAAS,IAAI,MAAM,CAAC,CAAA;IAC3E,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAA;IACtF,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAA;IACrB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,OAAe;IACrD,MAAM,KAAK,GAAG,kBAAkB,CAAC,OAAO,CAAC,CAAA;IACzC,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,oBAAoB,KAAK,CAAC,KAAK,IAAI,SAAS,EAAE,CAAC,CAAA;IACjE,CAAC;IACD,IAAI,IAAY,CAAA;IAChB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAA;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IACjD,CAAC;IACD,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,CAAC,KAAK,IAAI,+BAA+B,EAAE,CAAC,CAAA;IAC1F,CAAC;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAA;AAChC,CAAC;AAED,kFAAkF;AAClF,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,MAAM,IAAI,GAAI,OAA8B,EAAE,IAAI,CAAA;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAA;IACnC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,EAAE,GAAI,KAA0B,EAAE,EAAE,CAAA;QAC1C,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC"}

package/dist/ai/providers/index.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Provider adapter dispatcher. Selects the right adapter by provider key and
+ * exposes a uniform `testConnection` / `listModels` surface to the catalog and
+ * route layers.
+ */
+import type { AIConnectionTestResult, AIProviderKey } from '../types.js';
+import type { AdapterContext } from './http.js';
+export type { AdapterContext } from './http.js';
+interface ProviderAdapter {
+    testConnection(ctx: AdapterContext): Promise<AIConnectionTestResult>;
+    listModels(ctx: AdapterContext): Promise<string[]>;
+}
+export declare function getAdapter(provider: AIProviderKey): ProviderAdapter;
+export declare function testConnection(provider: AIProviderKey, ctx: AdapterContext): Promise<AIConnectionTestResult>;
+export declare function listModels(provider: AIProviderKey, ctx: AdapterContext): Promise<string[]>;
+//# sourceMappingURL=index.d.ts.map

package/dist/ai/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/ai/providers/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,OAAO,KAAK,EAAE,sBAAsB,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AAGxE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAI/C,YAAY,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAE/C,UAAU,eAAe;IACvB,cAAc,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;IACpE,UAAU,CAAC,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAAA;CACnD;AASD,wBAAgB,UAAU,CAAC,QAAQ,EAAE,aAAa,GAAG,eAAe,CAEnE;AAED,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,aAAa,EACvB,GAAG,EAAE,cAAc,GAClB,OAAO,CAAC,sBAAsB,CAAC,CAEjC;AAED,wBAAgB,UAAU,CAAC,QAAQ,EAAE,aAAa,EAAE,GAAG,EAAE,cAAc,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC,CAE1F"}