@combycode/llm-sdk 1.7.0 → 2.0.0

package/dist/plugins/telemetry/telemetry.d.ts

@@ -69,6 +69,17 @@ export interface TelemetryAdapterOptions {
     maxEvents?: number;
     /** Service identity stamped on all exported telemetry. */
     resource?: TelemetryResource;
+    /** Whether provider error TEXT may be stored in telemetry. Default `true`
+     *  (unchanged behaviour, and the same default as the OpenAI Agents SDK's
+     *  `trace_include_sensitive_data`).
+     *
+     *  A provider's `error.message` / `error.raw` can echo request content back —
+     *  a moderation refusal quotes the prompt, a validation error names the offending
+     *  field and value. URLs and headers are always redacted regardless; this switch
+     *  governs the free-text payload. Set `false` when telemetry leaves your trust
+     *  boundary (a shared collector, a vendor APM) and the message is replaced by a
+     *  fixed `[redacted]` string while name/code/status are kept for triage. */
+    includeSensitiveData?: boolean;
 }
 export declare class TelemetryAdapter {
     readonly events: TelemetryEvent[];
@@ -80,6 +91,7 @@ export declare class TelemetryAdapter {
     private latSum;
     private readonly open;
     private readonly maxEvents;
+    private readonly includeSensitiveData;
     private readonly unsub;
     constructor(hooks: HookBus, opts?: TelemetryAdapterOptions);
     /** Stop tapping the bus. */

package/dist/util/http.d.ts

@@ -1,6 +1,14 @@
 /** Small HTTP header helpers shared across network + server layers. */
 /** Lowercase-keyed plain record from a WHATWG `Headers`. */
 export declare function headersToRecord(headers: Headers): Record<string, string>;
+/** Case-insensitive header lookup. HTTP header names are case-insensitive
+ *  (RFC 9110 §5.1) but a plain record is not, and the casing a server or fetch
+ *  implementation actually sends varies — so read response headers through here
+ *  instead of guessing casings at the call site. */
+export declare function header(headers: Record<string, string>, name: string): string | undefined;
+/** True when a request body cannot be replayed for a retry (the first attempt
+ *  consumes it). FormData, strings and byte views are replayable; a stream is not. */
+export declare function isStreamBody(body: unknown): boolean;
 /** Parse an integer header value, or null if absent / not a number. */
 export declare function parseIntHeader(headers: Record<string, string>, key: string): number | null;
 /** Combine multiple AbortSignals into one that aborts when any of them does. */

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@combycode/llm-sdk",
-  "version": "1.7.0",
+  "version": "2.0.0",
   "description": "Unified, pluggable AI SDK for accessing the LLMs of every major provider (Anthropic, OpenAI, Google, xAI, OpenRouter) through one API. Cross-environment: Node, Bun, and the browser.",
   "type": "module",
   "main": "./dist/index.js",
@@ -23,7 +23,8 @@
     "dist",
     "README.md",
     "CHANGELOG.md",
-    "LICENSE"
+    "LICENSE",
+    "MIGRATION.md"
   ],
   "scripts": {
     "build": "bun run clean && bun run build:js && bun run build:types",
@@ -43,25 +44,27 @@
     "check": "biome check src tests",
     "check:fix": "biome check --write src tests"
   },
-  "optionalDependencies": {
-    "tiktoken": "^1.0.22"
-  },
   "devDependencies": {
     "@biomejs/biome": "^2.4.13",
     "@types/bun": "latest",
     "esbuild": "0.28.1",
+    "tiktoken": "^1.0.22",
     "typescript": "^5.6.0"
   },
   "peerDependencies": {
+    "tiktoken": "^1.0.22",
     "typescript": ">=5.0"
   },
   "peerDependenciesMeta": {
     "typescript": {
       "optional": true
+    },
+    "tiktoken": {
+      "optional": true
     }
   },
   "engines": {
-    "node": ">=18",
+    "node": ">=22",
     "bun": ">=1.1.0"
   },
   "repository": {