@hilbras/omnihilbras 0.1.0

package/dist/url.js

@@ -0,0 +1,104 @@
+import { ProviderError } from './errors.js';
+export function normalizeProviderBaseUrl(value, providerId) {
+    try {
+        const url = new URL(value);
+        if (url.search || url.hash)
+            throw new Error('URL query and fragment are not allowed');
+        assertSafeProviderRequestUrl(url.toString(), providerId);
+        return url.toString().replace(/\/$/, '');
+    }
+    catch (error) {
+        throw new ProviderError('CONFIGURATION_ERROR', `Invalid base URL for provider ${providerId}.`, { providerId, cause: error });
+    }
+}
+export function assertSafeProviderRequestUrl(value, providerId) {
+    try {
+        const url = new URL(value);
+        if (url.username || url.password)
+            throw new Error('URL userinfo is not allowed');
+        if (url.protocol !== 'https:' && !(url.protocol === 'http:' && isLoopbackHostname(url.hostname))) {
+            throw new Error('Remote provider URLs must use HTTPS');
+        }
+        if (url.protocol === 'https:' && isPrivateHostname(url.hostname))
+            throw new Error('Private provider destinations are not allowed.');
+        return url.toString();
+    }
+    catch (error) {
+        throw new ProviderError('CONFIGURATION_ERROR', `Invalid provider URL for ${providerId}.`, { providerId, cause: error });
+    }
+}
+export function resolveProviderUrl(baseUrl, path, providerId) {
+    const normalizedPath = path.trim();
+    if (!normalizedPath || /^[a-z][a-z\d+.-]*:/i.test(normalizedPath) || normalizedPath.startsWith('//') || normalizedPath.includes('\\')) {
+        throw new ProviderError('CONFIGURATION_ERROR', `Invalid provider path for ${providerId}.`, { providerId });
+    }
+    assertSafeProviderRequestUrl(baseUrl, providerId);
+    const base = new URL(`${baseUrl}/`);
+    if (base.search || base.hash)
+        throw new ProviderError('CONFIGURATION_ERROR', `Provider base URL cannot contain a query or fragment for ${providerId}.`, { providerId });
+    const resolved = new URL(normalizedPath.replace(/^\/+/, ''), base);
+    const basePath = base.pathname.replace(/\/$/, '');
+    if (resolved.origin !== base.origin || (basePath && resolved.pathname !== basePath && !resolved.pathname.startsWith(`${basePath}/`))) {
+        throw new ProviderError('CONFIGURATION_ERROR', `Provider path escaped the configured base URL for ${providerId}.`, { providerId });
+    }
+    return resolved.toString();
+}
+const credentialHeaderNames = new Set(['authorization', 'proxy-authorization', 'cookie', 'set-cookie', 'x-api-key', 'x-goog-api-key']);
+const transportHeaderNames = new Set(['host', 'content-length', 'connection', 'transfer-encoding', 'upgrade', 'te', 'trailer']);
+export function assertSafeProviderHeaderName(name, providerId, options = {}) {
+    const normalized = name.toLowerCase();
+    if (!/^[!#$%&'*+\-.^_`|~0-9a-z]+$/i.test(name) || transportHeaderNames.has(normalized) || (!options.allowCredential && credentialHeaderNames.has(normalized))) {
+        throw new ProviderError('CONFIGURATION_ERROR', `Header ${name} is not allowed for provider ${providerId}.`, { providerId });
+    }
+}
+export function assertSafeProviderHeaderValue(name, value, providerId) {
+    if (/[\r\n\0]/.test(value)) {
+        throw new ProviderError('CONFIGURATION_ERROR', `Header ${name} contains an unsafe value for provider ${providerId}.`, { providerId });
+    }
+}
+export function sanitizeProviderHeaders(headers, providerId) {
+    const safe = {};
+    for (const [name, value] of Object.entries(headers ?? {})) {
+        assertSafeProviderHeaderName(name, providerId);
+        assertSafeProviderHeaderValue(name, value, providerId);
+        safe[name] = value;
+    }
+    return safe;
+}
+export function isPrivateHostname(hostname) {
+    const normalized = hostname.trim().toLowerCase().replace(/^\[|\]$/g, '');
+    if (normalized === 'localhost' || normalized.endsWith('.local') || normalized.endsWith('.internal'))
+        return true;
+    if (isStrictIpv4(normalized)) {
+        const parts = normalized.split('.').map(Number);
+        const first = parts[0] ?? -1;
+        const second = parts[1] ?? -1;
+        return first === 0 || first === 10 || first === 127 || (first === 172 && second >= 16 && second <= 31) || (first === 192 && second === 168) || (first === 169 && second === 254) || (first === 100 && second >= 64 && second <= 127);
+    }
+    if (!normalized.includes(':'))
+        return false;
+    return normalized === '::1' || normalized.startsWith('fc') || normalized.startsWith('fd') || normalized.startsWith('fe8') || normalized.startsWith('fe9') || normalized.startsWith('fea') || normalized.startsWith('feb');
+}
+export function isLoopbackHostname(hostname) {
+    const normalized = hostname.trim().toLowerCase().replace(/^\[|\]$/g, '');
+    if (normalized === 'localhost')
+        return true;
+    if (isStrictIpv4(normalized))
+        return normalized.split('.')[0] === '127';
+    return normalized === '::1' || normalized === '0:0:0:0:0:0:0:1';
+}
+export function canonicalLoopbackHost(hostname) {
+    const normalized = hostname.trim().toLowerCase().replace(/^\[|\]$/g, '');
+    if (normalized === 'localhost')
+        return '127.0.0.1';
+    if (isStrictIpv4(normalized) && normalized.split('.')[0] === '127')
+        return normalized;
+    if (normalized === '::1' || normalized === '0:0:0:0:0:0:0:1')
+        return '::1';
+    throw new Error('Host must be a loopback address.');
+}
+function isStrictIpv4(value) {
+    const parts = value.split('.');
+    return parts.length === 4 && parts.every((part) => /^(0|[1-9]\d{0,2})$/.test(part) && Number(part) <= 255);
+}
+//# sourceMappingURL=url.js.map

package/dist/url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"url.js","sourceRoot":"","sources":["../src/url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAE5C,MAAM,UAAU,wBAAwB,CAAC,KAAa,EAAE,UAAkB;IACxE,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI;YAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QACtF,4BAA4B,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,CAAC,CAAC;QACzD,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,iCAAiC,UAAU,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC/H,CAAC;AACH,CAAC;AAED,MAAM,UAAU,4BAA4B,CAAC,KAAa,EAAE,UAAkB;IAC5E,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,IAAI,GAAG,CAAC,QAAQ,IAAI,GAAG,CAAC,QAAQ;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAC;QACjF,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC;YACjG,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,iBAAiB,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;QACpI,OAAO,GAAG,CAAC,QAAQ,EAAE,CAAC;IACxB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,4BAA4B,UAAU,GAAG,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1H,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe,EAAE,IAAY,EAAE,UAAkB;IAClF,MAAM,cAAc,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,CAAC,cAAc,IAAI,qBAAqB,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,cAAc,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,cAAc,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtI,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,6BAA6B,UAAU,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAC7G,CAAC;IAED,4BAA4B,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,OAAO,GAAG,CAAC,CAAC;IACpC,IAAI,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,IAAI;QAAE,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,4DAA4D,UAAU,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACxK,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,cAAc,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,IAAI,CAAC,CAAC;IACnE,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,UAAU,CAAC,GAAG,QAAQ,GAAG,CAAC,CAAC,EAAE,CAAC;QACrI,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,qDAAqD,UAAU,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACrI,CAAC;IACD,OAAO,QAAQ,CAAC,QAAQ,EAAE,CAAC;AAC7B,CAAC;AAED,MAAM,qBAAqB,GAAG,IAAI,GAAG,CAAC,CAAC,eAAe,EAAE,qBAAqB,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,gBAAgB,CAAC,CAAC,CAAC;AACvI,MAAM,oBAAoB,GAAG,IAAI,GAAG,CAAC,CAAC,MAAM,EAAE,gBAAgB,EAAE,YAAY,EAAE,mBAAmB,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,CAAC,CAAC;AAEhI,MAAM,UAAU,4BAA4B,CAAC,IAAY,EAAE,UAAkB,EAAE,UAAyC,EAAE;IACxH,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,IAAI,CAAC,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,eAAe,IAAI,qBAAqB,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,EAAE,CAAC;QAC9J,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,UAAU,IAAI,gCAAgC,UAAU,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IAC9H,CAAC;AACH,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,IAAY,EAAE,KAAa,EAAE,UAAkB;IAC3F,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,MAAM,IAAI,aAAa,CAAC,qBAAqB,EAAE,UAAU,IAAI,0CAA0C,UAAU,GAAG,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACxI,CAAC;AACH,CAAC;AAED,MAAM,UAAU,uBAAuB,CAAC,OAA2C,EAAE,UAAkB;IACrG,MAAM,IAAI,GAA2B,EAAE,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,4BAA4B,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC/C,6BAA6B,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACrB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,UAAU,KAAK,WAAW,IAAI,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,UAAU,CAAC,QAAQ,CAAC,WAAW,CAAC;QAAE,OAAO,IAAI,CAAC;IACjH,IAAI,YAAY,CAAC,UAAU,CAAC,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAChD,MAAM,KAAK,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC7B,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9B,OAAO,KAAK,KAAK,CAAC,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,GAAG,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,EAAE,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG,CAAC,IAAI,CAAC,KAAK,KAAK,GAAG,IAAI,MAAM,IAAI,EAAE,IAAI,MAAM,IAAI,GAAG,CAAC,CAAC;IACvO,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;AAC5N,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,QAAgB;IACjD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,IAAI,CAAC;IAC5C,IAAI,YAAY,CAAC,UAAU,CAAC;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;IACxE,OAAO,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,iBAAiB,CAAC;AAClE,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,QAAgB;IACpD,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IACzE,IAAI,UAAU,KAAK,WAAW;QAAE,OAAO,WAAW,CAAC;IACnD,IAAI,YAAY,CAAC,UAAU,CAAC,IAAI,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,KAAK;QAAE,OAAO,UAAU,CAAC;IACtF,IAAI,UAAU,KAAK,KAAK,IAAI,UAAU,KAAK,iBAAiB;QAAE,OAAO,KAAK,CAAC;IAC3E,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC/B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG,CAAC,CAAC;AAC7G,CAAC"}

package/package.json

@@ -0,0 +1,57 @@
+{
+  "name": "@hilbras/omnihilbras",
+  "version": "0.1.0",
+  "description": "Typed provider SDK for the OmniHilbras gateway: normalized chat, streaming, model listing, and capability contracts for OpenAI, Anthropic, Gemini, and OpenAI-compatible providers.",
+  "license": "MIT",
+  "author": "Hilbras",
+  "homepage": "https://github.com/Hilbras/OmniHilbras#readme",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/Hilbras/OmniHilbras.git",
+    "directory": "packages/omnihilbras-sdk"
+  },
+  "bugs": {
+    "url": "https://github.com/Hilbras/OmniHilbras/issues"
+  },
+  "keywords": [
+    "omnihilbras",
+    "ai-gateway",
+    "llm",
+    "openai",
+    "anthropic",
+    "gemini",
+    "openrouter",
+    "provider-abstraction",
+    "streaming"
+  ],
+  "type": "module",
+  "main": "./dist/index.js",
+  "types": "./dist/index.d.ts",
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "engines": {
+    "node": ">=20"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "sideEffects": false,
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "typecheck": "tsc -p tsconfig.json --noEmit",
+    "test": "pnpm build && node --test test/*.test.js",
+    "prepublishOnly": "pnpm build"
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.2",
+    "typescript": "^5.9.0"
+  }
+}