@jini-ai/agent-runtime 0.2.1 → 0.3.0

package/dist/providers/azure-chat.d.ts

@@ -1,3 +1,78 @@
+/**
+ * @module providers/azure-chat
+ *
+ * Azure OpenAI Chat Completions wire adapter + tool-loop turn-runner.
+ * Sibling of `anthropic-messages.ts`/`openai-chat.ts` — see those modules'
+ * headers for the shared design rationale. Azure OpenAI's chat-completions
+ * JSON request/response body is byte-identical to plain OpenAI's (same
+ * `messages`/`tools`/streaming-delta shape) — only the URL and the auth
+ * header differ — so this module reuses `openai-chat.ts`'s extracted
+ * `runOpenAiCompatibleRequest` SSE-reduction loop rather than duplicating
+ * it; see that function's doc for why it was pulled out.
+ *
+ * **URL**: `{baseUrl}/openai/deployments/{model}/chat/completions
+ * ?api-version={apiVersion}` — `model` here is the Azure *deployment name*,
+ * not a model id (Azure OpenAI resources map a deployment name to a
+ * specific model version at resource-creation time). `apiVersion` defaults
+ * to `'2024-10-21'`, the default this repo's real OD predecessor used for
+ * its own azure chat-completions proxy route (`apps/daemon/src/routes/
+ * chat.ts`'s `[proxy:azure]` handler, confirmed by reading that file
+ * directly in a sibling checkout — see `source-map.md`'s dated entry).
+ * That source additionally branches on whether `baseUrl` already contains
+ * a versioned `/openai/v1` path (a newer Azure OpenAI API preview); that
+ * branch is deliberately not carried forward here — this adapter targets
+ * the one documented, stable URL/body shape per this task's approved scope
+ * ("byte-identical to OpenAI, only URL/auth differ"). Its 400-retry
+ * behavior IS carried forward (see "Token-limit fix" below) — round-4
+ * external audit (`AUD-R4-001`) found the first port had dropped it,
+ * which fails every request against a GPT-5/o-series Azure deployment.
+ *
+ * **Auth**: `api-key: {apiKey}` header — NOT `Authorization: Bearer`,
+ * Azure OpenAI's own convention (also confirmed against the same OD
+ * source above).
+ *
+ * **No default `baseUrl`**: every Azure OpenAI resource has its own
+ * endpoint (`https://{resource}.openai.azure.com`), so unlike Anthropic/
+ * OpenAI/Google/Ollama, `baseUrl` is a required field on
+ * {@link AzureTurnOptions}, and `apiVersion` is validated as
+ * non-empty-if-supplied by the caller (`@jini-ai/http-kit`'s
+ * `parseAzureProxyRequest` — see that module).
+ *
+ * **Token-limit fix**: an earlier version of this module sent no token-limit
+ * field at all — a live comparison against a running Open Design daemon
+ * found OD's real `azure` proxy handler always sends `max_tokens` (defaulting
+ * to 8192), unconditionally the legacy field name — never the newer
+ * `max_completion_tokens` `openai-chat.ts` picks for GPT-5/o-series models,
+ * since Azure deployment names are caller-defined strings, not necessarily
+ * matching OpenAI's own model-naming scheme. Wired via
+ * `./token-params.js#buildLegacyMaxTokensParam`. Because deployment names
+ * are opaque, a legacy-field request can still be rejected by a
+ * GPT-5/o-series deployment with a 400 — OD's real handler retries exactly
+ * once with `max_completion_tokens` on that specific error
+ * (`isUnsupportedMaxTokensError`); this module does the same via
+ * `runOpenAiCompatibleRequest`'s `retryableBody` hook.
+ *
+ * **Image support inherits from plain OpenAI, confirmed by doc AND by code.** Microsoft's own
+ * vision how-to (`learn.microsoft.com/azure/ai-foundry/openai/how-to/gpt-with-vision`) states
+ * verbatim: "The format is the same as the chat completions API for GPT-4o, except that the
+ * message content can be an array containing text and images" — identical `type:'text'`/
+ * `type:'image_url'` shape and `detail` values as `openai-chat.ts`. That inheritance is genuine at
+ * the code level too, not just assumed from the docs matching: `azureRequestBody` below spreads
+ * `messages` straight into the JSON body with no per-field transform, so once `AzureMessageParam`
+ * (this module's own copy of `OpenAiMessageParam`, per this file's existing full-duplication
+ * convention — see every other type in this file) is widened the same way as OpenAI's, an image
+ * survives untouched all the way to the wire. `azure-chat.test.ts`'s new image tests assert the
+ * request body directly to prove this, rather than trusting the doc claim alone.
+ *
+ * **The synthetic follow-up message and its ordering/attribution rules are also inherited
+ * unchanged from `openai-chat.ts`** — same workaround for the same text-only `tool` message
+ * constraint, same requirement that every `tool` message in a batch be emitted before the single
+ * follow-up (never interleaved — a real 400 otherwise), same per-image attribution label naming
+ * the tool call it answers. See that module's doc for the full rationale; it is not repeated here
+ * beyond this pointer to avoid the two copies drifting.
+ */
+import { type DnsLookupFn, type PinnedFetch } from './connection-guard.js';
+import { type OpenAiCompatibleRequestOutcome } from './openai-chat.js';
 import { type TurnEndReason } from './turn-end-guard.js';
 export interface AzureFunctionToolDef {
     readonly type: 'function';
@@ -15,9 +90,23 @@ export interface AzureToolCallParam {
         readonly arguments: string;
     };
 }
+export interface AzureTextPart {
+    readonly type: 'text';
+    readonly text: string;
+}
+/** `detail` defaults to `'auto'` server-side when omitted — never sent unless the caller supplies it. Same shape as `openai-chat.ts#OpenAiImageUrlPart`; see module doc's "Image support inherits from plain OpenAI" note. */
+export interface AzureImageUrlPart {
+    readonly type: 'image_url';
+    readonly image_url: {
+        readonly url: string;
+        readonly detail?: 'auto' | 'low' | 'high';
+    };
+}
+/** A user/system/assistant message's `content` array item. Not legal inside a `role: 'tool'` message — same constraint as OpenAI's (see `openai-chat.ts` module doc's "Tool messages cannot carry an image" section, which applies here identically). */
+export type AzureContentPart = AzureTextPart | AzureImageUrlPart;
 export interface AzureMessageParam {
     readonly role: 'system' | 'user' | 'assistant' | 'tool';
-    readonly content: string | null;
+    readonly content: string | null | readonly AzureContentPart[];
     readonly tool_calls?: readonly AzureToolCallParam[];
     readonly tool_call_id?: string;
     readonly name?: string;
@@ -27,8 +116,9 @@ export interface AzureToolCall {
     readonly name: string;
     readonly input: unknown;
 }
+/** `content` may include `AzureImageUrlPart`s (e.g. a vision self-check's screenshot) even though the wire `tool` message can't carry them directly — `runAzureToolTurn` splits them onto a follow-up `user` message; see `openai-chat.ts`'s identical design. */
 export interface AzureToolResult {
-    readonly content: string;
+    readonly content: string | readonly AzureContentPart[];
 }
 /** Host-owned tool execution — same "the collaborator is always supplied" convention as `anthropic-messages.ts#AnthropicToolExecutor`. */
 export type AzureToolExecutor = (call: AzureToolCall) => Promise<AzureToolResult>;
@@ -47,7 +137,7 @@ export type AzureTurnEvent = {
 } | {
     readonly type: 'tool_result';
     readonly toolUseId: string;
-    readonly content: string;
+    readonly content: string | readonly AzureContentPart[];
     readonly isError: boolean;
 } | {
     readonly type: 'usage';
@@ -84,11 +174,31 @@ export interface AzureTurnOptions {
     readonly signal?: AbortSignal;
     /** Caller-supplied extra headers — see `anthropic-messages.ts#AnthropicTurnOptions.extraHeaders`'s doc for why this exists and what it fixes. */
     readonly extraHeaders?: Record<string, string>;
+    /** Injectable HTTP transport, defaulting to `connection-guard.ts`'s `pinnedFetch` (SSRF-guarded, DNS-pinned). See `anthropic-messages.ts#AnthropicTurnOptions.fetchImpl`'s doc for the seam this exists for and why production wiring must never override it. Forwarded to `openai-chat.ts#runOpenAiCompatibleRequest` — this provider delegates its actual request to that shared reducer (see module doc). */
+    readonly fetchImpl?: PinnedFetch;
+    /** Injectable DNS resolver for `validateBaseUrlResolved`'s DNS-pinning check, defaulting to `defaultDnsLookup`. Same test-only override rationale as `fetchImpl`. */
+    readonly dnsLookup?: DnsLookupFn;
 }
 export interface AzureTurnResult {
     readonly finishReason: string | null;
     readonly toolTurns: number;
 }
+/**
+ * Decides why the tool loop should stop after one request, or returns `null` when it should
+ * instead proceed to execute the pending tool calls — mirrors
+ * `anthropic-messages.ts#anthropicLoopExitReason`'s pure decision/effect split.
+ */
+export declare function azureLoopExitReason(outcome: OpenAiCompatibleRequestOutcome, toolTurns: number, maxToolTurns: number): AzureTurnEndReason | null;
+/** Builds the assistant continuation's `tool_calls` field — same shape as `openai-chat.ts#buildOpenAiAssistantToolCallMessage`'s `tool_calls`, since Azure's wire body is byte-identical to plain OpenAI's (see module doc). */
+export declare function buildAzureAssistantToolCalls(toolCalls: readonly AzureToolCall[]): AzureToolCallParam[];
+export interface AzureToolExecutionOutcome {
+    readonly toolResultMessages: AzureMessageParam[];
+    readonly followUpParts: AzureContentPart[];
+}
+/** Azure counterpart of `openai-chat.ts#executeOpenAiToolCalls` — same split (text-only `tool` message plus one labeled-image follow-up per batch) and same per-batch assembly discipline; see that function's doc and module doc's "synthetic follow-up message" note for why. */
+export declare function executeAzureToolCalls(executeTool: AzureToolExecutor, calls: readonly AzureToolCall[], onEvent: (event: AzureTurnEvent) => void): Promise<AzureToolExecutionOutcome>;
+/** Azure counterpart of `openai-chat.ts#buildOpenAiToolExchangeMessages` — appends the batch's `tool` messages plus, when present, the single labeled-image follow-up message. */
+export declare function buildAzureToolExchangeMessages(toolResultMessages: readonly AzureMessageParam[], followUpParts: readonly AzureContentPart[]): AzureMessageParam[];
 /**
  * Runs a full Azure OpenAI Chat Completions turn, including the
  * tool-execution loop when `options.executeTool` is supplied and the model

package/dist/providers/azure-chat.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"azure-chat.d.ts","sourceRoot":"","sources":["../../src/providers/azure-chat.ts"],"names":[],"mappings":"AAyDA,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,0IAA0I;AAC1I,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAElF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAE/C,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAClG;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GACjH;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAElE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wHAAwH;IACxH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wJAAwJ;IACxJ,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,iJAAiJ;IACjJ,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChD;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AA2ED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAkD1F"}
+{"version":3,"file":"azure-chat.d.ts","sourceRoot":"","sources":["../../src/providers/azure-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,OAAO,EAA6C,KAAK,WAAW,EAAE,KAAK,WAAW,EAAE,MAAM,uBAAuB,CAAC;AACtH,OAAO,EAA8B,KAAK,8BAA8B,EAAE,MAAM,kBAAkB,CAAC;AAEnG,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE7E,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QACjB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QACtB,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAC9B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC9C,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;CAC1E;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB;AAED,8NAA8N;AAC9N,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE;QAClB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;QACrB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;KAC3C,CAAC;CACH;AAED,yPAAyP;AACzP,MAAM,MAAM,gBAAgB,GAAG,aAAa,GAAG,iBAAiB,CAAC;AAEjE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IACxD,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,gBAAgB,EAAE,CAAC;IAC9D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,kBAAkB,EAAE,CAAC;IACpD,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAC;CACzB;AAED,kQAAkQ;AAClQ,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAAC;CACxD;AAED,0IAA0I;AAC1I,MAAM,MAAM,iBAAiB,GAAG,CAAC,IAAI,EAAE,aAAa,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;AAElF,MAAM,MAAM,kBAAkB,GAAG,aAAa,CAAC;AAE/C,MAAM,MAAM,cAAc,GACtB;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACnD;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACvD;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAClG;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,SAAS,gBAAgB,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAAE,GAC/I;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAAA;CAAE,GAC1E;IAAE,QAAQ,CAAC,IAAI,EAAE,wBAAwB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GAChG;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,GAC5E;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAA;CAAE,CAAC;AAElE,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,wHAAwH;IACxH,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,+DAA+D;IAC/D,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,kEAAkE;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,SAAS,iBAAiB,EAAE,CAAC;IAChD,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IACjD,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,wJAAwJ;IACxJ,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,sFAAsF;IACtF,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,CAAC,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,CAAC;IAClD,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,iJAAiJ;IACjJ,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/C,gZAAgZ;IAChZ,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC;IACjC,qKAAqK;IACrK,QAAQ,CAAC,SAAS,CAAC,EAAE,WAAW,CAAC;CAClC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAuID;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,8BAA8B,EAAE,SAAS,EAAE,MAAM,EAAE,YAAY,EAAE,MAAM,GAAG,kBAAkB,GAAG,IAAI,CAI/I;AAED,gOAAgO;AAChO,wBAAgB,4BAA4B,CAAC,SAAS,EAAE,SAAS,aAAa,EAAE,GAAG,kBAAkB,EAAE,CAEtG;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,kBAAkB,EAAE,iBAAiB,EAAE,CAAC;IACjD,QAAQ,CAAC,aAAa,EAAE,gBAAgB,EAAE,CAAC;CAC5C;AAED,mRAAmR;AACnR,wBAAsB,qBAAqB,CACzC,WAAW,EAAE,iBAAiB,EAC9B,KAAK,EAAE,SAAS,aAAa,EAAE,EAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,cAAc,KAAK,IAAI,GACvC,OAAO,CAAC,yBAAyB,CAAC,CAgBpC;AAED,kLAAkL;AAClL,wBAAgB,8BAA8B,CAC5C,kBAAkB,EAAE,SAAS,iBAAiB,EAAE,EAChD,aAAa,EAAE,SAAS,gBAAgB,EAAE,GACzC,iBAAiB,EAAE,CAErB;AAED;;;;;GAKG;AACH,wBAAsB,gBAAgB,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,eAAe,CAAC,CAuC1F"}

package/dist/providers/azure-chat.js

@@ -35,7 +35,7 @@
  * endpoint (`https://{resource}.openai.azure.com`), so unlike Anthropic/
  * OpenAI/Google/Ollama, `baseUrl` is a required field on
  * {@link AzureTurnOptions}, and `apiVersion` is validated as
- * non-empty-if-supplied by the caller (`@jini-ai/http`'s
+ * non-empty-if-supplied by the caller (`@jini-ai/http-kit`'s
  * `parseAzureProxyRequest` — see that module).
  *
  * **Token-limit fix**: an earlier version of this module sent no token-limit
@@ -51,6 +51,25 @@
  * once with `max_completion_tokens` on that specific error
  * (`isUnsupportedMaxTokensError`); this module does the same via
  * `runOpenAiCompatibleRequest`'s `retryableBody` hook.
+ *
+ * **Image support inherits from plain OpenAI, confirmed by doc AND by code.** Microsoft's own
+ * vision how-to (`learn.microsoft.com/azure/ai-foundry/openai/how-to/gpt-with-vision`) states
+ * verbatim: "The format is the same as the chat completions API for GPT-4o, except that the
+ * message content can be an array containing text and images" — identical `type:'text'`/
+ * `type:'image_url'` shape and `detail` values as `openai-chat.ts`. That inheritance is genuine at
+ * the code level too, not just assumed from the docs matching: `azureRequestBody` below spreads
+ * `messages` straight into the JSON body with no per-field transform, so once `AzureMessageParam`
+ * (this module's own copy of `OpenAiMessageParam`, per this file's existing full-duplication
+ * convention — see every other type in this file) is widened the same way as OpenAI's, an image
+ * survives untouched all the way to the wire. `azure-chat.test.ts`'s new image tests assert the
+ * request body directly to prove this, rather than trusting the doc claim alone.
+ *
+ * **The synthetic follow-up message and its ordering/attribution rules are also inherited
+ * unchanged from `openai-chat.ts`** — same workaround for the same text-only `tool` message
+ * constraint, same requirement that every `tool` message in a batch be emitted before the single
+ * follow-up (never interleaved — a real 400 otherwise), same per-image attribution label naming
+ * the tool call it answers. See that module's doc for the full rationale; it is not repeated here
+ * beyond this pointer to avoid the two copies drifting.
  */
 import { defaultDnsLookup, validateBaseUrlResolved } from './connection-guard.js';
 import { runOpenAiCompatibleRequest } from './openai-chat.js';
@@ -88,7 +107,7 @@ function azureRequestBody(options, messages, tokenParam) {
 }
 /** Validates `options.baseUrl`, then delegates to `openai-chat.ts#runOpenAiCompatibleRequest` with Azure's own URL/header/body builders. */
 async function runSingleAzureRequest(options, messages, emitEnd, hasEnded) {
-    const baseUrlCheck = await validateBaseUrlResolved(options.baseUrl, defaultDnsLookup);
+    const baseUrlCheck = await validateBaseUrlResolved(options.baseUrl, options.dnsLookup ?? defaultDnsLookup);
     if (baseUrlCheck.error) {
         options.onEvent({ type: 'error', message: baseUrlCheck.error });
         emitEnd('error');
@@ -102,7 +121,9 @@ async function runSingleAzureRequest(options, messages, emitEnd, hasEnded) {
         retryableBody: (status, rawErrorText) => status === 400 && isUnsupportedMaxTokensError(rawErrorText)
             ? azureRequestBody(options, messages, buildMaxCompletionTokensParam(maxTokens))
             : null,
+        ...(baseUrlCheck.pinnedAddress ? { pinnedAddress: baseUrlCheck.pinnedAddress } : {}),
         ...(options.signal ? { signal: options.signal } : {}),
+        ...(options.fetchImpl ? { fetchImpl: options.fetchImpl } : {}),
         redactSecretsList: [options.apiKey],
         guardMessageId: 'azure-turn',
         providerLabel: 'Azure OpenAI',
@@ -111,6 +132,89 @@ async function runSingleAzureRequest(options, messages, emitEnd, hasEnded) {
         hasEnded,
     });
 }
+const AZURE_ALLOWED_IMAGE_MEDIA_TYPES = new Set(['image/jpeg', 'image/png', 'image/webp', 'image/gif']);
+/** Same 20 MB conservative single-image guard as `openai-chat.ts#MAX_IMAGE_DATA_URI_BASE64_CHARS` — see that constant's doc for the full rationale (Azure inherits OpenAI's image support, so it inherits this module's own defensive posture around it too). */
+const MAX_IMAGE_DATA_URI_BASE64_CHARS = Math.ceil((20 * 1024 * 1024 * 4) / 3);
+/** Same conservative per-tool-result image-count guard as `openai-chat.ts#MAX_IMAGES_PER_OPENAI_TOOL_RESULT`. */
+const MAX_IMAGES_PER_AZURE_TOOL_RESULT = 1500;
+const AZURE_DATA_URI_PATTERN = /^data:([^;,]+)(?:;charset=[^;,]+)?;base64,(.+)$/su;
+/** Azure counterpart of `openai-chat.ts#invalidOpenAiContentPartReason` — same validation, same URL-sourced-image skip rationale (Azure's own servers fetch a plain `https://` `image_url`, not this adapter). @complexity O(1). */
+function invalidAzureContentPartReason(part) {
+    if (part.type === 'text')
+        return null;
+    const dataUriMatch = AZURE_DATA_URI_PATTERN.exec(part.image_url.url);
+    if (!dataUriMatch)
+        return null;
+    const [, mediaType, base64Data] = dataUriMatch;
+    if (!mediaType || !AZURE_ALLOWED_IMAGE_MEDIA_TYPES.has(mediaType.toLowerCase())) {
+        return `unsupported image media type ${JSON.stringify(mediaType)} (Azure OpenAI's chat completions API supports image/jpeg, image/png, image/webp, and non-animated image/gif — same as plain OpenAI)`;
+    }
+    if (base64Data && base64Data.length > MAX_IMAGE_DATA_URI_BASE64_CHARS) {
+        return `image exceeds this adapter's 20 MB base64 size guard (${base64Data.length} base64 chars)`;
+    }
+    return null;
+}
+/** Azure counterpart of `openai-chat.ts#sanitizeOpenAiToolResult` — same runtime guard, same rationale (an `AzureToolResult` is host-owned; the TS union only constrains a well-behaved host at compile time). @complexity O(n) in content parts. */
+function sanitizeAzureToolResult(result) {
+    if (typeof result.content === 'string')
+        return { content: result.content, isError: false };
+    if (result.content.length > MAX_IMAGES_PER_AZURE_TOOL_RESULT) {
+        return { content: `tool result rejected: exceeds the ${MAX_IMAGES_PER_AZURE_TOOL_RESULT}-image-per-request guard (${result.content.length} parts)`, isError: true };
+    }
+    for (const part of result.content) {
+        const reason = invalidAzureContentPartReason(part);
+        if (reason)
+            return { content: `tool result rejected: ${reason}`, isError: true };
+    }
+    return { content: result.content, isError: false };
+}
+/** Azure counterpart of `openai-chat.ts#splitOpenAiToolResultContent` — same text/image split, same placeholder-when-image-only rule, same reason (a `role: 'tool'` message on Azure is the identical wire shape as plain OpenAI's, so it has the identical text-only constraint). @complexity O(n) in content parts. */
+function splitAzureToolResultContent(content) {
+    if (typeof content === 'string')
+        return { toolMessageContent: content, imageParts: [] };
+    const textParts = content.filter((part) => part.type === 'text');
+    const imageParts = content.filter((part) => part.type === 'image_url');
+    const toolMessageContent = textParts.length > 0 ? textParts : [{ type: 'text', text: '(tool result included only non-text content; see the following message)' }];
+    return { toolMessageContent, imageParts };
+}
+/**
+ * Decides why the tool loop should stop after one request, or returns `null` when it should
+ * instead proceed to execute the pending tool calls — mirrors
+ * `anthropic-messages.ts#anthropicLoopExitReason`'s pure decision/effect split.
+ */
+export function azureLoopExitReason(outcome, toolTurns, maxToolTurns) {
+    if (outcome.finishReason !== 'tool_calls' || outcome.toolCalls.length === 0)
+        return 'stop';
+    if (toolTurns >= maxToolTurns)
+        return 'max_tool_turns';
+    return null;
+}
+/** Builds the assistant continuation's `tool_calls` field — same shape as `openai-chat.ts#buildOpenAiAssistantToolCallMessage`'s `tool_calls`, since Azure's wire body is byte-identical to plain OpenAI's (see module doc). */
+export function buildAzureAssistantToolCalls(toolCalls) {
+    return toolCalls.map((call) => ({ id: call.id, type: 'function', function: { name: call.name, arguments: JSON.stringify(call.input) } }));
+}
+/** Azure counterpart of `openai-chat.ts#executeOpenAiToolCalls` — same split (text-only `tool` message plus one labeled-image follow-up per batch) and same per-batch assembly discipline; see that function's doc and module doc's "synthetic follow-up message" note for why. */
+export async function executeAzureToolCalls(executeTool, calls, onEvent) {
+    const toolResultMessages = [];
+    const followUpParts = [];
+    for (const call of calls) {
+        const result = await executeTool(call);
+        const sanitized = sanitizeAzureToolResult(result);
+        onEvent({ type: 'tool_result', toolUseId: call.id, content: sanitized.content, isError: sanitized.isError });
+        const split = splitAzureToolResultContent(sanitized.content);
+        toolResultMessages.push({ role: 'tool', content: split.toolMessageContent, tool_call_id: call.id });
+        if (split.imageParts.length > 0) {
+            // Attribution label — see `openai-chat.ts`'s identical note for why this matters.
+            followUpParts.push({ type: 'text', text: `Image output from tool \`${call.name}\` (tool_call_id: ${call.id}):` });
+            followUpParts.push(...split.imageParts);
+        }
+    }
+    return { toolResultMessages, followUpParts };
+}
+/** Azure counterpart of `openai-chat.ts#buildOpenAiToolExchangeMessages` — appends the batch's `tool` messages plus, when present, the single labeled-image follow-up message. */
+export function buildAzureToolExchangeMessages(toolResultMessages, followUpParts) {
+    return [...toolResultMessages, ...(followUpParts.length > 0 ? [{ role: 'user', content: followUpParts }] : [])];
+}
 /**
  * Runs a full Azure OpenAI Chat Completions turn, including the
  * tool-execution loop when `options.executeTool` is supplied and the model
@@ -119,6 +223,7 @@ async function runSingleAzureRequest(options, messages, emitEnd, hasEnded) {
  */
 export async function runAzureToolTurn(options) {
     const maxToolTurns = options.maxToolTurns ?? DEFAULT_MAX_TOOL_TURNS;
+    const executeTool = options.executeTool;
     const endGuard = createTurnEndGuard(options.onEvent, (reason) => ({ type: 'end', reason }));
     const emitEnd = endGuard.emitEnd;
     let messages = options.messages.slice();
@@ -129,34 +234,22 @@ export async function runAzureToolTurn(options) {
         lastFinishReason = outcome.finishReason;
         if (endGuard.hasEnded())
             break;
-        if (outcome.finishReason !== 'tool_calls' || outcome.toolCalls.length === 0) {
-            emitEnd('stop');
+        const exitReason = azureLoopExitReason(outcome, toolTurns, maxToolTurns);
+        if (exitReason) {
+            emitEnd(exitReason);
             break;
         }
-        if (!options.executeTool) {
+        if (!executeTool) {
             emitEnd('stop');
             break;
         }
-        if (toolTurns >= maxToolTurns) {
-            emitEnd('max_tool_turns');
-            break;
-        }
         toolTurns += 1;
-        const assistantToolCalls = outcome.toolCalls.map((call) => ({
-            id: call.id,
-            type: 'function',
-            function: { name: call.name, arguments: JSON.stringify(call.input) },
-        }));
-        const toolResultMessages = [];
-        for (const call of outcome.toolCalls) {
-            const result = await options.executeTool(call);
-            options.onEvent({ type: 'tool_result', toolUseId: call.id, content: result.content, isError: false });
-            toolResultMessages.push({ role: 'tool', content: result.content, tool_call_id: call.id });
-        }
+        const assistantToolCalls = buildAzureAssistantToolCalls(outcome.toolCalls);
+        const { toolResultMessages, followUpParts } = await executeAzureToolCalls(executeTool, outcome.toolCalls, options.onEvent);
         messages = [
             ...messages,
             { role: 'assistant', content: outcome.text || null, tool_calls: assistantToolCalls },
-            ...toolResultMessages,
+            ...buildAzureToolExchangeMessages(toolResultMessages, followUpParts),
         ];
     }
     return { finishReason: lastFinishReason, toolTurns };

package/dist/providers/azure-chat.js.map

@@ -1 +1 @@
-{"version":3,"file":"azure-chat.js","sourceRoot":"","sources":["../../src/providers/azure-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqDG;AACH,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAE,MAAM,uBAAuB,CAAC;AAClF,OAAO,EAAE,0BAA0B,EAAuC,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAE,kBAAkB,EAAsB,MAAM,qBAAqB,CAAC;AA6E7E,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAC/C,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,kGAAkG;AAClG,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC,SAAS,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,UAA8B;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC;IAChG,OAAO,GAAG,IAAI,uBAAuB,kBAAkB,CAAC,KAAK,CAAC,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC/H,CAAC;AAED,SAAS,YAAY,CAAC,OAAyB;IAC7C,OAAO;QACL,cAAc,EAAE,kBAAkB;QAClC,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAyB;IACxD,OAAO,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC;AACvH,CAAC;AAED,oKAAoK;AACpK,SAAS,gBAAgB,CACvB,OAAyB,EACzB,QAAsC,EACtC,UAAmC;IAEnC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,QAAQ;QACR,GAAG,UAAU;QACb,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,4IAA4I;AAC5I,KAAK,UAAU,qBAAqB,CAClC,OAAyB,EACzB,QAAsC,EACtC,OAA6C,EAC7C,QAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;IACtF,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEnD,OAAO,0BAA0B,CAAC;QAChC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;QACxE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;QAC9B,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC/E,aAAa,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,CACtC,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,YAAY,CAAC;YACzD,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,6BAA6B,CAAC,SAAS,CAAC,CAAC;YAC/E,CAAC,CAAC,IAAI;QACV,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,iBAAiB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,cAAc,EAAE,YAAY;QAC5B,aAAa,EAAE,cAAc;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAyB;IAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IAEpE,MAAM,QAAQ,GAAG,kBAAkB,CAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAEjC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAE3C,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3F,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;QAExC,IAAI,QAAQ,CAAC,QAAQ,EAAE;YAAE,MAAM;QAE/B,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5E,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC;YACzB,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QACD,IAAI,SAAS,IAAI,YAAY,EAAE,CAAC;YAC9B,OAAO,CAAC,gBAAgB,CAAC,CAAC;YAC1B,MAAM;QACR,CAAC;QACD,SAAS,IAAI,CAAC,CAAC;QAEf,MAAM,kBAAkB,GAAyB,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YAChF,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE;SACrE,CAAC,CAAC,CAAC;QACJ,MAAM,kBAAkB,GAAwB,EAAE,CAAC;QACnD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACrC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAC/C,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;YACtG,kBAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QAC5F,CAAC;QAED,QAAQ,GAAG;YACT,GAAG,QAAQ;YACX,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE;YACpF,GAAG,kBAAkB;SACtB,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC"}
+{"version":3,"file":"azure-chat.js","sourceRoot":"","sources":["../../src/providers/azure-chat.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAwEG;AACH,OAAO,EAAE,gBAAgB,EAAE,uBAAuB,EAAsC,MAAM,uBAAuB,CAAC;AACtH,OAAO,EAAE,0BAA0B,EAAuC,MAAM,kBAAkB,CAAC;AACnG,OAAO,EAAE,yBAAyB,EAAE,6BAA6B,EAAE,2BAA2B,EAAE,MAAM,mBAAmB,CAAC;AAC1H,OAAO,EAAE,kBAAkB,EAAsB,MAAM,qBAAqB,CAAC;AAmG7E,MAAM,yBAAyB,GAAG,YAAY,CAAC;AAC/C,MAAM,sBAAsB,GAAG,CAAC,CAAC;AACjC,kGAAkG;AAClG,MAAM,wBAAwB,GAAG,IAAI,CAAC;AAEtC,SAAS,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,UAA8B;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,UAAU,IAAI,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,yBAAyB,CAAC;IAChG,OAAO,GAAG,IAAI,uBAAuB,kBAAkB,CAAC,KAAK,CAAC,iCAAiC,kBAAkB,CAAC,OAAO,CAAC,EAAE,CAAC;AAC/H,CAAC;AAED,SAAS,YAAY,CAAC,OAAyB;IAC7C,OAAO;QACL,cAAc,EAAE,kBAAkB;QAClC,SAAS,EAAE,OAAO,CAAC,MAAM;QACzB,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC;KAChC,CAAC;AACJ,CAAC;AAED,SAAS,uBAAuB,CAAC,OAAyB;IACxD,OAAO,OAAO,OAAO,CAAC,SAAS,KAAK,QAAQ,IAAI,OAAO,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,wBAAwB,CAAC;AACvH,CAAC;AAED,oKAAoK;AACpK,SAAS,gBAAgB,CACvB,OAAyB,EACzB,QAAsC,EACtC,UAAmC;IAEnC,OAAO;QACL,MAAM,EAAE,IAAI;QACZ,cAAc,EAAE,EAAE,aAAa,EAAE,IAAI,EAAE;QACvC,QAAQ;QACR,GAAG,UAAU;QACb,GAAG,CAAC,OAAO,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClF,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC/E,CAAC;AACJ,CAAC;AAED,4IAA4I;AAC5I,KAAK,UAAU,qBAAqB,CAClC,OAAyB,EACzB,QAAsC,EACtC,OAA6C,EAC7C,QAAuB;IAEvB,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,IAAI,gBAAgB,CAAC,CAAC;IAC3G,IAAI,YAAY,CAAC,KAAK,EAAE,CAAC;QACvB,OAAO,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,YAAY,CAAC,KAAK,EAAE,CAAC,CAAC;QAChE,OAAO,CAAC,OAAO,CAAC,CAAC;QACjB,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACzD,CAAC;IAED,MAAM,SAAS,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAC;IAEnD,OAAO,0BAA0B,CAAC;QAChC,GAAG,EAAE,eAAe,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,CAAC,KAAK,EAAE,OAAO,CAAC,UAAU,CAAC;QACxE,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC;QAC9B,IAAI,EAAE,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,yBAAyB,CAAC,SAAS,CAAC,CAAC;QAC/E,aAAa,EAAE,CAAC,MAAM,EAAE,YAAY,EAAE,EAAE,CACtC,MAAM,KAAK,GAAG,IAAI,2BAA2B,CAAC,YAAY,CAAC;YACzD,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,QAAQ,EAAE,6BAA6B,CAAC,SAAS,CAAC,CAAC;YAC/E,CAAC,CAAC,IAAI;QACV,GAAG,CAAC,YAAY,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpF,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrD,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9D,iBAAiB,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QACnC,cAAc,EAAE,YAAY;QAC5B,aAAa,EAAE,cAAc;QAC7B,OAAO,EAAE,OAAO,CAAC,OAAO;QACxB,OAAO;QACP,QAAQ;KACT,CAAC,CAAC;AACL,CAAC;AAED,MAAM,+BAA+B,GAAwB,IAAI,GAAG,CAAC,CAAC,YAAY,EAAE,WAAW,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;AAE7H,iQAAiQ;AACjQ,MAAM,+BAA+B,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,IAAI,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;AAE9E,iHAAiH;AACjH,MAAM,gCAAgC,GAAG,IAAI,CAAC;AAE9C,MAAM,sBAAsB,GAAG,mDAAmD,CAAC;AAEnF,oOAAoO;AACpO,SAAS,6BAA6B,CAAC,IAAsB;IAC3D,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,YAAY,GAAG,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IACrE,IAAI,CAAC,YAAY;QAAE,OAAO,IAAI,CAAC;IAC/B,MAAM,CAAC,EAAE,SAAS,EAAE,UAAU,CAAC,GAAG,YAAY,CAAC;IAC/C,IAAI,CAAC,SAAS,IAAI,CAAC,+BAA+B,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAChF,OAAO,gCAAgC,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,sIAAsI,CAAC;IACzM,CAAC;IACD,IAAI,UAAU,IAAI,UAAU,CAAC,MAAM,GAAG,+BAA+B,EAAE,CAAC;QACtE,OAAO,yDAAyD,UAAU,CAAC,MAAM,gBAAgB,CAAC;IACpG,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAOD,qPAAqP;AACrP,SAAS,uBAAuB,CAAC,MAAuB;IACtD,IAAI,OAAO,MAAM,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC3F,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,GAAG,gCAAgC,EAAE,CAAC;QAC7D,OAAO,EAAE,OAAO,EAAE,qCAAqC,gCAAgC,6BAA6B,MAAM,CAAC,OAAO,CAAC,MAAM,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtK,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,6BAA6B,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,MAAM;YAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,MAAM,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACnF,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrD,CAAC;AAOD,yTAAyT;AACzT,SAAS,2BAA2B,CAAC,OAA6C;IAChF,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC;IACxF,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAyB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IACxF,MAAM,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAA6B,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,WAAW,CAAC,CAAC;IAClG,MAAM,kBAAkB,GACtB,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,yEAAyE,EAAE,CAAC,CAAC;IACzI,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,CAAC;AAC5C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAuC,EAAE,SAAiB,EAAE,YAAoB;IAClH,IAAI,OAAO,CAAC,YAAY,KAAK,YAAY,IAAI,OAAO,CAAC,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC3F,IAAI,SAAS,IAAI,YAAY;QAAE,OAAO,gBAAgB,CAAC;IACvD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,gOAAgO;AAChO,MAAM,UAAU,4BAA4B,CAAC,SAAmC;IAC9E,OAAO,SAAS,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,UAAmB,EAAE,QAAQ,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;AACrJ,CAAC;AAOD,mRAAmR;AACnR,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,WAA8B,EAC9B,KAA+B,EAC/B,OAAwC;IAExC,MAAM,kBAAkB,GAAwB,EAAE,CAAC;IACnD,MAAM,aAAa,GAAuB,EAAE,CAAC;IAC7C,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QACzB,MAAM,MAAM,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,uBAAuB,CAAC,MAAM,CAAC,CAAC;QAClD,OAAO,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,OAAO,EAAE,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;QAC7G,MAAM,KAAK,GAAG,2BAA2B,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC7D,kBAAkB,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,CAAC,kBAAkB,EAAE,YAAY,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;QACpG,IAAI,KAAK,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAChC,kFAAkF;YAClF,aAAa,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,4BAA4B,IAAI,CAAC,IAAI,qBAAqB,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC;YAClH,aAAa,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC;IACD,OAAO,EAAE,kBAAkB,EAAE,aAAa,EAAE,CAAC;AAC/C,CAAC;AAED,kLAAkL;AAClL,MAAM,UAAU,8BAA8B,CAC5C,kBAAgD,EAChD,aAA0C;IAE1C,OAAO,CAAC,GAAG,kBAAkB,EAAE,GAAG,CAAC,aAAa,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAe,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AAC3H,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,OAAyB;IAC9D,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,sBAAsB,CAAC;IACpE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAExC,MAAM,QAAQ,GAAG,kBAAkB,CAAiB,OAAO,CAAC,OAAO,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC;IAC5G,MAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAEjC,IAAI,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,EAAE,CAAC;IACxC,IAAI,SAAS,GAAG,CAAC,CAAC;IAClB,IAAI,gBAAgB,GAAkB,IAAI,CAAC;IAE3C,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,CAAC,QAAQ,CAAC,CAAC;QAC3F,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC;QAExC,IAAI,QAAQ,CAAC,QAAQ,EAAE;YAAE,MAAM;QAE/B,MAAM,UAAU,GAAG,mBAAmB,CAAC,OAAO,EAAE,SAAS,EAAE,YAAY,CAAC,CAAC;QACzE,IAAI,UAAU,EAAE,CAAC;YACf,OAAO,CAAC,UAAU,CAAC,CAAC;YACpB,MAAM;QACR,CAAC;QACD,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,OAAO,CAAC,MAAM,CAAC,CAAC;YAChB,MAAM;QACR,CAAC;QACD,SAAS,IAAI,CAAC,CAAC;QAEf,MAAM,kBAAkB,GAAG,4BAA4B,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC3E,MAAM,EAAE,kBAAkB,EAAE,aAAa,EAAE,GAAG,MAAM,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,CAAC;QAE3H,QAAQ,GAAG;YACT,GAAG,QAAQ;YACX,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,IAAI,IAAI,EAAE,UAAU,EAAE,kBAAkB,EAAE;YACpF,GAAG,8BAA8B,CAAC,kBAAkB,EAAE,aAAa,CAAC;SACrE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,YAAY,EAAE,gBAAgB,EAAE,SAAS,EAAE,CAAC;AACvD,CAAC"}

package/dist/providers/connection-guard.d.ts

@@ -16,17 +16,63 @@
  * or RFC1918/link-local/CGNAT/metadata-service addresses, and strip bearer
  * tokens / API-key headers / `?key=` query values out of free-form text
  * before it is logged or surfaced to a caller.
+ *
+ * Also exports `pinnedFetch` — a `node:https`/`node:http`-based POST that dials the exact address
+ * `validateBaseUrlResolved` already validated, instead of leaving the transport to re-resolve DNS
+ * independently when it connects. Added later than the four functions above, for the same
+ * dependency-free package; see `pinnedFetch`'s own doc for why `fetch()` itself cannot do this.
+ *
+ * ## Paired with `@jini-ai/ui`'s `utils/endpoint-policy.ts`
+ *
+ * That module carries a browser-safe copy of the SYNCHRONOUS half below —
+ * `isLoopbackApiHost`/`isBlockedExternalApiHostname`/`validateBaseUrl` — so the
+ * settings tabs can reject a bad endpoint as the operator types it. It is a
+ * copy rather than an import because `endpoint-policy.ts` itself has zero
+ * imports by design and this package is Node-only (`validateBaseUrlResolved`
+ * needs `node:dns`); see that file's header for the full reasoning.
+ *
+ * **If the block-list here changes, change it there too.** A divergence means
+ * the UI accepts an endpoint this guard then refuses — or, in the direction
+ * that actually matters, the UI accepts one this guard would have refused.
  */
 export interface BaseUrlValidationResult {
     parsed?: URL;
     error?: string;
     forbidden?: boolean;
+    /**
+     * The validated address to pin the outbound connection to, present exactly when
+     * {@link validateBaseUrlResolved} performed a DNS lookup and passed it (i.e. never set by
+     * {@link validateBaseUrl} alone, and never set for the loopback-literal / IP-literal hosts that
+     * skip resolution — see that function's doc for why those two cases need no pinning). Feed this
+     * straight into {@link pinnedFetch} so the connection dials the exact address the guard approved
+     * instead of re-resolving DNS when it dials.
+     */
+    pinnedAddress?: DnsLookupAddress;
 }
 /** True for `localhost`, `::1`, `127.0.0.0/8`, and their IPv4-mapped-IPv6 forms. */
 export declare function isLoopbackApiHost(hostname: string): boolean;
 /** True for RFC1918/link-local/CGNAT/multicast/unspecified/unique-local-IPv6 addresses — private network space a public caller should never be steered into. */
 export declare function isBlockedExternalApiHostname(hostname: string): boolean;
-/** Synchronous base-URL check: scheme allow-list + literal-hostname block-list. Does not resolve DNS — see {@link validateBaseUrlResolved}. */
+/**
+ * Synchronous base-URL check: scheme allow-list + literal-hostname block-list.
+ * Does not resolve DNS — see {@link validateBaseUrlResolved}.
+ *
+ * **Trims before parsing, and must keep doing so.** `@jini-ai/ui`'s
+ * `isAllowedEndpointUrl` is a deliberate browser-safe copy of this function and
+ * trims its input; this one did not. WHATWG URL parsing strips leading/trailing
+ * ASCII space itself, so the two agreed on `" https://x "` and diverged only on
+ * whitespace `String.prototype.trim` removes but the URL parser does not — NBSP,
+ * BOM, thin space and friends. A URL pasted from a rich-text source therefore
+ * passed the UI and was refused at connection time.
+ * `endpoint-policy.parity.test.ts` now holds the two in agreement mechanically.
+ *
+ * Trimming cannot weaken the block-list. Checked across every whitespace
+ * character `trim` strips, against blocked/loopback/public hosts in all three
+ * padding positions: an untrimmed parse either fails outright or yields a
+ * hostname IDENTICAL to the trimmed one. It never yields a DIFFERENT host, which
+ * is the only shape that would let the block-list inspect one string while the
+ * network used another.
+ */
 export declare function validateBaseUrl(baseUrl: string): BaseUrlValidationResult;
 export type DnsLookupAddress = {
     address: string;
@@ -45,6 +91,25 @@ export type DnsLookupFn = (hostname: string) => Promise<DnsLookupAddress[]>;
  * hostname that resolves to a loopback address (including `*.localhost` per
  * RFC 6761 and IPv4-mapped IPv6 loopback) follows the same carve-out.
  *
+ * ## The TOCTOU this closes, and how
+ *
+ * A validator that only checks and returns pass/fail has a gap: `fetch` (or any transport) then
+ * resolves the hostname AGAIN, independently, when it dials. Between those two resolutions the
+ * answer can change — a DNS rebinding attacker returns a public address to this check and a
+ * private one to the connection. No amount of re-checking closes that on its own; the request has
+ * to dial the exact address that was approved. So this function does the resolution exactly ONCE
+ * and hands the first validated address back as `pinnedAddress` — feed it to {@link pinnedFetch},
+ * which dials that address directly instead of letting the transport re-resolve. `pinnedAddress` is
+ * only set when a lookup actually happened (i.e. never for the loopback-literal / IP-literal hosts
+ * below, which need no pinning: an IP literal never re-resolves to anything else, and loopback
+ * literals are outside this threat model — see the carve-out above).
+ *
+ * That said, `baseUrl` here is operator-configured provider config, not attacker-supplied input —
+ * pinning is defence-in-depth rather than the primary trust boundary. Callers should additionally
+ * refuse redirects (`redirect: 'error'`), which closes the OTHER way a validated origin reaches an
+ * unvalidated address; `pinnedFetch` never follows one regardless (`node:https`/`node:http` don't,
+ * unlike `fetch`'s default), but callers still pass `redirect: 'error'` for self-documentation.
+ *
  * DNS lookup failures are not treated as a security signal — the caller is
  * going to surface a connection error from `fetch` anyway, and turning a
  * transient resolver hiccup into a rejection would just confuse callers. The
@@ -54,6 +119,61 @@ export type DnsLookupFn = (hostname: string) => Promise<DnsLookupAddress[]>;
  * hosts that already own a resolver.
  */
 export declare function validateBaseUrlResolved(baseUrl: string, lookup: DnsLookupFn): Promise<BaseUrlValidationResult>;
+/** Request options accepted by {@link pinnedFetch} — the subset of `fetch`'s `init` this package's provider adapters actually pass. `redirect` is accepted only as documentation of intent: `pinnedFetch` never follows a redirect regardless of this field, so a caller cannot opt back into `fetch`'s default follow-redirects behavior. */
+export interface PinnedFetchInit {
+    readonly method: string;
+    readonly headers: Record<string, string>;
+    readonly body: string;
+    readonly redirect?: 'error';
+    readonly signal?: AbortSignal;
+}
+/** The subset of `fetch`'s `Response` this package's provider adapters actually consume. */
+export interface PinnedFetchResponse {
+    readonly ok: boolean;
+    readonly status: number;
+    readonly body: AsyncIterable<Uint8Array> | null;
+    text(): Promise<string>;
+}
+/**
+ * The call signature of {@link pinnedFetch} — exported so provider adapters
+ * (`AnthropicTurnOptions.fetchImpl`, `OpenAiTurnOptions.fetchImpl`, etc.) can accept it as an
+ * injectable dependency instead of hardcoding the import, and so a test can pass a fake directly
+ * through that seam rather than module-mocking this file (or, worse, its compiled `dist/` output —
+ * see `@jini-ai/http-kit`'s `model-proxy.test.ts` for the fragility that motivated this). Every
+ * adapter still defaults to the real {@link pinnedFetch} when the option is omitted — production
+ * behavior, including the SSRF guard and DNS pinning, never changes unless a caller explicitly
+ * overrides it.
+ */
+export type PinnedFetch = (url: string, init: PinnedFetchInit, pinnedAddress: DnsLookupAddress | undefined) => Promise<PinnedFetchResponse>;
+/**
+ * `fetch()`-shaped POST that dials `pinnedAddress` directly instead of letting the transport
+ * re-resolve DNS when it connects — see {@link validateBaseUrlResolved}'s doc for the TOCTOU this
+ * closes and why `pinnedAddress` is the exact address that function already validated.
+ *
+ * Built on `node:https`/`node:http`, not `fetch`, because Node's global `fetch` is backed by an
+ * internal, non-importable copy of undici and exposes no `lookup`/dispatcher hook without adding
+ * `undici` (or an equivalent) as a runtime dependency — confirmed empirically against this
+ * package's pinned Node version (`require('node:undici')` throws `No such built-in module`, i.e.
+ * it is not a stable built-in here even though Node's own `fetch` uses it internally). This
+ * package carries no external runtime dependencies by design (module doc), so `node:https`/
+ * `node:http`'s own `lookup` option — which `net.connect` already accepts for exactly this purpose
+ * — is the only built-in path.
+ *
+ * `hostname`/`servername` passed to the transport stay the ORIGINAL host from `url`, not
+ * `pinnedAddress`; only the `lookup` override changes which address the socket actually dials.
+ * That is what keeps this a pin rather than a redirect to a different origin: the Host header and,
+ * for https, the TLS SNI + certificate hostname validation are unaffected, so a certificate for the
+ * real hostname still validates normally against a connection that happens to land on the address
+ * the guard already approved. Never follows a redirect — `http(s).request` doesn't, unlike
+ * `fetch`'s default — which is the other half of the rebinding surface `redirect: 'error'`
+ * documents at each call site.
+ *
+ * When `pinnedAddress` is `undefined` — the loopback-literal / IP-literal hosts
+ * `validateBaseUrlResolved` never runs a lookup for — this issues a normal, unpinned request
+ * (`lookup` option simply omitted). That is intentional, not a gap: an IP literal has nothing left
+ * to re-resolve, and loopback literals are the documented carve-out, outside this threat model.
+ */
+export declare function pinnedFetch(url: string, init: PinnedFetchInit, pinnedAddress: DnsLookupAddress | undefined): Promise<PinnedFetchResponse>;
 /**
  * Redacts bearer tokens, `x-api-key`/`api-key`/`x-goog-api-key` headers,
  * `?key=` query values, and any exact secret strings supplied via

package/dist/providers/connection-guard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"connection-guard.d.ts","sourceRoot":"","sources":["../../src/providers/connection-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB;AAsED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED,gKAAgK;AAChK,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQtE;AAED,+IAA+I;AAC/I,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,CAexE;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACnE,MAAM,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAU5E;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,uBAAuB,CAAC,CAwBlC;AAMD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,YAAY,GAAE,aAAa,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAM,GAC1D,MAAM,CAWR;AAED,kIAAkI;AAClI,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAIpF"}
+{"version":3,"file":"connection-guard.d.ts","sourceRoot":"","sources":["../../src/providers/connection-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,MAAM,WAAW,uBAAuB;IACtC,MAAM,CAAC,EAAE,GAAG,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;;OAOG;IACH,aAAa,CAAC,EAAE,gBAAgB,CAAC;CAClC;AAsED,oFAAoF;AACpF,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAM3D;AAED,gKAAgK;AAChK,wBAAgB,4BAA4B,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAQtE;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,uBAAuB,CAiBxE;AAED,MAAM,MAAM,gBAAgB,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AACnE,MAAM,MAAM,WAAW,GAAG,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;AAU5E;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,uBAAuB,CAAC,CA+BlC;AAED,8UAA8U;AAC9U,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B;AAED,4FAA4F;AAC5F,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC,UAAU,CAAC,GAAG,IAAI,CAAC;IAChD,IAAI,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC;CACzB;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,WAAW,GAAG,CACxB,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,eAAe,EACrB,aAAa,EAAE,gBAAgB,GAAG,SAAS,KACxC,OAAO,CAAC,mBAAmB,CAAC,CAAC;AAYlC;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,wBAAsB,WAAW,CAC/B,GAAG,EAAE,MAAM,EACX,IAAI,EAAE,eAAe,EACrB,aAAa,EAAE,gBAAgB,GAAG,SAAS,GAC1C,OAAO,CAAC,mBAAmB,CAAC,CAsH9B;AAMD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAC3B,IAAI,EAAE,MAAM,EACZ,YAAY,GAAE,aAAa,CAAC,MAAM,GAAG,SAAS,GAAG,IAAI,CAAM,GAC1D,MAAM,CAWR;AAED,kIAAkI;AAClI,wBAAsB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAIpF"}