@jini-ai/integrations 0.1.0

package/dist/media-providers/dispatch/stub.js

@@ -0,0 +1,98 @@
+/**
+ * Deterministic placeholder-bytes renderer used when
+ * `MediaDispatchEngineOptions.allowStubFallback` is `true` and no real
+ * renderer is wired up for a (provider, surface) pair — a labelled SVG/PNG,
+ * silent WAV/MP3, or a minimal MP4 container, so a pipeline can be
+ * exercised end-to-end before every vendor integration lands. Ported
+ * near-verbatim from Open Design's `apps/daemon/src/media/index.ts`
+ * `renderStub`/`svgPlaceholder`/`aspectToBox`/`silentWav` — see
+ * `source-map.md`.
+ */
+import { truncate } from './openai-compatible.js';
+export async function renderStub(ctx, providerId, integrated) {
+    const note = !integrated ? `stub-${ctx.surface} · provider '${providerId}' integration pending` : `stub-${ctx.surface} · model=${ctx.model}`;
+    if (ctx.surface === 'image') {
+        const png = Buffer.from([
+            0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a, 0x00, 0x00, 0x00, 0x0d, 0x49, 0x48, 0x44, 0x52, 0x00, 0x00,
+            0x00, 0x01, 0x00, 0x00, 0x00, 0x01, 0x08, 0x06, 0x00, 0x00, 0x00, 0x1f, 0x15, 0xc4, 0x89, 0x00, 0x00, 0x00,
+            0x0d, 0x49, 0x44, 0x41, 0x54, 0x78, 0x9c, 0x63, 0x00, 0x01, 0x00, 0x00, 0x05, 0x00, 0x01, 0x0d, 0x0a, 0x2d,
+            0xb4, 0x00, 0x00, 0x00, 0x00, 0x49, 0x45, 0x4e, 0x44, 0xae, 0x42, 0x60, 0x82,
+        ]);
+        return {
+            bytes: png,
+            providerNote: `${note} · aspect=${ctx.aspect} · prompt=${truncate(ctx.prompt, 60)}`,
+            suggestedExt: '.png',
+        };
+    }
+    if (ctx.surface === 'video') {
+        const ftyp = Buffer.from([
+            0x00, 0x00, 0x00, 0x18, 0x66, 0x74, 0x79, 0x70, 0x69, 0x73, 0x6f, 0x6d, 0x00, 0x00, 0x02, 0x00, 0x69, 0x73,
+            0x6f, 0x6d, 0x69, 0x73, 0x6f, 0x32,
+        ]);
+        const mdat = Buffer.from([0x00, 0x00, 0x00, 0x08, 0x6d, 0x64, 0x61, 0x74]);
+        return {
+            bytes: Buffer.concat([ftyp, mdat]),
+            providerNote: `${note} · aspect=${ctx.aspect} · length=${ctx.length ?? '?'}s · prompt=${truncate(ctx.prompt, 60)}`,
+            suggestedExt: '.mp4',
+        };
+    }
+    // Audio
+    if (ctx.speechFormat === 'wav') {
+        return {
+            bytes: silentWav(0.5),
+            providerNote: `${note} · kind=${ctx.audioKind} · duration=${ctx.duration ?? '?'}s`,
+            suggestedExt: '.wav',
+        };
+    }
+    const mp3 = Buffer.from([0xff, 0xfb, 0x90, 0x44, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00]);
+    return {
+        bytes: mp3,
+        providerNote: `${note} · kind=${ctx.audioKind} · voice=${ctx.voice || '-'} · duration=${ctx.duration ?? '?'}s`,
+        suggestedExt: '.mp3',
+    };
+}
+/** Renders a labelled placeholder SVG for the image surface (an explicit opt-in alternative to the PNG placeholder). */
+export function svgPlaceholder(ctx) {
+    const [w, h] = aspectToBox(ctx.aspect, 800);
+    const safe = (s) => String(s || '')
+        .replace(/&/g, '&')
+        .replace(/</g, '&lt;')
+        .replace(/>/g, '&gt;');
+    return [
+        `<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 ${w} ${h}" width="${w}" height="${h}">`,
+        `<rect width="${w}" height="${h}" fill="#0f1424"/>`,
+        `<text x="50%" y="50%" fill="#7da4ff" font-family="ui-sans-serif" font-size="20" text-anchor="middle">${safe(ctx.model)} — ${safe(ctx.prompt).slice(0, 60)}</text>`,
+        '</svg>',
+    ].join('');
+}
+function aspectToBox(aspect, base) {
+    const [a, b] = String(aspect || '1:1')
+        .split(':')
+        .map(Number);
+    if (!a || !b)
+        return [base, base];
+    if (a >= b)
+        return [base, Math.round((base * b) / a)];
+    return [Math.round((base * a) / b), base];
+}
+function silentWav(seconds) {
+    const sampleRate = 8000;
+    const numSamples = Math.max(1, Math.round(sampleRate * seconds));
+    const dataSize = numSamples * 2;
+    const buf = Buffer.alloc(44 + dataSize);
+    buf.write('RIFF', 0, 'ascii');
+    buf.writeUInt32LE(36 + dataSize, 4);
+    buf.write('WAVE', 8, 'ascii');
+    buf.write('fmt ', 12, 'ascii');
+    buf.writeUInt32LE(16, 16);
+    buf.writeUInt16LE(1, 20);
+    buf.writeUInt16LE(1, 22);
+    buf.writeUInt32LE(sampleRate, 24);
+    buf.writeUInt32LE(sampleRate * 2, 28);
+    buf.writeUInt16LE(2, 32);
+    buf.writeUInt16LE(16, 34);
+    buf.write('data', 36, 'ascii');
+    buf.writeUInt32LE(dataSize, 40);
+    return buf;
+}
+//# sourceMappingURL=stub.js.map

package/dist/media-providers/dispatch/stub.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"stub.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/stub.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,wBAAwB,CAAC;AAGlD,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,GAAkB,EAAE,UAAkB,EAAE,UAAmB;IAC1F,MAAM,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,OAAO,gBAAgB,UAAU,uBAAuB,CAAC,CAAC,CAAC,QAAQ,GAAG,CAAC,OAAO,YAAY,GAAG,CAAC,KAAK,EAAE,CAAC;IAC7I,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC;YACtB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YAC1G,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YAC1G,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YAC1G,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;SAC7E,CAAC,CAAC;QACH,OAAO;YACL,KAAK,EAAE,GAAG;YACV,YAAY,EAAE,GAAG,IAAI,aAAa,GAAG,CAAC,MAAM,aAAa,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;YACnF,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC;IACD,IAAI,GAAG,CAAC,OAAO,KAAK,OAAO,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;YACvB,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;YAC1G,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI;SACnC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;QAC3E,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;YAClC,YAAY,EAAE,GAAG,IAAI,aAAa,GAAG,CAAC,MAAM,aAAa,GAAG,CAAC,MAAM,IAAI,GAAG,cAAc,QAAQ,CAAC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE;YAClH,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC;IACD,QAAQ;IACR,IAAI,GAAG,CAAC,YAAY,KAAK,KAAK,EAAE,CAAC;QAC/B,OAAO;YACL,KAAK,EAAE,SAAS,CAAC,GAAG,CAAC;YACrB,YAAY,EAAE,GAAG,IAAI,WAAW,GAAG,CAAC,SAAS,eAAe,GAAG,CAAC,QAAQ,IAAI,GAAG,GAAG;YAClF,YAAY,EAAE,MAAM;SACrB,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC;IAClG,OAAO;QACL,KAAK,EAAE,GAAG;QACV,YAAY,EAAE,GAAG,IAAI,WAAW,GAAG,CAAC,SAAS,YAAY,GAAG,CAAC,KAAK,IAAI,GAAG,eAAe,GAAG,CAAC,QAAQ,IAAI,GAAG,GAAG;QAC9G,YAAY,EAAE,MAAM;KACrB,CAAC;AACJ,CAAC;AAED,wHAAwH;AACxH,MAAM,UAAU,cAAc,CAAC,GAAkB;IAC/C,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,CAAC,CAAU,EAAU,EAAE,CAClC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;SACZ,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC;SACtB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC;SACrB,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC3B,OAAO;QACL,wDAAwD,CAAC,IAAI,CAAC,YAAY,CAAC,aAAa,CAAC,IAAI;QAC7F,gBAAgB,CAAC,aAAa,CAAC,oBAAoB;QACnD,wGAAwG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS;QACnK,QAAQ;KACT,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAAC,MAA0B,EAAE,IAAY;IAC3D,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,IAAI,KAAK,CAAC;SACnC,KAAK,CAAC,GAAG,CAAC;SACV,GAAG,CAAC,MAAM,CAAC,CAAC;IACf,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAClC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC5C,CAAC;AAED,SAAS,SAAS,CAAC,OAAe;IAChC,MAAM,UAAU,GAAG,IAAI,CAAC;IACxB,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,UAAU,GAAG,OAAO,CAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,GAAG,QAAQ,CAAC,CAAC;IACxC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,aAAa,CAAC,EAAE,GAAG,QAAQ,EAAE,CAAC,CAAC,CAAC;IACpC,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,CAAC,CAAC;IAC9B,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzB,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzB,GAAG,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC;IAClC,GAAG,CAAC,aAAa,CAAC,UAAU,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IACtC,GAAG,CAAC,aAAa,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACzB,GAAG,CAAC,aAAa,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;IAC1B,GAAG,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,CAAC,CAAC;IAC/B,GAAG,CAAC,aAAa,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IAChC,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/media-providers/dispatch/types.d.ts

@@ -0,0 +1,133 @@
+/**
+ * The media dispatch engine's public types. Generalized from Open Design's
+ * `apps/daemon/src/media/index.ts` `generateMedia` — the real multi-vendor
+ * REST dispatch engine, not the substrate (`policy.ts`/`staging.ts`/
+ * `task-store.ts`/`video-request.ts`/`capability-registry.ts`) already
+ * ported. See `source-map.md` for the full port record: what's ported in
+ * this pass vs explicitly deferred.
+ *
+ * Boundary redesign vs the origin (not a verbatim lift — see source-map.md):
+ * the origin resolves an OD `projectId` into a filesystem path and writes
+ * generated bytes there directly (`ensureProject`/`sanitizeName`/
+ * `mkdir`/write). Jini's kernel has no `Project` concept at all (locked
+ * architecture §2.1), so this engine returns bytes to the caller instead —
+ * a host pairs this with its own `AttachmentStaging`/`MediaTaskStore`
+ * wiring to decide where generated bytes land. Reference-image resolution
+ * is the same story: the origin reads a project-relative path itself
+ * (`resolveProjectImage`); here the caller resolves any reference image to
+ * a data URL before calling, exactly matching the convention `video-
+ * request.ts`'s `VideoBuildInput.imageRef` already established for this
+ * package — "this package performs no I/O" is a standing invariant across
+ * `@jini-ai/integrations/media-providers`, not a new one introduced here.
+ */
+import type { AudioKind, MediaSurface } from '../types.js';
+/** Per-provider credentials a host resolves however it wants (env vars, a secrets manager, a config file, ...). This engine never reads `process.env` itself — see `resolveProviderCredentialsFromEnv` in `credentials.ts` for an opt-in reference resolver a host may use to build this map. */
+export interface ProviderCredentials {
+    readonly apiKey?: string;
+    readonly baseUrl?: string;
+    readonly model?: string;
+}
+/** Subset of `RequestInit` a caller may want to control (e.g. a custom `undici.Agent` for connection pooling/timeouts). */
+export type MediaGenerationRequestInit = Pick<RequestInit, 'dispatcher'>;
+/** A reference image already resolved to a base64 data URL — this package performs no filesystem I/O (see `types.ts`'s `VideoBuildInput.imageRef` for the same convention). */
+export interface MediaImageReference {
+    readonly dataUrl: string;
+}
+export type MediaSpeechFormat = 'mp3' | 'wav' | 'flac' | 'aac' | 'opus';
+export interface MediaGenerationRequest {
+    readonly surface: MediaSurface;
+    /** Catalog id (e.g. `dall-e-3`, `gpt-4o-mini-tts`) — must be registered in `@jini-ai/integrations/media-providers`'s catalogue for the given surface/audioKind. */
+    readonly model: string;
+    readonly prompt?: string;
+    readonly aspect?: string;
+    readonly length?: number;
+    readonly duration?: number;
+    readonly voice?: string;
+    readonly audioKind?: AudioKind;
+    readonly language?: string;
+    readonly loop?: boolean;
+    /**
+     * ElevenLabs SFX's "how closely should generation follow the prompt"
+     * dial (0-1). Currently unconsumed by any ported renderer — no
+     * SFX-capable vendor is wired up in this pass yet — but the field and
+     * its validation are real and directly tested via `buildRenderContext`
+     * (see `context.ts`), not speculative dead plumbing.
+     */
+    readonly promptInfluence?: number;
+    /** Primary reference image for i2v / image-edit flows. */
+    readonly imageRef?: MediaImageReference;
+    /**
+     * Additional reference images for multi-image i2v / style-reference
+     * flows. Currently unconsumed by any ported renderer — no multi-image
+     * vendor (e.g. AIHubMix video) is wired up in this pass yet — but, like
+     * `promptInfluence`, is directly tested via `buildRenderContext`.
+     */
+    readonly imageRefs?: readonly MediaImageReference[];
+    /**
+     * What the provider's request body should carry as `model` (or what gets
+     * templated into an Azure-style deployment URL). Defaults to `model`.
+     * Capability branches (DALL-E sizing, gpt-image quality, ...) always key
+     * off the catalog `model` field, never this one — set this only when a
+     * host has its own model-aliasing layer and wants the wire request to
+     * carry a different name than the catalog id.
+     */
+    readonly wireModel?: string;
+    /** Desired audio container/codec for speech synthesis. Defaults to `'mp3'`. */
+    readonly speechFormat?: MediaSpeechFormat;
+    readonly requestInit?: MediaGenerationRequestInit;
+    readonly onProgress?: (message: string) => void;
+}
+export interface MediaGenerationResult {
+    readonly bytes: Buffer;
+    readonly providerNote: string;
+    readonly suggestedExt?: string;
+    readonly providerId: string;
+    /** `true` when no real renderer was wired up for this (provider, surface) pair and deterministic placeholder bytes were returned instead — see `MediaDispatchEngineOptions.allowStubFallback`. */
+    readonly usedStubFallback: boolean;
+    /** Non-fatal notices (e.g. a requested `length`/`duration` was clamped to the nearest allowed value). */
+    readonly warnings: readonly string[];
+}
+export interface MediaDispatchEngineOptions {
+    /** Per-provider credentials, keyed by provider id (see `providers.ts`'s `MEDIA_PROVIDERS` for valid ids). */
+    readonly credentials?: Readonly<Record<string, ProviderCredentials>>;
+    /**
+     * When a (provider, surface) pair has no real renderer wired up, return
+     * deterministic placeholder bytes instead of throwing. Defaults to
+     * `false` (fail closed) — matching the origin's own explicitly-gated
+     * stub-fallback design (`OD_MEDIA_ALLOW_STUBS`): generated media is
+     * costly and a placeholder must never look like a successful real
+     * generation by accident, so a host must opt in explicitly rather than
+     * getting silent placeholders by default.
+     */
+    readonly allowStubFallback?: boolean;
+}
+export interface MediaDispatchEngine {
+    generate(request: MediaGenerationRequest): Promise<MediaGenerationResult>;
+}
+/** Internal: the pure shape rendered by `render*` provider functions, before the engine attaches `providerId`/`usedStubFallback`/`warnings`. */
+export interface RenderResult {
+    readonly bytes: Buffer;
+    readonly providerNote: string;
+    readonly suggestedExt?: string;
+}
+/** Internal: per-generation context threaded into every `render*` provider function. */
+export interface RenderContext {
+    readonly surface: MediaSurface;
+    readonly model: string;
+    readonly wireModel: string;
+    readonly prompt: string;
+    readonly aspect: string | undefined;
+    readonly length: number | undefined;
+    readonly duration: number | undefined;
+    readonly voice: string;
+    readonly audioKind: AudioKind | undefined;
+    readonly language: string;
+    readonly loop: boolean;
+    readonly promptInfluence: number | undefined;
+    readonly imageRef: MediaImageReference | null;
+    readonly imageRefs: readonly MediaImageReference[];
+    readonly requestInit: MediaGenerationRequestInit;
+    readonly speechFormat: MediaSpeechFormat;
+    readonly onProgress?: ((message: string) => void) | undefined;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/media-providers/dispatch/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAE3D,iSAAiS;AACjS,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,2HAA2H;AAC3H,MAAM,MAAM,0BAA0B,GAAG,IAAI,CAAC,WAAW,EAAE,YAAY,CAAC,CAAC;AAEzE,+KAA+K;AAC/K,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,CAAC;AAExE,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,mKAAmK;IACnK,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,CAAC;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;OAMG;IACH,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,0DAA0D;IAC1D,QAAQ,CAAC,QAAQ,CAAC,EAAE,mBAAmB,CAAC;IACxC;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACpD;;;;;;;OAOG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,+EAA+E;IAC/E,QAAQ,CAAC,YAAY,CAAC,EAAE,iBAAiB,CAAC;IAC1C,QAAQ,CAAC,WAAW,CAAC,EAAE,0BAA0B,CAAC;IAClD,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACjD;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,kMAAkM;IAClM,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;IACnC,yGAAyG;IACzG,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACtC;AAED,MAAM,WAAW,0BAA0B;IACzC,6GAA6G;IAC7G,QAAQ,CAAC,WAAW,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACrE;;;;;;;;OAQG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,sBAAsB,GAAG,OAAO,CAAC,qBAAqB,CAAC,CAAC;CAC3E;AAED,gJAAgJ;AAChJ,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;CAChC;AAED,wFAAwF;AACxF,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,SAAS,GAAG,SAAS,CAAC;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,mBAAmB,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,SAAS,EAAE,SAAS,mBAAmB,EAAE,CAAC;IACnD,QAAQ,CAAC,WAAW,EAAE,0BAA0B,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,iBAAiB,CAAC;IACzC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC,GAAG,SAAS,CAAC;CAC/D"}

package/dist/media-providers/dispatch/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/media-providers/dispatch/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/types.ts"],"names":[],"mappings":""}

package/dist/media-providers/dispatch/vendor-adapter.d.ts

@@ -0,0 +1,54 @@
+import type { ProviderCredentials, RenderContext, RenderResult } from './types.js';
+/**
+ * One vendor HTTP request, plus any values `buildRequest` computed that
+ * `parseResponse` also needs (e.g. a resolved `wireModel`/`voiceId` for
+ * building `providerNote`). Kept out of `RenderContext` because these are
+ * per-adapter derived values, not universal fields every vendor shares.
+ */
+export interface VendorRequest<Meta = undefined> {
+    readonly url: string;
+    readonly init: RequestInit;
+    readonly meta: Meta;
+}
+export type VendorRequestBuilder<Meta = undefined> = (ctx: RenderContext, credentials: ProviderCredentials) => VendorRequest<Meta>;
+/**
+ * Turns a `fetch` `Response` into a `RenderResult`, or throws a
+ * vendor-tagged `Error` — the "response-parsing + error-mapping" half of a
+ * vendor adapter. Receives `ctx`/`request` too since some vendors need a
+ * second request (an SSRF-guarded asset download, a Gemini-native
+ * redirect) to finish parsing — see this module's doc comment.
+ */
+export type VendorResponseParser<Meta = undefined> = (resp: Response, ctx: RenderContext, request: VendorRequest<Meta>) => Promise<RenderResult>;
+/** Validates `credentials` before any network call, throwing a vendor-tagged `Error` when they're unusable (e.g. no API key configured). */
+export type VendorCredentialGuard = (credentials: ProviderCredentials) => void;
+/**
+ * A fully-configured vendor: the "auth-scheme" (`requireCredential`),
+ * "request-shape" (`buildRequest`), and "response-parsing + error-mapping"
+ * (`parseResponse`) a new vendor registers instead of writing a bespoke
+ * `render*` function.
+ */
+export interface VendorAdapter<Meta = undefined> {
+    readonly requireCredential?: VendorCredentialGuard;
+    readonly buildRequest: VendorRequestBuilder<Meta>;
+    readonly parseResponse: VendorResponseParser<Meta>;
+}
+/**
+ * The generic dispatch core: `requireCredential` -> `buildRequest` -> one
+ * `fetch` -> `parseResponse`. Every migrated vendor's `render*` export is
+ * now a one-line call to this (see `providers/minimax.ts`,
+ * `providers/senseaudio.ts`, `providers/fishaudio.ts`, `providers/openai.ts`
+ * for real examples). `parseResponse` runs even on a non-2xx response —
+ * unlike `fetch` itself, an HTTP error status is not a rejected `Promise`,
+ * so mapping a bad status into a thrown `Error` is each adapter's own job,
+ * exactly like every hand-written `render*` function already did.
+ */
+export declare function dispatchVendorRequest<Meta = undefined>(adapter: VendorAdapter<Meta>, ctx: RenderContext, credentials: ProviderCredentials): Promise<RenderResult>;
+/**
+ * Reference `requireCredential` guard: throws `message` when
+ * `credentials.apiKey` is unset. Covers every ported vendor's own
+ * "no credential" check — each currently hand-writes the identical
+ * `if (!credentials.apiKey) throw new Error(...)` line with only the
+ * message text differing.
+ */
+export declare function requireApiKey(message: string): VendorCredentialGuard;
+//# sourceMappingURL=vendor-adapter.d.ts.map

package/dist/media-providers/dispatch/vendor-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-adapter.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/vendor-adapter.ts"],"names":[],"mappings":"AA6BA,OAAO,KAAK,EAAE,mBAAmB,EAAE,aAAa,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEnF;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,IAAI,GAAG,SAAS;IAC7C,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;CACrB;AAED,MAAM,MAAM,oBAAoB,CAAC,IAAI,GAAG,SAAS,IAAI,CAAC,GAAG,EAAE,aAAa,EAAE,WAAW,EAAE,mBAAmB,KAAK,aAAa,CAAC,IAAI,CAAC,CAAC;AAEnI;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,CAAC,IAAI,GAAG,SAAS,IAAI,CACnD,IAAI,EAAE,QAAQ,EACd,GAAG,EAAE,aAAa,EAClB,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,KACzB,OAAO,CAAC,YAAY,CAAC,CAAC;AAE3B,4IAA4I;AAC5I,MAAM,MAAM,qBAAqB,GAAG,CAAC,WAAW,EAAE,mBAAmB,KAAK,IAAI,CAAC;AAE/E;;;;;GAKG;AACH,MAAM,WAAW,aAAa,CAAC,IAAI,GAAG,SAAS;IAC7C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IACnD,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,oBAAoB,CAAC,IAAI,CAAC,CAAC;CACpD;AAED;;;;;;;;;GASG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,GAAG,SAAS,EAC1D,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,EAC5B,GAAG,EAAE,aAAa,EAClB,WAAW,EAAE,mBAAmB,GAC/B,OAAO,CAAC,YAAY,CAAC,CAavB;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,qBAAqB,CAMpE"}

package/dist/media-providers/dispatch/vendor-adapter.js

@@ -0,0 +1,68 @@
+/**
+ * The generic vendor-adapter dispatch core — the mechanism every registered
+ * media vendor's HTTP round trip runs through: validate credentials, build a
+ * request, perform exactly one `fetch`, then hand the response to a
+ * vendor-supplied parser. This is the piece `source-map.md`'s 2026-07-21
+ * dispatch-engine entry flagged as missing ("the actual multi-provider REST
+ * dispatch engine and durable task adapter" — each vendor was "essentially
+ * its own hand-written function, not a generalized system that can register
+ * a new vendor via configuration"): a vendor is now a `VendorAdapter` —
+ * (auth-scheme, request-shape, response-parsing/error-mapping)
+ * *configuration* passed to `dispatchVendorRequest` via
+ * `VendorAdapterRegistry` (see `vendor-registry.ts`) — not a bespoke async
+ * function that reimplements fetch/error-handling/byte-extraction inline
+ * every time.
+ *
+ * `parseResponse` is intentionally still a full function, not a further
+ * declarative shape — several real vendors need a *second* network call
+ * inside their "response parsing" step (SenseAudio's SSRF-guarded asset
+ * download, AIHubMix's Gemini-native redirect), which a purely declarative
+ * parser DSL can't express without becoming its own bespoke escape hatch
+ * anyway. The genericity this module buys is in the *harness* (uniform
+ * credential-check -> build -> fetch -> parse flow, pluggable via the
+ * registry), not in eliminating vendor-specific wire logic that doesn't
+ * actually repeat across vendors. Where response-parsing genuinely IS
+ * identical across vendors (MiniMax's and SenseAudio's TTS envelope), see
+ * `response-parsers.ts`'s `createHexEnvelopeAudioParser` for the shared,
+ * reusable piece.
+ */
+import { FETCH_TIMEOUT_MS, fetchWithTimeout } from '@jini-ai/platform';
+/**
+ * The generic dispatch core: `requireCredential` -> `buildRequest` -> one
+ * `fetch` -> `parseResponse`. Every migrated vendor's `render*` export is
+ * now a one-line call to this (see `providers/minimax.ts`,
+ * `providers/senseaudio.ts`, `providers/fishaudio.ts`, `providers/openai.ts`
+ * for real examples). `parseResponse` runs even on a non-2xx response —
+ * unlike `fetch` itself, an HTTP error status is not a rejected `Promise`,
+ * so mapping a bad status into a thrown `Error` is each adapter's own job,
+ * exactly like every hand-written `render*` function already did.
+ */
+export async function dispatchVendorRequest(adapter, ctx, credentials) {
+    adapter.requireCredential?.(credentials);
+    const request = adapter.buildRequest(ctx, credentials);
+    // Backstop, not an override: as of 2026-08-16 only 2 of 13 registered vendors
+    // (providers/openai.ts, providers/openrouter.ts) set their own `request.init.signal`; the other
+    // 11 set none at all (Finding 2 of the 2026-08-16 failure-mode audit — a stalled vendor endpoint
+    // hung this call forever, nothing to alert on). `fetchWithTimeout` combines any signal a vendor
+    // DOES already set with this one via `AbortSignal.any`, so a more specific per-vendor timeout
+    // still applies unchanged; `GENERATE` (10min) matches what those two vendors already picked
+    // deliberately for the same reason — media generation genuinely finishes on that order, not in
+    // seconds, so anything shorter would abort a legitimately still-generating request.
+    const resp = await fetchWithTimeout(request.url, request.init, { timeoutMs: FETCH_TIMEOUT_MS.GENERATE });
+    return adapter.parseResponse(resp, ctx, request);
+}
+/**
+ * Reference `requireCredential` guard: throws `message` when
+ * `credentials.apiKey` is unset. Covers every ported vendor's own
+ * "no credential" check — each currently hand-writes the identical
+ * `if (!credentials.apiKey) throw new Error(...)` line with only the
+ * message text differing.
+ */
+export function requireApiKey(message) {
+    return (credentials) => {
+        if (!credentials.apiKey) {
+            throw new Error(message);
+        }
+    };
+}
+//# sourceMappingURL=vendor-adapter.js.map

package/dist/media-providers/dispatch/vendor-adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-adapter.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/vendor-adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AA6CvE;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,OAA4B,EAC5B,GAAkB,EAClB,WAAgC;IAEhC,OAAO,CAAC,iBAAiB,EAAE,CAAC,WAAW,CAAC,CAAC;IACzC,MAAM,OAAO,GAAG,OAAO,CAAC,YAAY,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;IACvD,8EAA8E;IAC9E,gGAAgG;IAChG,iGAAiG;IACjG,gGAAgG;IAChG,8FAA8F;IAC9F,4FAA4F;IAC5F,+FAA+F;IAC/F,oFAAoF;IACpF,MAAM,IAAI,GAAG,MAAM,gBAAgB,CAAC,OAAO,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,gBAAgB,CAAC,QAAQ,EAAE,CAAC,CAAC;IACzG,OAAO,OAAO,CAAC,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,CAAC,WAAW,EAAE,EAAE;QACrB,IAAI,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACxB,MAAM,IAAI,KAAK,CAAC,OAAO,CAAC,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC;AACJ,CAAC"}

package/dist/media-providers/dispatch/vendor-registry.d.ts

@@ -0,0 +1,36 @@
+/**
+ * `VendorAdapterRegistry` — the registration surface a vendor module calls
+ * at import time instead of `engine.ts`'s `ROUTES` table pointing directly
+ * at a hand-written render function. A migrated vendor registers its
+ * `VendorAdapter` here, keyed by `(providerId, routeKey)` — the same
+ * `routeKey` shape `engine.ts`'s internal `routeKeyFor` already produces
+ * (`'image'`, `'video'`, `'audio:speech'`, ...). `engine.ts` consults this
+ * registry first when resolving a renderer, falling back to the static
+ * `ROUTES` table for vendors not yet migrated onto the generic engine — see
+ * `source-map.md`'s 2026-07-21 dispatch-engine-generalization section for
+ * exactly which vendors are registered here today, and why the rest
+ * legitimately aren't (yet).
+ */
+import type { VendorAdapter } from './vendor-adapter.js';
+export declare class VendorAdapterRegistry {
+    private readonly table;
+    /** Registers `adapter` for `(providerId, routeKey)`. Throws if that pair is already registered — a vendor module should register each of its (provider, surface) pairs exactly once, at module load. */
+    register<Meta>(providerId: string, routeKey: string, adapter: VendorAdapter<Meta>): void;
+    /** Looks up the adapter registered for `(providerId, routeKey)`, or `undefined` if none is registered. */
+    get(providerId: string, routeKey: string): VendorAdapter<never> | undefined;
+    /** Whether an adapter is registered for `(providerId, routeKey)`. */
+    has(providerId: string, routeKey: string): boolean;
+    /** Every `(providerId, routeKey)` pair currently registered — used by tests (and any diagnostics a host wants) to enumerate exactly which vendors run through the generic engine. */
+    list(): ReadonlyArray<readonly [providerId: string, routeKey: string]>;
+}
+/** Creates a fresh, empty registry — mainly useful for tests that want isolation from the shared `mediaVendorRegistry` singleton. */
+export declare function createVendorAdapterRegistry(): VendorAdapterRegistry;
+/**
+ * The shared registry every migrated vendor module registers into at import
+ * time, and `engine.ts` consults for dispatch. A host embedding
+ * `@jini-ai/integrations/media-providers` that wants a clean, isolated registry (e.g. to register its
+ * own vendor adapters without touching this module's set) can still call
+ * `createVendorAdapterRegistry()` directly instead of using this singleton.
+ */
+export declare const mediaVendorRegistry: VendorAdapterRegistry;
+//# sourceMappingURL=vendor-registry.d.ts.map

package/dist/media-providers/dispatch/vendor-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-registry.d.ts","sourceRoot":"","sources":["../../../src/media-providers/dispatch/vendor-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAEzD,qBAAa,qBAAqB;IAChC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAwD;IAE9E,wMAAwM;IACxM,QAAQ,CAAC,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,IAAI,CAAC,GAAG,IAAI;IAYxF,0GAA0G;IAC1G,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,aAAa,CAAC,KAAK,CAAC,GAAG,SAAS;IAI3E,qEAAqE;IACrE,GAAG,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO;IAIlD,qLAAqL;IACrL,IAAI,IAAI,aAAa,CAAC,SAAS,CAAC,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC;CASvE;AAED,qIAAqI;AACrI,wBAAgB,2BAA2B,IAAI,qBAAqB,CAEnE;AAED;;;;;;GAMG;AACH,eAAO,MAAM,mBAAmB,EAAE,qBAAqD,CAAC"}

package/dist/media-providers/dispatch/vendor-registry.js

@@ -0,0 +1,46 @@
+export class VendorAdapterRegistry {
+    table = new Map();
+    /** Registers `adapter` for `(providerId, routeKey)`. Throws if that pair is already registered — a vendor module should register each of its (provider, surface) pairs exactly once, at module load. */
+    register(providerId, routeKey, adapter) {
+        let bySurface = this.table.get(providerId);
+        if (!bySurface) {
+            bySurface = new Map();
+            this.table.set(providerId, bySurface);
+        }
+        if (bySurface.has(routeKey)) {
+            throw new Error(`a vendor adapter is already registered for "${providerId}" / "${routeKey}"`);
+        }
+        bySurface.set(routeKey, adapter);
+    }
+    /** Looks up the adapter registered for `(providerId, routeKey)`, or `undefined` if none is registered. */
+    get(providerId, routeKey) {
+        return this.table.get(providerId)?.get(routeKey);
+    }
+    /** Whether an adapter is registered for `(providerId, routeKey)`. */
+    has(providerId, routeKey) {
+        return this.table.get(providerId)?.has(routeKey) ?? false;
+    }
+    /** Every `(providerId, routeKey)` pair currently registered — used by tests (and any diagnostics a host wants) to enumerate exactly which vendors run through the generic engine. */
+    list() {
+        const out = [];
+        for (const [providerId, bySurface] of this.table) {
+            for (const routeKey of bySurface.keys()) {
+                out.push([providerId, routeKey]);
+            }
+        }
+        return out;
+    }
+}
+/** Creates a fresh, empty registry — mainly useful for tests that want isolation from the shared `mediaVendorRegistry` singleton. */
+export function createVendorAdapterRegistry() {
+    return new VendorAdapterRegistry();
+}
+/**
+ * The shared registry every migrated vendor module registers into at import
+ * time, and `engine.ts` consults for dispatch. A host embedding
+ * `@jini-ai/integrations/media-providers` that wants a clean, isolated registry (e.g. to register its
+ * own vendor adapters without touching this module's set) can still call
+ * `createVendorAdapterRegistry()` directly instead of using this singleton.
+ */
+export const mediaVendorRegistry = createVendorAdapterRegistry();
+//# sourceMappingURL=vendor-registry.js.map

package/dist/media-providers/dispatch/vendor-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"vendor-registry.js","sourceRoot":"","sources":["../../../src/media-providers/dispatch/vendor-registry.ts"],"names":[],"mappings":"AAeA,MAAM,OAAO,qBAAqB;IACf,KAAK,GAAG,IAAI,GAAG,EAA6C,CAAC;IAE9E,wMAAwM;IACxM,QAAQ,CAAO,UAAkB,EAAE,QAAgB,EAAE,OAA4B;QAC/E,IAAI,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,CAAC,SAAS,EAAE,CAAC;YACf,SAAS,GAAG,IAAI,GAAG,EAAE,CAAC;YACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QACxC,CAAC;QACD,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,+CAA+C,UAAU,QAAQ,QAAQ,GAAG,CAAC,CAAC;QAChG,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,OAA0C,CAAC,CAAC;IACtE,CAAC;IAED,0GAA0G;IAC1G,GAAG,CAAC,UAAkB,EAAE,QAAgB;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,CAAC;IAED,qEAAqE;IACrE,GAAG,CAAC,UAAkB,EAAE,QAAgB;QACtC,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,GAAG,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC;IAC5D,CAAC;IAED,qLAAqL;IACrL,IAAI;QACF,MAAM,GAAG,GAAqC,EAAE,CAAC;QACjD,KAAK,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YACjD,KAAK,MAAM,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,CAAC,UAAU,EAAE,QAAQ,CAAC,CAAC,CAAC;YACnC,CAAC;QACH,CAAC;QACD,OAAO,GAAG,CAAC;IACb,CAAC;CACF;AAED,qIAAqI;AACrI,MAAM,UAAU,2BAA2B;IACzC,OAAO,IAAI,qBAAqB,EAAE,CAAC;AACrC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAA0B,2BAA2B,EAAE,CAAC"}

package/dist/media-providers/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `@jini-ai/integrations/media-providers` — multi-provider image/video/audio generation gateway:
+ * provider/model types, the real vendor catalogue as reference data, an
+ * injection-style capability registry, a pure video-request builder, an
+ * async task-tracking port, a host-injected policy port, a generic
+ * attachment-staging port, and (as of the dispatch engine) a real
+ * multi-vendor REST dispatch engine covering an initial vendor slice — see
+ * `source-map.md` for full provenance, exactly which vendors are ported vs
+ * deferred, and this package's not-yet-locked status.
+ */
+export * from './types.js';
+export * from './providers.js';
+export * from './capability-registry.js';
+export * from './seed.js';
+export * from './video-request.js';
+export * from './task-store.js';
+export * from './policy.js';
+export * from './staging.js';
+export * from './tokens.js';
+export * from './dispatch/index.js';
+export * from './sqlite-task-store.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/media-providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/media-providers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC"}

package/dist/media-providers/index.js

@@ -0,0 +1,22 @@
+/**
+ * `@jini-ai/integrations/media-providers` — multi-provider image/video/audio generation gateway:
+ * provider/model types, the real vendor catalogue as reference data, an
+ * injection-style capability registry, a pure video-request builder, an
+ * async task-tracking port, a host-injected policy port, a generic
+ * attachment-staging port, and (as of the dispatch engine) a real
+ * multi-vendor REST dispatch engine covering an initial vendor slice — see
+ * `source-map.md` for full provenance, exactly which vendors are ported vs
+ * deferred, and this package's not-yet-locked status.
+ */
+export * from './types.js';
+export * from './providers.js';
+export * from './capability-registry.js';
+export * from './seed.js';
+export * from './video-request.js';
+export * from './task-store.js';
+export * from './policy.js';
+export * from './staging.js';
+export * from './tokens.js';
+export * from './dispatch/index.js';
+export * from './sqlite-task-store.js';
+//# sourceMappingURL=index.js.map

package/dist/media-providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/media-providers/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,0BAA0B,CAAC;AACzC,cAAc,WAAW,CAAC;AAC1B,cAAc,oBAAoB,CAAC;AACnC,cAAc,iBAAiB,CAAC;AAChC,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,qBAAqB,CAAC;AACpC,cAAc,wBAAwB,CAAC"}

package/dist/media-providers/policy.d.ts

@@ -0,0 +1,49 @@
+/**
+ * `MediaPolicy` — a host-injected gate on media generation. Generalized from
+ * OD's `apps/daemon/src/media/policy.ts`, which is a thin wrapper
+ * around `@open-design/contracts`'s `MediaExecutionPolicy`/
+ * `mediaExecutionPolicyDenial` (that package is OD-owned and out of scope
+ * for this engine package). The underlying evaluation logic itself carries
+ * no OD-specific moderation content or thresholds — it is a plain
+ * enabled/disabled + surface/model allowlist gate — so it ports as generic
+ * data + a pure evaluator, redefined locally rather than imported. A host
+ * that needs real content-moderation rules (NSFW classifiers, per-tenant
+ * quotas, etc.) implements `MediaPolicy` itself; `createAllowlistMediaPolicy`
+ * is the reference implementation proving the port's shape, not a
+ * moderation engine.
+ */
+import type { MediaSurface } from './types.js';
+export type MediaExecutionMode = 'enabled' | 'disabled';
+export type MediaPolicyDenialCode = 'MEDIA_EXECUTION_DISABLED' | 'MEDIA_SURFACE_DENIED' | 'MEDIA_MODEL_DENIED';
+/** What a caller is asking permission to do. */
+export interface MediaPolicyTarget {
+    readonly surface: MediaSurface;
+    readonly model?: string;
+}
+export interface MediaPolicyDenial {
+    readonly code: MediaPolicyDenialCode;
+    readonly message: string;
+}
+/** Declarative shape for `createAllowlistMediaPolicy` — an allowlist gate, not the only possible `MediaPolicy` implementation. */
+export interface MediaExecutionPolicy {
+    readonly mode: MediaExecutionMode;
+    readonly allowedSurfaces?: readonly MediaSurface[];
+    readonly allowedModels?: readonly string[];
+}
+export declare const DEFAULT_MEDIA_EXECUTION_POLICY: MediaExecutionPolicy;
+/**
+ * Host-injected policy port. `@jini-ai/integrations/media-providers` never calls this itself — a
+ * caller (a pack's app-service, a tool handler) evaluates a target before
+ * dispatching generation and honors a non-null denial.
+ */
+export interface MediaPolicy {
+    evaluate(target: MediaPolicyTarget): MediaPolicyDenial | null;
+}
+/**
+ * Reference `MediaPolicy`: an enabled/disabled + surface/model allowlist
+ * gate, ported verbatim from the origin's `mediaExecutionPolicyDenial`. A
+ * missing/empty `allowedSurfaces`/`allowedModels` means "no restriction on
+ * that dimension" (matches the origin's `Array.isArray(...) && length > 0` guard).
+ */
+export declare function createAllowlistMediaPolicy(policy?: MediaExecutionPolicy): MediaPolicy;
+//# sourceMappingURL=policy.d.ts.map

package/dist/media-providers/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../src/media-providers/policy.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,MAAM,MAAM,kBAAkB,GAAG,SAAS,GAAG,UAAU,CAAC;AAExD,MAAM,MAAM,qBAAqB,GAAG,0BAA0B,GAAG,sBAAsB,GAAG,oBAAoB,CAAC;AAE/G,gDAAgD;AAChD,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC;IAC/B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,kIAAkI;AAClI,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;IACnD,QAAQ,CAAC,aAAa,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAC5C;AAOD,eAAO,MAAM,8BAA8B,EAAE,oBAA2C,CAAC;AAEzF;;;;GAIG;AACH,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,GAAG,iBAAiB,GAAG,IAAI,CAAC;CAC/D;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,MAAM,GAAE,oBAAqD,GAAG,WAAW,CAyBrH"}

package/dist/media-providers/policy.js

@@ -0,0 +1,39 @@
+// SEC-RB-010: deny by default. A host must explicitly opt into `mode:
+// 'enabled'` (and, if it cares about restricting models, explicitly supply
+// `allowedModels`) rather than getting an unrestricted default merely by
+// not passing a policy at all — media generation is a real-money, costly
+// capability, not something that should be on by default.
+export const DEFAULT_MEDIA_EXECUTION_POLICY = { mode: 'disabled' };
+/**
+ * Reference `MediaPolicy`: an enabled/disabled + surface/model allowlist
+ * gate, ported verbatim from the origin's `mediaExecutionPolicyDenial`. A
+ * missing/empty `allowedSurfaces`/`allowedModels` means "no restriction on
+ * that dimension" (matches the origin's `Array.isArray(...) && length > 0` guard).
+ */
+export function createAllowlistMediaPolicy(policy = DEFAULT_MEDIA_EXECUTION_POLICY) {
+    return {
+        evaluate(target) {
+            if (policy.mode === 'disabled') {
+                return { code: 'MEDIA_EXECUTION_DISABLED', message: 'media generation is disabled for this run' };
+            }
+            if (policy.allowedSurfaces && policy.allowedSurfaces.length > 0 && !policy.allowedSurfaces.includes(target.surface)) {
+                return { code: 'MEDIA_SURFACE_DENIED', message: `media surface "${target.surface}" is not allowed for this run` };
+            }
+            // SEC-RB-010: a model allowlist must not be bypassable by omitting the
+            // model field. If the host restricted models at all, an unspecified
+            // (or blank-after-normalization) model can't be verified against that
+            // allowlist and must be denied, not silently waved through.
+            const normalizedModel = target.model?.trim();
+            if (policy.allowedModels && policy.allowedModels.length > 0) {
+                if (!normalizedModel || !policy.allowedModels.includes(normalizedModel)) {
+                    return {
+                        code: 'MEDIA_MODEL_DENIED',
+                        message: `media model ${normalizedModel ? `"${normalizedModel}"` : '(none specified)'} is not allowed for this run`,
+                    };
+                }
+            }
+            return null;
+        },
+    };
+}
+//# sourceMappingURL=policy.js.map