@kindgi/adapter-model-azure-openai 0.0.0-stage → 0.1.7

package/LICENSE

@@ -0,0 +1,201 @@
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for describing the origin of the Work and
+      reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2026 Kindgi Inc.
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/README.md

@@ -1,3 +1,91 @@
-# Temporary Holding Version
+# `@kindgi/adapter-model-azure-openai`
 
-This version is a temporary placeholder for this package. An operational version to replace this has been submitted for review and is awaiting a staged release.
+Azure OpenAI `ModelProvider` for [`@kindgi/capabilities`](../../capabilities/): a registration's models served by your Azure OpenAI deployments, on the v1 API, signed in with the resource's key or with the runtime's own Entra identity.
+
+It covers **Azure OpenAI deployments**. Other models served by Azure AI Foundry (Llama, Mistral, DeepSeek…) aren't in it.
+
+It's built on [`@kindgi/adapter-model-shared`](../model-shared/): the retries, typed errors (`ModelProviderError`), the reasoning state carried across a pause, usage and cost are the same as every adapter built on it. The requests are sent by the AI SDK's `@ai-sdk/azure` provider at the provider-spec level, pinned exactly.
+
+## A registration
+
+`adapter_id: @kindgi/adapter-model-azure-openai`, with these `adapter_config` keys:
+
+| Key | What |
+|---|---|
+| `resourceName` | The Azure OpenAI resource, as in `<name>.openai.azure.com`. |
+| `baseURL` | Instead of `resourceName`: a custom endpoint, https, with no credentials, query or fragment. On an Azure OpenAI host (another cloud's, say) it ends in `/openai/v1`; a gateway's is any path, with `auth: api-key`. |
+| `deployments` | Required. The deployment serving each registered model: `"model=deployment,…"`, e.g. `"gpt-6.1-sol=gpt-6-1-sol,gpt-6-luna=luna-prod"`. Azure deployment names are yours to choose (often the model's own name, as `gpt-6.1-sol`), so every model in `metadata.models` needs one. |
+| `api` | `responses` (default) or `chat-completions`. Tools with GPT-6 need `responses`: Azure refuses them on Chat Completions while the model reasons. |
+| `auth` | `api-key` (default): the resource's key, through `secret_ref`. `entra`: the runtime's Azure identity; no `secret_ref`; an Azure OpenAI host only (below). |
+
+```json
+{
+  "adapter_id": "@kindgi/adapter-model-azure-openai",
+  "adapter_config": {
+    "resourceName": "acme-openai",
+    "deployments": "gpt-6.1-sol=gpt-6-1-sol",
+    "auth": "entra"
+  },
+  "metadata": {
+    "id": "azure-openai",
+    "region": "canadacentral",
+    "models": [
+      {
+        "name": "gpt-6.1-sol",
+        "contextWindow": 1050000,
+        "sampling": false,
+        "features": ["tool-use", "structured-output"],
+        "cost": { "promptUsdPer1kTokens": 0.002, "completionUsdPer1kTokens": 0.01, "cachedPromptMultiplier": 0.05 }
+      }
+    ]
+  }
+}
+```
+
+`checkConfig` reports each problem with a registration at the setting at fault, without the network or the secret:
+- `resourceName` and `baseURL` together, or neither;
+- a `resourceName` that isn't one DNS label, or a `baseURL` that isn't https;
+- an unknown `api`, `auth` or `adapter_config` key;
+- `api-key` without `secret_ref`, or `entra` with one;
+- `entra` on a host that isn't Azure OpenAI's, naming the host;
+- a `baseURL` with credentials, a query or a fragment, ending in more than one `/`, or an Azure OpenAI host's `baseURL` without `/openai/v1`;
+- a malformed `deployments` entry, a model named twice or not listed, a deployment name Azure wouldn't take, or a model with no deployment.
+
+## How it signs in
+
+Each of these has a test. It signs in before each attempt, with the call's abort signal, and the attempt's request carries what that sign-in got, so calls running at once never share a credential.
+- **`auth: entra`:** a bearer token from the runtime's Azure identity (`AdapterFactoryInput.identities.azure`), asked for every attempt (the identity caches and renews it), within 10 seconds; a call stopped meanwhile ends at once, with its own reason. No `api-key` header is sent. A runtime with no Azure identity refuses the registration, naming `KINDGI_AZURE_CLIENT_ID`. The identity needs the **Cognitive Services OpenAI User** role on the resource.
+  - **Only an Azure OpenAI host gets the token**, because whoever receives it could use it against every Azure OpenAI resource the runtime's identity has a role on. Another host is refused at registration (and by the factory), naming it:
+
+    | Cloud | Hosts | Scope |
+    |---|---|---|
+    | Azure | `*.openai.azure.com`, `*.cognitiveservices.azure.com`, `*.services.ai.azure.com` | `https://cognitiveservices.azure.com/.default` |
+    | Azure Government | `*.openai.azure.us`, `*.cognitiveservices.azure.us` | `https://cognitiveservices.azure.us/.default` |
+
+    Microsoft lists each cloud's endpoints on [Compare Azure Government and global Azure](https://learn.microsoft.com/en-us/azure/azure-government/compare-azure-government-global-azure). Azure Government needs the runtime's identity to be in Azure Government too.
+- **`auth: api-key`:** the key `secret_ref` names, read for every attempt and sent as `api-key` (whitespace around it dropped), so a rotated key takes effect on the next call.
+- **A failed sign-in** (the identity gives no token, the key can't be read, even with the secret store down, or is empty or blank) ends the call as an `auth` error at once, never retried.
+- **No request follows a redirect** (`redirect: 'error'`): the credential reaches the endpoint and nothing else.
+- **Never the environment:** `AZURE_API_KEY` and `AZURE_RESOURCE_NAME` are never read. The provider is always given its endpoint and its credential.
+
+## What it sends
+
+- **Responses** (the default): `POST …/openai/v1/responses?api-version=v1`, with the deployment as `model` and `store: false`, so Azure keeps no conversation state for it: Kindgi's journal is the record.
+- **Chat Completions:** `POST …/openai/v1/chat/completions`, with the deployment as `model`.
+- **Whether a model reasons** is the registration's to say: one registered with `thinking` or `sampling: false` reasons, one with `sampling: true` doesn't, whatever its deployment is called. A reasoning model keeps its encrypted reasoning between tool turns on Responses, and gets `max_completion_tokens` on Chat Completions. When the registration says neither, the AI SDK decides from the deployment's name, so register one or the other when the name doesn't say.
+- Every attempt goes through the runtime's `fetch` (`AdapterFactoryInput.fetch`), which refuses the hosts its deployment forbids.
+
+## Cost
+
+`costUsd` is `tokenCostUsd` over the model's registered rates: prompt and completion, cached prompt tokens at `cachedPromptMultiplier`, and the long-context tier when registered. Azure's prices depend on the deployment type (Global, Data Zone, Regional), so register the rates of yours. Costs are estimates from published prices; Azure's invoice is authoritative.
+
+## Exports
+
+- **`azureOpenAIAdapterEntry`**: the `AdapterFactoryEntry` a runtime registers, with `azureOpenAIAdapterFactory` and `azureOpenAICheckConfig`.
+- `readAzureOpenAIConfig(input)`: a registration read and checked, or every problem with it.
+- `AZURE_OPENAI_CLOUDS` and `azureCloudOf(hostname)`: the hosts Entra may go to, by cloud, with each scope.
+- `AZURE_OPENAI_ADAPTER_ID`, `AZURE_OPENAI_APIS`, `AZURE_OPENAI_AUTHS`, `AZURE_OPENAI_SCOPE` (the public cloud's), `IDENTITY_TIMEOUT_MS`, and the `AzureOpenAIConfig`, `AzureOpenAIApi` and `AzureOpenAIAuth` types.
+
+## License
+
+Apache-2.0

package/dist/config.d.ts

@@ -0,0 +1,61 @@
+/**
+ * An Azure OpenAI registration's `adapter_config`, read and checked: where the resource is,
+ * which API, how to sign in, and which deployment serves each model. Static: no network, no
+ * secret read (`checkConfig` runs it at registration, the factory again when it builds).
+ */
+import type { AdapterConfigCheckInput, AdapterConfigProblem } from '@kindgi/capabilities';
+export declare const AZURE_OPENAI_ADAPTER_ID = "@kindgi/adapter-model-azure-openai";
+/** The v1 API's Responses (the default), or Chat Completions. */
+export declare const AZURE_OPENAI_APIS: readonly ["responses", "chat-completions"];
+export type AzureOpenAIApi = (typeof AZURE_OPENAI_APIS)[number];
+/** A key (`secret_ref`, sent as `api-key`), or the runtime's Entra identity (a bearer token). */
+export declare const AZURE_OPENAI_AUTHS: readonly ["api-key", "entra"];
+export type AzureOpenAIAuth = (typeof AZURE_OPENAI_AUTHS)[number];
+export interface AzureOpenAIConfig {
+    readonly endpoint: {
+        readonly resourceName: string;
+    } | {
+        readonly baseURL: string;
+    };
+    readonly api: AzureOpenAIApi;
+    readonly auth: AzureOpenAIAuth;
+    /** With `auth: entra`: the scope the runtime's token is for, the endpoint's cloud's. */
+    readonly scope?: string;
+    /** The deployment for each registered model. */
+    readonly deployments: ReadonlyMap<string, string>;
+}
+/**
+ * The hosts the runtime's Entra token may go to, by cloud, each with the scope its tokens are
+ * for. Nothing else gets the token: a registration naming another host could replay it against
+ * every Azure OpenAI resource the runtime's identity holds a role on. A custom endpoint (a
+ * gateway) takes `auth: api-key`.
+ *
+ * Sources (read 2026-10-09): the endpoints by cloud,
+ * https://learn.microsoft.com/en-us/azure/azure-government/compare-azure-government-global-azure;
+ * Azure Government's scope, https://learn.microsoft.com/en-us/dotnet/api/overview/azure/ai.openai-readme
+ * (its Azure Government example). Microsoft's newer pages name the public
+ * scope `https://ai.azure.com/.default`; `cognitiveservices.azure.com` is the one proven live
+ * (2026-10-09), so it stays until a live run proves the other.
+ */
+export declare const AZURE_OPENAI_CLOUDS: readonly [{
+    readonly cloud: "Azure";
+    readonly hostSuffixes: readonly [".openai.azure.com", ".cognitiveservices.azure.com", ".services.ai.azure.com"];
+    readonly scope: "https://cognitiveservices.azure.com/.default";
+}, {
+    readonly cloud: "Azure Government";
+    readonly hostSuffixes: readonly [".openai.azure.us", ".cognitiveservices.azure.us"];
+    readonly scope: "https://cognitiveservices.azure.us/.default";
+}];
+type AzureCloud = (typeof AZURE_OPENAI_CLOUDS)[number];
+/** The cloud an Azure OpenAI host belongs to; undefined for any other host. */
+export declare function azureCloudOf(hostname: string): AzureCloud | undefined;
+/** The registration read, or every problem with it. */
+export declare function readAzureOpenAIConfig(input: AdapterConfigCheckInput): {
+    readonly kind: 'ok';
+    readonly config: AzureOpenAIConfig;
+} | {
+    readonly kind: 'err';
+    readonly problems: readonly AdapterConfigProblem[];
+};
+export {};
+//# sourceMappingURL=config.d.ts.map

package/dist/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AAEH,OAAO,KAAK,EACV,uBAAuB,EACvB,oBAAoB,EAErB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,uBAAuB,uCAAuC,CAAC;AAE5E,iEAAiE;AACjE,eAAO,MAAM,iBAAiB,4CAA6C,CAAC;AAC5E,MAAM,MAAM,cAAc,GAAG,CAAC,OAAO,iBAAiB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhE,iGAAiG;AACjG,eAAO,MAAM,kBAAkB,+BAAgC,CAAC;AAChE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE;QAAE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC;IACpF,QAAQ,CAAC,GAAG,EAAE,cAAc,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,wFAAwF;IACxF,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IACxB,gDAAgD;IAChD,QAAQ,CAAC,WAAW,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACnD;AAED;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,mBAAmB;;;;;;;;EAWtB,CAAC;AAEX,KAAK,UAAU,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AAEvD,+EAA+E;AAC/E,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,GAAG,SAAS,CAKrE;AAqBD,uDAAuD;AACvD,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,uBAAuB,GAE5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAC3D;IAAE,QAAQ,CAAC,IAAI,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,SAAS,oBAAoB,EAAE,CAAA;CAAE,CAkG/E"}

package/dist/config.js

@@ -0,0 +1,260 @@
+// SPDX-License-Identifier: Apache-2.0
+// Copyright (C) 2026 Kindgi Inc.
+export const AZURE_OPENAI_ADAPTER_ID = '@kindgi/adapter-model-azure-openai';
+/** The v1 API's Responses (the default), or Chat Completions. */
+export const AZURE_OPENAI_APIS = ['responses', 'chat-completions'];
+/** A key (`secret_ref`, sent as `api-key`), or the runtime's Entra identity (a bearer token). */
+export const AZURE_OPENAI_AUTHS = ['api-key', 'entra'];
+/**
+ * The hosts the runtime's Entra token may go to, by cloud, each with the scope its tokens are
+ * for. Nothing else gets the token: a registration naming another host could replay it against
+ * every Azure OpenAI resource the runtime's identity holds a role on. A custom endpoint (a
+ * gateway) takes `auth: api-key`.
+ *
+ * Sources (read 2026-10-09): the endpoints by cloud,
+ * https://learn.microsoft.com/en-us/azure/azure-government/compare-azure-government-global-azure;
+ * Azure Government's scope, https://learn.microsoft.com/en-us/dotnet/api/overview/azure/ai.openai-readme
+ * (its Azure Government example). Microsoft's newer pages name the public
+ * scope `https://ai.azure.com/.default`; `cognitiveservices.azure.com` is the one proven live
+ * (2026-10-09), so it stays until a live run proves the other.
+ */
+export const AZURE_OPENAI_CLOUDS = [
+    {
+        cloud: 'Azure',
+        hostSuffixes: ['.openai.azure.com', '.cognitiveservices.azure.com', '.services.ai.azure.com'],
+        scope: 'https://cognitiveservices.azure.com/.default',
+    },
+    {
+        cloud: 'Azure Government',
+        hostSuffixes: ['.openai.azure.us', '.cognitiveservices.azure.us'],
+        scope: 'https://cognitiveservices.azure.us/.default',
+    },
+];
+/** The cloud an Azure OpenAI host belongs to; undefined for any other host. */
+export function azureCloudOf(hostname) {
+    const host = hostname.toLowerCase();
+    return AZURE_OPENAI_CLOUDS.find((c) => c.hostSuffixes.some((suffix) => host.endsWith(suffix) && host.length > suffix.length));
+}
+/** The v1 API's path on an Azure OpenAI host. */
+const V1_PATH = '/openai/v1';
+const AZURE_HOSTS = AZURE_OPENAI_CLOUDS.flatMap((c) => c.hostSuffixes.map((s) => `*${s}`)).join(', ');
+const KEYS = ['resourceName', 'baseURL', 'deployments', 'api', 'auth'];
+/** A single DNS label, as Azure's resource names are. */
+const RESOURCE_NAME = /^[a-z0-9](?:[a-z0-9-]{0,61}[a-z0-9])?$/i;
+/**
+ * A deployment name as it can sit in this setting and in the request path: Azure sets no
+ * character rule of its own (its ARM reference says only "string"; `gpt-6.1-sol` is a real
+ * one), so only what would break the setting (`,`, `=`) or the path (`/`, whitespace) is refused,
+ * and Azure answers for the rest.
+ */
+const DEPLOYMENT_NAME = /^[^\s,=/]+$/;
+const at = (key) => `/adapter_config/${key}`;
+/** The registration read, or every problem with it. */
+export function readAzureOpenAIConfig(input) {
+    const config = input.config ?? {};
+    const problems = [];
+    for (const key of Object.keys(config)) {
+        if (!KEYS.includes(key)) {
+            problems.push({
+                path: at(key),
+                message: `adapter_config.${key} isn't an Azure OpenAI setting: it takes resourceName or baseURL, deployments, api and auth.`,
+            });
+        }
+    }
+    const auth = config.auth ?? 'api-key';
+    const resourceName = config.resourceName;
+    const baseURL = config.baseURL;
+    let endpoint;
+    let cloud;
+    if (resourceName !== undefined && baseURL !== undefined) {
+        problems.push({
+            path: at('baseURL'),
+            message: 'adapter_config.resourceName and adapter_config.baseURL exclude each other: the resource, or a custom endpoint.',
+        });
+    }
+    else if (resourceName !== undefined) {
+        if (typeof resourceName !== 'string' || !RESOURCE_NAME.test(resourceName)) {
+            problems.push({
+                path: at('resourceName'),
+                message: 'adapter_config.resourceName must be the Azure OpenAI resource name, as in <name>.openai.azure.com (letters, digits, hyphens).',
+            });
+        }
+        else {
+            endpoint = { resourceName };
+            cloud = AZURE_OPENAI_CLOUDS[0];
+        }
+    }
+    else if (baseURL !== undefined) {
+        const read = readBaseURL(baseURL, auth, problems);
+        if (read !== undefined) {
+            endpoint = { baseURL: read.baseURL };
+            cloud = read.cloud;
+        }
+    }
+    else {
+        problems.push({
+            path: at('resourceName'),
+            message: 'needs adapter_config.resourceName, the Azure OpenAI resource (as in <name>.openai.azure.com), or adapter_config.baseURL for a custom endpoint.',
+        });
+    }
+    const api = config.api ?? 'responses';
+    if (!AZURE_OPENAI_APIS.includes(api)) {
+        problems.push({
+            path: at('api'),
+            message: `adapter_config.api must be one of ${AZURE_OPENAI_APIS.join(', ')}.`,
+        });
+    }
+    if (!AZURE_OPENAI_AUTHS.includes(auth)) {
+        problems.push({
+            path: at('auth'),
+            message: `adapter_config.auth must be one of ${AZURE_OPENAI_AUTHS.join(', ')}.`,
+        });
+    }
+    else if (auth === 'api-key' && !input.hasSecretRef) {
+        problems.push({
+            path: '/secret_ref',
+            message: "needs secret_ref: the resource's API key (or adapter_config.auth = entra, to sign in as the runtime's Azure identity).",
+        });
+    }
+    else if (auth === 'entra' && input.hasSecretRef) {
+        problems.push({
+            path: '/secret_ref',
+            message: "adapter_config.auth = entra signs in as the runtime's Azure identity: remove secret_ref.",
+        });
+    }
+    if (auth === 'entra' && input.identities?.azure === false) {
+        problems.push({
+            path: at('auth'),
+            message: "adapter_config.auth = entra needs the runtime's Azure identity (its managed identity; KINDGI_AZURE_CLIENT_ID names a user-assigned one), and this runtime has none.",
+        });
+    }
+    const deployments = readDeployments(config.deployments, input.metadata, problems);
+    if (problems.length > 0 || endpoint === undefined || deployments === undefined) {
+        return { kind: 'err', problems };
+    }
+    return {
+        kind: 'ok',
+        config: {
+            endpoint,
+            api: api,
+            auth: auth,
+            ...(auth === 'entra' && cloud !== undefined && { scope: cloud.scope }),
+            deployments,
+        },
+    };
+}
+/**
+ * A custom endpoint: https, with no credentials, query or fragment (they'd sit in the stored
+ * settings); on an Azure OpenAI host, the v1 path (the portal's endpoint lacks it, and would
+ * 404); and with `auth: entra`, an Azure OpenAI host only.
+ */
+function readBaseURL(value, auth, problems) {
+    const path = at('baseURL');
+    const url = typeof value === 'string' ? parseUrl(value) : undefined;
+    if (url === undefined || url.protocol !== 'https:') {
+        problems.push({
+            path,
+            message: `adapter_config.baseURL must be an https URL (e.g. https://<name>.openai.azure.com${V1_PATH}).`,
+        });
+        return undefined;
+    }
+    const before = problems.length;
+    const raw = value;
+    if (url.username !== '' || url.password !== '') {
+        problems.push({
+            path,
+            message: "adapter_config.baseURL can't hold credentials: a key goes in secret_ref, never in the URL.",
+        });
+    }
+    if (url.search !== '' || raw.includes('?') || url.hash !== '' || raw.includes('#')) {
+        problems.push({
+            path,
+            message: "adapter_config.baseURL can't hold a query or a fragment: a key goes in secret_ref, and the API version is the adapter's.",
+        });
+    }
+    if (/\/\/+$/.test(url.pathname)) {
+        problems.push({
+            path,
+            message: "adapter_config.baseURL can't end in more than one /: the adapter adds the API's path.",
+        });
+    }
+    const cloud = azureCloudOf(url.hostname);
+    if (cloud !== undefined && url.pathname.replace(/\/+$/, '') !== V1_PATH) {
+        problems.push({
+            path,
+            message: `adapter_config.baseURL on an Azure OpenAI host must end in ${V1_PATH} (https://${url.hostname}${V1_PATH}), the v1 API.`,
+        });
+    }
+    if (auth === 'entra' && cloud === undefined) {
+        problems.push({
+            path,
+            message: `adapter_config.auth = entra sends the runtime's Azure token, which goes only to an Azure OpenAI host (${AZURE_HOSTS}); ${url.hostname} isn't one. A custom endpoint takes auth = api-key.`,
+        });
+    }
+    return problems.length === before ? { baseURL: raw, cloud } : undefined;
+}
+/** `"model=deployment,model=deployment"`: every registered model, each a deployment Azure takes. */
+function readDeployments(value, metadata, problems) {
+    const path = at('deployments');
+    if (typeof value !== 'string' || value.trim() === '') {
+        problems.push({
+            path,
+            message: 'needs adapter_config.deployments, the deployment for each model: "model=deployment,…" (e.g. "gpt-6.1-sol=gpt-6-1-sol").',
+        });
+        return undefined;
+    }
+    const models = new Set(metadata.models.map((m) => m.name));
+    const map = new Map();
+    const before = problems.length;
+    for (const pair of value.split(',')) {
+        const [model, deployment, extra] = pair.split('=').map((part) => part.trim());
+        if (model === undefined ||
+            model === '' ||
+            deployment === undefined ||
+            deployment === '' ||
+            extra !== undefined) {
+            problems.push({
+                path,
+                message: `adapter_config.deployments has "${pair.trim()}": each entry is model=deployment.`,
+            });
+        }
+        else if (map.has(model)) {
+            problems.push({
+                path,
+                message: `adapter_config.deployments names ${model} twice: one deployment each.`,
+            });
+        }
+        else if (!models.has(model)) {
+            problems.push({
+                path,
+                message: `adapter_config.deployments names ${model}, which this registration doesn't list in metadata.models.`,
+            });
+        }
+        else if (!DEPLOYMENT_NAME.test(deployment)) {
+            problems.push({
+                path,
+                message: `adapter_config.deployments gives ${model} the deployment "${deployment}": a deployment name can't hold spaces, ",", "=" or "/".`,
+            });
+        }
+        else
+            map.set(model, deployment);
+    }
+    for (const model of models) {
+        if (!map.has(model) && problems.length === before) {
+            problems.push({
+                path,
+                message: `adapter_config.deployments has no deployment for ${model}.`,
+            });
+        }
+    }
+    return problems.length === before ? map : undefined;
+}
+function parseUrl(value) {
+    try {
+        return new URL(value);
+    }
+    catch {
+        return undefined;
+    }
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,iCAAiC;AAcjC,MAAM,CAAC,MAAM,uBAAuB,GAAG,oCAAoC,CAAC;AAE5E,iEAAiE;AACjE,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,WAAW,EAAE,kBAAkB,CAAU,CAAC;AAG5E,iGAAiG;AACjG,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,SAAS,EAAE,OAAO,CAAU,CAAC;AAahE;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,MAAM,mBAAmB,GAAG;IACjC;QACE,KAAK,EAAE,OAAO;QACd,YAAY,EAAE,CAAC,mBAAmB,EAAE,8BAA8B,EAAE,wBAAwB,CAAC;QAC7F,KAAK,EAAE,8CAA8C;KACtD;IACD;QACE,KAAK,EAAE,kBAAkB;QACzB,YAAY,EAAE,CAAC,kBAAkB,EAAE,6BAA6B,CAAC;QACjE,KAAK,EAAE,6CAA6C;KACrD;CACO,CAAC;AAIX,+EAA+E;AAC/E,MAAM,UAAU,YAAY,CAAC,QAAgB;IAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpC,OAAO,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CACpC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,CACtF,CAAC;AACJ,CAAC;AAED,iDAAiD;AACjD,MAAM,OAAO,GAAG,YAAY,CAAC;AAC7B,MAAM,WAAW,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAC7F,IAAI,CACL,CAAC;AAEF,MAAM,IAAI,GAAG,CAAC,cAAc,EAAE,SAAS,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,CAAU,CAAC;AAChF,yDAAyD;AACzD,MAAM,aAAa,GAAG,yCAAyC,CAAC;AAChE;;;;;GAKG;AACH,MAAM,eAAe,GAAG,aAAa,CAAC;AAEtC,MAAM,EAAE,GAAG,CAAC,GAAW,EAAE,EAAE,CAAC,mBAAmB,GAAG,EAAE,CAAC;AAErD,uDAAuD;AACvD,MAAM,UAAU,qBAAqB,CACnC,KAA8B;IAI9B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IAClC,MAAM,QAAQ,GAA2B,EAAE,CAAC;IAE5C,KAAK,MAAM,GAAG,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACtC,IAAI,CAAE,IAA0B,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YAC/C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC;gBACb,OAAO,EAAE,kBAAkB,GAAG,8FAA8F;aAC7H,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;IACtC,MAAM,YAAY,GAAG,MAAM,CAAC,YAAY,CAAC;IACzC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,QAAmD,CAAC;IACxD,IAAI,KAA6B,CAAC;IAClC,IAAI,YAAY,KAAK,SAAS,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,EAAE,CAAC,SAAS,CAAC;YACnB,OAAO,EACL,gHAAgH;SACnH,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACtC,IAAI,OAAO,YAAY,KAAK,QAAQ,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC;YAC1E,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC;gBACxB,OAAO,EACL,+HAA+H;aAClI,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,QAAQ,GAAG,EAAE,YAAY,EAAE,CAAC;YAC5B,KAAK,GAAG,mBAAmB,CAAC,CAAC,CAAC,CAAC;QACjC,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QACjC,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;QAClD,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;YACvB,QAAQ,GAAG,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC;YACrC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QACrB,CAAC;IACH,CAAC;SAAM,CAAC;QACN,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,EAAE,CAAC,cAAc,CAAC;YACxB,OAAO,EACL,gJAAgJ;SACnJ,CAAC,CAAC;IACL,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,IAAI,WAAW,CAAC;IACtC,IAAI,CAAE,iBAAwC,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,EAAE,CAAC,KAAK,CAAC;YACf,OAAO,EAAE,qCAAqC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAC9E,CAAC,CAAC;IACL,CAAC;IAED,IAAI,CAAE,kBAAyC,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;YAChB,OAAO,EAAE,sCAAsC,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG;SAChF,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,KAAK,CAAC,YAAY,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,OAAO,EACL,wHAAwH;SAC3H,CAAC,CAAC;IACL,CAAC;SAAM,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QAClD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,aAAa;YACnB,OAAO,EACL,0FAA0F;SAC7F,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,CAAC,UAAU,EAAE,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1D,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC;YAChB,OAAO,EACL,qKAAqK;SACxK,CAAC,CAAC;IACL,CAAC;IAED,MAAM,WAAW,GAAG,eAAe,CAAC,MAAM,CAAC,WAAW,EAAE,KAAK,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAElF,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,IAAI,QAAQ,KAAK,SAAS,IAAI,WAAW,KAAK,SAAS,EAAE,CAAC;QAC/E,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IACD,OAAO;QACL,IAAI,EAAE,IAAI;QACV,MAAM,EAAE;YACN,QAAQ;YACR,GAAG,EAAE,GAAqB;YAC1B,IAAI,EAAE,IAAuB;YAC7B,GAAG,CAAC,IAAI,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC;YACtE,WAAW;SACZ;KACF,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,WAAW,CAClB,KAAc,EACd,IAAa,EACb,QAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3B,MAAM,GAAG,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACpE,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACnD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,OAAO,EAAE,oFAAoF,OAAO,IAAI;SACzG,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,MAAM,GAAG,GAAG,KAAe,CAAC;IAC5B,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,EAAE,CAAC;QAC/C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,OAAO,EACL,4FAA4F;SAC/F,CAAC,CAAC;IACL,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,OAAO,EACL,0HAA0H;SAC7H,CAAC,CAAC;IACL,CAAC;IACD,IAAI,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,OAAO,EACL,uFAAuF;SAC1F,CAAC,CAAC;IACL,CAAC;IACD,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzC,IAAI,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,OAAO,EAAE,CAAC;QACxE,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,OAAO,EAAE,8DAA8D,OAAO,aAAa,GAAG,CAAC,QAAQ,GAAG,OAAO,gBAAgB;SAClI,CAAC,CAAC;IACL,CAAC;IACD,IAAI,IAAI,KAAK,OAAO,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QAC5C,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,OAAO,EAAE,yGAAyG,WAAW,MAAM,GAAG,CAAC,QAAQ,qDAAqD;SACrM,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1E,CAAC;AAED,oGAAoG;AACpG,SAAS,eAAe,CACtB,KAAc,EACd,QAA0B,EAC1B,QAAgC;IAEhC,MAAM,IAAI,GAAG,EAAE,CAAC,aAAa,CAAC,CAAC;IAC/B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,QAAQ,CAAC,IAAI,CAAC;YACZ,IAAI;YACJ,OAAO,EACL,yHAAyH;SAC5H,CAAC,CAAC;QACH,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAC3D,MAAM,GAAG,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,CAAC,KAAK,EAAE,UAAU,EAAE,KAAK,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC;QAC9E,IACE,KAAK,KAAK,SAAS;YACnB,KAAK,KAAK,EAAE;YACZ,UAAU,KAAK,SAAS;YACxB,UAAU,KAAK,EAAE;YACjB,KAAK,KAAK,SAAS,EACnB,CAAC;YACD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,OAAO,EAAE,mCAAmC,IAAI,CAAC,IAAI,EAAE,oCAAoC;aAC5F,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,OAAO,EAAE,oCAAoC,KAAK,8BAA8B;aACjF,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,OAAO,EAAE,oCAAoC,KAAK,4DAA4D;aAC/G,CAAC,CAAC;QACL,CAAC;aAAM,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7C,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,OAAO,EAAE,oCAAoC,KAAK,oBAAoB,UAAU,0DAA0D;aAC3I,CAAC,CAAC;QACL,CAAC;;YAAM,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;IACpC,CAAC;IACD,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAClD,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI;gBACJ,OAAO,EAAE,oDAAoD,KAAK,GAAG;aACtE,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC7B,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC"}

package/dist/entry.d.ts

@@ -0,0 +1,11 @@
+import { type AdapterConfigCheckInput, type AdapterConfigProblem, type AdapterFactory, type AdapterFactoryEntry } from '@kindgi/capabilities';
+/** The Entra scope Azure OpenAI takes in Azure's public cloud. */
+export declare const AZURE_OPENAI_SCOPE: "https://cognitiveservices.azure.com/.default";
+/** How long a token from the runtime's identity may take before the call fails as `auth`. */
+export declare const IDENTITY_TIMEOUT_MS = 10000;
+/** What's wrong with a registration, for `POST /v1/providers` and `GET …/check`. */
+export declare function azureOpenAICheckConfig(input: AdapterConfigCheckInput): readonly AdapterConfigProblem[];
+export declare const azureOpenAIAdapterFactory: AdapterFactory;
+/** The entry a runtime registers: the factory, and its static check. */
+export declare const azureOpenAIAdapterEntry: AdapterFactoryEntry;
+//# sourceMappingURL=entry.d.ts.map

package/dist/entry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry.d.ts","sourceRoot":"","sources":["../src/entry.ts"],"names":[],"mappings":"AA4BA,OAAO,EACL,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,KAAK,cAAc,EACnB,KAAK,mBAAmB,EAKzB,MAAM,sBAAsB,CAAC;AAK9B,kEAAkE;AAClE,eAAO,MAAM,kBAAkB,gDAA+B,CAAC;AAE/D,6FAA6F;AAC7F,eAAO,MAAM,mBAAmB,QAAS,CAAC;AAE1C,oFAAoF;AACpF,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,uBAAuB,GAC7B,SAAS,oBAAoB,EAAE,CAGjC;AAED,eAAO,MAAM,yBAAyB,EAAE,cAwDvC,CAAC;AAEF,wEAAwE;AACxE,eAAO,MAAM,uBAAuB,EAAE,mBAKrC,CAAC"}