@marinoscar/platform-api 0.1.0-next.5 → 0.1.0-next.6

package/dist/ai/core/hosted-tools.js

@@ -1,289 +1,23 @@
 "use strict";
-// =============================================================================
-// Provider-hosted tools — validation, policy and secret handling (issue #442)
-// =============================================================================
-//
-// The typed `AiHostedTool` union lives in `types/responses.types.ts`; this file
-// is everything that is DONE with one, provider-neutrally:
-//
-//   - `aiHostedToolSchema` — the one runtime shape check, shared by the HTTP
-//     DTO (`POST /api/ai/responses`), the facade (in-process callers are
-//     typed, not validated) and the stored background-run request
-//     (`aiStoredHostedToolSchema`, which has NO `headers` field at all);
-//   - `assertHostedToolsAllowed` — the admin policy gate: a tool type an
-//     administrator has not switched on is `AI_TOOL_DISABLED` (403), and so is
-//     an MCP server outside `ai.hostedTools.mcpAllowedHosts` when that list is
-//     non-empty;
-//   - `mcpHeaderValues` / `redactSecretValues` — MCP `headers` are secret
-//     material (typically `Authorization: Bearer …` for the remote server).
-//     The facade collects their values before the call and scrubs every
-//     string of the response with them, so a server that echoes its own
-//     credential back cannot put it on the wire either.
-//
-// Everything here is DEFAULT-CLOSED: every tool type is off until an
-// administrator turns it on (egress and cost risk — a web search or an MCP
-// call reaches the internet on the deployment's or the user's bill).
-// =============================================================================
+// Moved to `@marinoscar/platform-ai-providers` (#991) so the AI provider
+// adapters and their core types run without Nest. This path re-exports the
+// names it always exported, unchanged, so platform imports keep working.
+// The side-effect import runs the `AiError` integration (ai-error.ts) first.
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.AI_REDACTED = exports.aiStoredHostedToolSchema = exports.aiHostedToolSchema = exports.AI_MCP_SERVER_LABEL = exports.AI_MCP_MAX_HEADERS = void 0;
-exports.hostedToolsOf = hostedToolsOf;
-exports.assertHostedToolShapes = assertHostedToolShapes;
-exports.mcpHost = mcpHost;
-exports.isMcpHostAllowed = isMcpHostAllowed;
-exports.assertHostedToolsAllowed = assertHostedToolsAllowed;
-exports.hasMcpHeaders = hasMcpHeaders;
-exports.mcpHeaderValues = mcpHeaderValues;
-exports.redactSecretValues = redactSecretValues;
-const zod_1 = require("zod");
-const ai_error_1 = require("./ai-error");
-/**
- * Most header entries one MCP tool may carry.
- *
- * @stability experimental
- */
-exports.AI_MCP_MAX_HEADERS = 16;
-/**
- * A label the provider accepts for an MCP server.
- *
- * @stability experimental
- */
-exports.AI_MCP_SERVER_LABEL = /^[a-zA-Z0-9_-]{1,64}$/;
-/** An HTTP header field name (RFC 9110 `token`). */
-const HEADER_NAME = /^[!#$%&'*+.^_`|~0-9A-Za-z-]{1,128}$/;
-/** `https://` only, and never with credentials in the URL — it is stored with a background run. */
-const mcpServerUrl = zod_1.z
-    .url({ protocol: /^https$/, error: 'serverUrl must be an https:// URL' })
-    .max(2048)
-    .refine((value) => {
-    const url = new URL(value);
-    return url.username === '' && url.password === '';
-}, 'serverUrl must not carry credentials; send them in headers');
-const webSearchToolSchema = zod_1.z
-    .object({
-    type: zod_1.z.literal('web_search'),
-    searchContextSize: zod_1.z.enum(['low', 'medium', 'high']).optional(),
-    userLocation: zod_1.z
-        .object({
-        country: zod_1.z.string().regex(/^[A-Za-z]{2}$/, 'An ISO-3166 alpha-2 country code').optional(),
-        city: zod_1.z.string().min(1).max(100).optional(),
-    })
-        .strict()
-        .optional(),
-})
-    .strict();
-const fileSearchToolSchema = zod_1.z
-    .object({
-    type: zod_1.z.literal('file_search'),
-    vectorStoreIds: zod_1.z.array(zod_1.z.string().min(1).max(128)).min(1).max(16),
-    maxResults: zod_1.z.number().int().min(1).max(50).optional(),
-})
-    .strict();
-const codeInterpreterToolSchema = zod_1.z
-    .object({
-    type: zod_1.z.literal('code_interpreter'),
-    container: zod_1.z.object({ type: zod_1.z.literal('auto') }).strict().optional(),
-})
-    .strict();
-const imageGenerationToolSchema = zod_1.z
-    .object({
-    type: zod_1.z.literal('image_generation'),
-    size: zod_1.z.string().min(1).max(32).optional(),
-    quality: zod_1.z.string().min(1).max(16).optional(),
-})
-    .strict();
-const mcpToolFields = {
-    type: zod_1.z.literal('mcp'),
-    serverLabel: zod_1.z.string().regex(exports.AI_MCP_SERVER_LABEL, 'Use 1-64 of [a-zA-Z0-9_-]'),
-    serverUrl: mcpServerUrl,
-    allowedTools: zod_1.z.array(zod_1.z.string().min(1).max(128)).max(128).optional(),
-    requireApproval: zod_1.z.enum(['never', 'always']).optional(),
-};
-const mcpToolSchema = zod_1.z
-    .object({
-    ...mcpToolFields,
-    headers: zod_1.z
-        .record(zod_1.z.string().regex(HEADER_NAME, 'Not a valid header name'), zod_1.z.string().max(8192))
-        .refine((headers) => Object.keys(headers).length <= exports.AI_MCP_MAX_HEADERS, {
-        message: `At most ${exports.AI_MCP_MAX_HEADERS} headers`,
-    })
-        .optional(),
-})
-    .strict();
-/**
- * One hosted tool, as a request may carry it.
- *
- * @internal
- */
-exports.aiHostedToolSchema = zod_1.z.discriminatedUnion('type', [
-    webSearchToolSchema,
-    fileSearchToolSchema,
-    codeInterpreterToolSchema,
-    imageGenerationToolSchema,
-    mcpToolSchema,
-]);
-/**
- * One hosted tool as STORED with a background run (`ai_runs.request`). The
- * MCP variant has no `headers` member, so the column cannot hold one: a run
- * whose MCP tool needs headers is refused by `startRun` instead.
- *
- * @internal
- */
-exports.aiStoredHostedToolSchema = zod_1.z.discriminatedUnion('type', [
-    webSearchToolSchema,
-    fileSearchToolSchema,
-    codeInterpreterToolSchema,
-    imageGenerationToolSchema,
-    zod_1.z.object(mcpToolFields).strict(),
-]);
-/**
- * The hosted tools among a request's tools.
- *
- * @stability experimental
- */
-function hostedToolsOf(tools) {
-    return (tools ?? []).filter((tool) => tool.type !== 'function');
-}
-/**
- * Validates every hosted tool's shape. In-process callers are only
- * type-checked, so the facade runs this too. The error names the tool type
- * and the offending path — never a value (a header value is a secret).
- *
- * @throws AiError('AI_INVALID_REQUEST')
- *
- * @stability experimental
- */
-function assertHostedToolShapes(tools) {
-    for (const tool of hostedToolsOf(tools)) {
-        const parsed = exports.aiHostedToolSchema.safeParse(tool);
-        if (!parsed.success) {
-            const issue = parsed.error.issues[0];
-            throw new ai_error_1.AiError('AI_INVALID_REQUEST', `The "${tool.type}" hosted tool is invalid.`, {
-                details: { tool: tool.type, path: issue?.path.map(String).join('.') ?? '' },
-            });
-        }
-    }
-}
-/**
- * Lower-cased hostname of an MCP `serverUrl`, or `null` when it does not parse.
- *
- * @stability experimental
- */
-function mcpHost(serverUrl) {
-    try {
-        return new URL(serverUrl).hostname.toLowerCase();
-    }
-    catch {
-        return null;
-    }
-}
-/**
- * Whether `host` passes `allowed`. An empty list allows any host (the
- * `https://` rule still applies); `example.com` matches exactly that host;
- * `*.example.com` matches any subdomain of it, not the apex.
- *
- * @stability experimental
- */
-function isMcpHostAllowed(host, allowed) {
-    if (allowed.length === 0)
-        return true;
-    const target = host.toLowerCase();
-    return allowed.some((entry) => {
-        const pattern = entry.trim().toLowerCase();
-        if (pattern.startsWith('*.')) {
-            return target.endsWith(pattern.slice(1)) && target.length > pattern.length - 1;
-        }
-        return target === pattern;
-    });
-}
-/**
- * The admin policy gate: every hosted tool's type must be switched on, and an
- * MCP server's host must pass the allowlist.
- *
- * @throws AiError('AI_TOOL_DISABLED') (403)
- *
- * @stability experimental
- */
-function assertHostedToolsAllowed(tools, policy) {
-    for (const tool of hostedToolsOf(tools)) {
-        if (!policy[tool.type]) {
-            throw new ai_error_1.AiError('AI_TOOL_DISABLED', `The "${tool.type}" hosted tool is not enabled in this deployment.`, {
-                details: { tool: tool.type },
-            });
-        }
-        if (tool.type === 'mcp') {
-            const host = mcpHost(tool.serverUrl);
-            if (!host || !isMcpHostAllowed(host, policy.mcpAllowedHosts)) {
-                throw new ai_error_1.AiError('AI_TOOL_DISABLED', 'This MCP server host is not allowed in this deployment.', {
-                    details: { tool: 'mcp', host: host ?? '' },
-                });
-            }
-        }
-    }
-}
-/**
- * Whether any MCP tool in `tools` carries headers.
- *
- * @stability experimental
- */
-function hasMcpHeaders(tools) {
-    return hostedToolsOf(tools).some((tool) => tool.type === 'mcp' && Object.keys(tool.headers ?? {}).length > 0);
-}
-/**
- * Every MCP header VALUE in `tools` worth scrubbing for (at least 4
- * characters — shorter strings would redact ordinary text and are not
- * credentials anyone could use).
- *
- * @stability experimental
- */
-function mcpHeaderValues(tools) {
-    const values = new Set();
-    for (const tool of hostedToolsOf(tools)) {
-        if (tool.type !== 'mcp')
-            continue;
-        for (const value of Object.values(tool.headers ?? {})) {
-            const trimmed = value.trim();
-            if (trimmed.length >= 4)
-                values.add(trimmed);
-            // `Bearer <token>`: the token alone is the secret, and may be echoed without its scheme.
-            const [, token] = /^\S+\s+(\S{4,})$/.exec(trimmed) ?? [];
-            if (token)
-                values.add(token);
-        }
-    }
-    return [...values];
-}
-/**
- * The placeholder a scrubbed secret is replaced with.
- *
- * @stability experimental
- */
-exports.AI_REDACTED = '[REDACTED]';
-/**
- * `value` with every occurrence of every string in `secrets` replaced by
- * `[REDACTED]`, in every string reachable through plain objects and arrays.
- * Returns `value` itself when `secrets` is empty; otherwise a copy (binary
- * payloads are passed through untouched).
- *
- * @stability experimental
- */
-function redactSecretValues(value, secrets) {
-    if (secrets.length === 0)
-        return value;
-    const ordered = [...secrets].sort((a, b) => b.length - a.length);
-    const walk = (node) => {
-        if (typeof node === 'string') {
-            let out = node;
-            for (const secret of ordered)
-                out = out.split(secret).join(exports.AI_REDACTED);
-            return out;
-        }
-        if (Array.isArray(node))
-            return node.map(walk);
-        if (node && typeof node === 'object' && !(node instanceof Uint8Array)) {
-            return Object.fromEntries(Object.entries(node).map(([key, child]) => [key, walk(child)]));
-        }
-        return node;
-    };
-    return walk(value);
-}
+exports.redactSecretValues = exports.mcpHost = exports.mcpHeaderValues = exports.isMcpHostAllowed = exports.hostedToolsOf = exports.hasMcpHeaders = exports.assertHostedToolShapes = exports.assertHostedToolsAllowed = exports.aiStoredHostedToolSchema = exports.aiHostedToolSchema = exports.AI_REDACTED = exports.AI_MCP_SERVER_LABEL = exports.AI_MCP_MAX_HEADERS = void 0;
+require("./ai-error");
+var platform_ai_providers_1 = require("@marinoscar/platform-ai-providers");
+Object.defineProperty(exports, "AI_MCP_MAX_HEADERS", { enumerable: true, get: function () { return platform_ai_providers_1.AI_MCP_MAX_HEADERS; } });
+Object.defineProperty(exports, "AI_MCP_SERVER_LABEL", { enumerable: true, get: function () { return platform_ai_providers_1.AI_MCP_SERVER_LABEL; } });
+Object.defineProperty(exports, "AI_REDACTED", { enumerable: true, get: function () { return platform_ai_providers_1.AI_REDACTED; } });
+Object.defineProperty(exports, "aiHostedToolSchema", { enumerable: true, get: function () { return platform_ai_providers_1.aiHostedToolSchema; } });
+Object.defineProperty(exports, "aiStoredHostedToolSchema", { enumerable: true, get: function () { return platform_ai_providers_1.aiStoredHostedToolSchema; } });
+Object.defineProperty(exports, "assertHostedToolsAllowed", { enumerable: true, get: function () { return platform_ai_providers_1.assertHostedToolsAllowed; } });
+Object.defineProperty(exports, "assertHostedToolShapes", { enumerable: true, get: function () { return platform_ai_providers_1.assertHostedToolShapes; } });
+Object.defineProperty(exports, "hasMcpHeaders", { enumerable: true, get: function () { return platform_ai_providers_1.hasMcpHeaders; } });
+Object.defineProperty(exports, "hostedToolsOf", { enumerable: true, get: function () { return platform_ai_providers_1.hostedToolsOf; } });
+Object.defineProperty(exports, "isMcpHostAllowed", { enumerable: true, get: function () { return platform_ai_providers_1.isMcpHostAllowed; } });
+Object.defineProperty(exports, "mcpHeaderValues", { enumerable: true, get: function () { return platform_ai_providers_1.mcpHeaderValues; } });
+Object.defineProperty(exports, "mcpHost", { enumerable: true, get: function () { return platform_ai_providers_1.mcpHost; } });
+Object.defineProperty(exports, "redactSecretValues", { enumerable: true, get: function () { return platform_ai_providers_1.redactSecretValues; } });
 //# sourceMappingURL=hosted-tools.js.map

package/dist/ai/core/hosted-tools.js.map

@@ -1 +1 @@
-{"version":3,"file":"hosted-tools.js","sourceRoot":"","sources":["../../../src/ai/core/hosted-tools.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,8EAA8E;AAC9E,gFAAgF;AAChF,EAAE;AACF,gFAAgF;AAChF,2DAA2D;AAC3D,EAAE;AACF,6EAA6E;AAC7E,yEAAyE;AACzE,kEAAkE;AAClE,yEAAyE;AACzE,yEAAyE;AACzE,+EAA+E;AAC/E,+EAA+E;AAC/E,iBAAiB;AACjB,0EAA0E;AAC1E,4EAA4E;AAC5E,wEAAwE;AACxE,wEAAwE;AACxE,wDAAwD;AACxD,EAAE;AACF,qEAAqE;AACrE,2EAA2E;AAC3E,qEAAqE;AACrE,gFAAgF;;;AAqIhF,sCAEC;AAWD,wDAYC;AAOD,0BAMC;AASD,4CAcC;AAUD,4DAqBC;AAOD,sCAIC;AASD,0CAkBC;AAiBD,gDAsBC;AA5SD,6BAAwB;AAExB,yCAAqC;AAarC;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,EAAE,CAAC;AAErC;;;;GAIG;AACU,QAAA,mBAAmB,GAAG,uBAAuB,CAAC;AAE3D,oDAAoD;AACpD,MAAM,WAAW,GAAG,qCAAqC,CAAC;AAE1D,mGAAmG;AACnG,MAAM,YAAY,GAAG,OAAC;KACnB,GAAG,CAAC,EAAE,QAAQ,EAAE,SAAS,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC;KACxE,GAAG,CAAC,IAAI,CAAC;KACT,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE;IAChB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,CAAC;AACpD,CAAC,EAAE,4DAA4D,CAAC,CAAC;AAEnE,MAAM,mBAAmB,GAAG,OAAC;KAC1B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IAC7B,iBAAiB,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,EAAE;IAC/D,YAAY,EAAE,OAAC;SACZ,MAAM,CAAC;QACN,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,eAAe,EAAE,kCAAkC,CAAC,CAAC,QAAQ,EAAE;QACzF,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KAC5C,CAAC;SACD,MAAM,EAAE;SACR,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,oBAAoB,GAAG,OAAC;KAC3B,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,aAAa,CAAC;IAC9B,cAAc,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;IAClE,UAAU,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CACvD,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,SAAS,EAAE,OAAC,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CACrE,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,yBAAyB,GAAG,OAAC;KAChC,MAAM,CAAC;IACN,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC;IACnC,IAAI,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,OAAO,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC9C,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ,MAAM,aAAa,GAAG;IACpB,IAAI,EAAE,OAAC,CAAC,OAAO,CAAC,KAAK,CAAC;IACtB,WAAW,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,2BAAmB,EAAE,2BAA2B,CAAC;IAC/E,SAAS,EAAE,YAAY;IACvB,YAAY,EAAE,OAAC,CAAC,KAAK,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;IACrE,eAAe,EAAE,OAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE;CACxD,CAAC;AAEF,MAAM,aAAa,GAAG,OAAC;KACpB,MAAM,CAAC;IACN,GAAG,aAAa;IAChB,OAAO,EAAE,OAAC;SACP,MAAM,CAAC,OAAC,CAAC,MAAM,EAAE,CAAC,KAAK,CAAC,WAAW,EAAE,yBAAyB,CAAC,EAAE,OAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;SACtF,MAAM,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,IAAI,0BAAkB,EAAE;QACtE,OAAO,EAAE,WAAW,0BAAkB,UAAU;KACjD,CAAC;SACD,QAAQ,EAAE;CACd,CAAC;KACD,MAAM,EAAE,CAAC;AAEZ;;;;GAIG;AACU,QAAA,kBAAkB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC7D,mBAAmB;IACnB,oBAAoB;IACpB,yBAAyB;IACzB,yBAAyB;IACzB,aAAa;CACd,CAAC,CAAC;AAEH;;;;;;GAMG;AACU,QAAA,wBAAwB,GAAG,OAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IACnE,mBAAmB;IACnB,oBAAoB;IACpB,yBAAyB;IACzB,yBAAyB;IACzB,OAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,MAAM,EAAE;CACjC,CAAC,CAAC;AAEH;;;;GAIG;AACH,SAAgB,aAAa,CAAC,KAAoC;IAChE,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,EAAwB,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC;AACxF,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,sBAAsB,CAAC,KAAoC;IACzE,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,MAAM,MAAM,GAAG,0BAAkB,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;QAElD,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;YAErC,MAAM,IAAI,kBAAO,CAAC,oBAAoB,EAAE,QAAQ,IAAI,CAAC,IAAI,2BAA2B,EAAE;gBACpF,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,EAAE;aAC5E,CAAC,CAAC;QACL,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,OAAO,CAAC,SAAiB;IACvC,IAAI,CAAC;QACH,OAAO,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,gBAAgB,CAAC,IAAY,EAAE,OAA0B;IACvE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtC,MAAM,MAAM,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAElC,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE;QAC5B,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;QAE3C,IAAI,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC;QACjF,CAAC;QAED,OAAO,MAAM,KAAK,OAAO,CAAC;IAC5B,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,wBAAwB,CACtC,KAAoC,EACpC,MAA2B;IAE3B,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,kBAAO,CAAC,kBAAkB,EAAE,QAAQ,IAAI,CAAC,IAAI,kDAAkD,EAAE;gBACzG,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;aAC7B,CAAC,CAAC;QACL,CAAC;QAED,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YACxB,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAErC,IAAI,CAAC,IAAI,IAAI,CAAC,gBAAgB,CAAC,IAAI,EAAE,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC;gBAC7D,MAAM,IAAI,kBAAO,CAAC,kBAAkB,EAAE,yDAAyD,EAAE;oBAC/F,OAAO,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,IAAI,EAAE,EAAE;iBAC3C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,SAAgB,aAAa,CAAC,KAAoC;IAChE,OAAO,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,CAC9B,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,CAC5E,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,KAAoC;IAClE,MAAM,MAAM,GAAG,IAAI,GAAG,EAAU,CAAC;IAEjC,KAAK,MAAM,IAAI,IAAI,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACxC,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK;YAAE,SAAS;QAElC,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAE,IAAkB,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;YACrE,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;YAE7B,IAAI,OAAO,CAAC,MAAM,IAAI,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YAC7C,yFAAyF;YACzF,MAAM,CAAC,EAAE,KAAK,CAAC,GAAG,kBAAkB,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;YAEzD,IAAI,KAAK;gBAAE,MAAM,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,MAAM,CAAC,CAAC;AACrB,CAAC;AAED;;;;GAIG;AACU,QAAA,WAAW,GAAG,YAAY,CAAC;AAExC;;;;;;;GAOG;AACH,SAAgB,kBAAkB,CAAI,KAAQ,EAAE,OAA0B;IACxE,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAEvC,MAAM,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;IAEjE,MAAM,IAAI,GAAG,CAAC,IAAa,EAAW,EAAE;QACtC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC7B,IAAI,GAAG,GAAG,IAAI,CAAC;YACf,KAAK,MAAM,MAAM,IAAI,OAAO;gBAAE,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,mBAAW,CAAC,CAAC;YACxE,OAAO,GAAG,CAAC;QACb,CAAC;QAED,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAE/C,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,YAAY,UAAU,CAAC,EAAE,CAAC;YACtE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC5F,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,OAAO,IAAI,CAAC,KAAK,CAAM,CAAC;AAC1B,CAAC"}
+{"version":3,"file":"hosted-tools.js","sourceRoot":"","sources":["../../../src/ai/core/hosted-tools.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;;;AAE7E,sBAAoB;AAEpB,2EAc2C;AAbzC,2HAAA,kBAAkB,OAAA;AAClB,4HAAA,mBAAmB,OAAA;AACnB,oHAAA,WAAW,OAAA;AACX,2HAAA,kBAAkB,OAAA;AAClB,iIAAA,wBAAwB,OAAA;AACxB,iIAAA,wBAAwB,OAAA;AACxB,+HAAA,sBAAsB,OAAA;AACtB,sHAAA,aAAa,OAAA;AACb,sHAAA,aAAa,OAAA;AACb,yHAAA,gBAAgB,OAAA;AAChB,wHAAA,eAAe,OAAA;AACf,gHAAA,OAAO,OAAA;AACP,2HAAA,kBAAkB,OAAA"}

package/dist/ai/core/provider-adapter.interface.d.ts

@@ -1,261 +1,4 @@
-import type { AiErrorCode } from './ai-error';
-import type { AiModelCapabilities } from './capabilities';
-import type { AiFileInputStrategies, AiResolvedStorageInputs } from './types/file-inputs.types';
-import type { AiAudioPort, AiEmbeddingsPort, AiImagesPort, AiRealtimePort } from './types/media.types';
-import type { AiResponse, AiResponseRequest, AiStreamEvent } from './types/responses.types';
-/**
- * The `apiKey` a call carries when its provider needs none (#448): an
- * OpenAI-compatible server the administrator marked `requiresKey: false`.
- * The key resolver returns it with `keySource: 'none'`, and an adapter that
- * sees it sends NO credential at all — it is a marker, never put on the wire,
- * in a log line or in a row.
- *
- * @stability experimental
- */
-export declare const AI_KEYLESS_API_KEY = "not-needed";
-/**
- * Per-call context. The key is resolved per call by the runtime (org key or
- * the user's own key, per policy) and handed to the adapter — adapters hold
- * no credentials of their own.
- *
- * ⚠ `apiKey` is secret material: it must never appear in a log line, an
- * `AiError`'s details, or a persisted row.
- *
- * @stability experimental
- */
-export interface AiCallContext {
-    /** The key this call is made under (`AI_KEYLESS_API_KEY` for a keyless server). ⚠ Secret. */
-    apiKey: string;
-    /** The administrator's endpoint override, when the provider slot carries one. */
-    baseUrl?: string;
-    /**
-     * The provider's other NON-SECRET settings from its `ai.providers.<id>`
-     * slot (#448) — Azure's `apiVersion`/`apiStyle`/`deployments`, an
-     * OpenAI-compatible server's `apiStyle`/`requiresKey` — absent when the
-     * slot carries none. Each adapter reads it with its own schema; the
-     * runtime passes it through without interpreting it.
-     */
-    providerSettings?: Readonly<Record<string, unknown>>;
-    /** Aborts the provider call. */
-    signal?: AbortSignal;
-    /** The request id, for logs and the provider's metadata. */
-    requestId: string;
-    /**
-     * The request's storage-object inputs (#441), resolved and authorised by the
-     * runtime, keyed by `storageObjectId` — present only when the request
-     * carries any. ⚠ May hold presigned URLs: the same never-log rule as
-     * `apiKey` applies (see `types/file-inputs.types.ts`).
-     */
-    storageInputs?: AiResolvedStorageInputs;
-}
-/**
- * The context a custom operation handler (`AiProviderAdapter.operations`)
- * receives: the call's {@link AiCallContext} plus the model and operation the
- * gate pipeline settled. ⚠ `apiKey` is secret material, as everywhere.
- *
- * @stability experimental
- */
-export interface AiOperationContext extends AiCallContext {
-    /** The provider model id the call targets (already gated: enabled, reachable, declares the capability). */
-    readonly model: string;
-    /** The operation id being run (`audio.diarize`). */
-    readonly operation: string;
-}
-/**
- * A custom operation an adapter implements (PP-14.17, #935): one entry of
- * `AiProviderAdapter.operations`. The input arrives already validated by the
- * operation's `inputSchema` (`registerAiOperation`) and the returned value is
- * validated by its `outputSchema` before it leaves the runtime, so a handler
- * does neither. It must not log, return or throw the key or the input.
- *
- * @param input - the validated input.
- * @param ctx - the call's key, endpoint, settings, signal, model and operation.
- * @returns the output, in the shape the operation's `outputSchema` declares.
- *
- * @stability experimental
- */
-export type AiOperationHandler = (input: unknown, ctx: AiOperationContext) => Promise<unknown>;
-/**
- * What a provider's model listing says about one model, beyond its id
- * (#447). Every field is optional and PROVIDER-REPORTED: an adapter fills
- * what its listing carries (Gemini reports token limits, supported methods
- * and a thinking flag; OpenAI and Anthropic list ids only) and its own
- * `classifyModel` is the only reader. It is never stored as-is — the
- * classifier folds it into `AiModelCapabilities`, which is what the catalog
- * keeps.
- *
- * @stability experimental
- */
-export interface AiDiscoveredModelMetadata {
-    /** The provider's display name for the model. */
-    displayName?: string;
-    /** The most input tokens the provider says the model accepts. */
-    inputTokenLimit?: number;
-    /** The most output tokens the provider says the model produces. */
-    outputTokenLimit?: number;
-    /** Provider-named operations the model supports (Gemini: `generateContent`, `embedContent`, ...). */
-    supportedActions?: string[];
-    /** Whether the provider says the model thinks (extended reasoning). */
-    thinking?: boolean;
-}
-/**
- * One model of a provider's listing (`listModels`).
- *
- * @stability experimental
- */
-export interface AiDiscoveredModel {
-    /** The provider's model id. */
-    id: string;
-    /** The owner the provider reports. */
-    ownedBy?: string;
-    /** When the provider says the model was published. */
-    createdAt?: Date;
-    /** Optional listing metadata the adapter's `classifyModel` may use (#447). */
-    metadata?: AiDiscoveredModelMetadata;
-}
-/**
- * The outcome of `verifyKey`. A rejected key is an ordinary answer
- * (`ok: false, code: 'AI_KEY_INVALID'`), not an exception — the admin UI asks
- * this question precisely when it expects "no" to be possible.
- *
- * @stability experimental
- */
-export interface AiKeyVerification {
-    /** Whether the provider accepted the key. */
-    ok: boolean;
-    /** Why not (`AI_KEY_INVALID`, `AI_PROVIDER_UNAVAILABLE`, ...). */
-    code?: AiErrorCode;
-    /** A message safe to show (never the key). */
-    detail?: string;
-}
-/**
- * The responses port a provider adapter implements (`responses` and the
- * capabilities riding on it).
- *
- * @stability experimental
- */
-export interface AiResponsesPort {
-    /**
-     * One complete response.
-     *
-     * @param req - the request.
-     * @param ctx - the call's key and signal.
-     */
-    create(req: AiResponseRequest, ctx: AiCallContext): Promise<AiResponse>;
-    /**
-     * One streamed response (see `AiStreamEvent` for the well-formedness rules).
-     *
-     * @param req - the request.
-     * @param ctx - the call's key and signal.
-     */
-    stream(req: AiResponseRequest, ctx: AiCallContext): AsyncIterable<AiStreamEvent>;
-}
-/**
- * A provider adapter: the one place a provider SDK is called
- * (`ai/providers/<provider>/`). It holds no key; every call receives one in
- * its {@link AiCallContext}. Its capability ports' presence is the
- * declaration of what it can do. Adding one: docs/specs/ai-platform.md §4.
- *
- * @stability experimental
- */
-export interface AiProviderAdapter {
-    /** Stable identifier (`'openai'`). PERMANENT — stored in settings, catalog rows and usage rows. */
-    readonly id: string;
-    /** The name the admin UI shows. */
-    readonly displayName: string;
-    /**
-     * The provider's model listing, under the deployment's (or a probe's) key.
-     *
-     * @param ctx - the call's key and signal.
-     */
-    listModels(ctx: AiCallContext): Promise<AiDiscoveredModel[]>;
-    /**
-     * Whether the key in `ctx` works. A rejected key is an answer, not a throw.
-     *
-     * @param ctx - the call's key and signal.
-     */
-    verifyKey(ctx: AiCallContext): Promise<AiKeyVerification>;
-    /**
-     * `null` means "unclassified": the catalog stores it and an admin decides.
-     *
-     * `metadata` (#447) is what this adapter's own `listModels` reported for
-     * the id, passed back by the catalog sync so a classifier can ENRICH its
-     * rule table from provider facts (token limits, supported methods). It is
-     * absent everywhere else — a request-time lookup, a test, an adapter whose
-     * listing carries ids only — so a classifier must answer from the id alone
-     * when it is missing, and an adapter that ignores it stays correct.
-     */
-    classifyModel(modelId: string, metadata?: AiDiscoveredModelMetadata): AiModelCapabilities | null;
-    /**
-     * How this adapter wants storage-object image/file inputs delivered (#441).
-     * Presence is the declaration that it accepts them at all; absent, a
-     * request carrying one is refused with `AI_CAPABILITY_UNSUPPORTED`.
-     */
-    readonly fileInputStrategy?: AiFileInputStrategies;
-    /**
-     * Whether this provider stores responses, so a request may chain onto one
-     * with `AiResponseRequest.previousResponseId` (#446). ABSENT MEANS `true` —
-     * the Responses-shaped default, and what every adapter written before this
-     * flag (OpenAI, the fake provider) already does.
-     *
-     * A stateless provider (Anthropic's Messages API) declares `false`, and the
-     * runtime then:
-     *   - refuses a caller-supplied `previousResponseId` with
-     *     `AI_CAPABILITY_UNSUPPORTED` before any key is resolved (the caller
-     *     must send the conversation as `input` instead);
-     *   - runs the tool loop by RESENDING THE FULL HISTORY each round — the
-     *     original input, the model's own `message`/`reasoning`/`function_call`
-     *     items, and the tool outputs — instead of chaining.
-     *
-     * Unlike a capability port this is a behaviour flag, not a capability: the
-     * conversation still works, it just travels differently.
-     */
-    readonly supportsPreviousResponseId?: boolean;
-    /**
-     * Whether this provider executes the neutral hosted tools (#442: web
-     * search, file search, code interpreter, image generation, MCP) inside a
-     * response. ABSENT MEANS `true` — the pre-flag derivation, and what OpenAI
-     * and the fake provider rely on.
-     *
-     * Why a flag and not a port: hosted tools run INSIDE the `responses` port,
-     * so there is no separate port whose presence could declare them, and
-     * `hosted_tools` used to be derived from the `responses` port alone. A
-     * provider with a responses port but none of these tools (Anthropic, whose
-     * server tools are a different, unmapped set) declares `false`, so
-     * `AiProviderRegistry.supports(id, 'hosted_tools')` — and the admin view's
-     * `supportedCapabilities`, and the usable-models gate — stop claiming a
-     * capability the adapter's mapper would refuse.
-     */
-    readonly supportsHostedTools?: boolean;
-    /**
-     * The endpoint this adapter calls when the provider's settings slot carries
-     * no `baseUrl` (#773): the SDK default it passes to its client factory.
-     * Absent for a provider that has no default (Azure OpenAI and
-     * OpenAI-compatible need an administrator's endpoint). Read by the egress
-     * inventory (`network.egress`) to name the host a provider reaches, without
-     * a hard-coded table outside `ai/providers/`. Never a secret.
-     */
-    readonly defaultBaseUrl?: string;
-    /** Text, reasoning, tools, structured output, streaming, vision and file input. */
-    readonly responses?: AiResponsesPort;
-    /** Image generation (and editing, when `edit` is present). */
-    readonly images?: AiImagesPort;
-    /** Transcription and/or speech. */
-    readonly audio?: AiAudioPort;
-    /** Embeddings. */
-    readonly embeddings?: AiEmbeddingsPort;
-    /** Realtime voice sessions. */
-    readonly realtime?: AiRealtimePort;
-    /**
-     * Custom operations, by operation id (PP-14.17, #935): the way a provider
-     * serves a kind of call the platform has no built-in port for (diarization,
-     * moderation, rerank, OCR). Each key is an id registered with
-     * `registerAiOperation`; `AiService.forUser(...).run(id, input)` runs it
-     * through the same gate pipeline as a built-in port. Presence is the
-     * declaration, as with the ports: the registry derives that the provider
-     * supports the operation's capability from the entry, and a registered
-     * operation the adapter does not implement is refused for it.
-     */
-    readonly operations?: Readonly<Record<string, AiOperationHandler>>;
-}
+import './ai-error';
+export { AI_KEYLESS_API_KEY, } from '@marinoscar/platform-ai-providers';
+export type { AiCallContext, AiDiscoveredModel, AiDiscoveredModelMetadata, AiKeyVerification, AiOperationContext, AiOperationHandler, AiProviderAdapter, AiResponsesPort, } from '@marinoscar/platform-ai-providers';
 //# sourceMappingURL=provider-adapter.interface.d.ts.map

package/dist/ai/core/provider-adapter.interface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"provider-adapter.interface.d.ts","sourceRoot":"","sources":["../../../src/ai/core/provider-adapter.interface.ts"],"names":[],"mappings":"AAoBA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,YAAY,CAAC;AAC9C,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,KAAK,EAAE,qBAAqB,EAAE,uBAAuB,EAAE,MAAM,2BAA2B,CAAC;AAChG,OAAO,KAAK,EACV,WAAW,EACX,gBAAgB,EAChB,YAAY,EACZ,cAAc,EACf,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,UAAU,EAAE,iBAAiB,EAAE,aAAa,EAAE,MAAM,yBAAyB,CAAC;AAE5F;;;;;;;;GAQG;AACH,eAAO,MAAM,kBAAkB,eAAe,CAAC;AAE/C;;;;;;;;;GASG;AACH,MAAM,WAAW,aAAa;IAC5B,6FAA6F;IAC7F,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;;;OAMG;IACH,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IACrD,gCAAgC;IAChC,MAAM,CAAC,EAAE,WAAW,CAAC;IACrB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,aAAa,CAAC,EAAE,uBAAuB,CAAC;CACzC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,kBAAmB,SAAQ,aAAa;IACvD,2GAA2G;IAC3G,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,oDAAoD;IACpD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,kBAAkB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;AAE/F;;;;;;;;;;GAUG;AACH,MAAM,WAAW,yBAAyB;IACxC,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,iEAAiE;IACjE,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,mEAAmE;IACnE,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,qGAAqG;IACrG,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,uEAAuE;IACvE,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,MAAM,WAAW,iBAAiB;IAChC,+BAA+B;IAC/B,EAAE,EAAE,MAAM,CAAC;IACX,sCAAsC;IACtC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,sDAAsD;IACtD,SAAS,CAAC,EAAE,IAAI,CAAC;IACjB,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,yBAAyB,CAAC;CACtC;AAED;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,6CAA6C;IAC7C,EAAE,EAAE,OAAO,CAAC;IACZ,kEAAkE;IAClE,IAAI,CAAC,EAAE,WAAW,CAAC;IACnB,8CAA8C;IAC9C,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB;AAED;;;;;GAKG;AACH,MAAM,WAAW,eAAe;IAC9B;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,UAAU,CAAC,CAAC;IACxE;;;;;OAKG;IACH,MAAM,CAAC,GAAG,EAAE,iBAAiB,EAAE,GAAG,EAAE,aAAa,GAAG,aAAa,CAAC,aAAa,CAAC,CAAC;CAClF;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,iBAAiB;IAChC,mGAAmG;IACnG,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,mCAAmC;IACnC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAE7B;;;;OAIG;IACH,UAAU,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAAC;IAC7D;;;;OAIG;IACH,SAAS,CAAC,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC1D;;;;;;;;;OASG;IACH,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,yBAAyB,GAAG,mBAAmB,GAAG,IAAI,CAAC;IAEjG;;;;OAIG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,qBAAqB,CAAC;IAEnD;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,CAAC,0BAA0B,CAAC,EAAE,OAAO,CAAC;IAE9C;;;;;;;;;;;;;;OAcG;IACH,QAAQ,CAAC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAEvC;;;;;;;OAOG;IACH,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IAGjC,mFAAmF;IACnF,QAAQ,CAAC,SAAS,CAAC,EAAE,eAAe,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,MAAM,CAAC,EAAE,YAAY,CAAC;IAC/B,mCAAmC;IACnC,QAAQ,CAAC,KAAK,CAAC,EAAE,WAAW,CAAC;IAC7B,kBAAkB;IAClB,QAAQ,CAAC,UAAU,CAAC,EAAE,gBAAgB,CAAC;IACvC,+BAA+B;IAC/B,QAAQ,CAAC,QAAQ,CAAC,EAAE,cAAc,CAAC;IACnC;;;;;;;;;OASG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC,CAAC;CACpE"}
+{"version":3,"file":"provider-adapter.interface.d.ts","sourceRoot":"","sources":["../../../src/ai/core/provider-adapter.interface.ts"],"names":[],"mappings":"AAKA,OAAO,YAAY,CAAC;AAEpB,OAAO,EACL,kBAAkB,GACnB,MAAM,mCAAmC,CAAC;AAE3C,YAAY,EACV,aAAa,EACb,iBAAiB,EACjB,yBAAyB,EACzB,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,iBAAiB,EACjB,eAAe,GAChB,MAAM,mCAAmC,CAAC"}

package/dist/ai/core/provider-adapter.interface.js

@@ -1,33 +1,11 @@
 "use strict";
-// =============================================================================
-// AI provider adapter contract (issue #424, epic #419)
-// =============================================================================
-//
-// One class per provider implements this and self-registers with
-// `AiProviderRegistry` from its own `onModuleInit()` — the same explicit
-// registration `JobHandler` uses (see `jobs/job-handler.registry.ts` for why
-// explicit registration beats decorator discovery).
-//
-// CAPABILITY PORTS: PRESENCE IS THE DECLARATION. An adapter that can generate
-// images carries an `images` port; one that cannot leaves it `undefined`.
-// There is no `supportsImages: boolean` to disagree with the code — the same
-// idiom as `JobHandler.nodeResultSchema` + `persistNodeResult`.
-// `AiProviderRegistry.supports()` is the derivation.
-//
-// NO SDK TYPE CROSSES THIS BOUNDARY. Every method takes and returns the
-// neutral types in `./types`, and every failure is an `AiError` — an adapter
-// that lets a raw SDK error escape fails the conformance kit.
-// =============================================================================
+// Moved to `@marinoscar/platform-ai-providers` (#991) so the AI provider
+// adapters and their core types run without Nest. This path re-exports the
+// names it always exported, unchanged, so platform imports keep working.
+// The side-effect import runs the `AiError` integration (ai-error.ts) first.
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.AI_KEYLESS_API_KEY = void 0;
-/**
- * The `apiKey` a call carries when its provider needs none (#448): an
- * OpenAI-compatible server the administrator marked `requiresKey: false`.
- * The key resolver returns it with `keySource: 'none'`, and an adapter that
- * sees it sends NO credential at all — it is a marker, never put on the wire,
- * in a log line or in a row.
- *
- * @stability experimental
- */
-exports.AI_KEYLESS_API_KEY = 'not-needed';
+require("./ai-error");
+var platform_ai_providers_1 = require("@marinoscar/platform-ai-providers");
+Object.defineProperty(exports, "AI_KEYLESS_API_KEY", { enumerable: true, get: function () { return platform_ai_providers_1.AI_KEYLESS_API_KEY; } });
 //# sourceMappingURL=provider-adapter.interface.js.map

package/dist/ai/core/provider-adapter.interface.js.map

@@ -1 +1 @@
-{"version":3,"file":"provider-adapter.interface.js","sourceRoot":"","sources":["../../../src/ai/core/provider-adapter.interface.ts"],"names":[],"mappings":";AAAA,gFAAgF;AAChF,uDAAuD;AACvD,gFAAgF;AAChF,EAAE;AACF,iEAAiE;AACjE,yEAAyE;AACzE,6EAA6E;AAC7E,oDAAoD;AACpD,EAAE;AACF,8EAA8E;AAC9E,0EAA0E;AAC1E,6EAA6E;AAC7E,gEAAgE;AAChE,qDAAqD;AACrD,EAAE;AACF,wEAAwE;AACxE,6EAA6E;AAC7E,8DAA8D;AAC9D,gFAAgF;;;AAahF;;;;;;;;GAQG;AACU,QAAA,kBAAkB,GAAG,YAAY,CAAC"}
+{"version":3,"file":"provider-adapter.interface.js","sourceRoot":"","sources":["../../../src/ai/core/provider-adapter.interface.ts"],"names":[],"mappings":";AAAA,yEAAyE;AACzE,2EAA2E;AAC3E,yEAAyE;AACzE,6EAA6E;;;AAE7E,sBAAoB;AAEpB,2EAE2C;AADzC,2HAAA,kBAAkB,OAAA"}