@mcp-abap-adt/sap-aicore-embedder 26.0.0 → 28.0.0

package/README.md

@@ -17,10 +17,15 @@ npm install @mcp-abap-adt/sap-aicore-embedder
 
 ```typescript
 import { SapAiCoreEmbedder } from '@mcp-abap-adt/sap-aicore-embedder';
+import { serviceKeyCredential } from '@mcp-abap-adt/sap-aicore-auth';
+
+const { credential, apiBaseUrl } = serviceKeyCredential(process.env.AICORE_SERVICE_KEY!);
 
 const embedder = new SapAiCoreEmbedder({
   model: 'text-embedding-3-small',
   resourceGroup: 'default', // optional
+  credential,
+  apiBaseUrl,
 });
 
 // Embed a single text
@@ -39,22 +44,31 @@ interface SapAiCoreEmbedderConfig {
   model: string;
   resourceGroup?: string;                             // default: 'default'
   scenario?: 'foundation-models' | 'orchestration';   // default: 'orchestration'
-  credentials?: FoundationModelsCredentials;          // foundation-models only; falls back to AICORE_SERVICE_KEY
+  credential: IBearerCredential;                       // required, both scenarios — resolved fresh per call
+  apiBaseUrl: string;                                  // required, both scenarios
 }
 ```
 
+`credential` and `apiBaseUrl` are required for both scenarios and are never
+read from the environment inside this package. Build them from a raw SAP AI
+Core service key with `serviceKeyCredential` from `@mcp-abap-adt/sap-aicore-auth`
+— see [Authentication](#authentication) below. `IBearerCredential` comes from
+`@mcp-abap-adt/interfaces-auth`.
+
 ### Orchestration (default)
 
-The default scenario — matches v11.0.0 behavior. Use this when the embedding model is deployed under the `orchestration` scenario. Authentication is handled automatically by the SAP AI SDK orchestration client using `AICORE_SERVICE_KEY`.
+The default scenario — matches v11.0.0 behavior. Use this when the embedding model is deployed under the `orchestration` scenario.
 
 ```ts
 import { SapAiCoreEmbedder } from '@mcp-abap-adt/sap-aicore-embedder';
+import { serviceKeyCredential } from '@mcp-abap-adt/sap-aicore-auth';
 
-const embedder = new SapAiCoreEmbedder({ model: 'text-embedding-3-small' });
+const embedder = new SapAiCoreEmbedder({
+  model: 'text-embedding-3-small',
+  ...serviceKeyCredential(process.env.AICORE_SERVICE_KEY!),
+});
 ```
 
-Existing v11.0.0 consumers require no config changes.
-
 ### Foundation-models
 
 Opt-in path for tenants where embedding models (such as `gemini-embedding` or `text-embedding-3-small`) are deployed under the `foundation-models` scenario rather than the orchestration scenario. The embedder calls the AI Core REST inference API directly.
@@ -63,8 +77,8 @@ Opt-in path for tenants where embedding models (such as `gemini-embedding` or `t
 const embedder = new SapAiCoreEmbedder({
   model: 'gemini-embedding',
   scenario: 'foundation-models',
+  ...serviceKeyCredential(process.env.AICORE_SERVICE_KEY!),
 });
-// Auth: process.env.AICORE_SERVICE_KEY (client_credentials flow)
 ```
 
 #### Batch size cap
@@ -81,9 +95,21 @@ quota is stricter than the model's documented limit.
 
 ## Authentication
 
-For the `orchestration` scenario (default), authentication is handled automatically by the SAP AI SDK orchestration client using `AICORE_SERVICE_KEY`.
+Neither scenario reads an environment variable inside this package — the
+caller resolves the credential and passes it in. `serviceKeyCredential(raw)`
+(`@mcp-abap-adt/sap-aicore-auth`) turns a raw SAP AI Core service-key JSON
+string into the `{ credential, apiBaseUrl }` pair both scenarios need:
+
+```ts
+import { serviceKeyCredential } from '@mcp-abap-adt/sap-aicore-auth';
+
+const { credential, apiBaseUrl } = serviceKeyCredential(process.env.AICORE_SERVICE_KEY!);
+```
 
-For the `foundation-models` scenario, authentication uses the `AICORE_SERVICE_KEY` environment variable directly (client credentials flow). You can also pass credentials explicitly via the `credentials` option.
+`credential.token()` is asked fresh on every `embed()`/`embedBatch()` call —
+never cached on the embedder instance — so a rotating token keeps rotating.
+Reading `AICORE_SERVICE_KEY` (or any other environment variable) is the
+composition root's job, not this package's.
 
 ## License
 

package/dist/foundation-embedder.d.ts

@@ -1,16 +1,21 @@
+import type { IBearerCredential } from '@mcp-abap-adt/interfaces-auth';
 import type { IEmbedderBatch, IEmbedResult } from '@mcp-abap-adt/llm-agent';
 import { type CallOptions } from '@mcp-abap-adt/llm-agent';
-export interface FoundationModelsCredentials {
-    clientId: string;
-    clientSecret: string;
-    tokenUrl: string;
-    apiBaseUrl: string;
-}
 export interface FoundationModelsEmbedderConfig {
     model: string;
     resourceGroup?: string;
-    /** Explicit credentials. When omitted, `AICORE_SERVICE_KEY` env var is parsed. */
-    credentials?: FoundationModelsCredentials;
+    /**
+     * The bearer credential presented to SAP AI Core. Asked for fresh on every
+     * `embed()`/`embedBatch()` call — never cached here, so a rotating token
+     * keeps rotating. Build one from a service key with `serviceKeyCredential`
+     * (`@mcp-abap-adt/sap-aicore-auth`).
+     */
+    credential: IBearerCredential;
+    /**
+     * SAP AI Core REST inference base URL. Not part of the credential
+     * (§4.6.3) — its own field, the name `parseServiceKey` returns.
+     */
+    apiBaseUrl: string;
     /**
      * Azure OpenAI api-version query parameter for OpenAI-family deployments.
      * Default: '2023-05-15'. Ignored for Gemini-family models.
@@ -23,7 +28,7 @@ export declare class FoundationModelsEmbedder implements IEmbedderBatch {
     private readonly azureApiVersion;
     private readonly resourceGroup;
     private readonly apiBaseUrl;
-    private readonly tokenProvider;
+    private readonly credential;
     private deploymentIdPromise;
     /**
      * Provider batch cap, set only for families with a confirmed limit — see
@@ -39,6 +44,5 @@ export declare class FoundationModelsEmbedder implements IEmbedderBatch {
     embedBatch(texts: string[], _options?: CallOptions): Promise<IEmbedResult[]>;
     private requestEmbeddings;
     private getDeploymentId;
-    private loadCredentialsFromEnv;
 }
 //# sourceMappingURL=foundation-embedder.d.ts.map

package/dist/foundation-embedder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"foundation-embedder.d.ts","sourceRoot":"","sources":["../src/foundation-embedder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,yBAAyB,CAAC;AAMrE,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,kFAAkF;IAClF,WAAW,CAAC,EAAE,2BAA2B,CAAC;IAC1C;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAiBD,qBAAa,wBAAyB,YAAW,cAAc;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAgB;IAC9C,OAAO,CAAC,mBAAmB,CAAgC;IAE3D;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAEnB,MAAM,EAAE,8BAA8B;IAe5C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAQlE,UAAU,CACd,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,YAAY,EAAE,CAAC;YAUZ,iBAAiB;IAoD/B,OAAO,CAAC,eAAe;IAevB,OAAO,CAAC,sBAAsB;CAS/B"}
+{"version":3,"file":"foundation-embedder.d.ts","sourceRoot":"","sources":["../src/foundation-embedder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,yBAAyB,CAAC;AAIrE,MAAM,WAAW,8BAA8B;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,UAAU,EAAE,iBAAiB,CAAC;IAC9B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC;CAC1B;AAiBD,qBAAa,wBAAyB,YAAW,cAAc;IAC7D,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;IACzC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAS;IACvC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;IAC/C,OAAO,CAAC,mBAAmB,CAAgC;IAE3D;;;;;;;OAOG;IACH,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;gBAEnB,MAAM,EAAE,8BAA8B;IAU5C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAQlE,UAAU,CACd,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,YAAY,EAAE,CAAC;YAUZ,iBAAiB;IAuD/B,OAAO,CAAC,eAAe;CAcxB"}

package/dist/foundation-embedder.js

@@ -1,15 +1,13 @@
 import { RagError } from '@mcp-abap-adt/llm-agent';
-import { TokenProvider } from './auth.js';
 import { decodeEmbedding } from './decode-embedding.js';
 import { resolveDeploymentId } from './deployments.js';
-import { parseServiceKey } from './service-key.js';
 export class FoundationModelsEmbedder {
     model;
     family;
     azureApiVersion;
     resourceGroup;
     apiBaseUrl;
-    tokenProvider;
+    credential;
     deploymentIdPromise = null;
     /**
      * Provider batch cap, set only for families with a confirmed limit — see
@@ -21,17 +19,12 @@ export class FoundationModelsEmbedder {
      */
     maxBatchSize;
     constructor(config) {
-        const creds = config.credentials ?? this.loadCredentialsFromEnv();
         this.model = config.model;
         this.family = detectFamily(config.model);
         this.azureApiVersion = config.azureApiVersion ?? '2023-05-15';
         this.resourceGroup = config.resourceGroup ?? 'default';
-        this.apiBaseUrl = creds.apiBaseUrl;
-        this.tokenProvider = new TokenProvider({
-            clientId: creds.clientId,
-            clientSecret: creds.clientSecret,
-            tokenUrl: creds.tokenUrl,
-        });
+        this.apiBaseUrl = config.apiBaseUrl;
+        this.credential = config.credential;
         if (this.family === 'gemini')
             this.maxBatchSize = 250;
     }
@@ -53,7 +46,10 @@ export class FoundationModelsEmbedder {
         return sorted.map((item) => ({ vector: decodeEmbedding(item.embedding) }));
     }
     async requestEmbeddings(input) {
-        const token = await this.tokenProvider.getToken();
+        // Asked fresh on every request — never cached on the instance — so a
+        // rotating credential (client-credentials exchange, Entra ID, ...) keeps
+        // rotating rather than being frozen at construction time.
+        const token = await this.credential.token();
         const deploymentId = await this.getDeploymentId(token);
         const base = `${this.apiBaseUrl}/v2/inference/deployments/${deploymentId}`;
         const headers = {
@@ -111,13 +107,6 @@ export class FoundationModelsEmbedder {
         }
         return this.deploymentIdPromise;
     }
-    loadCredentialsFromEnv() {
-        const raw = process.env.AICORE_SERVICE_KEY;
-        if (!raw) {
-            throw new Error('SapAiCoreEmbedder (foundation-models): no credentials provided and AICORE_SERVICE_KEY env var is not set');
-        }
-        return parseServiceKey(raw);
-    }
 }
 function detectFamily(model) {
     return /^gemini/i.test(model) ? 'gemini' : 'azure-openai';

package/dist/foundation-embedder.js.map

@@ -1 +1 @@
-{"version":3,"file":"foundation-embedder.js","sourceRoot":"","sources":["../src/foundation-embedder.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,aAAa,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAoCnD,MAAM,OAAO,wBAAwB;IAClB,KAAK,CAAS;IACd,MAAM,CAAc;IACpB,eAAe,CAAS;IACxB,aAAa,CAAS;IACtB,UAAU,CAAS;IACnB,aAAa,CAAgB;IACtC,mBAAmB,GAA2B,IAAI,CAAC;IAE3D;;;;;;;OAOG;IACM,YAAY,CAAU;IAE/B,YAAY,MAAsC;QAChD,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,IAAI,IAAI,CAAC,sBAAsB,EAAE,CAAC;QAClE,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,YAAY,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;QACnC,IAAI,CAAC,aAAa,GAAG,IAAI,aAAa,CAAC;YACrC,QAAQ,EAAE,KAAK,CAAC,QAAQ;YACxB,YAAY,EAAE,KAAK,CAAC,YAAY;YAChC,QAAQ,EAAE,KAAK,CAAC,QAAQ;SACzB,CAAC,CAAC;QACH,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,QAAsB;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAe,EACf,QAAsB;QAEtB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,KAAe;QAC7C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,aAAa,CAAC,QAAQ,EAAE,CAAC;QAClD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,6BAA6B,YAAY,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,mBAAmB,EAAE,IAAI,CAAC,aAAa;YACvC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,IAAI,WAAW,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACvE,MAAM,IAAI,GAAG;gBACX,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aACjD,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,MAAM,IAAI,QAAQ,CAChB,uCAAuC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAC9E,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7C,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,IAAI,EAAE;gBACrC,KAAK,EAAE,CAAC;aACT,CAAC,CAAC,CAAC;QACN,CAAC;QAED,eAAe;QACf,MAAM,GAAG,GAAG,GAAG,IAAI,2BAA2B,kBAAkB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,QAAQ,CAChB,uCAAuC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6B,CAAC;QAC5D,OAAO,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IACzB,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;gBAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK;gBACL,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACf,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBAChC,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;IAEO,sBAAsB;QAC5B,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;QAC3C,IAAI,CAAC,GAAG,EAAE,CAAC;YACT,MAAM,IAAI,KAAK,CACb,0GAA0G,CAC3G,CAAC;QACJ,CAAC;QACD,OAAO,eAAe,CAAC,GAAG,CAAC,CAAC;IAC9B,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;AAC5D,CAAC"}
+{"version":3,"file":"foundation-embedder.js","sourceRoot":"","sources":["../src/foundation-embedder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAuCvD,MAAM,OAAO,wBAAwB;IAClB,KAAK,CAAS;IACd,MAAM,CAAc;IACpB,eAAe,CAAS;IACxB,aAAa,CAAS;IACtB,UAAU,CAAS;IACnB,UAAU,CAAoB;IACvC,mBAAmB,GAA2B,IAAI,CAAC;IAE3D;;;;;;;OAOG;IACM,YAAY,CAAU;IAE/B,YAAY,MAAsC;QAChD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACzC,IAAI,CAAC,eAAe,GAAG,MAAM,CAAC,eAAe,IAAI,YAAY,CAAC;QAC9D,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,IAAI,SAAS,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ;YAAE,IAAI,CAAC,YAAY,GAAG,GAAG,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,QAAsB;QAC9C,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;QACnD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAe,EACf,QAAsB;QAEtB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC;QAClD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QAC5D,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IAC7E,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAAC,KAAe;QAC7C,qEAAqE;QACrE,yEAAyE;QACzE,0DAA0D;QAC1D,MAAM,KAAK,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC5C,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC;QACvD,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,UAAU,6BAA6B,YAAY,EAAE,CAAC;QAC3E,MAAM,OAAO,GAAG;YACd,aAAa,EAAE,UAAU,KAAK,EAAE;YAChC,mBAAmB,EAAE,IAAI,CAAC,aAAa;YACvC,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;QAEF,IAAI,IAAI,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC7B,MAAM,GAAG,GAAG,GAAG,IAAI,WAAW,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC;YACvE,MAAM,IAAI,GAAG;gBACX,SAAS,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;aACjD,CAAC;YACF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;gBAC3B,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;gBAC9C,MAAM,IAAI,QAAQ,CAChB,uCAAuC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAC9E,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA0B,CAAC;YACzD,OAAO,CAAC,IAAI,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7C,SAAS,EAAE,CAAC,CAAC,UAAU,EAAE,MAAM,IAAI,EAAE;gBACrC,KAAK,EAAE,CAAC;aACT,CAAC,CAAC,CAAC;QACN,CAAC;QAED,eAAe;QACf,MAAM,GAAG,GAAG,GAAG,IAAI,2BAA2B,kBAAkB,CAAC,IAAI,CAAC,eAAe,CAAC,EAAE,CAAC;QACzF,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,MAAM,EAAE,MAAM;YACd,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;SAC3B,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,QAAQ,CAChB,uCAAuC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAC9E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA6B,CAAC;QAC5D,OAAO,IAAI,CAAC,IAAI,IAAI,EAAE,CAAC;IACzB,CAAC;IAEO,eAAe,CAAC,KAAa;QACnC,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,CAAC;YAC9B,IAAI,CAAC,mBAAmB,GAAG,mBAAmB,CAAC;gBAC7C,UAAU,EAAE,IAAI,CAAC,UAAU;gBAC3B,KAAK;gBACL,aAAa,EAAE,IAAI,CAAC,aAAa;gBACjC,KAAK,EAAE,IAAI,CAAC,KAAK;aAClB,CAAC,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;gBACf,IAAI,CAAC,mBAAmB,GAAG,IAAI,CAAC;gBAChC,MAAM,GAAG,CAAC;YACZ,CAAC,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC,mBAAmB,CAAC;IAClC,CAAC;CACF;AAED,SAAS,YAAY,CAAC,KAAa;IACjC,OAAO,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC;AAC5D,CAAC"}

package/dist/index.d.ts

@@ -1,3 +1,3 @@
-export type { FoundationModelsCredentials, SapAiCoreEmbedderConfig, SapAiCoreEmbedderScenario, } from './sap-ai-core-embedder.js';
+export type { SapAiCoreEmbedderConfig, SapAiCoreEmbedderScenario, } from './sap-ai-core-embedder.js';
 export { SapAiCoreEmbedder } from './sap-ai-core-embedder.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAKA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAIA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC"}

package/dist/orchestration-embedder.d.ts

@@ -1,15 +1,46 @@
+import type { IBearerCredential } from '@mcp-abap-adt/interfaces-auth';
 import type { IEmbedderBatch, IEmbedResult } from '@mcp-abap-adt/llm-agent';
 import { type CallOptions } from '@mcp-abap-adt/llm-agent';
 export interface OrchestrationScenarioEmbedderConfig {
     model: string;
     resourceGroup?: string;
+    /**
+     * The bearer credential presented to SAP AI Core. Asked for fresh on every
+     * `embed()`/`embedBatch()` call via `buildDestination` — never cached here.
+     * Build one from a service key with `serviceKeyCredential`
+     * (`@mcp-abap-adt/sap-aicore-auth`).
+     */
+    credential: IBearerCredential;
+    /**
+     * SAP AI Core orchestration base URL. Not part of the credential
+     * (§4.6.3) — its own field, the name `parseServiceKey` returns.
+     */
+    apiBaseUrl: string;
+}
+/** The constructed-destination shape the SAP AI SDK documents. */
+export interface OrchestrationEmbedderDestination {
+    url: string;
+    authentication: 'NoAuthentication';
+    headers: Record<string, string>;
 }
 export declare class OrchestrationScenarioEmbedder implements IEmbedderBatch {
     private readonly model;
     private readonly resourceGroup?;
+    private readonly apiBaseUrl;
+    private readonly credential;
     constructor(config: OrchestrationScenarioEmbedderConfig);
     embed(text: string, _options?: CallOptions): Promise<IEmbedResult>;
     embedBatch(texts: string[], _options?: CallOptions): Promise<IEmbedResult[]>;
+    /**
+     * Create an OrchestrationEmbeddingClient for the given destination.
+     *
+     * `destination` is built by the caller via `buildDestination()`, per call —
+     * same split as `SapCoreAIProvider.createClient()` in `sap-aicore-llm`,
+     * deliberately: it lets a test spy on this method and observe the
+     * destination (and the credential's token behind it) that `embed()`/
+     * `embedBatch()` actually computed, the way `sap-core-ai-provider.test.ts`
+     * already does for the LLM provider.
+     */
     private createClient;
 }
 //# sourceMappingURL=orchestration-embedder.d.ts.map

package/dist/orchestration-embedder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"orchestration-embedder.d.ts","sourceRoot":"","sources":["../src/orchestration-embedder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,yBAAyB,CAAC;AAGrE,MAAM,WAAW,mCAAmC;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,qBAAa,6BAA8B,YAAW,cAAc;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;gBAE5B,MAAM,EAAE,mCAAmC;IAKjD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAUlE,UAAU,CACd,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,YAAY,EAAE,CAAC;YAYZ,YAAY;CAW3B"}
+{"version":3,"file":"orchestration-embedder.d.ts","sourceRoot":"","sources":["../src/orchestration-embedder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AAC5E,OAAO,EAAE,KAAK,WAAW,EAAY,MAAM,yBAAyB,CAAC;AAGrE,MAAM,WAAW,mCAAmC;IAClD,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;OAKG;IACH,UAAU,EAAE,iBAAiB,CAAC;IAC9B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,kEAAkE;AAClE,MAAM,WAAW,gCAAgC;IAC/C,GAAG,EAAE,MAAM,CAAC;IACZ,cAAc,EAAE,kBAAkB,CAAC;IACnC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAoBD,qBAAa,6BAA8B,YAAW,cAAc;IAClE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAS;IAC/B,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAS;IACxC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAS;IACpC,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAoB;gBAEnC,MAAM,EAAE,mCAAmC;IAOjD,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAclE,UAAU,CACd,KAAK,EAAE,MAAM,EAAE,EACf,QAAQ,CAAC,EAAE,WAAW,GACrB,OAAO,CAAC,YAAY,EAAE,CAAC;IAgB1B;;;;;;;;;OASG;YACW,YAAY;CAY3B"}

package/dist/orchestration-embedder.js

@@ -1,14 +1,36 @@
 import { RagError } from '@mcp-abap-adt/llm-agent';
 import { decodeEmbedding } from './decode-embedding.js';
+/**
+ * Build the constructed-destination the SDK documents. Called from
+ * `embed()`/`embedBatch()` — never at construction, never cached — so a
+ * later call re-asks the credential rather than reusing a token that may
+ * already be stale. Mirrors `sap-core-ai-provider.ts`'s `buildDestination`
+ * (not imported from there: this package does not depend on `sap-aicore-llm`).
+ */
+async function buildDestination(cfg) {
+    return {
+        url: cfg.apiBaseUrl,
+        authentication: 'NoAuthentication',
+        headers: { Authorization: `Bearer ${await cfg.credential.token()}` },
+    };
+}
 export class OrchestrationScenarioEmbedder {
     model;
     resourceGroup;
+    apiBaseUrl;
+    credential;
     constructor(config) {
         this.model = config.model;
         this.resourceGroup = config.resourceGroup;
+        this.apiBaseUrl = config.apiBaseUrl;
+        this.credential = config.credential;
     }
     async embed(text, _options) {
-        const client = await this.createClient();
+        const destination = await buildDestination({
+            apiBaseUrl: this.apiBaseUrl,
+            credential: this.credential,
+        });
+        const client = await this.createClient(destination);
         const response = await client.embed({ input: text });
         const embeddings = response.getEmbeddings();
         if (!embeddings || embeddings.length === 0) {
@@ -19,7 +41,11 @@ export class OrchestrationScenarioEmbedder {
     async embedBatch(texts, _options) {
         if (texts.length === 0)
             return [];
-        const client = await this.createClient();
+        const destination = await buildDestination({
+            apiBaseUrl: this.apiBaseUrl,
+            credential: this.credential,
+        });
+        const client = await this.createClient(destination);
         const response = await client.embed({ input: texts });
         const embeddings = response.getEmbeddings();
         if (!embeddings || embeddings.length === 0) {
@@ -28,11 +54,21 @@ export class OrchestrationScenarioEmbedder {
         const sorted = [...embeddings].sort((a, b) => a.index - b.index);
         return sorted.map((e) => ({ vector: decodeEmbedding(e.embedding) }));
     }
-    async createClient() {
+    /**
+     * Create an OrchestrationEmbeddingClient for the given destination.
+     *
+     * `destination` is built by the caller via `buildDestination()`, per call —
+     * same split as `SapCoreAIProvider.createClient()` in `sap-aicore-llm`,
+     * deliberately: it lets a test spy on this method and observe the
+     * destination (and the credential's token behind it) that `embed()`/
+     * `embedBatch()` actually computed, the way `sap-core-ai-provider.test.ts`
+     * already does for the LLM provider.
+     */
+    async createClient(destination) {
         const { OrchestrationEmbeddingClient } = await import('@sap-ai-sdk/orchestration');
         const modelName = this
             .model;
-        return new OrchestrationEmbeddingClient({ embeddings: { model: { name: modelName } } }, this.resourceGroup ? { resourceGroup: this.resourceGroup } : undefined);
+        return new OrchestrationEmbeddingClient({ embeddings: { model: { name: modelName } } }, this.resourceGroup ? { resourceGroup: this.resourceGroup } : undefined, destination);
     }
 }
 //# sourceMappingURL=orchestration-embedder.js.map

package/dist/orchestration-embedder.js.map

@@ -1 +1 @@
-{"version":3,"file":"orchestration-embedder.js","sourceRoot":"","sources":["../src/orchestration-embedder.ts"],"names":[],"mappings":"AACA,OAAO,EAAoB,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAOxD,MAAM,OAAO,6BAA6B;IACvB,KAAK,CAAS;IACd,aAAa,CAAU;IAExC,YAAY,MAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;IAC5C,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,QAAsB;QAC9C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAe,EACf,QAAsB;QAEtB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAEO,KAAK,CAAC,YAAY;QACxB,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CACnD,2BAA2B,CAC5B,CAAC;QACF,MAAM,SAAS,GAAG,IAAI;aACnB,KAAsE,CAAC;QAC1E,OAAO,IAAI,4BAA4B,CACrC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAC9C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,CACvE,CAAC;IACJ,CAAC;CACF"}
+{"version":3,"file":"orchestration-embedder.js","sourceRoot":"","sources":["../src/orchestration-embedder.ts"],"names":[],"mappings":"AAEA,OAAO,EAAoB,QAAQ,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AA0BxD;;;;;;GAMG;AACH,KAAK,UAAU,gBAAgB,CAAC,GAG/B;IACC,OAAO;QACL,GAAG,EAAE,GAAG,CAAC,UAAU;QACnB,cAAc,EAAE,kBAAkB;QAClC,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,GAAG,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,EAAE;KACrE,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,6BAA6B;IACvB,KAAK,CAAS;IACd,aAAa,CAAU;IACvB,UAAU,CAAS;IACnB,UAAU,CAAoB;IAE/C,YAAY,MAA2C;QACrD,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,aAAa,GAAG,MAAM,CAAC,aAAa,CAAC;QAC1C,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;QACpC,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC,UAAU,CAAC;IACtC,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAY,EAAE,QAAsB;QAC9C,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;QACrD,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,yCAAyC,CAAC,CAAC;QAChE,CAAC;QACD,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC;IAC9D,CAAC;IAED,KAAK,CAAC,UAAU,CACd,KAAe,EACf,QAAsB;QAEtB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QAClC,MAAM,WAAW,GAAG,MAAM,gBAAgB,CAAC;YACzC,UAAU,EAAE,IAAI,CAAC,UAAU;YAC3B,UAAU,EAAE,IAAI,CAAC,UAAU;SAC5B,CAAC,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,WAAW,CAAC,CAAC;QACpD,MAAM,QAAQ,GAAG,MAAM,MAAM,CAAC,KAAK,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;QACtD,MAAM,UAAU,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC;QAC5C,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC3C,MAAM,IAAI,QAAQ,CAAC,+CAA+C,CAAC,CAAC;QACtE,CAAC;QACD,MAAM,MAAM,GAAG,CAAC,GAAG,UAAU,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC;QACjE,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,CAAC;IACvE,CAAC;IAED;;;;;;;;;OASG;IACK,KAAK,CAAC,YAAY,CAAC,WAA6C;QACtE,MAAM,EAAE,4BAA4B,EAAE,GAAG,MAAM,MAAM,CACnD,2BAA2B,CAC5B,CAAC;QACF,MAAM,SAAS,GAAG,IAAI;aACnB,KAAsE,CAAC;QAC1E,OAAO,IAAI,4BAA4B,CACrC,EAAE,UAAU,EAAE,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,EAC9C,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,SAAS,EACtE,WAAW,CACZ,CAAC;IACJ,CAAC;CACF"}

package/dist/sap-ai-core-embedder.d.ts

@@ -1,5 +1,5 @@
+import type { IBearerCredential } from '@mcp-abap-adt/interfaces-auth';
 import type { CallOptions, IEmbedderBatch, IEmbedResult } from '@mcp-abap-adt/llm-agent';
-import { type FoundationModelsCredentials } from './foundation-embedder.js';
 export type SapAiCoreEmbedderScenario = 'foundation-models' | 'orchestration';
 export interface SapAiCoreEmbedderConfig {
     /** Embedding model name (e.g. 'text-embedding-3-small', 'gemini-embedding') */
@@ -17,13 +17,17 @@ export interface SapAiCoreEmbedderConfig {
      */
     scenario?: SapAiCoreEmbedderScenario;
     /**
-     * Explicit credentials for the `foundation-models` scenario.
-     * When omitted, `AICORE_SERVICE_KEY` env var is parsed instead.
-     * Ignored for `scenario: 'orchestration'` (the SAP SDK handles auth there).
+     * The bearer credential presented to SAP AI Core, for both scenarios.
+     * Resolved fresh per call by the backend — never cached here. Build one
+     * from a service key with `serviceKeyCredential` (`@mcp-abap-adt/sap-aicore-auth`).
      */
-    credentials?: FoundationModelsCredentials;
+    credential: IBearerCredential;
+    /**
+     * SAP AI Core base URL (orchestration or REST inference, depending on
+     * `scenario`). Not part of the credential (§4.6.3).
+     */
+    apiBaseUrl: string;
 }
-export type { FoundationModelsCredentials };
 export declare class SapAiCoreEmbedder implements IEmbedderBatch {
     private readonly backend;
     constructor(config: SapAiCoreEmbedderConfig);

package/dist/sap-ai-core-embedder.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sap-ai-core-embedder.d.ts","sourceRoot":"","sources":["../src/sap-ai-core-embedder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACb,MAAM,yBAAyB,CAAC;AACjC,OAAO,EACL,KAAK,2BAA2B,EAEjC,MAAM,0BAA0B,CAAC;AAGlC,MAAM,MAAM,yBAAyB,GAAG,mBAAmB,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC;;;;OAIG;IACH,WAAW,CAAC,EAAE,2BAA2B,CAAC;CAC3C;AAED,YAAY,EAAE,2BAA2B,EAAE,CAAC;AAE5C,qBAAa,iBAAkB,YAAW,cAAc;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;gBAE7B,MAAM,EAAE,uBAAuB;IAgB3C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAIjE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAG5E"}
+{"version":3,"file":"sap-ai-core-embedder.d.ts","sourceRoot":"","sources":["../src/sap-ai-core-embedder.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AACvE,OAAO,KAAK,EACV,WAAW,EACX,cAAc,EACd,YAAY,EACb,MAAM,yBAAyB,CAAC;AAIjC,MAAM,MAAM,yBAAyB,GAAG,mBAAmB,GAAG,eAAe,CAAC;AAE9E,MAAM,WAAW,uBAAuB;IACtC,+EAA+E;IAC/E,KAAK,EAAE,MAAM,CAAC;IACd,sDAAsD;IACtD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB;;;;;;;;OAQG;IACH,QAAQ,CAAC,EAAE,yBAAyB,CAAC;IACrC;;;;OAIG;IACH,UAAU,EAAE,iBAAiB,CAAC;IAC9B;;;OAGG;IACH,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,qBAAa,iBAAkB,YAAW,cAAc;IACtD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAiB;gBAE7B,MAAM,EAAE,uBAAuB;IAmB3C,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAIjE,UAAU,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC;CAG5E"}

package/dist/sap-ai-core-embedder.js

@@ -1,4 +1,4 @@
-import { FoundationModelsEmbedder, } from './foundation-embedder.js';
+import { FoundationModelsEmbedder } from './foundation-embedder.js';
 import { OrchestrationScenarioEmbedder } from './orchestration-embedder.js';
 export class SapAiCoreEmbedder {
     backend;
@@ -8,13 +8,16 @@ export class SapAiCoreEmbedder {
             this.backend = new OrchestrationScenarioEmbedder({
                 model: config.model,
                 resourceGroup: config.resourceGroup,
+                credential: config.credential,
+                apiBaseUrl: config.apiBaseUrl,
             });
         }
         else {
             this.backend = new FoundationModelsEmbedder({
                 model: config.model,
                 resourceGroup: config.resourceGroup,
-                credentials: config.credentials,
+                credential: config.credential,
+                apiBaseUrl: config.apiBaseUrl,
             });
         }
     }

package/dist/sap-ai-core-embedder.js.map

@@ -1 +1 @@
-{"version":3,"file":"sap-ai-core-embedder.js","sourceRoot":"","sources":["../src/sap-ai-core-embedder.ts"],"names":[],"mappings":"AAKA,OAAO,EAEL,wBAAwB,GACzB,MAAM,0BAA0B,CAAC;AAClC,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AA6B5E,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAiB;IAEzC,YAAY,MAA+B;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC;QACpD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,GAAG,IAAI,6BAA6B,CAAC;gBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,aAAa,EAAE,MAAM,CAAC,aAAa;aACpC,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;gBAC1C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,OAAqB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,UAAU,CAAC,KAAe,EAAE,OAAqB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;CACF"}
+{"version":3,"file":"sap-ai-core-embedder.js","sourceRoot":"","sources":["../src/sap-ai-core-embedder.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,6BAA6B,EAAE,MAAM,6BAA6B,CAAC;AAgC5E,MAAM,OAAO,iBAAiB;IACX,OAAO,CAAiB;IAEzC,YAAY,MAA+B;QACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,eAAe,CAAC;QACpD,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;YACjC,IAAI,CAAC,OAAO,GAAG,IAAI,6BAA6B,CAAC;gBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,OAAO,GAAG,IAAI,wBAAwB,CAAC;gBAC1C,KAAK,EAAE,MAAM,CAAC,KAAK;gBACnB,aAAa,EAAE,MAAM,CAAC,aAAa;gBACnC,UAAU,EAAE,MAAM,CAAC,UAAU;gBAC7B,UAAU,EAAE,MAAM,CAAC,UAAU;aAC9B,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAY,EAAE,OAAqB;QACvC,OAAO,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAC3C,CAAC;IAED,UAAU,CAAC,KAAe,EAAE,OAAqB;QAC/C,OAAO,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC;IACjD,CAAC;CACF"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mcp-abap-adt/sap-aicore-embedder",
-  "version": "26.0.0",
+  "version": "28.0.0",
   "description": "SAP AI Core embedding provider (IEmbedder) for @mcp-abap-adt/llm-agent.",
   "type": "module",
   "main": "dist/index.js",
@@ -24,8 +24,7 @@
     "test": "node --import tsx/esm --test --test-reporter=spec 'src/**/*.test.ts'"
   },
   "dependencies": {
-    "@mcp-abap-adt/llm-agent": "^26.0.0",
-    "@sap-ai-sdk/orchestration": "^2.15.0"
+    "@sap-ai-sdk/orchestration": "^2.16.0"
   },
   "license": "LGPL-3.0-only",
   "repository": {
@@ -34,5 +33,10 @@
   },
   "publishConfig": {
     "access": "public"
+  },
+  "peerDependencies": {
+    "@mcp-abap-adt/interfaces-auth": "^2.1.0",
+    "@mcp-abap-adt/llm-agent": "^28.0.0",
+    "@mcp-abap-adt/sap-aicore-auth": "^28.0.0"
   }
 }

package/dist/auth.d.ts

@@ -1,23 +0,0 @@
-export interface TokenProviderConfig {
-    clientId: string;
-    clientSecret: string;
-    tokenUrl: string;
-}
-export interface GetTokenOptions {
-    /**
-     * Skip the local expiry cache. Note: if another `getToken()` call is already
-     * fetching a token, this flag coalesces into that in-flight request rather
-     * than starting a second one.
-     */
-    forceRefresh?: boolean;
-}
-export declare class TokenProvider {
-    private readonly cfg;
-    private cachedToken;
-    private cachedExpiryMs;
-    private inFlight;
-    constructor(cfg: TokenProviderConfig);
-    getToken(options?: GetTokenOptions): Promise<string>;
-    private fetchToken;
-}
-//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,mBAAmB;IAClC,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,MAAM,WAAW,eAAe;IAC9B;;;;OAIG;IACH,YAAY,CAAC,EAAE,OAAO,CAAC;CACxB;AAKD,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAsB;IAC1C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,cAAc,CAAK;IAC3B,OAAO,CAAC,QAAQ,CAAgC;gBAEpC,GAAG,EAAE,mBAAmB;IAI9B,QAAQ,CAAC,OAAO,CAAC,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC;YAwB5C,UAAU;CA+BzB"}

package/dist/auth.js

@@ -1,56 +0,0 @@
-/** Refresh the token when less than this many ms remain on it. */
-const REFRESH_WINDOW_MS = 60_000;
-export class TokenProvider {
-    cfg;
-    cachedToken = null;
-    cachedExpiryMs = 0;
-    inFlight = null;
-    constructor(cfg) {
-        this.cfg = cfg;
-    }
-    async getToken(options) {
-        if (!options?.forceRefresh &&
-            this.cachedToken &&
-            Date.now() < this.cachedExpiryMs - REFRESH_WINDOW_MS) {
-            return this.cachedToken;
-        }
-        // Dedupe concurrent callers, including those with forceRefresh (see GetTokenOptions).
-        if (this.inFlight)
-            return this.inFlight;
-        this.inFlight = this.fetchToken()
-            .then((result) => {
-            this.cachedToken = result.token;
-            this.cachedExpiryMs = Date.now() + result.expiresInMs;
-            return result.token;
-        })
-            .finally(() => {
-            this.inFlight = null;
-        });
-        return this.inFlight;
-    }
-    async fetchToken() {
-        const basic = Buffer.from(`${this.cfg.clientId}:${this.cfg.clientSecret}`).toString('base64');
-        const res = await fetch(this.cfg.tokenUrl, {
-            method: 'POST',
-            headers: {
-                Authorization: `Basic ${basic}`,
-                'Content-Type': 'application/x-www-form-urlencoded',
-                Accept: 'application/json',
-            },
-            body: 'grant_type=client_credentials',
-        });
-        if (!res.ok) {
-            const text = await res.text().catch(() => '');
-            throw new Error(`SAP AI Core token request failed: ${res.status} ${res.statusText} ${text}`);
-        }
-        const body = (await res.json());
-        if (!body.access_token) {
-            throw new Error('SAP AI Core token response missing access_token');
-        }
-        return {
-            token: body.access_token,
-            expiresInMs: (body.expires_in ?? 3600) * 1000,
-        };
-    }
-}
-//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAeA,kEAAkE;AAClE,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAEjC,MAAM,OAAO,aAAa;IACP,GAAG,CAAsB;IAClC,WAAW,GAAkB,IAAI,CAAC;IAClC,cAAc,GAAG,CAAC,CAAC;IACnB,QAAQ,GAA2B,IAAI,CAAC;IAEhD,YAAY,GAAwB;QAClC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IACjB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,OAAyB;QACtC,IACE,CAAC,OAAO,EAAE,YAAY;YACtB,IAAI,CAAC,WAAW;YAChB,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,cAAc,GAAG,iBAAiB,EACpD,CAAC;YACD,OAAO,IAAI,CAAC,WAAW,CAAC;QAC1B,CAAC;QACD,sFAAsF;QACtF,IAAI,IAAI,CAAC,QAAQ;YAAE,OAAO,IAAI,CAAC,QAAQ,CAAC;QAExC,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC,UAAU,EAAE;aAC9B,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;YACf,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC;YAChC,IAAI,CAAC,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;YACtD,OAAO,MAAM,CAAC,KAAK,CAAC;QACtB,CAAC,CAAC;aACD,OAAO,CAAC,GAAG,EAAE;YACZ,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACvB,CAAC,CAAC,CAAC;QAEL,OAAO,IAAI,CAAC,QAAQ,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,UAAU;QACtB,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CACvB,GAAG,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,IAAI,CAAC,GAAG,CAAC,YAAY,EAAE,CAChD,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACrB,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE;YACzC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,aAAa,EAAE,SAAS,KAAK,EAAE;gBAC/B,cAAc,EAAE,mCAAmC;gBACnD,MAAM,EAAE,kBAAkB;aAC3B;YACD,IAAI,EAAE,+BAA+B;SACtC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CACb,qCAAqC,GAAG,CAAC,MAAM,IAAI,GAAG,CAAC,UAAU,IAAI,IAAI,EAAE,CAC5E,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAG7B,CAAC;QACF,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,iDAAiD,CAAC,CAAC;QACrE,CAAC;QACD,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,YAAY;YACxB,WAAW,EAAE,CAAC,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,GAAG,IAAI;SAC9C,CAAC;IACJ,CAAC;CACF"}

package/dist/service-key.d.ts

@@ -1,10 +0,0 @@
-export interface ParsedServiceKey {
-    clientId: string;
-    clientSecret: string;
-    /** Fully qualified token endpoint incl. `/oauth/token`. */
-    tokenUrl: string;
-    /** AI Core REST API base URL (no trailing slash). */
-    apiBaseUrl: string;
-}
-export declare function parseServiceKey(raw: string): ParsedServiceKey;
-//# sourceMappingURL=service-key.d.ts.map

package/dist/service-key.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-key.d.ts","sourceRoot":"","sources":["../src/service-key.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB,2DAA2D;IAC3D,QAAQ,EAAE,MAAM,CAAC;IACjB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;CACpB;AASD,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,gBAAgB,CAgC7D"}

package/dist/service-key.js

@@ -1,27 +0,0 @@
-export function parseServiceKey(raw) {
-    let obj;
-    try {
-        obj = JSON.parse(raw);
-    }
-    catch (err) {
-        throw new Error(`AICORE_SERVICE_KEY is not valid JSON: ${err.message}`);
-    }
-    const clientId = obj.clientid;
-    const clientSecret = obj.clientsecret;
-    const authUrl = obj.url;
-    const apiBaseUrl = obj.serviceurls?.AI_API_URL;
-    if (!clientId || !clientSecret || !authUrl || !apiBaseUrl) {
-        throw new Error('AICORE_SERVICE_KEY is missing required fields (clientid, clientsecret, url, serviceurls.AI_API_URL)');
-    }
-    const trimmedAuth = authUrl.replace(/\/+$/, '');
-    const tokenUrl = trimmedAuth.endsWith('/oauth/token')
-        ? trimmedAuth
-        : `${trimmedAuth}/oauth/token`;
-    return {
-        clientId,
-        clientSecret,
-        tokenUrl,
-        apiBaseUrl: apiBaseUrl.replace(/\/+$/, ''),
-    };
-}
-//# sourceMappingURL=service-key.js.map

package/dist/service-key.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"service-key.js","sourceRoot":"","sources":["../src/service-key.ts"],"names":[],"mappings":"AAgBA,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,GAAkB,CAAC;IACvB,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAkB,CAAC;IACzC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yCAA0C,GAAa,CAAC,OAAO,EAAE,CAClE,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,GAAG,CAAC,QAAQ,CAAC;IAC9B,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IACtC,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC;IACxB,MAAM,UAAU,GAAG,GAAG,CAAC,WAAW,EAAE,UAAU,CAAC;IAE/C,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAChD,MAAM,QAAQ,GAAG,WAAW,CAAC,QAAQ,CAAC,cAAc,CAAC;QACnD,CAAC,CAAC,WAAW;QACb,CAAC,CAAC,GAAG,WAAW,cAAc,CAAC;IAEjC,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,QAAQ;QACR,UAAU,EAAE,UAAU,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;KAC3C,CAAC;AACJ,CAAC"}