@node-llm/core 1.17.0 → 1.18.0

package/dist/providers/typesafe/SystemOne.js

@@ -0,0 +1,171 @@
+import { APIError, AuthenticationError, BadRequestError, InvalidModelError, NotFoundError, RateLimitError, ServerError, ServiceUnavailableError } from "../../errors/index.js";
+/**
+ * The System One protocol: one request carries the input as `state` and a map
+ * of typed questions; the response carries one typed answer per question.
+ *
+ * Wire names differ from ours in two places. A probability question is a
+ * `noul` ("not unlikely"), and its yes/no descriptions are keyed "true" and
+ * "false".
+ */
+const WIRE_TYPES = { probability: "noul", choice: "choice", score: "score" };
+const OUTCOME_KEYS = {
+    yes: "true",
+    true: "true",
+    no: "false",
+    false: "false"
+};
+const RESERVED = ["model", "state", "questions"];
+function renderQuestion(question) {
+    let criteria;
+    switch (question.type) {
+        case "probability":
+            criteria = question.criteria
+                ? Object.fromEntries(Object.entries(question.criteria).map(([key, value]) => [OUTCOME_KEYS[key], value]))
+                : undefined;
+            break;
+        case "choice":
+            criteria = question.options;
+            break;
+        case "score":
+            criteria = question.levels;
+            break;
+    }
+    const rendered = { type: WIRE_TYPES[question.type] };
+    if (question.instructions !== undefined && question.instructions !== null) {
+        rendered.instructions = question.instructions;
+    }
+    if (criteria !== undefined)
+        rendered.criteria = criteria;
+    return rendered;
+}
+export function renderJudgmentPayload(request) {
+    const options = request.providerOptions ?? {};
+    const reserved = Object.keys(options).filter((key) => RESERVED.includes(key));
+    if (reserved.length > 0) {
+        throw new Error(`Use the judgment arguments instead of providerOptions for ${reserved.join(", ")}`);
+    }
+    return {
+        model: request.model,
+        state: request.input,
+        questions: Object.fromEntries(request.questions.map((q) => [q.name, renderQuestion(q)])),
+        ...options
+    };
+}
+function malformed(detail) {
+    throw new Error(`System One returned an invalid judgment: ${detail}`);
+}
+function requireNumber(value, field) {
+    if (typeof value !== "number" || !Number.isFinite(value))
+        malformed(`${field} is not a number`);
+    return value;
+}
+function requireObject(value, field) {
+    if (!value || typeof value !== "object" || Array.isArray(value))
+        malformed(`${field} is missing`);
+    return value;
+}
+function parseAnswer(raw, question) {
+    const answer = requireObject(raw, `the answer to '${question.name}'`);
+    switch (question.type) {
+        case "probability":
+            return {
+                type: "probability",
+                probability: requireNumber(answer.noul, `${question.name}.noul`)
+            };
+        case "choice": {
+            const options = Object.keys(question.options);
+            const chosen = answer.choice;
+            if (typeof chosen !== "string" || !options.includes(chosen)) {
+                malformed(`'${question.name}' chose '${String(chosen)}', which is not one of its options`);
+            }
+            const wire = requireObject(answer.probabilities, `${question.name}.probabilities`);
+            const probabilities = Object.fromEntries(options.map((option) => [
+                option,
+                requireNumber(wire[option], `${question.name}.probabilities.${option}`)
+            ]));
+            return {
+                type: "choice",
+                choice: chosen,
+                probabilities,
+                confidence: requireNumber(answer.confidence, `${question.name}.confidence`)
+            };
+        }
+        case "score": {
+            // Levels go out as an array and come back keyed "0", "1", ... - map them
+            // back to numeric indexes so they line up with the declared levels.
+            const wire = requireObject(answer.probabilities, `${question.name}.probabilities`);
+            const probabilities = {};
+            question.levels.forEach((_, index) => {
+                probabilities[index] = requireNumber(wire[String(index)], `${question.name}.probabilities.${index}`);
+            });
+            return {
+                type: "score",
+                score: requireNumber(answer.score, `${question.name}.score`),
+                probabilities,
+                confidence: requireNumber(answer.confidence, `${question.name}.confidence`)
+            };
+        }
+    }
+}
+export function parseJudgmentResponse(json, questions) {
+    const body = requireObject(json, "the response body");
+    const answers = requireObject(body.answers, "answers");
+    const usage = (body.usage ?? {});
+    const input = typeof usage.input_tokens === "number" ? usage.input_tokens : 0;
+    const output = typeof usage.output_tokens === "number" ? usage.output_tokens : 0;
+    return {
+        model: typeof body.model === "string" ? body.model : "",
+        answers: Object.fromEntries(questions.map((question) => [question.name, parseAnswer(answers[question.name], question)])),
+        usage: { input_tokens: input, output_tokens: output, total_tokens: input + output },
+        raw: json
+    };
+}
+/**
+ * Turns an error response into the matching NodeLLM error. System One reports
+ * errors FastAPI-style: `detail` is a string, an object with a `message`, or a
+ * list of validation errors each with a location and message.
+ */
+export async function handleTypeSafeError(response, model) {
+    const status = response.status;
+    let body;
+    let message = `TypeSafe error (${status})`;
+    try {
+        body = await response.json();
+        const detail = body?.detail;
+        if (typeof detail === "string") {
+            message = detail;
+        }
+        else if (Array.isArray(detail)) {
+            message = detail
+                .map((item) => [Array.isArray(item.loc) ? item.loc.join(".") : "", item.msg ?? ""]
+                .filter(Boolean)
+                .join(": "))
+                .join("; ");
+        }
+        else if (detail && typeof detail === "object" && "message" in detail) {
+            message = String(detail.message);
+        }
+    }
+    catch {
+        body = await response.text().catch(() => "");
+    }
+    const provider = "typesafe";
+    if (status === 400 || status === 422)
+        throw new BadRequestError(message, body, provider, model);
+    if (status === 401 || status === 403)
+        throw new AuthenticationError(message, status, body, provider);
+    if (status === 404) {
+        if (message.toLowerCase().includes("model"))
+            throw new InvalidModelError(message, body, provider, model);
+        throw new NotFoundError(message, status, body, provider, model);
+    }
+    if (status === 429) {
+        const retryAfter = Number(response.headers?.get?.("retry-after"));
+        throw new RateLimitError(message, body, provider, model, Number.isFinite(retryAfter) && retryAfter > 0 ? retryAfter : undefined);
+    }
+    if (status === 503)
+        throw new ServiceUnavailableError(message, status, body, provider);
+    if (status >= 500)
+        throw new ServerError(message, status, body, provider);
+    throw new APIError(message, status, body, provider, model);
+}

package/dist/providers/typesafe/TypeSafeProvider.d.ts

@@ -0,0 +1,27 @@
+import { BaseProvider } from "../BaseProvider.js";
+import { ChatRequest, ChatResponse, JudgmentRequest, JudgmentResponse, ModelInfo } from "../Provider.js";
+export interface TypeSafeProviderOptions {
+    apiKey: string;
+    baseUrl?: string;
+}
+/**
+ * TypeSafe's System One models (Jev) answer typed questions with calibrated
+ * probabilities. They do not generate text, so this provider offers judgments
+ * and a model listing only; chat and every other operation are unsupported.
+ *
+ * Any server implementing the same System One API works by pointing
+ * `typesafeApiBase` at it.
+ */
+export declare class TypeSafeProvider extends BaseProvider {
+    private readonly options;
+    private readonly baseUrl;
+    constructor(options: TypeSafeProviderOptions);
+    apiBase(): string;
+    headers(): Record<string, string>;
+    protected providerName(): string;
+    defaultModel(feature?: string): string;
+    chat(_request: ChatRequest): Promise<ChatResponse>;
+    judge(request: JudgmentRequest): Promise<JudgmentResponse>;
+    listModels(): Promise<ModelInfo[]>;
+}
+//# sourceMappingURL=TypeSafeProvider.d.ts.map

package/dist/providers/typesafe/TypeSafeProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"TypeSafeProvider.d.ts","sourceRoot":"","sources":["../../../src/providers/typesafe/TypeSafeProvider.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EACL,WAAW,EACX,YAAY,EACZ,eAAe,EACf,gBAAgB,EAChB,SAAS,EACV,MAAM,gBAAgB,CAAC;AAMxB,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAiB,SAAQ,YAAY;IAGpC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAEJ,OAAO,EAAE,uBAAuB;IAM7D,OAAO,IAAI,MAAM;IAIjB,OAAO,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAOjC,SAAS,CAAC,YAAY,IAAI,MAAM;IAIhC,YAAY,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM;IAIhC,IAAI,CAAC,QAAQ,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,CAAC;IAIlD,KAAK,CAAC,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC;IAkB1D,UAAU,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;CA2BzC"}

package/dist/providers/typesafe/TypeSafeProvider.js

@@ -0,0 +1,76 @@
+import { BaseProvider } from "../BaseProvider.js";
+import { fetchWithTimeout } from "../../utils/fetch.js";
+import { logger } from "../../utils/logger.js";
+import { DEFAULT_MODELS, DEFAULT_TYPESAFE_BASE_URL } from "../../constants.js";
+import { handleTypeSafeError, parseJudgmentResponse, renderJudgmentPayload } from "./SystemOne.js";
+/**
+ * TypeSafe's System One models (Jev) answer typed questions with calibrated
+ * probabilities. They do not generate text, so this provider offers judgments
+ * and a model listing only; chat and every other operation are unsupported.
+ *
+ * Any server implementing the same System One API works by pointing
+ * `typesafeApiBase` at it.
+ */
+export class TypeSafeProvider extends BaseProvider {
+    options;
+    baseUrl;
+    constructor(options) {
+        super();
+        this.options = options;
+        this.baseUrl = (options.baseUrl || DEFAULT_TYPESAFE_BASE_URL).replace(/\/+$/, "");
+        this.capabilities = this.defaultCapabilities();
+    }
+    apiBase() {
+        return this.baseUrl;
+    }
+    headers() {
+        return {
+            Authorization: `Bearer ${this.options.apiKey}`,
+            "Content-Type": "application/json"
+        };
+    }
+    providerName() {
+        return "typesafe";
+    }
+    defaultModel(feature) {
+        return feature === undefined || feature === "judgment" ? DEFAULT_MODELS.JUDGMENT : "";
+    }
+    async chat(_request) {
+        this.throwUnsupportedError("chat (TypeSafe models answer judgments, not chat)");
+    }
+    async judge(request) {
+        const url = `${this.baseUrl}/v1/systemone`;
+        const body = renderJudgmentPayload(request);
+        logger.logRequest("TypeSafe", "POST", url, body);
+        const response = await fetchWithTimeout(url, { method: "POST", headers: this.headers(), body: JSON.stringify(body) }, request.requestTimeout);
+        if (!response.ok)
+            await handleTypeSafeError(response, request.model);
+        const json = await response.json();
+        logger.logResponse("TypeSafe", response.status, response.statusText, json);
+        return parseJudgmentResponse(json, request.questions);
+    }
+    async listModels() {
+        const response = await fetchWithTimeout(`${this.baseUrl}/v1/models`, {
+            method: "GET",
+            headers: this.headers()
+        });
+        if (!response.ok)
+            await handleTypeSafeError(response);
+        const json = (await response.json());
+        return (json.models ?? []).map((entry) => ({
+            id: entry.name,
+            name: entry.name,
+            provider: "typesafe",
+            family: "jev",
+            context_window: null,
+            max_output_tokens: null,
+            modalities: { input: ["text"], output: ["judgment"] },
+            capabilities: ["judgment"],
+            pricing: {},
+            metadata: {
+                ...(entry.description ? { description: entry.description } : {}),
+                ...(entry.release_date ? { created_at: entry.release_date } : {})
+            }
+        }));
+    }
+}

package/dist/providers/typesafe/index.d.ts

@@ -0,0 +1,4 @@
+export * from "./TypeSafeProvider.js";
+export declare function registerTypeSafeProvider(): void;
+export declare const ensureTypeSafeRegistered: typeof registerTypeSafeProvider;
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/typesafe/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/providers/typesafe/index.ts"],"names":[],"mappings":"AAIA,cAAc,uBAAuB,CAAC;AAItC,wBAAgB,wBAAwB,SAiBvC;AAED,eAAO,MAAM,wBAAwB,iCAA2B,CAAC"}

package/dist/providers/typesafe/index.js

@@ -0,0 +1,19 @@
+import { config as globalConfig } from "../../config.js";
+import { providerRegistry } from "../registry.js";
+import { TypeSafeProvider } from "./TypeSafeProvider.js";
+export * from "./TypeSafeProvider.js";
+let registered = false;
+export function registerTypeSafeProvider() {
+    if (registered)
+        return;
+    providerRegistry.register("typesafe", (config) => {
+        const cfg = config || globalConfig;
+        const apiKey = cfg.typesafeApiKey;
+        if (!apiKey) {
+            throw new Error("typesafeApiKey is not set in config or TYPESAFE_API_KEY environment variable");
+        }
+        return new TypeSafeProvider({ apiKey, baseUrl: cfg.typesafeApiBase });
+    });
+    registered = true;
+}
+export const ensureTypeSafeRegistered = registerTypeSafeProvider;

package/dist/types/Middleware.d.ts

@@ -53,6 +53,15 @@ export interface MiddlewareContext {
      * Options passed to the moderation request (Moderation only).
      */
     moderationOptions?: Record<string, unknown>;
+    /**
+     * Options for the judgment request (Judgment only).
+     */
+    judgmentOptions?: Record<string, unknown>;
+    /**
+     * The input a judgment is asked about (Judgment only). Text or JSON-compatible
+     * structured data. Mutating it in `onRequest` affects the actual call.
+     */
+    judgmentInput?: unknown;
     /**
      * Options passed to the image generation request (Paint only).
      */

package/dist/types/Middleware.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Middleware.d.ts","sourceRoot":"","sources":["../../src/types/Middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEtD;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,cAAc,GACd,aAAa,GACb,UAAU,GACV,SAAS,CAAC;AAEd;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IAErB;;;OAGG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE3C;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5C;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,IAAI,CAAC;AAEtE;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,kDAAkD;IAClD,QAAQ,EAAE,eAAe,CAAC;CAC3B,GACD,UAAU,GACV,MAAM,GACN,IAAI,CAAC;AAET;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,SAAS,CAAC,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElD;;;OAGG;IACH,UAAU,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAExF;;OAEG;IACH,OAAO,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE1E;;;OAGG;IACH,eAAe,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExE;;OAEG;IACH,aAAa,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvF;;;OAGG;IACH,eAAe,CAAC,CACd,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC"}
+{"version":3,"file":"Middleware.d.ts","sourceRoot":"","sources":["../../src/types/Middleware.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,oBAAoB,CAAC;AAC7C,OAAO,EAAE,WAAW,EAAE,MAAM,wBAAwB,CAAC;AACrD,OAAO,EAAE,kBAAkB,EAAE,MAAM,yBAAyB,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,iBAAiB,CAAC;AAC3C,OAAO,EAAE,cAAc,EAAE,MAAM,4BAA4B,CAAC;AAC5D,OAAO,EAAE,aAAa,EAAE,MAAM,mCAAmC,CAAC;AAClE,OAAO,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AACzD,OAAO,EAAE,SAAS,EAAE,MAAM,2BAA2B,CAAC;AAEtD;;GAEG;AACH,MAAM,MAAM,eAAe,GACvB,kBAAkB,GAClB,cAAc,GACd,aAAa,GACb,UAAU,GACV,SAAS,CAAC;AAEd;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IAChC;;OAEG;IACH,SAAS,EAAE,MAAM,CAAC;IAElB;;OAEG;IACH,QAAQ,EAAE,MAAM,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE,MAAM,CAAC;IAEd;;;OAGG;IACH,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC;IAErB;;;OAGG;IACH,OAAO,CAAC,EAAE,WAAW,CAAC;IAEtB;;OAEG;IACH,KAAK,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IAE1B;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE3C;;OAEG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE/C;;OAEG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE5C;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAE1C;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IAExB;;OAEG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAEvC;;;OAGG;IACH,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAChC;AAED;;GAEG;AACH,MAAM,MAAM,kBAAkB,GAAG,MAAM,GAAG,UAAU,GAAG,OAAO,GAAG,IAAI,CAAC;AAEtE;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GACxB;IACE,MAAM,EAAE,OAAO,CAAC;IAChB,kFAAkF;IAClF,OAAO,EAAE,MAAM,CAAC;CACjB,GACD;IACE,MAAM,EAAE,SAAS,CAAC;IAClB,kDAAkD;IAClD,QAAQ,EAAE,eAAe,CAAC;CAC3B,GACD,UAAU,GACV,MAAM,GACN,IAAI,CAAC;AAET;;GAEG;AACH,MAAM,WAAW,UAAU;IACzB;;OAEG;IACH,IAAI,EAAE,MAAM,CAAC;IAEb;;;OAGG;IACH,SAAS,CAAC,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAElD;;;OAGG;IACH,UAAU,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAExF;;OAEG;IACH,OAAO,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,KAAK,EAAE,KAAK,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAAC;IAE1E;;;OAGG;IACH,eAAe,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAExE;;OAEG;IACH,aAAa,CAAC,CAAC,GAAG,EAAE,iBAAiB,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAEvF;;;OAGG;IACH,eAAe,CAAC,CACd,GAAG,EAAE,iBAAiB,EACtB,IAAI,EAAE,QAAQ,EACd,KAAK,EAAE,KAAK,GACX,OAAO,CAAC,kBAAkB,CAAC,CAAC;CAChC"}

package/dist/utils/Binary.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"Binary.d.ts","sourceRoot":"","sources":["../../src/utils/Binary.ts"],"names":[],"mappings":"AAIA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,WAAW;IACtB;;OAEG;WACU,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IA0C9D;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAI7C;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAIjD,OAAO,CAAC,MAAM,CAAC,aAAa;CA0B7B"}
+{"version":3,"file":"Binary.d.ts","sourceRoot":"","sources":["../../src/utils/Binary.ts"],"names":[],"mappings":"AAOA,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,WAAW;IACtB;;OAEG;WACU,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC;IAmD9D;;OAEG;IACH,MAAM,CAAC,YAAY,CAAC,MAAM,EAAE,UAAU,GAAG,IAAI;IAI7C;;OAEG;IACH,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM;IAIjD,OAAO,CAAC,MAAM,CAAC,aAAa;CA0B7B"}

package/dist/utils/Binary.js

@@ -1,6 +1,8 @@
 import fs from "fs";
 import path from "path";
 import { logger } from "./logger.js";
+/** Max size (bytes) for a remotely-fetched binary, buffered fully into memory. */
+const MAX_REMOTE_BYTES = 50 * 1024 * 1024;
 export class BinaryUtils {
     /**
      * Converts a URL (data:, http:, or local path) to a base64 string and mime type.
@@ -20,7 +22,16 @@ export class BinaryUtils {
                 const response = await fetch(url);
                 if (!response.ok)
                     return null;
+                const declared = Number(response.headers.get("content-length"));
+                if (Number.isFinite(declared) && declared > MAX_REMOTE_BYTES) {
+                    logger.error(`Remote file exceeds ${MAX_REMOTE_BYTES}-byte limit: ${url}`);
+                    return null;
+                }
                 const buffer = await response.arrayBuffer();
+                if (buffer.byteLength > MAX_REMOTE_BYTES) {
+                    logger.error(`Remote file exceeds ${MAX_REMOTE_BYTES}-byte limit: ${url}`);
+                    return null;
+                }
                 const base64 = Buffer.from(buffer).toString("base64");
                 const mimeType = response.headers.get("content-type") || this.guessMimeType(url);
                 return {

package/dist/utils/FileLoader.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"FileLoader.d.ts","sourceRoot":"","sources":["../../src/utils/FileLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAgEjD,qBAAa,UAAU;WACR,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAmF1D"}
+{"version":3,"file":"FileLoader.d.ts","sourceRoot":"","sources":["../../src/utils/FileLoader.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAyFjD,qBAAa,UAAU;WACR,IAAI,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC;CAmF1D"}

package/dist/utils/FileLoader.js

@@ -1,5 +1,23 @@
 import { promises as fs } from "fs";
 import * as path from "path";
+/**
+ * Maximum size (bytes) for a remotely-fetched attachment. Caps memory use and
+ * limits the blast radius if an untrusted URL is ever passed here (the fetched
+ * body is buffered fully into memory as base64). 50 MB comfortably covers
+ * images, audio, and PDFs sent to providers.
+ */
+const MAX_REMOTE_BYTES = 50 * 1024 * 1024;
+async function readCapped(response, source) {
+    const declared = Number(response.headers.get("content-length"));
+    if (Number.isFinite(declared) && declared > MAX_REMOTE_BYTES) {
+        throw new Error(`Remote file ${source} is ${declared} bytes, exceeding the ${MAX_REMOTE_BYTES}-byte limit.`);
+    }
+    const buffer = await response.arrayBuffer();
+    if (buffer.byteLength > MAX_REMOTE_BYTES) {
+        throw new Error(`Remote file ${source} is ${buffer.byteLength} bytes, exceeding the ${MAX_REMOTE_BYTES}-byte limit.`);
+    }
+    return buffer;
+}
 const MIME_TYPES = {
     ".jpg": "image/jpeg",
     ".jpeg": "image/jpeg",
@@ -50,7 +68,8 @@ const TEXT_EXTENSIONS = new Set([
     ".xml",
     ".yml",
     ".yaml",
-    ".env",
+    // ".env" intentionally excluded: silently inlining a dotenv file would leak
+    // secrets into the prompt sent to the provider.
     ".csv",
     ".go",
     ".java",
@@ -67,7 +86,7 @@ export class FileLoader {
                 const response = await fetch(filePath);
                 if (!response.ok)
                     throw new Error(`Failed to fetch file: ${response.statusText}`);
-                const buffer = await response.arrayBuffer();
+                const buffer = await readCapped(response, filePath);
                 const contentTypeFull = response.headers.get("content-type") || "image/jpeg";
                 const contentType = (contentTypeFull.split(";")[0] ?? "image/jpeg").trim();
                 const base64 = Buffer.from(buffer).toString("base64");

package/dist/utils/logger.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAEA,cAAM,MAAM;IACV,OAAO,CAAC,cAAc;IAItB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAO5C;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAS/E;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IASvF,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI3B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IAI3C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAG5B;AAED,eAAO,MAAM,MAAM,QAAe,CAAC"}
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAUA,cAAM,MAAM;IACV,OAAO,CAAC,cAAc;IAItB,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAO5C;;OAEG;IACH,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IAS/E;;OAEG;IACH,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,OAAO,GAAG,IAAI;IASvF,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;IAI3B,KAAK,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,KAAK,GAAG,IAAI;IAI3C,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI;CAG5B;AAED,eAAO,MAAM,MAAM,QAAe,CAAC"}

package/dist/utils/logger.js

@@ -1,4 +1,11 @@
 import { config } from "../config.js";
+/**
+ * Masks credentials passed as URL query parameters (e.g. Gemini's `?key=...`)
+ * so they never reach stdout or a log aggregator when debug logging is on.
+ */
+function redactUrl(url) {
+    return url.replace(/([?&](?:key|api_key|apikey|access_token|token)=)[^&#]+/gi, "$1[REDACTED]");
+}
 class Logger {
     isDebugEnabled() {
         return config.debug === true;
@@ -14,7 +21,7 @@ class Logger {
      */
     logRequest(provider, method, url, body) {
         if (this.isDebugEnabled()) {
-            console.log(`[NodeLLM] [${provider}] Request: ${method} ${url}`);
+            console.log(`[NodeLLM] [${provider}] Request: ${method} ${redactUrl(url)}`);
             if (body) {
                 console.log(JSON.stringify(body, null, 2));
             }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@node-llm/core",
-  "version": "1.17.0",
+  "version": "1.18.0",
   "type": "module",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",