@omnicross/contracts 0.1.9 → 0.1.10

package/dist/audit-types.cjs

@@ -28,6 +28,7 @@ var DEFAULT_AUDIT_CONFIG = {
   captureBodies: false,
   maxBodyBytes: -1,
   retentionDays: 7,
+  compactStreamingBodies: false,
   trustForwardedFor: false
 };
 // Annotate the CommonJS export names for ESM import in node:

package/dist/audit-types.d.cts

@@ -28,6 +28,19 @@ interface AuditRecord {
     id: string;
     /** Epoch ms the request was captured. */
     ts: number;
+    /**
+     * Derived conversation-session key (a truncated SHA-256 digest — NEVER a raw
+     * client id or prompt). Groups the turns of one conversation so the body store
+     * can shard by session and delta-encode each turn against the previous one.
+     * Absent on a pre-upgrade record and whenever no key could be derived.
+     */
+    sessionKey?: string;
+    /**
+     * True when a body snapshot for this record exists in the session body store.
+     * The metadata line itself never carries the payload — fetch it through the
+     * authed body query.
+     */
+    hasBody?: boolean;
     /** Outbound key id (attribution) — NEVER the key secret/hash. Null when unauthenticated. */
     keyId?: string | null;
     /** Client IP (PII). Socket address by default; a trusted forwarded header only when configured. */
@@ -80,6 +93,13 @@ interface AuditConfig {
     maxBodyBytes: number;
     /** TTL retention in days; default 7, clamped `[1, 365]`. */
     retentionDays: number;
+    /**
+     * Collapse streaming text deltas in a captured response body into one contiguous
+     * block (default FALSE — the raw frame sequence is stored verbatim). Every
+     * NON-delta frame is kept either way, so `response.failed` / `error` / usage
+     * frames stay visible; only the per-token `*_delta` envelopes are merged.
+     */
+    compactStreamingBodies: boolean;
     /**
      * Trust the `X-Forwarded-For` header for the client IP (LEAD OQ1 anti-spoof).
      * Default FALSE — the socket remote address is authoritative. Only set true
@@ -94,6 +114,17 @@ declare const DEFAULT_AUDIT_CONFIG: AuditConfig;
 interface AuditQueryResult {
     records: AuditRecord[];
 }
+/**
+ * The reconstructed body pair for ONE audit record, returned by the authed body
+ * query. Bodies live in the per-session delta store rather than inline on the
+ * metadata line, so reading one is an explicit second call.
+ */
+interface AuditBodyResult {
+    /** Reconstructed request body, or absent when none was captured. */
+    requestBody?: string;
+    /** Reconstructed response body, or absent when none was captured. */
+    responseBody?: string;
+}
 /** Metadata-only aggregate for an audit time window (body payloads are never returned). */
 interface AuditStats {
     requestCount: number;
@@ -102,4 +133,4 @@ interface AuditStats {
     complete: boolean;
 }
 
-export { type AuditConfig, type AuditQueryResult, type AuditRecord, type AuditStats, DEFAULT_AUDIT_CONFIG };
+export { type AuditBodyResult, type AuditConfig, type AuditQueryResult, type AuditRecord, type AuditStats, DEFAULT_AUDIT_CONFIG };

package/dist/audit-types.d.ts

@@ -28,6 +28,19 @@ interface AuditRecord {
     id: string;
     /** Epoch ms the request was captured. */
     ts: number;
+    /**
+     * Derived conversation-session key (a truncated SHA-256 digest — NEVER a raw
+     * client id or prompt). Groups the turns of one conversation so the body store
+     * can shard by session and delta-encode each turn against the previous one.
+     * Absent on a pre-upgrade record and whenever no key could be derived.
+     */
+    sessionKey?: string;
+    /**
+     * True when a body snapshot for this record exists in the session body store.
+     * The metadata line itself never carries the payload — fetch it through the
+     * authed body query.
+     */
+    hasBody?: boolean;
     /** Outbound key id (attribution) — NEVER the key secret/hash. Null when unauthenticated. */
     keyId?: string | null;
     /** Client IP (PII). Socket address by default; a trusted forwarded header only when configured. */
@@ -80,6 +93,13 @@ interface AuditConfig {
     maxBodyBytes: number;
     /** TTL retention in days; default 7, clamped `[1, 365]`. */
     retentionDays: number;
+    /**
+     * Collapse streaming text deltas in a captured response body into one contiguous
+     * block (default FALSE — the raw frame sequence is stored verbatim). Every
+     * NON-delta frame is kept either way, so `response.failed` / `error` / usage
+     * frames stay visible; only the per-token `*_delta` envelopes are merged.
+     */
+    compactStreamingBodies: boolean;
     /**
      * Trust the `X-Forwarded-For` header for the client IP (LEAD OQ1 anti-spoof).
      * Default FALSE — the socket remote address is authoritative. Only set true
@@ -94,6 +114,17 @@ declare const DEFAULT_AUDIT_CONFIG: AuditConfig;
 interface AuditQueryResult {
     records: AuditRecord[];
 }
+/**
+ * The reconstructed body pair for ONE audit record, returned by the authed body
+ * query. Bodies live in the per-session delta store rather than inline on the
+ * metadata line, so reading one is an explicit second call.
+ */
+interface AuditBodyResult {
+    /** Reconstructed request body, or absent when none was captured. */
+    requestBody?: string;
+    /** Reconstructed response body, or absent when none was captured. */
+    responseBody?: string;
+}
 /** Metadata-only aggregate for an audit time window (body payloads are never returned). */
 interface AuditStats {
     requestCount: number;
@@ -102,4 +133,4 @@ interface AuditStats {
     complete: boolean;
 }
 
-export { type AuditConfig, type AuditQueryResult, type AuditRecord, type AuditStats, DEFAULT_AUDIT_CONFIG };
+export { type AuditBodyResult, type AuditConfig, type AuditQueryResult, type AuditRecord, type AuditStats, DEFAULT_AUDIT_CONFIG };

package/dist/audit-types.js

@@ -4,6 +4,7 @@ var DEFAULT_AUDIT_CONFIG = {
   captureBodies: false,
   maxBodyBytes: -1,
   retentionDays: 7,
+  compactStreamingBodies: false,
   trustForwardedFor: false
 };
 export {

package/dist/index.cjs

@@ -83,6 +83,7 @@ var DEFAULT_AUDIT_CONFIG = {
   captureBodies: false,
   maxBodyBytes: -1,
   retentionDays: 7,
+  compactStreamingBodies: false,
   trustForwardedFor: false
 };
 

package/dist/index.d.cts

@@ -1,7 +1,7 @@
 export { AccountClientIdentity, AccountTokensConfig, AuthMethod, ClaudeAuthMethod, ClaudeTokenConfig, CodexTokenConfig, GeminiTokenConfig, OAuthParams, ProxyConfig, SanitizedProxyConfig, SubscriptionAccountEntry, SubscriptionAccountSanitized, SubscriptionLevel, SyncWarningCode, TokenExchangeRequest, TokenStatus } from './account-tokens-types.cjs';
 import { SubscriptionProviderId } from './subscription-types.cjs';
 export { OpenCodeGoModelEntry, OpenCodeGoScenario, OpenCodeGoTokenConfig, OpenCodeGoTokenSanitized, ProviderChannel, SubscriptionListEntry, SubscriptionStatusEntry, legacyCliBackendToSubscriptionProvider, subscriptionTargetForSession } from './subscription-types.cjs';
-export { AuditConfig, AuditQueryResult, AuditRecord, AuditStats, DEFAULT_AUDIT_CONFIG } from './audit-types.cjs';
+export { AuditBodyResult, AuditConfig, AuditQueryResult, AuditRecord, AuditStats, DEFAULT_AUDIT_CONFIG } from './audit-types.cjs';
 export { BillingConfig, BillingDeliveryStatus, BillingEvent, DEFAULT_BILLING_CONFIG } from './billing-types.cjs';
 export { KNOWN_MODELS, KnownModelCapabilities, MODEL_ALIASES, ResolvedModelCapabilities, applyAlias, lookupCanonicalCapabilities, normalizeModelId, resolveModelCapabilities } from './canonical-models.cjs';
 export { AnthropicAudioContent, AnthropicChatRequest, AnthropicChatResponse, AnthropicContentPart, AnthropicImageContent, AnthropicMessage, AnthropicSystemContent, AnthropicTextContent, AnthropicThinkingContent, AnthropicTool, AnthropicToolResultContent, AnthropicToolUseContent, AnthropicVideoContent, ConversionConfig, OpenAIChatRequest, OpenAIChatResponse, OpenAIContentPart, OpenAIMessage, OpenAIStreamChunk, OpenAITool, OpenAIToolCall, SimpleChatAudio, SimpleChatImage, SimpleChatMessage, SimpleChatSession, SimpleChatVideo } from './completion-types.cjs';

package/dist/index.d.ts

@@ -1,7 +1,7 @@
 export { AccountClientIdentity, AccountTokensConfig, AuthMethod, ClaudeAuthMethod, ClaudeTokenConfig, CodexTokenConfig, GeminiTokenConfig, OAuthParams, ProxyConfig, SanitizedProxyConfig, SubscriptionAccountEntry, SubscriptionAccountSanitized, SubscriptionLevel, SyncWarningCode, TokenExchangeRequest, TokenStatus } from './account-tokens-types.js';
 import { SubscriptionProviderId } from './subscription-types.js';
 export { OpenCodeGoModelEntry, OpenCodeGoScenario, OpenCodeGoTokenConfig, OpenCodeGoTokenSanitized, ProviderChannel, SubscriptionListEntry, SubscriptionStatusEntry, legacyCliBackendToSubscriptionProvider, subscriptionTargetForSession } from './subscription-types.js';
-export { AuditConfig, AuditQueryResult, AuditRecord, AuditStats, DEFAULT_AUDIT_CONFIG } from './audit-types.js';
+export { AuditBodyResult, AuditConfig, AuditQueryResult, AuditRecord, AuditStats, DEFAULT_AUDIT_CONFIG } from './audit-types.js';
 export { BillingConfig, BillingDeliveryStatus, BillingEvent, DEFAULT_BILLING_CONFIG } from './billing-types.js';
 export { KNOWN_MODELS, KnownModelCapabilities, MODEL_ALIASES, ResolvedModelCapabilities, applyAlias, lookupCanonicalCapabilities, normalizeModelId, resolveModelCapabilities } from './canonical-models.js';
 export { AnthropicAudioContent, AnthropicChatRequest, AnthropicChatResponse, AnthropicContentPart, AnthropicImageContent, AnthropicMessage, AnthropicSystemContent, AnthropicTextContent, AnthropicThinkingContent, AnthropicTool, AnthropicToolResultContent, AnthropicToolUseContent, AnthropicVideoContent, ConversionConfig, OpenAIChatRequest, OpenAIChatResponse, OpenAIContentPart, OpenAIMessage, OpenAIStreamChunk, OpenAITool, OpenAIToolCall, SimpleChatAudio, SimpleChatImage, SimpleChatMessage, SimpleChatSession, SimpleChatVideo } from './completion-types.js';

package/dist/index.js

@@ -4,6 +4,7 @@ var DEFAULT_AUDIT_CONFIG = {
   captureBodies: false,
   maxBodyBytes: -1,
   retentionDays: 7,
+  compactStreamingBodies: false,
   trustForwardedFor: false
 };
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@omnicross/contracts",
-  "version": "0.1.9",
+  "version": "0.1.10",
   "description": "Dependency-light, host-agnostic contract types + runtime-value helpers shared by the @omnicross/* packages.",
   "license": "MIT",
   "author": "Sayo (https://github.com/Dumoedss)",