@omnicross/core 0.1.0

package/dist/provider-proxy/ingress/providerProxyShared.d.cts

@@ -0,0 +1,77 @@
+import http from 'node:http';
+import { LLMProvider } from '@omnicross/contracts/llm-config';
+import { TransformerChainExecutor } from '../../transformer/TransformerChainExecutor.cjs';
+import { Transformer } from '../../transformer/types.cjs';
+import { a as ProviderProxyDeps } from '../../types-DZIQbgp0.cjs';
+import '@omnicross/contracts/completion-types';
+import '@omnicross/contracts/subscription-types';
+import '@omnicross/contracts/usage-types';
+import '../../ApiKeyPoolService-BmMkau07.cjs';
+import '../../SubscriptionAuthSource-Cr4fVEYY.cjs';
+import '../../pipeline/SubscriptionAuthStrategy.cjs';
+import '../../transformer/TransformerService.cjs';
+import '@omnicross/contracts/websearch-types';
+
+/**
+ * Shared helpers for the ProviderProxy ingress parsers.
+ *
+ * All ingress parsers (Anthropic Messages, OpenAI Responses, OpenAI Chat,
+ * Gemini generateContent) read the full request body, share one stateless
+ * `TransformerChainExecutor`, and relay an already-wire-shaped `Response` (JSON
+ * or SSE) back to the http `res`. This module owns ONLY that common plumbing so
+ * each parser stays under the size cap and the relay shape is identical across
+ * ingresses (parity with the host's codex relay / stream manager). It also
+ * vends the lazy-singleton endpoint transformers
+ * (Responses, Gemini, Anthropic) the factory-less BYO paths reuse.
+ *
+ * @module provider-proxy/ingress/providerProxyShared
+ */
+
+declare function getSharedExecutor(): TransformerChainExecutor;
+declare function getResponsesEndpointTransformer(): Transformer;
+declare function getAnthropicEndpointTransformer(): Transformer;
+declare function getGeminiEndpointTransformer(): Transformer;
+/** Read the full request body from an IncomingMessage. */
+declare function readBody(req: http.IncomingMessage): Promise<string>;
+/**
+ * Relay an already-wire-shaped `Response` to the http `res`.
+ * - `text/event-stream` (or `isStream`): pipe the ReadableStream chunk-by-chunk.
+ * - else: read the JSON text and write it once, returning it so the caller can
+ *   tap usage. Mirrors the host's codex relay.
+ *
+ * @returns the JSON body text for non-stream responses, else `null`.
+ */
+declare function relayResponse(res: http.ServerResponse, providerResponse: Response, isStream: boolean): Promise<string | null>;
+/** Write a JSON error response if the headers have not been sent. */
+declare function writeError(res: http.ServerResponse, status: number, message: string): void;
+/**
+ * Resolve the FIRST-CHOICE BYO request key for a `buildByoPlan`, threading the
+ * ApiKeyPool through TWO gates so 429/529/401/403 failover actually fires on the
+ * outbound serving path (omnicross-daemon-parity-poolseam, design D2(b)).
+ *
+ * MIRRORS the host engine adapter's `resolveApiKeyForProvider` (the reference impl whose
+ * pool failover already works internally):
+ *   - pool present AND a (synthesized outbound) sessionId present →
+ *     `getKeyForSession(providerId, sessionId)`. This SEEDS `sessionBindings`
+ *     with the chosen key AND returns that same key, so it becomes the first
+ *     request's key. WHY both gates matter: `LlmConfigProviderAuth.onResult`
+ *     short-circuits on a null sessionId (gate 1); even with a sessionId,
+ *     `ApiKeyPoolService.reportError` short-circuits when there is no binding for
+ *     that session (gate 2) — and the binding only exists once `getKeyForSession`
+ *     has run. The first request MUST use the bound key (not the row's `apiKey`)
+ *     so the key the pool cools/rebinds on error === the key actually used.
+ *   - otherwise (pool null, no sessionId, or the pool returns empty) → fall back
+ *     to `resolveProviderEndpoint(provider).apiKey` with the same `$ENV`
+ *     resolution the ingresses' own `resolveApiKey` used → BYTE-IDENTICAL to the
+ *     pre-seam path. (Single-key pools also short-circuit inside
+ *     `getKeyForSession` → `selectWeightedRoundRobin`'s `length===1`, returning
+ *     the one key, so the wire key is unchanged there too.)
+ *
+ * `$ENV` semantics MUST match the ingresses' original `resolveApiKey`
+ * (`$VAR → process.env[VAR] ?? ''`, else literal). The pool returns an
+ * already-`resolveKey`-resolved string (its loader passes the host resolver),
+ * so the pool branch needs no further `$ENV` expansion.
+ */
+declare function resolvePoolBoundKey(deps: ProviderProxyDeps, providerId: string, provider: LLMProvider, sessionId: string | null): Promise<string>;
+
+export { getAnthropicEndpointTransformer, getGeminiEndpointTransformer, getResponsesEndpointTransformer, getSharedExecutor, readBody, relayResponse, resolvePoolBoundKey, writeError };

package/dist/provider-proxy/ingress/providerProxyShared.d.ts

@@ -0,0 +1,77 @@
+import http from 'node:http';
+import { LLMProvider } from '@omnicross/contracts/llm-config';
+import { TransformerChainExecutor } from '../../transformer/TransformerChainExecutor.js';
+import { Transformer } from '../../transformer/types.js';
+import { a as ProviderProxyDeps } from '../../types-DCzHkhJt.js';
+import '@omnicross/contracts/completion-types';
+import '@omnicross/contracts/subscription-types';
+import '@omnicross/contracts/usage-types';
+import '../../ApiKeyPoolService-BmMkau07.js';
+import '../../SubscriptionAuthSource-D89zmiSS.js';
+import '../../pipeline/SubscriptionAuthStrategy.js';
+import '../../transformer/TransformerService.js';
+import '@omnicross/contracts/websearch-types';
+
+/**
+ * Shared helpers for the ProviderProxy ingress parsers.
+ *
+ * All ingress parsers (Anthropic Messages, OpenAI Responses, OpenAI Chat,
+ * Gemini generateContent) read the full request body, share one stateless
+ * `TransformerChainExecutor`, and relay an already-wire-shaped `Response` (JSON
+ * or SSE) back to the http `res`. This module owns ONLY that common plumbing so
+ * each parser stays under the size cap and the relay shape is identical across
+ * ingresses (parity with the host's codex relay / stream manager). It also
+ * vends the lazy-singleton endpoint transformers
+ * (Responses, Gemini, Anthropic) the factory-less BYO paths reuse.
+ *
+ * @module provider-proxy/ingress/providerProxyShared
+ */
+
+declare function getSharedExecutor(): TransformerChainExecutor;
+declare function getResponsesEndpointTransformer(): Transformer;
+declare function getAnthropicEndpointTransformer(): Transformer;
+declare function getGeminiEndpointTransformer(): Transformer;
+/** Read the full request body from an IncomingMessage. */
+declare function readBody(req: http.IncomingMessage): Promise<string>;
+/**
+ * Relay an already-wire-shaped `Response` to the http `res`.
+ * - `text/event-stream` (or `isStream`): pipe the ReadableStream chunk-by-chunk.
+ * - else: read the JSON text and write it once, returning it so the caller can
+ *   tap usage. Mirrors the host's codex relay.
+ *
+ * @returns the JSON body text for non-stream responses, else `null`.
+ */
+declare function relayResponse(res: http.ServerResponse, providerResponse: Response, isStream: boolean): Promise<string | null>;
+/** Write a JSON error response if the headers have not been sent. */
+declare function writeError(res: http.ServerResponse, status: number, message: string): void;
+/**
+ * Resolve the FIRST-CHOICE BYO request key for a `buildByoPlan`, threading the
+ * ApiKeyPool through TWO gates so 429/529/401/403 failover actually fires on the
+ * outbound serving path (omnicross-daemon-parity-poolseam, design D2(b)).
+ *
+ * MIRRORS the host engine adapter's `resolveApiKeyForProvider` (the reference impl whose
+ * pool failover already works internally):
+ *   - pool present AND a (synthesized outbound) sessionId present →
+ *     `getKeyForSession(providerId, sessionId)`. This SEEDS `sessionBindings`
+ *     with the chosen key AND returns that same key, so it becomes the first
+ *     request's key. WHY both gates matter: `LlmConfigProviderAuth.onResult`
+ *     short-circuits on a null sessionId (gate 1); even with a sessionId,
+ *     `ApiKeyPoolService.reportError` short-circuits when there is no binding for
+ *     that session (gate 2) — and the binding only exists once `getKeyForSession`
+ *     has run. The first request MUST use the bound key (not the row's `apiKey`)
+ *     so the key the pool cools/rebinds on error === the key actually used.
+ *   - otherwise (pool null, no sessionId, or the pool returns empty) → fall back
+ *     to `resolveProviderEndpoint(provider).apiKey` with the same `$ENV`
+ *     resolution the ingresses' own `resolveApiKey` used → BYTE-IDENTICAL to the
+ *     pre-seam path. (Single-key pools also short-circuit inside
+ *     `getKeyForSession` → `selectWeightedRoundRobin`'s `length===1`, returning
+ *     the one key, so the wire key is unchanged there too.)
+ *
+ * `$ENV` semantics MUST match the ingresses' original `resolveApiKey`
+ * (`$VAR → process.env[VAR] ?? ''`, else literal). The pool returns an
+ * already-`resolveKey`-resolved string (its loader passes the host resolver),
+ * so the pool branch needs no further `$ENV` expansion.
+ */
+declare function resolvePoolBoundKey(deps: ProviderProxyDeps, providerId: string, provider: LLMProvider, sessionId: string | null): Promise<string>;
+
+export { getAnthropicEndpointTransformer, getGeminiEndpointTransformer, getResponsesEndpointTransformer, getSharedExecutor, readBody, relayResponse, resolvePoolBoundKey, writeError };