@omnicross/core 0.1.10 → 0.2.1

package/dist/provider-proxy/ProviderProxy.cjs

@@ -1,62 +1,66 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true});
 
 
-var _chunkTIT74RILcjs = require('../chunk-TIT74RIL.cjs');
+var _chunkVSYQ6XYNcjs = require('../chunk-VSYQ6XYN.cjs');
+require('../chunk-E4QHVXV5.cjs');
 require('../chunk-HQP3K7PU.cjs');
 require('../chunk-QVOB2DNX.cjs');
-require('../chunk-P7EM6BND.cjs');
-require('../chunk-ZQQUD66M.cjs');
-require('../chunk-5LNYGCIW.cjs');
-require('../chunk-CMVXX7ON.cjs');
+require('../chunk-7ZHBN75N.cjs');
+require('../chunk-GBHYAGX3.cjs');
+require('../chunk-3OPYJG76.cjs');
+require('../chunk-ZAPN7XA6.cjs');
+require('../chunk-KIQ2HA2A.cjs');
+require('../chunk-NOITAVHA.cjs');
+require('../chunk-QWNUOR7F.cjs');
+require('../chunk-POUTD5AM.cjs');
+require('../chunk-6DDYNS2B.cjs');
 require('../chunk-5RSZYQJH.cjs');
-require('../chunk-56QD3YW6.cjs');
-require('../chunk-QUSEZNYS.cjs');
+require('../chunk-32SRZFFP.cjs');
 require('../chunk-2E42SAW3.cjs');
 require('../chunk-5UK3KLE2.cjs');
-require('../chunk-IIRPUVPH.cjs');
-require('../chunk-GBHYAGX3.cjs');
-require('../chunk-3OPYJG76.cjs');
-require('../chunk-3SCOLIPT.cjs');
+require('../chunk-MXI2PWIC.cjs');
 require('../chunk-RPII3E6Z.cjs');
 require('../chunk-6RPZADX3.cjs');
 require('../chunk-J3QQ6JS5.cjs');
 require('../chunk-UIBD2YY5.cjs');
 require('../chunk-R3HK6R4B.cjs');
+require('../chunk-KQBLZMP6.cjs');
+require('../chunk-OIKREZVQ.cjs');
 require('../chunk-QXD4MV2X.cjs');
 require('../chunk-NYUNU75A.cjs');
 require('../chunk-OTZC4TNH.cjs');
-require('../chunk-YWL7YZWS.cjs');
+require('../chunk-7LRTPNFL.cjs');
 require('../chunk-YNJNTCSQ.cjs');
 require('../chunk-SVNDB62D.cjs');
 require('../chunk-6QQG7YG3.cjs');
 require('../chunk-25GXJCEZ.cjs');
-require('../chunk-MUHWHQVM.cjs');
-require('../chunk-Q27JY5RG.cjs');
+require('../chunk-FX325I5Q.cjs');
+require('../chunk-AEOZIDEB.cjs');
+require('../chunk-HCOQQAZE.cjs');
 require('../chunk-APYG5QD7.cjs');
 require('../chunk-L74VDN4A.cjs');
+require('../chunk-XSVNC2UD.cjs');
 require('../chunk-4YINUUKQ.cjs');
-require('../chunk-4VZX5F4T.cjs');
+require('../chunk-T6NWPIYZ.cjs');
 require('../chunk-QBZJ7P2T.cjs');
 require('../chunk-4IH4EL7M.cjs');
+require('../chunk-JMJBSACD.cjs');
+require('../chunk-GMMT7RVN.cjs');
+require('../chunk-UNEFIWXI.cjs');
 require('../chunk-A2YMUCBT.cjs');
-require('../chunk-UWDW6PN3.cjs');
-require('../chunk-FCR77GYM.cjs');
-require('../chunk-AEOZIDEB.cjs');
-require('../chunk-XSVNC2UD.cjs');
 require('../chunk-GDIXXKF2.cjs');
-require('../chunk-OC6DOOFX.cjs');
-require('../chunk-RICPANBY.cjs');
+require('../chunk-VXRTQZF2.cjs');
+require('../chunk-WX2E2G7H.cjs');
 require('../chunk-77USGNRW.cjs');
-require('../chunk-AOFWNWLT.cjs');
-require('../chunk-RJUONLUQ.cjs');
+require('../chunk-IUL4VWNU.cjs');
+require('../chunk-4Z3ZLLC2.cjs');
 require('../chunk-235MXAGX.cjs');
 require('../chunk-HVBBDBS3.cjs');
 require('../chunk-NKVZ6Z3Y.cjs');
-require('../chunk-NZYN7C3P.cjs');
-require('../chunk-JMJBSACD.cjs');
-require('../chunk-GMMT7RVN.cjs');
-require('../chunk-UNEFIWXI.cjs');
+require('../chunk-UPQIWJIE.cjs');
+require('../chunk-G4CZIUIB.cjs');
+require('../chunk-MPXOKQJP.cjs');
 
 
 
-exports.ProviderProxy = _chunkTIT74RILcjs.ProviderProxy; exports.isLoopbackAddress = _chunkTIT74RILcjs.isLoopbackAddress;
+exports.ProviderProxy = _chunkVSYQ6XYNcjs.ProviderProxy; exports.isLoopbackAddress = _chunkVSYQ6XYNcjs.isLoopbackAddress;

package/dist/provider-proxy/ProviderProxy.d.cts

@@ -1,5 +1,5 @@
-export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy-QdwNV6l1.cjs';
-import './types.cjs';
+export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy-Bz_nkOwq.cjs';
+import '../types-BSIJdsyl.cjs';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -17,3 +17,7 @@ import '../transformer/types.cjs';
 import '../transformer/TransformerService.cjs';
 import '../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import '../frontends-Doz0RaWu.cjs';
+import '@omnicross/contracts/search-types';
+import '../runtime-t8AZacFF.cjs';
+import '@omnicross/contracts/image-generation-types';

package/dist/provider-proxy/ProviderProxy.d.ts

@@ -1,5 +1,5 @@
-export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy--ROec6VI.js';
-import './types.js';
+export { P as ProviderProxy, i as isLoopbackAddress } from '../ProviderProxy-Ckr6oTrE.js';
+import '../types-By9Tg6-I.js';
 import 'node:http';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
@@ -17,3 +17,7 @@ import '../transformer/types.js';
 import '../transformer/TransformerService.js';
 import '../ports/web-search-backend.js';
 import '@omnicross/contracts/websearch-types';
+import '../frontends-Doz0RaWu.js';
+import '@omnicross/contracts/search-types';
+import '../runtime-t8AZacFF.js';
+import '@omnicross/contracts/image-generation-types';

package/dist/provider-proxy/ProviderProxy.js

@@ -1,61 +1,65 @@
 import {
   ProviderProxy,
   isLoopbackAddress
-} from "../chunk-FEBAQI5A.js";
+} from "../chunk-LKDAN4D7.js";
+import "../chunk-MZEGQSKQ.js";
 import "../chunk-VVEHS2LI.js";
 import "../chunk-WTQMX2Q6.js";
-import "../chunk-NGYOO5TO.js";
-import "../chunk-HKB656B4.js";
-import "../chunk-55FMGZ3L.js";
-import "../chunk-45FHEOKW.js";
+import "../chunk-EYGBM2VC.js";
+import "../chunk-MZNPGW5Q.js";
+import "../chunk-DK4A7DLE.js";
+import "../chunk-2C3TTBS7.js";
+import "../chunk-HN74IGEO.js";
+import "../chunk-V53ZEFXC.js";
+import "../chunk-7PIUVCKK.js";
+import "../chunk-EUZRH544.js";
+import "../chunk-LFEH7CEO.js";
 import "../chunk-FU7EAR73.js";
-import "../chunk-CCVRRJOX.js";
-import "../chunk-6D4W22P4.js";
+import "../chunk-QIIAMBTM.js";
 import "../chunk-FXR6N3SR.js";
 import "../chunk-AQDON6MB.js";
-import "../chunk-WNKWAEUR.js";
-import "../chunk-MZNPGW5Q.js";
-import "../chunk-DK4A7DLE.js";
-import "../chunk-XXFYLL7R.js";
+import "../chunk-ECZ3ZE2C.js";
 import "../chunk-XTEI64OU.js";
 import "../chunk-XX6NQJMA.js";
 import "../chunk-GFIZ6LQI.js";
 import "../chunk-OE6TDIWW.js";
 import "../chunk-DRWHTIIZ.js";
+import "../chunk-X335TJNS.js";
+import "../chunk-HOMUGKHR.js";
 import "../chunk-JWC6APFQ.js";
 import "../chunk-5ERIZW3D.js";
 import "../chunk-PO3XB56Z.js";
-import "../chunk-N7OOJI5V.js";
+import "../chunk-V2UKUTJ3.js";
 import "../chunk-23S5OPIO.js";
 import "../chunk-AVYJ4YBN.js";
 import "../chunk-OPRS4IQZ.js";
 import "../chunk-2JYRIADS.js";
-import "../chunk-DE2SRBFZ.js";
-import "../chunk-ZY6KU6P3.js";
+import "../chunk-6OKXH2TW.js";
+import "../chunk-WNY4WMRF.js";
+import "../chunk-N76KU6F5.js";
 import "../chunk-WLYIIEAF.js";
 import "../chunk-TKJMZBAH.js";
+import "../chunk-OZFM4X3S.js";
 import "../chunk-3QFXFCHG.js";
-import "../chunk-EBLFCNPY.js";
+import "../chunk-U47LQXPB.js";
 import "../chunk-AQ5TNQB7.js";
 import "../chunk-XEKD23J5.js";
+import "../chunk-Y7FO65VT.js";
+import "../chunk-FMOBD2OQ.js";
+import "../chunk-HUZZZ3JL.js";
 import "../chunk-H5JUT3KV.js";
-import "../chunk-GXEZ2R3E.js";
-import "../chunk-K5NM7VAH.js";
-import "../chunk-WNY4WMRF.js";
-import "../chunk-OZFM4X3S.js";
 import "../chunk-5NJLQ6T6.js";
-import "../chunk-2UTGX6FM.js";
-import "../chunk-S3DYFEBE.js";
+import "../chunk-4VVCXVB7.js";
+import "../chunk-R4VCO2CB.js";
 import "../chunk-WYVGULTQ.js";
-import "../chunk-N2EIM2XJ.js";
-import "../chunk-RJ5ZGNI3.js";
+import "../chunk-ZLNHPUFA.js";
+import "../chunk-VL5TUDTM.js";
 import "../chunk-3WD4HTR2.js";
 import "../chunk-MKF46GNZ.js";
 import "../chunk-GL6XM527.js";
-import "../chunk-CDHS2QDC.js";
-import "../chunk-Y7FO65VT.js";
-import "../chunk-FMOBD2OQ.js";
-import "../chunk-HUZZZ3JL.js";
+import "../chunk-LQYS2N47.js";
+import "../chunk-4JOU54M5.js";
+import "../chunk-Y4CRNHJO.js";
 export {
   ProviderProxy,
   isLoopbackAddress

package/dist/provider-proxy/identity/codexCliHeaders.cjs

@@ -2,9 +2,11 @@
 
 
 
-var _chunk3SCOLIPTcjs = require('../../chunk-3SCOLIPT.cjs');
 
+var _chunkMXI2PWICcjs = require('../../chunk-MXI2PWIC.cjs');
 
 
 
-exports.DEFAULT_CODEX_CLI_HEADERS = _chunk3SCOLIPTcjs.DEFAULT_CODEX_CLI_HEADERS; exports.codexAcceptHeader = _chunk3SCOLIPTcjs.codexAcceptHeader; exports.extractCodexClientHeaders = _chunk3SCOLIPTcjs.extractCodexClientHeaders;
+
+
+exports.DEFAULT_CODEX_CLI_HEADERS = _chunkMXI2PWICcjs.DEFAULT_CODEX_CLI_HEADERS; exports.codexAcceptHeader = _chunkMXI2PWICcjs.codexAcceptHeader; exports.extractCodexClientHeaders = _chunkMXI2PWICcjs.extractCodexClientHeaders; exports.fillMissingHeaders = _chunkMXI2PWICcjs.fillMissingHeaders;

package/dist/provider-proxy/identity/codexCliHeaders.d.cts

@@ -1,3 +1,21 @@
+/**
+ * headerMerge — the shared outbound-header merge primitive used by the
+ * per-client header builders (`claudeCodeHeaders`, `codexCliHeaders`).
+ *
+ * Split out so neither builder has to import the other just to reuse the merge.
+ *
+ * @module provider-proxy/identity/headerMerge
+ */
+/**
+ * Copy every entry of `source` into `headers` that `headers` does not already
+ * carry (case-insensitive on the existing keys, so an `Authorization` set by the
+ * auth strategy is never shadowed by an `authorization` from a caller bag).
+ * Existing values ALWAYS win — this only fills empty slots, which is what makes
+ * the precedence chain (auth > frozen fingerprint > caller > defaults) work by
+ * simply calling it in order.
+ */
+declare function fillMissingHeaders(headers: Record<string, string>, source: Readonly<Record<string, string>>): void;
+
 /**
  * codexCliHeaders — the Codex CLI client headers the CODEX SUBSCRIPTION relay
  * puts on every `chatgpt.com/backend-api/codex/responses` request.
@@ -14,24 +32,26 @@
  * shares this relay and must stay byte-identical — sending it `originator:
  * codex_cli_rs` would be wrong and could trip its own checks.
  *
- * Modeled on claude-relay-service (`routes/openaiRoutes.js`, the codex branch).
+ * Modeled on observed Codex CLI-compatible relay behavior.
  *
  * NOT DONE HERE (deliberate, see the relay call site):
- *  - `chatgpt-account-id`: CRS sends the ChatGPT account id parsed out of the
- *    OAuth `id_token`. Guessing it wrong risks a 403 on a path that currently
- *    works, so it is left to a follow-up that can verify the value.
+ *  - `chatgpt-account-id`: compatible implementations send the ChatGPT account
+ *    id parsed out of the OAuth `id_token`. Guessing it wrong risks a 403 on a
+ *    path that currently works, so it is left to a follow-up that can verify it.
  *  - forcing `store: false` on the body: a body mutation with its own regression
  *    surface, tracked separately.
  *
  * @module provider-proxy/identity/codexCliHeaders
  */
+
 /**
  * Client markers a real `codex` CLI invocation carries. Used ONLY to fill a slot
  * the caller left empty — a forwarded real value always wins, so a genuine Codex
  * CLI keeps its own identity and only a caller that sent nothing gets these.
  *
  * `originator` is the load-bearing one: it is how the backend tells the Codex
- * CLI apart from a generic Responses client, and CRS sends it unconditionally.
+ * CLI apart from a generic Responses client, so compatible relays send it
+ * unconditionally.
  */
 declare const DEFAULT_CODEX_CLI_HEADERS: Readonly<Record<string, string>>;
 /**
@@ -42,4 +62,4 @@ declare function extractCodexClientHeaders(reqHeaders: Record<string, string | s
 /** The `accept` a Codex CLI sends, which differs by streaming mode. */
 declare function codexAcceptHeader(isStream: boolean): string;
 
-export { DEFAULT_CODEX_CLI_HEADERS, codexAcceptHeader, extractCodexClientHeaders };
+export { DEFAULT_CODEX_CLI_HEADERS, codexAcceptHeader, extractCodexClientHeaders, fillMissingHeaders };

package/dist/provider-proxy/identity/codexCliHeaders.d.ts

@@ -1,3 +1,21 @@
+/**
+ * headerMerge — the shared outbound-header merge primitive used by the
+ * per-client header builders (`claudeCodeHeaders`, `codexCliHeaders`).
+ *
+ * Split out so neither builder has to import the other just to reuse the merge.
+ *
+ * @module provider-proxy/identity/headerMerge
+ */
+/**
+ * Copy every entry of `source` into `headers` that `headers` does not already
+ * carry (case-insensitive on the existing keys, so an `Authorization` set by the
+ * auth strategy is never shadowed by an `authorization` from a caller bag).
+ * Existing values ALWAYS win — this only fills empty slots, which is what makes
+ * the precedence chain (auth > frozen fingerprint > caller > defaults) work by
+ * simply calling it in order.
+ */
+declare function fillMissingHeaders(headers: Record<string, string>, source: Readonly<Record<string, string>>): void;
+
 /**
  * codexCliHeaders — the Codex CLI client headers the CODEX SUBSCRIPTION relay
  * puts on every `chatgpt.com/backend-api/codex/responses` request.
@@ -14,24 +32,26 @@
  * shares this relay and must stay byte-identical — sending it `originator:
  * codex_cli_rs` would be wrong and could trip its own checks.
  *
- * Modeled on claude-relay-service (`routes/openaiRoutes.js`, the codex branch).
+ * Modeled on observed Codex CLI-compatible relay behavior.
  *
  * NOT DONE HERE (deliberate, see the relay call site):
- *  - `chatgpt-account-id`: CRS sends the ChatGPT account id parsed out of the
- *    OAuth `id_token`. Guessing it wrong risks a 403 on a path that currently
- *    works, so it is left to a follow-up that can verify the value.
+ *  - `chatgpt-account-id`: compatible implementations send the ChatGPT account
+ *    id parsed out of the OAuth `id_token`. Guessing it wrong risks a 403 on a
+ *    path that currently works, so it is left to a follow-up that can verify it.
  *  - forcing `store: false` on the body: a body mutation with its own regression
  *    surface, tracked separately.
  *
  * @module provider-proxy/identity/codexCliHeaders
  */
+
 /**
  * Client markers a real `codex` CLI invocation carries. Used ONLY to fill a slot
  * the caller left empty — a forwarded real value always wins, so a genuine Codex
  * CLI keeps its own identity and only a caller that sent nothing gets these.
  *
  * `originator` is the load-bearing one: it is how the backend tells the Codex
- * CLI apart from a generic Responses client, and CRS sends it unconditionally.
+ * CLI apart from a generic Responses client, so compatible relays send it
+ * unconditionally.
  */
 declare const DEFAULT_CODEX_CLI_HEADERS: Readonly<Record<string, string>>;
 /**
@@ -42,4 +62,4 @@ declare function extractCodexClientHeaders(reqHeaders: Record<string, string | s
 /** The `accept` a Codex CLI sends, which differs by streaming mode. */
 declare function codexAcceptHeader(isStream: boolean): string;
 
-export { DEFAULT_CODEX_CLI_HEADERS, codexAcceptHeader, extractCodexClientHeaders };
+export { DEFAULT_CODEX_CLI_HEADERS, codexAcceptHeader, extractCodexClientHeaders, fillMissingHeaders };

package/dist/provider-proxy/identity/codexCliHeaders.js

@@ -1,10 +1,12 @@
 import {
   DEFAULT_CODEX_CLI_HEADERS,
   codexAcceptHeader,
-  extractCodexClientHeaders
-} from "../../chunk-XXFYLL7R.js";
+  extractCodexClientHeaders,
+  fillMissingHeaders
+} from "../../chunk-ECZ3ZE2C.js";
 export {
   DEFAULT_CODEX_CLI_HEADERS,
   codexAcceptHeader,
-  extractCodexClientHeaders
+  extractCodexClientHeaders,
+  fillMissingHeaders
 };

package/dist/provider-proxy/ingress/providerProxyShared.cjs

@@ -9,61 +9,69 @@
 
 
 
-var _chunkTIT74RILcjs = require('../../chunk-TIT74RIL.cjs');
+
+
+var _chunkVSYQ6XYNcjs = require('../../chunk-VSYQ6XYN.cjs');
+require('../../chunk-E4QHVXV5.cjs');
 require('../../chunk-HQP3K7PU.cjs');
 require('../../chunk-QVOB2DNX.cjs');
-require('../../chunk-P7EM6BND.cjs');
-require('../../chunk-ZQQUD66M.cjs');
-require('../../chunk-5LNYGCIW.cjs');
-require('../../chunk-CMVXX7ON.cjs');
+require('../../chunk-7ZHBN75N.cjs');
+require('../../chunk-GBHYAGX3.cjs');
+require('../../chunk-3OPYJG76.cjs');
+require('../../chunk-ZAPN7XA6.cjs');
+require('../../chunk-KIQ2HA2A.cjs');
+require('../../chunk-NOITAVHA.cjs');
+require('../../chunk-QWNUOR7F.cjs');
+require('../../chunk-POUTD5AM.cjs');
+require('../../chunk-6DDYNS2B.cjs');
 require('../../chunk-5RSZYQJH.cjs');
-require('../../chunk-56QD3YW6.cjs');
-require('../../chunk-QUSEZNYS.cjs');
+require('../../chunk-32SRZFFP.cjs');
 require('../../chunk-2E42SAW3.cjs');
 require('../../chunk-5UK3KLE2.cjs');
-require('../../chunk-IIRPUVPH.cjs');
-require('../../chunk-GBHYAGX3.cjs');
-require('../../chunk-3OPYJG76.cjs');
-require('../../chunk-3SCOLIPT.cjs');
+require('../../chunk-MXI2PWIC.cjs');
 require('../../chunk-RPII3E6Z.cjs');
 require('../../chunk-6RPZADX3.cjs');
 require('../../chunk-J3QQ6JS5.cjs');
 require('../../chunk-UIBD2YY5.cjs');
 require('../../chunk-R3HK6R4B.cjs');
+require('../../chunk-KQBLZMP6.cjs');
+require('../../chunk-OIKREZVQ.cjs');
 require('../../chunk-QXD4MV2X.cjs');
 require('../../chunk-NYUNU75A.cjs');
 require('../../chunk-OTZC4TNH.cjs');
-require('../../chunk-YWL7YZWS.cjs');
+require('../../chunk-7LRTPNFL.cjs');
 require('../../chunk-YNJNTCSQ.cjs');
 require('../../chunk-SVNDB62D.cjs');
 require('../../chunk-6QQG7YG3.cjs');
 require('../../chunk-25GXJCEZ.cjs');
-require('../../chunk-MUHWHQVM.cjs');
-require('../../chunk-Q27JY5RG.cjs');
+require('../../chunk-FX325I5Q.cjs');
+require('../../chunk-AEOZIDEB.cjs');
+require('../../chunk-HCOQQAZE.cjs');
 require('../../chunk-APYG5QD7.cjs');
 require('../../chunk-L74VDN4A.cjs');
+require('../../chunk-XSVNC2UD.cjs');
 require('../../chunk-4YINUUKQ.cjs');
-require('../../chunk-4VZX5F4T.cjs');
+require('../../chunk-T6NWPIYZ.cjs');
 require('../../chunk-QBZJ7P2T.cjs');
 require('../../chunk-4IH4EL7M.cjs');
+require('../../chunk-JMJBSACD.cjs');
+require('../../chunk-GMMT7RVN.cjs');
+require('../../chunk-UNEFIWXI.cjs');
 require('../../chunk-A2YMUCBT.cjs');
-require('../../chunk-UWDW6PN3.cjs');
-require('../../chunk-FCR77GYM.cjs');
-require('../../chunk-AEOZIDEB.cjs');
-require('../../chunk-XSVNC2UD.cjs');
 require('../../chunk-GDIXXKF2.cjs');
-require('../../chunk-OC6DOOFX.cjs');
-require('../../chunk-RICPANBY.cjs');
+require('../../chunk-VXRTQZF2.cjs');
+require('../../chunk-WX2E2G7H.cjs');
 require('../../chunk-77USGNRW.cjs');
-require('../../chunk-AOFWNWLT.cjs');
-require('../../chunk-RJUONLUQ.cjs');
+require('../../chunk-IUL4VWNU.cjs');
+require('../../chunk-4Z3ZLLC2.cjs');
 require('../../chunk-235MXAGX.cjs');
 require('../../chunk-HVBBDBS3.cjs');
 require('../../chunk-NKVZ6Z3Y.cjs');
-require('../../chunk-NZYN7C3P.cjs');
-require('../../chunk-JMJBSACD.cjs');
-require('../../chunk-GMMT7RVN.cjs');
-require('../../chunk-UNEFIWXI.cjs');
+require('../../chunk-UPQIWJIE.cjs');
+require('../../chunk-G4CZIUIB.cjs');
+require('../../chunk-MPXOKQJP.cjs');
+
+
 
 
 
@@ -75,4 +83,4 @@ require('../../chunk-UNEFIWXI.cjs');
 
 
 
-exports.aggregateAnthropicSseToJsonBody = _chunkTIT74RILcjs.aggregateAnthropicSseToJsonBody; exports.getAnthropicEndpointTransformer = _chunkTIT74RILcjs.getAnthropicEndpointTransformer; exports.getGeminiEndpointTransformer = _chunkTIT74RILcjs.getGeminiEndpointTransformer; exports.getResponsesEndpointTransformer = _chunkTIT74RILcjs.getResponsesEndpointTransformer; exports.getSharedExecutor = _chunkTIT74RILcjs.getSharedExecutor; exports.readBody = _chunkTIT74RILcjs.readBody; exports.relayResponse = _chunkTIT74RILcjs.relayResponse; exports.resolvePoolBoundKey = _chunkTIT74RILcjs.resolvePoolBoundKey; exports.writeBoundAccountError = _chunkTIT74RILcjs.writeBoundAccountError; exports.writeError = _chunkTIT74RILcjs.writeError;
+exports.aggregateAnthropicSseToJsonBody = _chunkVSYQ6XYNcjs.aggregateAnthropicSseToJsonBody; exports.cancelDiscardedResponse = _chunkVSYQ6XYNcjs.cancelDiscardedResponse; exports.getAnthropicEndpointTransformer = _chunkVSYQ6XYNcjs.getAnthropicEndpointTransformer; exports.getGeminiEndpointTransformer = _chunkVSYQ6XYNcjs.getGeminiEndpointTransformer; exports.getResponsesEndpointTransformer = _chunkVSYQ6XYNcjs.getResponsesEndpointTransformer; exports.getSharedExecutor = _chunkVSYQ6XYNcjs.getSharedExecutor; exports.projectUpstreamResponseHeaders = _chunkVSYQ6XYNcjs.projectUpstreamResponseHeaders; exports.readBody = _chunkVSYQ6XYNcjs.readBody; exports.relayResponse = _chunkVSYQ6XYNcjs.relayResponse; exports.resolvePoolBoundKey = _chunkVSYQ6XYNcjs.resolvePoolBoundKey; exports.writeBoundAccountError = _chunkVSYQ6XYNcjs.writeBoundAccountError; exports.writeError = _chunkVSYQ6XYNcjs.writeError;

package/dist/provider-proxy/ingress/providerProxyShared.d.cts

@@ -3,7 +3,7 @@ import { LLMProvider } from '@omnicross/contracts/llm-config';
 import { BoundAccountSelectionError } from '../../pipeline/BoundAccountSelectionError.cjs';
 import { TransformerChainExecutor } from '../../transformer/TransformerChainExecutor.cjs';
 import { Transformer } from '../../transformer/types.cjs';
-import { ProviderProxyDeps } from '../types.cjs';
+import { W as ProviderProxyDeps } from '../../types-BSIJdsyl.cjs';
 import '@omnicross/contracts/completion-types';
 import '@omnicross/contracts/usage-stats-types';
 import '@omnicross/contracts/subscription-types';
@@ -17,6 +17,10 @@ import '../../ports/provider-config-source.cjs';
 import '../../transformer/TransformerService.cjs';
 import '../../ports/web-search-backend.cjs';
 import '@omnicross/contracts/websearch-types';
+import '../../frontends-Doz0RaWu.cjs';
+import '@omnicross/contracts/search-types';
+import '../../runtime-t8AZacFF.cjs';
+import '@omnicross/contracts/image-generation-types';
 
 /**
  * Shared helpers for the ProviderProxy ingress parsers.
@@ -37,8 +41,8 @@ declare function getSharedExecutor(): TransformerChainExecutor;
 declare function getResponsesEndpointTransformer(): Transformer;
 declare function getAnthropicEndpointTransformer(): Transformer;
 declare function getGeminiEndpointTransformer(): Transformer;
-/** Read the full request body from an IncomingMessage. */
-declare function readBody(req: http.IncomingMessage): Promise<string>;
+/** Read the full request body from an IncomingMessage with deterministic listener cleanup. */
+declare function readBody(req: http.IncomingMessage, signal?: AbortSignal): Promise<string>;
 /**
  * A usage tap for {@link relayResponse}'s stream branch. Streaming responses were
  * previously not metered (only the non-stream branch recorded usage), so Codex
@@ -61,9 +65,28 @@ interface StreamUsageTap {
     /** Called once at stream end with the last captured usage (only if any). */
     onUsage(rawUsage: Record<string, unknown>): void;
 }
+/**
+ * Release an upstream `Response` this request will NEVER relay — the one
+ * discarded by a 401-refresh retry, an ApiKeyPool rebind retry, or a fallback
+ * advance.
+ *
+ * Dropping the reference is NOT enough: an unread body keeps its undici socket
+ * (and the whole CONNECT tunnel through any egress proxy) checked out until the
+ * GC finalizer eventually reclaims it, so a retry-heavy period accumulates
+ * orphan connections against the proxy. Cancelling returns the socket
+ * immediately. Awaited so the release is ordered BEFORE the replacement attempt
+ * is issued; `cancel()` on an undici body is a local teardown and does no
+ * network I/O. Best-effort by construction — an already-locked/consumed body
+ * (e.g. one a health sniff read via `clone()`) and a cancel rejection are both
+ * no-ops, and a cleanup failure must never break serving.
+ */
+declare function cancelDiscardedResponse(response: Response | undefined): Promise<void>;
+/** Project only explicitly safe end-to-end upstream response metadata. */
+declare function projectUpstreamResponseHeaders(headers: Headers, upstreamIsSse: boolean): Record<string, string>;
 /**
  * Relay an already-wire-shaped `Response` to the http `res`.
- * - `text/event-stream` (or `isStream`): pipe the ReadableStream chunk-by-chunk.
+ * - explicit `text/event-stream`, or a confirmed headerless SSE compatibility
+ *   response: pipe the ReadableStream chunk-by-chunk.
  * - else: read the JSON text and write it once, returning it so the caller can
  *   tap usage. Mirrors the host's codex relay.
  *
@@ -87,7 +110,7 @@ declare function relayResponse(res: http.ServerResponse, providerResponse: Respo
  * server-overload event. When present, forces the line-based relay path so
  * events are parsed even without a `rewriteModel`/`usageTap`.
  */
-onSseEvent?: (event: Record<string, unknown>) => void): Promise<string | null>;
+onSseEvent?: (event: Record<string, unknown>) => void, signal?: AbortSignal): Promise<string | null>;
 /**
  * Aggregate a streaming Anthropic `text/event-stream` body into ONE buffered
  * Anthropic `message` JSON object — the inverse of the SDK's SSE wire format.
@@ -103,13 +126,22 @@ onSseEvent?: (event: Record<string, unknown>) => void): Promise<string | null>;
  *
  * Best-effort: a malformed event is skipped, never thrown.
  */
-declare function aggregateAnthropicSseToJsonBody(response: Response, rewriteModel?: string): Promise<string>;
-/** Write a JSON error response if the headers have not been sent. */
+declare function aggregateAnthropicSseToJsonBody(response: Response, rewriteModel?: string, signal?: AbortSignal): Promise<string>;
+/**
+ * Write a JSON error response if the headers have not been sent.
+ *
+ * On an Anthropic-protocol request (res marked at the pipeline entry — see
+ * `anthropicErrorEnvelope`) the body takes the Anthropic error shape so
+ * Anthropic SDK clients can type-parse it; every other path keeps the legacy
+ * `provider_proxy_error` envelope byte-for-byte.
+ */
 declare function writeError(res: http.ServerResponse, status: number, message: string): void;
 /**
  * Map a strict bound-account failure to a stable structured response. The body
  * carries only the fixed code/reason/message; account ids, tokens, and upstream
- * error text never cross the wire.
+ * error text never cross the wire. On a marked Anthropic-protocol response the
+ * stable `code`/`reason` fields fold INTO the Anthropic `error` object and the
+ * `Retry-After` header is preserved.
  */
 declare function writeBoundAccountError(res: http.ServerResponse, error: BoundAccountSelectionError): void;
 /**
@@ -142,4 +174,4 @@ declare function writeBoundAccountError(res: http.ServerResponse, error: BoundAc
  */
 declare function resolvePoolBoundKey(deps: ProviderProxyDeps, providerId: string, provider: LLMProvider, sessionId: string | null, preferredKeyId?: string, boundKeyFallbackPolicy?: 'strict' | 'pool'): Promise<string>;
 
-export { type StreamUsageTap, aggregateAnthropicSseToJsonBody, getAnthropicEndpointTransformer, getGeminiEndpointTransformer, getResponsesEndpointTransformer, getSharedExecutor, readBody, relayResponse, resolvePoolBoundKey, writeBoundAccountError, writeError };
+export { type StreamUsageTap, aggregateAnthropicSseToJsonBody, cancelDiscardedResponse, getAnthropicEndpointTransformer, getGeminiEndpointTransformer, getResponsesEndpointTransformer, getSharedExecutor, projectUpstreamResponseHeaders, readBody, relayResponse, resolvePoolBoundKey, writeBoundAccountError, writeError };