@omnicross/core 0.1.2 → 0.1.4

package/dist/{chunk-4NBS6KPV.cjs → chunk-DQ5VAYZ6.cjs}

@@ -1,7 +1,9 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// src/completion/openrouter-headers.ts
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkUNEFIWXIcjs = require('./chunk-UNEFIWXI.cjs');
+
+// src/completion/openrouter-headers.ts
 var OPENROUTER_DEFAULT_BASE_URL = "https://openrouter.ai/api/v1";
-var OPENROUTER_HTTP_REFERER = "https://omnicross.dev";
-var OPENROUTER_X_TITLE = "Omnicross";
 function buildOpenRouterHeaders(credentials, options = {}) {
   const apiKey = _optionalChain([credentials, 'access', _ => _.apiKey, 'optionalAccess', _2 => _2.trim, 'call', _3 => _3()]);
   if (!apiKey) {
@@ -9,8 +11,7 @@ function buildOpenRouterHeaders(credentials, options = {}) {
   }
   const headers = {
     Authorization: `Bearer ${apiKey}`,
-    "HTTP-Referer": OPENROUTER_HTTP_REFERER,
-    "X-Title": OPENROUTER_X_TITLE
+    ..._chunkUNEFIWXIcjs.OPENROUTER_APP_HEADERS
   };
   if (options.contentType !== false) {
     headers["Content-Type"] = _nullishCoalesce(options.contentType, () => ( "application/json"));
@@ -38,6 +39,4 @@ function buildOpenRouterUrl(endpoint, path) {
 
 
 
-
-
-exports.OPENROUTER_DEFAULT_BASE_URL = OPENROUTER_DEFAULT_BASE_URL; exports.OPENROUTER_HTTP_REFERER = OPENROUTER_HTTP_REFERER; exports.OPENROUTER_X_TITLE = OPENROUTER_X_TITLE; exports.buildOpenRouterHeaders = buildOpenRouterHeaders; exports.resolveOpenRouterBaseUrl = resolveOpenRouterBaseUrl; exports.buildOpenRouterUrl = buildOpenRouterUrl;
+exports.OPENROUTER_DEFAULT_BASE_URL = OPENROUTER_DEFAULT_BASE_URL; exports.buildOpenRouterHeaders = buildOpenRouterHeaders; exports.resolveOpenRouterBaseUrl = resolveOpenRouterBaseUrl; exports.buildOpenRouterUrl = buildOpenRouterUrl;

package/dist/chunk-E3UCVHLP.cjs

@@ -0,0 +1,142 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkFCR77GYMcjs = require('./chunk-FCR77GYM.cjs');
+
+
+
+var _chunkAEOZIDEBcjs = require('./chunk-AEOZIDEB.cjs');
+
+
+var _chunkXSVNC2UDcjs = require('./chunk-XSVNC2UD.cjs');
+
+// src/outbound-api/auditCapture.ts
+var _crypto = require('crypto');
+function isStreamingContentType(res) {
+  const ct = res.getHeader("content-type");
+  const value = Array.isArray(ct) ? ct.join(";") : String(_nullishCoalesce(ct, () => ( "")));
+  return value.toLowerCase().includes("text/event-stream");
+}
+function resolveClientIp(req, trustForwardedFor) {
+  if (trustForwardedFor) {
+    const xff = req.headers["x-forwarded-for"];
+    const raw = Array.isArray(xff) ? xff[0] : xff;
+    if (typeof raw === "string" && raw.trim()) {
+      const first = _optionalChain([raw, 'access', _ => _.split, 'call', _2 => _2(","), 'access', _3 => _3[0], 'optionalAccess', _4 => _4.trim, 'call', _5 => _5()]);
+      if (first) return first;
+    }
+  }
+  return _nullishCoalesce(_optionalChain([req, 'access', _6 => _6.socket, 'optionalAccess', _7 => _7.remoteAddress]), () => ( void 0));
+}
+function truncateToBytes(text, maxBytes) {
+  const buf = Buffer.from(text, "utf8");
+  if (buf.length <= maxBytes) return text;
+  return buf.subarray(0, maxBytes).toString("utf8");
+}
+function beginAuditCapture(req, res, now) {
+  const config = _chunkAEOZIDEBcjs.getAuditCaptureConfig.call(void 0, );
+  if (!config) return null;
+  let rawRequestBody;
+  const responseChunks = [];
+  let responseBytes = 0;
+  let streamDetected = false;
+  let finished = false;
+  const ctx = {
+    setRequestBody(raw) {
+      if (config.captureBodies) rawRequestBody = raw;
+    }
+  };
+  if (config.captureBodies) {
+    installResponseCapture(res, config.maxBodyBytes, {
+      push(chunk) {
+        responseBytes += chunk.length;
+        responseChunks.push(chunk);
+      },
+      get bytes() {
+        return responseBytes;
+      },
+      markStream() {
+        streamDetected = true;
+      },
+      get isStream() {
+        return streamDetected;
+      }
+    });
+  }
+  const finalize = () => {
+    if (finished) return;
+    finished = true;
+    try {
+      const record = {
+        id: _crypto.randomUUID.call(void 0, ),
+        ts: now,
+        method: _nullishCoalesce(req.method, () => ( "")),
+        path: _nullishCoalesce((_nullishCoalesce(req.url, () => ( ""))).split("?")[0], () => ( "")),
+        status: res.statusCode,
+        latencyMs: Math.max(0, Date.now() - now)
+      };
+      if (ctx.keyId != null) record.keyId = ctx.keyId;
+      const ip = resolveClientIp(req, config.trustForwardedFor);
+      if (ip) record.ip = ip;
+      const ua = req.headers["user-agent"];
+      if (typeof ua === "string" && ua) record.ua = ua;
+      if (ctx.model) record.model = ctx.model;
+      if (ctx.provider) record.provider = ctx.provider;
+      const usage = _chunkXSVNC2UDcjs.readAuditUsage.call(void 0, res);
+      if (usage) {
+        if (typeof usage.inputTokens === "number") record.inputTokens = usage.inputTokens;
+        if (typeof usage.outputTokens === "number") record.outputTokens = usage.outputTokens;
+        if (typeof usage.costUsd === "number") record.costUsd = usage.costUsd;
+        if (!record.model && usage.model) record.model = usage.model;
+        if (!record.provider && usage.provider) record.provider = usage.provider;
+      }
+      if (ctx.error) record.error = _chunkFCR77GYMcjs.redactAuditText.call(void 0, ctx.error);
+      if (config.captureBodies) {
+        if (rawRequestBody != null && rawRequestBody.length > 0) {
+          record.requestBody = _chunkFCR77GYMcjs.redactAuditText.call(void 0, truncateToBytes(rawRequestBody, config.maxBodyBytes));
+        }
+        if (!streamDetected && responseChunks.length > 0) {
+          const body = Buffer.concat(responseChunks).toString("utf8");
+          record.responseBody = _chunkFCR77GYMcjs.redactAuditText.call(void 0, body);
+        }
+      }
+      _chunkAEOZIDEBcjs.recordAudit.call(void 0, record);
+    } catch (e) {
+    }
+  };
+  res.once("close", finalize);
+  return ctx;
+}
+function installResponseCapture(res, maxBodyBytes, sink) {
+  let contentTypeChecked = false;
+  const capture = (chunk) => {
+    if (sink.isStream) return;
+    if (!contentTypeChecked) {
+      contentTypeChecked = true;
+      if (isStreamingContentType(res)) {
+        sink.markStream();
+        return;
+      }
+    }
+    if (sink.bytes >= maxBodyBytes) return;
+    let buf = null;
+    if (Buffer.isBuffer(chunk)) buf = chunk;
+    else if (typeof chunk === "string") buf = Buffer.from(chunk, "utf8");
+    if (!buf || buf.length === 0) return;
+    const remaining = maxBodyBytes - sink.bytes;
+    sink.push(buf.length > remaining ? buf.subarray(0, remaining) : buf);
+  };
+  const originalWrite = res.write.bind(res);
+  const originalEnd = res.end.bind(res);
+  res.write = ((chunk, ...args) => {
+    if (chunk != null) capture(chunk);
+    return originalWrite(chunk, ...args);
+  });
+  res.end = ((chunk, ...args) => {
+    if (chunk != null && typeof chunk !== "function") capture(chunk);
+    return originalEnd(chunk, ...args);
+  });
+}
+
+
+
+exports.beginAuditCapture = beginAuditCapture;

package/dist/chunk-FCR77GYM.cjs

@@ -0,0 +1,33 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/outbound-api/auditRedact.ts
+var AUDIT_REDACTED = "***REDACTED***";
+var RULES = [
+  // `sk-…` family (Anthropic sk-ant-, omnicross sk-omnicross-, OpenAI sk-proj-/sk-).
+  { re: /\bsk-[A-Za-z0-9_-]{6,}/g, replace: AUDIT_REDACTED },
+  // Google API keys.
+  { re: /\bAIza[A-Za-z0-9_-]{10,}/g, replace: AUDIT_REDACTED },
+  // `Bearer <token>` (auth headers echoed into a body / SSE error).
+  { re: /\bBearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, replace: `Bearer ${AUDIT_REDACTED}` },
+  // Inline `x-api-key` / `api-key` / `authorization` label followed by a value.
+  {
+    re: /\b(x-api-key|api[_-]?key|authorization)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  },
+  // `x-goog-api-key` header echoed inline.
+  {
+    re: /\b(x-goog-api-key)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  }
+];
+function redactAuditText(text) {
+  if (typeof text !== "string" || text.length === 0) return _nullishCoalesce(text, () => ( ""));
+  let out = text;
+  for (const { re, replace } of RULES) {
+    out = out.replace(re, replace);
+  }
+  return out;
+}
+
+
+
+
+exports.AUDIT_REDACTED = AUDIT_REDACTED; exports.redactAuditText = redactAuditText;

package/dist/{chunk-74TMJA7Z.js → chunk-HRRYG2AX.js}

@@ -31,15 +31,19 @@ var SubscriptionAuthSource = class {
     try {
       await this.profile.authStrategy.applyHeaders(headers, {
         upstreamUrl: hints.upstreamUrl,
-        resolvedModel: hints.model
+        resolvedModel: hints.model,
+        sessionKey: hints.sessionKey,
+        reportSelection: hints.reportSelection,
+        preferredAccountId: hints.preferredAccountId
       });
     } catch (err) {
       console.warn("[SubscriptionAuthSource] authStrategy.applyHeaders threw:", serializeError(err));
     }
   }
-  /** Delegate the 401-refresh decision to the bound strategy. */
-  async onUnauthorized() {
-    return this.profile.authStrategy.onUnauthorized();
+  /** Delegate the 401-refresh decision to the bound strategy, threading the
+   *  session key so the account actually served is the one refreshed (D7). */
+  async onUnauthorized(sessionKey) {
+    return this.profile.authStrategy.onUnauthorized(sessionKey);
   }
   /** Resolve the upstream URL from the profile, when it provides one. */
   resolveUpstreamUrl(model) {

package/dist/chunk-HUZZZ3JL.js

@@ -0,0 +1,32 @@
+// src/openrouter.ts
+function isOpenRouterProvider(provider) {
+  const baseUrl = (provider.api_base_url || "").toLowerCase();
+  return baseUrl.includes("openrouter.ai");
+}
+var DEFAULT_APP_IDENTITY = {
+  referer: "https://github.com/Dumoedss/omnicross",
+  title: "Omnicross"
+};
+var OPENROUTER_APP_HEADERS = {
+  "HTTP-Referer": DEFAULT_APP_IDENTITY.referer,
+  "X-Title": DEFAULT_APP_IDENTITY.title
+};
+function setOpenRouterAppIdentity(identity) {
+  const referer = identity.referer?.trim();
+  const title = identity.title?.trim();
+  if (referer) OPENROUTER_APP_HEADERS["HTTP-Referer"] = referer;
+  if (title) OPENROUTER_APP_HEADERS["X-Title"] = title;
+}
+function getOpenRouterAppIdentity() {
+  return {
+    referer: OPENROUTER_APP_HEADERS["HTTP-Referer"],
+    title: OPENROUTER_APP_HEADERS["X-Title"]
+  };
+}
+
+export {
+  isOpenRouterProvider,
+  OPENROUTER_APP_HEADERS,
+  setOpenRouterAppIdentity,
+  getOpenRouterAppIdentity
+};

package/dist/{chunk-KUU2RNG6.cjs → chunk-HYN75H6G.cjs}

@@ -23,6 +23,9 @@ async function executeProviderCall(ctx) {
   const finalBody = prepareBody ? await prepareBody(requestBody, config) : requestBody;
   const url = resolveUrl(config);
   const headers = buildHeaders(config);
+  if (!headers["content-type"] && !headers["Content-Type"]) {
+    headers["content-type"] = "application/json";
+  }
   const fetched = await fetchFn(url, headers, finalBody);
   let response = fetched;
   if (runResponseChain) {

package/dist/{chunk-QOCNX236.js → chunk-IAXWICZU.js}

@@ -37,10 +37,33 @@ function collectMatchText(anthropicBody) {
   for (let i = recent.length - 1; i >= 0; i--) slices.push(recent[i]);
   return slices;
 }
+function deriveSubscriptionSessionKey(anthropicBody) {
+  const system = flattenMatchText(anthropicBody.system).trim().slice(0, MATCH_TEXT_PER_MESSAGE_CAP);
+  const messages = Array.isArray(anthropicBody.messages) ? anthropicBody.messages : [];
+  let firstUser = "";
+  for (const message of messages) {
+    if (message && typeof message === "object" && message.role === "user") {
+      firstUser = flattenMatchText(message.content).trim().slice(0, MATCH_TEXT_PER_MESSAGE_CAP);
+      break;
+    }
+  }
+  const anchor = `${system}\0${firstUser}`;
+  if (!system && !firstUser) return void 0;
+  return fnv1a(anchor);
+}
+function fnv1a(str) {
+  let h = 2166136261;
+  for (let i = 0; i < str.length; i++) {
+    h ^= str.charCodeAt(i);
+    h = Math.imul(h, 16777619);
+  }
+  return (h >>> 0).toString(16).padStart(8, "0");
+}
 
 export {
   MATCH_TEXT_PER_MESSAGE_CAP,
   MATCH_TEXT_RECENT_MESSAGES,
   flattenMatchText,
-  collectMatchText
+  collectMatchText,
+  deriveSubscriptionSessionKey
 };

package/dist/{chunk-JO5NLTLY.js → chunk-IK3KE3AU.js}

@@ -23,6 +23,9 @@ async function executeProviderCall(ctx) {
   const finalBody = prepareBody ? await prepareBody(requestBody, config) : requestBody;
   const url = resolveUrl(config);
   const headers = buildHeaders(config);
+  if (!headers["content-type"] && !headers["Content-Type"]) {
+    headers["content-type"] = "application/json";
+  }
   const fetched = await fetchFn(url, headers, finalBody);
   let response = fetched;
   if (runResponseChain) {

package/dist/{chunk-V5KPWNYX.cjs → chunk-JMJBSACD.cjs}

@@ -1,16 +1,16 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
 
-var _chunk6VIXXLMXcjs = require('./chunk-6VIXXLMX.cjs');
 
 
 
+var _chunkGMMT7RVNcjs = require('./chunk-GMMT7RVN.cjs');
 
 
-var _chunkGMMT7RVNcjs = require('./chunk-GMMT7RVN.cjs');
+var _chunkUNEFIWXIcjs = require('./chunk-UNEFIWXI.cjs');
 
 // src/completion/NativeSearchInjector.ts
 function detectNativeSearch(modelId, apiFormat, provider, userExplicit) {
-  if (_chunk6VIXXLMXcjs.isOpenRouterProvider.call(void 0, provider)) {
+  if (_chunkUNEFIWXIcjs.isOpenRouterProvider.call(void 0, provider)) {
     return { supported: true, nativeProvider: "openrouter" };
   }
   if (isXaiProvider(provider)) {

package/dist/chunk-K5NM7VAH.js

@@ -0,0 +1,33 @@
+// src/outbound-api/auditRedact.ts
+var AUDIT_REDACTED = "***REDACTED***";
+var RULES = [
+  // `sk-…` family (Anthropic sk-ant-, omnicross sk-omnicross-, OpenAI sk-proj-/sk-).
+  { re: /\bsk-[A-Za-z0-9_-]{6,}/g, replace: AUDIT_REDACTED },
+  // Google API keys.
+  { re: /\bAIza[A-Za-z0-9_-]{10,}/g, replace: AUDIT_REDACTED },
+  // `Bearer <token>` (auth headers echoed into a body / SSE error).
+  { re: /\bBearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, replace: `Bearer ${AUDIT_REDACTED}` },
+  // Inline `x-api-key` / `api-key` / `authorization` label followed by a value.
+  {
+    re: /\b(x-api-key|api[_-]?key|authorization)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  },
+  // `x-goog-api-key` header echoed inline.
+  {
+    re: /\b(x-goog-api-key)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  }
+];
+function redactAuditText(text) {
+  if (typeof text !== "string" || text.length === 0) return text ?? "";
+  let out = text;
+  for (const { re, replace } of RULES) {
+    out = out.replace(re, replace);
+  }
+  return out;
+}
+
+export {
+  AUDIT_REDACTED,
+  redactAuditText
+};

package/dist/{chunk-N3V2J5ZO.cjs → chunk-KFI44N2R.cjs}

@@ -31,15 +31,19 @@ var SubscriptionAuthSource = class {
     try {
       await this.profile.authStrategy.applyHeaders(headers, {
         upstreamUrl: hints.upstreamUrl,
-        resolvedModel: hints.model
+        resolvedModel: hints.model,
+        sessionKey: hints.sessionKey,
+        reportSelection: hints.reportSelection,
+        preferredAccountId: hints.preferredAccountId
       });
     } catch (err) {
       console.warn("[SubscriptionAuthSource] authStrategy.applyHeaders threw:", _chunkSVNDB62Dcjs.serializeError.call(void 0, err));
     }
   }
-  /** Delegate the 401-refresh decision to the bound strategy. */
-  async onUnauthorized() {
-    return this.profile.authStrategy.onUnauthorized();
+  /** Delegate the 401-refresh decision to the bound strategy, threading the
+   *  session key so the account actually served is the one refreshed (D7). */
+  async onUnauthorized(sessionKey) {
+    return this.profile.authStrategy.onUnauthorized(sessionKey);
   }
   /** Resolve the upstream URL from the profile, when it provides one. */
   resolveUpstreamUrl(model) {

package/dist/chunk-L74VDN4A.cjs

@@ -0,0 +1,32 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/pipeline/billingEmit.ts
+var sink = null;
+var captureConfig = null;
+function setBillingSink(fn) {
+  sink = fn;
+}
+function setBillingCaptureConfig(config) {
+  captureConfig = config && config.enabled ? config : null;
+}
+function getBillingCaptureConfig() {
+  return captureConfig;
+}
+function publishBillingEvent(event) {
+  const active = sink;
+  if (!active) return;
+  try {
+    active(event);
+  } catch (e) {
+  }
+}
+function __resetBillingSinkForTests() {
+  sink = null;
+  captureConfig = null;
+}
+
+
+
+
+
+
+
+exports.setBillingSink = setBillingSink; exports.setBillingCaptureConfig = setBillingCaptureConfig; exports.getBillingCaptureConfig = getBillingCaptureConfig; exports.publishBillingEvent = publishBillingEvent; exports.__resetBillingSinkForTests = __resetBillingSinkForTests;

package/dist/chunk-OCEUVQHW.cjs

@@ -0,0 +1,112 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// src/pipeline/upstreamFetch.ts
+var _undici = require('undici');
+var _socks = require('socks');
+var resolver = null;
+var generation = 0;
+var cache = /* @__PURE__ */ new Map();
+function setUpstreamProxyResolver(fn) {
+  resolver = fn;
+  bumpUpstreamProxyGeneration();
+}
+function bumpUpstreamProxyGeneration() {
+  generation += 1;
+  const old = cache;
+  cache = /* @__PURE__ */ new Map();
+  for (const dispatcher of old.values()) {
+    try {
+      void _optionalChain([dispatcher, 'access', _ => _.close, 'optionalCall', _2 => _2()]);
+    } catch (e) {
+    }
+  }
+}
+function normalizeProxy(cfg) {
+  if ("url" in cfg) {
+    let u;
+    try {
+      u = new URL(cfg.url);
+    } catch (e2) {
+      return void 0;
+    }
+    const proto = u.protocol.replace(/:$/, "").toLowerCase();
+    const kind2 = proto === "socks5" || proto === "socks" ? "socks5" : proto === "https" ? "https" : "http";
+    const port = u.port ? Number(u.port) : kind2 === "https" ? 443 : kind2 === "socks5" ? 1080 : 80;
+    if (!u.hostname || !Number.isFinite(port)) return void 0;
+    return {
+      kind: kind2,
+      host: u.hostname,
+      port,
+      username: u.username ? decodeURIComponent(u.username) : void 0,
+      password: u.password ? decodeURIComponent(u.password) : void 0
+    };
+  }
+  const kind = cfg.type === "socks5" ? "socks5" : cfg.type === "https" ? "https" : "http";
+  if (!cfg.host || !Number.isFinite(cfg.port)) return void 0;
+  return {
+    kind,
+    host: cfg.host,
+    port: cfg.port,
+    username: cfg.username || void 0,
+    password: cfg.password || void 0
+  };
+}
+function proxyKey(p) {
+  return `${p.kind}://${_nullishCoalesce(p.username, () => ( ""))}:${_nullishCoalesce(p.password, () => ( ""))}@${p.host}:${p.port}`;
+}
+function socksConnector(p) {
+  const base = _undici.buildConnector.call(void 0, {});
+  return ((options, callback) => {
+    const destPort = Number(options.port) || (options.protocol === "https:" ? 443 : 80);
+    _socks.SocksClient.createConnection({
+      proxy: { host: p.host, port: p.port, type: 5, userId: p.username, password: p.password },
+      command: "connect",
+      destination: { host: options.hostname, port: destPort }
+    }).then(({ socket }) => {
+      base({ ...options, httpSocket: socket }, callback);
+    }).catch((err) => callback(err, null));
+  });
+}
+function buildDispatcher(p) {
+  if (p.kind === "socks5") {
+    return new (0, _undici.Agent)({ connect: socksConnector(p) });
+  }
+  const auth = p.username != null ? `${encodeURIComponent(p.username)}:${encodeURIComponent(_nullishCoalesce(p.password, () => ( "")))}@` : "";
+  const uri = `${p.kind}://${auth}${p.host}:${p.port}`;
+  return new (0, _undici.ProxyAgent)({ uri });
+}
+function resolveUpstreamDispatcher(ctx) {
+  const active = resolver;
+  if (!active) return void 0;
+  let cfg;
+  try {
+    cfg = active(ctx);
+  } catch (e3) {
+    return void 0;
+  }
+  if (!cfg) return void 0;
+  const norm = normalizeProxy(cfg);
+  if (!norm) return void 0;
+  const key = `${generation}\0${proxyKey(norm)}`;
+  let dispatcher = cache.get(key);
+  if (!dispatcher) {
+    dispatcher = buildDispatcher(norm);
+    cache.set(key, dispatcher);
+  }
+  return dispatcher;
+}
+function fetchUpstream(url, init, ctx) {
+  const dispatcher = resolveUpstreamDispatcher({ ..._nullishCoalesce(ctx, () => ( {})), url });
+  if (!dispatcher) return fetch(url, init);
+  return fetch(url, { ...init, dispatcher });
+}
+function __resetUpstreamProxyForTests() {
+  resolver = null;
+  bumpUpstreamProxyGeneration();
+}
+
+
+
+
+
+
+
+exports.setUpstreamProxyResolver = setUpstreamProxyResolver; exports.bumpUpstreamProxyGeneration = bumpUpstreamProxyGeneration; exports.resolveUpstreamDispatcher = resolveUpstreamDispatcher; exports.fetchUpstream = fetchUpstream; exports.__resetUpstreamProxyForTests = __resetUpstreamProxyForTests;

package/dist/chunk-OE6TDIWW.js

@@ -0,0 +1,22 @@
+// src/pipeline/webhookEmit.ts
+var sink = null;
+function setWebhookSink(fn) {
+  sink = fn;
+}
+function emitWebhookEvent(event) {
+  const active = sink;
+  if (!active) return;
+  try {
+    active(event);
+  } catch {
+  }
+}
+function __resetWebhookSinkForTests() {
+  sink = null;
+}
+
+export {
+  setWebhookSink,
+  emitWebhookEvent,
+  __resetWebhookSinkForTests
+};

package/dist/chunk-OZFM4X3S.js

@@ -0,0 +1,18 @@
+// src/pipeline/auditUsageStash.ts
+var stash = /* @__PURE__ */ new WeakMap();
+function stashAuditUsage(key, detail) {
+  const existing = stash.get(key);
+  stash.set(key, existing ? { ...existing, ...detail } : { ...detail });
+}
+function readAuditUsage(key) {
+  return stash.get(key);
+}
+function __clearAuditUsageForTests(key) {
+  stash.delete(key);
+}
+
+export {
+  stashAuditUsage,
+  readAuditUsage,
+  __clearAuditUsageForTests
+};

package/dist/{chunk-LKZJEL6E.cjs → chunk-Q27JY5RG.cjs}

@@ -4,7 +4,7 @@ var _chunkA2YMUCBTcjs = require('./chunk-A2YMUCBT.cjs');
 
 
 
-var _chunk6VIXXLMXcjs = require('./chunk-6VIXXLMX.cjs');
+var _chunkUNEFIWXIcjs = require('./chunk-UNEFIWXI.cjs');
 
 // src/completion/header-builder.ts
 function getProviderHeaders(provider, apiKey) {
@@ -14,7 +14,9 @@ function getProviderHeaders(provider, apiKey) {
     case "anthropic":
       headers = {
         "Content-Type": "application/json",
-        "x-api-key": apiKey,
+        // Third-party Anthropic-Messages relays often gate on a Bearer token
+        // rather than x-api-key; `provider.useBearer` opts into that.
+        ...provider.useBearer ? { Authorization: `Bearer ${apiKey}` } : { "x-api-key": apiKey },
         "anthropic-version": "2025-01-10"
         // Required for extended thinking feature
       };
@@ -40,8 +42,8 @@ function getProviderHeaders(provider, apiKey) {
       };
       break;
   }
-  if (_chunk6VIXXLMXcjs.isOpenRouterProvider.call(void 0, provider)) {
-    return { ...headers, ..._chunk6VIXXLMXcjs.OPENROUTER_APP_HEADERS };
+  if (_chunkUNEFIWXIcjs.isOpenRouterProvider.call(void 0, provider)) {
+    return { ...headers, ..._chunkUNEFIWXIcjs.OPENROUTER_APP_HEADERS };
   }
   return headers;
 }

package/dist/{chunk-SPVWWUHX.cjs → chunk-QWBWGODS.cjs}

@@ -37,10 +37,33 @@ function collectMatchText(anthropicBody) {
   for (let i = recent.length - 1; i >= 0; i--) slices.push(recent[i]);
   return slices;
 }
+function deriveSubscriptionSessionKey(anthropicBody) {
+  const system = flattenMatchText(anthropicBody.system).trim().slice(0, MATCH_TEXT_PER_MESSAGE_CAP);
+  const messages = Array.isArray(anthropicBody.messages) ? anthropicBody.messages : [];
+  let firstUser = "";
+  for (const message of messages) {
+    if (message && typeof message === "object" && message.role === "user") {
+      firstUser = flattenMatchText(message.content).trim().slice(0, MATCH_TEXT_PER_MESSAGE_CAP);
+      break;
+    }
+  }
+  const anchor = `${system}\0${firstUser}`;
+  if (!system && !firstUser) return void 0;
+  return fnv1a(anchor);
+}
+function fnv1a(str) {
+  let h = 2166136261;
+  for (let i = 0; i < str.length; i++) {
+    h ^= str.charCodeAt(i);
+    h = Math.imul(h, 16777619);
+  }
+  return (h >>> 0).toString(16).padStart(8, "0");
+}
+
 
 
 
 
 
 
-exports.MATCH_TEXT_PER_MESSAGE_CAP = MATCH_TEXT_PER_MESSAGE_CAP; exports.MATCH_TEXT_RECENT_MESSAGES = MATCH_TEXT_RECENT_MESSAGES; exports.flattenMatchText = flattenMatchText; exports.collectMatchText = collectMatchText;
+exports.MATCH_TEXT_PER_MESSAGE_CAP = MATCH_TEXT_PER_MESSAGE_CAP; exports.MATCH_TEXT_RECENT_MESSAGES = MATCH_TEXT_RECENT_MESSAGES; exports.flattenMatchText = flattenMatchText; exports.collectMatchText = collectMatchText; exports.deriveSubscriptionSessionKey = deriveSubscriptionSessionKey;