@omnicross/core 0.1.2 → 0.1.4

package/dist/{chunk-UYPEN5XE.cjs → chunk-RGTR7CIO.cjs}

@@ -1,18 +1,18 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;
 
-var _chunk7YN22L2Hcjs = require('./chunk-7YN22L2H.cjs');
+var _chunkDWKQZ2SKcjs = require('./chunk-DWKQZ2SK.cjs');
 
 
-var _chunk2DCNB7DFcjs = require('./chunk-2DCNB7DF.cjs');
+var _chunk4VAVYUZScjs = require('./chunk-4VAVYUZS.cjs');
 
 
-var _chunkC72S6TTVcjs = require('./chunk-C72S6TTV.cjs');
+var _chunk7YN22L2Hcjs = require('./chunk-7YN22L2H.cjs');
 
 
-var _chunkDWKQZ2SKcjs = require('./chunk-DWKQZ2SK.cjs');
+var _chunkSU2GCLACcjs = require('./chunk-SU2GCLAC.cjs');
 
 
-var _chunk4VAVYUZScjs = require('./chunk-4VAVYUZS.cjs');
+var _chunkC72S6TTVcjs = require('./chunk-C72S6TTV.cjs');
 
 
 var _chunkRSJ3TWJQcjs = require('./chunk-RSJ3TWJQ.cjs');
@@ -207,7 +207,7 @@ var BuiltinTransformers = {
   GeminiTransformer: _chunk7YN22L2Hcjs.GeminiTransformer,
   GeminiCodeAssistTransformer: _chunkRSJ3TWJQcjs.GeminiCodeAssistTransformer,
   AnthropicTransformer: _chunk4VAVYUZScjs.AnthropicTransformer,
-  OpenAIResponseTransformer: _chunk2DCNB7DFcjs.OpenAIResponseTransformer,
+  OpenAIResponseTransformer: _chunkSU2GCLACcjs.OpenAIResponseTransformer,
   OpenCodeGoTransformer: _chunkC72S6TTVcjs.OpenCodeGoTransformer
 };
 function getBuiltinTransformers() {

package/dist/chunk-RPII3E6Z.cjs

@@ -0,0 +1,145 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;
+
+
+var _chunk6RPZADX3cjs = require('./chunk-6RPZADX3.cjs');
+
+// src/provider-proxy/identity/SubscriptionIdentityStore.ts
+var CC_HEADER_TTL_MS = 7 * 24 * 60 * 60 * 1e3;
+var KEY_SEP = "\0";
+function normalizeUa(ua) {
+  if (typeof ua !== "string") return void 0;
+  const trimmed = ua.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
+var SubscriptionIdentityStore = (_class = class {
+  __init() {this.identities = /* @__PURE__ */ new Map()}
+  
+  
+  
+  
+  __init2() {this.persistence = null}
+  constructor(opts = {}) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);
+    this.now = _nullishCoalesce(opts.now, () => ( Date.now));
+    this.enabled = _nullishCoalesce(opts.enabled, () => ( false));
+    this.ua = normalizeUa(opts.ua);
+    this.ccHeaderTtlMs = _nullishCoalesce(opts.ccHeaderTtlMs, () => ( CC_HEADER_TTL_MS));
+  }
+  /** Whether capture/replay is engaged (config flag). */
+  isEnabled() {
+    return this.enabled;
+  }
+  /** The operator UA baseline (piece 4), or undefined when unset. */
+  uaBaseline() {
+    return this.ua;
+  }
+  /**
+   * Re-apply config to the LIVE shared instance (bootstrap, mirroring the health
+   * tracker's `configure`). Only defined fields override; `ua: null` clears the
+   * baseline.
+   */
+  configure(opts) {
+    if (opts.enabled !== void 0) this.enabled = opts.enabled;
+    if (opts.ua !== void 0) this.ua = normalizeUa(_nullishCoalesce(opts.ua, () => ( void 0)));
+  }
+  /** Install (or clear) the write-through persistence port (P2). */
+  setPersistence(port) {
+    this.persistence = port;
+  }
+  /**
+   * Boot seed (P2, D5): install a PERSISTED identity for an account, but NEVER
+   * over a live in-memory capture (a re-captured identity from this session wins).
+   * A no-op for an empty/absent identity. Does NOT write back through the port.
+   */
+  seed(providerId, accountId, identity) {
+    if (!accountId || !identity) return;
+    const headers = _chunk6RPZADX3cjs.sanitizeFrozenHeaders.call(void 0, _nullishCoalesce(identity.headers, () => ( {})));
+    if (Object.keys(headers).length === 0) return;
+    const key = this.key(providerId, accountId);
+    if (this.identities.has(key)) return;
+    this.identities.set(key, {
+      headers,
+      capturedAt: typeof identity.capturedAt === "number" ? identity.capturedAt : this.now()
+    });
+  }
+  /**
+   * Capture a real client's fingerprint headers for an account. First-seen ⇒
+   * FREEZE the whole (sanitized) bag. Already-frozen ⇒ within the TTL, no change
+   * (stable identity); past the TTL, refresh the NON-stainless headers from the
+   * new observation while keeping stainless frozen-stable (P2). An empty/absent
+   * account id or an empty sanitized bag is a no-op (so an account with no
+   * fingerprint headers never freezes an empty identity → the caller falls back
+   * to the UA baseline). Fires the persistence port on a freeze/refresh.
+   */
+  capture(providerId, accountId, incoming, now = this.now()) {
+    if (!accountId) return;
+    const clean = _chunk6RPZADX3cjs.sanitizeFrozenHeaders.call(void 0, incoming);
+    if (Object.keys(clean).length === 0) return;
+    const key = this.key(providerId, accountId);
+    const existing = this.identities.get(key);
+    if (!existing) {
+      const frozen = { headers: clean, capturedAt: now };
+      this.identities.set(key, frozen);
+      this.emitPersist(providerId, accountId, frozen);
+      return;
+    }
+    if (now - existing.capturedAt < this.ccHeaderTtlMs) return;
+    const refreshed = {
+      headers: _chunk6RPZADX3cjs.refreshNonStainless.call(void 0, existing.headers, clean),
+      capturedAt: now
+    };
+    this.identities.set(key, refreshed);
+    this.emitPersist(providerId, accountId, refreshed);
+  }
+  /**
+   * The frozen identity headers for an account, or `undefined` when none is
+   * frozen (or the frozen set is empty). Returns a COPY (the caller merges it into
+   * a mutable outbound header bag).
+   */
+  replay(providerId, accountId) {
+    if (!accountId) return void 0;
+    const frozen = this.identities.get(this.key(providerId, accountId));
+    if (!frozen || Object.keys(frozen.headers).length === 0) return void 0;
+    return { ...frozen.headers };
+  }
+  /** Whether an identity is frozen for an account (admin coarse status — D7). */
+  hasIdentity(providerId, accountId) {
+    const frozen = this.identities.get(this.key(providerId, accountId));
+    return !!frozen && Object.keys(frozen.headers).length > 0;
+  }
+  /** The freeze/refresh time for an account's identity (admin coarse status). */
+  capturedAt(providerId, accountId) {
+    return _optionalChain([this, 'access', _ => _.identities, 'access', _2 => _2.get, 'call', _3 => _3(this.key(providerId, accountId)), 'optionalAccess', _4 => _4.capturedAt]);
+  }
+  emitPersist(providerId, accountId, identity) {
+    if (!this.persistence) return;
+    try {
+      this.persistence.persist(providerId, accountId, {
+        headers: { ...identity.headers },
+        capturedAt: identity.capturedAt
+      });
+    } catch (e) {
+    }
+  }
+  key(providerId, accountId) {
+    return `${providerId}${KEY_SEP}${accountId}`;
+  }
+}, _class);
+var _shared = null;
+function getSharedIdentityStore() {
+  if (!_shared) _shared = new SubscriptionIdentityStore();
+  return _shared;
+}
+function setSharedIdentityStore(instance) {
+  _shared = instance;
+}
+function __resetSharedIdentityStoreForTests() {
+  _shared = null;
+}
+
+
+
+
+
+
+
+exports.CC_HEADER_TTL_MS = CC_HEADER_TTL_MS; exports.SubscriptionIdentityStore = SubscriptionIdentityStore; exports.getSharedIdentityStore = getSharedIdentityStore; exports.setSharedIdentityStore = setSharedIdentityStore; exports.__resetSharedIdentityStoreForTests = __resetSharedIdentityStoreForTests;

package/dist/{chunk-XBSYYZIY.cjs → chunk-SNYBEXLB.cjs}

@@ -1,15 +1,21 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/usage/usage-recorder.ts
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+var _chunkXSVNC2UDcjs = require('./chunk-XSVNC2UD.cjs');
+
+// src/usage/usage-recorder.ts
 var UsageRecorder = class {
   constructor(store, pricing, logger, options = {}) {
     this.store = store;
     this.pricing = pricing;
     this.logger = logger;
     this.defer = _nullishCoalesce(options.defer, () => ( ((fn) => setTimeout(fn, 0))));
+    this.onRecord = options.onRecord;
   }
   
   
   
   
+  
   /**
    * Record one LLM request. Returns immediately — the actual store insert is
    * deferred so the caller's response path is unblocked.
@@ -17,6 +23,14 @@ var UsageRecorder = class {
    * Errors during the insert are logged but never thrown.
    */
   record(input) {
+    if (input.auditResponse) {
+      _chunkXSVNC2UDcjs.stashAuditUsage.call(void 0, input.auditResponse, {
+        inputTokens: input.usage.inputTokens,
+        outputTokens: input.usage.outputTokens,
+        model: input.model,
+        provider: input.providerId
+      });
+    }
     this.defer(() => {
       void this.recordAsync(input).catch((err) => {
         this.logger.warn("[UsageRecorder] failed to persist usage event", {
@@ -35,6 +49,18 @@ var UsageRecorder = class {
       input.model,
       input.usage
     );
+    if (input.auditResponse) {
+      try {
+        _chunkXSVNC2UDcjs.stashAuditUsage.call(void 0, input.auditResponse, { costUsd });
+      } catch (e) {
+      }
+    }
+    if (this.onRecord && input.apiKeyId) {
+      try {
+        this.onRecord(input.apiKeyId, costUsd, Date.now());
+      } catch (e2) {
+      }
+    }
     const row = {
       messageId: _nullishCoalesce(input.messageId, () => ( null)),
       parentMessageId: _nullishCoalesce(input.parentMessageId, () => ( null)),
@@ -73,6 +99,9 @@ var UsageRecorder = class {
   getByApiKey(range) {
     return this.store.getByApiKey(range);
   }
+  getTimeSeries(range, bucket) {
+    return this.store.getTimeSeries(range, bucket);
+  }
   getMessagesForSession(sessionId) {
     return this.store.getMessagesForSession(sessionId);
   }
@@ -84,7 +113,7 @@ var UsageRecorder = class {
 var safeStringify = (value) => {
   try {
     return JSON.stringify(value);
-  } catch (e) {
+  } catch (e3) {
     return "";
   }
 };

package/dist/{chunk-2DCNB7DF.cjs → chunk-SU2GCLAC.cjs}

@@ -25,9 +25,10 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
     const input = [];
     for (const msg of request.messages) {
       if (msg.role === "system") {
+        const sysText = typeof msg.content === "string" ? msg.content : flattenContent(msg.content);
         input.push({
           role: "developer",
-          content: typeof msg.content === "string" ? msg.content : flattenContent(msg.content)
+          content: [{ type: "input_text", text: sysText }]
         });
       } else if (msg.role === "tool") {
         input.push({
@@ -36,9 +37,10 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
           output: typeof msg.content === "string" ? msg.content : ""
         });
       } else {
+        const text = typeof msg.content === "string" ? msg.content : flattenContent(msg.content);
         const entry = {
           role: msg.role,
-          content: typeof msg.content === "string" ? msg.content : flattenContent(msg.content)
+          content: [{ type: msg.role === "assistant" ? "output_text" : "input_text", text }]
         };
         if (msg.role === "assistant" && _optionalChain([msg, 'access', _ => _.tool_calls, 'optionalAccess', _2 => _2.length])) {
           input.push(entry);
@@ -60,7 +62,13 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
       model: request.model,
       input,
       stream: _nullishCoalesce(request.stream, () => ( false)),
-      ...request.max_tokens ? { max_output_tokens: request.max_tokens } : {},
+      // `store:false` is required by the codex backend and accepted by the
+      // public Responses API (which defaults to store:true). Always set it so
+      // codex relays (no discoverable url token) work without configuration.
+      store: false,
+      // `max_output_tokens` is intentionally omitted: the codex backend rejects
+      // it, and the public API falls back to its default when absent. If a
+      // public provider ever needs it honored, gate that on an opt-out flag.
       ...request.temperature !== void 0 ? { temperature: request.temperature } : {}
     };
     if (_optionalChain([request, 'access', _3 => _3.reasoning, 'optionalAccess', _4 => _4.effort]) && request.reasoning.effort !== "none") {
@@ -162,7 +170,19 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
    */
   async transformResponseOut(response, _context) {
     const contentType = _nullishCoalesce(response.headers.get("Content-Type"), () => ( ""));
-    if (contentType.includes("text/event-stream")) {
+    let isSse = contentType.includes("text/event-stream");
+    if (!isSse && response.body) {
+      const peek = response.clone();
+      try {
+        const reader = peek.body.getReader();
+        const { value } = await reader.read();
+        reader.releaseLock();
+        const head = value ? new TextDecoder().decode(value).trimStart() : "";
+        isSse = head.startsWith("event:") || head.startsWith("data:");
+      } catch (e2) {
+      }
+    }
+    if (isSse) {
       if (!response.body) {
         throw new Error("Stream response body is null");
       }
@@ -319,7 +339,7 @@ function convertResponseApiStreamToOpenAI(responseApiStream) {
         if (!isClosed) {
           try {
             controller.enqueue(encoder.encode(str));
-          } catch (e2) {
+          } catch (e3) {
             isClosed = true;
           }
         }
@@ -393,7 +413,7 @@ function convertResponseApiStreamToOpenAI(responseApiStream) {
                 default:
                   break;
               }
-            } catch (e3) {
+            } catch (e4) {
             }
           }
         }
@@ -403,7 +423,7 @@ function convertResponseApiStreamToOpenAI(responseApiStream) {
         if (!isClosed) {
           try {
             controller.close();
-          } catch (e4) {
+          } catch (e5) {
           }
         }
         reader.releaseLock();
@@ -426,7 +446,7 @@ function convertOpenAIStreamToResponseApi(openaiStream) {
         if (!isClosed) {
           try {
             controller.enqueue(encoder.encode(str));
-          } catch (e5) {
+          } catch (e6) {
             isClosed = true;
           }
         }
@@ -490,7 +510,7 @@ function convertOpenAIStreamToResponseApi(openaiStream) {
                   }
                 });
               }
-            } catch (e6) {
+            } catch (e7) {
             }
           }
         }
@@ -500,7 +520,7 @@ function convertOpenAIStreamToResponseApi(openaiStream) {
         if (!isClosed) {
           try {
             controller.close();
-          } catch (e7) {
+          } catch (e8) {
           }
         }
         reader.releaseLock();

package/dist/{chunk-5HTVET6E.js → chunk-TIER4SUC.js}

@@ -25,9 +25,10 @@ var OpenAIResponseTransformer = class {
     const input = [];
     for (const msg of request.messages) {
       if (msg.role === "system") {
+        const sysText = typeof msg.content === "string" ? msg.content : flattenContent(msg.content);
         input.push({
           role: "developer",
-          content: typeof msg.content === "string" ? msg.content : flattenContent(msg.content)
+          content: [{ type: "input_text", text: sysText }]
         });
       } else if (msg.role === "tool") {
         input.push({
@@ -36,9 +37,10 @@ var OpenAIResponseTransformer = class {
           output: typeof msg.content === "string" ? msg.content : ""
         });
       } else {
+        const text = typeof msg.content === "string" ? msg.content : flattenContent(msg.content);
         const entry = {
           role: msg.role,
-          content: typeof msg.content === "string" ? msg.content : flattenContent(msg.content)
+          content: [{ type: msg.role === "assistant" ? "output_text" : "input_text", text }]
         };
         if (msg.role === "assistant" && msg.tool_calls?.length) {
           input.push(entry);
@@ -60,7 +62,13 @@ var OpenAIResponseTransformer = class {
       model: request.model,
       input,
       stream: request.stream ?? false,
-      ...request.max_tokens ? { max_output_tokens: request.max_tokens } : {},
+      // `store:false` is required by the codex backend and accepted by the
+      // public Responses API (which defaults to store:true). Always set it so
+      // codex relays (no discoverable url token) work without configuration.
+      store: false,
+      // `max_output_tokens` is intentionally omitted: the codex backend rejects
+      // it, and the public API falls back to its default when absent. If a
+      // public provider ever needs it honored, gate that on an opt-out flag.
       ...request.temperature !== void 0 ? { temperature: request.temperature } : {}
     };
     if (request.reasoning?.effort && request.reasoning.effort !== "none") {
@@ -162,7 +170,19 @@ var OpenAIResponseTransformer = class {
    */
   async transformResponseOut(response, _context) {
     const contentType = response.headers.get("Content-Type") ?? "";
-    if (contentType.includes("text/event-stream")) {
+    let isSse = contentType.includes("text/event-stream");
+    if (!isSse && response.body) {
+      const peek = response.clone();
+      try {
+        const reader = peek.body.getReader();
+        const { value } = await reader.read();
+        reader.releaseLock();
+        const head = value ? new TextDecoder().decode(value).trimStart() : "";
+        isSse = head.startsWith("event:") || head.startsWith("data:");
+      } catch {
+      }
+    }
+    if (isSse) {
       if (!response.body) {
         throw new Error("Stream response body is null");
       }

package/dist/chunk-TKJMZBAH.js

@@ -0,0 +1,32 @@
+// src/pipeline/billingEmit.ts
+var sink = null;
+var captureConfig = null;
+function setBillingSink(fn) {
+  sink = fn;
+}
+function setBillingCaptureConfig(config) {
+  captureConfig = config && config.enabled ? config : null;
+}
+function getBillingCaptureConfig() {
+  return captureConfig;
+}
+function publishBillingEvent(event) {
+  const active = sink;
+  if (!active) return;
+  try {
+    active(event);
+  } catch {
+  }
+}
+function __resetBillingSinkForTests() {
+  sink = null;
+  captureConfig = null;
+}
+
+export {
+  setBillingSink,
+  setBillingCaptureConfig,
+  getBillingCaptureConfig,
+  publishBillingEvent,
+  __resetBillingSinkForTests
+};

package/dist/{chunk-ZSVQT3PW.js → chunk-UBWEBKRC.js}

@@ -1,7 +1,9 @@
+import {
+  OPENROUTER_APP_HEADERS
+} from "./chunk-HUZZZ3JL.js";
+
 // src/completion/openrouter-headers.ts
 var OPENROUTER_DEFAULT_BASE_URL = "https://openrouter.ai/api/v1";
-var OPENROUTER_HTTP_REFERER = "https://omnicross.dev";
-var OPENROUTER_X_TITLE = "Omnicross";
 function buildOpenRouterHeaders(credentials, options = {}) {
   const apiKey = credentials.apiKey?.trim();
   if (!apiKey) {
@@ -9,8 +11,7 @@ function buildOpenRouterHeaders(credentials, options = {}) {
   }
   const headers = {
     Authorization: `Bearer ${apiKey}`,
-    "HTTP-Referer": OPENROUTER_HTTP_REFERER,
-    "X-Title": OPENROUTER_X_TITLE
+    ...OPENROUTER_APP_HEADERS
   };
   if (options.contentType !== false) {
     headers["Content-Type"] = options.contentType ?? "application/json";
@@ -35,8 +36,6 @@ function buildOpenRouterUrl(endpoint, path) {
 
 export {
   OPENROUTER_DEFAULT_BASE_URL,
-  OPENROUTER_HTTP_REFERER,
-  OPENROUTER_X_TITLE,
   buildOpenRouterHeaders,
   resolveOpenRouterBaseUrl,
   buildOpenRouterUrl