@omnicross/core 0.1.3 → 0.1.4

package/LICENSE

@@ -1,21 +1,21 @@
-MIT License
-
-Copyright (c) 2026 Sayo
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.
+MIT License
+
+Copyright (c) 2026 Sayo
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/NOTICE

@@ -1,57 +1,57 @@
-@omnicross/core — THIRD-PARTY NOTICES
-======================================
-
-This package contains code adapted from, and depends on, the following
-third-party works. Their respective licenses apply to those portions.
-
---------------------------------------------------------------------------------
-1. musistudio/llms  (MIT License)
---------------------------------------------------------------------------------
-
-The transformer subsystem (`src/transformer/`) — the unified-IR request/response
-transformer chain (`TransformerService`, `TransformerChainExecutor`, and the
-built-in transformers) — is adapted from the `musistudio/llms` project, the
-upstream of the transformer intermediate representation.
-
-    Copyright (c) 2025 musistudio
-    https://github.com/musistudio/llms
-
-    Permission is hereby granted, free of charge, to any person obtaining a copy
-    of this software and associated documentation files (the "Software"), to deal
-    in the Software without restriction, including without limitation the rights
-    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-    copies of the Software, and to permit persons to whom the Software is
-    furnished to do so, subject to the following conditions:
-
-    The above copyright notice and this permission notice shall be included in
-    all copies or substantial portions of the Software.
-
-    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-    SOFTWARE.
-
---------------------------------------------------------------------------------
-2. @mozilla/readability  (Apache License 2.0)
---------------------------------------------------------------------------------
-
-The built-in web-fetch tool (`src/completion/builtin-web-fetch.ts`) uses
-`@mozilla/readability` to extract readable article content from fetched HTML.
-
-    Copyright Mozilla Foundation and contributors
-    https://github.com/mozilla/readability
-
-    Licensed under the Apache License, Version 2.0 (the "License"); you may not
-    use this file except in compliance with the License. You may obtain a copy of
-    the License at
-
-        http://www.apache.org/licenses/LICENSE-2.0
-
-    Unless required by applicable law or agreed to in writing, software
-    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
-    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
-    License for the specific language governing permissions and limitations under
-    the License.
+@omnicross/core — THIRD-PARTY NOTICES
+======================================
+
+This package contains code adapted from, and depends on, the following
+third-party works. Their respective licenses apply to those portions.
+
+--------------------------------------------------------------------------------
+1. musistudio/llms  (MIT License)
+--------------------------------------------------------------------------------
+
+The transformer subsystem (`src/transformer/`) — the unified-IR request/response
+transformer chain (`TransformerService`, `TransformerChainExecutor`, and the
+built-in transformers) — is adapted from the `musistudio/llms` project, the
+upstream of the transformer intermediate representation.
+
+    Copyright (c) 2025 musistudio
+    https://github.com/musistudio/llms
+
+    Permission is hereby granted, free of charge, to any person obtaining a copy
+    of this software and associated documentation files (the "Software"), to deal
+    in the Software without restriction, including without limitation the rights
+    to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+    copies of the Software, and to permit persons to whom the Software is
+    furnished to do so, subject to the following conditions:
+
+    The above copyright notice and this permission notice shall be included in
+    all copies or substantial portions of the Software.
+
+    THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+    IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+    FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+    AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+    LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+    OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+    SOFTWARE.
+
+--------------------------------------------------------------------------------
+2. @mozilla/readability  (Apache License 2.0)
+--------------------------------------------------------------------------------
+
+The built-in web-fetch tool (`src/completion/builtin-web-fetch.ts`) uses
+`@mozilla/readability` to extract readable article content from fetched HTML.
+
+    Copyright Mozilla Foundation and contributors
+    https://github.com/mozilla/readability
+
+    Licensed under the Apache License, Version 2.0 (the "License"); you may not
+    use this file except in compliance with the License. You may obtain a copy of
+    the License at
+
+        http://www.apache.org/licenses/LICENSE-2.0
+
+    Unless required by applicable law or agreed to in writing, software
+    distributed under the License is distributed on an "AS IS" BASIS, WITHOUT
+    WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the
+    License for the specific language governing permissions and limitations under
+    the License.

package/README.md

@@ -1,15 +1,15 @@
-# @omnicross/core
-
-The omnicross LLM serving core — provider dispatch, the completion pipeline, the transformer chain, the outbound API server, and the resident provider proxy. Embed it in any Node project, or run it via [`@omnicross/daemon`](https://www.npmjs.com/package/@omnicross/daemon).
-
-Part of the [omnicross](https://github.com/Dumoedss/omnicross) monorepo — see the root README for the full overview.
-
-```bash
-npm install @omnicross/core @omnicross/contracts
-```
-
-## License
-
-[MIT](LICENSE) 
-
-This package adapts third-party work under its own license — see the `NOTICE` file.
+# @omnicross/core
+
+The omnicross LLM serving core — provider dispatch, the completion pipeline, the transformer chain, the outbound API server, and the resident provider proxy. Embed it in any Node project, or run it via [`@omnicross/daemon`](https://www.npmjs.com/package/@omnicross/daemon).
+
+Part of the [omnicross](https://github.com/Dumoedss/omnicross) monorepo — see the root README for the full overview.
+
+```bash
+npm install @omnicross/core @omnicross/contracts
+```
+
+## License
+
+[MIT](LICENSE) 
+
+This package adapts third-party work under its own license — see the `NOTICE` file.

package/dist/auth/GeminiCodeAssistProjectResolver.cjs

@@ -1,12 +1,12 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;
 
-var _chunkS6JGLF3Gcjs = require('../chunk-S6JGLF3G.cjs');
-
-
 
 var _chunkRSJ3TWJQcjs = require('../chunk-RSJ3TWJQ.cjs');
 require('../chunk-YGXJGRFI.cjs');
 
+
+var _chunkOCEUVQHWcjs = require('../chunk-OCEUVQHW.cjs');
+
 // src/auth/GeminiCodeAssistProjectResolver.ts
 var FREE_TIER_ID = "free-tier";
 var LEGACY_TIER_ID = "legacy-tier";
@@ -25,7 +25,7 @@ var GeminiCodeAssistHandshakeError = class extends Error {
 var GeminiCodeAssistProjectResolver = (_class = class {
   // upstream-proxy: the Code Assist handshake is upstream egress → honor the
   // gemini proxy by default (still injectable for tests).
-  constructor(fetchImpl = (url, init) => _chunkS6JGLF3Gcjs.fetchUpstream.call(void 0, url, init, { providerId: "gemini" })) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);
+  constructor(fetchImpl = (url, init) => _chunkOCEUVQHWcjs.fetchUpstream.call(void 0, url, init, { providerId: "gemini" })) {;_class.prototype.__init.call(this);_class.prototype.__init2.call(this);
     this.fetchImpl = fetchImpl;
   }
   

package/dist/auth/GeminiCodeAssistProjectResolver.js

@@ -1,11 +1,11 @@
-import {
-  fetchUpstream
-} from "../chunk-BO4RFWBR.js";
 import {
   resolveCodeAssistApiVersion,
   resolveCodeAssistEndpoint
 } from "../chunk-Z7Y2NPHY.js";
 import "../chunk-S4WBV25P.js";
+import {
+  fetchUpstream
+} from "../chunk-XK5CIRMQ.js";
 
 // src/auth/GeminiCodeAssistProjectResolver.ts
 var FREE_TIER_ID = "free-tier";

package/dist/chunk-3QFXFCHG.js

@@ -0,0 +1,33 @@
+// src/outbound-api/quotaWarn.ts
+var WEBHOOK_QUOTA_WARN_RATIO = 0.8;
+function computeQuotaWarnings(limits, spend, ratio = WEBHOOK_QUOTA_WARN_RATIO) {
+  const out = [];
+  const consider = (scope, limit, spent, windowStart) => {
+    if (limit == null || limit <= 0) return;
+    if (spent >= limit) return;
+    if (spent >= ratio * limit) out.push({ scope, limitUsd: limit, spentUsd: spent, windowStart });
+  };
+  consider("daily", limits.dailyUsd, spend.dailyUsd, spend.dailyWindowStart);
+  consider("weekly", limits.weeklyUsd, spend.weeklyUsd, spend.weeklyWindowStart);
+  consider("total", limits.totalUsd, spend.totalUsd, 0);
+  return out;
+}
+var WARN_GUARD_MAX = 1e4;
+var warned = /* @__PURE__ */ new Set();
+function markQuotaWarnedOnce(keyId, scope, windowStart) {
+  const key = `${keyId}\0${scope}\0${windowStart}`;
+  if (warned.has(key)) return false;
+  if (warned.size >= WARN_GUARD_MAX) warned.clear();
+  warned.add(key);
+  return true;
+}
+function __resetQuotaWarnGuardForTests() {
+  warned.clear();
+}
+
+export {
+  WEBHOOK_QUOTA_WARN_RATIO,
+  computeQuotaWarnings,
+  markQuotaWarnedOnce,
+  __resetQuotaWarnGuardForTests
+};

package/dist/chunk-4YINUUKQ.cjs

@@ -0,0 +1,33 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true});// src/outbound-api/quotaWarn.ts
+var WEBHOOK_QUOTA_WARN_RATIO = 0.8;
+function computeQuotaWarnings(limits, spend, ratio = WEBHOOK_QUOTA_WARN_RATIO) {
+  const out = [];
+  const consider = (scope, limit, spent, windowStart) => {
+    if (limit == null || limit <= 0) return;
+    if (spent >= limit) return;
+    if (spent >= ratio * limit) out.push({ scope, limitUsd: limit, spentUsd: spent, windowStart });
+  };
+  consider("daily", limits.dailyUsd, spend.dailyUsd, spend.dailyWindowStart);
+  consider("weekly", limits.weeklyUsd, spend.weeklyUsd, spend.weeklyWindowStart);
+  consider("total", limits.totalUsd, spend.totalUsd, 0);
+  return out;
+}
+var WARN_GUARD_MAX = 1e4;
+var warned = /* @__PURE__ */ new Set();
+function markQuotaWarnedOnce(keyId, scope, windowStart) {
+  const key = `${keyId}\0${scope}\0${windowStart}`;
+  if (warned.has(key)) return false;
+  if (warned.size >= WARN_GUARD_MAX) warned.clear();
+  warned.add(key);
+  return true;
+}
+function __resetQuotaWarnGuardForTests() {
+  warned.clear();
+}
+
+
+
+
+
+
+exports.WEBHOOK_QUOTA_WARN_RATIO = WEBHOOK_QUOTA_WARN_RATIO; exports.computeQuotaWarnings = computeQuotaWarnings; exports.markQuotaWarnedOnce = markQuotaWarnedOnce; exports.__resetQuotaWarnGuardForTests = __resetQuotaWarnGuardForTests;

package/dist/chunk-7Y47UCF2.js

@@ -0,0 +1,142 @@
+import {
+  redactAuditText
+} from "./chunk-K5NM7VAH.js";
+import {
+  getAuditCaptureConfig,
+  recordAudit
+} from "./chunk-WNY4WMRF.js";
+import {
+  readAuditUsage
+} from "./chunk-OZFM4X3S.js";
+
+// src/outbound-api/auditCapture.ts
+import { randomUUID } from "crypto";
+function isStreamingContentType(res) {
+  const ct = res.getHeader("content-type");
+  const value = Array.isArray(ct) ? ct.join(";") : String(ct ?? "");
+  return value.toLowerCase().includes("text/event-stream");
+}
+function resolveClientIp(req, trustForwardedFor) {
+  if (trustForwardedFor) {
+    const xff = req.headers["x-forwarded-for"];
+    const raw = Array.isArray(xff) ? xff[0] : xff;
+    if (typeof raw === "string" && raw.trim()) {
+      const first = raw.split(",")[0]?.trim();
+      if (first) return first;
+    }
+  }
+  return req.socket?.remoteAddress ?? void 0;
+}
+function truncateToBytes(text, maxBytes) {
+  const buf = Buffer.from(text, "utf8");
+  if (buf.length <= maxBytes) return text;
+  return buf.subarray(0, maxBytes).toString("utf8");
+}
+function beginAuditCapture(req, res, now) {
+  const config = getAuditCaptureConfig();
+  if (!config) return null;
+  let rawRequestBody;
+  const responseChunks = [];
+  let responseBytes = 0;
+  let streamDetected = false;
+  let finished = false;
+  const ctx = {
+    setRequestBody(raw) {
+      if (config.captureBodies) rawRequestBody = raw;
+    }
+  };
+  if (config.captureBodies) {
+    installResponseCapture(res, config.maxBodyBytes, {
+      push(chunk) {
+        responseBytes += chunk.length;
+        responseChunks.push(chunk);
+      },
+      get bytes() {
+        return responseBytes;
+      },
+      markStream() {
+        streamDetected = true;
+      },
+      get isStream() {
+        return streamDetected;
+      }
+    });
+  }
+  const finalize = () => {
+    if (finished) return;
+    finished = true;
+    try {
+      const record = {
+        id: randomUUID(),
+        ts: now,
+        method: req.method ?? "",
+        path: (req.url ?? "").split("?")[0] ?? "",
+        status: res.statusCode,
+        latencyMs: Math.max(0, Date.now() - now)
+      };
+      if (ctx.keyId != null) record.keyId = ctx.keyId;
+      const ip = resolveClientIp(req, config.trustForwardedFor);
+      if (ip) record.ip = ip;
+      const ua = req.headers["user-agent"];
+      if (typeof ua === "string" && ua) record.ua = ua;
+      if (ctx.model) record.model = ctx.model;
+      if (ctx.provider) record.provider = ctx.provider;
+      const usage = readAuditUsage(res);
+      if (usage) {
+        if (typeof usage.inputTokens === "number") record.inputTokens = usage.inputTokens;
+        if (typeof usage.outputTokens === "number") record.outputTokens = usage.outputTokens;
+        if (typeof usage.costUsd === "number") record.costUsd = usage.costUsd;
+        if (!record.model && usage.model) record.model = usage.model;
+        if (!record.provider && usage.provider) record.provider = usage.provider;
+      }
+      if (ctx.error) record.error = redactAuditText(ctx.error);
+      if (config.captureBodies) {
+        if (rawRequestBody != null && rawRequestBody.length > 0) {
+          record.requestBody = redactAuditText(truncateToBytes(rawRequestBody, config.maxBodyBytes));
+        }
+        if (!streamDetected && responseChunks.length > 0) {
+          const body = Buffer.concat(responseChunks).toString("utf8");
+          record.responseBody = redactAuditText(body);
+        }
+      }
+      recordAudit(record);
+    } catch {
+    }
+  };
+  res.once("close", finalize);
+  return ctx;
+}
+function installResponseCapture(res, maxBodyBytes, sink) {
+  let contentTypeChecked = false;
+  const capture = (chunk) => {
+    if (sink.isStream) return;
+    if (!contentTypeChecked) {
+      contentTypeChecked = true;
+      if (isStreamingContentType(res)) {
+        sink.markStream();
+        return;
+      }
+    }
+    if (sink.bytes >= maxBodyBytes) return;
+    let buf = null;
+    if (Buffer.isBuffer(chunk)) buf = chunk;
+    else if (typeof chunk === "string") buf = Buffer.from(chunk, "utf8");
+    if (!buf || buf.length === 0) return;
+    const remaining = maxBodyBytes - sink.bytes;
+    sink.push(buf.length > remaining ? buf.subarray(0, remaining) : buf);
+  };
+  const originalWrite = res.write.bind(res);
+  const originalEnd = res.end.bind(res);
+  res.write = ((chunk, ...args) => {
+    if (chunk != null) capture(chunk);
+    return originalWrite(chunk, ...args);
+  });
+  res.end = ((chunk, ...args) => {
+    if (chunk != null && typeof chunk !== "function") capture(chunk);
+    return originalEnd(chunk, ...args);
+  });
+}
+
+export {
+  beginAuditCapture
+};

package/dist/chunk-APYG5QD7.cjs

@@ -0,0 +1,50 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+
+var _chunkL74VDN4Acjs = require('./chunk-L74VDN4A.cjs');
+
+
+var _chunkXSVNC2UDcjs = require('./chunk-XSVNC2UD.cjs');
+
+// src/outbound-api/billingCapture.ts
+var _crypto = require('crypto');
+var defaultDefer = (fn) => {
+  setTimeout(fn, 0);
+};
+function beginBillingCapture(_req, res, now, defer = defaultDefer) {
+  if (!_chunkL74VDN4Acjs.getBillingCaptureConfig.call(void 0, )) return null;
+  const ctx = {};
+  let finished = false;
+  const finalize = () => {
+    if (finished) return;
+    finished = true;
+    const status = res.statusCode;
+    defer(() => {
+      try {
+        const usage = _chunkXSVNC2UDcjs.readAuditUsage.call(void 0, res);
+        if (!usage) return;
+        const event = {
+          id: _crypto.randomUUID.call(void 0, ),
+          ts: now,
+          model: _nullishCoalesce(_nullishCoalesce(ctx.model, () => ( usage.model)), () => ( "")),
+          authMode: _nullishCoalesce(ctx.authMode, () => ( "byo")),
+          inputTokens: _nullishCoalesce(usage.inputTokens, () => ( 0)),
+          outputTokens: _nullishCoalesce(usage.outputTokens, () => ( 0)),
+          costUsd: _nullishCoalesce(usage.costUsd, () => ( 0)),
+          status
+        };
+        if (ctx.keyId != null) event.keyId = ctx.keyId;
+        const provider = _nullishCoalesce(ctx.provider, () => ( usage.provider));
+        if (provider) event.provider = provider;
+        _chunkL74VDN4Acjs.publishBillingEvent.call(void 0, event);
+      } catch (e) {
+      }
+    });
+  };
+  res.once("close", finalize);
+  return ctx;
+}
+
+
+
+exports.beginBillingCapture = beginBillingCapture;

package/dist/{chunk-CWM2ZDU5.js → chunk-BPKCU575.js}

@@ -1,12 +1,6 @@
-// src/pipeline/auditUsageStash.ts
-var stash = /* @__PURE__ */ new WeakMap();
-function stashAuditUsage(key, detail) {
-  const existing = stash.get(key);
-  stash.set(key, existing ? { ...existing, ...detail } : { ...detail });
-}
-function readAuditUsage(key) {
-  return stash.get(key);
-}
+import {
+  stashAuditUsage
+} from "./chunk-OZFM4X3S.js";
 
 // src/usage/usage-recorder.ts
 var UsageRecorder = class {
@@ -125,6 +119,5 @@ var safeStringify = (value) => {
 };
 
 export {
-  readAuditUsage,
   UsageRecorder
 };