@omnicross/core 0.1.3 → 0.1.4

package/dist/chunk-E3UCVHLP.cjs

@@ -0,0 +1,142 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }
+
+var _chunkFCR77GYMcjs = require('./chunk-FCR77GYM.cjs');
+
+
+
+var _chunkAEOZIDEBcjs = require('./chunk-AEOZIDEB.cjs');
+
+
+var _chunkXSVNC2UDcjs = require('./chunk-XSVNC2UD.cjs');
+
+// src/outbound-api/auditCapture.ts
+var _crypto = require('crypto');
+function isStreamingContentType(res) {
+  const ct = res.getHeader("content-type");
+  const value = Array.isArray(ct) ? ct.join(";") : String(_nullishCoalesce(ct, () => ( "")));
+  return value.toLowerCase().includes("text/event-stream");
+}
+function resolveClientIp(req, trustForwardedFor) {
+  if (trustForwardedFor) {
+    const xff = req.headers["x-forwarded-for"];
+    const raw = Array.isArray(xff) ? xff[0] : xff;
+    if (typeof raw === "string" && raw.trim()) {
+      const first = _optionalChain([raw, 'access', _ => _.split, 'call', _2 => _2(","), 'access', _3 => _3[0], 'optionalAccess', _4 => _4.trim, 'call', _5 => _5()]);
+      if (first) return first;
+    }
+  }
+  return _nullishCoalesce(_optionalChain([req, 'access', _6 => _6.socket, 'optionalAccess', _7 => _7.remoteAddress]), () => ( void 0));
+}
+function truncateToBytes(text, maxBytes) {
+  const buf = Buffer.from(text, "utf8");
+  if (buf.length <= maxBytes) return text;
+  return buf.subarray(0, maxBytes).toString("utf8");
+}
+function beginAuditCapture(req, res, now) {
+  const config = _chunkAEOZIDEBcjs.getAuditCaptureConfig.call(void 0, );
+  if (!config) return null;
+  let rawRequestBody;
+  const responseChunks = [];
+  let responseBytes = 0;
+  let streamDetected = false;
+  let finished = false;
+  const ctx = {
+    setRequestBody(raw) {
+      if (config.captureBodies) rawRequestBody = raw;
+    }
+  };
+  if (config.captureBodies) {
+    installResponseCapture(res, config.maxBodyBytes, {
+      push(chunk) {
+        responseBytes += chunk.length;
+        responseChunks.push(chunk);
+      },
+      get bytes() {
+        return responseBytes;
+      },
+      markStream() {
+        streamDetected = true;
+      },
+      get isStream() {
+        return streamDetected;
+      }
+    });
+  }
+  const finalize = () => {
+    if (finished) return;
+    finished = true;
+    try {
+      const record = {
+        id: _crypto.randomUUID.call(void 0, ),
+        ts: now,
+        method: _nullishCoalesce(req.method, () => ( "")),
+        path: _nullishCoalesce((_nullishCoalesce(req.url, () => ( ""))).split("?")[0], () => ( "")),
+        status: res.statusCode,
+        latencyMs: Math.max(0, Date.now() - now)
+      };
+      if (ctx.keyId != null) record.keyId = ctx.keyId;
+      const ip = resolveClientIp(req, config.trustForwardedFor);
+      if (ip) record.ip = ip;
+      const ua = req.headers["user-agent"];
+      if (typeof ua === "string" && ua) record.ua = ua;
+      if (ctx.model) record.model = ctx.model;
+      if (ctx.provider) record.provider = ctx.provider;
+      const usage = _chunkXSVNC2UDcjs.readAuditUsage.call(void 0, res);
+      if (usage) {
+        if (typeof usage.inputTokens === "number") record.inputTokens = usage.inputTokens;
+        if (typeof usage.outputTokens === "number") record.outputTokens = usage.outputTokens;
+        if (typeof usage.costUsd === "number") record.costUsd = usage.costUsd;
+        if (!record.model && usage.model) record.model = usage.model;
+        if (!record.provider && usage.provider) record.provider = usage.provider;
+      }
+      if (ctx.error) record.error = _chunkFCR77GYMcjs.redactAuditText.call(void 0, ctx.error);
+      if (config.captureBodies) {
+        if (rawRequestBody != null && rawRequestBody.length > 0) {
+          record.requestBody = _chunkFCR77GYMcjs.redactAuditText.call(void 0, truncateToBytes(rawRequestBody, config.maxBodyBytes));
+        }
+        if (!streamDetected && responseChunks.length > 0) {
+          const body = Buffer.concat(responseChunks).toString("utf8");
+          record.responseBody = _chunkFCR77GYMcjs.redactAuditText.call(void 0, body);
+        }
+      }
+      _chunkAEOZIDEBcjs.recordAudit.call(void 0, record);
+    } catch (e) {
+    }
+  };
+  res.once("close", finalize);
+  return ctx;
+}
+function installResponseCapture(res, maxBodyBytes, sink) {
+  let contentTypeChecked = false;
+  const capture = (chunk) => {
+    if (sink.isStream) return;
+    if (!contentTypeChecked) {
+      contentTypeChecked = true;
+      if (isStreamingContentType(res)) {
+        sink.markStream();
+        return;
+      }
+    }
+    if (sink.bytes >= maxBodyBytes) return;
+    let buf = null;
+    if (Buffer.isBuffer(chunk)) buf = chunk;
+    else if (typeof chunk === "string") buf = Buffer.from(chunk, "utf8");
+    if (!buf || buf.length === 0) return;
+    const remaining = maxBodyBytes - sink.bytes;
+    sink.push(buf.length > remaining ? buf.subarray(0, remaining) : buf);
+  };
+  const originalWrite = res.write.bind(res);
+  const originalEnd = res.end.bind(res);
+  res.write = ((chunk, ...args) => {
+    if (chunk != null) capture(chunk);
+    return originalWrite(chunk, ...args);
+  });
+  res.end = ((chunk, ...args) => {
+    if (chunk != null && typeof chunk !== "function") capture(chunk);
+    return originalEnd(chunk, ...args);
+  });
+}
+
+
+
+exports.beginAuditCapture = beginAuditCapture;

package/dist/chunk-FCR77GYM.cjs

@@ -0,0 +1,33 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/outbound-api/auditRedact.ts
+var AUDIT_REDACTED = "***REDACTED***";
+var RULES = [
+  // `sk-…` family (Anthropic sk-ant-, omnicross sk-omnicross-, OpenAI sk-proj-/sk-).
+  { re: /\bsk-[A-Za-z0-9_-]{6,}/g, replace: AUDIT_REDACTED },
+  // Google API keys.
+  { re: /\bAIza[A-Za-z0-9_-]{10,}/g, replace: AUDIT_REDACTED },
+  // `Bearer <token>` (auth headers echoed into a body / SSE error).
+  { re: /\bBearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, replace: `Bearer ${AUDIT_REDACTED}` },
+  // Inline `x-api-key` / `api-key` / `authorization` label followed by a value.
+  {
+    re: /\b(x-api-key|api[_-]?key|authorization)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  },
+  // `x-goog-api-key` header echoed inline.
+  {
+    re: /\b(x-goog-api-key)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  }
+];
+function redactAuditText(text) {
+  if (typeof text !== "string" || text.length === 0) return _nullishCoalesce(text, () => ( ""));
+  let out = text;
+  for (const { re, replace } of RULES) {
+    out = out.replace(re, replace);
+  }
+  return out;
+}
+
+
+
+
+exports.AUDIT_REDACTED = AUDIT_REDACTED; exports.redactAuditText = redactAuditText;

package/dist/{chunk-N5QFKSDO.js → chunk-HRRYG2AX.js}

@@ -33,7 +33,8 @@ var SubscriptionAuthSource = class {
         upstreamUrl: hints.upstreamUrl,
         resolvedModel: hints.model,
         sessionKey: hints.sessionKey,
-        reportSelection: hints.reportSelection
+        reportSelection: hints.reportSelection,
+        preferredAccountId: hints.preferredAccountId
       });
     } catch (err) {
       console.warn("[SubscriptionAuthSource] authStrategy.applyHeaders threw:", serializeError(err));

package/dist/{chunk-KUU2RNG6.cjs → chunk-HYN75H6G.cjs}

@@ -23,6 +23,9 @@ async function executeProviderCall(ctx) {
   const finalBody = prepareBody ? await prepareBody(requestBody, config) : requestBody;
   const url = resolveUrl(config);
   const headers = buildHeaders(config);
+  if (!headers["content-type"] && !headers["Content-Type"]) {
+    headers["content-type"] = "application/json";
+  }
   const fetched = await fetchFn(url, headers, finalBody);
   let response = fetched;
   if (runResponseChain) {

package/dist/{chunk-JO5NLTLY.js → chunk-IK3KE3AU.js}

@@ -23,6 +23,9 @@ async function executeProviderCall(ctx) {
   const finalBody = prepareBody ? await prepareBody(requestBody, config) : requestBody;
   const url = resolveUrl(config);
   const headers = buildHeaders(config);
+  if (!headers["content-type"] && !headers["Content-Type"]) {
+    headers["content-type"] = "application/json";
+  }
   const fetched = await fetchFn(url, headers, finalBody);
   let response = fetched;
   if (runResponseChain) {

package/dist/chunk-K5NM7VAH.js

@@ -0,0 +1,33 @@
+// src/outbound-api/auditRedact.ts
+var AUDIT_REDACTED = "***REDACTED***";
+var RULES = [
+  // `sk-…` family (Anthropic sk-ant-, omnicross sk-omnicross-, OpenAI sk-proj-/sk-).
+  { re: /\bsk-[A-Za-z0-9_-]{6,}/g, replace: AUDIT_REDACTED },
+  // Google API keys.
+  { re: /\bAIza[A-Za-z0-9_-]{10,}/g, replace: AUDIT_REDACTED },
+  // `Bearer <token>` (auth headers echoed into a body / SSE error).
+  { re: /\bBearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, replace: `Bearer ${AUDIT_REDACTED}` },
+  // Inline `x-api-key` / `api-key` / `authorization` label followed by a value.
+  {
+    re: /\b(x-api-key|api[_-]?key|authorization)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  },
+  // `x-goog-api-key` header echoed inline.
+  {
+    re: /\b(x-goog-api-key)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  }
+];
+function redactAuditText(text) {
+  if (typeof text !== "string" || text.length === 0) return text ?? "";
+  let out = text;
+  for (const { re, replace } of RULES) {
+    out = out.replace(re, replace);
+  }
+  return out;
+}
+
+export {
+  AUDIT_REDACTED,
+  redactAuditText
+};

package/dist/{chunk-Y6OM7EV7.cjs → chunk-KFI44N2R.cjs}

@@ -33,7 +33,8 @@ var SubscriptionAuthSource = class {
         upstreamUrl: hints.upstreamUrl,
         resolvedModel: hints.model,
         sessionKey: hints.sessionKey,
-        reportSelection: hints.reportSelection
+        reportSelection: hints.reportSelection,
+        preferredAccountId: hints.preferredAccountId
       });
     } catch (err) {
       console.warn("[SubscriptionAuthSource] authStrategy.applyHeaders threw:", _chunkSVNDB62Dcjs.serializeError.call(void 0, err));

package/dist/{chunk-S6JGLF3G.cjs → chunk-OCEUVQHW.cjs}

@@ -1,15 +1,30 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/pipeline/upstreamFetch.ts
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; }// src/pipeline/upstreamFetch.ts
 var _undici = require('undici');
 var _socks = require('socks');
 var resolver = null;
 var generation = 0;
 var cache = /* @__PURE__ */ new Map();
+function setUpstreamProxyResolver(fn) {
+  resolver = fn;
+  bumpUpstreamProxyGeneration();
+}
+function bumpUpstreamProxyGeneration() {
+  generation += 1;
+  const old = cache;
+  cache = /* @__PURE__ */ new Map();
+  for (const dispatcher of old.values()) {
+    try {
+      void _optionalChain([dispatcher, 'access', _ => _.close, 'optionalCall', _2 => _2()]);
+    } catch (e) {
+    }
+  }
+}
 function normalizeProxy(cfg) {
   if ("url" in cfg) {
     let u;
     try {
       u = new URL(cfg.url);
-    } catch (e) {
+    } catch (e2) {
       return void 0;
     }
     const proto = u.protocol.replace(/:$/, "").toLowerCase();
@@ -64,7 +79,7 @@ function resolveUpstreamDispatcher(ctx) {
   let cfg;
   try {
     cfg = active(ctx);
-  } catch (e2) {
+  } catch (e3) {
     return void 0;
   }
   if (!cfg) return void 0;
@@ -83,7 +98,15 @@ function fetchUpstream(url, init, ctx) {
   if (!dispatcher) return fetch(url, init);
   return fetch(url, { ...init, dispatcher });
 }
+function __resetUpstreamProxyForTests() {
+  resolver = null;
+  bumpUpstreamProxyGeneration();
+}
+
+
+
+
 
 
 
-exports.fetchUpstream = fetchUpstream;
+exports.setUpstreamProxyResolver = setUpstreamProxyResolver; exports.bumpUpstreamProxyGeneration = bumpUpstreamProxyGeneration; exports.resolveUpstreamDispatcher = resolveUpstreamDispatcher; exports.fetchUpstream = fetchUpstream; exports.__resetUpstreamProxyForTests = __resetUpstreamProxyForTests;

package/dist/chunk-OE6TDIWW.js

@@ -0,0 +1,22 @@
+// src/pipeline/webhookEmit.ts
+var sink = null;
+function setWebhookSink(fn) {
+  sink = fn;
+}
+function emitWebhookEvent(event) {
+  const active = sink;
+  if (!active) return;
+  try {
+    active(event);
+  } catch {
+  }
+}
+function __resetWebhookSinkForTests() {
+  sink = null;
+}
+
+export {
+  setWebhookSink,
+  emitWebhookEvent,
+  __resetWebhookSinkForTests
+};

package/dist/chunk-OZFM4X3S.js

@@ -0,0 +1,18 @@
+// src/pipeline/auditUsageStash.ts
+var stash = /* @__PURE__ */ new WeakMap();
+function stashAuditUsage(key, detail) {
+  const existing = stash.get(key);
+  stash.set(key, existing ? { ...existing, ...detail } : { ...detail });
+}
+function readAuditUsage(key) {
+  return stash.get(key);
+}
+function __clearAuditUsageForTests(key) {
+  stash.delete(key);
+}
+
+export {
+  stashAuditUsage,
+  readAuditUsage,
+  __clearAuditUsageForTests
+};