@omnicross/core 0.1.3 → 0.1.4

package/dist/{chunk-4DECIFU7.js → chunk-QYTT6GE3.js}

@@ -1,9 +1,6 @@
 import {
   streamSSEResponse
 } from "./chunk-VVEHS2LI.js";
-import {
-  TransformerChainExecutor
-} from "./chunk-G2UTNSGU.js";
 import {
   AnthropicTransformer
 } from "./chunk-FTQ7IQUC.js";
@@ -12,10 +9,10 @@ import {
 } from "./chunk-C7PSERMH.js";
 import {
   OpenAIResponseTransformer
-} from "./chunk-5HTVET6E.js";
+} from "./chunk-TIER4SUC.js";
 import {
-  readAuditUsage
-} from "./chunk-CWM2ZDU5.js";
+  TransformerChainExecutor
+} from "./chunk-G2UTNSGU.js";
 import {
   injectExtendedContextBeta
 } from "./chunk-MZNPGW5Q.js";
@@ -31,32 +28,14 @@ import {
   deriveSubscriptionSessionKey
 } from "./chunk-IAXWICZU.js";
 import {
-  resolveSubscriptionChain
-} from "./chunk-5ERIZW3D.js";
-import {
-  getSharedAccountHealth,
-  resolveResetSeconds
-} from "./chunk-5ENKBSWO.js";
-import {
-  SubscriptionAuthSource
-} from "./chunk-N5QFKSDO.js";
-import {
-  serializeError
-} from "./chunk-AVYJ4YBN.js";
+  emitWebhookEvent
+} from "./chunk-OE6TDIWW.js";
 import {
   getGeminiCodeAssistResolver
 } from "./chunk-DRWHTIIZ.js";
-import {
-  getAuditCaptureConfig,
-  recordAudit
-} from "./chunk-WNY4WMRF.js";
-import {
-  getBillingCaptureConfig,
-  publishBillingEvent
-} from "./chunk-TKJMZBAH.js";
 import {
   executeProviderCall
-} from "./chunk-JO5NLTLY.js";
+} from "./chunk-IK3KE3AU.js";
 import {
   LlmConfigProviderAuth,
   getProviderHeaders
@@ -65,10 +44,25 @@ import {
   resolveProviderChain
 } from "./chunk-JWC6APFQ.js";
 import {
-  buildProviderApiUrl,
-  resolveApiFormat,
-  resolveProviderEndpoint
-} from "./chunk-H5JUT3KV.js";
+  resolveSubscriptionChain
+} from "./chunk-5ERIZW3D.js";
+import {
+  getSharedAccountHealth,
+  resolveResetSeconds
+} from "./chunk-5ENKBSWO.js";
+import {
+  SubscriptionAuthSource
+} from "./chunk-HRRYG2AX.js";
+import {
+  serializeError
+} from "./chunk-AVYJ4YBN.js";
+import {
+  beginBillingCapture
+} from "./chunk-WLYIIEAF.js";
+import {
+  computeQuotaWarnings,
+  markQuotaWarnedOnce
+} from "./chunk-3QFXFCHG.js";
 import {
   detectRequestRole,
   endpointToIngressFormat,
@@ -78,14 +72,22 @@ import {
   parseModelRef,
   resolveRoute,
   validateServerModelConfig
-} from "./chunk-CZHZGRU7.js";
+} from "./chunk-UHGVBFU3.js";
+import {
+  buildProviderApiUrl,
+  resolveApiFormat,
+  resolveProviderEndpoint
+} from "./chunk-H5JUT3KV.js";
+import {
+  beginAuditCapture
+} from "./chunk-7Y47UCF2.js";
 import {
   convertAnthropicToOpenAI,
   convertOpenAIToAnthropic
 } from "./chunk-5ZQBEOMD.js";
 import {
   fetchUpstream
-} from "./chunk-BO4RFWBR.js";
+} from "./chunk-XK5CIRMQ.js";
 import {
   applyAugmentation
 } from "./chunk-Y7FO65VT.js";
@@ -715,6 +717,7 @@ function buildSubscriptionIterationPlan(profile, route, deps, resolvedModel, isS
   };
   return {
     auth,
+    preferredAccountId: route.preferredAccountId,
     chain,
     transformerProvider,
     resolvedModel,
@@ -788,6 +791,7 @@ async function runPipeline(anthropicBody, plan, reportSelection) {
     upstreamUrl,
     model: resolvedModel,
     sessionKey: plan.sessionKey,
+    preferredAccountId: plan.preferredAccountId,
     reportSelection: (accountId, isActive) => {
       proxyAccountId = accountId;
       reportSelection?.(accountId, isActive);
@@ -833,6 +837,7 @@ async function runSubscriptionSameFormatFetch(rawBody, plan, reportSelection, op
     upstreamUrl: plan.upstreamUrl,
     model: plan.resolvedModel,
     sessionKey: plan.sessionKey,
+    preferredAccountId: plan.preferredAccountId,
     reportSelection: (accountId, isActive, remapped) => {
       proxyAccountId = accountId;
       remappedModel = remapped;
@@ -1754,6 +1759,7 @@ async function buildSubscriptionPlan3(res, route, deps, resolvedModel, isStream)
   }
   return {
     auth,
+    preferredAccountId: route.preferredAccountId,
     chain,
     transformerProvider,
     resolvedModel,
@@ -1785,6 +1791,7 @@ async function runPipeline4(responsesBody, plan) {
   await auth.applyHeaders(authHeaders, {
     upstreamUrl,
     model: resolvedModel,
+    preferredAccountId: plan.preferredAccountId,
     reportSelection: (accountId) => {
       proxyAccountId = accountId;
     }
@@ -2044,17 +2051,6 @@ var KeyedMutex = class {
 // src/outbound-api/outboundApiRouter.ts
 import { Readable } from "stream";
 
-// src/pipeline/webhookEmit.ts
-var sink = null;
-function emitWebhookEvent(event) {
-  const active = sink;
-  if (!active) return;
-  try {
-    active(event);
-  } catch {
-  }
-}
-
 // src/outbound-api/apiServerConfig.ts
 import { DEFAULT_AUDIT_CONFIG } from "@omnicross/contracts/audit-types";
 import { DEFAULT_BILLING_CONFIG } from "@omnicross/contracts/billing-types";
@@ -2291,6 +2287,9 @@ function normalizePrefixTargets(raw) {
 function normalizeEndpointConfig(e) {
   const endpoint = e.endpoint;
   const useSubscription = e.useSubscription === true;
+  const boundAccountId = typeof e.boundAccountId === "string" && e.boundAccountId.trim() !== "" ? e.boundAccountId : void 0;
+  const boundKeyId = typeof e.boundKeyId === "string" && e.boundKeyId.trim() !== "" ? e.boundKeyId : void 0;
+  let config;
   if (isKindMappedEndpoint(endpoint)) {
     const rawMap = e.modelMap && typeof e.modelMap === "object" ? e.modelMap : {};
     const modelMap = {};
@@ -2298,27 +2297,28 @@ function normalizeEndpointConfig(e) {
       const v = rawMap[kind];
       modelMap[kind] = typeof v === "string" ? v : "";
     }
-    return { endpoint, modelMap, useSubscription };
-  }
-  if (endpoint === "chat") {
+    config = { endpoint, modelMap, useSubscription };
+  } else if (endpoint === "chat") {
     const models = Array.isArray(e.models) ? e.models.filter((m) => typeof m === "string" && m.trim() !== "") : [];
-    const config2 = { endpoint, models, useSubscription };
+    config = { endpoint, models, useSubscription };
     if (e.dispatchMode === "prefix") {
-      config2.dispatchMode = "prefix";
+      config.dispatchMode = "prefix";
       const targets = normalizePrefixTargets(e.prefixTargets);
-      if (targets) config2.prefixTargets = targets;
+      if (targets) config.prefixTargets = targets;
+    }
+  } else {
+    config = {
+      endpoint,
+      defaultModel: typeof e.defaultModel === "string" ? e.defaultModel : "",
+      backgroundModel: typeof e.backgroundModel === "string" ? e.backgroundModel : "",
+      useSubscription
+    };
+    if (Array.isArray(e.backgroundModelIds)) {
+      config.backgroundModelIds = e.backgroundModelIds;
     }
-    return config2;
-  }
-  const config = {
-    endpoint,
-    defaultModel: typeof e.defaultModel === "string" ? e.defaultModel : "",
-    backgroundModel: typeof e.backgroundModel === "string" ? e.backgroundModel : "",
-    useSubscription
-  };
-  if (Array.isArray(e.backgroundModelIds)) {
-    config.backgroundModelIds = e.backgroundModelIds;
   }
+  if (boundAccountId) config.boundAccountId = boundAccountId;
+  if (boundKeyId) config.boundKeyId = boundKeyId;
   return config;
 }
 function defaultServerConfig() {
@@ -2406,204 +2406,6 @@ function mergeServerConfig(current, patch) {
   });
 }
 
-// src/outbound-api/auditCapture.ts
-import { randomUUID } from "crypto";
-
-// src/outbound-api/auditRedact.ts
-var AUDIT_REDACTED = "***REDACTED***";
-var RULES = [
-  // `sk-…` family (Anthropic sk-ant-, omnicross sk-omnicross-, OpenAI sk-proj-/sk-).
-  { re: /\bsk-[A-Za-z0-9_-]{6,}/g, replace: AUDIT_REDACTED },
-  // Google API keys.
-  { re: /\bAIza[A-Za-z0-9_-]{10,}/g, replace: AUDIT_REDACTED },
-  // `Bearer <token>` (auth headers echoed into a body / SSE error).
-  { re: /\bBearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, replace: `Bearer ${AUDIT_REDACTED}` },
-  // Inline `x-api-key` / `api-key` / `authorization` label followed by a value.
-  {
-    re: /\b(x-api-key|api[_-]?key|authorization)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
-    replace: `$1$2${AUDIT_REDACTED}`
-  },
-  // `x-goog-api-key` header echoed inline.
-  {
-    re: /\b(x-goog-api-key)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
-    replace: `$1$2${AUDIT_REDACTED}`
-  }
-];
-function redactAuditText(text) {
-  if (typeof text !== "string" || text.length === 0) return text ?? "";
-  let out = text;
-  for (const { re, replace } of RULES) {
-    out = out.replace(re, replace);
-  }
-  return out;
-}
-
-// src/outbound-api/auditCapture.ts
-function isStreamingContentType(res) {
-  const ct = res.getHeader("content-type");
-  const value = Array.isArray(ct) ? ct.join(";") : String(ct ?? "");
-  return value.toLowerCase().includes("text/event-stream");
-}
-function resolveClientIp(req, trustForwardedFor) {
-  if (trustForwardedFor) {
-    const xff = req.headers["x-forwarded-for"];
-    const raw = Array.isArray(xff) ? xff[0] : xff;
-    if (typeof raw === "string" && raw.trim()) {
-      const first = raw.split(",")[0]?.trim();
-      if (first) return first;
-    }
-  }
-  return req.socket?.remoteAddress ?? void 0;
-}
-function truncateToBytes(text, maxBytes) {
-  const buf = Buffer.from(text, "utf8");
-  if (buf.length <= maxBytes) return text;
-  return buf.subarray(0, maxBytes).toString("utf8");
-}
-function beginAuditCapture(req, res, now) {
-  const config = getAuditCaptureConfig();
-  if (!config) return null;
-  let rawRequestBody;
-  const responseChunks = [];
-  let responseBytes = 0;
-  let streamDetected = false;
-  let finished = false;
-  const ctx = {
-    setRequestBody(raw) {
-      if (config.captureBodies) rawRequestBody = raw;
-    }
-  };
-  if (config.captureBodies) {
-    installResponseCapture(res, config.maxBodyBytes, {
-      push(chunk) {
-        responseBytes += chunk.length;
-        responseChunks.push(chunk);
-      },
-      get bytes() {
-        return responseBytes;
-      },
-      markStream() {
-        streamDetected = true;
-      },
-      get isStream() {
-        return streamDetected;
-      }
-    });
-  }
-  const finalize = () => {
-    if (finished) return;
-    finished = true;
-    try {
-      const record = {
-        id: randomUUID(),
-        ts: now,
-        method: req.method ?? "",
-        path: (req.url ?? "").split("?")[0] ?? "",
-        status: res.statusCode,
-        latencyMs: Math.max(0, Date.now() - now)
-      };
-      if (ctx.keyId != null) record.keyId = ctx.keyId;
-      const ip = resolveClientIp(req, config.trustForwardedFor);
-      if (ip) record.ip = ip;
-      const ua = req.headers["user-agent"];
-      if (typeof ua === "string" && ua) record.ua = ua;
-      if (ctx.model) record.model = ctx.model;
-      if (ctx.provider) record.provider = ctx.provider;
-      const usage = readAuditUsage(res);
-      if (usage) {
-        if (typeof usage.inputTokens === "number") record.inputTokens = usage.inputTokens;
-        if (typeof usage.outputTokens === "number") record.outputTokens = usage.outputTokens;
-        if (typeof usage.costUsd === "number") record.costUsd = usage.costUsd;
-        if (!record.model && usage.model) record.model = usage.model;
-        if (!record.provider && usage.provider) record.provider = usage.provider;
-      }
-      if (ctx.error) record.error = redactAuditText(ctx.error);
-      if (config.captureBodies) {
-        if (rawRequestBody != null && rawRequestBody.length > 0) {
-          record.requestBody = redactAuditText(truncateToBytes(rawRequestBody, config.maxBodyBytes));
-        }
-        if (!streamDetected && responseChunks.length > 0) {
-          const body = Buffer.concat(responseChunks).toString("utf8");
-          record.responseBody = redactAuditText(body);
-        }
-      }
-      recordAudit(record);
-    } catch {
-    }
-  };
-  res.once("close", finalize);
-  return ctx;
-}
-function installResponseCapture(res, maxBodyBytes, sink2) {
-  let contentTypeChecked = false;
-  const capture = (chunk) => {
-    if (sink2.isStream) return;
-    if (!contentTypeChecked) {
-      contentTypeChecked = true;
-      if (isStreamingContentType(res)) {
-        sink2.markStream();
-        return;
-      }
-    }
-    if (sink2.bytes >= maxBodyBytes) return;
-    let buf = null;
-    if (Buffer.isBuffer(chunk)) buf = chunk;
-    else if (typeof chunk === "string") buf = Buffer.from(chunk, "utf8");
-    if (!buf || buf.length === 0) return;
-    const remaining = maxBodyBytes - sink2.bytes;
-    sink2.push(buf.length > remaining ? buf.subarray(0, remaining) : buf);
-  };
-  const originalWrite = res.write.bind(res);
-  const originalEnd = res.end.bind(res);
-  res.write = ((chunk, ...args) => {
-    if (chunk != null) capture(chunk);
-    return originalWrite(chunk, ...args);
-  });
-  res.end = ((chunk, ...args) => {
-    if (chunk != null && typeof chunk !== "function") capture(chunk);
-    return originalEnd(chunk, ...args);
-  });
-}
-
-// src/outbound-api/billingCapture.ts
-import { randomUUID as randomUUID2 } from "crypto";
-var defaultDefer = (fn) => {
-  setTimeout(fn, 0);
-};
-function beginBillingCapture(_req, res, now, defer = defaultDefer) {
-  if (!getBillingCaptureConfig()) return null;
-  const ctx = {};
-  let finished = false;
-  const finalize = () => {
-    if (finished) return;
-    finished = true;
-    const status = res.statusCode;
-    defer(() => {
-      try {
-        const usage = readAuditUsage(res);
-        if (!usage) return;
-        const event = {
-          id: randomUUID2(),
-          ts: now,
-          model: ctx.model ?? usage.model ?? "",
-          authMode: ctx.authMode ?? "byo",
-          inputTokens: usage.inputTokens ?? 0,
-          outputTokens: usage.outputTokens ?? 0,
-          costUsd: usage.costUsd ?? 0,
-          status
-        };
-        if (ctx.keyId != null) event.keyId = ctx.keyId;
-        const provider = ctx.provider ?? usage.provider;
-        if (provider) event.provider = provider;
-        publishBillingEvent(event);
-      } catch {
-      }
-    });
-  };
-  res.once("close", finalize);
-  return ctx;
-}
-
 // src/outbound-api/outboundApiKeyAuth.ts
 import { createHash, randomBytes as randomBytes2 } from "crypto";
 
@@ -2752,30 +2554,6 @@ async function verifyPresentedKey(db, presentedKey) {
   return result.status === "ok" ? result.key : null;
 }
 
-// src/outbound-api/quotaWarn.ts
-var WEBHOOK_QUOTA_WARN_RATIO = 0.8;
-function computeQuotaWarnings(limits, spend, ratio = WEBHOOK_QUOTA_WARN_RATIO) {
-  const out = [];
-  const consider = (scope, limit, spent, windowStart) => {
-    if (limit == null || limit <= 0) return;
-    if (spent >= limit) return;
-    if (spent >= ratio * limit) out.push({ scope, limitUsd: limit, spentUsd: spent, windowStart });
-  };
-  consider("daily", limits.dailyUsd, spend.dailyUsd, spend.dailyWindowStart);
-  consider("weekly", limits.weeklyUsd, spend.weeklyUsd, spend.weeklyWindowStart);
-  consider("total", limits.totalUsd, spend.totalUsd, 0);
-  return out;
-}
-var WARN_GUARD_MAX = 1e4;
-var warned = /* @__PURE__ */ new Set();
-function markQuotaWarnedOnce(keyId, scope, windowStart) {
-  const key = `${keyId}\0${scope}\0${windowStart}`;
-  if (warned.has(key)) return false;
-  if (warned.size >= WARN_GUARD_MAX) warned.clear();
-  warned.add(key);
-  return true;
-}
-
 // src/outbound-api/outboundConcurrencyGate.ts
 var ConcurrencyQueueFullError = class extends Error {
   constructor(apiKeyId, maxQueueSize) {
@@ -5646,8 +5424,8 @@ var CompletionService = class {
    * emission is unconditional in production. Optional — when unset (unit-test
    * constructors), the emit calls no-op, identical to `usageRecorder`.
    */
-  setUsageEventSink(sink2) {
-    this.usageEventSink = sink2;
+  setUsageEventSink(sink) {
+    this.usageEventSink = sink;
   }
   /**
    * Set the vision-fallback provider used by `applyVisionFallback` to describe
@@ -6155,10 +5933,6 @@ export {
   loadServerConfig,
   saveServerConfig,
   mergeServerConfig,
-  AUDIT_REDACTED,
-  redactAuditText,
-  beginAuditCapture,
-  beginBillingCapture,
   computeKeyExpiry,
   checkKeyQuota,
   randomBase62,

package/dist/{chunk-FFALUUZZ.cjs → chunk-RGTR7CIO.cjs}

@@ -1,8 +1,5 @@
 "use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } } function _optionalChain(ops) { let lastAccessLHS = undefined; let value = ops[0]; let i = 1; while (i < ops.length) { const op = ops[i]; const fn = ops[i + 1]; i += 2; if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) { return undefined; } if (op === 'access' || op === 'optionalAccess') { lastAccessLHS = value; value = fn(value); } else if (op === 'call' || op === 'optionalCall') { value = fn((...args) => value.call(lastAccessLHS, ...args)); lastAccessLHS = undefined; } } return value; } var _class;
 
-var _chunkC72S6TTVcjs = require('./chunk-C72S6TTV.cjs');
-
-
 var _chunkDWKQZ2SKcjs = require('./chunk-DWKQZ2SK.cjs');
 
 
@@ -12,7 +9,10 @@ var _chunk4VAVYUZScjs = require('./chunk-4VAVYUZS.cjs');
 var _chunk7YN22L2Hcjs = require('./chunk-7YN22L2H.cjs');
 
 
-var _chunk2DCNB7DFcjs = require('./chunk-2DCNB7DF.cjs');
+var _chunkSU2GCLACcjs = require('./chunk-SU2GCLAC.cjs');
+
+
+var _chunkC72S6TTVcjs = require('./chunk-C72S6TTV.cjs');
 
 
 var _chunkRSJ3TWJQcjs = require('./chunk-RSJ3TWJQ.cjs');
@@ -207,7 +207,7 @@ var BuiltinTransformers = {
   GeminiTransformer: _chunk7YN22L2Hcjs.GeminiTransformer,
   GeminiCodeAssistTransformer: _chunkRSJ3TWJQcjs.GeminiCodeAssistTransformer,
   AnthropicTransformer: _chunk4VAVYUZScjs.AnthropicTransformer,
-  OpenAIResponseTransformer: _chunk2DCNB7DFcjs.OpenAIResponseTransformer,
+  OpenAIResponseTransformer: _chunkSU2GCLACcjs.OpenAIResponseTransformer,
   OpenCodeGoTransformer: _chunkC72S6TTVcjs.OpenCodeGoTransformer
 };
 function getBuiltinTransformers() {

package/dist/{chunk-3QOSDDNI.cjs → chunk-SNYBEXLB.cjs}

@@ -1,12 +1,6 @@
-"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/pipeline/auditUsageStash.ts
-var stash = /* @__PURE__ */ new WeakMap();
-function stashAuditUsage(key, detail) {
-  const existing = stash.get(key);
-  stash.set(key, existing ? { ...existing, ...detail } : { ...detail });
-}
-function readAuditUsage(key) {
-  return stash.get(key);
-}
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }
+
+var _chunkXSVNC2UDcjs = require('./chunk-XSVNC2UD.cjs');
 
 // src/usage/usage-recorder.ts
 var UsageRecorder = class {
@@ -30,7 +24,7 @@ var UsageRecorder = class {
    */
   record(input) {
     if (input.auditResponse) {
-      stashAuditUsage(input.auditResponse, {
+      _chunkXSVNC2UDcjs.stashAuditUsage.call(void 0, input.auditResponse, {
         inputTokens: input.usage.inputTokens,
         outputTokens: input.usage.outputTokens,
         model: input.model,
@@ -57,7 +51,7 @@ var UsageRecorder = class {
     );
     if (input.auditResponse) {
       try {
-        stashAuditUsage(input.auditResponse, { costUsd });
+        _chunkXSVNC2UDcjs.stashAuditUsage.call(void 0, input.auditResponse, { costUsd });
       } catch (e) {
       }
     }
@@ -126,5 +120,4 @@ var safeStringify = (value) => {
 
 
 
-
-exports.readAuditUsage = readAuditUsage; exports.UsageRecorder = UsageRecorder;
+exports.UsageRecorder = UsageRecorder;

package/dist/{chunk-2DCNB7DF.cjs → chunk-SU2GCLAC.cjs}

@@ -25,9 +25,10 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
     const input = [];
     for (const msg of request.messages) {
       if (msg.role === "system") {
+        const sysText = typeof msg.content === "string" ? msg.content : flattenContent(msg.content);
         input.push({
           role: "developer",
-          content: typeof msg.content === "string" ? msg.content : flattenContent(msg.content)
+          content: [{ type: "input_text", text: sysText }]
         });
       } else if (msg.role === "tool") {
         input.push({
@@ -36,9 +37,10 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
           output: typeof msg.content === "string" ? msg.content : ""
         });
       } else {
+        const text = typeof msg.content === "string" ? msg.content : flattenContent(msg.content);
         const entry = {
           role: msg.role,
-          content: typeof msg.content === "string" ? msg.content : flattenContent(msg.content)
+          content: [{ type: msg.role === "assistant" ? "output_text" : "input_text", text }]
         };
         if (msg.role === "assistant" && _optionalChain([msg, 'access', _ => _.tool_calls, 'optionalAccess', _2 => _2.length])) {
           input.push(entry);
@@ -60,7 +62,13 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
       model: request.model,
       input,
       stream: _nullishCoalesce(request.stream, () => ( false)),
-      ...request.max_tokens ? { max_output_tokens: request.max_tokens } : {},
+      // `store:false` is required by the codex backend and accepted by the
+      // public Responses API (which defaults to store:true). Always set it so
+      // codex relays (no discoverable url token) work without configuration.
+      store: false,
+      // `max_output_tokens` is intentionally omitted: the codex backend rejects
+      // it, and the public API falls back to its default when absent. If a
+      // public provider ever needs it honored, gate that on an opt-out flag.
       ...request.temperature !== void 0 ? { temperature: request.temperature } : {}
     };
     if (_optionalChain([request, 'access', _3 => _3.reasoning, 'optionalAccess', _4 => _4.effort]) && request.reasoning.effort !== "none") {
@@ -162,7 +170,19 @@ var OpenAIResponseTransformer = (_class = class {constructor() { _class.prototyp
    */
   async transformResponseOut(response, _context) {
     const contentType = _nullishCoalesce(response.headers.get("Content-Type"), () => ( ""));
-    if (contentType.includes("text/event-stream")) {
+    let isSse = contentType.includes("text/event-stream");
+    if (!isSse && response.body) {
+      const peek = response.clone();
+      try {
+        const reader = peek.body.getReader();
+        const { value } = await reader.read();
+        reader.releaseLock();
+        const head = value ? new TextDecoder().decode(value).trimStart() : "";
+        isSse = head.startsWith("event:") || head.startsWith("data:");
+      } catch (e2) {
+      }
+    }
+    if (isSse) {
       if (!response.body) {
         throw new Error("Stream response body is null");
       }
@@ -319,7 +339,7 @@ function convertResponseApiStreamToOpenAI(responseApiStream) {
         if (!isClosed) {
           try {
             controller.enqueue(encoder.encode(str));
-          } catch (e2) {
+          } catch (e3) {
             isClosed = true;
           }
         }
@@ -393,7 +413,7 @@ function convertResponseApiStreamToOpenAI(responseApiStream) {
                 default:
                   break;
               }
-            } catch (e3) {
+            } catch (e4) {
             }
           }
         }
@@ -403,7 +423,7 @@ function convertResponseApiStreamToOpenAI(responseApiStream) {
         if (!isClosed) {
           try {
             controller.close();
-          } catch (e4) {
+          } catch (e5) {
           }
         }
         reader.releaseLock();
@@ -426,7 +446,7 @@ function convertOpenAIStreamToResponseApi(openaiStream) {
         if (!isClosed) {
           try {
             controller.enqueue(encoder.encode(str));
-          } catch (e5) {
+          } catch (e6) {
             isClosed = true;
           }
         }
@@ -490,7 +510,7 @@ function convertOpenAIStreamToResponseApi(openaiStream) {
                   }
                 });
               }
-            } catch (e6) {
+            } catch (e7) {
             }
           }
         }
@@ -500,7 +520,7 @@ function convertOpenAIStreamToResponseApi(openaiStream) {
         if (!isClosed) {
           try {
             controller.close();
-          } catch (e7) {
+          } catch (e8) {
           }
         }
         reader.releaseLock();