@omnicross/core 0.1.3 → 0.1.5

package/dist/{chunk-BO4RFWBR.js → chunk-D3TDKWRP.js}

@@ -1,9 +1,30 @@
+import {
+  getUpstreamTracePath,
+  redactHeaders,
+  writeUpstreamTrace
+} from "./chunk-SYQF7OIR.js";
+
 // src/pipeline/upstreamFetch.ts
 import { Agent, buildConnector, ProxyAgent } from "undici";
 import { SocksClient } from "socks";
 var resolver = null;
 var generation = 0;
 var cache = /* @__PURE__ */ new Map();
+function setUpstreamProxyResolver(fn) {
+  resolver = fn;
+  bumpUpstreamProxyGeneration();
+}
+function bumpUpstreamProxyGeneration() {
+  generation += 1;
+  const old = cache;
+  cache = /* @__PURE__ */ new Map();
+  for (const dispatcher of old.values()) {
+    try {
+      void dispatcher.close?.();
+    } catch {
+    }
+  }
+}
 function normalizeProxy(cfg) {
   if ("url" in cfg) {
     let u;
@@ -80,10 +101,70 @@ function resolveUpstreamDispatcher(ctx) {
 }
 function fetchUpstream(url, init, ctx) {
   const dispatcher = resolveUpstreamDispatcher({ ...ctx ?? {}, url });
-  if (!dispatcher) return fetch(url, init);
-  return fetch(url, { ...init, dispatcher });
+  const doFetch = dispatcher ? () => fetch(url, { ...init, dispatcher }) : () => fetch(url, init);
+  const tracePath = getUpstreamTracePath();
+  if (!tracePath || !ctx?.providerId) return doFetch();
+  const startedAt = Date.now();
+  const method = typeof init.method === "string" ? init.method : "GET";
+  const requestHeaders = redactHeaders(
+    init.headers
+  );
+  const requestBody = typeof init.body === "string" ? init.body : null;
+  const providerId = ctx.providerId;
+  const accountId = ctx.accountId;
+  return doFetch().then((res) => {
+    const clone = res.clone();
+    const status = res.status;
+    const statusText = res.statusText;
+    const responseHeaders = redactHeaders(res.headers);
+    void clone.text().then((body) => {
+      writeUpstreamTrace({
+        ts: startedAt,
+        durationMs: Date.now() - startedAt,
+        providerId,
+        accountId,
+        url,
+        method,
+        requestHeaders,
+        requestBody,
+        status,
+        statusText,
+        responseHeaders,
+        responseBody: body,
+        responseBytes: Buffer.byteLength(body, "utf8")
+      });
+    }).catch(() => {
+    });
+    return res;
+  }).catch((err) => {
+    const msg = err instanceof Error ? err.message : String(err);
+    writeUpstreamTrace({
+      ts: startedAt,
+      durationMs: Date.now() - startedAt,
+      providerId,
+      accountId,
+      url,
+      method,
+      requestHeaders,
+      requestBody,
+      status: 0,
+      statusText: "",
+      responseHeaders: {},
+      responseBody: `<UPSTREAM FETCH ERROR: ${msg}>`,
+      responseBytes: 0
+    });
+    throw err;
+  });
+}
+function __resetUpstreamProxyForTests() {
+  resolver = null;
+  bumpUpstreamProxyGeneration();
 }
 
 export {
-  fetchUpstream
+  setUpstreamProxyResolver,
+  bumpUpstreamProxyGeneration,
+  resolveUpstreamDispatcher,
+  fetchUpstream,
+  __resetUpstreamProxyForTests
 };

package/dist/{chunk-RSJ3TWJQ.cjs → chunk-DDMRUL76.cjs}

@@ -3,7 +3,7 @@
 
 
 
-var _chunkYGXJGRFIcjs = require('./chunk-YGXJGRFI.cjs');
+var _chunkJWVTXXPXcjs = require('./chunk-JWVTXXPX.cjs');
 
 // src/transformer/transformers/GeminiCodeAssistTransformer.ts
 var DEFAULT_CODE_ASSIST_ENDPOINT = "https://cloudcode-pa.googleapis.com";
@@ -117,7 +117,7 @@ var GeminiCodeAssistTransformer = (_class = class {constructor() { _class.protot
    * openaiResponsesIngress). `undefined` is the valid fresh free-tier value.
    */
   async transformRequestIn(request, provider, _context) {
-    const inner = _chunkYGXJGRFIcjs.buildRequestBody.call(void 0, request);
+    const inner = _chunkJWVTXXPXcjs.buildRequestBody.call(void 0, request);
     const envelope = {
       model: request.model,
       project: provider.geminiProject,
@@ -147,7 +147,7 @@ var GeminiCodeAssistTransformer = (_class = class {constructor() { _class.protot
     if (inner && typeof inner === "object" && !("model" in inner) && "model" in r) {
       inner.model = r.model;
     }
-    return _chunkYGXJGRFIcjs.transformRequestOut.call(void 0, inner);
+    return _chunkJWVTXXPXcjs.transformRequestOut.call(void 0, inner);
   }
   /**
    * Code Assist response → OpenAI-compatible. PEEL the `.response` envelope from
@@ -155,7 +155,7 @@ var GeminiCodeAssistTransformer = (_class = class {constructor() { _class.protot
    */
   async transformResponseOut(response, _context) {
     const unwrapped = await unwrapCodeAssistResponse(response);
-    return _chunkYGXJGRFIcjs.transformResponseOut.call(void 0, unwrapped, this.name, this.logger);
+    return _chunkJWVTXXPXcjs.transformResponseOut.call(void 0, unwrapped, this.name, this.logger);
   }
   /**
    * OpenAI-compatible response → Code Assist (endpoint-encode parity). Re-wraps
@@ -164,7 +164,7 @@ var GeminiCodeAssistTransformer = (_class = class {constructor() { _class.protot
    * `transformResponseOut`'s peel.
    */
   async transformResponseIn(response, _context) {
-    const geminiResponse = await _chunkYGXJGRFIcjs.transformResponseIn.call(void 0, response, this.logger);
+    const geminiResponse = await _chunkJWVTXXPXcjs.transformResponseIn.call(void 0, response, this.logger);
     const contentType = _nullishCoalesce(geminiResponse.headers.get("Content-Type"), () => ( ""));
     if (contentType.includes("text/event-stream")) {
       return geminiResponse;

package/dist/chunk-FCR77GYM.cjs

@@ -0,0 +1,33 @@
+"use strict";Object.defineProperty(exports, "__esModule", {value: true}); function _nullishCoalesce(lhs, rhsFn) { if (lhs != null) { return lhs; } else { return rhsFn(); } }// src/outbound-api/auditRedact.ts
+var AUDIT_REDACTED = "***REDACTED***";
+var RULES = [
+  // `sk-…` family (Anthropic sk-ant-, omnicross sk-omnicross-, OpenAI sk-proj-/sk-).
+  { re: /\bsk-[A-Za-z0-9_-]{6,}/g, replace: AUDIT_REDACTED },
+  // Google API keys.
+  { re: /\bAIza[A-Za-z0-9_-]{10,}/g, replace: AUDIT_REDACTED },
+  // `Bearer <token>` (auth headers echoed into a body / SSE error).
+  { re: /\bBearer\s+[A-Za-z0-9._~+/=-]{6,}/gi, replace: `Bearer ${AUDIT_REDACTED}` },
+  // Inline `x-api-key` / `api-key` / `authorization` label followed by a value.
+  {
+    re: /\b(x-api-key|api[_-]?key|authorization)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  },
+  // `x-goog-api-key` header echoed inline.
+  {
+    re: /\b(x-goog-api-key)(["']?\s*[:=]\s*["']?)[A-Za-z0-9._~+/=-]{6,}/gi,
+    replace: `$1$2${AUDIT_REDACTED}`
+  }
+];
+function redactAuditText(text) {
+  if (typeof text !== "string" || text.length === 0) return _nullishCoalesce(text, () => ( ""));
+  let out = text;
+  for (const { re, replace } of RULES) {
+    out = out.replace(re, replace);
+  }
+  return out;
+}
+
+
+
+
+exports.AUDIT_REDACTED = AUDIT_REDACTED; exports.redactAuditText = redactAuditText;