@ouraihub/aether-core 0.1.0 → 0.1.2

package/src/pricing.ts

@@ -6,7 +6,13 @@ export const emptyUsage = (): TokenUsage => ({
   cacheWriteTokens: null,
   reasoningTokens: null,
 })
-const USAGE_KEYS = ['inputTokens', 'outputTokens', 'cacheReadTokens', 'cacheWriteTokens', 'reasoningTokens'] as const
+const USAGE_KEYS = [
+  'inputTokens',
+  'outputTokens',
+  'cacheReadTokens',
+  'cacheWriteTokens',
+  'reasoningTokens',
+] as const
 export function addUsage(total: TokenUsage, next: TokenUsage): void {
   for (const key of USAGE_KEYS) {
     const left = total[key],
@@ -20,7 +26,9 @@ export function cost(pricing: ModelPricing | null, rounds: readonly TokenUsage[]
   for (const round of rounds) {
     const inputTokens = round.inputTokens
     if (inputTokens === null || round.outputTokens === null) return null
-    const tier = pricing.tiers.findLast((candidate) => candidate.minInputTokens <= inputTokens) ?? pricing.tiers[0]
+    const tier =
+      pricing.tiers.findLast((candidate) => candidate.minInputTokens <= inputTokens) ??
+      pricing.tiers[0]
     if (!tier) return null
     const read = round.cacheReadTokens ?? 0,
       write = round.cacheWriteTokens ?? 0

package/src/protocol/decoder.ts

@@ -6,9 +6,12 @@ type Usage = TokenUsage
 export type Decoded = { text?: string; reasoning?: string; error?: string } | null
 
 const tokens = (value: unknown): number | null =>
-  typeof value === 'number' && Number.isInteger(value) && value >= 0 && value <= 0xffff_ffff ? value : null
+  typeof value === 'number' && Number.isInteger(value) && value >= 0 && value <= 0xffff_ffff
+    ? value
+    : null
 
-const text = (value: unknown): Decoded => (typeof value === 'string' && value ? { text: value } : null)
+const text = (value: unknown): Decoded =>
+  typeof value === 'string' && value ? { text: value } : null
 
 const error = (value: unknown): Decoded => {
   const message = at(value, 'message')
@@ -58,22 +61,34 @@ export class Decoder {
   }
 
   private keep(value: unknown): void {
-    const block = { protocol: this.protocol, endpointId: this.endpointId, modelId: this.modelId, value }
+    const block = {
+      protocol: this.protocol,
+      endpointId: this.endpointId,
+      modelId: this.modelId,
+      value,
+    }
     const id = at(value, 'id')
-    const existing = id == null ? -1 : this.reasoning.findIndex((item) => at(item.value, 'id') === id)
+    const existing =
+      id == null ? -1 : this.reasoning.findIndex((item) => at(item.value, 'id') === id)
     if (existing < 0) this.reasoning.push(block)
     else this.reasoning[existing] = block
   }
 
   private start(key: unknown, id: unknown, name: unknown): void {
     if (this.calls.length >= 128) throw new KitFailure('upstream', 'Tool call limit exceeded')
-    this.calls.push({ key, id: typeof id === 'string' ? id : '', name: typeof name === 'string' ? name : '', args: '' })
+    this.calls.push({
+      key,
+      id: typeof id === 'string' ? id : '',
+      name: typeof name === 'string' ? name : '',
+      args: '',
+    })
   }
 
   private append(key: unknown, fragment: unknown): void {
     const call = this.calls.find((item) => item.key === key)
     if (call && typeof fragment === 'string') {
-      if (call.args.length + fragment.length > 262144) throw new KitFailure('upstream', 'Tool arguments limit exceeded')
+      if (call.args.length + fragment.length > 262144)
+        throw new KitFailure('upstream', 'Tool arguments limit exceeded')
       call.args += fragment
     }
   }
@@ -109,7 +124,8 @@ export class Decoder {
         this.baseInput = tokens(at(raw, 'input_tokens')) ?? this.baseInput
         usage.outputTokens = tokens(at(raw, 'output_tokens')) ?? usage.outputTokens
         usage.cacheReadTokens = tokens(at(raw, 'cache_read_input_tokens')) ?? usage.cacheReadTokens
-        usage.cacheWriteTokens = tokens(at(raw, 'cache_creation_input_tokens')) ?? usage.cacheWriteTokens
+        usage.cacheWriteTokens =
+          tokens(at(raw, 'cache_creation_input_tokens')) ?? usage.cacheWriteTokens
         usage.reasoningTokens = tokens(at(raw, 'reasoning_tokens')) ?? usage.reasoningTokens
         if (this.baseInput !== null)
           usage.inputTokens = Math.min(
@@ -128,7 +144,8 @@ export class Decoder {
         if (at(block, 'type') === 'tool_use') {
           this.start(index, at(block, 'id'), at(block, 'name'))
           const input = at(block, 'input')
-          if (isRecord(input) && Object.keys(input).length) this.append(index, JSON.stringify(input))
+          if (isRecord(input) && Object.keys(input).length)
+            this.append(index, JSON.stringify(input))
         }
         if (
           index !== null &&
@@ -157,7 +174,8 @@ export class Decoder {
         }
         if (block && at(delta, 'type') === 'signature_delta') {
           const fragment = at(delta, 'signature')
-          if (typeof fragment === 'string') block.signature = String(block.signature ?? '') + fragment
+          if (typeof fragment === 'string')
+            block.signature = String(block.signature ?? '') + fragment
         }
       } else if (kind === 'content_block_stop') {
         const index = Number(at(v, 'index')),
@@ -179,7 +197,8 @@ export class Decoder {
       if (raw && typeof raw === 'object') {
         usage.inputTokens = tokens(at(raw, 'prompt_tokens')) ?? usage.inputTokens
         usage.outputTokens = tokens(at(raw, 'completion_tokens')) ?? usage.outputTokens
-        usage.cacheReadTokens = tokens(at(raw, 'prompt_tokens_details', 'cached_tokens')) ?? usage.cacheReadTokens
+        usage.cacheReadTokens =
+          tokens(at(raw, 'prompt_tokens_details', 'cached_tokens')) ?? usage.cacheReadTokens
         usage.cacheWriteTokens =
           tokens(at(raw, 'prompt_tokens_details', 'cache_write_tokens')) ?? usage.cacheWriteTokens
         usage.reasoningTokens =
@@ -206,14 +225,19 @@ export class Decoder {
       }
       const content = at(v, 'choices', 0, 'delta', 'content')
       if (typeof thinking === 'string' && thinking)
-        return { reasoning: thinking, ...(typeof content === 'string' && content ? { text: content } : {}) }
+        return {
+          reasoning: thinking,
+          ...(typeof content === 'string' && content ? { text: content } : {}),
+        }
       return text(at(v, 'choices', 0, 'delta', 'content'))
     }
-    if (kind === 'response.output_item.done' && at(v, 'item', 'type') === 'reasoning') this.keep(at(v, 'item'))
+    if (kind === 'response.output_item.done' && at(v, 'item', 'type') === 'reasoning')
+      this.keep(at(v, 'item'))
     // `call_id` (not the item id) is what `function_call_output` must echo.
     if (kind === 'response.output_item.added' && at(v, 'item', 'type') === 'function_call')
       this.start(at(v, 'item', 'id'), at(v, 'item', 'call_id'), at(v, 'item', 'name'))
-    if (kind === 'response.function_call_arguments.delta') this.append(at(v, 'item_id'), at(v, 'delta'))
+    if (kind === 'response.function_call_arguments.delta')
+      this.append(at(v, 'item_id'), at(v, 'delta'))
     if (kind === 'response.reasoning_summary_text.delta') {
       const fragment = at(v, 'delta')
       if (typeof fragment === 'string') return { reasoning: fragment }
@@ -228,7 +252,8 @@ export class Decoder {
       usage.cacheWriteTokens = tokens(at(raw, 'input_tokens_details', 'cache_write_tokens'))
       usage.reasoningTokens = tokens(at(raw, 'output_tokens_details', 'reasoning_tokens'))
       const output = at(v, 'response', 'output')
-      if (Array.isArray(output)) for (const item of output) if (at(item, 'type') === 'reasoning') this.keep(item)
+      if (Array.isArray(output))
+        for (const item of output) if (at(item, 'type') === 'reasoning') this.keep(item)
       this.done = true
       this.truncated = kind === 'response.incomplete'
     } else if (kind === 'response.failed') return error(at(v, 'response', 'error'))

package/src/protocol/request.ts

@@ -1,4 +1,9 @@
-import type { ImagePart, Protocol, ReasoningConfig, ReasoningEffort } from '@ouraihub/aether-contracts'
+import type {
+  ImagePart,
+  Protocol,
+  ReasoningConfig,
+  ReasoningEffort,
+} from '@ouraihub/aether-contracts'
 import type { Message, ToolSpec } from '../types.js'
 import { at, isRecord } from '../guard.js'
 
@@ -39,7 +44,11 @@ export interface ModelRequest {
   turn?: readonly Message[]
 }
 
-function userContent(protocol: Protocol, text: string, images: readonly ImagePart[] | undefined): unknown {
+function userContent(
+  protocol: Protocol,
+  text: string,
+  images: readonly ImagePart[] | undefined,
+): unknown {
   if (!images?.length) return text
   const url = (image: ImagePart): string => `data:${image.mime};base64,${image.data}`
   if (protocol === 'anthropic-messages')
@@ -51,8 +60,14 @@ function userContent(protocol: Protocol, text: string, images: readonly ImagePar
       { type: 'text', text },
     ]
   if (protocol === 'openai-chat')
-    return [{ type: 'text', text }, ...images.map((image) => ({ type: 'image_url', image_url: { url: url(image) } }))]
-  return [{ type: 'input_text', text }, ...images.map((image) => ({ type: 'input_image', image_url: url(image) }))]
+    return [
+      { type: 'text', text },
+      ...images.map((image) => ({ type: 'image_url', image_url: { url: url(image) } })),
+    ]
+  return [
+    { type: 'input_text', text },
+    ...images.map((image) => ({ type: 'input_image', image_url: url(image) })),
+  ]
 }
 
 export function requestBody(request: ModelRequest): Record<string, unknown> {
@@ -61,7 +76,10 @@ export function requestBody(request: ModelRequest): Record<string, unknown> {
     responses = request.protocol === 'openai-responses'
   const encode = (message: Message): void => {
     if ('user' in message) {
-      messages.push({ role: 'user', content: userContent(request.protocol, message.user, message.images) })
+      messages.push({
+        role: 'user',
+        content: userContent(request.protocol, message.user, message.images),
+      })
       return
     }
     if ('tool' in message) {
@@ -95,9 +113,12 @@ export function requestBody(request: ModelRequest): Record<string, unknown> {
         block.modelId === request.model,
     )
     if (anthropic) {
-      const blocks = reasoning.flatMap((block) => (block.value && typeof block.value === 'object' ? [block.value] : []))
+      const blocks = reasoning.flatMap((block) =>
+        block.value && typeof block.value === 'object' ? [block.value] : [],
+      )
       if (assistant.text) blocks.push({ type: 'text', text: assistant.text })
-      for (const call of calls) blocks.push({ type: 'tool_use', id: call.id, name: call.name, input: call.args ?? {} })
+      for (const call of calls)
+        blocks.push({ type: 'tool_use', id: call.id, name: call.name, input: call.args ?? {} })
       if (blocks.length) messages.push({ role: 'assistant', content: blocks })
     } else if (responses) {
       for (const block of reasoning) if (isRecord(block.value)) messages.push(block.value)
@@ -148,7 +169,13 @@ export function requestBody(request: ModelRequest): Record<string, unknown> {
     }
   } else if (request.protocol === 'openai-chat') {
     if (system) messages.unshift({ role: 'system', content: system })
-    body = { model, max_tokens: maxOutput, stream: true, stream_options: { include_usage: true }, messages }
+    body = {
+      model,
+      max_tokens: maxOutput,
+      stream: true,
+      stream_options: { include_usage: true },
+      messages,
+    }
     const dialect = request.reasoning?.dialect
     if (effort !== 'default' && dialect === 'thinking-type') {
       body.thinking = { type: effort === 'none' ? 'disabled' : 'enabled' }
@@ -159,7 +186,9 @@ export function requestBody(request: ModelRequest): Record<string, unknown> {
     } else if (effort !== 'default') body.reasoning_effort = effort
   } else {
     // Third-party Responses servers may reject `summary` with 400.
-    const summary = /^https:\/\/api\.openai\.com(?:\/|$)/.test(request.baseUrl) ? { summary: 'auto' } : {}
+    const summary = /^https:\/\/api\.openai\.com(?:\/|$)/.test(request.baseUrl)
+      ? { summary: 'auto' }
+      : {}
     body = {
       model,
       max_output_tokens: maxOutput,
@@ -171,16 +200,22 @@ export function requestBody(request: ModelRequest): Record<string, unknown> {
       ...(effort === 'default' ? {} : { reasoning: { effort, ...summary } }),
     }
   }
-  const tools: Record<string, unknown>[] = (request.tools ?? []).map(({ name, description, parameters }) =>
-    anthropic
-      ? { name, description, input_schema: parameters }
-      : responses
-        ? { type: 'function', name, description, parameters }
-        : { type: 'function', function: { name, description, parameters } },
+  const tools: Record<string, unknown>[] = (request.tools ?? []).map(
+    ({ name, description, parameters }) =>
+      anthropic
+        ? { name, description, input_schema: parameters }
+        : responses
+          ? { type: 'function', name, description, parameters }
+          : { type: 'function', function: { name, description, parameters } },
   )
   if (request.nativeWebSearch) {
-    if (request.protocol === 'openai-chat') throw new Error('Native search is unsupported on Chat Completions')
-    tools.push(anthropic ? { type: 'web_search_20250305', name: 'web_search', max_uses: 5 } : { type: 'web_search' })
+    if (request.protocol === 'openai-chat')
+      throw new Error('Native search is unsupported on Chat Completions')
+    tools.push(
+      anthropic
+        ? { type: 'web_search_20250305', name: 'web_search', max_uses: 5 }
+        : { type: 'web_search' },
+    )
   }
   if (tools.length) body.tools = tools
   return body

package/src/providers/connection.ts

@@ -56,7 +56,9 @@ export function validateUrl(field: string, raw: string): void {
   )
     throw badRequest(field, 'invalid_url')
 }
-export function validateHeaders(input: Readonly<Record<string, string | undefined>>): Record<string, string> {
+export function validateHeaders(
+  input: Readonly<Record<string, string | undefined>>,
+): Record<string, string> {
   const entries = Object.entries(input)
   if (entries.length > 20) throw badRequest('headers', 'too_many')
   const headers: Record<string, string> = {}
@@ -117,10 +119,16 @@ export function validateReasoning(
   if (!fits) throw badRequest('reasoning', 'protocol_mismatch')
   const budget = config.budgetTokens
   if (config.dialect === 'anthropic-budget') {
-    if (budget == null || !Number.isSafeInteger(budget) || budget < 1024 || budget >= (maxOutput ?? 4096))
+    if (
+      budget == null ||
+      !Number.isSafeInteger(budget) ||
+      budget < 1024 ||
+      budget >= (maxOutput ?? 4096)
+    )
       throw badRequest('reasoning', 'invalid_budget')
   } else if (config.dialect === 'qwen') {
-    if (budget != null && (!Number.isSafeInteger(budget) || budget < 1)) throw badRequest('reasoning', 'invalid_budget')
+    if (budget != null && (!Number.isSafeInteger(budget) || budget < 1))
+      throw badRequest('reasoning', 'invalid_budget')
   } else if (budget != null) throw badRequest('reasoning', 'unexpected_budget')
 }
 export function validatePricing(pricing: ModelPricing | null, modelType: string): void {
@@ -164,7 +172,8 @@ export function validateModel(model: Model, protocol: Protocol): void {
     if (value !== null && charCount(value.trim()) > 80) throw badRequest(field, 'too_long', 80)
   if (model.nativeWebSearch && (model.modelType !== 'chat' || protocol === 'openai-chat'))
     throw badRequest('nativeWebSearch', 'unsupported_protocol')
-  if (model.reasoning) validateReasoning(model.reasoning, protocol, model.modelType, model.maxOutput)
+  if (model.reasoning)
+    validateReasoning(model.reasoning, protocol, model.modelType, model.maxOutput)
   validatePricing(model.pricing, model.modelType)
 }
 /** Prepares one immutable-by-ownership snapshot; network consumers still enforce address policy. */
@@ -207,6 +216,8 @@ export function prepare(snapshot: ConnectionSnapshot): Connection {
     pricing: model?.pricing ?? null,
     nativeWebSearch: model?.nativeWebSearch ?? false,
     ...(endpoint.imageBaseUrl?.trim() ? { imageBaseUrl: apiBase(endpoint.imageBaseUrl) } : {}),
-    ...(endpoint.imageEditBaseUrl?.trim() ? { imageEditBaseUrl: apiBase(endpoint.imageEditBaseUrl) } : {}),
+    ...(endpoint.imageEditBaseUrl?.trim()
+      ? { imageEditBaseUrl: apiBase(endpoint.imageEditBaseUrl) }
+      : {}),
   }
 }

package/src/providers/infer.ts

@@ -71,7 +71,7 @@ export function inferModel(modelId: string): Inferred {
   }
 }
 
-// ponytail: bounded known-family rules; add a catalog only when provider-specific metadata is needed.
+// ponytail: bounded known-family rules; add a catalog only when provider metadata is needed.
 export function inferReasoning(
   modelId: string,
   protocol: Protocol,
@@ -96,7 +96,9 @@ export function inferReasoning(
     const adaptive =
       newest ||
       families.some((family) => matches(`claude-${family}-5`)) ||
-      ['opus', 'sonnet'].some((family) => ['6', '7', '8'].some((minor) => matches(`claude-${family}-4-${minor}`)))
+      ['opus', 'sonnet'].some((family) =>
+        ['6', '7', '8'].some((minor) => matches(`claude-${family}-4-${minor}`)),
+      )
     if (adaptive)
       return {
         dialect: 'anthropic-adaptive',
@@ -160,11 +162,13 @@ export function inferReasoning(
   return null
 }
 
-/** Official vendor endpoints switch reasoning with their own fields (docs/28 RT4); a relay serving the same model keeps the OpenAI dialect. */
+/** Official vendor endpoints use their own reasoning fields; relays keep the OpenAI dialect. */
 function vendorReasoning(name: string, baseUrl: string): ReasoningConfig | null {
   const host = (baseUrl.split('://').at(-1) ?? '').split(/[/:?]/)[0]?.toLowerCase() ?? ''
-  const on = (...domains: string[]): boolean => domains.some((domain) => host === domain || host.endsWith(`.${domain}`))
-  const starts = (...prefixes: string[]): boolean => prefixes.some((prefix) => name.startsWith(prefix))
+  const on = (...domains: string[]): boolean =>
+    domains.some((domain) => host === domain || host.endsWith(`.${domain}`))
+  const starts = (...prefixes: string[]): boolean =>
+    prefixes.some((prefix) => name.startsWith(prefix))
   const thinking = (efforts: ReasoningConfig['efforts']): ReasoningConfig => ({
     dialect: 'thinking-type',
     efforts,
@@ -181,7 +185,8 @@ function vendorReasoning(name: string, baseUrl: string): ReasoningConfig | null
   if (on('volces.com')) return starts('doubao-seed') ? toggle : null
   if (on('moonshot.cn', 'moonshot.ai')) {
     if (starts('kimi-k3')) return thinking(['none', 'low', 'high', 'max'])
-    return starts('kimi-k2-5', 'kimi-k2-6', 'kimi-k2-7', 'kimi-k2-8', 'kimi-k2-9') && !name.includes('-code')
+    return starts('kimi-k2-5', 'kimi-k2-6', 'kimi-k2-7', 'kimi-k2-8', 'kimi-k2-9') &&
+      !name.includes('-code')
       ? toggle
       : null
   }

package/src/providers/probe.ts

@@ -1,11 +1,18 @@
-import type { ProbeError, ProbeErrorKind, ProbeResult, ProbedModel } from '@ouraihub/aether-contracts'
+import type {
+  ProbeError,
+  ProbeErrorKind,
+  ProbeResult,
+  ProbedModel,
+} from '@ouraihub/aether-contracts'
 import type { OutboundHttp } from '../ports.js'
 import { cancelled, excerpt, KitFailure } from '../error.js'
 import { apiBase, authHeaders, prepare, type EndpointSnapshot } from './connection.js'
 import { inferModel, inferReasoning } from './infer.js'
 
 function at(value: unknown, name: string): unknown {
-  return value !== null && typeof value === 'object' && name in value ? Reflect.get(value, name) : undefined
+  return value !== null && typeof value === 'object' && name in value
+    ? Reflect.get(value, name)
+    : undefined
 }
 async function readBody(response: Response, limit: number): Promise<string | null> {
   if (Number(response.headers.get('content-length') ?? 0) > limit) {
@@ -51,15 +58,21 @@ export async function probe(outbound: OutboundHttp, input: ProbeInput): Promise<
       status: null,
       message: null,
       hint:
-        kind === 'connect' && /^\[.*\]$|^\d+\.\d+\.\d+\.\d+$/.test(hostname) ? 'providers.hint.check_network' : null,
+        kind === 'connect' && /^\[.*\]$|^\d+\.\d+\.\d+\.\d+$/.test(hostname)
+          ? 'providers.hint.check_network'
+          : null,
     })
   let hostname: string
   try {
     hostname = new URL(probeUrl).hostname
   } catch {
-    throw new KitFailure('bad_request', 'Invalid probe URL', { field: 'baseUrl', reason: 'invalid_url' })
+    throw new KitFailure('bad_request', 'Invalid probe URL', {
+      field: 'baseUrl',
+      reason: 'invalid_url',
+    })
   }
-  if (!connection.keys.length && !['localhost', '127.0.0.1', '[::1]'].includes(hostname)) return failure('missing_key')
+  if (!connection.keys.length && !['localhost', '127.0.0.1', '[::1]'].includes(hostname))
+    return failure('missing_key')
   let timeout = AbortSignal.timeout(20_000)
   const keys = connection.keys.length ? connection.keys : [null]
   let used: string | null = null
@@ -157,7 +170,8 @@ export async function probe(outbound: OutboundHttp, input: ProbeInput): Promise<
   } catch (error) {
     if (input.signal.aborted) throw cancelled()
     if (timeout.aborted) return failure('timeout')
-    if (error instanceof KitFailure && error.details?.reason === 'blocked_address') return failure('blocked_address')
+    if (error instanceof KitFailure && error.details?.reason === 'blocked_address')
+      return failure('blocked_address')
     return failure('connect')
   }
 }

package/src/risk.ts

@@ -24,10 +24,16 @@ export function shellRisk(command: string): Risk | null {
     ['elevation', /(?:^|[\s;&|])(sudo|doas|runas)(?:\s|$)|start-process\b.*-verb\s+runas/i],
     ['delete', /(?:^|[\s;&|])(rm|rmdir|del|erase|remove-item)(?:\s|$)/i],
     ['disk', /(?:^|[\s;&|])(mkfs(?:\.\w+)?|fdisk|diskpart|format)(?:\s|$)|\bdd\b.*\bof=/i],
-    ['git_destructive', /\bgit\s+(?:reset\s+--hard|clean\b[^\n]*-[^\s]*f|push\b[^\n]*(?:--force|-f\b)|checkout\s+--)/i],
+    [
+      'git_destructive',
+      /\bgit\s+(?:reset\s+--hard|clean\b[^\n]*-[^\s]*f|push\b[^\n]*(?:--force|-f\b)|checkout\s+--)/i,
+    ],
     ['permissions', /\b(?:chmod|chown|icacls|set-acl)\b/i],
     ['publish', /\b(?:npm|pnpm|yarn|cargo|dotnet)\s+(?:publish|nuget\s+push)\b/i],
-    ['global_install', /\b(?:npm|pnpm|yarn)\b[^\n]*(?:--global|\s-g\b)|\bpip\b[^\n]*\binstall\b(?![^\n]*--target)/i],
+    [
+      'global_install',
+      /\b(?:npm|pnpm|yarn)\b[^\n]*(?:--global|\s-g\b)|\bpip\b[^\n]*\binstall\b(?![^\n]*--target)/i,
+    ],
     ['home_path', /(?:^|\s)~(?:[\\/]|$)|\$(?:HOME|USERPROFILE)\b|%(?:USERPROFILE|HOMEPATH)%/i],
     ['process_spawn', /\$\(|`[^`]+`|\b(?:eval|exec|cmd\s+\/c|powershell\s+-|bash\s+-c|sh\s+-c)\b/i],
   ]
@@ -40,7 +46,11 @@ export function scriptRisk(language: ScriptLanguage, script: string): Risk | nul
     return { reason: 'process_spawn' }
   if (/\b(?:requests\.|urllib\.|httpx\.|fetch\s*\(|https?\.(?:request|get)|socket\.)/.test(script))
     return { reason: 'network' }
-  if (/\b(?:os\.(?:remove|unlink|rmdir)|shutil\.rmtree|fs\.(?:rm|unlink|rmdir)|Deno\.remove)\b/.test(script))
+  if (
+    /\b(?:os\.(?:remove|unlink|rmdir)|shutil\.rmtree|fs\.(?:rm|unlink|rmdir)|Deno\.remove)\b/.test(
+      script,
+    )
+  )
     return { reason: 'file_delete' }
   return null
 }

package/src/schema.ts

@@ -121,13 +121,30 @@ export const validateArguments: ArgumentsValidator = (root, args) => {
             schema.type.every((type: unknown) => typeof type === 'string' && TYPES.includes(type)))
       )
         return false
-      for (const key of ['minLength', 'maxLength', 'minItems', 'maxItems', 'minProperties', 'maxProperties'])
+      for (const key of [
+        'minLength',
+        'maxLength',
+        'minItems',
+        'maxItems',
+        'minProperties',
+        'maxProperties',
+      ])
         if (
           schema[key] !== undefined &&
-          !(typeof schema[key] === 'number' && Number.isSafeInteger(schema[key]) && schema[key] >= 0)
+          !(
+            typeof schema[key] === 'number' &&
+            Number.isSafeInteger(schema[key]) &&
+            schema[key] >= 0
+          )
         )
           return false
-      for (const key of ['minimum', 'maximum', 'exclusiveMinimum', 'exclusiveMaximum', 'multipleOf'])
+      for (const key of [
+        'minimum',
+        'maximum',
+        'exclusiveMinimum',
+        'exclusiveMaximum',
+        'multipleOf',
+      ])
         if (
           schema[key] !== undefined &&
           !(
@@ -146,13 +163,21 @@ export const validateArguments: ArgumentsValidator = (root, args) => {
         )
       )
         return false
-      if (schema.enum !== undefined && !(Array.isArray(schema.enum) && schema.enum.length > 0)) return false
+      if (schema.enum !== undefined && !(Array.isArray(schema.enum) && schema.enum.length > 0))
+        return false
       if (schema.uniqueItems !== undefined && typeof schema.uniqueItems !== 'boolean') return false
       if (schema.pattern !== undefined && !regex(schema.pattern)) return false
-      if (schema.format !== undefined && (typeof schema.format !== 'string' || !Object.hasOwn(format, schema.format)))
+      if (
+        schema.format !== undefined &&
+        (typeof schema.format !== 'string' || !Object.hasOwn(format, schema.format))
+      )
         return false
-      if (schema.contentEncoding !== undefined || schema.contentMediaType !== undefined) return false
-      if (schema.$ref !== undefined && (typeof schema.$ref !== 'string' || !inspect(resolve(schema.$ref), depth + 1)))
+      if (schema.contentEncoding !== undefined || schema.contentMediaType !== undefined)
+        return false
+      if (
+        schema.$ref !== undefined &&
+        (typeof schema.$ref !== 'string' || !inspect(resolve(schema.$ref), depth + 1))
+      )
         return false
       for (const key of ['allOf', 'anyOf', 'oneOf'])
         if (
@@ -187,7 +212,8 @@ export const validateArguments: ArgumentsValidator = (root, args) => {
         if (group === undefined) continue
         if (!isRecord(group)) return false
         for (const [name, child] of Object.entries(group))
-          if ((key === 'patternProperties' && !regex(name)) || !inspect(child, depth + 1)) return false
+          if ((key === 'patternProperties' && !regex(name)) || !inspect(child, depth + 1))
+            return false
       }
       if (schema.dependencies !== undefined) {
         if (!isRecord(schema.dependencies)) return false

package/src/search/execution.ts

@@ -30,7 +30,9 @@ export async function execute<T>(
   validatePreferences(config.preferences)
   if (
     !Array.isArray(config.apiKeys) ||
-    config.apiKeys.some((key: unknown) => typeof key !== 'string' || !key.trim() || key.length > 4096)
+    config.apiKeys.some(
+      (key: unknown) => typeof key !== 'string' || !key.trim() || key.length > 4096,
+    )
   )
     throw new KitFailure('needs_config', 'Invalid search credentials', { field: 'keys' })
   if (spec.keyMode === 'required' && !config.apiKeys.length)
@@ -41,7 +43,10 @@ export async function execute<T>(
   const abort = () => controller.abort()
   signal?.addEventListener('abort', abort, { once: true })
   if (signal?.aborted) controller.abort()
-  const timer = setTimeout(abort, cap === 'fetch' ? 20000 : provider.id === 'exa-mcp' ? 25000 : 15000)
+  const timer = setTimeout(
+    abort,
+    cap === 'fetch' ? 20000 : provider.id === 'exa-mcp' ? 25000 : 15000,
+  )
   const aborted = () =>
     new KitFailure(
       signal?.aborted ? 'cancelled' : 'timeout',
@@ -77,7 +82,11 @@ export async function execute<T>(
       try {
         const { promise, resolve, reject } = Promise.withResolvers<Response>()
         const onAbort = () =>
-          reject(controller.signal.aborted ? aborted() : new KitFailure('timeout', 'Search connection timed out'))
+          reject(
+            controller.signal.aborted
+              ? aborted()
+              : new KitFailure('timeout', 'Search connection timed out'),
+          )
         connection.signal.addEventListener('abort', onAbort, { once: true })
         const request: RequestInit & { credentials: 'omit' } = {
           ...init,
@@ -101,7 +110,9 @@ export async function execute<T>(
       if (length !== null && /^\d+$/u.test(length) && Number(length) > limit) {
         await response.body?.cancel().catch(() => {})
         if (!response.ok)
-          throw new KitFailure('upstream', 'Search provider rejected request', { status: response.status })
+          throw new KitFailure('upstream', 'Search provider rejected request', {
+            status: response.status,
+          })
         throw new KitFailure('upstream', 'Search response exceeds size limit', { limit })
       }
       const reader = response.body?.getReader()
@@ -117,7 +128,9 @@ export async function execute<T>(
             if (size > limit) {
               await reader.cancel().catch(() => {})
               if (!response.ok)
-                throw new KitFailure('upstream', 'Search provider rejected request', { status: response.status })
+                throw new KitFailure('upstream', 'Search provider rejected request', {
+                  status: response.status,
+                })
               throw new KitFailure('upstream', 'Search response exceeds size limit', { limit })
             }
             text += decoder.decode(value, { stream: true })
@@ -130,7 +143,9 @@ export async function execute<T>(
         reader?.releaseLock()
       }
       if (!response.ok)
-        throw new KitFailure('upstream', 'Search provider rejected request', { status: response.status })
+        throw new KitFailure('upstream', 'Search provider rejected request', {
+          status: response.status,
+        })
       return text
     },
   }

package/src/search/index.ts

@@ -2,7 +2,14 @@ import type { SearchPage, SearchResult } from '@ouraihub/aether-contracts'
 import { KitFailure } from '../error.js'
 import type { OutboundHttp } from '../ports.js'
 import { execute, type CheckTarget, type ResolvedSearchConfig } from './execution.js'
-import { checkBlacklist, cutoff, processHits, validatePreferences, validateQuery, validateTarget } from './policy.js'
+import {
+  checkBlacklist,
+  cutoff,
+  processHits,
+  validatePreferences,
+  validateQuery,
+  validateTarget,
+} from './policy.js'
 import { fetchRequest, parsePage, parseSearchResponse, searchRequest } from './vendor.js'
 
 export type { CheckTarget, ResolvedSearchConfig } from './execution.js'
@@ -33,7 +40,9 @@ export async function search(
     const response = await execution.request(url, init)
     if (response.status >= 300 && response.status < 400) {
       await response.body?.cancel().catch(() => {})
-      throw new KitFailure('upstream', 'Search provider redirects are forbidden', { status: response.status })
+      throw new KitFailure('upstream', 'Search provider redirects are forbidden', {
+        status: response.status,
+      })
     }
     const body = await execution.body(response)
     return {