@poolzin/pool-bot 2026.1.39 → 2026.2.1

package/dist/media-understanding/providers/google/audio.js

@@ -1,12 +1,13 @@
 import { normalizeGoogleModelId } from "../../../agents/models-config.providers.js";
-import { fetchWithTimeout, normalizeBaseUrl, readErrorResponse } from "../shared.js";
+import { fetchWithTimeoutGuarded, normalizeBaseUrl, readErrorResponse } from "../shared.js";
 export const DEFAULT_GOOGLE_AUDIO_BASE_URL = "https://generativelanguage.googleapis.com/v1beta";
 const DEFAULT_GOOGLE_AUDIO_MODEL = "gemini-3-flash-preview";
 const DEFAULT_GOOGLE_AUDIO_PROMPT = "Transcribe the audio.";
 function resolveModel(model) {
     const trimmed = model?.trim();
-    if (!trimmed)
+    if (!trimmed) {
         return DEFAULT_GOOGLE_AUDIO_MODEL;
+    }
     return normalizeGoogleModelId(trimmed);
 }
 function resolvePrompt(prompt) {
@@ -16,6 +17,7 @@ function resolvePrompt(prompt) {
 export async function transcribeGeminiAudio(params) {
     const fetchFn = params.fetchFn ?? fetch;
     const baseUrl = normalizeBaseUrl(params.baseUrl, DEFAULT_GOOGLE_AUDIO_BASE_URL);
+    const allowPrivate = Boolean(params.baseUrl?.trim());
     const model = resolveModel(params.model);
     const url = `${baseUrl}/models/${model}:generateContent`;
     const headers = new Headers(params.headers);
@@ -41,24 +43,29 @@ export async function transcribeGeminiAudio(params) {
             },
         ],
     };
-    const res = await fetchWithTimeout(url, {
+    const { response: res, release } = await fetchWithTimeoutGuarded(url, {
         method: "POST",
         headers,
         body: JSON.stringify(body),
-    }, params.timeoutMs, fetchFn);
-    if (!res.ok) {
-        const detail = await readErrorResponse(res);
-        const suffix = detail ? `: ${detail}` : "";
-        throw new Error(`Audio transcription failed (HTTP ${res.status})${suffix}`);
+    }, params.timeoutMs, fetchFn, allowPrivate ? { ssrfPolicy: { allowPrivateNetwork: true } } : undefined);
+    try {
+        if (!res.ok) {
+            const detail = await readErrorResponse(res);
+            const suffix = detail ? `: ${detail}` : "";
+            throw new Error(`Audio transcription failed (HTTP ${res.status})${suffix}`);
+        }
+        const payload = (await res.json());
+        const parts = payload.candidates?.[0]?.content?.parts ?? [];
+        const text = parts
+            .map((part) => part?.text?.trim())
+            .filter(Boolean)
+            .join("\n");
+        if (!text) {
+            throw new Error("Audio transcription response missing text");
+        }
+        return { text, model };
     }
-    const payload = (await res.json());
-    const parts = payload.candidates?.[0]?.content?.parts ?? [];
-    const text = parts
-        .map((part) => part?.text?.trim())
-        .filter(Boolean)
-        .join("\n");
-    if (!text) {
-        throw new Error("Audio transcription response missing text");
+    finally {
+        await release();
     }
-    return { text, model };
 }

package/dist/media-understanding/providers/google/video.js

@@ -1,12 +1,13 @@
 import { normalizeGoogleModelId } from "../../../agents/models-config.providers.js";
-import { fetchWithTimeout, normalizeBaseUrl, readErrorResponse } from "../shared.js";
+import { fetchWithTimeoutGuarded, normalizeBaseUrl, readErrorResponse } from "../shared.js";
 export const DEFAULT_GOOGLE_VIDEO_BASE_URL = "https://generativelanguage.googleapis.com/v1beta";
 const DEFAULT_GOOGLE_VIDEO_MODEL = "gemini-3-flash-preview";
 const DEFAULT_GOOGLE_VIDEO_PROMPT = "Describe the video.";
 function resolveModel(model) {
     const trimmed = model?.trim();
-    if (!trimmed)
+    if (!trimmed) {
         return DEFAULT_GOOGLE_VIDEO_MODEL;
+    }
     return normalizeGoogleModelId(trimmed);
 }
 function resolvePrompt(prompt) {
@@ -16,6 +17,7 @@ function resolvePrompt(prompt) {
 export async function describeGeminiVideo(params) {
     const fetchFn = params.fetchFn ?? fetch;
     const baseUrl = normalizeBaseUrl(params.baseUrl, DEFAULT_GOOGLE_VIDEO_BASE_URL);
+    const allowPrivate = Boolean(params.baseUrl?.trim());
     const model = resolveModel(params.model);
     const url = `${baseUrl}/models/${model}:generateContent`;
     const headers = new Headers(params.headers);
@@ -41,24 +43,29 @@ export async function describeGeminiVideo(params) {
             },
         ],
     };
-    const res = await fetchWithTimeout(url, {
+    const { response: res, release } = await fetchWithTimeoutGuarded(url, {
         method: "POST",
         headers,
         body: JSON.stringify(body),
-    }, params.timeoutMs, fetchFn);
-    if (!res.ok) {
-        const detail = await readErrorResponse(res);
-        const suffix = detail ? `: ${detail}` : "";
-        throw new Error(`Video description failed (HTTP ${res.status})${suffix}`);
+    }, params.timeoutMs, fetchFn, allowPrivate ? { ssrfPolicy: { allowPrivateNetwork: true } } : undefined);
+    try {
+        if (!res.ok) {
+            const detail = await readErrorResponse(res);
+            const suffix = detail ? `: ${detail}` : "";
+            throw new Error(`Video description failed (HTTP ${res.status})${suffix}`);
+        }
+        const payload = (await res.json());
+        const parts = payload.candidates?.[0]?.content?.parts ?? [];
+        const text = parts
+            .map((part) => part?.text?.trim())
+            .filter(Boolean)
+            .join("\n");
+        if (!text) {
+            throw new Error("Video description response missing text");
+        }
+        return { text, model };
     }
-    const payload = (await res.json());
-    const parts = payload.candidates?.[0]?.content?.parts ?? [];
-    const text = parts
-        .map((part) => part?.text?.trim())
-        .filter(Boolean)
-        .join("\n");
-    if (!text) {
-        throw new Error("Video description response missing text");
+    finally {
+        await release();
     }
-    return { text, model };
 }

package/dist/media-understanding/providers/image.js

@@ -1,11 +1,11 @@
 import { complete } from "@mariozechner/pi-ai";
 import { discoverAuthStorage, discoverModels } from "@mariozechner/pi-coding-agent";
 import { getApiKeyForModel, requireApiKey } from "../../agents/model-auth.js";
-import { ensureMoltbotModelsJson } from "../../agents/models-config.js";
+import { ensurePoolbotModelsJson } from "../../agents/models-config.js";
 import { minimaxUnderstandImage } from "../../agents/minimax-vlm.js";
 import { coerceImageAssistantText } from "../../agents/tools/image-tool.helpers.js";
 export async function describeImageWithModel(params) {
-    await ensureMoltbotModelsJson(params.cfg, params.agentDir);
+    await ensurePoolbotModelsJson(params.cfg, params.agentDir);
     const authStorage = discoverAuthStorage(params.agentDir);
     const modelRegistry = discoverModels(authStorage, params.agentDir);
     const model = modelRegistry.find(params.provider, params.model);
@@ -46,10 +46,10 @@ export async function describeImageWithModel(params) {
             },
         ],
     };
-    const message = (await complete(model, context, {
+    const message = await complete(model, context, {
         apiKey,
         maxTokens: params.maxTokens ?? 512,
-    }));
+    });
     const text = coerceImageAssistantText({
         message,
         provider: model.provider,

package/dist/media-understanding/providers/index.js

@@ -5,18 +5,21 @@ import { googleProvider } from "./google/index.js";
 import { groqProvider } from "./groq/index.js";
 import { minimaxProvider } from "./minimax/index.js";
 import { openaiProvider } from "./openai/index.js";
+import { zaiProvider } from "./zai/index.js";
 const PROVIDERS = [
     groqProvider,
     openaiProvider,
     googleProvider,
     anthropicProvider,
     minimaxProvider,
+    zaiProvider,
     deepgramProvider,
 ];
 export function normalizeMediaProviderId(id) {
     const normalized = normalizeProviderId(id);
-    if (normalized === "gemini")
+    if (normalized === "gemini") {
         return "google";
+    }
     return normalized;
 }
 export function buildMediaUnderstandingRegistry(overrides) {

package/dist/media-understanding/providers/openai/audio.js

@@ -1,5 +1,5 @@
 import path from "node:path";
-import { fetchWithTimeout, normalizeBaseUrl, readErrorResponse } from "../shared.js";
+import { fetchWithTimeoutGuarded, normalizeBaseUrl, readErrorResponse } from "../shared.js";
 export const DEFAULT_OPENAI_AUDIO_BASE_URL = "https://api.openai.com/v1";
 const DEFAULT_OPENAI_AUDIO_MODEL = "gpt-4o-mini-transcribe";
 function resolveModel(model) {
@@ -9,6 +9,7 @@ function resolveModel(model) {
 export async function transcribeOpenAiCompatibleAudio(params) {
     const fetchFn = params.fetchFn ?? fetch;
     const baseUrl = normalizeBaseUrl(params.baseUrl, DEFAULT_OPENAI_AUDIO_BASE_URL);
+    const allowPrivate = Boolean(params.baseUrl?.trim());
     const url = `${baseUrl}/audio/transcriptions`;
     const model = resolveModel(params.model);
     const form = new FormData();
@@ -19,28 +20,35 @@ export async function transcribeOpenAiCompatibleAudio(params) {
     });
     form.append("file", blob, fileName);
     form.append("model", model);
-    if (params.language?.trim())
+    if (params.language?.trim()) {
         form.append("language", params.language.trim());
-    if (params.prompt?.trim())
+    }
+    if (params.prompt?.trim()) {
         form.append("prompt", params.prompt.trim());
+    }
     const headers = new Headers(params.headers);
     if (!headers.has("authorization")) {
         headers.set("authorization", `Bearer ${params.apiKey}`);
     }
-    const res = await fetchWithTimeout(url, {
+    const { response: res, release } = await fetchWithTimeoutGuarded(url, {
         method: "POST",
         headers,
         body: form,
-    }, params.timeoutMs, fetchFn);
-    if (!res.ok) {
-        const detail = await readErrorResponse(res);
-        const suffix = detail ? `: ${detail}` : "";
-        throw new Error(`Audio transcription failed (HTTP ${res.status})${suffix}`);
+    }, params.timeoutMs, fetchFn, allowPrivate ? { ssrfPolicy: { allowPrivateNetwork: true } } : undefined);
+    try {
+        if (!res.ok) {
+            const detail = await readErrorResponse(res);
+            const suffix = detail ? `: ${detail}` : "";
+            throw new Error(`Audio transcription failed (HTTP ${res.status})${suffix}`);
+        }
+        const payload = (await res.json());
+        const text = payload.text?.trim();
+        if (!text) {
+            throw new Error("Audio transcription response missing text");
+        }
+        return { text, model };
     }
-    const payload = (await res.json());
-    const text = payload.text?.trim();
-    if (!text) {
-        throw new Error("Audio transcription response missing text");
+    finally {
+        await release();
     }
-    return { text, model };
 }

package/dist/media-understanding/providers/shared.js

@@ -1,26 +1,31 @@
+import { fetchWithSsrFGuard } from "../../infra/net/fetch-guard.js";
+export { fetchWithTimeout } from "../../utils/fetch-timeout.js";
 const MAX_ERROR_CHARS = 300;
 export function normalizeBaseUrl(baseUrl, fallback) {
     const raw = baseUrl?.trim() || fallback;
     return raw.replace(/\/+$/, "");
 }
-export async function fetchWithTimeout(url, init, timeoutMs, fetchFn) {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), Math.max(1, timeoutMs));
-    try {
-        return await fetchFn(url, { ...init, signal: controller.signal });
-    }
-    finally {
-        clearTimeout(timer);
-    }
+export async function fetchWithTimeoutGuarded(url, init, timeoutMs, fetchFn, options) {
+    return await fetchWithSsrFGuard({
+        url,
+        fetchImpl: fetchFn,
+        init,
+        timeoutMs,
+        policy: options?.ssrfPolicy,
+        lookupFn: options?.lookupFn,
+        pinDns: options?.pinDns,
+    });
 }
 export async function readErrorResponse(res) {
     try {
         const text = await res.text();
         const collapsed = text.replace(/\s+/g, " ").trim();
-        if (!collapsed)
+        if (!collapsed) {
             return undefined;
-        if (collapsed.length <= MAX_ERROR_CHARS)
+        }
+        if (collapsed.length <= MAX_ERROR_CHARS) {
             return collapsed;
+        }
         return `${collapsed.slice(0, MAX_ERROR_CHARS)}…`;
     }
     catch {

package/dist/media-understanding/providers/zai/index.js

@@ -0,0 +1,6 @@
+import { describeImageWithModel } from "../image.js";
+export const zaiProvider = {
+    id: "zai",
+    capabilities: ["image"],
+    describeImage: describeImageWithModel,
+};