@sayknow-cli/ai 0.4.2 → 0.4.4

package/dist/types/utils.d.ts

@@ -0,0 +1,89 @@
+import type { ResponseInput } from "openai/resources/responses/responses";
+import type { CacheRetention, OpenAIResponsesHistoryPayload, ProviderPayload } from "./types";
+export { isRecord } from "@sayknow-cli/utils";
+export declare function normalizeSystemPrompts(systemPrompt: readonly string[] | string | undefined | null): string[];
+export declare function sanitizeJsonStrings(value: unknown): unknown;
+export declare function toNumber(value: unknown): number | undefined;
+export declare function toPositiveNumber(value: unknown, fallback: number): number;
+export declare function toBoolean(value: unknown): boolean | undefined;
+export declare function normalizeToolCallId(id: string): string;
+type ResponsesToolItemIdPrefix = "fc" | "ctc";
+export declare function normalizeResponsesToolCallId(id: string, itemPrefix?: ResponsesToolItemIdPrefix): {
+    callId: string;
+    itemId: string;
+};
+/**
+ * Truncate an OpenAI Responses API item ID to 64 characters.
+ * IDs exceeding the limit are replaced with a hash-based ID using the given prefix.
+ */
+export declare function truncateResponseItemId(id: string, prefix: string): string;
+export declare function sanitizeOpenAIResponsesHistoryItemsForReplay(items: Array<Record<string, unknown>>): ResponseInput;
+/**
+ * Neutralize leaked OpenAI Harmony / control tokens (`<|channel|>`, `<|message|>`,
+ * `<|call|>`, `<|constrain|>`, `<|recipient|>`, `<|content|>`, ...) in replayed
+ * history text. A subagent whose tool-call channel degenerates can dump raw
+ * control-token scaffolding into its reply text; once that poisoned text lands in
+ * history the Codex / Responses endpoint rejects every subsequent request with
+ * `Request blocked (code=invalid_prompt)`, permanently wedging the session because
+ * the offending item is re-sent on each turn. Insert a zero-width space after `<`
+ * so the delimiter can no longer be tokenized as a reserved control token while the
+ * text stays human-readable.
+ *
+ * The pattern matches the two control-token shapes only, so ordinary text and pipe
+ * syntax is left untouched:
+ *   - simple form `<|ident|>` — a leading run of identifier chars then `|>`; and
+ *   - header form `<|role to=recipient|>` — a known Harmony role
+ *     (`system`/`developer`/`user`/`assistant`/`tool`) followed by a single
+ *     recipient assignment `to=<recipient>` whose value is an unbounded run of
+ *     non-delimiter, non-whitespace chars (so long MCP/custom tool recipients like
+ *     `to=functions.<long.name>` are covered).
+ * The header branch is deliberately scoped to the known role + `to=` recipient
+ * grammar rather than an arbitrary `key=value`, so request-boundary sanitization
+ * never rewrites non-control delimiter text such as `<|foo bar=baz|>`. A single-line
+ * body (no `\n`) and the required leading identifier char also leave compact
+ * pipe/operator syntax alone — e.g. F# `value <| f |> g` (space after `<|`),
+ * `sum<|a+b|>c` (punctuation body), and `<|foo bar|>` (no assignment) never match.
+ * The simple branch is a strict superset of the original identifier-only pattern:
+ * every marker the old regex caught still matches.
+ */
+export declare function neutralizeReservedControlTokens(text: string): string;
+/**
+ * Shape-tolerant classifier for the poisoned-history rejection that wedges
+ * gpt-5.6 sessions: `Request blocked (code=invalid_prompt)`. Accepts a raw
+ * provider error, an assistant message, or any object carrying a
+ * `providerCode` / `transportFailure` / `errorMessage` field, and returns true
+ * when the failure is the deterministic `invalid_prompt` content fault rather
+ * than a transient upstream error. This is the single shared contract the
+ * provider transports and the session-level circuit breaker key on so the
+ * classification is explicit (not inferred from a catch-all bucket) and
+ * uniformly testable across transports.
+ */
+export declare function isInvalidPromptError(input: unknown): boolean;
+/**
+ * Neutralize leaked reserved control tokens across every string in an outgoing
+ * Responses `input` array. This is the request-boundary complement to the
+ * replay-history sanitizer: leaked Harmony markers (`<|channel|>analysis`, ...)
+ * can enter the payload from assistant reasoning summaries, live-converted
+ * message/tool-output text, or user-authored content — not just replayed
+ * history — and every gpt-5.6 request that carries one is rejected with
+ * `Request blocked (code=invalid_prompt)`. Walking every string (rather than an
+ * item-type allowlist) guarantees no leak source is missed as item shapes
+ * evolve; the zero-width-space insertion is idempotent (`<\u200b|` no longer
+ * matches `<|`) and keeps the text human-readable.
+ */
+export declare function neutralizeResponsesInputControlTokens<T>(items: readonly T[]): T[];
+export declare function createOpenAIResponsesHistoryPayload(provider: string, items: Array<Record<string, unknown>>, incremental?: boolean): OpenAIResponsesHistoryPayload;
+export declare function getOpenAIResponsesHistoryPayload(providerPayload: ProviderPayload | undefined, currentProvider: string, fallbackProvider?: string): OpenAIResponsesHistoryPayload | undefined;
+export declare function getOpenAIResponsesHistoryItems(providerPayload: ProviderPayload | undefined, currentProvider: string, fallbackProvider?: string): Array<Record<string, unknown>> | undefined;
+/**
+ * Resolve cache retention preference.
+ *
+ * Resolution order: explicit request value → `SKC_CACHE_RETENTION` →
+ * legacy `PI_CACHE_RETENTION` → `fallback`. Both env vars act as explicit
+ * opt-in (`"long"`) or opt-out (any other value) so a provider-specific
+ * `fallback` only applies when nothing else is configured. `fallback`
+ * defaults to `"short"` to preserve the historical behaviour for callers
+ * that don't pass one.
+ */
+export declare function resolveCacheRetention(cacheRetention?: CacheRetention, fallback?: CacheRetention): CacheRetention;
+export declare function isAnthropicOAuthToken(key: string): boolean;

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "@sayknow-cli/ai",
-	"version": "0.4.2",
+	"version": "0.4.4",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"homepage": "https://sayknow-cli.com",
 	"author": "jaybeyond",
@@ -27,7 +27,7 @@
 		"api"
 	],
 	"main": "./src/index.ts",
-	"types": "./src/index.ts",
+	"types": "./dist/types/index.d.ts",
 	"bin": {
 		"pi-ai": "./src/cli.ts"
 	},
@@ -43,7 +43,7 @@
 	"dependencies": {
 		"@anthropic-ai/sdk": "^0.94.0",
 		"@bufbuild/protobuf": "^2.12.0",
-		"@sayknow-cli/utils": "0.4.2",
+		"@sayknow-cli/utils": "0.4.4",
 		"openai": "^6.36.0",
 		"partial-json": "^0.1.7",
 		"zod": "4.4.3"
@@ -57,87 +57,88 @@
 	"files": [
 		"src",
 		"README.md",
-		"CHANGELOG.md"
+		"CHANGELOG.md",
+		"dist/types"
 	],
 	"exports": {
 		".": {
-			"types": "./src/index.ts",
+			"types": "./dist/types/index.d.ts",
 			"import": "./src/index.ts"
 		},
 		"./*": {
-			"types": "./src/*.ts",
+			"types": "./dist/types/*.d.ts",
 			"import": "./src/*.ts"
 		},
 		"./auth-broker": {
-			"types": "./src/auth-broker/index.ts",
+			"types": "./dist/types/auth-broker/index.d.ts",
 			"import": "./src/auth-broker/index.ts"
 		},
 		"./auth-broker/*": {
-			"types": "./src/auth-broker/*.ts",
+			"types": "./dist/types/auth-broker/*.d.ts",
 			"import": "./src/auth-broker/*.ts"
 		},
 		"./auth-gateway": {
-			"types": "./src/auth-gateway/index.ts",
+			"types": "./dist/types/auth-gateway/index.d.ts",
 			"import": "./src/auth-gateway/index.ts"
 		},
 		"./auth-gateway/*": {
-			"types": "./src/auth-gateway/*.ts",
+			"types": "./dist/types/auth-gateway/*.d.ts",
 			"import": "./src/auth-gateway/*.ts"
 		},
 		"./models.json": {
-			"types": "./src/models.json.d.ts",
+			"types": "./dist/types/models.json.d.d.ts",
 			"import": "./src/models.json"
 		},
 		"./provider-models": {
-			"types": "./src/provider-models/index.ts",
+			"types": "./dist/types/provider-models/index.d.ts",
 			"import": "./src/provider-models/index.ts"
 		},
 		"./provider-models/*": {
-			"types": "./src/provider-models/*.ts",
+			"types": "./dist/types/provider-models/*.d.ts",
 			"import": "./src/provider-models/*.ts"
 		},
 		"./providers/*": {
-			"types": "./src/providers/*.ts",
+			"types": "./dist/types/providers/*.d.ts",
 			"import": "./src/providers/*.ts"
 		},
 		"./providers/cursor/gen/*": {
-			"types": "./src/providers/cursor/gen/*.ts",
+			"types": "./dist/types/providers/cursor/gen/*.d.ts",
 			"import": "./src/providers/cursor/gen/*.ts"
 		},
 		"./providers/openai-codex/*": {
-			"types": "./src/providers/openai-codex/*.ts",
+			"types": "./dist/types/providers/openai-codex/*.d.ts",
 			"import": "./src/providers/openai-codex/*.ts"
 		},
 		"./usage/*": {
-			"types": "./src/usage/*.ts",
+			"types": "./dist/types/usage/*.d.ts",
 			"import": "./src/usage/*.ts"
 		},
 		"./utils/*": {
-			"types": "./src/utils/*.ts",
+			"types": "./dist/types/utils/*.d.ts",
 			"import": "./src/utils/*.ts"
 		},
 		"./utils/discovery": {
-			"types": "./src/utils/discovery/index.ts",
+			"types": "./dist/types/utils/discovery/index.d.ts",
 			"import": "./src/utils/discovery/index.ts"
 		},
 		"./utils/discovery/*": {
-			"types": "./src/utils/discovery/*.ts",
+			"types": "./dist/types/utils/discovery/*.d.ts",
 			"import": "./src/utils/discovery/*.ts"
 		},
 		"./utils/oauth": {
-			"types": "./src/utils/oauth/index.ts",
+			"types": "./dist/types/utils/oauth/index.d.ts",
 			"import": "./src/utils/oauth/index.ts"
 		},
 		"./utils/oauth/*": {
-			"types": "./src/utils/oauth/*.ts",
+			"types": "./dist/types/utils/oauth/*.d.ts",
 			"import": "./src/utils/oauth/*.ts"
 		},
 		"./utils/schema": {
-			"types": "./src/utils/schema/index.ts",
+			"types": "./dist/types/utils/schema/index.d.ts",
 			"import": "./src/utils/schema/index.ts"
 		},
 		"./utils/schema/*": {
-			"types": "./src/utils/schema/*.ts",
+			"types": "./dist/types/utils/schema/*.d.ts",
 			"import": "./src/utils/schema/*.ts"
 		},
 		"./*.js": "./src/*.ts"