@superblocksteam/vite-plugin-file-sync 1.99.99-next.3 → 2.0.0-SNAPSHOT.2143e2e95d0107ab

package/dist/ai-service/util/archive-extractors.js

@@ -0,0 +1,305 @@
+import { createReadStream, createWriteStream } from "node:fs";
+import { mkdir } from "node:fs/promises";
+import path from "node:path";
+import { Transform } from "node:stream";
+import { pipeline } from "node:stream/promises";
+import { createGunzip } from "node:zlib";
+import * as tar from "tar";
+import yauzl from "yauzl";
+import { getPrefixedLogger } from "../../util/logger.js";
+const LOG_PREFIX = "[downloadAttachments]";
+/**
+ * Caps for decompression-bomb protection. These apply per-archive so a single
+ * pathological upload cannot exhaust disk or file handles.
+ */
+export const MAX_ARCHIVE_EXTRACTED_BYTES = 200 * 1024 * 1024; // 200 MiB per archive
+const MAX_ARCHIVE_ENTRIES = 5_000;
+/**
+ * Directory names whose contents are skipped during archive extraction. These
+ * are dependency / VCS / build directories that LLM tooling almost never needs
+ * to inspect and that routinely push archives past MAX_ARCHIVE_ENTRIES — most
+ * notably `node_modules`, which can contain tens of thousands of files.
+ */
+const EXTRACT_SKIP_DIRECTORY_NAMES = new Set([
+    ".git",
+    "node_modules",
+]);
+/**
+ * Returns true when any path segment of `entryPath` is in the skip set. The
+ * check uses POSIX-style `/` separators because both yauzl and tar emit
+ * forward-slash entry names regardless of host platform.
+ */
+export function shouldSkipArchiveEntry(entryPath) {
+    return entryPath
+        .split("/")
+        .some((segment) => EXTRACT_SKIP_DIRECTORY_NAMES.has(segment));
+}
+export class ArchiveLimitExceededError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "ArchiveLimitExceededError";
+    }
+}
+/**
+ * Normalizes an untrusted filename for use as a single path segment under a
+ * controlled extraction root. The output is guaranteed to never be `"."` or
+ * `".."`, both of which would otherwise let a crafted upload (e.g. `"....gz"`
+ * collapsed by `getGunzipOutputName`) escape the destination directory.
+ */
+export function sanitizeFileName(fileName) {
+    const sanitized = fileName
+        .replace(/[^\w.-]+/g, "_")
+        .replace(/^_+/, "")
+        .slice(0, 120);
+    if (sanitized.length === 0 || sanitized === "." || sanitized === "..") {
+        return "attachment";
+    }
+    return sanitized;
+}
+/**
+ * Throws if `targetPath` does not resolve inside `rootDir`. This is the
+ * zip-slip / tar-slip / gzip-slip guard. Callers must invoke this on every
+ * path derived from untrusted archive metadata before writing to disk.
+ */
+export function assertPathWithinRoot(rootDir, targetPath) {
+    const normalizedRoot = path.resolve(rootDir);
+    const normalizedTarget = path.resolve(targetPath);
+    if (normalizedTarget !== normalizedRoot &&
+        !normalizedTarget.startsWith(`${normalizedRoot}${path.sep}`)) {
+        throw new Error(`Path escapes extraction directory: ${targetPath}`);
+    }
+}
+/**
+ * Strips the `.gz`/`.gzip` suffix from a filename for use as the gunzip output
+ * name. Falls back to `<name>.out` when no recognizable suffix is present.
+ */
+function getGunzipOutputName(fileName) {
+    const lower = fileName.toLowerCase();
+    if (lower.endsWith(".gzip")) {
+        return fileName.slice(0, -".gzip".length) || "attachment";
+    }
+    if (lower.endsWith(".gz")) {
+        return fileName.slice(0, -".gz".length) || "attachment";
+    }
+    return `${fileName}.out`;
+}
+/**
+ * Creates a Transform stream that emits an `ArchiveLimitExceededError` once
+ * the accumulated byte count crosses `maxBytes`. Used to bound pipelines whose
+ * output would otherwise be unbounded (gzip decompression, signed-URL
+ * downloads).
+ */
+export function createByteCapTransform(maxBytes, errorMessage) {
+    let written = 0;
+    return new Transform({
+        transform(chunk, _enc, cb) {
+            written += chunk.length;
+            if (written > maxBytes) {
+                cb(new ArchiveLimitExceededError(errorMessage));
+                return;
+            }
+            cb(null, chunk);
+        },
+    });
+}
+/**
+ * Rejects zip entry names that could escape the destination or otherwise
+ * confuse the filesystem. `yauzl.validateFileName` flags encoding-level
+ * issues; additional checks reject null bytes, absolute paths, and Windows
+ * separators that `path.resolve` would not interpret as traversals on Linux.
+ */
+function rejectUnsafeZipEntryName(fileName) {
+    const validationError = yauzl.validateFileName(fileName);
+    if (validationError) {
+        throw new Error(`Invalid ZIP entry name: ${validationError}`);
+    }
+    if (fileName.includes("\0")) {
+        throw new Error("ZIP entry name contains null byte");
+    }
+    if (fileName.startsWith("/") || fileName.startsWith("\\")) {
+        throw new Error("ZIP entry name is absolute");
+    }
+    if (fileName.includes("\\")) {
+        throw new Error("ZIP entry name contains backslash");
+    }
+}
+export async function extractZipArchive(params) {
+    const { archivePath, destinationDir } = params;
+    const logger = getPrefixedLogger(LOG_PREFIX);
+    return await new Promise((resolve, reject) => {
+        let extractedCount = 0;
+        let totalExtractedBytes = 0;
+        const options = { lazyEntries: true };
+        const onOpen = (err, zipFile) => {
+            if (err || !zipFile) {
+                reject(err ?? new Error("Failed to open ZIP archive"));
+                return;
+            }
+            // yauzl's ZipFile holds an open file descriptor until close() is called.
+            // We centralize termination here so every error path (path-traversal
+            // rejection, entry-count/size limits, mkdir failure, openReadStream
+            // failure, stream errors) releases the fd instead of leaking it until GC.
+            let settled = false;
+            const settle = (error, value) => {
+                if (settled)
+                    return;
+                settled = true;
+                try {
+                    zipFile.close();
+                }
+                catch {
+                    // ignore close failures; we're already settling
+                }
+                if (error) {
+                    reject(error);
+                }
+                else {
+                    resolve(value);
+                }
+            };
+            const rejectAndClose = (error) => settle(error, 0);
+            zipFile.on("error", rejectAndClose);
+            zipFile.readEntry();
+            zipFile.on("entry", (entry) => {
+                try {
+                    rejectUnsafeZipEntryName(entry.fileName);
+                }
+                catch (error) {
+                    logger.warn("Rejected unsafe ZIP entry name", {
+                        entryName: entry.fileName,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    rejectAndClose(error instanceof Error ? error : new Error(String(error)));
+                    return;
+                }
+                if (shouldSkipArchiveEntry(entry.fileName)) {
+                    zipFile.readEntry();
+                    return;
+                }
+                const outputPath = path.resolve(destinationDir, entry.fileName);
+                try {
+                    assertPathWithinRoot(destinationDir, outputPath);
+                }
+                catch (error) {
+                    logger.warn("Rejected ZIP entry escaping extraction root", {
+                        entryName: entry.fileName,
+                        error: error instanceof Error ? error.message : String(error),
+                    });
+                    rejectAndClose(error instanceof Error ? error : new Error(String(error)));
+                    return;
+                }
+                if (entry.fileName.endsWith("/")) {
+                    void mkdir(outputPath, { recursive: true })
+                        .then(() => {
+                        zipFile.readEntry();
+                    })
+                        .catch(rejectAndClose);
+                    return;
+                }
+                if (extractedCount >= MAX_ARCHIVE_ENTRIES) {
+                    rejectAndClose(new ArchiveLimitExceededError(`ZIP archive exceeds maximum entry count (${MAX_ARCHIVE_ENTRIES})`));
+                    return;
+                }
+                void mkdir(path.dirname(outputPath), { recursive: true })
+                    .then(() => {
+                    zipFile.openReadStream(entry, (streamError, readStream) => {
+                        if (streamError || !readStream) {
+                            rejectAndClose(streamError ?? new Error("Failed to read ZIP entry stream"));
+                            return;
+                        }
+                        const writeStream = createWriteStream(outputPath);
+                        let entryBytes = 0;
+                        let aborted = false;
+                        const abort = (abortError) => {
+                            if (aborted)
+                                return;
+                            aborted = true;
+                            readStream.unpipe(writeStream);
+                            readStream.destroy();
+                            writeStream.destroy();
+                            rejectAndClose(abortError);
+                        };
+                        readStream.on("data", (chunk) => {
+                            entryBytes += chunk.length;
+                            if (totalExtractedBytes + entryBytes >
+                                MAX_ARCHIVE_EXTRACTED_BYTES) {
+                                abort(new ArchiveLimitExceededError(`ZIP archive exceeds maximum extracted size (${MAX_ARCHIVE_EXTRACTED_BYTES} bytes)`));
+                            }
+                        });
+                        writeStream.on("error", abort);
+                        readStream.on("error", abort);
+                        writeStream.on("finish", () => {
+                            if (aborted)
+                                return;
+                            totalExtractedBytes += entryBytes;
+                            extractedCount += 1;
+                            zipFile.readEntry();
+                        });
+                        readStream.pipe(writeStream);
+                    });
+                })
+                    .catch(rejectAndClose);
+            });
+            zipFile.on("end", () => {
+                settle(null, extractedCount);
+            });
+        };
+        yauzl.open(archivePath, options, onOpen);
+    });
+}
+export async function extractTgzArchive(params) {
+    const { archivePath, destinationDir } = params;
+    const logger = getPrefixedLogger(LOG_PREFIX);
+    let extractedCount = 0;
+    let totalExtractedBytes = 0;
+    await tar.x({
+        cwd: destinationDir,
+        file: archivePath,
+        preservePaths: false,
+        strict: true,
+        filter: (entryPath, entry) => {
+            if (shouldSkipArchiveEntry(entryPath)) {
+                return false;
+            }
+            const outputPath = path.resolve(destinationDir, entryPath);
+            try {
+                assertPathWithinRoot(destinationDir, outputPath);
+            }
+            catch (error) {
+                logger.warn("Rejected tar entry escaping extraction root", {
+                    entryName: entryPath,
+                    error: error instanceof Error ? error.message : String(error),
+                });
+                return false;
+            }
+            const entryType = "type" in entry ? entry.type : undefined;
+            const isDirectory = entryPath.endsWith("/") || entryType === "Directory";
+            if (isDirectory) {
+                return true;
+            }
+            if (extractedCount >= MAX_ARCHIVE_ENTRIES) {
+                throw new ArchiveLimitExceededError(`Tar archive exceeds maximum entry count (${MAX_ARCHIVE_ENTRIES})`);
+            }
+            const entrySize = typeof entry.size === "number" ? entry.size : 0;
+            if (totalExtractedBytes + entrySize > MAX_ARCHIVE_EXTRACTED_BYTES) {
+                throw new ArchiveLimitExceededError(`Tar archive exceeds maximum extracted size (${MAX_ARCHIVE_EXTRACTED_BYTES} bytes)`);
+            }
+            totalExtractedBytes += entrySize;
+            extractedCount += 1;
+            return true;
+        },
+    });
+    return extractedCount;
+}
+export async function extractGzipArchive(params) {
+    const outputName = sanitizeFileName(getGunzipOutputName(params.fileName));
+    const outputPath = path.join(params.destinationDir, outputName);
+    // sanitizeFileName normalizes `.`/`..` to "attachment", but we still assert
+    // the resolved path stays inside the extraction directory as a second layer
+    // matching the zip/tgz path-traversal checks.
+    assertPathWithinRoot(params.destinationDir, outputPath);
+    await mkdir(path.dirname(outputPath), { recursive: true });
+    await pipeline(createReadStream(params.archivePath), createGunzip(), createByteCapTransform(MAX_ARCHIVE_EXTRACTED_BYTES, `Gzip archive exceeds maximum extracted size (${MAX_ARCHIVE_EXTRACTED_BYTES} bytes)`), createWriteStream(outputPath));
+    return { extractedCount: 1, outputPath };
+}
+//# sourceMappingURL=archive-extractors.js.map

package/dist/ai-service/util/archive-extractors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"archive-extractors.js","sourceRoot":"","sources":["../../../src/ai-service/util/archive-extractors.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,SAAS,CAAC;AAC9D,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,SAAS,EAAE,MAAM,aAAa,CAAC;AACxC,OAAO,EAAE,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAChD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AAEzC,OAAO,KAAK,GAAG,MAAM,KAAK,CAAC;AAC3B,OAAO,KAAK,MAAM,OAAO,CAAC;AAE1B,OAAO,EAAE,iBAAiB,EAAE,MAAM,sBAAsB,CAAC;AAEzD,MAAM,UAAU,GAAG,uBAAuB,CAAC;AAE3C;;;GAGG;AACH,MAAM,CAAC,MAAM,2BAA2B,GAAG,GAAG,GAAG,IAAI,GAAG,IAAI,CAAC,CAAC,sBAAsB;AACpF,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC;;;;;GAKG;AACH,MAAM,4BAA4B,GAAwB,IAAI,GAAG,CAAC;IAChE,MAAM;IACN,cAAc;CACf,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,SAAiB;IACtD,OAAO,SAAS;SACb,KAAK,CAAC,GAAG,CAAC;SACV,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,4BAA4B,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC;AAClE,CAAC;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB;IAC/C,MAAM,SAAS,GAAG,QAAQ;SACvB,OAAO,CAAC,WAAW,EAAE,GAAG,CAAC;SACzB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;SAClB,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACjB,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,IAAI,SAAS,KAAK,GAAG,IAAI,SAAS,KAAK,IAAI,EAAE,CAAC;QACtE,OAAO,YAAY,CAAC;IACtB,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAClC,OAAe,EACf,UAAkB;IAElB,MAAM,cAAc,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IAC7C,MAAM,gBAAgB,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAClD,IACE,gBAAgB,KAAK,cAAc;QACnC,CAAC,gBAAgB,CAAC,UAAU,CAAC,GAAG,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,sCAAsC,UAAU,EAAE,CAAC,CAAC;IACtE,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,MAAM,KAAK,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACrC,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QAC5B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC;IAC5D,CAAC;IACD,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,YAAY,CAAC;IAC1D,CAAC;IACD,OAAO,GAAG,QAAQ,MAAM,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CACpC,QAAgB,EAChB,YAAoB;IAEpB,IAAI,OAAO,GAAG,CAAC,CAAC;IAChB,OAAO,IAAI,SAAS,CAAC;QACnB,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;YACvB,OAAO,IAAI,KAAK,CAAC,MAAM,CAAC;YACxB,IAAI,OAAO,GAAG,QAAQ,EAAE,CAAC;gBACvB,EAAE,CAAC,IAAI,yBAAyB,CAAC,YAAY,CAAC,CAAC,CAAC;gBAChD,OAAO;YACT,CAAC;YACD,EAAE,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAClB,CAAC;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;;GAKG;AACH,SAAS,wBAAwB,CAAC,QAAgB;IAChD,MAAM,eAAe,GAAG,KAAK,CAAC,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,eAAe,EAAE,CAAC;QACpB,MAAM,IAAI,KAAK,CAAC,2BAA2B,eAAe,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;IACD,IAAI,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;IACvD,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAGvC;IACC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAE7C,OAAO,MAAM,IAAI,OAAO,CAAS,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACnD,IAAI,cAAc,GAAG,CAAC,CAAC;QACvB,IAAI,mBAAmB,GAAG,CAAC,CAAC;QAC5B,MAAM,OAAO,GAAG,EAAE,WAAW,EAAE,IAAI,EAAW,CAAC;QAE/C,MAAM,MAAM,GAAG,CAAC,GAAiB,EAAE,OAAkC,EAAE,EAAE;YACvE,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC;gBACpB,MAAM,CAAC,GAAG,IAAI,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC,CAAC;gBACvD,OAAO;YACT,CAAC;YAED,yEAAyE;YACzE,qEAAqE;YACrE,oEAAoE;YACpE,0EAA0E;YAC1E,IAAI,OAAO,GAAG,KAAK,CAAC;YACpB,MAAM,MAAM,GAAG,CAAC,KAAmB,EAAE,KAAa,EAAE,EAAE;gBACpD,IAAI,OAAO;oBAAE,OAAO;gBACpB,OAAO,GAAG,IAAI,CAAC;gBACf,IAAI,CAAC;oBACH,OAAO,CAAC,KAAK,EAAE,CAAC;gBAClB,CAAC;gBAAC,MAAM,CAAC;oBACP,gDAAgD;gBAClD,CAAC;gBACD,IAAI,KAAK,EAAE,CAAC;oBACV,MAAM,CAAC,KAAK,CAAC,CAAC;gBAChB,CAAC;qBAAM,CAAC;oBACN,OAAO,CAAC,KAAK,CAAC,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC;YACF,MAAM,cAAc,GAAG,CAAC,KAAY,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;YAE1D,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;YACpC,OAAO,CAAC,SAAS,EAAE,CAAC;YAEpB,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,KAAkB,EAAE,EAAE;gBACzC,IAAI,CAAC;oBACH,wBAAwB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAC3C,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,gCAAgC,EAAE;wBAC5C,SAAS,EAAE,KAAK,CAAC,QAAQ;wBACzB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,cAAc,CACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,IAAI,sBAAsB,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAC3C,OAAO,CAAC,SAAS,EAAE,CAAC;oBACpB,OAAO;gBACT,CAAC;gBAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;gBAEhE,IAAI,CAAC;oBACH,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;gBACnD,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;wBACzD,SAAS,EAAE,KAAK,CAAC,QAAQ;wBACzB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;qBAC9D,CAAC,CAAC;oBACH,cAAc,CACZ,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAC1D,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;oBACjC,KAAK,KAAK,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;yBACxC,IAAI,CAAC,GAAG,EAAE;wBACT,OAAO,CAAC,SAAS,EAAE,CAAC;oBACtB,CAAC,CAAC;yBACD,KAAK,CAAC,cAAc,CAAC,CAAC;oBACzB,OAAO;gBACT,CAAC;gBAED,IAAI,cAAc,IAAI,mBAAmB,EAAE,CAAC;oBAC1C,cAAc,CACZ,IAAI,yBAAyB,CAC3B,4CAA4C,mBAAmB,GAAG,CACnE,CACF,CAAC;oBACF,OAAO;gBACT,CAAC;gBAED,KAAK,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;qBACtD,IAAI,CAAC,GAAG,EAAE;oBACT,OAAO,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,UAAU,EAAE,EAAE;wBACxD,IAAI,WAAW,IAAI,CAAC,UAAU,EAAE,CAAC;4BAC/B,cAAc,CACZ,WAAW,IAAI,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAC5D,CAAC;4BACF,OAAO;wBACT,CAAC;wBAED,MAAM,WAAW,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;wBAClD,IAAI,UAAU,GAAG,CAAC,CAAC;wBACnB,IAAI,OAAO,GAAG,KAAK,CAAC;wBAEpB,MAAM,KAAK,GAAG,CAAC,UAAiB,EAAE,EAAE;4BAClC,IAAI,OAAO;gCAAE,OAAO;4BACpB,OAAO,GAAG,IAAI,CAAC;4BACf,UAAU,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;4BAC/B,UAAU,CAAC,OAAO,EAAE,CAAC;4BACrB,WAAW,CAAC,OAAO,EAAE,CAAC;4BACtB,cAAc,CAAC,UAAU,CAAC,CAAC;wBAC7B,CAAC,CAAC;wBAEF,UAAU,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;4BACtC,UAAU,IAAI,KAAK,CAAC,MAAM,CAAC;4BAC3B,IACE,mBAAmB,GAAG,UAAU;gCAChC,2BAA2B,EAC3B,CAAC;gCACD,KAAK,CACH,IAAI,yBAAyB,CAC3B,+CAA+C,2BAA2B,SAAS,CACpF,CACF,CAAC;4BACJ,CAAC;wBACH,CAAC,CAAC,CAAC;wBACH,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAC/B,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;wBAC9B,WAAW,CAAC,EAAE,CAAC,QAAQ,EAAE,GAAG,EAAE;4BAC5B,IAAI,OAAO;gCAAE,OAAO;4BACpB,mBAAmB,IAAI,UAAU,CAAC;4BAClC,cAAc,IAAI,CAAC,CAAC;4BACpB,OAAO,CAAC,SAAS,EAAE,CAAC;wBACtB,CAAC,CAAC,CAAC;wBACH,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;oBAC/B,CAAC,CAAC,CAAC;gBACL,CAAC,CAAC;qBACD,KAAK,CAAC,cAAc,CAAC,CAAC;YAC3B,CAAC,CAAC,CAAC;YAEH,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,GAAG,EAAE;gBACrB,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;YAC/B,CAAC,CAAC,CAAC;QACL,CAAC,CAAC;QAEF,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;AACL,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,MAGvC;IACC,MAAM,EAAE,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,CAAC;IAC/C,MAAM,MAAM,GAAG,iBAAiB,CAAC,UAAU,CAAC,CAAC;IAC7C,IAAI,cAAc,GAAG,CAAC,CAAC;IACvB,IAAI,mBAAmB,GAAG,CAAC,CAAC;IAE5B,MAAM,GAAG,CAAC,CAAC,CAAC;QACV,GAAG,EAAE,cAAc;QACnB,IAAI,EAAE,WAAW;QACjB,aAAa,EAAE,KAAK;QACpB,MAAM,EAAE,IAAI;QACZ,MAAM,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE;YAC3B,IAAI,sBAAsB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACtC,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;YAC3D,IAAI,CAAC;gBACH,oBAAoB,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;YACnD,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE;oBACzD,SAAS,EAAE,SAAS;oBACpB,KAAK,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;iBAC9D,CAAC,CAAC;gBACH,OAAO,KAAK,CAAC;YACf,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;YAC3D,MAAM,WAAW,GAAG,SAAS,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,SAAS,KAAK,WAAW,CAAC;YACzE,IAAI,WAAW,EAAE,CAAC;gBAChB,OAAO,IAAI,CAAC;YACd,CAAC;YAED,IAAI,cAAc,IAAI,mBAAmB,EAAE,CAAC;gBAC1C,MAAM,IAAI,yBAAyB,CACjC,4CAA4C,mBAAmB,GAAG,CACnE,CAAC;YACJ,CAAC;YACD,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;YAClE,IAAI,mBAAmB,GAAG,SAAS,GAAG,2BAA2B,EAAE,CAAC;gBAClE,MAAM,IAAI,yBAAyB,CACjC,+CAA+C,2BAA2B,SAAS,CACpF,CAAC;YACJ,CAAC;YACD,mBAAmB,IAAI,SAAS,CAAC;YACjC,cAAc,IAAI,CAAC,CAAC;YACpB,OAAO,IAAI,CAAC;QACd,CAAC;KACF,CAAC,CAAC;IAEH,OAAO,cAAc,CAAC;AACxB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAIxC;IACC,MAAM,UAAU,GAAG,gBAAgB,CAAC,mBAAmB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC1E,MAAM,UAAU,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IAChE,4EAA4E;IAC5E,4EAA4E;IAC5E,8CAA8C;IAC9C,oBAAoB,CAAC,MAAM,CAAC,cAAc,EAAE,UAAU,CAAC,CAAC;IACxD,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAE3D,MAAM,QAAQ,CACZ,gBAAgB,CAAC,MAAM,CAAC,WAAW,CAAC,EACpC,YAAY,EAAE,EACd,sBAAsB,CACpB,2BAA2B,EAC3B,gDAAgD,2BAA2B,SAAS,CACrF,EACD,iBAAiB,CAAC,UAAU,CAAC,CAC9B,CAAC;IAEF,OAAO,EAAE,cAAc,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC;AAC3C,CAAC"}

package/dist/ai-service/util/call-peer.d.ts

@@ -0,0 +1,11 @@
+import type { PeerLivenessObservation } from "./peer-liveness.js";
+export declare class PeerUnavailableError extends Error {
+    constructor(operationName: string);
+}
+export interface CallablePeer {
+    readonly activeRouteLiveness: PeerLivenessObservation | undefined;
+    reportRpcTimeout(observation: PeerLivenessObservation): void;
+}
+export declare function isGuardedPeerUnavailableError(error: unknown): boolean;
+export declare function callPeer<T>(peer: CallablePeer, invoke: () => Promise<T>, timeoutMs: number, operationName: string): Promise<T>;
+//# sourceMappingURL=call-peer.d.ts.map

package/dist/ai-service/util/call-peer.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-peer.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/call-peer.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,oBAAoB,CAAC;AA6BlE,qBAAa,oBAAqB,SAAQ,KAAK;gBACjC,aAAa,EAAE,MAAM;CAIlC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,mBAAmB,EAAE,uBAAuB,GAAG,SAAS,CAAC;IAClE,gBAAgB,CAAC,WAAW,EAAE,uBAAuB,GAAG,IAAI,CAAC;CAC9D;AAED,wBAAgB,6BAA6B,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAErE;AAED,wBAAsB,QAAQ,CAAC,CAAC,EAC9B,IAAI,EAAE,YAAY,EAClB,MAAM,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EACxB,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC,CAAC,CAAC,CAeZ"}

package/dist/ai-service/util/call-peer.js

@@ -0,0 +1,47 @@
+import { metrics } from "@opentelemetry/api";
+import { RpcTimeoutError, withRpcTimeout } from "./rpc-timeout.js";
+const METER_NAME = "superblocks.clark.call_peer";
+const PEER_UNAVAILABLE_METRIC = "superblocks.clark.call_peer.unavailable.total";
+const PEER_UNAVAILABLE_MESSAGE = "peer_unavailable";
+class CallPeerMetrics {
+    cachedMeter;
+    unavailableCounter;
+    recordUnavailable(operationName) {
+        const meter = metrics.getMeter(METER_NAME);
+        if (meter !== this.cachedMeter || !this.unavailableCounter) {
+            this.cachedMeter = meter;
+            this.unavailableCounter = meter.createCounter(PEER_UNAVAILABLE_METRIC, {
+                description: "Peer RPCs refused because the live-edit route was unbound or already dead.",
+                unit: "1",
+            });
+        }
+        this.unavailableCounter.add(1, { "rpc.method": operationName });
+    }
+}
+const callPeerMetrics = new CallPeerMetrics();
+export class PeerUnavailableError extends Error {
+    constructor(operationName) {
+        super(`${PEER_UNAVAILABLE_MESSAGE}: ${operationName}`);
+        this.name = "PeerUnavailableError";
+    }
+}
+export function isGuardedPeerUnavailableError(error) {
+    return error instanceof PeerUnavailableError;
+}
+export async function callPeer(peer, invoke, timeoutMs, operationName) {
+    const observation = peer.activeRouteLiveness;
+    if (!observation?.available) {
+        callPeerMetrics.recordUnavailable(operationName);
+        throw new PeerUnavailableError(operationName);
+    }
+    try {
+        return await withRpcTimeout(invoke(), timeoutMs, operationName);
+    }
+    catch (error) {
+        if (error instanceof RpcTimeoutError && observation) {
+            peer.reportRpcTimeout(observation);
+        }
+        throw error;
+    }
+}
+//# sourceMappingURL=call-peer.js.map

package/dist/ai-service/util/call-peer.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"call-peer.js","sourceRoot":"","sources":["../../../src/ai-service/util/call-peer.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAc,MAAM,oBAAoB,CAAC;AAGzD,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAEnE,MAAM,UAAU,GAAG,6BAA6B,CAAC;AACjD,MAAM,uBAAuB,GAAG,+CAA+C,CAAC;AAChF,MAAM,wBAAwB,GAAG,kBAAkB,CAAC;AAIpD,MAAM,eAAe;IACX,WAAW,CAAoB;IAC/B,kBAAkB,CAAsB;IAEhD,iBAAiB,CAAC,aAAqB;QACrC,MAAM,KAAK,GAAG,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;QAC3C,IAAI,KAAK,KAAK,IAAI,CAAC,WAAW,IAAI,CAAC,IAAI,CAAC,kBAAkB,EAAE,CAAC;YAC3D,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;YACzB,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC,aAAa,CAAC,uBAAuB,EAAE;gBACrE,WAAW,EACT,4EAA4E;gBAC9E,IAAI,EAAE,GAAG;aACV,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAC;IAClE,CAAC;CACF;AAED,MAAM,eAAe,GAAG,IAAI,eAAe,EAAE,CAAC;AAE9C,MAAM,OAAO,oBAAqB,SAAQ,KAAK;IAC7C,YAAY,aAAqB;QAC/B,KAAK,CAAC,GAAG,wBAAwB,KAAK,aAAa,EAAE,CAAC,CAAC;QACvD,IAAI,CAAC,IAAI,GAAG,sBAAsB,CAAC;IACrC,CAAC;CACF;AAOD,MAAM,UAAU,6BAA6B,CAAC,KAAc;IAC1D,OAAO,KAAK,YAAY,oBAAoB,CAAC;AAC/C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,QAAQ,CAC5B,IAAkB,EAClB,MAAwB,EACxB,SAAiB,EACjB,aAAqB;IAErB,MAAM,WAAW,GAAG,IAAI,CAAC,mBAAmB,CAAC;IAC7C,IAAI,CAAC,WAAW,EAAE,SAAS,EAAE,CAAC;QAC5B,eAAe,CAAC,iBAAiB,CAAC,aAAa,CAAC,CAAC;QACjD,MAAM,IAAI,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAChD,CAAC;IAED,IAAI,CAAC;QACH,OAAO,MAAM,cAAc,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,aAAa,CAAC,CAAC;IAClE,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,eAAe,IAAI,WAAW,EAAE,CAAC;YACpD,IAAI,CAAC,gBAAgB,CAAC,WAAW,CAAC,CAAC;QACrC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/ai-service/util/inference-jwt.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Returns true when the JWT can authenticate Clark inference / quota checks.
+ * Scoped `apps:update` editor tokens and other narrow credentials must not
+ * satisfy migration auto-dispatch — EE pods disable auth hot-reload, so the
+ * dev server only receives a usable inference JWT when the UI explicitly
+ * primes it (SuperblocksJWT / federated user token).
+ */
+export declare function isUsableMigrationInferenceJwt(jwt: string): boolean;
+export declare function describeMigrationInferenceJwt(jwt: string | undefined): {
+    hasFederatedToken: boolean;
+    present: boolean;
+    scope?: string;
+    usable: boolean;
+};
+//# sourceMappingURL=inference-jwt.d.ts.map

package/dist/ai-service/util/inference-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-jwt.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/inference-jwt.ts"],"names":[],"mappings":"AAiBA;;;;;;GAMG;AACH,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAYlE;AAED,wBAAgB,6BAA6B,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG;IACtE,iBAAiB,EAAE,OAAO,CAAC;IAC3B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,OAAO,CAAC;CACjB,CAsBA"}

package/dist/ai-service/util/inference-jwt.js

@@ -0,0 +1,56 @@
+function decodeJwtPayload(jwt) {
+    try {
+        const parts = jwt.split(".");
+        if (parts.length !== 3 || !parts[1]) {
+            return undefined;
+        }
+        return JSON.parse(Buffer.from(parts[1], "base64").toString());
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Returns true when the JWT can authenticate Clark inference / quota checks.
+ * Scoped `apps:update` editor tokens and other narrow credentials must not
+ * satisfy migration auto-dispatch — EE pods disable auth hot-reload, so the
+ * dev server only receives a usable inference JWT when the UI explicitly
+ * primes it (SuperblocksJWT / federated user token).
+ */
+export function isUsableMigrationInferenceJwt(jwt) {
+    if (!jwt) {
+        return false;
+    }
+    const payload = decodeJwtPayload(jwt);
+    if (!payload) {
+        return false;
+    }
+    if (payload.scope === "apps:update") {
+        return false;
+    }
+    return true;
+}
+export function describeMigrationInferenceJwt(jwt) {
+    if (!jwt) {
+        return {
+            hasFederatedToken: false,
+            present: false,
+            usable: false,
+        };
+    }
+    const payload = decodeJwtPayload(jwt);
+    if (!payload) {
+        return {
+            hasFederatedToken: false,
+            present: true,
+            usable: false,
+        };
+    }
+    return {
+        hasFederatedToken: Boolean(payload.federated_token),
+        present: true,
+        scope: payload.scope,
+        usable: isUsableMigrationInferenceJwt(jwt),
+    };
+}
+//# sourceMappingURL=inference-jwt.js.map

package/dist/ai-service/util/inference-jwt.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"inference-jwt.js","sourceRoot":"","sources":["../../../src/ai-service/util/inference-jwt.ts"],"names":[],"mappings":"AAKA,SAAS,gBAAgB,CAAC,GAAW;IACnC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC7B,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC;YACpC,OAAO,SAAS,CAAC;QACnB,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE,CAAe,CAAC;IAC9E,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,6BAA6B,CAAC,GAAW;IACvD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,OAAO,CAAC,KAAK,KAAK,aAAa,EAAE,CAAC;QACpC,OAAO,KAAK,CAAC;IACf,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,MAAM,UAAU,6BAA6B,CAAC,GAAuB;IAMnE,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,OAAO,EAAE,KAAK;YACd,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,gBAAgB,CAAC,GAAG,CAAC,CAAC;IACtC,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,OAAO;YACL,iBAAiB,EAAE,KAAK;YACxB,OAAO,EAAE,IAAI;YACb,MAAM,EAAE,KAAK;SACd,CAAC;IACJ,CAAC;IACD,OAAO;QACL,iBAAiB,EAAE,OAAO,CAAC,OAAO,CAAC,eAAe,CAAC;QACnD,OAAO,EAAE,IAAI;QACb,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,MAAM,EAAE,6BAA6B,CAAC,GAAG,CAAC;KAC3C,CAAC;AACJ,CAAC"}

package/dist/ai-service/util/llm-config-utils.d.ts

@@ -0,0 +1,54 @@
+import type { JSONObject } from "@ai-sdk/provider";
+import { buildThinkingProviderOptions, isExtendedThinkingModel, upstreamStallTimeoutMsFor } from "@superblocksteam/clark";
+import type { AiAttributes, LLMProviderConfig } from "@superblocksteam/library-shared/types";
+import type { ContextManagementOptions } from "../llm/context-v2/context-management.js";
+export { buildThinkingProviderOptions, isExtendedThinkingModel, upstreamStallTimeoutMsFor, };
+/** Thinking budget applied when the config does not specify one. */
+export declare const DEFAULT_THINKING_BUDGET_TOKENS = 5000;
+interface LLMConfigResult {
+    thinkingEnabled: boolean;
+    thinkingBudgetTokens: number;
+    interleavedThinking: boolean;
+    maxOutputTokens: number;
+    providerOptions?: {
+        anthropic: JSONObject;
+        bedrock: JSONObject;
+    };
+    headers: Record<string, string | undefined>;
+}
+/**
+ * Processes LLM config and returns the configuration options for AI SDK calls.
+ *
+ * Builds provider options including thinking configuration, server-side context
+ * management (clear_tool_uses + compact edits), and request-level automatic
+ * prompt caching via `cacheControl`. Bedrock server-side context management
+ * omits that request-level cache marker because Bedrock does not support
+ * Anthropic's automatic caching shape; ContextV2 block-level cache breakpoints
+ * remain enabled separately.
+ *
+ * Protected tool names are added later in `LLMClient.streamText` after the
+ * context is loaded and protected tools can be read from history.
+ *
+ * @param llmConfig - The LLM provider configuration
+ * @param defaultBudgetTokens - Default thinking budget if not specified (default: 5000)
+ * @param logContext - Optional context string for logging
+ * @param contextManagementOptions - Options for server-side context management edits
+ */
+export declare function processLLMConfig(llmConfig: LLMProviderConfig | undefined, defaultBudgetTokens?: number, logContext?: string, contextManagementOptions?: ContextManagementOptions): LLMConfigResult;
+/** The slice of billing attributes describing how a request was configured. */
+export type ModelConfigAttributes = Pick<AiAttributes, "context_buffer_tokens" | "context_limit" | "context_management" | "max_output_tokens" | "thinking_budget_tokens" | "thinking_mode">;
+/**
+ * Snapshot the effective model settings for a request so GAU cost analysis can
+ * tell a config change apart from a change in user behavior.
+ *
+ * Reports what the request is configured to send, not what the model does with
+ * it. A model that ignores its thinking budget then shows up as a "budgeted"
+ * mode beside zero reasoning tokens, which is the discrepancy worth surfacing
+ * rather than one to bury behind a capability table.
+ *
+ * Lives beside {@link processLLMConfig} because it mirrors that function's
+ * defaulting and {@link selectContextManagementStrategy}'s opt-in polarity;
+ * keeping them adjacent makes any drift visible in one file.
+ */
+export declare function buildModelConfigAttributes(llmConfig: LLMProviderConfig | undefined): ModelConfigAttributes;
+//# sourceMappingURL=llm-config-utils.d.ts.map

package/dist/ai-service/util/llm-config-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"llm-config-utils.d.ts","sourceRoot":"","sources":["../../../src/ai-service/util/llm-config-utils.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAEnD,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,EAE1B,MAAM,wBAAwB,CAAC;AAKhC,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EAClB,MAAM,uCAAuC,CAAC;AAK/C,OAAO,KAAK,EACV,wBAAwB,EAEzB,MAAM,yCAAyC,CAAC;AAEjD,OAAO,EACL,4BAA4B,EAC5B,uBAAuB,EACvB,yBAAyB,GAC1B,CAAC;AAEF,oEAAoE;AACpE,eAAO,MAAM,8BAA8B,OAAO,CAAC;AAEnD,UAAU,eAAe;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,oBAAoB,EAAE,MAAM,CAAC;IAC7B,mBAAmB,EAAE,OAAO,CAAC;IAC7B,eAAe,EAAE,MAAM,CAAC;IACxB,eAAe,CAAC,EAAE;QAChB,SAAS,EAAE,UAAU,CAAC;QACtB,OAAO,EAAE,UAAU,CAAC;KACrB,CAAC;IACF,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC7C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAC9B,SAAS,EAAE,iBAAiB,GAAG,SAAS,EACxC,mBAAmB,GAAE,MAAuC,EAC5D,UAAU,CAAC,EAAE,MAAM,EACnB,wBAAwB,CAAC,EAAE,wBAAwB,GAClD,eAAe,CAkFjB;AAED,+EAA+E;AAC/E,MAAM,MAAM,qBAAqB,GAAG,IAAI,CACtC,YAAY,EACV,uBAAuB,GACvB,eAAe,GACf,oBAAoB,GACpB,mBAAmB,GACnB,wBAAwB,GACxB,eAAe,CAClB,CAAC;AAEF;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,SAAS,EAAE,iBAAiB,GAAG,SAAS,GACvC,qBAAqB,CAcvB"}