@theokit/sdk 4.36.0 → 4.37.1

package/dist/{chunk-IX2LKBCD.js → chunk-GL7CFBVC.js}

@@ -1,11 +1,11 @@
-import { currentCredentialPool, computeBackoffMs, sleepWithAbort, newPooledCredential, CredentialPool } from './chunk-6CLRANZA.js';
+import { currentCredentialPool, computeBackoffMs, sleepWithAbort, newPooledCredential, CredentialPool } from './chunk-EXQV452X.js';
 import { invalidateSessionCache } from './chunk-EEZ7CFMM.js';
 import { tryJson, isPlainObject, sanitizeToolInput } from './chunk-U54XCYG3.js';
-import { reconstructMessages, SessionTranscript } from './chunk-Q56IYTBZ.js';
-import { estimateTokens } from './chunk-RKG6QFCJ.js';
-import { globalSingleton, registerProvider, registerBuiltins, getProviderProfile, inferModelDialect, inferRegionFromModelId, stripBedrockPrefix, resolveBedrockBaseUrl, resolveVertexBaseUrl, stripVertexPrefix } from './chunk-KAP4GJHO.js';
-import { NetworkError, AuthenticationError, RateLimitError, ConfigurationError, UnknownAgentError, CredentialPoolExhaustedError, isTransientError, TheokitAgentError } from './chunk-WLKFWQSJ.js';
-import { redactSecrets } from './chunk-JTFYYKDT.js';
+import { reconstructMessages, SessionTranscript } from './chunk-XAEAMI5H.js';
+import { estimateTokens } from './chunk-6VP3XGEK.js';
+import { globalSingleton, registerProvider, registerBuiltins, getProviderProfile, inferModelDialect, inferRegionFromModelId, stripBedrockPrefix, resolveBedrockBaseUrl, resolveVertexBaseUrl, stripVertexPrefix } from './chunk-77WHPVXE.js';
+import { NetworkError, AuthenticationError, RateLimitError, ConfigurationError, UnknownAgentError, IntegrationNotConnectedError, CredentialPoolExhaustedError, isTransientError, TheokitAgentError } from './chunk-CD73YHEH.js';
+import { diag, redactSecrets } from './chunk-TAPQWDW2.js';
 import { existsSync, readFileSync } from 'fs';
 import { readdir } from 'fs/promises';
 import { homedir } from 'os';
@@ -35,19 +35,19 @@ function loadTrustedNames() {
           else discarded += 1;
         }
         if (discarded > 0) {
-          process.stderr.write(
+          diag(
             `[theokit-sdk] WARN: ${path} contains ${discarded} non-string entr${discarded === 1 ? "y" : "ies"} \u2014 discarded (entries must be plugin-name strings)
 `
           );
         }
       } else {
-        process.stderr.write(
+        diag(
           `[theokit-sdk] WARN: ${path} is not a JSON array \u2014 trusting NO provider plugins (fail-closed)
 `
         );
       }
     } catch {
-      process.stderr.write(
+      diag(
         `[theokit-sdk] WARN: ${path} is not valid JSON \u2014 trusting NO provider plugins (fail-closed)
 `
       );
@@ -73,7 +73,7 @@ async function discoverProviderPlugins() {
   const trusted = loadTrustedNames();
   for (const entry of entries) {
     if (!trusted.has(entry)) {
-      process.stderr.write(
+      diag(
         `[theokit-sdk] WARN: provider plugin "${entry}" is present but NOT trusted \u2014 skipped. To trust it, add "${entry}" to ${trustFilePath()} (JSON array of names) or THEOKIT_TRUSTED_PROVIDERS (comma-separated), then restart the process.
 `
       );
@@ -98,7 +98,7 @@ async function loadOne(dir, entryName) {
       return;
     } catch (err) {
       const msg = err instanceof Error ? err.message : String(err);
-      process.stderr.write(`[theokit-sdk] failed to load provider plugin "${entryName}": ${msg}
+      diag(`[theokit-sdk] failed to load provider plugin "${entryName}": ${msg}
 `);
       return;
     }
@@ -926,7 +926,7 @@ function parseOverrideOrWarnOnce() {
 function warnInvalidJsonOnce(_raw) {
   if (warnedInvalidJson) return;
   warnedInvalidJson = true;
-  process.stderr.write(
+  diag(
     `[theokit-sdk] ${ENV_OVERRIDE_KEY} is set but value is not valid JSON of shape \`{"status": number, "body": object | string}\`. Falling back to real LLM call. This warning is shown once per process.
 `
   );
@@ -1263,6 +1263,156 @@ function toOllamaTools(tools) {
     }
   }));
 }
+var FIXTURE_API_KEY_PREFIX = "theo_test_";
+function isFixtureApiKey(apiKey) {
+  if (apiKey === void 0) return false;
+  return apiKey.startsWith(FIXTURE_API_KEY_PREFIX);
+}
+function getConfiguredBaseUrl() {
+  const value = process.env.THEOKIT_API_BASE_URL;
+  if (value === void 0 || value.length === 0) return void 0;
+  return value;
+}
+function shouldUseFixtureMode(apiKey) {
+  if (getConfiguredBaseUrl() !== void 0) return false;
+  return isFixtureApiKey(apiKey);
+}
+function shouldUseRealLocalRuntime(apiKey) {
+  if (isFixtureApiKey(apiKey)) return false;
+  if (apiKey === void 0 || apiKey.length === 0) return false;
+  return typeof process.env.ANTHROPIC_API_KEY === "string" && process.env.ANTHROPIC_API_KEY.length > 0 || typeof process.env.OPENAI_API_KEY === "string" && process.env.OPENAI_API_KEY.length > 0 || typeof process.env.OPENROUTER_API_KEY === "string" && process.env.OPENROUTER_API_KEY.length > 0 || isAwsBedrockAuthAvailable() || isGcpVertexAuthAvailable() || isLocalNoAuthProviderAvailable();
+}
+function isAwsBedrockAuthAvailable() {
+  if (typeof process.env.AWS_BEARER_TOKEN_BEDROCK === "string" && process.env.AWS_BEARER_TOKEN_BEDROCK.length > 0) {
+    return true;
+  }
+  if (typeof process.env.AWS_ACCESS_KEY_ID === "string" && process.env.AWS_ACCESS_KEY_ID.length > 0) {
+    return true;
+  }
+  if (typeof process.env.AWS_PROFILE === "string" && process.env.AWS_PROFILE.length > 0) {
+    return true;
+  }
+  return awsCredentialsFileExists();
+}
+function awsCredentialsFileExists() {
+  try {
+    const home = process.env.HOME ?? process.env.USERPROFILE;
+    if (home === void 0 || home.length === 0) return false;
+    return existsSync(`${home}/.aws/credentials`) || existsSync(`${home}/.aws/config`);
+  } catch {
+    return false;
+  }
+}
+function isGcpVertexAuthAvailable() {
+  if (typeof process.env.GOOGLE_APPLICATION_CREDENTIALS === "string" && process.env.GOOGLE_APPLICATION_CREDENTIALS.length > 0) {
+    return true;
+  }
+  if (typeof process.env.GOOGLE_CLOUD_PROJECT === "string" && process.env.GOOGLE_CLOUD_PROJECT.length > 0) {
+    return true;
+  }
+  return false;
+}
+function isLocalNoAuthProviderAvailable() {
+  return true;
+}
+
+// src/internal/http.ts
+var DEFAULT_BASE_URL = "https://api.usetheo.dev";
+function resolveBaseUrl() {
+  return getConfiguredBaseUrl() ?? DEFAULT_BASE_URL;
+}
+async function httpRequest(path, options) {
+  const url = `${resolveBaseUrl()}${path}`;
+  const fetchFn = options.fetchFn ?? globalThis.fetch;
+  const headers = {
+    "content-type": "application/json",
+    authorization: `Bearer ${options.apiKey}`,
+    ...options.headers ?? {}
+  };
+  const body = options.body !== void 0 ? JSON.stringify(options.body) : void 0;
+  const response = await safeFetch(fetchFn, url, {
+    method: options.method ?? "GET",
+    headers,
+    body
+  });
+  if (!response.ok) {
+    const parsed = await safeParseJsonResponse(response);
+    throw mapHttpStatusToError(response.status, parsed);
+  }
+  return await safeParseJsonResponse(response);
+}
+async function safeFetch(fetchFn, url, init) {
+  try {
+    return await fetchFn(url, init);
+  } catch (cause) {
+    throw new NetworkError("HTTP request failed", { code: "network_error", cause });
+  }
+}
+async function safeParseJsonResponse(response) {
+  try {
+    return await response.json();
+  } catch {
+    return void 0;
+  }
+}
+async function readErrorResponseBody(response) {
+  const text = await response.text().catch(() => "");
+  try {
+    return JSON.parse(text);
+  } catch {
+    return text;
+  }
+}
+function mapHttpStatusToError(status, body) {
+  const envelope = extractErrorEnvelope(body);
+  const message = envelope.message ?? `HTTP ${status}`;
+  const errorOptions = {
+    code: envelope.code,
+    protoErrorCode: envelope.protoErrorCode,
+    cause: body
+  };
+  if (envelope.code === "integration_not_connected") {
+    return new IntegrationNotConnectedError(message, {
+      provider: envelope.provider ?? "unknown",
+      helpUrl: envelope.helpUrl ?? "",
+      code: envelope.code,
+      cause: body
+    });
+  }
+  if (status === 401 || status === 403) {
+    return new AuthenticationError(message, errorOptions);
+  }
+  if (status === 429) {
+    return new RateLimitError(message, errorOptions);
+  }
+  if (status >= 400 && status < 500) {
+    return new ConfigurationError(message, errorOptions);
+  }
+  if (status >= 500) {
+    return new NetworkError(message, errorOptions);
+  }
+  return new UnknownAgentError(message, errorOptions);
+}
+function extractErrorEnvelope(body) {
+  if (!body || typeof body !== "object") return {};
+  const record = body;
+  const inner = record.error;
+  const source = inner && typeof inner === "object" ? inner : record;
+  return readEnvelopeFields(source);
+}
+function readEnvelopeFields(record) {
+  return {
+    code: pickString(record, "code"),
+    message: pickString(record, "message"),
+    protoErrorCode: pickString(record, "protoErrorCode"),
+    provider: pickString(record, "provider"),
+    helpUrl: pickString(record, "helpUrl")
+  };
+}
+function pickString(record, key) {
+  const value = record[key];
+  return typeof value === "string" ? value : void 0;
+}
 
 // src/internal/llm/hermes-tool-extract.ts
 var HERMES_BLOCK = /<function=\s*([^>\s]+)\s*>([\s\S]*?)<\/tool_call>/g;
@@ -1486,12 +1636,7 @@ var OpenAIClient = class {
       throw wrapTransportError(fetchErr, { providerId, endpoint: "/v1/chat/completions" });
     }
     if (!response.ok) {
-      const text = await response.text().catch(() => "");
-      let body = text;
-      try {
-        body = JSON.parse(text);
-      } catch {
-      }
+      const body = await readErrorResponseBody(response);
       const ollamaMapped = mapOllamaHttpError({
         providerId,
         status: response.status,
@@ -1673,13 +1818,13 @@ var OpenAIStreamAccumulator = class {
         toolCalls.push(...recovered.toolCalls);
         text = recovered.residualText;
         stopReason = "tool_use";
-        process.stderr.write(
+        diag(
           `[theokit-sdk] recovered ${recovered.toolCalls.length} leaked tool call(s) from assistant content (provider="${this.providerName}", names=${recovered.toolCalls.map((c) => c.name).join(",")})
 `
         );
       }
       if (recovered.droppedNames.length > 0) {
-        process.stderr.write(
+        diag(
           `[theokit-sdk] dropped ${recovered.droppedNames.length} leaked block(s) whose name is not a tool in the request (provider="${this.providerName}", names=${recovered.droppedNames.join(",")})
 `
         );
@@ -1804,10 +1949,8 @@ async function tryFirstEvent(client, request, signal, logFallback = false) {
     if (cause instanceof NetworkError || cause instanceof RateLimitError || cause instanceof AuthenticationError) {
       if (logFallback) {
         const errCode = cause.metadata?.code ?? cause.code ?? "unknown";
-        process.stderr.write(
-          `[theokit-sdk] provider ${client.name} failed (${errCode}): falling back
-`
-        );
+        diag(`[theokit-sdk] provider ${client.name} failed (${errCode}): falling back
+`);
       }
       return { kind: "handshake_error", error: cause };
     }
@@ -1899,7 +2042,7 @@ var PoolAwareLlmClient = class {
             ...parseRetryAfterMs(attempt.error) !== void 0 ? { resetAtMs: parseRetryAfterMs(attempt.error) } : {}
           });
         } catch (persistErr) {
-          process.stderr.write(
+          diag(
             `[theokit-sdk] credential-pool: persist failed during rotate; continuing in-memory: ${persistErr instanceof Error ? persistErr.message : String(persistErr)}
 `
           );
@@ -2322,7 +2465,7 @@ async function getAuthClientOrThrow() {
     const auth = new mod.GoogleAuth({ scopes: [SCOPE_CLOUD_PLATFORM] });
     return await auth.getClient();
   } catch (err) {
-    process.stderr.write(
+    diag(
       `[theokit-sdk] Vertex ADC initialization failed: ${err instanceof Error ? err.message : String(err)}
 `
     );
@@ -2551,7 +2694,7 @@ var warnedNoAuthApiKeys = /* @__PURE__ */ new Set();
 function warnNoAuthApiKeysIgnoredOnce(provider) {
   if (warnedNoAuthApiKeys.has(provider)) return;
   warnedNoAuthApiKeys.add(provider);
-  process.stderr.write(
+  diag(
     `[theokit-sdk] provider "${provider}" has authType: "none" \u2014 apiKeys ignored (no auth required for local runtime).
 `
   );
@@ -2580,7 +2723,7 @@ function warnUnknownProvidersInApiKeys(apiKeys) {
     const profile = getProviderProfile(name);
     if (profile === void 0) {
       warnedProviders.add(name);
-      process.stderr.write(
+      diag(
         `[theokit-sdk] credential-pool: unknown provider "${name}" in apiKeys (no profile registered)
 `
       );
@@ -2939,14 +3082,12 @@ async function autoCompactIfNeeded(opts) {
     return true;
   } catch (cause) {
     const msg = cause instanceof Error ? cause.message : String(cause);
-    process.stderr.write(
-      `[theokit-sdk] auto-compaction failed (left transcript untouched): ${msg}
-`
-    );
+    diag(`[theokit-sdk] auto-compaction failed (left transcript untouched): ${msg}
+`);
     return false;
   }
 }
 
-export { COMPACT_SUMMARY_MARKER, COMPACT_USER_MESSAGE_MAX_TOKENS, CircuitBreaker, autoCompactIfNeeded, buildDefaultSummarizer, compactSessionTranscript, detectPrimaryProvider, discoverProviderPlugins, inferProviderFromApiKey, isCompactSummary, mapOllamaHttpError, mapOllamaTransportError, mapOpenAICompatibleError, parseSseStream, relayStream, renderToolResultContentText, resolveProviderChain, resolveSummarizerRoute, shouldAutoCompact, tryFirstEvent };
-//# sourceMappingURL=chunk-IX2LKBCD.js.map
-//# sourceMappingURL=chunk-IX2LKBCD.js.map
+export { COMPACT_SUMMARY_MARKER, COMPACT_USER_MESSAGE_MAX_TOKENS, CircuitBreaker, autoCompactIfNeeded, buildDefaultSummarizer, compactSessionTranscript, detectPrimaryProvider, discoverProviderPlugins, getConfiguredBaseUrl, httpRequest, inferProviderFromApiKey, isCompactSummary, isFixtureApiKey, mapOllamaHttpError, mapOllamaTransportError, mapOpenAICompatibleError, parseSseStream, readErrorResponseBody, relayStream, renderToolResultContentText, resolveProviderChain, resolveSummarizerRoute, shouldAutoCompact, shouldUseFixtureMode, shouldUseRealLocalRuntime, tryFirstEvent };
+//# sourceMappingURL=chunk-GL7CFBVC.js.map
+//# sourceMappingURL=chunk-GL7CFBVC.js.map