@theokit/sdk 4.51.1 → 4.52.1

package/dist/chunk-NAF4L3T6.js

@@ -0,0 +1,22 @@
+// src/internal/auth/api-key-prefix.ts
+var PREFIXES = {
+  "sk-or-": "openrouter",
+  "sk-ant-": "anthropic",
+  "sk-": "openai"
+};
+var BY_LENGTH = Object.entries(PREFIXES).sort(
+  (a, b) => b[0].length - a[0].length
+);
+function providerFromApiKeyPrefix(apiKey) {
+  if (apiKey === void 0) return void 0;
+  const key = apiKey.trim();
+  if (key.length === 0) return void 0;
+  for (const [prefix, provider] of BY_LENGTH) {
+    if (key.startsWith(prefix)) return provider;
+  }
+  return void 0;
+}
+
+export { providerFromApiKeyPrefix };
+//# sourceMappingURL=chunk-NAF4L3T6.js.map
+//# sourceMappingURL=chunk-NAF4L3T6.js.map

package/dist/chunk-NAF4L3T6.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/internal/auth/api-key-prefix.ts"],"names":[],"mappings":";AAiBA,IAAM,QAAA,GAA6C;AAAA,EACjD,QAAA,EAAU,YAAA;AAAA,EACV,SAAA,EAAW,WAAA;AAAA,EACX,KAAA,EAAO;AACT,CAAA;AAYA,IAAM,SAAA,GAAsD,MAAA,CAAO,OAAA,CAAQ,QAAQ,CAAA,CAAE,IAAA;AAAA,EACnF,CAAC,GAAG,CAAA,KAAM,CAAA,CAAE,CAAC,CAAA,CAAE,MAAA,GAAS,CAAA,CAAE,CAAC,CAAA,CAAE;AAC/B,CAAA;AASO,SAAS,yBAAyB,MAAA,EAAgD;AACvF,EAAA,IAAI,MAAA,KAAW,QAAW,OAAO,MAAA;AACjC,EAAA,MAAM,GAAA,GAAM,OAAO,IAAA,EAAK;AACxB,EAAA,IAAI,GAAA,CAAI,MAAA,KAAW,CAAA,EAAG,OAAO,MAAA;AAC7B,EAAA,KAAA,MAAW,CAAC,MAAA,EAAQ,QAAQ,CAAA,IAAK,SAAA,EAAW;AAC1C,IAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAM,CAAA,EAAG,OAAO,QAAA;AAAA,EACrC;AACA,EAAA,OAAO,MAAA;AACT","file":"chunk-NAF4L3T6.js","sourcesContent":["/**\n * \"Which provider issued this key?\" — the pure prefix answer.\n *\n * Lives in `auth/` and not beside the local-run helper that used to own it, because the question is\n * an auth question. The local-run path additionally refuses a provider it has no profile for; that\n * is its policy, not part of this answer, so it stays there and composes with this.\n *\n * Lives under `internal/` by FOLDER, and is PUBLIC by contract — re-exported from\n * `@theokit/sdk/auth`.\n *\n * Deliberately NOT tagged `@internal`: `tsconfig.base.json` sets `stripInternal: true`, so that tag\n * deletes the declaration from every emitted `.d.ts`. The symbol then exists at runtime and cannot\n * be imported with types — which is the exact defect this module was published to fix, reintroduced\n * one layer down by a docblock. Measured: usetheodev/theokit-sdk#283.\n */\n\n/** Prefix → provider. Order here is irrelevant: the lookup sorts. */\nconst PREFIXES: Readonly<Record<string, string>> = {\n  \"sk-or-\": \"openrouter\",\n  \"sk-ant-\": \"anthropic\",\n  \"sk-\": \"openai\",\n};\n\n/**\n * Longest first, computed once.\n *\n * The ordering IS the correctness property, so it is derived rather than written down: every\n * OpenRouter and Anthropic key also starts with `sk-`, and a shortest-match-first scan resolves\n * them to OpenAI. That failure is invisible locally — it surfaces as a remote 401 from the wrong\n * endpoint, with a message that says nothing about prefixes. The previous implementation was\n * correct only because the entries happened to be written in a workable order; appending a longer\n * prefix, or sorting the table for readability, would have broken it silently.\n */\nconst BY_LENGTH: ReadonlyArray<readonly [string, string]> = Object.entries(PREFIXES).sort(\n  (a, b) => b[0].length - a[0].length,\n);\n\n/**\n * The provider whose key prefix matches, or `undefined` when none does.\n *\n * `undefined` means \"cannot tell\" and never a guess: a wrong guess here routes a real credential to\n * the wrong endpoint. Whitespace-only and empty inputs are \"cannot tell\" too — they are what an\n * empty prompt submits, not a key.\n */\nexport function providerFromApiKeyPrefix(apiKey: string | undefined): string | undefined {\n  if (apiKey === undefined) return undefined;\n  const key = apiKey.trim();\n  if (key.length === 0) return undefined;\n  for (const [prefix, provider] of BY_LENGTH) {\n    if (key.startsWith(prefix)) return provider;\n  }\n  return undefined;\n}\n"]}

package/dist/{chunk-N6NUMXAJ.cjs → chunk-WLESQ3ZQ.cjs}

@@ -4,6 +4,7 @@ var chunk4JBHSLQO_cjs = require('./chunk-4JBHSLQO.cjs');
 var chunkRAACTJ7C_cjs = require('./chunk-RAACTJ7C.cjs');
 var chunkE3OCRJU6_cjs = require('./chunk-E3OCRJU6.cjs');
 var chunk6JSIEDKL_cjs = require('./chunk-6JSIEDKL.cjs');
+var chunkFRITRLZQ_cjs = require('./chunk-FRITRLZQ.cjs');
 var chunkECPL5RV6_cjs = require('./chunk-ECPL5RV6.cjs');
 var chunkAMYY3JHQ_cjs = require('./chunk-AMYY3JHQ.cjs');
 var chunkT6ZCG5AP_cjs = require('./chunk-T6ZCG5AP.cjs');
@@ -739,7 +740,7 @@ async function resolveBedrockToken(region) {
     return cachedToken.value;
   }
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-N6NUMXAJ.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-WLESQ3ZQ.cjs', document.baseURI).href)));
     const gen = r("@aws/bedrock-token-generator");
     if (typeof gen.getToken !== "function") return void 0;
     const providers = r("@aws-sdk/credential-providers");
@@ -2403,7 +2404,7 @@ async function resolveVertexAccessToken() {
 async function getAuthClientOrThrow() {
   let mod;
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-N6NUMXAJ.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-WLESQ3ZQ.cjs', document.baseURI).href)));
     mod = r("google-auth-library");
   } catch (err) {
     const isModuleMissing = err instanceof Error && (err.message.includes("Cannot find module") || err.code === "MODULE_NOT_FOUND");
@@ -2768,18 +2769,9 @@ function selectTransport(profile, apiKey) {
 
 // src/internal/local-agent/real-local-run-provider.ts
 function inferProviderFromApiKey(apiKey) {
-  if (apiKey === void 0 || apiKey.length === 0) return void 0;
-  const byPrefix = [
-    { provider: "openrouter", prefix: "sk-or-" },
-    { provider: "anthropic", prefix: "sk-ant-" },
-    { provider: "openai", prefix: "sk-" }
-  ];
-  for (const { provider, prefix } of byPrefix) {
-    if (apiKey.startsWith(prefix) && chunkT6ZCG5AP_cjs.getProviderProfile(provider) !== void 0) {
-      return provider;
-    }
-  }
-  return void 0;
+  const provider = chunkFRITRLZQ_cjs.providerFromApiKeyPrefix(apiKey);
+  if (provider === void 0) return void 0;
+  return chunkT6ZCG5AP_cjs.getProviderProfile(provider) === void 0 ? void 0 : provider;
 }
 function detectPrimaryProvider() {
   if (process.env.ANTHROPIC_API_KEY !== void 0 && process.env.ANTHROPIC_API_KEY.length > 0) {
@@ -3067,5 +3059,5 @@ exports.shouldAutoCompact = shouldAutoCompact;
 exports.shouldUseFixtureMode = shouldUseFixtureMode;
 exports.shouldUseRealLocalRuntime = shouldUseRealLocalRuntime;
 exports.tryFirstEvent = tryFirstEvent;
-//# sourceMappingURL=chunk-N6NUMXAJ.cjs.map
-//# sourceMappingURL=chunk-N6NUMXAJ.cjs.map
+//# sourceMappingURL=chunk-WLESQ3ZQ.cjs.map
+//# sourceMappingURL=chunk-WLESQ3ZQ.cjs.map