@theokit/sdk 4.9.1 → 4.10.1

package/CHANGELOG.md

@@ -1,5 +1,35 @@
 # Changelog
 
+## 4.10.1
+
+### Patch Changes
+
+- Provider transform seam hardening (agent-builder M41 review): `OpenAIClient` now honors `extraHeaders` so `chat_completions` providers get `transform.headers` (previously silently dropped); the `transform` seam is invoked per-branch (no side effects for transports that ignore it); `ProviderTransform` + `ProviderTransformContext` are re-exported from the package entry; added back-compat golden tests (plain `responses_api` passthrough) + a `chat_completions` transform.fetch test.
+
+## 4.10.0
+
+### Minor Changes
+
+- Provider `transform` seam (agent-builder M41): `ProviderProfile` gains an optional `transform` (dynamic `headers(ctx)` + refresh-aware `fetch(ctx)`), fed through `selectTransport` into the `chat_completions` + `responses_api` transports — a provider can now own its per-request auth/headers. A profile without `transform` takes the static path byte-for-byte. Contract-shape adaptation of OpenCode's provider `auth.loader` (MIT).
+
+## 4.9.1
+
+### Patch Changes
+
+- Responses transport strips a `provider/` prefix from the model id (defense-in-depth: the ChatGPT Codex backend wants a bare `gpt-5.4`, decoupled from the router's provider-inference heuristic).
+
+## 4.9.0
+
+### Minor Changes
+
+- `responses_api` transport (agent-builder M40): a `ResponsesApiClient` for the OpenAI Responses API (ChatGPT Codex backend + any responses provider). The `responses_api` apiMode was declared but had no transport (`selectTransport` threw); this ships it — body build + SSE state machine, consuming `baseUrl` + `extraHeaders`. Protocol shape adapted from OpenCode's `openai-responses.ts` (MIT), recorded fixtures as golden tests.
+
+## 4.8.0
+
+### Minor Changes
+
+- `Agent.rename(agentId, name)` (agent-builder M39): the public mutator for the registry `name` field (mirrors `Agent.archive`/`setArchivedFlag`). The registry already carried `name` (`SDKAgentInfo.name`) but had no public setter.
+
 ## 4.7.1
 
 ### Patch Changes

package/dist/{cron-D_0p_gXd.d.ts → cron-C7catiH8.d.ts}

@@ -1185,6 +1185,37 @@ interface MemoryProvider {
  */
 type ApiMode = "chat_completions" | "anthropic_messages" | "responses_api" | "bedrock" | "bedrock_anthropic";
 type AuthType = "api_key" | "oauth_device_code" | "oauth_external" | "aws_sdk" | "aws_bearer" | "gcp_oauth" | "none";
+/**
+ * M41 (agent-builder provider framework) — the context a provider's `transform` receives per request. An
+ * object from day one so it can grow without breaking (M42 adds the resolved `credential`).
+ *
+ * @public
+ */
+interface ProviderTransformContext {
+    /** The bearer the router resolved for this request (env var, injected key, or an oauth access token). */
+    apiKey: string;
+}
+/**
+ * M41 — the one OPTIONAL behavior seam on a provider profile. It lets a provider own its per-request auth:
+ * `fetch` is the universal seam (a provider that returns its own fetch fully controls headers + refresh, for
+ * every transport that accepts a fetch); `headers` is a convenience merged over `extraHeaders` on transports
+ * that carry them (responses_api). This is the CONTRACT-shape adaptation of OpenCode's provider `auth.loader`
+ * (MIT © 2025 opencode — `packages/core/src/plugin/provider/*.ts`), retargeted to theokit's transport model.
+ * Closes the gap where a `ProviderProfile` could only declare STATIC headers.
+ *
+ * @public
+ */
+interface ProviderTransform {
+    /**
+     * Dynamic per-request headers, merged OVER the profile's static `extraHeaders`, and spread AFTER the
+     * transport's base `authorization`/`content-type`. A provider that owns its auth MAY intentionally set
+     * `authorization` here to override the resolved bearer — but a stray `authorization`/`content-type` key
+     * will silently replace the base header, so return only the headers you mean to add.
+     */
+    headers?(ctx: ProviderTransformContext): Record<string, string>;
+    /** A fetch to use for this provider's requests (refresh-aware / fully provider-controlled). */
+    fetch?(ctx: ProviderTransformContext): typeof fetch;
+}
 interface ProviderProfile {
     name: string;
     apiMode: ApiMode;
@@ -1200,6 +1231,11 @@ interface ProviderProfile {
     fallbackModels: ReadonlyArray<string>;
     extraHeaders?: Record<string, string>;
     bodyOverrides?: Record<string, unknown>;
+    /**
+     * M41 — the optional per-request behavior seam (dynamic headers + refresh-aware fetch). Absent ⇒ the profile
+     * is pure data and takes the static path byte-for-byte. See {@link ProviderTransform}.
+     */
+    transform?: ProviderTransform;
     /**
      * Opt-in leaked-dialect safe-parse (theokit#58 follow-up). When `true`, a chat_completions finish
      * with ZERO native `tool_calls` has its assistant content scanned for the Hermes
@@ -2528,4 +2564,4 @@ declare class Cron {
     static status(_options?: CronStartOptions): Promise<CronSchedulerStatus>;
 }
 
-export { type GoalOptions as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type ContextBudget as D, type ContextManagerKind as E, type ContextSnapshot as F, type GetAgentOptions as G, type ContextSource as H, type InlineSkill as I, type ContextSourceStatus as J, type CreateSkillSpec as K, type LocalOptions as L, type MemorySettings as M, Cron as N, type CronCreateOptions as O, type ProviderRoutingSettings as P, type CronGetOptions as Q, type CronJob as R, type SystemPromptResolver as S, type CronJobStatus as T, type CronListOptions as U, type CronOperationOptions as V, type CronRunOptions as W, type CronRuntime as X, type CronSchedulerStatus as Y, type CronStartOptions as Z, type GoalEvent as _, type AgentDefinition as a, type GoalResult as a0, type HookName as a1, type InvalidateCacheOptions as a2, type MemoryAdapter as a3, type MemoryAdapterCapabilities as a4, type MemoryContext as a5, type MemoryFact as a6, type MemoryProviderHandle as a7, type MemoryProviderInitOptions as a8, type MemoryRevision as a9, type SystemPromptContext as aA, type SystemPromptMemoryFact as aB, type SystemPromptSkillRef as aC, type TelemetrySettings as aD, type MemoryToolSchema as aa, type MemoryTurnMessage as ab, type PersonalityPreset as ac, type PluginContext as ad, type PostAssistantReplyContext as ae, type PreToolCallContext as af, type PreUserSendContext as ag, type PreUserSendResult as ah, type ProviderCapability as ai, type ProviderRoute as aj, type RecordSessionSummaryArgs as ak, type ResolvedProviderRoute as al, type RunUntilIterator as am, type SDKAgentPlugins as an, type SDKAgentSkillDetail as ao, type SDKAgentSkills as ap, type SDKArtifact as aq, type SDKContextManager as ar, type SDKPluginMetadata as as, type SDKProvidersManager as at, type SessionRecord as au, type SessionStore as av, type SettingSource as aw, Skill as ax, type SkillsResolver as ay, type SkillsResolverContext as az, type ContextSettings as b, type PluginsSettings as c, type SkillsSettings as d, type SDKAgent as e, type ListAgentsOptions as f, type ListResult as g, type SDKAgentInfo as h, type ListRunsOptions as i, type GetRunOptions as j, type AgentOperationOptions as k, type Plugin as l, type ProviderProfile as m, type MemoryProvider as n, type MemoryId as o, type PreToolCallDecision as p, type StepResult as q, type SDKProvider as r, type ActiveMemoryPassArgs as s, type ActiveMemoryPassResult as t, type AgentMemory as u, type BudgetCheck as v, type BudgetTotal as w, type BudgetUsageEvent as x, type CloudEnv as y, type CloudRepo as z };
+export { type GoalOptions as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type ContextBudget as D, type ContextManagerKind as E, type ContextSnapshot as F, type GetAgentOptions as G, type ContextSource as H, type InlineSkill as I, type ContextSourceStatus as J, type CreateSkillSpec as K, type LocalOptions as L, type MemorySettings as M, Cron as N, type CronCreateOptions as O, type ProviderRoutingSettings as P, type CronGetOptions as Q, type CronJob as R, type SystemPromptResolver as S, type CronJobStatus as T, type CronListOptions as U, type CronOperationOptions as V, type CronRunOptions as W, type CronRuntime as X, type CronSchedulerStatus as Y, type CronStartOptions as Z, type GoalEvent as _, type AgentDefinition as a, type GoalResult as a0, type HookName as a1, type InvalidateCacheOptions as a2, type MemoryAdapter as a3, type MemoryAdapterCapabilities as a4, type MemoryContext as a5, type MemoryFact as a6, type MemoryProviderHandle as a7, type MemoryProviderInitOptions as a8, type MemoryRevision as a9, type SkillsResolver as aA, type SkillsResolverContext as aB, type SystemPromptContext as aC, type SystemPromptMemoryFact as aD, type SystemPromptSkillRef as aE, type TelemetrySettings as aF, type MemoryToolSchema as aa, type MemoryTurnMessage as ab, type PersonalityPreset as ac, type PluginContext as ad, type PostAssistantReplyContext as ae, type PreToolCallContext as af, type PreUserSendContext as ag, type PreUserSendResult as ah, type ProviderCapability as ai, type ProviderRoute as aj, type ProviderTransform as ak, type ProviderTransformContext as al, type RecordSessionSummaryArgs as am, type ResolvedProviderRoute as an, type RunUntilIterator as ao, type SDKAgentPlugins as ap, type SDKAgentSkillDetail as aq, type SDKAgentSkills as ar, type SDKArtifact as as, type SDKContextManager as at, type SDKPluginMetadata as au, type SDKProvidersManager as av, type SessionRecord as aw, type SessionStore as ax, type SettingSource as ay, Skill as az, type ContextSettings as b, type PluginsSettings as c, type SkillsSettings as d, type SDKAgent as e, type ListAgentsOptions as f, type ListResult as g, type SDKAgentInfo as h, type ListRunsOptions as i, type GetRunOptions as j, type AgentOperationOptions as k, type Plugin as l, type ProviderProfile as m, type MemoryProvider as n, type MemoryId as o, type PreToolCallDecision as p, type StepResult as q, type SDKProvider as r, type ActiveMemoryPassArgs as s, type ActiveMemoryPassResult as t, type AgentMemory as u, type BudgetCheck as v, type BudgetTotal as w, type BudgetUsageEvent as x, type CloudEnv as y, type CloudRepo as z };

package/dist/{cron-26WH1n7o.d.cts → cron-DK1WVZnI.d.cts}

@@ -1185,6 +1185,37 @@ interface MemoryProvider {
  */
 type ApiMode = "chat_completions" | "anthropic_messages" | "responses_api" | "bedrock" | "bedrock_anthropic";
 type AuthType = "api_key" | "oauth_device_code" | "oauth_external" | "aws_sdk" | "aws_bearer" | "gcp_oauth" | "none";
+/**
+ * M41 (agent-builder provider framework) — the context a provider's `transform` receives per request. An
+ * object from day one so it can grow without breaking (M42 adds the resolved `credential`).
+ *
+ * @public
+ */
+interface ProviderTransformContext {
+    /** The bearer the router resolved for this request (env var, injected key, or an oauth access token). */
+    apiKey: string;
+}
+/**
+ * M41 — the one OPTIONAL behavior seam on a provider profile. It lets a provider own its per-request auth:
+ * `fetch` is the universal seam (a provider that returns its own fetch fully controls headers + refresh, for
+ * every transport that accepts a fetch); `headers` is a convenience merged over `extraHeaders` on transports
+ * that carry them (responses_api). This is the CONTRACT-shape adaptation of OpenCode's provider `auth.loader`
+ * (MIT © 2025 opencode — `packages/core/src/plugin/provider/*.ts`), retargeted to theokit's transport model.
+ * Closes the gap where a `ProviderProfile` could only declare STATIC headers.
+ *
+ * @public
+ */
+interface ProviderTransform {
+    /**
+     * Dynamic per-request headers, merged OVER the profile's static `extraHeaders`, and spread AFTER the
+     * transport's base `authorization`/`content-type`. A provider that owns its auth MAY intentionally set
+     * `authorization` here to override the resolved bearer — but a stray `authorization`/`content-type` key
+     * will silently replace the base header, so return only the headers you mean to add.
+     */
+    headers?(ctx: ProviderTransformContext): Record<string, string>;
+    /** A fetch to use for this provider's requests (refresh-aware / fully provider-controlled). */
+    fetch?(ctx: ProviderTransformContext): typeof fetch;
+}
 interface ProviderProfile {
     name: string;
     apiMode: ApiMode;
@@ -1200,6 +1231,11 @@ interface ProviderProfile {
     fallbackModels: ReadonlyArray<string>;
     extraHeaders?: Record<string, string>;
     bodyOverrides?: Record<string, unknown>;
+    /**
+     * M41 — the optional per-request behavior seam (dynamic headers + refresh-aware fetch). Absent ⇒ the profile
+     * is pure data and takes the static path byte-for-byte. See {@link ProviderTransform}.
+     */
+    transform?: ProviderTransform;
     /**
      * Opt-in leaked-dialect safe-parse (theokit#58 follow-up). When `true`, a chat_completions finish
      * with ZERO native `tool_calls` has its assistant content scanned for the Hermes
@@ -2528,4 +2564,4 @@ declare class Cron {
     static status(_options?: CronStartOptions): Promise<CronSchedulerStatus>;
 }
 
-export { type GoalOptions as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type ContextBudget as D, type ContextManagerKind as E, type ContextSnapshot as F, type GetAgentOptions as G, type ContextSource as H, type InlineSkill as I, type ContextSourceStatus as J, type CreateSkillSpec as K, type LocalOptions as L, type MemorySettings as M, Cron as N, type CronCreateOptions as O, type ProviderRoutingSettings as P, type CronGetOptions as Q, type CronJob as R, type SystemPromptResolver as S, type CronJobStatus as T, type CronListOptions as U, type CronOperationOptions as V, type CronRunOptions as W, type CronRuntime as X, type CronSchedulerStatus as Y, type CronStartOptions as Z, type GoalEvent as _, type AgentDefinition as a, type GoalResult as a0, type HookName as a1, type InvalidateCacheOptions as a2, type MemoryAdapter as a3, type MemoryAdapterCapabilities as a4, type MemoryContext as a5, type MemoryFact as a6, type MemoryProviderHandle as a7, type MemoryProviderInitOptions as a8, type MemoryRevision as a9, type SystemPromptContext as aA, type SystemPromptMemoryFact as aB, type SystemPromptSkillRef as aC, type TelemetrySettings as aD, type MemoryToolSchema as aa, type MemoryTurnMessage as ab, type PersonalityPreset as ac, type PluginContext as ad, type PostAssistantReplyContext as ae, type PreToolCallContext as af, type PreUserSendContext as ag, type PreUserSendResult as ah, type ProviderCapability as ai, type ProviderRoute as aj, type RecordSessionSummaryArgs as ak, type ResolvedProviderRoute as al, type RunUntilIterator as am, type SDKAgentPlugins as an, type SDKAgentSkillDetail as ao, type SDKAgentSkills as ap, type SDKArtifact as aq, type SDKContextManager as ar, type SDKPluginMetadata as as, type SDKProvidersManager as at, type SessionRecord as au, type SessionStore as av, type SettingSource as aw, Skill as ax, type SkillsResolver as ay, type SkillsResolverContext as az, type ContextSettings as b, type PluginsSettings as c, type SkillsSettings as d, type SDKAgent as e, type ListAgentsOptions as f, type ListResult as g, type SDKAgentInfo as h, type ListRunsOptions as i, type GetRunOptions as j, type AgentOperationOptions as k, type Plugin as l, type ProviderProfile as m, type MemoryProvider as n, type MemoryId as o, type PreToolCallDecision as p, type StepResult as q, type SDKProvider as r, type ActiveMemoryPassArgs as s, type ActiveMemoryPassResult as t, type AgentMemory as u, type BudgetCheck as v, type BudgetTotal as w, type BudgetUsageEvent as x, type CloudEnv as y, type CloudRepo as z };
+export { type GoalOptions as $, type AgentOptions as A, type BudgetTracker as B, type CloudOptions as C, type ContextBudget as D, type ContextManagerKind as E, type ContextSnapshot as F, type GetAgentOptions as G, type ContextSource as H, type InlineSkill as I, type ContextSourceStatus as J, type CreateSkillSpec as K, type LocalOptions as L, type MemorySettings as M, Cron as N, type CronCreateOptions as O, type ProviderRoutingSettings as P, type CronGetOptions as Q, type CronJob as R, type SystemPromptResolver as S, type CronJobStatus as T, type CronListOptions as U, type CronOperationOptions as V, type CronRunOptions as W, type CronRuntime as X, type CronSchedulerStatus as Y, type CronStartOptions as Z, type GoalEvent as _, type AgentDefinition as a, type GoalResult as a0, type HookName as a1, type InvalidateCacheOptions as a2, type MemoryAdapter as a3, type MemoryAdapterCapabilities as a4, type MemoryContext as a5, type MemoryFact as a6, type MemoryProviderHandle as a7, type MemoryProviderInitOptions as a8, type MemoryRevision as a9, type SkillsResolver as aA, type SkillsResolverContext as aB, type SystemPromptContext as aC, type SystemPromptMemoryFact as aD, type SystemPromptSkillRef as aE, type TelemetrySettings as aF, type MemoryToolSchema as aa, type MemoryTurnMessage as ab, type PersonalityPreset as ac, type PluginContext as ad, type PostAssistantReplyContext as ae, type PreToolCallContext as af, type PreUserSendContext as ag, type PreUserSendResult as ah, type ProviderCapability as ai, type ProviderRoute as aj, type ProviderTransform as ak, type ProviderTransformContext as al, type RecordSessionSummaryArgs as am, type ResolvedProviderRoute as an, type RunUntilIterator as ao, type SDKAgentPlugins as ap, type SDKAgentSkillDetail as aq, type SDKAgentSkills as ar, type SDKArtifact as as, type SDKContextManager as at, type SDKPluginMetadata as au, type SDKProvidersManager as av, type SessionRecord as aw, type SessionStore as ax, type SettingSource as ay, Skill as az, type ContextSettings as b, type PluginsSettings as c, type SkillsSettings as d, type SDKAgent as e, type ListAgentsOptions as f, type ListResult as g, type SDKAgentInfo as h, type ListRunsOptions as i, type GetRunOptions as j, type AgentOperationOptions as k, type Plugin as l, type ProviderProfile as m, type MemoryProvider as n, type MemoryId as o, type PreToolCallDecision as p, type StepResult as q, type SDKProvider as r, type ActiveMemoryPassArgs as s, type ActiveMemoryPassResult as t, type AgentMemory as u, type BudgetCheck as v, type BudgetTotal as w, type BudgetUsageEvent as x, type CloudEnv as y, type CloudRepo as z };

package/dist/cron.cjs

@@ -12613,6 +12613,7 @@ var OpenAIClient = class {
     if (this.options.organization !== void 0) {
       headers["openai-organization"] = this.options.organization;
     }
+    if (this.options.extraHeaders !== void 0) Object.assign(headers, this.options.extraHeaders);
     const providerId = this.options.providerName ?? this.name;
     let response;
     try {
@@ -13685,6 +13686,11 @@ function resolveApiKey2(envVars) {
   return void 0;
 }
 function selectTransport(profile, apiKey) {
+  const applyTransform = () => {
+    if (profile.transform === void 0) return {};
+    const ctx = { apiKey };
+    return { fetch: profile.transform.fetch?.(ctx), headers: profile.transform.headers?.(ctx) };
+  };
   if (profile.apiMode === "chat_completions") {
     if (profile.name === "ollama") {
       const ollamaBase = process.env.OLLAMA_HOST ?? profile.baseUrl;
@@ -13701,6 +13707,10 @@ function selectTransport(profile, apiKey) {
     }
     const envOverride = resolveBaseUrlEnvOverride(profile.name);
     if (envOverride !== void 0) opts.baseUrl = envOverride;
+    const t = applyTransform();
+    if (t.fetch !== void 0) opts.fetch = t.fetch;
+    const merged = profile.extraHeaders !== void 0 || t.headers !== void 0 ? { ...profile.extraHeaders, ...t.headers } : void 0;
+    if (merged !== void 0) opts.extraHeaders = merged;
     return new OpenAIClient(opts);
   }
   if (profile.apiMode === "anthropic_messages") {
@@ -13717,10 +13727,13 @@ function selectTransport(profile, apiKey) {
     return new BedrockAnthropicClient(realKey !== void 0 ? { apiKey: realKey } : {});
   }
   if (profile.apiMode === "responses_api") {
+    const t = applyTransform();
+    const mergedHeaders = profile.extraHeaders !== void 0 || t.headers !== void 0 ? { ...profile.extraHeaders, ...t.headers } : void 0;
     return new ResponsesApiClient({
       apiKey,
       ...profile.baseUrl !== void 0 ? { baseUrl: profile.baseUrl } : {},
-      ...profile.extraHeaders !== void 0 ? { extraHeaders: profile.extraHeaders } : {},
+      ...mergedHeaders !== void 0 ? { extraHeaders: mergedHeaders } : {},
+      ...t.fetch !== void 0 ? { fetch: t.fetch } : {},
       providerName: profile.name
     });
   }