@theokit/sdk 5.12.1 → 5.14.0

package/dist/{chunk-LSWHDOCL.cjs → chunk-SNVYOX46.cjs}

@@ -9,9 +9,9 @@ var chunkFRITRLZQ_cjs = require('./chunk-FRITRLZQ.cjs');
 var chunk3WKWBYPO_cjs = require('./chunk-3WKWBYPO.cjs');
 var chunkKX5QXLBS_cjs = require('./chunk-KX5QXLBS.cjs');
 var chunk3EE6LVWT_cjs = require('./chunk-3EE6LVWT.cjs');
-var chunkS46WJTDL_cjs = require('./chunk-S46WJTDL.cjs');
+var chunk4TEGFMSP_cjs = require('./chunk-4TEGFMSP.cjs');
 var chunkNVXXWAU7_cjs = require('./chunk-NVXXWAU7.cjs');
-var chunkQISSETTG_cjs = require('./chunk-QISSETTG.cjs');
+var chunk5645PMVU_cjs = require('./chunk-5645PMVU.cjs');
 var chunkEHD25JBZ_cjs = require('./chunk-EHD25JBZ.cjs');
 var chunkCEGU5AVD_cjs = require('./chunk-CEGU5AVD.cjs');
 var chunkRNXXYF22_cjs = require('./chunk-RNXXYF22.cjs');
@@ -23,55 +23,62 @@ var url = require('url');
 var module$1 = require('module');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
-var discoveryState = chunkNVXXWAU7_cjs.globalSingleton("theokit-sdk.providers.discovered", () => ({
-  done: false
-}));
-function pluginsRoot() {
-  return path.join(os.homedir(), ".theokit", "plugins", "model-providers");
-}
 function trustFilePath() {
   return path.join(os.homedir(), ".theokit", "plugins", "trusted-providers.json");
 }
-function loadTrustedNames() {
-  const trusted = /* @__PURE__ */ new Set();
-  const path = trustFilePath();
-  if (fs.existsSync(path)) {
-    try {
-      const parsed = JSON.parse(fs.readFileSync(path, "utf-8"));
-      if (Array.isArray(parsed)) {
-        let discarded = 0;
-        for (const name of parsed) {
-          if (typeof name === "string" && name.length > 0) trusted.add(name);
-          else discarded += 1;
-        }
-        if (discarded > 0) {
-          chunkRNXXYF22_cjs.diag(
-            `[theokit-sdk] WARN: ${path} contains ${discarded} non-string entr${discarded === 1 ? "y" : "ies"} \u2014 discarded (entries must be plugin-name strings)
-`
-          );
-        }
-      } else {
-        chunkRNXXYF22_cjs.diag(
-          `[theokit-sdk] WARN: ${path} is not a JSON array \u2014 trusting NO provider plugins (fail-closed)
-`
-        );
-      }
-    } catch {
-      chunkRNXXYF22_cjs.diag(
-        `[theokit-sdk] WARN: ${path} is not valid JSON \u2014 trusting NO provider plugins (fail-closed)
-`
-      );
-    }
-  }
+function readTrustedNames() {
+  const trusted = new Set(readTrustArray(trustFilePath(), PROVIDER_TRUST));
   for (const name of (process.env.THEOKIT_TRUSTED_PROVIDERS ?? "").split(",")) {
     const trimmed = name.trim();
     if (trimmed.length > 0) trusted.add(trimmed);
   }
   return trusted;
 }
+var PROVIDER_TRUST = {
+  subject: "provider plugins",
+  entries: "plugin-name strings"
+};
+function readTrustArray(path, shape) {
+  if (!fs.existsSync(path)) return [];
+  let parsed;
+  try {
+    parsed = JSON.parse(fs.readFileSync(path, "utf-8"));
+  } catch {
+    chunkRNXXYF22_cjs.diag(
+      `[theokit-sdk] WARN: ${path} is not valid JSON \u2014 trusting NO ${shape.subject} (fail-closed)
+`
+    );
+    return [];
+  }
+  if (!Array.isArray(parsed)) {
+    chunkRNXXYF22_cjs.diag(
+      `[theokit-sdk] WARN: ${path} is not a JSON array \u2014 trusting NO ${shape.subject} (fail-closed)
+`
+    );
+    return [];
+  }
+  const names = parsed.filter(
+    (name) => typeof name === "string" && name.length > 0
+  );
+  const discarded = parsed.length - names.length;
+  if (discarded > 0) {
+    chunkRNXXYF22_cjs.diag(
+      `[theokit-sdk] WARN: ${path} contains ${discarded} non-string entr${discarded === 1 ? "y" : "ies"} \u2014 discarded (entries must be ${shape.entries})
+`
+    );
+  }
+  return names;
+}
+
+// src/internal/providers/discovery.ts
+var discoveryState = chunkNVXXWAU7_cjs.globalSingleton("theokit-sdk.providers.discovered", () => ({
+  loaded: /* @__PURE__ */ new Set(),
+  warned: /* @__PURE__ */ new Set()
+}));
+function pluginsRoot() {
+  return path.join(os.homedir(), ".theokit", "plugins", "model-providers");
+}
 async function discoverProviderPlugins() {
-  if (discoveryState.done) return;
-  discoveryState.done = true;
   const root = pluginsRoot();
   if (!fs.existsSync(root)) return;
   let entries;
@@ -80,18 +87,25 @@ async function discoverProviderPlugins() {
   } catch {
     return;
   }
-  const trusted = loadTrustedNames();
+  const trusted = readTrustedNames();
   for (const entry of entries) {
+    if (discoveryState.loaded.has(entry)) continue;
     if (!trusted.has(entry)) {
-      chunkRNXXYF22_cjs.diag(
-        `[theokit-sdk] WARN: provider plugin "${entry}" is present but NOT trusted \u2014 skipped. To trust it, add "${entry}" to ${trustFilePath()} (JSON array of names) or THEOKIT_TRUSTED_PROVIDERS (comma-separated), then restart the process.
-`
-      );
+      warnUntrusted(entry);
       continue;
     }
+    discoveryState.loaded.add(entry);
     await loadOne(path.join(root, entry), entry);
   }
 }
+function warnUntrusted(entry) {
+  if (discoveryState.warned.has(entry)) return;
+  discoveryState.warned.add(entry);
+  chunkRNXXYF22_cjs.diag(
+    `[theokit-sdk] WARN: provider plugin "${entry}" is present but NOT trusted \u2014 skipped. To trust it, add "${entry}" to ${trustFilePath()} (JSON array of names) or THEOKIT_TRUSTED_PROVIDERS (comma-separated).
+`
+  );
+}
 async function loadOne(dir, entryName) {
   for (const ext of ["index.mjs", "index.js"]) {
     const indexPath = path.join(dir, ext);
@@ -102,7 +116,7 @@ async function loadOne(dir, entryName) {
       if (plugin !== null && typeof plugin === "object" && plugin.kind === "model-provider") {
         const profile = plugin.profile;
         if (profile !== void 0 && typeof profile === "object") {
-          chunkS46WJTDL_cjs.registerProvider(profile);
+          chunk4TEGFMSP_cjs.registerProvider(profile);
         }
       }
       return;
@@ -788,7 +802,7 @@ async function resolveBedrockToken(region) {
     return cachedToken.value;
   }
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-LSWHDOCL.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-SNVYOX46.cjs', document.baseURI).href)));
     const gen = r("@aws/bedrock-token-generator");
     if (typeof gen.getToken !== "function") return void 0;
     const providers = r("@aws-sdk/credential-providers");
@@ -822,10 +836,10 @@ var BedrockAnthropicClient = class {
     );
   }
   async *stream(request, signal) {
-    const region = chunkS46WJTDL_cjs.inferRegionFromModelId(request.model) ?? process.env.AWS_REGION ?? "us-east-1";
+    const region = chunk4TEGFMSP_cjs.inferRegionFromModelId(request.model) ?? process.env.AWS_REGION ?? "us-east-1";
     const token = await this.resolveTokenOrThrow(region);
-    const bareModel = chunkS46WJTDL_cjs.stripBedrockPrefix(request.model);
-    const baseUrl = this.options.baseUrl ?? chunkS46WJTDL_cjs.resolveBedrockBaseUrl(request.model);
+    const bareModel = chunk4TEGFMSP_cjs.stripBedrockPrefix(request.model);
+    const baseUrl = this.options.baseUrl ?? chunk4TEGFMSP_cjs.resolveBedrockBaseUrl(request.model);
     const endpoint = `/model/${encodeURIComponent(bareModel)}/invoke`;
     const url = `${baseUrl}${endpoint}`;
     const response = await postAnthropicRequest({
@@ -2677,7 +2691,7 @@ async function resolveVertexAccessToken() {
 async function getAuthClientOrThrow() {
   let mod;
   try {
-    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-LSWHDOCL.cjs', document.baseURI).href)));
+    const r = module$1.createRequire((typeof document === 'undefined' ? require('u' + 'rl').pathToFileURL(__filename).href : (_documentCurrentScript && _documentCurrentScript.tagName.toUpperCase() === 'SCRIPT' && _documentCurrentScript.src || new URL('chunk-SNVYOX46.cjs', document.baseURI).href)));
     mod = r("google-auth-library");
   } catch (err) {
     const isModuleMissing = err instanceof Error && (err.message.includes("Cannot find module") || err.code === "MODULE_NOT_FOUND");
@@ -2738,8 +2752,8 @@ var VertexAnthropicClient = class {
     const projectId = this.resolveProjectOrThrow();
     const location = this.options.location ?? resolveVertexLocation();
     const accessToken = await this.resolveTokenOrThrow();
-    const baseUrl = chunkS46WJTDL_cjs.resolveVertexBaseUrl({ projectId, location, modelDialect: "anthropic" });
-    const bareModel = chunkS46WJTDL_cjs.stripVertexPrefix(request.model);
+    const baseUrl = chunk4TEGFMSP_cjs.resolveVertexBaseUrl({ projectId, location, modelDialect: "anthropic" });
+    const bareModel = chunk4TEGFMSP_cjs.stripVertexPrefix(request.model);
     const endpoint = `/models/${encodeURIComponent(bareModel)}:rawPredict`;
     const url = `${baseUrl}${endpoint}`;
     const response = await postAnthropicRequest({
@@ -2788,7 +2802,7 @@ var VertexGeminiClient = class {
         { code: "auth_failed" }
       );
     }
-    const baseUrl = chunkS46WJTDL_cjs.resolveVertexBaseUrl({ projectId, location, modelDialect: "gemini" });
+    const baseUrl = chunk4TEGFMSP_cjs.resolveVertexBaseUrl({ projectId, location, modelDialect: "gemini" });
     const url = `${baseUrl}/chat/completions`;
     const innerFetch = chunkEHD25JBZ_cjs.boundFetch(this.options.fetch);
     const rewriteFetch = (_input, init) => innerFetch(url, init);
@@ -2810,7 +2824,7 @@ var VertexRouterClient = class {
   options;
   name = "vertex";
   async *stream(request, signal) {
-    const dialect = chunkS46WJTDL_cjs.inferModelDialect(request.model);
+    const dialect = chunk4TEGFMSP_cjs.inferModelDialect(request.model);
     if (dialect === "anthropic") {
       const inner2 = new VertexAnthropicClient(this.options);
       return yield* inner2.stream(request, signal);
@@ -2822,7 +2836,7 @@ var VertexRouterClient = class {
 
 // src/internal/llm/router.ts
 function resolveProviderChain(options) {
-  chunkS46WJTDL_cjs.registerBuiltins();
+  chunk4TEGFMSP_cjs.registerBuiltins();
   return buildChain(options);
 }
 function buildChain(options) {
@@ -2839,7 +2853,7 @@ function buildChain(options) {
   addClient(options.primary, options.baseUrl);
   for (const fallback of options.fallback ?? []) addClient(fallback);
   if (clients.length === 0) {
-    if (chunkS46WJTDL_cjs.getProviderProfile(normalizeProviderName(options.primary)) === void 0) {
+    if (chunk4TEGFMSP_cjs.getProviderProfile(normalizeProviderName(options.primary)) === void 0) {
       throw new chunkCEGU5AVD_cjs.ConfigurationError(unregisteredProviderMessage(options.primary), {
         code: "provider_unresolved"
       });
@@ -2856,7 +2870,7 @@ function normalizeProviderName(name) {
 }
 function unregisteredProviderMessage(name) {
   const normalized = normalizeProviderName(name);
-  const caseOnlyMatch = chunkS46WJTDL_cjs.listProviders().find(
+  const caseOnlyMatch = chunk4TEGFMSP_cjs.listProviders().find(
     (profile) => normalizeProviderName(profile.name) === normalized
   );
   if (caseOnlyMatch !== void 0) {
@@ -2864,11 +2878,11 @@ function unregisteredProviderMessage(name) {
   }
   const aliasMessage = caseOnlyAliasMessage(name, normalized);
   if (aliasMessage !== void 0) return aliasMessage;
-  const registered = chunkS46WJTDL_cjs.listProviders().map((profile) => profile.name).sort((a, b) => a.localeCompare(b)).join(", ");
+  const registered = chunk4TEGFMSP_cjs.listProviders().map((profile) => profile.name).sort((a, b) => a.localeCompare(b)).join(", ");
   return `No provider client could be resolved: "${name}" is not a known provider. Registered providers: ${registered}.`;
 }
 function caseOnlyAliasMessage(name, normalized) {
-  for (const profile of chunkS46WJTDL_cjs.listProviders()) {
+  for (const profile of chunk4TEGFMSP_cjs.listProviders()) {
     const alias = profile.aliases?.find((entry) => normalizeProviderName(entry) === normalized);
     if (alias === void 0) continue;
     return `No provider client could be resolved: "${name}" matches the alias "${alias}" of the registered provider "${profile.name}" only when case is ignored, and routes look provider names up in lowercase. Register the alias as "${normalized}", or route to "${profile.name}".`;
@@ -2876,7 +2890,7 @@ function caseOnlyAliasMessage(name, normalized) {
   return void 0;
 }
 function buildTransport(name, routerOptions, perCallBaseUrl) {
-  const baseProfile = chunkS46WJTDL_cjs.getProviderProfile(name);
+  const baseProfile = chunk4TEGFMSP_cjs.getProviderProfile(name);
   if (baseProfile === void 0) return void 0;
   const profile = routerOptions.extractToolCallsFromContent === true && baseProfile.extractToolCallsFromContent !== true ? { ...baseProfile, extractToolCallsFromContent: true } : baseProfile;
   const resilience = routerOptions.onRateLimit !== void 0 ? { onRateLimit: routerOptions.onRateLimit } : {};
@@ -2971,7 +2985,7 @@ function warnUnknownProvidersInApiKeys(apiKeys) {
   if (apiKeys === void 0) return;
   for (const name of Object.keys(apiKeys)) {
     if (warnedProviders.has(name)) continue;
-    const profile = chunkS46WJTDL_cjs.getProviderProfile(name);
+    const profile = chunk4TEGFMSP_cjs.getProviderProfile(name);
     if (profile === void 0) {
       warnedProviders.add(name);
       chunkRNXXYF22_cjs.diag(
@@ -3146,7 +3160,7 @@ function checkProviderPrefix(key, provider) {
 function registerPluginProviderProfiles(entries) {
   let registered = 0;
   for (const entry of entries) {
-    chunkS46WJTDL_cjs.registerProvider(entry.profile);
+    chunk4TEGFMSP_cjs.registerProvider(entry.profile);
     registered += 1;
   }
   return registered;
@@ -3170,7 +3184,7 @@ var AMBIENT_STORE = {
 };
 function isStoredOAuthAvailable(env = process.env) {
   try {
-    return chunkQISSETTG_cjs.readStoredOAuth(AMBIENT_STORE, env) !== void 0;
+    return chunk5645PMVU_cjs.readStoredOAuth(AMBIENT_STORE, env) !== void 0;
   } catch {
     return false;
   }
@@ -3230,7 +3244,7 @@ function shouldUseRealLocalRuntime(apiKey) {
 function inferProviderFromApiKey(apiKey) {
   const provider = chunkFRITRLZQ_cjs.providerFromApiKeyPrefix(apiKey);
   if (provider === void 0) return void 0;
-  return chunkS46WJTDL_cjs.getProviderProfile(provider) === void 0 ? void 0 : provider;
+  return chunk4TEGFMSP_cjs.getProviderProfile(provider) === void 0 ? void 0 : provider;
 }
 function detectPrimaryProvider() {
   if (process.env.ANTHROPIC_API_KEY !== void 0 && process.env.ANTHROPIC_API_KEY.length > 0) {
@@ -3257,7 +3271,7 @@ function warnProviderPrecedenceOnce(asked, used) {
 }
 var pluginProvidersAnnounced = false;
 function resolveRunProvider(options) {
-  chunkS46WJTDL_cjs.registerBuiltins();
+  chunk4TEGFMSP_cjs.registerBuiltins();
   const profiles = options.pluginManager?.aggregated.providerProfiles ?? [];
   const registered = registerPluginProviderProfiles(profiles);
   if (registered > 0 && !pluginProvidersAnnounced) {
@@ -3267,7 +3281,7 @@ function resolveRunProvider(options) {
 `);
   }
   const parsedModel = chunk3EE6LVWT_cjs.parseModelId(options.model?.id);
-  const modelInferredProvider = parsedModel.provider !== void 0 && chunkS46WJTDL_cjs.getProviderProfile(parsedModel.provider) !== void 0 ? parsedModel.provider : void 0;
+  const modelInferredProvider = parsedModel.provider !== void 0 && chunk4TEGFMSP_cjs.getProviderProfile(parsedModel.provider) !== void 0 ? parsedModel.provider : void 0;
   const keyInferredProvider = inferProviderFromApiKey(options.agentOptions.apiKey);
   const primary = options.agentOptions.providers?.routes?.[0]?.provider ?? keyInferredProvider ?? modelInferredProvider ?? detectPrimaryProvider();
   warnProviderPrecedenceOnce(modelInferredProvider, primary);
@@ -3407,9 +3421,9 @@ function resolveSummarizerRoute(opts) {
 }
 function buildDefaultSummarizer(opts) {
   return async (messages) => {
-    chunkS46WJTDL_cjs.registerBuiltins();
+    chunk4TEGFMSP_cjs.registerBuiltins();
     const modelPrefix = opts.agentModel.includes("/") ? opts.agentModel.slice(0, opts.agentModel.indexOf("/")) : void 0;
-    const prefixProfile = modelPrefix !== void 0 ? chunkS46WJTDL_cjs.getProviderProfile(modelPrefix) : void 0;
+    const prefixProfile = modelPrefix !== void 0 ? chunk4TEGFMSP_cjs.getProviderProfile(modelPrefix) : void 0;
     const prefixUsable = prefixProfile !== void 0 && (prefixProfile.authType !== "api_key" || prefixProfile.envVars.some((v) => (process.env[v] ?? "").length > 0));
     const route = resolveSummarizerRoute({
       keyProvider: inferProviderFromApiKey(opts.apiKey),
@@ -3505,6 +3519,7 @@ exports.normalizeUsage = normalizeUsage;
 exports.parseSseStream = parseSseStream;
 exports.presentProviderCredentialEnvVars = presentProviderCredentialEnvVars;
 exports.readErrorResponseBody = readErrorResponseBody;
+exports.readTrustArray = readTrustArray;
 exports.relayStream = relayStream;
 exports.renderToolResultContentText = renderToolResultContentText;
 exports.resolveProviderChain = resolveProviderChain;
@@ -3513,7 +3528,8 @@ exports.resolveSummarizerRoute = resolveSummarizerRoute;
 exports.shouldAutoCompact = shouldAutoCompact;
 exports.shouldUseFixtureMode = shouldUseFixtureMode;
 exports.shouldUseRealLocalRuntime = shouldUseRealLocalRuntime;
+exports.trustFilePath = trustFilePath;
 exports.tryFirstEvent = tryFirstEvent;
 exports.validateApiKeyShape = validateApiKeyShape;
-//# sourceMappingURL=chunk-LSWHDOCL.cjs.map
-//# sourceMappingURL=chunk-LSWHDOCL.cjs.map
+//# sourceMappingURL=chunk-SNVYOX46.cjs.map
+//# sourceMappingURL=chunk-SNVYOX46.cjs.map