@tokenite/shared 1.0.1 → 1.1.0

package/assets/providers/anthropic.svg

@@ -0,0 +1 @@
+<svg fill="#d97757" fill-rule="evenodd" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Claude</title><path d="M4.709 15.955l4.72-2.647.08-.23-.08-.128H9.2l-.79-.048-2.698-.073-2.339-.097-2.266-.122-.571-.121L0 11.784l.055-.352.48-.321.686.06 1.52.103 2.278.158 1.652.097 2.449.255h.389l.055-.157-.134-.098-.103-.097-2.358-1.596-2.552-1.688-1.336-.972-.724-.491-.364-.462-.158-1.008.656-.722.881.06.225.061.893.686 1.908 1.476 2.491 1.833.365.304.145-.103.019-.073-.164-.274-1.355-2.446-1.446-2.49-.644-1.032-.17-.619a2.97 2.97 0 01-.104-.729L6.283.134 6.696 0l.996.134.42.364.62 1.414 1.002 2.229 1.555 3.03.456.898.243.832.091.255h.158V9.01l.128-1.706.237-2.095.23-2.695.08-.76.376-.91.747-.492.584.28.48.685-.067.444-.286 1.851-.559 2.903-.364 1.942h.212l.243-.242.985-1.306 1.652-2.064.73-.82.85-.904.547-.431h1.033l.76 1.129-.34 1.166-1.064 1.347-.881 1.142-1.264 1.7-.79 1.36.073.11.188-.02 2.856-.606 1.543-.28 1.841-.315.833.388.091.395-.328.807-1.969.486-2.309.462-3.439.813-.042.03.049.061 1.549.146.662.036h1.622l3.02.225.79.522.474.638-.079.485-1.215.62-1.64-.389-3.829-.91-1.312-.329h-.182v.11l1.093 1.068 2.006 1.81 2.509 2.33.127.578-.322.455-.34-.049-2.205-1.657-.851-.747-1.926-1.62h-.128v.17l.444.649 2.345 3.521.122 1.08-.17.353-.608.213-.668-.122-1.374-1.925-1.415-2.167-1.143-1.943-.14.08-.674 7.254-.316.37-.729.28-.607-.461-.322-.747.322-1.476.389-1.924.315-1.53.286-1.9.17-.632-.012-.042-.14.018-1.434 1.967-2.18 2.945-1.726 1.845-.414.164-.717-.37.067-.662.401-.589 2.388-3.036 1.44-1.882.93-1.086-.006-.158h-.055L4.132 18.56l-1.13.146-.487-.456.061-.746.231-.243 1.908-1.312-.006.006z"/></svg>

package/assets/providers/bedrock.svg

@@ -0,0 +1 @@
+<svg fill="#ff9900" fill-rule="evenodd" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Bedrock</title><path d="M12 1L21.526 6.5V17.5L12 23L2.474 17.5V6.5L12 1ZM12 3L19.794 7.5V16.5L12 21L4.206 16.5V7.5L12 3ZM6.5 9H17.5V10.5H6.5V9ZM6.5 11.25H17.5V12.75H6.5V11.25ZM6.5 13.5H17.5V15H6.5V13.5Z"/></svg>

package/assets/providers/google.svg

@@ -0,0 +1 @@
+<svg fill-rule="evenodd" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Gemini</title><defs><linearGradient id="gemini-grad" x1="0" y1="0" x2="1" y2="1"><stop offset="0%" stop-color="#4893FC"/><stop offset="55%" stop-color="#969DFF"/><stop offset="100%" stop-color="#BD99FE"/></linearGradient></defs><path fill="url(#gemini-grad)" d="M20.616 10.835a14.147 14.147 0 01-4.45-3.001 14.111 14.111 0 01-3.678-6.452.503.503 0 00-.975 0 14.134 14.134 0 01-3.679 6.452 14.155 14.155 0 01-4.45 3.001c-.65.28-1.318.505-2.002.678a.502.502 0 000 .975c.684.172 1.35.397 2.002.677a14.147 14.147 0 014.45 3.001 14.112 14.112 0 013.679 6.453.502.502 0 00.975 0c.172-.685.397-1.351.677-2.003a14.145 14.145 0 013.001-4.45 14.113 14.113 0 016.453-3.678.503.503 0 000-.975 13.245 13.245 0 01-2.003-.678z"/></svg>

package/assets/providers/grok.svg

@@ -0,0 +1 @@
+<svg fill="#000000" fill-rule="evenodd" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>Grok</title><path d="M9.27 15.29l7.978-5.897c.391-.29.95-.177 1.137.272.98 2.369.542 5.215-1.41 7.169-1.951 1.954-4.667 2.382-7.149 1.406l-2.711 1.257c3.889 2.661 8.611 2.003 11.562-.953 2.341-2.344 3.066-5.539 2.388-8.42l.006.007c-.983-4.232.242-5.924 2.75-9.383.06-.082.12-.164.179-.248l-3.301 3.305v-.01L9.267 15.292M7.623 16.723c-2.792-2.67-2.31-6.801.071-9.184 1.761-1.763 4.647-2.483 7.166-1.425l2.705-1.25a7.808 7.808 0 00-1.829-1A8.975 8.975 0 005.984 5.83c-2.533 2.536-3.33 6.436-1.962 9.764 1.022 2.487-.653 4.246-2.34 6.022-.599.63-1.199 1.259-1.682 1.925l7.62-6.815"/></svg>

package/assets/providers/openai.svg

@@ -0,0 +1 @@
+<svg fill="#10a37f" fill-rule="evenodd" viewBox="0 0 24 24" xmlns="http://www.w3.org/2000/svg"><title>OpenAI</title><path d="M9.205 8.658v-2.26c0-.19.072-.333.238-.428l4.543-2.616c.619-.357 1.356-.523 2.117-.523 2.854 0 4.662 2.212 4.662 4.566 0 .167 0 .357-.024.547l-4.71-2.759a.797.797 0 00-.856 0l-5.97 3.473zm10.609 8.8V12.06c0-.333-.143-.57-.429-.737l-5.97-3.473 1.95-1.118a.433.433 0 01.476 0l4.543 2.617c1.309.76 2.189 2.378 2.189 3.948 0 1.808-1.07 3.473-2.76 4.163zM7.802 12.703l-1.95-1.142c-.167-.095-.239-.238-.239-.428V5.899c0-2.545 1.95-4.472 4.591-4.472 1 0 1.927.333 2.712.928L8.23 5.067c-.285.166-.428.404-.428.737v6.898zM12 15.128l-2.795-1.57v-3.33L12 8.658l2.795 1.57v3.33L12 15.128zm1.796 7.23c-1 0-1.927-.332-2.712-.927l4.686-2.712c.285-.166.428-.404.428-.737v-6.898l1.974 1.142c.167.095.238.238.238.428v5.233c0 2.545-1.974 4.472-4.614 4.472zm-5.637-5.303l-4.544-2.617c-1.308-.761-2.188-2.378-2.188-3.948A4.482 4.482 0 014.21 6.327v5.423c0 .333.143.571.428.738l5.947 3.449-1.95 1.118a.432.432 0 01-.476 0zm-.262 3.9c-2.688 0-4.662-2.021-4.662-4.519 0-.19.024-.38.047-.57l4.686 2.71c.286.167.571.167.856 0l5.97-3.448v2.26c0 .19-.07.333-.237.428l-4.543 2.616c-.619.357-1.356.523-2.117.523zm5.899 2.83a5.947 5.947 0 005.827-4.756C22.287 18.339 24 15.84 24 13.296c0-1.665-.713-3.282-1.998-4.448.119-.5.19-.999.19-1.498 0-3.401-2.759-5.947-5.946-5.947-.642 0-1.26.095-1.88.31A5.962 5.962 0 0010.205 0a5.947 5.947 0 00-5.827 4.757C1.713 5.447 0 7.945 0 10.49c0 1.666.713 3.283 1.998 4.448-.119.5-.19 1-.19 1.499 0 3.401 2.759 5.946 5.946 5.946.642 0 1.26-.095 1.88-.309a5.96 5.96 0 004.162 1.713z"/></svg>

package/dist/assets.d.ts

@@ -0,0 +1,5 @@
+export declare const sharedAssetsDir: string;
+export declare const providerIconPath: (providerId: string) => string;
+export declare const PROVIDER_ICON_URL_PATH = "/assets/providers";
+export declare const providerIconUrlPath: (providerId: string) => string;
+//# sourceMappingURL=assets.d.ts.map

package/dist/assets.js

@@ -0,0 +1,9 @@
+import { fileURLToPath } from 'node:url';
+import { dirname, join, resolve } from 'node:path';
+const here = dirname(fileURLToPath(import.meta.url));
+const packageRoot = resolve(here, '..');
+export const sharedAssetsDir = join(packageRoot, 'assets');
+export const providerIconPath = (providerId) => join(sharedAssetsDir, 'providers', `${providerId}.svg`);
+export const PROVIDER_ICON_URL_PATH = '/assets/providers';
+export const providerIconUrlPath = (providerId) => `${PROVIDER_ICON_URL_PATH}/${providerId}.svg`;
+//# sourceMappingURL=assets.js.map

package/dist/catalog/access-models.d.ts

@@ -0,0 +1,40 @@
+import { type ProviderId } from './providers/index.js';
+import { type ModelCreator } from './models/index.js';
+import { type TierId } from './tiers.js';
+import { type CapId } from './capabilities.js';
+import type { StrategyShape } from './strategy-providers.js';
+export type AccessModelPricing = {
+    readonly inputPerMillion: number;
+    readonly outputPerMillion: number;
+};
+export type AccessModel = {
+    readonly slug: string;
+    readonly displayName: string;
+    readonly creator: ModelCreator;
+    readonly creatorLogoUrl: string;
+    readonly tiers: readonly TierId[];
+    readonly capabilities: readonly CapId[];
+    readonly servedBy: readonly ProviderId[];
+    readonly callableNow: readonly ProviderId[];
+    readonly pricing: AccessModelPricing;
+};
+export type AccessTier = {
+    readonly id: TierId;
+    readonly reachable: boolean;
+    readonly recommendedModel: string | null;
+};
+export type AccessModelCatalog = {
+    readonly models: readonly AccessModel[];
+    readonly tiers: readonly AccessTier[];
+};
+/**
+ * The model catalog as seen through one access token: every model the
+ * app's strategy permits, each tagged with the providers that serve it
+ * (`servedBy`) and the subset the holder can actually run right now
+ * (`callableNow` — empty means "needs a key for one of servedBy").
+ *
+ * `tiers` is the provider-agnostic view: which capability buckets are
+ * reachable and a representative model for each.
+ */
+export declare const resolveAccessModelCatalog: (strategy: StrategyShape, availableProviders: readonly ProviderId[]) => AccessModelCatalog;
+//# sourceMappingURL=access-models.d.ts.map

package/dist/catalog/access-models.js

@@ -0,0 +1,66 @@
+import { providerName, PROVIDERS } from './providers/index.js';
+import { MODEL_GROUPS } from './models/index.js';
+import { bindingsForModel } from './bindings/index.js';
+import { tierName, TIERS } from './tiers.js';
+import { capName } from './capabilities.js';
+import { enumKeys } from '../type-utils.js';
+const unique = (items) => Array.from(new Set(items));
+const strategyAllows = (strategy, m) => {
+    switch (strategy.modelStrategy) {
+        case 'none': return false;
+        case 'any': return true;
+        case 'models': return (strategy.allowedModels ?? []).includes(m.slug);
+        case 'tier': return strategy.requiredTier !== null
+            && m.tiers.some((t) => tierName(t) === strategy.requiredTier);
+        default: return false;
+    }
+};
+const toAccessModel = (m, creator, availableProviders) => {
+    const bindings = bindingsForModel(m);
+    const servedBy = unique(bindings.map((b) => providerName(b.provider)));
+    const callableNow = servedBy.filter((p) => availableProviders.includes(p));
+    const pricingBinding = bindings.find((b) => callableNow.includes(providerName(b.provider))) ?? bindings[0];
+    return {
+        slug: m.slug,
+        displayName: m.displayName,
+        creator,
+        creatorLogoUrl: PROVIDERS[creator].logoUrl,
+        tiers: m.tiers.map(tierName),
+        capabilities: m.capabilities.map(capName),
+        servedBy,
+        callableNow,
+        pricing: {
+            inputPerMillion: (pricingBinding?.pricing.inputPerToken ?? 0) * 1_000_000,
+            outputPerMillion: (pricingBinding?.pricing.outputPerToken ?? 0) * 1_000_000,
+        },
+    };
+};
+const buildTiers = (models) => enumKeys(TIERS).map((id) => {
+    const callable = models.filter((m) => m.tiers.includes(id) && m.callableNow.length > 0);
+    return {
+        id,
+        reachable: callable.length > 0,
+        recommendedModel: callable[0]?.slug ?? null,
+    };
+});
+/**
+ * The model catalog as seen through one access token: every model the
+ * app's strategy permits, each tagged with the providers that serve it
+ * (`servedBy`) and the subset the holder can actually run right now
+ * (`callableNow` — empty means "needs a key for one of servedBy").
+ *
+ * `tiers` is the provider-agnostic view: which capability buckets are
+ * reachable and a representative model for each.
+ */
+export const resolveAccessModelCatalog = (strategy, availableProviders) => {
+    const models = [];
+    for (const group of MODEL_GROUPS) {
+        for (const m of group.models) {
+            if (strategyAllows(strategy, m)) {
+                models.push(toAccessModel(m, group.creator, availableProviders));
+            }
+        }
+    }
+    return { models, tiers: buildTiers(models) };
+};
+//# sourceMappingURL=access-models.js.map

package/dist/catalog/bindings/google.js

@@ -8,5 +8,8 @@ export const GOOGLE_BINDINGS = [
     binding(GEMINI._2_5_Pro, google, 'gemini-2.5-pro', 1.25, 10),
     binding(GEMINI._2_5_Flash, google, 'gemini-2.5-flash', 0.3, 2.5),
     binding(GEMINI._2_5_Flash_Lite, google, 'gemini-2.5-flash-lite', 0.1, 0.4),
+    // Image-gen. $0.30/M text-in, $30/M image-out (~1290 tokens/image
+    // ≈ $0.039/image). Accept the -preview alias Google still ships.
+    binding(GEMINI._2_5_Flash_Image, google, 'gemini-2.5-flash-image', 0.3, 30, ['gemini-2.5-flash-image-preview']),
 ];
 //# sourceMappingURL=google.js.map

package/dist/catalog/bindings/index.d.ts

@@ -12,7 +12,9 @@ export declare const bindingsForModel: (m: Model) => readonly ModelBinding[];
 export declare const bindingsForProvider: (p: Provider) => readonly ModelBinding[];
 export declare const findBinding: (m: Model, p: Provider) => ModelBinding | null;
 export declare const findBindingByVendorName: (providerId: ProviderId, vendorModelName: string) => ModelBinding | null;
+export declare const findBindingByVendorNameAnywhere: (vendorModelName: string) => ModelBinding | null;
 export declare const pricingFor: (providerId: ProviderId, vendorModelName: string) => Pricing;
+export declare const isVendorModelAllowed: (providerId: ProviderId, vendorModelName: string, allowedSlugs: readonly string[]) => boolean;
 export { binding } from './types.js';
 export type { ModelBinding, Pricing } from './types.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/catalog/bindings/index.js

@@ -27,10 +27,26 @@ export const findBindingByVendorName = (providerId, vendorModelName) => {
     }
     return null;
 };
+export const findBindingByVendorNameAnywhere = (vendorModelName) => {
+    for (const b of BINDINGS) {
+        if (matchesVendor(b, vendorModelName))
+            return b;
+    }
+    return null;
+};
 const DEFAULT_PRICING = {
     inputPerToken: 3 / 1_000_000,
     outputPerToken: 15 / 1_000_000,
 };
 export const pricingFor = (providerId, vendorModelName) => findBindingByVendorName(providerId, vendorModelName)?.pricing ?? DEFAULT_PRICING;
+// Allow-lists on apps are stored as Tokenite model slugs (e.g.
+// `gemini-2-5-flash`), but inbound proxy requests carry the vendor's
+// model name (e.g. `gemini-2.5-flash`) or one of its aliases. Resolve
+// the vendor name through the binding catalog and compare against the
+// slug list so allow-list enforcement actually works.
+export const isVendorModelAllowed = (providerId, vendorModelName, allowedSlugs) => {
+    const b = findBindingByVendorName(providerId, vendorModelName);
+    return b !== null && allowedSlugs.includes(b.model.slug);
+};
 export { binding } from './types.js';
 //# sourceMappingURL=index.js.map

package/dist/catalog/bindings/openai.js

@@ -3,12 +3,21 @@ import { PROVIDERS } from '../providers/index.js';
 import { GPT, OSERIES } from '../models/openai.js';
 const { openai } = PROVIDERS;
 export const OPENAI_BINDINGS = [
+    binding(GPT._5_5, openai, 'gpt-5.5', 5, 30),
+    binding(GPT._5_4_Pro, openai, 'gpt-5.4-pro', 30, 180),
+    binding(GPT._5_4, openai, 'gpt-5.4', 2.5, 15),
+    binding(GPT._5_4_Mini, openai, 'gpt-5.4-mini', 0.75, 4.5),
+    binding(GPT._5_4_Nano, openai, 'gpt-5.4-nano', 0.2, 1.25),
     binding(GPT._5, openai, 'gpt-5', 1.25, 10),
     binding(GPT._5_Mini, openai, 'gpt-5-mini', 0.25, 2),
+    binding(GPT._5_Nano, openai, 'gpt-5-nano', 0.05, 0.4),
     binding(GPT._4_1, openai, 'gpt-4.1', 2, 8),
+    binding(GPT._4_1_Mini, openai, 'gpt-4.1-mini', 0.4, 1.6),
+    binding(GPT._4_1_Nano, openai, 'gpt-4.1-nano', 0.1, 0.4),
     binding(GPT._4o, openai, 'gpt-4o', 2.5, 10),
     binding(GPT._4o_Mini, openai, 'gpt-4o-mini', 0.15, 0.6, ['gpt-4o-mini-2024-07-18']),
     binding(OSERIES.o3, openai, 'o3', 2, 8),
+    binding(OSERIES.o3_Mini, openai, 'o3-mini', 1.1, 4.4),
     binding(OSERIES.o4_Mini, openai, 'o4-mini', 1.1, 4.4),
 ];
 //# sourceMappingURL=openai.js.map

package/dist/catalog/capabilities.js

@@ -1,9 +1,15 @@
+import { enumEntries } from '../type-utils.js';
 export const CAPS = {
     vision: {},
     tools: {},
     thinking: {},
     jsonMode: {},
 };
-const CAP_NAME = new Map(Object.entries(CAPS).map(([k, v]) => [v, k]));
-export const capName = (c) => CAP_NAME.get(c);
+const CAP_NAME = new Map(enumEntries(CAPS).map(([k, v]) => [v, k]));
+export const capName = (c) => {
+    const id = CAP_NAME.get(c);
+    if (!id)
+        throw new Error('capName: unknown Cap instance');
+    return id;
+};
 //# sourceMappingURL=capabilities.js.map

package/dist/catalog/index.d.ts

@@ -5,5 +5,7 @@ export * from './models/index.js';
 export * from './bindings/index.js';
 export * from './agent-runtime.js';
 export { FLAVORS, getFlavor } from './flavors/index.js';
+export { derivedProviders, strategyAllowsProvider, providersForTier, providersForModelSlugs, type StrategyShape, } from './strategy-providers.js';
+export { resolveAccessModelCatalog, type AccessModel, type AccessTier, type AccessModelCatalog, type AccessModelPricing, } from './access-models.js';
 export type { FlavorId, FlavorHandler, UsageInfo, RequestedModelExtractor, UsageExtractor, ErrorBody, ErrorHooks, } from './flavors/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/catalog/index.js

@@ -5,4 +5,6 @@ export * from './models/index.js';
 export * from './bindings/index.js';
 export * from './agent-runtime.js';
 export { FLAVORS, getFlavor } from './flavors/index.js';
+export { derivedProviders, strategyAllowsProvider, providersForTier, providersForModelSlugs, } from './strategy-providers.js';
+export { resolveAccessModelCatalog, } from './access-models.js';
 //# sourceMappingURL=index.js.map

package/dist/catalog/models/google.d.ts

@@ -4,5 +4,6 @@ export declare const GEMINI: {
     readonly _2_5_Pro: import("./types.js").Model;
     readonly _2_5_Flash: import("./types.js").Model;
     readonly _2_5_Flash_Lite: import("./types.js").Model;
+    readonly _2_5_Flash_Image: import("./types.js").Model;
 };
 //# sourceMappingURL=google.d.ts.map

package/dist/catalog/models/google.js

@@ -7,5 +7,9 @@ export const GEMINI = defineFamily('Gemini ', {
     _2_5_Pro: [[TIERS.smart, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
     _2_5_Flash: [[TIERS.fast, TIERS.cheap], [CAPS.vision, CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
     _2_5_Flash_Lite: [[TIERS.cheap, TIERS.fast], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
+    // Image-generation variant. Accepts text/image prompts, emits images
+    // (Google counts each image as ~1290 output tokens, so per-token
+    // pricing naturally reflects per-image cost).
+    _2_5_Flash_Image: [[TIERS.fast], [CAPS.vision]],
 });
 //# sourceMappingURL=google.js.map

package/dist/catalog/models/grok.js

@@ -2,12 +2,12 @@ import { defineFamily } from './types.js';
 import { TIERS } from '../tiers.js';
 import { CAPS } from '../capabilities.js';
 export const GROK = defineFamily('Grok ', {
-    _4_1_Fast_Reasoning: [[TIERS.reasoning, TIERS.fast], [CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
-    _4_1_Fast_Non_Reasoning: [[TIERS.fast, TIERS.cheap], [CAPS.tools, CAPS.jsonMode]],
-    _4_20_Reasoning: [[TIERS.smart, TIERS.reasoning], [CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
-    _4_20_Multi_Agent: [[TIERS.smart], [CAPS.tools, CAPS.jsonMode]],
+    _4_1_Fast_Reasoning: [[TIERS.reasoning, TIERS.fast], [CAPS.vision, CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
+    _4_1_Fast_Non_Reasoning: [[TIERS.fast, TIERS.cheap], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
+    _4_20_Reasoning: [[TIERS.smart, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
+    _4_20_Multi_Agent: [[TIERS.smart], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
     Code_Fast_1: [[TIERS.cheap, TIERS.fast], [CAPS.tools, CAPS.jsonMode]],
-    _3: [[TIERS.smart], [CAPS.tools, CAPS.jsonMode]],
-    _3_Mini: [[TIERS.cheap, TIERS.fast], [CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
+    _3: [[TIERS.smart], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
+    _3_Mini: [[TIERS.cheap, TIERS.fast], [CAPS.vision, CAPS.tools, CAPS.thinking, CAPS.jsonMode]],
 });
 //# sourceMappingURL=grok.js.map

package/dist/catalog/models/openai.d.ts

@@ -1,12 +1,21 @@
 export declare const GPT: {
+    readonly _5_5: import("./types.js").Model;
+    readonly _5_4_Pro: import("./types.js").Model;
+    readonly _5_4: import("./types.js").Model;
+    readonly _5_4_Mini: import("./types.js").Model;
+    readonly _5_4_Nano: import("./types.js").Model;
     readonly _5: import("./types.js").Model;
     readonly _5_Mini: import("./types.js").Model;
+    readonly _5_Nano: import("./types.js").Model;
     readonly _4_1: import("./types.js").Model;
+    readonly _4_1_Mini: import("./types.js").Model;
+    readonly _4_1_Nano: import("./types.js").Model;
     readonly _4o: import("./types.js").Model;
     readonly _4o_Mini: import("./types.js").Model;
 };
 export declare const OSERIES: {
     readonly o3: import("./types.js").Model;
+    readonly o3_Mini: import("./types.js").Model;
     readonly o4_Mini: import("./types.js").Model;
 };
 //# sourceMappingURL=openai.d.ts.map

package/dist/catalog/models/openai.js

@@ -2,14 +2,23 @@ import { defineFamily } from './types.js';
 import { TIERS } from '../tiers.js';
 import { CAPS } from '../capabilities.js';
 export const GPT = defineFamily('GPT-', {
+    _5_5: [[TIERS.smart, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
+    _5_4_Pro: [[TIERS.smart, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
+    _5_4: [[TIERS.smart, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
+    _5_4_Mini: [[TIERS.cheap, TIERS.fast, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
+    _5_4_Nano: [[TIERS.cheap, TIERS.fast], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
     _5: [[TIERS.smart, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
     _5_Mini: [[TIERS.cheap, TIERS.fast, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
+    _5_Nano: [[TIERS.cheap, TIERS.fast, TIERS.reasoning], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
     _4_1: [[TIERS.smart], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
+    _4_1_Mini: [[TIERS.cheap, TIERS.fast], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
+    _4_1_Nano: [[TIERS.cheap, TIERS.fast], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
     _4o: [[TIERS.smart], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
     _4o_Mini: [[TIERS.cheap, TIERS.fast], [CAPS.vision, CAPS.tools, CAPS.jsonMode]],
 });
 export const OSERIES = defineFamily('', {
     o3: [[TIERS.reasoning, TIERS.smart], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
+    o3_Mini: [[TIERS.reasoning, TIERS.cheap], [CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
     o4_Mini: [[TIERS.reasoning, TIERS.cheap], [CAPS.vision, CAPS.tools, CAPS.jsonMode, CAPS.thinking]],
 });
 //# sourceMappingURL=openai.js.map

package/dist/catalog/providers/anthropic.js

@@ -2,7 +2,7 @@ import { defineProvider } from './types.js';
 export const anthropic = defineProvider({
     displayName: 'Anthropic',
     color: '#d97706',
-    logoUrl: '/providers/anthropic.svg',
+    logoUrl: '/assets/providers/anthropic.svg',
     logoStyle: 'symbol',
     flavor: 'anthropic',
     baseUrl: 'https://api.anthropic.com',

package/dist/catalog/providers/bedrock.js

@@ -9,7 +9,7 @@ const adaptToBedrock = (_flavorPath, body, model) => {
 export const bedrock = defineProvider({
     displayName: 'Bedrock',
     color: '#ff9900',
-    logoUrl: '/providers/bedrock.svg',
+    logoUrl: '/assets/providers/bedrock.svg',
     logoStyle: 'symbol',
     flavor: 'anthropic',
     baseUrl: 'https://bedrock-runtime.us-east-1.amazonaws.com',

package/dist/catalog/providers/google.js

@@ -2,7 +2,7 @@ import { defineProvider } from './types.js';
 export const google = defineProvider({
     displayName: 'Gemini',
     color: '#4285f4',
-    logoUrl: '/providers/google.svg',
+    logoUrl: '/assets/providers/google.svg',
     logoStyle: 'symbol',
     flavor: 'gemini',
     baseUrl: 'https://generativelanguage.googleapis.com',

package/dist/catalog/providers/grok.js

@@ -2,7 +2,7 @@ import { defineProvider } from './types.js';
 export const grok = defineProvider({
     displayName: 'Grok',
     color: '#000000',
-    logoUrl: '/providers/grok.svg',
+    logoUrl: '/assets/providers/grok.svg',
     logoStyle: 'symbol',
     flavor: 'openai',
     baseUrl: 'https://api.x.ai',

package/dist/catalog/providers/index.d.ts

@@ -8,7 +8,7 @@ export declare const PROVIDERS: {
     readonly bedrock: Provider;
 };
 export type ProviderId = keyof typeof PROVIDERS;
-export declare const PROVIDER_IDS: [ProviderId, ...ProviderId[]];
+export declare const PROVIDER_IDS: readonly ["anthropic" | "openai" | "bedrock" | "google" | "grok", ...("anthropic" | "openai" | "bedrock" | "google" | "grok")[]];
 export declare const providerName: (p: Provider) => ProviderId;
 export declare const getProvider: (id: ProviderId) => Provider;
 export declare const tryGetProvider: (id: string) => Provider | null;

package/dist/catalog/providers/index.js

@@ -3,6 +3,7 @@ import { openai } from './openai.js';
 import { google } from './google.js';
 import { grok } from './grok.js';
 import { bedrock } from './bedrock.js';
+import { enumKeys, enumEntries } from '../../type-utils.js';
 export { defineProvider } from './types.js';
 export const PROVIDERS = {
     anthropic,
@@ -11,11 +12,17 @@ export const PROVIDERS = {
     grok,
     bedrock,
 };
-export const PROVIDER_IDS = Object.keys(PROVIDERS);
-const PROVIDER_NAME = new Map(Object.entries(PROVIDERS).map(([k, v]) => [v, k]));
-export const providerName = (p) => PROVIDER_NAME.get(p);
+export const PROVIDER_IDS = enumKeys(PROVIDERS);
+const PROVIDER_NAME = new Map(enumEntries(PROVIDERS).map(([k, v]) => [v, k]));
+export const providerName = (p) => {
+    const id = PROVIDER_NAME.get(p);
+    if (!id)
+        throw new Error('providerName: unknown Provider instance');
+    return id;
+};
 export const getProvider = (id) => PROVIDERS[id];
-export const tryGetProvider = (id) => PROVIDERS[id] ?? null;
+const isProviderId = (id) => id in PROVIDERS;
+export const tryGetProvider = (id) => isProviderId(id) ? PROVIDERS[id] : null;
 export const listProviders = () => Object.values(PROVIDERS);
 export const guessProviderFromKey = (apiKey) => {
     for (const id of PROVIDER_IDS) {

package/dist/catalog/providers/openai.js

@@ -2,7 +2,7 @@ import { defineProvider } from './types.js';
 export const openai = defineProvider({
     displayName: 'OpenAI',
     color: '#10a37f',
-    logoUrl: '/providers/openai.svg',
+    logoUrl: '/assets/providers/openai.svg',
     logoStyle: 'symbol',
     flavor: 'openai',
     baseUrl: 'https://api.openai.com',

package/dist/catalog/strategy-providers.d.ts

@@ -0,0 +1,13 @@
+import { type ProviderId } from './providers/index.js';
+import type { ModelStrategy, RequiredTier } from '../schemas/app.js';
+export type StrategyShape = {
+    readonly modelStrategy: ModelStrategy;
+    readonly requiredTier: RequiredTier | null;
+    readonly allowedModels: readonly string[] | null;
+};
+declare const providersForTier: (t: RequiredTier) => readonly ProviderId[];
+declare const providersForModelSlugs: (slugs: readonly string[]) => readonly ProviderId[];
+export declare const derivedProviders: (s: StrategyShape) => readonly ProviderId[] | null;
+export declare const strategyAllowsProvider: (s: StrategyShape, providerId: ProviderId) => boolean;
+export { providersForTier, providersForModelSlugs };
+//# sourceMappingURL=strategy-providers.d.ts.map

package/dist/catalog/strategy-providers.js

@@ -0,0 +1,37 @@
+import { BINDINGS } from './bindings/index.js';
+import { providerName } from './providers/index.js';
+import { tierName } from './tiers.js';
+const providersForTier = (t) => {
+    const ids = new Set();
+    for (const b of BINDINGS) {
+        if (b.model.tiers.some((x) => tierName(x) === t))
+            ids.add(providerName(b.provider));
+    }
+    return Array.from(ids);
+};
+const providersForModelSlugs = (slugs) => {
+    const ids = new Set();
+    for (const b of BINDINGS) {
+        if (slugs.includes(b.model.slug))
+            ids.add(providerName(b.provider));
+    }
+    return Array.from(ids);
+};
+export const derivedProviders = (s) => {
+    if (s.modelStrategy === 'none')
+        return [];
+    if (s.modelStrategy === 'tier' && s.requiredTier)
+        return providersForTier(s.requiredTier);
+    if (s.modelStrategy === 'models' && s.allowedModels && s.allowedModels.length > 0) {
+        return providersForModelSlugs(s.allowedModels);
+    }
+    return null;
+};
+export const strategyAllowsProvider = (s, providerId) => {
+    if (s.modelStrategy === 'none')
+        return false;
+    const list = derivedProviders(s);
+    return list === null || list.includes(providerId);
+};
+export { providersForTier, providersForModelSlugs };
+//# sourceMappingURL=strategy-providers.js.map

package/dist/catalog/tiers.js

@@ -1,9 +1,15 @@
+import { enumEntries } from '../type-utils.js';
 export const TIERS = {
     cheap: {},
     fast: {},
     smart: {},
     reasoning: {},
 };
-const TIER_NAME = new Map(Object.entries(TIERS).map(([k, v]) => [v, k]));
-export const tierName = (t) => TIER_NAME.get(t);
+const TIER_NAME = new Map(enumEntries(TIERS).map(([k, v]) => [v, k]));
+export const tierName = (t) => {
+    const id = TIER_NAME.get(t);
+    if (!id)
+        throw new Error('tierName: unknown Tier instance');
+    return id;
+};
 //# sourceMappingURL=tiers.js.map

package/dist/index.d.ts

@@ -1,20 +1,22 @@
 export { type Result, ok, err, type AppError } from './result.js';
+export { enumKeys, enumValues, enumEntries, type NonEmptyKeyTuple, type NonEmptyValueTuple, type NonEmptyEntryTuple, } from './type-utils.js';
 export { providerSchema, type Provider, } from './schemas/provider.js';
 export { userSchema, createUserRequest, userResponse, type User, type CreateUserRequest, type UserResponse, } from './schemas/user.js';
-export { accountTypeSchema, accountSchema, createAccountRequest, updateAccountRequest, type AccountType, type Account, type CreateAccountRequest, type UpdateAccountRequest, } from './schemas/account.js';
+export { accountTypeSchema, accountSchema, createAccountRequest, updateAccountRequest, poolResetPeriodSchema, type AccountType, type Account, type CreateAccountRequest, type UpdateAccountRequest, type PoolResetPeriod, } from './schemas/account.js';
 export { accountRoleSchema, accountMemberSchema, hasAtLeastRole, type AccountRole, type AccountMember, } from './schemas/account-member.js';
 export { accountInvitationSchema, createInvitationRequest, invitationWithClaimUrl, type AccountInvitation, type CreateInvitationRequest, type InvitationWithClaimUrl, } from './schemas/account-invitation.js';
-export { appSchema, createAppRequest, updateAppRequest, appResponse, modelStrategySchema, tierSchema, type App, type CreateAppRequest, type UpdateAppRequest, type AppResponse, type ModelStrategy, type RequiredTier, } from './schemas/app.js';
+export { appSchema, createAppRequest, updateAppRequest, appResponse, modelStrategySchema, tierSchema, hasAtLeastOneCapability, AT_LEAST_ONE_CAPABILITY_MESSAGE, type App, type CreateAppRequest, type UpdateAppRequest, type AppResponse, type ModelStrategy, type RequiredTier, } from './schemas/app.js';
 export { apiKeySchema, addApiKeyRequest, apiKeyResponse, type ApiKey, type AddApiKeyRequest, type ApiKeyResponse, } from './schemas/api-key.js';
-export { sponsoredApiKeySchema, addSponsoredApiKeyRequest, sponsoredApiKeyResponse, sponsoredKeyConsumerSchema, type SponsoredApiKey, type AddSponsoredApiKeyRequest, type SponsoredApiKeyResponse, type SponsoredKeyConsumer, } from './schemas/sponsored-api-key.js';
+export { sponsoredApiKeySchema, addSponsoredApiKeyRequest, updateSponsoredApiKeyRequest, sponsoredApiKeyResponse, sponsoredKeyConsumerSchema, type SponsoredApiKey, type AddSponsoredApiKeyRequest, type UpdateSponsoredApiKeyRequest, type SponsoredApiKeyResponse, type SponsoredKeyConsumer, } from './schemas/sponsored-api-key.js';
 export { budgetSchema, type Budget, DEBT_TOLERANCE_USD, isBudgetAvailable, remainingBudget, } from './schemas/budget.js';
 export { accessTokenSchema, authorizeAppRequest, updateConnectionRequest, connectionResponse, type AccessToken, type AuthorizeAppRequest, type UpdateConnectionRequest, type ConnectionResponse, } from './schemas/access-token.js';
+export { TopupMessageType, AuthMessageType, topupContextResponse, topupRaiseRequest, topupRaiseResponse, topupPostMessage, topupSuccessMessage, topupCancelledMessage, fundingErrorDetails, type TopupContextResponse, type TopupRaiseRequest, type TopupRaiseResponse, type TopupPostMessage, type FundingErrorDetails, } from './schemas/topup.js';
 export { usageLogSchema, type UsageLog, PLATFORM_FEE_RATE, calculatePlatformFee, calculateTotalDebit, } from './schemas/usage.js';
 export { errorResponseSchema, errorSourceSchema, proxyErrorCodes, providerErrorCodes, apiErrorCodes, type ErrorResponse, type ErrorSource, type ProxyErrorCode, type ProviderErrorCode, type ApiErrorCode, type ErrorCode, } from './schemas/error.js';
 export { proxyUsageSchema, proxySuccessSchema, proxyResponseSchema, type ProxyUsage, type ProxySuccess, type ProxyResponse, } from './schemas/proxy-response.js';
 export { discoverySchema, type Discovery, } from './schemas/discovery.js';
 export { CliLoopbackHost, cliLoginParamsSchema, cliLoginMintRequestSchema, cliLoginMintResponseSchema, cliLoginExchangeRequestSchema, cliLoginExchangeResponseSchema, type CliLoginParams, type CliLoginMintRequest, type CliLoginMintResponse, type CliLoginExchangeRequest, type CliLoginExchangeResponse, } from './schemas/cli-login.js';
 export { requireEnv, optionalEnv } from './config.js';
-export { safeParseJson } from './parse.js';
+export { safeParseJson, safeParseJsonSchema } from './parse.js';
 export { rateLimits, ACCESS_TOKEN_LIFETIME_DAYS, OAUTH_CODE_TTL_SECONDS, TOKEN_CACHE_TTL_SECONDS } from './constants.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/index.js

@@ -1,20 +1,22 @@
 export { ok, err } from './result.js';
+export { enumKeys, enumValues, enumEntries, } from './type-utils.js';
 export { providerSchema, } from './schemas/provider.js';
 export { userSchema, createUserRequest, userResponse, } from './schemas/user.js';
-export { accountTypeSchema, accountSchema, createAccountRequest, updateAccountRequest, } from './schemas/account.js';
+export { accountTypeSchema, accountSchema, createAccountRequest, updateAccountRequest, poolResetPeriodSchema, } from './schemas/account.js';
 export { accountRoleSchema, accountMemberSchema, hasAtLeastRole, } from './schemas/account-member.js';
 export { accountInvitationSchema, createInvitationRequest, invitationWithClaimUrl, } from './schemas/account-invitation.js';
-export { appSchema, createAppRequest, updateAppRequest, appResponse, modelStrategySchema, tierSchema, } from './schemas/app.js';
+export { appSchema, createAppRequest, updateAppRequest, appResponse, modelStrategySchema, tierSchema, hasAtLeastOneCapability, AT_LEAST_ONE_CAPABILITY_MESSAGE, } from './schemas/app.js';
 export { apiKeySchema, addApiKeyRequest, apiKeyResponse, } from './schemas/api-key.js';
-export { sponsoredApiKeySchema, addSponsoredApiKeyRequest, sponsoredApiKeyResponse, sponsoredKeyConsumerSchema, } from './schemas/sponsored-api-key.js';
+export { sponsoredApiKeySchema, addSponsoredApiKeyRequest, updateSponsoredApiKeyRequest, sponsoredApiKeyResponse, sponsoredKeyConsumerSchema, } from './schemas/sponsored-api-key.js';
 export { budgetSchema, DEBT_TOLERANCE_USD, isBudgetAvailable, remainingBudget, } from './schemas/budget.js';
 export { accessTokenSchema, authorizeAppRequest, updateConnectionRequest, connectionResponse, } from './schemas/access-token.js';
+export { TopupMessageType, AuthMessageType, topupContextResponse, topupRaiseRequest, topupRaiseResponse, topupPostMessage, topupSuccessMessage, topupCancelledMessage, fundingErrorDetails, } from './schemas/topup.js';
 export { usageLogSchema, PLATFORM_FEE_RATE, calculatePlatformFee, calculateTotalDebit, } from './schemas/usage.js';
 export { errorResponseSchema, errorSourceSchema, proxyErrorCodes, providerErrorCodes, apiErrorCodes, } from './schemas/error.js';
 export { proxyUsageSchema, proxySuccessSchema, proxyResponseSchema, } from './schemas/proxy-response.js';
 export { discoverySchema, } from './schemas/discovery.js';
 export { CliLoopbackHost, cliLoginParamsSchema, cliLoginMintRequestSchema, cliLoginMintResponseSchema, cliLoginExchangeRequestSchema, cliLoginExchangeResponseSchema, } from './schemas/cli-login.js';
 export { requireEnv, optionalEnv } from './config.js';
-export { safeParseJson } from './parse.js';
+export { safeParseJson, safeParseJsonSchema } from './parse.js';
 export { rateLimits, ACCESS_TOKEN_LIFETIME_DAYS, OAUTH_CODE_TTL_SECONDS, TOKEN_CACHE_TTL_SECONDS } from './constants.js';
 //# sourceMappingURL=index.js.map

package/dist/parse.d.ts

@@ -1,2 +1,4 @@
+import type { ZodType } from 'zod';
 export declare const safeParseJson: (text: string) => Record<string, unknown> | null;
+export declare const safeParseJsonSchema: <T>(text: string, schema: ZodType<T>) => T | null;
 //# sourceMappingURL=parse.d.ts.map

package/dist/parse.js

@@ -1,12 +1,21 @@
-export const safeParseJson = (text) => {
+const parseJsonObject = (text) => {
     try {
         const parsed = JSON.parse(text);
-        if (typeof parsed === 'object' && parsed !== null)
+        if (typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)) {
             return parsed;
+        }
         return null;
     }
     catch {
         return null;
     }
 };
+export const safeParseJson = (text) => parseJsonObject(text);
+export const safeParseJsonSchema = (text, schema) => {
+    const parsed = parseJsonObject(text);
+    if (!parsed)
+        return null;
+    const result = schema.safeParse(parsed);
+    return result.success ? result.data : null;
+};
 //# sourceMappingURL=parse.js.map

package/dist/schemas/access-token.d.ts

@@ -7,6 +7,7 @@ export declare const accessTokenSchema: z.ZodObject<{
     budgetLimit: z.ZodNumber;
     budgetSpent: z.ZodDefault<z.ZodNumber>;
     isRevoked: z.ZodDefault<z.ZodBoolean>;
+    consentVersionAtIssue: z.ZodDefault<z.ZodNumber>;
     createdAt: z.ZodString;
 }, z.core.$strip>;
 export type AccessToken = z.infer<typeof accessTokenSchema>;
@@ -27,6 +28,7 @@ export declare const connectionResponse: z.ZodObject<{
     budgetLimit: z.ZodNumber;
     budgetSpent: z.ZodDefault<z.ZodNumber>;
     isRevoked: z.ZodDefault<z.ZodBoolean>;
+    consentVersionAtIssue: z.ZodDefault<z.ZodNumber>;
 }, z.core.$strip>;
 export type ConnectionResponse = z.infer<typeof connectionResponse>;
 //# sourceMappingURL=access-token.d.ts.map