@truefoundry/ai-gateway-sdk 0.0.0-stage → 0.0.2

package/dist/types/shared.d.ts

@@ -0,0 +1,116 @@
+/**
+ * ================================
+ * Inherited upstream file
+ * ================================
+ */
+/**
+ * A filter used to compare a specified attribute key to a given value using a
+ * defined comparison operation.
+ */
+export interface ComparisonFilter {
+    /**
+     * The key to compare against the value.
+     */
+    key: string;
+    /**
+     * Specifies the comparison operator: `eq`, `ne`, `gt`, `gte`, `lt`, `lte`.
+     *
+     * - `eq`: equals
+     * - `ne`: not equal
+     * - `gt`: greater than
+     * - `gte`: greater than or equal
+     * - `lt`: less than
+     * - `lte`: less than or equal
+     */
+    type: 'eq' | 'ne' | 'gt' | 'gte' | 'lt' | 'lte';
+    /**
+     * The value to compare against the attribute key; supports string, number, or
+     * boolean types.
+     */
+    value: string | number | boolean;
+}
+/**
+ * Combine multiple filters using `and` or `or`.
+ */
+export interface CompoundFilter {
+    /**
+     * Array of filters to combine. Items can be `ComparisonFilter` or
+     * `CompoundFilter`.
+     */
+    filters: Array<ComparisonFilter | unknown>;
+    /**
+     * Type of operation: `and` or `or`.
+     */
+    type: 'and' | 'or';
+}
+/**
+ * Set of 16 key-value pairs that can be attached to an object. This can be useful
+ * for storing additional information about the object in a structured format, and
+ * querying for objects via API or the dashboard.
+ *
+ * Keys are strings with a maximum length of 64 characters. Values are strings with
+ * a maximum length of 512 characters.
+ */
+export type Metadata = Record<string, string>;
+/**
+ * **o-series models only**
+ *
+ * Configuration options for
+ * [reasoning models](https://platform.openai.com/docs/guides/reasoning).
+ */
+export interface Reasoning {
+    /**
+     * **o-series models only**
+     *
+     * Constrains effort on reasoning for
+     * [reasoning models](https://platform.openai.com/docs/guides/reasoning). Currently
+     * supported values are `low`, `medium`, and `high`. Reducing reasoning effort can
+     * result in faster responses and fewer tokens used on reasoning in a response.
+     */
+    effort: ReasoningEffort | null;
+    /**
+     * **o-series models only**
+     *
+     * A summary of the reasoning performed by the model. This can be useful for
+     * debugging and understanding the model's reasoning process. One of `concise` or
+     * `detailed`.
+     */
+    generate_summary?: 'concise' | 'detailed' | null;
+}
+/**
+ * **o-series models only**
+ *
+ * Constrains effort on reasoning for
+ * [reasoning models](https://platform.openai.com/docs/guides/reasoning). Currently
+ * supported values are `low`, `medium`, and `high`. Reducing reasoning effort can
+ * result in faster responses and fewer tokens used on reasoning in a response.
+ */
+export type ReasoningEffort = 'low' | 'medium' | 'high' | null;
+/**
+ * Universal reasoning effort parameter that works across all providers
+ */
+export type UniversalReasoningEffort = 'minimal' | 'low' | 'medium' | 'high';
+/**
+ * Default response format. Used to generate text responses.
+ */
+export interface ResponseFormatText {
+    /**
+     * The type of response format being defined. Always `text`.
+     */
+    type: 'text';
+}
+/**
+ * JSON object response format. An older method of generating JSON responses. Using
+ * `json_schema` is recommended for models that support it. Note that the model
+ * will not generate JSON without a system or user message instructing it to do so.
+ */
+export interface ResponseFormatJSONObject {
+    /**
+     * The type of response format being defined. Always `json_object`.
+     */
+    type: 'json_object';
+}
+export interface CursorPageParams {
+    after?: string;
+    limit?: number;
+}

package/dist/types/shared.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=shared.js.map

package/dist/types/shared.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.js","sourceRoot":"","sources":["../../src/types/shared.ts"],"names":[],"mappings":""}

package/dist/utils/abortSignals.d.ts

@@ -0,0 +1,4 @@
+/**
+ * Merge AbortSignals for same-target fetch (client cancel + TTFT + per-request timeout).
+ */
+export declare function mergeAbortSignals(signals: AbortSignal[]): AbortSignal;

package/dist/utils/abortSignals.js

@@ -0,0 +1,7 @@
+/**
+ * Merge AbortSignals for same-target fetch (client cancel + TTFT + per-request timeout).
+ */
+export function mergeAbortSignals(signals) {
+    return AbortSignal.any(signals);
+}
+//# sourceMappingURL=abortSignals.js.map

package/dist/utils/abortSignals.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abortSignals.js","sourceRoot":"","sources":["../../src/utils/abortSignals.ts"],"names":[],"mappings":"AAAA;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAsB;IACtD,OAAO,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;AAClC,CAAC"}

package/dist/utils/abortUtils.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Abort helpers shared by SSE and AWS event-stream pumps.
+ */
+export declare function isAbortError(err: unknown): boolean;
+export declare function throwIfAborted(signal: AbortSignal | undefined): void;

package/dist/utils/abortUtils.js

@@ -0,0 +1,20 @@
+/**
+ * Abort helpers shared by SSE and AWS event-stream pumps.
+ */
+export function isAbortError(err) {
+    if (err instanceof Error && err.name === 'AbortError')
+        return true;
+    if (typeof DOMException !== 'undefined' && err instanceof DOMException && err.name === 'AbortError') {
+        return true;
+    }
+    return false;
+}
+export function throwIfAborted(signal) {
+    if (!signal?.aborted)
+        return;
+    const reason = signal.reason;
+    if (reason instanceof Error)
+        throw reason;
+    throw new DOMException('The operation was aborted.', 'AbortError');
+}
+//# sourceMappingURL=abortUtils.js.map

package/dist/utils/abortUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abortUtils.js","sourceRoot":"","sources":["../../src/utils/abortUtils.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,MAAM,UAAU,YAAY,CAAC,GAAY;IACvC,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY;QAAE,OAAO,IAAI,CAAC;IACnE,IAAI,OAAO,YAAY,KAAK,WAAW,IAAI,GAAG,YAAY,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;QACpG,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAA+B;IAC5D,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO;IAC7B,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;IAC7B,IAAI,MAAM,YAAY,KAAK;QAAE,MAAM,MAAM,CAAC;IAC1C,MAAM,IAAI,YAAY,CAAC,4BAA4B,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC"}

package/dist/utils/audioUtils.d.ts

@@ -0,0 +1,5 @@
+/**
+ * Convert PCM16 data to WAV format
+ * Raw PCM16 audio needs to be wrapped in a WAV header for playback
+ */
+export declare function convertPcm16ToWav(pcmData: Buffer, sampleRate?: number, channels?: number): Uint8Array;

package/dist/utils/audioUtils.js

@@ -0,0 +1,50 @@
+/**
+ * Convert PCM16 data to WAV format
+ * Raw PCM16 audio needs to be wrapped in a WAV header for playback
+ */
+export function convertPcm16ToWav(pcmData, sampleRate = 24000, channels = 1) {
+    // WAV header parameters
+    const byteRate = sampleRate * channels * 2; // 2 bytes per sample (16-bit)
+    const blockAlign = channels * 2;
+    const dataSize = pcmData.length;
+    const fileSize = 36 + dataSize;
+    // Create WAV header
+    const wavHeader = Buffer.alloc(44);
+    let offset = 0;
+    // RIFF header
+    wavHeader.write('RIFF', offset);
+    offset += 4;
+    wavHeader.writeUInt32LE(fileSize, offset);
+    offset += 4;
+    wavHeader.write('WAVE', offset);
+    offset += 4;
+    // fmt chunk
+    wavHeader.write('fmt ', offset);
+    offset += 4;
+    wavHeader.writeUInt32LE(16, offset); // Subchunk1 Size (PCM)
+    offset += 4;
+    wavHeader.writeUInt16LE(1, offset); // Audio Format (PCM)
+    offset += 2;
+    wavHeader.writeUInt16LE(channels, offset); // Number of Channels
+    offset += 2;
+    wavHeader.writeUInt32LE(sampleRate, offset); // Sample Rate
+    offset += 4;
+    wavHeader.writeUInt32LE(byteRate, offset); // Byte Rate
+    offset += 4;
+    wavHeader.writeUInt16LE(blockAlign, offset); // Block Align
+    offset += 2;
+    wavHeader.writeUInt16LE(16, offset); // Bits per Sample
+    offset += 2;
+    // data chunk
+    wavHeader.write('data', offset);
+    offset += 4;
+    wavHeader.writeUInt32LE(dataSize, offset); // Subchunk2 Size
+    // Convert Buffer to Uint8Array for type compatibility
+    // Buffer.concat accepts Buffer[] but TypeScript types expect Uint8Array[]
+    // Buffer extends Uint8Array, so this is safe - use type assertion to work around TS strictness
+    const buffers = [wavHeader, pcmData];
+    const combinedBuffer = Buffer.concat(buffers);
+    // Use the underlying ArrayBuffer to create Uint8Array
+    return new Uint8Array(combinedBuffer.buffer, combinedBuffer.byteOffset, combinedBuffer.byteLength);
+}
+//# sourceMappingURL=audioUtils.js.map

package/dist/utils/audioUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"audioUtils.js","sourceRoot":"","sources":["../../src/utils/audioUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,aAAqB,KAAK,EAAE,WAAmB,CAAC;IACjG,wBAAwB;IACxB,MAAM,QAAQ,GAAG,UAAU,GAAG,QAAQ,GAAG,CAAC,CAAC,CAAC,8BAA8B;IAC1E,MAAM,UAAU,GAAG,QAAQ,GAAG,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC;IAChC,MAAM,QAAQ,GAAG,EAAE,GAAG,QAAQ,CAAC;IAE/B,oBAAoB;IACpB,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACnC,IAAI,MAAM,GAAG,CAAC,CAAC;IAEf,cAAc;IACd,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,CAAC,CAAC;IAEZ,YAAY;IACZ,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,uBAAuB;IAC5D,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB;IACzD,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,qBAAqB;IAChE,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc;IAC3D,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,YAAY;IACvD,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC,cAAc;IAC3D,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,kBAAkB;IACvD,MAAM,IAAI,CAAC,CAAC;IAEZ,aAAa;IACb,SAAS,CAAC,KAAK,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,CAAC,CAAC;IACZ,SAAS,CAAC,aAAa,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,iBAAiB;IAE5D,sDAAsD;IACtD,0EAA0E;IAC1E,+FAA+F;IAC/F,MAAM,OAAO,GAAa,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,cAAc,GAAI,MAAM,CAAC,MAAkD,CAC/E,OAA2C,CAC5C,CAAC;IACF,sDAAsD;IACtD,OAAO,IAAI,UAAU,CAAC,cAAc,CAAC,MAAM,EAAE,cAAc,CAAC,UAAU,EAAE,cAAc,CAAC,UAAU,CAAC,CAAC;AACrG,CAAC"}

package/dist/utils/awsEventStreamEncoder.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Encode a single Bedrock Converse stream event as an AWS binary event stream message.
+ *
+ * @param eventType - The `:event-type` header value (e.g. 'messageStart', 'contentBlockDelta')
+ * @param payload - JSON-serializable event payload
+ * @returns Binary frame with CRC32 checksums that AWS SDKs will validate
+ */
+export declare function encodeEventStreamMessage(eventType: string, payload: any): Uint8Array;
+/**
+ * Concatenate multiple binary frames into a single Uint8Array.
+ */
+export declare function concatFrames(frames: Uint8Array[]): Uint8Array;

package/dist/utils/awsEventStreamEncoder.js

@@ -0,0 +1,49 @@
+/**
+ * AWS Binary Event Stream encoder for Bedrock Converse streaming responses.
+ *
+ * Uses @smithy/eventstream-codec (the same library the AWS SDK v3 uses internally)
+ * to produce binary frames with correct CRC32 checksums that boto3 and other
+ * AWS SDKs can validate and parse.
+ *
+ * Wire format per frame:
+ *   [4B total_length][4B headers_length][4B prelude_crc]
+ *   [headers...][payload...][4B message_crc]
+ *
+ * @see https://smithy.io/2.0/aws/amazon-eventstream.html
+ */
+import { EventStreamCodec } from '@smithy/eventstream-codec';
+import { fromUtf8, toUtf8 } from '@smithy/util-utf8';
+const codec = new EventStreamCodec(toUtf8, fromUtf8);
+const textEncoder = new TextEncoder();
+/**
+ * Encode a single Bedrock Converse stream event as an AWS binary event stream message.
+ *
+ * @param eventType - The `:event-type` header value (e.g. 'messageStart', 'contentBlockDelta')
+ * @param payload - JSON-serializable event payload
+ * @returns Binary frame with CRC32 checksums that AWS SDKs will validate
+ */
+export function encodeEventStreamMessage(eventType, payload) {
+    const payloadBytes = textEncoder.encode(JSON.stringify(payload));
+    return codec.encode({
+        headers: {
+            ':message-type': { type: 'string', value: 'event' },
+            ':event-type': { type: 'string', value: eventType },
+            ':content-type': { type: 'string', value: 'application/json' },
+        },
+        body: payloadBytes,
+    });
+}
+/**
+ * Concatenate multiple binary frames into a single Uint8Array.
+ */
+export function concatFrames(frames) {
+    const totalLen = frames.reduce((sum, f) => sum + f.byteLength, 0);
+    const result = new Uint8Array(totalLen);
+    let offset = 0;
+    for (const frame of frames) {
+        result.set(frame, offset);
+        offset += frame.byteLength;
+    }
+    return result;
+}
+//# sourceMappingURL=awsEventStreamEncoder.js.map

package/dist/utils/awsEventStreamEncoder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsEventStreamEncoder.js","sourceRoot":"","sources":["../../src/utils/awsEventStreamEncoder.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,gBAAgB,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAC;AAErD,MAAM,KAAK,GAAG,IAAI,gBAAgB,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AACrD,MAAM,WAAW,GAAG,IAAI,WAAW,EAAE,CAAC;AAEtC;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,SAAiB,EAAE,OAAY;IACtE,MAAM,YAAY,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;IACjE,OAAO,KAAK,CAAC,MAAM,CAAC;QAClB,OAAO,EAAE;YACP,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,OAAO,EAAE;YACnD,aAAa,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE;YACnD,eAAe,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,kBAAkB,EAAE;SAC/D;QACD,IAAI,EAAE,YAAY;KACnB,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAoB;IAC/C,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC;IAClE,MAAM,MAAM,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC,CAAC;IACxC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,UAAU,CAAC;IAC7B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/utils/awsSigV4.d.ts

@@ -0,0 +1,2 @@
+/** SigV4-sign an HTTP request; returns the signed header map (including Authorization). */
+export declare const generateAWSHeaders: (body: Record<string, any> | string | Uint8Array | undefined, headers: Record<string, string>, url: string, method: string, awsService: string, awsRegion: string, awsAccessKeyID: string, awsSecretAccessKey: string, awsSessionToken: string | undefined) => Promise<Record<string, string>>;

package/dist/utils/awsSigV4.js

@@ -0,0 +1,49 @@
+import { Sha256 } from '@aws-crypto/sha256-js';
+import { SignatureV4 } from '@smithy/signature-v4';
+import { appendApnUserAgent } from '../globals.js';
+/** SigV4-sign an HTTP request; returns the signed header map (including Authorization). */
+export const generateAWSHeaders = async (body, headers, url, method, awsService, awsRegion, awsAccessKeyID, awsSecretAccessKey, awsSessionToken) => {
+    const urlObj = new URL(url);
+    const hostname = urlObj.hostname;
+    headers['host'] = hostname;
+    // Attribute the call to TrueFoundry's APN partner code. `user-agent` is an
+    // unsignable SigV4 header, so appending it here does not affect the signature.
+    appendApnUserAgent(headers);
+    let requestBody;
+    if (!body) {
+        requestBody = null;
+    }
+    else if (body instanceof Uint8Array || body instanceof Buffer || typeof body === 'string') {
+        requestBody = body;
+    }
+    else if (body && typeof body === 'object' && method !== 'GET') {
+        requestBody = JSON.stringify(body);
+    }
+    const queryParams = Object.fromEntries(urlObj.searchParams.entries());
+    let protocol = 'https';
+    if (urlObj.protocol) {
+        protocol = urlObj.protocol.replace(':', '');
+    }
+    const request = {
+        method: method,
+        path: urlObj.pathname,
+        protocol: protocol,
+        query: queryParams,
+        hostname: urlObj.hostname,
+        headers: headers,
+        ...(requestBody && { body: requestBody }),
+    };
+    const signer = new SignatureV4({
+        service: awsService,
+        region: awsRegion || 'us-east-1',
+        credentials: {
+            accessKeyId: awsAccessKeyID,
+            secretAccessKey: awsSecretAccessKey,
+            ...(awsSessionToken && { sessionToken: awsSessionToken }),
+        },
+        sha256: Sha256,
+    });
+    const signedResult = await signer.sign(request);
+    return signedResult.headers;
+};
+//# sourceMappingURL=awsSigV4.js.map

package/dist/utils/awsSigV4.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"awsSigV4.js","sourceRoot":"","sources":["../../src/utils/awsSigV4.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAC/C,OAAO,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AACnD,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,2FAA2F;AAC3F,MAAM,CAAC,MAAM,kBAAkB,GAAG,KAAK,EACrC,IAA2D,EAC3D,OAA+B,EAC/B,GAAW,EACX,MAAc,EACd,UAAkB,EAClB,SAAiB,EACjB,cAAsB,EACtB,kBAA0B,EAC1B,eAAmC,EACF,EAAE;IACnC,MAAM,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IACjC,OAAO,CAAC,MAAM,CAAC,GAAG,QAAQ,CAAC;IAE3B,2EAA2E;IAC3E,+EAA+E;IAC/E,kBAAkB,CAAC,OAAO,CAAC,CAAC;IAE5B,IAAI,WAAW,CAAC;IAChB,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;SAAM,IAAI,IAAI,YAAY,UAAU,IAAI,IAAI,YAAY,MAAM,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC5F,WAAW,GAAG,IAAI,CAAC;IACrB,CAAC;SAAM,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;QAChE,WAAW,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC;IAEtE,IAAI,QAAQ,GAAG,OAAO,CAAC;IACvB,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IAC9C,CAAC;IAED,MAAM,OAAO,GAAG;QACd,MAAM,EAAE,MAAM;QACd,IAAI,EAAE,MAAM,CAAC,QAAQ;QACrB,QAAQ,EAAE,QAAQ;QAClB,KAAK,EAAE,WAAW;QAClB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,OAAO,EAAE,OAAO;QAChB,GAAG,CAAC,WAAW,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;KAC1C,CAAC;IAEF,MAAM,MAAM,GAAG,IAAI,WAAW,CAAC;QAC7B,OAAO,EAAE,UAAU;QACnB,MAAM,EAAE,SAAS,IAAI,WAAW;QAChC,WAAW,EAAE;YACX,WAAW,EAAE,cAAc;YAC3B,eAAe,EAAE,kBAAkB;YACnC,GAAG,CAAC,eAAe,IAAI,EAAE,YAAY,EAAE,eAAe,EAAE,CAAC;SAC1D;QACD,MAAM,EAAE,MAAM;KACf,CAAC,CAAC;IAEH,MAAM,YAAY,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAChD,OAAO,YAAY,CAAC,OAAO,CAAC;AAC9B,CAAC,CAAC"}

package/dist/utils/azureEntraAuth.d.ts

@@ -0,0 +1,10 @@
+export interface EntraTokenResult {
+    accessToken: string;
+    expiresIn?: number;
+}
+/**
+ * Acquires an access token from Azure Entra ID using certificate-based authentication
+ * (JWT client assertion flow). Does NOT cache — callers must handle caching.
+ */
+export declare function acquireEntraCertificateToken(tenantId: string, clientId: string, certificate: string, certificateThumbprint: string, scope?: string): Promise<EntraTokenResult>;
+export declare function acquireEntraWorkloadIdentityToken(tenantId: string, clientId: string, scope?: string): Promise<EntraTokenResult>;

package/dist/utils/azureEntraAuth.js

@@ -0,0 +1,80 @@
+/**
+ * Shared Azure Entra ID certificate-based token acquisition.
+ * Used by both Azure OpenAI models and Azure guardrails plugins.
+ * Callers handle their own caching.
+ */
+import config from '../config.js';
+import { safeFetch } from '../http/index.js';
+import { hexThumbprintToBase64Url } from '../providers/utils.js';
+import { createJWT, importPrivateKey } from './jwtUtils.js';
+import { getK8sServiceAccountToken } from './k8sTokenRequest.js';
+// Fixed audience Azure Entra trusts via the federated identity credential.
+const AZURE_WIF_TOKEN_AUDIENCE = 'api://AzureADTokenExchange';
+const AZURE_WIF_K8S_TOKEN_EXPIRATION_SECONDS = 3600;
+/**
+ * Acquires an access token from Azure Entra ID using certificate-based authentication
+ * (JWT client assertion flow). Does NOT cache — callers must handle caching.
+ */
+export async function acquireEntraCertificateToken(tenantId, clientId, certificate, certificateThumbprint, scope = 'https://cognitiveservices.azure.com/.default') {
+    const x5t = hexThumbprintToBase64Url(certificateThumbprint);
+    const now = Math.floor(Date.now() / 1000);
+    const header = { alg: 'RS256', typ: 'JWT', x5t };
+    const payload = {
+        aud: `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`,
+        iss: clientId,
+        sub: clientId,
+        jti: crypto.randomUUID(),
+        nbf: now,
+        exp: now + 600,
+    };
+    const privateKey = await importPrivateKey(certificate);
+    const jwtToken = await createJWT(header, payload, privateKey);
+    const url = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`;
+    const params = new URLSearchParams({
+        client_id: clientId,
+        client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
+        client_assertion: jwtToken,
+        scope,
+        grant_type: 'client_credentials',
+    });
+    const response = await safeFetch(url, {
+        ssrf: 'guard',
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: params,
+        signal: AbortSignal.timeout(config.HTTP_CLIENT_REQUEST_TIMEOUT_MS),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Azure Entra ID certificate auth failed: ${errorText}`);
+    }
+    const data = await response.json();
+    return { accessToken: data.access_token, expiresIn: data.expires_in };
+}
+// Exchanges a K8s ServiceAccount token for an Entra token via the federated
+// client-assertion (JWT-bearer) flow. Does NOT cache — callers handle caching.
+export async function acquireEntraWorkloadIdentityToken(tenantId, clientId, scope = 'https://cognitiveservices.azure.com/.default') {
+    const clientAssertion = await getK8sServiceAccountToken(AZURE_WIF_TOKEN_AUDIENCE, AZURE_WIF_K8S_TOKEN_EXPIRATION_SECONDS);
+    const url = `https://login.microsoftonline.com/${tenantId}/oauth2/v2.0/token`;
+    const params = new URLSearchParams({
+        client_id: clientId,
+        client_assertion_type: 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer',
+        client_assertion: clientAssertion,
+        scope,
+        grant_type: 'client_credentials',
+    });
+    const response = await safeFetch(url, {
+        ssrf: 'guard',
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: params,
+        signal: AbortSignal.timeout(config.HTTP_CLIENT_REQUEST_TIMEOUT_MS),
+    });
+    if (!response.ok) {
+        const errorText = await response.text();
+        throw new Error(`Azure Entra ID workload identity auth failed: ${errorText}`);
+    }
+    const data = await response.json();
+    return { accessToken: data.access_token, expiresIn: data.expires_in };
+}
+//# sourceMappingURL=azureEntraAuth.js.map

package/dist/utils/azureEntraAuth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"azureEntraAuth.js","sourceRoot":"","sources":["../../src/utils/azureEntraAuth.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,OAAO,MAAM,MAAM,WAAW,CAAC;AAC/B,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,YAAY,CAAC;AACzD,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,2EAA2E;AAC3E,MAAM,wBAAwB,GAAG,4BAA4B,CAAC;AAC9D,MAAM,sCAAsC,GAAG,IAAI,CAAC;AAOpD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAChD,QAAgB,EAChB,QAAgB,EAChB,WAAmB,EACnB,qBAA6B,EAC7B,KAAK,GAAG,8CAA8C;IAEtD,MAAM,GAAG,GAAG,wBAAwB,CAAC,qBAAqB,CAAC,CAAC;IAC5D,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,MAAM,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC;IACjD,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,qCAAqC,QAAQ,oBAAoB;QACtE,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,QAAQ;QACb,GAAG,EAAE,MAAM,CAAC,UAAU,EAAE;QACxB,GAAG,EAAE,GAAG;QACR,GAAG,EAAE,GAAG,GAAG,GAAG;KACf,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAE9D,MAAM,GAAG,GAAG,qCAAqC,QAAQ,oBAAoB,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ;QACnB,qBAAqB,EAAE,wDAAwD;QAC/E,gBAAgB,EAAE,QAAQ;QAC1B,KAAK;QACL,UAAU,EAAE,oBAAoB;KACjC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC;KACnE,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,2CAA2C,SAAS,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,MAAM,IAAI,GAAkD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClF,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACxE,CAAC;AAED,4EAA4E;AAC5E,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,QAAgB,EAChB,QAAgB,EAChB,KAAK,GAAG,8CAA8C;IAEtD,MAAM,eAAe,GAAG,MAAM,yBAAyB,CACrD,wBAAwB,EACxB,sCAAsC,CACvC,CAAC;IAEF,MAAM,GAAG,GAAG,qCAAqC,QAAQ,oBAAoB,CAAC;IAC9E,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;QACjC,SAAS,EAAE,QAAQ;QACnB,qBAAqB,EAAE,wDAAwD;QAC/E,gBAAgB,EAAE,eAAe;QACjC,KAAK;QACL,UAAU,EAAE,oBAAoB;KACjC,CAAC,CAAC;IAEH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;QACpC,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,MAAM;QACZ,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,8BAA8B,CAAC;KACnE,CAAC,CAAC;IAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,SAAS,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QACxC,MAAM,IAAI,KAAK,CAAC,iDAAiD,SAAS,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,MAAM,IAAI,GAAkD,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IAClF,OAAO,EAAE,WAAW,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AACxE,CAAC"}

package/dist/utils/billedUsage.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Request/response billed chars, seconds, and video — same rules as live
+ * audioBillingUtils / videoRequestUtils, without Hono Context.
+ */
+import type { Endpoint } from '../providers/types.js';
+import type { TokenUsage } from '../types/executionReport.js';
+export type BilledUsageOverlay = Pick<TokenUsage, 'input_characters' | 'audio_seconds' | 'video_seconds' | 'video_resolution' | 'video_audio'>;
+export declare function countElevenLabsTtsBillableCharacters(body: Record<string, unknown>): number;
+export declare function countVertexTtsBillableCharactersFromBody(body: Record<string, unknown>): number;
+export declare function parseGoogleDurationSeconds(durationStr: unknown): number | undefined;
+export declare function extractSpeechToTextBilledSeconds(responseJson: Record<string, unknown>): number | undefined;
+export declare function billedUsageFromVeoBody(body: Record<string, unknown>): BilledUsageOverlay | undefined;
+export declare function billedUsageFromRequestResponse(args: {
+    endpoint: Endpoint;
+    provider: string;
+    requestBody: unknown;
+    responseJson?: unknown;
+}): BilledUsageOverlay | undefined;

package/dist/utils/billedUsage.js

@@ -0,0 +1,89 @@
+import { asRecord } from './jsonValue.js';
+function countCodePoints(s) {
+    return [...s].length;
+}
+function stripSsmlMarkTags(ssml) {
+    return ssml.replace(/<mark\b[^>]*>[\s\S]*?<\/mark>/gi, '').replace(/<mark\b[^>]*\/\s*>/gi, '');
+}
+export function countElevenLabsTtsBillableCharacters(body) {
+    return typeof body.text === 'string' ? countCodePoints(body.text) : 0;
+}
+export function countVertexTtsBillableCharactersFromBody(body) {
+    const inp = asRecord(body.input);
+    if (!inp)
+        return 0;
+    if (typeof inp.text === 'string')
+        return countCodePoints(inp.text);
+    if (typeof inp.ssml === 'string')
+        return countCodePoints(stripSsmlMarkTags(inp.ssml));
+    if (inp.multi_speaker_markup != null)
+        return countCodePoints(JSON.stringify(inp.multi_speaker_markup));
+    return 0;
+}
+export function parseGoogleDurationSeconds(durationStr) {
+    if (typeof durationStr !== 'string')
+        return undefined;
+    const m = durationStr.trim().match(/^([\d.]+)s$/i);
+    if (!m)
+        return undefined;
+    const n = Number.parseFloat(m[1]);
+    return Number.isFinite(n) ? n : undefined;
+}
+export function extractSpeechToTextBilledSeconds(responseJson) {
+    const v1 = parseGoogleDurationSeconds(responseJson.totalBilledTime);
+    if (v1 !== undefined)
+        return v1;
+    const meta = asRecord(responseJson.metadata);
+    if (meta) {
+        const v2 = parseGoogleDurationSeconds(meta.totalBilledDuration);
+        if (v2 !== undefined)
+            return v2;
+    }
+    if (typeof responseJson.audio_duration_secs === 'number' && Number.isFinite(responseJson.audio_duration_secs)) {
+        return responseJson.audio_duration_secs;
+    }
+    return undefined;
+}
+const DEFAULT_VIDEO_DURATION_SECONDS = 8;
+const DEFAULT_VIDEO_RESOLUTION = '720p';
+const DEFAULT_VIDEO_SAMPLE_COUNT = 1;
+const DEFAULT_VIDEO_GENERATE_AUDIO = true;
+export function billedUsageFromVeoBody(body) {
+    const p = asRecord(body.parameters);
+    if (!p || p.durationSeconds == null)
+        return undefined;
+    const durationRaw = p.durationSeconds != null ? Number(p.durationSeconds) : DEFAULT_VIDEO_DURATION_SECONDS;
+    const sampleRaw = p.sampleCount != null ? Number(p.sampleCount) : DEFAULT_VIDEO_SAMPLE_COUNT;
+    const durationSeconds = Number.isFinite(durationRaw) && durationRaw > 0 ? durationRaw : DEFAULT_VIDEO_DURATION_SECONDS;
+    const sampleCount = Number.isFinite(sampleRaw) && sampleRaw > 0 ? sampleRaw : DEFAULT_VIDEO_SAMPLE_COUNT;
+    return {
+        video_seconds: durationSeconds * sampleCount,
+        video_resolution: typeof p.resolution === 'string' && p.resolution ? p.resolution : DEFAULT_VIDEO_RESOLUTION,
+        video_audio: typeof p.generateAudio === 'boolean' ? p.generateAudio : DEFAULT_VIDEO_GENERATE_AUDIO,
+    };
+}
+export function billedUsageFromRequestResponse(args) {
+    const out = {};
+    const body = asRecord(args.requestBody);
+    const json = asRecord(args.responseJson);
+    if (args.endpoint === 'createSpeech' && body) {
+        const chars = args.provider === 'elevenlabs'
+            ? countElevenLabsTtsBillableCharacters(body)
+            : countVertexTtsBillableCharactersFromBody(body) ||
+                (typeof body.input === 'string' ? countCodePoints(body.input) : 0);
+        if (chars > 0)
+            out.input_characters = chars;
+    }
+    if ((args.endpoint === 'createTranscription' || args.endpoint === 'createTranslation') && json) {
+        const sec = extractSpeechToTextBilledSeconds(json);
+        if (sec !== undefined)
+            out.audio_seconds = sec;
+    }
+    if (body) {
+        const veo = billedUsageFromVeoBody(body);
+        if (veo)
+            Object.assign(out, veo);
+    }
+    return Object.keys(out).length > 0 ? out : undefined;
+}
+//# sourceMappingURL=billedUsage.js.map

package/dist/utils/billedUsage.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"billedUsage.js","sourceRoot":"","sources":["../../src/utils/billedUsage.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAC;AAOvC,SAAS,eAAe,CAAC,CAAS;IAChC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAY;IACrC,OAAO,IAAI,CAAC,OAAO,CAAC,iCAAiC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,sBAAsB,EAAE,EAAE,CAAC,CAAC;AACjG,CAAC;AAED,MAAM,UAAU,oCAAoC,CAAC,IAA6B;IAChF,OAAO,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,MAAM,UAAU,wCAAwC,CAAC,IAA6B;IACpF,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,CAAC;IACnB,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACnE,IAAI,OAAO,GAAG,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO,eAAe,CAAC,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;IACtF,IAAI,GAAG,CAAC,oBAAoB,IAAI,IAAI;QAAE,OAAO,eAAe,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC;IACvG,OAAO,CAAC,CAAC;AACX,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,WAAoB;IAC7D,IAAI,OAAO,WAAW,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IACnD,IAAI,CAAC,CAAC;QAAE,OAAO,SAAS,CAAC;IACzB,MAAM,CAAC,GAAG,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAClC,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,MAAM,UAAU,gCAAgC,CAAC,YAAqC;IACpF,MAAM,EAAE,GAAG,0BAA0B,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC;IACpE,IAAI,EAAE,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IAChC,MAAM,IAAI,GAAG,QAAQ,CAAC,YAAY,CAAC,QAAQ,CAAC,CAAC;IAC7C,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,EAAE,GAAG,0BAA0B,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QAChE,IAAI,EAAE,KAAK,SAAS;YAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,IAAI,OAAO,YAAY,CAAC,mBAAmB,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAC,mBAAmB,CAAC,EAAE,CAAC;QAC9G,OAAO,YAAY,CAAC,mBAAmB,CAAC;IAC1C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,MAAM,8BAA8B,GAAG,CAAC,CAAC;AACzC,MAAM,wBAAwB,GAAG,MAAM,CAAC;AACxC,MAAM,0BAA0B,GAAG,CAAC,CAAC;AACrC,MAAM,4BAA4B,GAAG,IAAI,CAAC;AAE1C,MAAM,UAAU,sBAAsB,CAAC,IAA6B;IAClE,MAAM,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IACpC,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,eAAe,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACtD,MAAM,WAAW,GAAG,CAAC,CAAC,eAAe,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,8BAA8B,CAAC;IAC3G,MAAM,SAAS,GAAG,CAAC,CAAC,WAAW,IAAI,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,0BAA0B,CAAC;IAC7F,MAAM,eAAe,GACnB,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,WAAW,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,8BAA8B,CAAC;IACjG,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,0BAA0B,CAAC;IACzG,OAAO;QACL,aAAa,EAAE,eAAe,GAAG,WAAW;QAC5C,gBAAgB,EAAE,OAAO,CAAC,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,wBAAwB;QAC5G,WAAW,EAAE,OAAO,CAAC,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,4BAA4B;KACnG,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,8BAA8B,CAAC,IAK9C;IACC,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,MAAM,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IAEzC,IAAI,IAAI,CAAC,QAAQ,KAAK,cAAc,IAAI,IAAI,EAAE,CAAC;QAC7C,MAAM,KAAK,GACT,IAAI,CAAC,QAAQ,KAAK,YAAY;YAC5B,CAAC,CAAC,oCAAoC,CAAC,IAAI,CAAC;YAC5C,CAAC,CAAC,wCAAwC,CAAC,IAAI,CAAC;gBAC9C,CAAC,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QACzE,IAAI,KAAK,GAAG,CAAC;YAAE,GAAG,CAAC,gBAAgB,GAAG,KAAK,CAAC;IAC9C,CAAC;IAED,IAAI,CAAC,IAAI,CAAC,QAAQ,KAAK,qBAAqB,IAAI,IAAI,CAAC,QAAQ,KAAK,mBAAmB,CAAC,IAAI,IAAI,EAAE,CAAC;QAC/F,MAAM,GAAG,GAAG,gCAAgC,CAAC,IAAI,CAAC,CAAC;QACnD,IAAI,GAAG,KAAK,SAAS;YAAE,GAAG,CAAC,aAAa,GAAG,GAAG,CAAC;IACjD,CAAC;IAED,IAAI,IAAI,EAAE,CAAC;QACT,MAAM,GAAG,GAAG,sBAAsB,CAAC,IAAI,CAAC,CAAC;QACzC,IAAI,GAAG;YAAE,MAAM,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;IACnC,CAAC;IAED,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC"}

package/dist/utils/deriveProviderHeaderOptions.d.ts

@@ -0,0 +1,9 @@
+import type { ProviderHeaderOptions } from '../types/options.js';
+/** Lowercase header keys once (live `Object.fromEntries(c.req.raw.headers)`). */
+export declare function toLowercaseHeaders(headers: Readonly<Record<string, unknown>>): Record<string, string>;
+/**
+ * Derives provider-specific request options without copying fields from the
+ * selected model or provider account. Provider implementations combine their
+ * slice with those entities when building the upstream request.
+ */
+export declare function deriveProviderHeaderOptions(requestHeaders: Readonly<Record<string, string>>): ProviderHeaderOptions;