@truefoundry/ai-gateway-sdk 0.0.0-stage → 0.0.2

package/dist/utils/deriveProviderHeaderOptions.js

@@ -0,0 +1,141 @@
+const TFY_HEADER_PREFIX = 'x-tfy';
+/** Lowercase header keys once (live `Object.fromEntries(c.req.raw.headers)`). */
+export function toLowercaseHeaders(headers) {
+    const out = {};
+    for (const [name, value] of Object.entries(headers)) {
+        out[name.toLowerCase()] = value == null ? '' : String(value);
+    }
+    return out;
+}
+function parseJsonObject(value) {
+    if (value === undefined)
+        return undefined;
+    try {
+        const parsed = JSON.parse(value);
+        return typeof parsed === 'object' && parsed !== null && !Array.isArray(parsed)
+            ? parsed
+            : null;
+    }
+    catch {
+        return null;
+    }
+}
+function parsePromptCache(value) {
+    if (value === undefined)
+        return undefined;
+    try {
+        const parsed = JSON.parse(value);
+        if (typeof parsed !== 'object' || parsed === null || !('type' in parsed) || typeof parsed.type !== 'string') {
+            return undefined;
+        }
+        return {
+            type: parsed.type,
+            ...('ttl' in parsed && typeof parsed.ttl === 'string' ? { ttl: parsed.ttl } : {}),
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Derives provider-specific request options without copying fields from the
+ * selected model or provider account. Provider implementations combine their
+ * slice with those entities when building the upstream request.
+ */
+export function deriveProviderHeaderOptions(requestHeaders) {
+    const headers = toLowercaseHeaders(requestHeaders);
+    const tfy = (suffix) => headers[`${TFY_HEADER_PREFIX}-${suffix}`];
+    return {
+        common: {
+            promptCache: parsePromptCache(tfy('cache-control')),
+            strictOpenAiCompliance: tfy('strict-open-ai-compliance') === 'false' ? false : undefined,
+        },
+        openai: {
+            openaiOrganization: tfy('openai-organization'),
+            openaiProject: tfy('openai-project'),
+            openaiBeta: tfy('openai-beta') || headers['openai-beta'],
+            openaiChatgptAccountId: headers['x-openai-chatgpt-account-id'],
+            openaiOriginator: headers['x-openai-originator'],
+            openaiCodexResidency: headers['x-openai-codex-residency'],
+        },
+        azure: {
+            resourceName: tfy('azure-resource-name'),
+            deploymentId: tfy('azure-deployment-id'),
+            apiVersion: tfy('azure-api-version'),
+            azureAdToken: tfy('azure-ad-token'),
+            azureAuthMode: tfy('azure-auth-mode'),
+            azureEntraClientId: tfy('azure-entra-client-id'),
+            azureEntraClientSecret: tfy('azure-entra-client-secret'),
+            azureEntraTenantId: tfy('azure-entra-tenant-id'),
+            azureModelName: tfy('azure-model-name'),
+            openaiBeta: tfy('openai-beta') || headers['openai-beta'],
+        },
+        azureAiInference: {
+            azureApiVersion: tfy('azure-api-version'),
+            azureEndpointName: tfy('azure-endpoint-name'),
+            azureFoundryUrl: tfy('azure-foundry-url'),
+            azureExtraParams: tfy('azure-extra-params'),
+        },
+        aws: {
+            awsAccessKeyId: tfy('aws-access-key-id'),
+            awsSecretAccessKey: tfy('aws-secret-access-key'),
+            awsSessionToken: tfy('aws-session-token'),
+            awsRegion: tfy('aws-region'),
+            awsRoleArn: tfy('aws-role-arn'),
+            awsAuthType: tfy('aws-auth-type'),
+            awsExternalId: tfy('aws-external-id'),
+            awsS3Bucket: tfy('aws-s3-bucket'),
+            awsS3ObjectKey: tfy('aws-s3-object-key') || tfy('provider-file-name'),
+            awsBedrockModel: tfy('aws-bedrock-model') || tfy('provider-model'),
+            awsServerSideEncryption: tfy('amz-server-side-encryption'),
+            awsServerSideEncryptionKMSKeyId: tfy('amz-server-side-encryption-aws-kms-key-id'),
+            bedrockAnthropicUseInvoke: ['true', '1'].includes(tfy('bedrock-anthropic-invoke') ?? ''),
+        },
+        awsSagemaker: {
+            amznSagemakerCustomAttributes: tfy('amzn-sagemaker-custom-attributes'),
+            amznSagemakerTargetModel: tfy('amzn-sagemaker-target-model'),
+            amznSagemakerTargetVariant: tfy('amzn-sagemaker-target-variant'),
+            amznSagemakerTargetContainerHostname: tfy('amzn-sagemaker-target-container-hostname'),
+            amznSagemakerInferenceId: tfy('amzn-sagemaker-inference-id'),
+            amznSagemakerEnableExplanations: tfy('amzn-sagemaker-enable-explanations'),
+            amznSagemakerInferenceComponent: tfy('amzn-sagemaker-inference-component'),
+            amznSagemakerSessionId: tfy('amzn-sagemaker-session-id'),
+            amznSagemakerModelName: tfy('amzn-sagemaker-model-name'),
+        },
+        vertex: {
+            vertexProjectId: tfy('vertex-project-id'),
+            vertexRegion: tfy('vertex-region'),
+            vertexStorageBucketName: tfy('vertex-storage-bucket-name'),
+            vertexServiceAccountJson: parseJsonObject(tfy('vertex-service-account-json')),
+            filename: tfy('provider-file-name'),
+            vertexModelName: tfy('provider-model'),
+            vertexModelProvider: tfy('model-provider'),
+        },
+        anthropic: {
+            anthropicBeta: tfy('anthropic-beta') || headers['anthropic-beta'],
+            anthropicBetaOverride: tfy('anthropic-beta'),
+            anthropicVersion: tfy('anthropic-version') || headers['anthropic-version'],
+        },
+        stabilityAi: {
+            stabilityClientId: tfy('stability-client-id'),
+            stabilityClientUserId: tfy('stability-client-user-id'),
+            stabilityClientVersion: tfy('stability-client-version'),
+        },
+        workersAi: {
+            workersAiAccountId: tfy('workers-ai-account-id'),
+        },
+        huggingFace: {
+            huggingfaceBaseUrl: tfy('huggingface-base-url'),
+        },
+        fireworksAi: {
+            fireworksAccountId: tfy('fireworks-account-id'),
+        },
+        snowflakeCortex: {
+            snowflakeAccount: tfy('snowflake-account'),
+        },
+        mistral: {
+            mistralFimCompletion: tfy('mistral-fim-completion'),
+        },
+    };
+}
+//# sourceMappingURL=deriveProviderHeaderOptions.js.map

package/dist/utils/deriveProviderHeaderOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deriveProviderHeaderOptions.js","sourceRoot":"","sources":["../../src/utils/deriveProviderHeaderOptions.ts"],"names":[],"mappings":"AAEA,MAAM,iBAAiB,GAAG,OAAO,CAAC;AAElC,iFAAiF;AACjF,MAAM,UAAU,kBAAkB,CAAC,OAA0C;IAC3E,MAAM,GAAG,GAA2B,EAAE,CAAC;IACvC,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,eAAe,CAAC,KAAyB;IAChD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;YAC5E,CAAC,CAAE,MAAkC;YACrC,CAAC,CAAC,IAAI,CAAC;IACX,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAyB;IACjD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC5G,OAAO,SAAS,CAAC;QACnB,CAAC;QAED,OAAO;YACL,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,GAAG,CAAC,KAAK,IAAI,MAAM,IAAI,OAAO,MAAM,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,MAAM,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAClF,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,2BAA2B,CAAC,cAAgD;IAC1F,MAAM,OAAO,GAAG,kBAAkB,CAAC,cAAc,CAAC,CAAC;IACnD,MAAM,GAAG,GAAG,CAAC,MAAc,EAAsB,EAAE,CAAC,OAAO,CAAC,GAAG,iBAAiB,IAAI,MAAM,EAAE,CAAC,CAAC;IAE9F,OAAO;QACL,MAAM,EAAE;YACN,WAAW,EAAE,gBAAgB,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YACnD,sBAAsB,EAAE,GAAG,CAAC,2BAA2B,CAAC,KAAK,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;SACzF;QACD,MAAM,EAAE;YACN,kBAAkB,EAAE,GAAG,CAAC,qBAAqB,CAAC;YAC9C,aAAa,EAAE,GAAG,CAAC,gBAAgB,CAAC;YACpC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC;YACxD,sBAAsB,EAAE,OAAO,CAAC,6BAA6B,CAAC;YAC9D,gBAAgB,EAAE,OAAO,CAAC,qBAAqB,CAAC;YAChD,oBAAoB,EAAE,OAAO,CAAC,0BAA0B,CAAC;SAC1D;QACD,KAAK,EAAE;YACL,YAAY,EAAE,GAAG,CAAC,qBAAqB,CAAC;YACxC,YAAY,EAAE,GAAG,CAAC,qBAAqB,CAAC;YACxC,UAAU,EAAE,GAAG,CAAC,mBAAmB,CAAC;YACpC,YAAY,EAAE,GAAG,CAAC,gBAAgB,CAAC;YACnC,aAAa,EAAE,GAAG,CAAC,iBAAiB,CAAC;YACrC,kBAAkB,EAAE,GAAG,CAAC,uBAAuB,CAAC;YAChD,sBAAsB,EAAE,GAAG,CAAC,2BAA2B,CAAC;YACxD,kBAAkB,EAAE,GAAG,CAAC,uBAAuB,CAAC;YAChD,cAAc,EAAE,GAAG,CAAC,kBAAkB,CAAC;YACvC,UAAU,EAAE,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,CAAC,aAAa,CAAC;SACzD;QACD,gBAAgB,EAAE;YAChB,eAAe,EAAE,GAAG,CAAC,mBAAmB,CAAC;YACzC,iBAAiB,EAAE,GAAG,CAAC,qBAAqB,CAAC;YAC7C,eAAe,EAAE,GAAG,CAAC,mBAAmB,CAAC;YACzC,gBAAgB,EAAE,GAAG,CAAC,oBAAoB,CAAC;SAC5C;QACD,GAAG,EAAE;YACH,cAAc,EAAE,GAAG,CAAC,mBAAmB,CAAC;YACxC,kBAAkB,EAAE,GAAG,CAAC,uBAAuB,CAAC;YAChD,eAAe,EAAE,GAAG,CAAC,mBAAmB,CAAC;YACzC,SAAS,EAAE,GAAG,CAAC,YAAY,CAAC;YAC5B,UAAU,EAAE,GAAG,CAAC,cAAc,CAAC;YAC/B,WAAW,EAAE,GAAG,CAAC,eAAe,CAAC;YACjC,aAAa,EAAE,GAAG,CAAC,iBAAiB,CAAC;YACrC,WAAW,EAAE,GAAG,CAAC,eAAe,CAAC;YACjC,cAAc,EAAE,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC;YACrE,eAAe,EAAE,GAAG,CAAC,mBAAmB,CAAC,IAAI,GAAG,CAAC,gBAAgB,CAAC;YAClE,uBAAuB,EAAE,GAAG,CAAC,4BAA4B,CAAC;YAC1D,+BAA+B,EAAE,GAAG,CAAC,2CAA2C,CAAC;YACjF,yBAAyB,EAAE,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,0BAA0B,CAAC,IAAI,EAAE,CAAC;SACzF;QACD,YAAY,EAAE;YACZ,6BAA6B,EAAE,GAAG,CAAC,kCAAkC,CAAC;YACtE,wBAAwB,EAAE,GAAG,CAAC,6BAA6B,CAAC;YAC5D,0BAA0B,EAAE,GAAG,CAAC,+BAA+B,CAAC;YAChE,oCAAoC,EAAE,GAAG,CAAC,0CAA0C,CAAC;YACrF,wBAAwB,EAAE,GAAG,CAAC,6BAA6B,CAAC;YAC5D,+BAA+B,EAAE,GAAG,CAAC,oCAAoC,CAAC;YAC1E,+BAA+B,EAAE,GAAG,CAAC,oCAAoC,CAAC;YAC1E,sBAAsB,EAAE,GAAG,CAAC,2BAA2B,CAAC;YACxD,sBAAsB,EAAE,GAAG,CAAC,2BAA2B,CAAC;SACzD;QACD,MAAM,EAAE;YACN,eAAe,EAAE,GAAG,CAAC,mBAAmB,CAAC;YACzC,YAAY,EAAE,GAAG,CAAC,eAAe,CAAC;YAClC,uBAAuB,EAAE,GAAG,CAAC,4BAA4B,CAAC;YAC1D,wBAAwB,EAAE,eAAe,CAAC,GAAG,CAAC,6BAA6B,CAAC,CAAC;YAC7E,QAAQ,EAAE,GAAG,CAAC,oBAAoB,CAAC;YACnC,eAAe,EAAE,GAAG,CAAC,gBAAgB,CAAC;YACtC,mBAAmB,EAAE,GAAG,CAAC,gBAAgB,CAAC;SAC3C;QACD,SAAS,EAAE;YACT,aAAa,EAAE,GAAG,CAAC,gBAAgB,CAAC,IAAI,OAAO,CAAC,gBAAgB,CAAC;YACjE,qBAAqB,EAAE,GAAG,CAAC,gBAAgB,CAAC;YAC5C,gBAAgB,EAAE,GAAG,CAAC,mBAAmB,CAAC,IAAI,OAAO,CAAC,mBAAmB,CAAC;SAC3E;QACD,WAAW,EAAE;YACX,iBAAiB,EAAE,GAAG,CAAC,qBAAqB,CAAC;YAC7C,qBAAqB,EAAE,GAAG,CAAC,0BAA0B,CAAC;YACtD,sBAAsB,EAAE,GAAG,CAAC,0BAA0B,CAAC;SACxD;QACD,SAAS,EAAE;YACT,kBAAkB,EAAE,GAAG,CAAC,uBAAuB,CAAC;SACjD;QACD,WAAW,EAAE;YACX,kBAAkB,EAAE,GAAG,CAAC,sBAAsB,CAAC;SAChD;QACD,WAAW,EAAE;YACX,kBAAkB,EAAE,GAAG,CAAC,sBAAsB,CAAC;SAChD;QACD,eAAe,EAAE;YACf,gBAAgB,EAAE,GAAG,CAAC,mBAAmB,CAAC;SAC3C;QACD,OAAO,EAAE;YACP,oBAAoB,EAAE,GAAG,CAAC,wBAAwB,CAAC;SACpD;KACF,CAAC;AACJ,CAAC"}

package/dist/utils/errorHandlingUtils.d.ts

@@ -0,0 +1,93 @@
+/**
+ * Level in the gateway stack where an error originated.
+ * Used in error responses as error_origin_level for observability and debugging.
+ */
+export declare const ERROR_ORIGIN_LEVEL: {
+    readonly REQ_BODY_MALFORMED: "req_body_malformed";
+    readonly AUTHENTICATION: "authentication";
+    readonly VALIDATION: "validation";
+    readonly AUTHORIZATION: "authorization";
+    readonly RATE_LIMIT: "rate_limit";
+    readonly BUDGET_LIMIT: "budget_limit";
+    readonly ROUTING_CONFIG: "routing_config";
+    readonly GUARDRAILS_INPUT: "guardrails_input";
+    readonly PROMPT_HYDRATION: "prompt_hydration";
+    readonly API_ERROR: "api_error";
+    readonly GUARDRAILS_OUTPUT: "guardrails_output";
+    readonly REQUEST_TRANSLATION: "request_translation";
+    readonly RESPONSE_TRANSLATION: "response_translation";
+    readonly TIMEOUT: "timeout";
+    readonly TTFT_TIMEOUT: "ttft_timeout";
+};
+export type ErrorOriginLevel = (typeof ERROR_ORIGIN_LEVEL)[keyof typeof ERROR_ORIGIN_LEVEL];
+export interface ErrorInfo {
+    message: string;
+    code: number;
+    guardrailChecks: any;
+}
+/**
+ * Extracts error message and status code from various error types using consistent logic
+ * @param error - The error object to extract information from
+ * @returns Object containing error message and status code
+ */
+export declare function extractErrorInfo(error: unknown): ErrorInfo;
+export interface ErrorBodyOptions {
+    message: string;
+    statusCode: number;
+    type?: string | null;
+    /** Overrides `error.code`, which defaults to the status. Use for a provider's own error code. */
+    code?: string;
+    param?: string | null;
+    /** Gateway stack level where the error originated; omitted for provider and unknown errors. */
+    error_origin_level?: ErrorOriginLevel;
+    /** Extra keys at root (e.g. guardrail_checks, provider). */
+    extra?: Record<string, unknown>;
+}
+/** Shape of the error response body we send to clients. */
+export interface ErrorResponseBody {
+    status: 'failure';
+    message: string;
+    error: {
+        message: string;
+        type: string | null;
+        code: string | null;
+        param?: string;
+    };
+}
+/** Error body plus optional extra keys (e.g. provider, guardrail_checks). */
+export type ErrorResponseBodyWithExtras = ErrorResponseBody & Record<string, unknown>;
+/**
+ * Builds an error response body from options. Use for all API error responses.
+ * Does not default type – pass what you have, or undefined/null.
+ */
+export declare function buildErrorBody(options: ErrorBodyOptions): ErrorResponseBodyWithExtras;
+/**
+ * Returns a Response with the given error body and status code.
+ * Use instead of manually calling new Response(JSON.stringify(...), ...).
+ */
+export declare function errorResponse(body: ErrorResponseBodyWithExtras | ErrorResponseBody, statusCode: number, init?: {
+    headers?: Record<string, string>;
+}): Response;
+/**
+ * Creates a standardized ErrorResponse object from error information (for logging).
+ * @param errorInfo - The error information object
+ * @returns Standardized ErrorResponse object
+ */
+export declare function createErrorResponse(errorInfo: ErrorInfo): {
+    error: {
+        message: string;
+        code: string;
+        type: null;
+    };
+};
+/**
+ * Creates a failure Response with the given error info and optional type/extra.
+ * Uses buildErrorBody and errorResponse.
+ */
+export declare function createFailureResponse(errorInfo: ErrorInfo, type?: string | null, extra?: Record<string, unknown>): Response;
+/**
+ * Parses and validates an HTTP status code from various input types
+ * @param code - The status code to parse (number, string, or undefined)
+ * @returns Valid HTTP status code (100-599) or undefined if invalid
+ */
+export declare function parseHttpStatusCode(code: number | string | undefined): number | undefined;

package/dist/utils/errorHandlingUtils.js

@@ -0,0 +1,134 @@
+import { HTTPException } from 'hono/http-exception';
+import { BaseError, GuardrailsError } from '../errors.js';
+/**
+ * Level in the gateway stack where an error originated.
+ * Used in error responses as error_origin_level for observability and debugging.
+ */
+export const ERROR_ORIGIN_LEVEL = {
+    REQ_BODY_MALFORMED: 'req_body_malformed',
+    AUTHENTICATION: 'authentication',
+    VALIDATION: 'validation',
+    AUTHORIZATION: 'authorization',
+    RATE_LIMIT: 'rate_limit',
+    BUDGET_LIMIT: 'budget_limit',
+    ROUTING_CONFIG: 'routing_config',
+    GUARDRAILS_INPUT: 'guardrails_input',
+    PROMPT_HYDRATION: 'prompt_hydration',
+    API_ERROR: 'api_error',
+    GUARDRAILS_OUTPUT: 'guardrails_output',
+    REQUEST_TRANSLATION: 'request_translation',
+    RESPONSE_TRANSLATION: 'response_translation',
+    TIMEOUT: 'timeout',
+    TTFT_TIMEOUT: 'ttft_timeout',
+};
+/**
+ * Extracts error message and status code from various error types using consistent logic
+ * @param error - The error object to extract information from
+ * @returns Object containing error message and status code
+ */
+export function extractErrorInfo(error) {
+    let errorMessage = String(error);
+    let errorCode = 500;
+    let guardrailChecks = null;
+    if (error instanceof GuardrailsError) {
+        errorMessage = error.message;
+        errorCode = error.statusCode;
+        guardrailChecks = error.guardrailChecks;
+    }
+    else if (error instanceof BaseError) {
+        errorMessage = error.message;
+        errorCode = error.statusCode;
+    }
+    else if (error instanceof HTTPException) {
+        errorMessage = error.message;
+        errorCode = error.status;
+    }
+    else if (error instanceof Error) {
+        errorMessage = error.message;
+        errorCode = 500;
+    }
+    return { message: errorMessage, code: errorCode, guardrailChecks: guardrailChecks };
+}
+/**
+ * Builds an error response body from options. Use for all API error responses.
+ * Does not default type – pass what you have, or undefined/null.
+ */
+export function buildErrorBody(options) {
+    const { message, statusCode, type, code, param, error_origin_level, extra = {} } = options;
+    return {
+        status: 'failure',
+        message,
+        error: {
+            message,
+            type: type ?? null,
+            code: code ?? String(statusCode),
+            ...(param && { param }),
+        },
+        ...(error_origin_level != null && { error_origin_level }),
+        ...extra,
+    };
+}
+/** Returns true if guardrailChecks indicates output guardrail(s) failed. */
+function isOutputGuardrailFailure(guardrailChecks) {
+    const output = guardrailChecks?.output_guardrails;
+    if (!Array.isArray(output))
+        return false;
+    return output.some((c) => c?.result !== 'passed' && c?.result != null);
+}
+/**
+ * Returns a Response with the given error body and status code.
+ * Use instead of manually calling new Response(JSON.stringify(...), ...).
+ */
+export function errorResponse(body, statusCode, init) {
+    return new Response(JSON.stringify(body), {
+        status: statusCode,
+        headers: {
+            'content-type': 'application/json',
+            ...init?.headers,
+        },
+    });
+}
+/**
+ * Creates a standardized ErrorResponse object from error information (for logging).
+ * @param errorInfo - The error information object
+ * @returns Standardized ErrorResponse object
+ */
+export function createErrorResponse(errorInfo) {
+    return {
+        error: {
+            message: errorInfo.message,
+            code: String(errorInfo.code),
+            type: null,
+        },
+    };
+}
+/**
+ * Creates a failure Response with the given error info and optional type/extra.
+ * Uses buildErrorBody and errorResponse.
+ */
+export function createFailureResponse(errorInfo, type, extra) {
+    const body = buildErrorBody({
+        message: errorInfo.message,
+        statusCode: errorInfo.code,
+        type,
+        extra,
+    });
+    return errorResponse(body, errorInfo.code);
+}
+/**
+ * Parses and validates an HTTP status code from various input types
+ * @param code - The status code to parse (number, string, or undefined)
+ * @returns Valid HTTP status code (100-599) or undefined if invalid
+ */
+export function parseHttpStatusCode(code) {
+    if (code === undefined) {
+        return undefined;
+    }
+    const parsedCode = typeof code === 'number' ? code : parseInt(String(code), 10);
+    // Validate it's a valid HTTP status code (100-599)
+    if (!isNaN(parsedCode) && Number.isInteger(parsedCode) && parsedCode >= 100 && parsedCode <= 599) {
+        return parsedCode;
+    }
+    return undefined;
+}
+//# sourceMappingURL=errorHandlingUtils.js.map

package/dist/utils/errorHandlingUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errorHandlingUtils.js","sourceRoot":"","sources":["../../src/utils/errorHandlingUtils.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,SAAS,EAAE,eAAe,EAAE,MAAM,WAAW,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,kBAAkB,EAAE,oBAAoB;IACxC,cAAc,EAAE,gBAAgB;IAChC,UAAU,EAAE,YAAY;IACxB,aAAa,EAAE,eAAe;IAC9B,UAAU,EAAE,YAAY;IACxB,YAAY,EAAE,cAAc;IAC5B,cAAc,EAAE,gBAAgB;IAChC,gBAAgB,EAAE,kBAAkB;IACpC,gBAAgB,EAAE,kBAAkB;IACpC,SAAS,EAAE,WAAW;IACtB,iBAAiB,EAAE,mBAAmB;IACtC,mBAAmB,EAAE,qBAAqB;IAC1C,oBAAoB,EAAE,sBAAsB;IAC5C,OAAO,EAAE,SAAS;IAClB,YAAY,EAAE,cAAc;CACpB,CAAC;AASX;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAc;IAC7C,IAAI,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,SAAS,GAAG,GAAG,CAAC;IACpB,IAAI,eAAe,GAAG,IAAI,CAAC;IAC3B,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;QAC7B,eAAe,GAAG,KAAK,CAAC,eAAe,CAAC;IAC1C,CAAC;SAAM,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QACtC,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,SAAS,GAAG,KAAK,CAAC,UAAU,CAAC;IAC/B,CAAC;SAAM,IAAI,KAAK,YAAY,aAAa,EAAE,CAAC;QAC1C,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3B,CAAC;SAAM,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;QAClC,YAAY,GAAG,KAAK,CAAC,OAAO,CAAC;QAC7B,SAAS,GAAG,GAAG,CAAC;IAClB,CAAC;IAED,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,SAAS,EAAE,eAAe,EAAE,eAAe,EAAE,CAAC;AACtF,CAAC;AA8BD;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,OAAyB;IACtD,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,GAAG,EAAE,EAAE,GAAG,OAAO,CAAC;IAC3F,OAAO;QACL,MAAM,EAAE,SAAS;QACjB,OAAO;QACP,KAAK,EAAE;YACL,OAAO;YACP,IAAI,EAAE,IAAI,IAAI,IAAI;YAClB,IAAI,EAAE,IAAI,IAAI,MAAM,CAAC,UAAU,CAAC;YAChC,GAAG,CAAC,KAAK,IAAI,EAAE,KAAK,EAAE,CAAC;SACxB;QACD,GAAG,CAAC,kBAAkB,IAAI,IAAI,IAAI,EAAE,kBAAkB,EAAE,CAAC;QACzD,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,SAAS,wBAAwB,CAAC,eAAoB;IACpD,MAAM,MAAM,GAAG,eAAe,EAAE,iBAAiB,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACzC,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAM,EAAE,EAAE,CAAC,CAAC,EAAE,MAAM,KAAK,QAAQ,IAAI,CAAC,EAAE,MAAM,IAAI,IAAI,CAAC,CAAC;AAC9E,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAC3B,IAAqD,EACrD,UAAkB,EAClB,IAA2C;IAE3C,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE;YACP,cAAc,EAAE,kBAAkB;YAClC,GAAG,IAAI,EAAE,OAAO;SACjB;KACF,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,SAAoB;IACtD,OAAO;QACL,KAAK,EAAE;YACL,OAAO,EAAE,SAAS,CAAC,OAAO;YAC1B,IAAI,EAAE,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC;YAC5B,IAAI,EAAE,IAAI;SACX;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,SAAoB,EACpB,IAAoB,EACpB,KAA+B;IAE/B,MAAM,IAAI,GAAG,cAAc,CAAC;QAC1B,OAAO,EAAE,SAAS,CAAC,OAAO;QAC1B,UAAU,EAAE,SAAS,CAAC,IAAI;QAC1B,IAAI;QACJ,KAAK;KACN,CAAC,CAAC;IACH,OAAO,aAAa,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;AAC7C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,IAAiC;IACnE,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,UAAU,GAAG,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;IAEhF,mDAAmD;IACnD,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,IAAI,GAAG,EAAE,CAAC;QACjG,OAAO,UAAU,CAAC;IACpB,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC"}

package/dist/utils/ignoreWithLog.d.ts

@@ -0,0 +1,3 @@
+/** Swallowed cleanup/cancel failure; error text is in `message` for msg-only log indexes. */
+export declare function logIgnoredFailure(message: string, error: unknown, extra?: Record<string, unknown>): void;
+export declare function ignoreWithLog(message: string, extra?: Record<string, unknown>): (error: unknown) => undefined;

package/dist/utils/ignoreWithLog.js

@@ -0,0 +1,12 @@
+import { logger } from '../logger.js';
+/** Swallowed cleanup/cancel failure; error text is in `message` for msg-only log indexes. */
+export function logIgnoredFailure(message, error, extra) {
+    logger.debug({ message: `${message}: ${error}`, error, ...extra });
+}
+export function ignoreWithLog(message, extra) {
+    return (error) => {
+        logIgnoredFailure(message, error, extra);
+        return undefined;
+    };
+}
+//# sourceMappingURL=ignoreWithLog.js.map

package/dist/utils/ignoreWithLog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ignoreWithLog.js","sourceRoot":"","sources":["../../src/utils/ignoreWithLog.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,WAAW,CAAC;AAEnC,6FAA6F;AAC7F,MAAM,UAAU,iBAAiB,CAAC,OAAe,EAAE,KAAc,EAAE,KAA+B;IAChG,MAAM,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,GAAG,OAAO,KAAK,KAAK,EAAE,EAAE,KAAK,EAAE,GAAG,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,aAAa,CAAC,OAAe,EAAE,KAA+B;IAC5E,OAAO,CAAC,KAAc,EAAE,EAAE;QACxB,iBAAiB,CAAC,OAAO,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;QACzC,OAAO,SAAS,CAAC;IACnB,CAAC,CAAC;AACJ,CAAC"}

package/dist/utils/isStreamingEnabled.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Context-free streaming detection for SDK execute (P7.1).
+ *
+ * Narrow port of live `isStreamingEnabled` without Hono Context / proxy / Gemini-router
+ * flags. Proxy endpoints are rejected by `createProviderRequest` in v1.
+ */
+import type { Endpoint } from '../providers/types.js';
+import type { SdkRequestBody } from '../types/contracts.js';
+export interface IsStreamingEnabledInput {
+    body: SdkRequestBody;
+    endpoint: Endpoint;
+    path: string;
+}
+export declare function isStreamingEnabledSdk({ body, endpoint, path }: IsStreamingEnabledInput): boolean;

package/dist/utils/isStreamingEnabled.js

@@ -0,0 +1,14 @@
+const STREAM_PATH_PATTERNS = ['streamGenerateContent', 'converse-stream', 'invoke-with-response-stream'];
+export function isStreamingEnabledSdk({ body, endpoint, path }) {
+    if (endpoint === 'embed')
+        return false;
+    if (body instanceof ReadableStream || body instanceof FormData)
+        return false;
+    if (body && typeof body === 'object' && !ArrayBuffer.isView(body) && !(body instanceof ArrayBuffer)) {
+        const params = body;
+        if (Boolean(params.stream) || params.stream_format === 'sse')
+            return true;
+    }
+    return STREAM_PATH_PATTERNS.some(pattern => path.includes(pattern));
+}
+//# sourceMappingURL=isStreamingEnabled.js.map

package/dist/utils/isStreamingEnabled.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"isStreamingEnabled.js","sourceRoot":"","sources":["../../src/utils/isStreamingEnabled.ts"],"names":[],"mappings":"AASA,MAAM,oBAAoB,GAAG,CAAC,uBAAuB,EAAE,iBAAiB,EAAE,6BAA6B,CAAU,CAAC;AAQlH,MAAM,UAAU,qBAAqB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAA2B;IACrF,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,KAAK,CAAC;IACvC,IAAI,IAAI,YAAY,cAAc,IAAI,IAAI,YAAY,QAAQ;QAAE,OAAO,KAAK,CAAC;IAE7E,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,YAAY,WAAW,CAAC,EAAE,CAAC;QACpG,MAAM,MAAM,GAAG,IAA+B,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,aAAa,KAAK,KAAK;YAAE,OAAO,IAAI,CAAC;IAC5E,CAAC;IAED,OAAO,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC;AACtE,CAAC"}

package/dist/utils/jsonValue.d.ts

@@ -0,0 +1,5 @@
+/** Narrow unknown JSON values without inventing zeros or empty objects. */
+export declare function asNumber(value: unknown): number | undefined;
+export declare function asRecord(value: unknown): Record<string, unknown> | undefined;
+export declare function nestedRecord(parent: Record<string, unknown>, key: string): Record<string, unknown> | undefined;
+export declare function usageRecord(json: unknown): Record<string, unknown> | undefined;

package/dist/utils/jsonValue.js

@@ -0,0 +1,15 @@
+/** Narrow unknown JSON values without inventing zeros or empty objects. */
+export function asNumber(value) {
+    return typeof value === 'number' && !Number.isNaN(value) ? value : undefined;
+}
+export function asRecord(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : undefined;
+}
+export function nestedRecord(parent, key) {
+    return asRecord(parent[key]);
+}
+export function usageRecord(json) {
+    const rec = asRecord(json);
+    return rec ? asRecord(rec.usage) : undefined;
+}
+//# sourceMappingURL=jsonValue.js.map

package/dist/utils/jsonValue.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jsonValue.js","sourceRoot":"","sources":["../../src/utils/jsonValue.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAE3E,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAE,KAAiC,CAAC,CAAC,CAAC,SAAS,CAAC;AACtH,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,MAA+B,EAAE,GAAW;IACvE,OAAO,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;AAC/B,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa;IACvC,MAAM,GAAG,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;IAC3B,OAAO,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/C,CAAC"}

package/dist/utils/jwtUtils.d.ts

@@ -0,0 +1,30 @@
+export interface GoogleServiceAccountInfo {
+    client_email: string;
+    private_key_id: string;
+    private_key: string;
+}
+/**
+ * Base64URL encodes an object (for JWT header/payload)
+ */
+export declare function base64UrlEncode(obj: Record<string, any>): string;
+/**
+ * Imports a PEM-formatted private key into a CryptoKey object
+ */
+export declare function importPrivateKey(pem: string): Promise<CryptoKey>;
+/**
+ * Creates and signs a JWT using RS256 algorithm
+ */
+export declare function createJWT(header: Record<string, any>, payload: Record<string, any>, privateKey: CryptoKey): Promise<string>;
+export interface GoogleAccessTokenResult {
+    accessToken: string;
+    expiresIn?: number;
+}
+/**
+ * Exchanges a Google service account's credentials for an OAuth2 access token
+ * via the JWT bearer grant type. This is the core token exchange shared by
+ * Vertex AI, Model Armor, and any other Google service-account-based auth.
+ */
+export declare function getGoogleAccessToken(serviceAccountInfo: GoogleServiceAccountInfo, options?: {
+    scope?: string;
+    timeoutMs?: number;
+}): Promise<GoogleAccessTokenResult>;

package/dist/utils/jwtUtils.js

@@ -0,0 +1,102 @@
+/**
+ * Shared JWT utilities for OAuth2 client credential flows
+ * Used by Google Vertex AI, Google Model Armor, and Azure OpenAI certificate auth
+ */
+import { safeFetch } from '../http/index.js';
+const GOOGLE_TOKEN_URL = 'https://oauth2.googleapis.com/token';
+const DEFAULT_GOOGLE_SCOPE = 'https://www.googleapis.com/auth/cloud-platform';
+/**
+ * Base64URL encodes an object (for JWT header/payload)
+ */
+export function base64UrlEncode(obj) {
+    return btoa(JSON.stringify(obj)).replace(/=/g, '').replace(/\+/g, '-').replace(/\//g, '_');
+}
+/**
+ * Imports a PEM-formatted private key into a CryptoKey object
+ */
+export async function importPrivateKey(pem) {
+    const pemContents = pem
+        .replace(/-----BEGIN PRIVATE KEY-----/g, '')
+        .replace(/-----END PRIVATE KEY-----/g, '')
+        .replace(/\s+/g, '');
+    const binaryDerString = atob(pemContents);
+    const binaryDer = new Uint8Array(binaryDerString.length);
+    for (let i = 0; i < binaryDerString.length; i++) {
+        binaryDer[i] = binaryDerString.charCodeAt(i);
+    }
+    return crypto.subtle.importKey('pkcs8', binaryDer.buffer, { name: 'RSASSA-PKCS1-v1_5', hash: { name: 'SHA-256' } }, false, ['sign']);
+}
+/**
+ * Creates and signs a JWT using RS256 algorithm
+ */
+export async function createJWT(header, payload, privateKey) {
+    const encodedHeader = base64UrlEncode(header);
+    const encodedPayload = base64UrlEncode(payload);
+    const data = new TextEncoder().encode(`${encodedHeader}.${encodedPayload}`);
+    const signature = await crypto.subtle.sign({ name: 'RSASSA-PKCS1-v1_5', hash: { name: 'SHA-256' } }, privateKey, data);
+    const encodedSignature = btoa(String.fromCharCode(...new Uint8Array(signature)))
+        .replace(/=/g, '')
+        .replace(/\+/g, '-')
+        .replace(/\//g, '_');
+    return `${encodedHeader}.${encodedPayload}.${encodedSignature}`;
+}
+/**
+ * Exchanges a Google service account's credentials for an OAuth2 access token
+ * via the JWT bearer grant type. This is the core token exchange shared by
+ * Vertex AI, Model Armor, and any other Google service-account-based auth.
+ */
+export async function getGoogleAccessToken(serviceAccountInfo, options) {
+    const scope = options?.scope ?? DEFAULT_GOOGLE_SCOPE;
+    const iat = Math.floor(Date.now() / 1000);
+    const exp = iat + 3600;
+    const header = {
+        alg: 'RS256',
+        typ: 'JWT',
+        kid: serviceAccountInfo.private_key_id,
+    };
+    const payload = {
+        iss: serviceAccountInfo.client_email,
+        sub: serviceAccountInfo.client_email,
+        aud: GOOGLE_TOKEN_URL,
+        iat,
+        exp,
+        scope,
+    };
+    const privateKey = await importPrivateKey(serviceAccountInfo.private_key);
+    const jwtToken = await createJWT(header, payload, privateKey);
+    const fetchOptions = {
+        method: 'POST',
+        headers: { 'Content-Type': 'application/x-www-form-urlencoded' },
+        body: new URLSearchParams({
+            grant_type: 'urn:ietf:params:oauth:grant-type:jwt-bearer',
+            assertion: jwtToken,
+        }),
+    };
+    const timeoutMs = options?.timeoutMs;
+    const controller = timeoutMs ? new AbortController() : undefined;
+    const timer = controller ? setTimeout(() => controller.abort(), timeoutMs) : undefined;
+    if (controller) {
+        fetchOptions.signal = controller.signal;
+    }
+    try {
+        const tokenResponse = await safeFetch(GOOGLE_TOKEN_URL, { ssrf: 'guard', ...fetchOptions });
+        if (!tokenResponse.ok) {
+            const errorText = await tokenResponse.text();
+            throw new Error(`Failed to obtain Google access token: ${tokenResponse.status} ${errorText}`);
+        }
+        const tokenJson = (await tokenResponse.json());
+        return { accessToken: tokenJson.access_token, expiresIn: tokenJson.expires_in };
+    }
+    catch (e) {
+        if (controller && e instanceof DOMException && e.name === 'AbortError') {
+            throw new Error(`Google access token request timed out after ${timeoutMs}ms`);
+        }
+        throw e;
+    }
+    finally {
+        if (timer !== undefined) {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=jwtUtils.js.map

package/dist/utils/jwtUtils.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"jwtUtils.js","sourceRoot":"","sources":["../../src/utils/jwtUtils.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAQpC,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAC/D,MAAM,oBAAoB,GAAG,gDAAgD,CAAC;AAE9E;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,GAAwB;IACtD,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAC7F,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW;IAChD,MAAM,WAAW,GAAG,GAAG;SACpB,OAAO,CAAC,8BAA8B,EAAE,EAAE,CAAC;SAC3C,OAAO,CAAC,4BAA4B,EAAE,EAAE,CAAC;SACzC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAEvB,MAAM,eAAe,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,UAAU,CAAC,eAAe,CAAC,MAAM,CAAC,CAAC;IACzD,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,eAAe,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QAChD,SAAS,CAAC,CAAC,CAAC,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC;IAED,OAAO,MAAM,CAAC,MAAM,CAAC,SAAS,CAC5B,OAAO,EACP,SAAS,CAAC,MAAM,EAChB,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EACxD,KAAK,EACL,CAAC,MAAM,CAAC,CACT,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAC7B,MAA2B,EAC3B,OAA4B,EAC5B,UAAqB;IAErB,MAAM,aAAa,GAAG,eAAe,CAAC,MAAM,CAAC,CAAC;IAC9C,MAAM,cAAc,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IAChD,MAAM,IAAI,GAAG,IAAI,WAAW,EAAE,CAAC,MAAM,CAAC,GAAG,aAAa,IAAI,cAAc,EAAE,CAAC,CAAC;IAE5E,MAAM,SAAS,GAAG,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,CACxC,EAAE,IAAI,EAAE,mBAAmB,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EACxD,UAAU,EACV,IAAI,CACL,CAAC;IAEF,MAAM,gBAAgB,GAAG,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,GAAG,IAAI,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC;SAC7E,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC;SACjB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAEvB,OAAO,GAAG,aAAa,IAAI,cAAc,IAAI,gBAAgB,EAAE,CAAC;AAClE,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,kBAA4C,EAC5C,OAAgD;IAEhD,MAAM,KAAK,GAAG,OAAO,EAAE,KAAK,IAAI,oBAAoB,CAAC;IACrD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC1C,MAAM,GAAG,GAAG,GAAG,GAAG,IAAI,CAAC;IAEvB,MAAM,MAAM,GAAG;QACb,GAAG,EAAE,OAAO;QACZ,GAAG,EAAE,KAAK;QACV,GAAG,EAAE,kBAAkB,CAAC,cAAc;KACvC,CAAC;IAEF,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,kBAAkB,CAAC,YAAY;QACpC,GAAG,EAAE,kBAAkB,CAAC,YAAY;QACpC,GAAG,EAAE,gBAAgB;QACrB,GAAG;QACH,GAAG;QACH,KAAK;KACN,CAAC;IAEF,MAAM,UAAU,GAAG,MAAM,gBAAgB,CAAC,kBAAkB,CAAC,WAAW,CAAC,CAAC;IAC1E,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IAE9D,MAAM,YAAY,GAAgB;QAChC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC;YACxB,UAAU,EAAE,6CAA6C;YACzD,SAAS,EAAE,QAAQ;SACpB,CAAC;KACH,CAAC;IAEF,MAAM,SAAS,GAAG,OAAO,EAAE,SAAS,CAAC;IACrC,MAAM,UAAU,GAAG,SAAS,CAAC,CAAC,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACjE,MAAM,KAAK,GAAG,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,UAAU,EAAE,CAAC;QACf,YAAY,CAAC,MAAM,GAAG,UAAU,CAAC,MAAM,CAAC;IAC1C,CAAC;IAED,IAAI,CAAC;QACH,MAAM,aAAa,GAAG,MAAM,SAAS,CAAC,gBAAgB,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;QAE5F,IAAI,CAAC,aAAa,CAAC,EAAE,EAAE,CAAC;YACtB,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,IAAI,EAAE,CAAC;YAC7C,MAAM,IAAI,KAAK,CAAC,yCAAyC,aAAa,CAAC,MAAM,IAAI,SAAS,EAAE,CAAC,CAAC;QAChG,CAAC;QAED,MAAM,SAAS,GAAG,CAAC,MAAM,aAAa,CAAC,IAAI,EAAE,CAAkD,CAAC;QAChG,OAAO,EAAE,WAAW,EAAE,SAAS,CAAC,YAAY,EAAE,SAAS,EAAE,SAAS,CAAC,UAAU,EAAE,CAAC;IAClF,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,IAAI,UAAU,IAAI,CAAC,YAAY,YAAY,IAAI,CAAC,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACvE,MAAM,IAAI,KAAK,CAAC,+CAA+C,SAAS,IAAI,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YACxB,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/utils/k8sTokenRequest.d.ts

@@ -0,0 +1 @@
+export declare function getK8sServiceAccountToken(audience: string, tokenExpirationSeconds: number): Promise<string>;