@undefineds.co/xpod 0.3.58 → 0.3.62

package/dist/api/handlers/AiClientConfigurationHandler.d.ts

@@ -0,0 +1,7 @@
+import type { ApiServer } from '../ApiServer';
+import { type AiClientConfigurationService } from '../service/AiClientConfigurationService';
+export interface AiClientConfigurationHandlerOptions {
+    service?: AiClientConfigurationService;
+    jsonBodyLimitBytes?: number;
+}
+export declare function registerAiClientConfigurationRoutes(server: ApiServer, options: AiClientConfigurationHandlerOptions): void;

package/dist/api/handlers/AiClientConfigurationHandler.js

@@ -0,0 +1,202 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.registerAiClientConfigurationRoutes = registerAiClientConfigurationRoutes;
+const readBoundedJsonBody_1 = require("../http/readBoundedJsonBody");
+const AiClientConfigurationService_1 = require("../service/AiClientConfigurationService");
+function registerAiClientConfigurationRoutes(server, options) {
+    const jsonBodyLimitBytes = options.jsonBodyLimitBytes ?? 16 * 1024;
+    server.get('/api/ai/client-configuration/capability', async (request, response) => {
+        if (!authorizeCapability(request, response)) {
+            return;
+        }
+        sendJson(response, 200, options.service?.capability() ?? (0, AiClientConfigurationService_1.unavailableAiClientConfigurationCapability)());
+    });
+    server.get('/api/ai/client-configuration/:client', async (request, response, params) => {
+        if (!requireService(options, response))
+            return;
+        if (!authorizeClientConfig(request, response, 'client-config:read')) {
+            return;
+        }
+        await sendServiceResult(response, () => options.service.inspect(requireClient(params.client)));
+    });
+    server.post('/api/ai/client-configuration/:client/plan', async (request, response, params) => {
+        if (!requireService(options, response))
+            return;
+        if (!authorizeClientConfig(request, response, 'client-config:write')) {
+            return;
+        }
+        const body = await readJsonObject(request, response, jsonBodyLimitBytes);
+        if (!body) {
+            return;
+        }
+        await sendServiceResult(response, () => options.service.plan({
+            client: requireClient(params.client),
+            endpoint: requireString(body.endpoint, 'endpoint'),
+            model: optionalString(body.model),
+            webId: request.auth?.type === 'solid' ? request.auth.webId : optionalString(body.webId),
+        }));
+    });
+    server.post('/api/ai/client-configuration/:client/apply', async (request, response, params) => {
+        if (!requireService(options, response))
+            return;
+        if (!authorizeClientConfig(request, response, 'client-config:write')) {
+            return;
+        }
+        const body = await readJsonObject(request, response, jsonBodyLimitBytes);
+        if (!body) {
+            return;
+        }
+        await sendServiceResult(response, () => options.service.apply({
+            client: requireClient(params.client),
+            planId: requireString(body.planId, 'planId'),
+            gatewayKey: requireString(body.gatewayKey, 'gatewayKey'),
+            confirmation: optionalConfirmation(body.confirmation),
+            webId: request.auth?.type === 'solid' ? request.auth.webId : optionalString(body.webId),
+        }));
+    });
+    server.post('/api/ai/client-configuration/:client/verify', async (request, response, params) => {
+        if (!requireService(options, response))
+            return;
+        if (!authorizeClientConfig(request, response, 'client-config:read')) {
+            return;
+        }
+        const body = await readJsonObject(request, response, jsonBodyLimitBytes);
+        if (!body) {
+            return;
+        }
+        await sendServiceResult(response, () => options.service.verify({
+            client: requireClient(params.client),
+            planId: optionalString(body.planId),
+        }));
+    });
+    server.post('/api/ai/client-configuration/:client/restore', async (request, response, params) => {
+        if (!requireService(options, response))
+            return;
+        if (!authorizeClientConfig(request, response, 'client-config:write')) {
+            return;
+        }
+        await sendServiceResult(response, () => options.service.restore(requireClient(params.client), request.auth?.type === 'solid' ? request.auth.webId : undefined));
+    });
+}
+function requireService(options, response) {
+    if (options.service)
+        return true;
+    sendJson(response, 503, safeErrorPayload(new AiClientConfigurationService_1.AiClientConfigurationError('client_configuration_unavailable', 'Local AI client configuration is unavailable on this host.', 503, { aiClientConfiguration: (0, AiClientConfigurationService_1.unavailableAiClientConfigurationCapability)() })));
+    return false;
+}
+function authorizeCapability(request, response) {
+    if (request.auth?.type === 'solid' || request.auth?.type === 'service') {
+        return true;
+    }
+    sendJson(response, 401, safeErrorPayload(new AiClientConfigurationService_1.AiClientConfigurationError('authentication_required', 'Authentication required.', 401)));
+    return false;
+}
+function authorizeClientConfig(request, response, scope) {
+    const auth = request.auth;
+    if (!auth) {
+        sendJson(response, 401, safeErrorPayload(new AiClientConfigurationService_1.AiClientConfigurationError('authentication_required', 'Authentication required.', 401)));
+        return false;
+    }
+    if (hasClientConfigScope(auth, scope)) {
+        return true;
+    }
+    sendJson(response, 403, safeErrorPayload(new AiClientConfigurationService_1.AiClientConfigurationError('insufficient_permissions', 'Insufficient permissions.', 403)));
+    return false;
+}
+function hasClientConfigScope(auth, scope) {
+    const scopes = readScopes(auth);
+    if (!scopes.includes(scope)) {
+        return false;
+    }
+    if (auth.type === 'service') {
+        return true;
+    }
+    return auth.type === 'solid' && auth.viaGatewayApiKey === true && auth.internalInvocation === true;
+}
+function readScopes(auth) {
+    if (auth.type === 'service') {
+        return auth.scopes;
+    }
+    if (auth.type === 'solid' && auth.viaGatewayApiKey === true) {
+        return auth.scopes ?? [];
+    }
+    return [];
+}
+async function readJsonObject(request, response, limitBytes) {
+    const bodyResult = await (0, readBoundedJsonBody_1.readBoundedJsonBody)(request, { limitBytes });
+    if (!bodyResult.ok) {
+        sendJson(response, bodyResult.status, { error: bodyResult.error });
+        return undefined;
+    }
+    if (!bodyResult.value || typeof bodyResult.value !== 'object' || Array.isArray(bodyResult.value)) {
+        sendJson(response, 400, { error: 'Request body must be a JSON object' });
+        return undefined;
+    }
+    return bodyResult.value;
+}
+async function sendServiceResult(response, action) {
+    try {
+        sendJson(response, 200, await action());
+    }
+    catch (error) {
+        if (error instanceof AiClientConfigurationService_1.AiClientConfigurationError) {
+            sendJson(response, error.statusCode, safeErrorPayload(error));
+            return;
+        }
+        sendJson(response, 500, safeErrorPayload(new AiClientConfigurationService_1.AiClientConfigurationError('client_configuration_failed', (0, AiClientConfigurationService_1.redactSecretText)(error instanceof Error ? error.message : 'Unknown error'), 500)));
+    }
+}
+function requireClient(value) {
+    if (value === 'codex' || value === 'claude-code' || value === 'pi' || value === 'codebuddy') {
+        return value;
+    }
+    throw new AiClientConfigurationService_1.AiClientConfigurationError('unsupported_client', 'Unsupported AI client.', 404);
+}
+function requireString(value, field) {
+    if (typeof value !== 'string' || !value.trim()) {
+        throw new AiClientConfigurationService_1.AiClientConfigurationError('invalid_request', `${field} must be a non-empty string.`, 400);
+    }
+    return value.trim();
+}
+function optionalString(value) {
+    return typeof value === 'string' && value.trim() ? value.trim() : undefined;
+}
+function optionalConfirmation(value) {
+    if (!value || typeof value !== 'object' || Array.isArray(value))
+        return undefined;
+    const record = value;
+    const token = optionalString(record.token);
+    const targetHash = optionalString(record.targetHash);
+    return token && targetHash ? { token, targetHash } : undefined;
+}
+function safeErrorPayload(error) {
+    return {
+        code: error.code,
+        message: (0, AiClientConfigurationService_1.redactSecretText)(error.message),
+        ...(error.details ? { details: redactDetails(error.details) } : {}),
+    };
+}
+function redactDetails(value) {
+    if (!value || typeof value !== 'object') {
+        return typeof value === 'string' ? (0, AiClientConfigurationService_1.redactSecretText)(value) : value;
+    }
+    if (Array.isArray(value)) {
+        return value.map(redactDetails);
+    }
+    const output = {};
+    for (const [key, entry] of Object.entries(value)) {
+        if (/path|secret|token|key/iu.test(key)) {
+            output[key] = '[redacted]';
+        }
+        else {
+            output[key] = redactDetails(entry);
+        }
+    }
+    return output;
+}
+function sendJson(response, statusCode, payload) {
+    response.statusCode = statusCode;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(payload));
+}
+//# sourceMappingURL=AiClientConfigurationHandler.js.map

package/dist/api/handlers/AiClientConfigurationHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AiClientConfigurationHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/AiClientConfigurationHandler.ts"],"names":[],"mappings":";;AAkBA,kFAiFC;AAhGD,qEAAkE;AAElE,0FAMiD;AAOjD,SAAgB,mCAAmC,CACjD,MAAiB,EACjB,OAA4C;IAE5C,MAAM,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,EAAE,GAAG,IAAI,CAAC;IAEnE,MAAM,CAAC,GAAG,CAAC,yCAAyC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,EAAE;QAChF,IAAI,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,EAAE,CAAC;YAC5C,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,IAAI,IAAA,yEAA0C,GAAE,CAAC,CAAC;IACzG,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,GAAG,CAAC,sCAAsC,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QACrF,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,EAAE,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAQ,CAAC,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,2CAA2C,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC3F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAQ,CAAC,IAAI,CAAC;YAC5D,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,QAAQ,EAAE,aAAa,CAAC,IAAI,CAAC,QAAQ,EAAE,UAAU,CAAC;YAClD,KAAK,EAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;YACjC,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;SACxF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC5F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAQ,CAAC,KAAK,CAAC;YAC7D,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,MAAM,EAAE,aAAa,CAAC,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC;YAC5C,UAAU,EAAE,aAAa,CAAC,IAAI,CAAC,UAAU,EAAE,YAAY,CAAC;YACxD,YAAY,EAAE,oBAAoB,CAAC,IAAI,CAAC,YAAY,CAAC;YACrD,KAAK,EAAE,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC;SACxF,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,6CAA6C,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC7F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,oBAAoB,CAAC,EAAE,CAAC;YACpE,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,OAAO,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QACzE,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,OAAO;QACT,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAQ,CAAC,MAAM,CAAC;YAC9D,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC;YACpC,MAAM,EAAE,cAAc,CAAC,IAAI,CAAC,MAAM,CAAC;SACpC,CAAC,CAAC,CAAC;IACN,CAAC,CAAC,CAAC;IAEH,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,KAAK,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE;QAC9F,IAAI,CAAC,cAAc,CAAC,OAAO,EAAE,QAAQ,CAAC;YAAE,OAAO;QAC/C,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,QAAQ,EAAE,qBAAqB,CAAC,EAAE,CAAC;YACrE,OAAO;QACT,CAAC;QACD,MAAM,iBAAiB,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAQ,CAAC,OAAO,CAC9D,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,EAC5B,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAChE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,cAAc,CAAC,OAA4C,EAAE,QAAwB;IAC5F,IAAI,OAAO,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,yDAA0B,CACrE,kCAAkC,EAClC,4DAA4D,EAC5D,GAAG,EACH,EAAE,qBAAqB,EAAE,IAAA,yEAA0C,GAAE,EAAE,CACxE,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,mBAAmB,CAAC,OAA6B,EAAE,QAAwB;IAClF,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,SAAS,EAAE,CAAC;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,yDAA0B,CACrE,yBAAyB,EACzB,0BAA0B,EAC1B,GAAG,CACJ,CAAC,CAAC,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,qBAAqB,CAC5B,OAA6B,EAC7B,QAAwB,EACxB,KAAmD;IAEnD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IAC1B,IAAI,CAAC,IAAI,EAAE,CAAC;QACV,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,yDAA0B,CAAC,yBAAyB,EAAE,0BAA0B,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;QACtI,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,oBAAoB,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,CAAC;QACtC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,yDAA0B,CAAC,0BAA0B,EAAE,2BAA2B,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC;IACxI,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAiB,EAAE,KAAmD;IAClG,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;IAChC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5B,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,IAAI,IAAI,CAAC,kBAAkB,KAAK,IAAI,CAAC;AACrG,CAAC;AAED,SAAS,UAAU,CAAC,IAAiB;IACnC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC5B,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,OAAO,IAAI,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;QAC5D,OAAO,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,KAAK,UAAU,cAAc,CAC3B,OAA6B,EAC7B,QAAwB,EACxB,UAAkB;IAElB,MAAM,UAAU,GAAG,MAAM,IAAA,yCAAmB,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,CAAC,CAAC;IACtE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;QACnB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC,MAAM,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC;QACnE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,CAAC,UAAU,CAAC,KAAK,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QACjG,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAC;QACzE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,UAAU,CAAC,KAAgC,CAAC;AACrD,CAAC;AAED,KAAK,UAAU,iBAAiB,CAAC,QAAwB,EAAE,MAA8B;IACvF,IAAI,CAAC;QACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,MAAM,EAAE,CAAC,CAAC;IAC1C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,KAAK,YAAY,yDAA0B,EAAE,CAAC;YAChD,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC,UAAU,EAAE,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;QACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,gBAAgB,CAAC,IAAI,yDAA0B,CACrE,6BAA6B,EAC7B,IAAA,+CAAgB,EAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,EAC1E,GAAG,CACJ,CAAC,CAAC,CAAC;IACN,CAAC;AACH,CAAC;AAED,SAAS,aAAa,CAAC,KAAyB;IAC9C,IAAI,KAAK,KAAK,OAAO,IAAI,KAAK,KAAK,aAAa,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,WAAW,EAAE,CAAC;QAC5F,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,IAAI,yDAA0B,CAAC,oBAAoB,EAAE,wBAAwB,EAAE,GAAG,CAAC,CAAC;AAC5F,CAAC;AAED,SAAS,aAAa,CAAC,KAAc,EAAE,KAAa;IAClD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC/C,MAAM,IAAI,yDAA0B,CAAC,iBAAiB,EAAE,GAAG,KAAK,8BAA8B,EAAE,GAAG,CAAC,CAAC;IACvG,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC9E,CAAC;AAED,SAAS,oBAAoB,CAAC,KAAc;IAC1C,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAClF,MAAM,MAAM,GAAG,KAAgC,CAAC;IAChD,MAAM,KAAK,GAAG,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC3C,MAAM,UAAU,GAAG,cAAc,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IACrD,OAAO,KAAK,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAiC;IACzD,OAAO;QACL,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,OAAO,EAAE,IAAA,+CAAgB,EAAC,KAAK,CAAC,OAAO,CAAC;QACxC,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpE,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACxC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAA,+CAAgB,EAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IACrE,CAAC;IACD,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,KAAK,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IAClC,CAAC;IACD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,yBAAyB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;QAC7B,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,aAAa,CAAC,KAAK,CAAC,CAAC;QACrC,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,UAAkB,EAAE,OAAgB;IAC9E,QAAQ,CAAC,UAAU,GAAG,UAAU,CAAC;IACjC,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;AACxC,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport type { ApiServer } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport { readBoundedJsonBody } from '../http/readBoundedJsonBody';\nimport type { AuthContext } from '../auth/AuthContext';\nimport {\n  AiClientConfigurationError,\n  type AiClientConfigurationService,\n  type AiClientId,\n  redactSecretText,\n  unavailableAiClientConfigurationCapability,\n} from '../service/AiClientConfigurationService';\n\nexport interface AiClientConfigurationHandlerOptions {\n  service?: AiClientConfigurationService;\n  jsonBodyLimitBytes?: number;\n}\n\nexport function registerAiClientConfigurationRoutes(\n  server: ApiServer,\n  options: AiClientConfigurationHandlerOptions,\n): void {\n  const jsonBodyLimitBytes = options.jsonBodyLimitBytes ?? 16 * 1024;\n\n  server.get('/api/ai/client-configuration/capability', async (request, response) => {\n    if (!authorizeCapability(request, response)) {\n      return;\n    }\n    sendJson(response, 200, options.service?.capability() ?? unavailableAiClientConfigurationCapability());\n  });\n\n  server.get('/api/ai/client-configuration/:client', async (request, response, params) => {\n    if (!requireService(options, response)) return;\n    if (!authorizeClientConfig(request, response, 'client-config:read')) {\n      return;\n    }\n    await sendServiceResult(response, () => options.service!.inspect(requireClient(params.client)));\n  });\n\n  server.post('/api/ai/client-configuration/:client/plan', async (request, response, params) => {\n    if (!requireService(options, response)) return;\n    if (!authorizeClientConfig(request, response, 'client-config:write')) {\n      return;\n    }\n    const body = await readJsonObject(request, response, jsonBodyLimitBytes);\n    if (!body) {\n      return;\n    }\n    await sendServiceResult(response, () => options.service!.plan({\n      client: requireClient(params.client),\n      endpoint: requireString(body.endpoint, 'endpoint'),\n      model: optionalString(body.model),\n      webId: request.auth?.type === 'solid' ? request.auth.webId : optionalString(body.webId),\n    }));\n  });\n\n  server.post('/api/ai/client-configuration/:client/apply', async (request, response, params) => {\n    if (!requireService(options, response)) return;\n    if (!authorizeClientConfig(request, response, 'client-config:write')) {\n      return;\n    }\n    const body = await readJsonObject(request, response, jsonBodyLimitBytes);\n    if (!body) {\n      return;\n    }\n    await sendServiceResult(response, () => options.service!.apply({\n      client: requireClient(params.client),\n      planId: requireString(body.planId, 'planId'),\n      gatewayKey: requireString(body.gatewayKey, 'gatewayKey'),\n      confirmation: optionalConfirmation(body.confirmation),\n      webId: request.auth?.type === 'solid' ? request.auth.webId : optionalString(body.webId),\n    }));\n  });\n\n  server.post('/api/ai/client-configuration/:client/verify', async (request, response, params) => {\n    if (!requireService(options, response)) return;\n    if (!authorizeClientConfig(request, response, 'client-config:read')) {\n      return;\n    }\n    const body = await readJsonObject(request, response, jsonBodyLimitBytes);\n    if (!body) {\n      return;\n    }\n    await sendServiceResult(response, () => options.service!.verify({\n      client: requireClient(params.client),\n      planId: optionalString(body.planId),\n    }));\n  });\n\n  server.post('/api/ai/client-configuration/:client/restore', async (request, response, params) => {\n    if (!requireService(options, response)) return;\n    if (!authorizeClientConfig(request, response, 'client-config:write')) {\n      return;\n    }\n    await sendServiceResult(response, () => options.service!.restore(\n      requireClient(params.client),\n      request.auth?.type === 'solid' ? request.auth.webId : undefined,\n    ));\n  });\n}\n\nfunction requireService(options: AiClientConfigurationHandlerOptions, response: ServerResponse): boolean {\n  if (options.service) return true;\n  sendJson(response, 503, safeErrorPayload(new AiClientConfigurationError(\n    'client_configuration_unavailable',\n    'Local AI client configuration is unavailable on this host.',\n    503,\n    { aiClientConfiguration: unavailableAiClientConfigurationCapability() },\n  )));\n  return false;\n}\n\nfunction authorizeCapability(request: AuthenticatedRequest, response: ServerResponse): boolean {\n  if (request.auth?.type === 'solid' || request.auth?.type === 'service') {\n    return true;\n  }\n  sendJson(response, 401, safeErrorPayload(new AiClientConfigurationError(\n    'authentication_required',\n    'Authentication required.',\n    401,\n  )));\n  return false;\n}\n\nfunction authorizeClientConfig(\n  request: AuthenticatedRequest,\n  response: ServerResponse,\n  scope: 'client-config:read' | 'client-config:write',\n): boolean {\n  const auth = request.auth;\n  if (!auth) {\n    sendJson(response, 401, safeErrorPayload(new AiClientConfigurationError('authentication_required', 'Authentication required.', 401)));\n    return false;\n  }\n  if (hasClientConfigScope(auth, scope)) {\n    return true;\n  }\n  sendJson(response, 403, safeErrorPayload(new AiClientConfigurationError('insufficient_permissions', 'Insufficient permissions.', 403)));\n  return false;\n}\n\nfunction hasClientConfigScope(auth: AuthContext, scope: 'client-config:read' | 'client-config:write'): boolean {\n  const scopes = readScopes(auth);\n  if (!scopes.includes(scope)) {\n    return false;\n  }\n  if (auth.type === 'service') {\n    return true;\n  }\n  return auth.type === 'solid' && auth.viaGatewayApiKey === true && auth.internalInvocation === true;\n}\n\nfunction readScopes(auth: AuthContext): string[] {\n  if (auth.type === 'service') {\n    return auth.scopes;\n  }\n  if (auth.type === 'solid' && auth.viaGatewayApiKey === true) {\n    return auth.scopes ?? [];\n  }\n  return [];\n}\n\nasync function readJsonObject(\n  request: AuthenticatedRequest,\n  response: ServerResponse,\n  limitBytes: number,\n): Promise<Record<string, unknown> | undefined> {\n  const bodyResult = await readBoundedJsonBody(request, { limitBytes });\n  if (!bodyResult.ok) {\n    sendJson(response, bodyResult.status, { error: bodyResult.error });\n    return undefined;\n  }\n  if (!bodyResult.value || typeof bodyResult.value !== 'object' || Array.isArray(bodyResult.value)) {\n    sendJson(response, 400, { error: 'Request body must be a JSON object' });\n    return undefined;\n  }\n  return bodyResult.value as Record<string, unknown>;\n}\n\nasync function sendServiceResult(response: ServerResponse, action: () => Promise<unknown>): Promise<void> {\n  try {\n    sendJson(response, 200, await action());\n  } catch (error) {\n    if (error instanceof AiClientConfigurationError) {\n      sendJson(response, error.statusCode, safeErrorPayload(error));\n      return;\n    }\n    sendJson(response, 500, safeErrorPayload(new AiClientConfigurationError(\n      'client_configuration_failed',\n      redactSecretText(error instanceof Error ? error.message : 'Unknown error'),\n      500,\n    )));\n  }\n}\n\nfunction requireClient(value: string | undefined): AiClientId {\n  if (value === 'codex' || value === 'claude-code' || value === 'pi' || value === 'codebuddy') {\n    return value;\n  }\n  throw new AiClientConfigurationError('unsupported_client', 'Unsupported AI client.', 404);\n}\n\nfunction requireString(value: unknown, field: string): string {\n  if (typeof value !== 'string' || !value.trim()) {\n    throw new AiClientConfigurationError('invalid_request', `${field} must be a non-empty string.`, 400);\n  }\n  return value.trim();\n}\n\nfunction optionalString(value: unknown): string | undefined {\n  return typeof value === 'string' && value.trim() ? value.trim() : undefined;\n}\n\nfunction optionalConfirmation(value: unknown): { token: string; targetHash: string } | undefined {\n  if (!value || typeof value !== 'object' || Array.isArray(value)) return undefined;\n  const record = value as Record<string, unknown>;\n  const token = optionalString(record.token);\n  const targetHash = optionalString(record.targetHash);\n  return token && targetHash ? { token, targetHash } : undefined;\n}\n\nfunction safeErrorPayload(error: AiClientConfigurationError): { code: string; message: string; details?: unknown } {\n  return {\n    code: error.code,\n    message: redactSecretText(error.message),\n    ...(error.details ? { details: redactDetails(error.details) } : {}),\n  };\n}\n\nfunction redactDetails(value: unknown): unknown {\n  if (!value || typeof value !== 'object') {\n    return typeof value === 'string' ? redactSecretText(value) : value;\n  }\n  if (Array.isArray(value)) {\n    return value.map(redactDetails);\n  }\n  const output: Record<string, unknown> = {};\n  for (const [key, entry] of Object.entries(value)) {\n    if (/path|secret|token|key/iu.test(key)) {\n      output[key] = '[redacted]';\n    } else {\n      output[key] = redactDetails(entry);\n    }\n  }\n  return output;\n}\n\nfunction sendJson(response: ServerResponse, statusCode: number, payload: unknown): void {\n  response.statusCode = statusCode;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(payload));\n}\n"]}

package/dist/api/handlers/AiGatewayHandler.d.ts

@@ -0,0 +1,23 @@
+import type { ServerResponse } from 'node:http';
+import type { ApiServer } from '../ApiServer';
+import type { AuthenticatedRequest } from '../middleware/AuthMiddleware';
+import type { AiGatewayService } from '../ai-gateway/AiGatewayService';
+import type { GatewayProtocol } from '../ai-gateway/types';
+export interface AiGatewayHandlerOptions {
+    service: AiGatewayService;
+    jsonBodyLimitBytes?: number;
+    acceptanceEndpointsEnabled?: boolean;
+}
+export declare function registerAiGatewayRoutes(server: ApiServer, options: AiGatewayHandlerOptions): void;
+export declare class AiGatewayHandler {
+    private readonly logger;
+    private readonly service;
+    private readonly jsonBodyLimitBytes;
+    constructor(options: AiGatewayHandlerOptions);
+    handleInference(request: AuthenticatedRequest, response: ServerResponse, protocol: GatewayProtocol): Promise<void>;
+    handleModels(request: AuthenticatedRequest, response: ServerResponse): Promise<void>;
+    handleAcceptanceProvenance(request: AuthenticatedRequest, response: ServerResponse): Promise<void>;
+    private sendEventStream;
+    private writeTerminalStreamError;
+    private sendGatewayError;
+}

package/dist/api/handlers/AiGatewayHandler.js

@@ -0,0 +1,231 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AiGatewayHandler = void 0;
+exports.registerAiGatewayRoutes = registerAiGatewayRoutes;
+const global_logger_factory_1 = require("global-logger-factory");
+const readBoundedJsonBody_1 = require("../http/readBoundedJsonBody");
+const errors_1 = require("../ai-gateway/errors");
+const DEFAULT_JSON_BODY_LIMIT_BYTES = 2 * 1024 * 1024;
+function registerAiGatewayRoutes(server, options) {
+    const handler = new AiGatewayHandler(options);
+    server.post('/v1/responses', (request, response) => handler.handleInference(request, response, 'responses'));
+    server.post('/v1/messages', (request, response) => handler.handleInference(request, response, 'anthropic'));
+    server.post('/v1/chat/completions', (request, response) => handler.handleInference(request, response, 'chatCompletions'));
+    server.get('/v1/models', (request, response) => handler.handleModels(request, response));
+    if (options.acceptanceEndpointsEnabled === true) {
+        server.get('/v1/xpod/acceptance/provenance', (request, response) => handler.handleAcceptanceProvenance(request, response));
+    }
+}
+class AiGatewayHandler {
+    constructor(options) {
+        this.logger = (0, global_logger_factory_1.getLoggerFor)(this);
+        this.service = options.service;
+        this.jsonBodyLimitBytes = options.jsonBodyLimitBytes ?? DEFAULT_JSON_BODY_LIMIT_BYTES;
+    }
+    async handleInference(request, response, protocol) {
+        const bodyResult = await (0, readBoundedJsonBody_1.readBoundedJsonBody)(request, { limitBytes: this.jsonBodyLimitBytes });
+        if (!bodyResult.ok) {
+            this.sendGatewayError(response, new errors_1.GatewayProtocolError(bodyResult.error, {
+                code: 'invalid_request',
+                status: bodyResult.status,
+            }));
+            return;
+        }
+        const controller = new AbortController();
+        const abort = () => controller.abort();
+        response.once('close', abort);
+        try {
+            const stream = isStreamRequest(bodyResult.value);
+            if (!stream) {
+                const result = await this.service.complete({
+                    auth: request.auth,
+                    protocol,
+                    body: bodyResult.value,
+                    signal: controller.signal,
+                });
+                sendJson(response, 200, result);
+                return;
+            }
+            const execution = await this.service.execute({
+                auth: request.auth,
+                protocol,
+                body: bodyResult.value,
+                signal: controller.signal,
+            });
+            await this.sendEventStream(response, execution.frontend, execution.events);
+        }
+        catch (error) {
+            if (controller.signal.aborted || response.destroyed) {
+                return;
+            }
+            if (response.headersSent) {
+                await this.writeTerminalStreamError(response, error);
+                return;
+            }
+            this.sendGatewayError(response, error);
+        }
+        finally {
+            response.off('close', abort);
+        }
+    }
+    async handleModels(request, response) {
+        try {
+            const models = await this.service.listModels(request.auth);
+            sendJson(response, 200, {
+                object: 'list',
+                data: models,
+            });
+        }
+        catch (error) {
+            this.sendGatewayError(response, error);
+        }
+    }
+    async handleAcceptanceProvenance(request, response) {
+        try {
+            if (request.auth?.type !== 'solid' || request.auth.viaGatewayApiKey !== true) {
+                throw new errors_1.GatewayProtocolError('Acceptance provenance requires a Gateway API key principal', {
+                    code: 'invalid_request',
+                    status: 403,
+                });
+            }
+            const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);
+            const model = url.searchParams.get('model')?.trim();
+            if (!model) {
+                throw new errors_1.GatewayProtocolError('model is required', {
+                    code: 'invalid_request',
+                    status: 400,
+                });
+            }
+            sendJson(response, 200, await this.service.acceptanceProvenance({
+                auth: request.auth,
+                model,
+                xpodBaseUrl: `${headerString(request.headers['x-forwarded-proto']) || url.protocol.replace(':', '')}://${url.host}`,
+            }));
+        }
+        catch (error) {
+            this.sendGatewayError(response, error);
+        }
+    }
+    async sendEventStream(response, frontend, events) {
+        const iterator = events[Symbol.asyncIterator]();
+        let disconnected = false;
+        let iteratorReturned = false;
+        const returnIterator = async () => {
+            if (!iteratorReturned) {
+                iteratorReturned = true;
+                await iterator.return?.();
+            }
+        };
+        const onClose = () => {
+            disconnected = true;
+            void returnIterator();
+        };
+        response.once('close', onClose);
+        let first;
+        try {
+            first = await iterator.next();
+        }
+        catch (error) {
+            await returnIterator();
+            response.off('close', onClose);
+            throw error;
+        }
+        if (first.done) {
+            await returnIterator();
+            response.off('close', onClose);
+            throw new errors_1.GatewayProtocolError('Provider stream ended before emitting any gateway event', {
+                code: 'provider_error',
+                status: 502,
+            });
+        }
+        response.statusCode = 200;
+        response.setHeader('Content-Type', 'text/event-stream; charset=utf-8');
+        response.setHeader('Cache-Control', 'no-cache, no-transform');
+        response.setHeader('Connection', 'keep-alive');
+        const serializer = frontend.createEventSerializer();
+        try {
+            await writeSerializedEvents(response, serializer.serializeEvent(first.value));
+            for (;;) {
+                const next = await iterator.next();
+                if (next.done) {
+                    break;
+                }
+                await writeSerializedEvents(response, serializer.serializeEvent(next.value));
+            }
+            await writeWithBackpressure(response, 'data: [DONE]\n\n');
+        }
+        catch (error) {
+            await returnIterator();
+            if (!disconnected) {
+                await this.writeTerminalStreamError(response, error);
+            }
+        }
+        finally {
+            response.off('close', onClose);
+            if (!disconnected && !response.writableEnded) {
+                response.end();
+            }
+        }
+    }
+    async writeTerminalStreamError(response, error) {
+        const payload = (0, errors_1.normalizeGatewayError)(error);
+        await writeWithBackpressure(response, `data: ${JSON.stringify({ error: payload.error })}\n\n`);
+        await writeWithBackpressure(response, 'data: [DONE]\n\n');
+        if (!response.writableEnded) {
+            response.end();
+        }
+    }
+    sendGatewayError(response, error) {
+        const payload = (0, errors_1.normalizeGatewayError)(error);
+        this.logger.warn(`AI Gateway request failed: ${payload.error.code}`);
+        sendJson(response, payload.error.status, {
+            error: {
+                code: payload.error.code,
+                message: payload.error.message,
+                ...(payload.error.details ? { details: payload.error.details } : {}),
+            },
+        });
+    }
+}
+exports.AiGatewayHandler = AiGatewayHandler;
+async function writeSerializedEvents(response, serialized) {
+    for (const event of Array.isArray(serialized) ? serialized : [serialized]) {
+        await writeWithBackpressure(response, `data: ${JSON.stringify(event)}\n\n`);
+    }
+}
+async function writeWithBackpressure(response, chunk) {
+    if (response.destroyed || response.writableEnded) {
+        throw new Error('Response stream closed');
+    }
+    if (response.write(chunk)) {
+        return;
+    }
+    await new Promise((resolve, reject) => {
+        const onDrain = () => {
+            cleanup();
+            resolve();
+        };
+        const onClose = () => {
+            cleanup();
+            reject(new Error('Response stream closed'));
+        };
+        const cleanup = () => {
+            response.off('drain', onDrain);
+            response.off('close', onClose);
+        };
+        response.once('drain', onDrain);
+        response.once('close', onClose);
+    });
+}
+function isStreamRequest(body) {
+    return Boolean(body && typeof body === 'object' && !Array.isArray(body) && body.stream === true);
+}
+function headerString(value) {
+    return Array.isArray(value) ? value[0] ?? '' : value ?? '';
+}
+function sendJson(response, status, data) {
+    response.statusCode = status;
+    response.setHeader('Content-Type', 'application/json');
+    response.end(JSON.stringify(data));
+}
+//# sourceMappingURL=AiGatewayHandler.js.map

package/dist/api/handlers/AiGatewayHandler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"AiGatewayHandler.js","sourceRoot":"","sources":["../../../src/api/handlers/AiGatewayHandler.ts"],"names":[],"mappings":";;;AAiBA,0DAYC;AA5BD,iEAAqD;AAGrD,qEAAkE;AAClE,iDAAmF;AAUnF,MAAM,6BAA6B,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAEtD,SAAgB,uBAAuB,CACrC,MAAiB,EACjB,OAAgC;IAEhC,MAAM,OAAO,GAAG,IAAI,gBAAgB,CAAC,OAAO,CAAC,CAAC;IAC9C,MAAM,CAAC,IAAI,CAAC,eAAe,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC7G,MAAM,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC,CAAC;IAC5G,MAAM,CAAC,IAAI,CAAC,sBAAsB,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,eAAe,CAAC,OAAO,EAAE,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC;IAC1H,MAAM,CAAC,GAAG,CAAC,YAAY,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IACzF,IAAI,OAAO,CAAC,0BAA0B,KAAK,IAAI,EAAE,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,gCAAgC,EAAE,CAAC,OAAO,EAAE,QAAQ,EAAE,EAAE,CAAC,OAAO,CAAC,0BAA0B,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC7H,CAAC;AACH,CAAC;AAED,MAAa,gBAAgB;IAK3B,YAAmB,OAAgC;QAJlC,WAAM,GAAG,IAAA,oCAAY,EAAC,IAAI,CAAC,CAAC;QAK3C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,kBAAkB,GAAG,OAAO,CAAC,kBAAkB,IAAI,6BAA6B,CAAC;IACxF,CAAC;IAEM,KAAK,CAAC,eAAe,CAC1B,OAA6B,EAC7B,QAAwB,EACxB,QAAyB;QAEzB,MAAM,UAAU,GAAG,MAAM,IAAA,yCAAmB,EAAC,OAAO,EAAE,EAAE,UAAU,EAAE,IAAI,CAAC,kBAAkB,EAAE,CAAC,CAAC;QAC/F,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC;YACnB,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,IAAI,6BAAoB,CAAC,UAAU,CAAC,KAAK,EAAE;gBACzE,IAAI,EAAE,iBAAiB;gBACvB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC,CAAC;YACJ,OAAO;QACT,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,GAAS,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC7C,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAE9B,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,eAAe,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;YACjD,IAAI,CAAC,MAAM,EAAE,CAAC;gBACZ,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC;oBACzC,IAAI,EAAE,OAAO,CAAC,IAAK;oBACnB,QAAQ;oBACR,IAAI,EAAE,UAAU,CAAC,KAAK;oBACtB,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;gBACH,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,CAAC,CAAC;gBAChC,OAAO;YACT,CAAC;YAED,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;gBAC3C,IAAI,EAAE,OAAO,CAAC,IAAK;gBACnB,QAAQ;gBACR,IAAI,EAAE,UAAU,CAAC,KAAK;gBACtB,MAAM,EAAE,UAAU,CAAC,MAAM;aAC1B,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,eAAe,CAAC,QAAQ,EAAE,SAAS,CAAC,QAAQ,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;QAC7E,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,IAAI,QAAQ,CAAC,SAAS,EAAE,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,QAAQ,CAAC,WAAW,EAAE,CAAC;gBACzB,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;gBACrD,OAAO;YACT,CAAC;YACD,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,YAAY,CACvB,OAA6B,EAC7B,QAAwB;QAExB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC,IAAK,CAAC,CAAC;YAC5D,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE;gBACtB,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,MAAM;aACb,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAEM,KAAK,CAAC,0BAA0B,CACrC,OAA6B,EAC7B,QAAwB;QAExB,IAAI,CAAC;YACH,IAAI,OAAO,CAAC,IAAI,EAAE,IAAI,KAAK,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,gBAAgB,KAAK,IAAI,EAAE,CAAC;gBAC7E,MAAM,IAAI,6BAAoB,CAAC,4DAA4D,EAAE;oBAC3F,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,GAAG,EAAE,UAAU,OAAO,CAAC,OAAO,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC,CAAC;YACzF,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;YACpD,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,6BAAoB,CAAC,mBAAmB,EAAE;oBAClD,IAAI,EAAE,iBAAiB;oBACvB,MAAM,EAAE,GAAG;iBACZ,CAAC,CAAC;YACL,CAAC;YACD,QAAQ,CAAC,QAAQ,EAAE,GAAG,EAAE,MAAM,IAAI,CAAC,OAAO,CAAC,oBAAoB,CAAC;gBAC9D,IAAI,EAAE,OAAO,CAAC,IAAI;gBAClB,KAAK;gBACL,WAAW,EAAE,GAAG,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE;aACpH,CAAC,CAAC,CAAC;QACN,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,gBAAgB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzC,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,eAAe,CAC3B,QAAwB,EACxB,QAAiC,EACjC,MAAmC;QAEnC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC;QAChD,IAAI,YAAY,GAAG,KAAK,CAAC;QACzB,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAC7B,MAAM,cAAc,GAAG,KAAK,IAAkB,EAAE;YAC9C,IAAI,CAAC,gBAAgB,EAAE,CAAC;gBACtB,gBAAgB,GAAG,IAAI,CAAC;gBACxB,MAAM,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;YAC5B,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,YAAY,GAAG,IAAI,CAAC;YACpB,KAAK,cAAc,EAAE,CAAC;QACxB,CAAC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,KAAmC,CAAC;QACxC,IAAI,CAAC;YACH,KAAK,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,MAAM,KAAK,CAAC;QACd,CAAC;QACD,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;YACf,MAAM,cAAc,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,MAAM,IAAI,6BAAoB,CAAC,yDAAyD,EAAE;gBACxF,IAAI,EAAE,gBAAgB;gBACtB,MAAM,EAAE,GAAG;aACZ,CAAC,CAAC;QACL,CAAC;QAED,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;QAC1B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kCAAkC,CAAC,CAAC;QACvE,QAAQ,CAAC,SAAS,CAAC,eAAe,EAAE,wBAAwB,CAAC,CAAC;QAC9D,QAAQ,CAAC,SAAS,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,QAAQ,CAAC,qBAAqB,EAAE,CAAC;QACpD,IAAI,CAAC;YACH,MAAM,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;YAC9E,SAAS,CAAC;gBACR,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;gBACnC,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;oBACd,MAAM;gBACR,CAAC;gBACD,MAAM,qBAAqB,CAAC,QAAQ,EAAE,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/E,CAAC;YACD,MAAM,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC5D,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,cAAc,EAAE,CAAC;YACvB,IAAI,CAAC,YAAY,EAAE,CAAC;gBAClB,MAAM,IAAI,CAAC,wBAAwB,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;YACvD,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,IAAI,CAAC,YAAY,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;gBAC7C,QAAQ,CAAC,GAAG,EAAE,CAAC;YACjB,CAAC;QACH,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,wBAAwB,CAAC,QAAwB,EAAE,KAAc;QAC7E,MAAM,OAAO,GAAG,IAAA,8BAAqB,EAAC,KAAK,CAAC,CAAC;QAC7C,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;QAC/F,MAAM,qBAAqB,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC1D,IAAI,CAAC,QAAQ,CAAC,aAAa,EAAE,CAAC;YAC5B,QAAQ,CAAC,GAAG,EAAE,CAAC;QACjB,CAAC;IACH,CAAC;IAEO,gBAAgB,CAAC,QAAwB,EAAE,KAAc;QAC/D,MAAM,OAAO,GAAG,IAAA,8BAAqB,EAAC,KAAK,CAAC,CAAC;QAC7C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;QACrE,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC,KAAK,CAAC,MAAM,EAAE;YACvC,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO,CAAC,KAAK,CAAC,IAAI;gBACxB,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO;gBAC9B,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrE;SACF,CAAC,CAAC;IACL,CAAC;CACF;AA9LD,4CA8LC;AAED,KAAK,UAAU,qBAAqB,CAClC,QAAwB,EACxB,UAA+D;IAE/D,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,EAAE,CAAC;QAC1E,MAAM,qBAAqB,CAAC,QAAQ,EAAE,SAAS,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IAC9E,CAAC;AACH,CAAC;AAED,KAAK,UAAU,qBAAqB,CAAC,QAAwB,EAAE,KAAa;IAC1E,IAAI,QAAQ,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC;IAC5C,CAAC;IACD,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC1B,OAAO;IACT,CAAC;IACD,MAAM,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QAC1C,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,CAAC;QACZ,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,OAAO,EAAE,CAAC;YACV,MAAM,CAAC,IAAI,KAAK,CAAC,wBAAwB,CAAC,CAAC,CAAC;QAC9C,CAAC,CAAC;QACF,MAAM,OAAO,GAAG,GAAS,EAAE;YACzB,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC/B,QAAQ,CAAC,GAAG,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACjC,CAAC,CAAC;QACF,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChC,QAAQ,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAClC,CAAC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,eAAe,CAAC,IAAa;IACpC,OAAO,OAAO,CAAC,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,IAAK,IAA6B,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC;AAC7H,CAAC;AAED,SAAS,YAAY,CAAC,KAAoC;IACxD,OAAO,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC;AAC7D,CAAC;AAED,SAAS,QAAQ,CAAC,QAAwB,EAAE,MAAc,EAAE,IAAa;IACvE,QAAQ,CAAC,UAAU,GAAG,MAAM,CAAC;IAC7B,QAAQ,CAAC,SAAS,CAAC,cAAc,EAAE,kBAAkB,CAAC,CAAC;IACvD,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AACrC,CAAC","sourcesContent":["import type { ServerResponse } from 'node:http';\nimport { getLoggerFor } from 'global-logger-factory';\nimport type { ApiServer } from '../ApiServer';\nimport type { AuthenticatedRequest } from '../middleware/AuthMiddleware';\nimport { readBoundedJsonBody } from '../http/readBoundedJsonBody';\nimport { GatewayProtocolError, normalizeGatewayError } from '../ai-gateway/errors';\nimport type { AiGatewayService } from '../ai-gateway/AiGatewayService';\nimport type { GatewayEvent, GatewayProtocol, GatewayProtocolFrontend } from '../ai-gateway/types';\n\nexport interface AiGatewayHandlerOptions {\n  service: AiGatewayService;\n  jsonBodyLimitBytes?: number;\n  acceptanceEndpointsEnabled?: boolean;\n}\n\nconst DEFAULT_JSON_BODY_LIMIT_BYTES = 2 * 1024 * 1024;\n\nexport function registerAiGatewayRoutes(\n  server: ApiServer,\n  options: AiGatewayHandlerOptions,\n): void {\n  const handler = new AiGatewayHandler(options);\n  server.post('/v1/responses', (request, response) => handler.handleInference(request, response, 'responses'));\n  server.post('/v1/messages', (request, response) => handler.handleInference(request, response, 'anthropic'));\n  server.post('/v1/chat/completions', (request, response) => handler.handleInference(request, response, 'chatCompletions'));\n  server.get('/v1/models', (request, response) => handler.handleModels(request, response));\n  if (options.acceptanceEndpointsEnabled === true) {\n    server.get('/v1/xpod/acceptance/provenance', (request, response) => handler.handleAcceptanceProvenance(request, response));\n  }\n}\n\nexport class AiGatewayHandler {\n  private readonly logger = getLoggerFor(this);\n  private readonly service: AiGatewayService;\n  private readonly jsonBodyLimitBytes: number;\n\n  public constructor(options: AiGatewayHandlerOptions) {\n    this.service = options.service;\n    this.jsonBodyLimitBytes = options.jsonBodyLimitBytes ?? DEFAULT_JSON_BODY_LIMIT_BYTES;\n  }\n\n  public async handleInference(\n    request: AuthenticatedRequest,\n    response: ServerResponse,\n    protocol: GatewayProtocol,\n  ): Promise<void> {\n    const bodyResult = await readBoundedJsonBody(request, { limitBytes: this.jsonBodyLimitBytes });\n    if (!bodyResult.ok) {\n      this.sendGatewayError(response, new GatewayProtocolError(bodyResult.error, {\n        code: 'invalid_request',\n        status: bodyResult.status,\n      }));\n      return;\n    }\n\n    const controller = new AbortController();\n    const abort = (): void => controller.abort();\n    response.once('close', abort);\n\n    try {\n      const stream = isStreamRequest(bodyResult.value);\n      if (!stream) {\n        const result = await this.service.complete({\n          auth: request.auth!,\n          protocol,\n          body: bodyResult.value,\n          signal: controller.signal,\n        });\n        sendJson(response, 200, result);\n        return;\n      }\n\n      const execution = await this.service.execute({\n        auth: request.auth!,\n        protocol,\n        body: bodyResult.value,\n        signal: controller.signal,\n      });\n      await this.sendEventStream(response, execution.frontend, execution.events);\n    } catch (error) {\n      if (controller.signal.aborted || response.destroyed) {\n        return;\n      }\n      if (response.headersSent) {\n        await this.writeTerminalStreamError(response, error);\n        return;\n      }\n      this.sendGatewayError(response, error);\n    } finally {\n      response.off('close', abort);\n    }\n  }\n\n  public async handleModels(\n    request: AuthenticatedRequest,\n    response: ServerResponse,\n  ): Promise<void> {\n    try {\n      const models = await this.service.listModels(request.auth!);\n      sendJson(response, 200, {\n        object: 'list',\n        data: models,\n      });\n    } catch (error) {\n      this.sendGatewayError(response, error);\n    }\n  }\n\n  public async handleAcceptanceProvenance(\n    request: AuthenticatedRequest,\n    response: ServerResponse,\n  ): Promise<void> {\n    try {\n      if (request.auth?.type !== 'solid' || request.auth.viaGatewayApiKey !== true) {\n        throw new GatewayProtocolError('Acceptance provenance requires a Gateway API key principal', {\n          code: 'invalid_request',\n          status: 403,\n        });\n      }\n      const url = new URL(request.url ?? '/', `http://${request.headers.host ?? 'localhost'}`);\n      const model = url.searchParams.get('model')?.trim();\n      if (!model) {\n        throw new GatewayProtocolError('model is required', {\n          code: 'invalid_request',\n          status: 400,\n        });\n      }\n      sendJson(response, 200, await this.service.acceptanceProvenance({\n        auth: request.auth,\n        model,\n        xpodBaseUrl: `${headerString(request.headers['x-forwarded-proto']) || url.protocol.replace(':', '')}://${url.host}`,\n      }));\n    } catch (error) {\n      this.sendGatewayError(response, error);\n    }\n  }\n\n  private async sendEventStream(\n    response: ServerResponse,\n    frontend: GatewayProtocolFrontend,\n    events: AsyncIterable<GatewayEvent>,\n  ): Promise<void> {\n    const iterator = events[Symbol.asyncIterator]();\n    let disconnected = false;\n    let iteratorReturned = false;\n    const returnIterator = async(): Promise<void> => {\n      if (!iteratorReturned) {\n        iteratorReturned = true;\n        await iterator.return?.();\n      }\n    };\n    const onClose = (): void => {\n      disconnected = true;\n      void returnIterator();\n    };\n    response.once('close', onClose);\n    let first: IteratorResult<GatewayEvent>;\n    try {\n      first = await iterator.next();\n    } catch (error) {\n      await returnIterator();\n      response.off('close', onClose);\n      throw error;\n    }\n    if (first.done) {\n      await returnIterator();\n      response.off('close', onClose);\n      throw new GatewayProtocolError('Provider stream ended before emitting any gateway event', {\n        code: 'provider_error',\n        status: 502,\n      });\n    }\n\n    response.statusCode = 200;\n    response.setHeader('Content-Type', 'text/event-stream; charset=utf-8');\n    response.setHeader('Cache-Control', 'no-cache, no-transform');\n    response.setHeader('Connection', 'keep-alive');\n    const serializer = frontend.createEventSerializer();\n    try {\n      await writeSerializedEvents(response, serializer.serializeEvent(first.value));\n      for (;;) {\n        const next = await iterator.next();\n        if (next.done) {\n          break;\n        }\n        await writeSerializedEvents(response, serializer.serializeEvent(next.value));\n      }\n      await writeWithBackpressure(response, 'data: [DONE]\\n\\n');\n    } catch (error) {\n      await returnIterator();\n      if (!disconnected) {\n        await this.writeTerminalStreamError(response, error);\n      }\n    } finally {\n      response.off('close', onClose);\n      if (!disconnected && !response.writableEnded) {\n        response.end();\n      }\n    }\n  }\n\n  private async writeTerminalStreamError(response: ServerResponse, error: unknown): Promise<void> {\n    const payload = normalizeGatewayError(error);\n    await writeWithBackpressure(response, `data: ${JSON.stringify({ error: payload.error })}\\n\\n`);\n    await writeWithBackpressure(response, 'data: [DONE]\\n\\n');\n    if (!response.writableEnded) {\n      response.end();\n    }\n  }\n\n  private sendGatewayError(response: ServerResponse, error: unknown): void {\n    const payload = normalizeGatewayError(error);\n    this.logger.warn(`AI Gateway request failed: ${payload.error.code}`);\n    sendJson(response, payload.error.status, {\n      error: {\n        code: payload.error.code,\n        message: payload.error.message,\n        ...(payload.error.details ? { details: payload.error.details } : {}),\n      },\n    });\n  }\n}\n\nasync function writeSerializedEvents(\n  response: ServerResponse,\n  serialized: Record<string, unknown> | Record<string, unknown>[],\n): Promise<void> {\n  for (const event of Array.isArray(serialized) ? serialized : [serialized]) {\n    await writeWithBackpressure(response, `data: ${JSON.stringify(event)}\\n\\n`);\n  }\n}\n\nasync function writeWithBackpressure(response: ServerResponse, chunk: string): Promise<void> {\n  if (response.destroyed || response.writableEnded) {\n    throw new Error('Response stream closed');\n  }\n  if (response.write(chunk)) {\n    return;\n  }\n  await new Promise<void>((resolve, reject) => {\n    const onDrain = (): void => {\n      cleanup();\n      resolve();\n    };\n    const onClose = (): void => {\n      cleanup();\n      reject(new Error('Response stream closed'));\n    };\n    const cleanup = (): void => {\n      response.off('drain', onDrain);\n      response.off('close', onClose);\n    };\n    response.once('drain', onDrain);\n    response.once('close', onClose);\n  });\n}\n\nfunction isStreamRequest(body: unknown): boolean {\n  return Boolean(body && typeof body === 'object' && !Array.isArray(body) && (body as { stream?: unknown }).stream === true);\n}\n\nfunction headerString(value: string | string[] | undefined): string {\n  return Array.isArray(value) ? value[0] ?? '' : value ?? '';\n}\n\nfunction sendJson(response: ServerResponse, status: number, data: unknown): void {\n  response.statusCode = status;\n  response.setHeader('Content-Type', 'application/json');\n  response.end(JSON.stringify(data));\n}\n"]}

package/dist/api/handlers/AiGatewayManagementHandler.d.ts

@@ -0,0 +1,24 @@
+import type { ApiServer } from '../ApiServer';
+import { type GatewayDeployment } from '../ai-gateway/auth/GatewayApiKey';
+import type { GatewayAccessKeyRepository } from '../ai-gateway/auth/GatewayApiKeyAuthenticator';
+import type { ProviderConnectService } from '../ai-gateway/connect';
+import type { ProviderQuotaService } from '../ai-gateway/quota';
+import type { AiConnectionInvocationKeyIssuer } from '../ai-gateway/auth/AiConnectionInvocationKeyIssuer';
+import { type AiClientConfigurationCapabilityDescriptor } from '../service/AiClientConfigurationService';
+export interface AiGatewayManagementHandlerOptions {
+    repository: GatewayAccessKeyRepository;
+    deployment: GatewayDeployment;
+    connectService?: ProviderConnectService;
+    quotaService?: ProviderQuotaService;
+    servicePrincipal?: {
+        getServicePrincipal(): Promise<{
+            webId: string;
+        }>;
+    };
+    aiClientConfiguration?: AiClientConfigurationCapabilityDescriptor;
+    aiConnectionInvocationKeyIssuer?: Pick<AiConnectionInvocationKeyIssuer, 'issue'>;
+    now?: () => Date;
+    keyId?: (owner: string) => string;
+    jsonBodyLimitBytes?: number;
+}
+export declare function registerAiGatewayManagementRoutes(server: ApiServer, options: AiGatewayManagementHandlerOptions): void;