@vib-rato/ai 0.16.0

package/package.json

@@ -0,0 +1,152 @@
+{
+	"type": "module",
+	"name": "@vib-rato/ai",
+	"version": "0.16.0",
+	"description": "Unified LLM API with automatic model discovery and provider configuration",
+	"homepage": "https://github.com/Keonho-Chu/Vibrato",
+	"author": "Yeachan-Heo and Vibrato Contributors",
+	"license": "MIT",
+	"repository": {
+		"type": "git",
+		"url": "git+https://github.com/Keonho-Chu/Vibrato.git",
+		"directory": "packages/ai"
+	},
+	"bugs": {
+		"url": "https://github.com/Keonho-Chu/Vibrato/issues"
+	},
+	"keywords": [
+		"ai",
+		"llm",
+		"openai",
+		"anthropic",
+		"gemini",
+		"unified",
+		"api"
+	],
+	"main": "./src/index.ts",
+	"types": "./dist/types/index.d.ts",
+	"bin": {
+		"pi-ai": "./src/cli.ts"
+	},
+	"scripts": {
+		"check": "biome check . && bun run check:types",
+		"check:types": "tsc -p tsconfig.json --noEmit",
+		"lint": "biome lint .",
+		"test": "bun test",
+		"fix": "biome check --write --unsafe .",
+		"fmt": "biome format --write .",
+		"generate-models": "bun scripts/generate-models.ts"
+	},
+	"dependencies": {
+		"@anthropic-ai/sdk": "^0.94.0",
+		"@bufbuild/protobuf": "^2.12.0",
+		"@vib-rato/natives": "0.16.0",
+		"@vib-rato/utils": "0.16.0",
+		"openai": "^6.36.0",
+		"partial-json": "^0.1.7",
+		"zod": "4.4.3"
+	},
+	"devDependencies": {
+		"@types/bun": "^1.3.14"
+	},
+	"engines": {
+		"bun": ">=1.4.0"
+	},
+	"files": [
+		"src",
+		"README.md",
+		"CHANGELOG.md",
+		"dist/types"
+	],
+	"exports": {
+		"./core": {
+			"types": "./dist/types/core.d.ts",
+			"import": "./src/core.ts"
+		},
+		".": {
+			"types": "./dist/types/index.d.ts",
+			"import": "./src/index.ts"
+		},
+		"./adapter-internals/*": null,
+		"./adapter-internals/*.js": null,
+		"./*": {
+			"types": "./dist/types/*.d.ts",
+			"import": "./src/*.ts",
+			"require": "./src/*.ts"
+		},
+		"./auth-broker": {
+			"types": "./dist/types/auth-broker/index.d.ts",
+			"import": "./src/auth-broker/index.ts"
+		},
+		"./auth-broker/*": {
+			"types": "./dist/types/auth-broker/*.d.ts",
+			"import": "./src/auth-broker/*.ts"
+		},
+		"./auth-gateway": {
+			"types": "./dist/types/auth-gateway/index.d.ts",
+			"import": "./src/auth-gateway/index.ts"
+		},
+		"./auth-gateway/*": {
+			"types": "./dist/types/auth-gateway/*.d.ts",
+			"import": "./src/auth-gateway/*.ts"
+		},
+		"./models.json": {
+			"types": "./dist/types/models.json.d.d.ts",
+			"import": "./src/models.json"
+		},
+		"./provider-models": {
+			"types": "./dist/types/provider-models/index.d.ts",
+			"import": "./src/provider-models/index.ts"
+		},
+		"./provider-models/*": {
+			"types": "./dist/types/provider-models/*.d.ts",
+			"import": "./src/provider-models/*.ts"
+		},
+		"./providers/*": {
+			"types": "./dist/types/providers/*.d.ts",
+			"import": "./src/providers/*.ts",
+			"require": "./src/providers/*.ts"
+		},
+		"./providers/cursor/gen/*": {
+			"types": "./dist/types/providers/cursor/gen/*.d.ts",
+			"import": "./src/providers/cursor/gen/*.ts"
+		},
+		"./providers/openai-codex/*": {
+			"types": "./dist/types/providers/openai-codex/*.d.ts",
+			"import": "./src/providers/openai-codex/*.ts"
+		},
+		"./usage/*": {
+			"types": "./dist/types/usage/*.d.ts",
+			"import": "./src/usage/*.ts"
+		},
+		"./utils/*": {
+			"types": "./dist/types/utils/*.d.ts",
+			"import": "./src/utils/*.ts"
+		},
+		"./utils/discovery": {
+			"types": "./dist/types/utils/discovery/index.d.ts",
+			"import": "./src/utils/discovery/index.ts"
+		},
+		"./utils/discovery/*": {
+			"types": "./dist/types/utils/discovery/*.d.ts",
+			"import": "./src/utils/discovery/*.ts"
+		},
+		"./utils/oauth": {
+			"types": "./dist/types/utils/oauth/index.d.ts",
+			"import": "./src/utils/oauth/index.ts"
+		},
+		"./utils/oauth/*": {
+			"types": "./dist/types/utils/oauth/*.d.ts",
+			"import": "./src/utils/oauth/*.ts"
+		},
+		"./utils/schema": {
+			"types": "./dist/types/utils/schema/index.d.ts",
+			"import": "./src/utils/schema/index.ts"
+		},
+		"./utils/schema/*": {
+			"types": "./dist/types/utils/schema/*.d.ts",
+			"import": "./src/utils/schema/*.ts"
+		},
+		"./*.js": "./src/*.ts"
+	}
+}

package/src/adapter-internals/provider-safety-stop.d.ts

@@ -0,0 +1,45 @@
+import type { Api, AssistantMessage, Model } from "../types";
+/** This module is intentionally outside the package export map. */
+declare const PROVIDER_SAFETY_STOP_ADAPTER_BRAND: unique symbol;
+declare const PROVIDER_SAFETY_STOP_INVOCATION_BRAND: unique symbol;
+/** Register an immutable catalog identity for first-party provider dispatch. */
+export declare function registerProviderSafetyStopModel(model: Model<Api>): void;
+/** Verify that a model is the unchanged identity of a bundled catalog entry. */
+export declare function isProviderSafetyStopModelTrusted(model: unknown): boolean;
+export type ProviderSafetyStopAdapterCapability = {
+    readonly [PROVIDER_SAFETY_STOP_ADAPTER_BRAND]: true;
+};
+/** The one unforgeable capability shared by first-party adapter parse sites. */
+export declare const PROVIDER_SAFETY_STOP_ADAPTER_CAPABILITY: ProviderSafetyStopAdapterCapability;
+export type ProviderSafetyStopAdapterInvocation = {
+    readonly [PROVIDER_SAFETY_STOP_INVOCATION_BRAND]: true;
+};
+export declare const PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION: ProviderSafetyStopAdapterInvocation;
+/** Attach runtime-owned adapter authority only when no caller transport seam is present. */
+export declare function withProviderSafetyStopAdapterInvocation<T extends object>(options: T): T;
+export declare function isProviderSafetyStopAdapterInvocation(value: unknown): ProviderSafetyStopAdapterInvocation | undefined;
+/** Copy an existing runtime invocation token across a first-party wrapper boundary. */
+export declare function copyProviderSafetyStopAdapterInvocation<T extends object>(source: unknown, destination: T): T;
+/**
+ * Mint terminal authority only from a first-party adapter parse site. The
+ * capability is branded by a module-private symbol and is not available from
+ * the public `@vib-rato/ai` surface. Caller-controlled transport seams are
+ * also not trusted adapter invocations: an injected fetch or SDK client can
+ * fabricate a refusal without any provider contact, so adapter call sites
+ * pass those seams explicitly and fail closed when one is present. An
+ * unrecognized structured signal fails closed, so adapter mistakes remain
+ * fallback-eligible.
+ */
+export declare function mintProviderSafetyStop(message: AssistantMessage, signal: string, capability: ProviderSafetyStopAdapterCapability, callerTransport?: unknown, adapterInvocation?: ProviderSafetyStopAdapterInvocation): boolean;
+/** Identity check for terminal provider safety-stop authority. */
+export declare function isProviderSafetyStopAuthenticated(message: unknown): boolean;
+/**
+ * Drop terminal authority for a message. Exposing revocation publicly is
+ * safe by construction: it can only remove authority, never grant it, so a
+ * hostile caller cannot use it to forge a stop — only to degrade a genuine
+ * one to an ordinary fallback-eligible error. The managed runtime uses it to
+ * expire marks once a stop has been adjudicated, before the committed
+ * message is exposed to later stream dispatches (#4777 review follow-up).
+ */
+export declare function revokeProviderSafetyStop(message: unknown): void;
+export {};

package/src/adapter-internals/provider-safety-stop.ts

@@ -0,0 +1,156 @@
+import type { Api, AssistantMessage, Model } from "../types";
+
+/** This module is intentionally outside the package export map. */
+const PROVIDER_SAFETY_STOP_ADAPTER_BRAND = Symbol("provider-safety-stop-adapter-brand");
+const PROVIDER_SAFETY_STOP_INVOCATION_BRAND = Symbol("provider-safety-stop-invocation-brand");
+const PROVIDER_SAFETY_STOP_INVOCATION_KEY = Symbol("provider-safety-stop-invocation");
+
+type ProviderSafetyStopModelIdentity = Pick<Model<Api>, "api" | "provider" | "id" | "baseUrl">;
+const trustedProviderSafetyStopModels = new WeakMap<object, string>();
+
+function providerSafetyStopModelIdentity(model: ProviderSafetyStopModelIdentity): string {
+	return `${model.api}\u0000${model.provider}\u0000${model.id}\u0000${model.baseUrl ?? ""}`;
+}
+
+/** Register an immutable catalog identity for first-party provider dispatch. */
+export function registerProviderSafetyStopModel(model: Model<Api>): void {
+	try {
+		trustedProviderSafetyStopModels.set(model, providerSafetyStopModelIdentity(model));
+	} catch {
+		// A malformed/hostile model must remain fallback-eligible.
+	}
+}
+
+/** Verify that a model is the unchanged identity of a bundled catalog entry. */
+export function isProviderSafetyStopModelTrusted(model: unknown): boolean {
+	if (typeof model !== "object" || model === null) return false;
+	const expected = trustedProviderSafetyStopModels.get(model);
+	if (expected === undefined) return false;
+	try {
+		return expected === providerSafetyStopModelIdentity(model as ProviderSafetyStopModelIdentity);
+	} catch {
+		return false;
+	}
+}
+
+export type ProviderSafetyStopAdapterCapability = {
+	readonly [PROVIDER_SAFETY_STOP_ADAPTER_BRAND]: true;
+};
+
+/** The one unforgeable capability shared by first-party adapter parse sites. */
+export const PROVIDER_SAFETY_STOP_ADAPTER_CAPABILITY = Object.freeze({
+	[PROVIDER_SAFETY_STOP_ADAPTER_BRAND]: true,
+}) as ProviderSafetyStopAdapterCapability;
+
+export type ProviderSafetyStopAdapterInvocation = {
+	readonly [PROVIDER_SAFETY_STOP_INVOCATION_BRAND]: true;
+};
+
+export const PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION = Object.freeze({
+	[PROVIDER_SAFETY_STOP_INVOCATION_BRAND]: true,
+}) as ProviderSafetyStopAdapterInvocation;
+
+function hasCallerTransport(options: object): boolean {
+	try {
+		return Reflect.get(options, "fetch") !== undefined || Reflect.get(options, "client") !== undefined;
+	} catch {
+		return true;
+	}
+}
+
+/** Attach runtime-owned adapter authority only when no caller transport seam is present. */
+export function withProviderSafetyStopAdapterInvocation<T extends object>(options: T): T {
+	if (hasCallerTransport(options)) return options;
+	return { ...options, [PROVIDER_SAFETY_STOP_INVOCATION_KEY]: PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION } as T;
+}
+
+export function isProviderSafetyStopAdapterInvocation(value: unknown): ProviderSafetyStopAdapterInvocation | undefined {
+	if (!value || typeof value !== "object") return undefined;
+	try {
+		return Reflect.get(value, PROVIDER_SAFETY_STOP_INVOCATION_KEY) === PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION
+			? PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION
+			: undefined;
+	} catch {
+		return undefined;
+	}
+}
+
+/** Copy an existing runtime invocation token across a first-party wrapper boundary. */
+export function copyProviderSafetyStopAdapterInvocation<T extends object>(source: unknown, destination: T): T {
+	return isProviderSafetyStopAdapterInvocation(source)
+		? ({ ...destination, [PROVIDER_SAFETY_STOP_INVOCATION_KEY]: PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION } as T)
+		: destination;
+}
+
+const authenticatedProviderSafetyStops = new WeakSet<object>();
+
+/**
+ * Structured refusal vocabulary per first-party adapter. The Google entries
+ * mirror the closed lists in `google-shared.ts`.
+ */
+const STRUCTURED_REFUSAL_SIGNALS: ReadonlySet<string> = new Set([
+	// anthropic-messages: stop_reason / stop_details.type
+	"refusal",
+	"sensitive",
+	// openai-completions: finish_reason / error.code
+	"content_filter",
+	// google-generative-ai: candidate finishReason
+	"SAFETY",
+	"IMAGE_SAFETY",
+	"PROHIBITED_CONTENT",
+	"IMAGE_PROHIBITED_CONTENT",
+	"SPII",
+	"BLOCKLIST",
+	"RECITATION",
+	"IMAGE_RECITATION",
+	"MODEL_ARMOR",
+	// google-generative-ai: promptFeedback.blockReason
+	"JAILBREAK",
+]);
+
+/**
+ * Mint terminal authority only from a first-party adapter parse site. The
+ * capability is branded by a module-private symbol and is not available from
+ * the public `@vib-rato/ai` surface. Caller-controlled transport seams are
+ * also not trusted adapter invocations: an injected fetch or SDK client can
+ * fabricate a refusal without any provider contact, so adapter call sites
+ * pass those seams explicitly and fail closed when one is present. An
+ * unrecognized structured signal fails closed, so adapter mistakes remain
+ * fallback-eligible.
+ */
+export function mintProviderSafetyStop(
+	message: AssistantMessage,
+	signal: string,
+	capability: ProviderSafetyStopAdapterCapability,
+	callerTransport?: unknown,
+	adapterInvocation?: ProviderSafetyStopAdapterInvocation,
+): boolean {
+	if (
+		capability !== PROVIDER_SAFETY_STOP_ADAPTER_CAPABILITY ||
+		callerTransport !== undefined ||
+		adapterInvocation !== PROVIDER_SAFETY_STOP_ADAPTER_INVOCATION ||
+		!STRUCTURED_REFUSAL_SIGNALS.has(signal)
+	)
+		return false;
+	authenticatedProviderSafetyStops.add(message);
+	message.errorKind = "provider_safety_stop";
+	return true;
+}
+
+/** Identity check for terminal provider safety-stop authority. */
+export function isProviderSafetyStopAuthenticated(message: unknown): boolean {
+	return typeof message === "object" && message !== null && authenticatedProviderSafetyStops.has(message);
+}
+
+/**
+ * Drop terminal authority for a message. Exposing revocation publicly is
+ * safe by construction: it can only remove authority, never grant it, so a
+ * hostile caller cannot use it to forge a stop — only to degrade a genuine
+ * one to an ordinary fallback-eligible error. The managed runtime uses it to
+ * expire marks once a stop has been adjudicated, before the committed
+ * message is exposed to later stream dispatches (#4777 review follow-up).
+ */
+export function revokeProviderSafetyStop(message: unknown): void {
+	if (typeof message !== "object" || message === null) return;
+	authenticatedProviderSafetyStops.delete(message);
+}

package/src/api-registry.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Custom API provider registry.
+ *
+ * Allows extensions to register streaming functions for custom API types
+ * (e.g., "vertex-Anthropic model-api") that are not built into stream.ts.
+ */
+import type { Api, AssistantMessageEventStream, Context, Model, SimpleStreamOptions, StreamOptions } from "./types";
+export type CustomStreamFn = (model: Model<Api>, context: Context, options?: StreamOptions) => AssistantMessageEventStream;
+export type CustomStreamSimpleFn = (model: Model<Api>, context: Context, options?: SimpleStreamOptions) => AssistantMessageEventStream;
+export interface RegisteredCustomApi {
+    stream: CustomStreamFn;
+    streamSimple: CustomStreamSimpleFn;
+    sourceId?: string;
+}
+/**
+ * Register a custom API streaming function.
+ */
+export declare function registerCustomApi(api: string, streamSimple: CustomStreamSimpleFn, sourceId?: string, stream?: CustomStreamFn): void;
+/**
+ * Get a custom API provider by API identifier.
+ */
+export declare function getCustomApi(api: string): RegisteredCustomApi | undefined;
+/**
+ * Remove all custom APIs registered by a specific source (e.g., extension path).
+ */
+export declare function unregisterCustomApis(sourceId: string): void;
+/**
+ * Clear all custom API registrations.
+ */
+export declare function clearCustomApis(): void;

package/src/api-registry.ts

@@ -0,0 +1,96 @@
+/**
+ * Custom API provider registry.
+ *
+ * Allows extensions to register streaming functions for custom API types
+ * (e.g., "vertex-Anthropic model-api") that are not built into stream.ts.
+ */
+import type {
+	Api,
+	AssistantMessageEventStream,
+	Context,
+	KnownApi,
+	Model,
+	SimpleStreamOptions,
+	StreamOptions,
+} from "./types";
+
+const BUILTIN_APIS = new Set<KnownApi>([
+	"openai-completions",
+	"openai-responses",
+	"openai-codex-responses",
+	"azure-openai-responses",
+	"anthropic-messages",
+	"bedrock-converse-stream",
+	"google-generative-ai",
+	"google-gemini-cli",
+	"google-vertex",
+	"ollama-chat",
+	"cursor-agent",
+]);
+
+export type CustomStreamFn = (
+	model: Model<Api>,
+	context: Context,
+	options?: StreamOptions,
+) => AssistantMessageEventStream;
+export type CustomStreamSimpleFn = (
+	model: Model<Api>,
+	context: Context,
+	options?: SimpleStreamOptions,
+) => AssistantMessageEventStream;
+
+export interface RegisteredCustomApi {
+	stream: CustomStreamFn;
+	streamSimple: CustomStreamSimpleFn;
+	sourceId?: string;
+}
+
+const customApiRegistry = new Map<string, RegisteredCustomApi>();
+
+function assertCustomApiName(api: string): void {
+	if (BUILTIN_APIS.has(api as KnownApi)) {
+		throw new Error(`Cannot register custom API "${api}": built-in API names are reserved.`);
+	}
+}
+
+/**
+ * Register a custom API streaming function.
+ */
+export function registerCustomApi(
+	api: string,
+	streamSimple: CustomStreamSimpleFn,
+	sourceId?: string,
+	stream?: CustomStreamFn,
+): void {
+	assertCustomApiName(api);
+	customApiRegistry.set(api, {
+		stream: stream ?? ((model, context, options) => streamSimple(model, context, options as SimpleStreamOptions)),
+		streamSimple,
+		sourceId,
+	});
+}
+
+/**
+ * Get a custom API provider by API identifier.
+ */
+export function getCustomApi(api: string): RegisteredCustomApi | undefined {
+	return customApiRegistry.get(api);
+}
+
+/**
+ * Remove all custom APIs registered by a specific source (e.g., extension path).
+ */
+export function unregisterCustomApis(sourceId: string): void {
+	for (const [api, entry] of customApiRegistry.entries()) {
+		if (entry.sourceId === sourceId) {
+			customApiRegistry.delete(api);
+		}
+	}
+}
+
+/**
+ * Clear all custom API registrations.
+ */
+export function clearCustomApis(): void {
+	customApiRegistry.clear();
+}