@yanlinglabs/winter-provider-conformance 0.0.5 → 0.0.6

package/dist/fakes/index.d.ts

@@ -1,6 +1,5 @@
 export { errorResponse, jsonResponse, noRequestContains, redirectResponse, requestsTo, scenarioTable, sseResponse, stalledResponse, startFake, withFake, } from "./server.js";
 export type { FakeRoute, FakeServer, RecordedRequest, ScenarioResponder, ScenarioTableOptions, SseFrame, SseResponseOptions, StartFakeOptions } from "./server.js";
-export * as anthropicConsoleOauthFake from "./anthropic-console-oauth.js";
 export * as anthropicFake from "./anthropic-messages.js";
 export * as azureFake from "./azure-openai.js";
 export * as bedrockFake from "./bedrock.js";

package/dist/fakes/index.js

@@ -12,7 +12,6 @@ import {
   exports_openai_chat,
   exports_openai_responses,
   exports_azure_openai,
-  exports_anthropic_console_oauth,
   OPAQUE_FIELD_NAMES2,
   redactOpaqueFields2,
   exports_anthropic_messages,
@@ -25,10 +24,9 @@ import {
   verifyRs256Jwt2,
   exports_vertex,
   exports_xai_oauth
-} from "../index-knhan74p.js";
+} from "../index-nrq6zn4s.js";
 export {
   OPAQUE_FIELD_NAMES2 as OPAQUE_FIELD_NAMES,
-  exports_anthropic_console_oauth as anthropicConsoleOauthFake,
   exports_anthropic_messages as anthropicFake,
   exports_azure_openai as azureFake,
   base64UrlDecodeBytes2 as base64UrlDecodeBytes,

package/dist/{index-knhan74p.js → index-nrq6zn4s.js}

@@ -157,112 +157,6 @@ function requestsTo2(fake, path) {
 function noRequestContains2(fake, needle) {
   return !fake.requests.some((r) => r.body.includes(needle) || Object.values(r.headers).some((v) => v.includes(needle)));
 }
-// src/fakes/anthropic-console-oauth.ts
-var exports_anthropic_console_oauth = {};
-__export(exports_anthropic_console_oauth, {
-  FAKE_CONSOLE_ACCESS_TOKEN: () => FAKE_CONSOLE_ACCESS_TOKEN,
-  FAKE_CONSOLE_ACCOUNT_ID: () => FAKE_CONSOLE_ACCOUNT_ID,
-  FAKE_CONSOLE_REFRESHED_ACCESS_TOKEN: () => FAKE_CONSOLE_REFRESHED_ACCESS_TOKEN,
-  FAKE_CONSOLE_REFRESH_TOKEN: () => FAKE_CONSOLE_REFRESH_TOKEN,
-  startAnthropicConsoleOauthFake: () => startAnthropicConsoleOauthFake
-});
-var FAKE_CONSOLE_ACCOUNT_ID = "acct-test-console-0001";
-var FAKE_CONSOLE_ACCESS_TOKEN = "test-token-anthropic-console-access";
-var FAKE_CONSOLE_REFRESHED_ACCESS_TOKEN = "test-token-anthropic-console-access-refreshed";
-var FAKE_CONSOLE_REFRESH_TOKEN = "test-token-anthropic-console-refresh";
-function base64Url(bytes) {
-  let binary = "";
-  for (const byte of bytes)
-    binary += String.fromCharCode(byte);
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/, "");
-}
-async function startAnthropicConsoleOauthFake(opts = {}) {
-  const tokenRequests = [];
-  const profileRequests = [];
-  const accountId = opts.accountId ?? FAKE_CONSOLE_ACCOUNT_ID;
-  const challenges = new Set;
-  const fake = await startFake2({
-    routes: [
-      {
-        path: "/v1/oauth/token",
-        method: "POST",
-        handler: async (_req, recorded) => {
-          tokenRequests.push(recorded);
-          if (opts.failTokenWith !== undefined) {
-            return jsonResponse2({ error: "invalid_grant", error_description: "the fake refused this grant" }, opts.failTokenWith);
-          }
-          const contentType = (recorded.headers["content-type"] ?? "").split(";")[0].trim();
-          if (contentType !== "application/json") {
-            return jsonResponse2({ error: "invalid_request", error_description: `this endpoint accepts application/json only, not ${JSON.stringify(contentType)}` }, 400);
-          }
-          let body;
-          try {
-            const parsed = JSON.parse(recorded.body);
-            if (parsed === null || typeof parsed !== "object" || Array.isArray(parsed))
-              throw new Error("not an object");
-            body = parsed;
-          } catch {
-            return jsonResponse2({ error: "invalid_request", error_description: "the grant body is not a JSON object" }, 400);
-          }
-          const grant = body["grant_type"];
-          if (grant === "authorization_code") {
-            if (typeof body["state"] !== "string" || body["state"].length === 0) {
-              return jsonResponse2({ error: "invalid_request", error_description: "the authorization_code grant carried no state" }, 400);
-            }
-            const verifier = typeof body["code_verifier"] === "string" ? body["code_verifier"] : "";
-            const digest = await crypto.subtle.digest("SHA-256", new TextEncoder().encode(verifier));
-            if (!challenges.has(base64Url(new Uint8Array(digest)))) {
-              return jsonResponse2({ error: "invalid_grant", error_description: "PKCE verifier does not match any challenge this fake saw" }, 400);
-            }
-          }
-          return jsonResponse2({
-            access_token: grant === "refresh_token" ? FAKE_CONSOLE_REFRESHED_ACCESS_TOKEN : FAKE_CONSOLE_ACCESS_TOKEN,
-            ...opts.omitRefreshToken === true ? {} : { refresh_token: FAKE_CONSOLE_REFRESH_TOKEN },
-            expires_in: opts.expiresIn ?? 3600,
-            scope: "user:inference user:profile",
-            token_type: "Bearer"
-          });
-        }
-      },
-      {
-        path: "/api/oauth/profile",
-        method: "GET",
-        handler: (req, recorded) => {
-          profileRequests.push(recorded);
-          if ((req.headers.get("authorization") ?? "") === "")
-            return jsonResponse2({ error: "unauthorized" }, 401);
-          return jsonResponse2({
-            ...opts.omitAccount === true ? {} : { account: { uuid: accountId, email: "person@example.test" } },
-            organization: { uuid: "org-test-console-0001" }
-          });
-        }
-      }
-    ]
-  });
-  return Object.assign(fake, {
-    authorizeUrl: `${fake.url}/oauth/authorize`,
-    tokenUrl: `${fake.url}/v1/oauth/token`,
-    profileUrl: `${fake.url}/api/oauth/profile`,
-    tokenRequests,
-    profileRequests,
-    async completeAuthorization(url, overrides = {}) {
-      const authorize = new URL(url);
-      const challenge = authorize.searchParams.get("code_challenge");
-      if (challenge !== null)
-        challenges.add(challenge);
-      const redirectUri = authorize.searchParams.get("redirect_uri");
-      if (redirectUri === null)
-        throw new Error("the authorize URL carried no redirect_uri");
-      const callback = new URL(redirectUri);
-      callback.searchParams.set("state", overrides.state ?? authorize.searchParams.get("state") ?? "");
-      if (overrides.code !== null)
-        callback.searchParams.set("code", overrides.code ?? "test-code-anthropic-console");
-      await fetch(callback.toString()).catch(() => {
-        return;
-      });
-    }
-  });
-}
 // src/fakes/anthropic-messages.ts
 var exports_anthropic_messages = {};
 __export(exports_anthropic_messages, {
@@ -1861,7 +1755,7 @@ async function boundedFetch(url, init) {
 // ../provider-runtime/package.json
 var package_default = {
   name: "@yanlinglabs/winter-provider-runtime",
-  version: "0.0.5",
+  version: "0.0.6",
   license: "MIT",
   type: "module",
   engines: {
@@ -4374,4 +4268,4 @@ var exports_xai_oauth = {};
 __export(exports_xai_oauth, {
   startXaiOauthFake: () => startXaiOauthFake
 });
-export { __export, ProviderRequestError, WINTER_BRAND, createRegistry, AZURE_PREVIEW_API_VERSION, createAzureOpenAIAdapter, sameDomain, summaryRequestOf, shouldRequestSummary, createEndpointResolver, descriptor, testContext, testDiscoveryContext, FAST_RETRY, fixtureModel, fixtureReasoning, fixtureProvider, fixtureCatalog, scriptedAdapter, startFake2, withFake2, sseResponse2, jsonResponse2, errorResponse2, redirectResponse2, stalledResponse2, scenarioTable2, requestsTo2, noRequestContains2, exports_openai_chat, exports_openai_responses, deploymentOf, apiVersionOf, exports_azure_openai, exports_anthropic_console_oauth, OPAQUE_FIELD_NAMES2, redactOpaqueFields2, exports_anthropic_messages, exports_bedrock, exports_codex_oauth, exports_gemini, exports_openai_models, base64UrlDecodeText2, base64UrlDecodeBytes2, verifyRs256Jwt2, exports_vertex, exports_xai_oauth };
+export { __export, ProviderRequestError, WINTER_BRAND, createRegistry, AZURE_PREVIEW_API_VERSION, createAzureOpenAIAdapter, sameDomain, summaryRequestOf, shouldRequestSummary, createEndpointResolver, descriptor, testContext, testDiscoveryContext, FAST_RETRY, fixtureModel, fixtureReasoning, fixtureProvider, fixtureCatalog, scriptedAdapter, startFake2, withFake2, sseResponse2, jsonResponse2, errorResponse2, redirectResponse2, stalledResponse2, scenarioTable2, requestsTo2, noRequestContains2, exports_openai_chat, exports_openai_responses, deploymentOf, apiVersionOf, exports_azure_openai, OPAQUE_FIELD_NAMES2, redactOpaqueFields2, exports_anthropic_messages, exports_bedrock, exports_codex_oauth, exports_gemini, exports_openai_models, base64UrlDecodeText2, base64UrlDecodeBytes2, verifyRs256Jwt2, exports_vertex, exports_xai_oauth };

package/dist/index.js

@@ -33,7 +33,6 @@ import {
   deploymentOf,
   apiVersionOf,
   exports_azure_openai,
-  exports_anthropic_console_oauth,
   OPAQUE_FIELD_NAMES2,
   redactOpaqueFields2,
   exports_anthropic_messages,
@@ -46,7 +45,7 @@ import {
   verifyRs256Jwt2,
   exports_vertex,
   exports_xai_oauth
-} from "./index-knhan74p.js";
+} from "./index-nrq6zn4s.js";
 
 // src/corpus/classifier-safety.ts
 var CLASSIFIER_SAFETY_CATEGORIES = [
@@ -409,6 +408,8 @@ var inFlightRefreshes = new Map;
 var DEFAULT_TIMEOUT_MS = 15 * 60000;
 // ../provider-runtime/src/adapters/anthropic/messages.ts
 var DEFAULT_MAX_BODY_BYTES = 32 * 1024 * 1024;
+// ../provider-runtime/src/adapters/anthropic/console-broker.ts
+var MAX_PROFILE_FILE_BYTES = 64 * 1024;
 // ../provider-runtime/src/discovery.ts
 var MAX_MODEL_ID_CHARS = 256;
 var MAX_DISPLAY_NAME_CHARS = 512;
@@ -1625,7 +1626,6 @@ export {
   OPAQUE_FIELD_NAMES2 as OPAQUE_FIELD_NAMES,
   OPAQUE_MARKERS,
   PROVIDER_CONFORMANCE_PACKAGE,
-  exports_anthropic_console_oauth as anthropicConsoleOauthFake,
   exports_anthropic_messages as anthropicFake,
   exports_azure as azureCorpus,
   exports_azure_openai as azureFake,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@yanlinglabs/winter-provider-conformance",
-  "version": "0.0.5",
+  "version": "0.0.6",
   "license": "MIT",
   "type": "module",
   "engines": {
@@ -43,8 +43,8 @@
     }
   },
   "dependencies": {
-    "@yanlinglabs/winter-provider-catalog": "0.0.5",
-    "@yanlinglabs/winter-provider-runtime": "0.0.5"
+    "@yanlinglabs/winter-provider-catalog": "0.0.6",
+    "@yanlinglabs/winter-provider-runtime": "0.0.6"
   },
   "scripts": {}
 }

package/dist/fakes/anthropic-console-oauth.d.ts

@@ -1,36 +0,0 @@
-import { type FakeServer, type RecordedRequest } from "./server.js";
-export declare const FAKE_CONSOLE_ACCOUNT_ID = "acct-test-console-0001";
-export declare const FAKE_CONSOLE_ACCESS_TOKEN = "test-token-anthropic-console-access";
-export declare const FAKE_CONSOLE_REFRESHED_ACCESS_TOKEN = "test-token-anthropic-console-access-refreshed";
-export declare const FAKE_CONSOLE_REFRESH_TOKEN = "test-token-anthropic-console-refresh";
-export interface AnthropicConsoleOauthFakeOptions {
-    /** Answer every grant with this status instead of 200. */
-    failTokenWith?: number;
-    /** The profile answers 200 with no account — the shape that must REFUSE the login, not name a record `anthropic:undefined`. */
-    omitAccount?: boolean;
-    /** A refresh grant that does not rotate the refresh token, which is the common case. */
-    omitRefreshToken?: boolean;
-    accountId?: string;
-    expiresIn?: number;
-}
-export interface AnthropicConsoleOauthFake extends FakeServer {
-    /** Handed to the login as its authorize endpoint. Never fetched — the browser half is `completeAuthorization`. */
-    authorizeUrl: string;
-    tokenUrl: string;
-    profileUrl: string;
-    /** The grants the token endpoint actually received, in order. Headers are redacted by the base fake. */
-    tokenRequests: RecordedRequest[];
-    profileRequests: RecordedRequest[];
-    /**
-     * The browser half: reads the authorize URL the flow produced, records its PKCE challenge, and
-     * calls the flow's own loopback callback.
-     *
-     * `state` overrides the value the flow minted (a planted-callback fixture); `code: null` omits the
-     * authorization code entirely.
-     */
-    completeAuthorization(url: string, overrides?: {
-        state?: string;
-        code?: string | null;
-    }): Promise<void>;
-}
-export declare function startAnthropicConsoleOauthFake(opts?: AnthropicConsoleOauthFakeOptions): Promise<AnthropicConsoleOauthFake>;