cursedbelt 2.7.0 → 3.0.0

package/dist/server/drivers/providers/ollamaDriver.js

@@ -1,108 +0,0 @@
-import { attachTokens, malformedResponse, postJson, readUsage, trimEndpoint, withDeadline, } from './transport';
-export const OLLAMA_DEFAULT_ENDPOINT = 'http://127.0.0.1:11434';
-/**
- * Generous by default: a cold 30B model loads ~18GB off disk before it emits a
- * first token, and a driver-side timeout shorter than that turns "slow" into
- * "broken" for every local install.
- */
-const DEFAULT_TIMEOUT_MS = 300_000;
-/**
- * Lay a {@link ProviderRequest} onto Ollama's message array.
- *
- * Exported for the contract suite: the mapping IS the driver's contract, and a
- * test that can read it directly does not have to reconstruct it from a captured
- * HTTP body to make an assertion about ordering.
- */
-export function buildOllamaMessages(request) {
-    const messages = [{ role: 'system', content: request.system }];
-    if (request.dataBlocks.length > 0)
-        messages.push({ role: 'user', content: request.dataBlocks });
-    // A DISTINGUISHABLE turn, after the data: the model must be able to tell the
-    // corrective instruction apart from the content it is correcting. Folding the
-    // feedback into the system block instead would put it above the preamble and
-    // make a retry look like a different task.
-    if (request.retryFeedback)
-        messages.push({ role: 'user', content: `[SCHEMA CORRECTION]\n${request.retryFeedback}` });
-    return messages;
-}
-export function createOllamaDriver(options = {}) {
-    const endpoint = trimEndpoint(options.endpoint ?? OLLAMA_DEFAULT_ENDPOINT);
-    const fetchImpl = options.fetch ?? fetch;
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    return {
-        provider: 'ollama',
-        async complete(request, signal) {
-            const { signal: deadline, clear } = withDeadline(signal, timeoutMs);
-            try {
-                const body = await postJson({
-                    provider: 'ollama',
-                    url: `${endpoint}/api/chat`,
-                    path: '/api/chat',
-                    fetchImpl,
-                    signal: deadline,
-                    body: {
-                        model: request.model.model,
-                        messages: buildOllamaMessages(request),
-                        stream: false,
-                        ...(request.jsonMode
-                            ? { format: options.sendResponseSchema && request.responseSchema ? request.responseSchema : 'json' }
-                            : {}),
-                        options: {
-                            ...(request.model.temperature === undefined ? {} : { temperature: request.model.temperature }),
-                            ...(request.model.maxTokens === undefined ? {} : { num_predict: request.model.maxTokens }),
-                        },
-                        ...(options.keepAlive === undefined ? {} : { keep_alive: options.keepAlive }),
-                    },
-                });
-                // Some model + `format` combinations land the constrained output in
-                // `thinking` with an empty `content` (observed on qwen3-vl); read
-                // whichever field actually carries the text rather than reporting an
-                // empty completion the gateway would then fail as a schema violation.
-                const text = body.message?.content || body.message?.thinking || '';
-                return { text, ...readUsage(body.prompt_eval_count, body.eval_count) };
-            }
-            catch (error) {
-                // Non-streamed: nothing was consumed that we can attest to. Zeros are the
-                // honest answer, and they still travel through the billing catcher's
-                // documented channel rather than leaving the field absent.
-                throw attachTokens(error, 0, 0);
-            }
-            finally {
-                clear();
-            }
-        },
-        async embed(req) {
-            const { signal: deadline, clear } = withDeadline(req.signal, timeoutMs);
-            try {
-                // `/api/embed` (batch-capable), not the legacy singular `/api/embeddings`.
-                const body = await postJson({
-                    provider: 'ollama',
-                    url: `${endpoint}/api/embed`,
-                    path: '/api/embed',
-                    fetchImpl,
-                    signal: deadline,
-                    body: { model: req.model.model, input: req.text },
-                });
-                const vector = body.embeddings?.[0];
-                // A missing vector is NOT recoverable into an empty one: a zero vector is
-                // a valid-looking point in embedding space that silently ranks against
-                // everything, which is the fake-vector failure this driver exists to end.
-                if (!vector || vector.length === 0)
-                    throw malformedResponse('ollama', '/api/embed', 'no embedding');
-                const usage = readUsage(body.prompt_eval_count, 0);
-                return {
-                    vector: Float32Array.from(vector),
-                    tokensIn: usage.tokensIn,
-                    ...(usage.tokensEstimated === true ? { tokensEstimated: true } : {}),
-                };
-            }
-            catch (error) {
-                throw attachTokens(error, 0, 0);
-            }
-            finally {
-                clear();
-            }
-        },
-    };
-}
-//# sourceMappingURL=ollamaDriver.js.map

package/dist/server/drivers/providers/ollamaDriver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"ollamaDriver.js","sourceRoot":"","sources":["../../../../src/server/drivers/providers/ollamaDriver.ts"],"names":[],"mappings":"AAkCA,OAAO,EACL,YAAY,EAEZ,iBAAiB,EACjB,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAEhE;;;;GAIG;AACH,MAAM,kBAAkB,GAAG,OAAO,CAAC;AA+BnC;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAwB;IAC1D,MAAM,QAAQ,GAAoB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;IAChF,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;QAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;IAChG,6EAA6E;IAC7E,8EAA8E;IAC9E,6EAA6E;IAC7E,2CAA2C;IAC3C,IAAI,OAAO,CAAC,aAAa;QACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;IAC5F,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,UAA+B,EAAE;IAClE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,IAAI,uBAAuB,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAE1D,OAAO;QACL,QAAQ,EAAE,QAAQ;QAElB,KAAK,CAAC,QAAQ,CAAC,OAAwB,EAAE,MAAoB;YAC3D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAqB;oBAC9C,QAAQ,EAAE,QAAQ;oBAClB,GAAG,EAAE,GAAG,QAAQ,WAAW;oBAC3B,IAAI,EAAE,WAAW;oBACjB,SAAS;oBACT,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE;wBACJ,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;wBAC1B,QAAQ,EAAE,mBAAmB,CAAC,OAAO,CAAC;wBACtC,MAAM,EAAE,KAAK;wBACb,GAAG,CAAC,OAAO,CAAC,QAAQ;4BAClB,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,kBAAkB,IAAI,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,EAAE;4BACpG,CAAC,CAAC,EAAE,CAAC;wBACP,OAAO,EAAE;4BACP,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;4BAC9F,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;yBAC3F;wBACD,GAAG,CAAC,OAAO,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,OAAO,CAAC,SAAS,EAAE,CAAC;qBAC9E;iBACF,CAAC,CAAC;gBAEH,oEAAoE;gBACpE,kEAAkE;gBAClE,qEAAqE;gBACrE,sEAAsE;gBACtE,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,OAAO,IAAI,IAAI,CAAC,OAAO,EAAE,QAAQ,IAAI,EAAE,CAAC;gBACnE,OAAO,EAAE,IAAI,EAAE,GAAG,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,CAAC;YACzE,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,0EAA0E;gBAC1E,qEAAqE;gBACrE,2DAA2D;gBAC3D,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC;oBAAS,CAAC;gBACT,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;QAED,KAAK,CAAC,KAAK,CAAC,GAAa;YACvB,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACxE,IAAI,CAAC;gBACH,2EAA2E;gBAC3E,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAsB;oBAC/C,QAAQ,EAAE,QAAQ;oBAClB,GAAG,EAAE,GAAG,QAAQ,YAAY;oBAC5B,IAAI,EAAE,YAAY;oBAClB,SAAS;oBACT,MAAM,EAAE,QAAQ;oBAChB,IAAI,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,IAAI,EAAE;iBAClD,CAAC,CAAC;gBAEH,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,CAAC;gBACpC,0EAA0E;gBAC1E,uEAAuE;gBACvE,0EAA0E;gBAC1E,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;oBAAE,MAAM,iBAAiB,CAAC,QAAQ,EAAE,YAAY,EAAE,cAAc,CAAC,CAAC;gBAEpG,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC;gBACnD,OAAO;oBACL,MAAM,EAAE,YAAY,CAAC,IAAI,CAAC,MAAM,CAAC;oBACjC,QAAQ,EAAE,KAAK,CAAC,QAAQ;oBACxB,GAAG,CAAC,KAAK,CAAC,eAAe,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACrE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC;oBAAS,CAAC;gBACT,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/drivers/providers/openaiDriver.d.ts

@@ -1,36 +0,0 @@
-/**
- * `openaiDriver` (03 §1b) — Chat Completions as a {@link CognitiveDriver}, and by
- * extension every OpenAI-compatible endpoint (vLLM, LM Studio, an
- * enterprise proxy): point `endpoint` at it and the wire shape is the same.
- *
- * **Structured mode uses `response_format: { type: 'json_object' }`.** The API
- * refuses that mode unless the word "json" appears somewhere in the messages, so
- * the driver appends ONE engine-neutral sentence to the system block. That is a
- * transport requirement satisfied by driver-authored text — it never touches, or
- * is influenced by, user content, so the sandbox is unaffected.
- *
- * `json_schema` strict mode is deliberately NOT used: it demands a complete
- * schema (every property `required`, `additionalProperties: false`), and what the
- * gateway hands down is an intentionally shallow hint. Sending a lossy schema as
- * if it were strict would make the provider reject valid outputs — a worse
- * failure than a slightly less-guided one that the Zod parse still checks.
- */
-import type { CognitiveDriver } from '../cognitiveGateway';
-import { type DriverTransportOptions } from './transport';
-export declare const OPENAI_DEFAULT_ENDPOINT = "https://api.openai.com";
-/** The one sentence `json_object` mode requires. Driver-authored, user-independent. */
-export declare const OPENAI_JSON_DIRECTIVE = "Respond with a single valid JSON object and nothing else.";
-export interface OpenAiDriverOptions extends DriverTransportOptions {
-    /** Host-resolved from GuardEngine secrets. Never read from the environment. */
-    readonly apiKey: string;
-    /** For Azure/proxy deployments that authenticate with a non-Bearer header. */
-    readonly headers?: Readonly<Record<string, string>>;
-    /**
-     * The provider label this driver answers to. `enterprise-proxy` speaks the same
-     * Chat Completions wire shape, so it is the same driver under a different key
-     * rather than a copied file that would drift from this one.
-     */
-    readonly providerId?: 'openai' | 'enterprise-proxy';
-}
-export declare function createOpenAiDriver(options: OpenAiDriverOptions): CognitiveDriver;
-//# sourceMappingURL=openaiDriver.d.ts.map

package/dist/server/drivers/providers/openaiDriver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"openaiDriver.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/providers/openaiDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AACH,OAAO,KAAK,EAAE,eAAe,EAAqC,MAAM,qBAAqB,CAAC;AAC9F,OAAO,EAEL,KAAK,sBAAsB,EAK5B,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AAIhE,uFAAuF;AACvF,eAAO,MAAM,qBAAqB,8DAA8D,CAAC;AAEjG,MAAM,WAAW,mBAAoB,SAAQ,sBAAsB;IACjE,+EAA+E;IAC/E,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8EAA8E;IAC9E,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD;;;;OAIG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,GAAG,kBAAkB,CAAC;CACrD;AAOD,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,mBAAmB,GAAG,eAAe,CAoDhF"}

package/dist/server/drivers/providers/openaiDriver.js

@@ -1,58 +0,0 @@
-import { attachTokens, postJson, readUsage, trimEndpoint, withDeadline, } from './transport';
-export const OPENAI_DEFAULT_ENDPOINT = 'https://api.openai.com';
-const DEFAULT_TIMEOUT_MS = 120_000;
-/** The one sentence `json_object` mode requires. Driver-authored, user-independent. */
-export const OPENAI_JSON_DIRECTIVE = 'Respond with a single valid JSON object and nothing else.';
-export function createOpenAiDriver(options) {
-    const endpoint = trimEndpoint(options.endpoint ?? OPENAI_DEFAULT_ENDPOINT);
-    const fetchImpl = options.fetch ?? fetch;
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    const provider = options.providerId ?? 'openai';
-    return {
-        provider,
-        async complete(request, signal) {
-            const { signal: deadline, clear } = withDeadline(signal, timeoutMs);
-            try {
-                const messages = [
-                    {
-                        role: 'system',
-                        content: request.jsonMode ? `${request.system}\n\n${OPENAI_JSON_DIRECTIVE}` : request.system,
-                    },
-                ];
-                if (request.dataBlocks.length > 0)
-                    messages.push({ role: 'user', content: request.dataBlocks });
-                if (request.retryFeedback)
-                    messages.push({ role: 'user', content: `[SCHEMA CORRECTION]\n${request.retryFeedback}` });
-                const body = await postJson({
-                    provider,
-                    url: `${endpoint}/v1/chat/completions`,
-                    path: '/v1/chat/completions',
-                    fetchImpl,
-                    signal: deadline,
-                    headers: { authorization: `Bearer ${options.apiKey}`, ...options.headers },
-                    body: {
-                        model: request.model.model,
-                        messages,
-                        ...(request.model.temperature === undefined ? {} : { temperature: request.model.temperature }),
-                        ...(request.model.maxTokens === undefined ? {} : { max_completion_tokens: request.model.maxTokens }),
-                        ...(request.jsonMode ? { response_format: { type: 'json_object' } } : {}),
-                    },
-                });
-                return {
-                    // A refusal or a content filter yields `content: null`; the empty string
-                    // then fails the gateway's schema parse, which is the correct outcome —
-                    // an unusable answer must not be silently retried as if it were prose.
-                    text: body.choices?.[0]?.message?.content ?? '',
-                    ...readUsage(body.usage?.prompt_tokens, body.usage?.completion_tokens),
-                };
-            }
-            catch (error) {
-                throw attachTokens(error, 0, 0);
-            }
-            finally {
-                clear();
-            }
-        },
-    };
-}
-//# sourceMappingURL=openaiDriver.js.map

package/dist/server/drivers/providers/openaiDriver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"openaiDriver.js","sourceRoot":"","sources":["../../../../src/server/drivers/providers/openaiDriver.ts"],"names":[],"mappings":"AAkBA,OAAO,EACL,YAAY,EAEZ,QAAQ,EACR,SAAS,EACT,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,uBAAuB,GAAG,wBAAwB,CAAC;AAEhE,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,uFAAuF;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAAG,2DAA2D,CAAC;AAoBjG,MAAM,UAAU,kBAAkB,CAAC,OAA4B;IAC7D,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,IAAI,uBAAuB,CAAC,CAAC;IAC3E,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAC1D,MAAM,QAAQ,GAAG,OAAO,CAAC,UAAU,IAAI,QAAQ,CAAC;IAEhD,OAAO;QACL,QAAQ;QAER,KAAK,CAAC,QAAQ,CAAC,OAAwB,EAAE,MAAoB;YAC3D,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YACpE,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAmD;oBAC/D;wBACE,IAAI,EAAE,QAAQ;wBACd,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,MAAM,OAAO,qBAAqB,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM;qBAC7F;iBACF,CAAC;gBACF,IAAI,OAAO,CAAC,UAAU,CAAC,MAAM,GAAG,CAAC;oBAAE,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC;gBAChG,IAAI,OAAO,CAAC,aAAa;oBACvB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,wBAAwB,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,CAAC;gBAE5F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAqB;oBAC9C,QAAQ;oBACR,GAAG,EAAE,GAAG,QAAQ,sBAAsB;oBACtC,IAAI,EAAE,sBAAsB;oBAC5B,SAAS;oBACT,MAAM,EAAE,QAAQ;oBAChB,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,EAAE;oBAC1E,IAAI,EAAE;wBACJ,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,KAAK;wBAC1B,QAAQ;wBACR,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;wBAC9F,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,qBAAqB,EAAE,OAAO,CAAC,KAAK,CAAC,SAAS,EAAE,CAAC;wBACpG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;qBAC1E;iBACF,CAAC,CAAC;gBAEH,OAAO;oBACL,yEAAyE;oBACzE,wEAAwE;oBACxE,uEAAuE;oBACvE,IAAI,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,IAAI,EAAE;oBAC/C,GAAG,SAAS,CAAC,IAAI,CAAC,KAAK,EAAE,aAAa,EAAE,IAAI,CAAC,KAAK,EAAE,iBAAiB,CAAC;iBACvE,CAAC;YACJ,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,MAAM,YAAY,CAAC,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;YAClC,CAAC;oBAAS,CAAC;gBACT,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/server/drivers/providers/openclawDriver.d.ts

@@ -1,36 +0,0 @@
-/**
- * `openclawDriver` (03 §1c) — transcription, reading its input FROM the
- * ObjectStore.
- *
- * The mirror of the image contract: audio arrives as an `objectKey`, never as
- * bytes on the request. A 90-minute recording is hundreds of megabytes; routing
- * it through the gateway's request/response shape would put it in request memory
- * twice. `AudioReq` therefore carries a key, and this driver is the only thing
- * that ever dereferences it.
- *
- * **Wire shape: the OpenAI-compatible `/v1/audio/transcriptions` multipart
- * endpoint** with `response_format: 'verbose_json'`, which is what returns
- * timed segments rather than a bare string. That shape was chosen deliberately:
- * the legacy `cp` openclaw plugin is a calendar/walkthrough surface and ships no
- * transcription transport to port, while the compatible endpoint is spoken by
- * every local transcription server worth pointing at (whisper.cpp's server,
- * faster-whisper, and openclaw's own). A host that runs something else supplies
- * `endpoint` and, if it must, its own driver — the seam is one function.
- *
- * A missing object fails LOUD rather than transcribing silence into an empty
- * string: an empty transcript is indistinguishable from a successful
- * transcription of a silent file, and the difference matters to every caller.
- */
-import type { ObjectStore } from 'cwip/storage';
-import type { CognitiveDriver } from '../cognitiveGateway';
-import { type DriverTransportOptions } from './transport';
-export declare const OPENCLAW_DEFAULT_ENDPOINT = "http://127.0.0.1:8199";
-export declare const AUDIO_OBJECT_MISSING = "AUDIO_OBJECT_MISSING";
-export interface OpenclawDriverOptions extends DriverTransportOptions {
-    /** Where the audio is read from. The driver's only input channel. */
-    readonly objects: ObjectStore;
-    /** Optional bearer credential for a server that requires one. Host-resolved. */
-    readonly apiKey?: string;
-}
-export declare function createOpenclawDriver(options: OpenclawDriverOptions): CognitiveDriver;
-//# sourceMappingURL=openclawDriver.d.ts.map

package/dist/server/drivers/providers/openclawDriver.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"openclawDriver.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/providers/openclawDriver.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAC;AAEhD,OAAO,KAAK,EAAY,eAAe,EAAiB,MAAM,qBAAqB,CAAC;AACpF,OAAO,EACL,KAAK,sBAAsB,EAM5B,MAAM,aAAa,CAAC;AAErB,eAAO,MAAM,yBAAyB,0BAA0B,CAAC;AAKjE,eAAO,MAAM,oBAAoB,yBAAyB,CAAC;AAE3D,MAAM,WAAW,qBAAsB,SAAQ,sBAAsB;IACnE,qEAAqE;IACrE,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC;IAC9B,gFAAgF;IAChF,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAWD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,qBAAqB,GAAG,eAAe,CAyEpF"}

package/dist/server/drivers/providers/openclawDriver.js

@@ -1,78 +0,0 @@
-import { AppError } from '../../errors';
-import { malformedResponse, providerHttpError, readProviderMessage, trimEndpoint, withDeadline, } from './transport';
-export const OPENCLAW_DEFAULT_ENDPOINT = 'http://127.0.0.1:8199';
-/** Transcription is roughly realtime on CPU; an hour of audio needs the room. */
-const DEFAULT_TIMEOUT_MS = 900_000;
-export const AUDIO_OBJECT_MISSING = 'AUDIO_OBJECT_MISSING';
-/** Seconds (the wire's unit) → milliseconds (the platform's unit), floored to an integer. */
-const toMs = (seconds) => typeof seconds === 'number' && Number.isFinite(seconds) ? Math.max(0, Math.round(seconds * 1000)) : 0;
-export function createOpenclawDriver(options) {
-    const endpoint = trimEndpoint(options.endpoint ?? OPENCLAW_DEFAULT_ENDPOINT);
-    const fetchImpl = options.fetch ?? fetch;
-    const timeoutMs = options.timeoutMs ?? DEFAULT_TIMEOUT_MS;
-    return {
-        provider: 'openclaw',
-        async transcribe(req) {
-            const stream = await options.objects.get(req.objectKey);
-            if (!stream)
-                throw new AppError(`No stored object for transcription key "${req.objectKey}".`, {
-                    code: AUDIO_OBJECT_MISSING,
-                    status: 404,
-                    category: 'storage',
-                    context: { provider: 'openclaw', objectKey: req.objectKey },
-                });
-            const stat = await options.objects.stat(req.objectKey);
-            // The multipart body needs the whole part; a transcription API has no
-            // streaming-upload contract to hold this open against.
-            const blob = await new Response(stream).blob();
-            const form = new FormData();
-            // The filename's EXTENSION is how these servers sniff the container, so the
-            // stored key's own name is forwarded rather than a generic one.
-            form.append('file', stat?.contentType ? new Blob([blob], { type: stat.contentType }) : blob, basename(req.objectKey));
-            form.append('model', req.model.model);
-            form.append('response_format', 'verbose_json');
-            const { signal, clear } = withDeadline(req.signal, timeoutMs);
-            try {
-                const response = await fetchImpl(`${endpoint}/v1/audio/transcriptions`, {
-                    method: 'POST',
-                    // No content-type header: the runtime sets the multipart boundary, and
-                    // naming it by hand produces a body the server cannot parse.
-                    headers: options.apiKey ? { authorization: `Bearer ${options.apiKey}` } : undefined,
-                    body: form,
-                    signal,
-                });
-                if (!response.ok) {
-                    let parsed;
-                    try {
-                        parsed = await response.json();
-                    }
-                    catch {
-                        parsed = undefined;
-                    }
-                    throw providerHttpError({
-                        provider: 'openclaw',
-                        path: '/v1/audio/transcriptions',
-                        status: response.status,
-                        providerMessage: readProviderMessage(parsed),
-                    });
-                }
-                const body = (await response.json());
-                if (typeof body.text !== 'string')
-                    throw malformedResponse('openclaw', '/v1/audio/transcriptions', 'no transcript text');
-                return {
-                    text: body.text,
-                    segments: (body.segments ?? []).map((segment) => ({
-                        startMs: toMs(segment.start),
-                        endMs: toMs(segment.end),
-                        text: segment.text ?? '',
-                    })),
-                };
-            }
-            finally {
-                clear();
-            }
-        },
-    };
-}
-const basename = (key) => key.slice(key.lastIndexOf('/') + 1) || 'audio';
-//# sourceMappingURL=openclawDriver.js.map

package/dist/server/drivers/providers/openclawDriver.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"openclawDriver.js","sourceRoot":"","sources":["../../../../src/server/drivers/providers/openclawDriver.ts"],"names":[],"mappings":"AAwBA,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AAExC,OAAO,EAEL,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,YAAY,EACZ,YAAY,GACb,MAAM,aAAa,CAAC;AAErB,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAEjE,iFAAiF;AACjF,MAAM,kBAAkB,GAAG,OAAO,CAAC;AAEnC,MAAM,CAAC,MAAM,oBAAoB,GAAG,sBAAsB,CAAC;AAc3D,6FAA6F;AAC7F,MAAM,IAAI,GAAG,CAAC,OAAgB,EAAU,EAAE,CACxC,OAAO,OAAO,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AAExG,MAAM,UAAU,oBAAoB,CAAC,OAA8B;IACjE,MAAM,QAAQ,GAAG,YAAY,CAAC,OAAO,CAAC,QAAQ,IAAI,yBAAyB,CAAC,CAAC;IAC7E,MAAM,SAAS,GAAG,OAAO,CAAC,KAAK,IAAI,KAAK,CAAC;IACzC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,kBAAkB,CAAC;IAE1D,OAAO;QACL,QAAQ,EAAE,UAAU;QAEpB,KAAK,CAAC,UAAU,CAAC,GAAa;YAC5B,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM;gBACT,MAAM,IAAI,QAAQ,CAAC,2CAA2C,GAAG,CAAC,SAAS,IAAI,EAAE;oBAC/E,IAAI,EAAE,oBAAoB;oBAC1B,MAAM,EAAE,GAAG;oBACX,QAAQ,EAAE,SAAS;oBACnB,OAAO,EAAE,EAAE,QAAQ,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE;iBAC5D,CAAC,CAAC;YAEL,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACvD,sEAAsE;YACtE,uDAAuD;YACvD,MAAM,IAAI,GAAG,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;YAE/C,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;YAC5B,4EAA4E;YAC5E,gEAAgE;YAChE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC;YACtH,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;YACtC,IAAI,CAAC,MAAM,CAAC,iBAAiB,EAAE,cAAc,CAAC,CAAC;YAE/C,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;YAC9D,IAAI,CAAC;gBACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,QAAQ,0BAA0B,EAAE;oBACtE,MAAM,EAAE,MAAM;oBACd,uEAAuE;oBACvE,6DAA6D;oBAC7D,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS;oBACnF,IAAI,EAAE,IAAI;oBACV,MAAM;iBACP,CAAC,CAAC;gBAEH,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;oBACjB,IAAI,MAAe,CAAC;oBACpB,IAAI,CAAC;wBACH,MAAM,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;oBACjC,CAAC;oBAAC,MAAM,CAAC;wBACP,MAAM,GAAG,SAAS,CAAC;oBACrB,CAAC;oBACD,MAAM,iBAAiB,CAAC;wBACtB,QAAQ,EAAE,UAAU;wBACpB,IAAI,EAAE,0BAA0B;wBAChC,MAAM,EAAE,QAAQ,CAAC,MAAM;wBACvB,eAAe,EAAE,mBAAmB,CAAC,MAAM,CAAC;qBAC7C,CAAC,CAAC;gBACL,CAAC;gBAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;gBAC9D,IAAI,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ;oBAC/B,MAAM,iBAAiB,CAAC,UAAU,EAAE,0BAA0B,EAAE,oBAAoB,CAAC,CAAC;gBAExF,OAAO;oBACL,IAAI,EAAE,IAAI,CAAC,IAAI;oBACf,QAAQ,EAAE,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;wBAChD,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;wBAC5B,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC;wBACxB,IAAI,EAAE,OAAO,CAAC,IAAI,IAAI,EAAE;qBACzB,CAAC,CAAC;iBACJ,CAAC;YACJ,CAAC;oBAAS,CAAC;gBACT,KAAK,EAAE,CAAC;YACV,CAAC;QACH,CAAC;KACF,CAAC;AACJ,CAAC;AAED,MAAM,QAAQ,GAAG,CAAC,GAAW,EAAU,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,OAAO,CAAC"}

package/dist/server/drivers/providers/transport.d.ts

@@ -1,115 +0,0 @@
-/**
- * The transport floor every concrete {@link CognitiveDriver} stands on (03 §1).
- *
- * A driver is deliberately THIN: it speaks one provider's wire shape and nothing
- * else. Telemetry, metering, the injection sandbox and the retry loop all live in
- * `CognitiveGateway`, so a driver that re-implements any of them double-bills or
- * weakens containment. What every driver DOES need is identical, and lives here
- * exactly once:
- *
- *   * **Timeout composed with the caller's abort**, so a hung provider cannot pin
- *     a request forever and a cancelled request stops the provider call too. A
- *     per-driver `setTimeout` copy is how one provider ends up with no ceiling.
- *   * **A typed non-2xx failure** that carries the provider's own diagnostic
- *     message but never its response body: the body can contain the prompt, i.e.
- *     user data, and an error context is the wrong place for it.
- *   * **Partial-token attachment.** The gateway's billing catcher reads exactly
- *     `error.tokensIn` / `error.tokensOut` off a thrown error. {@link attachTokens}
- *     is the ONE place that writes those fields, so "what did this cost before it
- *     died?" has a single answer per driver rather than five hand-rolled ones.
- *   * **Honest usage accounting.** {@link readUsage} maps a provider's usage
- *     fields to tokens, and reports `0` + `tokensEstimated` when the provider
- *     omitted them — billing a guess is worse than billing nothing (money-exact
- *     law), and the flag makes the omission visible in `api_calls` instead of
- *     indistinguishable from a genuinely free call.
- *
- * Every driver takes its endpoint and credentials as CONSTRUCTOR options that the
- * host resolves from GuardEngine secrets. A driver never reads `process.env`, and
- * never dials `ModelConfig.endpoint`: that field is the DECLARED endpoint (
- * telemetry attribution + the compiled CSP allowlist), and honoring it as a
- * destination would let any caller aim a credentialed driver at a host of its
- * choosing.
- */
-import { AppError } from '../../errors';
-import type { CognitiveProvider, ProviderResponse } from '../cognitiveGateway';
-/** A provider answered, but not with success. */
-export declare const AI_PROVIDER_HTTP = "AI_PROVIDER_HTTP";
-/** A provider answered 2xx with a body this driver cannot read. */
-export declare const AI_PROVIDER_MALFORMED = "AI_PROVIDER_MALFORMED";
-/**
- * Just the call signature the drivers use.
- *
- * NOT `typeof fetch`: that type also carries `preconnect`, which no fake or
- * proxy-wrapped implementation has, so demanding it makes the injection seam
- * unusable for the exact purpose it exists for.
- */
-export type FetchLike = (input: RequestInfo | URL, init?: RequestInit) => Promise<Response>;
-/** Options shared by every HTTP-speaking driver. */
-export interface DriverTransportOptions {
-    /**
-     * The provider's base URL — host-resolved. Trailing slashes are trimmed so
-     * `http://x:1/` and `http://x:1` build the same path.
-     */
-    readonly endpoint?: string;
-    /** Injected for tests and for a host that needs its own agent/proxy. */
-    readonly fetch?: FetchLike;
-    /** Ceiling for a single provider call. */
-    readonly timeoutMs?: number;
-}
-export declare const trimEndpoint: (endpoint: string) => string;
-/**
- * The caller's signal AND a deadline, as one signal.
- *
- * `AbortSignal.any` would be shorter but loses the reason on the timeout branch:
- * we want the thrown error to keep the standard `AbortError` name in BOTH cases,
- * because that is what the gateway reads to record `timeout` rather than `error`.
- */
-export declare function withDeadline(signal: AbortSignal | undefined, timeoutMs: number): {
-    signal: AbortSignal;
-    clear: () => void;
-};
-/**
- * Attach the tokens consumed before a failure to the error the caller will see.
- *
- * The gateway's billing catcher reads these two fields and nothing else; a driver
- * that throws without them reports a free call for work the provider already
- * charged for. Zeros are attached deliberately when the provider genuinely said
- * nothing — see the module note on guessing.
- */
-export declare function attachTokens<E>(error: E, tokensIn: number, tokensOut: number): E;
-/** A provider's reported usage, or an honest declaration that it reported none. */
-export declare function readUsage(tokensIn: unknown, tokensOut: unknown): Pick<ProviderResponse, 'tokensIn' | 'tokensOut' | 'tokensEstimated'>;
-export interface ProviderHttpErrorOptions {
-    readonly provider: CognitiveProvider;
-    readonly path: string;
-    readonly status: number;
-    /** The provider's own message, when it published one in a structured field. */
-    readonly providerMessage?: string;
-}
-export declare function providerHttpError(options: ProviderHttpErrorOptions): AppError;
-export declare function malformedResponse(provider: CognitiveProvider, path: string, what: string): AppError;
-/**
- * Pull a provider's own error message out of a failure body.
- *
- * Providers publish it under `error` (a string, or an object with `message`) —
- * ollama, openai and anthropic all do one of the two. Anything else is ignored
- * rather than stringified: an unrecognized body may be the echoed prompt, and
- * the whole point of the budget above is that user data never lands in an error.
- */
-export declare function readProviderMessage(body: unknown): string | undefined;
-export interface PostJsonOptions {
-    readonly provider: CognitiveProvider;
-    readonly url: string;
-    readonly path: string;
-    readonly body: unknown;
-    readonly headers?: Readonly<Record<string, string>>;
-    readonly fetchImpl: FetchLike;
-    readonly signal: AbortSignal;
-}
-/**
- * POST JSON, parse JSON, throw typed on anything else. The single HTTP call every
- * text driver makes — so timeout handling, status handling and body-safety are
- * proven once by the shared contract suite rather than per provider.
- */
-export declare function postJson<T>(options: PostJsonOptions): Promise<T>;
-//# sourceMappingURL=transport.d.ts.map

package/dist/server/drivers/providers/transport.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"transport.d.ts","sourceRoot":"","sources":["../../../../src/server/drivers/providers/transport.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,cAAc,CAAC;AACxC,OAAO,KAAK,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAE/E,iDAAiD;AACjD,eAAO,MAAM,gBAAgB,qBAAqB,CAAC;AACnD,mEAAmE;AACnE,eAAO,MAAM,qBAAqB,0BAA0B,CAAC;AAE7D;;;;;;GAMG;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,KAAK,EAAE,WAAW,GAAG,GAAG,EAAE,IAAI,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAE5F,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,wEAAwE;IACxE,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,0CAA0C;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,eAAO,MAAM,YAAY,GAAI,UAAU,MAAM,KAAG,MAAsC,CAAC;AAEvF;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG;IAChF,MAAM,EAAE,WAAW,CAAC;IACpB,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB,CAaA;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,CAAC,CAEhF;AAED,mFAAmF;AACnF,wBAAgB,SAAS,CAAC,QAAQ,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,GAAG,IAAI,CAAC,gBAAgB,EAAE,UAAU,GAAG,WAAW,GAAG,iBAAiB,CAAC,CAWrI;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,+EAA+E;IAC/E,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;CACnC;AAKD,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,wBAAwB,GAAG,QAAQ,CAY7E;AAED,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,QAAQ,CAQnG;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAUrE;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,QAAQ,EAAE,iBAAiB,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;IACpD,QAAQ,CAAC,SAAS,EAAE,SAAS,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;CAC9B;AAED;;;;GAIG;AACH,wBAAsB,QAAQ,CAAC,CAAC,EAAE,OAAO,EAAE,eAAe,GAAG,OAAO,CAAC,CAAC,CAAC,CA6BtE"}

package/dist/server/drivers/providers/transport.js

@@ -1,167 +0,0 @@
-/**
- * The transport floor every concrete {@link CognitiveDriver} stands on (03 §1).
- *
- * A driver is deliberately THIN: it speaks one provider's wire shape and nothing
- * else. Telemetry, metering, the injection sandbox and the retry loop all live in
- * `CognitiveGateway`, so a driver that re-implements any of them double-bills or
- * weakens containment. What every driver DOES need is identical, and lives here
- * exactly once:
- *
- *   * **Timeout composed with the caller's abort**, so a hung provider cannot pin
- *     a request forever and a cancelled request stops the provider call too. A
- *     per-driver `setTimeout` copy is how one provider ends up with no ceiling.
- *   * **A typed non-2xx failure** that carries the provider's own diagnostic
- *     message but never its response body: the body can contain the prompt, i.e.
- *     user data, and an error context is the wrong place for it.
- *   * **Partial-token attachment.** The gateway's billing catcher reads exactly
- *     `error.tokensIn` / `error.tokensOut` off a thrown error. {@link attachTokens}
- *     is the ONE place that writes those fields, so "what did this cost before it
- *     died?" has a single answer per driver rather than five hand-rolled ones.
- *   * **Honest usage accounting.** {@link readUsage} maps a provider's usage
- *     fields to tokens, and reports `0` + `tokensEstimated` when the provider
- *     omitted them — billing a guess is worse than billing nothing (money-exact
- *     law), and the flag makes the omission visible in `api_calls` instead of
- *     indistinguishable from a genuinely free call.
- *
- * Every driver takes its endpoint and credentials as CONSTRUCTOR options that the
- * host resolves from GuardEngine secrets. A driver never reads `process.env`, and
- * never dials `ModelConfig.endpoint`: that field is the DECLARED endpoint (
- * telemetry attribution + the compiled CSP allowlist), and honoring it as a
- * destination would let any caller aim a credentialed driver at a host of its
- * choosing.
- */
-import { AppError } from '../../errors';
-/** A provider answered, but not with success. */
-export const AI_PROVIDER_HTTP = 'AI_PROVIDER_HTTP';
-/** A provider answered 2xx with a body this driver cannot read. */
-export const AI_PROVIDER_MALFORMED = 'AI_PROVIDER_MALFORMED';
-export const trimEndpoint = (endpoint) => endpoint.replace(/\/+$/, '');
-/**
- * The caller's signal AND a deadline, as one signal.
- *
- * `AbortSignal.any` would be shorter but loses the reason on the timeout branch:
- * we want the thrown error to keep the standard `AbortError` name in BOTH cases,
- * because that is what the gateway reads to record `timeout` rather than `error`.
- */
-export function withDeadline(signal, timeoutMs) {
-    const controller = new AbortController();
-    const abort = () => controller.abort();
-    if (signal?.aborted)
-        controller.abort();
-    signal?.addEventListener('abort', abort);
-    const timer = setTimeout(abort, timeoutMs);
-    return {
-        signal: controller.signal,
-        clear: () => {
-            clearTimeout(timer);
-            signal?.removeEventListener('abort', abort);
-        },
-    };
-}
-/**
- * Attach the tokens consumed before a failure to the error the caller will see.
- *
- * The gateway's billing catcher reads these two fields and nothing else; a driver
- * that throws without them reports a free call for work the provider already
- * charged for. Zeros are attached deliberately when the provider genuinely said
- * nothing — see the module note on guessing.
- */
-export function attachTokens(error, tokensIn, tokensOut) {
-    return Object.assign(error, { tokensIn, tokensOut });
-}
-/** A provider's reported usage, or an honest declaration that it reported none. */
-export function readUsage(tokensIn, tokensOut) {
-    const inOk = typeof tokensIn === 'number' && Number.isFinite(tokensIn) && tokensIn >= 0;
-    const outOk = typeof tokensOut === 'number' && Number.isFinite(tokensOut) && tokensOut >= 0;
-    if (!inOk && !outOk)
-        return { tokensIn: 0, tokensOut: 0, tokensEstimated: true };
-    // A provider that reports one half and omits the other has still left the bill
-    // incomplete; the flag says so rather than letting half a number look whole.
-    return {
-        tokensIn: inOk ? tokensIn : 0,
-        tokensOut: outOk ? tokensOut : 0,
-        ...(inOk && outOk ? {} : { tokensEstimated: true }),
-    };
-}
-/** How much of a provider's diagnostic message is worth carrying (and no prompt). */
-const MESSAGE_BUDGET = 200;
-export function providerHttpError(options) {
-    const detail = options.providerMessage ? `: ${options.providerMessage.slice(0, MESSAGE_BUDGET)}` : '';
-    return new AppError(`${options.provider} ${options.path} returned ${options.status}${detail}`, {
-        code: AI_PROVIDER_HTTP,
-        // 502: our request was well-formed as far as we can tell and the upstream
-        // failed. A 4xx from the provider is still OUR configuration problem, never
-        // the API caller's, so it is never reflected as a 4xx.
-        status: 502,
-        category: 'upstream',
-        isOperational: true,
-        context: { provider: options.provider, path: options.path, providerStatus: options.status },
-    });
-}
-export function malformedResponse(provider, path, what) {
-    return new AppError(`${provider} ${path} returned a body this driver cannot read: ${what}`, {
-        code: AI_PROVIDER_MALFORMED,
-        status: 502,
-        category: 'upstream',
-        isOperational: true,
-        context: { provider, path },
-    });
-}
-/**
- * Pull a provider's own error message out of a failure body.
- *
- * Providers publish it under `error` (a string, or an object with `message`) —
- * ollama, openai and anthropic all do one of the two. Anything else is ignored
- * rather than stringified: an unrecognized body may be the echoed prompt, and
- * the whole point of the budget above is that user data never lands in an error.
- */
-export function readProviderMessage(body) {
-    if (typeof body !== 'object' || body === null)
-        return undefined;
-    const error = body.error;
-    if (typeof error === 'string')
-        return error;
-    if (typeof error === 'object' && error !== null) {
-        const message = error.message;
-        if (typeof message === 'string')
-            return message;
-    }
-    const message = body.message;
-    return typeof message === 'string' ? message : undefined;
-}
-/**
- * POST JSON, parse JSON, throw typed on anything else. The single HTTP call every
- * text driver makes — so timeout handling, status handling and body-safety are
- * proven once by the shared contract suite rather than per provider.
- */
-export async function postJson(options) {
-    const response = await options.fetchImpl(options.url, {
-        method: 'POST',
-        headers: { 'content-type': 'application/json', ...options.headers },
-        body: JSON.stringify(options.body),
-        signal: options.signal,
-    });
-    if (!response.ok) {
-        // Read the body for the provider's own message, never to surface it whole.
-        let parsed;
-        try {
-            parsed = await response.json();
-        }
-        catch {
-            parsed = undefined;
-        }
-        throw providerHttpError({
-            provider: options.provider,
-            path: options.path,
-            status: response.status,
-            providerMessage: readProviderMessage(parsed),
-        });
-    }
-    try {
-        return (await response.json());
-    }
-    catch {
-        throw malformedResponse(options.provider, options.path, 'not JSON');
-    }
-}
-//# sourceMappingURL=transport.js.map