limen-ai 1.0.0

package/dist/substrate/transport/adapters/anthropic_adapter.js

@@ -0,0 +1,455 @@
+/**
+ * Anthropic Messages API adapter.
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5A (Sprint 5A — Shared Transport Infrastructure)
+ * Implements: ProviderAdapter for Anthropic's Messages API
+ *
+ * Request translation:
+ *   - systemPrompt → top-level "system" parameter
+ *   - LlmContentBlock mapping to Anthropic content format
+ *   - thinking config (extended_thinking)
+ *
+ * Response parsing:
+ *   - content blocks, tool calls, usage extraction
+ *   - C-SEC-P5-22: Provider output is untrusted input
+ *   - C-SEC-P5-23: Tool call structural validation
+ *
+ * Stream parsing:
+ *   - thinking_delta events aggregated internally (NOT emitted as LlmStreamChunk)
+ *   - content_delta/tool_call_delta/usage/done emitted
+ *
+ * Deliberation:
+ *   - provider_authoritative when thinking blocks present
+ *   - CR-5: No reasoning_tokens subtraction (that is OpenAI-specific)
+ *
+ * Retryable status codes: 429, 500, 502, 503, 529 (overloaded)
+ *
+ * Security:
+ *   - C-SEC-P5-01/02: API key NEVER in logs or error messages
+ *   - C-SEC-P5-04 / CR-1: API key resolved ONCE at creation
+ *   - C-SEC-P5-22: Provider output is untrusted input
+ *   - C-SEC-P5-23: Tool call structural validation
+ */
+import { parseSSEStream } from '../stream_parser.js';
+// ─── Constants ───
+/** Anthropic API version header */
+const ANTHROPIC_API_VERSION = '2023-06-01';
+/** Retryable HTTP status codes for Anthropic */
+const RETRYABLE_STATUS_CODES = new Set([429, 500, 502, 503, 529]);
+/** C-SEC-P5-23: Valid tool name pattern */
+const TOOL_NAME_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+// ─── Tool Call Validation (C-SEC-P5-23) ───
+/**
+ * Validate a tool call's structural integrity.
+ * C-SEC-P5-23: Non-empty id, name matches pattern, input is object.
+ */
+function validateToolCall(tc) {
+    const id = tc.id;
+    const name = tc.name;
+    const input = tc.input;
+    // Non-empty id
+    if (typeof id !== 'string' || id.length === 0)
+        return null;
+    // Name matches valid pattern
+    if (typeof name !== 'string' || !TOOL_NAME_PATTERN.test(name))
+        return null;
+    // Input must be an object (not null, not array)
+    if (typeof input !== 'object' || input === null || Array.isArray(input))
+        return null;
+    return {
+        id,
+        name,
+        input: input,
+    };
+}
+// ─── Request Translation ───
+/**
+ * Map Limen LlmContentBlock to Anthropic content block format.
+ */
+function mapContentBlock(block) {
+    switch (block.type) {
+        case 'text':
+            return { type: 'text', text: block.text };
+        case 'image':
+            return {
+                type: 'image',
+                source: {
+                    type: 'base64',
+                    media_type: block.mediaType,
+                    data: block.data,
+                },
+            };
+        case 'tool_use':
+            return {
+                type: 'tool_use',
+                id: block.id,
+                name: block.name,
+                input: block.input,
+            };
+        case 'tool_result':
+            return {
+                type: 'tool_result',
+                tool_use_id: block.toolUseId,
+                content: block.content,
+                ...(block.isError ? { is_error: true } : {}),
+            };
+        default:
+            return { type: 'text', text: '' };
+    }
+}
+// ─── Anthropic Adapter Factory ───
+/**
+ * Create an Anthropic Messages API adapter.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the Anthropic API
+ * @param apiKey - API key (resolved ONCE at creation — CR-1 / C-SEC-P5-04)
+ * @param time - Optional TimeProvider for clock injection
+ */
+export function createAnthropicAdapter(providerId, baseUrl, apiKey, time) {
+    // CR-1 / C-SEC-P5-04: Key resolved once at creation
+    const resolvedKey = apiKey;
+    function buildRequest(request, streaming) {
+        // Translate messages — Anthropic requires system message at top level
+        const messages = [];
+        for (const msg of request.messages) {
+            if (msg.role === 'system') {
+                // System messages are handled separately via top-level system param
+                continue;
+            }
+            const content = typeof msg.content === 'string'
+                ? msg.content
+                : msg.content.map(mapContentBlock);
+            messages.push({
+                role: msg.role,
+                content,
+            });
+        }
+        // Build request body
+        const body = {
+            model: request.model,
+            messages,
+            max_tokens: request.maxTokens,
+        };
+        // System prompt → top-level "system"
+        if (request.systemPrompt) {
+            body.system = request.systemPrompt;
+        }
+        // Temperature (Anthropic default is 1.0)
+        if (request.temperature !== undefined) {
+            body.temperature = request.temperature;
+        }
+        // Tools
+        if (request.tools && request.tools.length > 0) {
+            body.tools = request.tools.map((tool) => ({
+                name: tool.name,
+                description: tool.description,
+                input_schema: tool.inputSchema,
+            }));
+        }
+        // Streaming
+        if (streaming) {
+            body.stream = true;
+        }
+        return {
+            url: `${baseUrl}/v1/messages`,
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+                'x-api-key': resolvedKey,
+                'anthropic-version': ANTHROPIC_API_VERSION,
+            },
+            body,
+            stream: streaming,
+        };
+    }
+    function parseResponse(httpResponse) {
+        // C-SEC-P5-07: JSON parse safety
+        let parsed;
+        try {
+            parsed = JSON.parse(httpResponse.body);
+        }
+        catch {
+            throw new Error(`JSON parse error: invalid response body from Anthropic`);
+        }
+        // C-SEC-P5-22: Provider output is untrusted — validate structure
+        const content = parsed.content;
+        if (!Array.isArray(content)) {
+            throw new Error('Anthropic response missing content array');
+        }
+        // Extract content blocks, tool calls, and thinking blocks
+        const responseBlocks = [];
+        const toolCalls = [];
+        let hasThinking = false;
+        for (const block of content) {
+            if (typeof block !== 'object' || block === null)
+                continue;
+            const b = block;
+            if (b.type === 'text') {
+                responseBlocks.push({ type: 'text', text: String(b.text ?? '') });
+            }
+            else if (b.type === 'tool_use') {
+                // C-SEC-P5-23: Validate tool call structure
+                const validated = validateToolCall(b);
+                if (validated) {
+                    toolCalls.push(validated);
+                    responseBlocks.push({
+                        type: 'tool_use',
+                        id: validated.id,
+                        name: validated.name,
+                        input: validated.input,
+                    });
+                }
+                // Invalid tool calls are silently dropped — provider output is untrusted
+            }
+            else if (b.type === 'thinking') {
+                // CR-5: Thinking blocks → deliberation metrics
+                // NOT included in LlmResponse.content
+                hasThinking = true;
+            }
+        }
+        // Extract usage
+        const usage = parsed.usage;
+        const inputTokens = typeof usage?.input_tokens === 'number' ? usage.input_tokens : 0;
+        const outputTokens = typeof usage?.output_tokens === 'number' ? usage.output_tokens : 0;
+        // Anthropic may report cache_creation_input_tokens and cache_read_input_tokens
+        // We use the top-level input_tokens which includes all types
+        // Extract finish reason (stop_reason in Anthropic's format)
+        const stopReason = parsed.stop_reason;
+        const finishReason = mapFinishReason(stopReason);
+        // Deliberation metrics
+        // CR-5: When thinking blocks present → provider_authoritative with the output token count
+        // When no thinking → estimated with 0 tokens, providerReportedThinkingTokens = null
+        const deliberation = hasThinking
+            ? {
+                deliberationTokens: outputTokens,
+                accountingMode: 'provider_authoritative',
+                providerReportedThinkingTokens: outputTokens,
+            }
+            : {
+                deliberationTokens: 0,
+                accountingMode: 'estimated',
+                providerReportedThinkingTokens: null,
+            };
+        const response = {
+            content: responseBlocks.length === 1 && responseBlocks[0]?.type === 'text'
+                ? responseBlocks[0].text
+                : responseBlocks,
+            toolCalls,
+            finishReason,
+            usage: {
+                inputTokens,
+                outputTokens,
+                providerInputTokens: inputTokens,
+                providerOutputTokens: outputTokens,
+            },
+            model: String(parsed.model ?? ''),
+            providerId,
+            latencyMs: 0, // Filled by transport engine
+        };
+        return {
+            response,
+            deliberation,
+            retryCount: 0, // Filled by transport engine
+            totalMs: 0, // Filled by transport engine
+        };
+    }
+    function parseStream(body, signal) {
+        let deliberation = {
+            deliberationTokens: 0,
+            accountingMode: 'estimated',
+            providerReportedThinkingTokens: null,
+        };
+        let totalMs = 0;
+        const streamStart = (time ?? { nowMs: () => Date.now() }).nowMs();
+        // Track thinking state for aggregation
+        let thinkingTokensAccumulated = 0;
+        let thinkingDetected = false;
+        // Track tool call state for delta assembly
+        const toolCallState = new Map();
+        async function* processStream() {
+            for await (const event of parseSSEStream(body, signal, time)) {
+                // Skip empty data
+                if (!event.data || event.data === '[DONE]')
+                    continue;
+                let parsed;
+                try {
+                    parsed = JSON.parse(event.data);
+                }
+                catch {
+                    continue; // Skip unparseable events
+                }
+                const eventType = parsed.type;
+                // Anthropic streaming event types
+                switch (eventType) {
+                    case 'content_block_start': {
+                        const cb = parsed.content_block;
+                        if (cb?.type === 'tool_use') {
+                            const index = typeof parsed.index === 'number' ? parsed.index : -1;
+                            if (index >= 0) {
+                                toolCallState.set(index, {
+                                    id: String(cb.id ?? ''),
+                                    name: String(cb.name ?? ''),
+                                    inputParts: [],
+                                });
+                            }
+                        }
+                        else if (cb?.type === 'thinking') {
+                            thinkingDetected = true;
+                        }
+                        break;
+                    }
+                    case 'content_block_delta': {
+                        const delta = parsed.delta;
+                        if (!delta)
+                            break;
+                        if (delta.type === 'text_delta') {
+                            yield {
+                                type: 'content_delta',
+                                delta: String(delta.text ?? ''),
+                            };
+                        }
+                        else if (delta.type === 'input_json_delta') {
+                            const index = typeof parsed.index === 'number' ? parsed.index : -1;
+                            const state = toolCallState.get(index);
+                            if (state) {
+                                const partialJson = String(delta.partial_json ?? '');
+                                state.inputParts.push(partialJson);
+                                yield {
+                                    type: 'tool_call_delta',
+                                    toolCallId: state.id,
+                                    name: state.name,
+                                    inputDelta: partialJson,
+                                };
+                            }
+                        }
+                        else if (delta.type === 'thinking_delta') {
+                            // CR-5: Thinking deltas are aggregated internally, NOT emitted
+                            // We just track that thinking is happening
+                            thinkingDetected = true;
+                        }
+                        break;
+                    }
+                    case 'content_block_stop': {
+                        // No action needed — tool calls are assembled via deltas
+                        break;
+                    }
+                    case 'message_delta': {
+                        const delta = parsed.delta;
+                        const usage_delta = parsed.usage;
+                        if (usage_delta) {
+                            const outTokens = typeof usage_delta.output_tokens === 'number'
+                                ? usage_delta.output_tokens : 0;
+                            // Emit usage with what we have
+                            yield {
+                                type: 'usage',
+                                inputTokens: 0, // Input tokens come from message_start
+                                outputTokens: outTokens,
+                            };
+                        }
+                        if (delta?.stop_reason) {
+                            yield {
+                                type: 'done',
+                                finishReason: mapFinishReason(delta.stop_reason),
+                            };
+                        }
+                        break;
+                    }
+                    case 'message_start': {
+                        const message = parsed.message;
+                        const msgUsage = message?.usage;
+                        if (msgUsage) {
+                            const inTokens = typeof msgUsage.input_tokens === 'number'
+                                ? msgUsage.input_tokens : 0;
+                            yield {
+                                type: 'usage',
+                                inputTokens: inTokens,
+                                outputTokens: 0,
+                            };
+                        }
+                        break;
+                    }
+                    case 'error': {
+                        const errorObj = parsed.error;
+                        yield {
+                            type: 'error',
+                            error: String(errorObj?.message ?? 'Unknown Anthropic stream error'),
+                        };
+                        break;
+                    }
+                }
+            }
+            // Set deliberation metrics after stream completes
+            totalMs = ((time ?? { nowMs: () => Date.now() }).nowMs()) - streamStart;
+            deliberation = thinkingDetected
+                ? {
+                    deliberationTokens: thinkingTokensAccumulated,
+                    accountingMode: 'provider_authoritative',
+                    providerReportedThinkingTokens: thinkingTokensAccumulated,
+                }
+                : {
+                    deliberationTokens: 0,
+                    accountingMode: 'estimated',
+                    providerReportedThinkingTokens: null,
+                };
+        }
+        return {
+            stream: processStream(),
+            getDeliberation: () => deliberation,
+            getTotalMs: () => totalMs || ((time ?? { nowMs: () => Date.now() }).nowMs()) - streamStart,
+        };
+    }
+    function supportsStreaming() {
+        return true;
+    }
+    function isRetryableStatus(status) {
+        return RETRYABLE_STATUS_CODES.has(status);
+    }
+    const adapter = {
+        providerId,
+        buildRequest,
+        parseResponse,
+        parseStream,
+        supportsStreaming,
+        isRetryableStatus,
+    };
+    return Object.freeze(adapter);
+}
+// ─── Helpers ───
+/**
+ * Map Anthropic stop_reason to Limen finish reason.
+ */
+function mapFinishReason(stopReason) {
+    switch (stopReason) {
+        case 'end_turn':
+        case 'stop_sequence':
+            return 'stop';
+        case 'max_tokens':
+            return 'length';
+        case 'tool_use':
+            return 'tool_use';
+        default:
+            return 'stop';
+    }
+}
+/**
+ * Create an Anthropic adapter with API key from environment variable.
+ * C-SEC-P5-01/02: Key is read from env and NEVER logged.
+ * CR-1: Key resolved once at creation.
+ *
+ * @param providerId - Provider identifier
+ * @param baseUrl - Base URL (e.g., 'https://api.anthropic.com')
+ * @param apiKeyEnvVar - Environment variable name containing the API key
+ * @param time - Optional TimeProvider
+ * @throws Error if API key env var is not set (for non-Ollama providers)
+ */
+export function createAnthropicAdapterFromEnv(providerId, baseUrl, apiKeyEnvVar, time) {
+    const apiKey = process.env[apiKeyEnvVar];
+    // C-SEC-P5-01: NEVER include the key value in error messages
+    if (!apiKey) {
+        throw new Error(`TRANSPORT_MISSING_API_KEY: API key environment variable is not set. Provider: ${providerId}`);
+    }
+    return createAnthropicAdapter(providerId, baseUrl, apiKey, time);
+}
+//# sourceMappingURL=anthropic_adapter.js.map

package/dist/substrate/transport/adapters/anthropic_adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic_adapter.js","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/anthropic_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AAiBH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,oBAAoB;AAEpB,mCAAmC;AACnC,MAAM,qBAAqB,GAAG,YAAY,CAAC;AAE3C,gDAAgD;AAChD,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAElE,2CAA2C;AAC3C,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD,6CAA6C;AAE7C;;;GAGG;AACH,SAAS,gBAAgB,CAAC,EAA2B;IACnD,MAAM,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;IACjB,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACrB,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC;IAEvB,eAAe;IACf,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3D,6BAA6B;IAC7B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,gDAAgD;IAChD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAErF,OAAO;QACL,EAAE;QACF,IAAI;QACJ,KAAK,EAAE,KAAgC;KACxC,CAAC;AACJ,CAAC;AAED,8BAA8B;AAE9B;;GAEG;AACH,SAAS,eAAe,CAAC,KAAsB;IAC7C,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACnB,KAAK,MAAM;YACT,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC5C,KAAK,OAAO;YACV,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,MAAM,EAAE;oBACN,IAAI,EAAE,QAAQ;oBACd,UAAU,EAAE,KAAK,CAAC,SAAS;oBAC3B,IAAI,EAAE,KAAK,CAAC,IAAI;iBACjB;aACF,CAAC;QACJ,KAAK,UAAU;YACb,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,KAAK,CAAC,KAAK;aACnB,CAAC;QACJ,KAAK,aAAa;YAChB,OAAO;gBACL,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,KAAK,CAAC,SAAS;gBAC5B,OAAO,EAAE,KAAK,CAAC,OAAO;gBACtB,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC7C,CAAC;QACJ;YACE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;IACtC,CAAC;AACH,CAAC;AAED,oCAAoC;AAEpC;;;;;;;GAOG;AACH,MAAM,UAAU,sBAAsB,CACpC,UAAkB,EAClB,OAAe,EACf,MAAc,EACd,IAAmB;IAEnB,oDAAoD;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC;IAE3B,SAAS,YAAY,CAAC,OAAmB,EAAE,SAAkB;QAC3D,sEAAsE;QACtE,MAAM,QAAQ,GAAmC,EAAE,CAAC;QAEpD,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;YACnC,IAAI,GAAG,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC1B,oEAAoE;gBACpE,SAAS;YACX,CAAC;YAED,MAAM,OAAO,GAAG,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ;gBAC7C,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAE,GAAG,CAAC,OAAsC,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;YAErE,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,GAAG,CAAC,IAAI;gBACd,OAAO;aACR,CAAC,CAAC;QACL,CAAC;QAED,qBAAqB;QACrB,MAAM,IAAI,GAA4B;YACpC,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,QAAQ;YACR,UAAU,EAAE,OAAO,CAAC,SAAS;SAC9B,CAAC;QAEF,qCAAqC;QACrC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;YACzB,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,YAAY,CAAC;QACrC,CAAC;QAED,yCAAyC;QACzC,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;YACtC,IAAI,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;QACzC,CAAC;QAED,QAAQ;QACR,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YAC9C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;gBACxC,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,YAAY,EAAE,IAAI,CAAC,WAAW;aAC/B,CAAC,CAAC,CAAC;QACN,CAAC;QAED,YAAY;QACZ,IAAI,SAAS,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACrB,CAAC;QAED,OAAO;YACL,GAAG,EAAE,GAAG,OAAO,cAAc;YAC7B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,WAAW;gBACxB,mBAAmB,EAAE,qBAAqB;aAC3C;YACD,IAAI;YACJ,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED,SAAS,aAAa,CAAC,YAAmC;QACxD,iCAAiC;QACjC,IAAI,MAA+B,CAAC;QACpC,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAA4B,CAAC;QACpE,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;QAC5E,CAAC;QAED,iEAAiE;QACjE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;QAC/B,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YAC5B,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;QAC9D,CAAC;QAED,0DAA0D;QAC1D,MAAM,cAAc,GAAsB,EAAE,CAAC;QAC7C,MAAM,SAAS,GAAkB,EAAE,CAAC;QACpC,IAAI,WAAW,GAAG,KAAK,CAAC;QAExB,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;YAC5B,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;gBAAE,SAAS;YAC1D,MAAM,CAAC,GAAG,KAAgC,CAAC;YAE3C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACtB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;YACpE,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjC,4CAA4C;gBAC5C,MAAM,SAAS,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;gBACtC,IAAI,SAAS,EAAE,CAAC;oBACd,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;oBAC1B,cAAc,CAAC,IAAI,CAAC;wBAClB,IAAI,EAAE,UAAU;wBAChB,EAAE,EAAE,SAAS,CAAC,EAAE;wBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;wBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;qBACvB,CAAC,CAAC;gBACL,CAAC;gBACD,yEAAyE;YAC3E,CAAC;iBAAM,IAAI,CAAC,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBACjC,+CAA+C;gBAC/C,sCAAsC;gBACtC,WAAW,GAAG,IAAI,CAAC;YACrB,CAAC;QACH,CAAC;QAED,gBAAgB;QAChB,MAAM,KAAK,GAAG,MAAM,CAAC,KAA4C,CAAC;QAClE,MAAM,WAAW,GAAG,OAAO,KAAK,EAAE,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;QACrF,MAAM,YAAY,GAAG,OAAO,KAAK,EAAE,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;QAExF,+EAA+E;QAC/E,6DAA6D;QAE7D,4DAA4D;QAC5D,MAAM,UAAU,GAAG,MAAM,CAAC,WAAiC,CAAC;QAC5D,MAAM,YAAY,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;QAEjD,uBAAuB;QACvB,0FAA0F;QAC1F,oFAAoF;QACpF,MAAM,YAAY,GAAwB,WAAW;YACnD,CAAC,CAAC;gBACE,kBAAkB,EAAE,YAAY;gBAChC,cAAc,EAAE,wBAAwB;gBACxC,8BAA8B,EAAE,YAAY;aAC7C;YACH,CAAC,CAAC;gBACE,kBAAkB,EAAE,CAAC;gBACrB,cAAc,EAAE,WAAW;gBAC3B,8BAA8B,EAAE,IAAI;aACrC,CAAC;QAEN,MAAM,QAAQ,GAAgB;YAC5B,OAAO,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM;gBACxE,CAAC,CAAE,cAAc,CAAC,CAAC,CAAoC,CAAC,IAAI;gBAC5D,CAAC,CAAC,cAAc;YAClB,SAAS;YACT,YAAY;YACZ,KAAK,EAAE;gBACL,WAAW;gBACX,YAAY;gBACZ,mBAAmB,EAAE,WAAW;gBAChC,oBAAoB,EAAE,YAAY;aACnC;YACD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;YACjC,UAAU;YACV,SAAS,EAAE,CAAC,EAAE,6BAA6B;SAC5C,CAAC;QAEF,OAAO;YACL,QAAQ;YACR,YAAY;YACZ,UAAU,EAAE,CAAC,EAAE,6BAA6B;YAC5C,OAAO,EAAE,CAAC,EAAE,6BAA6B;SAC1C,CAAC;IACJ,CAAC;IAED,SAAS,WAAW,CAClB,IAAgC,EAChC,MAAoB;QAEpB,IAAI,YAAY,GAAwB;YACtC,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,WAAW;YAC3B,8BAA8B,EAAE,IAAI;SACrC,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,WAAW,GAAG,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC;QAElE,uCAAuC;QACvC,IAAI,yBAAyB,GAAG,CAAC,CAAC;QAClC,IAAI,gBAAgB,GAAG,KAAK,CAAC;QAE7B,2CAA2C;QAC3C,MAAM,aAAa,GAAG,IAAI,GAAG,EAA8D,CAAC;QAE5F,KAAK,SAAS,CAAC,CAAC,aAAa;YAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7D,kBAAkB;gBAClB,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAErD,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,0BAA0B;gBACtC,CAAC;gBAED,MAAM,SAAS,GAAG,MAAM,CAAC,IAA0B,CAAC;gBAEpD,kCAAkC;gBAClC,QAAQ,SAAS,EAAE,CAAC;oBAClB,KAAK,qBAAqB,CAAC,CAAC,CAAC;wBAC3B,MAAM,EAAE,GAAG,MAAM,CAAC,aAAoD,CAAC;wBACvE,IAAI,EAAE,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;4BAC5B,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;4BACnE,IAAI,KAAK,IAAI,CAAC,EAAE,CAAC;gCACf,aAAa,CAAC,GAAG,CAAC,KAAK,EAAE;oCACvB,EAAE,EAAE,MAAM,CAAC,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC;oCACvB,IAAI,EAAE,MAAM,CAAC,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC;oCAC3B,UAAU,EAAE,EAAE;iCACf,CAAC,CAAC;4BACL,CAAC;wBACH,CAAC;6BAAM,IAAI,EAAE,EAAE,IAAI,KAAK,UAAU,EAAE,CAAC;4BACnC,gBAAgB,GAAG,IAAI,CAAC;wBAC1B,CAAC;wBACD,MAAM;oBACR,CAAC;oBAED,KAAK,qBAAqB,CAAC,CAAC,CAAC;wBAC3B,MAAM,KAAK,GAAG,MAAM,CAAC,KAA4C,CAAC;wBAClE,IAAI,CAAC,KAAK;4BAAE,MAAM;wBAElB,IAAI,KAAK,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;4BAChC,MAAM;gCACJ,IAAI,EAAE,eAAe;gCACrB,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,EAAE,CAAC;6BAChC,CAAC;wBACJ,CAAC;6BAAM,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,EAAE,CAAC;4BAC7C,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;4BACnE,MAAM,KAAK,GAAG,aAAa,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;4BACvC,IAAI,KAAK,EAAE,CAAC;gCACV,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC;gCACrD,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;gCACnC,MAAM;oCACJ,IAAI,EAAE,iBAAiB;oCACvB,UAAU,EAAE,KAAK,CAAC,EAAE;oCACpB,IAAI,EAAE,KAAK,CAAC,IAAI;oCAChB,UAAU,EAAE,WAAW;iCACxB,CAAC;4BACJ,CAAC;wBACH,CAAC;6BAAM,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;4BAC3C,+DAA+D;4BAC/D,2CAA2C;4BAC3C,gBAAgB,GAAG,IAAI,CAAC;wBAC1B,CAAC;wBACD,MAAM;oBACR,CAAC;oBAED,KAAK,oBAAoB,CAAC,CAAC,CAAC;wBAC1B,yDAAyD;wBACzD,MAAM;oBACR,CAAC;oBAED,KAAK,eAAe,CAAC,CAAC,CAAC;wBACrB,MAAM,KAAK,GAAG,MAAM,CAAC,KAA4C,CAAC;wBAClE,MAAM,WAAW,GAAG,MAAM,CAAC,KAA4C,CAAC;wBAExE,IAAI,WAAW,EAAE,CAAC;4BAChB,MAAM,SAAS,GAAG,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ;gCAC7D,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;4BAClC,+BAA+B;4BAC/B,MAAM;gCACJ,IAAI,EAAE,OAAO;gCACb,WAAW,EAAE,CAAC,EAAE,uCAAuC;gCACvD,YAAY,EAAE,SAAS;6BACxB,CAAC;wBACJ,CAAC;wBAED,IAAI,KAAK,EAAE,WAAW,EAAE,CAAC;4BACvB,MAAM;gCACJ,IAAI,EAAE,MAAM;gCACZ,YAAY,EAAE,eAAe,CAAC,KAAK,CAAC,WAAqB,CAAC;6BAC3D,CAAC;wBACJ,CAAC;wBACD,MAAM;oBACR,CAAC;oBAED,KAAK,eAAe,CAAC,CAAC,CAAC;wBACrB,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;wBACtE,MAAM,QAAQ,GAAG,OAAO,EAAE,KAA4C,CAAC;wBACvE,IAAI,QAAQ,EAAE,CAAC;4BACb,MAAM,QAAQ,GAAG,OAAO,QAAQ,CAAC,YAAY,KAAK,QAAQ;gCACxD,CAAC,CAAC,QAAQ,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;4BAC9B,MAAM;gCACJ,IAAI,EAAE,OAAO;gCACb,WAAW,EAAE,QAAQ;gCACrB,YAAY,EAAE,CAAC;6BAChB,CAAC;wBACJ,CAAC;wBACD,MAAM;oBACR,CAAC;oBAED,KAAK,OAAO,CAAC,CAAC,CAAC;wBACb,MAAM,QAAQ,GAAG,MAAM,CAAC,KAA4C,CAAC;wBACrE,MAAM;4BACJ,IAAI,EAAE,OAAO;4BACb,KAAK,EAAE,MAAM,CAAC,QAAQ,EAAE,OAAO,IAAI,gCAAgC,CAAC;yBACrE,CAAC;wBACF,MAAM;oBACR,CAAC;gBACH,CAAC;YACH,CAAC;YAED,kDAAkD;YAClD,OAAO,GAAG,CAAC,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,WAAW,CAAC;YACxE,YAAY,GAAG,gBAAgB;gBAC7B,CAAC,CAAC;oBACE,kBAAkB,EAAE,yBAAyB;oBAC7C,cAAc,EAAE,wBAAwB;oBACxC,8BAA8B,EAAE,yBAAyB;iBAC1D;gBACH,CAAC,CAAC;oBACE,kBAAkB,EAAE,CAAC;oBACrB,cAAc,EAAE,WAAW;oBAC3B,8BAA8B,EAAE,IAAI;iBACrC,CAAC;QACR,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa,EAAE;YACvB,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY;YACnC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,CAAC,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,KAAK,EAAE,CAAC,GAAG,WAAW;SAC3F,CAAC;IACJ,CAAC;IAED,SAAS,iBAAiB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,iBAAiB,CAAC,MAAc;QACvC,OAAO,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,UAAU;QACV,YAAY;QACZ,aAAa;QACb,WAAW;QACX,iBAAiB;QACjB,iBAAiB;KAClB,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,kBAAkB;AAElB;;GAEG;AACH,SAAS,eAAe,CAAC,UAA8B;IACrD,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,UAAU,CAAC;QAChB,KAAK,eAAe;YAClB,OAAO,MAAM,CAAC;QAChB,KAAK,YAAY;YACf,OAAO,QAAQ,CAAC;QAClB,KAAK,UAAU;YACb,OAAO,UAAU,CAAC;QACpB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,UAAU,6BAA6B,CAC3C,UAAkB,EAClB,OAAe,EACf,YAAoB,EACpB,IAAmB;IAEnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;IAEzC,6DAA6D;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iFAAiF,UAAU,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO,sBAAsB,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AACnE,CAAC"}

package/dist/substrate/transport/adapters/gemini_adapter.d.ts

@@ -0,0 +1,86 @@
+/**
+ * Google Gemini REST API adapter.
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5B (Sprint 5B — OpenAI + Google Adapters)
+ * Implements: ProviderAdapter for Google's Gemini REST API.
+ *
+ * Auth: API key in query parameter ?key={key}
+ * URL:
+ *   Non-streaming: {baseUrl}/v1beta/models/{model}:generateContent?key={key}
+ *   Streaming: {baseUrl}/v1beta/models/{model}:streamGenerateContent?key={key}&alt=sse
+ *
+ * C-SEC-P5-03 (CRITICAL): URL credential scrubbing.
+ *   The API key is in the query string. scrubUrl() replaces the key value with [REDACTED].
+ *   This function MUST be called:
+ *     - Before any URL is included in an error message
+ *     - Before any URL is logged
+ *   TransportHttpRequest.url sent to fetch() contains the real key.
+ *   Any error thrown by the adapter must use scrubUrl().
+ *
+ * Request translation: Gemini uses contents[].parts[] format (not messages).
+ *   role: 'user'/'model' (not 'assistant'). System instruction in systemInstruction field.
+ *
+ * Response parsing: candidates[0].content.parts, usageMetadata.promptTokenCount/candidatesTokenCount
+ *
+ * Thinking/Deliberation: usageMetadata.thoughtsTokenCount → provider_authoritative
+ *
+ * Tool calls: Gemini uses functionCall in parts. Map to LlmToolCall.
+ *
+ * Streaming: SSE format. Events contain partial candidates.
+ *
+ * Retryable: 429, 500, 502, 503
+ *
+ * Security:
+ *   - C-SEC-P5-01/02: API key NEVER in error messages (use scrubUrl)
+ *   - C-SEC-P5-03: URL credential scrubbing
+ *   - C-SEC-P5-04 / CR-1: API key resolved ONCE at creation
+ *   - C-SEC-P5-22: Provider output is untrusted input
+ *   - C-SEC-P5-23: Tool call structural validation (functionCall)
+ */
+import type { ProviderAdapter } from '../transport_types.js';
+import type { LlmToolCall } from '../../interfaces/substrate.js';
+import type { TimeProvider } from '../../../kernel/interfaces/time.js';
+/** Retryable HTTP status codes for Gemini */
+declare const RETRYABLE_STATUS_CODES: Set<number>;
+/** C-SEC-P5-23: Valid function name pattern */
+declare const TOOL_NAME_PATTERN: RegExp;
+/**
+ * C-SEC-P5-03: Remove API key from a Gemini URL.
+ * Replaces the `key=` query parameter value with [REDACTED].
+ * MUST be called before including any URL in error messages, logs, or metadata.
+ */
+export declare function scrubUrl(url: string): string;
+/**
+ * Validate a Gemini functionCall part into an LlmToolCall.
+ * C-SEC-P5-23: Name must match pattern, args must be an object.
+ * Gemini does not provide a tool call ID — we generate one from the function name.
+ */
+declare function validateGeminiFunctionCall(fc: Record<string, unknown>, index: number): LlmToolCall | null;
+/**
+ * Create a Google Gemini REST API adapter.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the Gemini API (e.g., 'https://generativelanguage.googleapis.com')
+ * @param apiKey - API key (resolved ONCE at creation — CR-1 / C-SEC-P5-04)
+ * @param time - Optional TimeProvider for clock injection
+ */
+export declare function createGeminiAdapter(providerId: string, baseUrl: string, apiKey: string, time?: TimeProvider): ProviderAdapter;
+/**
+ * Create a Gemini adapter with API key from environment variable.
+ * C-SEC-P5-01/02: Key is read from env and NEVER logged.
+ * CR-1: Key resolved once at creation.
+ *
+ * @param providerId - Provider identifier
+ * @param baseUrl - Base URL (e.g., 'https://generativelanguage.googleapis.com')
+ * @param apiKeyEnvVar - Environment variable name containing the API key
+ * @param time - Optional TimeProvider
+ * @throws Error if API key env var is not set (message does NOT include key value)
+ */
+export declare function createGeminiAdapterFromEnv(providerId: string, baseUrl: string, apiKeyEnvVar: string, time?: TimeProvider): ProviderAdapter;
+/**
+ * Map Gemini finishReason to Limen finish reason.
+ */
+declare function mapGeminiFinishReason(reason: string | undefined, hasToolCalls: boolean): 'stop' | 'length' | 'tool_use' | 'content_filter';
+export { RETRYABLE_STATUS_CODES, TOOL_NAME_PATTERN, validateGeminiFunctionCall, mapGeminiFinishReason };
+//# sourceMappingURL=gemini_adapter.d.ts.map

package/dist/substrate/transport/adapters/gemini_adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gemini_adapter.d.ts","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/gemini_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuCG;AAEH,OAAO,KAAK,EACV,eAAe,EAMhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAKV,WAAW,EACZ,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAIvE,6CAA6C;AAC7C,QAAA,MAAM,sBAAsB,aAAgC,CAAC;AAE7D,+CAA+C;AAC/C,QAAA,MAAM,iBAAiB,QAA6B,CAAC;AAIrD;;;;GAIG;AACH,wBAAgB,QAAQ,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAG5C;AAmDD;;;;GAIG;AACH,iBAAS,0BAA0B,CACjC,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3B,KAAK,EAAE,MAAM,GACZ,WAAW,GAAG,IAAI,CAepB;AAID;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,YAAY,GAClB,eAAe,CA8TjB;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE,YAAY,GAClB,eAAe,CAWjB;AAID;;GAEG;AACH,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,YAAY,EAAE,OAAO,GACpB,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,gBAAgB,CAYnD;AAGD,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,CAAC"}