limen-ai 1.0.0

package/dist/substrate/transport/adapters/ollama_adapter.js

@@ -0,0 +1,347 @@
+/**
+ * Ollama API adapter (local-only, NDJSON, no auth).
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5C (Sprint 5C — Ollama + Groq + Mistral Adapters)
+ * Implements: ProviderAdapter for Ollama's local REST API.
+ *
+ * Ollama is fundamentally different from cloud providers:
+ *   - Local-only: C-SEC-P5-05 enforces localhost/127.0.0.1/[::1] restriction
+ *   - No auth: No API key, no Bearer token
+ *   - NDJSON streaming: Not SSE. Each line is a complete JSON object.
+ *   - Custom request format: `options` object instead of top-level fields
+ *   - Custom response format: `message` (singular), `prompt_eval_count`, `eval_count`
+ *   - Tool calls: `arguments` is an OBJECT (not JSON string like OpenAI)
+ *
+ * Auth: NONE. Ollama is a local server.
+ * URL: {baseUrl}/api/chat (default baseUrl: http://localhost:11434)
+ *
+ * C-SEC-P5-05: URL validation — ONLY allow localhost/127.0.0.1/[::1].
+ *              Throws TRANSPORT_INVALID_URL if non-local.
+ * C-SEC-P5-19 exception: TLS NOT required for localhost.
+ * C-SEC-P5-23: Tool call validation — name matches TOOL_NAME_PATTERN, args is object.
+ *
+ * Retryable: 429, 500, 502, 503
+ */
+import { parseNDJSONStream } from '../stream_parser.js';
+// ─── Constants ───
+/** Retryable HTTP status codes for Ollama */
+const RETRYABLE_STATUS_CODES = new Set([429, 500, 502, 503]);
+/** C-SEC-P5-23: Valid tool name pattern */
+const TOOL_NAME_PATTERN = /^[a-zA-Z_][a-zA-Z0-9_]*$/;
+/** C-SEC-P5-05: Allowed localhost hostnames */
+const LOCALHOST_HOSTNAMES = new Set(['localhost', '127.0.0.1', '[::1]']);
+// ─── URL Validation (C-SEC-P5-05) ───
+/**
+ * C-SEC-P5-05: Validate that a URL points to localhost only.
+ * Ollama MUST only connect to local servers.
+ * Throws with TRANSPORT_INVALID_URL if non-local.
+ */
+function validateLocalhostUrl(baseUrl) {
+    let parsed;
+    try {
+        parsed = new URL(baseUrl);
+    }
+    catch {
+        throw new Error(`TRANSPORT_INVALID_URL: Invalid URL format for Ollama adapter. Only localhost URLs are allowed.`);
+    }
+    // Extract hostname — URL class normalizes [::1] to [::1] in hostname
+    const hostname = parsed.hostname;
+    if (!LOCALHOST_HOSTNAMES.has(hostname)) {
+        throw new Error(`TRANSPORT_INVALID_URL: Ollama adapter only allows localhost connections. ` +
+            `Received hostname: ${hostname}. Allowed: localhost, 127.0.0.1, [::1].`);
+    }
+}
+// ─── Tool Call Validation (C-SEC-P5-23) ───
+/**
+ * Validate an Ollama tool call.
+ * C-SEC-P5-23: Name must match pattern, args must be an object.
+ * Ollama tool_calls use `arguments` as an OBJECT (not JSON string).
+ * Ollama does NOT provide a tool call id — we generate one.
+ */
+function validateOllamaToolCall(tc, index) {
+    const fn = tc.function;
+    if (typeof fn !== 'object' || fn === null)
+        return null;
+    // Name matches valid pattern
+    const name = fn.name;
+    if (typeof name !== 'string' || !TOOL_NAME_PATTERN.test(name))
+        return null;
+    // Arguments must be an object (Ollama sends it as an object, not a JSON string)
+    const args = fn.arguments;
+    if (typeof args !== 'object' || args === null || Array.isArray(args))
+        return null;
+    // Ollama does not provide IDs — generate a deterministic one
+    const id = `ollama-call-${index}`;
+    return {
+        id,
+        name,
+        input: args,
+    };
+}
+// ─── Ollama Request Translation ───
+/**
+ * Build an Ollama-format request body from a Limen LlmRequest.
+ * Ollama uses a different structure from OpenAI:
+ *   - `messages` array (same structure as OpenAI)
+ *   - `options` object for generation parameters (not top-level)
+ *   - `stream` boolean
+ *   - `model` at top level
+ */
+function buildOllamaRequestBody(request, streaming) {
+    // Build messages array
+    const messages = [];
+    // System prompt -> system message
+    if (request.systemPrompt) {
+        messages.push({ role: 'system', content: request.systemPrompt });
+    }
+    for (const msg of request.messages) {
+        if (typeof msg.content === 'string') {
+            messages.push({ role: msg.role, content: msg.content });
+        }
+        else {
+            // Ollama primarily handles text — collapse content blocks to text
+            const blocks = msg.content;
+            const textContent = blocks
+                .filter((b) => b.type === 'text')
+                .map(b => b.text)
+                .join('\n');
+            messages.push({ role: msg.role, content: textContent });
+        }
+    }
+    const body = {
+        model: request.model,
+        messages,
+        stream: streaming,
+    };
+    // Generation options
+    const options = {};
+    if (request.maxTokens !== undefined) {
+        options.num_predict = request.maxTokens;
+    }
+    if (request.temperature !== undefined) {
+        options.temperature = request.temperature;
+    }
+    if (Object.keys(options).length > 0) {
+        body.options = options;
+    }
+    // Tools
+    if (request.tools && request.tools.length > 0) {
+        body.tools = request.tools.map((tool) => ({
+            type: 'function',
+            function: {
+                name: tool.name,
+                description: tool.description,
+                parameters: tool.inputSchema,
+            },
+        }));
+    }
+    return body;
+}
+// ─── Ollama Response Parsing ───
+/**
+ * Parse an Ollama non-streaming response.
+ * Response format:
+ *   {
+ *     model: "llama3",
+ *     message: { role: "assistant", content: "..." },
+ *     done: true,
+ *     prompt_eval_count: 42,
+ *     eval_count: 128
+ *   }
+ */
+function parseOllamaResponse(httpResponse, providerId) {
+    // C-SEC-P5-07: JSON parse safety
+    let parsed;
+    try {
+        parsed = JSON.parse(httpResponse.body);
+    }
+    catch {
+        throw new Error(`JSON parse error: invalid response body from ${providerId}`);
+    }
+    // C-SEC-P5-22: Validate structure
+    const message = parsed.message;
+    if (!message) {
+        throw new Error(`${providerId} response missing message object`);
+    }
+    // Extract content
+    const rawContent = message.content;
+    const contentText = typeof rawContent === 'string' ? rawContent : '';
+    // Extract tool calls (C-SEC-P5-23)
+    const toolCalls = [];
+    const responseBlocks = [];
+    if (contentText) {
+        responseBlocks.push({ type: 'text', text: contentText });
+    }
+    const rawToolCalls = message.tool_calls;
+    if (Array.isArray(rawToolCalls)) {
+        let toolCallIndex = 0;
+        for (const tc of rawToolCalls) {
+            if (typeof tc !== 'object' || tc === null)
+                continue;
+            const validated = validateOllamaToolCall(tc, toolCallIndex++);
+            if (validated) {
+                toolCalls.push(validated);
+                responseBlocks.push({
+                    type: 'tool_use',
+                    id: validated.id,
+                    name: validated.name,
+                    input: validated.input,
+                });
+            }
+            // Invalid tool calls silently dropped — provider output is untrusted
+        }
+    }
+    // Extract usage — Ollama uses prompt_eval_count and eval_count
+    const promptEvalCount = typeof parsed.prompt_eval_count === 'number' ? parsed.prompt_eval_count : 0;
+    const evalCount = typeof parsed.eval_count === 'number' ? parsed.eval_count : 0;
+    // Deliberation — Ollama never reports reasoning tokens
+    const deliberation = {
+        deliberationTokens: 0,
+        accountingMode: 'estimated',
+        providerReportedThinkingTokens: null,
+    };
+    // Finish reason — map from Ollama's done_reason if present
+    const doneReason = parsed.done_reason;
+    const finishReason = mapOllamaFinishReason(doneReason, toolCalls.length > 0);
+    const response = {
+        content: responseBlocks.length === 1 && responseBlocks[0]?.type === 'text'
+            ? responseBlocks[0].text
+            : responseBlocks.length > 0 ? responseBlocks : contentText,
+        toolCalls,
+        finishReason,
+        usage: {
+            inputTokens: promptEvalCount,
+            outputTokens: evalCount,
+            providerInputTokens: promptEvalCount,
+            providerOutputTokens: evalCount,
+        },
+        model: String(parsed.model ?? ''),
+        providerId,
+        latencyMs: 0, // Filled by transport engine
+    };
+    return {
+        response,
+        deliberation,
+        retryCount: 0, // Filled by transport engine
+        totalMs: 0, // Filled by transport engine
+    };
+}
+// ─── Ollama Adapter Factory ───
+/**
+ * Create an Ollama API adapter.
+ *
+ * C-SEC-P5-05: Validates that baseUrl is localhost at creation time.
+ * No API key — Ollama is a local server.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the Ollama server (default: http://localhost:11434)
+ * @param time - Optional TimeProvider for clock injection (Hard Stop #7)
+ * @throws Error with TRANSPORT_INVALID_URL if baseUrl is not localhost
+ */
+export function createOllamaAdapter(providerId, baseUrl = 'http://localhost:11434', time) {
+    // C-SEC-P5-05: Validate localhost at creation time
+    validateLocalhostUrl(baseUrl);
+    function buildRequest(request, streaming) {
+        const url = `${baseUrl}/api/chat`;
+        const body = buildOllamaRequestBody(request, streaming);
+        return {
+            url,
+            method: 'POST',
+            headers: {
+                'content-type': 'application/json',
+            },
+            body,
+            stream: streaming,
+        };
+    }
+    function parseResponse(httpResponse) {
+        return parseOllamaResponse(httpResponse, providerId);
+    }
+    function parseStream(body, signal) {
+        // Ollama never reports reasoning tokens
+        const deliberation = {
+            deliberationTokens: 0,
+            accountingMode: 'estimated',
+            providerReportedThinkingTokens: null,
+        };
+        let totalMs = 0;
+        const clock = time ?? { nowMs: () => Date.now() }; // clock-exempt: fallback only
+        const streamStart = clock.nowMs();
+        async function* processStream() {
+            for await (const chunk of parseNDJSONStream(body, signal, time)) {
+                const message = chunk.message;
+                const done = chunk.done === true;
+                if (!done && message) {
+                    // Content delta from message.content when done === false
+                    const content = message.content;
+                    if (typeof content === 'string' && content.length > 0) {
+                        yield {
+                            type: 'content_delta',
+                            delta: content,
+                        };
+                    }
+                }
+                if (done) {
+                    // Final chunk — extract usage from prompt_eval_count and eval_count
+                    const promptEvalCount = typeof chunk.prompt_eval_count === 'number' ? chunk.prompt_eval_count : 0;
+                    const evalCount = typeof chunk.eval_count === 'number' ? chunk.eval_count : 0;
+                    yield {
+                        type: 'usage',
+                        inputTokens: promptEvalCount,
+                        outputTokens: evalCount,
+                    };
+                    // Finish reason from done_reason
+                    const doneReason = chunk.done_reason;
+                    const finishReason = mapOllamaFinishReason(doneReason, false);
+                    yield {
+                        type: 'done',
+                        finishReason,
+                    };
+                }
+            }
+            // Set timing after stream completes
+            totalMs = clock.nowMs() - streamStart;
+        }
+        return {
+            stream: processStream(),
+            getDeliberation: () => deliberation,
+            getTotalMs: () => totalMs || (clock.nowMs() - streamStart),
+        };
+    }
+    function supportsStreaming() {
+        return true;
+    }
+    function isRetryableStatus(status) {
+        return RETRYABLE_STATUS_CODES.has(status);
+    }
+    const adapter = {
+        providerId,
+        buildRequest,
+        parseResponse,
+        parseStream,
+        supportsStreaming,
+        isRetryableStatus,
+    };
+    return Object.freeze(adapter);
+}
+// ─── Helpers ───
+/**
+ * Map Ollama done_reason to Limen finish reason.
+ * Ollama uses: 'stop', 'length', or undefined (defaults to 'stop').
+ */
+function mapOllamaFinishReason(reason, hasToolCalls) {
+    if (hasToolCalls)
+        return 'tool_use';
+    switch (reason) {
+        case 'stop':
+            return 'stop';
+        case 'length':
+            return 'length';
+        default:
+            return 'stop';
+    }
+}
+// ─── Exported for testing ───
+export { RETRYABLE_STATUS_CODES, TOOL_NAME_PATTERN, validateLocalhostUrl, validateOllamaToolCall, mapOllamaFinishReason, LOCALHOST_HOSTNAMES, };
+//# sourceMappingURL=ollama_adapter.js.map

package/dist/substrate/transport/adapters/ollama_adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama_adapter.js","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/ollama_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAiBH,OAAO,EAAE,iBAAiB,EAAE,MAAM,qBAAqB,CAAC;AAGxD,oBAAoB;AAEpB,6CAA6C;AAC7C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7D,2CAA2C;AAC3C,MAAM,iBAAiB,GAAG,0BAA0B,CAAC;AAErD,+CAA+C;AAC/C,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,CAAC;AAEzE,uCAAuC;AAEvC;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,OAAe;IAC3C,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CACb,gGAAgG,CACjG,CAAC;IACJ,CAAC;IAED,qEAAqE;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;IAEjC,IAAI,CAAC,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvC,MAAM,IAAI,KAAK,CACb,2EAA2E;YAC3E,sBAAsB,QAAQ,yCAAyC,CACxE,CAAC;IACJ,CAAC;AACH,CAAC;AAED,6CAA6C;AAE7C;;;;;GAKG;AACH,SAAS,sBAAsB,CAC7B,EAA2B,EAC3B,KAAa;IAEb,MAAM,EAAE,GAAG,EAAE,CAAC,QAA+C,CAAC;IAC9D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvD,6BAA6B;IAC7B,MAAM,IAAI,GAAG,EAAE,CAAC,IAAI,CAAC;IACrB,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAE3E,gFAAgF;IAChF,MAAM,IAAI,GAAG,EAAE,CAAC,SAAS,CAAC;IAC1B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAElF,6DAA6D;IAC7D,MAAM,EAAE,GAAG,eAAe,KAAK,EAAE,CAAC;IAElC,OAAO;QACL,EAAE;QACF,IAAI;QACJ,KAAK,EAAE,IAA+B;KACvC,CAAC;AACJ,CAAC;AAED,qCAAqC;AAErC;;;;;;;GAOG;AACH,SAAS,sBAAsB,CAC7B,OAAmB,EACnB,SAAkB;IAElB,uBAAuB;IACvB,MAAM,QAAQ,GAAmC,EAAE,CAAC;IAEpD,kCAAkC;IAClC,IAAI,OAAO,CAAC,YAAY,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;IACnE,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;QACnC,IAAI,OAAO,GAAG,CAAC,OAAO,KAAK,QAAQ,EAAE,CAAC;YACpC,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1D,CAAC;aAAM,CAAC;YACN,kEAAkE;YAClE,MAAM,MAAM,GAAG,GAAG,CAAC,OAAqC,CAAC;YACzD,MAAM,WAAW,GAAG,MAAM;iBACvB,MAAM,CAAC,CAAC,CAAC,EAAuC,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC;iBACrE,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;iBAChB,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,QAAQ,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAA4B;QACpC,KAAK,EAAE,OAAO,CAAC,KAAK;QACpB,QAAQ;QACR,MAAM,EAAE,SAAS;KAClB,CAAC;IAEF,qBAAqB;IACrB,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QACpC,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC;IAC1C,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,KAAK,SAAS,EAAE,CAAC;QACtC,OAAO,CAAC,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC;IAC5C,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IACzB,CAAC;IAED,QAAQ;IACR,IAAI,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC9C,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC;YACxC,IAAI,EAAE,UAAU;YAChB,QAAQ,EAAE;gBACR,IAAI,EAAE,IAAI,CAAC,IAAI;gBACf,WAAW,EAAE,IAAI,CAAC,WAAW;gBAC7B,UAAU,EAAE,IAAI,CAAC,WAAW;aAC7B;SACF,CAAC,CAAC,CAAC;IACN,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,kCAAkC;AAElC;;;;;;;;;;GAUG;AACH,SAAS,mBAAmB,CAC1B,YAAmC,EACnC,UAAkB;IAElB,iCAAiC;IACjC,IAAI,MAA+B,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,CAA4B,CAAC;IACpE,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,gDAAgD,UAAU,EAAE,CAAC,CAAC;IAChF,CAAC;IAED,kCAAkC;IAClC,MAAM,OAAO,GAAG,MAAM,CAAC,OAA8C,CAAC;IACtE,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,GAAG,UAAU,kCAAkC,CAAC,CAAC;IACnE,CAAC;IAED,kBAAkB;IAClB,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC;IACnC,MAAM,WAAW,GAAG,OAAO,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAErE,mCAAmC;IACnC,MAAM,SAAS,GAAkB,EAAE,CAAC;IACpC,MAAM,cAAc,GAAsB,EAAE,CAAC;IAE7C,IAAI,WAAW,EAAE,CAAC;QAChB,cAAc,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3D,CAAC;IAED,MAAM,YAAY,GAAG,OAAO,CAAC,UAAU,CAAC;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,EAAE,CAAC;QAChC,IAAI,aAAa,GAAG,CAAC,CAAC;QACtB,KAAK,MAAM,EAAE,IAAI,YAAY,EAAE,CAAC;YAC9B,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,KAAK,IAAI;gBAAE,SAAS;YACpD,MAAM,SAAS,GAAG,sBAAsB,CAAC,EAA6B,EAAE,aAAa,EAAE,CAAC,CAAC;YACzF,IAAI,SAAS,EAAE,CAAC;gBACd,SAAS,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBAC1B,cAAc,CAAC,IAAI,CAAC;oBAClB,IAAI,EAAE,UAAU;oBAChB,EAAE,EAAE,SAAS,CAAC,EAAE;oBAChB,IAAI,EAAE,SAAS,CAAC,IAAI;oBACpB,KAAK,EAAE,SAAS,CAAC,KAAK;iBACvB,CAAC,CAAC;YACL,CAAC;YACD,qEAAqE;QACvE,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,MAAM,eAAe,GAAG,OAAO,MAAM,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;IACpG,MAAM,SAAS,GAAG,OAAO,MAAM,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;IAEhF,uDAAuD;IACvD,MAAM,YAAY,GAAwB;QACxC,kBAAkB,EAAE,CAAC;QACrB,cAAc,EAAE,WAAW;QAC3B,8BAA8B,EAAE,IAAI;KACrC,CAAC;IAEF,2DAA2D;IAC3D,MAAM,UAAU,GAAG,MAAM,CAAC,WAAiC,CAAC;IAC5D,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,EAAE,SAAS,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;IAE7E,MAAM,QAAQ,GAAgB;QAC5B,OAAO,EAAE,cAAc,CAAC,MAAM,KAAK,CAAC,IAAI,cAAc,CAAC,CAAC,CAAC,EAAE,IAAI,KAAK,MAAM;YACxE,CAAC,CAAE,cAAc,CAAC,CAAC,CAAoC,CAAC,IAAI;YAC5D,CAAC,CAAC,cAAc,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW;QAC5D,SAAS;QACT,YAAY;QACZ,KAAK,EAAE;YACL,WAAW,EAAE,eAAe;YAC5B,YAAY,EAAE,SAAS;YACvB,mBAAmB,EAAE,eAAe;YACpC,oBAAoB,EAAE,SAAS;SAChC;QACD,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC;QACjC,UAAU;QACV,SAAS,EAAE,CAAC,EAAE,6BAA6B;KAC5C,CAAC;IAEF,OAAO;QACL,QAAQ;QACR,YAAY;QACZ,UAAU,EAAE,CAAC,EAAE,6BAA6B;QAC5C,OAAO,EAAE,CAAC,EAAE,6BAA6B;KAC1C,CAAC;AACJ,CAAC;AAED,iCAAiC;AAEjC;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CACjC,UAAkB,EAClB,UAAkB,wBAAwB,EAC1C,IAAmB;IAEnB,mDAAmD;IACnD,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAE9B,SAAS,YAAY,CAAC,OAAmB,EAAE,SAAkB;QAC3D,MAAM,GAAG,GAAG,GAAG,OAAO,WAAW,CAAC;QAClC,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;QAExD,OAAO;YACL,GAAG;YACH,MAAM,EAAE,MAAM;YACd,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;aACnC;YACD,IAAI;YACJ,MAAM,EAAE,SAAS;SAClB,CAAC;IACJ,CAAC;IAED,SAAS,aAAa,CAAC,YAAmC;QACxD,OAAO,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACvD,CAAC;IAED,SAAS,WAAW,CAClB,IAAgC,EAChC,MAAoB;QAEpB,wCAAwC;QACxC,MAAM,YAAY,GAAwB;YACxC,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,WAAW;YAC3B,8BAA8B,EAAE,IAAI;SACrC,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,8BAA8B;QACjF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAElC,KAAK,SAAS,CAAC,CAAC,aAAa;YAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAChE,MAAM,OAAO,GAAG,KAAK,CAAC,OAA8C,CAAC;gBACrE,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;gBAEjC,IAAI,CAAC,IAAI,IAAI,OAAO,EAAE,CAAC;oBACrB,yDAAyD;oBACzD,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC;oBAChC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtD,MAAM;4BACJ,IAAI,EAAE,eAAe;4BACrB,KAAK,EAAE,OAAO;yBACf,CAAC;oBACJ,CAAC;gBACH,CAAC;gBAED,IAAI,IAAI,EAAE,CAAC;oBACT,oEAAoE;oBACpE,MAAM,eAAe,GAAG,OAAO,KAAK,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;oBAClG,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;oBAE9E,MAAM;wBACJ,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,eAAe;wBAC5B,YAAY,EAAE,SAAS;qBACxB,CAAC;oBAEF,iCAAiC;oBACjC,MAAM,UAAU,GAAG,KAAK,CAAC,WAAiC,CAAC;oBAC3D,MAAM,YAAY,GAAG,qBAAqB,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;oBAE9D,MAAM;wBACJ,IAAI,EAAE,MAAM;wBACZ,YAAY;qBACb,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,oCAAoC;YACpC,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC;QACxC,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa,EAAE;YACvB,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY;YACnC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,SAAS,iBAAiB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,iBAAiB,CAAC,MAAc;QACvC,OAAO,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,UAAU;QACV,YAAY;QACZ,aAAa;QACb,WAAW;QACX,iBAAiB;QACjB,iBAAiB;KAClB,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED,kBAAkB;AAElB;;;GAGG;AACH,SAAS,qBAAqB,CAC5B,MAA0B,EAC1B,YAAqB;IAErB,IAAI,YAAY;QAAE,OAAO,UAAU,CAAC;IACpC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,MAAM;YACT,OAAO,MAAM,CAAC;QAChB,KAAK,QAAQ;YACX,OAAO,QAAQ,CAAC;QAClB;YACE,OAAO,MAAM,CAAC;IAClB,CAAC;AACH,CAAC;AAED,+BAA+B;AAC/B,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,GACpB,CAAC"}

package/dist/substrate/transport/adapters/openai_adapter.d.ts

@@ -0,0 +1,68 @@
+/**
+ * OpenAI API adapter (Chat Completions + Responses API).
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5B (Sprint 5B — OpenAI + Google Adapters)
+ * Implements: ProviderAdapter for OpenAI's Chat Completions API and Responses API.
+ *
+ * Dual API selection (A-P5-006):
+ *   Models matching o3* or o4* → Responses API (/v1/responses)
+ *   All others → Chat Completions (/v1/chat/completions)
+ *
+ * Chat Completions API:
+ *   - Auth: Authorization: Bearer {key}
+ *   - Request: messages array with role/content, model, max_tokens, temperature, tools, stream
+ *   - Response: choices[0].message.content, usage.completion_tokens, usage.prompt_tokens
+ *   - Streaming: SSE with data: {...} events, choices[0].delta.content, [DONE] sentinel
+ *   - CR-5: completion_tokens_details.reasoning_tokens → deliberation
+ *
+ * Responses API (reasoning models):
+ *   - URL: {baseUrl}/v1/responses
+ *   - Field mapping: input (not messages), instructions (not system), max_output_tokens (not max_tokens)
+ *   - supportsStreaming() returns false for reasoning models
+ *   - encrypted_content → ProviderResponseMetadata if present
+ *
+ * Security:
+ *   - C-SEC-P5-01/02: API key NEVER in logs or error messages
+ *   - C-SEC-P5-04 / CR-1: API key resolved ONCE at creation
+ *   - C-SEC-P5-22: Provider output is untrusted input
+ *   - C-SEC-P5-23: Tool call structural validation
+ *
+ * Retryable: 429, 500, 502, 503
+ */
+import type { ProviderAdapter } from '../transport_types.js';
+import type { TimeProvider } from '../../../kernel/interfaces/time.js';
+/** Retryable HTTP status codes for OpenAI */
+declare const RETRYABLE_STATUS_CODES: Set<number>;
+/** A-P5-006: Pattern for reasoning models that use the Responses API */
+declare const REASONING_MODEL_PATTERN: RegExp;
+/**
+ * A-P5-006: Determine if a model should use the Responses API.
+ * Models matching o3* or o4* use the Responses API.
+ */
+declare function isReasoningModel(model: string): boolean;
+/**
+ * Create an OpenAI API adapter.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the OpenAI API (e.g., 'https://api.openai.com')
+ * @param apiKey - API key (resolved ONCE at creation — CR-1 / C-SEC-P5-04)
+ * @param model - The model to use (determines API selection)
+ * @param time - Optional TimeProvider for clock injection
+ */
+export declare function createOpenAIAdapter(providerId: string, baseUrl: string, apiKey: string, model: string, time?: TimeProvider): ProviderAdapter;
+/**
+ * Create an OpenAI adapter with API key from environment variable.
+ * C-SEC-P5-01/02: Key is read from env and NEVER logged.
+ * CR-1: Key resolved once at creation.
+ *
+ * @param providerId - Provider identifier
+ * @param baseUrl - Base URL (e.g., 'https://api.openai.com')
+ * @param apiKeyEnvVar - Environment variable name containing the API key
+ * @param model - The model to use (determines API selection)
+ * @param time - Optional TimeProvider
+ * @throws Error if API key env var is not set
+ */
+export declare function createOpenAIAdapterFromEnv(providerId: string, baseUrl: string, apiKeyEnvVar: string, model: string, time?: TimeProvider): ProviderAdapter;
+export { isReasoningModel, RETRYABLE_STATUS_CODES, REASONING_MODEL_PATTERN };
+//# sourceMappingURL=openai_adapter.d.ts.map

package/dist/substrate/transport/adapters/openai_adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai_adapter.d.ts","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/openai_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EACV,eAAe,EAMhB,MAAM,uBAAuB,CAAC;AAc/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAIvE,6CAA6C;AAC7C,QAAA,MAAM,sBAAsB,aAAgC,CAAC;AAE7D,wEAAwE;AACxE,QAAA,MAAM,uBAAuB,QAAW,CAAC;AAIzC;;;GAGG;AACH,iBAAS,gBAAgB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAEhD;AA8ND;;;;;;;;GAQG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,YAAY,GAClB,eAAe,CA4LjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,MAAM,EACb,IAAI,CAAC,EAAE,YAAY,GAClB,eAAe,CAWjB;AAGD,OAAO,EAAE,gBAAgB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,CAAC"}