nexus-agents 2.55.0 → 2.56.0

package/dist/{chunk-HQ43NDJW.js → chunk-BPMQRYGU.js}

@@ -1,3 +1,8 @@
+import {
+  CUSTOM_API_BASE_URL_ENV,
+  PROVIDER_ENV_KEYS,
+  validateCustomApiBaseUrl
+} from "./chunk-R66AWJJ7.js";
 import {
   SessionMemory
 } from "./chunk-NYNBDP7M.js";
@@ -2788,113 +2793,6 @@ function createClaudeAdapter(config) {
   return new ClaudeAdapter(config);
 }
 
-// src/adapters/sdk/types.ts
-var PROVIDER_ENV_KEYS = {
-  anthropic: "ANTHROPIC_API_KEY",
-  openai: "OPENAI_API_KEY",
-  google: "GOOGLE_AI_API_KEY",
-  "custom-openai": "NEXUS_CUSTOM_API_KEY"
-};
-var CUSTOM_API_BASE_URL_ENV = "NEXUS_CUSTOM_API_BASE_URL";
-var CUSTOM_API_ALLOW_PRIVATE_ENV = "NEXUS_CUSTOM_API_ALLOW_PRIVATE";
-
-// src/adapters/sdk/custom-api-validation.ts
-import { isIPv4, isIPv6 } from "net";
-function validateCustomApiBaseUrl(raw, opts = {}) {
-  if (raw === void 0 || raw.trim() === "") {
-    return err(
-      new ConfigError(
-        "Custom API base URL is required but missing. Set NEXUS_CUSTOM_API_BASE_URL or pass `baseUrl` in config."
-      )
-    );
-  }
-  let url;
-  try {
-    url = new URL(raw);
-  } catch {
-    return err(new ConfigError(`Custom API base URL is not a valid URL: ${raw}`));
-  }
-  if (url.protocol !== "http:" && url.protocol !== "https:") {
-    return err(
-      new ConfigError(`Custom API base URL must use http or https, got "${url.protocol}" in ${raw}`)
-    );
-  }
-  const allowPrivate = opts.allowPrivate === true || resolveAllowPrivateFromEnv();
-  if (!allowPrivate) {
-    const rejection = classifyPrivateHost(url.hostname);
-    if (rejection !== null) {
-      return err(
-        new ConfigError(
-          `Custom API base URL rejected (SSRF guard, reason="${rejection.reason}"): ${rejection.message}. Set ${CUSTOM_API_ALLOW_PRIVATE_ENV}=1 to bypass if the gateway runs on a trusted internal host.`
-        )
-      );
-    }
-  }
-  return ok(url);
-}
-function resolveAllowPrivateFromEnv() {
-  const v = process.env[CUSTOM_API_ALLOW_PRIVATE_ENV];
-  return v === "1" || v === "true";
-}
-function classifyPrivateHost(hostname) {
-  const stripped = hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
-  const normalized = stripped.toLowerCase();
-  if (isIPv4(normalized)) {
-    return classifyIPv4(normalized);
-  }
-  if (isIPv6(normalized)) {
-    return classifyIPv6(normalized);
-  }
-  if (normalized === "localhost" || normalized.endsWith(".localhost") || normalized.endsWith(".local")) {
-    return {
-      reason: "loopback",
-      message: `hostname "${hostname}" resolves to loopback/mDNS`
-    };
-  }
-  return null;
-}
-var IPV4_RULES = [
-  { match: (a) => a === 127, reason: "loopback", label: "IPv4 loopback" },
-  { match: (a) => a === 10, reason: "private_range", label: "IPv4 private (10/8)" },
-  {
-    match: (a, b) => a === 172 && b >= 16 && b <= 31,
-    reason: "private_range",
-    label: "IPv4 private (172.16/12)"
-  },
-  {
-    match: (a, b) => a === 192 && b === 168,
-    reason: "private_range",
-    label: "IPv4 private (192.168/16)"
-  },
-  {
-    match: (a, b) => a === 169 && b === 254,
-    reason: "link_local",
-    label: "IPv4 link-local (169.254/16 \u2014 AWS IMDS)"
-  },
-  { match: (a) => a === 0, reason: "reserved", label: "IPv4 reserved (0/8)" }
-];
-function classifyIPv4(ip) {
-  const parts = ip.split(".").map((p) => Number.parseInt(p, 10));
-  if (parts.length !== 4 || parts.some((n) => Number.isNaN(n))) return null;
-  const [a, b] = parts;
-  for (const rule of IPV4_RULES) {
-    if (rule.match(a, b)) {
-      return { reason: rule.reason, message: `${rule.label} (${ip})` };
-    }
-  }
-  return null;
-}
-function classifyIPv6(ip) {
-  const lower = ip.toLowerCase();
-  if (lower === "::1") return { reason: "loopback", message: `IPv6 loopback (${ip})` };
-  if (lower.startsWith("fe80:"))
-    return { reason: "link_local", message: `IPv6 link-local (${ip})` };
-  if (/^fc|^fd/.test(lower)) {
-    return { reason: "private_range", message: `IPv6 unique-local (${ip}, fc00::/7)` };
-  }
-  return null;
-}
-
 // src/adapters/sdk/sdk-adapter.ts
 function extractProviderFactory(mod, factoryName) {
   const factory = mod[factoryName];
@@ -12968,7 +12866,6 @@ export {
   CLAUDE_MODEL_ALIASES,
   ClaudeAdapter,
   createClaudeAdapter,
-  PROVIDER_ENV_KEYS,
   SdkAdapter,
   getGlobalEventBus,
   createEvent,
@@ -13079,4 +12976,4 @@ export {
   CONSENSUS_VOTE_OUTPUT_SCHEMA,
   registerConsensusVoteTool
 };
-//# sourceMappingURL=chunk-HQ43NDJW.js.map
+//# sourceMappingURL=chunk-BPMQRYGU.js.map