open-multi-agent-kit 0.80.7 → 0.90.0

package/node_modules/@earendil-works/omk-ai/dist/models.js

@@ -1,78 +0,0 @@
-import { MODELS } from "./models.generated.js";
-const modelRegistry = new Map();
-// Initialize registry from MODELS on module load
-for (const [provider, models] of Object.entries(MODELS)) {
-    const providerModels = new Map();
-    for (const [id, model] of Object.entries(models)) {
-        providerModels.set(id, model);
-    }
-    modelRegistry.set(provider, providerModels);
-}
-export function getModel(provider, modelId) {
-    const providerModels = modelRegistry.get(provider);
-    return providerModels?.get(modelId);
-}
-export function getProviders() {
-    return Array.from(modelRegistry.keys());
-}
-export function getModels(provider) {
-    const models = modelRegistry.get(provider);
-    return models ? Array.from(models.values()) : [];
-}
-export function calculateCost(model, usage) {
-    usage.cost.input = (model.cost.input / 1000000) * usage.input;
-    usage.cost.output = (model.cost.output / 1000000) * usage.output;
-    usage.cost.cacheRead = (model.cost.cacheRead / 1000000) * usage.cacheRead;
-    usage.cost.cacheWrite = (model.cost.cacheWrite / 1000000) * usage.cacheWrite;
-    usage.cost.total = usage.cost.input + usage.cost.output + usage.cost.cacheRead + usage.cost.cacheWrite;
-    return usage.cost;
-}
-const EXTENDED_THINKING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh"];
-export function getSupportedThinkingLevels(model) {
-    if (!model.reasoning)
-        return ["off"];
-    // Every reasoning-capable model exposes the full extended thinking ladder by
-    // default, including xhigh ("max" in the UI). A level only disappears when
-    // the model author has explicitly opted out by mapping it to null in
-    // thinkingLevelMap. Earlier revisions required xhigh to be explicitly mapped
-    // (`mapped !== undefined`), which silently hid "max" from Anthropic
-    // Sonnet/Haiku, DeepSeek non-V4 reasoning models, zai/GLM 5.x, and ~595 other
-    // reasoning-capable models that had no thinkingLevelMap.xhigh entry.
-    // Provider runtimes downgrade xhigh safely: simple-options.clampReasoning
-    // excludes xhigh and falls back to the next available level; amazon-bedrock
-    // and openai-* providers consume the clamped value through
-    // clampThinkingLevel + ThinkingBudgets.
-    return EXTENDED_THINKING_LEVELS.filter((level) => {
-        const mapped = model.thinkingLevelMap?.[level];
-        return mapped !== null;
-    });
-}
-export function clampThinkingLevel(model, level) {
-    const availableLevels = getSupportedThinkingLevels(model);
-    if (availableLevels.includes(level))
-        return level;
-    const requestedIndex = EXTENDED_THINKING_LEVELS.indexOf(level);
-    if (requestedIndex === -1)
-        return availableLevels[0] ?? "off";
-    for (let i = requestedIndex; i < EXTENDED_THINKING_LEVELS.length; i++) {
-        const candidate = EXTENDED_THINKING_LEVELS[i];
-        if (availableLevels.includes(candidate))
-            return candidate;
-    }
-    for (let i = requestedIndex - 1; i >= 0; i--) {
-        const candidate = EXTENDED_THINKING_LEVELS[i];
-        if (availableLevels.includes(candidate))
-            return candidate;
-    }
-    return availableLevels[0] ?? "off";
-}
-/**
- * Check if two models are equal by comparing both their id and provider.
- * Returns false if either model is null or undefined.
- */
-export function modelsAreEqual(a, b) {
-    if (!a || !b)
-        return false;
-    return a.id === b.id && a.provider === b.provider;
-}
-//# sourceMappingURL=models.js.map

package/node_modules/@earendil-works/omk-ai/dist/models.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"models.js","sourceRoot":"","sources":["../src/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,EAAE,MAAM,uBAAuB,CAAC;AAG/C,MAAM,aAAa,GAAyC,IAAI,GAAG,EAAE,CAAC;AAEtE,iDAAiD;AACjD,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;IACzD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAsB,CAAC;IACrD,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,cAAc,CAAC,GAAG,CAAC,EAAE,EAAE,KAAmB,CAAC,CAAC;IAC7C,CAAC;IACD,aAAa,CAAC,GAAG,CAAC,QAAQ,EAAE,cAAc,CAAC,CAAC;AAC7C,CAAC;AAOD,MAAM,UAAU,QAAQ,CACvB,QAAmB,EACnB,OAAiB,EACsB;IACvC,MAAM,cAAc,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACnD,OAAO,cAAc,EAAE,GAAG,CAAC,OAAiB,CAAyC,CAAC;AAAA,CACtF;AAED,MAAM,UAAU,YAAY,GAAoB;IAC/C,OAAO,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,IAAI,EAAE,CAAoB,CAAC;AAAA,CAC3D;AAED,MAAM,UAAU,SAAS,CACxB,QAAmB,EAC8C;IACjE,MAAM,MAAM,GAAG,aAAa,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,MAAM,CAAC,CAAC,CAAE,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAoE,CAAC,CAAC,CAAC,EAAE,CAAC;AAAA,CACrH;AAED,MAAM,UAAU,aAAa,CAAmB,KAAkB,EAAE,KAAY,EAAiB;IAChG,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC;IAC9D,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;IACjE,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,SAAS,CAAC;IAC1E,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC,GAAG,KAAK,CAAC,UAAU,CAAC;IAC7E,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,IAAI,CAAC,SAAS,GAAG,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC;IACvG,OAAO,KAAK,CAAC,IAAI,CAAC;AAAA,CAClB;AAED,MAAM,wBAAwB,GAAyB,CAAC,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;AAE5G,MAAM,UAAU,0BAA0B,CAAmB,KAAkB,EAAwB;IACtG,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAErC,6EAA6E;IAC7E,2EAA2E;IAC3E,qEAAqE;IACrE,6EAA6E;IAC7E,oEAAoE;IACpE,8EAA8E;IAC9E,qEAAqE;IACrE,0EAA0E;IAC1E,4EAA4E;IAC5E,2DAA2D;IAC3D,wCAAwC;IACxC,OAAO,wBAAwB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACjD,MAAM,MAAM,GAAG,KAAK,CAAC,gBAAgB,EAAE,CAAC,KAAK,CAAC,CAAC;QAC/C,OAAO,MAAM,KAAK,IAAI,CAAC;IAAA,CACvB,CAAC,CAAC;AAAA,CACH;AAED,MAAM,UAAU,kBAAkB,CACjC,KAAkB,EAClB,KAAyB,EACJ;IACrB,MAAM,eAAe,GAAG,0BAA0B,CAAC,KAAK,CAAC,CAAC;IAC1D,IAAI,eAAe,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAElD,MAAM,cAAc,GAAG,wBAAwB,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IAC/D,IAAI,cAAc,KAAK,CAAC,CAAC;QAAE,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;IAE9D,KAAK,IAAI,CAAC,GAAG,cAAc,EAAE,CAAC,GAAG,wBAAwB,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACvE,MAAM,SAAS,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC3D,CAAC;IACD,KAAK,IAAI,CAAC,GAAG,cAAc,GAAG,CAAC,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,wBAAwB,CAAC,CAAC,CAAC,CAAC;QAC9C,IAAI,eAAe,CAAC,QAAQ,CAAC,SAAS,CAAC;YAAE,OAAO,SAAS,CAAC;IAC3D,CAAC;IACD,OAAO,eAAe,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC;AAAA,CACnC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAC7B,CAAiC,EACjC,CAAiC,EACvB;IACV,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC;QAAE,OAAO,KAAK,CAAC;IAC3B,OAAO,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,CAAC;AAAA,CAClD","sourcesContent":["import { MODELS } from \"./models.generated.ts\";\nimport type { Api, KnownProvider, Model, ModelThinkingLevel, Usage } from \"./types.ts\";\n\nconst modelRegistry: Map<string, Map<string, Model<Api>>> = new Map();\n\n// Initialize registry from MODELS on module load\nfor (const [provider, models] of Object.entries(MODELS)) {\n\tconst providerModels = new Map<string, Model<Api>>();\n\tfor (const [id, model] of Object.entries(models)) {\n\t\tproviderModels.set(id, model as Model<Api>);\n\t}\n\tmodelRegistry.set(provider, providerModels);\n}\n\ntype ModelApi<\n\tTProvider extends KnownProvider,\n\tTModelId extends keyof (typeof MODELS)[TProvider],\n> = (typeof MODELS)[TProvider][TModelId] extends { api: infer TApi } ? (TApi extends Api ? TApi : never) : never;\n\nexport function getModel<TProvider extends KnownProvider, TModelId extends keyof (typeof MODELS)[TProvider]>(\n\tprovider: TProvider,\n\tmodelId: TModelId,\n): Model<ModelApi<TProvider, TModelId>> {\n\tconst providerModels = modelRegistry.get(provider);\n\treturn providerModels?.get(modelId as string) as Model<ModelApi<TProvider, TModelId>>;\n}\n\nexport function getProviders(): KnownProvider[] {\n\treturn Array.from(modelRegistry.keys()) as KnownProvider[];\n}\n\nexport function getModels<TProvider extends KnownProvider>(\n\tprovider: TProvider,\n): Model<ModelApi<TProvider, keyof (typeof MODELS)[TProvider]>>[] {\n\tconst models = modelRegistry.get(provider);\n\treturn models ? (Array.from(models.values()) as Model<ModelApi<TProvider, keyof (typeof MODELS)[TProvider]>>[]) : [];\n}\n\nexport function calculateCost<TApi extends Api>(model: Model<TApi>, usage: Usage): Usage[\"cost\"] {\n\tusage.cost.input = (model.cost.input / 1000000) * usage.input;\n\tusage.cost.output = (model.cost.output / 1000000) * usage.output;\n\tusage.cost.cacheRead = (model.cost.cacheRead / 1000000) * usage.cacheRead;\n\tusage.cost.cacheWrite = (model.cost.cacheWrite / 1000000) * usage.cacheWrite;\n\tusage.cost.total = usage.cost.input + usage.cost.output + usage.cost.cacheRead + usage.cost.cacheWrite;\n\treturn usage.cost;\n}\n\nconst EXTENDED_THINKING_LEVELS: ModelThinkingLevel[] = [\"off\", \"minimal\", \"low\", \"medium\", \"high\", \"xhigh\"];\n\nexport function getSupportedThinkingLevels<TApi extends Api>(model: Model<TApi>): ModelThinkingLevel[] {\n\tif (!model.reasoning) return [\"off\"];\n\n\t// Every reasoning-capable model exposes the full extended thinking ladder by\n\t// default, including xhigh (\"max\" in the UI). A level only disappears when\n\t// the model author has explicitly opted out by mapping it to null in\n\t// thinkingLevelMap. Earlier revisions required xhigh to be explicitly mapped\n\t// (`mapped !== undefined`), which silently hid \"max\" from Anthropic\n\t// Sonnet/Haiku, DeepSeek non-V4 reasoning models, zai/GLM 5.x, and ~595 other\n\t// reasoning-capable models that had no thinkingLevelMap.xhigh entry.\n\t// Provider runtimes downgrade xhigh safely: simple-options.clampReasoning\n\t// excludes xhigh and falls back to the next available level; amazon-bedrock\n\t// and openai-* providers consume the clamped value through\n\t// clampThinkingLevel + ThinkingBudgets.\n\treturn EXTENDED_THINKING_LEVELS.filter((level) => {\n\t\tconst mapped = model.thinkingLevelMap?.[level];\n\t\treturn mapped !== null;\n\t});\n}\n\nexport function clampThinkingLevel<TApi extends Api>(\n\tmodel: Model<TApi>,\n\tlevel: ModelThinkingLevel,\n): ModelThinkingLevel {\n\tconst availableLevels = getSupportedThinkingLevels(model);\n\tif (availableLevels.includes(level)) return level;\n\n\tconst requestedIndex = EXTENDED_THINKING_LEVELS.indexOf(level);\n\tif (requestedIndex === -1) return availableLevels[0] ?? \"off\";\n\n\tfor (let i = requestedIndex; i < EXTENDED_THINKING_LEVELS.length; i++) {\n\t\tconst candidate = EXTENDED_THINKING_LEVELS[i];\n\t\tif (availableLevels.includes(candidate)) return candidate;\n\t}\n\tfor (let i = requestedIndex - 1; i >= 0; i--) {\n\t\tconst candidate = EXTENDED_THINKING_LEVELS[i];\n\t\tif (availableLevels.includes(candidate)) return candidate;\n\t}\n\treturn availableLevels[0] ?? \"off\";\n}\n\n/**\n * Check if two models are equal by comparing both their id and provider.\n * Returns false if either model is null or undefined.\n */\nexport function modelsAreEqual<TApi extends Api>(\n\ta: Model<TApi> | null | undefined,\n\tb: Model<TApi> | null | undefined,\n): boolean {\n\tif (!a || !b) return false;\n\treturn a.id === b.id && a.provider === b.provider;\n}\n"]}

package/node_modules/@earendil-works/omk-ai/dist/oauth.d.ts

@@ -1,2 +0,0 @@
-export * from "./utils/oauth/index.ts";
-//# sourceMappingURL=oauth.d.ts.map

package/node_modules/@earendil-works/omk-ai/dist/oauth.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC","sourcesContent":["export * from \"./utils/oauth/index.ts\";\n"]}

package/node_modules/@earendil-works/omk-ai/dist/oauth.js

@@ -1,2 +0,0 @@
-export * from "./utils/oauth/index.js";
-//# sourceMappingURL=oauth.js.map

package/node_modules/@earendil-works/omk-ai/dist/oauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../src/oauth.ts"],"names":[],"mappings":"AAAA,cAAc,wBAAwB,CAAC","sourcesContent":["export * from \"./utils/oauth/index.ts\";\n"]}

package/node_modules/@earendil-works/omk-ai/dist/provider-network.d.ts

@@ -1,39 +0,0 @@
-import type { Api, AssistantMessageEventStream, BeforeProviderNetworkRequest, ImagesApi, ImagesModel, Model, ProviderNetworkDecision, ProviderNetworkPurpose, ProviderNetworkRequest, ProviderNetworkRequestSource, ProviderNetworkTransport } from "./types.ts";
-type ProviderNetworkModel = Pick<Model<Api>, "api" | "baseUrl" | "id" | "provider"> | Pick<ImagesModel<ImagesApi>, "api" | "baseUrl" | "id" | "provider">;
-export interface NormalizeProviderNetworkRequestInput {
-    model: ProviderNetworkModel;
-    url?: string;
-    transport?: ProviderNetworkTransport;
-    purpose: ProviderNetworkPurpose;
-    source?: ProviderNetworkRequestSource;
-}
-export interface ProviderNetworkPolicyErrorDetails {
-    provider: string;
-    api: string;
-    modelId: string;
-    host?: string;
-    rule: string;
-    mode?: ProviderNetworkDecision["mode"];
-}
-export declare class ProviderNetworkPolicyError extends Error {
-    readonly details: ProviderNetworkPolicyErrorDetails;
-    constructor(details: ProviderNetworkPolicyErrorDetails);
-}
-export declare function normalizeProviderNetworkRequest(input: NormalizeProviderNetworkRequestInput): ProviderNetworkRequest;
-export declare function assertProviderNetworkRequestAllowed(input: NormalizeProviderNetworkRequestInput, beforeNetworkRequest: BeforeProviderNetworkRequest | undefined): Promise<ProviderNetworkRequest | undefined>;
-export declare function createProviderNetworkGuardedStream(input: NormalizeProviderNetworkRequestInput & {
-    beforeNetworkRequest: BeforeProviderNetworkRequest;
-    invoke: () => AssistantMessageEventStream;
-}): AssistantMessageEventStream;
-/**
- * Build an `AssistantMessageEventStream` that terminates immediately with a
- * sanitized provider network policy error. Used when a pre-auth preflight
- * denies a request before any provider network I/O or auth resolution.
- *
- * The error message exposes only origin metadata (provider, api, model id,
- * host, rule); it never includes headers, API keys, request bodies, prompts,
- * or responses.
- */
-export declare function createProviderNetworkErrorStream(model: ProviderNetworkModel, error: unknown): AssistantMessageEventStream;
-export {};
-//# sourceMappingURL=provider-network.d.ts.map

package/node_modules/@earendil-works/omk-ai/dist/provider-network.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-network.d.ts","sourceRoot":"","sources":["../src/provider-network.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACX,GAAG,EAEH,2BAA2B,EAC3B,4BAA4B,EAC5B,SAAS,EACT,WAAW,EACX,KAAK,EACL,uBAAuB,EAEvB,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,EAC5B,wBAAwB,EAExB,MAAM,YAAY,CAAC;AAYpB,KAAK,oBAAoB,GACtB,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,CAAC,GACvD,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,EAAE,KAAK,GAAG,SAAS,GAAG,IAAI,GAAG,UAAU,CAAC,CAAC;AAEvE,MAAM,WAAW,oCAAoC;IACpD,KAAK,EAAE,oBAAoB,CAAC;IAC5B,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,wBAAwB,CAAC;IACrC,OAAO,EAAE,sBAAsB,CAAC;IAChC,MAAM,CAAC,EAAE,4BAA4B,CAAC;CACtC;AAUD,MAAM,WAAW,iCAAiC;IACjD,QAAQ,EAAE,MAAM,CAAC;IACjB,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,uBAAuB,CAAC,MAAM,CAAC,CAAC;CACvC;AAED,qBAAa,0BAA2B,SAAQ,KAAK;IACpD,QAAQ,CAAC,OAAO,EAAE,iCAAiC,CAAC;IAEpD,YAAY,OAAO,EAAE,iCAAiC,EAOrD;CACD;AAkFD,wBAAgB,+BAA+B,CAAC,KAAK,EAAE,oCAAoC,GAAG,sBAAsB,CAiBnH;AAWD,wBAAsB,mCAAmC,CACxD,KAAK,EAAE,oCAAoC,EAC3C,oBAAoB,EAAE,4BAA4B,GAAG,SAAS,GAC5D,OAAO,CAAC,sBAAsB,GAAG,SAAS,CAAC,CAU7C;AAqBD,wBAAgB,kCAAkC,CACjD,KAAK,EAAE,oCAAoC,GAAG;IAC7C,oBAAoB,EAAE,4BAA4B,CAAC;IACnD,MAAM,EAAE,MAAM,2BAA2B,CAAC;CAC1C,GACC,2BAA2B,CAiB7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,gCAAgC,CAC/C,KAAK,EAAE,oBAAoB,EAC3B,KAAK,EAAE,OAAO,GACZ,2BAA2B,CAO7B","sourcesContent":["import type {\n\tApi,\n\tAssistantMessage,\n\tAssistantMessageEventStream,\n\tBeforeProviderNetworkRequest,\n\tImagesApi,\n\tImagesModel,\n\tModel,\n\tProviderNetworkDecision,\n\tProviderNetworkProtocol,\n\tProviderNetworkPurpose,\n\tProviderNetworkRequest,\n\tProviderNetworkRequestSource,\n\tProviderNetworkTransport,\n\tUsage,\n} from \"./types.ts\";\nimport { createAssistantMessageEventStream } from \"./utils/event-stream.ts\";\n\nconst DEFAULT_USAGE: Usage = {\n\tinput: 0,\n\toutput: 0,\n\tcacheRead: 0,\n\tcacheWrite: 0,\n\ttotalTokens: 0,\n\tcost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },\n};\n\ntype ProviderNetworkModel =\n\t| Pick<Model<Api>, \"api\" | \"baseUrl\" | \"id\" | \"provider\">\n\t| Pick<ImagesModel<ImagesApi>, \"api\" | \"baseUrl\" | \"id\" | \"provider\">;\n\nexport interface NormalizeProviderNetworkRequestInput {\n\tmodel: ProviderNetworkModel;\n\turl?: string;\n\ttransport?: ProviderNetworkTransport;\n\tpurpose: ProviderNetworkPurpose;\n\tsource?: ProviderNetworkRequestSource;\n}\n\ninterface SanitizedProviderUrl {\n\turl: string;\n\thost: string;\n\tprotocol: ProviderNetworkProtocol;\n\tport?: string;\n\tloopback: boolean;\n}\n\nexport interface ProviderNetworkPolicyErrorDetails {\n\tprovider: string;\n\tapi: string;\n\tmodelId: string;\n\thost?: string;\n\trule: string;\n\tmode?: ProviderNetworkDecision[\"mode\"];\n}\n\nexport class ProviderNetworkPolicyError extends Error {\n\treadonly details: ProviderNetworkPolicyErrorDetails;\n\n\tconstructor(details: ProviderNetworkPolicyErrorDetails) {\n\t\tconst host = details.host ?? \"<unknown>\";\n\t\tsuper(\n\t\t\t`Provider network access denied: provider=${details.provider} api=${details.api} model=${details.modelId} host=${host} rule=${details.rule}`,\n\t\t);\n\t\tthis.name = \"ProviderNetworkPolicyError\";\n\t\tthis.details = details;\n\t}\n}\n\nfunction isProviderNetworkProtocol(protocol: string): protocol is ProviderNetworkProtocol {\n\treturn protocol === \"http:\" || protocol === \"https:\" || protocol === \"ws:\" || protocol === \"wss:\";\n}\n\nfunction normalizeHostname(hostname: string): string {\n\tconst unbracketed = hostname.startsWith(\"[\") && hostname.endsWith(\"]\") ? hostname.slice(1, -1) : hostname;\n\treturn unbracketed.toLowerCase().replace(/\\.+$/u, \"\");\n}\n\nfunction formatHostForUrl(host: string): string {\n\treturn host.includes(\":\") && !host.startsWith(\"[\") ? `[${host}]` : host;\n}\n\nfunction isValidIpv4Octet(value: string): boolean {\n\tif (!/^\\d{1,3}$/u.test(value)) return false;\n\tconst parsed = Number(value);\n\treturn Number.isInteger(parsed) && parsed >= 0 && parsed <= 255;\n}\n\nfunction isIpv4Loopback(host: string): boolean {\n\tconst parts = host.split(\".\");\n\treturn parts.length === 4 && parts.every(isValidIpv4Octet) && parts[0] === \"127\";\n}\n\nfunction isLoopbackHost(host: string): boolean {\n\treturn (\n\t\thost === \"localhost\" ||\n\t\thost.endsWith(\".localhost\") ||\n\t\thost === \"0.0.0.0\" ||\n\t\thost === \"::1\" ||\n\t\tisIpv4Loopback(host)\n\t);\n}\n\nfunction createErrorDetails(\n\tmodel: ProviderNetworkModel,\n\trule: string,\n\thost?: string,\n\tmode?: ProviderNetworkDecision[\"mode\"],\n): ProviderNetworkPolicyErrorDetails {\n\treturn {\n\t\tprovider: model.provider,\n\t\tapi: String(model.api),\n\t\tmodelId: model.id,\n\t\thost,\n\t\trule,\n\t\tmode,\n\t};\n}\n\nfunction parseProviderUrl(rawUrl: string, model: ProviderNetworkModel, rule: string): URL {\n\ttry {\n\t\treturn new URL(rawUrl.trim());\n\t} catch {\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(model, rule));\n\t}\n}\n\nfunction sanitizeProviderUrl(rawUrl: string, model: ProviderNetworkModel, rule: string): SanitizedProviderUrl {\n\tconst parsed = parseProviderUrl(rawUrl, model, rule);\n\tif (!isProviderNetworkProtocol(parsed.protocol)) {\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(model, \"network.unsupported_protocol\"));\n\t}\n\n\tconst host = normalizeHostname(parsed.hostname);\n\tif (!host) {\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(model, \"network.unknown_host\"));\n\t}\n\n\tconst port = parsed.port || undefined;\n\tconst url = `${parsed.protocol}//${formatHostForUrl(host)}${port ? `:${port}` : \"\"}/`;\n\treturn {\n\t\turl,\n\t\thost,\n\t\tprotocol: parsed.protocol,\n\t\tport,\n\t\tloopback: isLoopbackHost(host),\n\t};\n}\n\nexport function normalizeProviderNetworkRequest(input: NormalizeProviderNetworkRequestInput): ProviderNetworkRequest {\n\tconst base = sanitizeProviderUrl(input.model.baseUrl, input.model, \"network.invalid_base_url\");\n\tconst target = sanitizeProviderUrl(input.url ?? input.model.baseUrl, input.model, \"network.invalid_url\");\n\treturn {\n\t\tprovider: input.model.provider,\n\t\tapi: input.model.api,\n\t\tmodelId: input.model.id,\n\t\tbaseUrl: base.url,\n\t\turl: target.url,\n\t\thost: target.host,\n\t\tprotocol: target.protocol,\n\t\tport: target.port,\n\t\tloopback: target.loopback,\n\t\ttransport: input.transport ?? (target.protocol === \"ws:\" || target.protocol === \"wss:\" ? \"websocket\" : \"http\"),\n\t\tpurpose: input.purpose,\n\t\tsource: input.source ?? \"model.baseUrl\",\n\t};\n}\n\nfunction normalizeDeniedDecision(\n\tdecision: ProviderNetworkDecision | undefined,\n): Pick<ProviderNetworkDecision, \"mode\" | \"rule\"> {\n\treturn {\n\t\tmode: decision?.mode ?? \"enforce\",\n\t\trule: decision?.rule ?? \"network.no_decision\",\n\t};\n}\n\nexport async function assertProviderNetworkRequestAllowed(\n\tinput: NormalizeProviderNetworkRequestInput,\n\tbeforeNetworkRequest: BeforeProviderNetworkRequest | undefined,\n): Promise<ProviderNetworkRequest | undefined> {\n\tif (!beforeNetworkRequest) return undefined;\n\n\tconst request = normalizeProviderNetworkRequest(input);\n\tconst decision = await beforeNetworkRequest(request);\n\tif (!decision?.allowed) {\n\t\tconst denied = normalizeDeniedDecision(decision);\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(input.model, denied.rule, request.host, denied.mode));\n\t}\n\treturn request;\n}\n\nfunction errorMessageForProviderNetworkFailure(error: unknown): string {\n\tif (error instanceof ProviderNetworkPolicyError) return error.message;\n\treturn \"Provider network preflight failed\";\n}\n\nfunction createProviderNetworkErrorMessage(model: ProviderNetworkModel, error: unknown): AssistantMessage {\n\treturn {\n\t\trole: \"assistant\",\n\t\tcontent: [],\n\t\tapi: model.api as Api,\n\t\tprovider: model.provider,\n\t\tmodel: model.id,\n\t\tusage: DEFAULT_USAGE,\n\t\tstopReason: \"error\",\n\t\terrorMessage: errorMessageForProviderNetworkFailure(error),\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nexport function createProviderNetworkGuardedStream(\n\tinput: NormalizeProviderNetworkRequestInput & {\n\t\tbeforeNetworkRequest: BeforeProviderNetworkRequest;\n\t\tinvoke: () => AssistantMessageEventStream;\n\t},\n): AssistantMessageEventStream {\n\tconst guarded = createAssistantMessageEventStream();\n\n\tqueueMicrotask(async () => {\n\t\ttry {\n\t\t\tawait assertProviderNetworkRequestAllowed(input, input.beforeNetworkRequest);\n\t\t\tconst upstream = input.invoke();\n\t\t\tfor await (const event of upstream) {\n\t\t\t\tguarded.push(event);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst message = createProviderNetworkErrorMessage(input.model, error);\n\t\t\tguarded.push({ type: \"error\", reason: \"error\", error: message });\n\t\t}\n\t});\n\n\treturn guarded;\n}\n\n/**\n * Build an `AssistantMessageEventStream` that terminates immediately with a\n * sanitized provider network policy error. Used when a pre-auth preflight\n * denies a request before any provider network I/O or auth resolution.\n *\n * The error message exposes only origin metadata (provider, api, model id,\n * host, rule); it never includes headers, API keys, request bodies, prompts,\n * or responses.\n */\nexport function createProviderNetworkErrorStream(\n\tmodel: ProviderNetworkModel,\n\terror: unknown,\n): AssistantMessageEventStream {\n\tconst stream = createAssistantMessageEventStream();\n\tconst message = createProviderNetworkErrorMessage(model, error);\n\tqueueMicrotask(() => {\n\t\tstream.push({ type: \"error\", reason: \"error\", error: message });\n\t});\n\treturn stream;\n}\n"]}

package/node_modules/@earendil-works/omk-ai/dist/provider-network.js

@@ -1,170 +0,0 @@
-import { createAssistantMessageEventStream } from "./utils/event-stream.js";
-const DEFAULT_USAGE = {
-    input: 0,
-    output: 0,
-    cacheRead: 0,
-    cacheWrite: 0,
-    totalTokens: 0,
-    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },
-};
-export class ProviderNetworkPolicyError extends Error {
-    details;
-    constructor(details) {
-        const host = details.host ?? "<unknown>";
-        super(`Provider network access denied: provider=${details.provider} api=${details.api} model=${details.modelId} host=${host} rule=${details.rule}`);
-        this.name = "ProviderNetworkPolicyError";
-        this.details = details;
-    }
-}
-function isProviderNetworkProtocol(protocol) {
-    return protocol === "http:" || protocol === "https:" || protocol === "ws:" || protocol === "wss:";
-}
-function normalizeHostname(hostname) {
-    const unbracketed = hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
-    return unbracketed.toLowerCase().replace(/\.+$/u, "");
-}
-function formatHostForUrl(host) {
-    return host.includes(":") && !host.startsWith("[") ? `[${host}]` : host;
-}
-function isValidIpv4Octet(value) {
-    if (!/^\d{1,3}$/u.test(value))
-        return false;
-    const parsed = Number(value);
-    return Number.isInteger(parsed) && parsed >= 0 && parsed <= 255;
-}
-function isIpv4Loopback(host) {
-    const parts = host.split(".");
-    return parts.length === 4 && parts.every(isValidIpv4Octet) && parts[0] === "127";
-}
-function isLoopbackHost(host) {
-    return (host === "localhost" ||
-        host.endsWith(".localhost") ||
-        host === "0.0.0.0" ||
-        host === "::1" ||
-        isIpv4Loopback(host));
-}
-function createErrorDetails(model, rule, host, mode) {
-    return {
-        provider: model.provider,
-        api: String(model.api),
-        modelId: model.id,
-        host,
-        rule,
-        mode,
-    };
-}
-function parseProviderUrl(rawUrl, model, rule) {
-    try {
-        return new URL(rawUrl.trim());
-    }
-    catch {
-        throw new ProviderNetworkPolicyError(createErrorDetails(model, rule));
-    }
-}
-function sanitizeProviderUrl(rawUrl, model, rule) {
-    const parsed = parseProviderUrl(rawUrl, model, rule);
-    if (!isProviderNetworkProtocol(parsed.protocol)) {
-        throw new ProviderNetworkPolicyError(createErrorDetails(model, "network.unsupported_protocol"));
-    }
-    const host = normalizeHostname(parsed.hostname);
-    if (!host) {
-        throw new ProviderNetworkPolicyError(createErrorDetails(model, "network.unknown_host"));
-    }
-    const port = parsed.port || undefined;
-    const url = `${parsed.protocol}//${formatHostForUrl(host)}${port ? `:${port}` : ""}/`;
-    return {
-        url,
-        host,
-        protocol: parsed.protocol,
-        port,
-        loopback: isLoopbackHost(host),
-    };
-}
-export function normalizeProviderNetworkRequest(input) {
-    const base = sanitizeProviderUrl(input.model.baseUrl, input.model, "network.invalid_base_url");
-    const target = sanitizeProviderUrl(input.url ?? input.model.baseUrl, input.model, "network.invalid_url");
-    return {
-        provider: input.model.provider,
-        api: input.model.api,
-        modelId: input.model.id,
-        baseUrl: base.url,
-        url: target.url,
-        host: target.host,
-        protocol: target.protocol,
-        port: target.port,
-        loopback: target.loopback,
-        transport: input.transport ?? (target.protocol === "ws:" || target.protocol === "wss:" ? "websocket" : "http"),
-        purpose: input.purpose,
-        source: input.source ?? "model.baseUrl",
-    };
-}
-function normalizeDeniedDecision(decision) {
-    return {
-        mode: decision?.mode ?? "enforce",
-        rule: decision?.rule ?? "network.no_decision",
-    };
-}
-export async function assertProviderNetworkRequestAllowed(input, beforeNetworkRequest) {
-    if (!beforeNetworkRequest)
-        return undefined;
-    const request = normalizeProviderNetworkRequest(input);
-    const decision = await beforeNetworkRequest(request);
-    if (!decision?.allowed) {
-        const denied = normalizeDeniedDecision(decision);
-        throw new ProviderNetworkPolicyError(createErrorDetails(input.model, denied.rule, request.host, denied.mode));
-    }
-    return request;
-}
-function errorMessageForProviderNetworkFailure(error) {
-    if (error instanceof ProviderNetworkPolicyError)
-        return error.message;
-    return "Provider network preflight failed";
-}
-function createProviderNetworkErrorMessage(model, error) {
-    return {
-        role: "assistant",
-        content: [],
-        api: model.api,
-        provider: model.provider,
-        model: model.id,
-        usage: DEFAULT_USAGE,
-        stopReason: "error",
-        errorMessage: errorMessageForProviderNetworkFailure(error),
-        timestamp: Date.now(),
-    };
-}
-export function createProviderNetworkGuardedStream(input) {
-    const guarded = createAssistantMessageEventStream();
-    queueMicrotask(async () => {
-        try {
-            await assertProviderNetworkRequestAllowed(input, input.beforeNetworkRequest);
-            const upstream = input.invoke();
-            for await (const event of upstream) {
-                guarded.push(event);
-            }
-        }
-        catch (error) {
-            const message = createProviderNetworkErrorMessage(input.model, error);
-            guarded.push({ type: "error", reason: "error", error: message });
-        }
-    });
-    return guarded;
-}
-/**
- * Build an `AssistantMessageEventStream` that terminates immediately with a
- * sanitized provider network policy error. Used when a pre-auth preflight
- * denies a request before any provider network I/O or auth resolution.
- *
- * The error message exposes only origin metadata (provider, api, model id,
- * host, rule); it never includes headers, API keys, request bodies, prompts,
- * or responses.
- */
-export function createProviderNetworkErrorStream(model, error) {
-    const stream = createAssistantMessageEventStream();
-    const message = createProviderNetworkErrorMessage(model, error);
-    queueMicrotask(() => {
-        stream.push({ type: "error", reason: "error", error: message });
-    });
-    return stream;
-}
-//# sourceMappingURL=provider-network.js.map

package/node_modules/@earendil-works/omk-ai/dist/provider-network.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"provider-network.js","sourceRoot":"","sources":["../src/provider-network.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,iCAAiC,EAAE,MAAM,yBAAyB,CAAC;AAE5E,MAAM,aAAa,GAAU;IAC5B,KAAK,EAAE,CAAC;IACR,MAAM,EAAE,CAAC;IACT,SAAS,EAAE,CAAC;IACZ,UAAU,EAAE,CAAC;IACb,WAAW,EAAE,CAAC;IACd,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE;CACpE,CAAC;AA+BF,MAAM,OAAO,0BAA2B,SAAQ,KAAK;IAC3C,OAAO,CAAoC;IAEpD,YAAY,OAA0C,EAAE;QACvD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,WAAW,CAAC;QACzC,KAAK,CACJ,4CAA4C,OAAO,CAAC,QAAQ,QAAQ,OAAO,CAAC,GAAG,UAAU,OAAO,CAAC,OAAO,SAAS,IAAI,SAAS,OAAO,CAAC,IAAI,EAAE,CAC5I,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,4BAA4B,CAAC;QACzC,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;IAAA,CACvB;CACD;AAED,SAAS,yBAAyB,CAAC,QAAgB,EAAuC;IACzF,OAAO,QAAQ,KAAK,OAAO,IAAI,QAAQ,KAAK,QAAQ,IAAI,QAAQ,KAAK,KAAK,IAAI,QAAQ,KAAK,MAAM,CAAC;AAAA,CAClG;AAED,SAAS,iBAAiB,CAAC,QAAgB,EAAU;IACpD,MAAM,WAAW,GAAG,QAAQ,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC;IAC1G,OAAO,WAAW,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;AAAA,CACtD;AAED,SAAS,gBAAgB,CAAC,IAAY,EAAU;IAC/C,OAAO,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAAA,CACxE;AAED,SAAS,gBAAgB,CAAC,KAAa,EAAW;IACjD,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC5C,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IAC7B,OAAO,MAAM,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,MAAM,IAAI,CAAC,IAAI,MAAM,IAAI,GAAG,CAAC;AAAA,CAChE;AAED,SAAS,cAAc,CAAC,IAAY,EAAW;IAC9C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,OAAO,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC;AAAA,CACjF;AAED,SAAS,cAAc,CAAC,IAAY,EAAW;IAC9C,OAAO,CACN,IAAI,KAAK,WAAW;QACpB,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC;QAC3B,IAAI,KAAK,SAAS;QAClB,IAAI,KAAK,KAAK;QACd,cAAc,CAAC,IAAI,CAAC,CACpB,CAAC;AAAA,CACF;AAED,SAAS,kBAAkB,CAC1B,KAA2B,EAC3B,IAAY,EACZ,IAAa,EACb,IAAsC,EACF;IACpC,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,GAAG,EAAE,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC;QACtB,OAAO,EAAE,KAAK,CAAC,EAAE;QACjB,IAAI;QACJ,IAAI;QACJ,IAAI;KACJ,CAAC;AAAA,CACF;AAED,SAAS,gBAAgB,CAAC,MAAc,EAAE,KAA2B,EAAE,IAAY,EAAO;IACzF,IAAI,CAAC;QACJ,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;IACvE,CAAC;AAAA,CACD;AAED,SAAS,mBAAmB,CAAC,MAAc,EAAE,KAA2B,EAAE,IAAY,EAAwB;IAC7G,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;IACrD,IAAI,CAAC,yBAAyB,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;QACjD,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,KAAK,EAAE,8BAA8B,CAAC,CAAC,CAAC;IACjG,CAAC;IAED,MAAM,IAAI,GAAG,iBAAiB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChD,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,KAAK,EAAE,sBAAsB,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,SAAS,CAAC;IACtC,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,QAAQ,KAAK,gBAAgB,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC;IACtF,OAAO;QACN,GAAG;QACH,IAAI;QACJ,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI;QACJ,QAAQ,EAAE,cAAc,CAAC,IAAI,CAAC;KAC9B,CAAC;AAAA,CACF;AAED,MAAM,UAAU,+BAA+B,CAAC,KAA2C,EAA0B;IACpH,MAAM,IAAI,GAAG,mBAAmB,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,0BAA0B,CAAC,CAAC;IAC/F,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,GAAG,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,qBAAqB,CAAC,CAAC;IACzG,OAAO;QACN,QAAQ,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ;QAC9B,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG;QACpB,OAAO,EAAE,KAAK,CAAC,KAAK,CAAC,EAAE;QACvB,OAAO,EAAE,IAAI,CAAC,GAAG;QACjB,GAAG,EAAE,MAAM,CAAC,GAAG;QACf,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,QAAQ,EAAE,MAAM,CAAC,QAAQ;QACzB,SAAS,EAAE,KAAK,CAAC,SAAS,IAAI,CAAC,MAAM,CAAC,QAAQ,KAAK,KAAK,IAAI,MAAM,CAAC,QAAQ,KAAK,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC;QAC9G,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,eAAe;KACvC,CAAC;AAAA,CACF;AAED,SAAS,uBAAuB,CAC/B,QAA6C,EACI;IACjD,OAAO;QACN,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,SAAS;QACjC,IAAI,EAAE,QAAQ,EAAE,IAAI,IAAI,qBAAqB;KAC7C,CAAC;AAAA,CACF;AAED,MAAM,CAAC,KAAK,UAAU,mCAAmC,CACxD,KAA2C,EAC3C,oBAA8D,EAChB;IAC9C,IAAI,CAAC,oBAAoB;QAAE,OAAO,SAAS,CAAC;IAE5C,MAAM,OAAO,GAAG,+BAA+B,CAAC,KAAK,CAAC,CAAC;IACvD,MAAM,QAAQ,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IACrD,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;QACxB,MAAM,MAAM,GAAG,uBAAuB,CAAC,QAAQ,CAAC,CAAC;QACjD,MAAM,IAAI,0BAA0B,CAAC,kBAAkB,CAAC,KAAK,CAAC,KAAK,EAAE,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC/G,CAAC;IACD,OAAO,OAAO,CAAC;AAAA,CACf;AAED,SAAS,qCAAqC,CAAC,KAAc,EAAU;IACtE,IAAI,KAAK,YAAY,0BAA0B;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IACtE,OAAO,mCAAmC,CAAC;AAAA,CAC3C;AAED,SAAS,iCAAiC,CAAC,KAA2B,EAAE,KAAc,EAAoB;IACzG,OAAO;QACN,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,EAAE;QACX,GAAG,EAAE,KAAK,CAAC,GAAU;QACrB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,KAAK,EAAE,KAAK,CAAC,EAAE;QACf,KAAK,EAAE,aAAa;QACpB,UAAU,EAAE,OAAO;QACnB,YAAY,EAAE,qCAAqC,CAAC,KAAK,CAAC;QAC1D,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE;KACrB,CAAC;AAAA,CACF;AAED,MAAM,UAAU,kCAAkC,CACjD,KAGC,EAC6B;IAC9B,MAAM,OAAO,GAAG,iCAAiC,EAAE,CAAC;IAEpD,cAAc,CAAC,KAAK,IAAI,EAAE,CAAC;QAC1B,IAAI,CAAC;YACJ,MAAM,mCAAmC,CAAC,KAAK,EAAE,KAAK,CAAC,oBAAoB,CAAC,CAAC;YAC7E,MAAM,QAAQ,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC;YAChC,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACrB,CAAC;QACF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YAChB,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;YACtE,OAAO,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;QAClE,CAAC;IAAA,CACD,CAAC,CAAC;IAEH,OAAO,OAAO,CAAC;AAAA,CACf;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,gCAAgC,CAC/C,KAA2B,EAC3B,KAAc,EACgB;IAC9B,MAAM,MAAM,GAAG,iCAAiC,EAAE,CAAC;IACnD,MAAM,OAAO,GAAG,iCAAiC,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;IAChE,cAAc,CAAC,GAAG,EAAE,CAAC;QACpB,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAAA,CAChE,CAAC,CAAC;IACH,OAAO,MAAM,CAAC;AAAA,CACd","sourcesContent":["import type {\n\tApi,\n\tAssistantMessage,\n\tAssistantMessageEventStream,\n\tBeforeProviderNetworkRequest,\n\tImagesApi,\n\tImagesModel,\n\tModel,\n\tProviderNetworkDecision,\n\tProviderNetworkProtocol,\n\tProviderNetworkPurpose,\n\tProviderNetworkRequest,\n\tProviderNetworkRequestSource,\n\tProviderNetworkTransport,\n\tUsage,\n} from \"./types.ts\";\nimport { createAssistantMessageEventStream } from \"./utils/event-stream.ts\";\n\nconst DEFAULT_USAGE: Usage = {\n\tinput: 0,\n\toutput: 0,\n\tcacheRead: 0,\n\tcacheWrite: 0,\n\ttotalTokens: 0,\n\tcost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },\n};\n\ntype ProviderNetworkModel =\n\t| Pick<Model<Api>, \"api\" | \"baseUrl\" | \"id\" | \"provider\">\n\t| Pick<ImagesModel<ImagesApi>, \"api\" | \"baseUrl\" | \"id\" | \"provider\">;\n\nexport interface NormalizeProviderNetworkRequestInput {\n\tmodel: ProviderNetworkModel;\n\turl?: string;\n\ttransport?: ProviderNetworkTransport;\n\tpurpose: ProviderNetworkPurpose;\n\tsource?: ProviderNetworkRequestSource;\n}\n\ninterface SanitizedProviderUrl {\n\turl: string;\n\thost: string;\n\tprotocol: ProviderNetworkProtocol;\n\tport?: string;\n\tloopback: boolean;\n}\n\nexport interface ProviderNetworkPolicyErrorDetails {\n\tprovider: string;\n\tapi: string;\n\tmodelId: string;\n\thost?: string;\n\trule: string;\n\tmode?: ProviderNetworkDecision[\"mode\"];\n}\n\nexport class ProviderNetworkPolicyError extends Error {\n\treadonly details: ProviderNetworkPolicyErrorDetails;\n\n\tconstructor(details: ProviderNetworkPolicyErrorDetails) {\n\t\tconst host = details.host ?? \"<unknown>\";\n\t\tsuper(\n\t\t\t`Provider network access denied: provider=${details.provider} api=${details.api} model=${details.modelId} host=${host} rule=${details.rule}`,\n\t\t);\n\t\tthis.name = \"ProviderNetworkPolicyError\";\n\t\tthis.details = details;\n\t}\n}\n\nfunction isProviderNetworkProtocol(protocol: string): protocol is ProviderNetworkProtocol {\n\treturn protocol === \"http:\" || protocol === \"https:\" || protocol === \"ws:\" || protocol === \"wss:\";\n}\n\nfunction normalizeHostname(hostname: string): string {\n\tconst unbracketed = hostname.startsWith(\"[\") && hostname.endsWith(\"]\") ? hostname.slice(1, -1) : hostname;\n\treturn unbracketed.toLowerCase().replace(/\\.+$/u, \"\");\n}\n\nfunction formatHostForUrl(host: string): string {\n\treturn host.includes(\":\") && !host.startsWith(\"[\") ? `[${host}]` : host;\n}\n\nfunction isValidIpv4Octet(value: string): boolean {\n\tif (!/^\\d{1,3}$/u.test(value)) return false;\n\tconst parsed = Number(value);\n\treturn Number.isInteger(parsed) && parsed >= 0 && parsed <= 255;\n}\n\nfunction isIpv4Loopback(host: string): boolean {\n\tconst parts = host.split(\".\");\n\treturn parts.length === 4 && parts.every(isValidIpv4Octet) && parts[0] === \"127\";\n}\n\nfunction isLoopbackHost(host: string): boolean {\n\treturn (\n\t\thost === \"localhost\" ||\n\t\thost.endsWith(\".localhost\") ||\n\t\thost === \"0.0.0.0\" ||\n\t\thost === \"::1\" ||\n\t\tisIpv4Loopback(host)\n\t);\n}\n\nfunction createErrorDetails(\n\tmodel: ProviderNetworkModel,\n\trule: string,\n\thost?: string,\n\tmode?: ProviderNetworkDecision[\"mode\"],\n): ProviderNetworkPolicyErrorDetails {\n\treturn {\n\t\tprovider: model.provider,\n\t\tapi: String(model.api),\n\t\tmodelId: model.id,\n\t\thost,\n\t\trule,\n\t\tmode,\n\t};\n}\n\nfunction parseProviderUrl(rawUrl: string, model: ProviderNetworkModel, rule: string): URL {\n\ttry {\n\t\treturn new URL(rawUrl.trim());\n\t} catch {\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(model, rule));\n\t}\n}\n\nfunction sanitizeProviderUrl(rawUrl: string, model: ProviderNetworkModel, rule: string): SanitizedProviderUrl {\n\tconst parsed = parseProviderUrl(rawUrl, model, rule);\n\tif (!isProviderNetworkProtocol(parsed.protocol)) {\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(model, \"network.unsupported_protocol\"));\n\t}\n\n\tconst host = normalizeHostname(parsed.hostname);\n\tif (!host) {\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(model, \"network.unknown_host\"));\n\t}\n\n\tconst port = parsed.port || undefined;\n\tconst url = `${parsed.protocol}//${formatHostForUrl(host)}${port ? `:${port}` : \"\"}/`;\n\treturn {\n\t\turl,\n\t\thost,\n\t\tprotocol: parsed.protocol,\n\t\tport,\n\t\tloopback: isLoopbackHost(host),\n\t};\n}\n\nexport function normalizeProviderNetworkRequest(input: NormalizeProviderNetworkRequestInput): ProviderNetworkRequest {\n\tconst base = sanitizeProviderUrl(input.model.baseUrl, input.model, \"network.invalid_base_url\");\n\tconst target = sanitizeProviderUrl(input.url ?? input.model.baseUrl, input.model, \"network.invalid_url\");\n\treturn {\n\t\tprovider: input.model.provider,\n\t\tapi: input.model.api,\n\t\tmodelId: input.model.id,\n\t\tbaseUrl: base.url,\n\t\turl: target.url,\n\t\thost: target.host,\n\t\tprotocol: target.protocol,\n\t\tport: target.port,\n\t\tloopback: target.loopback,\n\t\ttransport: input.transport ?? (target.protocol === \"ws:\" || target.protocol === \"wss:\" ? \"websocket\" : \"http\"),\n\t\tpurpose: input.purpose,\n\t\tsource: input.source ?? \"model.baseUrl\",\n\t};\n}\n\nfunction normalizeDeniedDecision(\n\tdecision: ProviderNetworkDecision | undefined,\n): Pick<ProviderNetworkDecision, \"mode\" | \"rule\"> {\n\treturn {\n\t\tmode: decision?.mode ?? \"enforce\",\n\t\trule: decision?.rule ?? \"network.no_decision\",\n\t};\n}\n\nexport async function assertProviderNetworkRequestAllowed(\n\tinput: NormalizeProviderNetworkRequestInput,\n\tbeforeNetworkRequest: BeforeProviderNetworkRequest | undefined,\n): Promise<ProviderNetworkRequest | undefined> {\n\tif (!beforeNetworkRequest) return undefined;\n\n\tconst request = normalizeProviderNetworkRequest(input);\n\tconst decision = await beforeNetworkRequest(request);\n\tif (!decision?.allowed) {\n\t\tconst denied = normalizeDeniedDecision(decision);\n\t\tthrow new ProviderNetworkPolicyError(createErrorDetails(input.model, denied.rule, request.host, denied.mode));\n\t}\n\treturn request;\n}\n\nfunction errorMessageForProviderNetworkFailure(error: unknown): string {\n\tif (error instanceof ProviderNetworkPolicyError) return error.message;\n\treturn \"Provider network preflight failed\";\n}\n\nfunction createProviderNetworkErrorMessage(model: ProviderNetworkModel, error: unknown): AssistantMessage {\n\treturn {\n\t\trole: \"assistant\",\n\t\tcontent: [],\n\t\tapi: model.api as Api,\n\t\tprovider: model.provider,\n\t\tmodel: model.id,\n\t\tusage: DEFAULT_USAGE,\n\t\tstopReason: \"error\",\n\t\terrorMessage: errorMessageForProviderNetworkFailure(error),\n\t\ttimestamp: Date.now(),\n\t};\n}\n\nexport function createProviderNetworkGuardedStream(\n\tinput: NormalizeProviderNetworkRequestInput & {\n\t\tbeforeNetworkRequest: BeforeProviderNetworkRequest;\n\t\tinvoke: () => AssistantMessageEventStream;\n\t},\n): AssistantMessageEventStream {\n\tconst guarded = createAssistantMessageEventStream();\n\n\tqueueMicrotask(async () => {\n\t\ttry {\n\t\t\tawait assertProviderNetworkRequestAllowed(input, input.beforeNetworkRequest);\n\t\t\tconst upstream = input.invoke();\n\t\t\tfor await (const event of upstream) {\n\t\t\t\tguarded.push(event);\n\t\t\t}\n\t\t} catch (error) {\n\t\t\tconst message = createProviderNetworkErrorMessage(input.model, error);\n\t\t\tguarded.push({ type: \"error\", reason: \"error\", error: message });\n\t\t}\n\t});\n\n\treturn guarded;\n}\n\n/**\n * Build an `AssistantMessageEventStream` that terminates immediately with a\n * sanitized provider network policy error. Used when a pre-auth preflight\n * denies a request before any provider network I/O or auth resolution.\n *\n * The error message exposes only origin metadata (provider, api, model id,\n * host, rule); it never includes headers, API keys, request bodies, prompts,\n * or responses.\n */\nexport function createProviderNetworkErrorStream(\n\tmodel: ProviderNetworkModel,\n\terror: unknown,\n): AssistantMessageEventStream {\n\tconst stream = createAssistantMessageEventStream();\n\tconst message = createProviderNetworkErrorMessage(model, error);\n\tqueueMicrotask(() => {\n\t\tstream.push({ type: \"error\", reason: \"error\", error: message });\n\t});\n\treturn stream;\n}\n"]}

package/node_modules/@earendil-works/omk-ai/dist/providers/amazon-bedrock.d.ts

@@ -1,38 +0,0 @@
-import type { SimpleStreamOptions, StreamFunction, StreamOptions, ThinkingBudgets, ThinkingLevel } from "../types.ts";
-export type BedrockThinkingDisplay = "summarized" | "omitted";
-export interface BedrockOptions extends StreamOptions {
-    region?: string;
-    profile?: string;
-    toolChoice?: "auto" | "any" | "none" | {
-        type: "tool";
-        name: string;
-    };
-    reasoning?: ThinkingLevel;
-    thinkingBudgets?: ThinkingBudgets;
-    interleavedThinking?: boolean;
-    /**
-     * Controls how Claude's thinking content is returned in responses.
-     * - "summarized": Thinking blocks contain summarized thinking text (default here).
-     * - "omitted": Thinking content is redacted but the signature still travels back
-     *   for multi-turn continuity, reducing time-to-first-text-token.
-     *
-     * Note: Anthropic's API default for Claude Opus 4.8 and Mythos Preview is
-     * "omitted". We default to "summarized" here to keep behavior consistent with
-     * older Claude 4 models. Only applies to Claude models on Bedrock.
-     */
-    thinkingDisplay?: BedrockThinkingDisplay;
-    /** Key-value pairs attached to the inference request for cost allocation tagging.
-     * Keys: max 64 chars, no `aws:` prefix. Values: max 256 chars. Max 50 pairs.
-     * Tags appear in AWS Cost Explorer split cost allocation data.
-     * @see https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_ConverseStream.html */
-    requestMetadata?: Record<string, string>;
-    /** Bearer token for Bedrock API key authentication.
-     * When set, bypasses SigV4 signing and sends Authorization: Bearer <token> instead.
-     * Requires `bedrock:CallWithBearerToken` IAM permission on the token's identity.
-     * Set via AWS_BEARER_TOKEN_BEDROCK env var or pass directly.
-     * @see https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html */
-    bearerToken?: string;
-}
-export declare const streamBedrock: StreamFunction<"bedrock-converse-stream", BedrockOptions>;
-export declare const streamSimpleBedrock: StreamFunction<"bedrock-converse-stream", SimpleStreamOptions>;
-//# sourceMappingURL=amazon-bedrock.d.ts.map

package/node_modules/@earendil-works/omk-ai/dist/providers/amazon-bedrock.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"amazon-bedrock.d.ts","sourceRoot":"","sources":["../../src/providers/amazon-bedrock.ts"],"names":[],"mappings":"AA0BA,OAAO,KAAK,EAOX,mBAAmB,EAEnB,cAAc,EACd,aAAa,EAEb,eAAe,EAEf,aAAa,EAIb,MAAM,aAAa,CAAC;AAQrB,MAAM,MAAM,sBAAsB,GAAG,YAAY,GAAG,SAAS,CAAC;AAE9D,MAAM,WAAW,cAAe,SAAQ,aAAa;IACpD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,UAAU,CAAC,EAAE,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;IAEtE,SAAS,CAAC,EAAE,aAAa,CAAC;IAE1B,eAAe,CAAC,EAAE,eAAe,CAAC;IAElC,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B;;;;;;;;;OASG;IACH,eAAe,CAAC,EAAE,sBAAsB,CAAC;IACzC;;;sGAGkG;IAClG,eAAe,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACzC;;;;yGAIqG;IACrG,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAMD,eAAO,MAAM,aAAa,EAAE,cAAc,CAAC,yBAAyB,EAAE,cAAc,CAqLnF,CAAC;AAoEF,eAAO,MAAM,mBAAmB,EAAE,cAAc,CAAC,yBAAyB,EAAE,mBAAmB,CA4C9F,CAAC","sourcesContent":["import {\n\tBedrockRuntimeClient,\n\ttype BedrockRuntimeClientConfig,\n\tBedrockRuntimeServiceException,\n\tStopReason as BedrockStopReason,\n\ttype Tool as BedrockTool,\n\tCachePointType,\n\tCacheTTL,\n\ttype ContentBlock,\n\ttype ContentBlockDeltaEvent,\n\ttype ContentBlockStartEvent,\n\ttype ContentBlockStopEvent,\n\tConversationRole,\n\tConverseStreamCommand,\n\ttype ConverseStreamMetadataEvent,\n\tImageFormat,\n\ttype Message,\n\ttype SystemContentBlock,\n\ttype ToolChoice,\n\ttype ToolConfiguration,\n\ttype ToolResultContentBlock,\n\tToolResultStatus,\n} from \"@aws-sdk/client-bedrock-runtime\";\nimport { NodeHttpHandler } from \"@smithy/node-http-handler\";\nimport type { BuildMiddleware, DocumentType, MetadataBearer } from \"@smithy/types\";\nimport { calculateCost } from \"../models.ts\";\nimport type {\n\tApi,\n\tAssistantMessage,\n\tCacheRetention,\n\tContext,\n\tImageContent,\n\tModel,\n\tSimpleStreamOptions,\n\tStopReason,\n\tStreamFunction,\n\tStreamOptions,\n\tTextContent,\n\tThinkingBudgets,\n\tThinkingContent,\n\tThinkingLevel,\n\tTool,\n\tToolCall,\n\tToolResultMessage,\n} from \"../types.ts\";\nimport { AssistantMessageEventStream } from \"../utils/event-stream.ts\";\nimport { parseStreamingJson } from \"../utils/json-parse.ts\";\nimport { createHttpProxyAgentsForTarget } from \"../utils/node-http-proxy.ts\";\nimport { sanitizeSurrogates } from \"../utils/sanitize-unicode.ts\";\nimport { adjustMaxTokensForThinking, buildBaseOptions, clampReasoning } from \"./simple-options.ts\";\nimport { transformMessages } from \"./transform-messages.ts\";\n\nexport type BedrockThinkingDisplay = \"summarized\" | \"omitted\";\n\nexport interface BedrockOptions extends StreamOptions {\n\tregion?: string;\n\tprofile?: string;\n\ttoolChoice?: \"auto\" | \"any\" | \"none\" | { type: \"tool\"; name: string };\n\t/* See https://docs.aws.amazon.com/bedrock/latest/userguide/inference-reasoning.html for supported models. */\n\treasoning?: ThinkingLevel;\n\t/* Custom token budgets per thinking level. Overrides default budgets. */\n\tthinkingBudgets?: ThinkingBudgets;\n\t/* Only supported by Claude 4.x models, see https://docs.aws.amazon.com/bedrock/latest/userguide/claude-messages-extended-thinking.html#claude-messages-extended-thinking-tool-use-interleaved */\n\tinterleavedThinking?: boolean;\n\t/**\n\t * Controls how Claude's thinking content is returned in responses.\n\t * - \"summarized\": Thinking blocks contain summarized thinking text (default here).\n\t * - \"omitted\": Thinking content is redacted but the signature still travels back\n\t *   for multi-turn continuity, reducing time-to-first-text-token.\n\t *\n\t * Note: Anthropic's API default for Claude Opus 4.8 and Mythos Preview is\n\t * \"omitted\". We default to \"summarized\" here to keep behavior consistent with\n\t * older Claude 4 models. Only applies to Claude models on Bedrock.\n\t */\n\tthinkingDisplay?: BedrockThinkingDisplay;\n\t/** Key-value pairs attached to the inference request for cost allocation tagging.\n\t * Keys: max 64 chars, no `aws:` prefix. Values: max 256 chars. Max 50 pairs.\n\t * Tags appear in AWS Cost Explorer split cost allocation data.\n\t * @see https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_ConverseStream.html */\n\trequestMetadata?: Record<string, string>;\n\t/** Bearer token for Bedrock API key authentication.\n\t * When set, bypasses SigV4 signing and sends Authorization: Bearer <token> instead.\n\t * Requires `bedrock:CallWithBearerToken` IAM permission on the token's identity.\n\t * Set via AWS_BEARER_TOKEN_BEDROCK env var or pass directly.\n\t * @see https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html */\n\tbearerToken?: string;\n}\n\ntype Block = (TextContent | ThinkingContent | ToolCall) & { index?: number; partialJson?: string };\n\nconst EMPTY_TEXT_PLACEHOLDER = \"<empty>\";\n\nexport const streamBedrock: StreamFunction<\"bedrock-converse-stream\", BedrockOptions> = (\n\tmodel: Model<\"bedrock-converse-stream\">,\n\tcontext: Context,\n\toptions: BedrockOptions = {},\n): AssistantMessageEventStream => {\n\tconst stream = new AssistantMessageEventStream();\n\n\t(async () => {\n\t\tconst output: AssistantMessage = {\n\t\t\trole: \"assistant\",\n\t\t\tcontent: [],\n\t\t\tapi: \"bedrock-converse-stream\" as Api,\n\t\t\tprovider: model.provider,\n\t\t\tmodel: model.id,\n\t\t\tusage: {\n\t\t\t\tinput: 0,\n\t\t\t\toutput: 0,\n\t\t\t\tcacheRead: 0,\n\t\t\t\tcacheWrite: 0,\n\t\t\t\ttotalTokens: 0,\n\t\t\t\tcost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, total: 0 },\n\t\t\t},\n\t\t\tstopReason: \"stop\",\n\t\t\ttimestamp: Date.now(),\n\t\t};\n\n\t\tconst blocks = output.content as Block[];\n\n\t\tconst config: BedrockRuntimeClientConfig = {\n\t\t\tprofile: options.profile,\n\t\t};\n\t\tconst configuredRegion = getConfiguredBedrockRegion(options);\n\t\tconst hasConfiguredProfile = hasConfiguredBedrockProfile();\n\t\tconst endpointRegion = getStandardBedrockEndpointRegion(model.baseUrl);\n\t\tconst useExplicitEndpoint = shouldUseExplicitBedrockEndpoint(\n\t\t\tmodel.baseUrl,\n\t\t\tconfiguredRegion,\n\t\t\thasConfiguredProfile,\n\t\t);\n\n\t\t// Only pin standard AWS Bedrock runtime endpoints when no region/profile is configured.\n\t\t// This preserves custom endpoints (VPC/proxy) from #3402 without forcing built-in\n\t\t// catalog defaults such as us-east-1 to override AWS_REGION/AWS_PROFILE.\n\t\tif (useExplicitEndpoint) {\n\t\t\tconfig.endpoint = model.baseUrl;\n\t\t}\n\n\t\t// Resolve bearer token for Bedrock API key auth.\n\t\tconst bearerToken = options.bearerToken || process.env.AWS_BEARER_TOKEN_BEDROCK || undefined;\n\t\tconst useBearerToken = bearerToken !== undefined && process.env.AWS_BEDROCK_SKIP_AUTH !== \"1\";\n\n\t\t// in Node.js/Bun environment only\n\t\tif (typeof process !== \"undefined\" && (process.versions?.node || process.versions?.bun)) {\n\t\t\t// Region resolution: explicit option > env vars > SDK default chain.\n\t\t\t// When AWS_PROFILE is set, we leave region undefined so the SDK can\n\t\t\t// resovle it from aws profile configs. Otherwise fall back to us-east-1.\n\t\t\tif (configuredRegion) {\n\t\t\t\tconfig.region = configuredRegion;\n\t\t\t} else if (endpointRegion && useExplicitEndpoint) {\n\t\t\t\tconfig.region = endpointRegion;\n\t\t\t} else if (!hasConfiguredProfile) {\n\t\t\t\tconfig.region = \"us-east-1\";\n\t\t\t}\n\n\t\t\t// Support proxies that don't need authentication\n\t\t\tif (process.env.AWS_BEDROCK_SKIP_AUTH === \"1\") {\n\t\t\t\tconfig.credentials = {\n\t\t\t\t\taccessKeyId: \"dummy-access-key\",\n\t\t\t\t\tsecretAccessKey: \"dummy-secret-key\",\n\t\t\t\t};\n\t\t\t}\n\n\t\t\tconst proxyAgents = createHttpProxyAgentsForTarget(model.baseUrl);\n\t\t\tif (proxyAgents) {\n\t\t\t\t// Bedrock runtime uses NodeHttp2Handler by default since v3.798.0, which is based\n\t\t\t\t// on `http2` module and has no support for http agent.\n\t\t\t\t// Use NodeHttpHandler to support HTTP(S) proxy agents.\n\t\t\t\tconfig.requestHandler = new NodeHttpHandler(proxyAgents);\n\t\t\t} else if (process.env.AWS_BEDROCK_FORCE_HTTP1 === \"1\") {\n\t\t\t\t// Some custom endpoints require HTTP/1.1 instead of HTTP/2\n\t\t\t\tconfig.requestHandler = new NodeHttpHandler();\n\t\t\t}\n\t\t} else {\n\t\t\t// Non-Node environment (browser): fall back to us-east-1 since\n\t\t\t// there's no config file resolution available.\n\t\t\tconfig.region =\n\t\t\t\tconfiguredRegion || (endpointRegion && useExplicitEndpoint ? endpointRegion : undefined) || \"us-east-1\";\n\t\t}\n\n\t\tif (useBearerToken) {\n\t\t\tconfig.token = { token: bearerToken };\n\t\t\tconfig.authSchemePreference = [\"httpBearerAuth\"];\n\t\t}\n\n\t\ttry {\n\t\t\tconst client = new BedrockRuntimeClient(config);\n\t\t\tif (options.headers && Object.keys(options.headers).length > 0) {\n\t\t\t\taddCustomHeadersMiddleware(client, options.headers);\n\t\t\t}\n\t\t\tconst cacheRetention = resolveCacheRetention(options.cacheRetention);\n\t\t\tconst inferenceMaxTokens = options.maxTokens ?? (isAnthropicClaudeModel(model) ? model.maxTokens : undefined);\n\t\t\tlet commandInput = {\n\t\t\t\tmodelId: model.id,\n\t\t\t\tmessages: convertMessages(context, model, cacheRetention),\n\t\t\t\tsystem: buildSystemPrompt(context.systemPrompt, model, cacheRetention),\n\t\t\t\tinferenceConfig: {\n\t\t\t\t\t...(inferenceMaxTokens !== undefined && { maxTokens: inferenceMaxTokens }),\n\t\t\t\t\t...(options.temperature !== undefined && { temperature: options.temperature }),\n\t\t\t\t},\n\t\t\t\ttoolConfig: convertToolConfig(context.tools, options.toolChoice),\n\t\t\t\tadditionalModelRequestFields: buildAdditionalModelRequestFields(model, options),\n\t\t\t\t...(options.requestMetadata !== undefined && { requestMetadata: options.requestMetadata }),\n\t\t\t};\n\t\t\tconst nextCommandInput = await options?.onPayload?.(commandInput, model);\n\t\t\tif (nextCommandInput !== undefined) {\n\t\t\t\tcommandInput = nextCommandInput as typeof commandInput;\n\t\t\t}\n\t\t\tconst command = new ConverseStreamCommand(commandInput);\n\n\t\t\tconst response = await client.send(command, { abortSignal: options.signal });\n\t\t\tif (response.$metadata.httpStatusCode !== undefined) {\n\t\t\t\tconst responseHeaders: Record<string, string> = {};\n\t\t\t\tif (response.$metadata.requestId) {\n\t\t\t\t\tresponseHeaders[\"x-amzn-requestid\"] = response.$metadata.requestId;\n\t\t\t\t}\n\t\t\t\tawait options?.onResponse?.({ status: response.$metadata.httpStatusCode, headers: responseHeaders }, model);\n\t\t\t}\n\n\t\t\tfor await (const item of response.stream!) {\n\t\t\t\tif (item.messageStart) {\n\t\t\t\t\tif (item.messageStart.role !== ConversationRole.ASSISTANT) {\n\t\t\t\t\t\tthrow new Error(\"Unexpected assistant message start but got user message start instead\");\n\t\t\t\t\t}\n\t\t\t\t\tstream.push({ type: \"start\", partial: output });\n\t\t\t\t} else if (item.contentBlockStart) {\n\t\t\t\t\thandleContentBlockStart(item.contentBlockStart, blocks, output, stream);\n\t\t\t\t} else if (item.contentBlockDelta) {\n\t\t\t\t\thandleContentBlockDelta(item.contentBlockDelta, blocks, output, stream);\n\t\t\t\t} else if (item.contentBlockStop) {\n\t\t\t\t\thandleContentBlockStop(item.contentBlockStop, blocks, output, stream);\n\t\t\t\t} else if (item.messageStop) {\n\t\t\t\t\toutput.stopReason = mapStopReason(item.messageStop.stopReason);\n\t\t\t\t} else if (item.metadata) {\n\t\t\t\t\thandleMetadata(item.metadata, model, output);\n\t\t\t\t} else if (item.internalServerException) {\n\t\t\t\t\tthrow item.internalServerException;\n\t\t\t\t} else if (item.modelStreamErrorException) {\n\t\t\t\t\tthrow item.modelStreamErrorException;\n\t\t\t\t} else if (item.validationException) {\n\t\t\t\t\tthrow item.validationException;\n\t\t\t\t} else if (item.throttlingException) {\n\t\t\t\t\tthrow item.throttlingException;\n\t\t\t\t} else if (item.serviceUnavailableException) {\n\t\t\t\t\tthrow item.serviceUnavailableException;\n\t\t\t\t}\n\t\t\t}\n\n\t\t\tif (options.signal?.aborted) {\n\t\t\t\tthrow new Error(\"Request was aborted\");\n\t\t\t}\n\n\t\t\tif (output.stopReason === \"error\" || output.stopReason === \"aborted\") {\n\t\t\t\tthrow new Error(\"An unknown error occurred\");\n\t\t\t}\n\n\t\t\tstream.push({ type: \"done\", reason: output.stopReason, message: output });\n\t\t\tstream.end();\n\t\t} catch (error) {\n\t\t\tfor (const block of output.content) {\n\t\t\t\tdelete (block as Block).index;\n\t\t\t\t// partialJson is only a streaming scratch buffer; never persist it.\n\t\t\t\tdelete (block as Block).partialJson;\n\t\t\t}\n\t\t\toutput.stopReason = options.signal?.aborted ? \"aborted\" : \"error\";\n\t\t\toutput.errorMessage = formatBedrockError(error);\n\t\t\tstream.push({ type: \"error\", reason: output.stopReason, error: output });\n\t\t\tstream.end();\n\t\t}\n\t})();\n\n\treturn stream;\n};\n\n/**\n * Human-readable prefixes for Bedrock SDK exception names.\n * The downstream retry logic in agent-session matches patterns like\n * `server.?error` and `service.?unavailable`, so we preserve the legacy\n * prefix format rather than using the raw SDK exception name.\n */\nconst BEDROCK_ERROR_PREFIXES: Record<string, string> = {\n\tInternalServerException: \"Internal server error\",\n\tModelStreamErrorException: \"Model stream error\",\n\tValidationException: \"Validation error\",\n\tThrottlingException: \"Throttling error\",\n\tServiceUnavailableException: \"Service unavailable\",\n};\n\n/**\n * Format a Bedrock error with a human-readable prefix.\n * AWS SDK exceptions (both from `client.send()` and from stream event items)\n * extend BedrockRuntimeServiceException. We map the `.name` to a stable\n * human-readable prefix so downstream consumers (retry logic, context-overflow\n * detection) can distinguish error categories via simple string matching.\n */\nfunction formatBedrockError(error: unknown): string {\n\tconst message = error instanceof Error ? error.message : JSON.stringify(error);\n\tif (error instanceof BedrockRuntimeServiceException) {\n\t\tconst prefix = BEDROCK_ERROR_PREFIXES[error.name] ?? error.name;\n\t\treturn `${prefix}: ${message}`;\n\t}\n\treturn message;\n}\n\n/**\n * Header keys that must never be overwritten by caller-supplied headers.\n * `host` and `x-amz-*` participate in the SigV4 canonical request; `authorization`\n * is owned by SigV4 or the bearer-token path (config.token + authSchemePreference).\n * Compared case-insensitively (caller key is lower-cased before lookup).\n */\nconst RESERVED_HEADER_EXACT = new Set([\"authorization\", \"host\"]);\n\nfunction isReservedHeader(key: string): boolean {\n\tconst lower = key.toLowerCase();\n\treturn lower.startsWith(\"x-amz-\") || RESERVED_HEADER_EXACT.has(lower);\n}\n\n/**\n * Attach caller-supplied headers to the outgoing Bedrock request via a Smithy\n * `build`-step middleware. The `build` step runs after request serialisation but\n * before SigV4 signing, so injected headers are covered by the signature. Reserved\n * SigV4 / auth headers (`x-amz-*`, `authorization`, `host`) are silently skipped;\n * all other caller headers override any existing same-named header on the request.\n */\nfunction addCustomHeadersMiddleware(client: BedrockRuntimeClient, headers: Record<string, string>): void {\n\tconst middleware: BuildMiddleware<object, MetadataBearer> = (next) => async (args) => {\n\t\tconst request = args.request;\n\t\tif (request && typeof request === \"object\" && \"headers\" in request) {\n\t\t\tconst requestHeaders = (request as { headers: Record<string, string> }).headers;\n\t\t\tfor (const [key, value] of Object.entries(headers)) {\n\t\t\t\tif (!isReservedHeader(key)) {\n\t\t\t\t\trequestHeaders[key] = value;\n\t\t\t\t}\n\t\t\t}\n\t\t}\n\t\treturn next(args);\n\t};\n\tclient.middlewareStack.add(middleware, { step: \"build\", name: \"omk-ai-custom-headers\", priority: \"low\" });\n}\n\nexport const streamSimpleBedrock: StreamFunction<\"bedrock-converse-stream\", SimpleStreamOptions> = (\n\tmodel: Model<\"bedrock-converse-stream\">,\n\tcontext: Context,\n\toptions?: SimpleStreamOptions,\n): AssistantMessageEventStream => {\n\tconst base = buildBaseOptions(model, options, undefined);\n\tif (!options?.reasoning) {\n\t\treturn streamBedrock(model, context, { ...base, reasoning: undefined } satisfies BedrockOptions);\n\t}\n\n\tif (isAnthropicClaudeModel(model)) {\n\t\tif (supportsAdaptiveThinking(model.id, model.name)) {\n\t\t\treturn streamBedrock(model, context, {\n\t\t\t\t...base,\n\t\t\t\treasoning: options.reasoning,\n\t\t\t\tthinkingBudgets: options.thinkingBudgets,\n\t\t\t} satisfies BedrockOptions);\n\t\t}\n\n\t\t// Undefined means the caller did not request an output cap; let the helper use the model cap.\n\t\t// Do not coerce to 0 here, or the thinking budget would become the entire maxTokens value.\n\t\tconst adjusted = adjustMaxTokensForThinking(\n\t\t\tbase.maxTokens,\n\t\t\tmodel.maxTokens,\n\t\t\toptions.reasoning,\n\t\t\toptions.thinkingBudgets,\n\t\t);\n\n\t\treturn streamBedrock(model, context, {\n\t\t\t...base,\n\t\t\tmaxTokens: adjusted.maxTokens,\n\t\t\treasoning: options.reasoning,\n\t\t\tthinkingBudgets: {\n\t\t\t\t...(options.thinkingBudgets || {}),\n\t\t\t\t[clampReasoning(options.reasoning)!]: adjusted.thinkingBudget,\n\t\t\t},\n\t\t} satisfies BedrockOptions);\n\t}\n\n\treturn streamBedrock(model, context, {\n\t\t...base,\n\t\treasoning: options.reasoning,\n\t\tthinkingBudgets: options.thinkingBudgets,\n\t} satisfies BedrockOptions);\n};\n\nfunction handleContentBlockStart(\n\tevent: ContentBlockStartEvent,\n\tblocks: Block[],\n\toutput: AssistantMessage,\n\tstream: AssistantMessageEventStream,\n): void {\n\tconst index = event.contentBlockIndex!;\n\tconst start = event.start;\n\n\tif (start?.toolUse) {\n\t\tconst block: Block = {\n\t\t\ttype: \"toolCall\",\n\t\t\tid: start.toolUse.toolUseId || \"\",\n\t\t\tname: start.toolUse.name || \"\",\n\t\t\targuments: {},\n\t\t\tpartialJson: \"\",\n\t\t\tindex,\n\t\t};\n\t\toutput.content.push(block);\n\t\tstream.push({ type: \"toolcall_start\", contentIndex: blocks.length - 1, partial: output });\n\t}\n}\n\nfunction handleContentBlockDelta(\n\tevent: ContentBlockDeltaEvent,\n\tblocks: Block[],\n\toutput: AssistantMessage,\n\tstream: AssistantMessageEventStream,\n): void {\n\tconst contentBlockIndex = event.contentBlockIndex!;\n\tconst delta = event.delta;\n\tlet index = blocks.findIndex((b) => b.index === contentBlockIndex);\n\tlet block = blocks[index];\n\n\tif (delta?.text !== undefined) {\n\t\t// If no text block exists yet, create one, as `handleContentBlockStart` is not sent for text blocks\n\t\tif (!block) {\n\t\t\tconst newBlock: Block = { type: \"text\", text: \"\", index: contentBlockIndex };\n\t\t\toutput.content.push(newBlock);\n\t\t\tindex = blocks.length - 1;\n\t\t\tblock = blocks[index];\n\t\t\tstream.push({ type: \"text_start\", contentIndex: index, partial: output });\n\t\t}\n\t\tif (block.type === \"text\") {\n\t\t\tblock.text += delta.text;\n\t\t\tstream.push({ type: \"text_delta\", contentIndex: index, delta: delta.text, partial: output });\n\t\t}\n\t} else if (delta?.toolUse && block?.type === \"toolCall\") {\n\t\tblock.partialJson = (block.partialJson || \"\") + (delta.toolUse.input || \"\");\n\t\tblock.arguments = parseStreamingJson(block.partialJson);\n\t\tstream.push({ type: \"toolcall_delta\", contentIndex: index, delta: delta.toolUse.input || \"\", partial: output });\n\t} else if (delta?.reasoningContent) {\n\t\tlet thinkingBlock = block;\n\t\tlet thinkingIndex = index;\n\n\t\tif (!thinkingBlock) {\n\t\t\tconst newBlock: Block = { type: \"thinking\", thinking: \"\", thinkingSignature: \"\", index: contentBlockIndex };\n\t\t\toutput.content.push(newBlock);\n\t\t\tthinkingIndex = blocks.length - 1;\n\t\t\tthinkingBlock = blocks[thinkingIndex];\n\t\t\tstream.push({ type: \"thinking_start\", contentIndex: thinkingIndex, partial: output });\n\t\t}\n\n\t\tif (thinkingBlock?.type === \"thinking\") {\n\t\t\tif (delta.reasoningContent.text) {\n\t\t\t\tthinkingBlock.thinking += delta.reasoningContent.text;\n\t\t\t\tstream.push({\n\t\t\t\t\ttype: \"thinking_delta\",\n\t\t\t\t\tcontentIndex: thinkingIndex,\n\t\t\t\t\tdelta: delta.reasoningContent.text,\n\t\t\t\t\tpartial: output,\n\t\t\t\t});\n\t\t\t}\n\t\t\tif (delta.reasoningContent.signature) {\n\t\t\t\tthinkingBlock.thinkingSignature =\n\t\t\t\t\t(thinkingBlock.thinkingSignature || \"\") + delta.reasoningContent.signature;\n\t\t\t}\n\t\t}\n\t}\n}\n\nfunction handleMetadata(\n\tevent: ConverseStreamMetadataEvent,\n\tmodel: Model<\"bedrock-converse-stream\">,\n\toutput: AssistantMessage,\n): void {\n\tif (event.usage) {\n\t\toutput.usage.input = event.usage.inputTokens || 0;\n\t\toutput.usage.output = event.usage.outputTokens || 0;\n\t\toutput.usage.cacheRead = event.usage.cacheReadInputTokens || 0;\n\t\toutput.usage.cacheWrite = event.usage.cacheWriteInputTokens || 0;\n\t\toutput.usage.totalTokens = event.usage.totalTokens || output.usage.input + output.usage.output;\n\t\tcalculateCost(model, output.usage);\n\t}\n}\n\nfunction handleContentBlockStop(\n\tevent: ContentBlockStopEvent,\n\tblocks: Block[],\n\toutput: AssistantMessage,\n\tstream: AssistantMessageEventStream,\n): void {\n\tconst index = blocks.findIndex((b) => b.index === event.contentBlockIndex);\n\tconst block = blocks[index];\n\tif (!block) return;\n\tdelete (block as Block).index;\n\n\tswitch (block.type) {\n\t\tcase \"text\":\n\t\t\tstream.push({ type: \"text_end\", contentIndex: index, content: block.text, partial: output });\n\t\t\tbreak;\n\t\tcase \"thinking\":\n\t\t\tstream.push({ type: \"thinking_end\", contentIndex: index, content: block.thinking, partial: output });\n\t\t\tbreak;\n\t\tcase \"toolCall\":\n\t\t\tblock.arguments = parseStreamingJson(block.partialJson);\n\t\t\t// Finalize in-place and strip the scratch buffer so replay only\n\t\t\t// carries parsed arguments.\n\t\t\tdelete (block as Block).partialJson;\n\t\t\tstream.push({ type: \"toolcall_end\", contentIndex: index, toolCall: block, partial: output });\n\t\t\tbreak;\n\t}\n}\n\n/**\n * Check if the model supports adaptive thinking (Opus 4.6+, Sonnet 4.6).\n * Checks both model ID and model name to support application inference profiles\n * whose ARNs don't contain the model name.\n */\nfunction getModelMatchCandidates(modelId: string, modelName?: string): string[] {\n\tconst values = modelName ? [modelId, modelName] : [modelId];\n\treturn values.flatMap((value) => {\n\t\tconst lower = value.toLowerCase();\n\t\treturn [lower, lower.replace(/[\\s_.:]+/g, \"-\")];\n\t});\n}\n\nfunction supportsAdaptiveThinking(modelId: string, modelName?: string): boolean {\n\tconst candidates = getModelMatchCandidates(modelId, modelName);\n\treturn candidates.some(\n\t\t(s) => s.includes(\"opus-4-6\") || s.includes(\"opus-4-7\") || s.includes(\"opus-4-8\") || s.includes(\"sonnet-4-6\"),\n\t);\n}\n\nfunction supportsNativeXhighEffort(model: Model<\"bedrock-converse-stream\">): boolean {\n\tconst candidates = getModelMatchCandidates(model.id, model.name);\n\treturn candidates.some((s) => s.includes(\"opus-4-7\") || s.includes(\"opus-4-8\"));\n}\n\nfunction mapThinkingLevelToEffort(\n\tmodel: Model<\"bedrock-converse-stream\">,\n\tlevel: SimpleStreamOptions[\"reasoning\"],\n): \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\" {\n\tif (level === \"xhigh\" && supportsNativeXhighEffort(model)) return \"xhigh\";\n\n\tconst mapped = level ? model.thinkingLevelMap?.[level] : undefined;\n\tif (typeof mapped === \"string\") return mapped as \"low\" | \"medium\" | \"high\" | \"xhigh\" | \"max\";\n\n\tswitch (level) {\n\t\tcase \"minimal\":\n\t\tcase \"low\":\n\t\t\treturn \"low\";\n\t\tcase \"medium\":\n\t\t\treturn \"medium\";\n\t\tcase \"high\":\n\t\t\treturn \"high\";\n\t\tdefault:\n\t\t\treturn \"high\";\n\t}\n}\n\n/**\n * Resolve cache retention preference.\n * Defaults to \"short\" and uses OMK_CACHE_RETENTION.\n */\nfunction resolveCacheRetention(cacheRetention?: CacheRetention): CacheRetention {\n\tif (cacheRetention) {\n\t\treturn cacheRetention;\n\t}\n\tif (typeof process !== \"undefined\" && process.env.OMK_CACHE_RETENTION === \"long\") {\n\t\treturn \"long\";\n\t}\n\treturn \"short\";\n}\n\n/**\n * Check if the model is an Anthropic Claude model on Bedrock.\n * Checks both model ID and model name to support application inference profiles\n * whose ARNs don't contain the model name.\n */\nfunction isAnthropicClaudeModel(model: Model<\"bedrock-converse-stream\">): boolean {\n\tconst id = model.id.toLowerCase();\n\tconst name = model.name?.toLowerCase() ?? \"\";\n\treturn (\n\t\tid.includes(\"anthropic.claude\") ||\n\t\tid.includes(\"anthropic/claude\") ||\n\t\tname.includes(\"anthropic.claude\") ||\n\t\tname.includes(\"anthropic/claude\") ||\n\t\tname.includes(\"claude\")\n\t);\n}\n\n/**\n * Check if the model supports prompt caching.\n * Supported: Claude 3.5 Haiku, Claude 3.7 Sonnet, Claude 4.x models\n *\n * For base models and system-defined inference profiles the model ID / ARN\n * contains the model name, so we can decide locally.\n *\n * For application inference profiles (whose ARNs don't contain the model name),\n * also checks model.name which is user-controlled via models.json or registerProvider.\n * As a last resort, set AWS_BEDROCK_FORCE_CACHE=1 to enable cache points.\n * Amazon Nova models have automatic caching and don't need explicit cache points.\n */\nfunction supportsPromptCaching(model: Model<\"bedrock-converse-stream\">): boolean {\n\tconst candidates = getModelMatchCandidates(model.id, model.name);\n\n\tconst hasClaudeRef = candidates.some((s) => s.includes(\"claude\"));\n\tif (!hasClaudeRef) {\n\t\t// Application inference profiles don't contain the model name in the ARN.\n\t\t// Allow users to force cache points via environment variable.\n\t\tif (typeof process !== \"undefined\" && process.env.AWS_BEDROCK_FORCE_CACHE === \"1\") return true;\n\t\treturn false;\n\t}\n\t// Claude 4.x models (opus-4, sonnet-4, haiku-4)\n\tif (candidates.some((s) => s.includes(\"-4-\"))) return true;\n\t// Claude 3.7 Sonnet\n\tif (candidates.some((s) => s.includes(\"claude-3-7-sonnet\"))) return true;\n\t// Claude 3.5 Haiku\n\tif (candidates.some((s) => s.includes(\"claude-3-5-haiku\"))) return true;\n\treturn false;\n}\n\n/**\n * Check if the model supports thinking signatures in reasoningContent.\n * Only Anthropic Claude models support the signature field.\n * Other models (OpenAI, Qwen, Minimax, Moonshot, etc.) reject it with:\n * \"This model doesn't support the reasoningContent.reasoningText.signature field\"\n *\n * Checks both model ID and model name to support application inference profiles.\n */\nfunction supportsThinkingSignature(model: Model<\"bedrock-converse-stream\">): boolean {\n\treturn isAnthropicClaudeModel(model);\n}\n\nfunction buildSystemPrompt(\n\tsystemPrompt: string | undefined,\n\tmodel: Model<\"bedrock-converse-stream\">,\n\tcacheRetention: CacheRetention,\n): SystemContentBlock[] | undefined {\n\tif (!systemPrompt) return undefined;\n\n\tconst blocks: SystemContentBlock[] = [{ text: sanitizeSurrogates(systemPrompt) }];\n\n\t// Add cache point for supported Claude models when caching is enabled\n\tif (cacheRetention !== \"none\" && supportsPromptCaching(model)) {\n\t\tblocks.push({\n\t\t\tcachePoint: { type: CachePointType.DEFAULT, ...(cacheRetention === \"long\" ? { ttl: CacheTTL.ONE_HOUR } : {}) },\n\t\t});\n\t}\n\n\treturn blocks;\n}\n\nfunction normalizeToolCallId(id: string): string {\n\tconst sanitized = id.replace(/[^a-zA-Z0-9_-]/g, \"_\");\n\treturn sanitized.length > 64 ? sanitized.slice(0, 64) : sanitized;\n}\n\nfunction createNonBlankTextBlock(text: string): ContentBlock.TextMember | undefined {\n\tconst sanitized = sanitizeSurrogates(text);\n\treturn sanitized.trim().length === 0 ? undefined : { text: sanitized };\n}\n\nfunction createRequiredTextBlock(text: string): ContentBlock.TextMember {\n\treturn createNonBlankTextBlock(text) ?? { text: EMPTY_TEXT_PLACEHOLDER };\n}\n\nfunction convertToolResultContent(content: (TextContent | ImageContent)[]): ToolResultContentBlock[] {\n\tconst result: ToolResultContentBlock[] = [];\n\tfor (const c of content) {\n\t\tif (c.type === \"image\") {\n\t\t\tresult.push({ image: createImageBlock(c.mimeType, c.data) });\n\t\t} else {\n\t\t\tconst textBlock = createNonBlankTextBlock(c.text);\n\t\t\tif (textBlock) result.push(textBlock);\n\t\t}\n\t}\n\tif (result.length === 0) result.push({ text: EMPTY_TEXT_PLACEHOLDER });\n\treturn result;\n}\n\nfunction convertMessages(\n\tcontext: Context,\n\tmodel: Model<\"bedrock-converse-stream\">,\n\tcacheRetention: CacheRetention,\n): Message[] {\n\tconst result: Message[] = [];\n\tconst transformedMessages = transformMessages(context.messages, model, normalizeToolCallId);\n\n\tfor (let i = 0; i < transformedMessages.length; i++) {\n\t\tconst m = transformedMessages[i];\n\n\t\tswitch (m.role) {\n\t\t\tcase \"user\": {\n\t\t\t\tconst content: ContentBlock[] = [];\n\t\t\t\tif (typeof m.content === \"string\") {\n\t\t\t\t\tcontent.push(createRequiredTextBlock(m.content));\n\t\t\t\t} else {\n\t\t\t\t\tfor (const c of m.content) {\n\t\t\t\t\t\tswitch (c.type) {\n\t\t\t\t\t\t\tcase \"text\": {\n\t\t\t\t\t\t\t\tconst textBlock = createNonBlankTextBlock(c.text);\n\t\t\t\t\t\t\t\tif (textBlock) content.push(textBlock);\n\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tcase \"image\":\n\t\t\t\t\t\t\t\tcontent.push({ image: createImageBlock(c.mimeType, c.data) });\n\t\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t\tdefault:\n\t\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t\t}\n\t\t\t\t\t}\n\t\t\t\t\tif (content.length === 0) content.push({ text: EMPTY_TEXT_PLACEHOLDER });\n\t\t\t\t}\n\t\t\t\tresult.push({\n\t\t\t\t\trole: ConversationRole.USER,\n\t\t\t\t\tcontent,\n\t\t\t\t});\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"assistant\": {\n\t\t\t\t// Skip assistant messages with empty content (e.g., from aborted requests)\n\t\t\t\t// Bedrock rejects messages with empty content arrays\n\t\t\t\tif (m.content.length === 0) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tconst contentBlocks: ContentBlock[] = [];\n\t\t\t\tfor (const c of m.content) {\n\t\t\t\t\tswitch (c.type) {\n\t\t\t\t\t\tcase \"text\": {\n\t\t\t\t\t\t\t// Skip empty text blocks\n\t\t\t\t\t\t\tconst textBlock = createNonBlankTextBlock(c.text);\n\t\t\t\t\t\t\tif (!textBlock) continue;\n\t\t\t\t\t\t\tcontentBlocks.push(textBlock);\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tcase \"toolCall\":\n\t\t\t\t\t\t\tcontentBlocks.push({\n\t\t\t\t\t\t\t\ttoolUse: { toolUseId: c.id, name: c.name, input: c.arguments },\n\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\tcase \"thinking\": {\n\t\t\t\t\t\t\t// Skip empty thinking blocks\n\t\t\t\t\t\t\tconst thinking = sanitizeSurrogates(c.thinking);\n\t\t\t\t\t\t\tif (thinking.trim().length === 0) continue;\n\t\t\t\t\t\t\t// Only Anthropic models support the signature field in reasoningText.\n\t\t\t\t\t\t\t// For other models, we omit the signature to avoid errors like:\n\t\t\t\t\t\t\t// \"This model doesn't support the reasoningContent.reasoningText.signature field\"\n\t\t\t\t\t\t\tif (supportsThinkingSignature(model)) {\n\t\t\t\t\t\t\t\t// Signatures arrive after thinking deltas. If a partial or externally\n\t\t\t\t\t\t\t\t// persisted message lacks a signature, Bedrock rejects the replayed\n\t\t\t\t\t\t\t\t// reasoning block. Fall back to plain text, matching Anthropic.\n\t\t\t\t\t\t\t\tif (!c.thinkingSignature || c.thinkingSignature.trim().length === 0) {\n\t\t\t\t\t\t\t\t\tcontentBlocks.push({ text: thinking });\n\t\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\t\tcontentBlocks.push({\n\t\t\t\t\t\t\t\t\t\treasoningContent: {\n\t\t\t\t\t\t\t\t\t\t\treasoningText: {\n\t\t\t\t\t\t\t\t\t\t\t\ttext: thinking,\n\t\t\t\t\t\t\t\t\t\t\t\tsignature: c.thinkingSignature,\n\t\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\t} else {\n\t\t\t\t\t\t\t\tcontentBlocks.push({\n\t\t\t\t\t\t\t\t\treasoningContent: {\n\t\t\t\t\t\t\t\t\t\treasoningText: { text: thinking },\n\t\t\t\t\t\t\t\t\t},\n\t\t\t\t\t\t\t\t});\n\t\t\t\t\t\t\t}\n\t\t\t\t\t\t\tbreak;\n\t\t\t\t\t\t}\n\t\t\t\t\t\tdefault:\n\t\t\t\t\t\t\tcontinue;\n\t\t\t\t\t}\n\t\t\t\t}\n\t\t\t\t// Skip if all content blocks were filtered out\n\t\t\t\tif (contentBlocks.length === 0) {\n\t\t\t\t\tcontinue;\n\t\t\t\t}\n\t\t\t\tresult.push({\n\t\t\t\t\trole: ConversationRole.ASSISTANT,\n\t\t\t\t\tcontent: contentBlocks,\n\t\t\t\t});\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tcase \"toolResult\": {\n\t\t\t\t// Collect all consecutive toolResult messages into a single user message\n\t\t\t\t// Bedrock requires all tool results to be in one message\n\t\t\t\tconst toolResults: ContentBlock.ToolResultMember[] = [];\n\n\t\t\t\t// Add current tool result with all content blocks combined\n\t\t\t\ttoolResults.push({\n\t\t\t\t\ttoolResult: {\n\t\t\t\t\t\ttoolUseId: m.toolCallId,\n\t\t\t\t\t\tcontent: convertToolResultContent(m.content),\n\t\t\t\t\t\tstatus: m.isError ? ToolResultStatus.ERROR : ToolResultStatus.SUCCESS,\n\t\t\t\t\t},\n\t\t\t\t});\n\n\t\t\t\t// Look ahead for consecutive toolResult messages\n\t\t\t\tlet j = i + 1;\n\t\t\t\twhile (j < transformedMessages.length && transformedMessages[j].role === \"toolResult\") {\n\t\t\t\t\tconst nextMsg = transformedMessages[j] as ToolResultMessage;\n\t\t\t\t\ttoolResults.push({\n\t\t\t\t\t\ttoolResult: {\n\t\t\t\t\t\t\ttoolUseId: nextMsg.toolCallId,\n\t\t\t\t\t\t\tcontent: convertToolResultContent(nextMsg.content),\n\t\t\t\t\t\t\tstatus: nextMsg.isError ? ToolResultStatus.ERROR : ToolResultStatus.SUCCESS,\n\t\t\t\t\t\t},\n\t\t\t\t\t});\n\t\t\t\t\tj++;\n\t\t\t\t}\n\n\t\t\t\t// Skip the messages we've already processed\n\t\t\t\ti = j - 1;\n\n\t\t\t\tresult.push({\n\t\t\t\t\trole: ConversationRole.USER,\n\t\t\t\t\tcontent: toolResults,\n\t\t\t\t});\n\t\t\t\tbreak;\n\t\t\t}\n\t\t\tdefault:\n\t\t\t\tcontinue;\n\t\t}\n\t}\n\n\t// Add cache point to the last user message for supported Claude models when caching is enabled\n\tif (cacheRetention !== \"none\" && supportsPromptCaching(model) && result.length > 0) {\n\t\tconst lastMessage = result[result.length - 1];\n\t\tif (lastMessage.role === ConversationRole.USER && lastMessage.content) {\n\t\t\t(lastMessage.content as ContentBlock[]).push({\n\t\t\t\tcachePoint: {\n\t\t\t\t\ttype: CachePointType.DEFAULT,\n\t\t\t\t\t...(cacheRetention === \"long\" ? { ttl: CacheTTL.ONE_HOUR } : {}),\n\t\t\t\t},\n\t\t\t});\n\t\t}\n\t}\n\n\treturn result;\n}\n\nfunction convertToolConfig(\n\ttools: Tool[] | undefined,\n\ttoolChoice: BedrockOptions[\"toolChoice\"],\n): ToolConfiguration | undefined {\n\tif (!tools?.length || toolChoice === \"none\") return undefined;\n\n\tconst bedrockTools: BedrockTool[] = tools.map((tool) => ({\n\t\ttoolSpec: {\n\t\t\tname: tool.name,\n\t\t\tdescription: tool.description,\n\t\t\tinputSchema: { json: tool.parameters as unknown as DocumentType },\n\t\t},\n\t}));\n\n\tlet bedrockToolChoice: ToolChoice | undefined;\n\tswitch (toolChoice) {\n\t\tcase \"auto\":\n\t\t\tbedrockToolChoice = { auto: {} };\n\t\t\tbreak;\n\t\tcase \"any\":\n\t\t\tbedrockToolChoice = { any: {} };\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tif (toolChoice?.type === \"tool\") {\n\t\t\t\tbedrockToolChoice = { tool: { name: toolChoice.name } };\n\t\t\t}\n\t}\n\n\treturn { tools: bedrockTools, toolChoice: bedrockToolChoice };\n}\n\nfunction mapStopReason(reason: string | undefined): StopReason {\n\tswitch (reason) {\n\t\tcase BedrockStopReason.END_TURN:\n\t\tcase BedrockStopReason.STOP_SEQUENCE:\n\t\t\treturn \"stop\";\n\t\tcase BedrockStopReason.MAX_TOKENS:\n\t\tcase BedrockStopReason.MODEL_CONTEXT_WINDOW_EXCEEDED:\n\t\t\treturn \"length\";\n\t\tcase BedrockStopReason.TOOL_USE:\n\t\t\treturn \"toolUse\";\n\t\tdefault:\n\t\t\treturn \"error\";\n\t}\n}\n\nfunction getConfiguredBedrockRegion(options: BedrockOptions): string | undefined {\n\tif (typeof process === \"undefined\") {\n\t\treturn options.region;\n\t}\n\n\treturn options.region || process.env.AWS_REGION || process.env.AWS_DEFAULT_REGION || undefined;\n}\n\nfunction hasConfiguredBedrockProfile(): boolean {\n\tif (typeof process === \"undefined\") {\n\t\treturn false;\n\t}\n\n\treturn Boolean(process.env.AWS_PROFILE);\n}\n\nfunction getStandardBedrockEndpointRegion(baseUrl: string | undefined): string | undefined {\n\tif (!baseUrl) {\n\t\treturn undefined;\n\t}\n\n\ttry {\n\t\tconst { hostname } = new URL(baseUrl);\n\t\tconst match = hostname.toLowerCase().match(/^bedrock-runtime(?:-fips)?\\.([a-z0-9-]+)\\.amazonaws\\.com(?:\\.cn)?$/);\n\t\treturn match?.[1];\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nfunction shouldUseExplicitBedrockEndpoint(\n\tbaseUrl: string,\n\tconfiguredRegion: string | undefined,\n\thasConfiguredProfile: boolean,\n): boolean {\n\tconst endpointRegion = getStandardBedrockEndpointRegion(baseUrl);\n\tif (!endpointRegion) {\n\t\treturn true;\n\t}\n\n\treturn !configuredRegion && !hasConfiguredProfile;\n}\n\nfunction isGovCloudBedrockTarget(model: Model<\"bedrock-converse-stream\">, options: BedrockOptions): boolean {\n\tconst region = getConfiguredBedrockRegion(options);\n\tif (region?.toLowerCase().startsWith(\"us-gov-\")) {\n\t\treturn true;\n\t}\n\n\tconst modelId = model.id.toLowerCase();\n\treturn modelId.startsWith(\"us-gov.\") || modelId.startsWith(\"arn:aws-us-gov:\");\n}\n\nfunction buildAdditionalModelRequestFields(\n\tmodel: Model<\"bedrock-converse-stream\">,\n\toptions: BedrockOptions,\n): Record<string, any> | undefined {\n\tif (!options.reasoning || !model.reasoning) {\n\t\treturn undefined;\n\t}\n\n\tif (isAnthropicClaudeModel(model)) {\n\t\t// GovCloud Bedrock currently rejects the Claude thinking.display field.\n\t\t// Omit it there until the GovCloud Converse schema catches up.\n\t\tconst display = isGovCloudBedrockTarget(model, options) ? undefined : (options.thinkingDisplay ?? \"summarized\");\n\t\tconst result: Record<string, any> = supportsAdaptiveThinking(model.id, model.name)\n\t\t\t? {\n\t\t\t\t\tthinking: { type: \"adaptive\", ...(display !== undefined ? { display } : {}) },\n\t\t\t\t\toutput_config: { effort: mapThinkingLevelToEffort(model, options.reasoning) },\n\t\t\t\t}\n\t\t\t: (() => {\n\t\t\t\t\tconst defaultBudgets: Record<ThinkingLevel, number> = {\n\t\t\t\t\t\tminimal: 1024,\n\t\t\t\t\t\tlow: 2048,\n\t\t\t\t\t\tmedium: 8192,\n\t\t\t\t\t\thigh: 16384,\n\t\t\t\t\t\txhigh: 16384, // Claude doesn't support xhigh, clamp to high\n\t\t\t\t\t};\n\n\t\t\t\t\t// Custom budgets override defaults (xhigh not in ThinkingBudgets, use high)\n\t\t\t\t\tconst level = options.reasoning === \"xhigh\" ? \"high\" : options.reasoning;\n\t\t\t\t\tconst budget = options.thinkingBudgets?.[level] ?? defaultBudgets[options.reasoning];\n\n\t\t\t\t\treturn {\n\t\t\t\t\t\tthinking: {\n\t\t\t\t\t\t\ttype: \"enabled\",\n\t\t\t\t\t\t\tbudget_tokens: budget,\n\t\t\t\t\t\t\t...(display !== undefined ? { display } : {}),\n\t\t\t\t\t\t},\n\t\t\t\t\t};\n\t\t\t\t})();\n\n\t\tif (!supportsAdaptiveThinking(model.id, model.name) && (options.interleavedThinking ?? true)) {\n\t\t\tresult.anthropic_beta = [\"interleaved-thinking-2025-05-14\"];\n\t\t}\n\n\t\treturn result;\n\t}\n\n\treturn undefined;\n}\n\nfunction createImageBlock(mimeType: string, data: string) {\n\tlet format: ImageFormat;\n\tswitch (mimeType) {\n\t\tcase \"image/jpeg\":\n\t\tcase \"image/jpg\":\n\t\t\tformat = ImageFormat.JPEG;\n\t\t\tbreak;\n\t\tcase \"image/png\":\n\t\t\tformat = ImageFormat.PNG;\n\t\t\tbreak;\n\t\tcase \"image/gif\":\n\t\t\tformat = ImageFormat.GIF;\n\t\t\tbreak;\n\t\tcase \"image/webp\":\n\t\t\tformat = ImageFormat.WEBP;\n\t\t\tbreak;\n\t\tdefault:\n\t\t\tthrow new Error(`Unknown image type: ${mimeType}`);\n\t}\n\n\tconst binaryString = atob(data);\n\tconst bytes = new Uint8Array(binaryString.length);\n\tfor (let i = 0; i < binaryString.length; i++) {\n\t\tbytes[i] = binaryString.charCodeAt(i);\n\t}\n\n\treturn { source: { bytes }, format };\n}\n"]}