openai 7.24.0 → 7.26.0

package/helpers/beta/agents/standard-schema.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.standardAgentTextFormat = standardAgentTextFormat;
+const standard_schema_1 = require("../../standard-schema.js");
+const output_format_1 = require("../../../lib/beta/agents/output-format.js");
+/** Beta: bind a synchronous Standard Schema validator to Agents output. */
+function standardAgentTextFormat(schema, jsonSchema) {
+    const format = (0, standard_schema_1.standardTextFormat)(schema, 'agent_output', { schema: jsonSchema });
+    // SAFETY: The native Responses helper owns Standard Schema conversion and validation.
+    return (0, output_format_1.agentOutputFormat)(format.schema, format.$parseRaw);
+}
+//# sourceMappingURL=standard-schema.js.map

package/helpers/beta/agents/standard-schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-schema.js","sourceRoot":"","sources":["../../../src/helpers/beta/agents/standard-schema.ts"],"names":[],"mappings":";;AAKA,0DAOC;AAZD,8DAA2D;AAE3D,6EAA2E;AAE3E,2EAA2E;AAC3E,SAAgB,uBAAuB,CACrC,MAAS,EACT,UAAuB;IAEvB,MAAM,MAAM,GAAG,IAAA,oCAAkB,EAAC,MAAM,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAClF,sFAAsF;IACtF,OAAO,IAAA,iCAAiB,EAAC,MAAM,CAAC,MAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAC1E,CAAC"}

package/helpers/beta/agents/standard-schema.mjs

@@ -0,0 +1,9 @@
+import { standardTextFormat } from "../../standard-schema.mjs";
+import { agentOutputFormat } from "../../../lib/beta/agents/output-format.mjs";
+/** Beta: bind a synchronous Standard Schema validator to Agents output. */
+export function standardAgentTextFormat(schema, jsonSchema) {
+    const format = standardTextFormat(schema, 'agent_output', { schema: jsonSchema });
+    // SAFETY: The native Responses helper owns Standard Schema conversion and validation.
+    return agentOutputFormat(format.schema, format.$parseRaw);
+}
+//# sourceMappingURL=standard-schema.mjs.map

package/helpers/beta/agents/standard-schema.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"standard-schema.mjs","sourceRoot":"","sources":["../../../src/helpers/beta/agents/standard-schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,kBAAkB,EAAE,kCAA8B;AAE3D,OAAO,EAAE,iBAAiB,EAAE,mDAA+C;AAE3E,2EAA2E;AAC3E,MAAM,UAAU,uBAAuB,CACrC,MAAS,EACT,UAAuB;IAEvB,MAAM,MAAM,GAAG,kBAAkB,CAAC,MAAM,EAAE,cAAc,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC;IAClF,sFAAsF;IACtF,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAC1E,CAAC"}

package/helpers/beta/agents/zod.d.mts

@@ -0,0 +1,10 @@
+import { zodTextFormat } from "../../zod.mjs";
+/** Beta: bind a Zod v3/v4/Mini schema to an Agents text format and completed result. */
+export declare function zodAgentTextFormat<S extends Parameters<typeof zodTextFormat>[0]>(schema: S): import("../../../lib/beta/agents/output-format-types.mjs").AgentOutputFormat<S extends {
+    _output: infer Output;
+} ? Output : S extends {
+    _zod: {
+        output: infer Output_1;
+    };
+} ? Output_1 : never>;
+//# sourceMappingURL=zod.d.mts.map

package/helpers/beta/agents/zod.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod.d.mts","sourceRoot":"","sources":["../../../src/helpers/beta/agents/zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,sBAAkB;AAI1C,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;;;;;;sBAI1F"}

package/helpers/beta/agents/zod.d.ts

@@ -0,0 +1,10 @@
+import { zodTextFormat } from "../../zod.js";
+/** Beta: bind a Zod v3/v4/Mini schema to an Agents text format and completed result. */
+export declare function zodAgentTextFormat<S extends Parameters<typeof zodTextFormat>[0]>(schema: S): import("../../../lib/beta/agents/output-format-types.js").AgentOutputFormat<S extends {
+    _output: infer Output;
+} ? Output : S extends {
+    _zod: {
+        output: infer Output_1;
+    };
+} ? Output_1 : never>;
+//# sourceMappingURL=zod.d.ts.map

package/helpers/beta/agents/zod.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod.d.ts","sourceRoot":"","sources":["../../../src/helpers/beta/agents/zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,qBAAkB;AAI1C,wFAAwF;AACxF,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,UAAU,CAAC,OAAO,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC;;;;;;sBAI1F"}

package/helpers/beta/agents/zod.js

@@ -0,0 +1,12 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.zodAgentTextFormat = zodAgentTextFormat;
+const zod_1 = require("../../zod.js");
+const output_format_1 = require("../../../lib/beta/agents/output-format.js");
+/** Beta: bind a Zod v3/v4/Mini schema to an Agents text format and completed result. */
+function zodAgentTextFormat(schema) {
+    const format = (0, zod_1.zodTextFormat)(schema, 'agent_output');
+    // SAFETY: The native Responses helper owns Zod schema conversion and validation.
+    return (0, output_format_1.agentOutputFormat)(format.schema, format.$parseRaw);
+}
+//# sourceMappingURL=zod.js.map

package/helpers/beta/agents/zod.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod.js","sourceRoot":"","sources":["../../../src/helpers/beta/agents/zod.ts"],"names":[],"mappings":";;AAKA,gDAIC;AATD,sCAA0C;AAE1C,6EAA2E;AAE3E,wFAAwF;AACxF,SAAgB,kBAAkB,CAAgD,MAAS;IACzF,MAAM,MAAM,GAAG,IAAA,mBAAa,EAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,iFAAiF;IACjF,OAAO,IAAA,iCAAiB,EAAC,MAAM,CAAC,MAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAC1E,CAAC"}

package/helpers/beta/agents/zod.mjs

@@ -0,0 +1,9 @@
+import { zodTextFormat } from "../../zod.mjs";
+import { agentOutputFormat } from "../../../lib/beta/agents/output-format.mjs";
+/** Beta: bind a Zod v3/v4/Mini schema to an Agents text format and completed result. */
+export function zodAgentTextFormat(schema) {
+    const format = zodTextFormat(schema, 'agent_output');
+    // SAFETY: The native Responses helper owns Zod schema conversion and validation.
+    return agentOutputFormat(format.schema, format.$parseRaw);
+}
+//# sourceMappingURL=zod.mjs.map

package/helpers/beta/agents/zod.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"zod.mjs","sourceRoot":"","sources":["../../../src/helpers/beta/agents/zod.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,aAAa,EAAE,sBAAkB;AAE1C,OAAO,EAAE,iBAAiB,EAAE,mDAA+C;AAE3E,wFAAwF;AACxF,MAAM,UAAU,kBAAkB,CAAgD,MAAS;IACzF,MAAM,MAAM,GAAG,aAAa,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrD,iFAAiF;IACjF,OAAO,iBAAiB,CAAC,MAAM,CAAC,MAAoB,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;AAC1E,CAAC"}

package/internal/realtime-credentials.d.mts

@@ -1,4 +1,23 @@
 import type { OpenAI } from "../client.mjs";
+export interface DeferredAPIKeyCache {
+    client: Pick<OpenAI, 'apiKey'>;
+    providerKey?: string;
+    commit: () => string | null;
+}
+interface RealtimeAPIKeyCacheContext {
+    run: <T>(cache: DeferredAPIKeyCache | undefined, operation: () => T) => T;
+    getStore: () => DeferredAPIKeyCache | undefined;
+}
+declare const realtimeCacheContext: unique symbol;
+type CredentialClient = Pick<OpenAI, 'apiKey'> & {
+    [realtimeCacheContext]?: RealtimeAPIKeyCacheContext;
+};
+/** Installs the Node transport's invocation context without loading Node in the base client. @internal */
+export declare function setRealtimeAPIKeyCacheContext(context: RealtimeAPIKeyCacheContext): void;
+/** Reserves a deferred commit when the base hook is entered for this invocation. @internal */
+export declare function getDeferredRealtimeAPIKeyCache(client: CredentialClient): DeferredAPIKeyCache | undefined;
+/** Applies the Bedrock getter's validation when a captured credential does not enter the cache. @internal */
+export declare function validateCapturedAPIKey(client: Pick<OpenAI, 'apiKey'>, credential: string | null): string | null;
 /** Selects a captured credential without treating an explicit null as absent. @internal */
 export declare function getRealtimeAPIKey(client: Pick<OpenAI, 'apiKey'> | undefined, captured: string | null | undefined): string | null | undefined;
 /**
@@ -8,8 +27,10 @@ export declare function getRealtimeAPIKey(client: Pick<OpenAI, 'apiKey'> | undef
  * synchronizing concurrent credential updates.
  * @internal
  */
-export declare function resolveRealtimeAPIKey(client: Pick<OpenAI, 'apiKey' | '_callApiKey'>): Promise<{
+export declare function resolveRealtimeAPIKey(client: CredentialClient & Pick<OpenAI, '_callApiKey'>, deferCache?: boolean): Promise<{
     apiKey: string | null;
     isProvider: boolean;
+    commit: () => string | null;
 }>;
+export {};
 //# sourceMappingURL=realtime-credentials.d.mts.map

package/internal/realtime-credentials.d.mts.map

@@ -1 +1 @@
-{"version":3,"file":"realtime-credentials.d.mts","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,sBAAkB;AAExC,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,SAAS,EAC1C,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,GAAG,IAAI,GAAG,SAAS,CAE3B;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC;IACnG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC,CAMD"}
+{"version":3,"file":"realtime-credentials.d.mts","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,sBAAkB;AAIxC,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC7B;AACD,UAAU,0BAA0B;IAClC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,mBAAmB,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,QAAQ,EAAE,MAAM,mBAAmB,GAAG,SAAS,CAAC;CACjD;AAED,QAAA,MAAM,oBAAoB,eAAkD,CAAC;AAC7E,KAAK,gBAAgB,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG;IAC/C,CAAC,oBAAoB,CAAC,CAAC,EAAE,0BAA0B,CAAC;CACrD,CAAC;AAGF,0GAA0G;AAC1G,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,0BAA0B,GAAG,IAAI,CAEvF;AAED,8FAA8F;AAC9F,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,SAAS,CAGxG;AAED,6GAA6G;AAC7G,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,MAAM,GAAG,IAAI,CAKf;AAED,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,SAAS,EAC1C,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,GAAG,IAAI,GAAG,SAAS,CAE3B;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EACtD,UAAU,UAAQ,GACjB,OAAO,CAAC;IACT,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC,CA4BD"}

package/internal/realtime-credentials.d.ts

@@ -1,4 +1,23 @@
 import type { OpenAI } from "../client.js";
+export interface DeferredAPIKeyCache {
+    client: Pick<OpenAI, 'apiKey'>;
+    providerKey?: string;
+    commit: () => string | null;
+}
+interface RealtimeAPIKeyCacheContext {
+    run: <T>(cache: DeferredAPIKeyCache | undefined, operation: () => T) => T;
+    getStore: () => DeferredAPIKeyCache | undefined;
+}
+declare const realtimeCacheContext: unique symbol;
+type CredentialClient = Pick<OpenAI, 'apiKey'> & {
+    [realtimeCacheContext]?: RealtimeAPIKeyCacheContext;
+};
+/** Installs the Node transport's invocation context without loading Node in the base client. @internal */
+export declare function setRealtimeAPIKeyCacheContext(context: RealtimeAPIKeyCacheContext): void;
+/** Reserves a deferred commit when the base hook is entered for this invocation. @internal */
+export declare function getDeferredRealtimeAPIKeyCache(client: CredentialClient): DeferredAPIKeyCache | undefined;
+/** Applies the Bedrock getter's validation when a captured credential does not enter the cache. @internal */
+export declare function validateCapturedAPIKey(client: Pick<OpenAI, 'apiKey'>, credential: string | null): string | null;
 /** Selects a captured credential without treating an explicit null as absent. @internal */
 export declare function getRealtimeAPIKey(client: Pick<OpenAI, 'apiKey'> | undefined, captured: string | null | undefined): string | null | undefined;
 /**
@@ -8,8 +27,10 @@ export declare function getRealtimeAPIKey(client: Pick<OpenAI, 'apiKey'> | undef
  * synchronizing concurrent credential updates.
  * @internal
  */
-export declare function resolveRealtimeAPIKey(client: Pick<OpenAI, 'apiKey' | '_callApiKey'>): Promise<{
+export declare function resolveRealtimeAPIKey(client: CredentialClient & Pick<OpenAI, '_callApiKey'>, deferCache?: boolean): Promise<{
     apiKey: string | null;
     isProvider: boolean;
+    commit: () => string | null;
 }>;
+export {};
 //# sourceMappingURL=realtime-credentials.d.ts.map

package/internal/realtime-credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"realtime-credentials.d.ts","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,qBAAkB;AAExC,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,SAAS,EAC1C,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,GAAG,IAAI,GAAG,SAAS,CAE3B;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,GAAG,aAAa,CAAC,GAAG,OAAO,CAAC;IACnG,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;CACrB,CAAC,CAMD"}
+{"version":3,"file":"realtime-credentials.d.ts","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,qBAAkB;AAIxC,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC/B,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC7B;AACD,UAAU,0BAA0B;IAClC,GAAG,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,mBAAmB,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC;IAC1E,QAAQ,EAAE,MAAM,mBAAmB,GAAG,SAAS,CAAC;CACjD;AAED,QAAA,MAAM,oBAAoB,eAAkD,CAAC;AAC7E,KAAK,gBAAgB,GAAG,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG;IAC/C,CAAC,oBAAoB,CAAC,CAAC,EAAE,0BAA0B,CAAC;CACrD,CAAC;AAGF,0GAA0G;AAC1G,wBAAgB,6BAA6B,CAAC,OAAO,EAAE,0BAA0B,GAAG,IAAI,CAEvF;AAED,8FAA8F;AAC9F,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,gBAAgB,GAAG,mBAAmB,GAAG,SAAS,CAGxG;AAED,6GAA6G;AAC7G,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,EAC9B,UAAU,EAAE,MAAM,GAAG,IAAI,GACxB,MAAM,GAAG,IAAI,CAKf;AAED,2FAA2F;AAC3F,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,QAAQ,CAAC,GAAG,SAAS,EAC1C,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAClC,MAAM,GAAG,IAAI,GAAG,SAAS,CAE3B;AAED;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EACtD,UAAU,UAAQ,GACjB,OAAO,CAAC;IACT,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,UAAU,EAAE,OAAO,CAAC;IACpB,MAAM,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC7B,CAAC,CA4BD"}

package/internal/realtime-credentials.js

@@ -1,7 +1,30 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.setRealtimeAPIKeyCacheContext = setRealtimeAPIKeyCacheContext;
+exports.getDeferredRealtimeAPIKeyCache = getDeferredRealtimeAPIKeyCache;
+exports.validateCapturedAPIKey = validateCapturedAPIKey;
 exports.getRealtimeAPIKey = getRealtimeAPIKey;
 exports.resolveRealtimeAPIKey = resolveRealtimeAPIKey;
+const bedrock_1 = require("./bedrock.js");
+// Only the key crosses module formats: the context belongs to each participating client.
+const realtimeCacheContext = Symbol.for('openai.realtimeAPIKeyCacheContext');
+let cacheContext;
+/** Installs the Node transport's invocation context without loading Node in the base client. @internal */
+function setRealtimeAPIKeyCacheContext(context) {
+    cacheContext = context;
+}
+/** Reserves a deferred commit when the base hook is entered for this invocation. @internal */
+function getDeferredRealtimeAPIKeyCache(client) {
+    const deferred = client[realtimeCacheContext]?.getStore();
+    return deferred?.client === client ? deferred : undefined;
+}
+/** Applies the Bedrock getter's validation when a captured credential does not enter the cache. @internal */
+function validateCapturedAPIKey(client, credential) {
+    if (credential !== null && bedrock_1.brand_privateBedrockClient in client) {
+        (0, bedrock_1.assertValidBedrockBearerCredential)(credential);
+    }
+    return credential;
+}
 /** Selects a captured credential without treating an explicit null as absent. @internal */
 function getRealtimeAPIKey(client, captured) {
     return captured === undefined ? client?.apiKey : captured;
@@ -13,11 +36,32 @@ function getRealtimeAPIKey(client, captured) {
  * synchronizing concurrent credential updates.
  * @internal
  */
-async function resolveRealtimeAPIKey(client) {
+async function resolveRealtimeAPIKey(client, deferCache = false) {
     let apiKey;
-    const isProvider = await client._callApiKey((resolved) => {
+    const current = {
+        client,
+        commit: () => (apiKey === undefined ? client.apiKey : apiKey),
+    };
+    const capture = (resolved) => {
         apiKey = resolved;
-    });
-    return { apiKey: apiKey === undefined ? client.apiKey : apiKey, isProvider };
+    };
+    const invoke = () => client._callApiKey(capture);
+    const context = client[realtimeCacheContext] ?? cacheContext;
+    if (deferCache && context && !client[realtimeCacheContext]) {
+        Object.defineProperty(client, realtimeCacheContext, { value: context });
+    }
+    // An HTTP or ordinary Realtime request nested inside a WebSocket hook owns its own cache writes.
+    const isProvider = await (context ? context.run(deferCache ? current : undefined, invoke) : invoke());
+    return {
+        apiKey: apiKey === undefined ? client.apiKey : apiKey,
+        isProvider,
+        commit: () => {
+            const hookKey = current.providerKey !== undefined && apiKey !== undefined && apiKey !== current.providerKey
+                ? validateCapturedAPIKey(client, apiKey)
+                : undefined;
+            const cached = current.commit();
+            return hookKey === undefined ? validateCapturedAPIKey(client, cached) : hookKey;
+        },
+    };
 }
 //# sourceMappingURL=realtime-credentials.js.map

package/internal/realtime-credentials.js.map

@@ -1 +1 @@
-{"version":3,"file":"realtime-credentials.js","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":";;AAGA,8CAKC;AASD,sDASC;AAxBD,2FAA2F;AAC3F,SAAgB,iBAAiB,CAC/B,MAA0C,EAC1C,QAAmC;IAEnC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,qBAAqB,CAAC,MAA8C;IAIxF,IAAI,MAAiC,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvD,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"realtime-credentials.js","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":";;AAqBA,sEAEC;AAGD,wEAGC;AAGD,wDAQC;AAGD,8CAKC;AASD,sDAmCC;AA3FD,0CAA2F;AAY3F,yFAAyF;AACzF,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAI7E,IAAI,YAAoD,CAAC;AAEzD,0GAA0G;AAC1G,SAAgB,6BAA6B,CAAC,OAAmC;IAC/E,YAAY,GAAG,OAAO,CAAC;AACzB,CAAC;AAED,8FAA8F;AAC9F,SAAgB,8BAA8B,CAAC,MAAwB;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC1D,OAAO,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,6GAA6G;AAC7G,SAAgB,sBAAsB,CACpC,MAA8B,EAC9B,UAAyB;IAEzB,IAAI,UAAU,KAAK,IAAI,IAAI,oCAA0B,IAAI,MAAM,EAAE,CAAC;QAChE,IAAA,4CAAkC,EAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,2FAA2F;AAC3F,SAAgB,iBAAiB,CAC/B,MAA0C,EAC1C,QAAmC;IAEnC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACI,KAAK,UAAU,qBAAqB,CACzC,MAAsD,EACtD,UAAU,GAAG,KAAK;IAMlB,IAAI,MAAiC,CAAC;IACtC,MAAM,OAAO,GAAwB;QACnC,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;KAC9D,CAAC;IACF,MAAM,OAAO,GAAkB,CAAC,QAAQ,EAAE,EAAE;QAC1C,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,CAAC,IAAI,YAAY,CAAC;IAC7D,IAAI,UAAU,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,iGAAiG;IACjG,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtG,OAAO;QACL,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACrD,UAAU;QACV,MAAM,EAAE,GAAG,EAAE;YACX,MAAM,OAAO,GACX,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,WAAW;gBACzF,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAClF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/internal/realtime-credentials.mjs

@@ -1,3 +1,23 @@
+import { assertValidBedrockBearerCredential, brand_privateBedrockClient } from "./bedrock.mjs";
+// Only the key crosses module formats: the context belongs to each participating client.
+const realtimeCacheContext = Symbol.for('openai.realtimeAPIKeyCacheContext');
+let cacheContext;
+/** Installs the Node transport's invocation context without loading Node in the base client. @internal */
+export function setRealtimeAPIKeyCacheContext(context) {
+    cacheContext = context;
+}
+/** Reserves a deferred commit when the base hook is entered for this invocation. @internal */
+export function getDeferredRealtimeAPIKeyCache(client) {
+    const deferred = client[realtimeCacheContext]?.getStore();
+    return deferred?.client === client ? deferred : undefined;
+}
+/** Applies the Bedrock getter's validation when a captured credential does not enter the cache. @internal */
+export function validateCapturedAPIKey(client, credential) {
+    if (credential !== null && brand_privateBedrockClient in client) {
+        assertValidBedrockBearerCredential(credential);
+    }
+    return credential;
+}
 /** Selects a captured credential without treating an explicit null as absent. @internal */
 export function getRealtimeAPIKey(client, captured) {
     return captured === undefined ? client?.apiKey : captured;
@@ -9,11 +29,32 @@ export function getRealtimeAPIKey(client, captured) {
  * synchronizing concurrent credential updates.
  * @internal
  */
-export async function resolveRealtimeAPIKey(client) {
+export async function resolveRealtimeAPIKey(client, deferCache = false) {
     let apiKey;
-    const isProvider = await client._callApiKey((resolved) => {
+    const current = {
+        client,
+        commit: () => (apiKey === undefined ? client.apiKey : apiKey),
+    };
+    const capture = (resolved) => {
         apiKey = resolved;
-    });
-    return { apiKey: apiKey === undefined ? client.apiKey : apiKey, isProvider };
+    };
+    const invoke = () => client._callApiKey(capture);
+    const context = client[realtimeCacheContext] ?? cacheContext;
+    if (deferCache && context && !client[realtimeCacheContext]) {
+        Object.defineProperty(client, realtimeCacheContext, { value: context });
+    }
+    // An HTTP or ordinary Realtime request nested inside a WebSocket hook owns its own cache writes.
+    const isProvider = await (context ? context.run(deferCache ? current : undefined, invoke) : invoke());
+    return {
+        apiKey: apiKey === undefined ? client.apiKey : apiKey,
+        isProvider,
+        commit: () => {
+            const hookKey = current.providerKey !== undefined && apiKey !== undefined && apiKey !== current.providerKey
+                ? validateCapturedAPIKey(client, apiKey)
+                : undefined;
+            const cached = current.commit();
+            return hookKey === undefined ? validateCapturedAPIKey(client, cached) : hookKey;
+        },
+    };
 }
 //# sourceMappingURL=realtime-credentials.mjs.map

package/internal/realtime-credentials.mjs.map

@@ -1 +1 @@
-{"version":3,"file":"realtime-credentials.mjs","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":"AAEA,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAC/B,MAA0C,EAC1C,QAAmC;IAEnC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAA8C;IAIxF,IAAI,MAAiC,CAAC;IACtC,MAAM,UAAU,GAAG,MAAM,MAAM,CAAC,WAAW,CAAC,CAAC,QAAQ,EAAE,EAAE;QACvD,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC,CAAC,CAAC;IACH,OAAO,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,UAAU,EAAE,CAAC;AAC/E,CAAC"}
+{"version":3,"file":"realtime-credentials.mjs","sourceRoot":"","sources":["../src/internal/realtime-credentials.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kCAAkC,EAAE,0BAA0B,EAAE,sBAAkB;AAY3F,yFAAyF;AACzF,MAAM,oBAAoB,GAAG,MAAM,CAAC,GAAG,CAAC,mCAAmC,CAAC,CAAC;AAI7E,IAAI,YAAoD,CAAC;AAEzD,0GAA0G;AAC1G,MAAM,UAAU,6BAA6B,CAAC,OAAmC;IAC/E,YAAY,GAAG,OAAO,CAAC;AACzB,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,8BAA8B,CAAC,MAAwB;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,oBAAoB,CAAC,EAAE,QAAQ,EAAE,CAAC;IAC1D,OAAO,QAAQ,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5D,CAAC;AAED,6GAA6G;AAC7G,MAAM,UAAU,sBAAsB,CACpC,MAA8B,EAC9B,UAAyB;IAEzB,IAAI,UAAU,KAAK,IAAI,IAAI,0BAA0B,IAAI,MAAM,EAAE,CAAC;QAChE,kCAAkC,CAAC,UAAU,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAC/B,MAA0C,EAC1C,QAAmC;IAEnC,OAAO,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC;AAC5D,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,MAAsD,EACtD,UAAU,GAAG,KAAK;IAMlB,IAAI,MAAiC,CAAC;IACtC,MAAM,OAAO,GAAwB;QACnC,MAAM;QACN,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC;KAC9D,CAAC;IACF,MAAM,OAAO,GAAkB,CAAC,QAAQ,EAAE,EAAE;QAC1C,MAAM,GAAG,QAAQ,CAAC;IACpB,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,MAAM,CAAC,oBAAoB,CAAC,IAAI,YAAY,CAAC;IAC7D,IAAI,UAAU,IAAI,OAAO,IAAI,CAAC,MAAM,CAAC,oBAAoB,CAAC,EAAE,CAAC;QAC3D,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,oBAAoB,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC,CAAC;IAC1E,CAAC;IACD,iGAAiG;IACjG,MAAM,UAAU,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC;IACtG,OAAO;QACL,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM;QACrD,UAAU;QACV,MAAM,EAAE,GAAG,EAAE;YACX,MAAM,OAAO,GACX,OAAO,CAAC,WAAW,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,OAAO,CAAC,WAAW;gBACzF,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC;gBACxC,CAAC,CAAC,SAAS,CAAC;YAChB,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;YAChC,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,sBAAsB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;QAClF,CAAC;KACF,CAAC;AACJ,CAAC"}

package/internal/responses-ws-credentials.d.mts

@@ -0,0 +1,23 @@
+import type { OpenAI } from "../client.mjs";
+import type { CredentialedWebSocketOptions } from "./ws.mjs";
+/** Per-connection Responses credential state shared by the stable and beta Node transports. */
+export declare class ResponsesWebSocketCredentials {
+    private initialAuthUsedAPIKey;
+    private initialAPIKey;
+    private prepared;
+    get preparedAPIKey(): string | null | undefined;
+    trackInitialHeaders(client: OpenAI, headers: Record<string, string>, hasSocket: () => boolean): void;
+    usesAPIKey(client: OpenAI, headers: Record<string, string>): boolean;
+    build<Options extends CredentialedWebSocketOptions>(client: OpenAI, authHeaders: Record<string, string>, options: Options | null | undefined, initialAuthUsedAPIKey?: boolean): {
+        headers: {
+            [k: string]: string;
+        };
+        followRedirects: boolean;
+    } & {
+        headers: {
+            [k: string]: string;
+        };
+    };
+    prepare<Socket, Options extends CredentialedWebSocketOptions>(client: OpenAI, socketOptions: Options | null | undefined, authHeaders: (apiKey?: string | null) => Record<string, string>, createSocket: (url: URL, headers: Record<string, string>) => Socket): Promise<(url: URL) => Socket>;
+}
+//# sourceMappingURL=responses-ws-credentials.d.mts.map

package/internal/responses-ws-credentials.d.mts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses-ws-credentials.d.mts","sourceRoot":"","sources":["../src/internal/responses-ws-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,sBAAkB;AAQxC,OAAO,KAAK,EAAE,4BAA4B,EAAE,iBAAa;AAyDzD,+FAA+F;AAC/F,qBAAa,6BAA6B;IACxC,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAMF;IAEd,IAAI,cAAc,IAAI,MAAM,GAAG,IAAI,GAAG,SAAS,CAE9C;IAED,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,GAAG,IAAI;IAMpG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO;IAoBpE,KAAK,CAAC,OAAO,SAAS,4BAA4B,EAChD,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACnC,qBAAqB,CAAC,EAAE,OAAO;;;;;;;;;;IAmB3B,OAAO,CAAC,MAAM,EAAE,OAAO,SAAS,4BAA4B,EAChE,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACzC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/D,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,GAClE,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;CAuBjC"}

package/internal/responses-ws-credentials.d.ts

@@ -0,0 +1,23 @@
+import type { OpenAI } from "../client.js";
+import type { CredentialedWebSocketOptions } from "./ws.js";
+/** Per-connection Responses credential state shared by the stable and beta Node transports. */
+export declare class ResponsesWebSocketCredentials {
+    private initialAuthUsedAPIKey;
+    private initialAPIKey;
+    private prepared;
+    get preparedAPIKey(): string | null | undefined;
+    trackInitialHeaders(client: OpenAI, headers: Record<string, string>, hasSocket: () => boolean): void;
+    usesAPIKey(client: OpenAI, headers: Record<string, string>): boolean;
+    build<Options extends CredentialedWebSocketOptions>(client: OpenAI, authHeaders: Record<string, string>, options: Options | null | undefined, initialAuthUsedAPIKey?: boolean): {
+        headers: {
+            [k: string]: string;
+        };
+        followRedirects: boolean;
+    } & {
+        headers: {
+            [k: string]: string;
+        };
+    };
+    prepare<Socket, Options extends CredentialedWebSocketOptions>(client: OpenAI, socketOptions: Options | null | undefined, authHeaders: (apiKey?: string | null) => Record<string, string>, createSocket: (url: URL, headers: Record<string, string>) => Socket): Promise<(url: URL) => Socket>;
+}
+//# sourceMappingURL=responses-ws-credentials.d.ts.map

package/internal/responses-ws-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses-ws-credentials.d.ts","sourceRoot":"","sources":["../src/internal/responses-ws-credentials.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,qBAAkB;AAQxC,OAAO,KAAK,EAAE,4BAA4B,EAAE,gBAAa;AAyDzD,+FAA+F;AAC/F,qBAAa,6BAA6B;IACxC,OAAO,CAAC,qBAAqB,CAAS;IACtC,OAAO,CAAC,aAAa,CAAqB;IAC1C,OAAO,CAAC,QAAQ,CAMF;IAEd,IAAI,cAAc,IAAI,MAAM,GAAG,IAAI,GAAG,SAAS,CAE9C;IAED,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,SAAS,EAAE,MAAM,OAAO,GAAG,IAAI;IAMpG,UAAU,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,OAAO;IAoBpE,KAAK,CAAC,OAAO,SAAS,4BAA4B,EAChD,MAAM,EAAE,MAAM,EACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EACnC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACnC,qBAAqB,CAAC,EAAE,OAAO;;;;;;;;;;IAmB3B,OAAO,CAAC,MAAM,EAAE,OAAO,SAAS,4BAA4B,EAChE,MAAM,EAAE,MAAM,EACd,aAAa,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,EACzC,WAAW,EAAE,CAAC,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,KAAK,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC/D,YAAY,EAAE,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,KAAK,MAAM,GAClE,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,KAAK,MAAM,CAAC;CAuBjC"}

package/internal/responses-ws-credentials.js

@@ -0,0 +1,108 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ResponsesWebSocketCredentials = void 0;
+const error_1 = require("../core/error.js");
+const realtime_credentials_1 = require("./realtime-credentials.js");
+const ws_1 = require("./ws.js");
+/**
+ * Keep caller credential admission distinct from the hook's final provider-key transform.
+ * The latter reuses captured base headers so no caller getters are reread after the refresh.
+ */
+function buildResponsesWebSocketOptions(client, authHeaders, options, prepared) {
+    if (prepared) {
+        return prepared.apiKey === undefined
+            ? (0, ws_1.mergeWebSocketAuthHeaders)(prepared.options, authHeaders, prepared.removedHeaders)
+            : (0, ws_1.buildWebSocketOptions)(client, authHeaders, prepared.options, prepared.removedHeaders, true);
+    }
+    if (!client._hasApiKeyProvider()) {
+        return (0, ws_1.buildWebSocketOptions)(client, authHeaders, options);
+    }
+    const removedHeaders = new Set();
+    const provided = (0, ws_1.buildWebSocketOptions)(client, {}, options, removedHeaders);
+    return (0, ws_1.snapshotWebSocketCredentials)(provided, ws_1.WEBSOCKET_METADATA_HEADERS)
+        ? provided
+        : (0, ws_1.buildWebSocketOptions)(client, authHeaders, provided, removedHeaders, true);
+}
+/**
+ * Classify reconnect credentials without treating the previous SDK key as a caller override.
+ * Capture routing and caller options before any asynchronous key refresh.
+ */
+function prepareResponsesWebSocketReconnect(client, socketOptions, initialAuthUsedAPIKey) {
+    const removedHeaders = new Set();
+    const options = (0, ws_1.buildWebSocketOptions)(client, {}, socketOptions, removedHeaders);
+    let authentication;
+    if ((0, ws_1.snapshotWebSocketCredentials)(options, ws_1.WEBSOCKET_METADATA_HEADERS)) {
+        authentication = 'provided';
+    }
+    else if (removedHeaders.has('authorization') ||
+        options.headers?.['authorization'] !== undefined ||
+        !initialAuthUsedAPIKey) {
+        authentication = 'cached';
+    }
+    else {
+        authentication = 'refresh';
+    }
+    return { options, removedHeaders, authentication };
+}
+/** Per-connection Responses credential state shared by the stable and beta Node transports. */
+class ResponsesWebSocketCredentials {
+    constructor() {
+        this.initialAuthUsedAPIKey = false;
+    }
+    get preparedAPIKey() {
+        return this.prepared?.apiKey;
+    }
+    trackInitialHeaders(client, headers, hasSocket) {
+        if (!hasSocket() && client._hasApiKeyProvider()) {
+            this.initialAPIKey = headers['Authorization']?.slice('Bearer '.length);
+        }
+    }
+    usesAPIKey(client, headers) {
+        // Hooks can read the SDK key without delegating. Only use an ordinary cached property here:
+        // invoking custom/Bedrock getters could validate credentials a caller-owned socket never sends.
+        const apiKey = this.initialAPIKey ??
+            (client._hasApiKeyProvider() ? Object.getOwnPropertyDescriptor(client, 'apiKey')?.value : undefined);
+        if (!apiKey) {
+            return false;
+        }
+        // Metadata containing a copy of a credential does not make it the socket's authentication.
+        return (0, ws_1.snapshotWebSocketCredentials)({
+            headers: Object.fromEntries(Object.entries(headers).map(([name, value]) => [name, value?.includes(apiKey) ? value : ''])),
+        }, ws_1.WEBSOCKET_METADATA_HEADERS);
+    }
+    build(client, authHeaders, options, initialAuthUsedAPIKey) {
+        if (initialAuthUsedAPIKey !== undefined) {
+            this.initialAuthUsedAPIKey = initialAuthUsedAPIKey;
+            this.initialAPIKey = undefined;
+        }
+        const socketOptions = buildResponsesWebSocketOptions(client, authHeaders, options, this.prepared);
+        if (client._hasApiKeyProvider() &&
+            !authHeaders['Authorization'] &&
+            !(0, ws_1.snapshotWebSocketCredentials)(socketOptions, ws_1.WEBSOCKET_METADATA_HEADERS)) {
+            throw new error_1.OpenAIError('Cannot open a Responses WebSocket with an unresolved function-based apiKey. Resolve it before constructing the WebSocket or provide explicit WebSocket credentials.');
+        }
+        return socketOptions;
+    }
+    async prepare(client, socketOptions, authHeaders, createSocket) {
+        const { options, removedHeaders, authentication } = prepareResponsesWebSocketReconnect(client, socketOptions, this.initialAuthUsedAPIKey);
+        const createPreparedSocket = (url, headers, apiKey) => {
+            const previous = this.prepared;
+            this.prepared = { options, removedHeaders, apiKey };
+            try {
+                // Resolve headers inside the scope so legacy zero-argument overrides see this attempt's key.
+                return createSocket(url, apiKey === undefined ? headers : authHeaders(apiKey));
+            }
+            finally {
+                this.prepared = previous;
+            }
+        };
+        if (authentication !== 'refresh') {
+            const headers = authentication === 'provided' ? {} : authHeaders();
+            return (url) => createPreparedSocket(url, headers);
+        }
+        const { commit } = await (0, realtime_credentials_1.resolveRealtimeAPIKey)(client, true);
+        return (url) => createPreparedSocket(url, {}, commit());
+    }
+}
+exports.ResponsesWebSocketCredentials = ResponsesWebSocketCredentials;
+//# sourceMappingURL=responses-ws-credentials.js.map

package/internal/responses-ws-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses-ws-credentials.js","sourceRoot":"","sources":["../src/internal/responses-ws-credentials.ts"],"names":[],"mappings":";;;AAAA,4CAA4C;AAE5C,oEAA+D;AAC/D,gCAKc;AAGd;;;GAGG;AACH,SAAS,8BAA8B,CACrC,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,QAIC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,IAAA,8BAAyB,EAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;YACnF,CAAC,CAAC,IAAA,0BAAqB,EAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACjC,OAAO,IAAA,0BAAqB,EAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,QAAQ,GAAG,IAAA,0BAAqB,EAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,IAAA,iCAA4B,EAAC,QAAQ,EAAE,+BAA0B,CAAC;QACvE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,IAAA,0BAAqB,EAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,SAAS,kCAAkC,CACzC,MAAc,EACd,aAAyC,EACzC,qBAA8B;IAE9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,OAAO,GAAG,IAAA,0BAAqB,EAAC,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACjF,IAAI,cAAiD,CAAC;IACtD,IAAI,IAAA,iCAA4B,EAAC,OAAO,EAAE,+BAA0B,CAAC,EAAE,CAAC;QACtE,cAAc,GAAG,UAAU,CAAC;IAC9B,CAAC;SAAM,IACL,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,KAAK,SAAS;QAChD,CAAC,qBAAqB,EACtB,CAAC;QACD,cAAc,GAAG,QAAQ,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,+FAA+F;AAC/F,MAAa,6BAA6B;IAA1C;QACU,0BAAqB,GAAG,KAAK,CAAC;IA2FxC,CAAC;IAjFC,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC/B,CAAC;IAED,mBAAmB,CAAC,MAAc,EAAE,OAA+B,EAAE,SAAwB;QAC3F,IAAI,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,OAA+B;QACxD,4FAA4F;QAC5F,gGAAgG;QAChG,MAAM,MAAM,GACV,IAAI,CAAC,aAAa;YAClB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,2FAA2F;QAC3F,OAAO,IAAA,iCAA4B,EACjC;YACE,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC7F;SACF,EACD,+BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,KAAK,CACH,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,qBAA+B;QAE/B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,MAAM,aAAa,GAAG,8BAA8B,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClG,IACE,MAAM,CAAC,kBAAkB,EAAE;YAC3B,CAAC,WAAW,CAAC,eAAe,CAAC;YAC7B,CAAC,IAAA,iCAA4B,EAAC,aAAa,EAAE,+BAA0B,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,mBAAW,CACnB,qKAAqK,CACtK,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,aAAyC,EACzC,WAA+D,EAC/D,YAAmE;QAEnE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,kCAAkC,CACpF,MAAM,EACN,aAAa,EACb,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACF,MAAM,oBAAoB,GAAG,CAAC,GAAQ,EAAE,OAA+B,EAAE,MAAsB,EAAE,EAAE;YACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,6FAA6F;gBAC7F,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,IAAA,4CAAqB,EAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF;AA5FD,sEA4FC"}

package/internal/responses-ws-credentials.mjs

@@ -0,0 +1,104 @@
+import { OpenAIError } from "../core/error.mjs";
+import { resolveRealtimeAPIKey } from "./realtime-credentials.mjs";
+import { buildWebSocketOptions, mergeWebSocketAuthHeaders, snapshotWebSocketCredentials, WEBSOCKET_METADATA_HEADERS, } from "./ws.mjs";
+/**
+ * Keep caller credential admission distinct from the hook's final provider-key transform.
+ * The latter reuses captured base headers so no caller getters are reread after the refresh.
+ */
+function buildResponsesWebSocketOptions(client, authHeaders, options, prepared) {
+    if (prepared) {
+        return prepared.apiKey === undefined
+            ? mergeWebSocketAuthHeaders(prepared.options, authHeaders, prepared.removedHeaders)
+            : buildWebSocketOptions(client, authHeaders, prepared.options, prepared.removedHeaders, true);
+    }
+    if (!client._hasApiKeyProvider()) {
+        return buildWebSocketOptions(client, authHeaders, options);
+    }
+    const removedHeaders = new Set();
+    const provided = buildWebSocketOptions(client, {}, options, removedHeaders);
+    return snapshotWebSocketCredentials(provided, WEBSOCKET_METADATA_HEADERS)
+        ? provided
+        : buildWebSocketOptions(client, authHeaders, provided, removedHeaders, true);
+}
+/**
+ * Classify reconnect credentials without treating the previous SDK key as a caller override.
+ * Capture routing and caller options before any asynchronous key refresh.
+ */
+function prepareResponsesWebSocketReconnect(client, socketOptions, initialAuthUsedAPIKey) {
+    const removedHeaders = new Set();
+    const options = buildWebSocketOptions(client, {}, socketOptions, removedHeaders);
+    let authentication;
+    if (snapshotWebSocketCredentials(options, WEBSOCKET_METADATA_HEADERS)) {
+        authentication = 'provided';
+    }
+    else if (removedHeaders.has('authorization') ||
+        options.headers?.['authorization'] !== undefined ||
+        !initialAuthUsedAPIKey) {
+        authentication = 'cached';
+    }
+    else {
+        authentication = 'refresh';
+    }
+    return { options, removedHeaders, authentication };
+}
+/** Per-connection Responses credential state shared by the stable and beta Node transports. */
+export class ResponsesWebSocketCredentials {
+    constructor() {
+        this.initialAuthUsedAPIKey = false;
+    }
+    get preparedAPIKey() {
+        return this.prepared?.apiKey;
+    }
+    trackInitialHeaders(client, headers, hasSocket) {
+        if (!hasSocket() && client._hasApiKeyProvider()) {
+            this.initialAPIKey = headers['Authorization']?.slice('Bearer '.length);
+        }
+    }
+    usesAPIKey(client, headers) {
+        // Hooks can read the SDK key without delegating. Only use an ordinary cached property here:
+        // invoking custom/Bedrock getters could validate credentials a caller-owned socket never sends.
+        const apiKey = this.initialAPIKey ??
+            (client._hasApiKeyProvider() ? Object.getOwnPropertyDescriptor(client, 'apiKey')?.value : undefined);
+        if (!apiKey) {
+            return false;
+        }
+        // Metadata containing a copy of a credential does not make it the socket's authentication.
+        return snapshotWebSocketCredentials({
+            headers: Object.fromEntries(Object.entries(headers).map(([name, value]) => [name, value?.includes(apiKey) ? value : ''])),
+        }, WEBSOCKET_METADATA_HEADERS);
+    }
+    build(client, authHeaders, options, initialAuthUsedAPIKey) {
+        if (initialAuthUsedAPIKey !== undefined) {
+            this.initialAuthUsedAPIKey = initialAuthUsedAPIKey;
+            this.initialAPIKey = undefined;
+        }
+        const socketOptions = buildResponsesWebSocketOptions(client, authHeaders, options, this.prepared);
+        if (client._hasApiKeyProvider() &&
+            !authHeaders['Authorization'] &&
+            !snapshotWebSocketCredentials(socketOptions, WEBSOCKET_METADATA_HEADERS)) {
+            throw new OpenAIError('Cannot open a Responses WebSocket with an unresolved function-based apiKey. Resolve it before constructing the WebSocket or provide explicit WebSocket credentials.');
+        }
+        return socketOptions;
+    }
+    async prepare(client, socketOptions, authHeaders, createSocket) {
+        const { options, removedHeaders, authentication } = prepareResponsesWebSocketReconnect(client, socketOptions, this.initialAuthUsedAPIKey);
+        const createPreparedSocket = (url, headers, apiKey) => {
+            const previous = this.prepared;
+            this.prepared = { options, removedHeaders, apiKey };
+            try {
+                // Resolve headers inside the scope so legacy zero-argument overrides see this attempt's key.
+                return createSocket(url, apiKey === undefined ? headers : authHeaders(apiKey));
+            }
+            finally {
+                this.prepared = previous;
+            }
+        };
+        if (authentication !== 'refresh') {
+            const headers = authentication === 'provided' ? {} : authHeaders();
+            return (url) => createPreparedSocket(url, headers);
+        }
+        const { commit } = await resolveRealtimeAPIKey(client, true);
+        return (url) => createPreparedSocket(url, {}, commit());
+    }
+}
+//# sourceMappingURL=responses-ws-credentials.mjs.map

package/internal/responses-ws-credentials.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"responses-ws-credentials.mjs","sourceRoot":"","sources":["../src/internal/responses-ws-credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,0BAAsB;AAE5C,OAAO,EAAE,qBAAqB,EAAE,mCAA+B;AAC/D,OAAO,EACL,qBAAqB,EACrB,yBAAyB,EACzB,4BAA4B,EAC5B,0BAA0B,GAC3B,iBAAa;AAGd;;;GAGG;AACH,SAAS,8BAA8B,CACrC,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,QAIC;IAED,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,QAAQ,CAAC,MAAM,KAAK,SAAS;YAClC,CAAC,CAAC,yBAAyB,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,EAAE,QAAQ,CAAC,cAAc,CAAC;YACnF,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,CAAC,OAAO,EAAE,QAAQ,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC;IAClG,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;QACjC,OAAO,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,MAAM,EAAE,EAAE,EAAE,OAAO,EAAE,cAAc,CAAC,CAAC;IAC5E,OAAO,4BAA4B,CAAC,QAAQ,EAAE,0BAA0B,CAAC;QACvE,CAAC,CAAC,QAAQ;QACV,CAAC,CAAC,qBAAqB,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;AACjF,CAAC;AAED;;;GAGG;AACH,SAAS,kCAAkC,CACzC,MAAc,EACd,aAAyC,EACzC,qBAA8B;IAE9B,MAAM,cAAc,GAAG,IAAI,GAAG,EAAU,CAAC;IACzC,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,EAAE,EAAE,EAAE,aAAa,EAAE,cAAc,CAAC,CAAC;IACjF,IAAI,cAAiD,CAAC;IACtD,IAAI,4BAA4B,CAAC,OAAO,EAAE,0BAA0B,CAAC,EAAE,CAAC;QACtE,cAAc,GAAG,UAAU,CAAC;IAC9B,CAAC;SAAM,IACL,cAAc,CAAC,GAAG,CAAC,eAAe,CAAC;QACnC,OAAO,CAAC,OAAO,EAAE,CAAC,eAAe,CAAC,KAAK,SAAS;QAChD,CAAC,qBAAqB,EACtB,CAAC;QACD,cAAc,GAAG,QAAQ,CAAC;IAC5B,CAAC;SAAM,CAAC;QACN,cAAc,GAAG,SAAS,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,CAAC;AACrD,CAAC;AAED,+FAA+F;AAC/F,MAAM,OAAO,6BAA6B;IAA1C;QACU,0BAAqB,GAAG,KAAK,CAAC;IA2FxC,CAAC;IAjFC,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC/B,CAAC;IAED,mBAAmB,CAAC,MAAc,EAAE,OAA+B,EAAE,SAAwB;QAC3F,IAAI,CAAC,SAAS,EAAE,IAAI,MAAM,CAAC,kBAAkB,EAAE,EAAE,CAAC;YAChD,IAAI,CAAC,aAAa,GAAG,OAAO,CAAC,eAAe,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;QACzE,CAAC;IACH,CAAC;IAED,UAAU,CAAC,MAAc,EAAE,OAA+B;QACxD,4FAA4F;QAC5F,gGAAgG;QAChG,MAAM,MAAM,GACV,IAAI,CAAC,aAAa;YAClB,CAAC,MAAM,CAAC,kBAAkB,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QACvG,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,OAAO,KAAK,CAAC;QACf,CAAC;QACD,2FAA2F;QAC3F,OAAO,4BAA4B,CACjC;YACE,OAAO,EAAE,MAAM,CAAC,WAAW,CACzB,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAC7F;SACF,EACD,0BAA0B,CAC3B,CAAC;IACJ,CAAC;IAED,KAAK,CACH,MAAc,EACd,WAAmC,EACnC,OAAmC,EACnC,qBAA+B;QAE/B,IAAI,qBAAqB,KAAK,SAAS,EAAE,CAAC;YACxC,IAAI,CAAC,qBAAqB,GAAG,qBAAqB,CAAC;YACnD,IAAI,CAAC,aAAa,GAAG,SAAS,CAAC;QACjC,CAAC;QACD,MAAM,aAAa,GAAG,8BAA8B,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClG,IACE,MAAM,CAAC,kBAAkB,EAAE;YAC3B,CAAC,WAAW,CAAC,eAAe,CAAC;YAC7B,CAAC,4BAA4B,CAAC,aAAa,EAAE,0BAA0B,CAAC,EACxE,CAAC;YACD,MAAM,IAAI,WAAW,CACnB,qKAAqK,CACtK,CAAC;QACJ,CAAC;QACD,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,OAAO,CACX,MAAc,EACd,aAAyC,EACzC,WAA+D,EAC/D,YAAmE;QAEnE,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,kCAAkC,CACpF,MAAM,EACN,aAAa,EACb,IAAI,CAAC,qBAAqB,CAC3B,CAAC;QACF,MAAM,oBAAoB,GAAG,CAAC,GAAQ,EAAE,OAA+B,EAAE,MAAsB,EAAE,EAAE;YACjG,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC;YAC/B,IAAI,CAAC,QAAQ,GAAG,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC;YACpD,IAAI,CAAC;gBACH,6FAA6F;gBAC7F,OAAO,YAAY,CAAC,GAAG,EAAE,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC;YACjF,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC;QACF,IAAI,cAAc,KAAK,SAAS,EAAE,CAAC;YACjC,MAAM,OAAO,GAAG,cAAc,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;YACnE,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACrD,CAAC;QACD,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,qBAAqB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAC7D,OAAO,CAAC,GAAG,EAAE,EAAE,CAAC,oBAAoB,CAAC,GAAG,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC1D,CAAC;CACF"}