openrouter-genimage-kote-opencode 0.1.0

package/dist/transport/kote-gateway.d.ts

@@ -0,0 +1,19 @@
+import { type KoteGatewayClient } from "@koteye/kote-gateway-opencode/core";
+import { type SafeLogger } from "../logging.js";
+import { type FetchLike } from "./direct.js";
+import { type HttpTransport } from "./types.js";
+type GatewayClientFactory = () => Promise<KoteGatewayClient>;
+export interface KoteGatewayTransportOptions {
+    logger: SafeLogger;
+    gatewayClientFactory?: GatewayClientFactory;
+    bunFetch?: FetchLike;
+    forceRuntime?: "bun" | "node";
+}
+export declare class KoteGatewayTransport implements HttpTransport {
+    #private;
+    constructor(options: KoteGatewayTransportOptions);
+    request(url: URL, init: RequestInit, signal: AbortSignal): Promise<Response>;
+    dispose(): Promise<void>;
+}
+export {};
+//# sourceMappingURL=kote-gateway.d.ts.map

package/dist/transport/kote-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"kote-gateway.d.ts","sourceRoot":"","sources":["../../src/transport/kote-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,KAAK,iBAAiB,EACvB,MAAM,oCAAoC,CAAA;AAO3C,OAAO,EAAiB,KAAK,UAAU,EAAE,MAAM,eAAe,CAAA;AAO9D,OAAO,EAAe,KAAK,SAAS,EAAE,MAAM,aAAa,CAAA;AACzD,OAAO,EAGL,KAAK,aAAa,EACnB,MAAM,YAAY,CAAA;AAEnB,KAAK,oBAAoB,GAAG,MAAM,OAAO,CAAC,iBAAiB,CAAC,CAAA;AAG5D,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,UAAU,CAAA;IAClB,oBAAoB,CAAC,EAAE,oBAAoB,CAAA;IAC3C,QAAQ,CAAC,EAAE,SAAS,CAAA;IACpB,YAAY,CAAC,EAAE,KAAK,GAAG,MAAM,CAAA;CAC9B;AAsJD,qBAAa,oBAAqB,YAAW,aAAa;;gBAU5C,OAAO,EAAE,2BAA2B;IAW1C,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC;IAuD5E,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;CAgD/B"}

package/dist/transport/kote-gateway.js

@@ -0,0 +1,224 @@
+import { createKoteGatewayClient, KoteGatewayError, } from "@koteye/kote-gateway-opencode/core";
+import { fetch as undiciFetch, ProxyAgent, } from "undici";
+import { createHash } from "node:crypto";
+import { safeUrlOrigin } from "../logging.js";
+import { abortablePromise, createLinkedAbortSignal, isAbortError, throwIfAborted, } from "../utils/abort.js";
+import { nativeFetch } from "./direct.js";
+import { GatewayTransportError, } from "./types.js";
+const MAX_CACHED_DISPATCHERS = 8;
+function defaultGatewayClientFactory(disposeSignal) {
+    const fetchUntilDisposed = async (input, init = {}) => {
+        const signals = [disposeSignal];
+        if (init.signal !== undefined && init.signal !== null) {
+            signals.push(init.signal);
+        }
+        const linked = createLinkedAbortSignal(signals);
+        try {
+            return await nativeFetch(input, { ...init, signal: linked.signal });
+        }
+        finally {
+            linked.dispose();
+        }
+    };
+    return createKoteGatewayClient({
+        fetch: fetchUntilDisposed,
+        config: {
+            version: 1,
+            default: "proxy",
+            strict: true,
+            providers: { openrouter: "proxy" },
+        },
+    });
+}
+function mapGatewayError(error) {
+    if (error instanceof GatewayTransportError)
+        return error;
+    let code = "GENIMAGE_GATEWAY_CONNECT_FAILED";
+    if (error instanceof KoteGatewayError) {
+        switch (error.code) {
+            case "KOTE_BOOTSTRAP_SIGNATURE_INVALID":
+                code = "GENIMAGE_GATEWAY_SIGNATURE_INVALID";
+                break;
+            case "KOTE_BOOTSTRAP_EXPIRED":
+                code = "GENIMAGE_GATEWAY_CACHE_EXPIRED";
+                break;
+            case "KOTE_BOOTSTRAP_UNAVAILABLE":
+            case "KOTE_BOOTSTRAP_INVALID":
+            case "KOTE_CONFIG_INVALID":
+            case "KOTE_CONFIG_NOT_FOUND":
+                code = "GENIMAGE_GATEWAY_BOOTSTRAP_FAILED";
+                break;
+            case "KOTE_GATEWAY_UNAVAILABLE":
+            case "KOTE_PROXY_REQUEST_FAILED":
+            case "KOTE_UNSUPPORTED_TRANSPORT":
+            default:
+                code = "GENIMAGE_GATEWAY_CONNECT_FAILED";
+        }
+    }
+    return new GatewayTransportError(code, "KoteGateway could not complete the proxied OpenRouter request. Direct fallback is disabled.");
+}
+function validateDescriptor(descriptor) {
+    let url;
+    try {
+        url = new URL(descriptor.proxyUrl);
+    }
+    catch (error) {
+        throw new GatewayTransportError("GENIMAGE_GATEWAY_BOOTSTRAP_FAILED", "KoteGateway returned an invalid proxy descriptor.", { cause: error });
+    }
+    if ((url.protocol !== "https:" && url.protocol !== "http:") ||
+        url.username !== "" ||
+        url.password !== "" ||
+        descriptor.proxyUrl.length > 4_096) {
+        throw new GatewayTransportError("GENIMAGE_GATEWAY_BOOTSTRAP_FAILED", "KoteGateway returned an unsafe proxy descriptor.");
+    }
+    const proxyHeaders = descriptor.proxyHeaders;
+    if (proxyHeaders !== undefined &&
+        (typeof proxyHeaders !== "object" ||
+            proxyHeaders === null ||
+            Array.isArray(proxyHeaders))) {
+        throw new GatewayTransportError("GENIMAGE_GATEWAY_BOOTSTRAP_FAILED", "KoteGateway returned invalid proxy headers.");
+    }
+    for (const [name, value] of Object.entries(proxyHeaders ?? {})) {
+        if (!/^[!#$%&'*+.^_`|~0-9A-Za-z-]{1,256}$/u.test(name) ||
+            typeof value !== "string" ||
+            value.length > 4_096 ||
+            /[\u0000-\u001f\u007f]/u.test(value)) {
+            throw new GatewayTransportError("GENIMAGE_GATEWAY_BOOTSTRAP_FAILED", "KoteGateway returned invalid proxy headers.");
+        }
+    }
+    return descriptor;
+}
+function splitProxyHeaders(headers) {
+    if (headers === undefined)
+        return {};
+    let token;
+    const remaining = {};
+    for (const [name, value] of Object.entries(headers)) {
+        if (name.toLowerCase() === "proxy-authorization")
+            token = value;
+        else
+            remaining[name] = value;
+    }
+    return {
+        ...(Object.keys(remaining).length === 0 ? {} : { headers: remaining }),
+        ...(token === undefined ? {} : { token }),
+    };
+}
+function descriptorKey(descriptor) {
+    const headers = Object.entries(descriptor.proxyHeaders ?? {}).sort(([left], [right]) => left.localeCompare(right));
+    return createHash("sha256")
+        .update(JSON.stringify([descriptor.proxyUrl, headers]))
+        .digest("hex");
+}
+export class KoteGatewayTransport {
+    #logger;
+    #gatewayClientFactory;
+    #bunFetch;
+    #runtime;
+    #dispatchers = new Map();
+    #disposeController = new AbortController();
+    #clientPromise;
+    #disposed = false;
+    constructor(options) {
+        this.#logger = options.logger;
+        this.#gatewayClientFactory =
+            options.gatewayClientFactory ??
+                (() => defaultGatewayClientFactory(this.#disposeController.signal));
+        this.#bunFetch = options.bunFetch ?? nativeFetch;
+        this.#runtime =
+            options.forceRuntime ??
+                (typeof process.versions.bun === "string" ? "bun" : "node");
+    }
+    async request(url, init, signal) {
+        if (this.#disposed) {
+            throw new GatewayTransportError("GENIMAGE_GATEWAY_CONNECT_FAILED", "KoteGateway transport is already disposed.");
+        }
+        const linked = createLinkedAbortSignal([
+            signal,
+            this.#disposeController.signal,
+        ]);
+        const requestSignal = linked.signal;
+        try {
+            const client = await abortablePromise(this.#getClient(), requestSignal);
+            const descriptor = validateDescriptor(await abortablePromise(client.getGateway(), requestSignal));
+            throwIfAborted(requestSignal);
+            const gatewayOrigin = safeUrlOrigin(descriptor.proxyUrl);
+            this.#logger.log("debug", "Routing OpenRouter request through KoteGateway.", {
+                routing: "proxy",
+                ...(gatewayOrigin === undefined ? {} : { gatewayOrigin }),
+            });
+            if (this.#runtime === "bun") {
+                const proxy = descriptor.proxyHeaders === undefined
+                    ? descriptor.proxyUrl
+                    : {
+                        url: descriptor.proxyUrl,
+                        headers: { ...descriptor.proxyHeaders },
+                    };
+                return await this.#bunFetch(url, {
+                    ...init,
+                    signal: requestSignal,
+                    proxy,
+                });
+            }
+            const dispatcher = this.#getDispatcher(descriptor);
+            return (await undiciFetch(url, {
+                ...init,
+                signal: requestSignal,
+                dispatcher,
+            }));
+        }
+        catch (error) {
+            if (requestSignal.aborted || isAbortError(error))
+                throw error;
+            this.#clientPromise?.then((client) => client.invalidateGateway()).catch(() => { });
+            throw mapGatewayError(error);
+        }
+        finally {
+            linked.dispose();
+        }
+    }
+    async dispose() {
+        this.#disposed = true;
+        this.#disposeController.abort(new DOMException("KoteGateway transport was disposed", "AbortError"));
+        this.#clientPromise = undefined;
+        const dispatchers = [...this.#dispatchers.values()];
+        this.#dispatchers.clear();
+        await Promise.all(dispatchers.map(async (dispatcher) => dispatcher.close().catch(() => { })));
+    }
+    #getClient() {
+        if (this.#clientPromise !== undefined)
+            return this.#clientPromise;
+        const created = Promise.resolve().then(() => this.#gatewayClientFactory());
+        const guarded = created.catch((error) => {
+            if (this.#clientPromise === guarded)
+                this.#clientPromise = undefined;
+            throw error;
+        });
+        this.#clientPromise = guarded;
+        return this.#clientPromise;
+    }
+    #getDispatcher(descriptor) {
+        const key = descriptorKey(descriptor);
+        const existing = this.#dispatchers.get(key);
+        if (existing !== undefined) {
+            this.#dispatchers.delete(key);
+            this.#dispatchers.set(key, existing);
+            return existing;
+        }
+        if (this.#dispatchers.size >= MAX_CACHED_DISPATCHERS) {
+            const oldest = this.#dispatchers.entries().next();
+            if (!oldest.done) {
+                this.#dispatchers.delete(oldest.value[0]);
+                void oldest.value[1].close().catch(() => undefined);
+            }
+        }
+        const proxyHeaders = splitProxyHeaders(descriptor.proxyHeaders);
+        const dispatcher = new ProxyAgent({
+            uri: descriptor.proxyUrl,
+            ...proxyHeaders,
+        });
+        this.#dispatchers.set(key, dispatcher);
+        return dispatcher;
+    }
+}
+//# sourceMappingURL=kote-gateway.js.map

package/dist/transport/kote-gateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"kote-gateway.js","sourceRoot":"","sources":["../../src/transport/kote-gateway.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,uBAAuB,EACvB,gBAAgB,GAGjB,MAAM,oCAAoC,CAAA;AAC3C,OAAO,EACL,KAAK,IAAI,WAAW,EACpB,UAAU,GACX,MAAM,QAAQ,CAAA;AACf,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,OAAO,EAAE,aAAa,EAAmB,MAAM,eAAe,CAAA;AAC9D,OAAO,EACL,gBAAgB,EAChB,uBAAuB,EACvB,YAAY,EACZ,cAAc,GACf,MAAM,mBAAmB,CAAA;AAC1B,OAAO,EAAE,WAAW,EAAkB,MAAM,aAAa,CAAA;AACzD,OAAO,EACL,qBAAqB,GAGtB,MAAM,YAAY,CAAA;AAGnB,MAAM,sBAAsB,GAAG,CAAC,CAAA;AAkBhC,SAAS,2BAA2B,CAClC,aAA0B;IAE1B,MAAM,kBAAkB,GAAc,KAAK,EAAE,KAAK,EAAE,IAAI,GAAG,EAAE,EAAE,EAAE;QAC/D,MAAM,OAAO,GAAG,CAAC,aAAa,CAAC,CAAA;QAC/B,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,IAAI,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACtD,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC3B,CAAC;QACD,MAAM,MAAM,GAAG,uBAAuB,CAAC,OAAO,CAAC,CAAA;QAC/C,IAAI,CAAC;YACH,OAAO,MAAM,WAAW,CAAC,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,CAAC,CAAA;QACrE,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC;IACH,CAAC,CAAA;IACD,OAAO,uBAAuB,CAAC;QAC7B,KAAK,EAAE,kBAAkB;QACzB,MAAM,EAAE;YACN,OAAO,EAAE,CAAC;YACV,OAAO,EAAE,OAAO;YAChB,MAAM,EAAE,IAAI;YACZ,SAAS,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE;SACnC;KACF,CAAC,CAAA;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,IAAI,KAAK,YAAY,qBAAqB;QAAE,OAAO,KAAK,CAAA;IAExD,IAAI,IAAI,GAAqB,iCAAiC,CAAA;IAC9D,IAAI,KAAK,YAAY,gBAAgB,EAAE,CAAC;QACtC,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;YACnB,KAAK,kCAAkC;gBACrC,IAAI,GAAG,oCAAoC,CAAA;gBAC3C,MAAK;YACP,KAAK,wBAAwB;gBAC3B,IAAI,GAAG,gCAAgC,CAAA;gBACvC,MAAK;YACP,KAAK,4BAA4B,CAAC;YAClC,KAAK,wBAAwB,CAAC;YAC9B,KAAK,qBAAqB,CAAC;YAC3B,KAAK,uBAAuB;gBAC1B,IAAI,GAAG,mCAAmC,CAAA;gBAC1C,MAAK;YACP,KAAK,0BAA0B,CAAC;YAChC,KAAK,2BAA2B,CAAC;YACjC,KAAK,4BAA4B,CAAC;YAClC;gBACE,IAAI,GAAG,iCAAiC,CAAA;QAC5C,CAAC;IACH,CAAC;IAED,OAAO,IAAI,qBAAqB,CAC9B,IAAI,EACJ,6FAA6F,CAC9F,CAAA;AACH,CAAC;AAED,SAAS,kBAAkB,CAAC,UAA6B;IACvD,IAAI,GAAQ,CAAA;IACZ,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;IACpC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,EACnC,mDAAmD,EACnD,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAA;IACH,CAAC;IAED,IACE,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC;QACvD,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,GAAG,CAAC,QAAQ,KAAK,EAAE;QACnB,UAAU,CAAC,QAAQ,CAAC,MAAM,GAAG,KAAK,EAClC,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,EACnC,kDAAkD,CACnD,CAAA;IACH,CAAC;IAED,MAAM,YAAY,GAAG,UAAU,CAAC,YAAuB,CAAA;IACvD,IACE,YAAY,KAAK,SAAS;QAC1B,CAAC,OAAO,YAAY,KAAK,QAAQ;YAC/B,YAAY,KAAK,IAAI;YACrB,KAAK,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,EAC9B,CAAC;QACD,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,EACnC,6CAA6C,CAC9C,CAAA;IACH,CAAC;IACD,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,YAAY,IAAI,EAAE,CAAC,EAAE,CAAC;QAC/D,IACE,CAAC,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC;YAClD,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,GAAG,KAAK;YACpB,wBAAwB,CAAC,IAAI,CAAC,KAAK,CAAC,EACpC,CAAC;YACD,MAAM,IAAI,qBAAqB,CAC7B,mCAAmC,EACnC,6CAA6C,CAC9C,CAAA;QACH,CAAC;IACH,CAAC;IAED,OAAO,UAAU,CAAA;AACnB,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAqD;IAI9E,IAAI,OAAO,KAAK,SAAS;QAAE,OAAO,EAAE,CAAA;IAEpC,IAAI,KAAyB,CAAA;IAC7B,MAAM,SAAS,GAA2B,EAAE,CAAA;IAC5C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACpD,IAAI,IAAI,CAAC,WAAW,EAAE,KAAK,qBAAqB;YAAE,KAAK,GAAG,KAAK,CAAA;;YAC1D,SAAS,CAAC,IAAI,CAAC,GAAG,KAAK,CAAA;IAC9B,CAAC;IAED,OAAO;QACL,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;QACtE,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAA;AACH,CAAC;AAED,SAAS,aAAa,CAAC,UAA6B;IAClD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,YAAY,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,KAAK,CAAC,EAAE,EAAE,CACrF,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAC1B,CAAA;IACD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACxB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,UAAU,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;SACtD,MAAM,CAAC,KAAK,CAAC,CAAA;AAClB,CAAC;AAED,MAAM,OAAO,oBAAoB;IACtB,OAAO,CAAY;IACnB,qBAAqB,CAAsB;IAC3C,SAAS,CAAW;IACpB,QAAQ,CAAgB;IACxB,YAAY,GAAG,IAAI,GAAG,EAAsB,CAAA;IAC5C,kBAAkB,GAAG,IAAI,eAAe,EAAE,CAAA;IACnD,cAAc,CAAwC;IACtD,SAAS,GAAG,KAAK,CAAA;IAEjB,YAAY,OAAoC;QAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC,MAAM,CAAA;QAC7B,IAAI,CAAC,qBAAqB;YACxB,OAAO,CAAC,oBAAoB;gBAC5B,CAAC,GAAG,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,CAAA;QACrE,IAAI,CAAC,SAAS,GAAG,OAAO,CAAC,QAAQ,IAAI,WAAW,CAAA;QAChD,IAAI,CAAC,QAAQ;YACX,OAAO,CAAC,YAAY;gBACpB,CAAC,OAAO,OAAO,CAAC,QAAQ,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAA;IAC/D,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAQ,EAAE,IAAiB,EAAE,MAAmB;QAC5D,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;YACnB,MAAM,IAAI,qBAAqB,CAC7B,iCAAiC,EACjC,4CAA4C,CAC7C,CAAA;QACH,CAAC;QAED,MAAM,MAAM,GAAG,uBAAuB,CAAC;YACrC,MAAM;YACN,IAAI,CAAC,kBAAkB,CAAC,MAAM;SAC/B,CAAC,CAAA;QACF,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,CAAA;QACnC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,IAAI,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAAA;YACvE,MAAM,UAAU,GAAG,kBAAkB,CACnC,MAAM,gBAAgB,CAAC,MAAM,CAAC,UAAU,EAAE,EAAE,aAAa,CAAC,CAC3D,CAAA;YACD,cAAc,CAAC,aAAa,CAAC,CAAA;YAC7B,MAAM,aAAa,GAAG,aAAa,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAA;YACxD,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,EAAE,iDAAiD,EAAE;gBAC3E,OAAO,EAAE,OAAO;gBAChB,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;aAC1D,CAAC,CAAA;YAEF,IAAI,IAAI,CAAC,QAAQ,KAAK,KAAK,EAAE,CAAC;gBAC5B,MAAM,KAAK,GACT,UAAU,CAAC,YAAY,KAAK,SAAS;oBACnC,CAAC,CAAC,UAAU,CAAC,QAAQ;oBACrB,CAAC,CAAC;wBACE,GAAG,EAAE,UAAU,CAAC,QAAQ;wBACxB,OAAO,EAAE,EAAE,GAAG,UAAU,CAAC,YAAY,EAAE;qBACxC,CAAA;gBACP,OAAO,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE;oBAC/B,GAAG,IAAI;oBACP,MAAM,EAAE,aAAa;oBACrB,KAAK;iBACU,CAAC,CAAA;YACpB,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,CAAC,cAAc,CAAC,UAAU,CAAC,CAAA;YAClD,OAAO,CAAC,MAAM,WAAW,CAAC,GAAG,EAAE;gBAC7B,GAAG,IAAI;gBACP,MAAM,EAAE,aAAa;gBACrB,UAAU;aAC0B,CAAC,CAAwB,CAAA;QACjE,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,aAAa,CAAC,OAAO,IAAI,YAAY,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAA;YAC7D,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,iBAAiB,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;YACjF,MAAM,eAAe,CAAC,KAAK,CAAC,CAAA;QAC9B,CAAC;gBAAS,CAAC;YACT,MAAM,CAAC,OAAO,EAAE,CAAA;QAClB,CAAC;IACH,CAAC;IAED,KAAK,CAAC,OAAO;QACX,IAAI,CAAC,SAAS,GAAG,IAAI,CAAA;QACrB,IAAI,CAAC,kBAAkB,CAAC,KAAK,CAC3B,IAAI,YAAY,CAAC,oCAAoC,EAAE,YAAY,CAAC,CACrE,CAAA;QACD,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;QAC/B,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,CAAC,CAAA;QACnD,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,CAAA;QACzB,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,EAAE,UAAU,EAAE,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC,CAAC,CAAA;IAC9F,CAAC;IAED,UAAU;QACR,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,cAAc,CAAA;QAEjE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,qBAAqB,EAAE,CAAC,CAAA;QAC1E,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC/C,IAAI,IAAI,CAAC,cAAc,KAAK,OAAO;gBAAE,IAAI,CAAC,cAAc,GAAG,SAAS,CAAA;YACpE,MAAM,KAAK,CAAA;QACb,CAAC,CAAC,CAAA;QACF,IAAI,CAAC,cAAc,GAAG,OAAO,CAAA;QAC7B,OAAO,IAAI,CAAC,cAAc,CAAA;IAC5B,CAAC;IAED,cAAc,CAAC,UAA6B;QAC1C,MAAM,GAAG,GAAG,aAAa,CAAC,UAAU,CAAC,CAAA;QACrC,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAA;QAC3C,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,GAAG,CAAC,CAAA;YAC7B,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAA;YACpC,OAAO,QAAQ,CAAA;QACjB,CAAC;QAED,IAAI,IAAI,CAAC,YAAY,CAAC,IAAI,IAAI,sBAAsB,EAAE,CAAC;YACrD,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,CAAA;YACjD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC;gBACjB,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAA;gBACzC,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;YACrD,CAAC;QACH,CAAC;QAED,MAAM,YAAY,GAAG,iBAAiB,CAAC,UAAU,CAAC,YAAY,CAAC,CAAA;QAC/D,MAAM,UAAU,GAAG,IAAI,UAAU,CAAC;YAChC,GAAG,EAAE,UAAU,CAAC,QAAQ;YACxB,GAAG,YAAY;SAChB,CAAC,CAAA;QACF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,UAAU,CAAC,CAAA;QACtC,OAAO,UAAU,CAAA;IACnB,CAAC;CACF"}

package/dist/transport/types.d.ts

@@ -0,0 +1,10 @@
+export interface HttpTransport {
+    request(url: URL, init: RequestInit, signal: AbortSignal): Promise<Response>;
+    dispose?(): Promise<void>;
+}
+export type GatewayErrorCode = "GENIMAGE_GATEWAY_BOOTSTRAP_FAILED" | "GENIMAGE_GATEWAY_SIGNATURE_INVALID" | "GENIMAGE_GATEWAY_CACHE_EXPIRED" | "GENIMAGE_GATEWAY_CONNECT_FAILED" | "GENIMAGE_GATEWAY_TIMEOUT";
+export declare class GatewayTransportError extends Error {
+    readonly code: GatewayErrorCode;
+    constructor(code: GatewayErrorCode, message: string, options?: ErrorOptions);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/transport/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/transport/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,aAAa;IAC5B,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,QAAQ,CAAC,CAAA;IAC5E,OAAO,CAAC,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CAC1B;AAED,MAAM,MAAM,gBAAgB,GACxB,mCAAmC,GACnC,oCAAoC,GACpC,gCAAgC,GAChC,iCAAiC,GACjC,0BAA0B,CAAA;AAE9B,qBAAa,qBAAsB,SAAQ,KAAK;IAC9C,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;gBAEnB,IAAI,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,OAAO,CAAC,EAAE,YAAY;CAK5E"}

package/dist/transport/types.js

@@ -0,0 +1,9 @@
+export class GatewayTransportError extends Error {
+    code;
+    constructor(code, message, options) {
+        super(message, options);
+        this.name = "GatewayTransportError";
+        this.code = code;
+    }
+}
+//# sourceMappingURL=types.js.map

package/dist/transport/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/transport/types.ts"],"names":[],"mappings":"AAYA,MAAM,OAAO,qBAAsB,SAAQ,KAAK;IACrC,IAAI,CAAkB;IAE/B,YAAY,IAAsB,EAAE,OAAe,EAAE,OAAsB;QACzE,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;QACvB,IAAI,CAAC,IAAI,GAAG,uBAAuB,CAAA;QACnC,IAAI,CAAC,IAAI,GAAG,IAAI,CAAA;IAClB,CAAC;CACF"}

package/dist/utils/abort.d.ts

@@ -0,0 +1,19 @@
+export interface DeadlineSignal {
+    signal: AbortSignal;
+    didTimeout(): boolean;
+    dispose(): void;
+}
+export interface LinkedAbortSignal {
+    signal: AbortSignal;
+    dispose(): void;
+}
+export declare function createLinkedAbortSignal(signals: readonly AbortSignal[]): LinkedAbortSignal;
+export declare function createDeadlineSignal(parent: AbortSignal, timeoutMs: number): DeadlineSignal;
+export declare function throwIfAborted(signal: AbortSignal): void;
+export declare function abortableDelay(milliseconds: number, signal: AbortSignal): Promise<void>;
+export declare function isAbortError(error: unknown): boolean;
+export declare function abortablePromise<Value>(promise: PromiseLike<Value>, signal: AbortSignal): Promise<Value>;
+type StreamReadResult<Value> = Awaited<ReturnType<ReadableStreamDefaultReader<Value>["read"]>>;
+export declare function abortableStreamRead<Value>(reader: ReadableStreamDefaultReader<Value>, signal: AbortSignal): Promise<StreamReadResult<Value>>;
+export {};
+//# sourceMappingURL=abort.d.ts.map

package/dist/utils/abort.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"abort.d.ts","sourceRoot":"","sources":["../../src/utils/abort.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,WAAW,CAAA;IACnB,UAAU,IAAI,OAAO,CAAA;IACrB,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,WAAW,CAAA;IACnB,OAAO,IAAI,IAAI,CAAA;CAChB;AAED,wBAAgB,uBAAuB,CACrC,OAAO,EAAE,SAAS,WAAW,EAAE,GAC9B,iBAAiB,CAsBnB;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,WAAW,EACnB,SAAS,EAAE,MAAM,GAChB,cAAc,CA2BhB;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,WAAW,GAAG,IAAI,CAMxD;AAED,wBAAgB,cAAc,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAoBvF;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAKpD;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EACpC,OAAO,EAAE,WAAW,CAAC,KAAK,CAAC,EAC3B,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,KAAK,CAAC,CAkChB;AAED,KAAK,gBAAgB,CAAC,KAAK,IAAI,OAAO,CACpC,UAAU,CAAC,2BAA2B,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CACvD,CAAA;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EACvC,MAAM,EAAE,2BAA2B,CAAC,KAAK,CAAC,EAC1C,MAAM,EAAE,WAAW,GAClB,OAAO,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,CAqClC"}

package/dist/utils/abort.js

@@ -0,0 +1,121 @@
+export function createLinkedAbortSignal(signals) {
+    const controller = new AbortController();
+    const listeners = [];
+    for (const signal of signals) {
+        const relay = () => controller.abort(signal.reason);
+        if (signal.aborted) {
+            relay();
+            break;
+        }
+        signal.addEventListener("abort", relay, { once: true });
+        listeners.push([signal, relay]);
+    }
+    return {
+        signal: controller.signal,
+        dispose() {
+            for (const [signal, listener] of listeners) {
+                signal.removeEventListener("abort", listener);
+            }
+        },
+    };
+}
+export function createDeadlineSignal(parent, timeoutMs) {
+    const controller = new AbortController();
+    let timedOut = false;
+    const abortFromParent = () => {
+        controller.abort(parent.reason);
+    };
+    if (parent.aborted) {
+        abortFromParent();
+    }
+    else {
+        parent.addEventListener("abort", abortFromParent, { once: true });
+    }
+    const timer = setTimeout(() => {
+        timedOut = true;
+        controller.abort(new DOMException("The operation timed out", "TimeoutError"));
+    }, timeoutMs);
+    return {
+        signal: controller.signal,
+        didTimeout: () => timedOut,
+        dispose() {
+            clearTimeout(timer);
+            parent.removeEventListener("abort", abortFromParent);
+        },
+    };
+}
+export function throwIfAborted(signal) {
+    if (signal.aborted) {
+        throw signal.reason instanceof Error
+            ? signal.reason
+            : new DOMException("The operation was aborted", "AbortError");
+    }
+}
+export function abortableDelay(milliseconds, signal) {
+    throwIfAborted(signal);
+    return new Promise((resolve, reject) => {
+        const timer = setTimeout(() => {
+            signal.removeEventListener("abort", onAbort);
+            resolve();
+        }, milliseconds);
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(signal.reason instanceof Error
+                ? signal.reason
+                : new DOMException("The operation was aborted", "AbortError"));
+        };
+        signal.addEventListener("abort", onAbort, { once: true });
+    });
+}
+export function isAbortError(error) {
+    return (error instanceof DOMException &&
+        (error.name === "AbortError" || error.name === "TimeoutError"));
+}
+export function abortablePromise(promise, signal) {
+    throwIfAborted(signal);
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (callback) => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener("abort", onAbort);
+            callback();
+        };
+        const onAbort = () => {
+            finish(() => reject(signal.reason instanceof Error
+                ? signal.reason
+                : new DOMException("The operation was aborted", "AbortError")));
+        };
+        signal.addEventListener("abort", onAbort, { once: true });
+        void Promise.resolve(promise).then((value) => finish(() => resolve(value)), (error) => finish(() => reject(error instanceof Error
+            ? error
+            : new Error("The asynchronous operation failed.", { cause: error }))));
+    });
+}
+export function abortableStreamRead(reader, signal) {
+    throwIfAborted(signal);
+    return new Promise((resolve, reject) => {
+        let settled = false;
+        const finish = (callback) => {
+            if (settled)
+                return;
+            settled = true;
+            signal.removeEventListener("abort", onAbort);
+            callback();
+        };
+        const onAbort = () => {
+            finish(() => {
+                void reader.cancel(signal.reason).catch(() => undefined);
+                reject(signal.reason instanceof Error
+                    ? signal.reason
+                    : new DOMException("The operation was aborted", "AbortError"));
+            });
+        };
+        signal.addEventListener("abort", onAbort, { once: true });
+        void reader.read().then((result) => finish(() => resolve(result)), (error) => finish(() => reject(error instanceof Error
+            ? error
+            : new Error("The response stream failed.", { cause: error }))));
+    });
+}
+//# sourceMappingURL=abort.js.map

package/dist/utils/abort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"abort.js","sourceRoot":"","sources":["../../src/utils/abort.ts"],"names":[],"mappings":"AAWA,MAAM,UAAU,uBAAuB,CACrC,OAA+B;IAE/B,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,SAAS,GAA8C,EAAE,CAAA;IAE/D,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;QACnD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,KAAK,EAAE,CAAA;YACP,MAAK;QACP,CAAC;QACD,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACvD,SAAS,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,CAAA;IACjC,CAAC;IAED,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,OAAO;YACL,KAAK,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,IAAI,SAAS,EAAE,CAAC;gBAC3C,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAA;YAC/C,CAAC;QACH,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,oBAAoB,CAClC,MAAmB,EACnB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,IAAI,QAAQ,GAAG,KAAK,CAAA;IAEpB,MAAM,eAAe,GAAG,GAAG,EAAE;QAC3B,UAAU,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IACjC,CAAC,CAAA;IAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,eAAe,EAAE,CAAA;IACnB,CAAC;SAAM,CAAC;QACN,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,eAAe,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IACnE,CAAC;IAED,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAA;QACf,UAAU,CAAC,KAAK,CAAC,IAAI,YAAY,CAAC,yBAAyB,EAAE,cAAc,CAAC,CAAC,CAAA;IAC/E,CAAC,EAAE,SAAS,CAAC,CAAA;IAEb,OAAO;QACL,MAAM,EAAE,UAAU,CAAC,MAAM;QACzB,UAAU,EAAE,GAAG,EAAE,CAAC,QAAQ;QAC1B,OAAO;YACL,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,eAAe,CAAC,CAAA;QACtD,CAAC;KACF,CAAA;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,MAAmB;IAChD,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;QACnB,MAAM,MAAM,CAAC,MAAM,YAAY,KAAK;YAClC,CAAC,CAAC,MAAM,CAAC,MAAM;YACf,CAAC,CAAC,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAAA;IACjE,CAAC;AACH,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,YAAoB,EAAE,MAAmB;IACtE,cAAc,CAAC,MAAM,CAAC,CAAA;IAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC5B,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,OAAO,EAAE,CAAA;QACX,CAAC,EAAE,YAAY,CAAC,CAAA;QAEhB,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,YAAY,CAAC,KAAK,CAAC,CAAA;YACnB,MAAM,CACJ,MAAM,CAAC,MAAM,YAAY,KAAK;gBAC5B,CAAC,CAAC,MAAM,CAAC,MAAM;gBACf,CAAC,CAAC,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAChE,CAAA;QACH,CAAC,CAAA;QAED,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;IAC3D,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAc;IACzC,OAAO,CACL,KAAK,YAAY,YAAY;QAC7B,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC,CAC/D,CAAA;AACH,CAAC;AAED,MAAM,UAAU,gBAAgB,CAC9B,OAA2B,EAC3B,MAAmB;IAEnB,cAAc,CAAC,MAAM,CAAC,CAAA;IAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CAAC,QAAoB,EAAE,EAAE;YACtC,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,QAAQ,EAAE,CAAA;QACZ,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,MAAM,CAAC,MAAM,YAAY,KAAK;gBAC5B,CAAC,CAAC,MAAM,CAAC,MAAM;gBACf,CAAC,CAAC,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAChE,CACF,CAAA;QACH,CAAC,CAAA;QAED,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,KAAK,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,IAAI,CAChC,CAAC,KAAK,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EACvC,CAAC,KAAc,EAAE,EAAE,CACjB,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,oCAAoC,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CACtE,CACF,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAMD,MAAM,UAAU,mBAAmB,CACjC,MAA0C,EAC1C,MAAmB;IAEnB,cAAc,CAAC,MAAM,CAAC,CAAA;IAEtB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,IAAI,OAAO,GAAG,KAAK,CAAA;QACnB,MAAM,MAAM,GAAG,CACb,QAAoB,EACpB,EAAE;YACF,IAAI,OAAO;gBAAE,OAAM;YACnB,OAAO,GAAG,IAAI,CAAA;YACd,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAA;YAC5C,QAAQ,EAAE,CAAA;QACZ,CAAC,CAAA;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACnB,MAAM,CAAC,GAAG,EAAE;gBACV,KAAK,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;gBACxD,MAAM,CACJ,MAAM,CAAC,MAAM,YAAY,KAAK;oBAC5B,CAAC,CAAC,MAAM,CAAC,MAAM;oBACf,CAAC,CAAC,IAAI,YAAY,CAAC,2BAA2B,EAAE,YAAY,CAAC,CAChE,CAAA;YACH,CAAC,CAAC,CAAA;QACJ,CAAC,CAAA;QAED,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAA;QACzD,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,CACrB,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,EACzC,CAAC,KAAc,EAAE,EAAE,CACjB,MAAM,CAAC,GAAG,EAAE,CACV,MAAM,CACJ,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,IAAI,KAAK,CAAC,6BAA6B,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAC/D,CACF,CACJ,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC"}

package/docs/architecture.md

@@ -0,0 +1,75 @@
+# Architecture
+
+## Scope and invariants
+
+The plugin owns three OpenCode tools: image-to-image editing, text-to-image generation, and balance reporting. Image-to-image is the primary path. It is never silently converted into text-to-image. The configured model, key, and routing mode are not exposed as tool arguments.
+
+Core invariants:
+
+- all generation uses `POST https://openrouter.ai/api/v1/images`, never `/chat/completions`;
+- model discovery is lazy and occurs before the first paid request;
+- direct mode never initializes KoteGateway;
+- proxy mode routes every OpenRouter endpoint through KoteGateway and fails closed;
+- the package never installs a global fetch interceptor;
+- reference order is preserved exactly;
+- project paths are resolved against `context.worktree`, not `process.cwd()`;
+- source files and existing outputs are never overwritten;
+- secrets, prompts, and base64 are not logged.
+
+## Request flow
+
+```text
+OpenCode tool call
+  -> resolve and validate strict plugin options
+  -> merge tool arguments over configured defaults
+  -> resolve ordered references (edit only)
+  -> validate formats, paths, byte limits, and request combinations
+  -> discover/cache configured model capabilities
+  -> choose direct or per-request proxy transport
+  -> OpenRouter Images API
+  -> bounded response read and binary validation
+  -> atomic worktree writes
+  -> OpenCode ToolResult with file attachments
+```
+
+Configuration failures establish a blocked state. Tools may remain registered, but they return `GENIMAGE_CONFIG_INVALID` without network access.
+
+## Reference pipeline
+
+Message attachments are resolved only from the parent user message identified through the current `sessionID` and `messageID`. The plugin does not search session history or the project automatically. Explicit project paths are confined to the real worktree. Explicit public references accept HTTPS only and are passed directly to OpenRouter.
+
+Local PNG, JPEG, and WebP bytes are validated using magic bytes and encoded in memory as normalized data URLs. No external object store or temporary publishing service is involved. Count, per-file bytes, total local bytes, estimated base64 growth, and final body size are bounded before constructing a large request.
+
+## Model and request validation
+
+`GET /images/models` and the capability path returned by the model record determine whether the configured model supports image output, image input, `input_references`, and requested optional parameters. Endpoint paths are not reconstructed from the model ID. Cache keys include model ID, TTL, and only a short SHA-256 key fingerprint.
+
+The plugin never changes the configured model. Unsupported capabilities fail before the paid request when discovery data makes that possible.
+
+## Transports
+
+Direct mode performs ordinary HTTPS requests to OpenRouter. It never obtains bootstrap data, opens CONNECT, or treats KoteGateway as fallback.
+
+Proxy mode reuses KoteGateway core functionality for signed bootstrap, Ed25519 verification, descriptor/cache handling, and sanitized errors. Each plugin-owned OpenRouter request uses the returned per-request proxy. Proxy headers remain separate from target headers. API keys, prompts, base64, and responses stay within TLS to OpenRouter. Any gateway error ends the operation; no direct retry is allowed.
+
+Synthetic coexistence tests load `@koteye/kote-gateway-opencode` and this plugin in both orders. They verify one CONNECT for the image request, no image route marker, restoration of the gateway plugin's global wrapper, and native direct transport isolation. Real-runtime compatibility is still gated by the package ranges and OpenCode smoke described in the testing guide.
+
+## HTTP behavior
+
+Production base URL is fixed. Redirect mode is manual and all 3xx responses fail. Safe idempotent GET operations may retry temporary statuses up to two times while respecting `Retry-After` and jitter. `POST /images` is never retried because the generation may already have been charged. An ambiguous disconnect becomes `GENIMAGE_REQUEST_STATUS_UNKNOWN`.
+
+The caller's abort signal, configured timeout, and transport cancellation are combined. Response bodies are streamed with `maxResponseBytes`; decoded images are bounded by `maxDecodedBytes` before persistence.
+
+## Output and ToolResult
+
+Returned base64 is decoded, validated, and classified by actual magic bytes. PNG, JPEG, and WebP are supported; SVG and unknown formats are rejected. A mismatch between requested and actual format changes the output extension and adds a warning. Valid images from a partially invalid response are saved and returned with warnings.
+
+Files are written completely to same-directory temporary files and atomically published with a no-clobber hard link. Names avoid collisions; multiple outputs receive numeric suffixes. ToolResult metadata contains safe model/routing/count/path/MIME/size/cost fields, never prompts or base64. Each saved image is also returned as an OpenCode file attachment.
+
+## Balance flow
+
+`GET /key` uses the generation key and reports key-specific usage and spending limits. `GET /credits` uses the management key and reports account totals. If the generation key explicitly identifies itself as a management key, it may be reused when no separate management key exists. Credits failure does not discard a successful key response. Balance calls are not cached.
+
+## Lifecycle
+
+Import and initial plugin load perform no network requests. The config hook registers the slash command and missing default permissions without overwriting user entries. `dispose` releases only plugin-owned resources. The plugin does not mutate global fetch, provider behavior, MCP, Git, npm, or OpenCode update traffic.

package/docs/configuration.md

@@ -0,0 +1,110 @@
+# Configuration
+
+Plugin options are supplied as the second item in an OpenCode plugin tuple. The public JSON Schema is [`schema/plugin-options.schema.json`](../schema/plugin-options.schema.json).
+
+```jsonc
+{
+  "plugin": [
+    [
+      "openrouter-genimage-kote-opencode@0.1.0",
+      {
+        "routing": "direct",
+        "model": "openai/gpt-image-1",
+        "apiKey": "{env:OPENROUTER_API_KEY}"
+      }
+    ]
+  ]
+}
+```
+
+Unknown fields are errors at every configuration object level. `baseUrl`, `openrouterUrl`, and `apiUrl` are intentionally unsupported; production traffic is fixed to `https://openrouter.ai/api/v1`.
+
+## Options
+
+| Option | Required | Default | Constraints |
+|---|---:|---|---|
+| `routing` | yes | — | `direct` or `proxy` |
+| `model` | yes | — | non-empty after trimming |
+| `apiKey` | no | `OPENROUTER_API_KEY` | non-empty after trimming |
+| `managementApiKey` | no | `OPENROUTER_MANAGEMENT_API_KEY` | non-empty after trimming |
+| `outputDirectory` | no | `assets/generated` | relative worktree directory |
+| `requestTimeoutMs` | no | `300000` | positive integer |
+| `modelCacheTtlMs` | no | `3600000` | positive integer |
+| `maxResponseBytes` | no | `134217728` | positive integer |
+| `maxDecodedBytes` | no | `134217728` | positive integer |
+
+`apiKey` resolution is options first, environment second, then `GENIMAGE_OPENROUTER_KEY_MISSING`. The management key uses the same precedence but may remain absent; only full account credits become unavailable.
+
+## Generation defaults
+
+Values in `defaults` apply to both image tools. A tool argument overrides the corresponding default; absent values are omitted from the OpenRouter request.
+
+| Option | Default | Constraints |
+|---|---|---|
+| `aspect_ratio` | omitted | `1:1`, `1:2`, `1:4`, `1:8`, `2:1`, `2:3`, `3:2`, `3:4`, `4:1`, `4:3`, `4:5`, `5:4`, `8:1`, `9:16`, `16:9`, `9:19.5`, `19.5:9`, `9:20`, `20:9`, `9:21`, `21:9`, `auto` |
+| `background` | omitted | `auto`, `transparent`, `opaque` |
+| `n` | `1` | integer, 1–10 |
+| `output_format` | omitted | `png`, `jpeg`, `webp` |
+| `output_compression` | omitted | integer, 0–100; JPEG/WebP only |
+| `quality` | omitted | `auto`, `low`, `medium`, `high` |
+| `resolution` | omitted | `512`, `1K`, `2K`, `4K` |
+| `seed` | omitted | non-negative integer |
+
+`background: "transparent"` is valid only with PNG or WebP. `output_compression` is valid only with JPEG or WebP. Runtime validation checks these cross-field combinations before network access. Model discovery may reject otherwise valid options when the configured endpoint does not support them.
+
+## Input limits
+
+| Option | Default | Constraints |
+|---|---:|---|
+| `input.maxReferences` | `16` | integer, 1–16 |
+| `input.maxFileBytes` | `20971520` | positive integer |
+| `input.maxTotalBytes` | `52428800` | positive integer and not less than `maxFileBytes` |
+
+Limits apply before constructing a large base64 JSON request. The implementation also accounts for base64 expansion and final request-body size.
+
+Standard JSON Schema cannot compare two arbitrary sibling numeric values. Consequently, the published schema validates both byte fields as positive integers but cannot express `maxTotalBytes >= maxFileBytes`; strict runtime validation enforces that relationship. Likewise, trim-aware non-empty checks and output-format combinations remain runtime checks in addition to schema validation.
+
+## Complete example
+
+```jsonc
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugin": [
+    [
+      "openrouter-genimage-kote-opencode@0.1.0",
+      {
+        "routing": "proxy",
+        "model": "openai/gpt-image-1",
+        "apiKey": "{env:OPENROUTER_API_KEY}",
+        "managementApiKey": "{env:OPENROUTER_MANAGEMENT_API_KEY}",
+        "outputDirectory": "assets/generated",
+        "defaults": {
+          "aspect_ratio": "auto",
+          "background": "auto",
+          "n": 1,
+          "output_format": "png",
+          "quality": "auto"
+        },
+        "input": {
+          "maxReferences": 16,
+          "maxFileBytes": 20971520,
+          "maxTotalBytes": 52428800
+        },
+        "requestTimeoutMs": 300000,
+        "modelCacheTtlMs": 3600000,
+        "maxResponseBytes": 134217728,
+        "maxDecodedBytes": 134217728
+      }
+    ]
+  ],
+  "permission": {
+    "openrouter_edit_image": "ask",
+    "openrouter_generate_image": "ask",
+    "openrouter_balance": "allow"
+  }
+}
+```
+
+## Invalid configuration behavior
+
+Invalid options establish a blocked configuration state and return `GENIMAGE_CONFIG_INVALID`. Tools may still be visible, but no network request is allowed. Examples include missing routing/model, blank strings, unknown fields, invalid numeric limits, `maxTotalBytes < maxFileBytes`, unsupported enum values, and forbidden custom API URL fields.