ysk-omni 1.0.0

package/dist/utils/list-sort.js

@@ -0,0 +1,58 @@
+"use strict";
+/** Shared list sorting helpers for Admin APIs (server-side only). */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.parseSortDir = parseSortDir;
+exports.resolveScalarOrderBy = resolveScalarOrderBy;
+exports.sortInMemory = sortInMemory;
+function parseSortDir(raw) {
+    return String(raw || '').toLowerCase() === 'asc' ? 'asc' : 'desc';
+}
+/**
+ * Pick a whitelist field for Prisma `orderBy: { field: dir }`.
+ * Invalid sortBy falls back to defaultField; sortDir defaults to desc.
+ */
+function resolveScalarOrderBy(sortBy, sortDir, allowed, defaultField) {
+    const dir = parseSortDir(sortDir);
+    const field = (sortBy && allowed.includes(sortBy)
+        ? sortBy
+        : defaultField);
+    return { [field]: dir };
+}
+/**
+ * In-memory sort for aggregates / connection snapshots.
+ * Default direction is **desc** (newest / largest first).
+ */
+function sortInMemory(rows, sortBy, sortDir, getters, defaultKey) {
+    const dirMul = parseSortDir(sortDir) === 'asc' ? 1 : -1;
+    const key = sortBy && getters[sortBy] ? sortBy : defaultKey;
+    const get = getters[key] || getters[defaultKey];
+    if (!get)
+        return [...rows];
+    return [...rows].sort((a, b) => {
+        const va = get(a);
+        const vb = get(b);
+        if (va == null && vb == null)
+            return 0;
+        if (va == null)
+            return 1;
+        if (vb == null)
+            return -1;
+        if (va instanceof Date && vb instanceof Date) {
+            return (va.getTime() - vb.getTime()) * dirMul;
+        }
+        if (typeof va === 'number' && typeof vb === 'number') {
+            return (va - vb) * dirMul;
+        }
+        const sa = String(va);
+        const sb = String(vb);
+        // ISO date strings
+        if (/^\d{4}-\d{2}-\d{2}/.test(sa) && /^\d{4}-\d{2}-\d{2}/.test(sb)) {
+            return (Date.parse(sa) - Date.parse(sb)) * dirMul;
+        }
+        return (sa.localeCompare(sb, undefined, {
+            numeric: true,
+            sensitivity: 'base',
+        }) * dirMul);
+    });
+}
+//# sourceMappingURL=list-sort.js.map

package/dist/utils/list-sort.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"list-sort.js","sourceRoot":"","sources":["../../src/utils/list-sort.ts"],"names":[],"mappings":";AAAA,qEAAqE;;AAIrE,oCAEC;AAMD,oDAaC;AAMD,oCAuCC;AAlED,SAAgB,YAAY,CAAC,GAAY;IACvC,OAAO,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC;AACpE,CAAC;AAED;;;GAGG;AACH,SAAgB,oBAAoB,CAClC,MAA0B,EAC1B,OAAqC,EACrC,OAAqB,EACrB,YAAe;IAEf,MAAM,GAAG,GAAG,YAAY,CAAC,OAAO,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,CACZ,MAAM,IAAK,OAA6B,CAAC,QAAQ,CAAC,MAAM,CAAC;QACvD,CAAC,CAAC,MAAM;QACR,CAAC,CAAC,YAAY,CACZ,CAAC;IACP,OAAO,EAAE,CAAC,KAAK,CAAC,EAAE,GAAG,EAAE,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAgB,YAAY,CAC1B,IAAS,EACT,MAA0B,EAC1B,OAAqC,EACrC,OAGC,EACD,UAAkB;IAElB,MAAM,MAAM,GAAG,YAAY,CAAC,OAAO,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACxD,MAAM,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC;IAC5D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,CAAC,GAAG;QAAE,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;IAC3B,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QAC7B,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,IAAI,EAAE,IAAI,IAAI,IAAI,EAAE,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC;QACvC,IAAI,EAAE,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC;QACzB,IAAI,EAAE,IAAI,IAAI;YAAE,OAAO,CAAC,CAAC,CAAC;QAC1B,IAAI,EAAE,YAAY,IAAI,IAAI,EAAE,YAAY,IAAI,EAAE,CAAC;YAC7C,OAAO,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC,GAAG,MAAM,CAAC;QAChD,CAAC;QACD,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,CAAC,EAAE,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC;QAC5B,CAAC;QACD,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,MAAM,EAAE,GAAG,MAAM,CAAC,EAAE,CAAC,CAAC;QACtB,mBAAmB;QACnB,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;YACnE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,GAAG,MAAM,CAAC;QACpD,CAAC;QACD,OAAO,CACL,EAAE,CAAC,aAAa,CAAC,EAAE,EAAE,SAAS,EAAE;YAC9B,OAAO,EAAE,IAAI;YACb,WAAW,EAAE,MAAM;SACpB,CAAC,GAAG,MAAM,CACZ,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/utils/logger.d.ts

@@ -0,0 +1,3 @@
+import pino from 'pino';
+export declare const logger: pino.Logger<never, boolean>;
+//# sourceMappingURL=logger.d.ts.map

package/dist/utils/logger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.d.ts","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAGxB,eAAO,MAAM,MAAM,6BA6BjB,CAAC"}

package/dist/utils/logger.js

@@ -0,0 +1,38 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.logger = void 0;
+const pino_1 = __importDefault(require("pino"));
+const env_1 = require("../config/env");
+exports.logger = (0, pino_1.default)({
+    level: env_1.env.LOG_LEVEL,
+    transport: env_1.env.isDev
+        ? {
+            target: 'pino-pretty',
+            options: {
+                colorize: true,
+                translateTime: 'SYS:standard',
+                ignore: 'pid,hostname',
+            },
+        }
+        : undefined,
+    base: { service: 'ysk-omni' },
+    redact: {
+        paths: [
+            'req.headers.authorization',
+            'req.headers["x-api-key"]',
+            'req.headers.x-api-key',
+            'apiKey',
+            'api_key',
+            'key',
+            'token',
+            'password',
+            'ENCRYPTION_KEY',
+            'gog_sess',
+        ],
+        remove: true,
+    },
+});
+//# sourceMappingURL=logger.js.map

package/dist/utils/logger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"logger.js","sourceRoot":"","sources":["../../src/utils/logger.ts"],"names":[],"mappings":";;;;;;AAAA,gDAAwB;AACxB,uCAAoC;AAEvB,QAAA,MAAM,GAAG,IAAA,cAAI,EAAC;IACzB,KAAK,EAAE,SAAG,CAAC,SAAS;IACpB,SAAS,EACP,SAAG,CAAC,KAAK;QACP,CAAC,CAAC;YACE,MAAM,EAAE,aAAa;YACrB,OAAO,EAAE;gBACP,QAAQ,EAAE,IAAI;gBACd,aAAa,EAAE,cAAc;gBAC7B,MAAM,EAAE,cAAc;aACvB;SACF;QACH,CAAC,CAAC,SAAS;IACf,IAAI,EAAE,EAAE,OAAO,EAAE,UAAU,EAAE;IAC7B,MAAM,EAAE;QACN,KAAK,EAAE;YACL,2BAA2B;YAC3B,0BAA0B;YAC1B,uBAAuB;YACvB,QAAQ;YACR,SAAS;YACT,KAAK;YACL,OAAO;YACP,UAAU;YACV,gBAAgB;YAChB,UAAU;SACX;QACD,MAAM,EAAE,IAAI;KACb;CACF,CAAC,CAAC"}

package/dist/utils/message-content.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Shared helpers for OpenAI / Anthropic style message content
+ * (string | content-part array) and multi-turn prompt building.
+ */
+export declare function flattenMessageContent(content: string | Array<Record<string, unknown>> | null | undefined): string;
+export declare function messageHasImageParts(content: string | Array<Record<string, unknown>> | null | undefined): boolean;
+/**
+ * Build a text prompt from role/content messages.
+ * Multi-turn: role + content; tool_calls / tool results included for context.
+ */
+export declare function messagesToPrompt(messages: Array<{
+    role: string;
+    content: string | null;
+    reasoning_content?: string | null;
+    tool_call_id?: string;
+    tool_calls?: Array<{
+        id?: string;
+        function?: {
+            name?: string;
+            arguments?: string;
+        };
+    }>;
+}>): string;
+//# sourceMappingURL=message-content.d.ts.map

package/dist/utils/message-content.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-content.d.ts","sourceRoot":"","sources":["../../src/utils/message-content.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,GAClE,MAAM,CAaR;AAED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,IAAI,GAAG,SAAS,GAClE,OAAO,CAYT;AAED;;;GAGG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,KAAK,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,KAAK,CAAC;QACjB,EAAE,CAAC,EAAE,MAAM,CAAC;QACZ,QAAQ,CAAC,EAAE;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC;KAClD,CAAC,CAAC;CACJ,CAAC,GACD,MAAM,CAuBR"}

package/dist/utils/message-content.js

@@ -0,0 +1,68 @@
+"use strict";
+/**
+ * Shared helpers for OpenAI / Anthropic style message content
+ * (string | content-part array) and multi-turn prompt building.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.flattenMessageContent = flattenMessageContent;
+exports.messageHasImageParts = messageHasImageParts;
+exports.messagesToPrompt = messagesToPrompt;
+function flattenMessageContent(content) {
+    if (content == null)
+        return '';
+    if (typeof content === 'string')
+        return content;
+    if (!Array.isArray(content))
+        return String(content);
+    return content
+        .map((p) => {
+        if (!p || typeof p !== 'object')
+            return '';
+        if (typeof p.text === 'string')
+            return p.text;
+        if (p.type === 'text' && typeof p.text === 'string')
+            return p.text;
+        return '';
+    })
+        .filter(Boolean)
+        .join('\n');
+}
+function messageHasImageParts(content) {
+    if (!Array.isArray(content))
+        return false;
+    return content.some((p) => {
+        if (!p || typeof p !== 'object')
+            return false;
+        const t = p.type;
+        return (t === 'image_url' ||
+            t === 'input_image' ||
+            t === 'image' ||
+            'image_url' in p);
+    });
+}
+/**
+ * Build a text prompt from role/content messages.
+ * Multi-turn: role + content; tool_calls / tool results included for context.
+ */
+function messagesToPrompt(messages) {
+    if (messages.length === 1 && !messages[0]?.tool_calls?.length) {
+        return messages[0]?.content ?? '';
+    }
+    return messages
+        .map((m) => {
+        if (m.role === 'tool') {
+            const id = m.tool_call_id ? ` id=${m.tool_call_id}` : '';
+            return `tool_result${id}: ${m.content ?? ''}`;
+        }
+        if (m.tool_calls?.length) {
+            const tc = m.tool_calls
+                .map((t) => `${t.function?.name || 'tool'}(${t.function?.arguments || ''})`)
+                .join('; ');
+            const base = m.content?.trim() ? `${m.role}: ${m.content}\n` : '';
+            return `${base}${m.role}_tool_calls: ${tc}`;
+        }
+        return `${m.role}: ${m.content ?? ''}`;
+    })
+        .join('\n');
+}
+//# sourceMappingURL=message-content.js.map

package/dist/utils/message-content.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message-content.js","sourceRoot":"","sources":["../../src/utils/message-content.ts"],"names":[],"mappings":";AAAA;;;GAGG;;AAEH,sDAeC;AAED,oDAcC;AAMD,4CAkCC;AAvED,SAAgB,qBAAqB,CACnC,OAAmE;IAEnE,IAAI,OAAO,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC/B,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,OAAO,CAAC;IAChD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC;IACpD,OAAO,OAAO;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,EAAE,CAAC;QAC3C,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;QAC9C,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,CAAC,CAAC,IAAI,CAAC;QACnE,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC;SACD,MAAM,CAAC,OAAO,CAAC;SACf,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAgB,oBAAoB,CAClC,OAAmE;IAEnE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACxB,IAAI,CAAC,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC9C,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC;QACjB,OAAO,CACL,CAAC,KAAK,WAAW;YACjB,CAAC,KAAK,aAAa;YACnB,CAAC,KAAK,OAAO;YACb,WAAW,IAAI,CAAC,CACjB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;GAGG;AACH,SAAgB,gBAAgB,CAC9B,QASE;IAEF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC;QAC9D,OAAO,QAAQ,CAAC,CAAC,CAAC,EAAE,OAAO,IAAI,EAAE,CAAC;IACpC,CAAC;IACD,OAAO,QAAQ;SACZ,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QACT,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,MAAM,EAAE,GAAG,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzD,OAAO,cAAc,EAAE,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;QAChD,CAAC;QACD,IAAI,CAAC,CAAC,UAAU,EAAE,MAAM,EAAE,CAAC;YACzB,MAAM,EAAE,GAAG,CAAC,CAAC,UAAU;iBACpB,GAAG,CACF,CAAC,CAAC,EAAE,EAAE,CACJ,GAAG,CAAC,CAAC,QAAQ,EAAE,IAAI,IAAI,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,SAAS,IAAI,EAAE,GAAG,CAClE;iBACA,IAAI,CAAC,IAAI,CAAC,CAAC;YACd,MAAM,IAAI,GAAG,CAAC,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YAClE,OAAO,GAAG,IAAI,GAAG,CAAC,CAAC,IAAI,gBAAgB,EAAE,EAAE,CAAC;QAC9C,CAAC;QACD,OAAO,GAAG,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;IACzC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC"}

package/dist/utils/model-allowlist.d.ts

@@ -0,0 +1,14 @@
+export declare const MODEL_ID_MAX = 128;
+/** OpenAI / Hub ids: echo, tts-1, piper/lessac-high, org/repo:Q4_K_M */
+export declare const MODEL_ID_RE: RegExp;
+export type ModelAllowlistSource = {
+    allowedModels?: string[] | null;
+};
+export declare function isValidModelId(id: string): boolean;
+export declare function parseModelList(input: unknown): string[];
+export declare function serializeModelList(list: string[] | null | undefined): string | null;
+/** Empty / missing list = all models. Restricted keys must name an allowed id. */
+export declare function isModelAllowed(apiKey: ModelAllowlistSource, modelId: string | null | undefined): boolean;
+export declare function assertModelAllowed(apiKey: ModelAllowlistSource, modelId: string | null | undefined): void;
+export declare function filterAllowedModels(ids: string[], allowed?: string[] | null): string[];
+//# sourceMappingURL=model-allowlist.d.ts.map

package/dist/utils/model-allowlist.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-allowlist.d.ts","sourceRoot":"","sources":["../../src/utils/model-allowlist.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,YAAY,MAAM,CAAC;AAChC,wEAAwE;AACxE,eAAO,MAAM,WAAW,QAAyC,CAAC;AAElE,MAAM,MAAM,oBAAoB,GAAG;IACjC,aAAa,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;CACjC,CAAC;AAEF,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAGlD;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,EAAE,CA8BvD;AAED,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,GAChC,MAAM,GAAG,IAAI,CAIf;AAED,kFAAkF;AAClF,wBAAgB,cAAc,CAC5B,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACjC,OAAO,CAMT;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,oBAAoB,EAC5B,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACjC,IAAI,CAIN;AAED,wBAAgB,mBAAmB,CACjC,GAAG,EAAE,MAAM,EAAE,EACb,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,IAAI,GACxB,MAAM,EAAE,CAIV"}

package/dist/utils/model-allowlist.js

@@ -0,0 +1,84 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.MODEL_ID_RE = exports.MODEL_ID_MAX = void 0;
+exports.isValidModelId = isValidModelId;
+exports.parseModelList = parseModelList;
+exports.serializeModelList = serializeModelList;
+exports.isModelAllowed = isModelAllowed;
+exports.assertModelAllowed = assertModelAllowed;
+exports.filterAllowedModels = filterAllowedModels;
+const exception_factory_1 = require("../exceptions/exception.factory");
+exports.MODEL_ID_MAX = 128;
+/** OpenAI / Hub ids: echo, tts-1, piper/lessac-high, org/repo:Q4_K_M */
+exports.MODEL_ID_RE = /^[A-Za-z0-9][A-Za-z0-9._:/-]{0,127}$/;
+function isValidModelId(id) {
+    const s = id.trim();
+    return s.length > 0 && s.length <= exports.MODEL_ID_MAX && exports.MODEL_ID_RE.test(s);
+}
+function parseModelList(input) {
+    const raw = [];
+    if (input == null)
+        return [];
+    if (Array.isArray(input)) {
+        for (const x of input) {
+            const s = String(x).trim();
+            if (s)
+                raw.push(s);
+        }
+    }
+    else if (typeof input === 'string') {
+        const trimmed = input.trim();
+        if (!trimmed)
+            return [];
+        try {
+            const parsed = JSON.parse(trimmed);
+            if (Array.isArray(parsed))
+                return parseModelList(parsed);
+        }
+        catch {
+            /* csv / lines */
+        }
+        for (const part of trimmed.split(/[\n,]+/)) {
+            const s = part.trim();
+            if (s)
+                raw.push(s);
+        }
+    }
+    const seen = new Set();
+    const out = [];
+    for (const id of raw) {
+        if (!isValidModelId(id) || seen.has(id))
+            continue;
+        seen.add(id);
+        out.push(id);
+    }
+    return out;
+}
+function serializeModelList(list) {
+    const parsed = parseModelList(list ?? []);
+    if (!parsed.length)
+        return null;
+    return JSON.stringify(parsed);
+}
+/** Empty / missing list = all models. Restricted keys must name an allowed id. */
+function isModelAllowed(apiKey, modelId) {
+    const list = apiKey.allowedModels;
+    if (!list || list.length === 0)
+        return true;
+    const id = (modelId || '').trim();
+    if (!id)
+        return false;
+    return list.includes(id);
+}
+function assertModelAllowed(apiKey, modelId) {
+    if (!isModelAllowed(apiKey, modelId)) {
+        throw exception_factory_1.ExceptionFactory.modelNotAllowed(modelId);
+    }
+}
+function filterAllowedModels(ids, allowed) {
+    if (!allowed || allowed.length === 0)
+        return ids;
+    const set = new Set(allowed);
+    return ids.filter((id) => set.has(id));
+}
+//# sourceMappingURL=model-allowlist.js.map

package/dist/utils/model-allowlist.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-allowlist.js","sourceRoot":"","sources":["../../src/utils/model-allowlist.ts"],"names":[],"mappings":";;;AAUA,wCAGC;AAED,wCA8BC;AAED,gDAMC;AAGD,wCASC;AAED,gDAOC;AAED,kDAOC;AAnFD,uEAAmE;AAEtD,QAAA,YAAY,GAAG,GAAG,CAAC;AAChC,wEAAwE;AAC3D,QAAA,WAAW,GAAG,sCAAsC,CAAC;AAMlE,SAAgB,cAAc,CAAC,EAAU;IACvC,MAAM,CAAC,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;IACpB,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,oBAAY,IAAI,mBAAW,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACzE,CAAC;AAED,SAAgB,cAAc,CAAC,KAAc;IAC3C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,EAAE,CAAC;IAC7B,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;YACtB,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;YAC3B,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;SAAM,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QACrC,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QAC7B,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAY,CAAC;YAC9C,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;gBAAE,OAAO,cAAc,CAAC,MAAM,CAAC,CAAC;QAC3D,CAAC;QAAC,MAAM,CAAC;YACP,iBAAiB;QACnB,CAAC;QACD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,QAAQ,CAAC,EAAE,CAAC;YAC3C,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;YACtB,IAAI,CAAC;gBAAE,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YAAE,SAAS;QAClD,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACb,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,kBAAkB,CAChC,IAAiC;IAEjC,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;IAC1C,IAAI,CAAC,MAAM,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,OAAO,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;AAChC,CAAC;AAED,kFAAkF;AAClF,SAAgB,cAAc,CAC5B,MAA4B,EAC5B,OAAkC;IAElC,MAAM,IAAI,GAAG,MAAM,CAAC,aAAa,CAAC;IAClC,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,MAAM,EAAE,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClC,IAAI,CAAC,EAAE;QAAE,OAAO,KAAK,CAAC;IACtB,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;AAC3B,CAAC;AAED,SAAgB,kBAAkB,CAChC,MAA4B,EAC5B,OAAkC;IAElC,IAAI,CAAC,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAC;QACrC,MAAM,oCAAgB,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;AACH,CAAC;AAED,SAAgB,mBAAmB,CACjC,GAAa,EACb,OAAyB;IAEzB,IAAI,CAAC,OAAO,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,GAAG,CAAC;IACjD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;AACzC,CAAC"}

package/dist/utils/openai-mapper.d.ts

@@ -0,0 +1,19 @@
+import type { EngineJsonResult } from '../interfaces/engine-json-result.interface';
+import type { EngineResponseMeta } from '../interfaces/engine-response-meta.interface';
+import type { MapCompletionOptions } from '../interfaces/map-completion-options.interface';
+import type { OpenAiChatCompletion } from '../interfaces/open-ai-chat-completion.interface';
+import type { OpenAiChatCompletionChunk } from '../interfaces/open-ai-chat-completion-chunk.interface';
+import type { OpenAiModelList } from '../interfaces/open-ai-model-list.interface';
+export declare function mapEngineToChatCompletion(model: string, result: EngineJsonResult, options?: MapCompletionOptions): OpenAiChatCompletion;
+export declare function mapTextDeltaChunk(model: string, content: string, completionId: string, created: number): OpenAiChatCompletionChunk;
+/**
+ * DeepSeek-compatible reasoning stream chunk.
+ * Also sets legacy alias `thought` to the same string.
+ */
+export declare function mapReasoningDeltaChunk(model: string, reasoningContent: string, completionId: string, created: number, includeThoughtAlias?: boolean): OpenAiChatCompletionChunk;
+export declare function mapRoleChunk(model: string, completionId: string, created: number): OpenAiChatCompletionChunk;
+export declare function mapFinishChunk(model: string, completionId: string, created: number, stopReason?: string, omni?: EngineResponseMeta): OpenAiChatCompletionChunk;
+export declare function mapModelsList(models: string[]): OpenAiModelList;
+/** @deprecated Import from `utils/message-content` */
+export { messagesToPrompt } from './message-content';
+//# sourceMappingURL=openai-mapper.d.ts.map

package/dist/utils/openai-mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-mapper.d.ts","sourceRoot":"","sources":["../../src/utils/openai-mapper.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,4CAA4C,CAAC;AACnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,8CAA8C,CAAC;AACvF,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gDAAgD,CAAC;AAC3F,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,iDAAiD,CAAC;AAC5F,OAAO,KAAK,EAAE,yBAAyB,EAAE,MAAM,uDAAuD,CAAC;AAEvG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,4CAA4C,CAAC;AAGlF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,EACb,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,oBAAyB,GACjC,oBAAoB,CA0DtB;AAED,wBAAgB,iBAAiB,CAC/B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,MAAM,EACf,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,yBAAyB,CAc3B;AAED;;;GAGG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,EACxB,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,mBAAmB,UAAO,GACzB,yBAAyB,CAoB3B;AAED,wBAAgB,YAAY,CAC1B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,GACd,yBAAyB,CAc3B;AAED,wBAAgB,cAAc,CAC5B,KAAK,EAAE,MAAM,EACb,YAAY,EAAE,MAAM,EACpB,OAAO,EAAE,MAAM,EACf,UAAU,CAAC,EAAE,MAAM,EACnB,IAAI,CAAC,EAAE,kBAAkB,GACxB,yBAAyB,CAyB3B;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,eAAe,CAQ/D;AAoCD,sDAAsD;AACtD,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC"}

package/dist/utils/openai-mapper.js

@@ -0,0 +1,182 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.messagesToPrompt = void 0;
+exports.mapEngineToChatCompletion = mapEngineToChatCompletion;
+exports.mapTextDeltaChunk = mapTextDeltaChunk;
+exports.mapReasoningDeltaChunk = mapReasoningDeltaChunk;
+exports.mapRoleChunk = mapRoleChunk;
+exports.mapFinishChunk = mapFinishChunk;
+exports.mapModelsList = mapModelsList;
+const id_1 = require("./id");
+function mapEngineToChatCompletion(model, result, options = {}) {
+    const completionId = options.completionId ?? (0, id_1.createChatCompletionId)();
+    const includeReasoning = options.includeReasoning !== false;
+    const reasoning = includeReasoning && options.reasoningContent
+        ? options.reasoningContent
+        : null;
+    const toolCalls = options.toolCalls?.length ? options.toolCalls : undefined;
+    const message = {
+        role: 'assistant',
+        content: toolCalls?.length && !(result.text ?? '').trim() ? null : (result.text ?? ''),
+    };
+    if (includeReasoning && reasoning) {
+        message.reasoning_content = reasoning;
+        message.thought = reasoning; // legacy alias
+    }
+    else if (includeReasoning) {
+        message.reasoning_content = null;
+        message.thought = null;
+    }
+    if (toolCalls?.length) {
+        message.tool_calls = toolCalls;
+    }
+    let finishReason = mapStopReason(result.stopReason ?? options.omni?.stopReason);
+    if (toolCalls?.length && !(result.text ?? '').trim()) {
+        finishReason = 'tool_calls';
+    }
+    const usage = options.usage || {
+        prompt_tokens: 0,
+        completion_tokens: 0,
+        total_tokens: 0,
+    };
+    const response = {
+        id: completionId,
+        object: 'chat.completion',
+        created: Math.floor(Date.now() / 1000),
+        model,
+        choices: [
+            {
+                index: 0,
+                message,
+                finish_reason: finishReason,
+                logprobs: null,
+            },
+        ],
+        usage,
+    };
+    const meta = buildEngineMeta(result, options.omni);
+    if (meta) {
+        response.omni = meta;
+    }
+    return response;
+}
+function mapTextDeltaChunk(model, content, completionId, created) {
+    return {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta: { content },
+                finish_reason: null,
+            },
+        ],
+    };
+}
+/**
+ * DeepSeek-compatible reasoning stream chunk.
+ * Also sets legacy alias `thought` to the same string.
+ */
+function mapReasoningDeltaChunk(model, reasoningContent, completionId, created, includeThoughtAlias = true) {
+    const delta = {
+        reasoning_content: reasoningContent,
+    };
+    if (includeThoughtAlias) {
+        delta.thought = reasoningContent;
+    }
+    return {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta,
+                finish_reason: null,
+            },
+        ],
+    };
+}
+function mapRoleChunk(model, completionId, created) {
+    return {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta: { role: 'assistant', content: '' },
+                finish_reason: null,
+            },
+        ],
+    };
+}
+function mapFinishChunk(model, completionId, created, stopReason, omni) {
+    const fr = stopReason === 'tool_calls'
+        ? 'tool_calls'
+        : mapStopReason(stopReason);
+    const chunk = {
+        id: completionId,
+        object: 'chat.completion.chunk',
+        created,
+        model,
+        choices: [
+            {
+                index: 0,
+                delta: {},
+                finish_reason: fr,
+            },
+        ],
+    };
+    if (omni &&
+        (omni.sessionId || omni.stopReason || omni.requestId || omni.numTurns || omni.cost)) {
+        chunk.omni = omni;
+    }
+    return chunk;
+}
+function mapModelsList(models) {
+    const data = models.map((id) => ({
+        id,
+        object: 'model',
+        created: Math.floor(Date.now() / 1000),
+        owned_by: 'ysk-omni',
+    }));
+    return { object: 'list', data };
+}
+function mapStopReason(stopReason) {
+    if (!stopReason)
+        return 'stop';
+    const lower = stopReason.toLowerCase();
+    if (lower.includes('tool'))
+        return 'tool_calls';
+    if (lower.includes('length') || lower.includes('max'))
+        return 'length';
+    if (lower.includes('filter') || lower.includes('content'))
+        return 'content_filter';
+    return 'stop';
+}
+function buildEngineMeta(result, extra) {
+    const meta = {
+        sessionId: extra?.sessionId ?? result.sessionId,
+        stopReason: extra?.stopReason ?? result.stopReason,
+        requestId: extra?.requestId ?? result.requestId,
+        numTurns: extra?.numTurns,
+        cost: extra?.cost,
+    };
+    if (!meta.sessionId &&
+        !meta.stopReason &&
+        !meta.requestId &&
+        meta.numTurns == null &&
+        !meta.cost) {
+        return undefined;
+    }
+    return meta;
+}
+/** @deprecated Import from `utils/message-content` */
+var message_content_1 = require("./message-content");
+Object.defineProperty(exports, "messagesToPrompt", { enumerable: true, get: function () { return message_content_1.messagesToPrompt; } });
+//# sourceMappingURL=openai-mapper.js.map

package/dist/utils/openai-mapper.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-mapper.js","sourceRoot":"","sources":["../../src/utils/openai-mapper.ts"],"names":[],"mappings":";;;AASA,8DA8DC;AAED,8CAmBC;AAMD,wDA0BC;AAED,oCAkBC;AAED,wCA+BC;AAED,sCAQC;AApLD,6BAA8C;AAE9C,SAAgB,yBAAyB,CACvC,KAAa,EACb,MAAwB,EACxB,UAAgC,EAAE;IAElC,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAA,2BAAsB,GAAE,CAAC;IACtE,MAAM,gBAAgB,GAAG,OAAO,CAAC,gBAAgB,KAAK,KAAK,CAAC;IAC5D,MAAM,SAAS,GACb,gBAAgB,IAAI,OAAO,CAAC,gBAAgB;QAC1C,CAAC,CAAC,OAAO,CAAC,gBAAgB;QAC1B,CAAC,CAAC,IAAI,CAAC;IAEX,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5E,MAAM,OAAO,GAAkD;QAC7D,IAAI,EAAE,WAAW;QACjB,OAAO,EAAE,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;KACvF,CAAC;IAEF,IAAI,gBAAgB,IAAI,SAAS,EAAE,CAAC;QAClC,OAAO,CAAC,iBAAiB,GAAG,SAAS,CAAC;QACtC,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAAC,eAAe;IAC9C,CAAC;SAAM,IAAI,gBAAgB,EAAE,CAAC;QAC5B,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC;QACjC,OAAO,CAAC,OAAO,GAAG,IAAI,CAAC;IACzB,CAAC;IACD,IAAI,SAAS,EAAE,MAAM,EAAE,CAAC;QACtB,OAAO,CAAC,UAAU,GAAG,SAAS,CAAC;IACjC,CAAC;IAED,IAAI,YAAY,GAAG,aAAa,CAAC,MAAM,CAAC,UAAU,IAAI,OAAO,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAChF,IAAI,SAAS,EAAE,MAAM,IAAI,CAAC,CAAC,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC;QACrD,YAAY,GAAG,YAAY,CAAC;IAC9B,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI;QAC7B,aAAa,EAAE,CAAC;QAChB,iBAAiB,EAAE,CAAC;QACpB,YAAY,EAAE,CAAC;KAChB,CAAC;IAEF,MAAM,QAAQ,GAAyB;QACrC,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,iBAAiB;QACzB,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,OAAO;gBACP,aAAa,EAAE,YAAY;gBAC3B,QAAQ,EAAE,IAAI;aACf;SACF;QACD,KAAK;KACN,CAAC;IAEF,MAAM,IAAI,GAAG,eAAe,CAAC,MAAM,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;IACnD,IAAI,IAAI,EAAE,CAAC;QACT,QAAQ,CAAC,IAAI,GAAG,IAAI,CAAC;IACvB,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAgB,iBAAiB,CAC/B,KAAa,EACb,OAAe,EACf,YAAoB,EACpB,OAAe;IAEf,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE,OAAO,EAAE;gBAClB,aAAa,EAAE,IAAI;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CACpC,KAAa,EACb,gBAAwB,EACxB,YAAoB,EACpB,OAAe,EACf,mBAAmB,GAAG,IAAI;IAE1B,MAAM,KAAK,GAAqD;QAC9D,iBAAiB,EAAE,gBAAgB;KACpC,CAAC;IACF,IAAI,mBAAmB,EAAE,CAAC;QACxB,KAAK,CAAC,OAAO,GAAG,gBAAgB,CAAC;IACnC,CAAC;IACD,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK;gBACL,aAAa,EAAE,IAAI;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,YAAY,CAC1B,KAAa,EACb,YAAoB,EACpB,OAAe;IAEf,OAAO;QACL,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,EAAE,EAAE;gBACzC,aAAa,EAAE,IAAI;aACpB;SACF;KACF,CAAC;AACJ,CAAC;AAED,SAAgB,cAAc,CAC5B,KAAa,EACb,YAAoB,EACpB,OAAe,EACf,UAAmB,EACnB,IAAyB;IAEzB,MAAM,EAAE,GACN,UAAU,KAAK,YAAY;QACzB,CAAC,CAAE,YAAsB;QACzB,CAAC,CAAC,aAAa,CAAC,UAAU,CAAC,CAAC;IAChC,MAAM,KAAK,GAA8B;QACvC,EAAE,EAAE,YAAY;QAChB,MAAM,EAAE,uBAAuB;QAC/B,OAAO;QACP,KAAK;QACL,OAAO,EAAE;YACP;gBACE,KAAK,EAAE,CAAC;gBACR,KAAK,EAAE,EAAE;gBACT,aAAa,EAAE,EAAE;aAClB;SACF;KACF,CAAC;IACF,IACE,IAAI;QACJ,CAAC,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,UAAU,IAAI,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,IAAI,CAAC,EACnF,CAAC;QACD,KAAK,CAAC,IAAI,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAgB,aAAa,CAAC,MAAgB;IAC5C,MAAM,IAAI,GAAkB,MAAM,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC9C,EAAE;QACF,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;QACtC,QAAQ,EAAE,UAAU;KACrB,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAClC,CAAC;AAED,SAAS,aAAa,CACpB,UAAmB;IAEnB,IAAI,CAAC,UAAU;QAAE,OAAO,MAAM,CAAC;IAC/B,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,EAAE,CAAC;IACvC,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,YAAY,CAAC;IAChD,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvE,IAAI,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,KAAK,CAAC,QAAQ,CAAC,SAAS,CAAC;QAAE,OAAO,gBAAgB,CAAC;IACnF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,eAAe,CACtB,MAAwB,EACxB,KAA0B;IAE1B,MAAM,IAAI,GAAuB;QAC/B,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS;QAC/C,UAAU,EAAE,KAAK,EAAE,UAAU,IAAI,MAAM,CAAC,UAAU;QAClD,SAAS,EAAE,KAAK,EAAE,SAAS,IAAI,MAAM,CAAC,SAAS;QAC/C,QAAQ,EAAE,KAAK,EAAE,QAAQ;QACzB,IAAI,EAAE,KAAK,EAAE,IAAI;KAClB,CAAC;IACF,IACE,CAAC,IAAI,CAAC,SAAS;QACf,CAAC,IAAI,CAAC,UAAU;QAChB,CAAC,IAAI,CAAC,SAAS;QACf,IAAI,CAAC,QAAQ,IAAI,IAAI;QACrB,CAAC,IAAI,CAAC,IAAI,EACV,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,sDAAsD;AACtD,qDAAqD;AAA5C,mHAAA,gBAAgB,OAAA"}

package/dist/utils/path-safe.d.ts

@@ -0,0 +1,4 @@
+export declare function resolveSafeCwd(input?: string | null): string;
+export declare function sanitizeFilename(name: string): string;
+export declare function ensureRelativeStoragePath(fileId: string): string;
+//# sourceMappingURL=path-safe.d.ts.map

package/dist/utils/path-safe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safe.d.ts","sourceRoot":"","sources":["../../src/utils/path-safe.ts"],"names":[],"mappings":"AAeA,wBAAgB,cAAc,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,MAAM,CAe5D;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAGrD;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAShE"}

package/dist/utils/path-safe.js

@@ -0,0 +1,49 @@
+"use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveSafeCwd = resolveSafeCwd;
+exports.sanitizeFilename = sanitizeFilename;
+exports.ensureRelativeStoragePath = ensureRelativeStoragePath;
+const node_fs_1 = __importDefault(require("node:fs"));
+const node_path_1 = __importDefault(require("node:path"));
+const env_1 = require("../config/env");
+const exception_factory_1 = require("../exceptions/exception.factory");
+function resolveMaybeReal(p) {
+    const abs = node_path_1.default.resolve(p);
+    try {
+        if (node_fs_1.default.existsSync(abs))
+            return node_fs_1.default.realpathSync(abs);
+    }
+    catch {
+        /* ignore */
+    }
+    return abs;
+}
+function resolveSafeCwd(input) {
+    const candidate = resolveMaybeReal(input?.trim() || env_1.env.defaultCwd);
+    const allowed = env_1.env.cwdAllowlist.some((root) => {
+        const resolvedRoot = resolveMaybeReal(root);
+        return candidate === resolvedRoot || candidate.startsWith(resolvedRoot + node_path_1.default.sep);
+    });
+    if (!allowed) {
+        throw exception_factory_1.ExceptionFactory.invalidCwd(`cwd "${candidate}" is outside the allowlist: ${env_1.env.cwdAllowlist.join(', ')}`);
+    }
+    return candidate;
+}
+function sanitizeFilename(name) {
+    const base = node_path_1.default.basename(name).replace(/[^\w.\-()+ ]+/g, '_').slice(0, 200);
+    return base.length > 0 ? base : 'upload.bin';
+}
+function ensureRelativeStoragePath(fileId) {
+    if (!fileId || fileId.includes('..') || fileId.includes('/') || fileId.includes('\\')) {
+        throw exception_factory_1.ExceptionFactory.validation('Invalid storage path');
+    }
+    const safe = fileId.replace(/[^a-zA-Z0-9\-_]/g, '');
+    if (!safe || safe !== fileId) {
+        throw exception_factory_1.ExceptionFactory.validation('Invalid storage path');
+    }
+    return safe;
+}
+//# sourceMappingURL=path-safe.js.map

package/dist/utils/path-safe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"path-safe.js","sourceRoot":"","sources":["../../src/utils/path-safe.ts"],"names":[],"mappings":";;;;;AAeA,wCAeC;AAED,4CAGC;AAED,8DASC;AA9CD,sDAAyB;AACzB,0DAA6B;AAC7B,uCAAoC;AACpC,uEAAmE;AAEnE,SAAS,gBAAgB,CAAC,CAAS;IACjC,MAAM,GAAG,GAAG,mBAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC5B,IAAI,CAAC;QACH,IAAI,iBAAE,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,OAAO,iBAAE,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC;IACtD,CAAC;IAAC,MAAM,CAAC;QACP,YAAY;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAgB,cAAc,CAAC,KAAqB;IAClD,MAAM,SAAS,GAAG,gBAAgB,CAAC,KAAK,EAAE,IAAI,EAAE,IAAI,SAAG,CAAC,UAAU,CAAC,CAAC;IAEpE,MAAM,OAAO,GAAG,SAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;QAC7C,MAAM,YAAY,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QAC5C,OAAO,SAAS,KAAK,YAAY,IAAI,SAAS,CAAC,UAAU,CAAC,YAAY,GAAG,mBAAI,CAAC,GAAG,CAAC,CAAC;IACrF,CAAC,CAAC,CAAC;IAEH,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,oCAAgB,CAAC,UAAU,CAC/B,QAAQ,SAAS,+BAA+B,SAAG,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAC9E,CAAC;IACJ,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAgB,gBAAgB,CAAC,IAAY;IAC3C,MAAM,IAAI,GAAG,mBAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9E,OAAO,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC;AAC/C,CAAC;AAED,SAAgB,yBAAyB,CAAC,MAAc;IACtD,IAAI,CAAC,MAAM,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACtF,MAAM,oCAAgB,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,CAAC,OAAO,CAAC,kBAAkB,EAAE,EAAE,CAAC,CAAC;IACpD,IAAI,CAAC,IAAI,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7B,MAAM,oCAAgB,CAAC,UAAU,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/utils/prisma-bytes.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Prisma Bytes fields accept Buffer; TS 5.x ArrayBufferLike mismatches
+ * require a fresh Buffer copy in some call sites.
+ */
+export declare function toPrismaBytes(buf: Buffer): any;
+/** Alias used by chat/conversation services. */
+export declare const toBytes: typeof toPrismaBytes;
+//# sourceMappingURL=prisma-bytes.d.ts.map

package/dist/utils/prisma-bytes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-bytes.d.ts","sourceRoot":"","sources":["../../src/utils/prisma-bytes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,GAAG,CAE9C;AAED,gDAAgD;AAChD,eAAO,MAAM,OAAO,sBAAgB,CAAC"}

package/dist/utils/prisma-bytes.js

@@ -0,0 +1,14 @@
+"use strict";
+/**
+ * Prisma Bytes fields accept Buffer; TS 5.x ArrayBufferLike mismatches
+ * require a fresh Buffer copy in some call sites.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.toBytes = void 0;
+exports.toPrismaBytes = toPrismaBytes;
+function toPrismaBytes(buf) {
+    return Buffer.from(buf);
+}
+/** Alias used by chat/conversation services. */
+exports.toBytes = toPrismaBytes;
+//# sourceMappingURL=prisma-bytes.js.map

package/dist/utils/prisma-bytes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prisma-bytes.js","sourceRoot":"","sources":["../../src/utils/prisma-bytes.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAEH,sCAEC;AAFD,SAAgB,aAAa,CAAC,GAAW;IACvC,OAAO,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC1B,CAAC;AAED,gDAAgD;AACnC,QAAA,OAAO,GAAG,aAAa,CAAC"}