@agentdeck/shared 1.0.20 → 1.0.22

package/dist/mdns-identity.d.ts

@@ -0,0 +1,68 @@
+/**
+ * How a daemon names itself on `_agentdeck._tcp`, and how a client tells one
+ * daemon's advertisement from another's.
+ *
+ * A DNS-SD instance name must be unique **per network segment**, not per host.
+ * Both daemons published `${project}-${port}` — literally `AgentDeck-9120` on
+ * every machine — so on an office subnet fifty daemons fought over one name.
+ * The Node side does not rename on conflict: it treats "already in use on the
+ * network" as non-fatal, destroys the responder, and the 5-second recovery
+ * timer republishes it, forever. The result is a permanent republish storm and
+ * no daemon that stays reliably resolvable (docs/ENTERPRISE-ROADMAP.md §2.1).
+ *
+ * There is prior art for how badly naming goes wrong here: issue #67, where the
+ * responder's HOSTNAME claim renamed users' Macs. `MDNS_SERVICE_HOST` was made
+ * process-unique for exactly that reason; the instance name never got the same
+ * treatment.
+ *
+ * The name identifies host, user and port, because those are the three ways two
+ * daemons on one segment can legitimately differ. The user is a short hash, not
+ * an account name — the segment does not need to learn who is logged in where,
+ * and multicast is readable by everyone on it.
+ *
+ * This is the SSOT for both daemons; the Swift mirror is generated
+ * (`pnpm generate-mdns-identity`, drift-gated in
+ * `shared/src/__tests__/mdns-identity.test.ts`).
+ */
+/** TXT schema version, in lockstep between the Node and Swift daemons.
+ *  Unchanged by the host/user keys below: no reader validates the key SET (the
+ *  ESP32 walks the record looking for `agent` and `project`), so additive keys
+ *  are readable by every existing client, and bumping would be a compatibility
+ *  event with no compatibility problem to solve. */
+export declare const MDNS_TXT_SCHEMA_VERSION = "3";
+/** Longest host label kept in the instance name. DNS-SD allows 63 bytes for
+ *  the whole instance name, and it also has to hold the project, the user tag
+ *  and the port. */
+export declare const MDNS_HOST_LABEL_MAX = 20;
+/**
+ * Reduce a string to characters that are safe and readable in a DNS-SD
+ * instance label. The spec permits far more than this — the point is not
+ * escaping rules but that the name stays greppable in `dns-sd -B` output and
+ * cannot collide by way of some client's normalization.
+ */
+export declare function sanitizeMdnsLabel(raw: string, maxLength?: number): string;
+/**
+ * Short, stable, non-reversible tag for the OS user a daemon runs as.
+ *
+ * FNV-1a rather than a crypto hash so the Swift mirror is a dozen lines with no
+ * framework import, and because this is a disambiguator, not a secret: it only
+ * has to distinguish the handful of accounts on one machine, and it must never
+ * be the account name itself, which multicast would then publish to the whole
+ * segment.
+ */
+export declare function mdnsUserTag(uid: number, username?: string): string;
+/**
+ * The instance name a daemon publishes.
+ *
+ * Every component is optional-safe: an empty hostname or user tag collapses to
+ * the old `${project}-${port}` shape rather than producing `AgentDeck--9120`,
+ * so a platform that cannot answer one of the questions degrades to today's
+ * behaviour instead of a malformed name.
+ */
+export declare function buildMdnsInstanceName(opts: {
+    project: string;
+    hostname?: string;
+    userTag?: string;
+    port: number;
+}): string;
+//# sourceMappingURL=mdns-identity.d.ts.map

package/dist/mdns-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mdns-identity.d.ts","sourceRoot":"","sources":["../src/mdns-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;oDAIoD;AACpD,eAAO,MAAM,uBAAuB,MAAM,CAAC;AAE3C;;oBAEoB;AACpB,eAAO,MAAM,mBAAmB,KAAK,CAAC;AAEtC;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,MAAM,EAAE,SAAS,SAAsB,GAAG,MAAM,CAOtF;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CAS9D;AAED;;;;;;;GAOG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE;IAC1C,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,MAAM,CAIT"}

package/dist/mdns-identity.js

@@ -0,0 +1,83 @@
+/**
+ * How a daemon names itself on `_agentdeck._tcp`, and how a client tells one
+ * daemon's advertisement from another's.
+ *
+ * A DNS-SD instance name must be unique **per network segment**, not per host.
+ * Both daemons published `${project}-${port}` — literally `AgentDeck-9120` on
+ * every machine — so on an office subnet fifty daemons fought over one name.
+ * The Node side does not rename on conflict: it treats "already in use on the
+ * network" as non-fatal, destroys the responder, and the 5-second recovery
+ * timer republishes it, forever. The result is a permanent republish storm and
+ * no daemon that stays reliably resolvable (docs/ENTERPRISE-ROADMAP.md §2.1).
+ *
+ * There is prior art for how badly naming goes wrong here: issue #67, where the
+ * responder's HOSTNAME claim renamed users' Macs. `MDNS_SERVICE_HOST` was made
+ * process-unique for exactly that reason; the instance name never got the same
+ * treatment.
+ *
+ * The name identifies host, user and port, because those are the three ways two
+ * daemons on one segment can legitimately differ. The user is a short hash, not
+ * an account name — the segment does not need to learn who is logged in where,
+ * and multicast is readable by everyone on it.
+ *
+ * This is the SSOT for both daemons; the Swift mirror is generated
+ * (`pnpm generate-mdns-identity`, drift-gated in
+ * `shared/src/__tests__/mdns-identity.test.ts`).
+ */
+/** TXT schema version, in lockstep between the Node and Swift daemons.
+ *  Unchanged by the host/user keys below: no reader validates the key SET (the
+ *  ESP32 walks the record looking for `agent` and `project`), so additive keys
+ *  are readable by every existing client, and bumping would be a compatibility
+ *  event with no compatibility problem to solve. */
+export const MDNS_TXT_SCHEMA_VERSION = '3';
+/** Longest host label kept in the instance name. DNS-SD allows 63 bytes for
+ *  the whole instance name, and it also has to hold the project, the user tag
+ *  and the port. */
+export const MDNS_HOST_LABEL_MAX = 20;
+/**
+ * Reduce a string to characters that are safe and readable in a DNS-SD
+ * instance label. The spec permits far more than this — the point is not
+ * escaping rules but that the name stays greppable in `dns-sd -B` output and
+ * cannot collide by way of some client's normalization.
+ */
+export function sanitizeMdnsLabel(raw, maxLength = MDNS_HOST_LABEL_MAX) {
+    const cleaned = (raw || '')
+        .split('.')[0] // `mac.local` / FQDN → the short name
+        .replace(/[^A-Za-z0-9-]+/g, '-') // spaces, apostrophes ("Sam's MacBook")
+        .replace(/-+/g, '-')
+        .replace(/^-|-$/g, '');
+    return cleaned.slice(0, maxLength);
+}
+/**
+ * Short, stable, non-reversible tag for the OS user a daemon runs as.
+ *
+ * FNV-1a rather than a crypto hash so the Swift mirror is a dozen lines with no
+ * framework import, and because this is a disambiguator, not a secret: it only
+ * has to distinguish the handful of accounts on one machine, and it must never
+ * be the account name itself, which multicast would then publish to the whole
+ * segment.
+ */
+export function mdnsUserTag(uid, username = '') {
+    let hash = 0x811c9dc5;
+    const input = `${uid}:${username}`;
+    for (let i = 0; i < input.length; i++) {
+        hash ^= input.charCodeAt(i) & 0xff;
+        // FNV prime 16777619, kept in 32-bit range via Math.imul.
+        hash = Math.imul(hash, 0x01000193) >>> 0;
+    }
+    return hash.toString(16).padStart(8, '0').slice(0, 4);
+}
+/**
+ * The instance name a daemon publishes.
+ *
+ * Every component is optional-safe: an empty hostname or user tag collapses to
+ * the old `${project}-${port}` shape rather than producing `AgentDeck--9120`,
+ * so a platform that cannot answer one of the questions degrades to today's
+ * behaviour instead of a malformed name.
+ */
+export function buildMdnsInstanceName(opts) {
+    const host = sanitizeMdnsLabel(opts.hostname ?? '');
+    const user = sanitizeMdnsLabel(opts.userTag ?? '', 8);
+    return [opts.project, host, user, String(opts.port)].filter(Boolean).join('-');
+}
+//# sourceMappingURL=mdns-identity.js.map

package/dist/mdns-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mdns-identity.js","sourceRoot":"","sources":["../src/mdns-identity.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;;;;oDAIoD;AACpD,MAAM,CAAC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAE3C;;oBAEoB;AACpB,MAAM,CAAC,MAAM,mBAAmB,GAAG,EAAE,CAAC;AAEtC;;;;;GAKG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW,EAAE,SAAS,GAAG,mBAAmB;IAC5E,MAAM,OAAO,GAAG,CAAC,GAAG,IAAI,EAAE,CAAC;SACxB,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAoB,sCAAsC;SACvE,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAE,wCAAwC;SACzE,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC;SACnB,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;IACzB,OAAO,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;AACrC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,WAAW,CAAC,GAAW,EAAE,QAAQ,GAAG,EAAE;IACpD,IAAI,IAAI,GAAG,UAAU,CAAC;IACtB,MAAM,KAAK,GAAG,GAAG,GAAG,IAAI,QAAQ,EAAE,CAAC;IACnC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,IAAI,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;QACnC,0DAA0D;QAC1D,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,UAAU,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC;IACD,OAAO,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,qBAAqB,CAAC,IAKrC;IACC,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC;IACtD,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACjF,CAAC"}

package/dist/model-provider.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Which company's endpoint is this model actually answering from — the third
+ * identity axis, next to the harness (`agentType`) and the model (`modelName`).
+ *
+ * Three axes, not two, because they vary independently:
+ *
+ *   - **harness**  — which CLI/app is driving (Claude Code, Codex, OpenCode …).
+ *     It decides the hook set, the transcript format, the steering path and the
+ *     creature. `agentType` carries it.
+ *   - **model**    — which weights answered. `modelName` carries it.
+ *   - **provider** — whose endpoint served those weights. Nothing carried it.
+ *
+ * A `claude-glm` session is Claude Code (same binary, same hooks, same
+ * transcript) pointed at z.ai by `ANTHROPIC_BASE_URL`. Minting a `claude-glm`
+ * *agentType* for it would be wrong twice over: it conflates the harness with
+ * the endpoint, and — because every surface's agent handling is an allow-list —
+ * a value no client predates renders as nothing at all. The model field already
+ * says `glm-5.3`. What was missing is the one-bit fact a reader actually wants:
+ * *this Claude is not talking to Anthropic*.
+ *
+ * Polarity, per the unknown-agent rule: every mapping here is an ALLOW-list.
+ * An unrecognized model returns `'unknown'`, which means "no information" and
+ * renders as nothing — never as some other company's name. A deny-list would
+ * dress every model released after this file as whatever the fallback bucket
+ * happened to be.
+ */
+/** Companies whose endpoints AgentDeck can name. `'unknown'` is the honest
+ *  answer for anything else and must render as no badge, never as a guess. */
+export type ModelProvider = 'anthropic' | 'openai' | 'google' | 'zai' | 'moonshot' | 'deepseek' | 'alibaba' | 'xai' | 'mistral' | 'meta' | 'unknown';
+/** Display names. Kept beside the ids so a surface never spells one itself. */
+export declare const MODEL_PROVIDER_LABELS: Readonly<Record<ModelProvider, string>>;
+/** Substrings that identify a provider from a model id, most specific first.
+ *  Order matters only where one family's name contains another's. */
+export declare const MODEL_MARKERS: ReadonlyArray<readonly [ModelProvider, readonly string[]]>;
+/** Vendor prefixes as they appear in `provider/model` ids (`zai/glm-5.2`). */
+export declare const VENDOR_PREFIXES: Readonly<Record<string, ModelProvider>>;
+/**
+ * Name the provider behind a model id, or `'unknown'` when nothing matches.
+ *
+ * Accepts every id shape the wire actually carries: bare (`glm-5.3`), vendored
+ * (`zai/glm-5.2`), and display-formatted (`GLM-5.2 (1M)`, `gpt-5.6-sol high`).
+ */
+export declare function modelProvider(modelName?: string | null): ModelProvider;
+/**
+ * The provider each harness talks to when nobody has redirected it.
+ *
+ * Allow-list, and deliberately short: `openclaw`, `opencode`, `antigravity` and
+ * `kiro` are multi-provider by design, so they HAVE no native provider and are
+ * absent here — which is what stops them from wearing a permanent "off-harness"
+ * badge for doing exactly what they are for.
+ */
+export declare const HARNESS_NATIVE_PROVIDERS: Readonly<Record<string, ModelProvider>>;
+/** The provider a harness talks to unredirected, or `'unknown'`. */
+export declare function harnessNativeProvider(agentType?: string | null): ModelProvider;
+/**
+ * The provider to badge on a session row, or `null` for "say nothing".
+ *
+ * Non-null only when BOTH sides are known and they disagree — i.e. a harness
+ * with a native provider is demonstrably answering from somewhere else. Two
+ * unknowns must never combine into a claim: absence of evidence is not evidence
+ * of redirection, and a badge on every unrecognized model would be noise on
+ * exactly the rows we know least about.
+ */
+export declare function offHarnessProvider(agentType?: string | null, modelName?: string | null): ModelProvider | null;
+/** Badge text for a session row — `''` when there is nothing to say. */
+export declare function offHarnessProviderLabel(agentType?: string | null, modelName?: string | null): string;
+//# sourceMappingURL=model-provider.d.ts.map

package/dist/model-provider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider.d.ts","sourceRoot":"","sources":["../src/model-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH;8EAC8E;AAC9E,MAAM,MAAM,aAAa,GACrB,WAAW,GACX,QAAQ,GACR,QAAQ,GACR,KAAK,GACL,UAAU,GACV,UAAU,GACV,SAAS,GACT,KAAK,GACL,SAAS,GACT,MAAM,GACN,SAAS,CAAC;AAEd,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,EAAE,QAAQ,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,CAAC,CAYzE,CAAC;AAEF;qEACqE;AACrE,eAAO,MAAM,aAAa,EAAE,aAAa,CAAC,SAAS,CAAC,aAAa,EAAE,SAAS,MAAM,EAAE,CAAC,CAapF,CAAC;AAEF,8EAA8E;AAC9E,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAgBnE,CAAC;AAEF;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAkBtE;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,wBAAwB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,CAM5E,CAAC;AAEF,oEAAoE;AACpE,wBAAgB,qBAAqB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,aAAa,CAE9E;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAChC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,aAAa,GAAG,IAAI,CAMtB;AAED,wEAAwE;AACxE,wBAAgB,uBAAuB,CACrC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EACzB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GACxB,MAAM,CAGR"}

package/dist/model-provider.js

@@ -0,0 +1,143 @@
+/**
+ * Which company's endpoint is this model actually answering from — the third
+ * identity axis, next to the harness (`agentType`) and the model (`modelName`).
+ *
+ * Three axes, not two, because they vary independently:
+ *
+ *   - **harness**  — which CLI/app is driving (Claude Code, Codex, OpenCode …).
+ *     It decides the hook set, the transcript format, the steering path and the
+ *     creature. `agentType` carries it.
+ *   - **model**    — which weights answered. `modelName` carries it.
+ *   - **provider** — whose endpoint served those weights. Nothing carried it.
+ *
+ * A `claude-glm` session is Claude Code (same binary, same hooks, same
+ * transcript) pointed at z.ai by `ANTHROPIC_BASE_URL`. Minting a `claude-glm`
+ * *agentType* for it would be wrong twice over: it conflates the harness with
+ * the endpoint, and — because every surface's agent handling is an allow-list —
+ * a value no client predates renders as nothing at all. The model field already
+ * says `glm-5.3`. What was missing is the one-bit fact a reader actually wants:
+ * *this Claude is not talking to Anthropic*.
+ *
+ * Polarity, per the unknown-agent rule: every mapping here is an ALLOW-list.
+ * An unrecognized model returns `'unknown'`, which means "no information" and
+ * renders as nothing — never as some other company's name. A deny-list would
+ * dress every model released after this file as whatever the fallback bucket
+ * happened to be.
+ */
+/** Display names. Kept beside the ids so a surface never spells one itself. */
+export const MODEL_PROVIDER_LABELS = {
+    anthropic: 'Anthropic',
+    openai: 'OpenAI',
+    google: 'Google',
+    zai: 'z.ai',
+    moonshot: 'Moonshot',
+    deepseek: 'DeepSeek',
+    alibaba: 'Qwen',
+    xai: 'xAI',
+    mistral: 'Mistral',
+    meta: 'Meta',
+    unknown: '',
+};
+/** Substrings that identify a provider from a model id, most specific first.
+ *  Order matters only where one family's name contains another's. */
+export const MODEL_MARKERS = [
+    ['anthropic', ['claude', 'opus', 'sonnet', 'haiku', 'fable']],
+    // `codex-mini` is an OpenAI model id; the Codex *harness* is matched
+    // separately by `harnessNativeProvider`.
+    ['openai', ['gpt-', 'gpt.', 'o1-', 'o3-', 'o4-', 'codex-', 'davinci', 'chatgpt']],
+    ['google', ['gemini', 'gemma', 'palm-']],
+    ['zai', ['glm', 'z-ai', 'zai']],
+    ['moonshot', ['kimi', 'moonshot']],
+    ['deepseek', ['deepseek']],
+    ['alibaba', ['qwen', 'qwq']],
+    ['xai', ['grok']],
+    ['mistral', ['mistral', 'magistral', 'devstral', 'codestral', 'mixtral']],
+    ['meta', ['llama']],
+];
+/** Vendor prefixes as they appear in `provider/model` ids (`zai/glm-5.2`). */
+export const VENDOR_PREFIXES = {
+    anthropic: 'anthropic',
+    openai: 'openai',
+    google: 'google',
+    'google-vertex': 'google',
+    zai: 'zai',
+    'z-ai': 'zai',
+    zhipu: 'zai',
+    moonshot: 'moonshot',
+    moonshotai: 'moonshot',
+    deepseek: 'deepseek',
+    alibaba: 'alibaba',
+    qwen: 'alibaba',
+    xai: 'xai',
+    mistral: 'mistral',
+    meta: 'meta',
+};
+/**
+ * Name the provider behind a model id, or `'unknown'` when nothing matches.
+ *
+ * Accepts every id shape the wire actually carries: bare (`glm-5.3`), vendored
+ * (`zai/glm-5.2`), and display-formatted (`GLM-5.2 (1M)`, `gpt-5.6-sol high`).
+ */
+export function modelProvider(modelName) {
+    const raw = (modelName ?? '').trim().toLowerCase();
+    if (!raw)
+        return 'unknown';
+    // `vendor/model` — the vendor half is authoritative when we recognize it.
+    const slash = raw.indexOf('/');
+    if (slash > 0) {
+        const vendor = VENDOR_PREFIXES[raw.slice(0, slash)];
+        if (vendor)
+            return vendor;
+    }
+    const id = slash > 0 ? raw.slice(slash + 1) : raw;
+    for (const [provider, markers] of MODEL_MARKERS) {
+        for (const marker of markers) {
+            if (id.includes(marker))
+                return provider;
+        }
+    }
+    return 'unknown';
+}
+/**
+ * The provider each harness talks to when nobody has redirected it.
+ *
+ * Allow-list, and deliberately short: `openclaw`, `opencode`, `antigravity` and
+ * `kiro` are multi-provider by design, so they HAVE no native provider and are
+ * absent here — which is what stops them from wearing a permanent "off-harness"
+ * badge for doing exactly what they are for.
+ */
+export const HARNESS_NATIVE_PROVIDERS = {
+    claude: 'anthropic',
+    'claude-code': 'anthropic',
+    codex: 'openai',
+    'codex-cli': 'openai',
+    'codex-app': 'openai',
+};
+/** The provider a harness talks to unredirected, or `'unknown'`. */
+export function harnessNativeProvider(agentType) {
+    return HARNESS_NATIVE_PROVIDERS[(agentType ?? '').trim().toLowerCase()] ?? 'unknown';
+}
+/**
+ * The provider to badge on a session row, or `null` for "say nothing".
+ *
+ * Non-null only when BOTH sides are known and they disagree — i.e. a harness
+ * with a native provider is demonstrably answering from somewhere else. Two
+ * unknowns must never combine into a claim: absence of evidence is not evidence
+ * of redirection, and a badge on every unrecognized model would be noise on
+ * exactly the rows we know least about.
+ */
+export function offHarnessProvider(agentType, modelName) {
+    const native = harnessNativeProvider(agentType);
+    if (native === 'unknown')
+        return null;
+    const actual = modelProvider(modelName);
+    if (actual === 'unknown' || actual === native)
+        return null;
+    return actual;
+}
+/** Badge text for a session row — `''` when there is nothing to say. */
+export function offHarnessProviderLabel(agentType, modelName) {
+    const provider = offHarnessProvider(agentType, modelName);
+    return provider ? MODEL_PROVIDER_LABELS[provider] : '';
+}
+//# sourceMappingURL=model-provider.js.map

package/dist/model-provider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider.js","sourceRoot":"","sources":["../src/model-provider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAiBH,+EAA+E;AAC/E,MAAM,CAAC,MAAM,qBAAqB,GAA4C;IAC5E,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,GAAG,EAAE,MAAM;IACX,QAAQ,EAAE,UAAU;IACpB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,MAAM;IACf,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;IACZ,OAAO,EAAE,EAAE;CACZ,CAAC;AAEF;qEACqE;AACrE,MAAM,CAAC,MAAM,aAAa,GAA+D;IACvF,CAAC,WAAW,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IAC7D,qEAAqE;IACrE,yCAAyC;IACzC,CAAC,QAAQ,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;IACjF,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;IACxC,CAAC,KAAK,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC/B,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IAClC,CAAC,UAAU,EAAE,CAAC,UAAU,CAAC,CAAC;IAC1B,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;IAC5B,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;IACjB,CAAC,SAAS,EAAE,CAAC,SAAS,EAAE,WAAW,EAAE,UAAU,EAAE,WAAW,EAAE,SAAS,CAAC,CAAC;IACzE,CAAC,MAAM,EAAE,CAAC,OAAO,CAAC,CAAC;CACpB,CAAC;AAEF,8EAA8E;AAC9E,MAAM,CAAC,MAAM,eAAe,GAA4C;IACtE,SAAS,EAAE,WAAW;IACtB,MAAM,EAAE,QAAQ;IAChB,MAAM,EAAE,QAAQ;IAChB,eAAe,EAAE,QAAQ;IACzB,GAAG,EAAE,KAAK;IACV,MAAM,EAAE,KAAK;IACb,KAAK,EAAE,KAAK;IACZ,QAAQ,EAAE,UAAU;IACpB,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE,UAAU;IACpB,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,SAAS;IACf,GAAG,EAAE,KAAK;IACV,OAAO,EAAE,SAAS;IAClB,IAAI,EAAE,MAAM;CACb,CAAC;AAEF;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,SAAyB;IACrD,MAAM,GAAG,GAAG,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IACnD,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAE3B,0EAA0E;IAC1E,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/B,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;QACpD,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;IAC5B,CAAC;IAED,MAAM,EAAE,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAClD,KAAK,MAAM,CAAC,QAAQ,EAAE,OAAO,CAAC,IAAI,aAAa,EAAE,CAAC;QAChD,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;YAC7B,IAAI,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC;gBAAE,OAAO,QAAQ,CAAC;QAC3C,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAA4C;IAC/E,MAAM,EAAE,WAAW;IACnB,aAAa,EAAE,WAAW;IAC1B,KAAK,EAAE,QAAQ;IACf,WAAW,EAAE,QAAQ;IACrB,WAAW,EAAE,QAAQ;CACtB,CAAC;AAEF,oEAAoE;AACpE,MAAM,UAAU,qBAAqB,CAAC,SAAyB;IAC7D,OAAO,wBAAwB,CAAC,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,IAAI,SAAS,CAAC;AACvF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,kBAAkB,CAChC,SAAyB,EACzB,SAAyB;IAEzB,MAAM,MAAM,GAAG,qBAAqB,CAAC,SAAS,CAAC,CAAC;IAChD,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,MAAM,GAAG,aAAa,CAAC,SAAS,CAAC,CAAC;IACxC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,uBAAuB,CACrC,SAAyB,EACzB,SAAyB;IAEzB,MAAM,QAAQ,GAAG,kBAAkB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC1D,OAAO,QAAQ,CAAC,CAAC,CAAC,qBAAqB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACzD,CAAC"}

package/dist/openclaw-approval.d.ts

@@ -0,0 +1,128 @@
+/**
+ * openclaw-approval.ts — SSOT for OpenClaw exec-approval prompts.
+ *
+ * WHY THIS FILE EXISTS. The approval surface was originally typed from an
+ * assumption rather than from OpenClaw's own SDK, and every part of that guess
+ * was wrong in a way that failed silently:
+ *
+ *  - The `exec.approval.requested` event was read as a FLAT payload
+ *    (`payload.command` / `payload.ask`). The Gateway actually nests the whole
+ *    thing under `request` (`buildRequestedApprovalEvent` →
+ *    `{ id, request, createdAtMs, expiresAtMs }`), so every field read as
+ *    `undefined` and the prompt collapsed to the literal fallback string
+ *    "Approve tool execution?" — the user could see that something wanted
+ *    approval but never WHAT.
+ *  - `ask` is the approval POLICY ("on-miss" / "always"), not a question. It
+ *    was being rendered as if it were the human-readable ask.
+ *  - The decision vocabulary was typed as `'allow' | 'deny'`. The Gateway
+ *    accepts only `'allow-once' | 'allow-always' | 'deny'` (its
+ *    `isApprovalDecision`), and validates the decision BEFORE it looks the
+ *    approval id up — so every "allow" AgentDeck ever sent came back
+ *    INVALID_REQUEST and the approval stayed pending. The wrong vocabulary was
+ *    baked into the shared TypeScript type, so the compiler actively enforced
+ *    the unusable value.
+ *
+ * The lesson that keeps this file honest: the requested format lives in THEIR
+ * SDK. Everything below is derived from the OpenClaw gateway bundle
+ * (`approval-shared`, `exec-approval`, `exec-approvals`), not from inference.
+ *
+ * Parsing is pure and lives here so the Node adapter, the Swift daemon mirror,
+ * and the tests all agree on one normalization.
+ */
+/**
+ * The decisions the Gateway will accept for an exec approval.
+ * Mirror of OpenClaw's `isApprovalDecision` / `DEFAULT_EXEC_APPROVAL_DECISIONS`.
+ * `'allow'` is NOT a member — sending it is rejected as an invalid decision.
+ */
+export type ExecApprovalDecision = 'allow-once' | 'allow-always' | 'deny';
+/** Full decision set, in the order the Gateway lists them. */
+export declare const EXEC_APPROVAL_DECISIONS: readonly ExecApprovalDecision[];
+export declare function isExecApprovalDecision(value: unknown): value is ExecApprovalDecision;
+/** `true` for the decisions that let the command run. */
+export declare function execApprovalAllows(decision: string | null | undefined): boolean;
+export declare function execApprovalDecisionLabel(decision: ExecApprovalDecision): string;
+/** The `request` body OpenClaw nests inside the requested event. */
+export interface ExecApprovalRequestBody {
+    /** Sanitized command display text — the thing the user is approving. */
+    command?: string;
+    /** Non-node hosts send a preview instead of the full command. */
+    commandPreview?: string;
+    commandArgv?: string[];
+    cwd?: string | null;
+    host?: string | null;
+    /** Approval POLICY ("on-miss" | "always" | …), never a question. */
+    ask?: string | null;
+    security?: string | null;
+    /** Human-readable risk note, when the Gateway produced one. */
+    warningText?: string | null;
+    /** Gateway-side static analysis summary of the command. */
+    commandAnalysis?: string | null;
+    /** Decisions this specific request permits (policy may drop allow-always). */
+    allowedDecisions?: string[];
+    unavailableDecisions?: string[];
+    agentId?: string | null;
+    sessionKey?: string | null;
+    resolvedPath?: string | null;
+}
+/**
+ * `exec.approval.requested` payload. The nested `request` is the real shape;
+ * the flat fields are tolerated so a future/legacy Gateway that inlines them
+ * still parses instead of silently producing an empty prompt.
+ */
+export interface ExecApprovalRequestedPayload extends Partial<ExecApprovalRequestBody> {
+    id: string;
+    request?: ExecApprovalRequestBody;
+    createdAtMs?: number;
+    expiresAtMs?: number;
+}
+/** `exec.approval.resolved` payload (`buildResolvedEvent` in exec-approval). */
+export interface ExecApprovalResolvedPayload {
+    id: string;
+    decision: ExecApprovalDecision | string;
+    resolvedBy?: string | null;
+    ts?: number;
+    request?: ExecApprovalRequestBody;
+}
+/** One renderable choice on a deck surface. */
+export interface ExecApprovalOption {
+    index: number;
+    label: string;
+    shortcut: string;
+    decision: ExecApprovalDecision;
+}
+/**
+ * Normalized prompt — what every surface renders and what an answer maps back
+ * through. Deliberately carries the decision on each option so an index press
+ * can never be re-derived (and mis-derived) at the answer site.
+ */
+export interface OpenClawApprovalPrompt {
+    id: string;
+    /** Headline: the command itself, so the user knows what they are approving. */
+    question: string;
+    /** Supporting lines (cwd, warning, analysis) for surfaces with room. */
+    detail?: string;
+    /** Raw command text, unprefixed — for the timeline row. */
+    command: string;
+    cwd?: string;
+    options: ExecApprovalOption[];
+    /** Wall-clock expiry, when the Gateway set one. */
+    expiresAtMs?: number;
+    requestedAtMs: number;
+    sessionKey?: string;
+}
+/**
+ * Normalize a raw `exec.approval.requested` payload. Returns `null` only when
+ * the payload carries no usable id — a request with no command text still
+ * produces a prompt (labeled as unknown) so the user keeps the ability to deny.
+ */
+export declare function parseExecApprovalRequest(payload: ExecApprovalRequestedPayload | Record<string, unknown> | null | undefined, nowMs: number): OpenClawApprovalPrompt | null;
+/** Map a `select_option` index onto the decision that option represents. */
+export declare function decisionForOptionIndex(prompt: OpenClawApprovalPrompt, index: number): ExecApprovalDecision | null;
+/**
+ * Map a `respond` value onto a decision. Accepts the option shortcut, the
+ * decision name itself, and the y/n/a spellings a hardware key or the wake-word
+ * assistant sends. Anything unrecognized returns `null` — an ambiguous press
+ * must never be guessed into an approval.
+ */
+export declare function decisionForRespondValue(prompt: OpenClawApprovalPrompt, value: string): ExecApprovalDecision | null;
+//# sourceMappingURL=openclaw-approval.d.ts.map

package/dist/openclaw-approval.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openclaw-approval.d.ts","sourceRoot":"","sources":["../src/openclaw-approval.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAAG,YAAY,GAAG,cAAc,GAAG,MAAM,CAAC;AAE1E,8DAA8D;AAC9D,eAAO,MAAM,uBAAuB,EAAE,SAAS,oBAAoB,EAIlE,CAAC;AAEF,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAEpF;AAED,yDAAyD;AACzD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAE/E;AAYD,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,oBAAoB,GAAG,MAAM,CAEhF;AAED,oEAAoE;AACpE,MAAM,WAAW,uBAAuB;IACtC,wEAAwE;IACxE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iEAAiE;IACjE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,oEAAoE;IACpE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,+DAA+D;IAC/D,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,2DAA2D;IAC3D,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,8EAA8E;IAC9E,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAC;IAC5B,oBAAoB,CAAC,EAAE,MAAM,EAAE,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC9B;AAED;;;;GAIG;AACH,MAAM,WAAW,4BAA6B,SAAQ,OAAO,CAAC,uBAAuB,CAAC;IACpF,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,CAAC,EAAE,uBAAuB,CAAC;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,gFAAgF;AAChF,MAAM,WAAW,2BAA2B;IAC1C,EAAE,EAAE,MAAM,CAAC;IACX,QAAQ,EAAE,oBAAoB,GAAG,MAAM,CAAC;IACxC,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC3B,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,OAAO,CAAC,EAAE,uBAAuB,CAAC;CACnC;AAED,+CAA+C;AAC/C,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,EAAE,MAAM,CAAC;IACd,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,oBAAoB,CAAC;CAChC;AAED;;;;GAIG;AACH,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAC;IACX,+EAA+E;IAC/E,QAAQ,EAAE,MAAM,CAAC;IACjB,wEAAwE;IACxE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,OAAO,EAAE,MAAM,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,mDAAmD;IACnD,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AAkCD;;;;GAIG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,4BAA4B,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,EAClF,KAAK,EAAE,MAAM,GACZ,sBAAsB,GAAG,IAAI,CA+C/B;AAED,4EAA4E;AAC5E,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,EAC9B,KAAK,EAAE,MAAM,GACZ,oBAAoB,GAAG,IAAI,CAG7B;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,EAC9B,KAAK,EAAE,MAAM,GACZ,oBAAoB,GAAG,IAAI,CAyB7B"}