@agentproto/runtime 0.1.1 → 0.3.0

package/dist/providers-store.d.ts

@@ -0,0 +1,57 @@
+/**
+ * `~/.agentproto/providers.json` — the provider API-key store (mode 0600).
+ *
+ * Distinct from `credentials.json` (host-binding OAuth tokens for
+ * `serve --connect`) and from per-adapter `setup[]` tokens. This file holds
+ * the LLM/model **provider** keys (anthropic, openrouter, openai, …) that the
+ * model gateways in spawned agents read from the environment.
+ *
+ * Why a store at all: before this, the only way to give the daemon a provider
+ * key was an ambient `export FOO_API_KEY=…` in whatever shell launched
+ * `serve`. That's invisible, easy to forget, and per-shell. Storing the keys
+ * here (0600, same-user-only) lets `serve` inject them at boot — set once,
+ * works for every daemon. Explicit env still wins (see injectProviderKeysIntoEnv).
+ *
+ * Keys never leave this file except into the daemon's own process env; they
+ * are never logged. A browser-loaded localhost page can't read a 0600 file —
+ * the same defence the runtime.json bearer token relies on.
+ */
+/**
+ * Canonical provider → environment-variable name. The spawned model gateways
+ * (Mastra in mastra-agent, hermes/opencode's routers) read the provider key
+ * from these env names. Aligned with the adapter manifests' `models.env`
+ * maps + the common SDK conventions.
+ */
+declare const PROVIDER_ENV_VARS: Readonly<Record<string, string>>;
+type KnownProvider = keyof typeof PROVIDER_ENV_VARS;
+interface ProviderEntry {
+    /** The provider API key (or gateway key). */
+    apiKey: string;
+    /** Optional custom base URL (self-hosted / proxy). */
+    baseUrl?: string;
+    /** Wall-clock ISO timestamp the key was last set. */
+    updatedAt: string;
+}
+interface ProvidersFile {
+    version: 1;
+    providers: Record<string, ProviderEntry>;
+}
+declare function providersPath(): string;
+/** Resolve the env-var name for a provider (canonical map, else
+ *  `<PROVIDER>_API_KEY` upper-snake fallback so new providers still work). */
+declare function providerEnvVar(provider: string): string;
+declare function loadProviders(): Promise<ProvidersFile>;
+/** Set (or replace) a provider's key. Returns the env-var it maps to. */
+declare function setProviderKey(provider: string, apiKey: string, baseUrl?: string): Promise<string>;
+/** Remove a provider's key. Returns true if it existed. */
+declare function removeProviderKey(provider: string): Promise<boolean>;
+/**
+ * Inject stored provider keys into a target env (default `process.env`).
+ * **Explicit env always wins** — a var already set is never overwritten, so a
+ * one-off `FOO_API_KEY=… serve` or a CI secret takes precedence over the
+ * store. Returns the list of provider names actually injected (for a boot log
+ * that names providers, never values).
+ */
+declare function injectProviderKeysIntoEnv(env?: NodeJS.ProcessEnv): Promise<string[]>;
+
+export { type KnownProvider, PROVIDER_ENV_VARS, type ProviderEntry, type ProvidersFile, injectProviderKeysIntoEnv, loadProviders, providerEnvVar, providersPath, removeProviderKey, setProviderKey };

package/dist/providers-store.mjs

@@ -0,0 +1,86 @@
+import { readFile, mkdir, writeFile } from 'fs/promises';
+import { homedir } from 'os';
+import { resolve, join } from 'path';
+
+/**
+ * @agentproto/runtime v0.1.0-alpha
+ * Long-running gateway: MCP server + HTTP transport + HEARTBEAT autonomy + conversation persistence over a workspace dir.
+ */
+
+var PROVIDER_ENV_VARS = {
+  anthropic: "ANTHROPIC_API_KEY",
+  openrouter: "OPENROUTER_API_KEY",
+  openai: "OPENAI_API_KEY",
+  google: "GOOGLE_GENERATIVE_AI_API_KEY",
+  groq: "GROQ_API_KEY",
+  mistral: "MISTRAL_API_KEY",
+  // Vercel AI Gateway — a gateway provider, like openrouter, that fronts many
+  // upstream model families behind one key.
+  "vercel-ai-gateway": "AI_GATEWAY_API_KEY"
+};
+function emptyFile() {
+  return { version: 1, providers: {} };
+}
+function providersPath() {
+  return resolve(homedir(), ".agentproto", "providers.json");
+}
+function providerEnvVar(provider) {
+  return PROVIDER_ENV_VARS[provider] ?? `${provider.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_API_KEY`;
+}
+async function loadProviders() {
+  try {
+    const raw = await readFile(providersPath(), "utf8");
+    const parsed = JSON.parse(raw);
+    if (!parsed || typeof parsed !== "object" || !("providers" in parsed) || typeof parsed.providers !== "object" || parsed.providers === null) {
+      return emptyFile();
+    }
+    return {
+      version: 1,
+      providers: parsed.providers
+    };
+  } catch {
+    return emptyFile();
+  }
+}
+async function writeProviders(file) {
+  const dir = join(homedir(), ".agentproto");
+  await mkdir(dir, { recursive: true });
+  await writeFile(providersPath(), JSON.stringify(file, null, 2) + "\n", {
+    encoding: "utf8",
+    mode: 384
+  });
+}
+async function setProviderKey(provider, apiKey, baseUrl) {
+  const file = await loadProviders();
+  file.providers[provider] = {
+    apiKey,
+    ...baseUrl ? { baseUrl } : {},
+    updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  await writeProviders(file);
+  return providerEnvVar(provider);
+}
+async function removeProviderKey(provider) {
+  const file = await loadProviders();
+  if (!(provider in file.providers)) return false;
+  delete file.providers[provider];
+  await writeProviders(file);
+  return true;
+}
+async function injectProviderKeysIntoEnv(env = process.env) {
+  const file = await loadProviders();
+  const injected = [];
+  for (const [provider, entry] of Object.entries(file.providers)) {
+    if (!entry?.apiKey) continue;
+    const name = providerEnvVar(provider);
+    if (env[name]) continue;
+    env[name] = entry.apiKey;
+    if (entry.baseUrl) env[`${provider.toUpperCase().replace(/[^A-Z0-9]+/g, "_")}_BASE_URL`] = entry.baseUrl;
+    injected.push(provider);
+  }
+  return injected;
+}
+
+export { PROVIDER_ENV_VARS, injectProviderKeysIntoEnv, loadProviders, providerEnvVar, providersPath, removeProviderKey, setProviderKey };
+//# sourceMappingURL=providers-store.mjs.map
+//# sourceMappingURL=providers-store.mjs.map

package/dist/providers-store.mjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/providers-store.ts"],"names":[],"mappings":";;;;;;;;;AA6BO,IAAM,iBAAA,GAAsD;AAAA,EACjE,SAAA,EAAW,mBAAA;AAAA,EACX,UAAA,EAAY,oBAAA;AAAA,EACZ,MAAA,EAAQ,gBAAA;AAAA,EACR,MAAA,EAAQ,8BAAA;AAAA,EACR,IAAA,EAAM,cAAA;AAAA,EACN,OAAA,EAAS,iBAAA;AAAA;AAAA;AAAA,EAGT,mBAAA,EAAqB;AACvB;AAoBA,SAAS,SAAA,GAA2B;AAClC,EAAA,OAAO,EAAE,OAAA,EAAS,CAAA,EAAG,SAAA,EAAW,EAAC,EAAE;AACrC;AAEO,SAAS,aAAA,GAAwB;AACtC,EAAA,OAAO,OAAA,CAAQ,OAAA,EAAQ,EAAG,aAAA,EAAe,gBAAgB,CAAA;AAC3D;AAIO,SAAS,eAAe,QAAA,EAA0B;AACvD,EAAA,OACE,iBAAA,CAAkB,QAAQ,CAAA,IAC1B,CAAA,EAAG,QAAA,CAAS,aAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAC,CAAA,QAAA,CAAA;AAEzD;AAEA,eAAsB,aAAA,GAAwC;AAC5D,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,QAAA,CAAS,aAAA,IAAiB,MAAM,CAAA;AAClD,IAAA,MAAM,MAAA,GAAS,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA;AAC7B,IAAA,IACE,CAAC,MAAA,IACD,OAAO,MAAA,KAAW,YAClB,EAAE,WAAA,IAAe,MAAA,CAAA,IACjB,OAAQ,MAAA,CAAmC,SAAA,KAAc,QAAA,IACxD,MAAA,CAAmC,cAAc,IAAA,EAClD;AACA,MAAA,OAAO,SAAA,EAAU;AAAA,IACnB;AACA,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,CAAA;AAAA,MACT,WAAY,MAAA,CAAyB;AAAA,KACvC;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,SAAA,EAAU;AAAA,EACnB;AACF;AAEA,eAAe,eAAe,IAAA,EAAoC;AAChE,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,OAAA,EAAQ,EAAG,aAAa,CAAA;AACzC,EAAA,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,SAAA,EAAW,MAAM,CAAA;AAEpC,EAAA,MAAM,SAAA,CAAU,eAAc,EAAG,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,EAAM,CAAC,CAAA,GAAI,IAAA,EAAM;AAAA,IACrE,QAAA,EAAU,MAAA;AAAA,IACV,IAAA,EAAM;AAAA,GACP,CAAA;AACH;AAGA,eAAsB,cAAA,CACpB,QAAA,EACA,MAAA,EACA,OAAA,EACiB;AACjB,EAAA,MAAM,IAAA,GAAO,MAAM,aAAA,EAAc;AACjC,EAAA,IAAA,CAAK,SAAA,CAAU,QAAQ,CAAA,GAAI;AAAA,IACzB,MAAA;AAAA,IACA,GAAI,OAAA,GAAU,EAAE,OAAA,KAAY,EAAC;AAAA,IAC7B,SAAA,EAAA,iBAAW,IAAI,IAAA,EAAK,EAAE,WAAA;AAAY,GACpC;AACA,EAAA,MAAM,eAAe,IAAI,CAAA;AACzB,EAAA,OAAO,eAAe,QAAQ,CAAA;AAChC;AAGA,eAAsB,kBAAkB,QAAA,EAAoC;AAC1E,EAAA,MAAM,IAAA,GAAO,MAAM,aAAA,EAAc;AACjC,EAAA,IAAI,EAAE,QAAA,IAAY,IAAA,CAAK,SAAA,CAAA,EAAY,OAAO,KAAA;AAC1C,EAAA,OAAO,IAAA,CAAK,UAAU,QAAQ,CAAA;AAC9B,EAAA,MAAM,eAAe,IAAI,CAAA;AACzB,EAAA,OAAO,IAAA;AACT;AASA,eAAsB,yBAAA,CACpB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EACd;AACnB,EAAA,MAAM,IAAA,GAAO,MAAM,aAAA,EAAc;AACjC,EAAA,MAAM,WAAqB,EAAC;AAC5B,EAAA,KAAA,MAAW,CAAC,UAAU,KAAK,CAAA,IAAK,OAAO,OAAA,CAAQ,IAAA,CAAK,SAAS,CAAA,EAAG;AAC9D,IAAA,IAAI,CAAC,OAAO,MAAA,EAAQ;AACpB,IAAA,MAAM,IAAA,GAAO,eAAe,QAAQ,CAAA;AACpC,IAAA,IAAI,GAAA,CAAI,IAAI,CAAA,EAAG;AACf,IAAA,GAAA,CAAI,IAAI,IAAI,KAAA,CAAM,MAAA;AAClB,IAAA,IAAI,KAAA,CAAM,OAAA,EAAS,GAAA,CAAI,CAAA,EAAG,QAAA,CAAS,WAAA,EAAY,CAAE,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAC,CAAA,SAAA,CAAW,IAAI,KAAA,CAAM,OAAA;AACjG,IAAA,QAAA,CAAS,KAAK,QAAQ,CAAA;AAAA,EACxB;AACA,EAAA,OAAO,QAAA;AACT","file":"providers-store.mjs","sourcesContent":["/**\n * `~/.agentproto/providers.json` — the provider API-key store (mode 0600).\n *\n * Distinct from `credentials.json` (host-binding OAuth tokens for\n * `serve --connect`) and from per-adapter `setup[]` tokens. This file holds\n * the LLM/model **provider** keys (anthropic, openrouter, openai, …) that the\n * model gateways in spawned agents read from the environment.\n *\n * Why a store at all: before this, the only way to give the daemon a provider\n * key was an ambient `export FOO_API_KEY=…` in whatever shell launched\n * `serve`. That's invisible, easy to forget, and per-shell. Storing the keys\n * here (0600, same-user-only) lets `serve` inject them at boot — set once,\n * works for every daemon. Explicit env still wins (see injectProviderKeysIntoEnv).\n *\n * Keys never leave this file except into the daemon's own process env; they\n * are never logged. A browser-loaded localhost page can't read a 0600 file —\n * the same defence the runtime.json bearer token relies on.\n */\n\nimport { mkdir, readFile, writeFile } from \"node:fs/promises\"\nimport { homedir } from \"node:os\"\nimport { join, resolve } from \"node:path\"\n\n/**\n * Canonical provider → environment-variable name. The spawned model gateways\n * (Mastra in mastra-agent, hermes/opencode's routers) read the provider key\n * from these env names. Aligned with the adapter manifests' `models.env`\n * maps + the common SDK conventions.\n */\nexport const PROVIDER_ENV_VARS: Readonly<Record<string, string>> = {\n  anthropic: \"ANTHROPIC_API_KEY\",\n  openrouter: \"OPENROUTER_API_KEY\",\n  openai: \"OPENAI_API_KEY\",\n  google: \"GOOGLE_GENERATIVE_AI_API_KEY\",\n  groq: \"GROQ_API_KEY\",\n  mistral: \"MISTRAL_API_KEY\",\n  // Vercel AI Gateway — a gateway provider, like openrouter, that fronts many\n  // upstream model families behind one key.\n  \"vercel-ai-gateway\": \"AI_GATEWAY_API_KEY\",\n}\n\nexport type KnownProvider = keyof typeof PROVIDER_ENV_VARS\n\nexport interface ProviderEntry {\n  /** The provider API key (or gateway key). */\n  apiKey: string\n  /** Optional custom base URL (self-hosted / proxy). */\n  baseUrl?: string\n  /** Wall-clock ISO timestamp the key was last set. */\n  updatedAt: string\n}\n\nexport interface ProvidersFile {\n  version: 1\n  providers: Record<string, ProviderEntry>\n}\n\n/** Fresh empty file each call — never share the `providers` object, or a\n *  later `setProviderKey` mutation leaks into every other load in-process. */\nfunction emptyFile(): ProvidersFile {\n  return { version: 1, providers: {} }\n}\n\nexport function providersPath(): string {\n  return resolve(homedir(), \".agentproto\", \"providers.json\")\n}\n\n/** Resolve the env-var name for a provider (canonical map, else\n *  `<PROVIDER>_API_KEY` upper-snake fallback so new providers still work). */\nexport function providerEnvVar(provider: string): string {\n  return (\n    PROVIDER_ENV_VARS[provider] ??\n    `${provider.toUpperCase().replace(/[^A-Z0-9]+/g, \"_\")}_API_KEY`\n  )\n}\n\nexport async function loadProviders(): Promise<ProvidersFile> {\n  try {\n    const raw = await readFile(providersPath(), \"utf8\")\n    const parsed = JSON.parse(raw) as unknown\n    if (\n      !parsed ||\n      typeof parsed !== \"object\" ||\n      !(\"providers\" in parsed) ||\n      typeof (parsed as Record<string, unknown>).providers !== \"object\" ||\n      (parsed as Record<string, unknown>).providers === null\n    ) {\n      return emptyFile()\n    }\n    return {\n      version: 1,\n      providers: (parsed as ProvidersFile).providers,\n    }\n  } catch {\n    return emptyFile() // ENOENT / malformed → empty\n  }\n}\n\nasync function writeProviders(file: ProvidersFile): Promise<void> {\n  const dir = join(homedir(), \".agentproto\")\n  await mkdir(dir, { recursive: true })\n  // mode 0600 so other local users can't read the keys.\n  await writeFile(providersPath(), JSON.stringify(file, null, 2) + \"\\n\", {\n    encoding: \"utf8\",\n    mode: 0o600,\n  })\n}\n\n/** Set (or replace) a provider's key. Returns the env-var it maps to. */\nexport async function setProviderKey(\n  provider: string,\n  apiKey: string,\n  baseUrl?: string,\n): Promise<string> {\n  const file = await loadProviders()\n  file.providers[provider] = {\n    apiKey,\n    ...(baseUrl ? { baseUrl } : {}),\n    updatedAt: new Date().toISOString(),\n  }\n  await writeProviders(file)\n  return providerEnvVar(provider)\n}\n\n/** Remove a provider's key. Returns true if it existed. */\nexport async function removeProviderKey(provider: string): Promise<boolean> {\n  const file = await loadProviders()\n  if (!(provider in file.providers)) return false\n  delete file.providers[provider]\n  await writeProviders(file)\n  return true\n}\n\n/**\n * Inject stored provider keys into a target env (default `process.env`).\n * **Explicit env always wins** — a var already set is never overwritten, so a\n * one-off `FOO_API_KEY=… serve` or a CI secret takes precedence over the\n * store. Returns the list of provider names actually injected (for a boot log\n * that names providers, never values).\n */\nexport async function injectProviderKeysIntoEnv(\n  env: NodeJS.ProcessEnv = process.env,\n): Promise<string[]> {\n  const file = await loadProviders()\n  const injected: string[] = []\n  for (const [provider, entry] of Object.entries(file.providers)) {\n    if (!entry?.apiKey) continue\n    const name = providerEnvVar(provider)\n    if (env[name]) continue // explicit env wins\n    env[name] = entry.apiKey\n    if (entry.baseUrl) env[`${provider.toUpperCase().replace(/[^A-Z0-9]+/g, \"_\")}_BASE_URL`] = entry.baseUrl\n    injected.push(provider)\n  }\n  return injected\n}\n"]}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agentproto/runtime",
-  "version": "0.1.1",
+  "version": "0.3.0",
   "description": "@agentproto/runtime — long-running gateway that turns an agentproto workspace into a live runtime. Composes @agentproto/mcp-server (CRUD verbs) with HTTP transport, HEARTBEAT.md autonomy loop, and append-only conversation persistence. Drop a workspace dir, point your MCP client at it, and the agent ticks on its own.",
   "keywords": [
     "agentproto",
@@ -56,6 +56,11 @@
       "import": "./dist/config.mjs",
       "default": "./dist/config.mjs"
     },
+    "./providers-store": {
+      "types": "./dist/providers-store.d.ts",
+      "import": "./dist/providers-store.mjs",
+      "default": "./dist/providers-store.mjs"
+    },
     "./mcp-imports": {
       "types": "./dist/mcp-imports.d.ts",
       "import": "./dist/mcp-imports.mjs",
@@ -80,9 +85,11 @@
     "gray-matter": "^4.0.3",
     "ws": "^8.18.0",
     "zod": "^4.4.3",
+    "@agentproto/acp": "0.2.0",
+    "@agentproto/adapter-kit": "0.1.0",
     "@agentproto/agent": "0.2.0",
-    "@agentproto/manifest": "0.2.0",
-    "@agentproto/mcp-server": "0.2.0"
+    "@agentproto/mcp-server": "0.2.1",
+    "@agentproto/manifest": "0.2.0"
   },
   "devDependencies": {
     "@types/node": "^25.6.2",