@ai21/gateway 1.3.0 → 1.3.1

package/README.md

@@ -102,10 +102,11 @@ mistake.
 
 `install` reports onboarding events to AI21's product analytics (Amplitude), so we can
 see where setup fails: when it started, then whether it completed or at which step it
-failed, with the CLI version, OS, workspace id and a random per-run id. A failure is
-reported as a fixed reason, never the message you saw, so no key, email, path, agent id
-or argument is ever sent. Setup counts as completed only once the written config has
-been verified. Only the production and staging gateways report; any other `--gateway`
+failed, with your AI21 user id, the CLI version, OS, workspace id and a random per-run
+id. A failure is reported as a fixed reason, never the message you saw, so no key, email,
+path, agent id or argument is ever sent. Setup counts as completed only once the written
+config has been verified. A setup run while no one is signed in to that gateway is not
+reported. Only the production and staging gateways report; any other `--gateway`
 sends nothing. Reporting never delays or fails a command (`src/telemetry/`).
 
 > **Internal only.** The package is published to AI21's Artifact Registry, not

package/dist/agents/claude-code/revert.d.ts

@@ -0,0 +1,11 @@
+import { type ConfigPaths } from "../../fs/safeFile.js";
+import type { RevertOptions, RevertOutcome } from "../types.js";
+type JsonObject = Record<string, unknown>;
+/**
+ * The `x-agent-id` currently stored in the `\n`-joined header value. Returns
+ * undefined when the header, or the whole value, is absent or unparseable — an
+ * absent id can never satisfy the guard, which is the safe direction.
+ */
+export declare function storedAgentId(env: JsonObject | undefined): string | undefined;
+export declare function revertConfig(paths: ConfigPaths, options: RevertOptions): RevertOutcome;
+export {};

package/dist/{revert.js → agents/claude-code/revert.js}

@@ -11,7 +11,8 @@
  */
 import { copyFileSync, existsSync, lstatSync, readFileSync, readlinkSync, realpathSync } from "node:fs";
 import { dirname, resolve } from "node:path";
-import { MANAGED_KEYS, atomicWrite, describeFsError, isOurConfig, isPlainObject, serialize, } from "./config.js";
+import { atomicWrite, describeFsError } from "../../fs/safeFile.js";
+import { MANAGED_KEYS, isOurConfig, isPlainObject, serialize } from "./settings.js";
 /**
  * Resolve a symlinked settings.json to what it names, so a revert writes through
  * the link rather than replacing it — the same reason the writer does this.

package/dist/agents/claude-code/revert.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"revert.js","sourceRoot":"","sources":["../../../src/agents/claude-code/revert.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACxG,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAE7C,OAAO,EAAoB,WAAW,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAEtF,OAAO,EAAE,YAAY,EAAE,WAAW,EAAE,aAAa,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAIpF;;;GAGG;AACH,SAAS,UAAU,CAAC,IAAY;IAC9B,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1E,OAAO,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAWD,gFAAgF;AAChF,SAAS,IAAI,CAAC,IAAY;IACxB,IAAI,QAAgB,CAAC;IACrB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9B,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;IAC7E,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,4EAA4E;QAC5E,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,EAAE,CAAC;IAClF,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,EAAE,CAAC;IAChG,CAAC;IAED,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC;IACvB,IAAI,GAAG,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7C,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,EAAE,CAAC;IAC5F,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,GAA2B;IACvD,MAAM,OAAO,GAAG,GAAG,EAAE,wBAAwB,CAAC;IAC9C,IAAI,OAAO,OAAO,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAElD,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,KAAK,GAAG,iCAAiC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3D,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,SAAS;YAAE,OAAO,KAAK,CAAC,CAAC,CAAC,CAAC;IAChD,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oFAAoF;AACpF,SAAS,kBAAkB,CAAC,MAAkB,EAAE,GAA2B;IACzE,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,MAAM,CAAC;IAErC,MAAM,SAAS,GAAG,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC7F,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAElD,iFAAiF;IACjF,4EAA4E;IAC5E,+EAA+E;IAC/E,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,OAAO;YAAE,MAAM,CAAC,GAAG,GAAG,SAAS,CAAC;IACtC,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAQ,YAAkC,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAC3D,CAAC;AAED,uFAAuF;AACvF,SAAS,UAAU,CAAC,OAAmB,EAAE,SAAiB;IACxD,IAAI,YAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,YAAY,GAAG,IAAI,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,uEAAuE;QACvE,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,MAAM,SAAS,GAAG,aAAa,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAEjF,OAAO,CACL,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,CAAC,SAAS,CAAC,kBAAkB,CAAC,YAAY,EAAE,SAAS,CAAC,CAAC,CAC5D,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAkB,EAAE,IAAgB,EAAE,OAAsB;IACrF,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;IAE9E,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7C,CAAC;IAED,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,SAAS,GAAG,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC3C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,UAAU,CAAC,IAAI,EAAE,SAAS,CAAC,EAAE,CAAC;QAClD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC3C,CAAC;IAED,IAAI,CAAC;QACH,6EAA6E;QAC7E,6EAA6E;QAC7E,YAAY,CAAC,MAAM,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC5C,CAAC;AAED,mFAAmF;AACnF,SAAS,OAAO,CAAC,MAAkB,EAAE,GAA2B;IAC9D,MAAM,IAAI,GAAG,GAAG,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;IAC9D,MAAM,MAAM,GAAe,EAAE,CAAC;IAC9B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,GAAG,KAAK,KAAK,EAAE,CAAC;YAClB,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACpB,SAAS;QACX,CAAC;QAED,IAAI,IAAI;YAAE,MAAM,CAAC,GAAG,GAAG,GAAG,CAAC;IAC7B,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,qFAAqF;AACrF,SAAS,WAAW,CAAC,KAAkB,EAAE,IAAgB;IACvD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,QAAQ,MAAM,CAAC;IACxF,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QACxB,6EAA6E;QAC7E,OAAO,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IAC/B,CAAC;IAED,IAAI,CAAC;QACH,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC;QACjE,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;YAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;QAExD,OAAO,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,iBAAiB,CAAC,KAAkB,EAAE,IAAgB;IAC7D,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IACjC,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,UAAU,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;IAE7D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAe,EAAE,CAAC;IAE/B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,EAAE,CAAC;QAC1D,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,EAAE,CAAC;YACpB,OAAO,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;YACrB,SAAS;QACX,CAAC;QAED,MAAM,QAAQ,GAAG,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC;QAC/B,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAClB,SAAS;QACX,CAAC;QAED,OAAO,CAAC,GAAG,CAAC,GAAG,QAAQ,CAAC;QACxB,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,CAAC;QACH,gFAAgF;QAChF,yEAAyE;QACzE,WAAW,CAAC,IAAI,CAAC,QAAQ,EAAE,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;IACvE,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC;AACrF,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,KAAkB,EAAE,OAAsB;IACrE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEjC,gEAAgE;IAChE,IAAI,CAAC,UAAU,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;QAClC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1B,IAAI,SAAS,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC,OAAO,CAAC;IAE/C,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,CAAC;IAExB,8EAA8E;IAC9E,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,CAAC;IAC1C,CAAC;IAED,wEAAwE;IACxE,wDAAwD;IACxD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS,EAAE,CAAC;QACvC,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,OAAO,CAAC,YAAY,EAAE,CAAC;YACpC,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE,MAAM,EAAE,MAAM,IAAI,MAAM,EAAE,CAAC;QACpG,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC;AACvG,CAAC"}

package/dist/agents/claude-code/settings.d.ts

@@ -0,0 +1,33 @@
+import type { Target } from "../../args.js";
+import { type ConfigPaths } from "../../fs/safeFile.js";
+import type { ConfigOutcome, PathContext } from "../types.js";
+/** The `env` keys this tool owns. Anything else in the file is not ours. */
+export declare const MANAGED_KEYS: readonly ["ANTHROPIC_BASE_URL", "ANTHROPIC_CUSTOM_HEADERS", "ENABLE_TOOL_SEARCH"];
+/**
+ * Whether this file is *ours*, judged by a marker rather than by key names. Key names
+ * cannot tell our `ENABLE_TOOL_SEARCH` from one the developer set, so a hand-added key
+ * would be deleted by the next `uninstall`. Only this tool writes an `x-ai21-key`.
+ */
+export declare function isOurConfig(env: Record<string, unknown> | undefined): boolean;
+/** Claude Code reads `settings.local.json` after ours, so its env wins. */
+export declare function shadowingLocalConfig(paths: ConfigPaths): {
+    path: string;
+    agentId?: string;
+} | undefined;
+/**
+ * `--user` (the default) targets the home directory, `--repo` the project. A
+ * literal `~` is never expanded, so a directory named `~` is treated as one.
+ */
+export declare function resolvePaths(target: Target, ctx: PathContext): ConfigPaths;
+type JsonObject = Record<string, unknown>;
+export declare function isPlainObject(value: unknown): value is JsonObject;
+export declare function serialize(settings: JsonObject): string;
+/**
+ * Merge `desiredEnv` into `paths.settings`. Returns what happened rather than
+ * throwing, so the caller owns reporting and the exit code. Nothing is written on
+ * the `conflict` or `malformed` outcomes.
+ */
+export declare function writeConfig(paths: ConfigPaths, desiredEnv: Record<string, string>, options?: {
+    readonly force: boolean;
+}): ConfigOutcome;
+export {};

package/dist/{config.js → agents/claude-code/settings.js}

@@ -5,20 +5,14 @@
  * for us. Every path leaves it byte-identical or replaces it atomically with a
  * backup alongside, and no refusal path touches it at all.
  *
- * Helpers are exported for `revert.ts` and `snapshot.ts`, which uphold the same
+ * Helpers are exported for `revert.ts` and `fs/snapshot.ts`, which uphold the same
  * guarantees on the way back out — a second atomic write is a second chance to get it wrong.
  */
-import { chmodSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, realpathSync, renameSync, rmSync, writeFileSync, } from "node:fs";
+import { chmodSync, copyFileSync, existsSync, lstatSync, mkdirSync, readFileSync, readlinkSync, realpathSync, } from "node:fs";
 import { dirname, join, resolve } from "node:path";
-import { DEFAULT_CLIENT } from "./args.js";
+import { atomicWrite, backupPathFor, describeFsError } from "../../fs/safeFile.js";
 /** The `env` keys this tool owns. Anything else in the file is not ours. */
 export const MANAGED_KEYS = ["ANTHROPIC_BASE_URL", "ANTHROPIC_CUSTOM_HEADERS", "ENABLE_TOOL_SEARCH"];
-/* Where each client's config lives, relative to whichever root the target selects.
- * A second client needs more than a row here — MANAGED_KEYS and the snippet builders
- * are Claude Code's env shape — but this is the fork the rest of the code reads. */
-const CLIENT_CONFIG = {
-    "claude-code": { dir: ".claude", file: "settings.json" },
-};
 /**
  * Whether this file is *ours*, judged by a marker rather than by key names. Key names
  * cannot tell our `ENABLE_TOOL_SEARCH` from one the developer set, so a hand-added key
@@ -50,61 +44,16 @@ export function shadowingLocalConfig(paths) {
  * `--user` (the default) targets the home directory, `--repo` the project. A
  * literal `~` is never expanded, so a directory named `~` is treated as one.
  */
-export function resolvePaths(target, ctx, client = DEFAULT_CLIENT) {
-    const { dir, file } = CLIENT_CONFIG[client];
-    const settings = join(target === "user" ? ctx.home : ctx.cwd, dir, file);
+export function resolvePaths(target, ctx) {
+    const settings = join(target === "user" ? ctx.home : ctx.cwd, ".claude", "settings.json");
     return { settings, backup: `${settings}.bak` };
 }
-/**
- * Turns an fs error into something safe to print. The code is translated rather
- * than forwarded so no stack frame, errno struct or internal path escapes.
- */
-export function describeFsError(err) {
-    const code = err?.code;
-    switch (code) {
-        case "EACCES":
-        case "EPERM":
-            return "permission denied";
-        case "ENOSPC":
-            return "no space left on the device";
-        case "EROFS":
-            return "the filesystem is read-only";
-        case "EISDIR":
-            return "it is a directory, not a file";
-        default:
-            return "the write could not be completed";
-    }
-}
 export function isPlainObject(value) {
     return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-/**
- * Write via a sibling temp file and rename. The rename is atomic within a
- * filesystem, so a reader either sees the old file or the new one — never a
- * half-written config. The temp file is removed on any failure so a crashed run
- * leaves no litter next to the real file.
- */
-export function atomicWrite(target, contents) {
-    // Same directory, so the rename cannot cross a filesystem boundary. The pid
-    // keeps two concurrent runs from fighting over one temp name.
-    const tmp = `${target}.${process.pid}.tmp`;
-    try {
-        // 0600: this file carries an API key.
-        writeFileSync(tmp, contents, { mode: 0o600 });
-        renameSync(tmp, target);
-    }
-    catch (err) {
-        rmSync(tmp, { force: true });
-        throw err;
-    }
-}
 export function serialize(settings) {
     return `${JSON.stringify(settings, null, 2)}\n`;
 }
-/** A symlinked settings.json is backed up beside its target, not beside the link. */
-export function backupPathFor(paths, realPath) {
-    return realPath === paths.settings ? paths.backup : `${realPath}.bak`;
-}
 /**
  * Merge `desiredEnv` into `paths.settings`. Returns what happened rather than
  * throwing, so the caller owns reporting and the exit code. Nothing is written on
@@ -206,4 +155,4 @@ export function writeConfig(paths, desiredEnv, options = { force: false }) {
     }
     return { kind: "updated", path, backup: backupPath, changed };
 }
-//# sourceMappingURL=config.js.map
+//# sourceMappingURL=settings.js.map

package/dist/agents/claude-code/settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"settings.js","sourceRoot":"","sources":["../../../src/agents/claude-code/settings.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EACL,SAAS,EACT,YAAY,EACZ,UAAU,EACV,SAAS,EACT,SAAS,EACT,YAAY,EACZ,YAAY,EACZ,YAAY,GACb,MAAM,SAAS,CAAC;AACjB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGnD,OAAO,EAAoB,WAAW,EAAE,aAAa,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAGrG,4EAA4E;AAC5E,MAAM,CAAC,MAAM,YAAY,GAAG,CAAC,oBAAoB,EAAE,0BAA0B,EAAE,oBAAoB,CAAU,CAAC;AAE9G;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,GAAwC;IAClE,MAAM,OAAO,GAAG,GAAG,EAAE,wBAAwB,CAAC;IAE9C,OAAO,OAAO,OAAO,KAAK,QAAQ,IAAI,2BAA2B,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;AAClF,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,oBAAoB,CAAC,KAAkB;IACrD,MAAM,IAAI,GAAG,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;IAE9D,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;IAED,MAAM,GAAG,GAAI,MAAmD,EAAE,GAAG,CAAC;IACtE,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,0BAA0B,CAAC,CAAC;IAClD,MAAM,IAAI,GAAG,GAAG,EAAE,CAAC,oBAAoB,CAAC,CAAC;IACzC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAE9E,MAAM,OAAO,GAAG,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,8BAA8B,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE5G,OAAO,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC9D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc,EAAE,GAAgB;IAC3D,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,EAAE,SAAS,EAAE,eAAe,CAAC,CAAC;IAE1F,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,QAAQ,MAAM,EAAE,CAAC;AACjD,CAAC;AAID,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,QAAoB;IAC5C,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CACzB,KAAkB,EAClB,UAAkC,EAClC,UAAuC,EAAE,KAAK,EAAE,KAAK,EAAE;IAEvD,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,KAAK,CAAC;IAEjC,6EAA6E;IAC7E,2EAA2E;IAC3E,uEAAuE;IACvE,IAAI,UAAU,GAAG,IAAI,CAAC;IACtB,IAAI,CAAC;QACH,IAAI,SAAS,CAAC,IAAI,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,EAAE,cAAc,EAAE,KAAK,IAAI,EAAE,CAAC;YAC1E,UAAU,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC;QAC1D,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,SAAS,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;YACpD,WAAW,CAAC,UAAU,EAAE,SAAS,CAAC,EAAE,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;QACjE,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,uEAAuE;YACvE,0EAA0E;YAC1E,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;QAChE,CAAC;QAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,QAAgB,CAAC;IACrB,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;QAC9B,2EAA2E;QAC3E,oEAAoE;QACpE,GAAG,GAAG,YAAY,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,MAAM,UAAU,GAAG,aAAa,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAClD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,6EAA6E;QAC7E,4DAA4D;QAC5D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,sBAAsB,EAAE,CAAC;IACrE,CAAC;IAED,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,oCAAoC,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,GAAG,CAAC;IAC/B,IAAI,WAAW,KAAK,SAAS,IAAI,CAAC,aAAa,CAAC,WAAW,CAAC,EAAE,CAAC;QAC7D,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;IAC/E,CAAC;IAED,MAAM,UAAU,GAAe,WAAW,IAAI,EAAE,CAAC;IAEjD,MAAM,SAAS,GAAe,EAAE,CAAC;IACjC,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,GAAG,EAAE,OAAO,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,UAAU,CAAC,EAAE,CAAC;QACxD,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;QAChC,IAAI,OAAO,KAAK,OAAO;YAAE,SAAS;QAElC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAClB,6EAA6E;QAC7E,6BAA6B;QAC7B,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;YAC1B,SAAS,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,OAAO,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QAC7G,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;QAC3C,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/C,CAAC;IAED,4DAA4D;IAC5D,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACrC,CAAC;IAED,6EAA6E;IAC7E,2DAA2D;IAC3D,IAAI,CAAC;QACH;;;8EAGsE;QACtE,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;YAC7B,YAAY,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC;YACnC,+EAA+E;YAC/E,gFAAgF;YAChF,iDAAiD;YACjD,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC/B,CAAC;QAED,WAAW,CAAC,QAAQ,EAAE,SAAS,CAAC,EAAE,GAAG,MAAM,EAAE,GAAG,EAAE,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC;IAChE,CAAC;IAED,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC;AAChE,CAAC"}

package/dist/{snippets.d.ts → agents/claude-code/snippets.d.ts}

@@ -15,26 +15,9 @@
  * signed-in user. The CLI is unauthenticated, so that line is absent entirely
  * unless `--user-id` supplies one — not blank, and no trailing newline.
  */
+import type { SnippetInputs } from "../types.js";
 /** Stand-in for the caller's own Anthropic key, which the CLI never holds. */
 export declare const ANTHROPIC_KEY_PLACEHOLDER = "<your-anthropic-api-key>";
-/** Stand-in for the AI21 key in a preview, before one has been supplied. */
-export declare const AI21_KEY_PLACEHOLDER = "<your-ai21-api-key>";
-export interface SnippetInputs {
-    readonly gatewayUrl: string;
-    readonly agentId: string;
-    readonly ai21Key: string;
-    /** Signed-in user id for per-user attribution. Absent on a normal CLI run. */
-    readonly userId?: string | undefined;
-    /**
-     * Marks the traffic as configured by this tool, e.g. `ai21-gateway-cli/0.4.0`.
-     *
-     * Set on what the CLI writes, and deliberately absent from the snippet builders the
-     * contract test pins against the webapp: a config someone pasted by hand did not
-     * come from here and must not claim to have. Lets the gateway tell the two apart
-     * without the CLI reporting anything itself.
-     */
-    readonly client?: string | undefined;
-}
 /** Claude Code's `ANTHROPIC_CUSTOM_HEADERS` value. Header order is contractual. */
 export declare function ccCustomHeaders({ agentId, ai21Key, userId, client }: SnippetInputs): string;
 /**

package/dist/{snippets.js → agents/claude-code/snippets.js}

@@ -1,24 +1,5 @@
-/**
- * Snippet builders duplicated from the gateway webapp, so what the CLI writes is
- * byte-identical to what the UI tells people to copy.
- *
- * Copied from AI21Labs/ai21-intelligent-gateway-webapp:
- *   src/pages/docs/integrations.tsx    — the builders
- *   src/pages/docs/snippetContext.tsx  — the placeholder constants
- *
- * A webapp edit cannot fail our CI, so this drifts silently — re-copy when the
- * gateway's snippets change. `test/fixtures/webapp-snippets.json` is what catches
- * a divergence. Only the Claude Code path is mirrored; the LangChain snippets are
- * now a four-way client matrix whose port is a design question, not a copy job.
- *
- * One deliberate divergence: the webapp always emits `x-ai21-user-id`, having a
- * signed-in user. The CLI is unauthenticated, so that line is absent entirely
- * unless `--user-id` supplies one — not blank, and no trailing newline.
- */
 /** Stand-in for the caller's own Anthropic key, which the CLI never holds. */
 export const ANTHROPIC_KEY_PLACEHOLDER = "<your-anthropic-api-key>";
-/** Stand-in for the AI21 key in a preview, before one has been supplied. */
-export const AI21_KEY_PLACEHOLDER = "<your-ai21-api-key>";
 /** Drops the lines that only exist when a user id was supplied. */
 function joinLines(lines) {
     return lines.filter((line) => line !== undefined).join("\n");

package/dist/agents/claude-code/snippets.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"snippets.js","sourceRoot":"","sources":["../../../src/agents/claude-code/snippets.ts"],"names":[],"mappings":"AAmBA,8EAA8E;AAC9E,MAAM,CAAC,MAAM,yBAAyB,GAAG,0BAA0B,CAAC;AAEpE,mEAAmE;AACnE,SAAS,SAAS,CAAC,KAAsC;IACvD,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC/E,CAAC;AAED,mFAAmF;AACnF,MAAM,UAAU,eAAe,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,EAAiB;IACjF,OAAO,SAAS,CAAC;QACf,eAAe,OAAO,EAAE;QACxB,eAAe,OAAO,EAAE;QACxB,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,MAAM,EAAE;QAC9D,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,kBAAkB,MAAM,EAAE;KAC9D,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,MAAqB;IACjD,OAAO;QACL,kBAAkB,EAAE,MAAM,CAAC,UAAU;QACrC,wBAAwB,EAAE,eAAe,CAAC,MAAM,CAAC;QACjD,gFAAgF;QAChF,kFAAkF;QAClF,iFAAiF;QACjF,kBAAkB,EAAE,MAAM;KAC3B,CAAC;AACJ,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,OAAO,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;AACjE,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,EAAE,UAAU,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAiB;IACjF,OAAO,SAAS,CAAC;QACf,QAAQ,UAAU,iBAAiB;QACnC,qBAAqB,OAAO,MAAM;QAClC,oBAAoB,yBAAyB,MAAM;QACnD,yCAAyC;QACzC,qBAAqB,OAAO,MAAM;QAClC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,yBAAyB,MAAM,MAAM;QACxE,0CAA0C;QAC1C,wDAAwD;QACxD,iFAAiF;KAClF,CAAC,CAAC;AACL,CAAC"}

package/dist/agents/claude-code/status.d.ts

@@ -0,0 +1,12 @@
+import type { AgentDeps } from "../types.js";
+/** `claude auth status` is local and answers in about a second. */
+export declare const AUTH_STATUS_TIMEOUT_MS = 5000;
+export type ClaudeLogin = "logged-in" | "logged-out" | "inconclusive";
+/**
+ * Asks `claude auth status`, which reads local state only, whether Claude Code has any
+ * credential — so a missing one is caught before anything is written. Only an explicit
+ * `"loggedIn": false` with no auth method counts as logged out, and only for Anthropic's
+ * own API: an older `claude` without the subcommand, unparseable output, or a Bedrock or
+ * Vertex setup are all inconclusive and leave the decision to verification.
+ */
+export declare function checkClaudeLogin(cwd: string, deps: AgentDeps): Promise<ClaudeLogin>;

package/dist/agents/claude-code/status.js

@@ -0,0 +1,42 @@
+/**
+ * Whether Claude Code has a login the gateway can forward, asked before anything is
+ * written so a missing one never leaves a config behind.
+ */
+import { findOnPath } from "../../process.js";
+import { CLAUDE_COMMAND } from "./verify.js";
+/** `claude auth status` is local and answers in about a second. */
+export const AUTH_STATUS_TIMEOUT_MS = 5_000;
+/**
+ * Asks `claude auth status`, which reads local state only, whether Claude Code has any
+ * credential — so a missing one is caught before anything is written. Only an explicit
+ * `"loggedIn": false` with no auth method counts as logged out, and only for Anthropic's
+ * own API: an older `claude` without the subcommand, unparseable output, or a Bedrock or
+ * Vertex setup are all inconclusive and leave the decision to verification.
+ */
+export async function checkClaudeLogin(cwd, deps) {
+    const executable = findOnPath(CLAUDE_COMMAND, deps.lookup);
+    if (executable === undefined)
+        return "inconclusive";
+    const result = await deps.runCommand(executable, ["auth", "status"], { cwd, timeoutMs: AUTH_STATUS_TIMEOUT_MS });
+    if (result.timedOut || result.code === null)
+        return "inconclusive";
+    const start = result.output.indexOf("{");
+    const end = result.output.lastIndexOf("}");
+    if (start === -1 || end < start)
+        return "inconclusive";
+    let status;
+    try {
+        status = JSON.parse(result.output.slice(start, end + 1));
+    }
+    catch {
+        return "inconclusive";
+    }
+    if (typeof status !== "object" || status === null)
+        return "inconclusive";
+    const { loggedIn, authMethod, apiProvider } = status;
+    if (loggedIn === true)
+        return "logged-in";
+    const firstParty = apiProvider === undefined || apiProvider === "firstParty";
+    return loggedIn === false && authMethod === "none" && firstParty ? "logged-out" : "inconclusive";
+}
+//# sourceMappingURL=status.js.map

package/dist/agents/claude-code/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../../src/agents/claude-code/status.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAE9C,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAE7C,mEAAmE;AACnE,MAAM,CAAC,MAAM,sBAAsB,GAAG,KAAK,CAAC;AAI5C;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAW,EAAE,IAAe;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IAEpD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,MAAM,EAAE,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE,SAAS,EAAE,sBAAsB,EAAE,CAAC,CAAC;IACjH,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IAEnE,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,KAAK,KAAK,CAAC,CAAC,IAAI,GAAG,GAAG,KAAK;QAAE,OAAO,cAAc,CAAC;IAEvD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IAEzE,MAAM,EAAE,QAAQ,EAAE,UAAU,EAAE,WAAW,EAAE,GAAG,MAI7C,CAAC;IACF,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,WAAW,CAAC;IAE1C,MAAM,UAAU,GAAG,WAAW,KAAK,SAAS,IAAI,WAAW,KAAK,YAAY,CAAC;IAE7E,OAAO,QAAQ,KAAK,KAAK,IAAI,UAAU,KAAK,MAAM,IAAI,UAAU,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,cAAc,CAAC;AACnG,CAAC"}

package/dist/{verify.d.ts → agents/claude-code/verify.d.ts}

@@ -1,4 +1,16 @@
-import { type ResolvedUrls } from "./args.js";
+/**
+ * One real request through the gateway, to prove the written config works and flip
+ * the agent's `used` latch. Three tiers, because the CLI holds no Anthropic
+ * credential and the gateway requires one: `claude -p` if it is on PATH, else a
+ * direct ping if a key is available, else skip.
+ *
+ * Two invariants: exactly one request is fired — a winning tier means no later tier
+ * runs — and only a definite missing-credential result changes the exit code. A
+ * timeout or unrecognised failure stays a warning, so a flaky network never undoes a
+ * good write.
+ */
+import { type ResolvedUrls } from "../../args.js";
+import type { AgentDeps } from "../types.js";
 export declare const CLAUDE_COMMAND = "claude";
 export declare const CLAUDE_PROMPT = "ai21-gateway CLI connectivity check \u2014 reply with OK and nothing else.";
 export declare const PING_PATH = "/v1/messages";
@@ -57,44 +69,6 @@ export interface VerifyContext {
      */
     readonly cwd: string;
 }
-export interface CommandResult {
-    /** `null` when the process was killed or could not be started at all. */
-    readonly code: number | null;
-    readonly timedOut: boolean;
-    /** Combined stdout+stderr, used only to explain a failure. */
-    readonly output: string;
-}
-/** Just enough of `fetch` to ping with. `text` is optional; absent means inconclusive. */
-export type FetchLike = (url: string, init: {
-    method: string;
-    headers: Record<string, string>;
-    body: string;
-    signal: AbortSignal;
-}) => Promise<{
-    ok: boolean;
-    status: number;
-    text?: () => Promise<string>;
-}>;
-export interface PathLookup {
-    readonly platform: string;
-    readonly processEnv: Record<string, string | undefined>;
-    /** Injected so the tier-1 tests never depend on what is installed. */
-    readonly isExecutableFile: (candidate: string) => boolean;
-}
-export interface VerifyDeps {
-    readonly lookup: PathLookup;
-    readonly runCommand: (executable: string, args: readonly string[], opts: {
-        readonly cwd: string;
-        readonly timeoutMs: number;
-    }) => Promise<CommandResult>;
-    readonly fetchImpl: FetchLike;
-}
-/**
- * Hand-rolled rather than shelling out to `which`/`where`, which is slower and
- * absent from stripped Windows images. `node:path`'s `join` and `delimiter` follow
- * the *host* platform, so they cannot resolve a Windows PATH under test on macOS.
- */
-export declare function findOnPath(command: string, lookup: PathLookup): string | undefined;
 /** What the direct ping would send: `--anthropic-key`, else a non-empty ANTHROPIC_API_KEY. */
 export declare function resolveAnthropicKey(ctx: Pick<VerifyContext, "anthropicKey" | "processEnv">): string | undefined;
 /**
@@ -102,18 +76,4 @@ export declare function resolveAnthropicKey(ctx: Pick<VerifyContext, "anthropicK
  * `x-api-key` cannot succeed, so whichever layer answers is the answer.
  */
 export type CredentialVerdict = "ai21-rejected" | "ai21-accepted" | "inconclusive";
-/** `claude auth status` is local and answers in about a second. */
-export declare const AUTH_STATUS_TIMEOUT_MS = 5000;
-export type ClaudeLogin = "logged-in" | "logged-out" | "inconclusive";
-/**
- * Asks `claude auth status`, which reads local state only, whether Claude Code has any
- * credential — so a missing one is caught before anything is written. Only an explicit
- * `"loggedIn": false` with no auth method counts as logged out, and only for Anthropic's
- * own API: an older `claude` without the subcommand, unparseable output, or a Bedrock or
- * Vertex setup are all inconclusive and leave the decision to verification.
- */
-export declare function checkClaudeLogin(cwd: string, deps: VerifyDeps): Promise<ClaudeLogin>;
-export declare function verify(ctx: VerifyContext, deps: VerifyDeps): Promise<VerifyOutcome>;
-export declare function isExecutableFile(candidate: string): boolean;
-/** The real-world adapters, kept here so `cli.ts` stays a thin edge. */
-export declare function nodeVerifyDeps(processEnv: Record<string, string | undefined>): VerifyDeps;
+export declare function verify(ctx: VerifyContext, deps: AgentDeps): Promise<VerifyOutcome>;

package/dist/{verify.js → agents/claude-code/verify.js}

@@ -9,9 +9,8 @@
  * timeout or unrecognised failure stays a warning, so a flaky network never undoes a
  * good write.
  */
-import { spawn } from "node:child_process";
-import { accessSync, constants, statSync } from "node:fs";
-import { DEFAULT_URLS, isInsecureGateway } from "./args.js";
+import { DEFAULT_URLS, isInsecureGateway } from "../../args.js";
+import { findOnPath } from "../../process.js";
 export const CLAUDE_COMMAND = "claude";
 /* An instruction with a trivial answer, and it names itself so a gateway trace shows
  * why the request happened. Both halves matter: "ai21-gateway CLI verification" alone
@@ -40,29 +39,6 @@ export const PING_BODY = {
     max_tokens: 64,
     messages: [{ role: "user", content: "Hello through the gateway" }],
 };
-/** npm installs the Claude Code CLI as `claude.cmd`, so this must not be empty. */
-const DEFAULT_PATHEXT = ".COM;.EXE;.BAT;.CMD";
-/**
- * Hand-rolled rather than shelling out to `which`/`where`, which is slower and
- * absent from stripped Windows images. `node:path`'s `join` and `delimiter` follow
- * the *host* platform, so they cannot resolve a Windows PATH under test on macOS.
- */
-export function findOnPath(command, lookup) {
-    const windows = lookup.platform === "win32";
-    const separator = windows ? ";" : ":";
-    const raw = lookup.processEnv.PATH ?? (windows ? lookup.processEnv.Path : undefined) ?? "";
-    const extensions = windows ? (lookup.processEnv.PATHEXT ?? DEFAULT_PATHEXT).split(";") : [""];
-    for (const dir of raw.split(separator)) {
-        if (dir === "")
-            continue;
-        for (const extension of extensions) {
-            const candidate = `${dir.replace(/[\\/]+$/, "")}${windows ? "\\" : "/"}${command}${extension}`;
-            if (lookup.isExecutableFile(candidate))
-                return candidate;
-        }
-    }
-    return undefined;
-}
 /** Blanks every credential in play, wherever it appears. */
 function redactSecrets(text, ctx) {
     let redacted = text;
@@ -258,41 +234,6 @@ async function viaDirectPing(anthropicKey, ctx, deps) {
         return failed(`the gateway could not be reached at ${ctx.urls.gateway}`);
     }
 }
-/** `claude auth status` is local and answers in about a second. */
-export const AUTH_STATUS_TIMEOUT_MS = 5_000;
-/**
- * Asks `claude auth status`, which reads local state only, whether Claude Code has any
- * credential — so a missing one is caught before anything is written. Only an explicit
- * `"loggedIn": false` with no auth method counts as logged out, and only for Anthropic's
- * own API: an older `claude` without the subcommand, unparseable output, or a Bedrock or
- * Vertex setup are all inconclusive and leave the decision to verification.
- */
-export async function checkClaudeLogin(cwd, deps) {
-    const executable = findOnPath(CLAUDE_COMMAND, deps.lookup);
-    if (executable === undefined)
-        return "inconclusive";
-    const result = await deps.runCommand(executable, ["auth", "status"], { cwd, timeoutMs: AUTH_STATUS_TIMEOUT_MS });
-    if (result.timedOut || result.code === null)
-        return "inconclusive";
-    const start = result.output.indexOf("{");
-    const end = result.output.lastIndexOf("}");
-    if (start === -1 || end < start)
-        return "inconclusive";
-    let status;
-    try {
-        status = JSON.parse(result.output.slice(start, end + 1));
-    }
-    catch {
-        return "inconclusive";
-    }
-    if (typeof status !== "object" || status === null)
-        return "inconclusive";
-    const { loggedIn, authMethod, apiProvider } = status;
-    if (loggedIn === true)
-        return "logged-in";
-    const firstParty = apiProvider === undefined || apiProvider === "firstParty";
-    return loggedIn === false && authMethod === "none" && firstParty ? "logged-out" : "inconclusive";
-}
 export async function verify(ctx, deps) {
     const executable = findOnPath(CLAUDE_COMMAND, deps.lookup);
     if (executable !== undefined)
@@ -302,76 +243,4 @@ export async function verify(ctx, deps) {
         return viaDirectPing(anthropicKey, ctx, deps);
     return { kind: "skipped", hint: `${manualHint(ctx.cwd)}.` };
 }
-/** Cap on captured subprocess output — only the first line is ever quoted. */
-const MAX_CAPTURED_OUTPUT = 4_096;
-function runCommand(executable, args, opts) {
-    return new Promise((resolve) => {
-        // A .cmd cannot be spawned without a shell since the CVE-2024-27980 fix. Safe
-        // here because every argument is a literal. Killing the shell may orphan the
-        // real `claude`, which exits on its own shortly after.
-        const shell = /\.(cmd|bat)$/i.test(executable);
-        const child = spawn(shell ? `"${executable}"` : executable, [...args], {
-            cwd: opts.cwd,
-            shell,
-            // stdin closed: `claude` must never sit waiting on input we will not send.
-            stdio: ["ignore", "pipe", "pipe"],
-        });
-        let output = "";
-        const capture = (chunk) => {
-            if (output.length < MAX_CAPTURED_OUTPUT)
-                output += chunk.toString("utf8");
-        };
-        child.stdout?.on("data", capture);
-        child.stderr?.on("data", capture);
-        let done = false;
-        const settle = (result) => {
-            if (done)
-                return;
-            done = true;
-            clearTimeout(timer);
-            resolve(result);
-        };
-        /**
-         * Our own timer, not spawn's `timeout`: Windows reports a killed process as an
-         * ordinary non-zero exit, so an inferred timeout would be wrong there.
-         *
-         * It resolves the promise itself rather than killing and waiting for `close`.
-         * `close` fires when the *stdio* closes, and anything `claude` spawned inherits
-         * those pipes — an MCP server or a hook outliving its parent holds them open, so
-         * the kill lands and `close` never comes. That hung the CLI indefinitely after a
-         * write it had already completed. The budget is now a guarantee, not a hope.
-         */
-        let timedOut = false;
-        const timer = setTimeout(() => {
-            timedOut = true;
-            child.kill("SIGKILL");
-            settle({ code: null, timedOut, output: output.trim() });
-        }, opts.timeoutMs);
-        // A spawn error may never emit `close`, so both paths settle. Only the errno is
-        // kept — the message carries an absolute path.
-        child.once("error", (err) => settle({ code: null, timedOut, output: err.code ?? "" }));
-        child.once("close", (code) => settle({ code, timedOut, output: output.trim() }));
-    });
-}
-export function isExecutableFile(candidate) {
-    try {
-        if (!statSync(candidate).isFile())
-            return false;
-        // The execute bit is meaningless on Windows, where the extension decides.
-        if (process.platform !== "win32")
-            accessSync(candidate, constants.X_OK);
-        return true;
-    }
-    catch {
-        return false;
-    }
-}
-/** The real-world adapters, kept here so `cli.ts` stays a thin edge. */
-export function nodeVerifyDeps(processEnv) {
-    return {
-        lookup: { platform: process.platform, processEnv, isExecutableFile },
-        runCommand,
-        fetchImpl: fetch,
-    };
-}
 //# sourceMappingURL=verify.js.map

package/dist/agents/claude-code/verify.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verify.js","sourceRoot":"","sources":["../../../src/agents/claude-code/verify.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,YAAY,EAAqB,iBAAiB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAG9C,MAAM,CAAC,MAAM,cAAc,GAAG,QAAQ,CAAC;AACvC;;;wDAGwD;AACxD,MAAM,CAAC,MAAM,aAAa,GAAG,uEAAuE,CAAC;AACrG,MAAM,CAAC,MAAM,SAAS,GAAG,cAAc,CAAC;AAExC,uFAAuF;AACvF,MAAM,aAAa,GAAG,oBAAoB,CAAC;AAE3C;iFACiF;AACjF,SAAS,UAAU,CAAC,GAAW;IAC7B,OAAO,SAAS,cAAc,QAAQ,aAAa,UAAU,GAAG,oBAAoB,CAAC;AACvF,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,MAAM,CAAC;AACtC,MAAM,CAAC,MAAM,iBAAiB,GAAG,MAAM,CAAC;AAExC,iFAAiF;AACjF,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,KAAK,EAAE,mBAAmB;IAC1B,UAAU,EAAE,EAAE;IACd,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;CAC1D,CAAC;AAiCX,4DAA4D;AAC5D,SAAS,aAAa,CAAC,IAAY,EAAE,GAAkB;IACrD,IAAI,QAAQ,GAAG,IAAI,CAAC;IACpB,KAAK,MAAM,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,mBAAmB,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC;QAC7D,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,KAAK,EAAE;YAAE,SAAS;QAEpD,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjD,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,MAAM,iBAAiB,GAAG,GAAG,CAAC;AAE9B,wEAAwE;AACxE,SAAS,WAAW,CAAC,MAAc,EAAE,GAAkB;IACrD,MAAM,CAAC,SAAS,GAAG,EAAE,CAAC,GAAG,aAAa,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACvE,MAAM,OAAO,GAAG,SAAS,CAAC,IAAI,EAAE,CAAC;IACjC,IAAI,OAAO,KAAK,EAAE;QAAE,OAAO,EAAE,CAAC;IAE9B,OAAO,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,iBAAiB,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC;AAC3G,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,mBAAmB,CAAC,GAAuD;IACzF,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS,IAAI,GAAG,CAAC,YAAY,KAAK,EAAE;QAAE,OAAO,GAAG,CAAC,YAAY,CAAC;IAEvF,8EAA8E;IAC9E,2CAA2C;IAC3C,MAAM,OAAO,GAAG,GAAG,CAAC,UAAU,CAAC,iBAAiB,CAAC;IAEjD,OAAO,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;AACvE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,SAAS,CAAC,UAAkB,EAAE,GAAkB,EAAE,IAAe;IAC9E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,UAAU,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,aAAa,CAAC,EAAE;QACtE,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,SAAS,EAAE,iBAAiB;KAC7B,CAAC,CAAC;IAEH,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,CAAC;IAEpE,oFAAoF;IACpF,IAAI,CAAC,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,IAAI,aAAa,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;QAClF,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,YAAY,EAAE,CAAC;IACnF,CAAC;IAED,MAAM,MAAM,GAAG,CAAC,MAAc,EAAiB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC;IAElG,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,gFAAgF;QAChF,kFAAkF;QAClF,0EAA0E;QAC1E,MAAM,QAAQ,GAAG,KAAK,cAAc,+BAA+B,iBAAiB,GAAG,IAAI,GAAG,CAAC;QAC/F,QAAQ,MAAM,gBAAgB,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC;YAC1C,KAAK,eAAe;gBAClB,OAAO,MAAM,CAAC,GAAG,QAAQ,0CAA0C,eAAe,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YAC7F,KAAK,eAAe;gBAClB;;gGAEgF;gBAChF;4FAC4E;gBAC5E,OAAO,MAAM,CACX,GAAG,QAAQ,6EAA6E;oBACtF,KAAK,cAAc,4EAA4E;oBAC/F,2BAA2B,cAAc,OAAO,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CACxE,CAAC;YACJ,KAAK,cAAc;gBACjB,OAAO,MAAM,CACX,GAAG,QAAQ,6DAA6D,cAAc,QAAQ;oBAC5F,oFAAoF,eAAe,CAAC,GAAG,CAAC,EAAE,CAC7G,CAAC;QACN,CAAC;IACH,CAAC;IAED,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI,EAAE,CAAC;QACzB,OAAO,MAAM,CAAC,KAAK,cAAc,sBAAsB,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;IAC5F,CAAC;IAED,OAAO,MAAM,CAAC,KAAK,cAAc,gBAAgB,MAAM,CAAC,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC;AACpG,CAAC;AAED,iFAAiF;AACjF,SAAS,eAAe,CAAC,GAAkB;IACzC,OAAO,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,YAAY,CAAC,OAAO;QAC9C,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC;;;2EAGiE;YACjE,sFAAsF,CAAC;AAC7F,CAAC;AAED,gFAAgF;AAChF,MAAM,YAAY,GAA2B;IAC3C,GAAG,EAAE,uDAAuD;IAC5D,GAAG,EAAE,0CAA0C;IAC/C,GAAG,EAAE,uBAAuB;CAC7B,CAAC;AAQF,gFAAgF;AAChF,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AAE9D,SAAS,iBAAiB,CAAC,IAAY;IACrC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,cAAc,CAAC;IAEzE,MAAM,KAAK,GAAG,MAA+D,CAAC;IAC9E,kFAAkF;IAClF,6DAA6D;IAC7D,IAAI,KAAK,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;QAAE,OAAO,eAAe,CAAC;IAEhF,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,eAAe,CAAC;IAEvD,OAAO,cAAc,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,IAAY;IACxC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;IAED,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEhE,MAAM,EAAE,KAAK,EAAE,GAAG,MAA6B,CAAC;IAEhD,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAK,KAA4B,CAAC,IAAI,KAAK,sBAAsB,CAAC;AACtH,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,GAAkB,EAAE,IAAe;IACjE,sEAAsE;IACtE,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,cAAc,CAAC;IAE/D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,SAAS,EAAE,EAAE;YACvE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,mBAAmB,EAAE,GAAG,CAAC;YAC9C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC;SAC7C,CAAC,CAAC;QAEH,0EAA0E;QAC1E,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,eAAe,CAAC;QAExC,OAAO,iBAAiB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,cAAc,CAAC;IACxB,CAAC;AACH,CAAC;AAED,SAAS,WAAW,CAAC,YAAoB,EAAE,GAAkB;IAC3D,MAAM,OAAO,GAA2B;QACtC,YAAY,EAAE,GAAG,CAAC,OAAO;QACzB,YAAY,EAAE,GAAG,CAAC,OAAO;QACzB,WAAW,EAAE,YAAY;QACzB,mBAAmB,EAAE,YAAY;QACjC,cAAc,EAAE,kBAAkB;KACnC,CAAC;IAEF,IAAI,GAAG,CAAC,MAAM,KAAK,SAAS;QAAE,OAAO,CAAC,gBAAgB,CAAC,GAAG,GAAG,CAAC,MAAM,CAAC;IAErE,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,OAAO,GAAG,YAAY,KAAK,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,YAAY,IAAI,GAAG,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,YAAoB,EAAE,GAAkB,EAAE,IAAe;IACpF,MAAM,MAAM,GAAG,CAAC,MAAc,EAAiB,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;IAEnG,kFAAkF;IAClF,8EAA8E;IAC9E,IAAI,iBAAiB,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;QACxC,OAAO,MAAM,CAAC,mCAAmC,GAAG,CAAC,IAAI,CAAC,OAAO,gDAAgD,CAAC,CAAC;IACrH,CAAC;IAED,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,GAAG,SAAS,EAAE,EAAE;YACvE,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,WAAW,CAAC,YAAY,EAAE,GAAG,CAAC;YACvC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC;YAC/B,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,eAAe,CAAC;SAC7C,CAAC,CAAC;QAEH,IAAI,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,GAAG,EAAE,aAAa,EAAE,CAAC;QAE/D,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;YACrF,OAAO,EAAE,IAAI,EAAE,sBAAsB,EAAE,GAAG,EAAE,aAAa,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC;QACtF,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,IAAI,GAAG,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,CAAC,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QAEjE,OAAO,MAAM,CAAC,wBAAwB,QAAQ,CAAC,MAAM,GAAG,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,GAAG,IAAI,EAAE,CAAC,CAAC;IAC3G,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACjB,OAAO,MAAM,CAAC,qCAAqC,eAAe,GAAG,IAAI,GAAG,CAAC,CAAC;QAChF,CAAC;QAED,0EAA0E;QAC1E,wEAAwE;QACxE,OAAO,MAAM,CAAC,uCAAuC,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC;IAC3E,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAkB,EAAE,IAAe;IAC9D,MAAM,UAAU,GAAG,UAAU,CAAC,cAAc,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;IAC3D,IAAI,UAAU,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,UAAU,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAEtE,MAAM,YAAY,GAAG,mBAAmB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,YAAY,KAAK,SAAS;QAAE,OAAO,aAAa,CAAC,YAAY,EAAE,GAAG,EAAE,IAAI,CAAC,CAAC;IAE9E,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,UAAU,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC;AAC9D,CAAC"}

package/dist/agents/deps.d.ts

@@ -0,0 +1,3 @@
+import type { AgentDeps } from "./types.js";
+/** The real-world adapters, kept here so `cli.ts` stays a thin edge. */
+export declare function nodeAgentDeps(processEnv: Record<string, string | undefined>): AgentDeps;

package/dist/agents/deps.js

@@ -0,0 +1,10 @@
+import { isExecutableFile, runCommand } from "../process.js";
+/** The real-world adapters, kept here so `cli.ts` stays a thin edge. */
+export function nodeAgentDeps(processEnv) {
+    return {
+        lookup: { platform: process.platform, processEnv, isExecutableFile },
+        runCommand,
+        fetchImpl: fetch,
+    };
+}
+//# sourceMappingURL=deps.js.map

package/dist/agents/deps.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"deps.js","sourceRoot":"","sources":["../../src/agents/deps.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAG7D,wEAAwE;AACxE,MAAM,UAAU,aAAa,CAAC,UAA8C;IAC1E,OAAO;QACL,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,QAAQ,EAAE,UAAU,EAAE,gBAAgB,EAAE;QACpE,UAAU;QACV,SAAS,EAAE,KAA6B;KACzC,CAAC;AACJ,CAAC"}