@alpacakit/agents 0.1.0-beta.19

package/dist/auth/login-probe.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Shared CLI login probe (E12): run an agent's "am I signed in?" subcommand
+ * under the candidate's auth env and map its exit code to an `AuthStatus`.
+ * Only the exit code matters — output is drained and discarded. A hung probe
+ * is killed after the timeout and reported as "unknown"; a hang proves
+ * nothing about the credential (probe-owned time mechanics, mirroring the run
+ * plane's kill escalation). Home-dir material handlers reuse this so the two
+ * built-in agents do not each carry a copy of the probe loop.
+ */
+import type { EnvPatch } from "../core/env.js";
+import type { HostContext } from "../host/context.js";
+import { type AuthStatus } from "./material.js";
+export type CliLoginProbeOptions = {
+    readonly command: string;
+    readonly args: readonly string[];
+    readonly envPatch: EnvPatch;
+    readonly ctx: HostContext;
+    readonly timeoutMs?: number;
+};
+export declare function cliLoginProbe(options: CliLoginProbeOptions): Promise<AuthStatus>;
+//# sourceMappingURL=login-probe.d.ts.map

package/dist/auth/login-probe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login-probe.d.ts","sourceRoot":"","sources":["../../src/auth/login-probe.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG/C,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AACtD,OAAO,EAAe,KAAK,UAAU,EAAE,MAAM,eAAe,CAAC;AAI7D,MAAM,MAAM,oBAAoB,GAAG;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;IAC5B,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC;IAC1B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B,CAAC;AAEF,wBAAsB,aAAa,CACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,UAAU,CAAC,CAgCrB"}

package/dist/auth/login-probe.js

@@ -0,0 +1,47 @@
+/**
+ * Shared CLI login probe (E12): run an agent's "am I signed in?" subcommand
+ * under the candidate's auth env and map its exit code to an `AuthStatus`.
+ * Only the exit code matters — output is drained and discarded. A hung probe
+ * is killed after the timeout and reported as "unknown"; a hang proves
+ * nothing about the credential (probe-owned time mechanics, mirroring the run
+ * plane's kill escalation). Home-dir material handlers reuse this so the two
+ * built-in agents do not each carry a copy of the probe loop.
+ */
+import { applyEnvPatch } from "../core/env.js";
+import { PROCESS_SIGNAL } from "../core/values.js";
+import { AUTH_STATUS } from "./material.js";
+const DEFAULT_LOGIN_PROBE_TIMEOUT_MS = 30_000;
+export async function cliLoginProbe(options) {
+    const timeoutMs = options.timeoutMs ?? DEFAULT_LOGIN_PROBE_TIMEOUT_MS;
+    const env = applyEnvPatch(options.ctx.env, options.envPatch);
+    const command = await options.ctx.exec.which(options.command, env);
+    if (command === null) {
+        // No binary on PATH: the probe cannot run, so it proves nothing.
+        return AUTH_STATUS.unknown;
+    }
+    const probe = options.ctx.exec.spawn({
+        command,
+        args: [...options.args],
+        cwd: options.ctx.location.homeDir,
+        env,
+        stdin: null,
+    });
+    let timedOut = false;
+    const cancelTimeout = options.ctx.clock.setTimeout(() => {
+        timedOut = true;
+        probe.kill(PROCESS_SIGNAL.sigkill);
+    }, timeoutMs);
+    try {
+        for await (const _chunk of probe.chunks) {
+            // Drain; only the exit code matters for the login probe.
+        }
+        const exit = await probe.exit;
+        if (timedOut) {
+            return AUTH_STATUS.unknown;
+        }
+        return exit.code === 0 ? AUTH_STATUS.valid : AUTH_STATUS.invalid;
+    }
+    finally {
+        cancelTimeout();
+    }
+}

package/dist/auth/login.d.ts

@@ -0,0 +1,79 @@
+import type { Clock, Exec } from "../core/ports.js";
+import type { OutputChannel } from "../core/values.js";
+import type { AuthMaterial, AuthStatus } from "./material.js";
+export declare const LOGIN_METHOD: {
+    readonly oauth: "oauth";
+    readonly device: "device";
+};
+export type LoginMethod = (typeof LOGIN_METHOD)[keyof typeof LOGIN_METHOD];
+export declare const LOGIN_EVENT_TYPE: {
+    readonly openUrl: "open-url";
+    readonly deviceCode: "device-code";
+    readonly output: "output";
+};
+export type LoginRequest = {
+    readonly method: LoginMethod;
+    readonly homeDir: string;
+    /**
+     * Caller cancellation, mirroring `RunOptions.signal`. The login driver
+     * funnels it into the `LoginContext` signal the handler drives the CLI
+     * with, so a hung device flow aborts instead of waiting out the total
+     * timeout. Absent means "no caller cancellation".
+     */
+    readonly signal?: AbortSignal;
+};
+export type LoginEvent = {
+    readonly type: typeof LOGIN_EVENT_TYPE.openUrl;
+    readonly url: string;
+} | {
+    readonly type: typeof LOGIN_EVENT_TYPE.deviceCode;
+    readonly code: string;
+    readonly url: string;
+    readonly expiresAt: string | null;
+} | {
+    readonly type: typeof LOGIN_EVENT_TYPE.output;
+    readonly channel: OutputChannel;
+    readonly chunk: string;
+};
+export type LoginOutcome = {
+    readonly material: AuthMaterial;
+    readonly status: AuthStatus;
+};
+export type LoginRun = AsyncGenerator<LoginEvent, LoginOutcome, void>;
+/**
+ * What a login handler drives the CLI with — a first-class login-plane context,
+ * a sibling to `RunContext` (not `HostContext` with a bolt-on `signal`). It
+ * carries exactly what an Exec-driven login CLI needs: the resolved location for
+ * the child's cwd, the ports it spawns and times with, and the ONE stop channel.
+ * `signal` is always live — the driver supplies a never-aborting one when the
+ * caller passes none — so handlers read `ctx.signal.aborted` unconditionally and
+ * escalate SIGTERM→SIGKILL on abort. `http` / `logger` are intentionally absent
+ * (the CLI-over-Exec mechanism uses neither); a handler that needs one adds it.
+ */
+export type LoginContext = {
+    location: {
+        homeDir: string;
+        projectDir: string | null;
+    };
+    signal: AbortSignal;
+    env: Record<string, string>;
+    exec: Exec;
+    clock: Clock;
+};
+/**
+ * Cancellation lives on `ctx.signal`, so the handler-facing request drops
+ * `signal` via `Omit` (which tracks `LoginRequest`, so no twin can drift) — one
+ * cancellation source, the way run adapters see `ResolvedRunOptions` without
+ * `RunOptions.signal`.
+ */
+export type LoginHandler = (request: Omit<LoginRequest, "signal">, ctx: LoginContext) => LoginRun;
+export interface LoginCapability {
+    readonly methods: {
+        readonly [M in LoginMethod]?: LoginHandler;
+    };
+}
+export type LoginHandle = PromiseLike<LoginOutcome> & {
+    readonly events: AsyncIterable<LoginEvent>;
+    readonly result: Promise<LoginOutcome>;
+};
+//# sourceMappingURL=login.d.ts.map

package/dist/auth/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../src/auth/login.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AACpD,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,mBAAmB,CAAC;AACvD,OAAO,KAAK,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,eAAe,CAAC;AAE9D,eAAO,MAAM,YAAY;;;CAGf,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,YAAY,CAAC,CAAC,MAAM,OAAO,YAAY,CAAC,CAAC;AAE3E,eAAO,MAAM,gBAAgB;;;;CAInB,CAAC;AAEX,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB;;;;;OAKG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;CAC/B,CAAC;AAEF,MAAM,MAAM,UAAU,GAClB;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,gBAAgB,CAAC,OAAO,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GACxE;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,gBAAgB,CAAC,UAAU,CAAC;IAClD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;CACnC,GACD;IACE,QAAQ,CAAC,IAAI,EAAE,OAAO,gBAAgB,CAAC,MAAM,CAAC;IAC9C,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB,CAAC;AAEN,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;IAChC,QAAQ,CAAC,MAAM,EAAE,UAAU,CAAC;CAC7B,CAAC;AAEF,MAAM,MAAM,QAAQ,GAAG,cAAc,CAAC,UAAU,EAAE,YAAY,EAAE,IAAI,CAAC,CAAC;AAEtE;;;;;;;;;GASG;AACH,MAAM,MAAM,YAAY,GAAG;IACzB,QAAQ,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,CAAC;IACzD,MAAM,EAAE,WAAW,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC5B,IAAI,EAAE,IAAI,CAAC;IACX,KAAK,EAAE,KAAK,CAAC;CACd,CAAC;AAEF;;;;;GAKG;AACH,MAAM,MAAM,YAAY,GAAG,CACzB,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,QAAQ,CAAC,EACrC,GAAG,EAAE,YAAY,KACd,QAAQ,CAAC;AAEd,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE;QAChB,QAAQ,EAAE,CAAC,IAAI,WAAW,CAAC,CAAC,EAAE,YAAY;KAC3C,CAAC;CACH;AAED,MAAM,MAAM,WAAW,GAAG,WAAW,CAAC,YAAY,CAAC,GAAG;IACpD,QAAQ,CAAC,MAAM,EAAE,aAAa,CAAC,UAAU,CAAC,CAAC;IAC3C,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,CAAC;CACxC,CAAC"}

package/dist/auth/login.js

@@ -0,0 +1,9 @@
+export const LOGIN_METHOD = {
+    oauth: "oauth",
+    device: "device",
+};
+export const LOGIN_EVENT_TYPE = {
+    openUrl: "open-url",
+    deviceCode: "device-code",
+    output: "output",
+};

package/dist/auth/material.d.ts

@@ -0,0 +1,87 @@
+/**
+ * Auth model (design "Auth"): two materials, per-kind handler records.
+ * Inheriting the base env is the ABSENCE of a profile — there is no
+ * "inherit" sentinel. Hard rule A9: no secret value ever appears in a
+ * persisted structure; refs, env names, and paths only.
+ */
+import type { SecretRef } from "@alpacakit/core";
+import type { EnvPatch } from "../core/env.js";
+import type { SecretResolvers } from "../core/ports.js";
+import type { HostContext } from "../host/context.js";
+export type { SecretRef } from "@alpacakit/core";
+export declare const AUTH_MATERIAL_KIND: {
+    readonly homeDir: "home-dir";
+    readonly apiKey: "api-key";
+};
+export type AuthMaterial = {
+    kind: typeof AUTH_MATERIAL_KIND.homeDir;
+    path: string;
+} | {
+    kind: typeof AUTH_MATERIAL_KIND.apiKey;
+    secret: SecretRef;
+};
+export type AuthMaterialKind = AuthMaterial["kind"];
+export declare function authMaterialRequiresSecret(kind: AuthMaterialKind): boolean;
+/**
+ * What an agent's auth facet reports for one supported material kind, so a
+ * consumer can build a sign-in UI without hardcoding which agent takes what:
+ * `requiresSecret` distinguishes a `SecretRef` input from a path/login, and
+ * `canProbe` says whether `check` can verify the credential.
+ */
+export type AuthMaterialDescriptor = {
+    kind: AuthMaterialKind;
+    requiresSecret: boolean;
+    canProbe: boolean;
+};
+export type AuthProfile<Id extends string = string> = {
+    readonly id: string;
+    readonly agentId: Id;
+    readonly material: AuthMaterial;
+};
+export type HomeDirProfileOptions<Id extends string = string> = {
+    readonly id: string;
+    readonly agentId: Id;
+    readonly path: string;
+};
+export type ApiKeyProfileOptions<Id extends string = string> = {
+    readonly id: string;
+    readonly agentId: Id;
+    readonly secret: SecretRef;
+};
+export declare function createHomeDirProfile<const Id extends string>(options: HomeDirProfileOptions<Id>): AuthProfile<Id>;
+export declare function createApiKeyProfile<const Id extends string>(options: ApiKeyProfileOptions<Id>): AuthProfile<Id>;
+export declare const AUTH_STATUS: {
+    readonly valid: "valid";
+    readonly invalid: "invalid";
+    readonly unknown: "unknown";
+};
+export type AuthStatus = (typeof AUTH_STATUS)[keyof typeof AUTH_STATUS];
+export type MaterialHandler<K extends AuthMaterialKind> = {
+    toEnv(material: Extract<AuthMaterial, {
+        kind: K;
+    }>, secrets: SecretResolvers): Promise<EnvPatch>;
+    check?(material: Extract<AuthMaterial, {
+        kind: K;
+    }>, ctx: HostContext): Promise<AuthStatus>;
+};
+export type EnvVarAuthMaterialOptions<K extends AuthMaterialKind> = {
+    readonly set: (material: Extract<AuthMaterial, {
+        kind: K;
+    }>, secrets: SecretResolvers) => Promise<Record<string, string>> | Record<string, string>;
+    readonly unset: readonly string[];
+    readonly check?: (material: Extract<AuthMaterial, {
+        kind: K;
+    }>, ctx: HostContext) => Promise<AuthStatus>;
+};
+export declare function envVarAuthMaterial<K extends AuthMaterialKind>(options: EnvVarAuthMaterialOptions<K>): MaterialHandler<K>;
+/**
+ * Keyed handler record (design principle 7): key presence declares
+ * support; absence is a typed `invalid_input`, enforced centrally.
+ */
+export type MaterialHandlers = {
+    [K in AuthMaterialKind]?: MaterialHandler<K>;
+};
+export interface AuthCapability {
+    materials: MaterialHandlers;
+}
+//# sourceMappingURL=material.d.ts.map

package/dist/auth/material.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"material.d.ts","sourceRoot":"","sources":["../../src/auth/material.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AACjD,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,oBAAoB,CAAC;AAEtD,YAAY,EAAE,SAAS,EAAE,MAAM,iBAAiB,CAAC;AAEjD,eAAO,MAAM,kBAAkB;;;CAGrB,CAAC;AAEX,MAAM,MAAM,YAAY,GACpB;IAAE,IAAI,EAAE,OAAO,kBAAkB,CAAC,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GACzD;IAAE,IAAI,EAAE,OAAO,kBAAkB,CAAC,MAAM,CAAC;IAAC,MAAM,EAAE,SAAS,CAAA;CAAE,CAAC;AAElE,MAAM,MAAM,gBAAgB,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;AAYpD,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,gBAAgB,GAAG,OAAO,CAE1E;AAED;;;;;GAKG;AACH,MAAM,MAAM,sBAAsB,GAAG;IACnC,IAAI,EAAE,gBAAgB,CAAC;IACvB,cAAc,EAAE,OAAO,CAAC;IACxB,QAAQ,EAAE,OAAO,CAAC;CACnB,CAAC;AAEF,MAAM,MAAM,WAAW,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IACpD,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,YAAY,CAAC;CACjC,CAAC;AAEF,MAAM,MAAM,qBAAqB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC9D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACvB,CAAC;AAEF,MAAM,MAAM,oBAAoB,CAAC,EAAE,SAAS,MAAM,GAAG,MAAM,IAAI;IAC7D,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,EAAE,CAAC;IACrB,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;CAC5B,CAAC;AAEF,wBAAgB,oBAAoB,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EAC1D,OAAO,EAAE,qBAAqB,CAAC,EAAE,CAAC,GACjC,WAAW,CAAC,EAAE,CAAC,CASjB;AAED,wBAAgB,mBAAmB,CAAC,KAAK,CAAC,EAAE,SAAS,MAAM,EACzD,OAAO,EAAE,oBAAoB,CAAC,EAAE,CAAC,GAChC,WAAW,CAAC,EAAE,CAAC,CASjB;AAED,eAAO,MAAM,WAAW;;;;CAId,CAAC;AAEX,MAAM,MAAM,UAAU,GAAG,CAAC,OAAO,WAAW,CAAC,CAAC,MAAM,OAAO,WAAW,CAAC,CAAC;AAExE,MAAM,MAAM,eAAe,CAAC,CAAC,SAAS,gBAAgB,IAAI;IACxD,KAAK,CACH,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,OAAO,EAAE,eAAe,GACvB,OAAO,CAAC,QAAQ,CAAC,CAAC;IACrB,KAAK,CAAC,CACJ,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,GAAG,EAAE,WAAW,GACf,OAAO,CAAC,UAAU,CAAC,CAAC;CACxB,CAAC;AAEF,MAAM,MAAM,yBAAyB,CAAC,CAAC,SAAS,gBAAgB,IAAI;IAClE,QAAQ,CAAC,GAAG,EAAE,CACZ,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,OAAO,EAAE,eAAe,KACrB,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC9D,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;IAClC,QAAQ,CAAC,KAAK,CAAC,EAAE,CACf,QAAQ,EAAE,OAAO,CAAC,YAAY,EAAE;QAAE,IAAI,EAAE,CAAC,CAAA;KAAE,CAAC,EAC5C,GAAG,EAAE,WAAW,KACb,OAAO,CAAC,UAAU,CAAC,CAAC;CAC1B,CAAC;AAEF,wBAAgB,kBAAkB,CAAC,CAAC,SAAS,gBAAgB,EAC3D,OAAO,EAAE,yBAAyB,CAAC,CAAC,CAAC,GACpC,eAAe,CAAC,CAAC,CAAC,CAWpB;AAED;;;GAGG;AACH,MAAM,MAAM,gBAAgB,GAAG;KAC5B,CAAC,IAAI,gBAAgB,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC,CAAC;CAC7C,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,gBAAgB,CAAC;CAC7B"}

package/dist/auth/material.js

@@ -0,0 +1,59 @@
+/**
+ * Auth model (design "Auth"): two materials, per-kind handler records.
+ * Inheriting the base env is the ABSENCE of a profile — there is no
+ * "inherit" sentinel. Hard rule A9: no secret value ever appears in a
+ * persisted structure; refs, env names, and paths only.
+ */
+export const AUTH_MATERIAL_KIND = {
+    homeDir: "home-dir",
+    apiKey: "api-key",
+};
+/**
+ * Static per-kind facts for capability introspection (a keyed record, not a
+ * branch): `requiresSecret` says whether the material carries a `SecretRef`
+ * (api-key) or only a path (home-dir). Adding a kind adds a row.
+ */
+const AUTH_MATERIAL_REQUIRES_SECRET = {
+    [AUTH_MATERIAL_KIND.homeDir]: false,
+    [AUTH_MATERIAL_KIND.apiKey]: true,
+};
+export function authMaterialRequiresSecret(kind) {
+    return AUTH_MATERIAL_REQUIRES_SECRET[kind];
+}
+export function createHomeDirProfile(options) {
+    return {
+        id: options.id,
+        agentId: options.agentId,
+        material: {
+            kind: AUTH_MATERIAL_KIND.homeDir,
+            path: options.path,
+        },
+    };
+}
+export function createApiKeyProfile(options) {
+    return {
+        id: options.id,
+        agentId: options.agentId,
+        material: {
+            kind: AUTH_MATERIAL_KIND.apiKey,
+            secret: options.secret,
+        },
+    };
+}
+export const AUTH_STATUS = {
+    valid: "valid",
+    invalid: "invalid",
+    unknown: "unknown",
+};
+export function envVarAuthMaterial(options) {
+    const handler = {
+        toEnv: async (material, secrets) => ({
+            set: await options.set(material, secrets),
+            unset: [...options.unset],
+        }),
+    };
+    if (options.check !== undefined) {
+        handler.check = options.check;
+    }
+    return handler;
+}

package/dist/auth/profile-store.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Minimal file-backed profile store (A11): rows follow rule 2 and never
+ * contain secret values (A9) — materials carry refs and paths only.
+ * Profile management UX is consumer territory. Unlike fleet state, this
+ * is durable user data: malformed or unknown-version files are typed
+ * errors, never silent resets.
+ */
+import { type AuthProfile } from "./material.js";
+export interface ProfileStore {
+    list(): Promise<AuthProfile[]>;
+    save(profiles: AuthProfile[]): Promise<void>;
+}
+export declare function fileProfileStore(filePath: string): ProfileStore;
+//# sourceMappingURL=profile-store.d.ts.map

package/dist/auth/profile-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"profile-store.d.ts","sourceRoot":"","sources":["../../src/auth/profile-store.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAOH,OAAO,EAAsB,KAAK,WAAW,EAAE,MAAM,eAAe,CAAC;AAcrE,MAAM,WAAW,YAAY;IAC3B,IAAI,IAAI,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;IAC/B,IAAI,CAAC,QAAQ,EAAE,WAAW,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AA6FD,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,GAAG,YAAY,CAE/D"}

package/dist/auth/profile-store.js

@@ -0,0 +1,101 @@
+/**
+ * Minimal file-backed profile store (A11): rows follow rule 2 and never
+ * contain secret values (A9) — materials carry refs and paths only.
+ * Profile management UX is consumer territory. Unlike fleet state, this
+ * is durable user data: malformed or unknown-version files are typed
+ * errors, never silent resets.
+ */
+import { readFile } from "node:fs/promises";
+import { AGENT_ERROR_CODE, AgentError } from "../core/error.js";
+import { isErrnoCode, writeFileAtomically } from "../core/fs.js";
+import { readUnknownRecord } from "../core/json.js";
+import { TEXT_ENCODING } from "../core/values.js";
+import { AUTH_MATERIAL_KIND } from "./material.js";
+const PROFILE_FILE_VERSION = 1;
+const PROFILE_STORE_ERROR_REASON = {
+    unreadable: "unreadable file",
+    malformedJson: "malformed JSON",
+    rootMustBeObject: "root must be an object",
+    unsupportedVersion: "unsupported version",
+    invalidProfiles: "profiles must be auth profile records",
+};
+function profileStoreError(reason, cause) {
+    return new AgentError({
+        code: AGENT_ERROR_CODE.invalidInput,
+        message: `Invalid auth profile store: ${reason}`,
+        data: { reason },
+        ...(cause === undefined ? {} : { cause }),
+    });
+}
+function isSecretRef(value) {
+    const record = readUnknownRecord(value);
+    if (record === null) {
+        return false;
+    }
+    const { resolver, id } = record;
+    return typeof resolver === "string" && typeof id === "string";
+}
+function isAuthProfile(value) {
+    const record = readUnknownRecord(value);
+    if (record === null) {
+        return false;
+    }
+    const { id, agentId, material: materialValue } = record;
+    const material = readUnknownRecord(materialValue);
+    if (material === null) {
+        return false;
+    }
+    const { kind, path, secret } = material;
+    const materialValid = (kind === AUTH_MATERIAL_KIND.homeDir && typeof path === "string") ||
+        (kind === AUTH_MATERIAL_KIND.apiKey && isSecretRef(secret));
+    return typeof id === "string" && typeof agentId === "string" && materialValid;
+}
+function parseProfileFile(raw) {
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (error) {
+        throw profileStoreError(PROFILE_STORE_ERROR_REASON.malformedJson, error);
+    }
+    const root = readUnknownRecord(parsed);
+    if (root === null) {
+        throw profileStoreError(PROFILE_STORE_ERROR_REASON.rootMustBeObject);
+    }
+    const { version, profiles } = root;
+    if (version !== PROFILE_FILE_VERSION) {
+        throw profileStoreError(PROFILE_STORE_ERROR_REASON.unsupportedVersion);
+    }
+    if (!Array.isArray(profiles) || !profiles.every(isAuthProfile)) {
+        throw profileStoreError(PROFILE_STORE_ERROR_REASON.invalidProfiles);
+    }
+    return profiles;
+}
+class FileProfileStore {
+    filePath;
+    constructor(filePath) {
+        this.filePath = filePath;
+    }
+    async list() {
+        let raw;
+        try {
+            raw = await readFile(this.filePath, TEXT_ENCODING);
+        }
+        catch (error) {
+            // Durable user data: only "not created yet" reads as empty; any
+            // other read failure surfaces instead of masking real profiles.
+            if (isErrnoCode(error, "ENOENT")) {
+                return [];
+            }
+            throw profileStoreError(PROFILE_STORE_ERROR_REASON.unreadable, error);
+        }
+        return parseProfileFile(raw);
+    }
+    async save(profiles) {
+        const file = { version: PROFILE_FILE_VERSION, profiles };
+        await writeFileAtomically(this.filePath, `${JSON.stringify(file, null, 2)}\n`);
+    }
+}
+export function fileProfileStore(filePath) {
+    return new FileProfileStore(filePath);
+}

package/dist/auth/secrets.d.ts

@@ -0,0 +1,14 @@
+import type { SecretResolver, SecretResolvers } from "../core/ports.js";
+import type { SecretRef } from "./material.js";
+/**
+ * The only sanctioned way to index the resolver registry: unknown
+ * resolver key is a typed `invalid_input`, resolution to null is an
+ * `auth` failure. Adapters never index the registry raw.
+ */
+export declare function requireSecret(resolvers: SecretResolvers, ref: SecretRef): Promise<string>;
+/**
+ * Built-in "env" resolver: a secret ref id is an environment variable
+ * name. Reading `process.env` IS this adapter's job — it is the boundary.
+ */
+export declare function envResolver(): SecretResolver;
+//# sourceMappingURL=secrets.d.ts.map

package/dist/auth/secrets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets.d.ts","sourceRoot":"","sources":["../../src/auth/secrets.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxE,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AAE/C;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,SAAS,EAAE,eAAe,EAC1B,GAAG,EAAE,SAAS,GACb,OAAO,CAAC,MAAM,CAAC,CAqBjB;AAED;;;GAGG;AACH,wBAAgB,WAAW,IAAI,cAAc,CAS5C"}

package/dist/auth/secrets.js

@@ -0,0 +1,40 @@
+import { AGENT_ERROR_CODE, AgentError, AUTH_FAILURE_REASON, } from "../core/error.js";
+/**
+ * The only sanctioned way to index the resolver registry: unknown
+ * resolver key is a typed `invalid_input`, resolution to null is an
+ * `auth` failure. Adapters never index the registry raw.
+ */
+export async function requireSecret(resolvers, ref) {
+    const resolver = resolvers[ref.resolver];
+    if (resolver === undefined) {
+        throw new AgentError({
+            code: AGENT_ERROR_CODE.invalidInput,
+            message: `Unknown secret resolver "${ref.resolver}"`,
+            data: { reason: `no secret resolver registered for "${ref.resolver}"` },
+        });
+    }
+    const value = await resolver.resolve(ref.id);
+    if (value === null || value === "") {
+        throw new AgentError({
+            code: AGENT_ERROR_CODE.auth,
+            message: `Secret "${ref.id}" is not available from resolver "${ref.resolver}"`,
+            data: {
+                reason: AUTH_FAILURE_REASON.invalidCredentials,
+                detail: `secret "${ref.id}" unresolved`,
+            },
+        });
+    }
+    return value;
+}
+/**
+ * Built-in "env" resolver: a secret ref id is an environment variable
+ * name. Reading `process.env` IS this adapter's job — it is the boundary.
+ */
+export function envResolver() {
+    return {
+        resolve: (id) => {
+            const value = process.env[id];
+            return Promise.resolve(value === undefined || value === "" ? null : value);
+        },
+    };
+}

package/dist/codex/app-server.d.ts

@@ -0,0 +1,30 @@
+import type { Clock, Exec } from "../core/ports.js";
+import type { CodexAppServerMethods, CodexMcpServerStatus } from "./protocol.js";
+/**
+ * How the client identifies itself to the codex app-server `initialize`
+ * handshake. The library default is neutral (see `DEFAULT_APP_SERVER_CLIENT_INFO`);
+ * a product may override it to surface its own name in codex logs without
+ * that branding being baked into the OSS package.
+ */
+export type AppServerClientInfo = {
+    readonly name: string;
+    readonly title: string;
+    readonly version: string;
+};
+export type CodexAppServerOptions = {
+    readonly exec: Exec;
+    readonly clock: Clock;
+    readonly env: Record<string, string>;
+    readonly cwd: string;
+    readonly command?: string;
+    readonly requestTimeoutMs?: number;
+    readonly clientInfo?: AppServerClientInfo;
+};
+export interface CodexAppServer {
+    request<M extends keyof CodexAppServerMethods>(method: M, params: CodexAppServerMethods[M]["params"]): Promise<CodexAppServerMethods[M]["result"]>;
+    close(): Promise<void>;
+}
+export declare function createCodexAppServer(options: CodexAppServerOptions): CodexAppServer;
+export declare function withCodexAppServer<T>(options: CodexAppServerOptions, task: (client: CodexAppServer) => Promise<T>): Promise<T>;
+export declare function listAllCodexMcpServerStatuses(client: CodexAppServer): Promise<CodexMcpServerStatus[]>;
+//# sourceMappingURL=app-server.d.ts.map

package/dist/codex/app-server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-server.d.ts","sourceRoot":"","sources":["../../src/codex/app-server.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,KAAK,EAAE,IAAI,EAA0B,MAAM,kBAAkB,CAAC;AAG5E,OAAO,KAAK,EACV,qBAAqB,EACrB,oBAAoB,EAErB,MAAM,eAAe,CAAC;AAOvB;;;;;GAKG;AACH,MAAM,MAAM,mBAAmB,GAAG;IAChC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B,CAAC;AAEF,MAAM,MAAM,qBAAqB,GAAG;IAClC,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACrC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,UAAU,CAAC,EAAE,mBAAmB,CAAC;CAC3C,CAAC;AAEF,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,CAAC,SAAS,MAAM,qBAAqB,EAC3C,MAAM,EAAE,CAAC,EACT,MAAM,EAAE,qBAAqB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,GACzC,OAAO,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC/C,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAwED,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,qBAAqB,GAC7B,cAAc,CAEhB;AAED,wBAAsB,kBAAkB,CAAC,CAAC,EACxC,OAAO,EAAE,qBAAqB,EAC9B,IAAI,EAAE,CAAC,MAAM,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,GAC3C,OAAO,CAAC,CAAC,CAAC,CAOZ;AAED,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,cAAc,GACrB,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAgBjC"}