@amalgm/core 0.1.1 → 0.1.2

package/PURPOSE.md

@@ -78,6 +78,10 @@ source until each module is cut over.
 12. **A snapshot names its resume point.** Resource readers share one
     per-attempt context and a snapshot is stable only when its sequence is
     unchanged across the read; a racing write causes a complete retry.
+13. **Credential discovery reports evidence, never credentials.** Local
+    harness discovery may expose auth type and a bounded hint, but secret
+    values cross only an explicit authenticated resolution call and never
+    enter discovery, logs, or state snapshots.
 
 ## Five surfaces, one behavior
 

package/dist/identity/index.d.ts

@@ -9,6 +9,7 @@ export * from './ports.js';
 export * from './labels.js';
 export * from './layout.js';
 export * from './product-state.js';
+export * from './local/index.js';
 export * from './ids.js';
 export * from './auth-records.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/identity/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC"}

package/dist/identity/index.js

@@ -9,6 +9,7 @@ export * from './ports.js';
 export * from './labels.js';
 export * from './layout.js';
 export * from './product-state.js';
+export * from './local/index.js';
 export * from './ids.js';
 export * from './auth-records.js';
 //# sourceMappingURL=index.js.map

package/dist/identity/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/identity/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,UAAU,CAAC;AACzB,cAAc,mBAAmB,CAAC"}

package/dist/identity/local/api.d.ts

@@ -0,0 +1,6 @@
+import type { LocalDiscoveryHost, LocalEnvironmentHost } from './types.js';
+export declare function createLocalApi(options: {
+    readonly discovery: LocalDiscoveryHost;
+    readonly environment: LocalEnvironmentHost;
+}): (request: Request) => Promise<Response>;
+//# sourceMappingURL=api.d.ts.map

package/dist/identity/local/api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.d.ts","sourceRoot":"","sources":["../../../src/identity/local/api.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAE3E,wBAAgB,cAAc,CAAC,OAAO,EAAE;IACtC,QAAQ,CAAC,SAAS,EAAE,kBAAkB,CAAC;IACvC,QAAQ,CAAC,WAAW,EAAE,oBAAoB,CAAC;CAC5C,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAmC1C"}

package/dist/identity/local/api.js

@@ -0,0 +1,40 @@
+import { discoverLocalHarnesses } from './discovery.js';
+import { resolveLocalAgentEnv } from './resolve.js';
+export function createLocalApi(options) {
+    return async (request) => {
+        const url = new URL(request.url);
+        if (request.method === 'GET' && (url.pathname === '/local' || url.pathname === '/local/credentials')) {
+            return json(200, {
+                agents: discoverLocalHarnesses(options.discovery),
+                homedir: options.environment.homedir,
+                workspaceRoot: options.environment.workspaceRoot,
+            });
+        }
+        if (request.method === 'POST' && url.pathname === '/local/init') {
+            const initialized = options.environment.ensure();
+            return json(200, {
+                ok: true,
+                created: initialized.created,
+                amalgmPath: initialized.path,
+                homedir: options.environment.homedir,
+                workspaceRoot: options.environment.workspaceRoot,
+                agents: discoverLocalHarnesses(options.discovery),
+            });
+        }
+        if (request.method === 'POST' && url.pathname === '/local/credentials/resolve') {
+            const body = await request.json();
+            if (typeof body.agentId !== 'string' || typeof body.authMode !== 'string') {
+                return json(400, { error: 'agentId and authMode are required' });
+            }
+            return json(200, { env: resolveLocalAgentEnv(body.agentId, body.authMode, typeof body.proxyToken === 'string' ? body.proxyToken : undefined, typeof body.proxyBaseUrl === 'string' ? body.proxyBaseUrl : undefined) });
+        }
+        return json(404, { error: 'not found' });
+    };
+}
+function json(status, body) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { 'content-type': 'application/json', 'cache-control': 'no-store' },
+    });
+}
+//# sourceMappingURL=api.js.map

package/dist/identity/local/api.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../../../src/identity/local/api.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAGpD,MAAM,UAAU,cAAc,CAAC,OAG9B;IACC,OAAO,KAAK,EAAE,OAAO,EAAE,EAAE;QACvB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,oBAAoB,CAAC,EAAE,CAAC;YACrG,OAAO,IAAI,CAAC,GAAG,EAAE;gBACf,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC;gBACjD,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO;gBACpC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,aAAa;aACjD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;YAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,CAAC;YACjD,OAAO,IAAI,CAAC,GAAG,EAAE;gBACf,EAAE,EAAE,IAAI;gBACR,OAAO,EAAE,WAAW,CAAC,OAAO;gBAC5B,UAAU,EAAE,WAAW,CAAC,IAAI;gBAC5B,OAAO,EAAE,OAAO,CAAC,WAAW,CAAC,OAAO;gBACpC,aAAa,EAAE,OAAO,CAAC,WAAW,CAAC,aAAa;gBAChD,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC,SAAS,CAAC;aAClD,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,IAAI,GAAG,CAAC,QAAQ,KAAK,4BAA4B,EAAE,CAAC;YAC/E,MAAM,IAAI,GAAG,MAAM,OAAO,CAAC,IAAI,EAA6B,CAAC;YAC7D,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;gBAC1E,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,mCAAmC,EAAE,CAAC,CAAC;YACnE,CAAC;YACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,GAAG,EAAE,oBAAoB,CAC1C,IAAI,CAAC,OAAO,EACZ,IAAI,CAAC,QAAQ,EACb,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,SAAS,EACjE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CACtE,EAAE,CAAC,CAAC;QACP,CAAC;QACD,OAAO,IAAI,CAAC,GAAG,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3C,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,MAAc,EAAE,IAAa;IACzC,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE;QACxC,MAAM;QACN,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,eAAe,EAAE,UAAU,EAAE;KAC7E,CAAC,CAAC;AACL,CAAC"}

package/dist/identity/local/discovery.d.ts

@@ -0,0 +1,4 @@
+import type { LocalDiscoveryHost, LocalHarness } from './types.js';
+/** Engine reference: runtime/lib/local/credentialResolver.ts. */
+export declare function discoverLocalHarnesses(host: LocalDiscoveryHost): LocalHarness[];
+//# sourceMappingURL=discovery.d.ts.map

package/dist/identity/local/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/identity/local/discovery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAmB,kBAAkB,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAEpF,iEAAiE;AACjE,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,kBAAkB,GAAG,YAAY,EAAE,CAwE/E"}

package/dist/identity/local/discovery.js

@@ -0,0 +1,74 @@
+/** Engine reference: runtime/lib/local/credentialResolver.ts. */
+export function discoverLocalHarnesses(host) {
+    const found = [];
+    const path = (...parts) => host.join(host.homedir, ...parts);
+    const claudeDir = path('.claude');
+    if (host.exists(claudeDir)) {
+        found.push(harness('claude_code', 'Claude Code', claudeDir, host.authStatus('claude_code')));
+    }
+    const codexDir = path('.codex');
+    const codexAuth = host.readJson(path('.codex', 'auth.json'));
+    if (codexAuth) {
+        const tokens = codexAuth.tokens;
+        const apiKey = typeof codexAuth.OPENAI_API_KEY === 'string' ? codexAuth.OPENAI_API_KEY : '';
+        const status = tokens && typeof tokens === 'object'
+            ? { hasAuth: true, authDetails: { type: 'oauth', hint: clean(codexAuth.auth_mode) || 'configured' } }
+            : apiKey
+                ? { hasAuth: true, authDetails: { type: 'api_key', hint: apiKey.slice(-4) } }
+                : { hasAuth: false };
+        found.push(harness('codex', 'Codex', codexDir, status));
+    }
+    const openCodeDir = path('.config', 'opencode');
+    const openCodeAuth = path('.local', 'share', 'opencode', 'auth.json');
+    if (host.exists(openCodeDir) || host.exists(openCodeAuth)) {
+        found.push(harness('opencode', 'OpenCode', openCodeDir, host.nonEmptyFile(openCodeAuth)
+            ? { hasAuth: true, authDetails: { type: 'oauth', hint: 'configured' } }
+            : { hasAuth: false }));
+    }
+    const piDir = path('.pi');
+    const piCredentials = [path('.pi', 'agent', 'auth.json'), path('.pi', 'agent', 'models.json')];
+    if (host.exists(piDir) || piCredentials.some((candidate) => host.exists(candidate))) {
+        const hasAuth = piCredentials.some((candidate) => host.nonEmptyFile(candidate));
+        found.push(harness('pi', 'Pi', piDir, hasAuth
+            ? { hasAuth, authDetails: { type: 'unknown', hint: 'configured' } }
+            : { hasAuth }));
+    }
+    const ampDir = path('.config', 'amp');
+    const ampKey = host.env('AMP_API_KEY') ?? '';
+    const ampCredentials = [path('.config', 'amp', 'settings.json'), path('.amp', 'config.json'), path('.amp', 'auth.json')];
+    if (ampKey || host.exists(ampDir) || ampCredentials.some((candidate) => host.exists(candidate))) {
+        const hasFile = ampCredentials.some((candidate) => host.nonEmptyFile(candidate));
+        const hasAuth = Boolean(ampKey || hasFile);
+        found.push(harness('amp', 'Amp', ampDir, hasAuth
+            ? { hasAuth, authDetails: { type: ampKey ? 'api_key' : 'unknown', hint: ampKey ? ampKey.slice(-4) : 'configured' } }
+            : { hasAuth }));
+    }
+    const cursorDir = path('.cursor');
+    const cursorKey = host.env('CURSOR_API_KEY') ?? '';
+    const cursorCredentials = [
+        path('.cursor', 'credentials.json'),
+        path('.config', 'cursor', 'credentials.json'),
+        path('.local', 'share', 'cursor-agent', 'auth.json'),
+    ];
+    const cursorStatus = host.authStatus('cursor');
+    if (cursorKey || cursorStatus?.hasAuth || host.exists(cursorDir)
+        || cursorCredentials.some((candidate) => host.exists(candidate))) {
+        const hasFile = cursorCredentials.some((candidate) => host.nonEmptyFile(candidate));
+        const hasAuth = Boolean(cursorKey || cursorStatus?.hasAuth || hasFile);
+        found.push(harness('cursor', 'Cursor', cursorDir, hasAuth
+            ? cursorKey
+                ? { hasAuth, authDetails: { type: 'api_key', hint: cursorKey.slice(-4) } }
+                : cursorStatus?.hasAuth
+                    ? cursorStatus
+                    : { hasAuth, authDetails: { type: 'oauth', hint: 'configured' } }
+            : { hasAuth }));
+    }
+    return found;
+}
+function harness(id, name, configDir, status) {
+    return { id, name, configDir, ...(status ?? { hasAuth: false }) };
+}
+function clean(value) {
+    return typeof value === 'string' ? value.trim() : '';
+}
+//# sourceMappingURL=discovery.js.map

package/dist/identity/local/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/identity/local/discovery.ts"],"names":[],"mappings":"AAEA,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CAAC,IAAwB;IAC7D,MAAM,KAAK,GAAmB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,CAAC,GAAG,KAAe,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,CAAC;IAEvE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC3B,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,aAAa,EAAE,aAAa,EAAE,SAAS,EAAE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC;IAChC,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAmC,CAAC;IAC/F,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC;QAChC,MAAM,MAAM,GAAG,OAAO,SAAS,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5F,MAAM,MAAM,GAAoB,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ;YAClE,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,CAAC,SAAS,CAAC,SAAS,CAAC,IAAI,YAAY,EAAE,EAAE;YACrG,CAAC,CAAC,MAAM;gBACN,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC7E,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;QACzB,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAC1D,CAAC;IAED,MAAM,WAAW,GAAG,IAAI,CAAC,SAAS,EAAE,UAAU,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,WAAW,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,WAAW,EACpD,IAAI,CAAC,YAAY,CAAC,YAAY,CAAC;YAC7B,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;YACvE,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1B,MAAM,aAAa,GAAG,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,WAAW,CAAC,EAAE,IAAI,CAAC,KAAK,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC;IAC/F,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACpF,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO;YAC3C,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;YACnE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,MAAM,GAAG,IAAI,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC;IACtC,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,EAAE,CAAC;IAC7C,MAAM,cAAc,GAAG,CAAC,IAAI,CAAC,SAAS,EAAE,KAAK,EAAE,eAAe,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,aAAa,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC,CAAC;IACzH,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QAChG,MAAM,OAAO,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACjF,MAAM,OAAO,GAAG,OAAO,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO;YAC9C,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,YAAY,EAAE,EAAE;YACpH,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IAED,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,CAAC;IAClC,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,CAAC,gBAAgB,CAAC,IAAI,EAAE,CAAC;IACnD,MAAM,iBAAiB,GAAG;QACxB,IAAI,CAAC,SAAS,EAAE,kBAAkB,CAAC;QACnC,IAAI,CAAC,SAAS,EAAE,QAAQ,EAAE,kBAAkB,CAAC;QAC7C,IAAI,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,WAAW,CAAC;KACrD,CAAC;IACF,MAAM,YAAY,GAAG,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC;IAC/C,IAAI,SAAS,IAAI,YAAY,EAAE,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC;WAC3D,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC;QACpF,MAAM,OAAO,GAAG,OAAO,CAAC,SAAS,IAAI,YAAY,EAAE,OAAO,IAAI,OAAO,CAAC,CAAC;QACvE,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,QAAQ,EAAE,QAAQ,EAAE,SAAS,EAAE,OAAO;YACvD,CAAC,CAAC,SAAS;gBACT,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE;gBAC1E,CAAC,CAAC,YAAY,EAAE,OAAO;oBACrB,CAAC,CAAC,YAAY;oBACd,CAAC,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE;YACrE,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;IACpB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,OAAO,CACd,EAAsB,EACtB,IAAY,EACZ,SAAiB,EACjB,MAA8B;IAE9B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,CAAC,MAAM,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC;AACpE,CAAC;AAED,SAAS,KAAK,CAAC,KAAc;IAC3B,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC"}

package/dist/identity/local/index.d.ts

@@ -0,0 +1,5 @@
+export { createLocalApi } from './api.js';
+export { discoverLocalHarnesses } from './discovery.js';
+export { localReauthCommand, resolveLocalAgentEnv } from './resolve.js';
+export type * from './types.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/identity/local/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/identity/local/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AACxE,mBAAmB,YAAY,CAAC"}

package/dist/identity/local/index.js

@@ -0,0 +1,4 @@
+export { createLocalApi } from './api.js';
+export { discoverLocalHarnesses } from './discovery.js';
+export { localReauthCommand, resolveLocalAgentEnv } from './resolve.js';
+//# sourceMappingURL=index.js.map

package/dist/identity/local/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/identity/local/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AACxD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC"}

package/dist/identity/local/resolve.d.ts

@@ -0,0 +1,7 @@
+import type { LocalHarness } from './types.js';
+export declare function resolveLocalAgentEnv(agentId: LocalHarness['id'] | string, authMode: string, proxyToken?: string, proxyBaseUrl?: string): Record<string, string>;
+export declare function localReauthCommand(agentId: string): {
+    shell: string;
+    description: string;
+} | null;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/identity/local/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../src/identity/local/resolve.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE/C,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,MAAM,EACpC,QAAQ,EAAE,MAAM,EAChB,UAAU,CAAC,EAAE,MAAM,EACnB,YAAY,CAAC,EAAE,MAAM,GACpB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAexB;AAED,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAajG"}

package/dist/identity/local/resolve.js

@@ -0,0 +1,32 @@
+export function resolveLocalAgentEnv(agentId, authMode, proxyToken, proxyBaseUrl) {
+    if (authMode !== 'amalgm' || !proxyToken || !proxyBaseUrl)
+        return {};
+    const base = proxyBaseUrl.replace(/\/+$/, '');
+    switch (agentId) {
+        case 'claude_code':
+            return { ANTHROPIC_API_KEY: proxyToken, ANTHROPIC_BASE_URL: `${base}/anthropic` };
+        case 'codex':
+            return { OPENAI_API_KEY: proxyToken, OPENAI_BASE_URL: `${base}/openai/v1` };
+        case 'opencode':
+            return { AI_GATEWAY_API_KEY: proxyToken, AI_GATEWAY_BASE_URL: `${base}/ai_gateway/v3/ai` };
+        case 'pi':
+            return { AI_GATEWAY_API_KEY: proxyToken, AI_GATEWAY_BASE_URL: `${base}/ai_gateway/v1` };
+        default:
+            return {};
+    }
+}
+export function localReauthCommand(agentId) {
+    switch (agentId) {
+        case 'claude_code': return { shell: 'claude', description: 'Run `claude`, then type /login to authenticate.' };
+        case 'codex': return { shell: 'codex login', description: '`codex login` walks through OAuth or API-key setup.' };
+        case 'opencode': return { shell: 'opencode auth login', description: '`opencode auth login` walks through provider setup.' };
+        case 'pi': return { shell: 'pi --terminal-login', description: '`pi --terminal-login` authenticates Pi in the terminal.' };
+        case 'amp': return { shell: 'amp --setup', description: '`amp --setup` configures Amp credentials.' };
+        case 'cursor': return {
+            shell: 'if command -v cursor-agent >/dev/null 2>&1; then cursor-agent login; else "$HOME/.local/bin/cursor-agent" login; fi',
+            description: '`cursor-agent login` opens the browser login flow.',
+        };
+        default: return null;
+    }
+}
+//# sourceMappingURL=resolve.js.map

package/dist/identity/local/resolve.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.js","sourceRoot":"","sources":["../../../src/identity/local/resolve.ts"],"names":[],"mappings":"AAEA,MAAM,UAAU,oBAAoB,CAClC,OAAoC,EACpC,QAAgB,EAChB,UAAmB,EACnB,YAAqB;IAErB,IAAI,QAAQ,KAAK,QAAQ,IAAI,CAAC,UAAU,IAAI,CAAC,YAAY;QAAE,OAAO,EAAE,CAAC;IACrE,MAAM,IAAI,GAAG,YAAY,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC9C,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,aAAa;YAChB,OAAO,EAAE,iBAAiB,EAAE,UAAU,EAAE,kBAAkB,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC;QACpF,KAAK,OAAO;YACV,OAAO,EAAE,cAAc,EAAE,UAAU,EAAE,eAAe,EAAE,GAAG,IAAI,YAAY,EAAE,CAAC;QAC9E,KAAK,UAAU;YACb,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,IAAI,mBAAmB,EAAE,CAAC;QAC7F,KAAK,IAAI;YACP,OAAO,EAAE,kBAAkB,EAAE,UAAU,EAAE,mBAAmB,EAAE,GAAG,IAAI,gBAAgB,EAAE,CAAC;QAC1F;YACE,OAAO,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED,MAAM,UAAU,kBAAkB,CAAC,OAAe;IAChD,QAAQ,OAAO,EAAE,CAAC;QAChB,KAAK,aAAa,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,QAAQ,EAAE,WAAW,EAAE,iDAAiD,EAAE,CAAC;QAC/G,KAAK,OAAO,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;QAClH,KAAK,UAAU,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;QAC7H,KAAK,IAAI,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,qBAAqB,EAAE,WAAW,EAAE,yDAAyD,EAAE,CAAC;QAC3H,KAAK,KAAK,CAAC,CAAC,OAAO,EAAE,KAAK,EAAE,aAAa,EAAE,WAAW,EAAE,2CAA2C,EAAE,CAAC;QACtG,KAAK,QAAQ,CAAC,CAAC,OAAO;YACpB,KAAK,EAAE,qHAAqH;YAC5H,WAAW,EAAE,oDAAoD;SAClE,CAAC;QACF,OAAO,CAAC,CAAC,OAAO,IAAI,CAAC;IACvB,CAAC;AACH,CAAC"}

package/dist/identity/local/types.d.ts

@@ -0,0 +1,30 @@
+export interface LocalAuthStatus {
+    readonly hasAuth: boolean;
+    readonly authDetails?: {
+        readonly type: 'oauth' | 'api_key' | 'unknown';
+        readonly hint: string;
+    };
+}
+export interface LocalHarness extends LocalAuthStatus {
+    readonly id: 'claude_code' | 'codex' | 'opencode' | 'pi' | 'amp' | 'cursor';
+    readonly name: string;
+    readonly configDir: string;
+}
+export interface LocalDiscoveryHost {
+    readonly homedir: string;
+    join(...parts: string[]): string;
+    exists(path: string): boolean;
+    nonEmptyFile(path: string): boolean;
+    readJson(path: string): unknown;
+    env(name: string): string | undefined;
+    authStatus(harnessId: LocalHarness['id']): LocalAuthStatus | null;
+}
+export interface LocalEnvironmentHost {
+    readonly homedir: string;
+    readonly workspaceRoot: string;
+    ensure(): {
+        readonly created: boolean;
+        readonly path: string;
+    };
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/identity/local/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../src/identity/local/types.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAClG;AAED,MAAM,WAAW,YAAa,SAAQ,eAAe;IACnD,QAAQ,CAAC,EAAE,EAAE,aAAa,GAAG,OAAO,GAAG,UAAU,GAAG,IAAI,GAAG,KAAK,GAAG,QAAQ,CAAC;IAC5E,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,IAAI,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM,CAAC;IACjC,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAC9B,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC;IAChC,GAAG,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAAC;IACtC,UAAU,CAAC,SAAS,EAAE,YAAY,CAAC,IAAI,CAAC,GAAG,eAAe,GAAG,IAAI,CAAC;CACnE;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,MAAM,IAAI;QAAE,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;QAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;KAAE,CAAC;CAChE"}

package/dist/identity/local/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/identity/local/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../src/identity/local/types.ts"],"names":[],"mappings":""}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@amalgm/core",
-  "version": "0.1.1",
+  "version": "0.1.2",
   "description": "The Amalgm kernel SDK — identity, transport, supervision, and host capability contracts behind host-injected adapters.",
   "type": "module",
   "license": "UNLICENSED",
@@ -20,6 +20,10 @@
       "types": "./dist/identity/index.d.ts",
       "default": "./dist/identity/index.js"
     },
+    "./local": {
+      "types": "./dist/identity/local/index.d.ts",
+      "default": "./dist/identity/local/index.js"
+    },
     "./transport": {
       "types": "./dist/transport/index.d.ts",
       "default": "./dist/transport/index.js"