@andrew.ng/symbion 0.1.0

package/apps/daemon/dist/git/status.js

@@ -0,0 +1,30 @@
+import { execFileSync } from "node:child_process";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+/**
+ * gitStatus — read-only `git status --porcelain` (git is advisory in v1: status only,
+ * never commits/branches, per STATE §8 #4 / CLAUDE.md).
+ */
+export function gitStatus(repoPath) {
+    const isRepo = existsSync(join(repoPath, ".git"));
+    if (!isRepo) {
+        return { isRepo: false, clean: true, changedFiles: [] };
+    }
+    try {
+        const out = execFileSync("git", ["status", "--porcelain"], {
+            cwd: repoPath,
+            encoding: "utf-8",
+        });
+        const changedFiles = out
+            .split("\n")
+            .map((l) => l.trim())
+            .filter((l) => l.length > 0)
+            .map((l) => l.slice(3));
+        return { isRepo: true, clean: changedFiles.length === 0, changedFiles };
+    }
+    catch {
+        // git binary missing or command failed — treat as non-repo (advisory, never blocks).
+        return { isRepo: false, clean: true, changedFiles: [] };
+    }
+}
+//# sourceMappingURL=status.js.map

package/apps/daemon/dist/git/status.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"status.js","sourceRoot":"","sources":["../../src/git/status.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAQjC;;;GAGG;AACH,MAAM,UAAU,SAAS,CAAC,QAAgB;IACxC,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;IAClD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC1D,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE;YACzD,GAAG,EAAE,QAAQ;YACb,QAAQ,EAAE,OAAO;SAClB,CAAC,CAAC;QACH,MAAM,YAAY,GAAG,GAAG;aACrB,KAAK,CAAC,IAAI,CAAC;aACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;aAC3B,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;QAC1B,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,YAAY,EAAE,CAAC;IAC1E,CAAC;IAAC,MAAM,CAAC;QACP,qFAAqF;QACrF,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC"}

package/apps/daemon/dist/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/apps/daemon/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":""}

package/apps/daemon/dist/index.js

@@ -0,0 +1,69 @@
+import { existsSync } from "node:fs";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { startServer } from "./server.js";
+import { showBootMenu } from "./boot/menu.js";
+import { loadGlobalConfig, saveGlobalConfig } from "./store/store.js";
+import { findOpenPort } from "./net/findOpenPort.js";
+const VERSION = process.env.SYMBION_VERSION ?? "0.1.0";
+function findWebStaticRoot() {
+    // apps/daemon/dist/index.js -> ../../web/out (apps/web/out, the Next static export).
+    const here = dirname(fileURLToPath(import.meta.url));
+    const candidate = join(here, "..", "..", "web", "out");
+    return existsSync(candidate) ? candidate : undefined;
+}
+async function main() {
+    const config = loadGlobalConfig();
+    const webStaticRoot = findWebStaticRoot();
+    let handle;
+    let port;
+    try {
+        const found = await findOpenPort(config.port, (candidatePort) => startServer({ port: candidatePort, version: VERSION, webStaticRoot }));
+        port = found.port;
+        handle = found.handle;
+    }
+    catch (err) {
+        console.error("Không tìm được cổng trống cho daemon.", err);
+        process.exit(1);
+        return;
+    }
+    if (port !== config.port) {
+        config.port = port;
+        saveGlobalConfig(config);
+    }
+    const url = `http://127.0.0.1:${handle.port}/?t=${handle.token}`;
+    console.log(`Symbion v${VERSION}`);
+    console.log(`Symbion daemon đang chạy: ${url}`);
+    let running = true;
+    while (running) {
+        const choice = await showBootMenu(url);
+        if (choice === "web") {
+            console.log(`Mở: ${url}`);
+            // best-effort open in default browser; not critical-path for headless/CI runs.
+            try {
+                const open = await import("node:child_process");
+                const platform = process.platform;
+                const cmd = platform === "darwin" ? "open" : platform === "win32" ? "start" : "xdg-open";
+                open.exec(`${cmd} "${url}"`);
+            }
+            catch {
+                // ignore — user can open the URL manually
+            }
+        }
+        else if (choice === "tray") {
+            console.log("Đã chuyển sang chạy nền (Hide to Tray). Server vẫn đang chạy.");
+            running = false; // detach menu loop; process keeps running via the HTTP server
+        }
+        else if (choice === "exit") {
+            console.log("Đang tắt daemon...");
+            await handle.close();
+            running = false;
+            process.exit(0);
+        }
+    }
+}
+main().catch((err) => {
+    console.error(err);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/apps/daemon/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,WAAW,EAA2B,MAAM,aAAa,CAAC;AACnE,OAAO,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AAC9C,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAErD,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,CAAC;AAEvD,SAAS,iBAAiB;IACxB,qFAAqF;IACrF,MAAM,IAAI,GAAG,OAAO,CAAC,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,CAAC;IACvD,OAAO,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,gBAAgB,EAAE,CAAC;IAClC,MAAM,aAAa,GAAG,iBAAiB,EAAE,CAAC;IAE1C,IAAI,MAA0B,CAAC;IAC/B,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,aAAa,EAAE,EAAE,CAC9D,WAAW,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CACtE,CAAC;QACF,IAAI,GAAG,KAAK,CAAC,IAAI,CAAC;QAClB,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IACxB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,KAAK,CAAC,uCAAuC,EAAE,GAAG,CAAC,CAAC;QAC5D,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAChB,OAAO;IACT,CAAC;IAED,IAAI,IAAI,KAAK,MAAM,CAAC,IAAI,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QACnB,gBAAgB,CAAC,MAAM,CAAC,CAAC;IAC3B,CAAC;IAED,MAAM,GAAG,GAAG,oBAAoB,MAAM,CAAC,IAAI,OAAO,MAAM,CAAC,KAAK,EAAE,CAAC;IACjE,OAAO,CAAC,GAAG,CAAC,YAAY,OAAO,EAAE,CAAC,CAAC;IACnC,OAAO,CAAC,GAAG,CAAC,6BAA6B,GAAG,EAAE,CAAC,CAAC;IAEhD,IAAI,OAAO,GAAG,IAAI,CAAC;IACnB,OAAO,OAAO,EAAE,CAAC;QACf,MAAM,MAAM,GAAG,MAAM,YAAY,CAAC,GAAG,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,KAAK,EAAE,CAAC;YACrB,OAAO,CAAC,GAAG,CAAC,OAAO,GAAG,EAAE,CAAC,CAAC;YAC1B,+EAA+E;YAC/E,IAAI,CAAC;gBACH,MAAM,IAAI,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,CAAC;gBAChD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;gBAClC,MAAM,GAAG,GAAG,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC;gBACzF,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,KAAK,GAAG,GAAG,CAAC,CAAC;YAC/B,CAAC;YAAC,MAAM,CAAC;gBACP,0CAA0C;YAC5C,CAAC;QACH,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,+DAA+D,CAAC,CAAC;YAC7E,OAAO,GAAG,KAAK,CAAC,CAAC,8DAA8D;QACjF,CAAC;aAAM,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;YAC7B,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;YAClC,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;YACrB,OAAO,GAAG,KAAK,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;AACH,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACnB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACnB,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/apps/daemon/dist/llm/anthropicProvider.d.ts

@@ -0,0 +1,26 @@
+/**
+ * AnthropicProvider — renamed from RemoteProvider per
+ * docs/loops/multi-provider-settings-STATE.md §3.1: it already speaks the
+ * Anthropic Messages API shape (`x-api-key` header, `anthropic-version`,
+ * `/v1/messages` body shape, Claude model ids), so this is a rename + a
+ * change in key source (secrets.ts instead of process.env), not new business
+ * logic — the HTTP call shape is unchanged.
+ *
+ * The API key is read from the secrets store (apps/daemon/src/llm/secrets.ts)
+ * at construction time — never persisted by this class, never accepted as a
+ * request param, never read from apps/web. If unset, generate() throws
+ * LlmError("not-configured", ...) immediately, with NO network call attempted.
+ */
+import { type LlmGenerateRequest, type LlmGenerateResult, type LlmModelOption, type LlmProvider } from "./types.js";
+export interface AnthropicProviderOptions {
+    /** injectable for tests; defaults to the real Anthropic Messages endpoint. */
+    baseUrl?: string;
+}
+export declare class AnthropicProvider implements LlmProvider {
+    readonly id: "anthropic";
+    private readonly baseUrl;
+    constructor(opts?: AnthropicProviderOptions);
+    listModels(): Promise<LlmModelOption[]>;
+    generate(req: LlmGenerateRequest): Promise<LlmGenerateResult>;
+}
+//# sourceMappingURL=anthropicProvider.d.ts.map

package/apps/daemon/dist/llm/anthropicProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropicProvider.d.ts","sourceRoot":"","sources":["../../src/llm/anthropicProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAY,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAW9H,MAAM,WAAW,wBAAwB;IACvC,8EAA8E;IAC9E,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,iBAAkB,YAAW,WAAW;IACnD,QAAQ,CAAC,EAAE,EAAG,WAAW,CAAU;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,IAAI,GAAE,wBAA6B;IAIzC,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIvC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA6DpE"}

package/apps/daemon/dist/llm/anthropicProvider.js

@@ -0,0 +1,90 @@
+/**
+ * AnthropicProvider — renamed from RemoteProvider per
+ * docs/loops/multi-provider-settings-STATE.md §3.1: it already speaks the
+ * Anthropic Messages API shape (`x-api-key` header, `anthropic-version`,
+ * `/v1/messages` body shape, Claude model ids), so this is a rename + a
+ * change in key source (secrets.ts instead of process.env), not new business
+ * logic — the HTTP call shape is unchanged.
+ *
+ * The API key is read from the secrets store (apps/daemon/src/llm/secrets.ts)
+ * at construction time — never persisted by this class, never accepted as a
+ * request param, never read from apps/web. If unset, generate() throws
+ * LlmError("not-configured", ...) immediately, with NO network call attempted.
+ */
+import { LlmError } from "./types.js";
+import { loadProvidersConfig } from "./secrets.js";
+const ANTHROPIC_DEFAULT_BASE_URL = "https://api.anthropic.com/v1/messages";
+const ANTHROPIC_MODELS = [
+    { id: "claude-haiku-4-5", label: "Claude Haiku 4.5 (nhanh)", tier: "fast" },
+    { id: "claude-sonnet-4-5", label: "Claude Sonnet 4.5 (cân bằng)", tier: "balanced" },
+    { id: "claude-opus-4-1", label: "Claude Opus 4.1 (tốt nhất)", tier: "best" },
+];
+export class AnthropicProvider {
+    id = "anthropic";
+    baseUrl;
+    constructor(opts = {}) {
+        this.baseUrl = opts.baseUrl ?? ANTHROPIC_DEFAULT_BASE_URL;
+    }
+    async listModels() {
+        return ANTHROPIC_MODELS;
+    }
+    async generate(req) {
+        const apiKey = loadProvidersConfig().providers.anthropic?.apiKey;
+        if (!apiKey) {
+            throw new LlmError("not-configured", "Chưa cấu hình API key cho Anthropic.");
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), req.timeoutMs);
+        try {
+            let res;
+            try {
+                res = await fetch(this.baseUrl, {
+                    method: "POST",
+                    headers: {
+                        "Content-Type": "application/json",
+                        "x-api-key": apiKey,
+                        "anthropic-version": "2023-06-01",
+                    },
+                    body: JSON.stringify({
+                        model: req.model,
+                        system: req.systemPrompt,
+                        max_tokens: req.maxTokens ?? 4096,
+                        messages: [{ role: "user", content: req.userPrompt }],
+                    }),
+                    signal: controller.signal,
+                });
+            }
+            catch {
+                if (controller.signal.aborted) {
+                    throw new LlmError("timeout", `Quá thời gian chờ (${req.timeoutMs}ms) khi gọi Anthropic.`);
+                }
+                throw new LlmError("network", "Lỗi mạng khi gọi Anthropic.");
+            }
+            if (res.status === 401 || res.status === 403) {
+                throw new LlmError("auth", "Thiếu hoặc sai cấu hình API key cho Anthropic.");
+            }
+            if (res.status === 429) {
+                throw new LlmError("rate-limit", "Bị giới hạn tần suất gọi — thử lại sau.");
+            }
+            if (!res.ok) {
+                throw new LlmError("invalid-response", `Anthropic trả về lỗi HTTP ${res.status}.`);
+            }
+            let json;
+            try {
+                json = (await res.json());
+            }
+            catch {
+                throw new LlmError("invalid-response", "Phản hồi không hợp lệ từ Anthropic (không phải JSON).");
+            }
+            const text = json.content?.[0]?.text;
+            if (typeof text !== "string") {
+                throw new LlmError("invalid-response", "Phản hồi không hợp lệ từ Anthropic.");
+            }
+            return { text };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=anthropicProvider.js.map

package/apps/daemon/dist/llm/anthropicProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropicProvider.js","sourceRoot":"","sources":["../../src/llm/anthropicProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,QAAQ,EAA0F,MAAM,YAAY,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,0BAA0B,GAAG,uCAAuC,CAAC;AAE3E,MAAM,gBAAgB,GAAqB;IACzC,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,EAAE;IAC3E,EAAE,EAAE,EAAE,mBAAmB,EAAE,KAAK,EAAE,8BAA8B,EAAE,IAAI,EAAE,UAAU,EAAE;IACpF,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,4BAA4B,EAAE,IAAI,EAAE,MAAM,EAAE;CAC7E,CAAC;AAOF,MAAM,OAAO,iBAAiB;IACnB,EAAE,GAAG,WAAoB,CAAC;IAClB,OAAO,CAAS;IAEjC,YAAY,OAAiC,EAAE;QAC7C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,0BAA0B,CAAC;IAC5D,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,gBAAgB,CAAC;IAC1B,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB;QACpC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;QACjE,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,sCAAsC,CAAC,CAAC;QAC/E,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE;oBAC9B,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE;wBACP,cAAc,EAAE,kBAAkB;wBAClC,WAAW,EAAE,MAAM;wBACnB,mBAAmB,EAAE,YAAY;qBAClC;oBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,KAAK,EAAE,GAAG,CAAC,KAAK;wBAChB,MAAM,EAAE,GAAG,CAAC,YAAY;wBACxB,UAAU,EAAE,GAAG,CAAC,SAAS,IAAI,IAAI;wBACjC,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC;qBACtD,CAAC;oBACF,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,sBAAsB,GAAG,CAAC,SAAS,wBAAwB,CAAC,CAAC;gBAC7F,CAAC;gBACD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,6BAA6B,CAAC,CAAC;YAC/D,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,gDAAgD,CAAC,CAAC;YAC/E,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,6BAA6B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YACrF,CAAC;YAED,IAAI,IAA4C,CAAC;YACjD,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAA2C,CAAC;YACtE,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,uDAAuD,CAAC,CAAC;YAClG,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YACrC,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,qCAAqC,CAAC,CAAC;YAChF,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/apps/daemon/dist/llm/geminiProvider.d.ts

@@ -0,0 +1,25 @@
+/**
+ * GeminiProvider — LlmProvider implementation for Google Gemini, per
+ * docs/loops/multi-provider-settings-STATE.md §3.2. Reads its API key from
+ * the secrets store (apps/daemon/src/llm/secrets.ts) at construction time —
+ * never from process.env, never persisted by this class. Calls Gemini's
+ * documented simple-API-key `generateContent` REST endpoint with a `?key=`
+ * query param (no OAuth) — dev's call on exact endpoint per STATE §3.2.
+ *
+ * Model ids below are placeholder/dev-time content decisions (same framing
+ * as ollamaProvider.ts's model list) — Checker should independently verify
+ * these are reasonable current Gemini model ids at review time.
+ */
+import { type LlmGenerateRequest, type LlmGenerateResult, type LlmModelOption, type LlmProvider } from "./types.js";
+export interface GeminiProviderOptions {
+    /** injectable for tests; defaults to the real Gemini generateContent endpoint base. */
+    baseUrl?: string;
+}
+export declare class GeminiProvider implements LlmProvider {
+    readonly id: "gemini";
+    private readonly baseUrl;
+    constructor(opts?: GeminiProviderOptions);
+    listModels(): Promise<LlmModelOption[]>;
+    generate(req: LlmGenerateRequest): Promise<LlmGenerateResult>;
+}
+//# sourceMappingURL=geminiProvider.d.ts.map

package/apps/daemon/dist/llm/geminiProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"geminiProvider.d.ts","sourceRoot":"","sources":["../../src/llm/geminiProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAY,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAW9H,MAAM,WAAW,qBAAqB;IACpC,uFAAuF;IACvF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qBAAa,cAAe,YAAW,WAAW;IAChD,QAAQ,CAAC,EAAE,EAAG,QAAQ,CAAU;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,IAAI,GAAE,qBAA0B;IAItC,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAIvC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA+DpE"}

package/apps/daemon/dist/llm/geminiProvider.js

@@ -0,0 +1,89 @@
+/**
+ * GeminiProvider — LlmProvider implementation for Google Gemini, per
+ * docs/loops/multi-provider-settings-STATE.md §3.2. Reads its API key from
+ * the secrets store (apps/daemon/src/llm/secrets.ts) at construction time —
+ * never from process.env, never persisted by this class. Calls Gemini's
+ * documented simple-API-key `generateContent` REST endpoint with a `?key=`
+ * query param (no OAuth) — dev's call on exact endpoint per STATE §3.2.
+ *
+ * Model ids below are placeholder/dev-time content decisions (same framing
+ * as ollamaProvider.ts's model list) — Checker should independently verify
+ * these are reasonable current Gemini model ids at review time.
+ */
+import { LlmError } from "./types.js";
+import { loadProvidersConfig } from "./secrets.js";
+const GEMINI_DEFAULT_BASE_URL = "https://generativelanguage.googleapis.com/v1beta/models";
+const GEMINI_MODELS = [
+    { id: "gemini-1.5-flash", label: "Gemini 1.5 Flash (nhanh)", tier: "fast" },
+    { id: "gemini-1.5-pro", label: "Gemini 1.5 Pro (cân bằng)", tier: "balanced" },
+    { id: "gemini-2.0-pro", label: "Gemini 2.0 Pro (tốt nhất)", tier: "best" },
+];
+export class GeminiProvider {
+    id = "gemini";
+    baseUrl;
+    constructor(opts = {}) {
+        this.baseUrl = opts.baseUrl ?? GEMINI_DEFAULT_BASE_URL;
+    }
+    async listModels() {
+        return GEMINI_MODELS;
+    }
+    async generate(req) {
+        const apiKey = loadProvidersConfig().providers.gemini?.apiKey;
+        if (!apiKey) {
+            throw new LlmError("not-configured", "Chưa cấu hình API key cho Gemini.");
+        }
+        const controller = new AbortController();
+        const timer = setTimeout(() => controller.abort(), req.timeoutMs);
+        try {
+            // Key in the query string is Gemini's documented simple-API-key auth shape — not a
+            // Symbion choice, the vendor's own published REST contract.
+            const url = `${this.baseUrl}/${encodeURIComponent(req.model)}:generateContent?key=${encodeURIComponent(apiKey)}`;
+            let res;
+            try {
+                res = await fetch(url, {
+                    method: "POST",
+                    headers: { "Content-Type": "application/json" },
+                    body: JSON.stringify({
+                        systemInstruction: { parts: [{ text: req.systemPrompt }] },
+                        contents: [{ role: "user", parts: [{ text: req.userPrompt }] }],
+                        ...(req.maxTokens != null
+                            ? { generationConfig: { maxOutputTokens: req.maxTokens } }
+                            : {}),
+                    }),
+                    signal: controller.signal,
+                });
+            }
+            catch {
+                if (controller.signal.aborted) {
+                    throw new LlmError("timeout", `Quá thời gian chờ (${req.timeoutMs}ms) khi gọi Gemini.`);
+                }
+                throw new LlmError("network", "Lỗi mạng khi gọi Gemini.");
+            }
+            if (res.status === 401 || res.status === 403) {
+                throw new LlmError("auth", "Thiếu hoặc sai cấu hình API key cho Gemini.");
+            }
+            if (res.status === 429) {
+                throw new LlmError("rate-limit", "Bị giới hạn tần suất gọi — thử lại sau.");
+            }
+            if (!res.ok) {
+                throw new LlmError("invalid-response", `Gemini trả về lỗi HTTP ${res.status}.`);
+            }
+            let json;
+            try {
+                json = (await res.json());
+            }
+            catch {
+                throw new LlmError("invalid-response", "Phản hồi không hợp lệ từ Gemini (không phải JSON).");
+            }
+            const text = json.candidates?.[0]?.content?.parts?.[0]?.text;
+            if (typeof text !== "string") {
+                throw new LlmError("invalid-response", "Phản hồi không hợp lệ từ Gemini.");
+            }
+            return { text };
+        }
+        finally {
+            clearTimeout(timer);
+        }
+    }
+}
+//# sourceMappingURL=geminiProvider.js.map

package/apps/daemon/dist/llm/geminiProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"geminiProvider.js","sourceRoot":"","sources":["../../src/llm/geminiProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,QAAQ,EAA0F,MAAM,YAAY,CAAC;AAC9H,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD,MAAM,uBAAuB,GAAG,yDAAyD,CAAC;AAE1F,MAAM,aAAa,GAAqB;IACtC,EAAE,EAAE,EAAE,kBAAkB,EAAE,KAAK,EAAE,0BAA0B,EAAE,IAAI,EAAE,MAAM,EAAE;IAC3E,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,UAAU,EAAE;IAC9E,EAAE,EAAE,EAAE,gBAAgB,EAAE,KAAK,EAAE,2BAA2B,EAAE,IAAI,EAAE,MAAM,EAAE;CAC3E,CAAC;AAOF,MAAM,OAAO,cAAc;IAChB,EAAE,GAAG,QAAiB,CAAC;IACf,OAAO,CAAS;IAEjC,YAAY,OAA8B,EAAE;QAC1C,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,IAAI,uBAAuB,CAAC;IACzD,CAAC;IAED,KAAK,CAAC,UAAU;QACd,OAAO,aAAa,CAAC;IACvB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAuB;QACpC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;QAC9D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,QAAQ,CAAC,gBAAgB,EAAE,mCAAmC,CAAC,CAAC;QAC5E,CAAC;QAED,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,SAAS,CAAC,CAAC;QAElE,IAAI,CAAC;YACH,mFAAmF;YACnF,4DAA4D;YAC5D,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,IAAI,kBAAkB,CAAC,GAAG,CAAC,KAAK,CAAC,wBAAwB,kBAAkB,CAAC,MAAM,CAAC,EAAE,CAAC;YACjH,IAAI,GAAa,CAAC;YAClB,IAAI,CAAC;gBACH,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;oBACrB,MAAM,EAAE,MAAM;oBACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;oBAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;wBACnB,iBAAiB,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,YAAY,EAAE,CAAC,EAAE;wBAC1D,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;wBAC/D,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,IAAI;4BACvB,CAAC,CAAC,EAAE,gBAAgB,EAAE,EAAE,eAAe,EAAE,GAAG,CAAC,SAAS,EAAE,EAAE;4BAC1D,CAAC,CAAC,EAAE,CAAC;qBACR,CAAC;oBACF,MAAM,EAAE,UAAU,CAAC,MAAM;iBAC1B,CAAC,CAAC;YACL,CAAC;YAAC,MAAM,CAAC;gBACP,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,sBAAsB,GAAG,CAAC,SAAS,qBAAqB,CAAC,CAAC;gBAC1F,CAAC;gBACD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC,CAAC;YAC5D,CAAC;YAED,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7C,MAAM,IAAI,QAAQ,CAAC,MAAM,EAAE,6CAA6C,CAAC,CAAC;YAC5E,CAAC;YACD,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBACvB,MAAM,IAAI,QAAQ,CAAC,YAAY,EAAE,yCAAyC,CAAC,CAAC;YAC9E,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,0BAA0B,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAClF,CAAC;YAED,IAAI,IAAgF,CAAC;YACrF,IAAI,CAAC;gBACH,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAEvB,CAAC;YACJ,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,oDAAoD,CAAC,CAAC;YAC/F,CAAC;YAED,MAAM,IAAI,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;YAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAAC,kBAAkB,EAAE,kCAAkC,CAAC,CAAC;YAC7E,CAAC;YAED,OAAO,EAAE,IAAI,EAAE,CAAC;QAClB,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;CACF"}

package/apps/daemon/dist/llm/installInstructions.d.ts

@@ -0,0 +1,40 @@
+export interface HostEnvironment {
+    /** what the daemon believes its own host environment is, for install-command selection (EC-3). */
+    kind: "wsl" | "linux" | "macos" | "windows" | "unknown";
+    /** short human label shown verbatim in the panel's "phát hiện: …" line. */
+    label: string;
+}
+export interface InstallInstructions {
+    env: HostEnvironment;
+    /** true only when detection is confident enough to show ONE command block. */
+    confident: boolean;
+    /** one entry per OS variant to show. Length 1 when confident===true; length 4 (all
+     *  known variants, labeled) when confident===false, per the design doc's default
+     *  "(b) stacked labeled sections" fallback. */
+    variants: Array<{
+        label: string;
+        command: string;
+    }>;
+}
+/**
+ * detectHostEnvironment — total function: every `process.platform` value Node can
+ * report resolves to a well-formed `HostEnvironment`, never throws. `kind: "unknown"`
+ * is the explicit escape hatch for non-mainstream platforms (e.g. freebsd) — this never
+ * happens for the 4 platforms Symbion is documented to run on.
+ *
+ * WSL detection: WSL's kernel release string contains "microsoft" or "wsl"
+ * (case-insensitive) — e.g. "5.15.90.1-microsoft-standard-WSL2" or
+ * "6.6.87.2-microsoft-standard-WSL2" (this exact session's own env, per EC-3's
+ * must-not-mishandle case). This is the same heuristic the `is-wsl` npm package and
+ * most Node tooling already use — no /proc read needed since `os.release()` already
+ * exposes the `uname -r` string.
+ */
+export declare function detectHostEnvironment(): HostEnvironment;
+/**
+ * getOllamaInstallInstructions — `confident: true` (`kind !== "unknown"`) returns exactly
+ * 1 variant matching the detected OS. `confident: false` (`kind === "unknown"`) returns
+ * all 4 known variants, labeled, per the design doc's Open Question 2 default
+ * "(b) stacked labeled sections" — never silently guesses wrong.
+ */
+export declare function getOllamaInstallInstructions(env: HostEnvironment): InstallInstructions;
+//# sourceMappingURL=installInstructions.d.ts.map

package/apps/daemon/dist/llm/installInstructions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"installInstructions.d.ts","sourceRoot":"","sources":["../../src/llm/installInstructions.ts"],"names":[],"mappings":"AAcA,MAAM,WAAW,eAAe;IAC9B,kGAAkG;IAClG,IAAI,EAAE,KAAK,GAAG,OAAO,GAAG,OAAO,GAAG,SAAS,GAAG,SAAS,CAAC;IACxD,2EAA2E;IAC3E,KAAK,EAAE,MAAM,CAAC;CACf;AAED,MAAM,WAAW,mBAAmB;IAClC,GAAG,EAAE,eAAe,CAAC;IACrB,8EAA8E;IAC9E,SAAS,EAAE,OAAO,CAAC;IACnB;;mDAE+C;IAC/C,QAAQ,EAAE,KAAK,CAAC;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACrD;AAOD;;;;;;;;;;;;GAYG;AACH,wBAAgB,qBAAqB,IAAI,eAAe,CAYvD;AA2BD;;;;;GAKG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,eAAe,GAAG,mBAAmB,CAKtF"}

package/apps/daemon/dist/llm/installInstructions.js

@@ -0,0 +1,80 @@
+/**
+ * installInstructions — pure OS detection + static install-command lookup table for the
+ * Ollama "connect provider" guided-setup panel (docs/loops/connect-providers-STATE.md
+ * §10.4). No fs-write, no network, no fs-read even — only `process.platform` (set at
+ * Node-process-launch time by the OS the daemon binary itself runs on) and
+ * `node:os`'s `release()` (kernel `uname -r` string, used for the WSL heuristic).
+ *
+ * Pure-data + pure-function shape on purpose: trivially unit-testable without mocking
+ * fs/network (Tier B in connect-providers-testplan.md §1), and must be a TOTAL function —
+ * every `NodeJS.Platform` value Node can report must produce a well-formed
+ * `HostEnvironment`, never throw.
+ */
+import { release } from "node:os";
+const UNIX_CURL_INSTALL_COMMAND = "curl -fsSL https://ollama.com/install.sh | sh && ollama serve";
+const MACOS_BREW_INSTALL_COMMAND = "brew install ollama && ollama serve";
+const WINDOWS_INSTALL_GUIDANCE = "Tải và chạy trình cài đặt tại https://ollama.com/download/windows, sau đó mở Ollama từ Start Menu.";
+/**
+ * detectHostEnvironment — total function: every `process.platform` value Node can
+ * report resolves to a well-formed `HostEnvironment`, never throws. `kind: "unknown"`
+ * is the explicit escape hatch for non-mainstream platforms (e.g. freebsd) — this never
+ * happens for the 4 platforms Symbion is documented to run on.
+ *
+ * WSL detection: WSL's kernel release string contains "microsoft" or "wsl"
+ * (case-insensitive) — e.g. "5.15.90.1-microsoft-standard-WSL2" or
+ * "6.6.87.2-microsoft-standard-WSL2" (this exact session's own env, per EC-3's
+ * must-not-mishandle case). This is the same heuristic the `is-wsl` npm package and
+ * most Node tooling already use — no /proc read needed since `os.release()` already
+ * exposes the `uname -r` string.
+ */
+export function detectHostEnvironment() {
+    const plat = process.platform;
+    if (plat === "darwin")
+        return { kind: "macos", label: "macOS" };
+    if (plat === "win32")
+        return { kind: "windows", label: "Windows" };
+    if (plat === "linux") {
+        const rel = release().toLowerCase();
+        if (rel.includes("microsoft") || rel.includes("wsl")) {
+            return { kind: "wsl", label: "WSL2 (Ubuntu trên Windows)" };
+        }
+        return { kind: "linux", label: "Linux" };
+    }
+    return { kind: "unknown", label: "Không xác định" };
+}
+/** All 4 known variants, labeled — shown together when detection is not confident. */
+function allKnownVariants() {
+    return [
+        { label: "macOS", command: MACOS_BREW_INSTALL_COMMAND },
+        { label: "Linux", command: UNIX_CURL_INSTALL_COMMAND },
+        { label: "WSL2 (Ubuntu trên Windows)", command: UNIX_CURL_INSTALL_COMMAND },
+        { label: "Windows", command: WINDOWS_INSTALL_GUIDANCE },
+    ];
+}
+function commandForKind(kind) {
+    switch (kind) {
+        case "macos":
+            return MACOS_BREW_INSTALL_COMMAND;
+        case "linux":
+        case "wsl":
+            return UNIX_CURL_INSTALL_COMMAND;
+        case "windows":
+            return WINDOWS_INSTALL_GUIDANCE;
+        case "unknown":
+        default:
+            return UNIX_CURL_INSTALL_COMMAND;
+    }
+}
+/**
+ * getOllamaInstallInstructions — `confident: true` (`kind !== "unknown"`) returns exactly
+ * 1 variant matching the detected OS. `confident: false` (`kind === "unknown"`) returns
+ * all 4 known variants, labeled, per the design doc's Open Question 2 default
+ * "(b) stacked labeled sections" — never silently guesses wrong.
+ */
+export function getOllamaInstallInstructions(env) {
+    if (env.kind === "unknown") {
+        return { env, confident: false, variants: allKnownVariants() };
+    }
+    return { env, confident: true, variants: [{ label: env.label, command: commandForKind(env.kind) }] };
+}
+//# sourceMappingURL=installInstructions.js.map

package/apps/daemon/dist/llm/installInstructions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"installInstructions.js","sourceRoot":"","sources":["../../src/llm/installInstructions.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAmBlC,MAAM,yBAAyB,GAAG,+DAA+D,CAAC;AAClG,MAAM,0BAA0B,GAAG,qCAAqC,CAAC;AACzE,MAAM,wBAAwB,GAC5B,oGAAoG,CAAC;AAEvG;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB;IACnC,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,CAAC;IAC9B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAChE,IAAI,IAAI,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;IACnE,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;QACrB,MAAM,GAAG,GAAG,OAAO,EAAE,CAAC,WAAW,EAAE,CAAC;QACpC,IAAI,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACrD,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,4BAA4B,EAAE,CAAC;QAC9D,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC3C,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,gBAAgB,EAAE,CAAC;AACtD,CAAC;AAED,sFAAsF;AACtF,SAAS,gBAAgB;IACvB,OAAO;QACL,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,0BAA0B,EAAE;QACvD,EAAE,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,yBAAyB,EAAE;QACtD,EAAE,KAAK,EAAE,4BAA4B,EAAE,OAAO,EAAE,yBAAyB,EAAE;QAC3E,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,wBAAwB,EAAE;KACxD,CAAC;AACJ,CAAC;AAED,SAAS,cAAc,CAAC,IAA6B;IACnD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO;YACV,OAAO,0BAA0B,CAAC;QACpC,KAAK,OAAO,CAAC;QACb,KAAK,KAAK;YACR,OAAO,yBAAyB,CAAC;QACnC,KAAK,SAAS;YACZ,OAAO,wBAAwB,CAAC;QAClC,KAAK,SAAS,CAAC;QACf;YACE,OAAO,yBAAyB,CAAC;IACrC,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAoB;IAC/D,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC3B,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,gBAAgB,EAAE,EAAE,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;AACvG,CAAC"}

package/apps/daemon/dist/llm/ollamaProvider.d.ts

@@ -0,0 +1,55 @@
+/**
+ * OllamaProvider — calls a local Ollama instance over HTTP using Node's native
+ * fetch + AbortController. No API key. The v1 default provider (STATE §9).
+ *
+ * listModels() queries the real local Ollama's `GET /api/tags` per
+ * docs/loops/ollama-dynamic-models-STATE.md §6.2 — the old hardcoded 3-entry
+ * placeholder constant has been removed entirely (no fallback to it on any
+ * failure path, per that STATE's §3 "never silently fail" constraint).
+ */
+import { type LlmGenerateRequest, type LlmGenerateResult, type LlmModelOption, type LlmProvider } from "./types.js";
+export declare const OLLAMA_DEFAULT_BASE_URL = "http://127.0.0.1:11434";
+export interface OllamaProviderOptions {
+    /** injectable for tests (Tier A fake-provider, per testplan §0); defaults to the real local Ollama. */
+    baseUrl?: string;
+}
+/**
+ * resolveOllamaBaseUrl — the env-var/loopback-guard/default resolution logic that used to
+ * live inline in `OllamaProvider`'s constructor (extracted per
+ * docs/loops/connect-providers-STATE.md §10.3, a structure-only refactor, no behavior
+ * change). Exported so `providerStatus.ts`'s reachability check reuses the exact same
+ * SSRF-guarded resolution instead of re-implementing it — one implementation, not two.
+ *
+ * Throws `LlmError("provider-not-running", ...)` if `SYMBION_OLLAMA_BASE_URL` is set to a
+ * non-loopback host (see `isLoopbackUrl` doc comment for the threat this guards against).
+ */
+export declare function resolveOllamaBaseUrl(): string;
+export declare class OllamaProvider implements LlmProvider {
+    readonly id: "ollama";
+    private readonly baseUrl;
+    constructor(opts?: OllamaProviderOptions);
+    /**
+     * listModels — queries Ollama's real `GET /api/tags` (per
+     * docs/loops/ollama-dynamic-models-STATE.md §6.2), bounded by a 3000ms
+     * AbortController timeout (same convention as `checkOllamaReachable`). Uses
+     * `this.baseUrl`, already resolved through the SAME loopback-guarded
+     * `resolveOllamaBaseUrl()` the constructor uses — no second SSRF-guard
+     * implementation.
+     *
+     * Error mapping:
+     * - connection-refused / DNS failure / our own abort-on-timeout all collapse to
+     *   `LlmError("provider-not-running", ...)` — both mean "ModelPicker cannot get a
+     *   model list from Ollama right now," and AC4 only requires the existing
+     *   "unreachable" shape be unregressed, not a distinct timeout code (STATE §9.1).
+     * - non-2xx HTTP status -> `LlmError("invalid-response", ...)`.
+     * - non-JSON body -> `LlmError("invalid-response", ...)`.
+     * - missing/wrong-type `models` field on an otherwise-200 response ->
+     *   `LlmError("invalid-response", ...)` — distinct from "genuinely zero models,"
+     *   which is a well-formed `{ models: [] }` that resolves normally (empty array,
+     *   no throw) per STATE §3's "never silently fail ... not an empty array
+     *   indistinguishable from genuinely zero" constraint.
+     */
+    listModels(): Promise<LlmModelOption[]>;
+    generate(req: LlmGenerateRequest): Promise<LlmGenerateResult>;
+}
+//# sourceMappingURL=ollamaProvider.d.ts.map

package/apps/daemon/dist/llm/ollamaProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollamaProvider.d.ts","sourceRoot":"","sources":["../../src/llm/ollamaProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAY,KAAK,kBAAkB,EAAE,KAAK,iBAAiB,EAAE,KAAK,cAAc,EAAE,KAAK,WAAW,EAAE,MAAM,YAAY,CAAC;AAE9H,eAAO,MAAM,uBAAuB,2BAA2B,CAAC;AA2ChE,MAAM,WAAW,qBAAqB;IACpC,uGAAuG;IACvG,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AA0BD;;;;;;;;;GASG;AACH,wBAAgB,oBAAoB,IAAI,MAAM,CAmB7C;AAED,qBAAa,cAAe,YAAW,WAAW;IAChD,QAAQ,CAAC,EAAE,EAAG,QAAQ,CAAU;IAChC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;gBAErB,IAAI,GAAE,qBAA0B;IAY5C;;;;;;;;;;;;;;;;;;;;OAoBG;IACG,UAAU,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC;IAwCvC,QAAQ,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC;CA2EpE"}