@aspectlylabs/mikka 0.0.141 → 0.0.143

package/client.js

@@ -2941,6 +2941,15 @@ var setupRecipeSchema = z14.object({
   /** Approved once per repo by the user; unapproved recipes never run. */
   approved: z14.boolean()
 });
+var credentialKey = z14.string().min(1).max(4096).refine((value) => !/[\r\n\0]/.test(value));
+var credentialBaseUrl = z14.url().max(500).refine((value) => {
+  const url = new URL(value);
+  return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+});
+var runModelCredentialSchema = z14.discriminatedUnion("kind", [
+  z14.object({ kind: z14.literal("api_key"), key: credentialKey }).strict(),
+  z14.object({ kind: z14.literal("provider"), protocol: z14.enum(["anthropic", "openai"]), baseUrl: credentialBaseUrl, key: credentialKey }).strict()
+]);
 var deviceRepoSchema = z14.object({
   repoId: id2,
   name: z14.string().max(500),
@@ -2988,6 +2997,12 @@ var runAssignmentSchema = z14.object({
     consumerId: z14.uuid(),
     route: z14.enum(["codex_cli", "claude_code_cli"])
   }).strict().optional(),
+  /**
+   * The run's own API key, opened for this claim only. Never with
+   * `subscriptionBinding`. The daemon keeps it in memory and hands it only
+   * to the run's Agent process or container; it is never journaled.
+   */
+  modelCredential: runModelCredentialSchema.optional(),
   /** Local host authority comes only from the server's owner-bound Bot run. */
   localComputer: z14.object({
     botId: z14.uuid(),
@@ -3105,7 +3120,7 @@ var runAssignmentSchema = z14.object({
   skillReceipt: skillAssignmentReceiptSchema.optional(),
   /** Frozen by the server benchmark ledger; never extracted from model output. */
   benchmark: runBenchmarkContext.optional()
-});
+}).refine((value) => !(value.modelCredential && value.subscriptionBinding), { message: "A run has one model credential", path: ["modelCredential"] });
 var runPatchSchema = z14.object({
   state: z14.enum([
     "queued",
@@ -3719,7 +3734,7 @@ import { join } from "node:path";
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.141",
+  version: "0.0.143",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3779,7 +3794,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "dec8d3597bd9fb2b049a00efcee8e64d3288f2fa"
+  gitHead: "1a7ea7ffcdb44a8228f84d936a7a395f33f13355"
 };
 
 // src/paths.ts

package/http-link.js

@@ -3455,6 +3455,16 @@ var setupRecipeSchema = z18.object({
   approved: z18.boolean()
 });
 var REPO_ORIGIN_HEADER = "x-mikka-repo-origin-check";
+var MODEL_CREDENTIAL_HEADER = "x-mikka-model-credential";
+var credentialKey = z18.string().min(1).max(4096).refine((value) => !/[\r\n\0]/.test(value));
+var credentialBaseUrl = z18.url().max(500).refine((value) => {
+  const url = new URL(value);
+  return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+});
+var runModelCredentialSchema = z18.discriminatedUnion("kind", [
+  z18.object({ kind: z18.literal("api_key"), key: credentialKey }).strict(),
+  z18.object({ kind: z18.literal("provider"), protocol: z18.enum(["anthropic", "openai"]), baseUrl: credentialBaseUrl, key: credentialKey }).strict()
+]);
 var deviceRepoSchema = z18.object({
   repoId: id3,
   name: z18.string().max(500),
@@ -3502,6 +3512,12 @@ var runAssignmentSchema = z18.object({
     consumerId: z18.uuid(),
     route: z18.enum(["codex_cli", "claude_code_cli"])
   }).strict().optional(),
+  /**
+   * The run's own API key, opened for this claim only. Never with
+   * `subscriptionBinding`. The daemon keeps it in memory and hands it only
+   * to the run's Agent process or container; it is never journaled.
+   */
+  modelCredential: runModelCredentialSchema.optional(),
   /** Local host authority comes only from the server's owner-bound Bot run. */
   localComputer: z18.object({
     botId: z18.uuid(),
@@ -3619,7 +3635,7 @@ var runAssignmentSchema = z18.object({
   skillReceipt: skillAssignmentReceiptSchema.optional(),
   /** Frozen by the server benchmark ledger; never extracted from model output. */
   benchmark: runBenchmarkContext.optional()
-});
+}).refine((value) => !(value.modelCredential && value.subscriptionBinding), { message: "A run has one model credential", path: ["modelCredential"] });
 var runPatchSchema = z18.object({
   state: z18.enum([
     "queued",
@@ -4121,7 +4137,7 @@ var InvalidIdError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.141",
+  version: "0.0.143",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -4181,7 +4197,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "dec8d3597bd9fb2b049a00efcee8e64d3288f2fa"
+  gitHead: "1a7ea7ffcdb44a8228f84d936a7a395f33f13355"
 };
 
 // src/paths.ts
@@ -4539,6 +4555,7 @@ var HttpServerLink = class {
           [TEAM_SKILL_HEADER]: "1",
           [REPO_ORIGIN_HEADER]: "1",
           [RECOVERY_WORKTREE_HEADER]: "1",
+          [MODEL_CREDENTIAL_HEADER]: "1",
           ...token ? { authorization: `Bearer ${token}` } : {},
           ...this.protectionBypass ? { "x-vercel-protection-bypass": this.protectionBypass } : {}
         },

package/login.js

@@ -2937,6 +2937,15 @@ var setupRecipeSchema = z14.object({
   /** Approved once per repo by the user; unapproved recipes never run. */
   approved: z14.boolean()
 });
+var credentialKey = z14.string().min(1).max(4096).refine((value) => !/[\r\n\0]/.test(value));
+var credentialBaseUrl = z14.url().max(500).refine((value) => {
+  const url = new URL(value);
+  return url.protocol === "https:" && !url.username && !url.password && !url.search && !url.hash;
+});
+var runModelCredentialSchema = z14.discriminatedUnion("kind", [
+  z14.object({ kind: z14.literal("api_key"), key: credentialKey }).strict(),
+  z14.object({ kind: z14.literal("provider"), protocol: z14.enum(["anthropic", "openai"]), baseUrl: credentialBaseUrl, key: credentialKey }).strict()
+]);
 var deviceRepoSchema = z14.object({
   repoId: id2,
   name: z14.string().max(500),
@@ -2984,6 +2993,12 @@ var runAssignmentSchema = z14.object({
     consumerId: z14.uuid(),
     route: z14.enum(["codex_cli", "claude_code_cli"])
   }).strict().optional(),
+  /**
+   * The run's own API key, opened for this claim only. Never with
+   * `subscriptionBinding`. The daemon keeps it in memory and hands it only
+   * to the run's Agent process or container; it is never journaled.
+   */
+  modelCredential: runModelCredentialSchema.optional(),
   /** Local host authority comes only from the server's owner-bound Bot run. */
   localComputer: z14.object({
     botId: z14.uuid(),
@@ -3101,7 +3116,7 @@ var runAssignmentSchema = z14.object({
   skillReceipt: skillAssignmentReceiptSchema.optional(),
   /** Frozen by the server benchmark ledger; never extracted from model output. */
   benchmark: runBenchmarkContext.optional()
-});
+}).refine((value) => !(value.modelCredential && value.subscriptionBinding), { message: "A run has one model credential", path: ["modelCredential"] });
 var runPatchSchema = z14.object({
   state: z14.enum([
     "queued",
@@ -3726,7 +3741,7 @@ var ServerUnreachableError = class extends DaemonError {
 // package.json
 var package_default = {
   name: "@mikka/daemon",
-  version: "0.0.141",
+  version: "0.0.143",
   description: "Local Mikka daemon: runs agents through the user's own CLIs",
   type: "module",
   private: true,
@@ -3786,7 +3801,7 @@ var package_default = {
   engines: {
     node: ">=24"
   },
-  gitHead: "dec8d3597bd9fb2b049a00efcee8e64d3288f2fa"
+  gitHead: "1a7ea7ffcdb44a8228f84d936a7a395f33f13355"
 };
 
 // src/paths.ts