@claudexor/harness-agy 3.6.0 → 3.8.1

package/dist/print-command.js

@@ -0,0 +1,384 @@
+import { spawn } from "node:child_process";
+import { extname, isAbsolute } from "node:path";
+import { composeBaseEnv, defaultProcessGroupService, labelStreams, reapProcessTree, registerChildProcess, resolveHarnessBinary, unregisterChildProcess, } from "@claudexor/core";
+import { redactSecrets } from "@claudexor/util";
+export const AGY_PRINT_TIMEOUT_MS = 30_000;
+export const AGY_PRINT_STREAM_LIMIT_BYTES = 256 * 1024;
+const AGY_PRINT_DRAIN_MS = 200;
+const AGY_PRINT_CANCEL_DEADLINE_MS = 5_000;
+/** Spawn policy is exported so Windows fixtures can assert no inherited console/stdio. */
+export function agyPrintSpawnOptions(platform, env) {
+    return {
+        env,
+        shell: false,
+        detached: true,
+        windowsHide: platform === "win32",
+        // On Windows CREATE_NO_WINDOW still exposes a windowless CONIN$. A real
+        // DETACHED_PROCESS prevents console inheritance; ignored stdin gives print
+        // mode immediate EOF without exposing an input descriptor.
+    };
+}
+function composedEnv(patch) {
+    const env = composeBaseEnv("mirror_native");
+    for (const [key, value] of Object.entries(patch)) {
+        if (value === null || value === undefined)
+            delete env[key];
+        else
+            env[key] = value;
+    }
+    return env;
+}
+function exactBinary(bin, env, platform, resolver) {
+    const resolved = resolver
+        ? resolver(bin, env, platform)
+        : resolveHarnessBinary(bin, env, process.execPath, platform);
+    if (!resolved || !isAbsolute(resolved))
+        return null;
+    if (platform === "win32" && ![".exe", ".com"].includes(extname(resolved).toLowerCase())) {
+        return null;
+    }
+    return resolved;
+}
+function boundedBuffer(maxBytes, overflow) {
+    const chunks = [];
+    let bytes = 0;
+    let overflowed = false;
+    const markOverflow = () => {
+        if (overflowed)
+            return;
+        overflowed = true;
+        overflow();
+    };
+    return {
+        push(chunk) {
+            if (chunk.length === 0)
+                return;
+            // A prior chunk may have filled the cap exactly. The NEXT byte is still
+            // overflow and must cancel; silently returning here used to let an
+            // unbounded producer run forever. This also makes a zero-byte cap real.
+            if (bytes >= maxBytes) {
+                markOverflow();
+                return;
+            }
+            const remaining = maxBytes - bytes;
+            if (chunk.length > remaining) {
+                if (remaining > 0)
+                    chunks.push(chunk.subarray(0, remaining));
+                bytes = maxBytes;
+                markOverflow();
+                return;
+            }
+            chunks.push(chunk);
+            bytes += chunk.length;
+        },
+        text() {
+            return Buffer.concat(chunks, bytes).toString("utf8");
+        },
+    };
+}
+function delay(ms) {
+    return new Promise((resolve) => {
+        const timer = setTimeout(resolve, ms);
+        timer.unref();
+    });
+}
+/**
+ * Bounded print-mode owner for `/model` and `/quota`. The child has no stdin
+ * and no controlling terminal: POSIX starts a new session; Windows uses
+ * DETACHED_PROCESS because CREATE_NO_WINDOW still exposes a windowless
+ * CONIN$. Child exit is completion authority; descendant-held pipes receive
+ * only a bounded drain.
+ */
+export async function runAgyPrintCommand(bin, command, envPatch, options = {}) {
+    const platform = options.platform ?? process.platform;
+    const env = composedEnv(envPatch);
+    const resolved = exactBinary(bin, env, platform, options.resolveBinary);
+    if (!resolved) {
+        return {
+            kind: "failed",
+            reason: "spawn_failed",
+            detail: `agy executable could not be resolved to an exact ${platform === "win32" ? "Windows image" : "regular executable"}`,
+            stdout: "",
+            stderr: "",
+        };
+    }
+    if (options.abortSignal?.aborted) {
+        return {
+            kind: "failed",
+            reason: "aborted",
+            detail: "agy print probe was aborted",
+            stdout: "",
+            stderr: "",
+        };
+    }
+    let child;
+    try {
+        child = (options.spawnProcess ?? spawn)(resolved, ["-p", command, "--output-format", "json"], {
+            ...agyPrintSpawnOptions(platform, env),
+            stdio: ["ignore", "pipe", "pipe"],
+        });
+    }
+    catch (error) {
+        return {
+            kind: "failed",
+            reason: "spawn_failed",
+            detail: redactSecrets(error instanceof Error ? error.message : String(error)).slice(0, 300),
+            stdout: "",
+            stderr: "",
+        };
+    }
+    const pid = child.pid;
+    const processRegistry = options.processRegistry ?? {
+        register: registerChildProcess,
+        unregister: unregisterChildProcess,
+    };
+    let registered = false;
+    if (typeof pid === "number") {
+        processRegistry.register(pid, resolved);
+        registered = true;
+    }
+    const unregisterExitedChild = () => {
+        if (!registered || typeof pid !== "number")
+            return;
+        registered = false;
+        processRegistry.unregister(pid);
+    };
+    let group;
+    if (platform !== "win32" && typeof pid === "number") {
+        const captured = defaultProcessGroupService.captureLeader(pid);
+        if (captured.status === "known")
+            group = captured.handle;
+    }
+    let requested = null;
+    let reap = null;
+    let cancellationDeadlineTimer;
+    let resolveCancellationDeadline;
+    const cancellationDeadline = new Promise((resolve) => {
+        resolveCancellationDeadline = resolve;
+    });
+    const requestCancel = (why) => {
+        requested ??= why;
+        if (!cancellationDeadlineTimer) {
+            // Relative to the FIRST cancellation trigger, not the original process
+            // timeout. Abort/overflow at t=0 must settle after one cancel deadline,
+            // never after timeout+deadline.
+            cancellationDeadlineTimer = setTimeout(() => resolveCancellationDeadline({ kind: "unconfirmed_wait" }), options.cancelDeadlineMs ?? AGY_PRINT_CANCEL_DEADLINE_MS);
+        }
+        if (reap || typeof pid !== "number") {
+            try {
+                child.kill("SIGKILL");
+            }
+            catch {
+                /* already gone */
+            }
+            return;
+        }
+        reap = (options.reap ?? reapProcessTree)({
+            rootPid: pid,
+            cooperativeSignal: "SIGKILL",
+            graceMs: 0,
+            deadlineMs: options.cancelDeadlineMs ?? AGY_PRINT_CANCEL_DEADLINE_MS,
+            ...(group ? { seedHandles: [group], rootIdentity: group.leader } : {}),
+            platform,
+        });
+        try {
+            child.kill("SIGKILL");
+        }
+        catch {
+            /* the tree reaper owns the bounded proof */
+        }
+    };
+    const stdout = boundedBuffer(options.maxStdoutBytes ?? AGY_PRINT_STREAM_LIMIT_BYTES, () => requestCancel("overflow"));
+    const stderr = boundedBuffer(options.maxStderrBytes ?? AGY_PRINT_STREAM_LIMIT_BYTES, () => requestCancel("overflow"));
+    child.stdout.on("data", (chunk) => stdout.push(chunk));
+    child.stderr.on("data", (chunk) => stderr.push(chunk));
+    let stdoutEnded = false;
+    let stderrEnded = false;
+    const stdoutEnd = new Promise((resolve) => child.stdout.once("end", () => {
+        stdoutEnded = true;
+        resolve();
+    }));
+    const stderrEnd = new Promise((resolve) => child.stderr.once("end", () => {
+        stderrEnded = true;
+        resolve();
+    }));
+    const terminal = new Promise((resolve) => {
+        let settled = false;
+        const settle = (value) => {
+            if (settled)
+                return;
+            settled = true;
+            resolve(value);
+        };
+        child.once("error", (error) => {
+            unregisterExitedChild();
+            settle({ kind: "error", error });
+        });
+        child.once("exit", (code, signal) => {
+            unregisterExitedChild();
+            settle({ kind: "exit", code, signal });
+        });
+    });
+    const timeout = setTimeout(() => requestCancel("timeout"), options.timeoutMs ?? AGY_PRINT_TIMEOUT_MS);
+    timeout.unref();
+    const onAbort = () => requestCancel("abort");
+    options.abortSignal?.addEventListener("abort", onAbort, { once: true });
+    // Abort can race the synchronous spawn/setup window after the pre-spawn
+    // check but before listener registration. AbortSignal does not replay that
+    // event, so sample it again after the listener is armed.
+    if (options.abortSignal?.aborted)
+        requestCancel("abort");
+    const outcome = await Promise.race([terminal, cancellationDeadline]);
+    clearTimeout(timeout);
+    if (cancellationDeadlineTimer)
+        clearTimeout(cancellationDeadlineTimer);
+    options.abortSignal?.removeEventListener("abort", onAbort);
+    // Do not await descendant-owned EOF indefinitely. Give bytes already in the
+    // pipes a small drain window, then detach the readers.
+    await Promise.race([
+        Promise.all([stdoutEnd, stderrEnd]).then(() => undefined),
+        delay(options.drainMs ?? AGY_PRINT_DRAIN_MS),
+    ]);
+    if (!stdoutEnded)
+        child.stdout.destroy();
+    if (!stderrEnded)
+        child.stderr.destroy();
+    let termination = null;
+    if (reap) {
+        try {
+            termination = await Promise.race([
+                reap,
+                delay(options.cancelDeadlineMs ?? AGY_PRINT_CANCEL_DEADLINE_MS).then(() => ({
+                    state: "unconfirmed",
+                    survivors: typeof pid === "number" ? [pid] : [],
+                    unresolved: [],
+                })),
+            ]);
+        }
+        catch {
+            termination = {
+                state: "unconfirmed",
+                survivors: typeof pid === "number" ? [pid] : [],
+                unresolved: [],
+            };
+        }
+    }
+    const capturedOut = stdout.text();
+    const capturedErr = stderr.text();
+    const streamDetail = labelStreams(capturedErr, capturedOut, {
+        maxLen: 300,
+        transform: redactSecrets,
+    });
+    if (outcome.kind === "error") {
+        return {
+            kind: "failed",
+            reason: "spawn_failed",
+            detail: redactSecrets(outcome.error.message).slice(0, 300),
+            stdout: capturedOut,
+            stderr: capturedErr,
+        };
+    }
+    if (outcome.kind === "unconfirmed_wait" || termination?.state === "unconfirmed") {
+        return {
+            kind: "failed",
+            reason: "termination_unconfirmed",
+            detail: streamDetail ?? "agy print probe termination could not be confirmed",
+            stdout: capturedOut,
+            stderr: capturedErr,
+        };
+    }
+    if (requested) {
+        const reason = requested === "timeout" ? "timed_out" : requested === "abort" ? "aborted" : "output_overflow";
+        return {
+            kind: "failed",
+            reason,
+            detail: streamDetail ??
+                (reason === "timed_out"
+                    ? `agy did not answer ${command} within ${(options.timeoutMs ?? AGY_PRINT_TIMEOUT_MS) / 1000}s`
+                    : reason === "aborted"
+                        ? "agy print probe was aborted"
+                        : "agy print output exceeded its bounded stream limit"),
+            stdout: capturedOut,
+            stderr: capturedErr,
+        };
+    }
+    return {
+        kind: "completed",
+        code: outcome.code,
+        signal: outcome.signal,
+        stdout: capturedOut,
+        stderr: capturedErr,
+    };
+}
+const RECOGNIZED_AUTH_REJECTIONS = [
+    "authentication required",
+    "authentication failed or timed out",
+    "not authenticated",
+    "login required",
+    "credential revoked",
+    "credentials revoked",
+    "token revoked",
+    "token expired",
+];
+function vendorError(envelope) {
+    const error = envelope["error"];
+    if (typeof error === "string" && error.trim())
+        return error.trim();
+    if (error && typeof error === "object" && !Array.isArray(error)) {
+        const message = error["message"];
+        if (typeof message === "string" && message.trim())
+            return message.trim();
+    }
+    return null;
+}
+function recognizedAuthRejection(detail) {
+    const normalized = detail.trim().toLowerCase().replaceAll(/\s+/g, " ");
+    return RECOGNIZED_AUTH_REJECTIONS.some((prefix) => normalized === prefix ||
+        normalized.startsWith(`${prefix}.`) ||
+        normalized.startsWith(`${prefix}:`) ||
+        normalized.startsWith(`${prefix} `));
+}
+/** Shared exit/envelope/auth classifier for doctor and quota. */
+export function classifyAgyPrintResult(result) {
+    if (result.kind === "failed") {
+        return { kind: "probe_failed", detail: redactSecrets(result.detail).slice(0, 300) };
+    }
+    const streams = labelStreams(result.stderr, result.stdout, {
+        maxLen: 300,
+        transform: redactSecrets,
+    });
+    if (result.signal !== null) {
+        return {
+            kind: "probe_failed",
+            detail: `agy exited by signal ${result.signal}${streams ? ` (${streams})` : ""}`,
+        };
+    }
+    if (!result.stdout.trim()) {
+        return { kind: "probe_failed", detail: streams ?? "agy returned empty stdout" };
+    }
+    let envelope;
+    try {
+        envelope = JSON.parse(result.stdout);
+    }
+    catch {
+        return { kind: "probe_failed", detail: streams ?? "agy output was not valid JSON" };
+    }
+    if (!envelope || typeof envelope !== "object" || Array.isArray(envelope)) {
+        return { kind: "probe_failed", detail: "agy output was not a JSON object" };
+    }
+    const record = envelope;
+    const error = vendorError(record);
+    if (record["status"] === "ERROR" && error && recognizedAuthRejection(error)) {
+        return { kind: "unauthenticated", detail: redactSecrets(error).slice(0, 300) };
+    }
+    if (result.code !== 0 || record["status"] !== "SUCCESS") {
+        return {
+            kind: "probe_failed",
+            detail: (error ? redactSecrets(error).slice(0, 300) : null) ??
+                streams ??
+                `agy returned unsupported status/exit combination (status ${String(record["status"])}; exit ${String(result.code)})`,
+        };
+    }
+    return { kind: "success", envelope: record };
+}
+//# sourceMappingURL=print-command.js.map

package/dist/print-command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"print-command.js","sourceRoot":"","sources":["../src/print-command.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,EAA2D,MAAM,oBAAoB,CAAC;AACpG,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AAEhD,OAAO,EACL,cAAc,EACd,0BAA0B,EAC1B,YAAY,EACZ,eAAe,EACf,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,GAGvB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AAEhD,MAAM,CAAC,MAAM,oBAAoB,GAAG,MAAM,CAAC;AAC3C,MAAM,CAAC,MAAM,4BAA4B,GAAG,GAAG,GAAG,IAAI,CAAC;AACvD,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,4BAA4B,GAAG,KAAK,CAAC;AA6C3C,0FAA0F;AAC1F,MAAM,UAAU,oBAAoB,CAClC,QAAyB,EACzB,GAAsB;IAEtB,OAAO;QACL,GAAG;QACH,KAAK,EAAE,KAAK;QACZ,QAAQ,EAAE,IAAI;QACd,WAAW,EAAE,QAAQ,KAAK,OAAO;QACjC,wEAAwE;QACxE,2EAA2E;QAC3E,2DAA2D;KAC5D,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,KAAa;IAChC,MAAM,GAAG,GAAG,cAAc,CAAC,eAAe,CAAC,CAAC;IAC5C,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QACjD,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,GAAG,CAAC,GAAG,CAAC,CAAC;;YACtD,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;IACxB,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,WAAW,CAClB,GAAW,EACX,GAAsB,EACtB,QAAyB,EACzB,QAAkD;IAElD,MAAM,QAAQ,GAAG,QAAQ;QACvB,CAAC,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,CAAC;QAC9B,CAAC,CAAC,oBAAoB,CAAC,GAAG,EAAE,GAAG,EAAE,OAAO,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;IAC/D,IAAI,CAAC,QAAQ,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACpD,IAAI,QAAQ,KAAK,OAAO,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QACxF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,SAAS,aAAa,CAAC,QAAgB,EAAE,QAAoB;IAC3D,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,MAAM,YAAY,GAAG,GAAS,EAAE;QAC9B,IAAI,UAAU;YAAE,OAAO;QACvB,UAAU,GAAG,IAAI,CAAC;QAClB,QAAQ,EAAE,CAAC;IACb,CAAC,CAAC;IACF,OAAO;QACL,IAAI,CAAC,KAAa;YAChB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC;gBAAE,OAAO;YAC/B,wEAAwE;YACxE,mEAAmE;YACnE,wEAAwE;YACxE,IAAI,KAAK,IAAI,QAAQ,EAAE,CAAC;gBACtB,YAAY,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YACD,MAAM,SAAS,GAAG,QAAQ,GAAG,KAAK,CAAC;YACnC,IAAI,KAAK,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;gBAC7B,IAAI,SAAS,GAAG,CAAC;oBAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC;gBAC7D,KAAK,GAAG,QAAQ,CAAC;gBACjB,YAAY,EAAE,CAAC;gBACf,OAAO;YACT,CAAC;YACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACnB,KAAK,IAAI,KAAK,CAAC,MAAM,CAAC;QACxB,CAAC;QACD,IAAI;YACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QACvD,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,KAAK,CAAC,EAAU;IACvB,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACtC,KAAK,CAAC,KAAK,EAAE,CAAC;IAChB,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,GAAW,EACX,OAA4B,EAC5B,QAAgB,EAChB,OAAO,GAA2B,EAAE;IAEpC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,GAAG,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IAClC,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACxE,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,oDAAoD,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,EAAE;YAC3H,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC;QACjC,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,6BAA6B;YACrC,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IAED,IAAI,KAAoD,CAAC;IACzD,IAAI,CAAC;QACH,KAAK,GAAG,CAAC,OAAO,CAAC,YAAY,IAAI,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE;YAC5F,GAAG,oBAAoB,CAAC,QAAQ,EAAE,GAAG,CAAC;YACtC,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC;SAClC,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,aAAa,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC3F,MAAM,EAAE,EAAE;YACV,MAAM,EAAE,EAAE;SACX,CAAC;IACJ,CAAC;IACD,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,CAAC;IACtB,MAAM,eAAe,GAAG,OAAO,CAAC,eAAe,IAAI;QACjD,QAAQ,EAAE,oBAAoB;QAC9B,UAAU,EAAE,sBAAsB;KACnC,CAAC;IACF,IAAI,UAAU,GAAG,KAAK,CAAC;IACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QAC5B,eAAe,CAAC,QAAQ,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC;QACxC,UAAU,GAAG,IAAI,CAAC;IACpB,CAAC;IACD,MAAM,qBAAqB,GAAG,GAAS,EAAE;QACvC,IAAI,CAAC,UAAU,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,OAAO;QACnD,UAAU,GAAG,KAAK,CAAC;QACnB,eAAe,CAAC,UAAU,CAAC,GAAG,CAAC,CAAC;IAClC,CAAC,CAAC;IAEF,IAAI,KAAqC,CAAC;IAC1C,IAAI,QAAQ,KAAK,OAAO,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;QACpD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC;QAC/D,IAAI,QAAQ,CAAC,MAAM,KAAK,OAAO;YAAE,KAAK,GAAG,QAAQ,CAAC,MAAM,CAAC;IAC3D,CAAC;IACD,IAAI,SAAS,GAA4C,IAAI,CAAC;IAC9D,IAAI,IAAI,GAAkD,IAAI,CAAC;IAK/D,IAAI,yBAAqD,CAAC;IAC1D,IAAI,2BAA0D,CAAC;IAC/D,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;QAC7D,2BAA2B,GAAG,OAAO,CAAC;IACxC,CAAC,CAAC,CAAC;IACH,MAAM,aAAa,GAAG,CAAC,GAAkC,EAAQ,EAAE;QACjE,SAAS,KAAK,GAAG,CAAC;QAClB,IAAI,CAAC,yBAAyB,EAAE,CAAC;YAC/B,uEAAuE;YACvE,wEAAwE;YACxE,gCAAgC;YAChC,yBAAyB,GAAG,UAAU,CACpC,GAAG,EAAE,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC,EAC/D,OAAO,CAAC,gBAAgB,IAAI,4BAA4B,CACzD,CAAC;QACJ,CAAC;QACD,IAAI,IAAI,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YACpC,IAAI,CAAC;gBACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACxB,CAAC;YAAC,MAAM,CAAC;gBACP,kBAAkB;YACpB,CAAC;YACD,OAAO;QACT,CAAC;QACD,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,IAAI,eAAe,CAAC,CAAC;YACvC,OAAO,EAAE,GAAG;YACZ,iBAAiB,EAAE,SAAS;YAC5B,OAAO,EAAE,CAAC;YACV,UAAU,EAAE,OAAO,CAAC,gBAAgB,IAAI,4BAA4B;YACpE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,KAAK,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACtE,QAAQ;SACT,CAAC,CAAC;QACH,IAAI,CAAC;YACH,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;QACxB,CAAC;QAAC,MAAM,CAAC;YACP,4CAA4C;QAC9C,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,cAAc,IAAI,4BAA4B,EAAE,GAAG,EAAE,CACxF,aAAa,CAAC,UAAU,CAAC,CAC1B,CAAC;IACF,MAAM,MAAM,GAAG,aAAa,CAAC,OAAO,CAAC,cAAc,IAAI,4BAA4B,EAAE,GAAG,EAAE,CACxF,aAAa,CAAC,UAAU,CAAC,CAC1B,CAAC;IACF,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAC/D,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;IAE/D,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,IAAI,WAAW,GAAG,KAAK,CAAC;IACxB,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAC9C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;QAC5B,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CACH,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,EAAE,CAC9C,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE;QAC5B,WAAW,GAAG,IAAI,CAAC;QACnB,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CACH,CAAC;IACF,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAW,CAAC,OAAO,EAAE,EAAE;QACjD,IAAI,OAAO,GAAG,KAAK,CAAC;QACpB,MAAM,MAAM,GAAG,CAAC,KAAe,EAAE,EAAE;YACjC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,OAAO,CAAC,KAAK,CAAC,CAAC;QACjB,CAAC,CAAC;QACF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;YAC5B,qBAAqB,EAAE,CAAC;YACxB,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QACnC,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE;YAClC,qBAAqB,EAAE,CAAC;YACxB,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,UAAU,CACxB,GAAG,EAAE,CAAC,aAAa,CAAC,SAAS,CAAC,EAC9B,OAAO,CAAC,SAAS,IAAI,oBAAoB,CAC1C,CAAC;IACF,OAAO,CAAC,KAAK,EAAE,CAAC;IAChB,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,aAAa,CAAC,OAAO,CAAC,CAAC;IAC7C,OAAO,CAAC,WAAW,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACxE,wEAAwE;IACxE,2EAA2E;IAC3E,yDAAyD;IACzD,IAAI,OAAO,CAAC,WAAW,EAAE,OAAO;QAAE,aAAa,CAAC,OAAO,CAAC,CAAC;IAEzD,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAW,CAAC,QAAQ,EAAE,oBAAoB,CAAC,CAAC,CAAC;IAC/E,YAAY,CAAC,OAAO,CAAC,CAAC;IACtB,IAAI,yBAAyB;QAAE,YAAY,CAAC,yBAAyB,CAAC,CAAC;IACvE,OAAO,CAAC,WAAW,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAE3D,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,OAAO,CAAC,IAAI,CAAC;QACjB,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC;QACzD,KAAK,CAAC,OAAO,CAAC,OAAO,IAAI,kBAAkB,CAAC;KAC7C,CAAC,CAAC;IACH,IAAI,CAAC,WAAW;QAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IACzC,IAAI,CAAC,WAAW;QAAE,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;IAEzC,IAAI,WAAW,GAAyC,IAAI,CAAC;IAC7D,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAC/B,IAAI;gBACJ,KAAK,CAAC,OAAO,CAAC,gBAAgB,IAAI,4BAA4B,CAAC,CAAC,IAAI,CAClE,GAAkC,EAAE,CAAC,CAAC;oBACpC,KAAK,EAAE,aAAa;oBACpB,SAAS,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;oBAC/C,UAAU,EAAE,EAAE;iBACf,CAAC,CACH;aACF,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,WAAW,GAAG;gBACZ,KAAK,EAAE,aAAa;gBACpB,SAAS,EAAE,OAAO,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE;gBAC/C,UAAU,EAAE,EAAE;aACf,CAAC;QACJ,CAAC;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC;IAClC,MAAM,YAAY,GAAG,YAAY,CAAC,WAAW,EAAE,WAAW,EAAE;QAC1D,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,aAAa;KACzB,CAAC,CAAC;IACH,IAAI,OAAO,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,aAAa,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;YAC1D,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,KAAK,kBAAkB,IAAI,WAAW,EAAE,KAAK,KAAK,aAAa,EAAE,CAAC;QAChF,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM,EAAE,yBAAyB;YACjC,MAAM,EAAE,YAAY,IAAI,oDAAoD;YAC5E,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,EAAE,CAAC;QACd,MAAM,MAAM,GACV,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,KAAK,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,iBAAiB,CAAC;QAChG,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,MAAM;YACN,MAAM,EACJ,YAAY;gBACZ,CAAC,MAAM,KAAK,WAAW;oBACrB,CAAC,CAAC,sBAAsB,OAAO,WAAW,CAAC,OAAO,CAAC,SAAS,IAAI,oBAAoB,CAAC,GAAG,IAAI,GAAG;oBAC/F,CAAC,CAAC,MAAM,KAAK,SAAS;wBACpB,CAAC,CAAC,6BAA6B;wBAC/B,CAAC,CAAC,oDAAoD,CAAC;YAC7D,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,WAAW;SACpB,CAAC;IACJ,CAAC;IACD,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,MAAM,EAAE,WAAW;QACnB,MAAM,EAAE,WAAW;KACpB,CAAC;AACJ,CAAC;AAOD,MAAM,0BAA0B,GAAG;IACjC,yBAAyB;IACzB,oCAAoC;IACpC,mBAAmB;IACnB,gBAAgB;IAChB,oBAAoB;IACpB,qBAAqB;IACrB,eAAe;IACf,eAAe;CACP,CAAC;AAEX,SAAS,WAAW,CAAC,QAAiC;IACpD,MAAM,KAAK,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;IAChC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE;QAAE,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;IACnE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAChE,MAAM,OAAO,GAAI,KAAiC,CAAC,SAAS,CAAC,CAAC;QAC9D,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE;YAAE,OAAO,OAAO,CAAC,IAAI,EAAE,CAAC;IAC3E,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,SAAS,uBAAuB,CAAC,MAAc;IAC7C,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;IACvE,OAAO,0BAA0B,CAAC,IAAI,CACpC,CAAC,MAAM,EAAE,EAAE,CACT,UAAU,KAAK,MAAM;QACrB,UAAU,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;QACnC,UAAU,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC;QACnC,UAAU,CAAC,UAAU,CAAC,GAAG,MAAM,GAAG,CAAC,CACtC,CAAC;AACJ,CAAC;AAED,iEAAiE;AACjE,MAAM,UAAU,sBAAsB,CAAC,MAA6B;IAClE,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,aAAa,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACtF,CAAC;IACD,MAAM,OAAO,GAAG,YAAY,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE;QACzD,MAAM,EAAE,GAAG;QACX,SAAS,EAAE,aAAa;KACzB,CAAC,CAAC;IACH,IAAI,MAAM,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;QAC3B,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EAAE,wBAAwB,MAAM,CAAC,MAAM,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;SACjF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC;QAC1B,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,IAAI,2BAA2B,EAAE,CAAC;IAClF,CAAC;IACD,IAAI,QAAiB,CAAC;IACtB,IAAI,CAAC;QACH,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,IAAI,+BAA+B,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACzE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,kCAAkC,EAAE,CAAC;IAC9E,CAAC;IACD,MAAM,MAAM,GAAG,QAAmC,CAAC;IACnD,MAAM,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,OAAO,IAAI,KAAK,IAAI,uBAAuB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5E,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,CAAC;IACjF,CAAC;IACD,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,SAAS,EAAE,CAAC;QACxD,OAAO;YACL,IAAI,EAAE,cAAc;YACpB,MAAM,EACJ,CAAC,KAAK,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;gBACnD,OAAO;gBACP,4DAA4D,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,UAAU,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG;SACvH,CAAC;IACJ,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;AAC/C,CAAC"}

package/dist/profile.d.ts

@@ -1,21 +1,12 @@
 import type { CredentialProfile, CredentialProfileStatus } from "@claudexor/schema";
 type EnvMap = Record<string, string | null | undefined>;
 export declare const AGY_BIN: () => string;
-/** Canonical, Claudexor-owned HOME for one named Antigravity identity. */
+/** Canonical, Claudexor-owned HOME for one named Antigravity binding. */
 export declare function canonicalAgyProfileHome(locator: string): string;
-/**
- * The vendor's file-based OAuth token inside a profile HOME. agy lands on
- * file storage because its keyring lookup FAILS in a scoped HOME (macOS: no
- * login keychain in `$HOME/Library/Keychains` → `falling back to file`); the
- * profile mechanism therefore REQUIRES that no keychain ever be created
- * inside the profile HOME. Live-proven on three separate Google accounts
- * (PLAN §1.2a-1.2c); re-proven per AGY_VENDOR_CLI_VERSION bump because the
- * fallback is a vendor error path, not a documented mode (R-2').
- */
+/** Diagnostic-only path for stale-file precedence fixtures. Credential
+ * readiness and routing never infer auth from this file: the effective
+ * transport is platform/version dependent and only the vendor probe proves it. */
 export declare function agyTokenPath(profileHome: string): string;
-/** The token must be a regular FILE: a directory at that path is a malformed
- * profile, not a login, and must refuse rather than route (Ф0 review #11). */
-export declare function agyTokenFilePresent(profileHome: string): boolean;
 /**
  * Exact strict-profile env: the profile HOME selects the vendor's whole
  * config root (`$HOME/.gemini/...`) — agy has no config-dir env var, HOME is
@@ -46,15 +37,17 @@ export type AgyResolvedProfileRoute = {
     refusal: string;
 };
 /**
- * INV-135 strict profile routing: an agy profile is exactly its
- * `config_dir_login` HOME with a present vendor token file, or a typed
- * refusal. There is NO engine-default agy credential (owner decision Л-4),
- * so no fallback ladder exists to fall into.
+ * INV-135 route construction only: validate the named binding and build the
+ * exact scoped environment. Credential evidence belongs exclusively to the
+ * vendor probe; this resolver never treats a fallback token file (or its
+ * absence) as an auth oracle.
  */
 export declare function resolveAgyProfileRoute(profile: Pick<CredentialProfile, "profile_id" | "credential_kind" | "isolation_locator">, specEnv?: EnvMap): AgyResolvedProfileRoute;
 export interface AgyProfileProbeDeps {
     /** Injectable live probe (tests): print-mode `/model` under the profile env. */
     runModelProbe: (env: EnvMap, abortSignal?: AbortSignal) => Promise<AgyModelProbe>;
+    /** Production adapter seam: prepare the profile before the vendor probe. */
+    prepareProfileKeychain?: (home: string) => void;
 }
 export type AgyModelProbe = {
     kind: "authenticated";
@@ -69,7 +62,7 @@ export type AgyModelProbe = {
 /**
  * Quota-free liveness probe: `agy -p "/model" --output-format json` answers
  * from the CLI without spending a turn (vendor 1.1.11+ print-mode
- * slash-commands). SUCCESS proves the profile's token authenticates in the
+ * slash-commands). SUCCESS proves the named binding authenticates in the
  * exact env its runs will spawn with (INV-067); an auth error is an honest
  * logged-out/revoked verdict, and a spawn/parse failure stays `unknown`.
  */

package/dist/profile.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAIpF,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAExD,eAAO,MAAM,OAAO,cAA+C,CAAC;AAEpE,0EAA0E;AAC1E,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;8EAC8E;AAC9E,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,OAAO,CAMhE;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,MAAW,GAAG,MAAM,CASlF;AAED,MAAM,MAAM,uBAAuB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,GAAG,mBAAmB,CAAC,EACxF,OAAO,GAAE,MAAW,GACnB,uBAAuB,CAezB;AAED,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;CACnF;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,aAAa,CAAC,CAwBxB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,mBAA6D,EACnE,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAgClC"}
+{"version":3,"file":"profile.d.ts","sourceRoot":"","sources":["../src/profile.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,iBAAiB,EAAE,uBAAuB,EAAE,MAAM,mBAAmB,CAAC;AAMpF,KAAK,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC,CAAC;AAExD,eAAO,MAAM,OAAO,cAA+C,CAAC;AAEpE,yEAAyE;AACzE,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;kFAEkF;AAClF,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAExD;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,GAAE,MAAW,GAAG,MAAM,CASlF;AAED,MAAM,MAAM,uBAAuB,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1F;;;;;GAKG;AACH,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,IAAI,CAAC,iBAAiB,EAAE,YAAY,GAAG,iBAAiB,GAAG,mBAAmB,CAAC,EACxF,OAAO,GAAE,MAAW,GACnB,uBAAuB,CAWzB;AAED,MAAM,WAAW,mBAAmB;IAClC,gFAAgF;IAChF,aAAa,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,WAAW,KAAK,OAAO,CAAC,aAAa,CAAC,CAAC;IAClF,4EAA4E;IAC5E,sBAAsB,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;CACjD;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACjD;IAAE,IAAI,EAAE,iBAAiB,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC3C;IAAE,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC;AAE7C;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,aAAa,CAAC,CA0BxB;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,iBAAiB,EAC1B,IAAI,GAAE,mBAA6D,EACnE,WAAW,CAAC,EAAE,WAAW,GACxB,OAAO,CAAC,uBAAuB,CAAC,CAyDlC"}

package/dist/profile.js

@@ -1,35 +1,20 @@
-import { statSync } from "node:fs";
 import { join } from "node:path";
-import { canonicalIsolationLocator, providerScrubEnv, runCapture } from "@claudexor/core";
+import { canonicalIsolationLocator, providerScrubEnv } from "@claudexor/core";
 import { CredentialProfileStatus as CredentialProfileStatusSchema } from "@claudexor/schema";
 import { nowIso, redactSecrets } from "@claudexor/util";
+import { isAgyProfileKeychainUnsafe } from "./keychain.js";
+import { classifyAgyPrintResult, runAgyPrintCommand } from "./print-command.js";
 export const AGY_BIN = () => process.env.CLAUDEXOR_AGY_BIN || "agy";
-/** Canonical, Claudexor-owned HOME for one named Antigravity identity. */
+/** Canonical, Claudexor-owned HOME for one named Antigravity binding. */
 export function canonicalAgyProfileHome(locator) {
     return canonicalIsolationLocator(locator, "credential profile Antigravity HOME");
 }
-/**
- * The vendor's file-based OAuth token inside a profile HOME. agy lands on
- * file storage because its keyring lookup FAILS in a scoped HOME (macOS: no
- * login keychain in `$HOME/Library/Keychains` → `falling back to file`); the
- * profile mechanism therefore REQUIRES that no keychain ever be created
- * inside the profile HOME. Live-proven on three separate Google accounts
- * (PLAN §1.2a-1.2c); re-proven per AGY_VENDOR_CLI_VERSION bump because the
- * fallback is a vendor error path, not a documented mode (R-2').
- */
+/** Diagnostic-only path for stale-file precedence fixtures. Credential
+ * readiness and routing never infer auth from this file: the effective
+ * transport is platform/version dependent and only the vendor probe proves it. */
 export function agyTokenPath(profileHome) {
     return join(profileHome, ".gemini", "antigravity-cli", "antigravity-oauth-token");
 }
-/** The token must be a regular FILE: a directory at that path is a malformed
- * profile, not a login, and must refuse rather than route (Ф0 review #11). */
-export function agyTokenFilePresent(profileHome) {
-    try {
-        return statSync(agyTokenPath(profileHome)).isFile();
-    }
-    catch {
-        return false;
-    }
-}
 /**
  * Exact strict-profile env: the profile HOME selects the vendor's whole
  * config root (`$HOME/.gemini/...`) — agy has no config-dir env var, HOME is
@@ -63,10 +48,10 @@ export function agyProfileRunEnv(profileHome, specEnv = {}) {
     };
 }
 /**
- * INV-135 strict profile routing: an agy profile is exactly its
- * `config_dir_login` HOME with a present vendor token file, or a typed
- * refusal. There is NO engine-default agy credential (owner decision Л-4),
- * so no fallback ladder exists to fall into.
+ * INV-135 route construction only: validate the named binding and build the
+ * exact scoped environment. Credential evidence belongs exclusively to the
+ * vendor probe; this resolver never treats a fallback token file (or its
+ * absence) as an auth oracle.
  */
 export function resolveAgyProfileRoute(profile, specEnv = {}) {
     if (profile.credential_kind !== "config_dir_login")
@@ -75,10 +60,6 @@ export function resolveAgyProfileRoute(profile, specEnv = {}) {
         };
     try {
         const home = canonicalAgyProfileHome(profile.isolation_locator ?? "");
-        if (!agyTokenFilePresent(home))
-            return {
-                refusal: `credential profile "${profile.profile_id}" has no Antigravity login in its profile HOME (run \`claudexor profiles login agy ${profile.profile_id}\` first)`,
-            };
         return { home, env: agyProfileRunEnv(home, specEnv) };
     }
     catch (err) {
@@ -88,28 +69,28 @@ export function resolveAgyProfileRoute(profile, specEnv = {}) {
 /**
  * Quota-free liveness probe: `agy -p "/model" --output-format json` answers
  * from the CLI without spending a turn (vendor 1.1.11+ print-mode
- * slash-commands). SUCCESS proves the profile's token authenticates in the
+ * slash-commands). SUCCESS proves the named binding authenticates in the
  * exact env its runs will spawn with (INV-067); an auth error is an honest
  * logged-out/revoked verdict, and a spawn/parse failure stays `unknown`.
  */
 export async function defaultAgyModelProbe(env, abortSignal) {
     try {
-        const r = await runCapture(AGY_BIN(), ["-p", "/model", "--output-format", "json"], {
-            timeoutMs: 30_000,
-            env,
-            abortSignal,
-            cancelSignal: "SIGTERM",
-        });
-        const parsed = JSON.parse(r.stdout.trim() || "{}");
-        if (parsed?.status === "SUCCESS")
-            return {
-                kind: "authenticated",
-                modelId: typeof parsed?.command?.data?.id === "string" ? parsed.command.data.id : null,
-            };
-        return {
-            kind: "unauthenticated",
-            detail: redactSecrets(String(parsed?.error ?? "authentication required")).slice(0, 300),
-        };
+        const classified = classifyAgyPrintResult(await runAgyPrintCommand(AGY_BIN(), "/model", env, { abortSignal }));
+        if (classified.kind === "unauthenticated")
+            return classified;
+        if (classified.kind === "probe_failed")
+            return classified;
+        const command = classified.envelope["command"];
+        const data = command && typeof command === "object" && !Array.isArray(command)
+            ? command["data"]
+            : null;
+        const id = data && typeof data === "object" && !Array.isArray(data)
+            ? data["id"]
+            : null;
+        if (typeof id !== "string" || !id.trim()) {
+            return { kind: "probe_failed", detail: "agy model envelope carried no model id" };
+        }
+        return { kind: "authenticated", modelId: id };
     }
     catch (err) {
         return {
@@ -134,13 +115,35 @@ export async function probeAgyCredentialProfile(profile, deps = { runModelProbe:
             verification: "not_run",
             detail: route.refusal,
         });
+    let keychainSetupWarning = null;
+    try {
+        deps.prepareProfileKeychain?.(route.home);
+    }
+    catch (error) {
+        if (isAgyProfileKeychainUnsafe(error)) {
+            return CredentialProfileStatusSchema.parse({
+                ...base,
+                availability: "unavailable",
+                verification: "not_run",
+                detail: redactSecrets(error instanceof Error ? error.message : String(error)).slice(0, 300),
+            });
+        }
+        // A custom operational seam may model a recoverable security-tool miss.
+        // Keep the vendor file fallback and disclose the degraded container on
+        // the profile status rather than presenting a completely clean proof.
+        keychainSetupWarning = redactSecrets(error instanceof Error ? error.message : String(error)).slice(0, 300);
+    }
     const probe = await deps.runModelProbe(route.env, abortSignal);
     if (probe.kind === "authenticated")
         return CredentialProfileStatusSchema.parse({
             ...base,
             availability: "available",
             verification: "passed",
-            detail: `Antigravity login verified in the profile HOME${probe.modelId ? ` (model ${probe.modelId})` : ""}`,
+            verification_source: "vendor",
+            detail: `Antigravity accepted the named binding${probe.modelId ? ` (model ${probe.modelId})` : ""}; whether the credential is backed by a keyring or file is not inferred` +
+                (keychainSetupWarning
+                    ? `; private profile keychain setup degraded: ${keychainSetupWarning}`
+                    : ""),
             last_verified_at: nowIso(),
         });
     if (probe.kind === "unauthenticated")
@@ -148,7 +151,8 @@ export async function probeAgyCredentialProfile(profile, deps = { runModelProbe:
             ...base,
             availability: "unavailable",
             verification: "failed",
-            detail: `Antigravity token present but not accepted: ${probe.detail}`,
+            verification_source: "vendor",
+            detail: `Antigravity rejected the named binding credential: ${probe.detail}`,
         });
     return CredentialProfileStatusSchema.parse({
         ...base,