@infersec/conduit 1.105.0 → 1.107.0

package/README.md

@@ -13,6 +13,7 @@ npx @infersec/conduit inference start --engine <type> --key <api-key> --source <
 | Command                 | Description                                                                                            |
 | ----------------------- | ------------------------------------------------------------------------------------------------------ |
 | `inference start`       | Start the inference agent                                                                              |
+| `inference group start` | Start an inference agent for a source group (registers an ephemeral source)                            |
 | `tool connect <toolID>` | Connect a local tool (`local-filesystem`, `local-mysql`) to the API. Type is resolved from the server. |
 
 ### Flags
@@ -28,6 +29,16 @@ npx @infersec/conduit inference start --engine <type> --key <api-key> --source <
 | `--api-url`     | No       | `https://api.infersec.ai`      | API base URL (matches `API_URL`).                                                      |
 | `--start-mode`  | No       | `auto`                         | Startup mode (matches `START_MODE`): `auto` starts engine, `idle` leaves conduit idle. |
 
+#### `inference group start` flags
+
+Same flags as `inference start`, except `--group` replaces `--source`:
+
+| Flag      | Required | Default | Notes                                 |
+| --------- | -------- | ------- | ------------------------------------- |
+| `--group` | Yes      | -       | Source group ID (matches `GROUP_ID`). |
+
+The agent registers an ephemeral source under the group (absorbing its model/engine settings), then runs the standard inference flow. Ephemeral sources are removed automatically after being offline for 1 hour.
+
 #### `tool connect` flags
 
 Common flags (all tool types):
@@ -67,6 +78,7 @@ Common flags (all tool types):
 | Required only      | `npx @infersec/conduit inference start --engine vllm --key <api-key> --source <source-id>`                                        |
 | Custom root/port   | `npx @infersec/conduit inference start --engine vllm --key <api-key> --source <source-id> --root /data/infersec --port 9601`      |
 | Custom engine/port | `npx @infersec/conduit inference start --engine vllm --key <api-key> --source <source-id> --port 9601 --engine-port 9701`         |
+| Source group       | `npx @infersec/conduit inference group start --key <api-key> --group <group-id>`                                                  |
 | Connect FS tool    | `npx @infersec/conduit tool connect <tool-id> --key <api-key> --path ./`                                                          |
 | Read-only FS tool  | `npx @infersec/conduit tool connect <tool-id> --key <api-key> --path ./ --read-only`                                              |
 | Connect MySQL tool | `MYSQL_URL=mysql://user:pass@host:3306/db npx @infersec/conduit tool connect <tool-id> --key <api-key>`                           |
@@ -82,6 +94,7 @@ Credentials are best supplied via the `MYSQL_*` environment variables (or `MYSQL
 | `ENGINE`         | Yes      | -                              | Engine type (matches `--engine`).                                            |
 | `ENGINE_PORT`    | No       | `9700`                         | Engine port (matches `--engine-port`).                                       |
 | `API_KEY`        | Yes      | -                              | API key (matches `--key`).                                                   |
+| `GROUP_ID`       | No       | -                              | Source group ID for `inference group start` (matches `--group`).             |
 | `SOURCE`         | Yes      | -                              | Inference source ID (matches `--source`).                                    |
 | `API_URL`        | No       | `https://api.infersec.ai`      | API base URL (matches `--api-url`).                                          |
 | `PORT`           | No       | `9600`                         | Port to listen on (matches `--port`).                                        |

package/dist/cli.js

@@ -20097,6 +20097,26 @@ const InferenceAgentConfigurationSchema = object$1({
 });
 
 const API_SERVICE_CONDUIT_API_REFERENCE = {
+    "/conduit/api/v1/source-group/:groupID/register": {
+        POST: {
+            auth: {
+                type: "api-key"
+            },
+            body: object$1({
+                identifier: string$2().min(1).max(256).optional()
+            }),
+            parameters: {
+                groupID: ULIDSchema
+            },
+            response: {
+                schema: object$1({
+                    configuration: InferenceAgentConfigurationSchema,
+                    sourceID: ULIDSchema
+                }),
+                type: "rest"
+            }
+        }
+    },
     "/conduit/api/v1/source/:sourceID/configuration": {
         GET: {
             auth: {
@@ -20993,6 +21013,8 @@ object$1({
         created: string$2(),
         engine: LLMEngineSchema.nullable(),
         engineId: ULIDSchema.nullable(),
+        ephemeral: DBBooleanSchema.optional(),
+        groupId: ULIDSchema.nullable().optional(),
         id: ULIDSchema,
         lastState: ConduitState.nullable(),
         lastStateTimestamp: string$2().nullable(),
@@ -21009,6 +21031,8 @@ object$1({
     engineConfig: unknown().nullable(),
     engineId: ULIDSchema.nullable(),
     engineName: string$2().nullable(),
+    ephemeral: DBBooleanSchema.optional(),
+    groupId: ULIDSchema.nullable().optional(),
     id: ULIDSchema,
     lastState: ConduitState.nullable(),
     lastStateTimestamp: string$2().nullable(),
@@ -21035,8 +21059,70 @@ object$1({
 object$1({
     id: ULIDSchema
 });
+object$1({
+    contextLength: number$1().int().positive().max(1048576).optional(),
+    engineId: ULIDSchema,
+    modelID: ULIDSchema,
+    name: ResourceNameSchema,
+    quantizationLabel: string$2().min(1).max(128).optional()
+});
+object$1({
+    results: array(object$1({
+        contextLength: number$1().int().positive().nullable(),
+        created: string$2(),
+        engine: LLMEngineSchema.nullable(),
+        engineId: ULIDSchema.nullable(),
+        ephemeralSourceCount: number$1().int().nonnegative(),
+        id: ULIDSchema,
+        modelID: ULIDSchema.nullable(),
+        modelName: string$2(),
+        name: string$2(),
+        onlineSourceCount: number$1().int().nonnegative(),
+        updated: string$2()
+    }))
+});
+object$1({
+    contextLength: number$1().int().positive().nullable(),
+    created: string$2(),
+    engine: LLMEngineSchema.nullable(),
+    engineConfig: unknown().nullable(),
+    engineId: ULIDSchema.nullable(),
+    engineName: string$2().nullable(),
+    id: ULIDSchema,
+    model: object$1({
+        id: ULIDSchema,
+        modelFormat: LLMModelFormatSchema,
+        name: string$2(),
+        provider: _enum$1(["storage", "huggingface"]),
+        providerSlug: string$2(),
+        taskType: LLMModelTaskTypeSchema
+    })
+        .nullable(),
+    modelQuantizationLabel: string$2().nullable(),
+    name: string$2(),
+    sources: array(object$1({
+        ephemeral: DBBooleanSchema,
+        id: ULIDSchema,
+        lastState: ConduitState.nullable(),
+        lastStateTimestamp: string$2().nullable(),
+        name: string$2(),
+        online: DBBooleanSchema
+    })),
+    updated: string$2()
+});
+object$1({
+    contextLength: number$1().int().positive().nullable().optional(),
+    engineId: ULIDSchema.nullable().optional(),
+    modelID: ULIDSchema.optional(),
+    name: ResourceNameSchema.optional(),
+    quantizationLabel: string$2().min(1).max(128).nullable().optional()
+});
+object$1({
+    id: ULIDSchema
+});
 object$1({
     enabled: boolean$1().optional(),
+    groupIDs: array(ULIDSchema).optional(),
     name: ResourceNameSchema,
     routingMethod: nativeEnum(RoutingMethod).optional(),
     sourceIDs: array(ULIDSchema)
@@ -21054,6 +21140,12 @@ object$1({
 object$1({
     created: string$2(),
     enabled: DBBooleanSchema,
+    groups: array(object$1({
+        id: ULIDSchema,
+        name: string$2(),
+        onlineSourceCount: number$1().int().nonnegative(),
+        sourceCount: number$1().int().nonnegative()
+    })),
     id: ULIDSchema,
     minimumEffectiveContextLength: number$1().int().positive().nullable(),
     name: string$2(),
@@ -21075,6 +21167,7 @@ object$1({
 });
 object$1({
     enabled: boolean$1().optional(),
+    groupIDs: array(ULIDSchema).optional(),
     name: ResourceNameSchema.optional(),
     routingMethod: nativeEnum(RoutingMethod).optional(),
     sourceIDs: array(ULIDSchema).optional()
@@ -21150,6 +21243,20 @@ object$1({
                 modelID: ULIDSchema.describe("Model identifier")
             }}
     },
+    "/api/v1/source-groups/:groupID": {
+        DELETE: {
+            parameters: {
+                groupID: ULIDSchema.describe("Source group identifier")
+            }},
+        GET: {
+            parameters: {
+                groupID: ULIDSchema.describe("Source group identifier")
+            }},
+        PATCH: {
+            parameters: {
+                groupID: ULIDSchema.describe("Source group identifier")
+            }}
+    },
     "/api/v1/sources/:sourceID": {
         DELETE: {
             parameters: {
@@ -21314,6 +21421,31 @@ const ACCOUNT_MANAGEMENT_OPERATION_METADATA = [
         name: "update_source"
     },
     { category: "delete", description: "Delete an inference source.", name: "delete_source" },
+    {
+        category: "read",
+        description: "List inference source groups in the account.",
+        name: "list_source_groups"
+    },
+    {
+        category: "read",
+        description: "Get full details for a single inference source group.",
+        name: "get_source_group_details"
+    },
+    {
+        category: "write",
+        description: "Create a new inference source group.",
+        name: "create_source_group"
+    },
+    {
+        category: "write",
+        description: "Update an inference source group's name, engine, model or context length.",
+        name: "update_source_group"
+    },
+    {
+        category: "delete",
+        description: "Delete an inference source group and its ephemeral sources.",
+        name: "delete_source_group"
+    },
     { category: "read", description: "List models in the account.", name: "list_models" },
     {
         category: "read",
@@ -21488,17 +21620,23 @@ const ModelEndpointCallConfigSchema = object$1({
     description: string$2().min(1),
     endpointId: string$2().min(1),
     inputSchema: record(string$2(), unknown()).optional(),
+    maxTokens: number$1().int().positive().optional(),
     outputSchema: record(string$2(), unknown()).optional(),
     systemPrompt: string$2().optional(),
     type: literal("model-endpoint-call")
 });
 const ModelSourceCallConfigSchema = object$1({
     description: string$2().min(1),
+    groupId: ULIDSchema.optional(),
     inputSchema: record(string$2(), unknown()).optional(),
+    maxTokens: number$1().int().positive().optional(),
     outputSchema: record(string$2(), unknown()).optional(),
-    sourceId: string$2().min(1),
+    sourceId: ULIDSchema.optional(),
     systemPrompt: string$2().optional(),
     type: literal("model-source-call")
+})
+    .refine(config => Boolean(config.sourceId) !== Boolean(config.groupId), {
+    message: "Exactly one of sourceId or groupId must be set"
 });
 discriminatedUnion("type", [
     AccountManagementConfigSchema,
@@ -22333,6 +22471,22 @@ function buildConfigurationOverrides(options) {
     return configurationOverrides;
 }
 
+function buildGroupConfigurationOverrides(options) {
+    const group = options.group ?? readEnvStringOptional("GROUP_ID", undefined);
+    if (options.source && group) {
+        throw new Error("Options --source and --group are mutually exclusive");
+    }
+    if (!group) {
+        throw new Error("A source group ID is required (--group or GROUP_ID env)");
+    }
+    const overrides = buildConfigurationOverrides({
+        ...options,
+        source: undefined
+    });
+    overrides.groupID = group;
+    return overrides;
+}
+
 function commonjsRequire(path) {
 	throw new Error('Could not dynamically require "' + path + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
 }
@@ -136620,6 +136774,81 @@ function createSignalShutdown$1({ connection, logger }) {
     };
 }
 
+async function resolveGroupRegistrationConfig({ apiKeyOverride, apiURLOverride }) {
+    const apiKey = apiKeyOverride ?? readEnvString("API_KEY");
+    const apiURL = apiURLOverride ?? readEnvStringOptional("API_URL", "https://api.infersec.ai");
+    return { apiKey, apiURL };
+}
+async function registerGroupSource({ apiKeyOverride, apiURLOverride, groupID, logger }) {
+    const log = logger ?? createLogger({ name: "infersec-conduit" });
+    const { apiKey, apiURL } = await resolveGroupRegistrationConfig({
+        apiKeyOverride,
+        apiURLOverride
+    });
+    const fetchWithAPIKey = createFetchWithHeaders({
+        fetchFn: async (input, init) => {
+            try {
+                return await fetchWithRetry(input, init, {
+                    maxAttempts: 4,
+                    timeoutMs: 10000
+                });
+            }
+            catch (error) {
+                log.warn("API request failed after retries", getNetworkErrorAttributes(error));
+                throw error;
+            }
+        },
+        headers: {
+            "x-api-key": apiKey
+        }
+    });
+    try {
+        const result = (await fetchByReference({
+            baseURL: apiURL,
+            body: {},
+            fetch: fetchWithAPIKey,
+            method: "POST",
+            parameters: {
+                groupID
+            },
+            reference: API_SERVICE_CONDUIT_API_REFERENCE,
+            route: "/conduit/api/v1/source-group/:groupID/register"
+        }));
+        log.info("Registered ephemeral source for group", {
+            groupID,
+            inferenceSourceID: result.sourceID
+        });
+        return result;
+    }
+    catch (error) {
+        log.error("Source group registration failed", { error: asError(error), groupID });
+        throw error;
+    }
+}
+
+async function startInferenceAgentForGroup({ configurationOverrides }) {
+    setDefaultResultOrder("ipv4first");
+    const logger = createLogger({
+        name: "infersec-conduit"
+    });
+    const groupID = configurationOverrides?.groupID ?? readEnvStringOptional("GROUP_ID", undefined);
+    if (!groupID) {
+        throw new Error("A source group ID is required (--group or GROUP_ID env)");
+    }
+    const registration = await registerGroupSource({
+        apiKeyOverride: configurationOverrides?.apiKey,
+        apiURLOverride: configurationOverrides?.apiURL,
+        groupID,
+        logger
+    });
+    await startInferenceAgent({
+        configurationOverrides: {
+            ...configurationOverrides,
+            inferenceSourceID: registration.sourceID
+        }
+    });
+}
+
 function registerInferenceCommands({ program }) {
     const inference = program.command("inference").description("Manage inference agent");
     inference
@@ -136636,6 +136865,21 @@ function registerInferenceCommands({ program }) {
         const configurationOverrides = buildConfigurationOverrides(options);
         await startInferenceAgent({ configurationOverrides });
     });
+    const group = inference.command("group").description("Manage source group agents");
+    group
+        .command("start")
+        .description("Start an inference agent for a source group (registers an ephemeral source)")
+        .option("--api-url <url>", "API base URL (or API_URL env)")
+        .option("--engine-port <number>", "Engine port (or ENGINE_PORT env)")
+        .option("--group <id>", "Source group ID (or GROUP_ID env)")
+        .option("--key <value>", "API key (or API_KEY env)")
+        .option("--port <number>", "Port to listen on (or PORT env)")
+        .option("--root <path>", "Root directory (or ROOT_DIRECTORY env)")
+        .option("--start-mode <mode>", "Startup mode: auto|idle (or START_MODE env)")
+        .action(async (options) => {
+        const configurationOverrides = buildGroupConfigurationOverrides(options);
+        await startInferenceAgentForGroup({ configurationOverrides });
+    });
 }
 
 const ROOT_DIRECTORY_DEFAULT = join(process.env.HOME ?? "/tmp", ".cache", "infersec", "iagent");

package/dist/cli.sea.cjs

@@ -20112,6 +20112,26 @@ const InferenceAgentConfigurationSchema = object$1({
 });
 
 const API_SERVICE_CONDUIT_API_REFERENCE = {
+    "/conduit/api/v1/source-group/:groupID/register": {
+        POST: {
+            auth: {
+                type: "api-key"
+            },
+            body: object$1({
+                identifier: string$2().min(1).max(256).optional()
+            }),
+            parameters: {
+                groupID: ULIDSchema
+            },
+            response: {
+                schema: object$1({
+                    configuration: InferenceAgentConfigurationSchema,
+                    sourceID: ULIDSchema
+                }),
+                type: "rest"
+            }
+        }
+    },
     "/conduit/api/v1/source/:sourceID/configuration": {
         GET: {
             auth: {
@@ -21008,6 +21028,8 @@ object$1({
         created: string$2(),
         engine: LLMEngineSchema.nullable(),
         engineId: ULIDSchema.nullable(),
+        ephemeral: DBBooleanSchema.optional(),
+        groupId: ULIDSchema.nullable().optional(),
         id: ULIDSchema,
         lastState: ConduitState.nullable(),
         lastStateTimestamp: string$2().nullable(),
@@ -21024,6 +21046,8 @@ object$1({
     engineConfig: unknown().nullable(),
     engineId: ULIDSchema.nullable(),
     engineName: string$2().nullable(),
+    ephemeral: DBBooleanSchema.optional(),
+    groupId: ULIDSchema.nullable().optional(),
     id: ULIDSchema,
     lastState: ConduitState.nullable(),
     lastStateTimestamp: string$2().nullable(),
@@ -21050,8 +21074,70 @@ object$1({
 object$1({
     id: ULIDSchema
 });
+object$1({
+    contextLength: number$1().int().positive().max(1048576).optional(),
+    engineId: ULIDSchema,
+    modelID: ULIDSchema,
+    name: ResourceNameSchema,
+    quantizationLabel: string$2().min(1).max(128).optional()
+});
+object$1({
+    results: array(object$1({
+        contextLength: number$1().int().positive().nullable(),
+        created: string$2(),
+        engine: LLMEngineSchema.nullable(),
+        engineId: ULIDSchema.nullable(),
+        ephemeralSourceCount: number$1().int().nonnegative(),
+        id: ULIDSchema,
+        modelID: ULIDSchema.nullable(),
+        modelName: string$2(),
+        name: string$2(),
+        onlineSourceCount: number$1().int().nonnegative(),
+        updated: string$2()
+    }))
+});
+object$1({
+    contextLength: number$1().int().positive().nullable(),
+    created: string$2(),
+    engine: LLMEngineSchema.nullable(),
+    engineConfig: unknown().nullable(),
+    engineId: ULIDSchema.nullable(),
+    engineName: string$2().nullable(),
+    id: ULIDSchema,
+    model: object$1({
+        id: ULIDSchema,
+        modelFormat: LLMModelFormatSchema,
+        name: string$2(),
+        provider: _enum$1(["storage", "huggingface"]),
+        providerSlug: string$2(),
+        taskType: LLMModelTaskTypeSchema
+    })
+        .nullable(),
+    modelQuantizationLabel: string$2().nullable(),
+    name: string$2(),
+    sources: array(object$1({
+        ephemeral: DBBooleanSchema,
+        id: ULIDSchema,
+        lastState: ConduitState.nullable(),
+        lastStateTimestamp: string$2().nullable(),
+        name: string$2(),
+        online: DBBooleanSchema
+    })),
+    updated: string$2()
+});
+object$1({
+    contextLength: number$1().int().positive().nullable().optional(),
+    engineId: ULIDSchema.nullable().optional(),
+    modelID: ULIDSchema.optional(),
+    name: ResourceNameSchema.optional(),
+    quantizationLabel: string$2().min(1).max(128).nullable().optional()
+});
+object$1({
+    id: ULIDSchema
+});
 object$1({
     enabled: boolean$1().optional(),
+    groupIDs: array(ULIDSchema).optional(),
     name: ResourceNameSchema,
     routingMethod: nativeEnum(RoutingMethod).optional(),
     sourceIDs: array(ULIDSchema)
@@ -21069,6 +21155,12 @@ object$1({
 object$1({
     created: string$2(),
     enabled: DBBooleanSchema,
+    groups: array(object$1({
+        id: ULIDSchema,
+        name: string$2(),
+        onlineSourceCount: number$1().int().nonnegative(),
+        sourceCount: number$1().int().nonnegative()
+    })),
     id: ULIDSchema,
     minimumEffectiveContextLength: number$1().int().positive().nullable(),
     name: string$2(),
@@ -21090,6 +21182,7 @@ object$1({
 });
 object$1({
     enabled: boolean$1().optional(),
+    groupIDs: array(ULIDSchema).optional(),
     name: ResourceNameSchema.optional(),
     routingMethod: nativeEnum(RoutingMethod).optional(),
     sourceIDs: array(ULIDSchema).optional()
@@ -21165,6 +21258,20 @@ object$1({
                 modelID: ULIDSchema.describe("Model identifier")
             }}
     },
+    "/api/v1/source-groups/:groupID": {
+        DELETE: {
+            parameters: {
+                groupID: ULIDSchema.describe("Source group identifier")
+            }},
+        GET: {
+            parameters: {
+                groupID: ULIDSchema.describe("Source group identifier")
+            }},
+        PATCH: {
+            parameters: {
+                groupID: ULIDSchema.describe("Source group identifier")
+            }}
+    },
     "/api/v1/sources/:sourceID": {
         DELETE: {
             parameters: {
@@ -21329,6 +21436,31 @@ const ACCOUNT_MANAGEMENT_OPERATION_METADATA = [
         name: "update_source"
     },
     { category: "delete", description: "Delete an inference source.", name: "delete_source" },
+    {
+        category: "read",
+        description: "List inference source groups in the account.",
+        name: "list_source_groups"
+    },
+    {
+        category: "read",
+        description: "Get full details for a single inference source group.",
+        name: "get_source_group_details"
+    },
+    {
+        category: "write",
+        description: "Create a new inference source group.",
+        name: "create_source_group"
+    },
+    {
+        category: "write",
+        description: "Update an inference source group's name, engine, model or context length.",
+        name: "update_source_group"
+    },
+    {
+        category: "delete",
+        description: "Delete an inference source group and its ephemeral sources.",
+        name: "delete_source_group"
+    },
     { category: "read", description: "List models in the account.", name: "list_models" },
     {
         category: "read",
@@ -21503,17 +21635,23 @@ const ModelEndpointCallConfigSchema = object$1({
     description: string$2().min(1),
     endpointId: string$2().min(1),
     inputSchema: record(string$2(), unknown()).optional(),
+    maxTokens: number$1().int().positive().optional(),
     outputSchema: record(string$2(), unknown()).optional(),
     systemPrompt: string$2().optional(),
     type: literal("model-endpoint-call")
 });
 const ModelSourceCallConfigSchema = object$1({
     description: string$2().min(1),
+    groupId: ULIDSchema.optional(),
     inputSchema: record(string$2(), unknown()).optional(),
+    maxTokens: number$1().int().positive().optional(),
     outputSchema: record(string$2(), unknown()).optional(),
-    sourceId: string$2().min(1),
+    sourceId: ULIDSchema.optional(),
     systemPrompt: string$2().optional(),
     type: literal("model-source-call")
+})
+    .refine(config => Boolean(config.sourceId) !== Boolean(config.groupId), {
+    message: "Exactly one of sourceId or groupId must be set"
 });
 discriminatedUnion("type", [
     AccountManagementConfigSchema,
@@ -22348,6 +22486,22 @@ function buildConfigurationOverrides(options) {
     return configurationOverrides;
 }
 
+function buildGroupConfigurationOverrides(options) {
+    const group = options.group ?? readEnvStringOptional("GROUP_ID", undefined);
+    if (options.source && group) {
+        throw new Error("Options --source and --group are mutually exclusive");
+    }
+    if (!group) {
+        throw new Error("A source group ID is required (--group or GROUP_ID env)");
+    }
+    const overrides = buildConfigurationOverrides({
+        ...options,
+        source: undefined
+    });
+    overrides.groupID = group;
+    return overrides;
+}
+
 function commonjsRequire(path) {
 	throw new Error('Could not dynamically require "' + path + '". Please configure the dynamicRequireTargets or/and ignoreDynamicRequires option of @rollup/plugin-commonjs appropriately for this require call to work.');
 }
@@ -156850,6 +157004,81 @@ function createSignalShutdown$1({ connection, logger }) {
     };
 }
 
+async function resolveGroupRegistrationConfig({ apiKeyOverride, apiURLOverride }) {
+    const apiKey = apiKeyOverride ?? readEnvString("API_KEY");
+    const apiURL = apiURLOverride ?? readEnvStringOptional("API_URL", "https://api.infersec.ai");
+    return { apiKey, apiURL };
+}
+async function registerGroupSource({ apiKeyOverride, apiURLOverride, groupID, logger }) {
+    const log = logger ?? createLogger({ name: "infersec-conduit" });
+    const { apiKey, apiURL } = await resolveGroupRegistrationConfig({
+        apiKeyOverride,
+        apiURLOverride
+    });
+    const fetchWithAPIKey = createFetchWithHeaders({
+        fetchFn: async (input, init) => {
+            try {
+                return await fetchWithRetry(input, init, {
+                    maxAttempts: 4,
+                    timeoutMs: 10000
+                });
+            }
+            catch (error) {
+                log.warn("API request failed after retries", getNetworkErrorAttributes(error));
+                throw error;
+            }
+        },
+        headers: {
+            "x-api-key": apiKey
+        }
+    });
+    try {
+        const result = (await fetchByReference({
+            baseURL: apiURL,
+            body: {},
+            fetch: fetchWithAPIKey,
+            method: "POST",
+            parameters: {
+                groupID
+            },
+            reference: API_SERVICE_CONDUIT_API_REFERENCE,
+            route: "/conduit/api/v1/source-group/:groupID/register"
+        }));
+        log.info("Registered ephemeral source for group", {
+            groupID,
+            inferenceSourceID: result.sourceID
+        });
+        return result;
+    }
+    catch (error) {
+        log.error("Source group registration failed", { error: asError(error), groupID });
+        throw error;
+    }
+}
+
+async function startInferenceAgentForGroup({ configurationOverrides }) {
+    require$$1$a.setDefaultResultOrder("ipv4first");
+    const logger = createLogger({
+        name: "infersec-conduit"
+    });
+    const groupID = configurationOverrides?.groupID ?? readEnvStringOptional("GROUP_ID", undefined);
+    if (!groupID) {
+        throw new Error("A source group ID is required (--group or GROUP_ID env)");
+    }
+    const registration = await registerGroupSource({
+        apiKeyOverride: configurationOverrides?.apiKey,
+        apiURLOverride: configurationOverrides?.apiURL,
+        groupID,
+        logger
+    });
+    await startInferenceAgent({
+        configurationOverrides: {
+            ...configurationOverrides,
+            inferenceSourceID: registration.sourceID
+        }
+    });
+}
+
 function registerInferenceCommands({ program }) {
     const inference = program.command("inference").description("Manage inference agent");
     inference
@@ -156866,6 +157095,21 @@ function registerInferenceCommands({ program }) {
         const configurationOverrides = buildConfigurationOverrides(options);
         await startInferenceAgent({ configurationOverrides });
     });
+    const group = inference.command("group").description("Manage source group agents");
+    group
+        .command("start")
+        .description("Start an inference agent for a source group (registers an ephemeral source)")
+        .option("--api-url <url>", "API base URL (or API_URL env)")
+        .option("--engine-port <number>", "Engine port (or ENGINE_PORT env)")
+        .option("--group <id>", "Source group ID (or GROUP_ID env)")
+        .option("--key <value>", "API key (or API_KEY env)")
+        .option("--port <number>", "Port to listen on (or PORT env)")
+        .option("--root <path>", "Root directory (or ROOT_DIRECTORY env)")
+        .option("--start-mode <mode>", "Startup mode: auto|idle (or START_MODE env)")
+        .action(async (options) => {
+        const configurationOverrides = buildGroupConfigurationOverrides(options);
+        await startInferenceAgentForGroup({ configurationOverrides });
+    });
 }
 
 const ROOT_DIRECTORY_DEFAULT = path$1.join(process.env.HOME ?? "/tmp", ".cache", "infersec", "iagent");

package/dist/commands/groupOptions.d.ts

@@ -0,0 +1,6 @@
+import type { ConfigurationOverrides } from "../configuration.js";
+import { type StartCommandOptions } from "./inferenceOptions.js";
+export interface GroupStartCommandOptions extends StartCommandOptions {
+    group?: string;
+}
+export declare function buildGroupConfigurationOverrides(options: GroupStartCommandOptions): ConfigurationOverrides;

package/dist/configuration.d.ts

@@ -18,6 +18,7 @@ export interface ConfigurationOverrides {
     apiKey?: string;
     apiURL?: string;
     enginePort?: number;
+    groupID?: ULID;
     inferenceSourceID?: ULID;
     port?: number;
     rootDirectory?: string;

package/dist/groupRegistration.d.ts

@@ -0,0 +1,12 @@
+import { ULID } from "@infersec/definitions";
+import { type Logger } from "@infersec/logger";
+export interface RegisterGroupSourceResult {
+    configuration: unknown;
+    sourceID: ULID;
+}
+export declare function registerGroupSource({ apiKeyOverride, apiURLOverride, groupID, logger }: {
+    apiKeyOverride?: string;
+    apiURLOverride?: string;
+    groupID: ULID;
+    logger?: Logger;
+}): Promise<RegisterGroupSourceResult>;

package/dist/groupStart.d.ts

@@ -0,0 +1,4 @@
+import type { ConfigurationOverrides } from "./configuration.js";
+export declare function startInferenceAgentForGroup({ configurationOverrides }: {
+    configurationOverrides?: ConfigurationOverrides;
+}): Promise<void>;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@infersec/conduit",
   "description": "End user conduit agent for connecting local LLMs to the cloud.",
-  "version": "1.105.0",
+  "version": "1.107.0",
   "bin": {
     "infersec-conduit": "./dist/cli.js"
   },