@modelprofile.com/flexharness-providers 7.0.0

package/ts_openai_auth/smartai.middleware.openai.ts

@@ -0,0 +1,55 @@
+import type { JSONObject, LanguageModelV4CallOptions, LanguageModelV4Middleware } from '@ai-sdk/provider';
+
+const isNonEmptyString = (value: unknown): value is string => typeof value === 'string' && value.trim().length > 0;
+
+const getSystemInstructions = (prompt: LanguageModelV4CallOptions['prompt']): string | undefined => {
+  const instructions = prompt
+    .filter((message) => message.role === 'system')
+    .map((message) => message.content)
+    .filter(isNonEmptyString);
+
+  return instructions.length > 0 ? instructions.join('\n') : undefined;
+};
+
+const hasUnsupportedChatGptCacheRetention = (options: JSONObject): boolean => {
+  return options.promptCacheRetention !== undefined || options.prompt_cache_retention !== undefined;
+};
+
+/**
+ * ChatGPT's Codex backend requires top-level Responses API instructions.
+ * The standard OpenAI provider otherwise serializes system prompts as input items.
+ */
+export function createOpenAiChatGptInstructionsMiddleware(): LanguageModelV4Middleware {
+  return {
+    specificationVersion: 'v4',
+    transformParams: async ({ params }) => {
+      const instructions = getSystemInstructions(params.prompt);
+      const providerOptions = params.providerOptions ?? {};
+      const openAiProviderOptions = providerOptions.openai ?? {};
+      const shouldApplyInstructions = !!instructions && !isNonEmptyString(openAiProviderOptions.instructions);
+      const shouldStripCacheRetention = hasUnsupportedChatGptCacheRetention(openAiProviderOptions);
+
+      if (!shouldApplyInstructions && !shouldStripCacheRetention) {
+        return params;
+      }
+
+      const nextOpenAiProviderOptions: JSONObject = { ...openAiProviderOptions };
+      delete nextOpenAiProviderOptions.promptCacheRetention;
+      delete nextOpenAiProviderOptions.prompt_cache_retention;
+      if (shouldApplyInstructions) {
+        nextOpenAiProviderOptions.instructions = instructions;
+      }
+
+      return {
+        ...params,
+        prompt: shouldApplyInstructions
+          ? params.prompt.filter((message) => message.role !== 'system')
+          : params.prompt,
+        providerOptions: {
+          ...providerOptions,
+          openai: nextOpenAiProviderOptions,
+        },
+      } satisfies LanguageModelV4CallOptions;
+    },
+  };
+}

package/ts_openai_auth_files/index.ts

@@ -0,0 +1,499 @@
+import * as plugins from './plugins.js';
+import {
+  parseOpenAiChatGptTokenInfo,
+  refreshOpenAiChatGptTokenData,
+} from '@modelprofile.com/flexharness-providers/auth';
+import type {
+  IOpenAiChatGptAuthOptions,
+  IOpenAiChatGptTokenData,
+  IOpenAiChatGptTokenInfo,
+} from '@modelprofile.com/flexharness-providers/auth';
+
+export type TOpenAiChatGptAuthSource = 'smartai' | 'opencode' | 'codex';
+export type TOpenAiChatGptAuthFileFormat = TOpenAiChatGptAuthSource | 'auto';
+
+export interface IOpenAiChatGptAuthSourceConfig {
+  source: TOpenAiChatGptAuthSource;
+  filePath?: string;
+  format?: TOpenAiChatGptAuthFileFormat;
+  writeBack?: boolean;
+}
+
+export interface IOpenAiChatGptAuthSourceInspection {
+  source: TOpenAiChatGptAuthSource;
+  filePath: string;
+  exists: boolean;
+  usable: boolean;
+  expired?: boolean;
+  accountId?: string;
+  email?: string;
+  plan?: string;
+  expiresAt?: string;
+  error?: string;
+}
+
+export interface IInspectOpenAiChatGptAuthSourcesOptions {
+  sources?: Array<TOpenAiChatGptAuthSource | IOpenAiChatGptAuthSourceConfig>;
+  homeDir?: string;
+  now?: Date;
+}
+
+export interface IResolveOpenAiChatGptAuthOptions extends IInspectOpenAiChatGptAuthSourcesOptions {
+  refresh?: 'ifNeeded' | false;
+  writeBack?: Partial<Record<TOpenAiChatGptAuthSource, boolean>>;
+  authOptions?: IOpenAiChatGptAuthOptions;
+}
+
+export interface IResolvedOpenAiChatGptAuth {
+  source: TOpenAiChatGptAuthSource;
+  filePath: string;
+  tokenData: IOpenAiChatGptTokenData;
+  refreshed: boolean;
+}
+
+interface INormalizedOpenAiChatGptAuthSourceConfig {
+  source: TOpenAiChatGptAuthSource;
+  filePath: string;
+  format: TOpenAiChatGptAuthFileFormat;
+  writeBack?: boolean;
+}
+
+const defaultSources: TOpenAiChatGptAuthSource[] = ['smartai', 'opencode', 'codex'];
+const refreshWindowMs = 5 * 60 * 1000;
+const lockWaitTimeoutMs = 30_000;
+const lockStaleMs = 60_000;
+const maximumAuthFileBytes = 1024 * 1024;
+const inProcessFileLocks = new Map<string, Promise<void>>();
+
+const canonicalizeFilePath = async (filePathArg: string): Promise<string> => {
+  const resolvedPath = plugins.path.resolve(filePathArg);
+  await plugins.fs.mkdir(plugins.path.dirname(resolvedPath), { recursive: true, mode: 0o700 });
+  try {
+    return await plugins.fs.realpath(resolvedPath);
+  } catch (errorArg) {
+    if ((errorArg as NodeJS.ErrnoException).code !== 'ENOENT') throw errorArg;
+    const parentPath = await plugins.fs.realpath(plugins.path.dirname(resolvedPath));
+    return plugins.path.join(parentPath, plugins.path.basename(resolvedPath));
+  }
+};
+
+const acquireCrossProcessFileLock = async (
+  filePathArg: string,
+): Promise<() => Promise<void>> => plugins.properLockfile.lock(filePathArg, {
+  lockfilePath: `${filePathArg}.smartai.lock`,
+  realpath: false,
+  stale: lockStaleMs,
+  update: 10_000,
+  retries: {
+    retries: Math.ceil(lockWaitTimeoutMs / 50),
+    factor: 1,
+    minTimeout: 50,
+    maxTimeout: 50,
+    randomize: false,
+  },
+});
+
+const withAuthFileLock = async <TResult>(
+  filePathArg: string,
+  taskArg: (canonicalFilePathArg: string) => Promise<TResult>,
+): Promise<TResult> => {
+  const canonicalFilePath = await canonicalizeFilePath(filePathArg);
+  const previous = inProcessFileLocks.get(canonicalFilePath) ?? Promise.resolve();
+  let releaseInProcess!: () => void;
+  const current = new Promise<void>((resolve) => {
+    releaseInProcess = resolve;
+  });
+  const tail = previous.then(() => current);
+  inProcessFileLocks.set(canonicalFilePath, tail);
+  await previous;
+  try {
+    const releaseCrossProcess = await acquireCrossProcessFileLock(canonicalFilePath);
+    try {
+      return await taskArg(canonicalFilePath);
+    } finally {
+      await releaseCrossProcess();
+    }
+  } finally {
+    releaseInProcess();
+    if (inProcessFileLocks.get(canonicalFilePath) === tail) {
+      inProcessFileLocks.delete(canonicalFilePath);
+    }
+  }
+};
+
+export const getDefaultOpenAiChatGptAuthPath = (
+  source: TOpenAiChatGptAuthSource,
+  homeDir = plugins.os.homedir(),
+): string => {
+  switch (source) {
+    case 'smartai':
+      return plugins.path.join(homeDir, '.git.zone', 'ide', 'openai-chatgpt-auth.json');
+    case 'opencode':
+      return plugins.path.join(homeDir, '.local', 'share', 'opencode', 'auth.json');
+    case 'codex':
+      return plugins.path.join(homeDir, '.codex', 'auth.json');
+    default:
+      throw new Error(`Unsupported OpenAI ChatGPT auth source: ${source satisfies never}`);
+  }
+};
+
+export const normalizeOpenAiChatGptAuth = (
+  input: unknown,
+  format: TOpenAiChatGptAuthFileFormat = 'auto',
+): IOpenAiChatGptTokenData | undefined => {
+  if (format === 'auto') {
+    return normalizeOpenAiChatGptAuth(input, 'smartai')
+      ?? normalizeOpenAiChatGptAuth(input, 'opencode')
+      ?? normalizeOpenAiChatGptAuth(input, 'codex');
+  }
+
+  if (!isRecord(input)) return undefined;
+  if (format === 'opencode') {
+    return normalizeOpenCodeAuth(input);
+  }
+  return normalizeTokenObject(isRecord(input.tokens) ? input.tokens : input);
+};
+
+const readBoundedAuthFileText = async (filePathArg: string): Promise<string> => {
+  const canonicalFilePath = await plugins.fs.realpath(filePathArg);
+  let handle: plugins.FileHandle | undefined;
+  try {
+    handle = await plugins.fs.open(
+      canonicalFilePath,
+      plugins.fsConstants.O_RDONLY | plugins.fsConstants.O_NONBLOCK,
+    );
+    const stat = await handle.stat();
+    if (!stat.isFile() || stat.size > maximumAuthFileBytes) {
+      throw new Error('Authentication file is not a bounded regular file.');
+    }
+    const bytes = new Uint8Array(maximumAuthFileBytes + 1);
+    let offset = 0;
+    while (offset < bytes.byteLength) {
+      const result = await handle.read(bytes, offset, bytes.byteLength - offset, offset);
+      if (result.bytesRead === 0) break;
+      offset += result.bytesRead;
+    }
+    if (offset > maximumAuthFileBytes) {
+      throw new Error('Authentication file exceeds its size limit.');
+    }
+    return new TextDecoder().decode(bytes.subarray(0, offset));
+  } finally {
+    await handle?.close();
+  }
+};
+
+const readBoundedAuthJson = async (filePathArg: string): Promise<unknown> =>
+  JSON.parse(await readBoundedAuthFileText(filePathArg)) as unknown;
+
+export const readOpenAiChatGptAuthFile = async (
+  filePath: string,
+  format: TOpenAiChatGptAuthFileFormat = 'auto',
+): Promise<IOpenAiChatGptTokenData | undefined> => {
+  const parsed = await readBoundedAuthJson(filePath);
+  return normalizeOpenAiChatGptAuth(parsed, format);
+};
+
+export const inspectOpenAiChatGptAuthSources = async (
+  options: IInspectOpenAiChatGptAuthSourcesOptions = {},
+): Promise<IOpenAiChatGptAuthSourceInspection[]> => {
+  const now = options.now ?? new Date();
+  const sourceConfigs = normalizeSourceConfigs(options.sources, options.homeDir);
+  return Promise.all(sourceConfigs.map(async (sourceConfig) => {
+    try {
+      const tokenData = await readOpenAiChatGptAuthFile(sourceConfig.filePath!, sourceConfig.format ?? sourceConfig.source);
+      if (!tokenData) {
+        return {
+          source: sourceConfig.source,
+          filePath: sourceConfig.filePath!,
+          exists: true,
+          usable: false,
+          error: 'No OpenAI ChatGPT auth token found in file.',
+        };
+      }
+      return toInspection(sourceConfig.source, sourceConfig.filePath!, tokenData, now);
+    } catch (error) {
+      const nodeError = error as NodeJS.ErrnoException;
+      return {
+        source: sourceConfig.source,
+        filePath: sourceConfig.filePath!,
+        exists: nodeError.code !== 'ENOENT',
+        usable: false,
+        error: nodeError.code === 'ENOENT' ? undefined : 'Authentication file could not be read.',
+      };
+    }
+  }));
+};
+
+export const resolveOpenAiChatGptAuth = async (
+  options: IResolveOpenAiChatGptAuthOptions = {},
+): Promise<IResolvedOpenAiChatGptAuth | undefined> => {
+  const now = options.now ?? new Date();
+  const sourceConfigs = normalizeSourceConfigs(options.sources, options.homeDir);
+  const refresh = options.refresh ?? 'ifNeeded';
+
+  for (const sourceConfig of sourceConfigs) {
+    let tokenData: IOpenAiChatGptTokenData | undefined;
+    try {
+      tokenData = await readOpenAiChatGptAuthFile(sourceConfig.filePath!, sourceConfig.format ?? sourceConfig.source);
+    } catch (error) {
+      const nodeError = error as NodeJS.ErrnoException;
+      if (nodeError.code === 'ENOENT') continue;
+      continue;
+    }
+    if (!tokenData) continue;
+
+    const shouldRefresh = refresh === 'ifNeeded' && shouldRefreshToken(tokenData, now);
+    const writeBack = sourceConfig.writeBack ?? options.writeBack?.[sourceConfig.source] ?? sourceConfig.source === 'smartai';
+    if (writeBack && sourceConfig.format === 'auto') {
+      throw new Error('The auto auth-file format cannot be used for write-back.');
+    }
+    if (!shouldRefresh) {
+      return { source: sourceConfig.source, filePath: sourceConfig.filePath!, tokenData, refreshed: false };
+    }
+
+    if (!writeBack) {
+      if (!isExpired(tokenData, now)) {
+        return { source: sourceConfig.source, filePath: sourceConfig.filePath!, tokenData, refreshed: false };
+      }
+      continue;
+    }
+
+    try {
+      const resolved = await withAuthFileLock(sourceConfig.filePath!, async (canonicalFilePath) => {
+        const latestTokenData = await readOpenAiChatGptAuthFile(
+          canonicalFilePath,
+          sourceConfig.format ?? sourceConfig.source,
+        );
+        if (!latestTokenData) return undefined;
+        if (!shouldRefreshToken(latestTokenData, now)) {
+          return {
+            source: sourceConfig.source,
+            filePath: sourceConfig.filePath!,
+            tokenData: latestTokenData,
+            refreshed: false,
+          };
+        }
+        const refreshed = await refreshOpenAiChatGptTokenData(
+          latestTokenData,
+          options.authOptions ?? {},
+        );
+        await writeOpenAiChatGptAuthFileUnlocked(
+          canonicalFilePath,
+          refreshed,
+          sourceConfig.format ?? sourceConfig.source,
+        );
+        return {
+          source: sourceConfig.source,
+          filePath: sourceConfig.filePath!,
+          tokenData: refreshed,
+          refreshed: true,
+        };
+      });
+      if (resolved) return resolved;
+    } catch {
+      continue;
+    }
+  }
+
+  return undefined;
+};
+
+export const writeOpenAiChatGptAuthFile = async (
+  filePath: string,
+  tokenData: IOpenAiChatGptTokenData,
+  format: TOpenAiChatGptAuthFileFormat = 'smartai',
+): Promise<void> => {
+  if (format === 'auto') throw new Error('The auto auth-file format cannot be written.');
+  return withAuthFileLock(filePath, async (canonicalFilePath) => {
+    await writeOpenAiChatGptAuthFileUnlocked(canonicalFilePath, tokenData, format);
+  });
+};
+
+const writeOpenAiChatGptAuthFileUnlocked = async (
+  filePath: string,
+  tokenData: IOpenAiChatGptTokenData,
+  format: TOpenAiChatGptAuthFileFormat,
+): Promise<void> => {
+  const current = await readJsonFileIfExists(filePath);
+  const payload = format === 'opencode'
+    ? toOpenCodeAuthFile(current, tokenData)
+    : format === 'codex'
+      ? toCodexAuthFile(current, tokenData)
+      : toSmartAiAuthFile(tokenData);
+  await writeJsonAtomic(filePath, payload);
+};
+
+const normalizeSourceConfigs = (
+  sources: Array<TOpenAiChatGptAuthSource | IOpenAiChatGptAuthSourceConfig> | undefined,
+  homeDir = plugins.os.homedir(),
+): INormalizedOpenAiChatGptAuthSourceConfig[] => {
+  return (sources ?? defaultSources).map((sourceInput) => {
+    const sourceConfig = typeof sourceInput === 'string' ? { source: sourceInput } : sourceInput;
+    return {
+      source: sourceConfig.source,
+      filePath: sourceConfig.filePath ?? getDefaultOpenAiChatGptAuthPath(sourceConfig.source, homeDir),
+      format: sourceConfig.format ?? sourceConfig.source,
+      writeBack: sourceConfig.writeBack,
+    };
+  });
+};
+
+const toInspection = (
+  source: TOpenAiChatGptAuthSource,
+  filePath: string,
+  tokenData: IOpenAiChatGptTokenData,
+  now: Date,
+): IOpenAiChatGptAuthSourceInspection => {
+  const expired = isExpired(tokenData, now);
+  return {
+    source,
+    filePath,
+    exists: true,
+    usable: !expired,
+    expired,
+    accountId: tokenData.accountId ?? tokenData.tokenInfo.chatgptAccountId,
+    email: tokenData.tokenInfo.email,
+    plan: tokenData.tokenInfo.chatgptPlanType,
+    expiresAt: tokenData.tokenInfo.expiresAt,
+  };
+};
+
+const normalizeTokenObject = (input: Record<string, unknown>): IOpenAiChatGptTokenData | undefined => {
+  const accessToken = stringValue(input.accessToken) ?? stringValue(input.access_token);
+  const refreshToken = stringValue(input.refreshToken) ?? stringValue(input.refresh_token);
+  const idToken = stringValue(input.idToken) ?? stringValue(input.id_token);
+  const accountId = stringValue(input.accountId) ?? stringValue(input.account_id);
+  return createTokenDataFromValues({ accessToken, refreshToken, idToken, accountId });
+};
+
+const normalizeOpenCodeAuth = (input: Record<string, unknown>): IOpenAiChatGptTokenData | undefined => {
+  if (!isRecord(input.openai)) return undefined;
+  const accessToken = stringValue(input.openai.access);
+  const refreshToken = stringValue(input.openai.refresh);
+  const accountId = stringValue(input.openai.accountId);
+  const expiresAt = typeof input.openai.expires === 'number' ? new Date(input.openai.expires).toISOString() : undefined;
+  return createTokenDataFromValues({ accessToken, refreshToken, accountId, fallbackExpiresAt: expiresAt });
+};
+
+const createTokenDataFromValues = (input: {
+  accessToken?: string;
+  refreshToken?: string;
+  idToken?: string;
+  accountId?: string;
+  fallbackExpiresAt?: string;
+}): IOpenAiChatGptTokenData | undefined => {
+  if (!input.accessToken || !input.refreshToken) return undefined;
+  const parseToken = input.idToken ?? input.accessToken;
+  const tokenInfo = parseTokenInfo(parseToken, input.accountId, input.fallbackExpiresAt);
+  if (
+    input.accountId !== undefined
+    && tokenInfo.chatgptAccountId !== undefined
+    && input.accountId !== tokenInfo.chatgptAccountId
+  ) {
+    return undefined;
+  }
+  const accountId = tokenInfo.chatgptAccountId ?? input.accountId;
+  return {
+    accessToken: input.accessToken,
+    refreshToken: input.refreshToken,
+    idToken: input.idToken,
+    accountId,
+    tokenInfo: { ...tokenInfo, chatgptAccountId: accountId },
+  };
+};
+
+const parseTokenInfo = (token: string, accountId?: string, fallbackExpiresAt?: string): IOpenAiChatGptTokenInfo => {
+  try {
+    const tokenInfo = parseOpenAiChatGptTokenInfo(token);
+    return {
+      ...tokenInfo,
+      chatgptAccountId: tokenInfo.chatgptAccountId ?? accountId,
+      expiresAt: tokenInfo.expiresAt ?? fallbackExpiresAt,
+    };
+  } catch {
+    return {
+      chatgptAccountId: accountId,
+      chatgptAccountIsFedramp: false,
+      expiresAt: fallbackExpiresAt,
+      rawJwt: token,
+    };
+  }
+};
+
+const toSmartAiAuthFile = (tokenData: IOpenAiChatGptTokenData): Record<string, unknown> => ({
+  accessToken: tokenData.accessToken,
+  refreshToken: tokenData.refreshToken,
+  idToken: tokenData.idToken,
+  accountId: tokenData.accountId,
+  tokenInfo: tokenData.tokenInfo,
+});
+
+const toCodexAuthFile = (current: Record<string, unknown>, tokenData: IOpenAiChatGptTokenData): Record<string, unknown> => ({
+  ...current,
+  OPENAI_API_KEY: current.OPENAI_API_KEY ?? null,
+  tokens: {
+    ...(isRecord(current.tokens) ? current.tokens : {}),
+    id_token: tokenData.idToken,
+    access_token: tokenData.accessToken,
+    refresh_token: tokenData.refreshToken,
+    account_id: tokenData.accountId ?? tokenData.tokenInfo.chatgptAccountId,
+  },
+  last_refresh: new Date().toISOString(),
+});
+
+const toOpenCodeAuthFile = (current: Record<string, unknown>, tokenData: IOpenAiChatGptTokenData): Record<string, unknown> => ({
+  ...current,
+  openai: {
+    ...(isRecord(current.openai) ? current.openai : {}),
+    type: 'oauth',
+    refresh: tokenData.refreshToken,
+    access: tokenData.accessToken,
+    expires: tokenData.tokenInfo.expiresAt ? Date.parse(tokenData.tokenInfo.expiresAt) : undefined,
+    accountId: tokenData.accountId ?? tokenData.tokenInfo.chatgptAccountId,
+  },
+});
+
+const shouldRefreshToken = (tokenData: IOpenAiChatGptTokenData, now: Date): boolean => {
+  if (!tokenData.tokenInfo.expiresAt) return false;
+  return Date.parse(tokenData.tokenInfo.expiresAt) - now.getTime() < refreshWindowMs;
+};
+
+const isExpired = (tokenData: IOpenAiChatGptTokenData, now: Date): boolean => {
+  if (!tokenData.tokenInfo.expiresAt) return false;
+  return Date.parse(tokenData.tokenInfo.expiresAt) <= now.getTime();
+};
+
+const readJsonFileIfExists = async (filePath: string): Promise<Record<string, unknown>> => {
+  try {
+    const parsed = await readBoundedAuthJson(filePath);
+    return isRecord(parsed) ? parsed : {};
+  } catch (error) {
+    const nodeError = error as NodeJS.ErrnoException;
+    if (nodeError.code === 'ENOENT') return {};
+    throw error;
+  }
+};
+
+const writeJsonAtomic = async (filePath: string, payload: unknown): Promise<void> => {
+  const tempPath = `${filePath}.${plugins.crypto.randomUUID()}.tmp`;
+  await plugins.fs.mkdir(plugins.path.dirname(filePath), { recursive: true, mode: 0o700 });
+  try {
+    await plugins.fs.writeFile(tempPath, `${JSON.stringify(payload, undefined, 2)}\n`, {
+      flag: 'wx',
+      mode: 0o600,
+    });
+    await plugins.fs.rename(tempPath, filePath);
+  } finally {
+    await plugins.fs.unlink(tempPath).catch((errorArg: NodeJS.ErrnoException) => {
+      if (errorArg.code !== 'ENOENT') throw errorArg;
+    });
+  }
+};
+
+const isRecord = (value: unknown): value is Record<string, unknown> => {
+  return !!value && typeof value === 'object' && !Array.isArray(value);
+};
+
+const stringValue = (value: unknown): string | undefined => {
+  return typeof value === 'string' && value.length > 0 ? value : undefined;
+};

package/ts_openai_auth_files/plugins.ts

@@ -0,0 +1,13 @@
+// node native scope
+import * as crypto from 'node:crypto';
+import { constants as fsConstants } from 'node:fs';
+import * as fs from 'node:fs/promises';
+import type { FileHandle } from 'node:fs/promises';
+import * as os from 'node:os';
+import * as path from 'node:path';
+
+// third-party scope
+import * as properLockfile from 'proper-lockfile';
+
+export { crypto, fs, fsConstants, os, path, properLockfile };
+export type { FileHandle };

package/ts_openai_auth_files/readme.md

@@ -0,0 +1,37 @@
+Explicit interoperability with existing Codex, OpenCode and GitZone IDE credential files.
+
+Part of the [FlexHarness toolbox](https://code.foss.global/modelprofile.com/flexharness).
+Install the components your project uses. Provider adapters are registered explicitly;
+the agent and harness do not install or register vendor SDKs.
+
+```sh
+pnpm add @modelprofile.com/flexharness-providers
+```
+
+See the [toolbox usage and migration guide](https://code.foss.global/modelprofile.com/flexharness#readme)
+for composition examples and the SmartAI/SmartAgent migration map.
+
+## Issue Reporting and Security
+
+Report issues and security concerns through [community.foss.global](https://community.foss.global).
+
+## License and Legal Information
+
+This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the repository license file.
+
+**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.
+
+### Trademarks
+
+This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.
+
+Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.
+
+### Company Information
+
+Task Venture Capital GmbH<br>
+Registered at District Court Bremen HRB 35230 HB, Germany
+
+For any legal inquiries or further information, please contact us via email at hello@task.vc.
+
+By using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.

package/ts_providers/anthropic/index.ts

@@ -0,0 +1,20 @@
+import * as plugins from './plugins.js';
+import { createAnthropicCachingMiddleware } from './smartai.middleware.anthropic.js';
+
+export interface IAnthropicModelOptions extends plugins.ISmartAiOptions {
+  provider: 'anthropic';
+  promptCaching?: boolean | plugins.ISmartAiCacheOptions;
+}
+
+export const createAnthropicModelProvider = (): plugins.IModelProvider<IAnthropicModelOptions> => ({
+  id: 'anthropic',
+  getModel: (options) => {
+    const model = plugins.createAnthropic({ apiKey: options.apiKey })(options.model);
+    if (options.promptCaching === false) return model;
+    return plugins.wrapLanguageModel({ model, middleware: createAnthropicCachingMiddleware(
+      typeof options.promptCaching === 'object' ? options.promptCaching : undefined,
+    ) });
+  },
+});
+
+export { createAnthropicCachingMiddleware };

package/ts_providers/anthropic/plugins.ts

@@ -0,0 +1,4 @@
+import { createAnthropic } from '@ai-sdk/anthropic';
+import { wrapLanguageModel } from 'ai';
+export { createAnthropic, wrapLanguageModel };
+export type { IModelProvider, ISmartAiOptions, ISmartAiCacheOptions } from '@modelprofile.com/flexharness-models';

package/ts_providers/anthropic/readme.md

@@ -0,0 +1,37 @@
+Explicit anthropic model provider for FlexHarness models and the AI SDK.
+
+Part of the [FlexHarness toolbox](https://code.foss.global/modelprofile.com/flexharness).
+Install the components your project uses. Provider adapters are registered explicitly;
+the agent and harness do not install or register vendor SDKs.
+
+```sh
+pnpm add @modelprofile.com/flexharness-providers
+```
+
+See the [toolbox usage and migration guide](https://code.foss.global/modelprofile.com/flexharness#readme)
+for composition examples and the SmartAI/SmartAgent migration map.
+
+## Issue Reporting and Security
+
+Report issues and security concerns through [community.foss.global](https://community.foss.global).
+
+## License and Legal Information
+
+This repository contains open-source code licensed under the MIT License. A copy of the license can be found in the repository license file.
+
+**Please note:** The MIT License does not grant permission to use the trade names, trademarks, service marks, or product names of the project, except as required for reasonable and customary use in describing the origin of the work and reproducing the content of the NOTICE file.
+
+### Trademarks
+
+This project is owned and maintained by Task Venture Capital GmbH. The names and logos associated with Task Venture Capital GmbH and any related products or services are trademarks of Task Venture Capital GmbH or third parties, and are not included within the scope of the MIT license granted herein.
+
+Use of these trademarks must comply with Task Venture Capital GmbH's Trademark Guidelines or the guidelines of the respective third-party owners, and any usage must be approved in writing. Third-party trademarks used herein are the property of their respective owners and used only in a descriptive manner, e.g. for an implementation of an API or similar.
+
+### Company Information
+
+Task Venture Capital GmbH<br>
+Registered at District Court Bremen HRB 35230 HB, Germany
+
+For any legal inquiries or further information, please contact us via email at hello@task.vc.
+
+By using this repository, you acknowledge that you have read this section, agree to comply with its terms, and understand that the licensing of the code does not imply endorsement by Task Venture Capital GmbH of any derivative works.

package/ts_providers/anthropic/smartai.middleware.anthropic.ts

@@ -0,0 +1,12 @@
+import type { LanguageModelV4Middleware } from '@ai-sdk/provider';
+import { createSmartAiCachingMiddleware } from '@modelprofile.com/flexharness-models';
+import type { ISmartAiCacheOptions } from '@modelprofile.com/flexharness-models';
+
+/**
+ * Creates middleware that adds Anthropic prompt caching directives.
+ * Marks the last system message and last user message with ephemeral cache control,
+ * reducing input token cost and latency on repeated calls.
+ */
+export function createAnthropicCachingMiddleware(options: ISmartAiCacheOptions = {}): LanguageModelV4Middleware {
+  return createSmartAiCachingMiddleware({ ...options, provider: 'anthropic' });
+}