@motebit/sdk 0.7.0 → 0.8.0

package/dist/provider-mode.js

@@ -0,0 +1,179 @@
+// === Provider Mode (Three-Mode Architecture) ===
+//
+// User-intent-based provider config — matches the pattern of settlement rails:
+// user picks the capability class, the system resolves the concrete vendor.
+//
+// Flat unions like "ollama" | "anthropic" | "openai" | "hybrid" mix implementation
+// details with user intent. "Hybrid" is an implementation detail, not a user choice.
+// "Ollama" is a vendor name, not a capability class.
+//
+// All surfaces (web, mobile, desktop, cli) persist and exchange this shape.
+// Platform-specific sub-options live inside each mode's discriminated variant.
+// === Migration ===
+//
+// Legacy shapes, in order of historical appearance:
+//
+//   Web (apps/web/src/storage.ts):
+//     { type: "anthropic" | "openai" | "ollama" | "webllm" | "proxy",
+//       apiKey?, model, baseUrl?, proxyToken?, maxTokens?, temperature? }
+//
+//   Mobile (apps/mobile/src/mobile-app.ts):
+//     { provider: "ollama" | "anthropic" | "openai" | "hybrid" | "proxy" | "local",
+//       localBackend?: "apple-fm" | "mlx",
+//       model?, apiKey?, ollamaEndpoint?, maxTokens? }
+//
+//   Desktop (apps/desktop/src/index.ts):
+//     { provider: "anthropic" | "ollama" | "openai" | "proxy" | "hybrid",
+//       model?, apiKey?, maxTokens? }
+//
+//   CLI (apps/cli/src/config.ts):
+//     { default_provider?: "anthropic" | "openai" | "ollama",
+//       default_model?, api_key? (in keyring) }
+/**
+ * Heuristic: is this URL pointing at a local inference server?
+ * Shared across all surfaces so the migration behaves identically everywhere.
+ */
+export function isLocalServerUrl(url) {
+    if (!url)
+        return false;
+    try {
+        const u = new URL(url);
+        const host = u.hostname.toLowerCase();
+        return (host === "localhost" ||
+            host === "127.0.0.1" ||
+            host === "::1" ||
+            host === "0.0.0.0" ||
+            host.endsWith(".local") ||
+            /^10\./.test(host) ||
+            /^192\.168\./.test(host) ||
+            /^172\.(1[6-9]|2\d|3[01])\./.test(host));
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Migrate any legacy provider config shape to `UnifiedProviderConfig`.
+ *
+ * Rules:
+ * - `hybrid` and `proxy` map to `motebit-cloud` (the product).
+ * - `ollama` with a localhost URL maps to `on-device/local-server`.
+ * - `ollama` with a remote URL maps to `on-device/local-server` with that endpoint preserved.
+ * - `anthropic` / `openai` / `google` map to `byok` with that vendor.
+ * - Mobile `local` with `localBackend` maps to `on-device` with that backend.
+ * - If input is already a `UnifiedProviderConfig` (has `mode`), it passes through.
+ *
+ * Returns `null` only if the input is entirely unrecognizable.
+ */
+export function migrateLegacyProvider(legacy) {
+    if (!legacy)
+        return null;
+    // Already-new shape — passthrough with light validation.
+    if (legacy.mode === "on-device" || legacy.mode === "motebit-cloud" || legacy.mode === "byok") {
+        return legacy;
+    }
+    const apiKey = legacy.apiKey ?? legacy.api_key;
+    const baseUrl = legacy.baseUrl ?? legacy.base_url;
+    const proxyToken = legacy.proxyToken ?? legacy.proxy_token;
+    const maxTokens = legacy.maxTokens ?? legacy.max_tokens;
+    const temperature = legacy.temperature;
+    const model = legacy.model ?? legacy.default_model;
+    // Normalize the discriminator across shapes.
+    const kind = legacy.type ?? legacy.provider ?? legacy.default_provider;
+    if (!kind)
+        return null;
+    switch (kind) {
+        case "proxy":
+        case "hybrid":
+        case "motebit-cloud":
+            return {
+                mode: "motebit-cloud",
+                model,
+                proxyToken,
+                baseUrl,
+                maxTokens,
+                temperature,
+            };
+        case "anthropic":
+            return {
+                mode: "byok",
+                vendor: "anthropic",
+                apiKey: apiKey ?? "",
+                model,
+                baseUrl,
+                maxTokens,
+                temperature,
+            };
+        case "openai":
+            return {
+                mode: "byok",
+                vendor: "openai",
+                apiKey: apiKey ?? "",
+                model,
+                baseUrl,
+                maxTokens,
+                temperature,
+            };
+        case "google":
+            return {
+                mode: "byok",
+                vendor: "google",
+                apiKey: apiKey ?? "",
+                model,
+                baseUrl,
+                maxTokens,
+                temperature,
+            };
+        case "ollama": {
+            // Ollama is always a local server — endpoint may or may not be localhost.
+            const endpoint = baseUrl ?? legacy.ollamaEndpoint ?? legacy.endpoint;
+            return {
+                mode: "on-device",
+                backend: "local-server",
+                model,
+                endpoint,
+                maxTokens,
+                temperature,
+            };
+        }
+        case "webllm":
+            return {
+                mode: "on-device",
+                backend: "webllm",
+                model,
+                maxTokens,
+                temperature,
+            };
+        case "local": {
+            // Mobile legacy: `local` with `localBackend` sub-option.
+            const backend = (() => {
+                switch (legacy.localBackend) {
+                    case "apple-fm":
+                        return "apple-fm";
+                    case "mlx":
+                        return "mlx";
+                    case "local-server":
+                        return "local-server";
+                    default:
+                        return "mlx";
+                }
+            })();
+            return {
+                mode: "on-device",
+                backend,
+                model,
+                endpoint: legacy.ollamaEndpoint ?? legacy.endpoint,
+                maxTokens,
+                temperature,
+            };
+        }
+        default:
+            return null;
+    }
+}
+// === Defaults ===
+/** Sensible default when no config has ever been persisted. */
+export function defaultProviderConfig() {
+    return { mode: "motebit-cloud" };
+}
+//# sourceMappingURL=provider-mode.js.map

package/dist/provider-mode.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-mode.js","sourceRoot":"","sources":["../src/provider-mode.ts"],"names":[],"mappings":"AAAA,kDAAkD;AAClD,EAAE;AACF,+EAA+E;AAC/E,4EAA4E;AAC5E,EAAE;AACF,mFAAmF;AACnF,qFAAqF;AACrF,qDAAqD;AACrD,EAAE;AACF,4EAA4E;AAC5E,+EAA+E;AAyE/E,oBAAoB;AACpB,EAAE;AACF,oDAAoD;AACpD,EAAE;AACF,mCAAmC;AACnC,sEAAsE;AACtE,0EAA0E;AAC1E,EAAE;AACF,4CAA4C;AAC5C,oFAAoF;AACpF,2CAA2C;AAC3C,uDAAuD;AACvD,EAAE;AACF,yCAAyC;AACzC,0EAA0E;AAC1E,sCAAsC;AACtC,EAAE;AACF,kCAAkC;AAClC,8DAA8D;AAC9D,gDAAgD;AAEhD;;;GAGG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAA8B;IAC7D,IAAI,CAAC,GAAG;QAAE,OAAO,KAAK,CAAC;IACvB,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;QACvB,MAAM,IAAI,GAAG,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACtC,OAAO,CACL,IAAI,KAAK,WAAW;YACpB,IAAI,KAAK,WAAW;YACpB,IAAI,KAAK,KAAK;YACd,IAAI,KAAK,SAAS;YAClB,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACvB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC;YAClB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC;YACxB,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,CACxC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAkCD;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,qBAAqB,CACnC,MAA+C;IAE/C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,yDAAyD;IACzD,IAAI,MAAM,CAAC,IAAI,KAAK,WAAW,IAAI,MAAM,CAAC,IAAI,KAAK,eAAe,IAAI,MAAM,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;QAC7F,OAAO,MAA0C,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,OAAO,CAAC;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,MAAM,CAAC,WAAW,CAAC;IAC3D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,UAAU,CAAC;IACxD,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAC;IACvC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,aAAa,CAAC;IAEnD,6CAA6C;IAC7C,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,gBAAgB,CAAC;IAEvE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IAEvB,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,OAAO,CAAC;QACb,KAAK,QAAQ,CAAC;QACd,KAAK,eAAe;YAClB,OAAO;gBACL,IAAI,EAAE,eAAe;gBACrB,KAAK;gBACL,UAAU;gBACV,OAAO;gBACP,SAAS;gBACT,WAAW;aACZ,CAAC;QAEJ,KAAK,WAAW;YACd,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,WAAW;gBACnB,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,KAAK;gBACL,OAAO;gBACP,SAAS;gBACT,WAAW;aACZ,CAAC;QAEJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,KAAK;gBACL,OAAO;gBACP,SAAS;gBACT,WAAW;aACZ,CAAC;QAEJ,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,MAAM;gBACZ,MAAM,EAAE,QAAQ;gBAChB,MAAM,EAAE,MAAM,IAAI,EAAE;gBACpB,KAAK;gBACL,OAAO;gBACP,SAAS;gBACT,WAAW;aACZ,CAAC;QAEJ,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,0EAA0E;YAC1E,MAAM,QAAQ,GAAG,OAAO,IAAI,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ,CAAC;YACrE,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,cAAc;gBACvB,KAAK;gBACL,QAAQ;gBACR,SAAS;gBACT,WAAW;aACZ,CAAC;QACJ,CAAC;QAED,KAAK,QAAQ;YACX,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE,QAAQ;gBACjB,KAAK;gBACL,SAAS;gBACT,WAAW;aACZ,CAAC;QAEJ,KAAK,OAAO,CAAC,CAAC,CAAC;YACb,yDAAyD;YACzD,MAAM,OAAO,GAAG,CAAC,GAAoB,EAAE;gBACrC,QAAQ,MAAM,CAAC,YAAY,EAAE,CAAC;oBAC5B,KAAK,UAAU;wBACb,OAAO,UAAU,CAAC;oBACpB,KAAK,KAAK;wBACR,OAAO,KAAK,CAAC;oBACf,KAAK,cAAc;wBACjB,OAAO,cAAc,CAAC;oBACxB;wBACE,OAAO,KAAK,CAAC;gBACjB,CAAC;YACH,CAAC,CAAC,EAAE,CAAC;YACL,OAAO;gBACL,IAAI,EAAE,WAAW;gBACjB,OAAO;gBACP,KAAK;gBACL,QAAQ,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM,CAAC,QAAQ;gBAClD,SAAS;gBACT,WAAW;aACZ,CAAC;QACJ,CAAC;QAED;YACE,OAAO,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED,mBAAmB;AAEnB,+DAA+D;AAC/D,MAAM,UAAU,qBAAqB;IACnC,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;AACnC,CAAC"}

package/dist/provider-resolver.d.ts

@@ -0,0 +1,179 @@
+import type { UnifiedProviderConfig, ByokVendor, OnDeviceBackend } from "./provider-mode.js";
+/**
+ * Google's OpenAI-compatible chat completions endpoint. Used when the user
+ * picks Google as a BYOK vendor — Google is dispatched as OpenAI-compat
+ * because every cloud client (web, mobile, desktop, cli) already understands
+ * the OpenAI wire protocol. Single source of truth.
+ */
+export declare const GOOGLE_OPENAI_COMPAT_URL = "https://generativelanguage.googleapis.com/v1beta/openai";
+/** Canonical Anthropic API base URL. */
+export declare const ANTHROPIC_CANONICAL_URL = "https://api.anthropic.com";
+/** Canonical OpenAI API base URL. */
+export declare const OPENAI_CANONICAL_URL = "https://api.openai.com/v1";
+/** Default Motebit Cloud relay URL. Surfaces may override via env. */
+export declare const DEFAULT_MOTEBIT_CLOUD_URL = "https://api.motebit.com";
+/** Default WebLLM model when none specified — small enough to fit on most devices. */
+export declare const DEFAULT_WEBLLM_MODEL = "Llama-3.2-3B-Instruct-q4f16_1-MLC";
+/**
+ * Normalize a local-inference server URL so that it points at the
+ * OpenAI-compatible chat completions base path. Auto-appends `/v1` if
+ * the URL doesn't already contain it. Idempotent.
+ *
+ * Every supported local server (Ollama via its OpenAI shim, LM Studio,
+ * llama.cpp, Jan, vLLM, text-generation-webui) exposes
+ * `{base}/v1/chat/completions`. Users typically type just the host
+ * (`http://localhost:11434`) — this helper completes the path so the
+ * client can call `{normalized}/chat/completions` directly.
+ *
+ * Examples:
+ *   "http://localhost:11434"      → "http://localhost:11434/v1"
+ *   "http://localhost:11434/v1"   → "http://localhost:11434/v1"
+ *   "http://localhost:1234/"      → "http://localhost:1234/v1"
+ *   "http://192.168.1.42:11434"   → "http://192.168.1.42:11434/v1"
+ *   "/api/ollama"                 → "/api/ollama/v1"  (dev proxy path)
+ */
+export declare function normalizeLocalServerEndpoint(url: string): string;
+/** Default chat model for a BYOK vendor. */
+export declare function defaultModelForVendor(vendor: ByokVendor): string;
+/**
+ * Canonical (vendor-published) base URL for a BYOK vendor. Surfaces that
+ * need to substitute a CORS proxy or dev-mode path receive this canonical
+ * URL via the resolver and may rewrite it.
+ */
+export declare function canonicalVendorBaseUrl(vendor: ByokVendor): string;
+/**
+ * Discriminated union describing what concrete provider class the surface
+ * should instantiate, with all decision logic already resolved. The surface's
+ * job is reduced to a transport switch + class construction.
+ */
+export type ProviderSpec = CloudProviderSpec | WebLLMProviderSpec | AppleFoundationModelsSpec | MlxProviderSpec;
+/**
+ * Cloud HTTP provider — used for Anthropic, OpenAI, Google (via OpenAI-compat),
+ * Motebit Cloud (anthropic protocol via relay), and OpenAI-compat local
+ * servers (LM Studio, llama.cpp, etc.).
+ *
+ * The `wireProtocol` discriminates between Anthropic's messages API and
+ * OpenAI's chat completions API. The surface uses this to pick the right
+ * concrete class (`AnthropicProvider` or `OpenAIProvider`) to instantiate.
+ */
+export interface CloudProviderSpec {
+    kind: "cloud";
+    /** Wire protocol family this client speaks. */
+    wireProtocol: "anthropic" | "openai";
+    /** API key to use. Empty string for motebit-cloud (server injects). */
+    apiKey: string;
+    model: string;
+    /** Already-resolved base URL — env.cloudBaseUrl has been applied. */
+    baseUrl: string;
+    maxTokens?: number;
+    temperature?: number;
+    /** Extra HTTP headers (e.g., x-proxy-token for motebit-cloud). */
+    extraHeaders?: Record<string, string>;
+}
+/** Browser-only WebLLM provider — runs in-browser via WebGPU. */
+export interface WebLLMProviderSpec {
+    kind: "webllm";
+    model: string;
+    maxTokens?: number;
+    temperature?: number;
+}
+/** Apple Foundation Models — iOS 26+ / macOS 26+ only. */
+export interface AppleFoundationModelsSpec {
+    kind: "apple-fm";
+    model?: string;
+    maxTokens?: number;
+}
+/** MLX runtime — Apple Silicon only. */
+export interface MlxProviderSpec {
+    kind: "mlx";
+    model?: string;
+    maxTokens?: number;
+}
+/**
+ * Per-surface environment that captures the only things the resolver can't
+ * decide on its own: platform-specific URL routing, which on-device backends
+ * are physically supported, and motebit-cloud session state.
+ *
+ * Each surface constructs one of these once (or per call if the session
+ * state changes) and passes it to `resolveProviderSpec`. The interface is
+ * intentionally narrow — anything that can be computed from a
+ * `UnifiedProviderConfig` alone stays inside the resolver.
+ */
+export interface ResolverEnv {
+    /**
+     * Resolve the actual base URL for a cloud provider given its canonical
+     * vendor URL. Most surfaces return `canonical` unchanged. Browser surfaces
+     * substitute a CORS proxy for vendors that block direct browser calls.
+     * Tauri dev mode substitutes a Vite proxy path.
+     *
+     * The function form (rather than a static map) lets surfaces compute the
+     * substitution lazily based on runtime state (e.g., `isTauri`).
+     */
+    cloudBaseUrl(wireProtocol: "anthropic" | "openai", canonical: string): string;
+    /**
+     * Default URL for the on-device local-server backend when the user
+     * hasn't supplied an endpoint. The resolver auto-appends `/v1` via
+     * `normalizeLocalServerEndpoint`, so this can be a bare host. Use
+     * `localServerBaseUrl` to translate the user-supplied URL into a
+     * surface-specific transport URL (e.g., a Vite dev proxy path).
+     */
+    defaultLocalServerUrl: string;
+    /**
+     * Optional translator from a logical local-server URL into the actual URL
+     * the provider should call. Most surfaces return the input unchanged.
+     * Desktop dev mode substitutes the Vite proxy path `/api/ollama` for any
+     * Ollama-shaped logical URL — but the dispatch decision (Ollama-native vs
+     * OpenAI-compat) is made BEFORE this substitution, on the logical URL.
+     *
+     * This separation lets surfaces use proxy/rewrite paths without losing
+     * the resolver's ability to dispatch on the user's intent.
+     */
+    localServerBaseUrl?(logical: string): string;
+    /**
+     * Which on-device backends this surface can physically run.
+     *   - web: webllm, local-server
+     *   - mobile: apple-fm, mlx, local-server
+     *   - desktop: local-server (today; could grow)
+     *   - cli: local-server
+     */
+    supportedBackends: ReadonlySet<OnDeviceBackend>;
+    /**
+     * Base URL for motebit-cloud requests. Each surface resolves this from
+     * its own session state / env (proxy session, VITE_PROXY_URL, etc.).
+     * Falls back to `DEFAULT_MOTEBIT_CLOUD_URL` if absent.
+     */
+    motebitCloudBaseUrl?: string;
+    /**
+     * Extra HTTP headers to attach to motebit-cloud requests. Typically
+     * `{ "x-proxy-token": "..." }` from the surface's proxy session state.
+     */
+    motebitCloudHeaders?: Record<string, string>;
+    /**
+     * Default model for motebit-cloud when the config doesn't specify.
+     * Most surfaces leave this undefined (resolver falls back to
+     * `DEFAULT_PROXY_MODEL`); the relay session may override based on tier.
+     */
+    motebitCloudDefaultModel?: string;
+}
+/**
+ * Thrown when the user picks an on-device backend that the current surface
+ * doesn't physically support (e.g., apple-fm on web). Surfaces should
+ * present a graceful error rather than letting it propagate.
+ */
+export declare class UnsupportedBackendError extends Error {
+    backend: OnDeviceBackend;
+    constructor(backend: OnDeviceBackend);
+}
+/**
+ * Resolve a `UnifiedProviderConfig` (the user's choice) against a surface's
+ * `ResolverEnv` (its physical capabilities) to produce a normalized
+ * `ProviderSpec` (what the surface should instantiate).
+ *
+ * Pure function. No I/O. No side effects. Tested once, used everywhere.
+ *
+ * @throws {UnsupportedBackendError} if the chosen on-device backend isn't
+ *   in `env.supportedBackends`. Surfaces should catch and present a
+ *   user-facing message.
+ */
+export declare function resolveProviderSpec(config: UnifiedProviderConfig, env: ResolverEnv): ProviderSpec;
+//# sourceMappingURL=provider-resolver.d.ts.map

package/dist/provider-resolver.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-resolver.d.ts","sourceRoot":"","sources":["../src/provider-resolver.ts"],"names":[],"mappings":"AA2CA,OAAO,KAAK,EAAE,qBAAqB,EAAE,UAAU,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAI7F;;;;;GAKG;AACH,eAAO,MAAM,wBAAwB,4DAA4D,CAAC;AAElG,wCAAwC;AACxC,eAAO,MAAM,uBAAuB,8BAA8B,CAAC;AAEnE,qCAAqC;AACrC,eAAO,MAAM,oBAAoB,8BAA8B,CAAC;AAEhE,sEAAsE;AACtE,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AAEnE,sFAAsF;AACtF,eAAO,MAAM,oBAAoB,sCAAsC,CAAC;AAIxE;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,4BAA4B,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAKhE;AAED,4CAA4C;AAC5C,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CAShE;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,UAAU,GAAG,MAAM,CASjE;AAID;;;;GAIG;AACH,MAAM,MAAM,YAAY,GACpB,iBAAiB,GACjB,kBAAkB,GAClB,yBAAyB,GACzB,eAAe,CAAC;AAEpB;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,OAAO,CAAC;IACd,+CAA+C;IAC/C,YAAY,EAAE,WAAW,GAAG,QAAQ,CAAC;IACrC,uEAAuE;IACvE,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,qEAAqE;IACrE,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,kEAAkE;IAClE,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,iEAAiE;AACjE,MAAM,WAAW,kBAAkB;IACjC,IAAI,EAAE,QAAQ,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,0DAA0D;AAC1D,MAAM,WAAW,yBAAyB;IACxC,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,wCAAwC;AACxC,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,KAAK,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAID;;;;;;;;;GASG;AACH,MAAM,WAAW,WAAW;IAC1B;;;;;;;;OAQG;IACH,YAAY,CAAC,YAAY,EAAE,WAAW,GAAG,QAAQ,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAAC;IAE9E;;;;;;OAMG;IACH,qBAAqB,EAAE,MAAM,CAAC;IAE9B;;;;;;;;;OASG;IACH,kBAAkB,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAAC;IAE7C;;;;;;OAMG;IACH,iBAAiB,EAAE,WAAW,CAAC,eAAe,CAAC,CAAC;IAEhD;;;;OAIG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC;IAE7B;;;OAGG;IACH,mBAAmB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAE7C;;;;OAIG;IACH,wBAAwB,CAAC,EAAE,MAAM,CAAC;CACnC;AAID;;;;GAIG;AACH,qBAAa,uBAAwB,SAAQ,KAAK;IAC7B,OAAO,EAAE,eAAe;gBAAxB,OAAO,EAAE,eAAe;CAI5C;AAID;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,qBAAqB,EAAE,GAAG,EAAE,WAAW,GAAG,YAAY,CAgGjG"}

package/dist/provider-resolver.js

@@ -0,0 +1,224 @@
+// === Provider Resolver — pure dispatch logic, shared across all surfaces ===
+//
+// The four surfaces (web, mobile, desktop, cli) used to each maintain their
+// own copy of "given a UnifiedProviderConfig, build a concrete @motebit/ai-core
+// provider instance." Four implementations of the same decision tree, with
+// only one (web) actually containing the Ollama-vs-OpenAI-compat dispatch
+// heuristic. Adding a vendor meant editing four files. Fixing a bug meant
+// fixing it four times — and historically, only the surface where the bug
+// was reported actually got the fix.
+//
+// This module extracts the decision tree as a pure function. It takes a
+// `UnifiedProviderConfig` and a surface-supplied `ResolverEnv` (which captures
+// the only legitimately-divergent concerns: platform URL routing, available
+// on-device backends, motebit-cloud session state). It returns a `ProviderSpec`
+// — a normalized data shape describing what kind of provider to instantiate
+// with what config. The surface still constructs the concrete class itself
+// (because @motebit/sdk is Layer 0 and can't import @motebit/ai-core's
+// provider classes), but the construction shrinks to a 15-line transport
+// switch with no decision logic.
+//
+// Adding a new vendor: extend ByokVendor, add a case to resolveProviderSpec.
+// Fixing a dispatch bug: fix it once here. Tested in one place.
+//
+// What stays per-surface (and rightly so):
+//   - Constructing the actual @motebit/ai-core provider classes
+//   - Async init flows (WebLLM model download, native module loading)
+//   - API key storage (keyring vs SecureStore vs env vars)
+//   - URL substitution that depends on platform (Vite proxy paths, Tauri vs dev)
+//
+// What moves here (the duplication):
+//   - The mode → vendor → transport decision tree
+//   - The Ollama-vs-OpenAI-compat endpoint heuristic
+//   - The Google "uses OpenAI-compat" fact
+//   - Default model fallback per vendor
+//   - The supported-backends gate
+import { DEFAULT_ANTHROPIC_MODEL, DEFAULT_OPENAI_MODEL, DEFAULT_GOOGLE_MODEL, DEFAULT_OLLAMA_MODEL, DEFAULT_PROXY_MODEL, } from "./models.js";
+// === Constants ===
+/**
+ * Google's OpenAI-compatible chat completions endpoint. Used when the user
+ * picks Google as a BYOK vendor — Google is dispatched as OpenAI-compat
+ * because every cloud client (web, mobile, desktop, cli) already understands
+ * the OpenAI wire protocol. Single source of truth.
+ */
+export const GOOGLE_OPENAI_COMPAT_URL = "https://generativelanguage.googleapis.com/v1beta/openai";
+/** Canonical Anthropic API base URL. */
+export const ANTHROPIC_CANONICAL_URL = "https://api.anthropic.com";
+/** Canonical OpenAI API base URL. */
+export const OPENAI_CANONICAL_URL = "https://api.openai.com/v1";
+/** Default Motebit Cloud relay URL. Surfaces may override via env. */
+export const DEFAULT_MOTEBIT_CLOUD_URL = "https://api.motebit.com";
+/** Default WebLLM model when none specified — small enough to fit on most devices. */
+export const DEFAULT_WEBLLM_MODEL = "Llama-3.2-3B-Instruct-q4f16_1-MLC";
+// === Helpers ===
+/**
+ * Normalize a local-inference server URL so that it points at the
+ * OpenAI-compatible chat completions base path. Auto-appends `/v1` if
+ * the URL doesn't already contain it. Idempotent.
+ *
+ * Every supported local server (Ollama via its OpenAI shim, LM Studio,
+ * llama.cpp, Jan, vLLM, text-generation-webui) exposes
+ * `{base}/v1/chat/completions`. Users typically type just the host
+ * (`http://localhost:11434`) — this helper completes the path so the
+ * client can call `{normalized}/chat/completions` directly.
+ *
+ * Examples:
+ *   "http://localhost:11434"      → "http://localhost:11434/v1"
+ *   "http://localhost:11434/v1"   → "http://localhost:11434/v1"
+ *   "http://localhost:1234/"      → "http://localhost:1234/v1"
+ *   "http://192.168.1.42:11434"   → "http://192.168.1.42:11434/v1"
+ *   "/api/ollama"                 → "/api/ollama/v1"  (dev proxy path)
+ */
+export function normalizeLocalServerEndpoint(url) {
+    const stripped = url.replace(/\/+$/, "");
+    // Already contains a /v1 path segment? Leave it alone.
+    if (/\/v1(\/|$)/.test(stripped))
+        return stripped;
+    return `${stripped}/v1`;
+}
+/** Default chat model for a BYOK vendor. */
+export function defaultModelForVendor(vendor) {
+    switch (vendor) {
+        case "anthropic":
+            return DEFAULT_ANTHROPIC_MODEL;
+        case "openai":
+            return DEFAULT_OPENAI_MODEL;
+        case "google":
+            return DEFAULT_GOOGLE_MODEL;
+    }
+}
+/**
+ * Canonical (vendor-published) base URL for a BYOK vendor. Surfaces that
+ * need to substitute a CORS proxy or dev-mode path receive this canonical
+ * URL via the resolver and may rewrite it.
+ */
+export function canonicalVendorBaseUrl(vendor) {
+    switch (vendor) {
+        case "anthropic":
+            return ANTHROPIC_CANONICAL_URL;
+        case "openai":
+            return OPENAI_CANONICAL_URL;
+        case "google":
+            return GOOGLE_OPENAI_COMPAT_URL;
+    }
+}
+// === Errors ===
+/**
+ * Thrown when the user picks an on-device backend that the current surface
+ * doesn't physically support (e.g., apple-fm on web). Surfaces should
+ * present a graceful error rather than letting it propagate.
+ */
+export class UnsupportedBackendError extends Error {
+    backend;
+    constructor(backend) {
+        super(`On-device backend "${backend}" is not supported on this surface`);
+        this.backend = backend;
+        this.name = "UnsupportedBackendError";
+    }
+}
+// === The resolver ===
+/**
+ * Resolve a `UnifiedProviderConfig` (the user's choice) against a surface's
+ * `ResolverEnv` (its physical capabilities) to produce a normalized
+ * `ProviderSpec` (what the surface should instantiate).
+ *
+ * Pure function. No I/O. No side effects. Tested once, used everywhere.
+ *
+ * @throws {UnsupportedBackendError} if the chosen on-device backend isn't
+ *   in `env.supportedBackends`. Surfaces should catch and present a
+ *   user-facing message.
+ */
+export function resolveProviderSpec(config, env) {
+    switch (config.mode) {
+        case "motebit-cloud": {
+            // Motebit Cloud speaks the Anthropic wire protocol via the relay.
+            // The relay injects the real key server-side, so the spec carries
+            // an empty apiKey — every cloud client knows to handle that case.
+            const baseUrl = config.baseUrl ?? env.motebitCloudBaseUrl ?? DEFAULT_MOTEBIT_CLOUD_URL;
+            const extraHeaders = config.proxyToken !== undefined
+                ? { "x-proxy-token": config.proxyToken, ...(env.motebitCloudHeaders ?? {}) }
+                : env.motebitCloudHeaders;
+            return {
+                kind: "cloud",
+                wireProtocol: "anthropic",
+                apiKey: "",
+                model: config.model ?? env.motebitCloudDefaultModel ?? DEFAULT_PROXY_MODEL,
+                baseUrl,
+                maxTokens: config.maxTokens,
+                temperature: config.temperature,
+                extraHeaders,
+            };
+        }
+        case "byok": {
+            // Google is dispatched as OpenAI-compat — its public API is OpenAI-
+            // compatible at the canonical Google URL. Anthropic and OpenAI use
+            // their own canonical wire protocols.
+            const wireProtocol = config.vendor === "anthropic" ? "anthropic" : "openai";
+            const canonical = config.baseUrl ?? canonicalVendorBaseUrl(config.vendor);
+            return {
+                kind: "cloud",
+                wireProtocol,
+                apiKey: config.apiKey,
+                model: config.model ?? defaultModelForVendor(config.vendor),
+                baseUrl: env.cloudBaseUrl(wireProtocol, canonical),
+                maxTokens: config.maxTokens,
+                temperature: config.temperature,
+            };
+        }
+        case "on-device": {
+            if (!env.supportedBackends.has(config.backend)) {
+                throw new UnsupportedBackendError(config.backend);
+            }
+            switch (config.backend) {
+                case "webllm":
+                    return {
+                        kind: "webllm",
+                        model: config.model ?? DEFAULT_WEBLLM_MODEL,
+                        maxTokens: config.maxTokens,
+                        temperature: config.temperature,
+                    };
+                case "apple-fm":
+                    return {
+                        kind: "apple-fm",
+                        model: config.model,
+                        maxTokens: config.maxTokens,
+                    };
+                case "mlx":
+                    return {
+                        kind: "mlx",
+                        model: config.model,
+                        maxTokens: config.maxTokens,
+                    };
+                case "local-server": {
+                    // Every supported local inference server (Ollama, LM Studio,
+                    // llama.cpp, Jan, vLLM, text-generation-webui, …) exposes an
+                    // OpenAI-compatible chat completions endpoint at /v1. We dispatch
+                    // them all through the OpenAI wire protocol with a single client
+                    // (`OpenAIProvider`). The previous Ollama-vs-OpenAI port heuristic
+                    // is gone — there's only one code path now.
+                    //
+                    // `normalizeLocalServerEndpoint` auto-appends `/v1` so users who
+                    // type the bare host (`http://localhost:11434`) still work. Users
+                    // who type the full path (`http://localhost:11434/v1`) are
+                    // unaffected. Surfaces may further substitute the URL via
+                    // `localServerBaseUrl` (e.g. desktop dev mode → `/api/ollama`).
+                    const logicalEndpoint = config.endpoint ?? env.defaultLocalServerUrl;
+                    const surfaceTransformed = env.localServerBaseUrl?.(logicalEndpoint) ?? logicalEndpoint;
+                    const actualEndpoint = normalizeLocalServerEndpoint(surfaceTransformed);
+                    return {
+                        kind: "cloud",
+                        wireProtocol: "openai",
+                        // Local OpenAI-compat servers don't validate the API key, but
+                        // most clients require a non-empty string. Use a sentinel.
+                        apiKey: "local",
+                        model: config.model ?? DEFAULT_OLLAMA_MODEL,
+                        baseUrl: actualEndpoint,
+                        maxTokens: config.maxTokens,
+                        temperature: config.temperature,
+                    };
+                }
+            }
+        }
+    }
+}
+//# sourceMappingURL=provider-resolver.js.map

package/dist/provider-resolver.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-resolver.js","sourceRoot":"","sources":["../src/provider-resolver.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAC9E,EAAE;AACF,4EAA4E;AAC5E,gFAAgF;AAChF,2EAA2E;AAC3E,0EAA0E;AAC1E,0EAA0E;AAC1E,0EAA0E;AAC1E,qCAAqC;AACrC,EAAE;AACF,wEAAwE;AACxE,+EAA+E;AAC/E,4EAA4E;AAC5E,gFAAgF;AAChF,4EAA4E;AAC5E,2EAA2E;AAC3E,uEAAuE;AACvE,yEAAyE;AACzE,iCAAiC;AACjC,EAAE;AACF,6EAA6E;AAC7E,gEAAgE;AAChE,EAAE;AACF,2CAA2C;AAC3C,gEAAgE;AAChE,sEAAsE;AACtE,2DAA2D;AAC3D,iFAAiF;AACjF,EAAE;AACF,qCAAqC;AACrC,kDAAkD;AAClD,qDAAqD;AACrD,2CAA2C;AAC3C,wCAAwC;AACxC,kCAAkC;AAElC,OAAO,EACL,uBAAuB,EACvB,oBAAoB,EACpB,oBAAoB,EACpB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,aAAa,CAAC;AAGrB,oBAAoB;AAEpB;;;;;GAKG;AACH,MAAM,CAAC,MAAM,wBAAwB,GAAG,yDAAyD,CAAC;AAElG,wCAAwC;AACxC,MAAM,CAAC,MAAM,uBAAuB,GAAG,2BAA2B,CAAC;AAEnE,qCAAqC;AACrC,MAAM,CAAC,MAAM,oBAAoB,GAAG,2BAA2B,CAAC;AAEhE,sEAAsE;AACtE,MAAM,CAAC,MAAM,yBAAyB,GAAG,yBAAyB,CAAC;AAEnE,sFAAsF;AACtF,MAAM,CAAC,MAAM,oBAAoB,GAAG,mCAAmC,CAAC;AAExE,kBAAkB;AAElB;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,4BAA4B,CAAC,GAAW;IACtD,MAAM,QAAQ,GAAG,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACzC,uDAAuD;IACvD,IAAI,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IACjD,OAAO,GAAG,QAAQ,KAAK,CAAC;AAC1B,CAAC;AAED,4CAA4C;AAC5C,MAAM,UAAU,qBAAqB,CAAC,MAAkB;IACtD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,uBAAuB,CAAC;QACjC,KAAK,QAAQ;YACX,OAAO,oBAAoB,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,oBAAoB,CAAC;IAChC,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,MAAkB;IACvD,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,WAAW;YACd,OAAO,uBAAuB,CAAC;QACjC,KAAK,QAAQ;YACX,OAAO,oBAAoB,CAAC;QAC9B,KAAK,QAAQ;YACX,OAAO,wBAAwB,CAAC;IACpC,CAAC;AACH,CAAC;AAwID,iBAAiB;AAEjB;;;;GAIG;AACH,MAAM,OAAO,uBAAwB,SAAQ,KAAK;IAC7B;IAAnB,YAAmB,OAAwB;QACzC,KAAK,CAAC,sBAAsB,OAAO,oCAAoC,CAAC,CAAC;QADxD,YAAO,GAAP,OAAO,CAAiB;QAEzC,IAAI,CAAC,IAAI,GAAG,yBAAyB,CAAC;IACxC,CAAC;CACF;AAED,uBAAuB;AAEvB;;;;;;;;;;GAUG;AACH,MAAM,UAAU,mBAAmB,CAAC,MAA6B,EAAE,GAAgB;IACjF,QAAQ,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,eAAe,CAAC,CAAC,CAAC;YACrB,kEAAkE;YAClE,kEAAkE;YAClE,kEAAkE;YAClE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,GAAG,CAAC,mBAAmB,IAAI,yBAAyB,CAAC;YACvF,MAAM,YAAY,GAChB,MAAM,CAAC,UAAU,KAAK,SAAS;gBAC7B,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,UAAU,EAAE,GAAG,CAAC,GAAG,CAAC,mBAAmB,IAAI,EAAE,CAAC,EAAE;gBAC5E,CAAC,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAC9B,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,YAAY,EAAE,WAAW;gBACzB,MAAM,EAAE,EAAE;gBACV,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,GAAG,CAAC,wBAAwB,IAAI,mBAAmB;gBAC1E,OAAO;gBACP,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;gBAC/B,YAAY;aACb,CAAC;QACJ,CAAC;QAED,KAAK,MAAM,CAAC,CAAC,CAAC;YACZ,oEAAoE;YACpE,mEAAmE;YACnE,sCAAsC;YACtC,MAAM,YAAY,GAChB,MAAM,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,QAAQ,CAAC;YACzD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,IAAI,sBAAsB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1E,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,YAAY;gBACZ,MAAM,EAAE,MAAM,CAAC,MAAM;gBACrB,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,qBAAqB,CAAC,MAAM,CAAC,MAAM,CAAC;gBAC3D,OAAO,EAAE,GAAG,CAAC,YAAY,CAAC,YAAY,EAAE,SAAS,CAAC;gBAClD,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;aAChC,CAAC;QACJ,CAAC;QAED,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,GAAG,CAAC,iBAAiB,CAAC,GAAG,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;gBAC/C,MAAM,IAAI,uBAAuB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACpD,CAAC;YACD,QAAQ,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,KAAK,QAAQ;oBACX,OAAO;wBACL,IAAI,EAAE,QAAQ;wBACd,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,oBAAoB;wBAC3C,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;qBAChC,CAAC;gBACJ,KAAK,UAAU;oBACb,OAAO;wBACL,IAAI,EAAE,UAAU;wBAChB,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B,CAAC;gBACJ,KAAK,KAAK;oBACR,OAAO;wBACL,IAAI,EAAE,KAAK;wBACX,KAAK,EAAE,MAAM,CAAC,KAAK;wBACnB,SAAS,EAAE,MAAM,CAAC,SAAS;qBAC5B,CAAC;gBACJ,KAAK,cAAc,CAAC,CAAC,CAAC;oBACpB,6DAA6D;oBAC7D,6DAA6D;oBAC7D,kEAAkE;oBAClE,iEAAiE;oBACjE,mEAAmE;oBACnE,4CAA4C;oBAC5C,EAAE;oBACF,iEAAiE;oBACjE,kEAAkE;oBAClE,2DAA2D;oBAC3D,0DAA0D;oBAC1D,gEAAgE;oBAChE,MAAM,eAAe,GAAG,MAAM,CAAC,QAAQ,IAAI,GAAG,CAAC,qBAAqB,CAAC;oBACrE,MAAM,kBAAkB,GAAG,GAAG,CAAC,kBAAkB,EAAE,CAAC,eAAe,CAAC,IAAI,eAAe,CAAC;oBACxF,MAAM,cAAc,GAAG,4BAA4B,CAAC,kBAAkB,CAAC,CAAC;oBACxE,OAAO;wBACL,IAAI,EAAE,OAAO;wBACb,YAAY,EAAE,QAAQ;wBACtB,8DAA8D;wBAC9D,2DAA2D;wBAC3D,MAAM,EAAE,OAAO;wBACf,KAAK,EAAE,MAAM,CAAC,KAAK,IAAI,oBAAoB;wBAC3C,OAAO,EAAE,cAAc;wBACvB,SAAS,EAAE,MAAM,CAAC,SAAS;wBAC3B,WAAW,EAAE,MAAM,CAAC,WAAW;qBAChC,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;AACH,CAAC"}

package/dist/risk-labels.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Canonical risk level labels for tool governance.
+ *
+ * The five risk levels are the same across every surface and every
+ * storage system — they're the axes the `PolicyGate` scores tools
+ * against, and they're what the user picks a preset threshold for.
+ * The label strings ("R0 Read", "R1 Draft", …) were drifting across
+ * four different files with four different presentation shapes
+ * (Record<number, string>, { label, cls }, { label, color, bg }).
+ * This module is the authoritative source for the semantic labels.
+ *
+ * Surfaces still own their own presentation — the CSS class in
+ * desktop's chat badge, the color swatches in the mobile approval
+ * card — but the label string comes from here.
+ *
+ * The order is the same as `PolicyGate`'s risk scoring: 0 is
+ * read-only, 4 is "touches money." A tool classified above its
+ * surface's `requireApprovalAbove` gets a modal; above `denyAbove`
+ * gets rejected.
+ */
+export declare const RISK_LABELS: Record<number, string>;
+//# sourceMappingURL=risk-labels.d.ts.map

package/dist/risk-labels.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-labels.d.ts","sourceRoot":"","sources":["../src/risk-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,eAAO,MAAM,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAM9C,CAAC"}

package/dist/risk-labels.js

@@ -0,0 +1,28 @@
+/**
+ * Canonical risk level labels for tool governance.
+ *
+ * The five risk levels are the same across every surface and every
+ * storage system — they're the axes the `PolicyGate` scores tools
+ * against, and they're what the user picks a preset threshold for.
+ * The label strings ("R0 Read", "R1 Draft", …) were drifting across
+ * four different files with four different presentation shapes
+ * (Record<number, string>, { label, cls }, { label, color, bg }).
+ * This module is the authoritative source for the semantic labels.
+ *
+ * Surfaces still own their own presentation — the CSS class in
+ * desktop's chat badge, the color swatches in the mobile approval
+ * card — but the label string comes from here.
+ *
+ * The order is the same as `PolicyGate`'s risk scoring: 0 is
+ * read-only, 4 is "touches money." A tool classified above its
+ * surface's `requireApprovalAbove` gets a modal; above `denyAbove`
+ * gets rejected.
+ */
+export const RISK_LABELS = {
+    0: "R0 Read",
+    1: "R1 Draft",
+    2: "R2 Write",
+    3: "R3 Execute",
+    4: "R4 Money",
+};
+//# sourceMappingURL=risk-labels.js.map

package/dist/risk-labels.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"risk-labels.js","sourceRoot":"","sources":["../src/risk-labels.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,MAAM,CAAC,MAAM,WAAW,GAA2B;IACjD,CAAC,EAAE,SAAS;IACZ,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,UAAU;IACb,CAAC,EAAE,YAAY;IACf,CAAC,EAAE,UAAU;CACd,CAAC"}