@nac3/forge-cli 0.2.0-alpha.8 → 0.2.1-alpha.60

package/dist/core/pilot_setup.js

@@ -20,7 +20,63 @@
 import { promises as fs } from 'node:fs';
 import path from 'node:path';
 const CONFIG = 'yujin.forge.json';
-/** Read the current pilot setup state. */
+/** Heuristic: detect whether `projectRoot` already contains an
+ *  existing project. If it does, we skip the first-run Pilot setup
+ *  (target/mode questions) because they are not relevant when the
+ *  user is opening Forge against an existing codebase (bug fix,
+ *  refactor, deploy, code review, doc gen, etc).
+ *
+ *  An "existing project" is detected by the presence of ANY of the
+ *  common dependency manifest files. Greenfield workspaces (empty
+ *  dir or just a prompt.txt) do NOT match, so they still get the
+ *  pilot setup -- preserving the F-series default for `yf new`.
+ *
+ *  Added 2026-06-06 after the behavior-matrix run revealed that
+ *  cloned existing repos were being misclassified as greenfield and
+ *  intercepted by the warmup template, yielding "warmup-only" turns
+ *  where Forge promised to read the codebase but only asked the two
+ *  questions instead. */
+const PROJECT_INDICATORS = [
+    'package.json',
+    'pyproject.toml',
+    'requirements.txt',
+    'Cargo.toml',
+    'go.mod',
+    'composer.json',
+    'Gemfile',
+    'mix.exs',
+    'pom.xml',
+    'build.gradle',
+    'build.gradle.kts',
+    'CMakeLists.txt',
+    'Makefile',
+    'pubspec.yaml',
+];
+export async function detectExistingProject(projectRoot) {
+    for (const indicator of PROJECT_INDICATORS) {
+        try {
+            await fs.access(path.join(projectRoot, indicator));
+            return true;
+        }
+        catch {
+            /* try next */
+        }
+    }
+    return false;
+}
+/** Read the current pilot setup state.
+ *
+ *  Three branches:
+ *  1. `yujin.forge.json` exists -> trust the persisted `pilot_completed`.
+ *  2. No `yujin.forge.json`, but workspace IS an existing project (has
+ *     `package.json`/`Cargo.toml`/etc) -> auto-skip warmup
+ *     (`pilot_completed: true`). The user is opening Forge against a
+ *     real codebase and wants Forge to start by discovering it, not
+ *     by asking target/mode.
+ *  3. No `yujin.forge.json` and workspace is empty / greenfield ->
+ *     trigger the warmup prompt (`pilot_completed: false`). This is
+ *     the `yf new` path.
+ */
 export async function readPilotState(projectRoot) {
     try {
         const raw = await fs.readFile(path.join(projectRoot, CONFIG), 'utf-8');
@@ -36,6 +92,11 @@ export async function readPilotState(projectRoot) {
         };
     }
     catch {
+        /* No config file. Decide between greenfield and existing-project. */
+        const existing = await detectExistingProject(projectRoot);
+        if (existing) {
+            return { pilot_completed: true, target_pending: false, mode_pending: false };
+        }
         return { pilot_completed: false, target_pending: true, mode_pending: true };
     }
 }
@@ -63,12 +124,78 @@ export async function completePilotSetup(projectRoot, defaults = {}) {
         cfg.mode = 'didactico';
     await fs.writeFile(cfgPath, JSON.stringify(cfg, null, 2), 'utf-8');
 }
+/* ===================================================================
+ * Out-of-scope detection (PND-022).
+ *
+ * The warmup template asks two questions (target + mode) that only
+ * make sense for software-dev requests. When the user opens a fresh
+ * project to ask for a song, a poem, a pixel-art mockup, or just
+ * casual chat, the warmup is intrusive -- the brain pretends to ask
+ * about a "responsive vs mobile-only app" for content that has
+ * nothing to do with software.
+ *
+ * Detection lives here so server.ts can suppress the suffix when the
+ * first user message is plainly out-of-scope. Regex-only for cost
+ * zero; a Gemini Flash Lite confidence layer can wrap this when the
+ * caller wants higher precision on ambiguous prompts (BYOK bolsillo
+ * Pablo path, deferred to a follow-up slice).
+ * ================================================================ */
+/** Software-dev signals win over out-of-scope signals -- a user can
+ *  ask for "a song about React" and the answer should still go
+ *  through the warmup. We keep this list tight so a stray dev token
+ *  in a casual prompt does not produce a false positive. */
+const DEV_SIGNAL_RE = /\b(deploy|build|compil|refactor|implement(?:ar|a)?|implementaci|fix(?:ear)?|debug|test(?:ing)?|spec(?:ification)?|migr(?:ar|ate|aci)|scaffold|render(?:ear|ing)?|commit|merge|push|pull|branch|rebase|ci\/cd|pipeline|workflow|repo(?:sitory)?|package\.json|tsconfig|webpack|vite|next\.js|react|vue|angular|svelte|django|flask|express|fastapi|laravel|rails|spring|graphql|rest|openapi|swagger|database|postgres|mysql|sqlite|redis|mongo|docker|kubernetes|k8s|aws|gcp|cloudflare|vercel|netlify|api(?:_| key)?)\b/i;
+/** Out-of-scope categories. Each entry is one regex per kind. Order
+ *  intentionally favours common Spanish phrases since the bulk of
+ *  Pablo's users are Latam. */
+const OUT_OF_SCOPE_RES = [
+    { kind: 'music', re: /\b(can[cс]i[oó]n|cantar|cantale|letra(?: de)?|lyric|song|sing|m[uú]sica|melod[ií]a)\b/i },
+    { kind: 'poetry', re: /\b(poema|poetry|poes[ií]a|verso|haiku|soneto|rima(?:r|s)?)\b/i },
+    { kind: 'image', re: /\b(imagen|image|dibujo|drawing|draw|diagram(?:a|ar)?|sketch|pixel ?art|render(?:eame)?|graphic|grafico)\b/i },
+    { kind: 'explanation', re: /\b(expl[ií]came|expl[ií]canos|expl[ií]cale|que es (?:un|una|el|la)|qu[eé] es|what is|differenc(?:e|ia)|c[oó]mo funciona|diferencia entre)\b/i },
+    { kind: 'casual_chat', re: /^(?:hola(?:s|!)?|hi|hey|holi|buenas|gracias|thanks|thx|c[oó]mo (?:est[aá]s|te llamas|te va)|qu[eé] tal|que onda|nice|cool|jaja|lol|chau|bye)[\s!?\.]*$/i },
+    /* alpha.59z.187 PND-035 -- context-load intents bypass the warmup
+     * too. When the user opens a chat to ask "what do you know about
+     * this project" / "load the context" / "show me the graph", they
+     * already HAVE a project; asking them target+mode is intrusive.
+     * Spanish voseo + LatAm variations are covered (tenes vs tienes,
+     * cargame vs cargame). */
+    { kind: 'context_load', re: /\b(sub(?:i|e|ir|ime|ilo)|carg(?:a|ar|ame|amelo|alos|alas)|levanta|importa(?:r|me)?)\s+(?:todo\s+)?(?:el\s+|los\s+|las\s+)?(?:know[\s_-]?how|contexto|estado|grafo|graph|conocimiento|saber|saberes|info|informaci|pendientes|wiring|doctrinas?|lecciones)\b/i },
+    { kind: 'context_load', re: /\b(qu[eé]\s+(?:sab[ée]s|conoc[ée]s|ti?[ée]nes\s+(?:guardado|cargado))|que\s+(?:hay|ti?enes)\s+(?:sobre|en|guardado|cargado))\b/i },
+    { kind: 'context_load', re: /\b(muestr(?:a|e|ame|eme|alo|amelo)|list(?:a|ar|ame|amelos)|dame|d[ií]me|resum(?:i|ir|ime|emelo|elo))\s+(?:el\s+|los\s+|las\s+|todo\s+|todos\s+los\s+|todas\s+las\s+)?(?:grafo|graph|pendientes?|wiring|doctrinas?|lecciones|conocimiento|estado del proyecto|know[\s_-]?how)\b/i },
+    { kind: 'context_load', re: /\b(estado\s+del\s+proyecto|status\s+del\s+proyecto|estamos\s+parados\s+en|continu(?:emos|ar)\s+en|seguimos\s+(?:con|en)|retomar?\s+(?:el\s+)?proyecto)\b/i },
+];
+/** Decide whether a user's first message looks out-of-scope for the
+ *  warmup. Returns the matching category for telemetry / logging. */
+export function detectOutOfScope(userMessage) {
+    const txt = (userMessage ?? '').trim();
+    if (!txt)
+        return { out_of_scope: false, kind: null, reason: 'empty' };
+    if (DEV_SIGNAL_RE.test(txt)) {
+        return { out_of_scope: false, kind: null, reason: 'dev_signal_present' };
+    }
+    for (const { kind, re } of OUT_OF_SCOPE_RES) {
+        if (re.test(txt))
+            return { out_of_scope: true, kind, reason: 'regex:' + kind };
+    }
+    return { out_of_scope: false, kind: null, reason: 'no_signal' };
+}
 /** System-prompt addendum that asks the user about target
  *  + mode in plain prose. Injected by buildSystemPrompt when
- *  pilot_completed is false. */
-export function welcomePromptSuffix(state) {
+ *  pilot_completed is false.
+ *
+ *  PND-022: callers can pass `firstUserMessage` so the suffix is
+ *  suppressed for out-of-scope first turns (music, poetry, image,
+ *  abstract explanation, casual chat). The shape of the warmup is
+ *  unchanged for in-scope dev turns. */
+export function welcomePromptSuffix(state, firstUserMessage) {
     if (state.pilot_completed)
         return '';
+    if (typeof firstUserMessage === 'string' && firstUserMessage.trim().length > 0) {
+        const det = detectOutOfScope(firstUserMessage);
+        if (det.out_of_scope)
+            return '';
+    }
     const asks = [];
     if (state.target_pending) {
         asks.push('* la app, la queres responsive (desktop + mobile), solo mobile, o solo desktop?');

package/dist/core/pilot_setup.js.map

@@ -1 +1 @@
-{"version":3,"file":"pilot_setup.js","sourceRoot":"","sources":["../../src/core/pilot_setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAQlC,0CAA0C;AAC1C,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;QAClD,OAAO;YACL,eAAe,EAAE,SAAS;YAC1B,cAAc,EAAE,CAAC,MAAM,CAAC,MAAM;YAC9B,YAAY,EAAE,CAAC,MAAM,CAAC,IAAI;SAC3B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;gEACgE;AAChE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,WAA+C,EAAE;IAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,GAAG,GAA4B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,GAAG,GAAG,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IACvB,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;QAAM,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC7D,uDAAuD;IACvD,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAI,GAAG,CAAC,IAAI,GAAK,WAAW,CAAC;IAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED;;gCAEgC;AAChC,MAAM,UAAU,mBAAmB,CAAC,KAAsB;IACxD,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IACrC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,gHAAgH,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO;QACL,EAAE;QACF,iEAAiE;QACjE,sEAAsE;QACtE,gDAAgD;QAChD,GAAG,IAAI;QACP,EAAE;QACF,4DAA4D;QAC5D,kEAAkE;QAClE,kEAAkE;QAClE,uEAAuE;KACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;2DAM2D;AAC3D,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,WAAmB;IAEnB,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxC,oCAAoC;IACpC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI;QAClE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IACD;4CACwC;IACxC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,EAAE,CAAC;QACxE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC"}
+{"version":3,"file":"pilot_setup.js","sourceRoot":"","sources":["../../src/core/pilot_setup.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,MAAM,MAAM,GAAG,kBAAkB,CAAC;AAElC;;;;;;;;;;;;;;;yBAeyB;AACzB,MAAM,kBAAkB,GAAG;IACzB,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,YAAY;IACZ,QAAQ;IACR,eAAe;IACf,SAAS;IACT,SAAS;IACT,SAAS;IACT,cAAc;IACd,kBAAkB;IAClB,gBAAgB;IAChB,UAAU;IACV,cAAc;CACf,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,WAAmB;IAC7D,KAAK,MAAM,SAAS,IAAI,kBAAkB,EAAE,CAAC;QAC3C,IAAI,CAAC;YACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,SAAS,CAAC,CAAC,CAAC;YACnD,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,cAAc;QAChB,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAQD;;;;;;;;;;;;GAYG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,WAAmB;IACtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC;QACvE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,IAAI,CAAC,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC1C,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAC9E,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,CAAC,eAAe,KAAK,IAAI,CAAC;QAClD,OAAO;YACL,eAAe,EAAE,SAAS;YAC1B,cAAc,EAAE,CAAC,MAAM,CAAC,MAAM;YAC9B,YAAY,EAAE,CAAC,MAAM,CAAC,IAAI;SAC3B,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,qEAAqE;QACrE,MAAM,QAAQ,GAAG,MAAM,qBAAqB,CAAC,WAAW,CAAC,CAAC;QAC1D,IAAI,QAAQ,EAAE,CAAC;YACb,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC/E,CAAC;QACD,OAAO,EAAE,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;IAC9E,CAAC;AACH,CAAC;AAED;gEACgE;AAChE,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,WAAmB,EACnB,WAA+C,EAAE;IAEjD,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/C,IAAI,GAAG,GAA4B,EAAE,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAChD,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QACjD,IAAI,CAAC,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ;YAAE,GAAG,GAAG,EAAE,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC,CAAC,WAAW,CAAC,CAAC;IACvB,GAAG,CAAC,eAAe,GAAG,IAAI,CAAC;IAC3B,IAAI,CAAC,GAAG,CAAC,MAAM,IAAI,QAAQ,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;IACjE,IAAI,CAAC,GAAG,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI;QAAM,GAAG,CAAC,IAAI,GAAG,QAAQ,CAAC,IAAI,CAAC;IAC7D,uDAAuD;IACvD,IAAI,CAAC,GAAG,CAAC,MAAM;QAAE,GAAG,CAAC,MAAM,GAAG,YAAY,CAAC;IAC3C,IAAI,CAAC,GAAG,CAAC,IAAI;QAAI,GAAG,CAAC,IAAI,GAAK,WAAW,CAAC;IAC1C,MAAM,EAAE,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;AACrE,CAAC;AAED;;;;;;;;;;;;;;;sEAesE;AAEtE;;;4DAG4D;AAC5D,MAAM,aAAa,GAAG,2fAA2f,CAAC;AAElhB;;+BAE+B;AAC/B,MAAM,gBAAgB,GAAwC;IAC5D,EAAE,IAAI,EAAE,OAAO,EAAQ,EAAE,EAAE,wFAAwF,EAAE;IACrH,EAAE,IAAI,EAAE,QAAQ,EAAO,EAAE,EAAE,+DAA+D,EAAE;IAC5F,EAAE,IAAI,EAAE,OAAO,EAAQ,EAAE,EAAE,4GAA4G,EAAE;IACzI,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,8IAA8I,EAAE;IAC3K,EAAE,IAAI,EAAE,aAAa,EAAE,EAAE,EAAE,yJAAyJ,EAAE;IACtL;;;;;8BAK0B;IAC1B,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,8PAA8P,EAAE;IAC5R,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,iIAAiI,EAAE;IAC/J,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,iRAAiR,EAAE;IAC/S,EAAE,IAAI,EAAE,cAAc,EAAE,EAAE,EAAE,2JAA2J,EAAE;CAC1L,CAAC;AAQF;qEACqE;AACrE,MAAM,UAAU,gBAAgB,CAAC,WAAmB;IAClD,MAAM,GAAG,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACvC,IAAI,CAAC,GAAG;QAAE,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACtE,IAAI,aAAa,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,oBAAoB,EAAE,CAAC;IAC3E,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,gBAAgB,EAAE,CAAC;QAC5C,IAAI,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,YAAY,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,GAAG,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AAClE,CAAC;AAED;;;;;;;wCAOwC;AACxC,MAAM,UAAU,mBAAmB,CACjC,KAAsB,EACtB,gBAAyB;IAEzB,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,EAAE,CAAC;IACrC,IAAI,OAAO,gBAAgB,KAAK,QAAQ,IAAI,gBAAgB,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC/E,MAAM,GAAG,GAAG,gBAAgB,CAAC,gBAAgB,CAAC,CAAC;QAC/C,IAAI,GAAG,CAAC,YAAY;YAAE,OAAO,EAAE,CAAC;IAClC,CAAC;IACD,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,KAAK,CAAC,cAAc,EAAE,CAAC;QACzB,IAAI,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IAC/F,CAAC;IACD,IAAI,KAAK,CAAC,YAAY,EAAE,CAAC;QACvB,IAAI,CAAC,IAAI,CAAC,gHAAgH,CAAC,CAAC;IAC9H,CAAC;IACD,OAAO;QACL,EAAE;QACF,iEAAiE;QACjE,sEAAsE;QACtE,gDAAgD;QAChD,GAAG,IAAI;QACP,EAAE;QACF,4DAA4D;QAC5D,kEAAkE;QAClE,kEAAkE;QAClE,uEAAuE;KACxE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AACf,CAAC;AAED;;;;;;2DAM2D;AAC3D,MAAM,UAAU,kBAAkB,CAChC,KAAsB,EACtB,WAAmB;IAEnB,IAAI,KAAK,CAAC,eAAe;QAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,WAAW,CAAC,WAAW,EAAE,CAAC;IACxC,oCAAoC;IACpC,MAAM,cAAc,GAAG,CAAC,QAAQ,EAAE,SAAS,EAAE,YAAY,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI;QAClE,cAAc,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,CAAC;IAChE,MAAM,YAAY,GAAG,CAAC,WAAW,EAAE,UAAU,EAAE,SAAS,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;IAC/E,MAAM,cAAc,GAAG,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACrE,MAAM,YAAY,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC;IACjE,IAAI,cAAc,IAAI,YAAY,EAAE,CAAC;QACnC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;IAChD,CAAC;IACD;4CACwC;IACxC,IAAI,WAAW,CAAC,IAAI,EAAE,CAAC,MAAM,IAAI,EAAE,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,EAAE,CAAC;QACxE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC;AAChD,CAAC"}

package/dist/core/provider_keys.d.ts

@@ -0,0 +1,35 @@
+declare const ALLOWED_SLOTS: readonly ["anthropic_api_key", "openai_api_key", "google_ai_key", "deepseek_api_key", "xai_api_key", "mistral_api_key", "cohere_api_key", "google_stt_key", "google_tts_key", "whisper_api_key", "elevenlabs_api_key", "yujin_admin_key"];
+export type ProviderSlot = (typeof ALLOWED_SLOTS)[number];
+export declare function listAllowedSlots(): readonly string[];
+export declare function isAllowedSlot(s: string): s is ProviderSlot;
+/** Force a re-open (tests). */
+export declare function _resetVaultCache(): void;
+/** Run once per process. Imports legacy plaintext JSON keys +
+ *  any vault slots stored under the non-prefixed slot name
+ *  (legacy from before alpha.44 OR from users following an old
+ *  yf vault set instruction). Idempotent + tolerant of partial
+ *  imports. */
+export declare function migrateLegacyIfNeeded(): Promise<{
+    imported: string[];
+    skipped: string[];
+    legacy_present: boolean;
+    vault_slots_migrated: string[];
+}>;
+/** Read a BYOK key plaintext. Returns null when the slot is not
+ *  set or the slot name is invalid. Migrates legacy storage on
+ *  first call. */
+export declare function getKey(slot: string): Promise<string | null>;
+/** Set a BYOK key. Empty / null value clears the slot. */
+export declare function setKey(slot: string, value: string | null | undefined): Promise<void>;
+/** Has-check (no plaintext leak). */
+export declare function hasKey(slot: string): Promise<boolean>;
+/** Status snapshot of all allowed slots -- booleans, not values. */
+export declare function listStatus(): Promise<Record<string, boolean>>;
+/** Convenience: synchronous-ish wrappers for the legacy code paths
+ *  that did `readKeys(): Record<string, unknown>` and expected a
+ *  full snapshot. Returns plaintext values for set slots; null
+ *  for unset. Keep call sites aware this DECRYPTS everything --
+ *  do not log the return. */
+export declare function readAllPlaintext(): Promise<Record<string, string | null>>;
+export {};
+//# sourceMappingURL=provider_keys.d.ts.map

package/dist/core/provider_keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_keys.d.ts","sourceRoot":"","sources":["../../src/core/provider_keys.ts"],"names":[],"mappings":"AAkCA,QAAA,MAAM,aAAa,2OAyBT,CAAC;AACX,MAAM,MAAM,YAAY,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAE1D,wBAAgB,gBAAgB,IAAI,SAAS,MAAM,EAAE,CAEpD;AAgBD,wBAAgB,aAAa,CAAC,CAAC,EAAE,MAAM,GAAG,CAAC,IAAI,YAAY,CAM1D;AAqBD,+BAA+B;AAC/B,wBAAgB,gBAAgB,IAAI,IAAI,CAGvC;AAID;;;;eAIe;AACf,wBAAsB,qBAAqB,IAAI,OAAO,CAAC;IACrD,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,cAAc,EAAE,OAAO,CAAC;IACxB,oBAAoB,EAAE,MAAM,EAAE,CAAC;CAChC,CAAC,CAoED;AAED;;kBAEkB;AAClB,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAOjE;AAED,0DAA0D;AAC1D,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAa1F;AAED,qCAAqC;AACrC,wBAAsB,MAAM,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAK3D;AAED,oEAAoE;AACpE,wBAAsB,UAAU,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAQnE;AAED;;;;6BAI6B;AAC7B,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC,CAAC,CAY/E"}

package/dist/core/provider_keys.js

@@ -0,0 +1,267 @@
+/**
+ * core/provider_keys.ts -- BYOK API key storage (alpha.44 C1).
+ *
+ * Single source of truth for read / write / list of BYOK provider
+ * keys (Anthropic, OpenAI, Google AI, Google STT, Google TTS,
+ * Whisper, ElevenLabs).
+ *
+ * Storage: encrypted Vault (AES-256-GCM, derived from machine
+ * fingerprint -- see src/vault/crypto.ts). Slots are namespaced
+ * `byok.<slot>` so they cannot collide with other vault tenants.
+ *
+ * Migration: on first call the helper checks for the legacy file
+ * `~/.yujin-forge/provider_keys.json` (plaintext, mode 0600 only).
+ * If present:
+ *   1. Imports every recognised slot value into the vault.
+ *   2. Renames the legacy file to `provider_keys.json.legacy.bak`
+ *      so a fresh chat session does not re-import it. The backup
+ *      stays so the user can grep for emergency recovery if the
+ *      vault somehow gets corrupted before the next chat turn.
+ *
+ * All callers (chat tool, server endpoints, voice providers,
+ * claude client init, CLI commands, license sync, etc) MUST go
+ * through this module. Direct reads of provider_keys.json are
+ * forbidden from alpha.44 onward; the audit_consumers tool will
+ * flag any re-introduction.
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { Vault } from '../vault/store.js';
+import { configDir } from '../license/index.js';
+const ALLOWED_SLOTS = [
+    /* Brain provider keys (one of these resolves the active tier
+     *  in src/core/brain_config.ts). */
+    'anthropic_api_key',
+    'openai_api_key',
+    'google_ai_key',
+    /* alpha.51 -- added brain providers reachable from
+     *  cost_router. Slots registered so the BYOK CLI + vault
+     *  recognise them; runtime wire happens in alpha.51b/52. */
+    'deepseek_api_key',
+    'xai_api_key',
+    'mistral_api_key',
+    'cohere_api_key',
+    /* Voice providers (decoupled from brain selection). */
+    'google_stt_key',
+    'google_tts_key',
+    'whisper_api_key',
+    'elevenlabs_api_key',
+    /* alpha.59z.17 HITO 6.4 -- F103 admin key. Stored locally so
+     *  Pablo does not have to paste it for every promote/demote/
+     *  reject/doctrine-update command. Matches the YUJIN_ADMIN_KEY
+     *  secret configured in the HITO 4 worker. */
+    'yujin_admin_key',
+];
+export function listAllowedSlots() {
+    return ALLOWED_SLOTS;
+}
+/* alpha.59z.34 F101 slice 5 sub-slice 2 -- dynamic slot patterns
+ * for per-bridge MCP credentials. The bridge_id is user-controlled
+ * but the slot shape is constrained:
+ *   mcp_<bridge_id>_token  where bridge_id is [a-z0-9_-]{1,80}
+ *
+ * The regex is anchored + length-limited so a malformed bridge_id
+ * cannot exfiltrate into other vault keys via setKey('../foo').
+ * Vault.set itself also enforces ^[a-z][a-z0-9_-]*$ on the prefixed
+ * key, but defence-in-depth: we validate here too.
+ */
+const DYNAMIC_SLOT_PATTERNS = [
+    /^mcp_[a-z0-9][a-z0-9_-]{0,78}_token$/,
+];
+export function isAllowedSlot(s) {
+    if (ALLOWED_SLOTS.includes(s))
+        return true;
+    /* Type guard widening: dynamic slots are not in the ProviderSlot
+     * union, but for runtime callers passing `string` the guard still
+     * narrows enough at the static-known callsites. */
+    return DYNAMIC_SLOT_PATTERNS.some((re) => re.test(s));
+}
+/* Slot prefix in the vault. The Vault enforces
+ * ^[a-z][a-z0-9_-]*$ so we use an underscore, not a dot. */
+const VAULT_PREFIX = 'byok_';
+function legacyKeysFile() {
+    const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
+    const base = process.env.YF_CONFIG_DIR || path.join(home, '.yujin-forge');
+    return path.join(base, 'provider_keys.json');
+}
+/** Cache the Vault open. Each ProviderKeys API call reuses the
+ *  same instance so we don't re-derive the AES key on every read. */
+let _vaultCache = null;
+async function openVault() {
+    if (_vaultCache)
+        return _vaultCache;
+    _vaultCache = await Vault.open({ configDir: configDir() });
+    return _vaultCache;
+}
+/** Force a re-open (tests). */
+export function _resetVaultCache() {
+    _vaultCache = null;
+    _migrationDone = false;
+}
+let _migrationDone = false;
+/** Run once per process. Imports legacy plaintext JSON keys +
+ *  any vault slots stored under the non-prefixed slot name
+ *  (legacy from before alpha.44 OR from users following an old
+ *  yf vault set instruction). Idempotent + tolerant of partial
+ *  imports. */
+export async function migrateLegacyIfNeeded() {
+    if (_migrationDone)
+        return { imported: [], skipped: [], legacy_present: false, vault_slots_migrated: [] };
+    _migrationDone = true;
+    const vault = await openVault();
+    const imported = [];
+    const skipped = [];
+    const vaultSlotsMigrated = [];
+    /* alpha.54 -- migrate vault slots that exist WITHOUT the
+     * byok_ prefix into the canonical prefixed slot. Happens when
+     * users follow an old guide ("yf vault set google_ai_key").
+     * Each migrated row also clears the source slot so the vault
+     * inventory stays clean. */
+    for (const slot of ALLOWED_SLOTS) {
+        const prefixed = VAULT_PREFIX + slot;
+        if (vault.has(prefixed))
+            continue; // already in canonical place
+        if (!vault.has(slot))
+            continue; // nothing in legacy slot either
+        try {
+            const v = vault.get(slot);
+            if (typeof v === 'string' && v.length >= 4) {
+                await vault.set(prefixed, v);
+                await vault.remove(slot);
+                vaultSlotsMigrated.push(slot);
+            }
+        }
+        catch {
+            /* if read fails (vault corruption on that row), skip */
+        }
+    }
+    /* Existing JSON legacy migration (alpha.44). */
+    const legacyFile = legacyKeysFile();
+    let raw;
+    try {
+        raw = await fs.readFile(legacyFile, 'utf-8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return { imported, skipped, legacy_present: false, vault_slots_migrated: vaultSlotsMigrated };
+        }
+        throw err;
+    }
+    let json;
+    try {
+        json = JSON.parse(raw);
+    }
+    catch {
+        return { imported, skipped, legacy_present: true, vault_slots_migrated: vaultSlotsMigrated };
+    }
+    for (const slot of ALLOWED_SLOTS) {
+        const val = json[slot];
+        if (typeof val !== 'string' || val.length < 4)
+            continue;
+        const vaultKey = VAULT_PREFIX + slot;
+        if (vault.has(vaultKey)) {
+            skipped.push(slot);
+            continue;
+        }
+        try {
+            await vault.set(vaultKey, val);
+            imported.push(slot);
+        }
+        catch {
+            skipped.push(slot);
+        }
+    }
+    /* alpha.59z.123 -- DO NOT rename the legacy file. The previous
+     * rename moved provider_keys.json to provider_keys.json.legacy.bak
+     * after importing the API keys, which silently dropped the
+     * brain_provider_preference + model overrides (those fields are
+     * never imported to the vault). The next `yf keys setup --show`
+     * would then read an empty legacy file and report all keys as
+     * "(none)" even though they were live in the vault. Worse, the
+     * worker's brain_provider_missing check uses the same legacy
+     * file. Keeping the legacy file in place fixes both: vault has
+     * the keys (canonical runtime), legacy keeps preference + model
+     * alias (until a future alpha promotes those to vault slots too).
+     * Re-imports are no-ops because vault.has() returns true. */
+    return { imported, skipped, legacy_present: true, vault_slots_migrated: vaultSlotsMigrated };
+}
+/** Read a BYOK key plaintext. Returns null when the slot is not
+ *  set or the slot name is invalid. Migrates legacy storage on
+ *  first call. */
+export async function getKey(slot) {
+    if (!isAllowedSlot(slot))
+        return null;
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const vaultKey = VAULT_PREFIX + slot;
+    if (!vault.has(vaultKey))
+        return null;
+    try {
+        return vault.get(vaultKey);
+    }
+    catch {
+        return null;
+    }
+}
+/** Set a BYOK key. Empty / null value clears the slot. */
+export async function setKey(slot, value) {
+    if (!isAllowedSlot(slot))
+        throw new Error('provider_keys: slot not allowed: ' + slot);
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const vaultKey = VAULT_PREFIX + slot;
+    if (value == null || value === '') {
+        await vault.remove(vaultKey);
+        return;
+    }
+    if (typeof value !== 'string' || value.length < 8) {
+        throw new Error('provider_keys: value must be a string >= 8 chars (got ' + (typeof value) + ', length=' + (typeof value === 'string' ? value.length : 0) + ')');
+    }
+    await vault.set(vaultKey, value);
+}
+/** Has-check (no plaintext leak). */
+export async function hasKey(slot) {
+    if (!isAllowedSlot(slot))
+        return false;
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    return vault.has(VAULT_PREFIX + slot);
+}
+/** Status snapshot of all allowed slots -- booleans, not values. */
+export async function listStatus() {
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const out = {};
+    for (const slot of ALLOWED_SLOTS) {
+        out[slot] = vault.has(VAULT_PREFIX + slot);
+    }
+    return out;
+}
+/** Convenience: synchronous-ish wrappers for the legacy code paths
+ *  that did `readKeys(): Record<string, unknown>` and expected a
+ *  full snapshot. Returns plaintext values for set slots; null
+ *  for unset. Keep call sites aware this DECRYPTS everything --
+ *  do not log the return. */
+export async function readAllPlaintext() {
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const out = {};
+    for (const slot of ALLOWED_SLOTS) {
+        if (vault.has(VAULT_PREFIX + slot)) {
+            try {
+                out[slot] = vault.get(VAULT_PREFIX + slot);
+            }
+            catch {
+                out[slot] = null;
+            }
+        }
+        else {
+            out[slot] = null;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=provider_keys.js.map

package/dist/core/provider_keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_keys.js","sourceRoot":"","sources":["../../src/core/provider_keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,aAAa,GAAG;IACpB;wCACoC;IACpC,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;IACf;;gEAE4D;IAC5D,kBAAkB;IAClB,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAEhB,uDAAuD;IACvD,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,oBAAoB;IAEpB;;;kDAG8C;IAC9C,iBAAiB;CACT,CAAC;AAGX,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,qBAAqB,GAAsB;IAC/C,sCAAsC;CACvC,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,IAAK,aAAmC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE;;uDAEmD;IACnD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;4DAC4D;AAC5D,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAC/C,CAAC;AAED;qEACqE;AACrE,IAAI,WAAW,GAAiB,IAAI,CAAC;AACrC,KAAK,UAAU,SAAS;IACtB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,gBAAgB;IAC9B,WAAW,GAAG,IAAI,CAAC;IACnB,cAAc,GAAG,KAAK,CAAC;AACzB,CAAC;AAED,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B;;;;eAIe;AACf,MAAM,CAAC,KAAK,UAAU,qBAAqB;IAMzC,IAAI,cAAc;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IAC1G,cAAc,GAAG,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,kBAAkB,GAAa,EAAE,CAAC;IAExC;;;;gCAI4B;IAC5B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAE,6BAA6B;QACjE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS,CAAK,gCAAgC;QACpE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC7B,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;QAChG,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC/B,MAAM,CAAC;QAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;IAAC,CAAC;IACvG,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACxD,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD;;;;;;;;;;;iEAW6D;IAC7D,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;AAC/F,CAAC;AAED;;kBAEkB;AAClB,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QAAC,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC5D,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,KAAgC;IACzE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,IAAI,CAAC,CAAC;IACtF,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,WAAW,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAClK,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,qCAAqC;AACrC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;6BAI6B;AAC7B,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/provider_models.d.ts

@@ -0,0 +1,27 @@
+import { type BrainProvider } from './brain_config.js';
+export interface ProviderModel {
+    id: string;
+    display_name: string;
+}
+export interface ModelListResult {
+    provider: BrainProvider;
+    models: ProviderModel[];
+    /** 'live' = traido de la API del provider; 'static' = fallback
+     *  embebido (sin key o endpoint inalcanzable). */
+    source: 'live' | 'static';
+    /** Presente cuando source='static' por un error (no por falta
+     *  de key). Truncado, sin secretos. */
+    error?: string;
+}
+/** Test hook. */
+export declare function _resetProviderModelsCache(): void;
+/**
+ * Lista los modelos disponibles para un provider. Nunca lanza:
+ * degrada a la lista estatica con `source: 'static'`.
+ */
+export declare function listProviderModels(provider: BrainProvider, opts?: {
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    api_key?: string | null;
+}): Promise<ModelListResult>;
+//# sourceMappingURL=provider_models.d.ts.map

package/dist/core/provider_models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_models.d.ts","sourceRoot":"","sources":["../../src/core/provider_models.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB;sDACkD;IAClD,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B;2CACuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAwCD,iBAAiB;AACjB,wBAAgB,yBAAyB,IAAI,IAAI,CAAoB;AAmErE;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,aAAa,EACvB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACnF,OAAO,CAAC,eAAe,CAAC,CAuC1B"}