@nac3/forge-cli 0.2.0-alpha.9 → 1.0.0

package/dist/core/provider_keys.js

@@ -0,0 +1,280 @@
+/**
+ * core/provider_keys.ts -- BYOK API key storage (alpha.44 C1).
+ *
+ * Single source of truth for read / write / list of BYOK provider
+ * keys (Anthropic, OpenAI, Google AI, Google STT, Google TTS,
+ * Whisper, ElevenLabs).
+ *
+ * Storage: encrypted Vault (AES-256-GCM, derived from machine
+ * fingerprint -- see src/vault/crypto.ts). Slots are namespaced
+ * `byok.<slot>` so they cannot collide with other vault tenants.
+ *
+ * Migration: on first call the helper checks for the legacy file
+ * `~/.yujin-forge/provider_keys.json` (plaintext, mode 0600 only).
+ * If present:
+ *   1. Imports every recognised slot value into the vault.
+ *   2. Renames the legacy file to `provider_keys.json.legacy.bak`
+ *      so a fresh chat session does not re-import it. The backup
+ *      stays so the user can grep for emergency recovery if the
+ *      vault somehow gets corrupted before the next chat turn.
+ *
+ * All callers (chat tool, server endpoints, voice providers,
+ * claude client init, CLI commands, license sync, etc) MUST go
+ * through this module. Direct reads of provider_keys.json are
+ * forbidden from alpha.44 onward; the audit_consumers tool will
+ * flag any re-introduction.
+ *
+ * ASCII-only.
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import os from 'node:os';
+import { Vault } from '../vault/store.js';
+import { configDir } from '../license/index.js';
+const ALLOWED_SLOTS = [
+    /* Brain provider keys (one of these resolves the active tier
+     *  in src/core/brain_config.ts). */
+    'anthropic_api_key',
+    'openai_api_key',
+    'google_ai_key',
+    /* alpha.51 -- added brain providers reachable from
+     *  cost_router. Slots registered so the BYOK CLI + vault
+     *  recognise them; runtime wire happens in alpha.51b/52. */
+    'deepseek_api_key',
+    'xai_api_key',
+    'mistral_api_key',
+    'cohere_api_key',
+    /* Voice providers (decoupled from brain selection). */
+    'google_stt_key',
+    'google_tts_key',
+    'whisper_api_key',
+    'elevenlabs_api_key',
+    /* alpha.59z.17 HITO 6.4 -- F103 admin key. Stored locally so
+     *  Pablo does not have to paste it for every promote/demote/
+     *  reject/doctrine-update command. Matches the YUJIN_ADMIN_KEY
+     *  secret configured in the HITO 4 worker. */
+    'yujin_admin_key',
+];
+export function listAllowedSlots() {
+    return ALLOWED_SLOTS;
+}
+/* alpha.59z.34 F101 slice 5 sub-slice 2 -- dynamic slot patterns
+ * for per-bridge MCP credentials. The bridge_id is user-controlled
+ * but the slot shape is constrained:
+ *   mcp_<bridge_id>_token  where bridge_id is [a-z0-9_-]{1,80}
+ *
+ * The regex is anchored + length-limited so a malformed bridge_id
+ * cannot exfiltrate into other vault keys via setKey('../foo').
+ * Vault.set itself also enforces ^[a-z][a-z0-9_-]*$ on the prefixed
+ * key, but defence-in-depth: we validate here too.
+ */
+const DYNAMIC_SLOT_PATTERNS = [
+    /^mcp_[a-z0-9][a-z0-9_-]{0,78}_token$/,
+];
+export function isAllowedSlot(s) {
+    if (ALLOWED_SLOTS.includes(s))
+        return true;
+    /* Type guard widening: dynamic slots are not in the ProviderSlot
+     * union, but for runtime callers passing `string` the guard still
+     * narrows enough at the static-known callsites. */
+    return DYNAMIC_SLOT_PATTERNS.some((re) => re.test(s));
+}
+/* Slot prefix in the vault. The Vault enforces
+ * ^[a-z][a-z0-9_-]*$ so we use an underscore, not a dot. */
+const VAULT_PREFIX = 'byok_';
+function legacyKeysFile() {
+    const home = process.env.HOME || process.env.USERPROFILE || os.homedir();
+    const base = process.env.YF_CONFIG_DIR || path.join(home, '.yujin-forge');
+    return path.join(base, 'provider_keys.json');
+}
+/** Cache the Vault open. Each ProviderKeys API call reuses the
+ *  same instance so we don't re-derive the AES key on every read. */
+let _vaultCache = null;
+async function openVault() {
+    if (_vaultCache)
+        return _vaultCache;
+    _vaultCache = await Vault.open({ configDir: configDir() });
+    return _vaultCache;
+}
+/** Force a re-open (tests). */
+export function _resetVaultCache() {
+    _vaultCache = null;
+    _migrationDone = false;
+}
+let _migrationDone = false;
+/** Run once per process. Imports legacy plaintext JSON keys +
+ *  any vault slots stored under the non-prefixed slot name
+ *  (legacy from before alpha.44 OR from users following an old
+ *  yf vault set instruction). Idempotent + tolerant of partial
+ *  imports. */
+export async function migrateLegacyIfNeeded() {
+    if (_migrationDone)
+        return { imported: [], skipped: [], legacy_present: false, vault_slots_migrated: [] };
+    _migrationDone = true;
+    const vault = await openVault();
+    const imported = [];
+    const skipped = [];
+    const vaultSlotsMigrated = [];
+    /* alpha.54 -- migrate vault slots that exist WITHOUT the
+     * byok_ prefix into the canonical prefixed slot. Happens when
+     * users follow an old guide ("yf vault set google_ai_key").
+     * Each migrated row also clears the source slot so the vault
+     * inventory stays clean. */
+    for (const slot of ALLOWED_SLOTS) {
+        const prefixed = VAULT_PREFIX + slot;
+        if (vault.has(prefixed))
+            continue; // already in canonical place
+        if (!vault.has(slot))
+            continue; // nothing in legacy slot either
+        try {
+            const v = vault.get(slot);
+            if (typeof v === 'string' && v.length >= 4) {
+                await vault.set(prefixed, v);
+                await vault.remove(slot);
+                vaultSlotsMigrated.push(slot);
+            }
+        }
+        catch {
+            /* if read fails (vault corruption on that row), skip */
+        }
+    }
+    /* Existing JSON legacy migration (alpha.44). */
+    const legacyFile = legacyKeysFile();
+    let raw;
+    try {
+        raw = await fs.readFile(legacyFile, 'utf-8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT') {
+            return { imported, skipped, legacy_present: false, vault_slots_migrated: vaultSlotsMigrated };
+        }
+        throw err;
+    }
+    let json;
+    try {
+        json = JSON.parse(raw);
+    }
+    catch {
+        return { imported, skipped, legacy_present: true, vault_slots_migrated: vaultSlotsMigrated };
+    }
+    for (const slot of ALLOWED_SLOTS) {
+        const val = json[slot];
+        if (typeof val !== 'string' || val.length < 4)
+            continue;
+        const vaultKey = VAULT_PREFIX + slot;
+        if (vault.has(vaultKey)) {
+            skipped.push(slot);
+            continue;
+        }
+        try {
+            await vault.set(vaultKey, val);
+            imported.push(slot);
+        }
+        catch {
+            skipped.push(slot);
+        }
+    }
+    /* PND-051 (2026-06-16) -- STRIP the plaintext secret values from the
+     * legacy file once they are safely in the vault. We keep the file
+     * (it still holds the NON-secret metadata: brain_provider_preference
+     * + model overrides + voice prefs), but no API key stays in cleartext
+     * on disk -- the encrypted vault is the only place secrets live.
+     *
+     * Safe because keys-sync was removed (PND-099): the old reason to
+     * keep the plaintext (the worker's brain_provider_missing check read
+     * this file) is gone. We only delete a slot whose value is confirmed
+     * present in the vault, so a failed import never loses a key. */
+    let stripped = false;
+    for (const slot of ALLOWED_SLOTS) {
+        if (slot in json && vault.has(VAULT_PREFIX + slot)) {
+            delete json[slot];
+            stripped = true;
+        }
+    }
+    if (stripped) {
+        try {
+            const tmp = legacyFile + '.tmp';
+            await fs.writeFile(tmp, JSON.stringify(json, null, 2), { encoding: 'utf-8', mode: 0o600 });
+            await fs.rename(tmp, legacyFile);
+        }
+        catch { /* best-effort -- the next run retries the strip */ }
+    }
+    return { imported, skipped, legacy_present: true, vault_slots_migrated: vaultSlotsMigrated };
+}
+/** Read a BYOK key plaintext. Returns null when the slot is not
+ *  set or the slot name is invalid. Migrates legacy storage on
+ *  first call. */
+export async function getKey(slot) {
+    if (!isAllowedSlot(slot))
+        return null;
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const vaultKey = VAULT_PREFIX + slot;
+    if (!vault.has(vaultKey))
+        return null;
+    try {
+        return vault.get(vaultKey);
+    }
+    catch {
+        return null;
+    }
+}
+/** Set a BYOK key. Empty / null value clears the slot. */
+export async function setKey(slot, value) {
+    if (!isAllowedSlot(slot))
+        throw new Error('provider_keys: slot not allowed: ' + slot);
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const vaultKey = VAULT_PREFIX + slot;
+    if (value == null || value === '') {
+        await vault.remove(vaultKey);
+        return;
+    }
+    if (typeof value !== 'string' || value.length < 8) {
+        throw new Error('provider_keys: value must be a string >= 8 chars (got ' + (typeof value) + ', length=' + (typeof value === 'string' ? value.length : 0) + ')');
+    }
+    await vault.set(vaultKey, value);
+}
+/** Has-check (no plaintext leak). */
+export async function hasKey(slot) {
+    if (!isAllowedSlot(slot))
+        return false;
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    return vault.has(VAULT_PREFIX + slot);
+}
+/** Status snapshot of all allowed slots -- booleans, not values. */
+export async function listStatus() {
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const out = {};
+    for (const slot of ALLOWED_SLOTS) {
+        out[slot] = vault.has(VAULT_PREFIX + slot);
+    }
+    return out;
+}
+/** Convenience: synchronous-ish wrappers for the legacy code paths
+ *  that did `readKeys(): Record<string, unknown>` and expected a
+ *  full snapshot. Returns plaintext values for set slots; null
+ *  for unset. Keep call sites aware this DECRYPTS everything --
+ *  do not log the return. */
+export async function readAllPlaintext() {
+    await migrateLegacyIfNeeded();
+    const vault = await openVault();
+    const out = {};
+    for (const slot of ALLOWED_SLOTS) {
+        if (vault.has(VAULT_PREFIX + slot)) {
+            try {
+                out[slot] = vault.get(VAULT_PREFIX + slot);
+            }
+            catch {
+                out[slot] = null;
+            }
+        }
+        else {
+            out[slot] = null;
+        }
+    }
+    return out;
+}
+//# sourceMappingURL=provider_keys.js.map

package/dist/core/provider_keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_keys.js","sourceRoot":"","sources":["../../src/core/provider_keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AACH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,EAAE,KAAK,EAAE,MAAM,mBAAmB,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAEhD,MAAM,aAAa,GAAG;IACpB;wCACoC;IACpC,mBAAmB;IACnB,gBAAgB;IAChB,eAAe;IACf;;gEAE4D;IAC5D,kBAAkB;IAClB,aAAa;IACb,iBAAiB;IACjB,gBAAgB;IAEhB,uDAAuD;IACvD,gBAAgB;IAChB,gBAAgB;IAChB,iBAAiB;IACjB,oBAAoB;IAEpB;;;kDAG8C;IAC9C,iBAAiB;CACT,CAAC;AAGX,MAAM,UAAU,gBAAgB;IAC9B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,qBAAqB,GAAsB;IAC/C,sCAAsC;CACvC,CAAC;AAEF,MAAM,UAAU,aAAa,CAAC,CAAS;IACrC,IAAK,aAAmC,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAClE;;uDAEmD;IACnD,OAAO,qBAAqB,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACxD,CAAC;AAED;4DAC4D;AAC5D,MAAM,YAAY,GAAG,OAAO,CAAC;AAE7B,SAAS,cAAc;IACrB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAC1E,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,oBAAoB,CAAC,CAAC;AAC/C,CAAC;AAED;qEACqE;AACrE,IAAI,WAAW,GAAiB,IAAI,CAAC;AACrC,KAAK,UAAU,SAAS;IACtB,IAAI,WAAW;QAAE,OAAO,WAAW,CAAC;IACpC,WAAW,GAAG,MAAM,KAAK,CAAC,IAAI,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,CAAC,CAAC;IAC3D,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,gBAAgB;IAC9B,WAAW,GAAG,IAAI,CAAC;IACnB,cAAc,GAAG,KAAK,CAAC;AACzB,CAAC;AAED,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B;;;;eAIe;AACf,MAAM,CAAC,KAAK,UAAU,qBAAqB;IAMzC,IAAI,cAAc;QAAE,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE,EAAE,EAAE,CAAC;IAC1G,cAAc,GAAG,IAAI,CAAC;IACtB,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,kBAAkB,GAAa,EAAE,CAAC;IAExC;;;;gCAI4B;IAC5B,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,SAAS,CAAE,6BAA6B;QACjE,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;YAAE,SAAS,CAAK,gCAAgC;QACpE,IAAI,CAAC;YACH,MAAM,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC1B,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,EAAE,CAAC;gBAC3C,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC;gBAC7B,MAAM,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;gBACzB,kBAAkB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,wDAAwD;QAC1D,CAAC;IACH,CAAC;IAED,gDAAgD;IAChD,MAAM,UAAU,GAAG,cAAc,EAAE,CAAC;IACpC,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,KAAK,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;QAChG,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IACD,IAAI,IAA6B,CAAC;IAClC,IAAI,CAAC;QAAC,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAAC,CAAC;IAC/B,MAAM,CAAC;QAAC,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;IAAC,CAAC;IACvG,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QACxD,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;QACrC,IAAI,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YAAC,SAAS;QAAC,CAAC;QAC1D,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;YAC/B,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtB,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IACD;;;;;;;;;qEASiE;IACjE,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,IAAI,IAAI,IAAI,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC;YACnD,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;YAClB,QAAQ,GAAG,IAAI,CAAC;QAClB,CAAC;IACH,CAAC;IACD,IAAI,QAAQ,EAAE,CAAC;QACb,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,UAAU,GAAG,MAAM,CAAC;YAChC,MAAM,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;YAC3F,MAAM,EAAE,CAAC,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,CAAC;QACnC,CAAC;QAAC,MAAM,CAAC,CAAC,mDAAmD,CAAC,CAAC;IACjE,CAAC;IACD,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,cAAc,EAAE,IAAI,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,CAAC;AAC/F,CAAC;AAED;;kBAEkB;AAClB,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IACtC,IAAI,CAAC;QAAC,OAAO,KAAK,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC;QAAC,OAAO,IAAI,CAAC;IAAC,CAAC;AAC5D,CAAC;AAED,0DAA0D;AAC1D,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY,EAAE,KAAgC;IACzE,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,GAAG,IAAI,CAAC,CAAC;IACtF,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,QAAQ,GAAG,YAAY,GAAG,IAAI,CAAC;IACrC,IAAI,KAAK,IAAI,IAAI,IAAI,KAAK,KAAK,EAAE,EAAE,CAAC;QAClC,MAAM,KAAK,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO;IACT,CAAC;IACD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClD,MAAM,IAAI,KAAK,CAAC,wDAAwD,GAAG,CAAC,OAAO,KAAK,CAAC,GAAG,WAAW,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC;IAClK,CAAC;IACD,MAAM,KAAK,CAAC,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AACnC,CAAC;AAED,qCAAqC;AACrC,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,IAAY;IACvC,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,OAAO,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;AACxC,CAAC;AAED,oEAAoE;AACpE,MAAM,CAAC,KAAK,UAAU,UAAU;IAC9B,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAA4B,EAAE,CAAC;IACxC,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;IAC7C,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;6BAI6B;AAC7B,MAAM,CAAC,KAAK,UAAU,gBAAgB;IACpC,MAAM,qBAAqB,EAAE,CAAC;IAC9B,MAAM,KAAK,GAAG,MAAM,SAAS,EAAE,CAAC;IAChC,MAAM,GAAG,GAAkC,EAAE,CAAC;IAC9C,KAAK,MAAM,IAAI,IAAI,aAAa,EAAE,CAAC;QACjC,IAAI,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,EAAE,CAAC;YACnC,IAAI,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC,GAAG,CAAC,YAAY,GAAG,IAAI,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC;gBAAC,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;YAAC,CAAC;QACjF,CAAC;aAAM,CAAC;YACN,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACnB,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/core/provider_models.d.ts

@@ -0,0 +1,27 @@
+import { type BrainProvider } from './brain_config.js';
+export interface ProviderModel {
+    id: string;
+    display_name: string;
+}
+export interface ModelListResult {
+    provider: BrainProvider;
+    models: ProviderModel[];
+    /** 'live' = traido de la API del provider; 'static' = fallback
+     *  embebido (sin key o endpoint inalcanzable). */
+    source: 'live' | 'static';
+    /** Presente cuando source='static' por un error (no por falta
+     *  de key). Truncado, sin secretos. */
+    error?: string;
+}
+/** Test hook. */
+export declare function _resetProviderModelsCache(): void;
+/**
+ * Lista los modelos disponibles para un provider. Nunca lanza:
+ * degrada a la lista estatica con `source: 'static'`.
+ */
+export declare function listProviderModels(provider: BrainProvider, opts?: {
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+    api_key?: string | null;
+}): Promise<ModelListResult>;
+//# sourceMappingURL=provider_models.d.ts.map

package/dist/core/provider_models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_models.d.ts","sourceRoot":"","sources":["../../src/core/provider_models.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAwB,KAAK,aAAa,EAAE,MAAM,mBAAmB,CAAC;AAE7E,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,aAAa,CAAC;IACxB,MAAM,EAAE,aAAa,EAAE,CAAC;IACxB;sDACkD;IAClD,MAAM,EAAE,MAAM,GAAG,QAAQ,CAAC;IAC1B;2CACuC;IACvC,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAwCD,iBAAiB;AACjB,wBAAgB,yBAAyB,IAAI,IAAI,CAAoB;AAmErE;;;GAGG;AACH,wBAAsB,kBAAkB,CACtC,QAAQ,EAAE,aAAa,EACvB,IAAI,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAO,GACnF,OAAO,CAAC,eAAe,CAAC,CAuC1B"}

package/dist/core/provider_models.js

@@ -0,0 +1,169 @@
+/**
+ * provider_models.ts -- listado de modelos por provider (PND-069).
+ *
+ * El panel de config necesita un selector de modelo por provider
+ * que NO dependa de listas hardcodeadas que driftean. Estrategia:
+ *
+ *   1. Con API key en el vault: consultar el endpoint de listado
+ *      del provider (Anthropic /v1/models, OpenAI /v1/models,
+ *      Google /v1beta/models). Cache en memoria 10 min.
+ *   2. Sin key o con el endpoint caido: lista estatica embebida
+ *      (los modelos estables conocidos a la fecha del build) con
+ *      flag `source: 'static'` para que la UI lo muestre.
+ *
+ * Las keys nunca viajan en query strings (headers siempre) ni se
+ * loguean. ASCII-only.
+ */
+import { getKey } from './provider_keys.js';
+import { vaultSlotForProvider } from './brain_config.js';
+/* Fallback estatico -- modelos estables al momento del build.
+ * Mantener corto: es solo para que el selector no quede vacio
+ * offline (la leccion de keys_setup PND-056/CR-D12). */
+const STATIC_MODELS = {
+    anthropic: [
+        { id: 'claude-opus-4-8', display_name: 'Claude Opus 4.8' },
+        { id: 'claude-sonnet-4-6', display_name: 'Claude Sonnet 4.6' },
+        { id: 'claude-haiku-4-5-20251001', display_name: 'Claude Haiku 4.5' },
+    ],
+    google_ai: [
+        { id: 'gemini-2.5-pro', display_name: 'Gemini 2.5 Pro' },
+        { id: 'gemini-2.5-flash', display_name: 'Gemini 2.5 Flash' },
+        { id: 'gemini-2.5-flash-lite', display_name: 'Gemini 2.5 Flash Lite' },
+    ],
+    openai: [
+        { id: 'gpt-4o', display_name: 'GPT-4o' },
+        { id: 'gpt-4o-mini', display_name: 'GPT-4o mini' },
+    ],
+    deepseek: [
+        { id: 'deepseek-chat', display_name: 'DeepSeek Chat' },
+        { id: 'deepseek-reasoner', display_name: 'DeepSeek Reasoner' },
+    ],
+    xai: [
+        { id: 'grok-3', display_name: 'Grok 3' },
+    ],
+    mistral: [
+        { id: 'mistral-large-latest', display_name: 'Mistral Large' },
+        { id: 'mistral-small-latest', display_name: 'Mistral Small' },
+    ],
+    cohere: [
+        { id: 'command-a-03-2025', display_name: 'Command A' },
+    ],
+};
+const CACHE_TTL_MS = 10 * 60 * 1000;
+const _cache = new Map();
+/** Test hook. */
+export function _resetProviderModelsCache() { _cache.clear(); }
+function staticResult(provider, error) {
+    const r = {
+        provider,
+        models: STATIC_MODELS[provider] ?? [],
+        source: 'static',
+    };
+    if (error)
+        r.error = error.slice(0, 120);
+    return r;
+}
+async function fetchJson(url, headers, fetchImpl, timeoutMs) {
+    const controller = new AbortController();
+    const t = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const r = await fetchImpl(url, { headers, signal: controller.signal });
+        if (!r.ok) {
+            let detail = '';
+            try {
+                detail = (await r.text()).slice(0, 80).replace(/\s+/g, ' ');
+            }
+            catch { /* ignore */ }
+            throw new Error('http ' + r.status + (detail ? ' ' + detail : ''));
+        }
+        return await r.json();
+    }
+    finally {
+        clearTimeout(t);
+    }
+}
+async function listAnthropic(key, fetchImpl, timeoutMs) {
+    const j = await fetchJson('https://api.anthropic.com/v1/models?limit=50', {
+        'x-api-key': key,
+        'anthropic-version': '2023-06-01',
+    }, fetchImpl, timeoutMs);
+    return (j.data ?? [])
+        .filter((m) => typeof m.id === 'string')
+        .map((m) => ({ id: m.id, display_name: m.display_name || m.id }));
+}
+async function listOpenAi(key, fetchImpl, timeoutMs) {
+    const j = await fetchJson('https://api.openai.com/v1/models', {
+        'authorization': 'Bearer ' + key,
+    }, fetchImpl, timeoutMs);
+    return (j.data ?? [])
+        .filter((m) => typeof m.id === 'string' && /^(gpt|o[0-9])/.test(m.id))
+        .map((m) => ({ id: m.id, display_name: m.id }));
+}
+async function listGoogle(key, fetchImpl, timeoutMs) {
+    const j = await fetchJson('https://generativelanguage.googleapis.com/v1beta/models?pageSize=100', {
+        'x-goog-api-key': key,
+    }, fetchImpl, timeoutMs);
+    return (j.models ?? [])
+        .filter((m) => typeof m.name === 'string'
+        && (m.supportedGenerationMethods ?? []).includes('generateContent'))
+        .map((m) => ({
+        id: m.name.replace(/^models\//, ''),
+        display_name: m.displayName || m.name.replace(/^models\//, ''),
+    }));
+}
+/**
+ * Lista los modelos disponibles para un provider. Nunca lanza:
+ * degrada a la lista estatica con `source: 'static'`.
+ */
+export async function listProviderModels(provider, opts = {}) {
+    /* yujin_managed: los modelos los decide el worker por plan/tier;
+     * el cliente no tiene key. La lista util es la del provider
+     * subyacente, que el worker no expone -- devolver vacio static
+     * y que la UI lo explique. */
+    if (provider === 'yujin_managed') {
+        return { provider, models: [], source: 'static' };
+    }
+    const cached = _cache.get(provider);
+    if (cached && Date.now() - cached.ts < CACHE_TTL_MS)
+        return cached.result;
+    let key = opts.api_key ?? null;
+    if (key === null && opts.api_key === undefined) {
+        try {
+            key = await getKey(vaultSlotForProvider(provider));
+        }
+        catch {
+            key = null;
+        }
+    }
+    if (!key)
+        return staticResult(provider);
+    const fetchImpl = opts.fetchImpl ?? fetch;
+    const timeoutMs = opts.timeoutMs ?? 4000;
+    try {
+        let models;
+        switch (provider) {
+            case 'anthropic':
+                models = await listAnthropic(key, fetchImpl, timeoutMs);
+                break;
+            case 'openai':
+                models = await listOpenAi(key, fetchImpl, timeoutMs);
+                break;
+            case 'google_ai':
+                models = await listGoogle(key, fetchImpl, timeoutMs);
+                break;
+            /* Providers sin endpoint de listado wireado todavia:
+             * fallback estatico sin error. */
+            default: return staticResult(provider);
+        }
+        if (models.length === 0)
+            return staticResult(provider, 'empty model list');
+        const result = { provider, models, source: 'live' };
+        _cache.set(provider, { ts: Date.now(), result });
+        return result;
+    }
+    catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        return staticResult(provider, msg);
+    }
+}
+//# sourceMappingURL=provider_models.js.map

package/dist/core/provider_models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider_models.js","sourceRoot":"","sources":["../../src/core/provider_models.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AACH,OAAO,EAAE,MAAM,EAAE,MAAM,oBAAoB,CAAC;AAC5C,OAAO,EAAE,oBAAoB,EAAsB,MAAM,mBAAmB,CAAC;AAkB7E;;wDAEwD;AACxD,MAAM,aAAa,GAAoD;IACrE,SAAS,EAAE;QACT,EAAE,EAAE,EAAE,iBAAiB,EAAa,YAAY,EAAE,iBAAiB,EAAE;QACrE,EAAE,EAAE,EAAE,mBAAmB,EAAW,YAAY,EAAE,mBAAmB,EAAE;QACvE,EAAE,EAAE,EAAE,2BAA2B,EAAG,YAAY,EAAE,kBAAkB,EAAE;KACvE;IACD,SAAS,EAAE;QACT,EAAE,EAAE,EAAE,gBAAgB,EAAS,YAAY,EAAE,gBAAgB,EAAE;QAC/D,EAAE,EAAE,EAAE,kBAAkB,EAAO,YAAY,EAAE,kBAAkB,EAAE;QACjE,EAAE,EAAE,EAAE,uBAAuB,EAAE,YAAY,EAAE,uBAAuB,EAAE;KACvE;IACD,MAAM,EAAE;QACN,EAAE,EAAE,EAAE,QAAQ,EAAO,YAAY,EAAE,QAAQ,EAAE;QAC7C,EAAE,EAAE,EAAE,aAAa,EAAE,YAAY,EAAE,aAAa,EAAE;KACnD;IACD,QAAQ,EAAE;QACR,EAAE,EAAE,EAAE,eAAe,EAAM,YAAY,EAAE,eAAe,EAAE;QAC1D,EAAE,EAAE,EAAE,mBAAmB,EAAE,YAAY,EAAE,mBAAmB,EAAE;KAC/D;IACD,GAAG,EAAE;QACH,EAAE,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,QAAQ,EAAE;KACzC;IACD,OAAO,EAAE;QACP,EAAE,EAAE,EAAE,sBAAsB,EAAE,YAAY,EAAE,eAAe,EAAE;QAC7D,EAAE,EAAE,EAAE,sBAAsB,EAAE,YAAY,EAAE,eAAe,EAAE;KAC9D;IACD,MAAM,EAAE;QACN,EAAE,EAAE,EAAE,mBAAmB,EAAE,YAAY,EAAE,WAAW,EAAE;KACvD;CACF,CAAC;AAGF,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACpC,MAAM,MAAM,GAAG,IAAI,GAAG,EAAsB,CAAC;AAE7C,iBAAiB;AACjB,MAAM,UAAU,yBAAyB,KAAW,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC;AAErE,SAAS,YAAY,CAAC,QAAuB,EAAE,KAAc;IAC3D,MAAM,CAAC,GAAoB;QACzB,QAAQ;QACR,MAAM,EAAE,aAAa,CAAC,QAAQ,CAAC,IAAI,EAAE;QACrC,MAAM,EAAE,QAAQ;KACjB,CAAC;IACF,IAAI,KAAK;QAAE,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACzC,OAAO,CAAC,CAAC;AACX,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,GAAW,EACX,OAA+B,EAC/B,SAAuB,EACvB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC1D,IAAI,CAAC;QACH,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;QACvE,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,IAAI,MAAM,GAAG,EAAE,CAAC;YAChB,IAAI,CAAC;gBAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;YAC3F,MAAM,IAAI,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,MAAM,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QACrE,CAAC;QACD,OAAO,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;IACxB,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,GAAW,EAAE,SAAuB,EAAE,SAAiB;IAClF,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,8CAA8C,EAAE;QACxE,WAAW,EAAE,GAAG;QAChB,mBAAmB,EAAE,YAAY;KAClC,EAAE,SAAS,EAAE,SAAS,CAA6D,CAAC;IACrF,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,CAAC;SACvC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAY,EAAE,YAAY,EAAE,CAAC,CAAC,YAAY,IAAK,CAAC,CAAC,EAAa,EAAE,CAAC,CAAC,CAAC;AAC5F,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,SAAuB,EAAE,SAAiB;IAC/E,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,kCAAkC,EAAE;QAC5D,eAAe,EAAE,SAAS,GAAG,GAAG;KACjC,EAAE,SAAS,EAAE,SAAS,CAAsC,CAAC;IAC9D,OAAO,CAAC,CAAC,CAAC,IAAI,IAAI,EAAE,CAAC;SAClB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,EAAY,CAAC,CAAC;SAC/E,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC,EAAY,EAAE,YAAY,EAAE,CAAC,CAAC,EAAY,EAAE,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,UAAU,CAAC,GAAW,EAAE,SAAuB,EAAE,SAAiB;IAC/E,MAAM,CAAC,GAAG,MAAM,SAAS,CAAC,sEAAsE,EAAE;QAChG,gBAAgB,EAAE,GAAG;KACtB,EAAE,SAAS,EAAE,SAAS,CAEtB,CAAC;IACF,OAAO,CAAC,CAAC,CAAC,MAAM,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ;WACpC,CAAC,CAAC,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;SACrE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACX,EAAE,EAAG,CAAC,CAAC,IAAe,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;QAC/C,YAAY,EAAE,CAAC,CAAC,WAAW,IAAK,CAAC,CAAC,IAAe,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC;KAC3E,CAAC,CAAC,CAAC;AACR,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,QAAuB,EACvB,OAAkF,EAAE;IAEpF;;;kCAG8B;IAC9B,IAAI,QAAQ,KAAK,eAAe,EAAE,CAAC;QACjC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;IACpD,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACpC,IAAI,MAAM,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,EAAE,GAAG,YAAY;QAAE,OAAO,MAAM,CAAC,MAAM,CAAC;IAE1E,IAAI,GAAG,GAAkB,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC;IAC9C,IAAI,GAAG,KAAK,IAAI,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,EAAE,CAAC;QAC/C,IAAI,CAAC;YAAC,GAAG,GAAG,MAAM,MAAM,CAAC,oBAAoB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,GAAG,GAAG,IAAI,CAAC;QAAC,CAAC;IACnF,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IAExC,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IAC1C,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,IAAI,CAAC;IAEzC,IAAI,CAAC;QACH,IAAI,MAAuB,CAAC;QAC5B,QAAQ,QAAQ,EAAE,CAAC;YACjB,KAAK,WAAW;gBAAE,MAAM,GAAG,MAAM,aAAa,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAAC,MAAM;YACjF,KAAK,QAAQ;gBAAK,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAAI,MAAM;YACjF,KAAK,WAAW;gBAAE,MAAM,GAAG,MAAM,UAAU,CAAC,GAAG,EAAE,SAAS,EAAE,SAAS,CAAC,CAAC;gBAAI,MAAM;YACjF;8CACkC;YAClC,OAAO,CAAC,CAAC,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;QACzC,CAAC;QACD,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,YAAY,CAAC,QAAQ,EAAE,kBAAkB,CAAC,CAAC;QAC3E,MAAM,MAAM,GAAoB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC;QACrE,MAAM,CAAC,GAAG,CAAC,QAAQ,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;QACjD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,OAAO,YAAY,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IACrC,CAAC;AACH,CAAC"}

package/dist/core/reasoning_gate.d.ts

@@ -0,0 +1,72 @@
+/**
+ * reasoning_gate.ts -- pre-LLM tier classifier (alpha.55).
+ *
+ * Cheap, deterministic features computed without an LLM call.
+ * Returns a tier suggestion + confidence + signal list. When
+ * confidence > 0.85 the cost_router uses the result directly
+ * and skips the Gemini turn_classifier (saves ~400 ms + tokens).
+ * When confidence <= 0.85 the gate's verdict is "ambiguous" and
+ * the router asks turn_classifier for a second opinion.
+ *
+ * Signals scanned:
+ *   - Message length (long prompts skew toward frontier reasoning).
+ *   - Frontier keywords (design, architecture, implement,
+ *     refactor, code, write a function, etc -- multilingual).
+ *   - Eco keywords (open, show, list, abrime, muestrame -- short
+ *     NAC3-shaped commands).
+ *   - Verb hints recognised in the manifest (e.g. references to
+ *     pizarron/lector/voz/idioma map to eco).
+ *   - Attachment presence (frontier bias).
+ *   - Prior tier in the conversation history (sticky tier when
+ *     "continua / sigue" is the explicit follow-up).
+ *
+ * All keyword lists are normalised to lowercase + accent-stripped.
+ * Multi-language (es / en) since the user types in both.
+ *
+ * ASCII-only.
+ */
+import type { BrainTier } from '../nac3/verb_tier_map.js';
+export interface GateInput {
+    /** The new user message text. */
+    text: string;
+    /** How many attachments (files, voice notes, screenshots) came
+     *  with the turn. */
+    attachments?: number;
+    /** Up to ~3 recent turns to detect follow-ups ("sigue", "y ahora"). */
+    history?: Array<{
+        role: 'user' | 'assistant';
+        content: string;
+    }>;
+    /** Tier the previous turn ran on, when known. Used for sticky
+     *  follow-ups. */
+    previous_tier?: 'eco' | 'frontier';
+}
+export interface GateDecision {
+    /** Recommended tier when confidence is high. */
+    tier: 'eco' | 'frontier';
+    /** Confidence 0..1. > 0.85 means the router skips classifier. */
+    confidence: number;
+    /** Whether the router should escalate to turn_classifier. */
+    ambiguous: boolean;
+    /** Human-readable signals fired. Goes to brain_routing.jsonl. */
+    signals: string[];
+}
+/**
+ * Score the input and decide tier + confidence.
+ *
+ * Algorithm:
+ *   1. If a sticky follow-up phrase + previous_tier known ->
+ *      inherit previous tier with confidence 0.95.
+ *   2. Otherwise sum keyword hits. Each hit weighs 0.18 toward
+ *      its bucket.
+ *   3. Long messages (>= 200 chars) add 0.20 to frontier.
+ *      Very short (< 24 chars) add 0.10 to eco.
+ *   4. Each attachment adds 0.20 to frontier.
+ *   5. Tier = bucket with higher absolute score. Confidence =
+ *      min(0.99, |frontier - eco| + base 0.40).
+ *   6. If both buckets are < 0.20 (no strong signals)
+ *      confidence drops to 0.30 -> ambiguous.
+ */
+export declare function classifyGate(input: GateInput): GateDecision;
+export type { BrainTier };
+//# sourceMappingURL=reasoning_gate.d.ts.map

package/dist/core/reasoning_gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reasoning_gate.d.ts","sourceRoot":"","sources":["../../src/core/reasoning_gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,0BAA0B,CAAC;AAE1D,MAAM,WAAW,SAAS;IACxB,iCAAiC;IACjC,IAAI,EAAE,MAAM,CAAC;IACb;yBACqB;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,OAAO,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjE;sBACkB;IAClB,aAAa,CAAC,EAAE,KAAK,GAAG,UAAU,CAAC;CACpC;AAED,MAAM,WAAW,YAAY;IAC3B,gDAAgD;IAChD,IAAI,EAAE,KAAK,GAAG,UAAU,CAAC;IACzB,iEAAiE;IACjE,UAAU,EAAE,MAAM,CAAC;IACnB,6DAA6D;IAC7D,SAAS,EAAE,OAAO,CAAC;IACnB,iEAAiE;IACjE,OAAO,EAAE,MAAM,EAAE,CAAC;CACnB;AAmED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,SAAS,GAAG,YAAY,CAyG3D;AAID,YAAY,EAAE,SAAS,EAAE,CAAC"}