@namzu/cli 0.0.3 → 0.1.0

package/dist/integrations/providers/mask.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask.js","sourceRoot":"","sources":["../../../src/integrations/providers/mask.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,UAAU,UAAU,CAAC,MAAiC,EAAE,IAAI,GAAG,CAAC;IACrE,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAA;IACxB,IAAI,MAAM,CAAC,MAAM,IAAI,IAAI;QAAE,OAAO,KAAK,CAAA;IACvC,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAA;IAChC,OAAO,MAAM,IAAI,EAAE,CAAA;AACpB,CAAC"}

package/dist/integrations/providers/mask.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=mask.test.d.ts.map

package/dist/integrations/providers/mask.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask.test.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/mask.test.ts"],"names":[],"mappings":""}

package/dist/integrations/providers/mask.test.js

@@ -0,0 +1,20 @@
+import { describe, expect, it } from 'vitest';
+import { maskSecret } from './mask.js';
+describe('maskSecret', () => {
+    it('returns null for null / undefined / empty', () => {
+        expect(maskSecret(null)).toBeNull();
+        expect(maskSecret(undefined)).toBeNull();
+        expect(maskSecret('')).toBeNull();
+    });
+    it('returns *** for secrets shorter than the keep window', () => {
+        expect(maskSecret('abc', 4)).toBe('***');
+        expect(maskSecret('abcd', 4)).toBe('***');
+    });
+    it('keeps the last N characters by default', () => {
+        expect(maskSecret('sk-ant-deadbeef1234')).toBe('***1234');
+    });
+    it('honors a custom keep length', () => {
+        expect(maskSecret('sk-ant-deadbeef1234', 6)).toBe('***ef1234');
+    });
+});
+//# sourceMappingURL=mask.test.js.map

package/dist/integrations/providers/mask.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mask.test.js","sourceRoot":"","sources":["../../../src/integrations/providers/mask.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAA;AAEtC,QAAQ,CAAC,YAAY,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACnC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IAClC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC/D,MAAM,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACxC,MAAM,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QACjD,MAAM,CAAC,UAAU,CAAC,qBAAqB,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6BAA6B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,UAAU,CAAC,qBAAqB,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/integrations/providers/oauth.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Claude Code OAuth token refresh.
+ *
+ * The access token discovered from the macOS Keychain (or a clawtool secret)
+ * is short-lived (~8h). When it lapses, Anthropic answers 401 and the agent
+ * stream dies. Claude Code refreshes proactively against its public OAuth
+ * token endpoint using the long-lived refresh token; we do the same so a
+ * stale token is silently renewed before the session starts instead of
+ * surfacing as an authentication error.
+ *
+ * Non-throwing: any failure (no refresh token, network down, endpoint error)
+ * returns the existing token unchanged — at worst the caller hits the same
+ * 401 it would have hit anyway, never a crash.
+ */
+import { type ClaudeCodeOAuthCredential } from './keychain.js';
+export interface OAuthMetadata {
+    readonly refreshToken?: string;
+    readonly expiresAt?: number;
+}
+/**
+ * Return a non-expired access token, refreshing first if the current one is
+ * lapsed/about-to-lapse and a refresh token is available. On a successful
+ * refresh the new credential is persisted back to the Keychain (best-effort).
+ */
+export declare function ensureFreshAnthropicToken(accessToken: string, oauth: OAuthMetadata): Promise<string>;
+/** Exchange a refresh token for a new credential, or `null` on any failure. */
+export declare function refreshClaudeCodeToken(refreshToken: string): Promise<ClaudeCodeOAuthCredential | null>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/integrations/providers/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAE,KAAK,yBAAyB,EAAqC,MAAM,eAAe,CAAA;AASjG,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAA;IAC9B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,wBAAsB,yBAAyB,CAC9C,WAAW,EAAE,MAAM,EACnB,KAAK,EAAE,aAAa,GAClB,OAAO,CAAC,MAAM,CAAC,CASjB;AAED,+EAA+E;AAC/E,wBAAsB,sBAAsB,CAC3C,YAAY,EAAE,MAAM,GAClB,OAAO,CAAC,yBAAyB,GAAG,IAAI,CAAC,CA2B3C"}

package/dist/integrations/providers/oauth.js

@@ -0,0 +1,65 @@
+/**
+ * Claude Code OAuth token refresh.
+ *
+ * The access token discovered from the macOS Keychain (or a clawtool secret)
+ * is short-lived (~8h). When it lapses, Anthropic answers 401 and the agent
+ * stream dies. Claude Code refreshes proactively against its public OAuth
+ * token endpoint using the long-lived refresh token; we do the same so a
+ * stale token is silently renewed before the session starts instead of
+ * surfacing as an authentication error.
+ *
+ * Non-throwing: any failure (no refresh token, network down, endpoint error)
+ * returns the existing token unchanged — at worst the caller hits the same
+ * 401 it would have hit anyway, never a crash.
+ */
+import { writeClaudeCodeKeychainCredential } from './keychain.js';
+/** Public Claude Code OAuth client id + token endpoint. */
+const CLIENT_ID = '9d1c250a-e61b-44d9-88ed-5944d1962f5e';
+const TOKEN_URL = 'https://console.anthropic.com/v1/oauth/token';
+/** Refresh a few seconds early so an about-to-expire token isn't used. */
+const EXPIRY_SKEW_MS = 60_000;
+/**
+ * Return a non-expired access token, refreshing first if the current one is
+ * lapsed/about-to-lapse and a refresh token is available. On a successful
+ * refresh the new credential is persisted back to the Keychain (best-effort).
+ */
+export async function ensureFreshAnthropicToken(accessToken, oauth) {
+    const fresh = oauth.expiresAt === undefined || oauth.expiresAt - Date.now() > EXPIRY_SKEW_MS;
+    if (fresh)
+        return accessToken;
+    if (!oauth.refreshToken)
+        return accessToken;
+    const refreshed = await refreshClaudeCodeToken(oauth.refreshToken);
+    if (!refreshed)
+        return accessToken;
+    writeClaudeCodeKeychainCredential(refreshed);
+    return refreshed.accessToken;
+}
+/** Exchange a refresh token for a new credential, or `null` on any failure. */
+export async function refreshClaudeCodeToken(refreshToken) {
+    try {
+        const res = await fetch(TOKEN_URL, {
+            method: 'POST',
+            headers: { 'content-type': 'application/json' },
+            body: JSON.stringify({
+                grant_type: 'refresh_token',
+                refresh_token: refreshToken,
+                client_id: CLIENT_ID,
+            }),
+        });
+        if (!res.ok)
+            return null;
+        const data = (await res.json());
+        if (typeof data.access_token !== 'string' || data.access_token.length === 0)
+            return null;
+        return {
+            accessToken: data.access_token,
+            refreshToken: typeof data.refresh_token === 'string' ? data.refresh_token : refreshToken,
+            expiresAt: typeof data.expires_in === 'number' ? Date.now() + data.expires_in * 1_000 : undefined,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/dist/integrations/providers/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/integrations/providers/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EAAkC,iCAAiC,EAAE,MAAM,eAAe,CAAA;AAEjG,2DAA2D;AAC3D,MAAM,SAAS,GAAG,sCAAsC,CAAA;AACxD,MAAM,SAAS,GAAG,8CAA8C,CAAA;AAEhE,0EAA0E;AAC1E,MAAM,cAAc,GAAG,MAAM,CAAA;AAO7B;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAC9C,WAAmB,EACnB,KAAoB;IAEpB,MAAM,KAAK,GAAG,KAAK,CAAC,SAAS,KAAK,SAAS,IAAI,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAA;IAC5F,IAAI,KAAK;QAAE,OAAO,WAAW,CAAA;IAC7B,IAAI,CAAC,KAAK,CAAC,YAAY;QAAE,OAAO,WAAW,CAAA;IAE3C,MAAM,SAAS,GAAG,MAAM,sBAAsB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAA;IAClE,IAAI,CAAC,SAAS;QAAE,OAAO,WAAW,CAAA;IAClC,iCAAiC,CAAC,SAAS,CAAC,CAAA;IAC5C,OAAO,SAAS,CAAC,WAAW,CAAA;AAC7B,CAAC;AAED,+EAA+E;AAC/E,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,YAAoB;IAEpB,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE;YAClC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE;YAC/C,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACpB,UAAU,EAAE,eAAe;gBAC3B,aAAa,EAAE,YAAY;gBAC3B,SAAS,EAAE,SAAS;aACpB,CAAC;SACF,CAAC,CAAA;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAA;QACxB,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAI7B,CAAA;QACD,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAA;QACxF,OAAO;YACN,WAAW,EAAE,IAAI,CAAC,YAAY;YAC9B,YAAY,EAAE,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,YAAY;YACxF,SAAS,EACR,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,UAAU,GAAG,KAAK,CAAC,CAAC,CAAC,SAAS;SACvF,CAAA;IACF,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAA;IACZ,CAAC;AACF,CAAC"}

package/dist/integrations/providers/oauth.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=oauth.test.d.ts.map

package/dist/integrations/providers/oauth.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.test.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/oauth.test.ts"],"names":[],"mappings":""}

package/dist/integrations/providers/oauth.test.js

@@ -0,0 +1,86 @@
+import { afterEach, describe, expect, it, vi } from 'vitest';
+// Stub the Keychain write so an expired-token refresh under test never touches
+// the real macOS Keychain (this suite can run on the developer's own machine).
+vi.mock('./keychain.js', async (importOriginal) => {
+    const actual = await importOriginal();
+    return { ...actual, writeClaudeCodeKeychainCredential: vi.fn(() => false) };
+});
+import { ensureFreshAnthropicToken, refreshClaudeCodeToken } from './oauth.js';
+function mockFetch(impl) {
+    vi.stubGlobal('fetch', impl);
+}
+afterEach(() => {
+    vi.unstubAllGlobals();
+});
+describe('refreshClaudeCodeToken', () => {
+    it('exchanges the refresh token and maps the response', async () => {
+        mockFetch((async () => new Response(JSON.stringify({
+            access_token: 'cc-new-access',
+            refresh_token: 'rt-new',
+            expires_in: 3600,
+        }), { status: 200 })));
+        const before = Date.now();
+        const cred = await refreshClaudeCodeToken('rt-old');
+        expect(cred?.accessToken).toBe('cc-new-access');
+        expect(cred?.refreshToken).toBe('rt-new');
+        expect(cred?.expiresAt).toBeGreaterThanOrEqual(before + 3600 * 1000);
+    });
+    it('keeps the old refresh token when the response omits one', async () => {
+        mockFetch((async () => new Response(JSON.stringify({ access_token: 'cc-new' }), { status: 200 })));
+        const cred = await refreshClaudeCodeToken('rt-old');
+        expect(cred?.accessToken).toBe('cc-new');
+        expect(cred?.refreshToken).toBe('rt-old');
+    });
+    it('returns null on a non-2xx response', async () => {
+        mockFetch((async () => new Response('nope', { status: 401 })));
+        expect(await refreshClaudeCodeToken('rt')).toBeNull();
+    });
+    it('returns null when fetch throws', async () => {
+        mockFetch((async () => {
+            throw new Error('network down');
+        }));
+        expect(await refreshClaudeCodeToken('rt')).toBeNull();
+    });
+    it('returns null when the payload lacks an access token', async () => {
+        mockFetch((async () => new Response(JSON.stringify({ foo: 'bar' }), { status: 200 })));
+        expect(await refreshClaudeCodeToken('rt')).toBeNull();
+    });
+});
+describe('ensureFreshAnthropicToken', () => {
+    it('returns the current token when it is not near expiry (no refresh attempted)', async () => {
+        const spy = vi.fn();
+        mockFetch(spy);
+        const token = await ensureFreshAnthropicToken('cc-current', {
+            refreshToken: 'rt',
+            expiresAt: Date.now() + 60 * 60 * 1000,
+        });
+        expect(token).toBe('cc-current');
+        expect(spy).not.toHaveBeenCalled();
+    });
+    it('returns the current token when there is no refresh token', async () => {
+        const spy = vi.fn();
+        mockFetch(spy);
+        const token = await ensureFreshAnthropicToken('cc-current', { expiresAt: 0 });
+        expect(token).toBe('cc-current');
+        expect(spy).not.toHaveBeenCalled();
+    });
+    it('refreshes an expired token', async () => {
+        mockFetch((async () => new Response(JSON.stringify({ access_token: 'cc-fresh', expires_in: 3600 }), {
+            status: 200,
+        })));
+        const token = await ensureFreshAnthropicToken('cc-stale', {
+            refreshToken: 'rt',
+            expiresAt: Date.now() - 1000,
+        });
+        expect(token).toBe('cc-fresh');
+    });
+    it('falls back to the stale token when refresh fails', async () => {
+        mockFetch((async () => new Response('err', { status: 500 })));
+        const token = await ensureFreshAnthropicToken('cc-stale', {
+            refreshToken: 'rt',
+            expiresAt: Date.now() - 1000,
+        });
+        expect(token).toBe('cc-stale');
+    });
+});
+//# sourceMappingURL=oauth.test.js.map

package/dist/integrations/providers/oauth.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.test.js","sourceRoot":"","sources":["../../../src/integrations/providers/oauth.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE5D,+EAA+E;AAC/E,+EAA+E;AAC/E,EAAE,CAAC,IAAI,CAAC,eAAe,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE;IACjD,MAAM,MAAM,GAAG,MAAM,cAAc,EAAkC,CAAA;IACrE,OAAO,EAAE,GAAG,MAAM,EAAE,iCAAiC,EAAE,EAAE,CAAC,EAAE,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,EAAE,CAAA;AAC5E,CAAC,CAAC,CAAA;AAEF,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAE9E,SAAS,SAAS,CAAC,IAAkB;IACpC,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,IAAI,CAAC,CAAA;AAC7B,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACd,EAAE,CAAC,gBAAgB,EAAE,CAAA;AACtB,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACvC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QAClE,SAAS,CACR,CAAC,KAAK,IAAI,EAAE,CACX,IAAI,QAAQ,CACX,IAAI,CAAC,SAAS,CAAC;YACd,YAAY,EAAE,eAAe;YAC7B,aAAa,EAAE,QAAQ;YACvB,UAAU,EAAE,IAAI;SAChB,CAAC,EACF,EAAE,MAAM,EAAE,GAAG,EAAE,CACf,CAAiB,CACnB,CAAA;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;QACzB,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAA;QACnD,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAA;QAC/C,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACzC,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC,sBAAsB,CAAC,MAAM,GAAG,IAAI,GAAG,IAAI,CAAC,CAAA;IACrE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yDAAyD,EAAE,KAAK,IAAI,EAAE;QACxE,SAAS,CACR,CAAC,KAAK,IAAI,EAAE,CACX,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,QAAQ,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAiB,CAC3F,CAAA;QACD,MAAM,IAAI,GAAG,MAAM,sBAAsB,CAAC,QAAQ,CAAC,CAAA;QACnD,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QACxC,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QACnD,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAiB,CAAC,CAAA;QAC9E,MAAM,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC/C,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE;YACrB,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAA;QAChC,CAAC,CAAiB,CAAC,CAAA;QACnB,MAAM,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACpE,SAAS,CACR,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAiB,CAC3F,CAAA;QACD,MAAM,CAAC,MAAM,sBAAsB,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACtD,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC5F,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QACnB,SAAS,CAAC,GAA8B,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,YAAY,EAAE;YAC3D,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI;SACtC,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACzE,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAA;QACnB,SAAS,CAAC,GAA8B,CAAC,CAAA;QACzC,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,YAAY,EAAE,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAA;QAC7E,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAChC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAA;IACnC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC3C,SAAS,CACR,CAAC,KAAK,IAAI,EAAE,CACX,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,YAAY,EAAE,UAAU,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,EAAE;YAC5E,MAAM,EAAE,GAAG;SACX,CAAC,CAAiB,CACpB,CAAA;QACD,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE;YACzD,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;SAC5B,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,kDAAkD,EAAE,KAAK,IAAI,EAAE;QACjE,SAAS,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,IAAI,QAAQ,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAiB,CAAC,CAAA;QAC7E,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,UAAU,EAAE;YACzD,YAAY,EAAE,IAAI;YAClB,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI;SAC5B,CAAC,CAAA;QACF,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/integrations/providers/preferences.d.ts

@@ -0,0 +1,43 @@
+/**
+ * `~/.namzu/preferences.json` — the user's primary-chat picker selection.
+ *
+ * Schema (current = v2):
+ *   {
+ *     "version": 2,
+ *     "provider": "anthropic",            // ProviderId
+ *     "model": "claude-opus-4-7",         // optional model override
+ *     "subagents": { "active": [...] }    // clawtool peer instances reserved for subagent dispatch
+ *   }
+ *
+ * The previous schema (v1) stored a clawtool peer instance as the
+ * default — a different primitive (subagent dispatch, not primary
+ * chat). On-disk v1 files trigger a forced re-pick rather than an
+ * auto-migration: mapping between the two semantics would surprise
+ * more than help.
+ */
+import type { ProviderId } from './registry.js';
+export declare const PREFERENCES_FILE_VERSION: 2;
+export interface Preferences {
+    readonly version: 2;
+    readonly provider: ProviderId;
+    readonly model?: string;
+    readonly subagents?: {
+        readonly active: readonly string[];
+    };
+}
+export type ReadResult = {
+    readonly status: 'ok';
+    readonly prefs: Preferences;
+} | {
+    readonly status: 'missing';
+} | {
+    readonly status: 'needs-repick';
+    readonly reason: string;
+};
+export declare class PreferencesError extends Error {
+    constructor(message: string);
+}
+export declare function preferencesPath(home?: string): string;
+export declare function readPreferences(home?: string): ReadResult;
+export declare function writePreferences(prefs: Preferences, home?: string): void;
+//# sourceMappingURL=preferences.d.ts.map

package/dist/integrations/providers/preferences.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preferences.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/preferences.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAOH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,eAAe,CAAA;AAI/C,eAAO,MAAM,wBAAwB,EAAG,CAAU,CAAA;AAElD,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,OAAO,EAAE,CAAC,CAAA;IACnB,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAA;IAC7B,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,QAAQ,CAAC,SAAS,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAC3D;AAED,MAAM,MAAM,UAAU,GACnB;IAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,WAAW,CAAA;CAAE,GACtD;IAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,MAAM,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAA;AAE/D,qBAAa,gBAAiB,SAAQ,KAAK;gBAC9B,OAAO,EAAE,MAAM;CAI3B;AAED,wBAAgB,eAAe,CAAC,IAAI,GAAE,MAAkB,GAAG,MAAM,CAEhE;AAED,wBAAgB,eAAe,CAAC,IAAI,GAAE,MAAkB,GAAG,UAAU,CAwCpE;AAED,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,EAAE,IAAI,GAAE,MAAkB,GAAG,IAAI,CAgBnF"}

package/dist/integrations/providers/preferences.js

@@ -0,0 +1,111 @@
+/**
+ * `~/.namzu/preferences.json` — the user's primary-chat picker selection.
+ *
+ * Schema (current = v2):
+ *   {
+ *     "version": 2,
+ *     "provider": "anthropic",            // ProviderId
+ *     "model": "claude-opus-4-7",         // optional model override
+ *     "subagents": { "active": [...] }    // clawtool peer instances reserved for subagent dispatch
+ *   }
+ *
+ * The previous schema (v1) stored a clawtool peer instance as the
+ * default — a different primitive (subagent dispatch, not primary
+ * chat). On-disk v1 files trigger a forced re-pick rather than an
+ * auto-migration: mapping between the two semantics would surprise
+ * more than help.
+ */
+import { randomBytes } from 'node:crypto';
+import { chmodSync, mkdirSync, readFileSync, renameSync, writeFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+const FILE_MODE = 0o600;
+const DIR_MODE = 0o700;
+export const PREFERENCES_FILE_VERSION = 2;
+export class PreferencesError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = 'PreferencesError';
+    }
+}
+export function preferencesPath(home = homedir()) {
+    return join(home, '.namzu', 'preferences.json');
+}
+export function readPreferences(home = homedir()) {
+    const path = preferencesPath(home);
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf8');
+    }
+    catch (err) {
+        if (err.code === 'ENOENT')
+            return { status: 'missing' };
+        throw new PreferencesError(`could not read ${path}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch (err) {
+        throw new PreferencesError(`${path} is not valid JSON: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (typeof parsed !== 'object' || parsed === null) {
+        throw new PreferencesError(`${path} top-level must be an object`);
+    }
+    const v = parsed;
+    if (v.version === 1) {
+        return {
+            status: 'needs-repick',
+            reason: 'preferences file uses an older schema (v1) — namzu now picks an LLM provider client directly. Please re-pick.',
+        };
+    }
+    if (v.version !== PREFERENCES_FILE_VERSION) {
+        return {
+            status: 'needs-repick',
+            reason: `preferences file at unsupported version ${String(v.version)} — please re-pick.`,
+        };
+    }
+    if (!isPreferences(parsed)) {
+        throw new PreferencesError(`${path} has an unexpected shape`);
+    }
+    return { status: 'ok', prefs: parsed };
+}
+export function writePreferences(prefs, home = homedir()) {
+    if (prefs.version !== PREFERENCES_FILE_VERSION) {
+        throw new PreferencesError(`unsupported preferences version: ${String(prefs.version)} (expected ${PREFERENCES_FILE_VERSION})`);
+    }
+    if (typeof prefs.provider !== 'string' || prefs.provider.length === 0) {
+        throw new PreferencesError('preferences.provider is required');
+    }
+    const path = preferencesPath(home);
+    mkdirSync(dirname(path), { recursive: true, mode: DIR_MODE });
+    const body = `${JSON.stringify(prefs, null, 2)}\n`;
+    const tmp = `${path}.tmp.${process.pid}.${randomBytes(4).toString('hex')}`;
+    writeFileSync(tmp, body, { mode: FILE_MODE });
+    chmodSync(tmp, FILE_MODE);
+    renameSync(tmp, path);
+}
+function isPreferences(value) {
+    if (typeof value !== 'object' || value === null)
+        return false;
+    const v = value;
+    if (v.version !== PREFERENCES_FILE_VERSION)
+        return false;
+    if (typeof v.provider !== 'string' || v.provider.length === 0)
+        return false;
+    if (v.model !== undefined && typeof v.model !== 'string')
+        return false;
+    if (v.subagents !== undefined) {
+        if (typeof v.subagents !== 'object' || v.subagents === null)
+            return false;
+        const sa = v.subagents;
+        if (!Array.isArray(sa.active))
+            return false;
+        for (const item of sa.active) {
+            if (typeof item !== 'string')
+                return false;
+        }
+    }
+    return true;
+}
+//# sourceMappingURL=preferences.js.map

package/dist/integrations/providers/preferences.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preferences.js","sourceRoot":"","sources":["../../../src/integrations/providers/preferences.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,YAAY,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACvF,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAIzC,MAAM,SAAS,GAAG,KAAK,CAAA;AACvB,MAAM,QAAQ,GAAG,KAAK,CAAA;AACtB,MAAM,CAAC,MAAM,wBAAwB,GAAG,CAAU,CAAA;AAclD,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IAC1C,YAAY,OAAe;QAC1B,KAAK,CAAC,OAAO,CAAC,CAAA;QACd,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAA;IAC/B,CAAC;CACD;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,OAAO,EAAE;IACvD,OAAO,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,CAAA;AAChD,CAAC;AAED,MAAM,UAAU,eAAe,CAAC,OAAe,OAAO,EAAE;IACvD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAClC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACJ,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;IACjC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAK,GAA6B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,CAAA;QAClF,MAAM,IAAI,gBAAgB,CACzB,kBAAkB,IAAI,KAAK,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7E,CAAA;IACF,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,MAAM,IAAI,gBAAgB,CACzB,GAAG,IAAI,uBAAuB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAChF,CAAA;IACF,CAAC;IACD,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACnD,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,8BAA8B,CAAC,CAAA;IAClE,CAAC;IACD,MAAM,CAAC,GAAG,MAA+B,CAAA;IACzC,IAAI,CAAC,CAAC,OAAO,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO;YACN,MAAM,EAAE,cAAc;YACtB,MAAM,EACL,+GAA+G;SAChH,CAAA;IACF,CAAC;IACD,IAAI,CAAC,CAAC,OAAO,KAAK,wBAAwB,EAAE,CAAC;QAC5C,OAAO;YACN,MAAM,EAAE,cAAc;YACtB,MAAM,EAAE,2CAA2C,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB;SACxF,CAAA;IACF,CAAC;IACD,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,gBAAgB,CAAC,GAAG,IAAI,0BAA0B,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,CAAA;AACvC,CAAC;AAED,MAAM,UAAU,gBAAgB,CAAC,KAAkB,EAAE,OAAe,OAAO,EAAE;IAC5E,IAAI,KAAK,CAAC,OAAO,KAAK,wBAAwB,EAAE,CAAC;QAChD,MAAM,IAAI,gBAAgB,CACzB,oCAAoC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,cAAc,wBAAwB,GAAG,CAClG,CAAA;IACF,CAAC;IACD,IAAI,OAAO,KAAK,CAAC,QAAQ,KAAK,QAAQ,IAAI,KAAK,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvE,MAAM,IAAI,gBAAgB,CAAC,kCAAkC,CAAC,CAAA;IAC/D,CAAC;IACD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;IAClC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAA;IAC7D,MAAM,IAAI,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAA;IAClD,MAAM,GAAG,GAAG,GAAG,IAAI,QAAQ,OAAO,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAA;IAC1E,aAAa,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAA;IAC7C,SAAS,CAAC,GAAG,EAAE,SAAS,CAAC,CAAA;IACzB,UAAU,CAAC,GAAG,EAAE,IAAI,CAAC,CAAA;AACtB,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAA;IAC7D,MAAM,CAAC,GAAG,KAAgC,CAAA;IAC1C,IAAI,CAAC,CAAC,OAAO,KAAK,wBAAwB;QAAE,OAAO,KAAK,CAAA;IACxD,IAAI,OAAO,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IAC3E,IAAI,CAAC,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,CAAC,CAAC,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IACtE,IAAI,CAAC,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,CAAC,SAAS,KAAK,QAAQ,IAAI,CAAC,CAAC,SAAS,KAAK,IAAI;YAAE,OAAO,KAAK,CAAA;QACzE,MAAM,EAAE,GAAG,CAAC,CAAC,SAAoC,CAAA;QACjD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,MAAM,CAAC;YAAE,OAAO,KAAK,CAAA;QAC3C,KAAK,MAAM,IAAI,IAAI,EAAE,CAAC,MAAM,EAAE,CAAC;YAC9B,IAAI,OAAO,IAAI,KAAK,QAAQ;gBAAE,OAAO,KAAK,CAAA;QAC3C,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAA;AACZ,CAAC"}

package/dist/integrations/providers/preferences.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=preferences.test.d.ts.map

package/dist/integrations/providers/preferences.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preferences.test.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/preferences.test.ts"],"names":[],"mappings":""}

package/dist/integrations/providers/preferences.test.js

@@ -0,0 +1,68 @@
+import { mkdirSync, mkdtempSync, statSync, writeFileSync } from 'node:fs';
+import { tmpdir } from 'node:os';
+import { join } from 'node:path';
+import { describe, expect, it } from 'vitest';
+import { PreferencesError, preferencesPath, readPreferences, writePreferences, } from './preferences.js';
+function tmpHome() {
+    return mkdtempSync(join(tmpdir(), 'namzu-prefs-v2-'));
+}
+describe('readPreferences', () => {
+    it('reports missing when the file is absent', () => {
+        expect(readPreferences(tmpHome())).toEqual({ status: 'missing' });
+    });
+    it('detects a v1 file as needs-repick (legacy schema)', () => {
+        const home = tmpHome();
+        mkdirSync(join(home, '.namzu'));
+        writeFileSync(join(home, '.namzu', 'preferences.json'), JSON.stringify({ version: 1, default: 'claude', active: ['claude'] }));
+        const r = readPreferences(home);
+        expect(r.status).toBe('needs-repick');
+        if (r.status === 'needs-repick') {
+            expect(r.reason).toMatch(/older schema/);
+        }
+    });
+    it('round-trips a v2 selection', () => {
+        const home = tmpHome();
+        writePreferences({ version: 2, provider: 'anthropic', model: 'claude-opus-4-7' }, home);
+        const r = readPreferences(home);
+        expect(r.status).toBe('ok');
+        if (r.status === 'ok') {
+            expect(r.prefs.provider).toBe('anthropic');
+            expect(r.prefs.model).toBe('claude-opus-4-7');
+        }
+    });
+    it('throws on unparseable JSON', () => {
+        const home = tmpHome();
+        mkdirSync(join(home, '.namzu'));
+        writeFileSync(join(home, '.namzu', 'preferences.json'), '{ not json');
+        expect(() => readPreferences(home)).toThrow(PreferencesError);
+    });
+});
+describe('writePreferences', () => {
+    it('enforces mode 0600 on file and 0700 on dir', () => {
+        const home = tmpHome();
+        writePreferences({ version: 2, provider: 'openai' }, home);
+        const fileMode = statSync(preferencesPath(home)).mode & 0o777;
+        const dirMode = statSync(join(home, '.namzu')).mode & 0o777;
+        expect(fileMode).toBe(0o600);
+        expect(dirMode).toBe(0o700);
+    });
+    it('rejects an empty provider', () => {
+        expect(() => writePreferences({ version: 2, provider: '' }, tmpHome())).toThrow(PreferencesError);
+    });
+    it('preserves subagents.active when present', () => {
+        const home = tmpHome();
+        writePreferences({
+            version: 2,
+            provider: 'anthropic',
+            subagents: { active: ['claude', 'codex'] },
+        }, home);
+        const r = readPreferences(home);
+        if (r.status === 'ok') {
+            expect(r.prefs.subagents?.active).toEqual(['claude', 'codex']);
+        }
+        else {
+            throw new Error('expected ok status');
+        }
+    });
+});
+//# sourceMappingURL=preferences.test.js.map

package/dist/integrations/providers/preferences.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preferences.test.js","sourceRoot":"","sources":["../../../src/integrations/providers/preferences.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,SAAS,CAAA;AACzE,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAA;AAChC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AAChC,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EACN,gBAAgB,EAChB,eAAe,EACf,eAAe,EACf,gBAAgB,GAChB,MAAM,kBAAkB,CAAA;AAEzB,SAAS,OAAO;IACf,OAAO,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,iBAAiB,CAAC,CAAC,CAAA;AACtD,CAAC;AAED,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,eAAe,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAA;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC5D,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC/B,aAAa,CACZ,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EACxC,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CACrE,CAAA;QACD,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,cAAc,CAAC,CAAA;QACrC,IAAI,CAAC,CAAC,MAAM,KAAK,cAAc,EAAE,CAAC;YACjC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;QACzC,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACrC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,WAAW,EAAE,KAAK,EAAE,iBAAiB,EAAE,EAAE,IAAI,CAAC,CAAA;QACvF,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QAC/B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;YAC1C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,iBAAiB,CAAC,CAAA;QAC9C,CAAC;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACrC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,SAAS,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAA;QAC/B,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,EAAE,kBAAkB,CAAC,EAAE,YAAY,CAAC,CAAA;QACrE,MAAM,CAAC,GAAG,EAAE,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACrD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAA;QAC1D,MAAM,QAAQ,GAAG,QAAQ,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;QAC7D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,CAAC,IAAI,GAAG,KAAK,CAAA;QAC3D,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC5B,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,EAAE,OAAO,EAAE,CAAC,EAAE,QAAQ,EAAE,EAAW,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CACvF,gBAAgB,CAChB,CAAA;IACF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QAClD,MAAM,IAAI,GAAG,OAAO,EAAE,CAAA;QACtB,gBAAgB,CACf;YACC,OAAO,EAAE,CAAC;YACV,QAAQ,EAAE,WAAW;YACrB,SAAS,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC,EAAE;SAC1C,EACD,IAAI,CACJ,CAAA;QACD,MAAM,CAAC,GAAG,eAAe,CAAC,IAAI,CAAC,CAAA;QAC/B,IAAI,CAAC,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC;YACvB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAA;QAC/D,CAAC;aAAM,CAAC;YACP,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QACtC,CAAC;IACF,CAAC,CAAC,CAAA;AACH,CAAC,CAAC,CAAA"}

package/dist/integrations/providers/registry.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Declarative LLM provider registry — the single source of truth that
+ * discovery, picker labeling, and runtime construction all derive from.
+ *
+ * Pattern lifted from NousResearch hermes-agent's `PROVIDER_REGISTRY`
+ * (`hermes_cli/auth.py:183-457`). Adding a provider = adding one entry
+ * here; nothing else in this layer needs to change.
+ */
+export type ProviderId = 'anthropic' | 'openai' | 'openrouter' | 'ollama' | 'lmstudio' | 'bedrock' | 'http';
+/** SDK type passed to `ProviderRegistry.create({type, ...})`. */
+export type SdkProviderType = ProviderId;
+export interface ProviderRegistryEntry {
+    readonly id: ProviderId;
+    readonly label: string;
+    /** Env vars searched in order for an API key. First non-empty wins. */
+    readonly envVars: readonly string[];
+    /** Default base URL if the provider has one (else SDK default). */
+    readonly defaultBaseUrl?: string;
+    /**
+     * Probe URL for ambient detection (e.g. local server). When set, the
+     * discoverer issues a HEAD/GET and treats 2xx as "available".
+     */
+    readonly probeUrl?: string;
+    /** Default model when the user does not pick one in the picker. */
+    readonly defaultModel: string;
+    /** Does this provider require an apiKey? `false` for purely local. */
+    readonly requiresApiKey: boolean;
+}
+export declare const PROVIDER_REGISTRY: Readonly<Record<ProviderId, ProviderRegistryEntry>>;
+export declare const ALL_PROVIDER_IDS: readonly ProviderId[];
+//# sourceMappingURL=registry.d.ts.map

package/dist/integrations/providers/registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/integrations/providers/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,MAAM,MAAM,UAAU,GACnB,WAAW,GACX,QAAQ,GACR,YAAY,GACZ,QAAQ,GACR,UAAU,GACV,SAAS,GACT,MAAM,CAAA;AAET,iEAAiE;AACjE,MAAM,MAAM,eAAe,GAAG,UAAU,CAAA;AAExC,MAAM,WAAW,qBAAqB;IACrC,QAAQ,CAAC,EAAE,EAAE,UAAU,CAAA;IACvB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,uEAAuE;IACvE,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,mEAAmE;IACnE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAA;IAChC;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAA;IAC7B,sEAAsE;IACtE,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAA;CAChC;AAED,eAAO,MAAM,iBAAiB,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU,EAAE,qBAAqB,CAAC,CA8DjF,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,SAAS,UAAU,EAQvC,CAAA"}

package/dist/integrations/providers/registry.js

@@ -0,0 +1,79 @@
+/**
+ * Declarative LLM provider registry — the single source of truth that
+ * discovery, picker labeling, and runtime construction all derive from.
+ *
+ * Pattern lifted from NousResearch hermes-agent's `PROVIDER_REGISTRY`
+ * (`hermes_cli/auth.py:183-457`). Adding a provider = adding one entry
+ * here; nothing else in this layer needs to change.
+ */
+export const PROVIDER_REGISTRY = Object.freeze({
+    anthropic: {
+        id: 'anthropic',
+        label: 'Anthropic (Claude)',
+        // Order mirrors hermes: explicit anthropic key, then anthropic-token
+        // variant, then claude-code's OAuth env (often present when the user
+        // has claude-code installed).
+        envVars: ['ANTHROPIC_API_KEY', 'ANTHROPIC_TOKEN', 'CLAUDE_CODE_OAUTH_TOKEN'],
+        defaultModel: 'claude-opus-4-7',
+        requiresApiKey: true,
+    },
+    openai: {
+        id: 'openai',
+        label: 'OpenAI',
+        envVars: ['OPENAI_API_KEY'],
+        defaultModel: 'gpt-4o',
+        requiresApiKey: true,
+    },
+    openrouter: {
+        id: 'openrouter',
+        label: 'OpenRouter',
+        envVars: ['OPENROUTER_API_KEY'],
+        defaultBaseUrl: 'https://openrouter.ai/api/v1',
+        defaultModel: 'anthropic/claude-opus-4-7',
+        requiresApiKey: true,
+    },
+    ollama: {
+        id: 'ollama',
+        label: 'Ollama (local)',
+        envVars: [],
+        defaultBaseUrl: 'http://localhost:11434',
+        probeUrl: 'http://localhost:11434/api/tags',
+        defaultModel: 'llama3.2',
+        requiresApiKey: false,
+    },
+    lmstudio: {
+        id: 'lmstudio',
+        label: 'LM Studio (local)',
+        envVars: [],
+        defaultBaseUrl: 'http://localhost:1234/v1',
+        probeUrl: 'http://localhost:1234/v1/models',
+        defaultModel: 'auto',
+        requiresApiKey: false,
+    },
+    bedrock: {
+        id: 'bedrock',
+        label: 'AWS Bedrock',
+        envVars: ['AWS_ACCESS_KEY_ID'], // SDK reads the rest from the AWS chain
+        defaultModel: 'anthropic.claude-opus-4-7-v1:0',
+        requiresApiKey: true,
+    },
+    http: {
+        id: 'http',
+        label: 'Custom HTTP (OpenAI-compatible)',
+        // http is never auto-discovered; reserved for an explicit /provider
+        // flow that lets the user enter a base URL + key.
+        envVars: [],
+        defaultModel: 'gpt-4o',
+        requiresApiKey: true,
+    },
+});
+export const ALL_PROVIDER_IDS = Object.freeze([
+    'anthropic',
+    'openai',
+    'openrouter',
+    'ollama',
+    'lmstudio',
+    'bedrock',
+    'http',
+]);
+//# sourceMappingURL=registry.js.map

package/dist/integrations/providers/registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"registry.js","sourceRoot":"","sources":["../../../src/integrations/providers/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAgCH,MAAM,CAAC,MAAM,iBAAiB,GAAwD,MAAM,CAAC,MAAM,CAClG;IACC,SAAS,EAAE;QACV,EAAE,EAAE,WAAW;QACf,KAAK,EAAE,oBAAoB;QAC3B,qEAAqE;QACrE,qEAAqE;QACrE,8BAA8B;QAC9B,OAAO,EAAE,CAAC,mBAAmB,EAAE,iBAAiB,EAAE,yBAAyB,CAAC;QAC5E,YAAY,EAAE,iBAAiB;QAC/B,cAAc,EAAE,IAAI;KACpB;IACD,MAAM,EAAE;QACP,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,QAAQ;QACf,OAAO,EAAE,CAAC,gBAAgB,CAAC;QAC3B,YAAY,EAAE,QAAQ;QACtB,cAAc,EAAE,IAAI;KACpB;IACD,UAAU,EAAE;QACX,EAAE,EAAE,YAAY;QAChB,KAAK,EAAE,YAAY;QACnB,OAAO,EAAE,CAAC,oBAAoB,CAAC;QAC/B,cAAc,EAAE,8BAA8B;QAC9C,YAAY,EAAE,2BAA2B;QACzC,cAAc,EAAE,IAAI;KACpB;IACD,MAAM,EAAE;QACP,EAAE,EAAE,QAAQ;QACZ,KAAK,EAAE,gBAAgB;QACvB,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,wBAAwB;QACxC,QAAQ,EAAE,iCAAiC;QAC3C,YAAY,EAAE,UAAU;QACxB,cAAc,EAAE,KAAK;KACrB;IACD,QAAQ,EAAE;QACT,EAAE,EAAE,UAAU;QACd,KAAK,EAAE,mBAAmB;QAC1B,OAAO,EAAE,EAAE;QACX,cAAc,EAAE,0BAA0B;QAC1C,QAAQ,EAAE,iCAAiC;QAC3C,YAAY,EAAE,MAAM;QACpB,cAAc,EAAE,KAAK;KACrB;IACD,OAAO,EAAE;QACR,EAAE,EAAE,SAAS;QACb,KAAK,EAAE,aAAa;QACpB,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE,wCAAwC;QACxE,YAAY,EAAE,gCAAgC;QAC9C,cAAc,EAAE,IAAI;KACpB;IACD,IAAI,EAAE;QACL,EAAE,EAAE,MAAM;QACV,KAAK,EAAE,iCAAiC;QACxC,oEAAoE;QACpE,kDAAkD;QAClD,OAAO,EAAE,EAAE;QACX,YAAY,EAAE,QAAQ;QACtB,cAAc,EAAE,IAAI;KACpB;CACD,CACD,CAAA;AAED,MAAM,CAAC,MAAM,gBAAgB,GAA0B,MAAM,CAAC,MAAM,CAAC;IACpE,WAAW;IACX,QAAQ;IACR,YAAY;IACZ,QAAQ;IACR,UAAU;IACV,SAAS;IACT,MAAM;CACG,CAAC,CAAA"}