@open-everywhere/adapters 0.1.0

package/dist/agent/aws/sts.js

@@ -0,0 +1,135 @@
+// The AWS-IDENTITY provider adapter — the ONE place OIDC→STS federation is named. Zero npm deps: the
+// web-identity token IS the auth, so the STS call is an unsigned form POST. A failure throws, never empty.
+import { warmCredential } from "@open-everywhere/core/agent/adapter-api.js";
+import { readFileSync } from "node:fs";
+/** Env var naming the OIDC token file (AWS-standard, set by Vercel/IRSA/projected SA token). */
+const AWS_WEB_IDENTITY_TOKEN_FILE_ENV = "AWS_WEB_IDENTITY_TOKEN_FILE";
+/** OE fallback: the raw OIDC token inline (no file), used only when the file env is absent. */
+const OE_AWS_WEB_IDENTITY_TOKEN_ENV = "OE_AWS_WEB_IDENTITY_TOKEN";
+/** Minimal single-tag extract from an AWS XML response — deliberately NOT an XML dependency (the four
+ *  fields we need are flat, non-nested leaf tags). Returns the first tag body, trimmed, or undefined. */
+function xmlTag(xml, tag) {
+    const m = xml.match(new RegExp(`<${tag}>([\\s\\S]*?)</${tag}>`, "u"));
+    return m?.[1]?.trim();
+}
+/** Resolve the region for a mint: the grant's region, then the operator default (OE_AWS_REGION),
+ *  then AWS_REGION, then us-east-1. */
+function regionFor(req, defaultRegion) {
+    return req.region ?? defaultRegion ?? process.env.AWS_REGION ?? "us-east-1";
+}
+/** Read the deployment's OIDC web-identity token: the file named by AWS_WEB_IDENTITY_TOKEN_FILE
+ *  (fail LOUD if unreadable), else the inline OE_AWS_WEB_IDENTITY_TOKEN, else throw. */
+function readWebIdentityToken(readTokenFile) {
+    const path = process.env[AWS_WEB_IDENTITY_TOKEN_FILE_ENV]?.trim();
+    if (path) {
+        let raw;
+        try {
+            raw = readTokenFile(path);
+        }
+        catch (err) {
+            throw new Error(`AWS OIDC token file (${AWS_WEB_IDENTITY_TOKEN_FILE_ENV}=${path}) is unreadable: ${err instanceof Error ? err.message : String(err)}. Fail-closed: no AWS access.`);
+        }
+        const token = raw.trim();
+        if (!token)
+            throw new Error(`AWS OIDC token file (${path}) is empty. Fail-closed: no AWS access.`);
+        return token;
+    }
+    const inline = process.env[OE_AWS_WEB_IDENTITY_TOKEN_ENV]?.trim();
+    if (inline)
+        return inline;
+    throw new Error(`no AWS OIDC token available — set ${AWS_WEB_IDENTITY_TOKEN_FILE_ENV} (the deployment's web-identity ` +
+        `token file) or ${OE_AWS_WEB_IDENTITY_TOKEN_ENV}. Fail-closed: no AWS access.`);
+}
+/** Federate the OIDC token into STS credentials via an UNSIGNED AssumeRoleWithWebIdentity POST. Throws
+ *  (never returns empty) on a transport error, a non-2xx STS response, an `<Error>` body, or a
+ *  response missing any of the four credential fields. */
+async function assumeRoleWithWebIdentity(req, fetchImpl, readTokenFile, durationSeconds, defaultRegion) {
+    const token = readWebIdentityToken(readTokenFile);
+    const region = regionFor(req, defaultRegion);
+    const endpoint = `https://sts.${region}.amazonaws.com/`;
+    const body = new URLSearchParams({
+        Action: "AssumeRoleWithWebIdentity",
+        Version: "2011-06-15",
+        RoleArn: req.roleArn,
+        RoleSessionName: req.roleSessionName,
+        WebIdentityToken: token,
+        DurationSeconds: String(durationSeconds),
+        // The STS SESSION POLICY (OPE-296 §8.3) — the grant's allow grammar compiled by core
+        // (access/aws-screen.ts) and INTERSECTED with the role's own policy at mint time, so the
+        // narrowing is AWS-enforced, not merely host-checked. Only this path can take one: the
+        // per-user sso:GetRoleCredentials API has no session-policy parameter (sso.ts).
+        ...(req.sessionPolicy !== undefined ? { Policy: req.sessionPolicy } : {}),
+    });
+    let res;
+    try {
+        res = await fetchImpl(endpoint, {
+            method: "POST",
+            headers: { "content-type": "application/x-www-form-urlencoded", accept: "application/xml" },
+            body: body.toString(),
+        });
+    }
+    catch (err) {
+        throw new Error(`STS AssumeRoleWithWebIdentity transport error against ${endpoint}: ${err instanceof Error ? err.message : String(err)}. Fail-closed: no AWS access.`);
+    }
+    const text = await res.text();
+    if (!res.ok || xmlTag(text, "Error") !== undefined || /<ErrorResponse[\s>]/u.test(text)) {
+        const code = xmlTag(text, "Code");
+        const message = xmlTag(text, "Message");
+        throw new Error(`STS AssumeRoleWithWebIdentity failed (HTTP ${res.status}${code ? `, ${code}` : ""})${message ? `: ${message}` : `: ${text.slice(0, 300)}`}. Fail-closed: no AWS access.`);
+    }
+    const accessKeyId = xmlTag(text, "AccessKeyId");
+    const secretAccessKey = xmlTag(text, "SecretAccessKey");
+    const sessionToken = xmlTag(text, "SessionToken");
+    const expiration = xmlTag(text, "Expiration");
+    if (!accessKeyId || !secretAccessKey || !sessionToken) {
+        throw new Error(`STS response missing credential fields (AccessKeyId/SecretAccessKey/SessionToken): ${text.slice(0, 300)}. Fail-closed: no AWS access.`);
+    }
+    const expiresAtMs = expiration ? Date.parse(expiration) : NaN;
+    return {
+        accessKeyId,
+        secretAccessKey,
+        sessionToken,
+        ...(Number.isFinite(expiresAtMs) ? { expiresAtMs } : {}),
+    };
+}
+/**
+ * Build the STS-federation identity provider. The warm cache is keyed by kind, org, roleArn, roleSessionName,
+ * principalSubject and sessionPolicy — drop any one and a caller silently receives another caller's creds.
+ */
+export function makeAwsStsProvider(opts = {}) {
+    const fetchImpl = opts.fetch ?? fetch;
+    const readTokenFile = opts.readTokenFile ?? ((path) => readFileSync(path, "utf-8"));
+    const durationSeconds = opts.durationSeconds ?? 3600;
+    const defaultRegion = opts.defaultRegion;
+    const mintUserSso = opts.mintUserSso;
+    // Cache holds the JSON-serialised AwsCredentials as the warm-seam `value`, stamped with the STS
+    // `Expiration` so the seam refreshes ahead of it (fallback TTL = the requested duration).
+    const warm = warmCredential({
+        name: "aws.sts-web-identity",
+        platform: "aws",
+        auditAction: "aws.sts.mint_failed",
+        refresh: "re-mint",
+        fallbackTtlSeconds: durationSeconds,
+        // Every component earns its place — see the constructor's docblock for what each one separates.
+        key: (req) => `${req.kind}:${req.org ?? ""}:${req.roleArn}:${req.roleSessionName}:${req.principalSubject ?? ""}:${req.sessionPolicy ?? ""}`,
+        mint: async (req) => {
+            const creds = await assumeRoleWithWebIdentity(req, fetchImpl, readTokenFile, durationSeconds, defaultRegion);
+            return { value: JSON.stringify(creds), ...(creds.expiresAtMs !== undefined ? { expiresAtMs: creds.expiresAtMs } : {}) };
+        },
+    });
+    return {
+        async mint(req) {
+            if (req.kind === "user-sso") {
+                // Phase 1 (per-user AWS SSO linking): delegate to the Identity Center minter when wired. Absent
+                // ⇒ refuse clearly rather than attempt a flow (the domain-role STS path stays available).
+                if (mintUserSso)
+                    return mintUserSso(req);
+                throw new Error("AWS SSO per-user identity linking is not configured (Phase 1). " +
+                    "Use the domain role.");
+            }
+            const serialised = await warm.get(req);
+            return JSON.parse(serialised);
+        },
+    };
+}
+//# sourceMappingURL=sts.js.map

package/dist/agent/aws/sts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sts.js","sourceRoot":"","sources":["../../../agent/aws/sts.ts"],"names":[],"mappings":"AAAA,qGAAqG;AACrG,2GAA2G;AAE3G,OAAO,EAAE,cAAc,EAA0E,MAAM,4CAA4C,CAAC;AACpJ,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAwBvC,gGAAgG;AAChG,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AACtE,+FAA+F;AAC/F,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAElE;yGACyG;AACzG,SAAS,MAAM,CAAC,GAAW,EAAE,GAAW;IACtC,MAAM,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,GAAG,kBAAkB,GAAG,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;IACtE,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC;AACxB,CAAC;AAED;uCACuC;AACvC,SAAS,SAAS,CAAC,GAAuB,EAAE,aAAiC;IAC3E,OAAO,GAAG,CAAC,MAAM,IAAI,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,WAAW,CAAC;AAC9E,CAAC;AAED;wFACwF;AACxF,SAAS,oBAAoB,CAAC,aAA8B;IAC1D,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,+BAA+B,CAAC,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,IAAI,EAAE,CAAC;QACT,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CACb,wBAAwB,+BAA+B,IAAI,IAAI,oBAC7D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,+BAA+B,CAChC,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;QACzB,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,KAAK,CAAC,wBAAwB,IAAI,yCAAyC,CAAC,CAAC;QACnG,OAAO,KAAK,CAAC;IACf,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE,CAAC;IAClE,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,MAAM,IAAI,KAAK,CACb,qCAAqC,+BAA+B,kCAAkC;QACpG,kBAAkB,6BAA6B,+BAA+B,CACjF,CAAC;AACJ,CAAC;AAED;;0DAE0D;AAC1D,KAAK,UAAU,yBAAyB,CACtC,GAAuB,EACvB,SAAoB,EACpB,aAA8B,EAC9B,eAAuB,EACvB,aAAiC;IAEjC,MAAM,KAAK,GAAG,oBAAoB,CAAC,aAAa,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,SAAS,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;IAC7C,MAAM,QAAQ,GAAG,eAAe,MAAM,iBAAiB,CAAC;IACxD,MAAM,IAAI,GAAG,IAAI,eAAe,CAAC;QAC/B,MAAM,EAAE,2BAA2B;QACnC,OAAO,EAAE,YAAY;QACrB,OAAO,EAAE,GAAG,CAAC,OAAO;QACpB,eAAe,EAAE,GAAG,CAAC,eAAe;QACpC,gBAAgB,EAAE,KAAK;QACvB,eAAe,EAAE,MAAM,CAAC,eAAe,CAAC;QACxC,qFAAqF;QACrF,yFAAyF;QACzF,uFAAuF;QACvF,gFAAgF;QAChF,GAAG,CAAC,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1E,CAAC,CAAC;IAEH,IAAI,GAAa,CAAC;IAClB,IAAI,CAAC;QACH,GAAG,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YAC9B,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE,MAAM,EAAE,iBAAiB,EAAE;YAC3F,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE;SACtB,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CACb,yDAAyD,QAAQ,KAC/D,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CACjD,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC9B,IAAI,CAAC,GAAG,CAAC,EAAE,IAAI,MAAM,CAAC,IAAI,EAAE,OAAO,CAAC,KAAK,SAAS,IAAI,sBAAsB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACxF,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;QAClC,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,CAAC;QACxC,MAAM,IAAI,KAAK,CACb,8CAA8C,GAAG,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,IAChF,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,EACpD,+BAA+B,CAChC,CAAC;IACJ,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;IAChD,MAAM,eAAe,GAAG,MAAM,CAAC,IAAI,EAAE,iBAAiB,CAAC,CAAC;IACxD,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;IAClD,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC9C,IAAI,CAAC,WAAW,IAAI,CAAC,eAAe,IAAI,CAAC,YAAY,EAAE,CAAC;QACtD,MAAM,IAAI,KAAK,CACb,sFAAsF,IAAI,CAAC,KAAK,CAC9F,CAAC,EACD,GAAG,CACJ,+BAA+B,CACjC,CAAC;IACJ,CAAC;IACD,MAAM,WAAW,GAAG,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IAC9D,OAAO;QACL,WAAW;QACX,eAAe;QACf,YAAY;QACZ,GAAG,CAAC,MAAM,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzD,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAI,GAA0B,EAAE;IACjE,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACtC,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,CAAC,CAAC,IAAY,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;IAC5F,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,IAAI,CAAC;IACrD,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,CAAC;IACzC,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAErC,gGAAgG;IAChG,0FAA0F;IAC1F,MAAM,IAAI,GAAG,cAAc,CAAqB;QAC9C,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,qBAAqB;QAClC,OAAO,EAAE,SAAS;QAClB,kBAAkB,EAAE,eAAe;QACnC,gGAAgG;QAChG,GAAG,EAAE,CAAC,GAAG,EAAE,EAAE,CACX,GAAG,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,GAAG,IAAI,EAAE,IAAI,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,eAAe,IAAI,GAAG,CAAC,gBAAgB,IAAI,EAAE,IAAI,GAAG,CAAC,aAAa,IAAI,EAAE,EAAE;QAC/H,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAClB,MAAM,KAAK,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,SAAS,EAAE,aAAa,EAAE,eAAe,EAAE,aAAa,CAAC,CAAC;YAC7G,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,EAAE,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QAC1H,CAAC;KACF,CAAC,CAAC;IAEH,OAAO;QACL,KAAK,CAAC,IAAI,CAAC,GAAuB;YAChC,IAAI,GAAG,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;gBAC5B,gGAAgG;gBAChG,0FAA0F;gBAC1F,IAAI,WAAW;oBAAE,OAAO,WAAW,CAAC,GAAG,CAAC,CAAC;gBACzC,MAAM,IAAI,KAAK,CACb,iEAAiE;oBAC/D,sBAAsB,CACzB,CAAC;YACJ,CAAC;YACD,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,OAAO,IAAI,CAAC,KAAK,CAAC,UAAU,CAAmB,CAAC;QAClD,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/blob/hosting.d.ts

@@ -0,0 +1,4 @@
+import type { BlobPutter } from "@open-everywhere/core/agent/adapter-api.js";
+/** The real putter — `put` with public access, OIDC auth and a random filename suffix. */
+export declare const vercelBlobPutter: BlobPutter;
+//# sourceMappingURL=hosting.d.ts.map

package/dist/agent/blob/hosting.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting.d.ts","sourceRoot":"","sources":["../../../agent/blob/hosting.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,4CAA4C,CAAC;AAE7E,0FAA0F;AAC1F,eAAO,MAAM,gBAAgB,EAAE,UAiB9B,CAAC"}

package/dist/agent/blob/hosting.js

@@ -0,0 +1,20 @@
+// Vercel Blob putter — the vendor half of core's BlobPutter seam. Auth is OIDC and never a read-write token;
+// with the OIDC env absent it FAILS LOUD, because an opted-in unconfigured deployment is a misconfiguration.
+/** The real putter — `put` with public access, OIDC auth and a random filename suffix. */
+export const vercelBlobPutter = async ({ pathname, body, contentType }) => {
+    if (!process.env.VERCEL_OIDC_TOKEN || !process.env.BLOB_STORE_ID) {
+        throw new Error("blob hosting is opted in but not configured — VERCEL_OIDC_TOKEN and BLOB_STORE_ID must be present " +
+            "(Vercel populates them once a Blob store is connected to this project). This deployment writes Blobs " +
+            "via OIDC, never a BLOB_READ_WRITE_TOKEN.");
+    }
+    // Dynamic import keeps the vendor SDK off any bundling path that never hosts an artifact
+    // (same discipline as post_file's node:fs import). OIDC creds are read from the environment.
+    const { put } = await import("@vercel/blob");
+    const res = await put(pathname, Buffer.from(body), {
+        access: "public",
+        contentType,
+        addRandomSuffix: true, // namespace safety inside the reserved prefix — no collisions/guessing.
+    });
+    return { url: res.url };
+};
+//# sourceMappingURL=hosting.js.map

package/dist/agent/blob/hosting.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosting.js","sourceRoot":"","sources":["../../../agent/blob/hosting.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,6GAA6G;AAI7G,0FAA0F;AAC1F,MAAM,CAAC,MAAM,gBAAgB,GAAe,KAAK,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,EAAE,EAAE;IACpF,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,EAAE,CAAC;QACjE,MAAM,IAAI,KAAK,CACb,oGAAoG;YAClG,uGAAuG;YACvG,0CAA0C,CAC7C,CAAC;IACJ,CAAC;IACD,yFAAyF;IACzF,6FAA6F;IAC7F,MAAM,EAAE,GAAG,EAAE,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,CAAC;IAC7C,MAAM,GAAG,GAAG,MAAM,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE;QACjD,MAAM,EAAE,QAAQ;QAChB,WAAW;QACX,eAAe,EAAE,IAAI,EAAE,wEAAwE;KAChG,CAAC,CAAC;IACH,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC;AAC1B,CAAC,CAAC"}

package/dist/agent/browser/config.d.ts

@@ -0,0 +1,24 @@
+import { type BrowserHostDeclaration } from "@open-everywhere/core/agent/adapter-api.js";
+export interface AgentBrowserConfig {
+    /** The operator's declared browse targets — the whole reach of the capability. */
+    readonly hosts: readonly BrowserHostDeclaration[];
+    /** Just the hostnames, in declaration order: what agent-browser's `--allowed-domains` wants. */
+    readonly domains: readonly string[];
+}
+/** Is the master flag armed? */
+export declare function agentBrowserEnabled(): boolean;
+/**
+ * Resolve the armed config, or undefined when the capability must stay off; an empty declaration logs LOUDLY
+ * once. Memoized. A MALFORMED declaration never reaches here — `defineBrowserHosts` throws at module load.
+ *
+ * 🔴 IT IS THE PLATFORM GATE FOR THE WHOLE PLANE (OPE-1793). Every arming path reads this one config —
+ * the tool mount and the egress-host opening (agent/lib/register-adapters.ts → browser/register.ts) and
+ * the sandbox bake (browser/sandbox.ts) — so refusing HERE is what makes the plane fail closed off
+ * Vercel on all three at once. It previously refused only the BAKE, and a self-host deployment with
+ * `browser.enabled: true` then mounted all 20 `browser_*` tools and opened the declared egress hosts
+ * for a browser that cannot run.
+ */
+export declare function loadAgentBrowserConfig(): AgentBrowserConfig | undefined;
+/** TEST SEAM: drop the memoized config so a test can vary the declaration. */
+export declare function resetAgentBrowserConfigForTest(): void;
+//# sourceMappingURL=config.d.ts.map

package/dist/agent/browser/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../agent/browser/config.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6D,KAAK,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAMpJ,MAAM,WAAW,kBAAkB;IACjC,kFAAkF;IAClF,QAAQ,CAAC,KAAK,EAAE,SAAS,sBAAsB,EAAE,CAAC;IAClD,gGAAgG;IAChG,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,gCAAgC;AAChC,wBAAgB,mBAAmB,IAAI,OAAO,CAE7C;AAKD;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,IAAI,kBAAkB,GAAG,SAAS,CAoBvE;AAED,8EAA8E;AAC9E,wBAAgB,8BAA8B,IAAI,IAAI,CAGrD"}

package/dist/agent/browser/config.js

@@ -0,0 +1,50 @@
+// The agent-browser config, parsed FAIL-CLOSED: the flag arms the plane and the HOST DECLARATION is its
+// reach. Flag on with an EMPTY declaration does NOT arm. A loopback target must still be declared.
+import { getSettings, browserHostDeclarations, browserPlaneRefusal } from "@open-everywhere/core/agent/adapter-api.js";
+// The master flag is a BEHAVIOUR SETTING (OPE-371 t2). Docs, tests and the loud misconfiguration
+// message quote this exact STRING, so the name below holds it once for this module.
+const AGENT_BROWSER_FLAG = "browser.enabled";
+/** Is the master flag armed? */
+export function agentBrowserEnabled() {
+    return getSettings().browser.enabled;
+}
+let cached;
+let cachedResolved = false;
+/**
+ * Resolve the armed config, or undefined when the capability must stay off; an empty declaration logs LOUDLY
+ * once. Memoized. A MALFORMED declaration never reaches here — `defineBrowserHosts` throws at module load.
+ *
+ * 🔴 IT IS THE PLATFORM GATE FOR THE WHOLE PLANE (OPE-1793). Every arming path reads this one config —
+ * the tool mount and the egress-host opening (agent/lib/register-adapters.ts → browser/register.ts) and
+ * the sandbox bake (browser/sandbox.ts) — so refusing HERE is what makes the plane fail closed off
+ * Vercel on all three at once. It previously refused only the BAKE, and a self-host deployment with
+ * `browser.enabled: true` then mounted all 20 `browser_*` tools and opened the declared egress hosts
+ * for a browser that cannot run.
+ */
+export function loadAgentBrowserConfig() {
+    if (cachedResolved)
+        return cached;
+    cachedResolved = true;
+    cached = undefined;
+    if (!agentBrowserEnabled())
+        return undefined;
+    const refusal = browserPlaneRefusal();
+    if (refusal !== undefined) {
+        console.error(`[open-everywhere:agent-browser] ${AGENT_BROWSER_FLAG}: true but ${refusal} NOT arming (fail closed): no tools mount, no egress host opens, no browser bakes.`);
+        return undefined;
+    }
+    const hosts = browserHostDeclarations();
+    if (hosts.length === 0) {
+        console.error(`[open-everywhere:agent-browser] ${AGENT_BROWSER_FLAG}: true but no browser host is declared — NOT arming (fail closed). ` +
+            "Declare the browse targets in agent/access/browser-hosts.ts.");
+        return undefined;
+    }
+    cached = { hosts, domains: hosts.map((h) => h.host) };
+    return cached;
+}
+/** TEST SEAM: drop the memoized config so a test can vary the declaration. */
+export function resetAgentBrowserConfigForTest() {
+    cached = undefined;
+    cachedResolved = false;
+}
+//# sourceMappingURL=config.js.map

package/dist/agent/browser/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../agent/browser/config.ts"],"names":[],"mappings":"AAAA,wGAAwG;AACxG,mGAAmG;AAEnG,OAAO,EAAE,WAAW,EAAE,uBAAuB,EAAE,mBAAmB,EAA+B,MAAM,4CAA4C,CAAC;AAEpJ,iGAAiG;AACjG,oFAAoF;AACpF,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AAS7C,gCAAgC;AAChC,MAAM,UAAU,mBAAmB;IACjC,OAAO,WAAW,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;AACvC,CAAC;AAED,IAAI,MAAsC,CAAC;AAC3C,IAAI,cAAc,GAAG,KAAK,CAAC;AAE3B;;;;;;;;;;GAUG;AACH,MAAM,UAAU,sBAAsB;IACpC,IAAI,cAAc;QAAE,OAAO,MAAM,CAAC;IAClC,cAAc,GAAG,IAAI,CAAC;IACtB,MAAM,GAAG,SAAS,CAAC;IACnB,IAAI,CAAC,mBAAmB,EAAE;QAAE,OAAO,SAAS,CAAC;IAC7C,MAAM,OAAO,GAAG,mBAAmB,EAAE,CAAC;IACtC,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,OAAO,CAAC,KAAK,CAAC,mCAAmC,kBAAkB,cAAc,OAAO,oFAAoF,CAAC,CAAC;QAC9K,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,KAAK,GAAG,uBAAuB,EAAE,CAAC;IACxC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,CAAC,KAAK,CACX,mCAAmC,kBAAkB,qEAAqE;YACxH,8DAA8D,CACjE,CAAC;QACF,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACtD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,8BAA8B;IAC5C,MAAM,GAAG,SAAS,CAAC;IACnB,cAAc,GAAG,KAAK,CAAC;AACzB,CAAC"}

package/dist/agent/browser/register.d.ts

@@ -0,0 +1,7 @@
+import { type AgentBrowserConfig } from "./config.js";
+/**
+ * Arm the toolkit for a validated config. Returns false, LOUDLY, when the extension-config binding did not
+ * take: unbound tools would run auto-install on and UNCONTAINED, so they are not registered at all.
+ */
+export declare function registerAgentBrowser(cfg: AgentBrowserConfig): boolean;
+//# sourceMappingURL=register.d.ts.map

package/dist/agent/browser/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../agent/browser/register.ts"],"names":[],"mappings":"AAMA,OAAO,EAAE,KAAK,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAUtD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,kBAAkB,GAAG,OAAO,CA6CrE"}

package/dist/agent/browser/register.js

@@ -0,0 +1,47 @@
+// The agent-browser adapter — flag-gated and FAIL-CLOSED, so flag-off is byte-identical. Containment is two
+// walls: the vendor's allowed-domains, and the egress firewall where a declared credential is stamped.
+import browserExtension from "@agent-browser/eve";
+import * as vendorTools from "@agent-browser/eve/tools";
+import { registerBrowserToolkit, openBrowserEgressHosts, isLoopbackBrowseHost } from "@open-everywhere/core/agent/adapter-api.js";
+/**
+ * Arm the toolkit for a validated config. Returns false, LOUDLY, when the extension-config binding did not
+ * take: unbound tools would run auto-install on and UNCONTAINED, so they are not registered at all.
+ */
+export function registerAgentBrowser(cfg) {
+    browserExtension({
+        allowedDomains: [...cfg.domains],
+        autoInstall: false,
+        contentBoundaries: true,
+        inlineScreenshots: false,
+    });
+    const bound = browserExtension.config;
+    const domainsBound = Array.isArray(bound.allowedDomains) &&
+        bound.allowedDomains.length === cfg.domains.length &&
+        cfg.domains.every((d, i) => bound.allowedDomains[i] === d);
+    if (bound.autoInstall !== false || !domainsBound) {
+        console.error("[open-everywhere:agent-browser] extension config binding FAILED (namespace patch missing? see patches/@agent-browser+eve+*.patch) — " +
+            "REFUSING to arm the browser toolkit: unbound tools would run with vendor defaults (auto-install on, no domain containment).");
+        return false;
+    }
+    // Mount every vendor tool under `browser_<name>` (single underscore — `__` is the
+    // connector-op separator). Guard structurally: only defineTool-shaped exports ride.
+    const entries = {};
+    for (const [name, tool] of Object.entries(vendorTools)) {
+        const t = tool;
+        if (t && typeof t.execute === "function" && typeof t.description === "string") {
+            entries[`browser_${name}`] = t;
+        }
+    }
+    registerBrowserToolkit(entries);
+    // The outer wall's UNCREDENTIALED half: only a row declaring no credential rides this bare allow. A
+    // credentialed row is compiled by access/egress.ts — registering it here drops its narrowing and credential.
+    // 🔴 THROUGH CORE'S OWN OPENER (OPE-1793), which carries the platform refusal, so the hosts cannot open
+    // on a platform with no browser even if a registrar reached here without the config loader's gate.
+    openBrowserEgressHosts(cfg.hosts.filter((h) => h.credential === undefined && !isLoopbackBrowseHost(h.host)).map((h) => h.host));
+    const credentialed = cfg.hosts.filter((h) => h.credential !== undefined).length;
+    console.log(`[open-everywhere:agent-browser] armed: ${Object.keys(entries).length} browser tools, ` +
+        `hosts [${cfg.domains.join(", ")}] (${credentialed} credentialed at the firewall) ` +
+        `(containment: agent-browser allowed-domains + egress firewall)`);
+    return true;
+}
+//# sourceMappingURL=register.js.map

package/dist/agent/browser/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../agent/browser/register.ts"],"names":[],"mappings":"AAAA,4GAA4G;AAC5G,uGAAuG;AAEvG,OAAO,gBAAgB,MAAM,oBAAoB,CAAC;AAClD,OAAO,KAAK,WAAW,MAAM,0BAA0B,CAAC;AACxD,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,oBAAoB,EAAyB,MAAM,4CAA4C,CAAC;AAWzJ;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAAuB;IAC1D,gBAAgB,CAAC;QACf,cAAc,EAAE,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;QAChC,WAAW,EAAE,KAAK;QAClB,iBAAiB,EAAE,IAAI;QACvB,iBAAiB,EAAE,KAAK;KACzB,CAAC,CAAC;IAEH,MAAM,KAAK,GAAG,gBAAgB,CAAC,MAAuC,CAAC;IACvE,MAAM,YAAY,GAChB,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;QACnC,KAAK,CAAC,cAAc,CAAC,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,MAAM;QAClD,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,cAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC;IAC9D,IAAI,KAAK,CAAC,WAAW,KAAK,KAAK,IAAI,CAAC,YAAY,EAAE,CAAC;QACjD,OAAO,CAAC,KAAK,CACX,sIAAsI;YACpI,6HAA6H,CAChI,CAAC;QACF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,kFAAkF;IAClF,oFAAoF;IACpF,MAAM,OAAO,GAAqC,EAAE,CAAC;IACrD,KAAK,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;QACvD,MAAM,CAAC,GAAG,IAA6C,CAAC;QACxD,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,UAAU,IAAI,OAAO,CAAC,CAAC,WAAW,KAAK,QAAQ,EAAE,CAAC;YAC9E,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC,GAAG,CAAqB,CAAC;QACrD,CAAC;IACH,CAAC;IACD,sBAAsB,CAAC,OAAO,CAAC,CAAC;IAEhC,oGAAoG;IACpG,6GAA6G;IAC7G,wGAAwG;IACxG,mGAAmG;IACnG,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;IAEhI,MAAM,YAAY,GAAG,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,MAAM,CAAC;IAChF,OAAO,CAAC,GAAG,CACT,0CAA0C,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,kBAAkB;QACrF,UAAU,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,YAAY,iCAAiC;QACnF,gEAAgE,CACnE,CAAC;IACF,OAAO,IAAI,CAAC;AACd,CAAC"}

package/dist/agent/browser/sandbox.d.ts

@@ -0,0 +1,23 @@
+/** Minimal structural sandbox the installer needs (matches @agent-browser/eve's EveSandboxSession). */
+export interface BakeableSandbox {
+    readonly id: string;
+    run(options: {
+        readonly command: string;
+    }): PromiseLike<{
+        readonly exitCode?: number;
+        readonly stderr?: string;
+        readonly stdout?: string;
+    }>;
+}
+export interface AgentBrowserSandboxHooks {
+    readonly revalidationKey: () => string;
+    readonly bootstrap: (input: {
+        use: () => Promise<BakeableSandbox>;
+    }) => Promise<void>;
+}
+/**
+ * The flag-gated sandbox hook pair. Injectable install fn for the unit test (the default is the
+ * vendor installer: system deps → `npm install -g agent-browser@<pinned>` → `agent-browser install`).
+ */
+export declare function agentBrowserSandboxHooks(install?: (sandbox: BakeableSandbox) => Promise<unknown>): AgentBrowserSandboxHooks | Record<string, never>;
+//# sourceMappingURL=sandbox.d.ts.map

package/dist/agent/browser/sandbox.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.d.ts","sourceRoot":"","sources":["../../../agent/browser/sandbox.ts"],"names":[],"mappings":"AAMA,uGAAuG;AACvG,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,OAAO,EAAE;QAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;KAAE,GAAG,WAAW,CAAC;QAAE,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAC7I;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,eAAe,EAAE,MAAM,MAAM,CAAC;IACvC,QAAQ,CAAC,SAAS,EAAE,CAAC,KAAK,EAAE;QAAE,GAAG,EAAE,MAAM,OAAO,CAAC,eAAe,CAAC,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvF;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,GAAE,CAAC,OAAO,EAAE,eAAe,KAAK,OAAO,CAAC,OAAO,CAA6C,GAClG,wBAAwB,GAAG,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAelD"}

package/dist/agent/browser/sandbox.js

@@ -0,0 +1,27 @@
+// The agent-browser sandbox pre-bake — Vercel-only, and mandatory: a session sits behind the deny-all egress
+// firewall, so no mid-turn install can work. eve freezes `revalidationKey` at BUILD, so arm it there too.
+import { agentBrowserRevalidationKey, installAgentBrowser } from "@agent-browser/eve/sandbox";
+import { agentBrowserEnabled, loadAgentBrowserConfig } from "./config.js";
+/**
+ * The flag-gated sandbox hook pair. Injectable install fn for the unit test (the default is the
+ * vendor installer: system deps → `npm install -g agent-browser@<pinned>` → `agent-browser install`).
+ */
+export function agentBrowserSandboxHooks(install = (sandbox) => installAgentBrowser(sandbox)) {
+    if (!agentBrowserEnabled())
+        return {};
+    // 🔴 ONE ROAD, NOT TWO (OPE-1793). The platform refusal lives in the config loader, which every
+    // arming path reads, so an off-Vercel deployment gets `undefined` here and logs the SAME one
+    // sentence the tool mount and the egress-host opening log. This file used to hold its own
+    // `onVercel()` check, and that is exactly how the bake came to be the only gated path.
+    const cfg = loadAgentBrowserConfig(); // logs loudly itself when flag-on-but-unusable
+    if (cfg === undefined)
+        return {};
+    return {
+        revalidationKey: () => agentBrowserRevalidationKey(),
+        bootstrap: async ({ use }) => {
+            const sandbox = await use();
+            await install(sandbox);
+        },
+    };
+}
+//# sourceMappingURL=sandbox.js.map

package/dist/agent/browser/sandbox.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sandbox.js","sourceRoot":"","sources":["../../../agent/browser/sandbox.ts"],"names":[],"mappings":"AAAA,6GAA6G;AAC7G,0GAA0G;AAE1G,OAAO,EAAE,2BAA2B,EAAE,mBAAmB,EAAE,MAAM,4BAA4B,CAAC;AAC9F,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAa1E;;;GAGG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAO,GAAmD,CAAC,OAAO,EAAE,EAAE,CAAC,mBAAmB,CAAC,OAAO,CAAC;IAEnG,IAAI,CAAC,mBAAmB,EAAE;QAAE,OAAO,EAAE,CAAC;IACtC,gGAAgG;IAChG,6FAA6F;IAC7F,0FAA0F;IAC1F,uFAAuF;IACvF,MAAM,GAAG,GAAG,sBAAsB,EAAE,CAAC,CAAC,+CAA+C;IACrF,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO;QACL,eAAe,EAAE,GAAG,EAAE,CAAC,2BAA2B,EAAE;QACpD,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,EAAE;YAC3B,MAAM,OAAO,GAAG,MAAM,GAAG,EAAE,CAAC;YAC5B,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/contributions.d.ts

@@ -0,0 +1,16 @@
+export declare const CONTRIBUTIONS: {
+    readonly schemaVersion: 1;
+    readonly package: "@open-everywhere/adapters";
+    readonly contributions: readonly [{
+        readonly kind: "tool";
+        readonly name: "extend_workspace_time";
+        readonly module: "agent/sandbox/extend-workspace-time.js";
+        readonly summary: "Extend your workspace VM's lifetime by N minutes.";
+    }, {
+        readonly kind: "hook";
+        readonly name: "sandbox-lifecycle";
+        readonly module: "agent/sandbox/vercel-lifecycle.js";
+        readonly summary: "Stop-after-turn sandbox lifecycle — stop the session's sandbox compute the moment a turn finishes instead of letting it idle out its timeout window. Backend-aware: Vercel and docker each own a stop, just-bash has none and says so.";
+    }];
+};
+//# sourceMappingURL=contributions.d.ts.map

package/dist/agent/contributions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributions.d.ts","sourceRoot":"","sources":["../../agent/contributions.ts"],"names":[],"mappings":"AAGA,eAAO,MAAM,aAAa;aACxB,aAAa,EAAE,CAAC;aAChB,OAAO,EAAE,2BAA2B;aACpC,aAAa;iBACT,IAAI,EAAE,MAAM;iBAAE,IAAI,EAAE,uBAAuB;iBAAE,MAAM,EAAE,wCAAwC;iBAAE,OAAO,EAAE,mDAAmD;;iBAE3J,IAAI,EAAE,MAAM;iBAAE,IAAI,EAAE,mBAAmB;iBAAE,MAAM,EAAE,mCAAmC;iBAAE,OAAO,EAAE,wOAAwO;;CAEnU,CAAC"}

package/dist/agent/contributions.js

@@ -0,0 +1,11 @@
+// THE CONTRIBUTION MANIFEST for this package — CURATED, never scanned: a directory scan cannot tell a
+// contribution from its neighbours. Import-free DATA (the boundary lock), and erasable syntax only.
+export const CONTRIBUTIONS = {
+    schemaVersion: 1,
+    package: "@open-everywhere/adapters",
+    contributions: [
+        { kind: "tool", name: "extend_workspace_time", module: "agent/sandbox/extend-workspace-time.js", summary: "Extend your workspace VM's lifetime by N minutes." },
+        { kind: "hook", name: "sandbox-lifecycle", module: "agent/sandbox/vercel-lifecycle.js", summary: "Stop-after-turn sandbox lifecycle — stop the session's sandbox compute the moment a turn finishes instead of letting it idle out its timeout window. Backend-aware: Vercel and docker each own a stop, just-bash has none and says so." },
+    ],
+};
+//# sourceMappingURL=contributions.js.map

package/dist/agent/contributions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributions.js","sourceRoot":"","sources":["../../agent/contributions.ts"],"names":[],"mappings":"AAAA,sGAAsG;AACtG,oGAAoG;AAEpG,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,2BAA2B;IACpC,aAAa,EAAE;QACb,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,uBAAuB,EAAE,MAAM,EAAE,wCAAwC,EAAE,OAAO,EAAE,mDAAmD,EAAE;QAE/J,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,EAAE,MAAM,EAAE,mCAAmC,EAAE,OAAO,EAAE,wOAAwO,EAAE;KAC5U;CACO,CAAC"}

package/dist/agent/directory/config.d.ts

@@ -0,0 +1,39 @@
+/** Which app-assignment field carries the app-side identity for one mapped app. */
+export type OktaAppIdField = "externalId" | "userName";
+/** One configured Okta application → one of OUR platform tokens. */
+export interface OktaAppMapping {
+    /** Our platform token ("slack", "github", "linear") — the namespace `principalKey` qualifies with. */
+    readonly platform: string;
+    /**
+     * WHICH WORKSPACE this app's ids belong to; absent means this deployment's sole admitted workspace.
+     * 🔴 OPERATOR CONFIG, never an IdP answer — and the sync still refuses a tenant this deployment never admitted.
+     */
+    readonly tenant?: string;
+    /** The Okta application id (`0oa…`). */
+    readonly appId: string;
+    /**
+     * Where the app-side user id lives. DEFAULT `externalId` — the SCIM write-back, and the only field graded
+     * `attested`. `userName` is usually an EMAIL, is app-admin-editable, and is therefore emitted `asserted`.
+     */
+    readonly field: OktaAppIdField;
+}
+export interface OktaDirectoryConfig {
+    readonly orgUrl: string;
+    readonly tokenRef: string;
+    readonly tokenBroker: string;
+    readonly apps: readonly OktaAppMapping[];
+}
+/** True iff the selector names the Okta adapter. Exact match, trimmed, case-insensitive — a typo
+ *  leaves the plane OFF rather than half-arming something. */
+export declare function oktaDirectoryEnabled(env?: NodeJS.ProcessEnv): boolean;
+/**
+ * Parse the app map: `<platform>[/<tenant>]:<oktaAppId>[:<field>]`, comma-separated. The workspace rung uses
+ * `/`, matching the principal-key grammar. FAIL-LOUD on a malformed entry — a dropped entry is a silent gap.
+ */
+export declare function parseOktaAppMap(raw: string | undefined): readonly OktaAppMapping[];
+/**
+ * Load the Okta config block. FAIL-LOUD when the selector is armed but a required field is missing. An unset
+ * SELECTOR stays silent — that is a deployment with no IdP, not a broken one.
+ */
+export declare function loadOktaDirectoryConfig(env?: NodeJS.ProcessEnv): OktaDirectoryConfig;
+//# sourceMappingURL=config.d.ts.map

package/dist/agent/directory/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../../agent/directory/config.ts"],"names":[],"mappings":"AAgBA,mFAAmF;AACnF,MAAM,MAAM,cAAc,GAAG,YAAY,GAAG,UAAU,CAAC;AAEvD,oEAAoE;AACpE,MAAM,WAAW,cAAc;IAC7B,sGAAsG;IACtG,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B;;;OAGG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,wCAAwC;IACxC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,cAAc,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,IAAI,EAAE,SAAS,cAAc,EAAE,CAAC;CAC1C;AAED;8DAC8D;AAC9D,wBAAgB,oBAAoB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAElF;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,MAAM,GAAG,SAAS,GAAG,SAAS,cAAc,EAAE,CAwClF;AAsBD;;;GAGG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,mBAAmB,CAiBjG"}

package/dist/agent/directory/config.js

@@ -0,0 +1,101 @@
+// The directory-adapter SELECTION and Okta config. Selector-off or config-absent ⇒ NOTHING registers, with no
+// partial arming. 🔴 The API token is a `secretRef` through a broker (default `db`), never a raw env read.
+/** Which directory adapter to arm ("okta"). Unset ⇒ the directory plane stays off. */
+const OE_DIRECTORY_PROVIDER_ENV = "OE_DIRECTORY_PROVIDER";
+/** The Okta org URL, e.g. `https://acme.okta.com` (or an `*.oktapreview.com` sandbox). MUST be
+ *  `https://` — see {@link requireHttpsOrgUrl}; a plaintext origin would put the SSWS token on the
+ *  wire in clear on every request. */
+const OE_DIRECTORY_OKTA_ORG_URL_ENV = "OE_DIRECTORY_OKTA_ORG_URL";
+/** The credential REF for the Okta API token — resolved through a broker, never read as a value. */
+const OE_DIRECTORY_OKTA_TOKEN_REF_ENV = "OE_DIRECTORY_OKTA_TOKEN_REF";
+/** Which broker holds that ref. Default "db" (the encrypted credential store — OPE-408 step 2). */
+const OE_DIRECTORY_OKTA_TOKEN_BROKER_ENV = "OE_DIRECTORY_OKTA_TOKEN_BROKER";
+/** App map: `"<platform>[/<tenant>]:<oktaAppId>[:<field>], …"` — see {@link parseOktaAppMap}. */
+const OE_DIRECTORY_OKTA_APPS_ENV = "OE_DIRECTORY_OKTA_APPS";
+/** True iff the selector names the Okta adapter. Exact match, trimmed, case-insensitive — a typo
+ *  leaves the plane OFF rather than half-arming something. */
+export function oktaDirectoryEnabled(env = process.env) {
+    return (env[OE_DIRECTORY_PROVIDER_ENV] ?? "").trim().toLowerCase() === "okta";
+}
+/**
+ * Parse the app map: `<platform>[/<tenant>]:<oktaAppId>[:<field>]`, comma-separated. The workspace rung uses
+ * `/`, matching the principal-key grammar. FAIL-LOUD on a malformed entry — a dropped entry is a silent gap.
+ */
+export function parseOktaAppMap(raw) {
+    const out = [];
+    const seen = new Set();
+    for (const entry of (raw ?? "").split(",").map((s) => s.trim()).filter(Boolean)) {
+        const parts = entry.split(":").map((s) => s.trim());
+        const [head, appId, field] = parts;
+        if (parts.length < 2 || parts.length > 3 || !head || !appId) {
+            throw new Error(`${OE_DIRECTORY_OKTA_APPS_ENV} entry "${entry}" is malformed — expected "<platform>[/<tenant>]:<oktaAppId>" ` +
+                `with an optional ":externalId"/":userName" suffix, e.g. "slack:0oa1a2b3c4d5" or "slack/T0AB1CD2E:0oa1a2b3c4d5".`);
+        }
+        if (field !== undefined && field !== "externalId" && field !== "userName") {
+            throw new Error(`${OE_DIRECTORY_OKTA_APPS_ENV} entry "${entry}" names field "${field}" — only "externalId" (default) or "userName" are valid.`);
+        }
+        const slash = head.indexOf("/");
+        const platform = (slash < 0 ? head : head.slice(0, slash)).toLowerCase();
+        const tenant = slash < 0 ? undefined : head.slice(slash + 1).trim();
+        if (!platform || (tenant !== undefined && (tenant.length === 0 || tenant.includes("/")))) {
+            throw new Error(`${OE_DIRECTORY_OKTA_APPS_ENV} entry "${entry}" has an unusable platform/workspace half ("${head}") — write "<platform>" ` +
+                `or "<platform>/<workspace-id>" with exactly one slash, e.g. "slack/T0AB1CD2E".`);
+        }
+        // Two apps mapped to the SAME (platform, workspace) is a genuine misconfiguration rather than a
+        // widening: the two would write suggestions that are indistinguishable downstream, and whichever
+        // ran second would silently redefine the first's ids. Refused here, where the operator can see
+        // both entries, rather than as a mystery in a sync warning.
+        const key = `${platform}/${tenant ?? ""}`;
+        if (seen.has(key)) {
+            throw new Error(`${OE_DIRECTORY_OKTA_APPS_ENV} maps two apps to the same target "${key.replace(/\/$/u, "")}" — an app map entry names WHERE ` +
+                "the ids land, so two entries for one place cannot both be right. Give each workspace its own rung " +
+                '("slack/T0AB1CD2E:…,slack/T9ZYX8W7V:…"), or remove the duplicate.');
+        }
+        seen.add(key);
+        out.push({ platform, ...(tenant !== undefined ? { tenant } : {}), appId, field: field ?? "externalId" });
+    }
+    return out;
+}
+/**
+ * 🔴 The org URL MUST be `https://`: every request carries the SSWS API token in an `authorization` header.
+ * Rejected at LOAD time, with no localhost carve-out; an unparseable URL is refused here for the same reason.
+ */
+function requireHttpsOrgUrl(raw) {
+    let parsed;
+    try {
+        parsed = new URL(raw);
+    }
+    catch {
+        throw new Error(`${OE_DIRECTORY_OKTA_ORG_URL_ENV}="${raw}" is not a URL — expected your Okta org URL, e.g. "https://acme.okta.com".`);
+    }
+    if (parsed.protocol !== "https:") {
+        throw new Error(`${OE_DIRECTORY_OKTA_ORG_URL_ENV}="${raw}" is not https — refusing to arm directory sync. Every Okta request carries the ` +
+            `SSWS API token in an authorization header, so a plaintext org URL would put an admin credential on the wire on every ` +
+            `sync. Use "https://<your-org>.okta.com".`);
+    }
+}
+/**
+ * Load the Okta config block. FAIL-LOUD when the selector is armed but a required field is missing. An unset
+ * SELECTOR stays silent — that is a deployment with no IdP, not a broken one.
+ */
+export function loadOktaDirectoryConfig(env = process.env) {
+    const orgUrl = env[OE_DIRECTORY_OKTA_ORG_URL_ENV]?.trim();
+    const tokenRef = env[OE_DIRECTORY_OKTA_TOKEN_REF_ENV]?.trim();
+    const missing = [];
+    if (!orgUrl)
+        missing.push(OE_DIRECTORY_OKTA_ORG_URL_ENV);
+    if (!tokenRef)
+        missing.push(OE_DIRECTORY_OKTA_TOKEN_REF_ENV);
+    if (missing.length) {
+        throw new Error(`${OE_DIRECTORY_PROVIDER_ENV}="okta" but ${missing.join(" and ")} ${missing.length > 1 ? "are" : "is"} not set — directory sync cannot be armed.`);
+    }
+    requireHttpsOrgUrl(orgUrl);
+    const apps = parseOktaAppMap(env[OE_DIRECTORY_OKTA_APPS_ENV]);
+    return {
+        orgUrl: orgUrl.replace(/\/+$/u, ""),
+        tokenRef: tokenRef,
+        tokenBroker: env[OE_DIRECTORY_OKTA_TOKEN_BROKER_ENV]?.trim() || "db",
+        apps,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/agent/directory/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../../agent/directory/config.ts"],"names":[],"mappings":"AAAA,8GAA8G;AAC9G,2GAA2G;AAE3G,sFAAsF;AACtF,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AAC1D;;sCAEsC;AACtC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAClE,oGAAoG;AACpG,MAAM,+BAA+B,GAAG,6BAA6B,CAAC;AACtE,mGAAmG;AACnG,MAAM,kCAAkC,GAAG,gCAAgC,CAAC;AAC5E,iGAAiG;AACjG,MAAM,0BAA0B,GAAG,wBAAwB,CAAC;AA8B5D;8DAC8D;AAC9D,MAAM,UAAU,oBAAoB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IACvE,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,KAAK,MAAM,CAAC;AAChF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAAC,GAAuB;IACrD,MAAM,GAAG,GAAqB,EAAE,CAAC;IACjC,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,KAAK,MAAM,KAAK,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC;QAChF,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACpD,MAAM,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,CAAC,GAAG,KAAK,CAAC;QACnC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;YAC5D,MAAM,IAAI,KAAK,CACb,GAAG,0BAA0B,WAAW,KAAK,gEAAgE;gBAC3G,iHAAiH,CACpH,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,YAAY,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAC1E,MAAM,IAAI,KAAK,CAAC,GAAG,0BAA0B,WAAW,KAAK,kBAAkB,KAAK,0DAA0D,CAAC,CAAC;QAClJ,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAChC,MAAM,QAAQ,GAAG,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;QACzE,MAAM,MAAM,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;QACpE,IAAI,CAAC,QAAQ,IAAI,CAAC,MAAM,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,CAAC,IAAI,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YACzF,MAAM,IAAI,KAAK,CACb,GAAG,0BAA0B,WAAW,KAAK,+CAA+C,IAAI,0BAA0B;gBACxH,gFAAgF,CACnF,CAAC;QACJ,CAAC;QACD,gGAAgG;QAChG,iGAAiG;QACjG,+FAA+F;QAC/F,4DAA4D;QAC5D,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,MAAM,IAAI,EAAE,EAAE,CAAC;QAC1C,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;YAClB,MAAM,IAAI,KAAK,CACb,GAAG,0BAA0B,sCAAsC,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,mCAAmC;gBAC3H,oGAAoG;gBACpG,mEAAmE,CACtE,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACd,GAAG,CAAC,IAAI,CAAC,EAAE,QAAQ,EAAE,GAAG,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,IAAI,YAAY,EAAE,CAAC,CAAC;IAC3G,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;GAGG;AACH,SAAS,kBAAkB,CAAC,GAAW;IACrC,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,6BAA6B,KAAK,GAAG,4EAA4E,CAAC,CAAC;IACxI,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,IAAI,KAAK,CACb,GAAG,6BAA6B,KAAK,GAAG,kFAAkF;YACxH,uHAAuH;YACvH,0CAA0C,CAC7C,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,uBAAuB,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC1E,MAAM,MAAM,GAAG,GAAG,CAAC,6BAA6B,CAAC,EAAE,IAAI,EAAE,CAAC;IAC1D,MAAM,QAAQ,GAAG,GAAG,CAAC,+BAA+B,CAAC,EAAE,IAAI,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM;QAAE,OAAO,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;IACzD,IAAI,CAAC,QAAQ;QAAE,OAAO,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;IAC7D,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;QACnB,MAAM,IAAI,KAAK,CAAC,GAAG,yBAAyB,eAAe,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,4CAA4C,CAAC,CAAC;IACrK,CAAC;IACD,kBAAkB,CAAC,MAAO,CAAC,CAAC;IAC5B,MAAM,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAC,CAAC;IAC9D,OAAO;QACL,MAAM,EAAE,MAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,CAAC;QACpC,QAAQ,EAAE,QAAS;QACnB,WAAW,EAAE,GAAG,CAAC,kCAAkC,CAAC,EAAE,IAAI,EAAE,IAAI,IAAI;QACpE,IAAI;KACL,CAAC;AACJ,CAAC"}

package/dist/agent/directory/okta.d.ts

@@ -0,0 +1,19 @@
+import { type DirectoryProvider } from "@open-everywhere/core/agent/adapter-api.js";
+import type { OktaDirectoryConfig } from "./config.js";
+/** A `fetch`-shaped transport — the DI seam the offline test injects (defaults to global fetch). */
+export type FetchLike = typeof fetch;
+export interface OktaDirectoryDeps {
+    readonly config: OktaDirectoryConfig;
+    /** Transport for every Okta call. Default: global `fetch`. */
+    readonly fetch?: FetchLike;
+    /** Resolve the API token. Default: core's broker seam — see config.ts's header. */
+    readonly resolveToken?: (broker: string, ref: string) => Promise<string>;
+}
+/**
+ * The `rel="next"` URL from the RFC-5988 `Link` header. Okta paginates with an opaque cursor and no total
+ * count, so following the header is the ONLY correct way to page — an offset would truncate or duplicate.
+ */
+export declare function nextLink(header: string | null | undefined): string | undefined;
+/** Build the Okta directory provider. Every edge is injected, so the whole mapping is offline-testable. */
+export declare function makeOktaDirectoryProvider(deps: OktaDirectoryDeps): DirectoryProvider;
+//# sourceMappingURL=okta.d.ts.map

package/dist/agent/directory/okta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"okta.d.ts","sourceRoot":"","sources":["../../../agent/directory/okta.ts"],"names":[],"mappings":"AAGA,OAAO,EAA6D,KAAK,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAC/I,OAAO,KAAK,EAAkB,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAEvE,oGAAoG;AACpG,MAAM,MAAM,SAAS,GAAG,OAAO,KAAK,CAAC;AAoDrC,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAC;IACrC,8DAA8D;IAC9D,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAC;IAC3B,mFAAmF;IACnF,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;CAC1E;AAUD;;;GAGG;AACH,wBAAgB,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,CAO9E;AAED,2GAA2G;AAC3G,wBAAgB,yBAAyB,CAAC,IAAI,EAAE,iBAAiB,GAAG,iBAAiB,CA8HpF"}