@pellux/goodvibes-sdk 0.18.13 → 0.18.15

package/dist/_internal/platform/config/service-registry.js

@@ -0,0 +1,221 @@
+/**
+ * ServiceRegistry — named service credential resolution.
+ *
+ * Reads service configs from .goodvibes/goodvibes/services.json.
+ * Each service entry declares its authType and the SecretsManager key
+ * that holds the credential.
+ *
+ * Example services.json:
+ * {
+ *   "openai": { "name": "openai", "baseUrl": "https://api.openai.com", "authType": "bearer", "tokenKey": "OPENAI_API_KEY" },
+ *   "github":  { "name": "github",  "baseUrl": "https://api.github.com",  "authType": "bearer", "tokenKey": "GITHUB_TOKEN" },
+ *   "slack":   { "name": "slack", "authType": "bearer", "tokenKey": "SLACK_BOT_TOKEN", "tokenRef": { "source": "vaultwarden", "item": "GoodVibes Slack", "field": "password", "server": "https://vault.example.test" } }
+ * }
+ */
+import { readFileSync } from 'fs';
+import { SecretsManager } from './secrets.js';
+import { describeSecretRef, isSecretRefInput, resolveSecretRef, } from '@pellux/goodvibes-sdk/platform/config/secret-refs';
+import { SubscriptionManager } from '@pellux/goodvibes-sdk/platform/config/subscriptions';
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
+import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
+function readServicesFile(filePath) {
+    try {
+        const raw = readFileSync(filePath, 'utf-8');
+        return JSON.parse(raw);
+    }
+    catch (err) {
+        const code = err.code;
+        if (code !== 'ENOENT') {
+            logger.error('ServiceRegistry: failed to read services file — treating as empty', {
+                path: filePath,
+            });
+        }
+        return {};
+    }
+}
+// ---------------------------------------------------------------------------
+// ServiceRegistry
+// ---------------------------------------------------------------------------
+export class ServiceRegistry {
+    servicesFilePath;
+    secretsManager;
+    subscriptionManager;
+    constructor(servicesFilePath, options) {
+        this.servicesFilePath = servicesFilePath;
+        this.secretsManager = options.secretsManager;
+        this.subscriptionManager = options.subscriptionManager;
+    }
+    /**
+     * Return all registered service configs.
+     */
+    getAll() {
+        return readServicesFile(this.servicesFilePath);
+    }
+    /**
+     * Return the config for a named service, or null if not found.
+     */
+    get(serviceName) {
+        const all = this.getAll();
+        return all[serviceName] ?? null;
+    }
+    async resolveConfiguredSecret(serviceName, field, keyOrRef, ref) {
+        const candidate = ref ?? (keyOrRef && isSecretRefInput(keyOrRef) ? keyOrRef : undefined);
+        if (candidate) {
+            try {
+                const resolved = await resolveSecretRef(candidate, {
+                    resolveLocalSecret: (key) => this.secretsManager.get(key),
+                    homeDirectory: this.secretsManager.getGlobalHome?.() ?? undefined,
+                });
+                return resolved.value;
+            }
+            catch (error) {
+                logger.warn('ServiceRegistry: failed to resolve secret reference', {
+                    serviceName,
+                    field,
+                    ref: describeSecretRef(candidate),
+                    error: summarizeError(error),
+                });
+                return null;
+            }
+        }
+        return keyOrRef ? this.secretsManager.get(keyOrRef) : null;
+    }
+    /**
+     * Resolve auth headers for a named service.
+     * Looks up the service config, fetches credential from SecretsManager,
+     * and returns the appropriate HTTP headers.
+     *
+     * Returns null if the service is not registered or credential is unavailable.
+     */
+    async resolveAuth(serviceName) {
+        const config = this.get(serviceName);
+        if (!config) {
+            logger.debug('ServiceRegistry: unknown service', { serviceName });
+            return null;
+        }
+        const providerOverride = this.subscriptionManager.getAccessToken(config.providerId ?? serviceName);
+        if (providerOverride) {
+            return { Authorization: `Bearer ${providerOverride}` };
+        }
+        switch (config.authType) {
+            case 'bearer': {
+                const token = await this.resolveConfiguredSecret(serviceName, 'primary', config.tokenKey, config.tokenRef);
+                if (!token) {
+                    logger.debug('ServiceRegistry: bearer token not found', { serviceName, key: config.tokenKey });
+                    return null;
+                }
+                return { Authorization: `Bearer ${token}` };
+            }
+            case 'basic': {
+                const username = await this.resolveConfiguredSecret(serviceName, 'primary', config.tokenKey, config.tokenRef);
+                const password = await this.resolveConfiguredSecret(serviceName, 'password', config.passwordKey, config.passwordRef);
+                if (!username) {
+                    logger.debug('ServiceRegistry: basic username not found', { serviceName, key: config.tokenKey });
+                    return null;
+                }
+                const encoded = Buffer.from(`${username}:${password ?? ''}`).toString('base64');
+                return { Authorization: `Basic ${encoded}` };
+            }
+            case 'api-key': {
+                const key = await this.resolveConfiguredSecret(serviceName, 'primary', config.tokenKey, config.tokenRef);
+                if (!key) {
+                    logger.debug('ServiceRegistry: api key not found', { serviceName, key: config.tokenKey });
+                    return null;
+                }
+                const headerName = config.apiKeyHeader ?? 'X-API-Key';
+                return { [headerName]: key };
+            }
+            case 'oauth': {
+                const token = await this.resolveConfiguredSecret(serviceName, 'primary', config.tokenKey, config.tokenRef);
+                if (!token) {
+                    logger.debug('ServiceRegistry: oauth token not found', { serviceName, key: config.tokenKey });
+                    return null;
+                }
+                return { Authorization: `Bearer ${token}` };
+            }
+            default:
+                return null;
+        }
+    }
+    async resolveSecret(serviceName, field) {
+        const config = this.get(serviceName);
+        if (!config)
+            return null;
+        switch (field) {
+            case 'primary':
+                return this.resolveConfiguredSecret(serviceName, field, config.tokenKey, config.tokenRef);
+            case 'password':
+                return this.resolveConfiguredSecret(serviceName, field, config.passwordKey, config.passwordRef);
+            case 'webhookUrl':
+                return this.resolveConfiguredSecret(serviceName, field, config.webhookUrlKey, config.webhookUrlRef);
+            case 'signingSecret':
+                return this.resolveConfiguredSecret(serviceName, field, config.signingSecretKey, config.signingSecretRef);
+            case 'publicKey':
+                return this.resolveConfiguredSecret(serviceName, field, config.publicKeyKey, config.publicKeyRef);
+        }
+    }
+    async inspect(serviceName) {
+        const config = this.get(serviceName);
+        if (!config)
+            return null;
+        const [primary, password, webhookUrl, signingSecret, publicKey,] = await Promise.all([
+            this.resolveSecret(serviceName, 'primary'),
+            this.resolveSecret(serviceName, 'password'),
+            this.resolveSecret(serviceName, 'webhookUrl'),
+            this.resolveSecret(serviceName, 'signingSecret'),
+            this.resolveSecret(serviceName, 'publicKey'),
+        ]);
+        return {
+            config,
+            hasPrimaryCredential: primary !== null && primary.length > 0,
+            hasPasswordCredential: password !== null && password.length > 0,
+            hasWebhookUrl: webhookUrl !== null && webhookUrl.length > 0,
+            hasSigningSecret: signingSecret !== null && signingSecret.length > 0,
+            hasPublicKey: publicKey !== null && publicKey.length > 0,
+        };
+    }
+    async testConnection(serviceName) {
+        const config = this.get(serviceName);
+        if (!config) {
+            return { ok: false, status: null, testedUrl: null, error: 'Unknown service' };
+        }
+        const baseUrl = config.baseUrl?.trim() ?? '';
+        if (!baseUrl) {
+            return { ok: false, status: null, testedUrl: null, error: 'No baseUrl configured' };
+        }
+        const headers = await this.resolveAuth(serviceName);
+        const reqHeaders = {
+            Accept: 'application/json',
+            ...(headers ?? {}),
+        };
+        const candidates = [
+            `${baseUrl.replace(/\/$/, '')}/health`,
+            baseUrl.replace(/\/$/, ''),
+        ];
+        for (const url of candidates) {
+            try {
+                const response = await fetch(url, {
+                    method: 'GET',
+                    headers: reqHeaders,
+                    signal: AbortSignal.timeout(5000),
+                });
+                return {
+                    ok: response.ok,
+                    status: response.status,
+                    testedUrl: url,
+                    ...(response.ok ? {} : { error: `HTTP ${response.status}` }),
+                };
+            }
+            catch (error) {
+                const message = summarizeError(error);
+                logger.debug('ServiceRegistry: service test failed', { serviceName, url, error: message });
+            }
+        }
+        return {
+            ok: false,
+            status: null,
+            testedUrl: candidates[candidates.length - 1] ?? null,
+            error: 'Connection failed',
+        };
+    }
+}

package/dist/_internal/platform/config/subscription-auth.d.ts

@@ -0,0 +1,3 @@
+import type { SubscriptionManager } from '@pellux/goodvibes-sdk/platform/config/subscriptions';
+export declare function resolveSubscriptionAccessToken(provider: string, manager: Pick<SubscriptionManager, 'get' | 'saveSubscription' | 'resolveAccessToken'>): Promise<string | null>;
+//# sourceMappingURL=subscription-auth.d.ts.map

package/dist/_internal/platform/config/subscription-auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-auth.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/config/subscription-auth.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAG/F,wBAAsB,8BAA8B,CAClD,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,IAAI,CAAC,mBAAmB,EAAE,KAAK,GAAG,kBAAkB,GAAG,oBAAoB,CAAC,GACpF,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAuBxB"}

package/dist/_internal/platform/config/subscription-auth.js

@@ -0,0 +1,29 @@
+import { getBuiltinSubscriptionProvider } from './subscription-providers.js';
+import { refreshOpenAICodexToken } from '@pellux/goodvibes-sdk/platform/config/openai-codex-auth';
+export async function resolveSubscriptionAccessToken(provider, manager) {
+    if (provider === 'openai') {
+        const existing = manager.get('openai');
+        if (!existing)
+            return null;
+        if (typeof existing.expiresAt === 'number' && Date.now() + 60_000 >= existing.expiresAt) {
+            if (!existing.refreshToken)
+                return existing.accessToken;
+            const refreshed = await refreshOpenAICodexToken(existing.refreshToken);
+            manager.saveSubscription({
+                ...existing,
+                accessToken: refreshed.accessToken,
+                refreshToken: refreshed.refreshToken,
+                tokenType: refreshed.tokenType,
+                expiresAt: refreshed.expiresAt,
+                ...(refreshed.scopes ? { scopes: refreshed.scopes } : existing.scopes ? { scopes: existing.scopes } : {}),
+                updatedAt: Date.now(),
+            });
+            return refreshed.accessToken;
+        }
+        return existing.accessToken;
+    }
+    const builtin = getBuiltinSubscriptionProvider(provider);
+    if (!builtin)
+        return null;
+    return manager.resolveAccessToken(provider, builtin.oauth);
+}

package/dist/_internal/platform/config/subscription-providers.d.ts

@@ -0,0 +1,30 @@
+import type { OAuthProviderConfig } from '@pellux/goodvibes-sdk/platform/config/subscriptions';
+import type { ServiceConfig } from './service-registry.js';
+export interface BuiltinSubscriptionProvider {
+    readonly provider: string;
+    readonly displayName: string;
+    readonly authType: 'oauth';
+    readonly tokenKey: string;
+    readonly providerId: string;
+    readonly oauth: OAuthProviderConfig;
+    readonly notes: readonly string[];
+}
+export interface AvailableSubscriptionProvider {
+    readonly provider: string;
+    readonly displayName: string;
+    readonly source: 'builtin' | 'service';
+    readonly oauth: OAuthProviderConfig;
+    readonly tokenKey: string;
+    readonly providerId: string;
+    readonly notes: readonly string[];
+}
+export declare function listBuiltinSubscriptionProviders(): BuiltinSubscriptionProvider[];
+export declare function getBuiltinSubscriptionProvider(provider: string): BuiltinSubscriptionProvider | null;
+export declare function getSubscriptionProviderConfig(provider: string, serviceConfig?: ServiceConfig | null): {
+    oauth: OAuthProviderConfig;
+    source: 'service' | 'builtin';
+    tokenKey: string;
+    providerId: string;
+} | null;
+export declare function listAvailableSubscriptionProviders(services: Record<string, ServiceConfig>): AvailableSubscriptionProvider[];
+//# sourceMappingURL=subscription-providers.d.ts.map

package/dist/_internal/platform/config/subscription-providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"subscription-providers.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/config/subscription-providers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,qDAAqD,CAAC;AAC/F,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAE3D,MAAM,WAAW,2BAA2B;IAC1C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAED,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC;IACpC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,SAAS,MAAM,EAAE,CAAC;CACnC;AAwCD,wBAAgB,gCAAgC,IAAI,2BAA2B,EAAE,CAIhF;AAED,wBAAgB,8BAA8B,CAAC,QAAQ,EAAE,MAAM,GAAG,2BAA2B,GAAG,IAAI,CAEnG;AAED,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,aAAa,CAAC,EAAE,aAAa,GAAG,IAAI,GACnC;IAAE,KAAK,EAAE,mBAAmB,CAAC;IAAC,MAAM,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAkB5G;AAED,wBAAgB,kCAAkC,CAChD,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,aAAa,CAAC,GACtC,6BAA6B,EAAE,CA8BjC"}

package/dist/_internal/platform/config/subscription-providers.js

@@ -0,0 +1,92 @@
+const OPENAI_SUBSCRIPTION_PROVIDER = {
+    provider: 'openai',
+    displayName: 'OpenAI Codex',
+    authType: 'oauth',
+    tokenKey: 'OPENAI_API_KEY',
+    providerId: 'openai',
+    oauth: {
+        authUrl: 'https://auth.openai.com/oauth/authorize',
+        tokenUrl: 'https://auth.openai.com/oauth/token',
+        clientId: 'app_EMoamEEZ73f0CkXaXp7hrann',
+        redirectUri: 'http://localhost:1455/auth/callback',
+        scopes: ['openid', 'profile', 'email', 'offline_access'],
+        usePkce: true,
+        tokenRequestEncoding: 'form',
+        refreshRequestEncoding: 'form',
+        overrideAmbientApiKeys: false,
+        authParams: {
+            id_token_add_organizations: 'true',
+            codex_cli_simplified_flow: 'true',
+            originator: 'pi',
+        },
+        localCallback: {
+            host: 'localhost',
+            port: 1455,
+            path: '/auth/callback',
+            autoComplete: true,
+        },
+    },
+    notes: [
+        'Built-in OpenAI Codex / ChatGPT subscription login path.',
+        'Uses the Codex/ChatGPT OAuth flow rather than the standard OpenAI API-key path.',
+    ],
+};
+const BUILTIN_SUBSCRIPTION_PROVIDERS = {
+    openai: OPENAI_SUBSCRIPTION_PROVIDER,
+};
+export function listBuiltinSubscriptionProviders() {
+    return Object.values(BUILTIN_SUBSCRIPTION_PROVIDERS)
+        .slice()
+        .sort((a, b) => a.provider.localeCompare(b.provider));
+}
+export function getBuiltinSubscriptionProvider(provider) {
+    return BUILTIN_SUBSCRIPTION_PROVIDERS[provider] ?? null;
+}
+export function getSubscriptionProviderConfig(provider, serviceConfig) {
+    if (serviceConfig?.authType === 'oauth' && serviceConfig.oauth) {
+        return {
+            oauth: serviceConfig.oauth,
+            source: 'service',
+            tokenKey: serviceConfig.tokenKey,
+            providerId: serviceConfig.providerId ?? serviceConfig.name,
+        };
+    }
+    const builtin = getBuiltinSubscriptionProvider(provider);
+    if (!builtin)
+        return null;
+    return {
+        oauth: builtin.oauth,
+        source: 'builtin',
+        tokenKey: builtin.tokenKey,
+        providerId: builtin.providerId,
+    };
+}
+export function listAvailableSubscriptionProviders(services) {
+    const providers = new Map();
+    for (const builtin of listBuiltinSubscriptionProviders()) {
+        providers.set(builtin.provider, {
+            provider: builtin.provider,
+            displayName: builtin.displayName,
+            source: 'builtin',
+            oauth: builtin.oauth,
+            tokenKey: builtin.tokenKey,
+            providerId: builtin.providerId,
+            notes: builtin.notes,
+        });
+    }
+    for (const service of Object.values(services)) {
+        if (service.authType !== 'oauth' || !service.oauth)
+            continue;
+        const provider = service.providerId ?? service.name;
+        providers.set(provider, {
+            provider,
+            displayName: service.name,
+            source: 'service',
+            oauth: service.oauth,
+            tokenKey: service.tokenKey,
+            providerId: provider,
+            notes: ['Configured through .goodvibes/goodvibes/services.json'],
+        });
+    }
+    return [...providers.values()].sort((a, b) => a.provider.localeCompare(b.provider));
+}

package/dist/_internal/platform/config/tool-llm.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Tool LLM — internal LLM access for tool operations.
+ *
+ * Provides a lightweight interface for tool-internal LLM calls:
+ * semantic diff, auto-heal, commit messages, prompt hooks, etc.
+ *
+ * Resolution order:
+ *   1. tools.llmProvider + tools.llmModel from config (if both set)
+ *   2. Currently selected provider/model from providerRegistry
+ *
+ * Design constraints:
+ *   - Never throws from ToolLLM.chat() — returns empty string on any error
+ *   - Logs failures via logger.debug (tool LLM failures are expected when no key)
+ *   - Singleton pattern — import `toolLLM` for use
+ */
+import type { ConfigManager } from './manager.js';
+import type { LLMProvider } from '../providers/interface.js';
+import type { ProviderRegistry } from '../providers/registry.js';
+/** Resolved provider + model pair for tool-internal LLM calls. */
+export interface ResolvedToolLLM {
+    provider: LLMProvider;
+    modelId: string;
+}
+export interface ToolLLMDeps {
+    readonly configManager: Pick<ConfigManager, 'get'>;
+    readonly providerRegistry: Pick<ProviderRegistry, 'get' | 'getCurrentModel' | 'getForModel'>;
+}
+/**
+ * Resolve the LLM provider and model to use for tool-internal operations.
+ *
+ * Resolution order:
+ *   1. If tools.llmProvider + tools.llmModel are both set in config, use those.
+ *   2. Otherwise fall back to the currently selected provider/model.
+ *
+ * Returns null if resolution fails (e.g. unknown provider name).
+ */
+export declare function resolveToolLLM(deps: ToolLLMDeps): ResolvedToolLLM | null;
+/** Chat options for tool-internal LLM calls. */
+export interface ToolLLMChatOptions {
+    maxTokens?: number;
+    systemPrompt?: string;
+}
+/**
+ * ToolLLM — lightweight LLM interface for internal tool operations.
+ *
+ * Usage:
+ *   const result = await toolLLM.chat('Generate a commit message for: ...');
+ *
+ * Always returns a string — empty string on any failure.
+ */
+export declare class ToolLLM {
+    private readonly deps;
+    constructor(deps: ToolLLMDeps);
+    /**
+     * Send a single-turn prompt to the tool LLM.
+     *
+     * @param prompt   The user prompt to send.
+     * @param options  Optional maxTokens and systemPrompt.
+     * @returns        The assistant's text response, or empty string on failure.
+     */
+    chat(prompt: string, options?: ToolLLMChatOptions): Promise<string>;
+}
+//# sourceMappingURL=tool-llm.d.ts.map

package/dist/_internal/platform/config/tool-llm.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tool-llm.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/config/tool-llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,cAAc,CAAC;AAClD,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,2BAA2B,CAAC;AAC7D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAIjE,kEAAkE;AAClE,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,WAAW,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,KAAK,CAAC,CAAC;IACnD,QAAQ,CAAC,gBAAgB,EAAE,IAAI,CAAC,gBAAgB,EAAE,KAAK,GAAG,iBAAiB,GAAG,aAAa,CAAC,CAAC;CAC9F;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,WAAW,GAAG,eAAe,GAAG,IAAI,CAmBxE;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;;;;;GAOG;AACH,qBAAa,OAAO;IACN,OAAO,CAAC,QAAQ,CAAC,IAAI;gBAAJ,IAAI,EAAE,WAAW;IAE9C;;;;;;OAMG;IACG,IAAI,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,MAAM,CAAC;CAsB9E"}

package/dist/_internal/platform/config/tool-llm.js

@@ -0,0 +1,87 @@
+/**
+ * Tool LLM — internal LLM access for tool operations.
+ *
+ * Provides a lightweight interface for tool-internal LLM calls:
+ * semantic diff, auto-heal, commit messages, prompt hooks, etc.
+ *
+ * Resolution order:
+ *   1. tools.llmProvider + tools.llmModel from config (if both set)
+ *   2. Currently selected provider/model from providerRegistry
+ *
+ * Design constraints:
+ *   - Never throws from ToolLLM.chat() — returns empty string on any error
+ *   - Logs failures via logger.debug (tool LLM failures are expected when no key)
+ *   - Singleton pattern — import `toolLLM` for use
+ */
+import { logger } from '@pellux/goodvibes-sdk/platform/utils/logger';
+import { summarizeError } from '@pellux/goodvibes-sdk/platform/utils/error-display';
+/**
+ * Resolve the LLM provider and model to use for tool-internal operations.
+ *
+ * Resolution order:
+ *   1. If tools.llmProvider + tools.llmModel are both set in config, use those.
+ *   2. Otherwise fall back to the currently selected provider/model.
+ *
+ * Returns null if resolution fails (e.g. unknown provider name).
+ */
+export function resolveToolLLM(deps) {
+    try {
+        const cfgProvider = deps.configManager.get('tools.llmProvider');
+        const cfgModel = deps.configManager.get('tools.llmModel');
+        if (cfgProvider && cfgModel) {
+            // Explicit config: resolve by provider name
+            const provider = deps.providerRegistry.get(cfgProvider);
+            return { provider, modelId: cfgModel };
+        }
+        // Fallback: use currently selected provider/model
+        const currentDef = deps.providerRegistry.getCurrentModel();
+        const provider = deps.providerRegistry.getForModel(currentDef.id, currentDef.provider);
+        return { provider, modelId: currentDef.id };
+    }
+    catch (err) {
+        logger.debug('resolveToolLLM: failed to resolve provider/model', { error: summarizeError(err) });
+        return null;
+    }
+}
+/**
+ * ToolLLM — lightweight LLM interface for internal tool operations.
+ *
+ * Usage:
+ *   const result = await toolLLM.chat('Generate a commit message for: ...');
+ *
+ * Always returns a string — empty string on any failure.
+ */
+export class ToolLLM {
+    deps;
+    constructor(deps) {
+        this.deps = deps;
+    }
+    /**
+     * Send a single-turn prompt to the tool LLM.
+     *
+     * @param prompt   The user prompt to send.
+     * @param options  Optional maxTokens and systemPrompt.
+     * @returns        The assistant's text response, or empty string on failure.
+     */
+    async chat(prompt, options = {}) {
+        try {
+            const resolved = resolveToolLLM(this.deps);
+            if (!resolved) {
+                logger.debug('ToolLLM.chat: no provider resolved, returning empty string');
+                return '';
+            }
+            const { provider, modelId } = resolved;
+            const response = await provider.chat({
+                model: modelId,
+                messages: [{ role: 'user', content: prompt }],
+                maxTokens: options.maxTokens ?? 1024,
+                systemPrompt: options.systemPrompt,
+            });
+            return response.content ?? '';
+        }
+        catch (err) {
+            logger.debug('ToolLLM.chat: request failed (non-fatal)', { error: summarizeError(err) });
+            return '';
+        }
+    }
+}

package/dist/_internal/platform/control-plane/approval-broker.d.ts

@@ -0,0 +1,83 @@
+import { PersistentStore } from '@pellux/goodvibes-sdk/platform/state/persistent-store';
+import type { PermissionPromptDecision, PermissionPromptRequest, PermissionRequestHandler } from '../permissions/prompt.js';
+import type { ControlPlaneSurfaceMessage } from '@pellux/goodvibes-sdk/platform/control-plane/types';
+export type SharedApprovalStatus = 'pending' | 'claimed' | 'approved' | 'denied' | 'cancelled' | 'expired';
+export interface SharedApprovalAuditRecord {
+    readonly id: string;
+    readonly action: 'created' | 'claimed' | 'approved' | 'denied' | 'cancelled' | 'expired' | 'updated';
+    readonly actor: string;
+    readonly actorSurface?: string;
+    readonly createdAt: number;
+    readonly note?: string;
+}
+export interface SharedApprovalRecord {
+    readonly id: string;
+    readonly callId: string;
+    readonly sessionId?: string;
+    readonly routeId?: string;
+    readonly status: SharedApprovalStatus;
+    readonly request: PermissionPromptRequest;
+    readonly createdAt: number;
+    readonly updatedAt: number;
+    readonly claimedBy?: string;
+    readonly claimedAt?: number;
+    readonly resolvedAt?: number;
+    readonly resolvedBy?: string;
+    readonly decision?: PermissionPromptDecision;
+    readonly metadata: Record<string, unknown>;
+    readonly audit: readonly SharedApprovalAuditRecord[];
+}
+interface SharedApprovalStoreSnapshot extends Record<string, unknown> {
+    readonly approvals: readonly SharedApprovalRecord[];
+}
+export interface RequestSharedApprovalInput {
+    readonly request: PermissionPromptRequest;
+    readonly sessionId?: string;
+    readonly routeId?: string;
+    readonly metadata?: Record<string, unknown>;
+    readonly localPrompt?: PermissionRequestHandler;
+    readonly timeoutMs?: number;
+}
+type ApprovalListener = (approval: SharedApprovalRecord) => void;
+type ApprovalPublisher = {
+    publishEvent(event: string, payload: unknown): void;
+    publishSurfaceMessage(message: Omit<ControlPlaneSurfaceMessage, 'id' | 'createdAt'>): void;
+};
+export declare class ApprovalBroker {
+    private readonly store;
+    private readonly approvals;
+    private readonly pendingResolvers;
+    private readonly listeners;
+    private publisher;
+    private loaded;
+    constructor(options: {
+        readonly store?: PersistentStore<SharedApprovalStoreSnapshot>;
+        readonly storePath?: string;
+    });
+    subscribe(listener: ApprovalListener): () => void;
+    setPublisher(publisher: ApprovalPublisher | null): void;
+    start(): Promise<void>;
+    listApprovals(limit?: number): SharedApprovalRecord[];
+    getApproval(approvalId: string): SharedApprovalRecord | null;
+    requestApproval(input: RequestSharedApprovalInput): Promise<PermissionPromptDecision>;
+    claimApproval(approvalId: string, actor: string, actorSurface?: string, note?: string): Promise<SharedApprovalRecord | null>;
+    resolveApproval(approvalId: string, input: {
+        readonly approved: boolean;
+        readonly remember?: boolean;
+        readonly actor: string;
+        readonly actorSurface?: string;
+        readonly note?: string;
+    }): Promise<SharedApprovalRecord | null>;
+    recordRemoteUpdate(approvalId: string, input: {
+        readonly actor: string;
+        readonly actorSurface?: string;
+        readonly note?: string;
+        readonly metadata?: Record<string, unknown>;
+    }): Promise<SharedApprovalRecord | null>;
+    cancelApproval(approvalId: string, actor: string, actorSurface?: string, note?: string): Promise<SharedApprovalRecord | null>;
+    private expireApproval;
+    private persist;
+    private publish;
+}
+export {};
+//# sourceMappingURL=approval-broker.d.ts.map

package/dist/_internal/platform/control-plane/approval-broker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"approval-broker.d.ts","sourceRoot":"","sources":["../../../../src/_internal/platform/control-plane/approval-broker.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,eAAe,EAAE,MAAM,uDAAuD,CAAC;AACxF,OAAO,KAAK,EAAE,wBAAwB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AAC5H,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,oDAAoD,CAAC;AAErG,MAAM,MAAM,oBAAoB,GAAG,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,CAAC;AAE3G,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,GAAG,SAAS,GAAG,SAAS,CAAC;IACrG,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,oBAAoB,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;IAC7C,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC3C,QAAQ,CAAC,KAAK,EAAE,SAAS,yBAAyB,EAAE,CAAC;CACtD;AAED,UAAU,2BAA4B,SAAQ,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC;IACnE,QAAQ,CAAC,SAAS,EAAE,SAAS,oBAAoB,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,OAAO,EAAE,uBAAuB,CAAC;IAC1C,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC5C,QAAQ,CAAC,WAAW,CAAC,EAAE,wBAAwB,CAAC;IAChD,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,KAAK,gBAAgB,GAAG,CAAC,QAAQ,EAAE,oBAAoB,KAAK,IAAI,CAAC;AACjE,KAAK,iBAAiB,GAAG;IACvB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,IAAI,CAAC;IACpD,qBAAqB,CAAC,OAAO,EAAE,IAAI,CAAC,0BAA0B,EAAE,IAAI,GAAG,WAAW,CAAC,GAAG,IAAI,CAAC;CAC5F,CAAC;AAiBF,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA+C;IACrE,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA2C;IACrE,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAG5B;IACL,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA+B;IACzD,OAAO,CAAC,SAAS,CAAkC;IACnD,OAAO,CAAC,MAAM,CAAS;gBAGrB,OAAO,EAAE;QACP,QAAQ,CAAC,KAAK,CAAC,EAAE,eAAe,CAAC,2BAA2B,CAAC,CAAC;QAC9D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;KAC7B;IASH,SAAS,CAAC,QAAQ,EAAE,gBAAgB,GAAG,MAAM,IAAI;IAOjD,YAAY,CAAC,SAAS,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI;IAIjD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAU5B,aAAa,CAAC,KAAK,SAAM,GAAG,oBAAoB,EAAE;IAIlD,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,oBAAoB,GAAG,IAAI;IAItD,eAAe,CAAC,KAAK,EAAE,0BAA0B,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAmDrF,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmB3H,eAAe,CACnB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;QAC3B,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;QAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;KACxB,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmCjC,kBAAkB,CACtB,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE;QACL,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,YAAY,CAAC,EAAE,MAAM,CAAC;QAC/B,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QACvB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;KAC7C,GACA,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAmBjC,cAAc,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,YAAY,SAAQ,EAAE,IAAI,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;YA4BpH,cAAc;YAwBd,OAAO;IAMrB,OAAO,CAAC,OAAO;CA8BhB"}