@polpo-ai/node 0.11.1

package/dist/server/security.js

@@ -0,0 +1,118 @@
+/**
+ * Security redaction module — pure functions for sanitizing sensitive data
+ * before exposing it through API responses or persisting to transcript logs.
+ *
+ * Handles:
+ * - Provider API key masking
+ * - Transcript parameter sanitization (passwords, tokens, secrets)
+ *
+ * NOTE: Vault credentials are no longer stored on AgentConfig — they live in
+ * the encrypted vault store (.polpo/vault.enc). Agent/team/state redaction
+ * functions are kept as pass-throughs for API compatibility.
+ */
+// ── Constants ──
+/** Regex matching parameter names that likely contain secrets. */
+export const SENSITIVE_PARAM_RE = /pass|secret|token|key|auth|password|credential/i;
+// ── Agent Config Redaction ──
+/**
+ * Returns the agent config as-is (vault credentials are no longer inline).
+ * Kept for backward compatibility with callers that expect redaction.
+ */
+export function redactAgentConfig(agent) {
+    return agent;
+}
+// ── Team Redaction ──
+/** Returns the team as-is (no inline credentials to redact). */
+export function redactTeam(team) {
+    return team;
+}
+// ── State Redaction ──
+/** Returns the state as-is (no inline credentials to redact). */
+export function redactPolpoState(state) {
+    return state;
+}
+// ── Config Redaction ──
+/** Return config as-is — providers no longer contain secrets (API keys resolved via env/OAuth only). */
+export function redactPolpoConfig(config) {
+    return config;
+}
+// ── Transcript Sanitization ──
+/**
+ * Recursively sanitize an object, redacting any string values whose keys
+ * match the SENSITIVE_PARAM_RE pattern. Handles nested objects and arrays.
+ *
+ * @param obj - The object to sanitize.
+ * @param depth - Current recursion depth (capped to prevent DoS on cyclic data).
+ * @returns A tuple of [sanitized copy, whether any value was redacted].
+ */
+const MAX_SANITIZE_DEPTH = 10;
+function sanitizeObject(obj, depth = 0) {
+    if (depth > MAX_SANITIZE_DEPTH)
+        return [obj, false];
+    const result = {};
+    let changed = false;
+    for (const [key, value] of Object.entries(obj)) {
+        if (SENSITIVE_PARAM_RE.test(key) && typeof value === "string") {
+            result[key] = "[REDACTED]";
+            changed = true;
+        }
+        else if (value && typeof value === "object" && !Array.isArray(value)) {
+            const [sanitized, childChanged] = sanitizeObject(value, depth + 1);
+            result[key] = childChanged ? sanitized : value;
+            if (childChanged)
+                changed = true;
+        }
+        else if (Array.isArray(value)) {
+            const [sanitized, childChanged] = sanitizeArray(value, depth + 1);
+            result[key] = childChanged ? sanitized : value;
+            if (childChanged)
+                changed = true;
+        }
+        else {
+            result[key] = value;
+        }
+    }
+    return [result, changed];
+}
+/**
+ * Recursively sanitize an array, descending into nested objects/arrays.
+ */
+function sanitizeArray(arr, depth) {
+    if (depth > MAX_SANITIZE_DEPTH)
+        return [arr, false];
+    let changed = false;
+    const result = arr.map((item) => {
+        if (item && typeof item === "object" && !Array.isArray(item)) {
+            const [sanitized, childChanged] = sanitizeObject(item, depth + 1);
+            if (childChanged)
+                changed = true;
+            return childChanged ? sanitized : item;
+        }
+        if (Array.isArray(item)) {
+            const [sanitized, childChanged] = sanitizeArray(item, depth + 1);
+            if (childChanged)
+                changed = true;
+            return childChanged ? sanitized : item;
+        }
+        return item;
+    });
+    return [result, changed];
+}
+/**
+ * Sanitize a transcript entry by masking sensitive parameter values in tool_use inputs.
+ * Recursively descends into nested objects and arrays to catch secrets at any depth.
+ * Only touches entries with `type === "tool_use"` that have an `input` object.
+ * Returns the entry unchanged for all other types (assistant, tool_result, etc.).
+ */
+export function sanitizeTranscriptEntry(entry) {
+    if (entry.type !== "tool_use")
+        return entry;
+    const input = entry.input;
+    if (!input || typeof input !== "object")
+        return entry;
+    const [sanitized, changed] = sanitizeObject(input);
+    if (!changed)
+        return entry;
+    return { ...entry, input: sanitized };
+}
+//# sourceMappingURL=security.js.map

package/dist/server/security.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security.js","sourceRoot":"","sources":["../../src/server/security.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,kBAAkB;AAElB,kEAAkE;AAClE,MAAM,CAAC,MAAM,kBAAkB,GAAG,iDAAiD,CAAC;AAEpF,+BAA+B;AAE/B;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,KAAkB;IAClD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,uBAAuB;AAEvB,gEAAgE;AAChE,MAAM,UAAU,UAAU,CAAC,IAAU;IACnC,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wBAAwB;AAExB,iEAAiE;AACjE,MAAM,UAAU,gBAAgB,CAAC,KAAiB;IAChD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,yBAAyB;AAEzB,wGAAwG;AACxG,MAAM,UAAU,iBAAiB,CAA0C,MAAS;IAClF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,gCAAgC;AAEhC;;;;;;;GAOG;AACH,MAAM,kBAAkB,GAAG,EAAE,CAAC;AAE9B,SAAS,cAAc,CACrB,GAA4B,EAC5B,QAAgB,CAAC;IAEjB,IAAI,KAAK,GAAG,kBAAkB;QAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEpD,MAAM,MAAM,GAA4B,EAAE,CAAC;IAC3C,IAAI,OAAO,GAAG,KAAK,CAAC;IAEpB,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC/C,IAAI,kBAAkB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC9D,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC;YAC3B,OAAO,GAAG,IAAI,CAAC;QACjB,CAAC;aAAM,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YACvE,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,cAAc,CAC9C,KAAgC,EAChC,KAAK,GAAG,CAAC,CACV,CAAC;YACF,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;YAC/C,IAAI,YAAY;gBAAE,OAAO,GAAG,IAAI,CAAC;QACnC,CAAC;aAAM,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChC,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,aAAa,CAAC,KAAK,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YAClE,MAAM,CAAC,GAAG,CAAC,GAAG,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;YAC/C,IAAI,YAAY;gBAAE,OAAO,GAAG,IAAI,CAAC;QACnC,CAAC;aAAM,CAAC;YACN,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;GAEG;AACH,SAAS,aAAa,CACpB,GAAc,EACd,KAAa;IAEb,IAAI,KAAK,GAAG,kBAAkB;QAAE,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;IAEpD,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QAC9B,IAAI,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7D,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,cAAc,CAC9C,IAA+B,EAC/B,KAAK,GAAG,CAAC,CACV,CAAC;YACF,IAAI,YAAY;gBAAE,OAAO,GAAG,IAAI,CAAC;YACjC,OAAO,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QACD,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACxB,MAAM,CAAC,SAAS,EAAE,YAAY,CAAC,GAAG,aAAa,CAAC,IAAI,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;YACjE,IAAI,YAAY;gBAAE,OAAO,GAAG,IAAI,CAAC;YACjC,OAAO,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC;QACzC,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC,CAAC;IAEH,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;AAC3B,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CAAC,KAA8B;IACpE,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC;IAE5C,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAEtD,MAAM,CAAC,SAAS,EAAE,OAAO,CAAC,GAAG,cAAc,CAAC,KAAgC,CAAC,CAAC;IAE9E,IAAI,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC;IAE3B,OAAO,EAAE,GAAG,KAAK,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC;AACxC,CAAC"}

package/dist/server/sse-bridge.d.ts

@@ -0,0 +1,36 @@
+import type { Orchestrator } from "../core/orchestrator.js";
+export interface SSEClient {
+    id: string;
+    send(event: string, data: unknown, eventId: string): void;
+    close(): void;
+}
+export interface BufferedEvent {
+    id: string;
+    event: string;
+    data: unknown;
+    ts: number;
+}
+/**
+ * Bridges Orchestrator TypedEmitter events to SSE clients.
+ * Supports multiple concurrent clients per orchestrator.
+ * Maintains a circular buffer for Last-Event-ID reconnection.
+ */
+export declare class SSEBridge {
+    private orchestrator;
+    private clients;
+    private eventBuffer;
+    private maxBufferSize;
+    private eventCounter;
+    private disposeFn;
+    constructor(orchestrator: Orchestrator);
+    /** Start listening to all orchestrator events. */
+    start(): void;
+    /** Add an SSE client. Replays events since lastEventId if provided. */
+    addClient(client: SSEClient, lastEventId?: string): void;
+    /** Remove an SSE client. */
+    removeClient(clientId: string): void;
+    get clientCount(): number;
+    /** Cleanup: remove all handlers and close all clients. */
+    dispose(): void;
+}
+//# sourceMappingURL=sse-bridge.d.ts.map

package/dist/server/sse-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-bridge.d.ts","sourceRoot":"","sources":["../../src/server/sse-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAC;AA6B5D,MAAM,WAAW,SAAS;IACxB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1D,KAAK,IAAI,IAAI,CAAC;CACf;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,OAAO,CAAC;IACd,EAAE,EAAE,MAAM,CAAC;CACZ;AAED;;;;GAIG;AACH,qBAAa,SAAS;IAOR,OAAO,CAAC,YAAY;IANhC,OAAO,CAAC,OAAO,CAAgC;IAC/C,OAAO,CAAC,WAAW,CAAuB;IAC1C,OAAO,CAAC,aAAa,CAAQ;IAC7B,OAAO,CAAC,YAAY,CAAK;IACzB,OAAO,CAAC,SAAS,CAA6B;gBAE1B,YAAY,EAAE,YAAY;IAE9C,kDAAkD;IAClD,KAAK,IAAI,IAAI;IAmCb,uEAAuE;IACvE,SAAS,CAAC,MAAM,EAAE,SAAS,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI;IAoBxD,4BAA4B;IAC5B,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI;IAKpC,IAAI,WAAW,IAAI,MAAM,CAExB;IAED,0DAA0D;IAC1D,OAAO,IAAI,IAAI;CAOhB"}

package/dist/server/sse-bridge.js

@@ -0,0 +1,110 @@
+/** All Polpo events to subscribe to. */
+const ALL_EVENTS = [
+    "task:created", "task:transition", "task:updated", "task:removed",
+    "agent:spawned", "agent:finished", "agent:activity",
+    "assessment:started", "assessment:progress", "assessment:check:started", "assessment:check:complete", "assessment:complete", "assessment:corrected",
+    "orchestrator:started", "orchestrator:tick", "orchestrator:deadlock", "orchestrator:shutdown",
+    "task:retry", "task:retry:blocked", "task:fix", "task:maxRetries",
+    "task:question", "task:answered",
+    "deadlock:detected", "deadlock:resolving", "deadlock:resolved", "deadlock:unresolvable",
+    "task:timeout", "agent:stale",
+    "task:recovered",
+    "mission:saved", "mission:executed", "mission:completed", "mission:resumed", "mission:deleted",
+    "session:created", "message:added",
+    "approval:requested", "approval:resolved", "approval:rejected", "approval:timeout",
+    "escalation:triggered", "escalation:resolved", "escalation:human",
+    "sla:warning", "sla:violated", "sla:met",
+    "checkpoint:reached", "checkpoint:resumed",
+    "delay:started", "delay:expired",
+    "quality:gate:passed", "quality:gate:failed", "quality:threshold:failed",
+    "schedule:triggered", "schedule:created", "schedule:completed",
+    "watcher:created", "watcher:fired", "watcher:removed",
+    "action:triggered",
+    "file:changed",
+    "log",
+];
+/**
+ * Bridges Orchestrator TypedEmitter events to SSE clients.
+ * Supports multiple concurrent clients per orchestrator.
+ * Maintains a circular buffer for Last-Event-ID reconnection.
+ */
+export class SSEBridge {
+    orchestrator;
+    clients = new Map();
+    eventBuffer = [];
+    maxBufferSize = 1000;
+    eventCounter = 0;
+    disposeFn = null;
+    constructor(orchestrator) {
+        this.orchestrator = orchestrator;
+    }
+    /** Start listening to all orchestrator events. */
+    start() {
+        const handlers = [];
+        for (const event of ALL_EVENTS) {
+            const fn = (data) => {
+                const eventId = String(++this.eventCounter);
+                // Buffer for reconnection
+                this.eventBuffer.push({ id: eventId, event, data, ts: Date.now() });
+                if (this.eventBuffer.length > this.maxBufferSize) {
+                    this.eventBuffer.shift();
+                }
+                // Broadcast to SSE clients
+                for (const client of this.clients.values()) {
+                    try {
+                        client.send(event, data, eventId);
+                    }
+                    catch { /* client disconnected */
+                        this.removeClient(client.id);
+                    }
+                }
+            };
+            this.orchestrator.on(event, fn);
+            handlers.push({ event, fn });
+        }
+        this.disposeFn = () => {
+            for (const { event, fn } of handlers) {
+                this.orchestrator.off(event, fn);
+            }
+        };
+    }
+    /** Add an SSE client. Replays events since lastEventId if provided. */
+    addClient(client, lastEventId) {
+        this.clients.set(client.id, client);
+        // Replay buffered events since lastEventId
+        if (lastEventId) {
+            const startIdx = this.eventBuffer.findIndex(e => e.id === lastEventId);
+            const events = startIdx >= 0
+                ? this.eventBuffer.slice(startIdx + 1)
+                : this.eventBuffer; // unknown ID: send all buffered
+            for (const e of events) {
+                try {
+                    client.send(e.event, e.data, e.id);
+                }
+                catch { /* client disconnected */
+                    this.removeClient(client.id);
+                    return;
+                }
+            }
+        }
+    }
+    /** Remove an SSE client. */
+    removeClient(clientId) {
+        this.clients.delete(clientId);
+    }
+    get clientCount() {
+        return this.clients.size;
+    }
+    /** Cleanup: remove all handlers and close all clients. */
+    dispose() {
+        this.disposeFn?.();
+        for (const client of this.clients.values()) {
+            try {
+                client.close();
+            }
+            catch { /* already closed */ }
+        }
+        this.clients.clear();
+    }
+}
+//# sourceMappingURL=sse-bridge.js.map

package/dist/server/sse-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sse-bridge.js","sourceRoot":"","sources":["../../src/server/sse-bridge.ts"],"names":[],"mappings":"AAGA,wCAAwC;AACxC,MAAM,UAAU,GAAiB;IAC/B,cAAc,EAAE,iBAAiB,EAAE,cAAc,EAAE,cAAc;IACjE,eAAe,EAAE,gBAAgB,EAAE,gBAAgB;IACnD,oBAAoB,EAAE,qBAAqB,EAAE,0BAA0B,EAAE,2BAA2B,EAAE,qBAAqB,EAAE,sBAAsB;IACnJ,sBAAsB,EAAE,mBAAmB,EAAE,uBAAuB,EAAE,uBAAuB;IAC7F,YAAY,EAAE,oBAAoB,EAAE,UAAU,EAAE,iBAAiB;IACjE,eAAe,EAAE,eAAe;IAChC,mBAAmB,EAAE,oBAAoB,EAAE,mBAAmB,EAAE,uBAAuB;IACvF,cAAc,EAAE,aAAa;IAC7B,gBAAgB;IAChB,eAAe,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,iBAAiB,EAAE,iBAAiB;IAC9F,iBAAiB,EAAE,eAAe;IAClC,oBAAoB,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,kBAAkB;IAClF,sBAAsB,EAAE,qBAAqB,EAAE,kBAAkB;IACjE,aAAa,EAAE,cAAc,EAAE,SAAS;IACxC,oBAAoB,EAAE,oBAAoB;IAC1C,eAAe,EAAE,eAAe;IAChC,qBAAqB,EAAE,qBAAqB,EAAE,0BAA0B;IACxE,oBAAoB,EAAE,kBAAkB,EAAE,oBAAoB;IAC9D,iBAAiB,EAAE,eAAe,EAAE,iBAAiB;IACrD,kBAAkB;IAClB,cAAc;IACd,KAAK;CACN,CAAC;AAeF;;;;GAIG;AACH,MAAM,OAAO,SAAS;IAOA;IANZ,OAAO,GAAG,IAAI,GAAG,EAAqB,CAAC;IACvC,WAAW,GAAoB,EAAE,CAAC;IAClC,aAAa,GAAG,IAAI,CAAC;IACrB,YAAY,GAAG,CAAC,CAAC;IACjB,SAAS,GAAwB,IAAI,CAAC;IAE9C,YAAoB,YAA0B;QAA1B,iBAAY,GAAZ,YAAY,CAAc;IAAG,CAAC;IAElD,kDAAkD;IAClD,KAAK;QACH,MAAM,QAAQ,GAA+D,EAAE,CAAC;QAEhF,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,MAAM,EAAE,GAAG,CAAC,IAAa,EAAE,EAAE;gBAC3B,MAAM,OAAO,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC,YAAY,CAAC,CAAC;gBAE5C,0BAA0B;gBAC1B,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;gBACpE,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;oBACjD,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;gBAC3B,CAAC;gBAED,2BAA2B;gBAC3B,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;oBAC3C,IAAI,CAAC;wBACH,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;oBACpC,CAAC;oBAAC,MAAM,CAAC,CAAC,yBAAyB;wBACjC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC/B,CAAC;gBACH,CAAC;YAGH,CAAC,CAAC;YACF,IAAI,CAAC,YAAY,CAAC,EAAE,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YAChC,QAAQ,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,CAAC,CAAC;QAC/B,CAAC;QAED,IAAI,CAAC,SAAS,GAAG,GAAG,EAAE;YACpB,KAAK,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,QAAQ,EAAE,CAAC;gBACrC,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,KAAmB,EAAE,EAAE,CAAC,CAAC;YACjD,CAAC;QACH,CAAC,CAAC;IACJ,CAAC;IAED,uEAAuE;IACvE,SAAS,CAAC,MAAiB,EAAE,WAAoB;QAC/C,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC;QAEpC,2CAA2C;QAC3C,IAAI,WAAW,EAAE,CAAC;YAChB,MAAM,QAAQ,GAAG,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,WAAW,CAAC,CAAC;YACvE,MAAM,MAAM,GAAG,QAAQ,IAAI,CAAC;gBAC1B,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC;gBACtC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,gCAAgC;YACtD,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;gBACvB,IAAI,CAAC;oBACH,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;gBACrC,CAAC;gBAAC,MAAM,CAAC,CAAC,yBAAyB;oBACjC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;oBAC7B,OAAO;gBACT,CAAC;YACH,CAAC;QACH,CAAC;IACH,CAAC;IAED,4BAA4B;IAC5B,YAAY,CAAC,QAAgB;QAC3B,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAGD,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,0DAA0D;IAC1D,OAAO;QACL,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;QACnB,KAAK,MAAM,MAAM,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;YAC3C,IAAI,CAAC;gBAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,oBAAoB,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,CAAC;IACvB,CAAC;CACF"}

package/dist/server/types.d.ts

@@ -0,0 +1,69 @@
+import type { TaskExpectation, ExpectedOutcome, RetryPolicy, MissionStatus } from "@polpo-ai/core/types";
+import type { PolpoEvent } from "../core/events.js";
+export interface ApiResponse<T> {
+    ok: true;
+    data: T;
+}
+export interface ApiError {
+    ok: false;
+    error: string;
+    code: string;
+    details?: unknown;
+}
+export type ApiResult<T> = ApiResponse<T> | ApiError;
+export type ErrorCode = "NOT_FOUND" | "INVALID_STATE" | "VALIDATION_ERROR" | "AUTH_REQUIRED" | "FORBIDDEN" | "CONFLICT" | "INTERNAL_ERROR";
+export interface CreateTaskRequest {
+    title: string;
+    description: string;
+    assignTo: string;
+    expectations?: TaskExpectation[];
+    expectedOutcomes?: ExpectedOutcome[];
+    dependsOn?: string[];
+    group?: string;
+    maxDuration?: number;
+    retryPolicy?: RetryPolicy;
+}
+export interface UpdateTaskRequest {
+    description?: string;
+    assignTo?: string;
+    expectations?: TaskExpectation[];
+}
+export interface CreateMissionRequest {
+    data: string;
+    prompt?: string;
+    name?: string;
+    status?: MissionStatus;
+}
+export interface UpdateMissionRequest {
+    data?: string;
+    status?: MissionStatus;
+    name?: string;
+}
+export interface AddAgentRequest {
+    name: string;
+    role?: string;
+    model?: string;
+    allowedTools?: string[];
+    systemPrompt?: string;
+    skills?: string[];
+    maxTurns?: number;
+    identity?: import("@polpo-ai/core/types").AgentIdentity;
+    reportsTo?: string;
+    browserProfile?: string;
+}
+export interface SSEEvent {
+    id: string;
+    event: PolpoEvent;
+    data: unknown;
+    timestamp: string;
+}
+export interface ServerConfig {
+    port: number;
+    host: string;
+    workDir: string;
+    apiKeys?: string[];
+    corsOrigins?: string[];
+    /** Start the supervisor loop on server start. Default: true. */
+    autoStart?: boolean;
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/server/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,eAAe,EACf,eAAe,EACf,WAAW,EACX,aAAa,EACd,MAAM,sBAAsB,CAAC;AAC9B,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,mBAAmB,CAAC;AAIpD,MAAM,WAAW,WAAW,CAAC,CAAC;IAC5B,EAAE,EAAE,IAAI,CAAC;IACT,IAAI,EAAE,CAAC,CAAC;CACT;AAED,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;CACnB;AAED,MAAM,MAAM,SAAS,CAAC,CAAC,IAAI,WAAW,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC;AAIrD,MAAM,MAAM,SAAS,GACjB,WAAW,GACX,eAAe,GACf,kBAAkB,GAClB,eAAe,GACf,WAAW,GACX,UAAU,GACV,gBAAgB,CAAC;AAIrB,MAAM,WAAW,iBAAiB;IAChC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,CAAC;IACjB,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;IACjC,gBAAgB,CAAC,EAAE,eAAe,EAAE,CAAC;IACrC,SAAS,CAAC,EAAE,MAAM,EAAE,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,CAAC,EAAE,WAAW,CAAC;CAC3B;AAED,MAAM,WAAW,iBAAiB;IAChC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,eAAe,EAAE,CAAC;CAClC;AAID,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,aAAa,CAAC;CACxB;AAED,MAAM,WAAW,oBAAoB;IACnC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAID,MAAM,WAAW,eAAe;IAC9B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,MAAM,CAAC,EAAE,MAAM,EAAE,CAAC;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAElB,QAAQ,CAAC,EAAE,OAAO,sBAAsB,EAAE,aAAa,CAAC;IACxD,SAAS,CAAC,EAAE,MAAM,CAAC;IAEnB,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB;AAID,MAAM,WAAW,QAAQ;IACvB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,UAAU,CAAC;IAClB,IAAI,EAAE,OAAO,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;CACnB;AAID,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;IACvB,gEAAgE;IAChE,SAAS,CAAC,EAAE,OAAO,CAAC;CACrB"}

package/dist/server/types.js

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=types.js.map

package/dist/server/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/server/types.ts"],"names":[],"mappings":""}

package/dist/setup/env-persistence.d.ts

@@ -0,0 +1,9 @@
+/**
+ * Persist an env var to the .polpo/.env file (upsert semantics).
+ */
+export declare function persistToEnvFile(polpoDir: string, envVar: string, value: string): void;
+/**
+ * Remove an env var from the .polpo/.env file.
+ */
+export declare function removeFromEnvFile(polpoDir: string, envVar: string): void;
+//# sourceMappingURL=env-persistence.d.ts.map

package/dist/setup/env-persistence.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-persistence.d.ts","sourceRoot":"","sources":["../../src/setup/env-persistence.ts"],"names":[],"mappings":"AAGA;;GAEG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAmBtF;AAED;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAMxE"}

package/dist/setup/env-persistence.js

@@ -0,0 +1,42 @@
+import { join } from "node:path";
+import { existsSync, readFileSync, writeFileSync, mkdirSync, chmodSync } from "node:fs";
+/**
+ * Persist an env var to the .polpo/.env file (upsert semantics).
+ */
+export function persistToEnvFile(polpoDir, envVar, value) {
+    const envPath = join(polpoDir, ".env");
+    if (!existsSync(polpoDir))
+        mkdirSync(polpoDir, { recursive: true });
+    let content = "";
+    if (existsSync(envPath)) {
+        content = readFileSync(envPath, "utf-8");
+        const regex = new RegExp(`^${envVar}=.*$`, "m");
+        if (regex.test(content)) {
+            content = content.replace(regex, `${envVar}=${value}`);
+            writeFileSync(envPath, content, "utf-8");
+            try {
+                chmodSync(envPath, 0o600);
+            }
+            catch { /* best-effort */ }
+            return;
+        }
+    }
+    const line = `${envVar}=${value}\n`;
+    writeFileSync(envPath, content ? `${content.trimEnd()}\n${line}` : line, "utf-8");
+    try {
+        chmodSync(envPath, 0o600);
+    }
+    catch { /* best-effort */ }
+}
+/**
+ * Remove an env var from the .polpo/.env file.
+ */
+export function removeFromEnvFile(polpoDir, envVar) {
+    const envPath = join(polpoDir, ".env");
+    if (!existsSync(envPath))
+        return;
+    const content = readFileSync(envPath, "utf-8");
+    const updated = content.replace(new RegExp(`^${envVar}=.*\\n?`, "m"), "");
+    writeFileSync(envPath, updated, "utf-8");
+}
+//# sourceMappingURL=env-persistence.js.map

package/dist/setup/env-persistence.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env-persistence.js","sourceRoot":"","sources":["../../src/setup/env-persistence.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAExF;;GAEG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAgB,EAAE,MAAc,EAAE,KAAa;IAC9E,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,SAAS,CAAC,QAAQ,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAEpE,IAAI,OAAO,GAAG,EAAE,CAAC;IACjB,IAAI,UAAU,CAAC,OAAO,CAAC,EAAE,CAAC;QACxB,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACzC,MAAM,KAAK,GAAG,IAAI,MAAM,CAAC,IAAI,MAAM,MAAM,EAAE,GAAG,CAAC,CAAC;QAChD,IAAI,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YACxB,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,MAAM,IAAI,KAAK,EAAE,CAAC,CAAC;YACvD,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;YACzC,IAAI,CAAC;gBAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;YAC9D,OAAO;QACT,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,MAAM,IAAI,KAAK,IAAI,CAAC;IACpC,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,CAAC,OAAO,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;IAClF,IAAI,CAAC;QAAC,SAAS,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AAChE,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB,EAAE,MAAc;IAChE,MAAM,OAAO,GAAG,IAAI,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACvC,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO;IACjC,MAAM,OAAO,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;IAC/C,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,IAAI,MAAM,CAAC,IAAI,MAAM,SAAS,EAAE,GAAG,CAAC,EAAE,EAAE,CAAC,CAAC;IAC1E,aAAa,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC;AAC3C,CAAC"}

package/dist/setup/index.d.ts

@@ -0,0 +1,32 @@
+export { detectProviders, hasOAuthProfilesForProvider, type DetectedProvider, } from "./providers.js";
+export { persistToEnvFile, removeFromEnvFile, } from "./env-persistence.js";
+export { getProviderModels, formatCost, modelLabel, type ModelInfo, } from "./models.js";
+export interface AuthOption {
+    id: string;
+    label: string;
+    description: string;
+    type: "oauth" | "api_key";
+    oauthId?: string;
+    free: boolean;
+}
+export interface LoginCallbacks {
+    onAuthUrl?: (url: string, instructions?: string) => void;
+    onPrompt?: (message: string, placeholder?: string) => Promise<string>;
+    onProgress?: (message: string) => void;
+}
+/** OAuth providers removed — returns only the manual API key option. */
+export declare function getAuthOptions(): AuthOption[];
+/** OAuth providers removed — empty set. */
+export declare const FREE_OAUTH_PROVIDERS: Set<string>;
+/** OAuth providers removed — always returns undefined. */
+export declare function findOAuthProvider(_providerId: string): undefined;
+/** OAuth providers removed — returns empty list. */
+export declare function getOAuthProviderList(): {
+    id: string;
+    name: string;
+    flow: string;
+    free: boolean;
+}[];
+/** OAuth login removed — always throws. */
+export declare function startOAuthLogin(_providerId: string, _callbacks: LoginCallbacks): Promise<string>;
+//# sourceMappingURL=index.d.ts.map

package/dist/setup/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,2BAA2B,EAC3B,KAAK,gBAAgB,GACtB,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,UAAU,EACV,KAAK,SAAS,GACf,MAAM,aAAa,CAAC;AAIrB,MAAM,WAAW,UAAU;IACzB,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IAC1B,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,EAAE,OAAO,CAAC;CACf;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,YAAY,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzD,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAC;IACtE,UAAU,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CACxC;AAED,wEAAwE;AACxE,wBAAgB,cAAc,IAAI,UAAU,EAAE,CAI7C;AAED,2CAA2C;AAC3C,eAAO,MAAM,oBAAoB,aAAoB,CAAC;AAEtD,0DAA0D;AAC1D,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,MAAM,GAAG,SAAS,CAEhE;AAED,oDAAoD;AACpD,wBAAgB,oBAAoB,IAAI;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,OAAO,CAAA;CAAE,EAAE,CAElG;AAED,2CAA2C;AAC3C,wBAAsB,eAAe,CACnC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,cAAc,GACzB,OAAO,CAAC,MAAM,CAAC,CAEjB"}

package/dist/setup/index.js

@@ -0,0 +1,24 @@
+export { detectProviders, hasOAuthProfilesForProvider, } from "./providers.js";
+export { persistToEnvFile, removeFromEnvFile, } from "./env-persistence.js";
+export { getProviderModels, formatCost, modelLabel, } from "./models.js";
+/** OAuth providers removed — returns only the manual API key option. */
+export function getAuthOptions() {
+    return [
+        { id: "api-key", label: "Enter an API key manually", description: "For any provider (OpenAI, Anthropic, Groq, etc.)", type: "api_key", free: false },
+    ];
+}
+/** OAuth providers removed — empty set. */
+export const FREE_OAUTH_PROVIDERS = new Set();
+/** OAuth providers removed — always returns undefined. */
+export function findOAuthProvider(_providerId) {
+    return undefined;
+}
+/** OAuth providers removed — returns empty list. */
+export function getOAuthProviderList() {
+    return [];
+}
+/** OAuth login removed — always throws. */
+export async function startOAuthLogin(_providerId, _callbacks) {
+    throw new Error("OAuth login has been removed. Use API keys instead.");
+}
+//# sourceMappingURL=index.js.map

package/dist/setup/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/setup/index.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,eAAe,EACf,2BAA2B,GAE5B,MAAM,gBAAgB,CAAC;AAExB,OAAO,EACL,gBAAgB,EAChB,iBAAiB,GAClB,MAAM,sBAAsB,CAAC;AAE9B,OAAO,EACL,iBAAiB,EACjB,UAAU,EACV,UAAU,GAEX,MAAM,aAAa,CAAC;AAmBrB,wEAAwE;AACxE,MAAM,UAAU,cAAc;IAC5B,OAAO;QACL,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,2BAA2B,EAAE,WAAW,EAAE,kDAAkD,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE;KACrJ,CAAC;AACJ,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,MAAM,oBAAoB,GAAG,IAAI,GAAG,EAAU,CAAC;AAEtD,0DAA0D;AAC1D,MAAM,UAAU,iBAAiB,CAAC,WAAmB;IACnD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,oBAAoB;IAClC,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,2CAA2C;AAC3C,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,WAAmB,EACnB,UAA0B;IAE1B,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;AACzE,CAAC"}

package/dist/setup/models.d.ts

@@ -0,0 +1,20 @@
+import type { ModelInfo } from "../llm/pi-client.js";
+export type { ModelInfo };
+/**
+ * Get models for a provider, sorted by cost (cheapest first).
+ */
+export declare function getProviderModels(provider: string): ModelInfo[];
+/**
+ * Format a model cost as a human-readable string.
+ */
+export declare function formatCost(cost: number): string;
+/**
+ * Get structured label data for a model. Pure data — no formatting.
+ * CLI wraps this with chalk, server returns it as JSON.
+ */
+export declare function modelLabel(m: ModelInfo): {
+    name: string;
+    tags: string[];
+    costStr: string;
+};
+//# sourceMappingURL=models.d.ts.map

package/dist/setup/models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../src/setup/models.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,qBAAqB,CAAC;AAErD,YAAY,EAAE,SAAS,EAAE,CAAC;AAE1B;;GAEG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAAE,CAE/D;AAED;;GAEG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAI/C;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,CAAC,EAAE,SAAS,GAAG;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAQ1F"}

package/dist/setup/models.js

@@ -0,0 +1,33 @@
+import { listModels as piListModels } from "../llm/pi-client.js";
+/**
+ * Get models for a provider, sorted by cost (cheapest first).
+ */
+export function getProviderModels(provider) {
+    return piListModels(provider).sort((a, b) => a.cost.input - b.cost.input);
+}
+/**
+ * Format a model cost as a human-readable string.
+ */
+export function formatCost(cost) {
+    if (cost === 0)
+        return "free";
+    if (cost < 1)
+        return `$${cost.toFixed(2)}/M`;
+    return `$${cost.toFixed(0)}/M`;
+}
+/**
+ * Get structured label data for a model. Pure data — no formatting.
+ * CLI wraps this with chalk, server returns it as JSON.
+ */
+export function modelLabel(m) {
+    const tags = [];
+    if (m.reasoning)
+        tags.push("reasoning");
+    if (m.cost.input === 0 && m.cost.output === 0)
+        tags.push("free");
+    const costStr = m.cost.input > 0
+        ? `in:${formatCost(m.cost.input)} out:${formatCost(m.cost.output)}`
+        : "";
+    return { name: m.name, tags, costStr };
+}
+//# sourceMappingURL=models.js.map

package/dist/setup/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/setup/models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,IAAI,YAAY,EAAE,MAAM,qBAAqB,CAAC;AAKjE;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,QAAgB;IAChD,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;AAC5E,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,UAAU,CAAC,IAAY;IACrC,IAAI,IAAI,KAAK,CAAC;QAAE,OAAO,MAAM,CAAC;IAC9B,IAAI,IAAI,GAAG,CAAC;QAAE,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;IAC7C,OAAO,IAAI,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC;AACjC,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,CAAY;IACrC,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,CAAC,CAAC,SAAS;QAAE,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IACxC,IAAI,CAAC,CAAC,IAAI,CAAC,KAAK,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACjE,MAAM,OAAO,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,GAAG,CAAC;QAC9B,CAAC,CAAC,MAAM,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE;QACnE,CAAC,CAAC,EAAE,CAAC;IACP,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AACzC,CAAC"}

package/dist/setup/providers.d.ts

@@ -0,0 +1,26 @@
+export interface DetectedProvider {
+    /** Provider name exactly as it appears in the AI Gateway catalog (e.g. "openai", "openai-codex", "google") */
+    name: string;
+    /** Environment variable for API key (if any) */
+    envVar: string | undefined;
+    /** Whether a usable credential exists (env key) */
+    hasKey: boolean;
+    /** Source of credentials */
+    source: "env" | "none";
+}
+/**
+ * Detect all providers from the AI Gateway catalog with their credential status.
+ *
+ * This is a 1:1 pass-through of the catalog — every provider the gateway knows about
+ * is returned. No deduplication, no name mapping. The UI is a mere wrapper on this.
+ *
+ * Credential detection:
+ * - env: the provider has a known env var (PROVIDER_ENV_MAP) and it's set
+ * - none: no credentials found
+ */
+export declare function detectProviders(): DetectedProvider[];
+/**
+ * Check if a provider has credentials available (env key only, OAuth removed).
+ */
+export declare function hasOAuthProfilesForProvider(_provider: string): boolean;
+//# sourceMappingURL=providers.d.ts.map

package/dist/setup/providers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../../src/setup/providers.ts"],"names":[],"mappings":"AAEA,MAAM,WAAW,gBAAgB;IAC/B,8GAA8G;IAC9G,IAAI,EAAE,MAAM,CAAC;IACb,gDAAgD;IAChD,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,mDAAmD;IACnD,MAAM,EAAE,OAAO,CAAC;IAChB,4BAA4B;IAC5B,MAAM,EAAE,KAAK,GAAG,MAAM,CAAC;CACxB;AAED;;;;;;;;;GASG;AACH,wBAAgB,eAAe,IAAI,gBAAgB,EAAE,CAcpD;AAED;;GAEG;AACH,wBAAgB,2BAA2B,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAEtE"}

package/dist/setup/providers.js

@@ -0,0 +1,31 @@
+import { PROVIDER_ENV_MAP, listProviders } from "../llm/pi-client.js";
+/**
+ * Detect all providers from the AI Gateway catalog with their credential status.
+ *
+ * This is a 1:1 pass-through of the catalog — every provider the gateway knows about
+ * is returned. No deduplication, no name mapping. The UI is a mere wrapper on this.
+ *
+ * Credential detection:
+ * - env: the provider has a known env var (PROVIDER_ENV_MAP) and it's set
+ * - none: no credentials found
+ */
+export function detectProviders() {
+    const catalogProviders = listProviders();
+    return catalogProviders.map((name) => {
+        const envVar = PROVIDER_ENV_MAP[name];
+        const hasEnvKey = envVar ? !!process.env[envVar] : false;
+        return {
+            name,
+            envVar,
+            hasKey: hasEnvKey,
+            source: hasEnvKey ? "env" : "none",
+        };
+    });
+}
+/**
+ * Check if a provider has credentials available (env key only, OAuth removed).
+ */
+export function hasOAuthProfilesForProvider(_provider) {
+    return false;
+}
+//# sourceMappingURL=providers.js.map

package/dist/setup/providers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../../src/setup/providers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAatE;;;;;;;;;GASG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,gBAAgB,GAAG,aAAa,EAAE,CAAC;IAEzC,OAAO,gBAAgB,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACnC,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,SAAS,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;QAEzD,OAAO;YACL,IAAI;YACJ,MAAM;YACN,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC,KAAc,CAAC,CAAC,CAAC,MAAe;SACrD,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,2BAA2B,CAAC,SAAiB;IAC3D,OAAO,KAAK,CAAC;AACf,CAAC"}