@rarebit-one/harness-kernel 0.5.1

package/dist/primitives/http.d.ts

@@ -0,0 +1,100 @@
+import { Agent, fetch as undiciFetch } from "undici";
+/** Subset of `dns.lookup({ all: true })` we depend on — injectable for tests. */
+export type Lookup = (host: string) => Promise<Array<{
+    address: string;
+    family: number;
+}>>;
+/**
+ * The `fetch` implementation, injectable for tests. We use undici's OWN `fetch`
+ * (not the global) because the global is Node's *bundled* undici, whose internal
+ * handler interface is incompatible with a `dispatcher` built from the npm
+ * `undici` package — mixing them throws `invalid onRequestStart method`. Pinning
+ * the connection (see `pinnedAgent`) requires our dispatcher, so the matching
+ * `fetch` must come from the same package.
+ */
+export type FetchImpl = typeof undiciFetch;
+export interface HttpFetchOptions {
+    url: string;
+    method?: string;
+    headers?: Record<string, string>;
+    body?: string;
+    /** When provided, EVERY request hop (including redirects) must be to a host in this list. */
+    allowHosts?: string[];
+    /** Cap on the response body; a larger response is rejected (memory-DoS guard). */
+    maxBytes?: number;
+    /** Max redirects to follow. */
+    maxRedirects?: number;
+    /**
+     * Per-request timeout in milliseconds. Aborts the fetch (and applies afresh to
+     * each redirect hop) so a hung endpoint can't stall the whole run. Defaults to
+     * `RUNNER_HTTP_TIMEOUT_MS` if set, else 30s.
+     */
+    timeoutMs?: number;
+    /** DNS resolver (defaults to `dns.lookup`); injectable to test rebinding guards. */
+    lookup?: Lookup;
+    /** `fetch` implementation (defaults to undici's `fetch`); injectable for tests. */
+    fetchImpl?: FetchImpl;
+}
+export interface HttpResponse {
+    status: number;
+    headers: Record<string, string>;
+    body: string;
+}
+/** The validated IP records a hop may connect to, pinned so `fetch` can't re-resolve. */
+type ValidatedRecords = Array<{
+    address: string;
+    family: number;
+}>;
+/**
+ * SSRF guard for a single URL: refuse internal/loopback/link-local hosts (literal
+ * or DNS-resolved), and — when `allowHosts` is set — require the host be on it.
+ * Shared by httpFetch and the bundle downloader so both enforce the same policy.
+ *
+ * Returns the exact, already-validated address record(s) the host may connect to:
+ * the resolved records for a DNS hostname, or the single literal for an IP host.
+ * httpFetch PINS the connection to these (see `pinnedAgent`) so the socket reaches
+ * the same IP the guard approved — closing the DNS-rebinding TOCTOU where `fetch`
+ * would otherwise re-resolve to a different (internal) address. Callers that only
+ * need the boolean verdict (e.g. the bundle downloader) can ignore the return.
+ */
+export declare function assertSafeUrl(target: string, opts?: {
+    allowHosts?: string[];
+    lookup?: Lookup;
+}): Promise<ValidatedRecords>;
+/**
+ * An undici dispatcher that PINS the connection to the already-validated IP(s).
+ * Its `connect.lookup` ignores the hostname and returns ONLY the records the SSRF
+ * guard approved, so the socket connects to the exact IP that was checked — a
+ * hostile low-TTL resolver can't hand a different (internal) address to `fetch`.
+ *
+ * TLS correctness: we pin the *IP* via `lookup`, but undici still presents the
+ * original hostname for SNI and certificate verification (its connector derives
+ * `servername` from the request host, and `net/tls.connect` keeps `host` = the
+ * hostname while using our lookup result only to choose the socket address). So
+ * cert hostname checks are preserved and verification is NEVER disabled. We do
+ * not set `rejectUnauthorized` — the secure default stands.
+ *
+ * Exported for tests: the pin + TLS-servername behavior is the security-critical
+ * unit and is exercised directly against loopback servers.
+ */
+export declare function pinnedAgent(records: ValidatedRecords): Agent;
+/**
+ * Thin wrapper over undici's `fetch`. A general-purpose primitive: domain
+ * specific API logic belongs in user-repo code that calls this.
+ *
+ * SSRF guards: requests to internal/loopback/link-local addresses are ALWAYS
+ * refused (e.g. cloud metadata at 169.254.169.254), and when `allowHosts` is set
+ * the host must be on it. Redirects are followed manually so EACH hop is
+ * re-validated (an allowed/public host could 30x to an internal one) AND pinned
+ * (see below). The response body is always size-capped.
+ *
+ * DNS-rebinding TOCTOU is closed: each hop is validated, then the connection is
+ * PINNED to the exact validated IP via a per-hop undici dispatcher (`pinnedAgent`).
+ * `fetch` therefore cannot re-resolve the hostname to a different address between
+ * the guard's check and the socket connect. TLS SNI/cert verification still uses
+ * the original hostname (see `pinnedAgent`). Prefer an explicit `allowHosts`
+ * allowlist for untrusted callers regardless.
+ */
+export declare function httpFetch(options: HttpFetchOptions): Promise<HttpResponse>;
+export {};
+//# sourceMappingURL=http.d.ts.map

package/dist/primitives/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../../src/primitives/http.ts"],"names":[],"mappings":"AAEA,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAA;AAEpD,iFAAiF;AACjF,MAAM,MAAM,MAAM,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC,CAAA;AAI1F;;;;;;;GAOG;AACH,MAAM,MAAM,SAAS,GAAG,OAAO,WAAW,CAAA;AAE1C,MAAM,WAAW,gBAAgB;IAC/B,GAAG,EAAE,MAAM,CAAA;IACX,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAChC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,6FAA6F;IAC7F,UAAU,CAAC,EAAE,MAAM,EAAE,CAAA;IACrB,kFAAkF;IAClF,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,+BAA+B;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB;;;;OAIG;IACH,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,mFAAmF;IACnF,SAAS,CAAC,EAAE,SAAS,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC/B,IAAI,EAAE,MAAM,CAAA;CACb;AAYD,yFAAyF;AACzF,KAAK,gBAAgB,GAAG,KAAK,CAAC;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAAA;AAElE;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,MAAM,EACd,IAAI,GAAE;IAAE,UAAU,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GACpD,OAAO,CAAC,gBAAgB,CAAC,CAyB3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,gBAAgB,GAAG,KAAK,CAW5D;AA8DD;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAsB,SAAS,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,YAAY,CAAC,CA4DhF"}

package/dist/primitives/http.js

@@ -0,0 +1,257 @@
+import net from "node:net";
+import dns from "node:dns/promises";
+import { Agent, fetch as undiciFetch } from "undici";
+const defaultLookup = (host) => dns.lookup(host, { all: true });
+const DEFAULT_MAX_BYTES = 8 * 1024 * 1024;
+const DEFAULT_MAX_REDIRECTS = 5;
+const FALLBACK_TIMEOUT_MS = 30_000;
+/** Resolve the default per-request timeout from env, falling back to 30s. */
+function defaultTimeoutMs() {
+    const raw = Number(process.env.RUNNER_HTTP_TIMEOUT_MS);
+    return Number.isFinite(raw) && raw > 0 ? raw : FALLBACK_TIMEOUT_MS;
+}
+/**
+ * SSRF guard for a single URL: refuse internal/loopback/link-local hosts (literal
+ * or DNS-resolved), and — when `allowHosts` is set — require the host be on it.
+ * Shared by httpFetch and the bundle downloader so both enforce the same policy.
+ *
+ * Returns the exact, already-validated address record(s) the host may connect to:
+ * the resolved records for a DNS hostname, or the single literal for an IP host.
+ * httpFetch PINS the connection to these (see `pinnedAgent`) so the socket reaches
+ * the same IP the guard approved — closing the DNS-rebinding TOCTOU where `fetch`
+ * would otherwise re-resolve to a different (internal) address. Callers that only
+ * need the boolean verdict (e.g. the bundle downloader) can ignore the return.
+ */
+export async function assertSafeUrl(target, opts = {}) {
+    const { allowHosts, lookup = defaultLookup } = opts;
+    const u = new URL(target);
+    if (isInternalHost(u.hostname))
+        throw new Error(`host not allowed (internal): ${u.hostname}`);
+    if (allowHosts && !allowHosts.includes(u.host))
+        throw new Error(`host not allowed: ${u.host}`);
+    const literal = u.hostname.replace(/^\[|\]$/g, ""); // URL.hostname keeps IPv6 brackets
+    const literalVersion = net.isIP(literal);
+    if (literalVersion !== 0) {
+        // An IP literal: already classified as public above; pin to it directly.
+        return [{ address: literal, family: literalVersion }];
+    }
+    const records = await lookup(u.hostname);
+    if (records.length === 0) {
+        // No records means there is nothing to pin; surface a clear guard error
+        // rather than letting the pinned dispatcher fail later with a cryptic socket error.
+        throw new Error(`host not allowed (no DNS records): ${u.hostname}`);
+    }
+    for (const { address } of records) {
+        if (isInternalAddress(address)) {
+            throw new Error(`host not allowed (resolves to internal): ${u.hostname} -> ${address}`);
+        }
+    }
+    return records;
+}
+/**
+ * An undici dispatcher that PINS the connection to the already-validated IP(s).
+ * Its `connect.lookup` ignores the hostname and returns ONLY the records the SSRF
+ * guard approved, so the socket connects to the exact IP that was checked — a
+ * hostile low-TTL resolver can't hand a different (internal) address to `fetch`.
+ *
+ * TLS correctness: we pin the *IP* via `lookup`, but undici still presents the
+ * original hostname for SNI and certificate verification (its connector derives
+ * `servername` from the request host, and `net/tls.connect` keeps `host` = the
+ * hostname while using our lookup result only to choose the socket address). So
+ * cert hostname checks are preserved and verification is NEVER disabled. We do
+ * not set `rejectUnauthorized` — the secure default stands.
+ *
+ * Exported for tests: the pin + TLS-servername behavior is the security-critical
+ * unit and is exercised directly against loopback servers.
+ */
+export function pinnedAgent(records) {
+    return new Agent({
+        connect: {
+            // Node's `net.connect` calls lookup as `(hostname, { all: true }, cb)` and
+            // expects the array form `cb(null, [{ address, family }])`. Return the pinned
+            // records verbatim, ignoring `hostname` so no fresh DNS resolution happens.
+            lookup: (_hostname, _options, callback) => {
+                callback(null, records);
+            },
+        },
+    });
+}
+/**
+ * Start a single fetch hop under an AbortController-backed timeout, PINNED to the
+ * already-validated IP(s) via a per-hop undici dispatcher. The SAME
+ * controller/timer must remain armed while the body is streamed (see
+ * `readBodyCapped`), because `fetch` resolves once headers arrive — a server that
+ * then drip-feeds the body would otherwise stall forever. On timeout the abort
+ * surfaces as a clear `http timeout` error rather than the raw AbortError.
+ *
+ * A fresh dispatcher is built per hop (each hop is validated + pinned to its own
+ * address) and closed in `done()` so connections aren't reused across hosts.
+ */
+async function fetchWithTimeout(fetchImpl, target, init, records, timeoutMs) {
+    const controller = new AbortController();
+    const agent = pinnedAgent(records);
+    let timedOut = false;
+    const timer = setTimeout(() => {
+        timedOut = true;
+        controller.abort();
+    }, timeoutMs);
+    const closeAgent = () => {
+        void agent.close().catch(() => { });
+    };
+    try {
+        const res = await fetchImpl(target, { ...init, signal: controller.signal, dispatcher: agent });
+        return {
+            res,
+            controller,
+            timedOut: () => timedOut,
+            done: () => {
+                clearTimeout(timer);
+                closeAgent();
+            },
+        };
+    }
+    catch (err) {
+        clearTimeout(timer);
+        closeAgent();
+        if (timedOut) {
+            throw new Error(`http timeout after ${timeoutMs}ms: ${target}`, { cause: err });
+        }
+        throw err;
+    }
+}
+/**
+ * Thin wrapper over undici's `fetch`. A general-purpose primitive: domain
+ * specific API logic belongs in user-repo code that calls this.
+ *
+ * SSRF guards: requests to internal/loopback/link-local addresses are ALWAYS
+ * refused (e.g. cloud metadata at 169.254.169.254), and when `allowHosts` is set
+ * the host must be on it. Redirects are followed manually so EACH hop is
+ * re-validated (an allowed/public host could 30x to an internal one) AND pinned
+ * (see below). The response body is always size-capped.
+ *
+ * DNS-rebinding TOCTOU is closed: each hop is validated, then the connection is
+ * PINNED to the exact validated IP via a per-hop undici dispatcher (`pinnedAgent`).
+ * `fetch` therefore cannot re-resolve the hostname to a different address between
+ * the guard's check and the socket connect. TLS SNI/cert verification still uses
+ * the original hostname (see `pinnedAgent`). Prefer an explicit `allowHosts`
+ * allowlist for untrusted callers regardless.
+ */
+export async function httpFetch(options) {
+    const { url, method = "GET", headers, body, allowHosts, maxBytes = DEFAULT_MAX_BYTES, maxRedirects = DEFAULT_MAX_REDIRECTS, timeoutMs = defaultTimeoutMs(), lookup = defaultLookup, fetchImpl = undiciFetch, } = options;
+    const assertSafe = (target) => assertSafeUrl(target, { allowHosts, lookup });
+    let currentUrl = url;
+    let records = await assertSafe(currentUrl);
+    let hop = await fetchWithTimeout(fetchImpl, currentUrl, { method, headers, body, redirect: "manual" }, records, timeoutMs);
+    let hops = 0;
+    while (hop.res.status >= 300 && hop.res.status < 400 && hop.res.headers.has("location")) {
+        // Cancel the unread redirect body so the socket isn't left half-open before
+        // we close this hop's dispatcher and follow the Location.
+        await hop.res.body?.cancel().catch(() => { });
+        hop.done(); // disarm this hop's timer + close its pinned dispatcher before following the redirect
+        if (hops >= maxRedirects)
+            throw new Error("too many redirects");
+        const next = new URL(hop.res.headers.get("location"), currentUrl).toString();
+        records = await assertSafe(next); // validate AND re-pin the new hop's address
+        currentUrl = next;
+        hop = await fetchWithTimeout(fetchImpl, currentUrl, { method, headers, redirect: "manual" }, records, timeoutMs);
+        hops += 1;
+    }
+    const res = hop.res;
+    const responseHeaders = {};
+    res.headers.forEach((value, key) => {
+        responseHeaders[key] = value;
+    });
+    // The hop's timer is still armed, so the body read below is bounded by the same
+    // per-request timeout: a stalled body trips `hop.timedOut()` → `http timeout`.
+    return {
+        status: res.status,
+        headers: responseHeaders,
+        body: await readBodyCapped(hop, currentUrl, maxBytes),
+    };
+}
+/**
+ * Read the body, aborting if it exceeds `maxBytes` OR if the hop's timeout fires
+ * mid-stream. Bounding the body (not just time-to-headers) means a server that
+ * sends headers then drip-feeds the body still can't stall the run.
+ */
+async function readBodyCapped(hop, target, maxBytes) {
+    const { res, controller, timedOut, done } = hop;
+    try {
+        if (!res.body)
+            return await res.text();
+        // undici's ReadableStream types are non-generic, so the reader yields `any`;
+        // fetch response bodies are always byte streams.
+        const reader = res.body.getReader();
+        const chunks = [];
+        let total = 0;
+        try {
+            for (;;) {
+                const { done: streamDone, value } = await reader.read();
+                if (streamDone)
+                    break;
+                total += value.byteLength;
+                if (total > maxBytes) {
+                    await reader.cancel();
+                    throw new Error(`response exceeds ${maxBytes} bytes`);
+                }
+                chunks.push(value);
+            }
+        }
+        catch (err) {
+            // The timer aborts the controller, which surfaces here as an abort/read
+            // error — translate it to the same clear timeout message as the header phase.
+            if (timedOut() || controller.signal.aborted) {
+                throw new Error(`http timeout: ${target}`, { cause: err });
+            }
+            throw err;
+        }
+        return Buffer.concat(chunks).toString("utf8");
+    }
+    finally {
+        done();
+    }
+}
+/** True for hostnames/IP-literals that point at the host or a private network. */
+function isInternalHost(host) {
+    if (host === "localhost")
+        return true;
+    const bare = host.replace(/^\[|\]$/g, ""); // URL.hostname keeps IPv6 brackets
+    const version = net.isIP(bare);
+    if (version === 4)
+        return isInternalV4(bare);
+    if (version === 6)
+        return isInternalV6(bare);
+    return false; // a regular hostname — not an IP literal we can classify here
+}
+/** Classify a resolved IP address string (v4 or v6) as internal. */
+function isInternalAddress(ip) {
+    const version = net.isIP(ip);
+    if (version === 4)
+        return isInternalV4(ip);
+    if (version === 6)
+        return isInternalV6(ip);
+    return false;
+}
+function isInternalV4(ip) {
+    const [a = -1, b = -1] = ip.split(".").map(Number);
+    if (a === 0 || a === 127 || a === 10)
+        return true; // unspecified, loopback, private
+    if (a === 169 && b === 254)
+        return true; // link-local (incl. cloud metadata)
+    if (a === 172 && b >= 16 && b <= 31)
+        return true; // private
+    if (a === 192 && b === 168)
+        return true; // private
+    if (a === 100 && b >= 64 && b <= 127)
+        return true; // CGNAT (RFC 6598)
+    return false;
+}
+function isInternalV6(ip) {
+    const x = ip.toLowerCase().replace(/^\[|\]$/g, "");
+    // IPv4-mapped (::ffff:a.b.c.d) maps onto a v4 address — classify by the embedded v4.
+    const mapped = x.match(/^::ffff:(\d+\.\d+\.\d+\.\d+)$/);
+    if (mapped?.[1])
+        return isInternalV4(mapped[1]);
+    return (x === "::1" || x === "::" || x.startsWith("fc") || x.startsWith("fd") || x.startsWith("fe80"));
+}
+//# sourceMappingURL=http.js.map

package/dist/primitives/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../../src/primitives/http.ts"],"names":[],"mappings":"AAAA,OAAO,GAAG,MAAM,UAAU,CAAA;AAC1B,OAAO,GAAG,MAAM,mBAAmB,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,IAAI,WAAW,EAAE,MAAM,QAAQ,CAAA;AAKpD,MAAM,aAAa,GAAW,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAA;AAyCvE,MAAM,iBAAiB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAA;AACzC,MAAM,qBAAqB,GAAG,CAAC,CAAA;AAC/B,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAElC,6EAA6E;AAC7E,SAAS,gBAAgB;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC,CAAA;IACtD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAA;AACpE,CAAC;AAKD;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,OAAmD,EAAE;IAErD,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,aAAa,EAAE,GAAG,IAAI,CAAA;IACnD,MAAM,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAA;IACzB,IAAI,cAAc,CAAC,CAAC,CAAC,QAAQ,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gCAAgC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IAC7F,IAAI,UAAU,IAAI,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAE9F,MAAM,OAAO,GAAG,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA,CAAC,mCAAmC;IACtF,MAAM,cAAc,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAA;IACxC,IAAI,cAAc,KAAK,CAAC,EAAE,CAAC;QACzB,yEAAyE;QACzE,OAAO,CAAC,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,cAAc,EAAE,CAAC,CAAA;IACvD,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAA;IACxC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,wEAAwE;QACxE,oFAAoF;QACpF,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;IACrE,CAAC;IACD,KAAK,MAAM,EAAE,OAAO,EAAE,IAAI,OAAO,EAAE,CAAC;QAClC,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/B,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC,QAAQ,OAAO,OAAO,EAAE,CAAC,CAAA;QACzF,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAA;AAChB,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,UAAU,WAAW,CAAC,OAAyB;IACnD,OAAO,IAAI,KAAK,CAAC;QACf,OAAO,EAAE;YACP,2EAA2E;YAC3E,8EAA8E;YAC9E,4EAA4E;YAC5E,MAAM,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAAE;gBACxC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;YACzB,CAAC;SACF;KACF,CAAC,CAAA;AACJ,CAAC;AAaD;;;;;;;;;;GAUG;AACH,KAAK,UAAU,gBAAgB,CAC7B,SAAoB,EACpB,MAAc,EACd,IAA8B,EAC9B,OAAyB,EACzB,SAAiB;IAEjB,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAA;IACxC,MAAM,KAAK,GAAG,WAAW,CAAC,OAAO,CAAC,CAAA;IAClC,IAAI,QAAQ,GAAG,KAAK,CAAA;IACpB,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;QAC5B,QAAQ,GAAG,IAAI,CAAA;QACf,UAAU,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC,EAAE,SAAS,CAAC,CAAA;IACb,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,KAAK,KAAK,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;IACpC,CAAC,CAAA;IACD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,EAAE,KAAK,EAAE,CAAC,CAAA;QAC9F,OAAO;YACL,GAAG;YACH,UAAU;YACV,QAAQ,EAAE,GAAG,EAAE,CAAC,QAAQ;YACxB,IAAI,EAAE,GAAG,EAAE;gBACT,YAAY,CAAC,KAAK,CAAC,CAAA;gBACnB,UAAU,EAAE,CAAA;YACd,CAAC;SACF,CAAA;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,YAAY,CAAC,KAAK,CAAC,CAAA;QACnB,UAAU,EAAE,CAAA;QACZ,IAAI,QAAQ,EAAE,CAAC;YACb,MAAM,IAAI,KAAK,CAAC,sBAAsB,SAAS,OAAO,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;QACjF,CAAC;QACD,MAAM,GAAG,CAAA;IACX,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,OAAyB;IACvD,MAAM,EACJ,GAAG,EACH,MAAM,GAAG,KAAK,EACd,OAAO,EACP,IAAI,EACJ,UAAU,EACV,QAAQ,GAAG,iBAAiB,EAC5B,YAAY,GAAG,qBAAqB,EACpC,SAAS,GAAG,gBAAgB,EAAE,EAC9B,MAAM,GAAG,aAAa,EACtB,SAAS,GAAG,WAAW,GACxB,GAAG,OAAO,CAAA;IAEX,MAAM,UAAU,GAAG,CAAC,MAAc,EAA6B,EAAE,CAC/D,aAAa,CAAC,MAAM,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,CAAC,CAAA;IAE/C,IAAI,UAAU,GAAG,GAAG,CAAA;IACpB,IAAI,OAAO,GAAG,MAAM,UAAU,CAAC,UAAU,CAAC,CAAA;IAC1C,IAAI,GAAG,GAAG,MAAM,gBAAgB,CAC9B,SAAS,EACT,UAAU,EACV,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,EAC7C,OAAO,EACP,SAAS,CACV,CAAA;IAED,IAAI,IAAI,GAAG,CAAC,CAAA;IACZ,OAAO,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;QACxF,4EAA4E;QAC5E,0DAA0D;QAC1D,MAAM,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QAC5C,GAAG,CAAC,IAAI,EAAE,CAAA,CAAC,sFAAsF;QACjG,IAAI,IAAI,IAAI,YAAY;YAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAW,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtF,OAAO,GAAG,MAAM,UAAU,CAAC,IAAI,CAAC,CAAA,CAAC,4CAA4C;QAC7E,UAAU,GAAG,IAAI,CAAA;QACjB,GAAG,GAAG,MAAM,gBAAgB,CAC1B,SAAS,EACT,UAAU,EACV,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,EACvC,OAAO,EACP,SAAS,CACV,CAAA;QACD,IAAI,IAAI,CAAC,CAAA;IACX,CAAC;IAED,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAA;IACnB,MAAM,eAAe,GAA2B,EAAE,CAAA;IAClD,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QACjC,eAAe,CAAC,GAAG,CAAC,GAAG,KAAK,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,gFAAgF;IAChF,+EAA+E;IAC/E,OAAO;QACL,MAAM,EAAE,GAAG,CAAC,MAAM;QAClB,OAAO,EAAE,eAAe;QACxB,IAAI,EAAE,MAAM,cAAc,CAAC,GAAG,EAAE,UAAU,EAAE,QAAQ,CAAC;KACtD,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,cAAc,CAAC,GAAe,EAAE,MAAc,EAAE,QAAgB;IAC7E,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,GAAG,CAAA;IAC/C,IAAI,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAEtC,6EAA6E;QAC7E,iDAAiD;QACjD,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,SAAS,EAA6C,CAAA;QAC9E,MAAM,MAAM,GAAiB,EAAE,CAAA;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAA;QACb,IAAI,CAAC;YACH,SAAS,CAAC;gBACR,MAAM,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAA;gBACvD,IAAI,UAAU;oBAAE,MAAK;gBACrB,KAAK,IAAI,KAAK,CAAC,UAAU,CAAA;gBACzB,IAAI,KAAK,GAAG,QAAQ,EAAE,CAAC;oBACrB,MAAM,MAAM,CAAC,MAAM,EAAE,CAAA;oBACrB,MAAM,IAAI,KAAK,CAAC,oBAAoB,QAAQ,QAAQ,CAAC,CAAA;gBACvD,CAAC;gBACD,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACpB,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wEAAwE;YACxE,8EAA8E;YAC9E,IAAI,QAAQ,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBAC5C,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,EAAE,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAA;YAC5D,CAAC;YACD,MAAM,GAAG,CAAA;QACX,CAAC;QACD,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,CAAA;IACR,CAAC;AACH,CAAC;AAED,kFAAkF;AAClF,SAAS,cAAc,CAAC,IAAY;IAClC,IAAI,IAAI,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA,CAAC,mCAAmC;IAC7E,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC9B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;IAC5C,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,IAAI,CAAC,CAAA;IAC5C,OAAO,KAAK,CAAA,CAAC,8DAA8D;AAC7E,CAAC;AAED,oEAAoE;AACpE,SAAS,iBAAiB,CAAC,EAAU;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC5B,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAA;IAC1C,IAAI,OAAO,KAAK,CAAC;QAAE,OAAO,YAAY,CAAC,EAAE,CAAC,CAAA;IAC1C,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;IAClD,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,iCAAiC;IACnF,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,oCAAoC;IAC5E,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,IAAI,CAAA,CAAC,UAAU;IAC3D,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,UAAU;IAClD,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAA,CAAC,mBAAmB;IACrE,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,YAAY,CAAC,EAAU;IAC9B,MAAM,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC,CAAA;IAClD,qFAAqF;IACrF,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,+BAA+B,CAAC,CAAA;IACvD,IAAI,MAAM,EAAE,CAAC,CAAC,CAAC;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAA;IAC/C,OAAO,CACL,CAAC,KAAK,KAAK,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAC9F,CAAA;AACH,CAAC"}

package/dist/providers/anthropic.d.ts

@@ -0,0 +1,15 @@
+import Anthropic from "@anthropic-ai/sdk";
+import type { AgentMessage, CompletionRequest, ConverseRequest, ConverseResult, Provider } from "./types.js";
+/** Map provider-neutral messages to Anthropic's message params (pure; tested). */
+export declare function toAnthropicMessages(messages: AgentMessage[]): Anthropic.MessageParam[];
+/** Reduce an Anthropic response's content blocks to text + tool calls (pure; tested). */
+export declare function parseAnthropicContent(content: Anthropic.ContentBlock[]): ConverseResult;
+export declare class AnthropicProvider implements Provider {
+    readonly name = "anthropic";
+    private client;
+    private model;
+    constructor(apiKey: string, model?: string);
+    complete(req: CompletionRequest): Promise<string>;
+    converse(req: ConverseRequest): Promise<ConverseResult>;
+}
+//# sourceMappingURL=anthropic.d.ts.map

package/dist/providers/anthropic.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.d.ts","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAA;AAEzC,OAAO,KAAK,EACV,YAAY,EACZ,iBAAiB,EACjB,eAAe,EACf,cAAc,EACd,QAAQ,EAET,MAAM,YAAY,CAAA;AAEnB,kFAAkF;AAClF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,YAAY,EAAE,GAAG,SAAS,CAAC,YAAY,EAAE,CAwBtF;AAED,yFAAyF;AACzF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,SAAS,CAAC,YAAY,EAAE,GAAG,cAAc,CAevF;AAED,qBAAa,iBAAkB,YAAW,QAAQ;IAChD,QAAQ,CAAC,IAAI,eAAc;IAC3B,OAAO,CAAC,MAAM,CAAW;IACzB,OAAO,CAAC,KAAK,CAAQ;gBAET,MAAM,EAAE,MAAM,EAAE,KAAK,SAAqD;IAYhF,QAAQ,CAAC,GAAG,EAAE,iBAAiB,GAAG,OAAO,CAAC,MAAM,CAAC;IAcjD,QAAQ,CAAC,GAAG,EAAE,eAAe,GAAG,OAAO,CAAC,cAAc,CAAC;CAe9D"}

package/dist/providers/anthropic.js

@@ -0,0 +1,90 @@
+import Anthropic from "@anthropic-ai/sdk";
+import { maxTokens, providerMaxRetries, providerTimeoutMs } from "./clientOptions.js";
+/** Map provider-neutral messages to Anthropic's message params (pure; tested). */
+export function toAnthropicMessages(messages) {
+    return messages.map((m) => {
+        if (m.role === "user") {
+            return { role: "user", content: m.text };
+        }
+        if (m.role === "assistant") {
+            const blocks = [];
+            if (m.text)
+                blocks.push({ type: "text", text: m.text });
+            for (const tc of m.toolCalls) {
+                blocks.push({ type: "tool_use", id: tc.id, name: tc.name, input: tc.input });
+            }
+            return { role: "assistant", content: blocks };
+        }
+        // Tool results are sent back as a user turn of tool_result blocks.
+        return {
+            role: "user",
+            content: m.results.map((r) => ({
+                type: "tool_result",
+                tool_use_id: r.toolCallId,
+                content: r.content,
+                is_error: r.isError ?? false,
+            })),
+        };
+    });
+}
+/** Reduce an Anthropic response's content blocks to text + tool calls (pure; tested). */
+export function parseAnthropicContent(content) {
+    let text = "";
+    const toolCalls = [];
+    for (const block of content) {
+        if (block.type === "text") {
+            text += text ? `\n${block.text}` : block.text;
+        }
+        else if (block.type === "tool_use") {
+            toolCalls.push({
+                id: block.id,
+                name: block.name,
+                input: (block.input ?? {}),
+            });
+        }
+    }
+    return { text, toolCalls };
+}
+export class AnthropicProvider {
+    name = "anthropic";
+    client;
+    model;
+    constructor(apiKey, model = process.env.ANTHROPIC_MODEL ?? "claude-sonnet-4-6") {
+        // The SDK retries transient 429/5xx/network errors with exponential backoff
+        // internally, so a blip doesn't fail the whole run; `timeout` bounds each
+        // request. Both are env-overridable.
+        this.client = new Anthropic({
+            apiKey,
+            timeout: providerTimeoutMs(),
+            maxRetries: providerMaxRetries(),
+        });
+        this.model = model;
+    }
+    async complete(req) {
+        const message = await this.client.messages.create({
+            model: this.model,
+            max_tokens: maxTokens(),
+            system: req.system,
+            messages: [{ role: "user", content: req.prompt }],
+        });
+        return message.content
+            .filter((block) => block.type === "text")
+            .map((block) => block.text)
+            .join("\n");
+    }
+    async converse(req) {
+        const message = await this.client.messages.create({
+            model: this.model,
+            max_tokens: maxTokens(),
+            system: req.system,
+            tools: req.tools.map((t) => ({
+                name: t.name,
+                description: t.description,
+                input_schema: t.inputSchema,
+            })),
+            messages: toAnthropicMessages(req.messages),
+        });
+        return parseAnthropicContent(message.content);
+    }
+}
+//# sourceMappingURL=anthropic.js.map

package/dist/providers/anthropic.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"anthropic.js","sourceRoot":"","sources":["../../src/providers/anthropic.ts"],"names":[],"mappings":"AAAA,OAAO,SAAS,MAAM,mBAAmB,CAAA;AACzC,OAAO,EAAE,SAAS,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,MAAM,oBAAoB,CAAA;AAUrF,kFAAkF;AAClF,MAAM,UAAU,mBAAmB,CAAC,QAAwB;IAC1D,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAA0B,EAAE;QAChD,IAAI,CAAC,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YACtB,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAA;QAC1C,CAAC;QACD,IAAI,CAAC,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAkC,EAAE,CAAA;YAChD,IAAI,CAAC,CAAC,IAAI;gBAAE,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;YACvD,KAAK,MAAM,EAAE,IAAI,CAAC,CAAC,SAAS,EAAE,CAAC;gBAC7B,MAAM,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,CAAC,CAAA;YAC9E,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,EAAE,CAAA;QAC/C,CAAC;QACD,mEAAmE;QACnE,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,OAAO,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,aAAa;gBACnB,WAAW,EAAE,CAAC,CAAC,UAAU;gBACzB,OAAO,EAAE,CAAC,CAAC,OAAO;gBAClB,QAAQ,EAAE,CAAC,CAAC,OAAO,IAAI,KAAK;aAC7B,CAAC,CAAC;SACJ,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED,yFAAyF;AACzF,MAAM,UAAU,qBAAqB,CAAC,OAAiC;IACrE,IAAI,IAAI,GAAG,EAAE,CAAA;IACb,MAAM,SAAS,GAAe,EAAE,CAAA;IAChC,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;QAC5B,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAA;QAC/C,CAAC;aAAM,IAAI,KAAK,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;YACrC,SAAS,CAAC,IAAI,CAAC;gBACb,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,KAAK,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,EAAE,CAA4B;aACtD,CAAC,CAAA;QACJ,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAA;AAC5B,CAAC;AAED,MAAM,OAAO,iBAAiB;IACnB,IAAI,GAAG,WAAW,CAAA;IACnB,MAAM,CAAW;IACjB,KAAK,CAAQ;IAErB,YAAY,MAAc,EAAE,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,mBAAmB;QACpF,4EAA4E;QAC5E,0EAA0E;QAC1E,qCAAqC;QACrC,IAAI,CAAC,MAAM,GAAG,IAAI,SAAS,CAAC;YAC1B,MAAM;YACN,OAAO,EAAE,iBAAiB,EAAE;YAC5B,UAAU,EAAE,kBAAkB,EAAE;SACjC,CAAC,CAAA;QACF,IAAI,CAAC,KAAK,GAAG,KAAK,CAAA;IACpB,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAsB;QACnC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,SAAS,EAAE;YACvB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC;SAClD,CAAC,CAAA;QAEF,OAAO,OAAO,CAAC,OAAO;aACnB,MAAM,CAAC,CAAC,KAAK,EAAgC,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,CAAC;aACtE,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC;aAC1B,IAAI,CAAC,IAAI,CAAC,CAAA;IACf,CAAC;IAED,KAAK,CAAC,QAAQ,CAAC,GAAoB;QACjC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;YAChD,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,UAAU,EAAE,SAAS,EAAE;YACvB,MAAM,EAAE,GAAG,CAAC,MAAM;YAClB,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;gBAC3B,IAAI,EAAE,CAAC,CAAC,IAAI;gBACZ,WAAW,EAAE,CAAC,CAAC,WAAW;gBAC1B,YAAY,EAAE,CAAC,CAAC,WAAyC;aAC1D,CAAC,CAAC;YACH,QAAQ,EAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC5C,CAAC,CAAA;QAEF,OAAO,qBAAqB,CAAC,OAAO,CAAC,OAAO,CAAC,CAAA;IAC/C,CAAC;CACF"}

package/dist/providers/clientOptions.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Shared resolution of provider-SDK robustness knobs. Both the Anthropic and
+ * OpenAI SDKs accept `timeout` (per-request, ms) and `maxRetries` in their
+ * constructor and handle transient 429/5xx/network retries with backoff
+ * themselves — we just supply sensible, env-overridable defaults. `maxTokens`
+ * is the per-request completion cap both providers send with each call.
+ */
+/** Per-request provider timeout in ms (`RUNNER_PROVIDER_TIMEOUT_MS`, default 60s). */
+export declare function providerTimeoutMs(): number;
+/** SDK auto-retry count for transient failures (`RUNNER_PROVIDER_MAX_RETRIES`, default 2). */
+export declare function providerMaxRetries(): number;
+/** Per-request completion token cap (`RUNNER_MAX_TOKENS`, default 4096). */
+export declare function maxTokens(): number;
+//# sourceMappingURL=clientOptions.d.ts.map

package/dist/providers/clientOptions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientOptions.d.ts","sourceRoot":"","sources":["../../src/providers/clientOptions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAMH,sFAAsF;AACtF,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C;AAED,8FAA8F;AAC9F,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAED,4EAA4E;AAC5E,wBAAgB,SAAS,IAAI,MAAM,CAGlC"}

package/dist/providers/clientOptions.js

@@ -0,0 +1,26 @@
+/**
+ * Shared resolution of provider-SDK robustness knobs. Both the Anthropic and
+ * OpenAI SDKs accept `timeout` (per-request, ms) and `maxRetries` in their
+ * constructor and handle transient 429/5xx/network retries with backoff
+ * themselves — we just supply sensible, env-overridable defaults. `maxTokens`
+ * is the per-request completion cap both providers send with each call.
+ */
+const FALLBACK_TIMEOUT_MS = 60_000;
+const FALLBACK_MAX_RETRIES = 2;
+const FALLBACK_MAX_TOKENS = 4096;
+/** Per-request provider timeout in ms (`RUNNER_PROVIDER_TIMEOUT_MS`, default 60s). */
+export function providerTimeoutMs() {
+    const raw = Number(process.env.RUNNER_PROVIDER_TIMEOUT_MS);
+    return Number.isFinite(raw) && raw > 0 ? raw : FALLBACK_TIMEOUT_MS;
+}
+/** SDK auto-retry count for transient failures (`RUNNER_PROVIDER_MAX_RETRIES`, default 2). */
+export function providerMaxRetries() {
+    const raw = Number(process.env.RUNNER_PROVIDER_MAX_RETRIES);
+    return Number.isFinite(raw) && raw >= 0 ? Math.floor(raw) : FALLBACK_MAX_RETRIES;
+}
+/** Per-request completion token cap (`RUNNER_MAX_TOKENS`, default 4096). */
+export function maxTokens() {
+    const raw = Number(process.env.RUNNER_MAX_TOKENS);
+    return Number.isFinite(raw) && raw > 0 ? Math.floor(raw) : FALLBACK_MAX_TOKENS;
+}
+//# sourceMappingURL=clientOptions.js.map

package/dist/providers/clientOptions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"clientOptions.js","sourceRoot":"","sources":["../../src/providers/clientOptions.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAClC,MAAM,oBAAoB,GAAG,CAAC,CAAA;AAC9B,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAEhC,sFAAsF;AACtF,MAAM,UAAU,iBAAiB;IAC/B,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,CAAC,CAAA;IAC1D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,mBAAmB,CAAA;AACpE,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB;IAChC,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,2BAA2B,CAAC,CAAA;IAC3D,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,oBAAoB,CAAA;AAClF,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,SAAS;IACvB,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IACjD,OAAO,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,mBAAmB,CAAA;AAChF,CAAC"}

package/dist/providers/index.d.ts

@@ -0,0 +1,24 @@
+import type { Provider } from "./types.js";
+export type { Provider, CompletionRequest } from "./types.js";
+/** Per-run model + bring-your-own keys, resolved by the caller. */
+export interface ProviderSelection {
+    /** Model id for this run; falls back to the provider's env model when absent. */
+    model?: string | null;
+    /** Per-org provider API keys; each falls back to the runner's env key when absent. */
+    credentials?: {
+        anthropic?: string;
+        openai?: string;
+        openrouter?: string;
+    };
+}
+/**
+ * Resolves a provider from the workflow's preference and the host's
+ * environment. The kernel is provider-agnostic; when the preferred provider has
+ * no credentials we degrade to the offline mock rather than failing the run,
+ * which keeps a harness runnable end-to-end without keys.
+ *
+ * `opts` carries the per-run model and per-org BYO keys; both fall back to the
+ * host's env (model via the provider constructor's env default, keys below).
+ */
+export declare function selectProvider(preferred?: string | null, opts?: ProviderSelection): Provider;
+//# sourceMappingURL=index.d.ts.map

package/dist/providers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAA;AAE1C,YAAY,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAE7D,mEAAmE;AACnE,MAAM,WAAW,iBAAiB;IAChC,iFAAiF;IACjF,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IACrB,sFAAsF;IACtF,WAAW,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CAC3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,cAAc,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,EAAE,IAAI,GAAE,iBAAsB,GAAG,QAAQ,CAgChG"}

package/dist/providers/index.js

@@ -0,0 +1,51 @@
+import { AnthropicProvider } from "./anthropic.js";
+import { OpenAIProvider } from "./openai.js";
+import { OpenRouterProvider } from "./openrouter.js";
+import { MockProvider } from "./mock.js";
+/**
+ * Resolves a provider from the workflow's preference and the host's
+ * environment. The kernel is provider-agnostic; when the preferred provider has
+ * no credentials we degrade to the offline mock rather than failing the run,
+ * which keeps a harness runnable end-to-end without keys.
+ *
+ * `opts` carries the per-run model and per-org BYO keys; both fall back to the
+ * host's env (model via the provider constructor's env default, keys below).
+ */
+export function selectProvider(preferred, opts = {}) {
+    const anthropicKey = opts.credentials?.anthropic ?? process.env.ANTHROPIC_API_KEY;
+    const openaiKey = opts.credentials?.openai ?? process.env.OPENAI_API_KEY;
+    const openrouterKey = opts.credentials?.openrouter ?? process.env.OPENROUTER_API_KEY;
+    // undefined → the provider constructor's env-default model kicks in.
+    const model = opts.model ?? undefined;
+    switch (preferred) {
+        case "anthropic":
+            if (anthropicKey)
+                return new AnthropicProvider(anthropicKey, model);
+            break;
+        case "openai":
+            if (openaiKey)
+                return new OpenAIProvider(openaiKey, model);
+            break;
+        case "openrouter":
+            if (openrouterKey)
+                return new OpenRouterProvider(openrouterKey, model);
+            break;
+        case "mock":
+            // An explicit `preferred: mock` always gets the mock, even when a key is
+            // configured — it's the offline dry-run lens, so honour it deterministically
+            // rather than silently upgrading to a real provider. Hand it the full
+            // selection so it can self-document the model + BYO key it WOULD have used.
+            return new MockProvider(opts);
+    }
+    // No explicit (or usable) preference: pick whatever is configured.
+    if (anthropicKey)
+        return new AnthropicProvider(anthropicKey, model);
+    if (openaiKey)
+        return new OpenAIProvider(openaiKey, model);
+    if (openrouterKey)
+        return new OpenRouterProvider(openrouterKey, model);
+    // The offline fallback still carries the selection, so a keyless run's output
+    // artifact reports the model (and any BYO key) the caller resolved.
+    return new MockProvider(opts);
+}
+//# sourceMappingURL=index.js.map

package/dist/providers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/providers/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAA;AAClD,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAA;AAC5C,OAAO,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpD,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AAaxC;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,SAAyB,EAAE,OAA0B,EAAE;IACpF,MAAM,YAAY,GAAG,IAAI,CAAC,WAAW,EAAE,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAA;IACjF,MAAM,SAAS,GAAG,IAAI,CAAC,WAAW,EAAE,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAA;IACxE,MAAM,aAAa,GAAG,IAAI,CAAC,WAAW,EAAE,UAAU,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAA;IACpF,qEAAqE;IACrE,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,SAAS,CAAA;IAErC,QAAQ,SAAS,EAAE,CAAC;QAClB,KAAK,WAAW;YACd,IAAI,YAAY;gBAAE,OAAO,IAAI,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;YACnE,MAAK;QACP,KAAK,QAAQ;YACX,IAAI,SAAS;gBAAE,OAAO,IAAI,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;YAC1D,MAAK;QACP,KAAK,YAAY;YACf,IAAI,aAAa;gBAAE,OAAO,IAAI,kBAAkB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;YACtE,MAAK;QACP,KAAK,MAAM;YACT,yEAAyE;YACzE,6EAA6E;YAC7E,sEAAsE;YACtE,4EAA4E;YAC5E,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;IACjC,CAAC;IAED,mEAAmE;IACnE,IAAI,YAAY;QAAE,OAAO,IAAI,iBAAiB,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;IACnE,IAAI,SAAS;QAAE,OAAO,IAAI,cAAc,CAAC,SAAS,EAAE,KAAK,CAAC,CAAA;IAC1D,IAAI,aAAa;QAAE,OAAO,IAAI,kBAAkB,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;IACtE,8EAA8E;IAC9E,oEAAoE;IACpE,OAAO,IAAI,YAAY,CAAC,IAAI,CAAC,CAAA;AAC/B,CAAC"}