@sentropic/h2a-runtime 0.91.1 → 0.93.0

package/dist/launch-layout.d.ts

@@ -0,0 +1,74 @@
+/**
+ * Terminal-layout rendering for `remote restore` — split out of restore.ts so
+ * the F3 invariant is a MODULE-BOUNDARY property, not a review rule:
+ *
+ *   launchLayout decides every view/launch from the ONE `HostViewSnapshot`
+ *   it receives AS A PARAMETER. This module must NOT import any live host
+ *   reader (listNativeSessions, listLocalSessions*, nativeSession*, probe*):
+ *   you can't call what you don't have, so a divergence between plan time
+ *   and launch time can never be re-read here — and an error or divergence
+ *   NEVER becomes permission to launch (`live -> empty` yields attach or
+ *   refuse, never `h2a run` fabricating a second writer on a live
+ *   conversation). Only PURE name helpers may be imported from tmux.js.
+ */
+import { type LocalSession } from "./tmux.js";
+import type { LayoutTab, LayoutWindow } from "./restore.js";
+/**
+ * The ONE host inventory snapshot a restore plan runs on: BOTH inventories
+ * read once by the caller (restore.ts owns the readers), so the plan gate and
+ * the layout render see the SAME state. A failed inventory read is carried as
+ * `known: false` — an UNKNOWN view, never an empty one.
+ */
+export type HostViewSnapshot = {
+    readonly tmux: {
+        readonly known: true;
+        readonly sessions: ReadonlyArray<LocalSession>;
+    } | {
+        readonly known: false;
+        readonly reason?: string;
+    };
+    readonly native: {
+        readonly known: true;
+        /** RUNNING native sessions only, with the controller-visibility bit. */
+        readonly sessions: ReadonlyArray<{
+            readonly name: string;
+            readonly controlled: boolean | undefined;
+        }>;
+    } | {
+        readonly known: false;
+    };
+};
+/**
+ * Per-tab command for an ABSENT local session: create it via `remote run …
+ * --resume …` (which attaches by default). Live sessions are deliberately
+ * handled by `launchLayout`, which knows their exact tmux names and whether they
+ * have a client attached; it emits `tmux attach -t <exact-name>` and never
+ * relaunches them.
+ */
+export declare function tabCommand(tab: LayoutTab, liveSlugs?: ReadonlySet<string>, opts?: {
+    forceGateway?: "gateway" | "direct";
+    /** Exact existing tmux name — attach directly, never replace/relaunch it. */
+    attachSession?: string;
+}): string;
+/** Group collision candidates before restore emits bare-slug attach/resume commands. */
+export declare function ambiguousLiveSessionNames(sessions: readonly Pick<LocalSession, "name" | "slug">[]): Map<string, string[]>;
+/**
+ * Launch the layout in gnome-terminal: one window per group, one tab per session.
+ *
+ * Default behaviour: a live session with a tmux client is already visible and is
+ * skipped; a live session with zero clients is orphaned, so a terminal tab is
+ * opened directly onto that exact tmux session. An absent session is launched as
+ * before. `--reattach` explicitly opens another tab even for an already-visible
+ * session. This is deliberately a view decision, not a liveness decision.
+ *
+ * Every decision reads the `hostView` PARAMETER — the plan's one snapshot —
+ * never a live host (F3: this module has no reader to call).
+ */
+export declare function launchLayout(windows: LayoutWindow[], hostView: HostViewSnapshot, stderr?: NodeJS.WriteStream, opts?: {
+    reattach?: boolean;
+    forceGateway?: "gateway" | "direct";
+}): {
+    opened: number;
+    skippedLive: string[];
+};
+//# sourceMappingURL=launch-layout.d.ts.map

package/dist/launch-layout.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-layout.d.ts","sourceRoot":"","sources":["../src/launch-layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAOH,OAAO,EAA6B,KAAK,YAAY,EAAE,MAAM,WAAW,CAAC;AACzE,OAAO,KAAK,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,cAAc,CAAC;AAE5D;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EACT;QAAE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;QAAC,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC,YAAY,CAAC,CAAA;KAAE,GACxE;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;QAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACxD,QAAQ,CAAC,MAAM,EACX;QACE,QAAQ,CAAC,KAAK,EAAE,IAAI,CAAC;QACrB,wEAAwE;QACxE,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;YAC/B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;YACtB,QAAQ,CAAC,UAAU,EAAE,OAAO,GAAG,SAAS,CAAC;SAC1C,CAAC,CAAC;KACJ,GACD;QAAE,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAA;KAAE,CAAC;CAC/B,CAAC;AAEF;;;;;;GAMG;AACH,wBAAgB,UAAU,CACxB,GAAG,EAAE,SAAS,EACd,SAAS,GAAE,WAAW,CAAC,MAAM,CAAa,EAC1C,IAAI,GAAE;IACJ,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAC;IACpC,6EAA6E;IAC7E,aAAa,CAAC,EAAE,MAAM,CAAC;CACnB,GACL,MAAM,CAgDR;AAED,wFAAwF;AACxF,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,SAAS,IAAI,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,EAAE,GACvD,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAUvB;AA4BD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAC1B,OAAO,EAAE,YAAY,EAAE,EACvB,QAAQ,EAAE,gBAAgB,EAC1B,MAAM,GAAE,MAAM,CAAC,WAA4B,EAC3C,IAAI,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,YAAY,CAAC,EAAE,SAAS,GAAG,QAAQ,CAAA;CAAO,GACrE;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,EAAE,CAAA;CAAE,CAgQ3C"}

package/dist/launch-layout.js

@@ -0,0 +1,324 @@
+/**
+ * Terminal-layout rendering for `remote restore` — split out of restore.ts so
+ * the F3 invariant is a MODULE-BOUNDARY property, not a review rule:
+ *
+ *   launchLayout decides every view/launch from the ONE `HostViewSnapshot`
+ *   it receives AS A PARAMETER. This module must NOT import any live host
+ *   reader (listNativeSessions, listLocalSessions*, nativeSession*, probe*):
+ *   you can't call what you don't have, so a divergence between plan time
+ *   and launch time can never be re-read here — and an error or divergence
+ *   NEVER becomes permission to launch (`live -> empty` yields attach or
+ *   refuse, never `h2a run` fabricating a second writer on a live
+ *   conversation). Only PURE name helpers may be imported from tmux.js.
+ */
+import { spawn } from "node:child_process";
+import { mkdirSync, writeFileSync } from "node:fs";
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { localSessionName, slugify } from "./tmux.js";
+/**
+ * Per-tab command for an ABSENT local session: create it via `remote run …
+ * --resume …` (which attaches by default). Live sessions are deliberately
+ * handled by `launchLayout`, which knows their exact tmux names and whether they
+ * have a client attached; it emits `tmux attach -t <exact-name>` and never
+ * relaunches them.
+ */
+export function tabCommand(tab, liveSlugs = new Set(), opts = {}) {
+    const q = (s) => `'${s.replace(/'/g, "'\\''")}'`;
+    if (tab.remoteId) {
+        // SCW: attach straight into the Pod's tmux (live, copy-friendly).
+        return `h2a attach ${q(tab.remoteId)} --exec`;
+    }
+    const slug = slugify(tab.label);
+    if (tab.attachLive) {
+        // §4.1 attach-live: a live managed row whose conversation id is
+        // unresolved re-enters by EXACT managed name only. No resume id exists,
+        // so no run/replace command may ever be rendered for it.
+        return `h2a attach ${q(tab.managedName ?? localSessionName(slug))}`;
+    }
+    // Effective gateway posture: an explicit `restore --gw/--no-gw` OVERRIDES the
+    // per-instance pin; otherwise honour the pinned gatewayMode (absent = default).
+    const posture = opts.forceGateway ?? tab.gatewayMode;
+    const gwFlag = posture === "gateway" ? " --gw" : posture === "direct" ? " --no-gw" : "";
+    // Persisted-host pin — the gatewayMode pattern applied to the terminal
+    // host: a NON-LIVE session is re-created on the host its registry record
+    // names, never on the current default. A recorded native session survives
+    // the fleet-wide H2A_SESSION_HOST=tmux valve via the env pin (any other
+    // value selects native — resolveSessionHostKind), where it fails closed if
+    // the native host is unavailable rather than silently re-routing; a
+    // recorded tmux session survives the native default via --tmux. Tabs
+    // without a recorded host (scan fallback) keep following the default.
+    const nativePin = tab.hostKind === "local-native" ? "H2A_SESSION_HOST=native " : "";
+    const tmuxPin = tab.hostKind === "local-tmux" ? " --tmux" : "";
+    const runCmd = (extra) => `${nativePin}h2a run ${q(tab.tool ?? "shell")} ${q(tab.cwd)} ` +
+        (tab.sid ? `--resume ${q(tab.sid)} ` : "") +
+        `--name ${q(tab.label)}${gwFlag}${tmuxPin}${extra}`;
+    if (opts.attachSession) {
+        // `h2a attach` resolves the exact managed name and honors the session's
+        // RECORDED host (tmux attach for tmux sessions, the native bridge for
+        // native-PTY sessions) — a raw `tmux attach -t` here would strand every
+        // native session behind a "no such session" error.
+        return `h2a attach ${q(opts.attachSession)}`;
+    }
+    if (liveSlugs.has(slug)) {
+        // Compatibility for direct callers that only know a unique slug.  Restore
+        // itself always supplies the exact name above, avoiding prefix collisions.
+        // Crucially, a gateway override never turns a live session into --replace:
+        // restore must preserve its process and conversation.
+        return `h2a attach ${q(slug)}`;
+    }
+    return runCmd("");
+}
+/** Group collision candidates before restore emits bare-slug attach/resume commands. */
+export function ambiguousLiveSessionNames(sessions) {
+    const namesBySlug = new Map();
+    for (const session of sessions) {
+        const names = namesBySlug.get(session.slug) ?? [];
+        names.push(session.name);
+        namesBySlug.set(session.slug, names);
+    }
+    return new Map([...namesBySlug].filter(([, names]) => names.length > 1));
+}
+// gnome-terminal applies ONE trailing `-- command` to EVERY tab of an
+// invocation (you cannot give each tab its own `--`). So all tabs run the same
+// dispatcher; each claims (under flock) the first map line matching its $PWD
+// and runs that tab's command — exactly how ~/bin/resume-dev-sessions worked.
+const DISPATCHER = `map="$1"
+lock="$map.lock"
+exec 9>"$lock"; flock 9
+line=$(awk -F'\\t' -v c="$PWD" '$1==c{print;exit}' "$map")
+if [ -n "$line" ]; then
+  awk -F'\\t' -v c="$PWD" 'BEGIN{d=0} d==0 && $1==c {d=1; next} {print}' "$map" > "$map.tmp" && mv "$map.tmp" "$map"
+fi
+flock -u 9
+cmd=$(printf '%s' "$line" | cut -f2-)
+if [ -n "$cmd" ]; then eval "$cmd"; else echo "[h2a] rien a reprendre pour $PWD" >&2; fi
+exec bash -l`;
+let mapCounter = 0;
+function runDir() {
+    const base = process.env.XDG_RUNTIME_DIR
+        ? join(process.env.XDG_RUNTIME_DIR, "sentropic-remote")
+        : join(homedir(), ".config", "sentropic", "remote-cli", "run");
+    mkdirSync(base, { recursive: true });
+    return base;
+}
+/**
+ * Launch the layout in gnome-terminal: one window per group, one tab per session.
+ *
+ * Default behaviour: a live session with a tmux client is already visible and is
+ * skipped; a live session with zero clients is orphaned, so a terminal tab is
+ * opened directly onto that exact tmux session. An absent session is launched as
+ * before. `--reattach` explicitly opens another tab even for an already-visible
+ * session. This is deliberately a view decision, not a liveness decision.
+ *
+ * Every decision reads the `hostView` PARAMETER — the plan's one snapshot —
+ * never a live host (F3: this module has no reader to call).
+ */
+export function launchLayout(windows, hostView, stderr = process.stderr, opts = {}) {
+    const tmuxKnown = hostView.tmux.known;
+    const tmuxReason = hostView.tmux.known ? undefined : hostView.tmux.reason;
+    const tmuxSessions = hostView.tmux.known
+        ? hostView.tmux.sessions
+        : [];
+    // Native view by EXACT session name, carrying the controller-visibility
+    // bit. A failed inventory read is an UNKNOWN view (undefined map) — never
+    // "no sessions": launching a replacement onto an unprovable host state
+    // could create a second writer, so unknown fails closed below.
+    const nativeSessionsByName = hostView.native.known
+        ? new Map(hostView.native.sessions.map((session) => [
+            session.name,
+            { controlled: session.controlled },
+        ]))
+        : undefined;
+    // Slug-union view for LEGACY tabs without a recorded host (scan fallback)
+    // ONLY — a tab that carries its persisted hostKind + exact managed name is
+    // rendered from that identity and never chooses a host from a merged slug
+    // list. A CONTROLLED native session counts as attached (already visible).
+    const nativeLive = nativeSessionsByName !== undefined
+        ? [...nativeSessionsByName.entries()]
+            .filter(([name]) => name.startsWith("h2a-") && !name.endsWith(".h2a"))
+            .map(([name, view]) => ({
+            name,
+            slug: name.slice("h2a-".length),
+            attached: view.controlled === true,
+        }))
+        : [];
+    const liveSessions = [
+        ...tmuxSessions,
+        ...nativeLive.filter((native) => !tmuxSessions.some((s) => s.name === native.name)),
+    ];
+    const ambiguousLiveNames = ambiguousLiveSessionNames(liveSessions);
+    const skippedLive = [];
+    let opened = 0;
+    // A gateway override can configure a NEW process but must never replace a live
+    // one. `--reattach` is the sole opt-in that duplicates an already-visible tab.
+    const includeAttached = opts.reattach === true;
+    const tabOpts = opts.forceGateway ? { forceGateway: opts.forceGateway } : {};
+    if (!tmuxKnown) {
+        // We cannot reliably tell "attached" from "orphaned".  Prefer a harmless
+        // duplicate/failing attach over `h2a run` possibly racing a live tmux
+        // session; a restore command must never reclaim a view by killing its work.
+        stderr.write(`[h2a] tmux view state unavailable${tmuxReason ? ` (${tmuxReason})` : ""}; ` +
+            "opening attach tabs rather than relaunching local sessions\n");
+    }
+    for (const win of windows) {
+        // Remote (k8s) tabs are always included — we can't probe pod health here.
+        // Local tabs carry their finalized command because a live orphan must attach
+        // to its exact tmux name, while an absent session must be launched.
+        const activeTabs = [];
+        for (const t of win.tabs) {
+            if (t.remoteId) {
+                activeTabs.push({ tab: t, command: tabCommand(t) });
+                continue;
+            }
+            const slug = slugify(t.label);
+            // --- Tabs WITH a recorded host: exact-identity, single-host render. ---
+            // The host decision was made by the plan (persisted kind + exact
+            // managed name); this block only renders the view for THAT host.
+            if (t.hostKind === "local-native") {
+                const exact = t.managedName ?? `h2a-${slug}`;
+                if (nativeSessionsByName === undefined) {
+                    stderr.write(`[h2a] restore: native host state UNKNOWN — "${t.label}" neither relaunched nor attached (fail closed)\n`);
+                    continue;
+                }
+                const view = nativeSessionsByName.get(exact);
+                if (view !== undefined) {
+                    if (view.controlled === true) {
+                        // running && controlled → already visible. Even --reattach must
+                        // not open a competing controller (single-controller model).
+                        skippedLive.push(t.label);
+                        if (includeAttached) {
+                            stderr.write(`[h2a] restore: "${t.label}" is already controlled in a terminal; not opening a second controller\n`);
+                        }
+                        continue;
+                    }
+                    if (view.controlled === undefined) {
+                        // running && view unknown (host predates the visibility bit):
+                        // preserve the process, report, never relaunch.
+                        stderr.write(`[h2a] restore: controller visibility UNKNOWN for running native session "${t.label}"; attach manually: h2a attach ${exact}\n`);
+                        continue;
+                    }
+                    // running && !controlled → exactly one exact-name attach.
+                    activeTabs.push({
+                        tab: t,
+                        command: tabCommand(t, new Set([slug]), { attachSession: exact }),
+                    });
+                    continue;
+                }
+                // Dead/absent on a KNOWN native view.
+                if (t.attachLive) {
+                    stderr.write(`[h2a] restore: "${t.label}" was live at plan time but is gone; no resolved conversation exists to relaunch it\n`);
+                    continue;
+                }
+                activeTabs.push({ tab: t, command: tabCommand(t, new Set(), tabOpts) });
+                continue;
+            }
+            if (t.hostKind === "local-tmux") {
+                const exact = t.managedName ?? `h2a-${slug}`;
+                if (!tmuxKnown) {
+                    // Conservative: a harmless exact attach, never a relaunch race.
+                    activeTabs.push({
+                        tab: t,
+                        command: tabCommand(t, new Set([slug]), { attachSession: exact }),
+                    });
+                    continue;
+                }
+                const liveTmux = tmuxSessions.find((session) => session.name === exact);
+                if (liveTmux) {
+                    // DRAIN view: the live legacy process is attach-only — dispatched
+                    // to its persisted host via `h2a attach`; never replaced, and no
+                    // tmux session is ever created here.
+                    if (!includeAttached && liveTmux.attached) {
+                        skippedLive.push(t.label);
+                        continue;
+                    }
+                    activeTabs.push({
+                        tab: t,
+                        command: tabCommand(t, new Set([slug]), { attachSession: exact }),
+                    });
+                    continue;
+                }
+                if (t.attachLive) {
+                    stderr.write(`[h2a] restore: "${t.label}" was live at plan time but is gone; no resolved conversation exists to relaunch it\n`);
+                    continue;
+                }
+                // Dead recorded tmux row: re-created on its recorded host via the
+                // --tmux pin (tabCommand). Which host a dead tmux session should be
+                // relaunched on is a REOPENED policy question — this keeps the #199
+                // behavior as-is.
+                activeTabs.push({ tab: t, command: tabCommand(t, new Set(), tabOpts) });
+                continue;
+            }
+            // --- Legacy tabs without a recorded host: slug-union view (scan). ---
+            if (!tmuxKnown) {
+                activeTabs.push({
+                    tab: t,
+                    command: tabCommand(t, new Set([slug]), { attachSession: `h2a-${slug}` }),
+                });
+                continue;
+            }
+            const names = ambiguousLiveNames.get(slug);
+            if (names) {
+                skippedLive.push(t.label);
+                stderr.write(`[h2a] restore skipped "${t.label}": local tmux slug is ambiguous (${names.sort().join(", ")}); ` +
+                    `attach explicitly with h2a attach ${names.sort()[0]} or h2a attach ${names.sort()[1]}\n`);
+                continue;
+            }
+            const liveSession = liveSessions.find((session) => session.slug === slug);
+            if (liveSession && !includeAttached && liveSession.attached) {
+                skippedLive.push(t.label);
+                continue;
+            }
+            if (!liveSession && nativeSessionsByName === undefined) {
+                // The tab would LAUNCH — but the native host state is unknown, so a
+                // homonymous live native session cannot be ruled out. Fail closed.
+                stderr.write(`[h2a] restore: native host state UNKNOWN — "${t.label}" not launched (fail closed)\n`);
+                continue;
+            }
+            activeTabs.push({
+                tab: t,
+                command: liveSession
+                    ? tabCommand(t, new Set([slug]), { attachSession: liveSession.name })
+                    : tabCommand(t, new Set(), tabOpts),
+            });
+        }
+        if (activeTabs.length === 0) {
+            // All sessions in this window are already active — no tab needed.
+            continue;
+        }
+        // Map keyed by per-tab working directory -> the tab's command. Tabs sharing
+        // a cwd (several sessions of one project) each claim a distinct line FIFO.
+        const slug = win.title.replace(/[^a-zA-Z0-9]+/g, "-");
+        const mapPath = join(runDir(), `restore-${process.pid}-${slug}-${mapCounter++}.map`);
+        const body = activeTabs
+            .map(({ tab, command }) => `${tab.cwd}\t${command}`)
+            .join("\n") + "\n";
+        writeFileSync(mapPath, body, "utf8");
+        const args = [];
+        activeTabs.forEach(({ tab }, i) => {
+            args.push(i === 0 ? "--window" : "--tab", `--working-directory=${tab.cwd}`, `--title=${tab.label}`);
+        });
+        // ONE shared dispatcher command for all tabs of this window.
+        args.push("--", "bash", "-lc", DISPATCHER, "remote-restore", mapPath);
+        stderr.write(`[h2a] fenêtre "${win.title}" (${activeTabs.length} onglet(s))\n`);
+        // Surface gnome-terminal errors (e.g. "Failed to get screen…") instead of
+        // silently claiming the window opened.
+        const { GNOME_TERMINAL_SCREEN: _drop, ...childEnv } = process.env;
+        const child = spawn("gnome-terminal", args, {
+            stdio: ["ignore", "ignore", "pipe"],
+            detached: true,
+            env: childEnv,
+        });
+        child.stderr?.on("data", (chunk) => {
+            stderr.write(`[h2a] gnome-terminal: ${chunk.toString().trim()}\n`);
+        });
+        child.unref();
+        opened += activeTabs.length;
+    }
+    if (skippedLive.length > 0) {
+        stderr.write(`[h2a] ${skippedLive.length} session(s) déjà visibles ignorées` +
+            ` (--reattach pour les rouvrir quand même): ${skippedLive.join(", ")}\n`);
+    }
+    return { opened, skippedLive };
+}
+//# sourceMappingURL=launch-layout.js.map

package/dist/launch-layout.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"launch-layout.js","sourceRoot":"","sources":["../src/launch-layout.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,gBAAgB,EAAE,OAAO,EAAqB,MAAM,WAAW,CAAC;AAyBzE;;;;;;GAMG;AACH,MAAM,UAAU,UAAU,CACxB,GAAc,EACd,YAAiC,IAAI,GAAG,EAAE,EAC1C,OAII,EAAE;IAEN,MAAM,CAAC,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC;IACzD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,kEAAkE;QAClE,OAAO,cAAc,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;IAChD,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;QACnB,gEAAgE;QAChE,wEAAwE;QACxE,yDAAyD;QACzD,OAAO,cAAc,CAAC,CAAC,GAAG,CAAC,WAAW,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC;IACtE,CAAC;IACD,8EAA8E;IAC9E,gFAAgF;IAChF,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,IAAI,GAAG,CAAC,WAAW,CAAC;IACrD,MAAM,MAAM,GACV,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3E,uEAAuE;IACvE,yEAAyE;IACzE,0EAA0E;IAC1E,wEAAwE;IACxE,2EAA2E;IAC3E,oEAAoE;IACpE,qEAAqE;IACrE,sEAAsE;IACtE,MAAM,SAAS,GACb,GAAG,CAAC,QAAQ,KAAK,cAAc,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,EAAE,CAAC;IACpE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,KAAK,YAAY,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/D,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,EAAE,CAC/B,GAAG,SAAS,WAAW,CAAC,CAAC,GAAG,CAAC,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG;QAC9D,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,UAAU,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,GAAG,MAAM,GAAG,OAAO,GAAG,KAAK,EAAE,CAAC;IACtD,IAAI,IAAI,CAAC,aAAa,EAAE,CAAC;QACvB,wEAAwE;QACxE,sEAAsE;QACtE,wEAAwE;QACxE,mDAAmD;QACnD,OAAO,cAAc,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,EAAE,CAAC;IAC/C,CAAC;IACD,IAAI,SAAS,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;QACxB,0EAA0E;QAC1E,2EAA2E;QAC3E,2EAA2E;QAC3E,sDAAsD;QACtD,OAAO,cAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;IACjC,CAAC;IACD,OAAO,MAAM,CAAC,EAAE,CAAC,CAAC;AACpB,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,yBAAyB,CACvC,QAAwD;IAExD,MAAM,WAAW,GAAG,IAAI,GAAG,EAAoB,CAAC;IAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;QAC/B,MAAM,KAAK,GAAG,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACzB,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,OAAO,IAAI,GAAG,CACZ,CAAC,GAAG,WAAW,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CACzD,CAAC;AACJ,CAAC;AAED,sEAAsE;AACtE,+EAA+E;AAC/E,6EAA6E;AAC7E,8EAA8E;AAC9E,MAAM,UAAU,GAAG;;;;;;;;;;aAUN,CAAC;AAEd,IAAI,UAAU,GAAG,CAAC,CAAC;AAEnB,SAAS,MAAM;IACb,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe;QACtC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,kBAAkB,CAAC;QACvD,CAAC,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,SAAS,EAAE,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,CAAC;IACjE,SAAS,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACrC,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,YAAY,CAC1B,OAAuB,EACvB,QAA0B,EAC1B,SAA6B,OAAO,CAAC,MAAM,EAC3C,OAAoE,EAAE;IAEtE,MAAM,SAAS,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC;IACtC,MAAM,UAAU,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC;IAC1E,MAAM,YAAY,GAAgC,QAAQ,CAAC,IAAI,CAAC,KAAK;QACnE,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,QAAQ;QACxB,CAAC,CAAC,EAAE,CAAC;IACP,wEAAwE;IACxE,0EAA0E;IAC1E,uEAAuE;IACvE,+DAA+D;IAC/D,MAAM,oBAAoB,GAEV,QAAQ,CAAC,MAAM,CAAC,KAAK;QACnC,CAAC,CAAC,IAAI,GAAG,CACL,QAAQ,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC;YACxC,OAAO,CAAC,IAAI;YACZ,EAAE,UAAU,EAAE,OAAO,CAAC,UAAU,EAAE;SACnC,CAAC,CACH;QACH,CAAC,CAAC,SAAS,CAAC;IACd,0EAA0E;IAC1E,2EAA2E;IAC3E,0EAA0E;IAC1E,0EAA0E;IAC1E,MAAM,UAAU,GACd,oBAAoB,KAAK,SAAS;QAChC,CAAC,CAAC,CAAC,GAAG,oBAAoB,CAAC,OAAO,EAAE,CAAC;aAChC,MAAM,CACL,CAAC,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAC9D;aACA,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACtB,IAAI;YACJ,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC;YAC/B,QAAQ,EAAE,IAAI,CAAC,UAAU,KAAK,IAAI;SACnC,CAAC,CAAC;QACP,CAAC,CAAC,EAAE,CAAC;IACT,MAAM,YAAY,GAAG;QACnB,GAAG,YAAY;QACf,GAAG,UAAU,CAAC,MAAM,CAClB,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,MAAM,CAAC,IAAI,CAAC,CAC9D;KACF,CAAC;IACF,MAAM,kBAAkB,GAAG,yBAAyB,CAAC,YAAY,CAAC,CAAC;IACnE,MAAM,WAAW,GAAa,EAAE,CAAC;IACjC,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,+EAA+E;IAC/E,+EAA+E;IAC/E,MAAM,eAAe,GAAG,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC;IAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAE7E,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,yEAAyE;QACzE,sEAAsE;QACtE,4EAA4E;QAC5E,MAAM,CAAC,KAAK,CACV,oCAAoC,UAAU,CAAC,CAAC,CAAC,KAAK,UAAU,GAAG,CAAC,CAAC,CAAC,EAAE,IAAI;YAC1E,8DAA8D,CACjE,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,GAAG,IAAI,OAAO,EAAE,CAAC;QAC1B,0EAA0E;QAC1E,6EAA6E;QAC7E,oEAAoE;QACpE,MAAM,UAAU,GAA+C,EAAE,CAAC;QAClE,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,IAAI,EAAE,CAAC;YACzB,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBACpD,SAAS;YACX,CAAC;YACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;YAE9B,yEAAyE;YACzE,iEAAiE;YACjE,iEAAiE;YACjE,IAAI,CAAC,CAAC,QAAQ,KAAK,cAAc,EAAE,CAAC;gBAClC,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,OAAO,IAAI,EAAE,CAAC;gBAC7C,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;oBACvC,MAAM,CAAC,KAAK,CACV,+CAA+C,CAAC,CAAC,KAAK,mDAAmD,CAC1G,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,MAAM,IAAI,GAAG,oBAAoB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;oBACvB,IAAI,IAAI,CAAC,UAAU,KAAK,IAAI,EAAE,CAAC;wBAC7B,gEAAgE;wBAChE,6DAA6D;wBAC7D,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;wBAC1B,IAAI,eAAe,EAAE,CAAC;4BACpB,MAAM,CAAC,KAAK,CACV,mBAAmB,CAAC,CAAC,KAAK,0EAA0E,CACrG,CAAC;wBACJ,CAAC;wBACD,SAAS;oBACX,CAAC;oBACD,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS,EAAE,CAAC;wBAClC,8DAA8D;wBAC9D,gDAAgD;wBAChD,MAAM,CAAC,KAAK,CACV,4EAA4E,CAAC,CAAC,KAAK,kCAAkC,KAAK,IAAI,CAC/H,CAAC;wBACF,SAAS;oBACX,CAAC;oBACD,0DAA0D;oBAC1D,UAAU,CAAC,IAAI,CAAC;wBACd,GAAG,EAAE,CAAC;wBACN,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;qBAClE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,sCAAsC;gBACtC,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;oBACjB,MAAM,CAAC,KAAK,CACV,mBAAmB,CAAC,CAAC,KAAK,uFAAuF,CAClH,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YACD,IAAI,CAAC,CAAC,QAAQ,KAAK,YAAY,EAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,IAAI,OAAO,IAAI,EAAE,CAAC;gBAC7C,IAAI,CAAC,SAAS,EAAE,CAAC;oBACf,gEAAgE;oBAChE,UAAU,CAAC,IAAI,CAAC;wBACd,GAAG,EAAE,CAAC;wBACN,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;qBAClE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAChC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,KAAK,CACpC,CAAC;gBACF,IAAI,QAAQ,EAAE,CAAC;oBACb,kEAAkE;oBAClE,iEAAiE;oBACjE,qCAAqC;oBACrC,IAAI,CAAC,eAAe,IAAI,QAAQ,CAAC,QAAQ,EAAE,CAAC;wBAC1C,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;wBAC1B,SAAS;oBACX,CAAC;oBACD,UAAU,CAAC,IAAI,CAAC;wBACd,GAAG,EAAE,CAAC;wBACN,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;qBAClE,CAAC,CAAC;oBACH,SAAS;gBACX,CAAC;gBACD,IAAI,CAAC,CAAC,UAAU,EAAE,CAAC;oBACjB,MAAM,CAAC,KAAK,CACV,mBAAmB,CAAC,CAAC,KAAK,uFAAuF,CAClH,CAAC;oBACF,SAAS;gBACX,CAAC;gBACD,kEAAkE;gBAClE,oEAAoE;gBACpE,oEAAoE;gBACpE,kBAAkB;gBAClB,UAAU,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,CAAC,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC,EAAE,CAAC,CAAC;gBACxE,SAAS;YACX,CAAC;YAED,uEAAuE;YACvE,IAAI,CAAC,SAAS,EAAE,CAAC;gBACf,UAAU,CAAC,IAAI,CAAC;oBACd,GAAG,EAAE,CAAC;oBACN,OAAO,EAAE,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,OAAO,IAAI,EAAE,EAAE,CAAC;iBAC1E,CAAC,CAAC;gBACH,SAAS;YACX,CAAC;YACD,MAAM,KAAK,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;YAC3C,IAAI,KAAK,EAAE,CAAC;gBACV,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC1B,MAAM,CAAC,KAAK,CACV,0BAA0B,CAAC,CAAC,KAAK,oCAAoC,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK;oBAC/F,qCAAqC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,kBAAkB,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAC5F,CAAC;gBACF,SAAS;YACX,CAAC;YAED,MAAM,WAAW,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;YAC1E,IAAI,WAAW,IAAI,CAAC,eAAe,IAAI,WAAW,CAAC,QAAQ,EAAE,CAAC;gBAC5D,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;gBAC1B,SAAS;YACX,CAAC;YACD,IAAI,CAAC,WAAW,IAAI,oBAAoB,KAAK,SAAS,EAAE,CAAC;gBACvD,oEAAoE;gBACpE,mEAAmE;gBACnE,MAAM,CAAC,KAAK,CACV,+CAA+C,CAAC,CAAC,KAAK,gCAAgC,CACvF,CAAC;gBACF,SAAS;YACX,CAAC;YACD,UAAU,CAAC,IAAI,CAAC;gBACd,GAAG,EAAE,CAAC;gBACN,OAAO,EAAE,WAAW;oBAClB,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,aAAa,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;oBACrE,CAAC,CAAC,UAAU,CAAC,CAAC,EAAE,IAAI,GAAG,EAAE,EAAE,OAAO,CAAC;aACtC,CAAC,CAAC;QACL,CAAC;QAED,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;YAC5B,kEAAkE;YAClE,SAAS;QACX,CAAC;QAED,4EAA4E;QAC5E,2EAA2E;QAC3E,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,EAAE,GAAG,CAAC,CAAC;QACtD,MAAM,OAAO,GAAG,IAAI,CAClB,MAAM,EAAE,EACR,WAAW,OAAO,CAAC,GAAG,IAAI,IAAI,IAAI,UAAU,EAAE,MAAM,CACrD,CAAC;QACF,MAAM,IAAI,GACR,UAAU;aACP,GAAG,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,OAAO,EAAE,CAAC;aACnD,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;QACvB,aAAa,CAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;QAErC,MAAM,IAAI,GAAa,EAAE,CAAC;QAC1B,UAAU,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,CAAC,EAAE,EAAE;YAChC,IAAI,CAAC,IAAI,CACP,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,OAAO,EAC9B,uBAAuB,GAAG,CAAC,GAAG,EAAE,EAChC,WAAW,GAAG,CAAC,KAAK,EAAE,CACvB,CAAC;QACJ,CAAC,CAAC,CAAC;QACH,6DAA6D;QAC7D,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,UAAU,EAAE,gBAAgB,EAAE,OAAO,CAAC,CAAC;QAEtE,MAAM,CAAC,KAAK,CACV,kBAAkB,GAAG,CAAC,KAAK,MAAM,UAAU,CAAC,MAAM,eAAe,CAClE,CAAC;QACF,0EAA0E;QAC1E,uCAAuC;QACvC,MAAM,EAAE,qBAAqB,EAAE,KAAK,EAAE,GAAG,QAAQ,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC;QAClE,MAAM,KAAK,GAAG,KAAK,CAAC,gBAAgB,EAAE,IAAI,EAAE;YAC1C,KAAK,EAAE,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,CAAC;YACnC,QAAQ,EAAE,IAAI;YACd,GAAG,EAAE,QAAQ;SACd,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,EAAE,CAAC,KAAa,EAAE,EAAE;YACzC,MAAM,CAAC,KAAK,CAAC,yBAAyB,KAAK,CAAC,QAAQ,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACrE,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,IAAI,UAAU,CAAC,MAAM,CAAC;IAC9B,CAAC;IAED,IAAI,WAAW,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC3B,MAAM,CAAC,KAAK,CACV,SAAS,WAAW,CAAC,MAAM,oCAAoC;YAC/D,8CAA8C,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CACzE,CAAC;IACJ,CAAC;IAED,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;AACjC,CAAC"}

package/dist/llm-gateway-runtime/index.d.ts

@@ -1,4 +1,10 @@
 import { Hono } from "hono";
+import { type LlmMeshRoutingConfig } from "../llm-routing-config.js";
+export interface LocalGatewayAppOptions {
+    readonly routing?: LlmMeshRoutingConfig;
+    readonly ownerScopeRef?: string;
+}
+export declare function createLocalGatewayApp(options?: LocalGatewayAppOptions): Hono;
 export declare const app: Hono<import("hono/types").BlankEnv, import("hono/types").BlankSchema, "/">;
 export declare function startServer(): void;
 //# sourceMappingURL=index.d.ts.map

package/dist/llm-gateway-runtime/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/llm-gateway-runtime/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAW5B,eAAO,MAAM,GAAG,4EAAa,CAAC;AAkE9B,wBAAgB,WAAW,IAAI,IAAI,CAOlC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/llm-gateway-runtime/index.ts"],"names":[],"mappings":"AAmBA,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AAM5B,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,0BAA0B,CAAC;AAoDlC,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,OAAO,CAAC,EAAE,oBAAoB,CAAC;IACxC,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAC;CACjC;AAED,wBAAgB,qBAAqB,CAAC,OAAO,GAAE,sBAA2B,GAAG,IAAI,CA6FhF;AAED,eAAO,MAAM,GAAG,4EAA0B,CAAC;AAE3C,wBAAgB,WAAW,IAAI,IAAI,CASlC"}

package/dist/llm-gateway-runtime/index.js

@@ -1,70 +1,144 @@
+import { randomUUID } from "node:crypto";
 import { serve } from "@hono/node-server";
+import { CloudCodeRuntimeClient, CodexRuntimeClient, GeminiAdapter, OpenAIAdapter, createLlmMesh, createProviderRegistry, } from "@sentropic/llm-mesh";
+import { createGatewayRouter, stubGatewayConfig, } from "@sentropic/llm-gateway";
 import { Hono } from "hono";
-import { acquireSession, sessionCount } from "./sticky.js";
-import { handleMessages } from "./proxy-anthropic.js";
-import { listAccountDescriptors, listRoutableModels } from "./accounts.js";
-import { modelCatalogResponse } from "./model-catalog.js";
-import { getSessionLedgerEntry, getSessionLedgerEntryForClient, listSessionLedger, } from "./session-ledger.js";
-export const app = new Hono();
-// Health — no internal state exposed
-app.get("/health", (c) => c.json({ ok: true }));
-app.get("/healthz", (c) => c.json({ ok: true }));
-// Session creation — called by control-plane before pod start.
-// Network policy enforces that pods cannot reach this endpoint.
-app.post("/v1/session", async (c) => {
-    let body;
-    try {
-        body = await c.req.json();
-    }
-    catch {
-        return c.json({ error: "invalid JSON" }, 400);
-    }
-    if (typeof body.sessionId !== "string" || !body.sessionId) {
-        return c.json({ error: "sessionId (string) required" }, 400);
+import { createCliLlmMeshFacade, llmMeshOwnerScopeRef, readLlmMeshConfig, } from "../llm-mesh.js";
+import { parseLlmMeshRoutingConfig, routingProfiles, } from "../llm-routing-config.js";
+import { getSessionLedgerEntry, getSessionLedgerEntryForClient, listSessionLedger, recordRoutePlan, recordRouteSettlement, } from "./session-ledger.js";
+import { acquireSession, lookupSessionById, lookupToken, sessionCount, } from "./sticky.js";
+const routingConfigFromEnvironment = () => {
+    const raw = process.env.H2A_LLM_MESH_ROUTING_JSON;
+    return raw ? parseLlmMeshRoutingConfig(raw) : undefined;
+};
+const runtimeMesh = () => createLlmMesh({
+    registry: createProviderRegistry([
+        new OpenAIAdapter({ client: new CodexRuntimeClient() }),
+        new GeminiAdapter({ client: new CloudCodeRuntimeClient() }),
+    ]),
+});
+const bearerFromHeaders = (headers) => {
+    const authorization = headers.authorization;
+    if (authorization?.toLowerCase().startsWith("bearer ")) {
+        return authorization.slice(7).trim();
     }
-    try {
-        const result = await acquireSession(body.sessionId, {
-            ...(typeof body.provider === "string" ? { provider: body.provider } : {}),
-            ...(typeof body.model === "string" ? { model: body.model } : {}),
+    return headers["x-api-key"]?.trim() || undefined;
+};
+const observablePlanner = (delegate) => ({
+    ...(delegate.listModels
+        ? { listModels: (subject) => delegate.listModels(subject) }
+        : {}),
+    async plan(subject, input) {
+        const plan = await delegate.plan(subject, input);
+        const session = lookupSessionById(subject.principalRef);
+        if (session)
+            recordRoutePlan(session, input, plan);
+        return plan;
+    },
+    prepareAttempt: (...args) => delegate.prepareAttempt(...args),
+    describeAffinity: (...args) => delegate.describeAffinity(...args),
+    promoteAffinity: (...args) => delegate.promoteAffinity(...args),
+    rebindAffinity: (...args) => delegate.rebindAffinity(...args),
+    resetAffinity: (...args) => delegate.resetAffinity(...args),
+});
+export function createLocalGatewayApp(options = {}) {
+    const routing = options.routing ?? routingConfigFromEnvironment();
+    const currentRouting = () => {
+        if (options.routing)
+            return options.routing;
+        const publicConfig = readLlmMeshConfig();
+        // A present config with no routing field is an intentional live reset.
+        // Fall back to the startup environment only when no config exists at all.
+        return publicConfig ? publicConfig.routing : routing;
+    };
+    const ownerScopeRef = options.ownerScopeRef ?? llmMeshOwnerScopeRef();
+    const facade = createCliLlmMeshFacade();
+    const profiles = routingProfiles(routing);
+    const planner = observablePlanner(facade.createRoutePlanner(runtimeMesh(), {
+        ...(routing?.council ? { council: routing.council } : {}),
+        ...(profiles ? { profiles } : {}),
+    }));
+    const callerAuth = {
+        async verify(headers) {
+            const token = bearerFromHeaders(headers);
+            const session = token ? await lookupToken(token) : undefined;
+            if (!session)
+                return { ok: false, reason: "invalid local gateway bearer" };
+            return {
+                ok: true,
+                cost: {
+                    tenantId: ownerScopeRef,
+                    principalId: session.sessionId,
+                    ownerScopeRef,
+                    ...(session.workspaceId ? { workspaceId: session.workspaceId } : {}),
+                    source: "h2a-local-gateway",
+                    correlationId: randomUUID(),
+                },
+            };
+        },
+    };
+    const routeMetering = {
+        settleRoute(settlement) {
+            recordRouteSettlement(settlement);
+        },
+    };
+    const gateway = createGatewayRouter({
+        config: { ...stubGatewayConfig, callerAuth },
+        routePlanner: planner,
+        routeMetering,
+        routeInput({ cost }) {
+            const session = lookupSessionById(cost.principalId);
+            const activeRouting = currentRouting();
+            return {
+                affinityKey: session?.clientSessionId ?? cost.principalId,
+                ...(session?.workspaceId ? { workspaceId: session.workspaceId } : {}),
+                ...(activeRouting?.policy ? { policyOverride: activeRouting.policy } : {}),
+                ...(activeRouting?.activeProfile ? { policyProfile: activeRouting.activeProfile } : {}),
+                ...(activeRouting?.explicit ? { explicit: activeRouting.explicit } : {}),
+            };
+        },
+    });
+    const app = new Hono();
+    app.get("/health", (c) => c.json({ ok: true }));
+    app.post("/v1/session", async (c) => {
+        let body;
+        try {
+            body = await c.req.json();
+        }
+        catch {
+            return c.json({ error: "invalid JSON" }, 400);
+        }
+        if (typeof body.sessionId !== "string" || !body.sessionId.trim()) {
+            return c.json({ error: "sessionId (string) required" }, 400);
+        }
+        const session = await acquireSession(body.sessionId, {
+            ...(typeof body.clientSessionId === "string"
+                ? { clientSessionId: body.clientSessionId }
+                : {}),
             ...(typeof body.workspaceId === "string" ? { workspaceId: body.workspaceId } : {}),
             ...(typeof body.profile === "string" ? { profile: body.profile } : {}),
-            ...(typeof body.clientSessionId === "string" ? { clientSessionId: body.clientSessionId } : {}),
-            ...(typeof body.reasoningEffort === "string"
-                ? { reasoningEffort: body.reasoningEffort }
-                : {}),
-            ...(typeof body.requiredTransport === "string"
-                ? { requiredTransport: body.requiredTransport }
-                : {}),
         });
-        return c.json(result, 201);
-    }
-    catch (err) {
-        return c.json({ error: err instanceof Error ? err.message : String(err) }, 400);
-    }
-});
-app.get("/v1/accounts", (c) => c.json({ data: listAccountDescriptors() }));
-app.get("/v1/models", (c) => c.json(modelCatalogResponse(listRoutableModels())));
-app.get("/v1/sessions", (c) => c.json({ data: listSessionLedger() }));
-app.get("/v1/sessions/:id", (c) => {
-    const entry = getSessionLedgerEntry(c.req.param("id"));
-    if (!entry)
-        return c.json({ error: "session not found" }, 404);
-    return c.json(entry);
-});
-// The tmux surface asks for one attested client session. This is deliberately
-// not the collection endpoint: a five-second status refresh must stay O(1).
-app.get("/v1/status/client/:clientSessionId", (c) => {
-    const entry = getSessionLedgerEntryForClient(c.req.param("clientSessionId"));
-    if (!entry)
-        return c.json({ error: "client session not found" }, 404);
-    return c.json(entry);
-});
-// Anthropic Messages proxy — pods call this with Bearer gw-<hex>
-app.post("/v1/messages", handleMessages);
+        return c.json(session, 201);
+    });
+    app.get("/v1/sessions", (c) => c.json({ data: listSessionLedger() }));
+    app.get("/v1/sessions/:id", (c) => {
+        const entry = getSessionLedgerEntry(c.req.param("id"));
+        return entry ? c.json(entry) : c.json({ error: "session not found" }, 404);
+    });
+    app.get("/v1/status/client/:clientSessionId", (c) => {
+        const entry = getSessionLedgerEntryForClient(c.req.param("clientSessionId"));
+        return entry ? c.json(entry) : c.json({ error: "client session not found" }, 404);
+    });
+    app.route("/", gateway);
+    return app;
+}
+export const app = createLocalGatewayApp();
 export function startServer() {
-    const port = parseInt(process.env.PORT ?? "3001", 10);
-    serve({ fetch: app.fetch, port }, () => {
-        process.stdout.write(`[llm-gateway] listening on :${port} — ${sessionCount()} sessions in memory\n`);
+    const port = Number.parseInt(process.env.PORT ?? "3002", 10);
+    // Session minting is intentionally unauthenticated control-plane traffic.
+    // The embedded solo-dev host therefore never listens beyond loopback.
+    serve({ fetch: app.fetch, port, hostname: "127.0.0.1" }, () => {
+        process.stdout.write(`[llm-gateway] listening on :${port} — ${sessionCount()} local bearers\n`);
     });
 }
 if (process.env.NODE_ENV !== "test")