@sentropic/h2a-runtime 0.98.1 → 0.98.3

package/dist/llm-mesh.d.ts

@@ -1,154 +0,0 @@
-/**
- * llm-mesh — local LLM gateway management for solo-dev mode.
- *
- * Enrollment: `h2a llm-mesh account enroll cloud-code|codex` delegates OAuth and
- *   account persistence entirely to the sentropic-owned facade.
- *
- * Startup:    `h2a llm-mesh start` reads public host config and starts the
- *   embedded gateway runtime as a background process. Callers acquire an
- *   opaque process-local bearer without printing it.
- *
- * Config path: ~/.sentropic/llm-mesh.json  (0600, public metadata only)
- * PID file:    ~/.sentropic/llm-mesh.pid
- * Runtime file: ~/.sentropic/llm-mesh-token.json (0600, base URL + PID only)
- */
-import { type LlmMeshAdministrativeFacade, type LlmMeshFacade } from "@sentropic/llm-mesh/facade";
-import type { AccountPublic } from "@sentropic/llm-mesh/enrollment";
-import { type LlmMeshRoutingConfig } from "./llm-routing-config.js";
-declare const ANTHROPIC_GATEWAY_ENV_KEYS: readonly ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
-/**
- * Temporarily replace the H2A gateway lane and return an exact restorer.
- * Direct launches preserve a user-owned ANTHROPIC_API_KEY. Gateway launches
- * hide it from Claude Code because the local gateway authenticates with the
- * opaque AUTH_TOKEN lane instead.
- */
-export declare function replaceAnthropicGatewayEnvironment(env: NodeJS.ProcessEnv, replacement?: Partial<Record<(typeof ANTHROPIC_GATEWAY_ENV_KEYS)[number], string>>): () => void;
-export interface LlmMeshConfig {
-    /** Deprecated migration sinks. Never returned or persisted. */
-    accounts?: readonly unknown[];
-    meshAccounts?: readonly unknown[];
-    /** Local port for the gateway. Default: 3002 */
-    port?: number;
-    /** Log file path (stdout+stderr of the gateway process). Default: ~/.sentropic/llm-mesh.log */
-    logFile?: string;
-    /** Public host routing policy. Provider/model knowledge remains in llm-mesh. */
-    routing?: LlmMeshRoutingConfig;
-}
-export interface LlmMeshEnrollmentAccount {
-    accountId: string;
-    provider: "cloud-code" | "codex" | "muse" | "muse-code";
-    label: string;
-}
-/**
- * Structural extension for facades that implement Muse CLI-store import
- * (MuseEnrollmentProvider mesh-side, BR75). Declared structurally — not taken
- * from @sentropic/llm-mesh types — so h2a keeps working against older
- * facades; the runtime guard below fails closed when the method is absent
- * instead of throwing a bare TypeError.
- */
-export interface LlmMeshFacadeWithMuseImport extends LlmMeshFacade {
-    completeMuseImport(enrollmentId: string, code: string, ownerScopeRef: string): Promise<{
-        accountId: string;
-        label: string;
-    }>;
-    completeMuseDeviceImport(enrollmentId: string, ownerScopeRef: string, maxAttempts?: number): Promise<{
-        accountId: string;
-        label: string;
-    }>;
-}
-export interface FacadeEnrollmentOptions {
-    configRef?: string;
-    ownerScope?: string;
-    redirectUri?: string;
-    /** Injection seam for CLI tests; production uses the opaque facade. */
-    facade?: LlmMeshFacade;
-    /** Injection seam that keeps enrollment tests from opening a real browser. */
-    openBrowser?: (url: string) => void;
-}
-export interface FacadeAccountOptions {
-    ownerScope?: string;
-    /** Injection seam for account-administration tests. */
-    facade?: Pick<LlmMeshAdministrativeFacade, "listAccounts" | "removeAccount">;
-}
-export declare function createCliLlmMeshFacade(): LlmMeshAdministrativeFacade;
-/** Stable local owner used both at enrollment and by gateway-authenticated routing. */
-export declare function llmMeshOwnerScopeRef(): string;
-/**
- * Enroll through the sentropic-owned OAuth state machine. H2A never receives
- * an authorization code or a provider token. Account records remain owned by
- * the facade/keyring and are not copied into h2a config.
- */
-export declare function enrollViaFacade(provider: "cloud-code" | "codex" | "muse" | "muse-code", options?: FacadeEnrollmentOptions): Promise<LlmMeshEnrollmentAccount>;
-export declare function listAccountsViaFacade(options?: FacadeAccountOptions): Promise<readonly AccountPublic[]>;
-export declare function removeAccountViaFacade(accountId: string, options?: FacadeAccountOptions): Promise<{
-    accountId: string;
-    removed: true;
-}>;
-export declare function formatLlmMeshAccountList(accounts: readonly AccountPublic[], json: boolean): string;
-export declare function formatLlmMeshAccountError(error: unknown, fallback: "account inventory unavailable" | "account removal failed"): string;
-export declare class LlmMeshManager {
-    GetActiveConfig(dir?: string): LlmMeshConfig | null;
-    SaveConfig(config: LlmMeshConfig, dir?: string): void;
-    StartGateway(config: LlmMeshConfig, opts?: StartGatewayOptions): Promise<StartResult>;
-    StopGateway(dir?: string): {
-        stopped: boolean;
-        pid?: number;
-    };
-    ResolveSession(dir?: string): Promise<Record<string, string> | null>;
-}
-export declare function sentropicDir(): string;
-export declare function llmMeshConfigPath(dir?: string): string;
-export declare function llmMeshPidPath(dir?: string): string;
-export declare function llmMeshTokenPath(dir?: string): string;
-export declare function llmMeshLogPath(config?: LlmMeshConfig, dir?: string): string;
-export declare function readLlmMeshConfig(dir?: string): LlmMeshConfig | null;
-export declare function writeLlmMeshConfig(config: LlmMeshConfig, dir?: string): void;
-export declare function updateLlmMeshRoutingConfig(routing: LlmMeshRoutingConfig | undefined, dir?: string): LlmMeshConfig;
-/** Resolve the embedded gateway runtime entry point relative to this package. */
-export declare function gatewayScriptPath(): string;
-export interface StartResult {
-    pid: number;
-    port: number;
-    gatewayToken: string;
-}
-export interface StartGatewayOptions {
-    readonly verbose?: boolean | undefined;
-    readonly clientSessionId?: string | undefined;
-    /**
-     * Private runtime state root for the PID, session metadata, and gateway log.
-     * The public routing configuration and the Sentropic-owned credential facade
-     * remain at their normal locations, so an isolated probe can use enrolled
-     * accounts without taking over the user's live gateway state.
-     */
-    readonly stateDir?: string | undefined;
-}
-/**
- * A gateway session is an account-affinity boundary, so a local CLI session
- * must never inherit a process-wide static identifier. Callers provide the
- * stable tmux/conversation identity when they have one; standalone gateway
- * management gets a fresh ephemeral identity instead.
- */
-export declare function gatewayClientSessionId(clientSessionId?: string): string;
-/**
- * Start the llm-gateway as a detached background process.
- * Returns the PID, port, and a gw-token for Claude Code.
- */
-export declare function startGateway(config: LlmMeshConfig, opts?: StartGatewayOptions): Promise<StartResult>;
-/** Read the running gateway's PID. Returns null if not running. */
-export declare function readGatewayPid(dir?: string): number | null;
-/**
- * Acquire a fresh in-memory gateway token from the running local gateway.
- * Gateway tokens are intentionally not durable. The runtime metadata file
- * contains only the base URL and PID; every caller reacquires its own bearer.
- */
-export declare function acquireLlmMeshSessionEnv(dir?: string, clientSessionId?: string): Promise<{
-    ANTHROPIC_BASE_URL: string;
-    ANTHROPIC_AUTH_TOKEN: string;
-} | null>;
-/** Stop the running gateway. */
-export declare function stopGateway(dir?: string): {
-    stopped: boolean;
-    pid?: number;
-};
-export {};
-//# sourceMappingURL=llm-mesh.d.ts.map

package/dist/llm-mesh.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"llm-mesh.d.ts","sourceRoot":"","sources":["../src/llm-mesh.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAgBH,OAAO,EAEL,KAAK,2BAA2B,EAChC,KAAK,aAAa,EACnB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,gCAAgC,CAAC;AACpE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,yBAAyB,CAAC;AAEjC,QAAA,MAAM,0BAA0B,8EAItB,CAAC;AAEX;;;;;GAKG;AACH,wBAAgB,kCAAkC,CAChD,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,WAAW,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC,OAAO,0BAA0B,CAAC,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC,CAAC,GACjF,MAAM,IAAI,CAkBZ;AAMD,MAAM,WAAW,aAAa;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAC9B,YAAY,CAAC,EAAE,SAAS,OAAO,EAAE,CAAC;IAClC,gDAAgD;IAChD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,+FAA+F;IAC/F,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,gFAAgF;IAChF,OAAO,CAAC,EAAE,oBAAoB,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,SAAS,EAAE,MAAM,CAAC;IAClB,QAAQ,EAAE,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,CAAC;IACxD,KAAK,EAAE,MAAM,CAAC;CACf;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA4B,SAAQ,aAAa;IAChE,kBAAkB,CAChB,YAAY,EAAE,MAAM,EACpB,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,GACpB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACjD,wBAAwB,CACtB,YAAY,EAAE,MAAM,EACpB,aAAa,EAAE,MAAM,EACrB,WAAW,CAAC,EAAE,MAAM,GACnB,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAClD;AAED,MAAM,WAAW,uBAAuB;IACtC,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,uEAAuE;IACvE,MAAM,CAAC,EAAE,aAAa,CAAC;IACvB,8EAA8E;IAC9E,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,uDAAuD;IACvD,MAAM,CAAC,EAAE,IAAI,CAAC,2BAA2B,EAAE,cAAc,GAAG,eAAe,CAAC,CAAC;CAC9E;AAoBD,wBAAgB,sBAAsB,IAAI,2BAA2B,CAMpE;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,IAAI,MAAM,CAE7C;AAiBD;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,QAAQ,EAAE,YAAY,GAAG,OAAO,GAAG,MAAM,GAAG,WAAW,EACvD,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,wBAAwB,CAAC,CAwGnC;AAED,wBAAsB,qBAAqB,CACzC,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,SAAS,aAAa,EAAE,CAAC,CAKnC;AAED,wBAAsB,sBAAsB,CAC1C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC;IAAE,SAAS,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,IAAI,CAAA;CAAE,CAAC,CAK/C;AAaD,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,SAAS,aAAa,EAAE,EAClC,IAAI,EAAE,OAAO,GACZ,MAAM,CAsBR;AAID,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,OAAO,EACd,QAAQ,EAAE,+BAA+B,GAAG,wBAAwB,GACnE,MAAM,CAGR;AAMD,qBAAa,cAAc;IAClB,eAAe,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI;IAInD,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI;IAI/C,YAAY,CACvB,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,WAAW,CAAC;IAIhB,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE;IAIvD,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC;CAGlF;AAMD,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAED,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAEtD;AAED,wBAAgB,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAEnD;AAED,wBAAgB,gBAAgB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAErD;AAED,wBAAgB,cAAc,CAAC,MAAM,CAAC,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,CAE3E;AAsBD,wBAAgB,iBAAiB,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,aAAa,GAAG,IAAI,CAQpE;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,aAAa,EAAE,GAAG,CAAC,EAAE,MAAM,GAAG,IAAI,CAU5E;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,oBAAoB,GAAG,SAAS,EACzC,GAAG,CAAC,EAAE,MAAM,GACX,aAAa,CAWf;AAMD,iFAAiF;AACjF,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C;AAED,MAAM,WAAW,WAAW;IAC1B,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,YAAY,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9C;;;;;OAKG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CACxC;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,eAAe,CAAC,EAAE,MAAM,GAAG,MAAM,CAGvE;AAED;;;GAGG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,aAAa,EACrB,IAAI,GAAE,mBAAwB,GAC7B,OAAO,CAAC,WAAW,CAAC,CAoEtB;AAgBD,mEAAmE;AACnE,wBAAgB,cAAc,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAW1D;AAaD;;;;GAIG;AACH,wBAAsB,wBAAwB,CAC5C,GAAG,CAAC,EAAE,MAAM,EACZ,eAAe,CAAC,EAAE,MAAM,GACvB,OAAO,CAAC;IACT,kBAAkB,EAAE,MAAM,CAAC;IAC3B,oBAAoB,EAAE,MAAM,CAAC;CAC9B,GAAG,IAAI,CAAC,CAuCR;AAED,gCAAgC;AAChC,wBAAgB,WAAW,CAAC,GAAG,CAAC,EAAE,MAAM,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAA;CAAE,CAc5E"}

package/dist/llm-mesh.js

@@ -1,490 +0,0 @@
-/**
- * llm-mesh — local LLM gateway management for solo-dev mode.
- *
- * Enrollment: `h2a llm-mesh account enroll cloud-code|codex` delegates OAuth and
- *   account persistence entirely to the sentropic-owned facade.
- *
- * Startup:    `h2a llm-mesh start` reads public host config and starts the
- *   embedded gateway runtime as a background process. Callers acquire an
- *   opaque process-local bearer without printing it.
- *
- * Config path: ~/.sentropic/llm-mesh.json  (0600, public metadata only)
- * PID file:    ~/.sentropic/llm-mesh.pid
- * Runtime file: ~/.sentropic/llm-mesh-token.json (0600, base URL + PID only)
- */
-import { chmodSync, existsSync, mkdirSync, readFileSync, renameSync, unlinkSync, writeFileSync, } from "node:fs";
-import { homedir, hostname } from "node:os";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { spawn } from "node:child_process";
-import { randomBytes } from "node:crypto";
-import { createLlmMeshFacade, } from "@sentropic/llm-mesh/facade";
-import { validateLlmMeshRoutingConfig, } from "./llm-routing-config.js";
-const ANTHROPIC_GATEWAY_ENV_KEYS = [
-    "ANTHROPIC_BASE_URL",
-    "ANTHROPIC_AUTH_TOKEN",
-    "ANTHROPIC_API_KEY",
-];
-/**
- * Temporarily replace the H2A gateway lane and return an exact restorer.
- * Direct launches preserve a user-owned ANTHROPIC_API_KEY. Gateway launches
- * hide it from Claude Code because the local gateway authenticates with the
- * opaque AUTH_TOKEN lane instead.
- */
-export function replaceAnthropicGatewayEnvironment(env, replacement) {
-    const previous = new Map(ANTHROPIC_GATEWAY_ENV_KEYS.map((key) => [key, env[key]]));
-    for (const key of ANTHROPIC_GATEWAY_ENV_KEYS) {
-        if (key !== "ANTHROPIC_API_KEY" || replacement !== undefined) {
-            delete env[key];
-        }
-    }
-    for (const [key, value] of Object.entries(replacement ?? {})) {
-        if (value !== undefined)
-            env[key] = value;
-    }
-    return () => {
-        for (const [key, value] of previous) {
-            if (value === undefined)
-                delete env[key];
-            else
-                env[key] = value;
-        }
-    };
-}
-function facadeConfigResolver() {
-    return {
-        async resolveConfig(configRef) {
-            const raw = process.env.H2A_LLM_MESH_CONFIG_JSON;
-            if (!raw)
-                return {};
-            try {
-                const parsed = JSON.parse(raw);
-                const scoped = parsed[configRef];
-                return scoped && typeof scoped === "object" && !Array.isArray(scoped)
-                    ? scoped
-                    : parsed;
-            }
-            catch {
-                return {};
-            }
-        },
-    };
-}
-export function createCliLlmMeshFacade() {
-    return createLlmMeshFacade({
-        configResolver: facadeConfigResolver(),
-        mode: "cli",
-        legacyAccountOwnerScopeRef: llmMeshOwnerScopeRef(),
-    });
-}
-/** Stable local owner used both at enrollment and by gateway-authenticated routing. */
-export function llmMeshOwnerScopeRef() {
-    return process.env.H2A_LLM_MESH_OWNER_SCOPE?.trim() || `cli:${hostname()}`;
-}
-function openEnrollmentBrowser(url) {
-    const command = process.platform === "darwin"
-        ? "open"
-        : process.platform === "win32"
-            ? "cmd"
-            : "xdg-open";
-    const args = process.platform === "win32" ? ["/c", "start", "", url] : [url];
-    try {
-        const child = spawn(command, args, { detached: true, stdio: "ignore" });
-        child.unref();
-    }
-    catch {
-        // The URL is always printed, so a headless CLI can continue manually.
-    }
-}
-/**
- * Enroll through the sentropic-owned OAuth state machine. H2A never receives
- * an authorization code or a provider token. Account records remain owned by
- * the facade/keyring and are not copied into h2a config.
- */
-export async function enrollViaFacade(provider, options = {}) {
-    const facade = options.facade ?? createCliLlmMeshFacade();
-    const ownerScope = options.ownerScope ?? llmMeshOwnerScopeRef();
-    // The installed @sentropic/llm-mesh types predate the muse provider, but
-    // enroll passes the id through opaquely — a muse-capable facade resolves
-    // it, an older one fails with its own unknown-provider error. Cast is
-    // load-bearing until the dep bump, not a lie about the contract.
-    const session = await facade.enroll(provider, {
-        configRef: options.configRef ?? process.env.H2A_LLM_MESH_CONFIG_REF ?? "default",
-        mode: "cli",
-        redirectUri: options.redirectUri ?? "http://127.0.0.1",
-        ownerScope,
-    });
-    if (provider === "muse") {
-        // Muse CLI-store import (BR75): no browser or device round-trip — the
-        // owner act was the muse login itself. The ownerScope binds the enrolling
-        // owner explicitly (never inferred); it doubles as the completion code
-        // the mesh provider carries but does not validate.
-        // Installed mesh types predate the local-import kind (same load-bearing
-        // cast pattern as the enroll call above); runtime shape verified live.
-        const museSession = session;
-        if (museSession.kind !== "local-import") {
-            throw new Error("Muse enrollment did not return a local-import session");
-        }
-        const completeMuseImport = facade.completeMuseImport;
-        if (typeof completeMuseImport !== "function") {
-            throw new Error("Muse enrollment needs facade.completeMuseImport — upgrade @sentropic/llm-mesh " +
-                "to a version with the Muse enrollment provider");
-        }
-        process.stdout.write(`[h2a] llm-mesh: importing Muse CLI credentials from ${museSession.source} for ${ownerScope}\n`);
-        const completed = await completeMuseImport.call(facade, museSession.enrollmentId, ownerScope, ownerScope);
-        return { accountId: completed.accountId, provider, label: completed.label };
-    }
-    if (provider === "muse-code") {
-        // Native Meta device flow (RFC 8628, MuseCodeEnrollmentProvider
-        // mesh-side): print the user code + verification URL, then complete via
-        // the muse-specific device import — NOT the generic pollForCompletion,
-        // which the mesh service hard-wires to the codex provider.
-        const deviceSession = session;
-        if (deviceSession.kind !== "device-code") {
-            throw new Error("Muse device-flow enrollment did not return a device code");
-        }
-        const completeMuseDeviceImport = facade.completeMuseDeviceImport;
-        if (typeof completeMuseDeviceImport !== "function") {
-            throw new Error("Muse device-flow enrollment needs facade.completeMuseDeviceImport — upgrade @sentropic/llm-mesh " +
-                "to a version with the muse-code enrollment provider");
-        }
-        process.stdout.write(`[h2a] llm-mesh: enter code ${deviceSession.userCode} at ${deviceSession.verificationUrl}\n`);
-        const completed = await completeMuseDeviceImport.call(facade, deviceSession.enrollmentId, ownerScope);
-        return { accountId: completed.accountId, provider, label: completed.label };
-    }
-    const completed = provider === "cloud-code"
-        ? await (async () => {
-            if (session.kind !== "authorization-url") {
-                throw new Error("Cloud Code enrollment did not return an authorization URL");
-            }
-            process.stdout.write(`[h2a] llm-mesh: open ${session.url}\n`);
-            (options.openBrowser ?? openEnrollmentBrowser)(session.url);
-            return facade.waitForCallback(session.enrollmentId);
-        })()
-        : await (async () => {
-            if (session.kind !== "device-code") {
-                throw new Error("Codex enrollment did not return a device code");
-            }
-            process.stdout.write(`[h2a] llm-mesh: enter code ${session.userCode} at ${session.verificationUrl}\n`);
-            return facade.pollForCompletion(session.enrollmentId);
-        })();
-    return { accountId: completed.accountId, provider, label: completed.label };
-}
-export async function listAccountsViaFacade(options = {}) {
-    const facade = options.facade ?? createCliLlmMeshFacade();
-    return facade.listAccounts({
-        ownerScope: options.ownerScope ?? llmMeshOwnerScopeRef(),
-    });
-}
-export async function removeAccountViaFacade(accountId, options = {}) {
-    const facade = options.facade ?? createCliLlmMeshFacade();
-    return facade.removeAccount(accountId, {
-        ownerScope: options.ownerScope ?? llmMeshOwnerScopeRef(),
-    });
-}
-function publicAccountProjection(account) {
-    return {
-        accountId: account.accountId,
-        ...(account.accountLabel ? { accountLabel: account.accountLabel } : {}),
-        providerId: account.providerId,
-        status: account.status,
-        createdAt: account.createdAt,
-        updatedAt: account.updatedAt,
-    };
-}
-export function formatLlmMeshAccountList(accounts, json) {
-    const publicAccounts = accounts.map(publicAccountProjection);
-    if (json)
-        return JSON.stringify(publicAccounts, null, 2);
-    if (publicAccounts.length === 0) {
-        return "[h2a] llm-mesh account: no accounts enrolled";
-    }
-    const rows = publicAccounts.map((account) => [
-        account.accountId,
-        account.providerId,
-        account.accountLabel ?? "-",
-        account.status,
-        account.createdAt,
-    ]);
-    const headers = ["ID", "PROVIDER", "LABEL", "STATUS", "ENROLLED"];
-    const widths = headers.map((header, index) => Math.max(header.length, ...rows.map((row) => row[index]?.length ?? 0)));
-    return [headers, ...rows]
-        .map((row) => row.map((value, index) => value.padEnd(widths[index] ?? value.length)).join("  ").trimEnd())
-        .join("\n");
-}
-const SAFE_ACCOUNT_NOT_FOUND = /^Account '[A-Za-z0-9][A-Za-z0-9._:-]{0,127}' not found$/;
-export function formatLlmMeshAccountError(error, fallback) {
-    const message = error instanceof Error ? error.message : String(error);
-    return SAFE_ACCOUNT_NOT_FOUND.test(message) ? message : fallback;
-}
-// ---------------------------------------------------------------------------
-// Capitalized LlmMeshManager API
-// ---------------------------------------------------------------------------
-export class LlmMeshManager {
-    GetActiveConfig(dir) {
-        return readLlmMeshConfig(dir);
-    }
-    SaveConfig(config, dir) {
-        writeLlmMeshConfig(config, dir);
-    }
-    async StartGateway(config, opts = {}) {
-        return startGateway(config, opts);
-    }
-    StopGateway(dir) {
-        return stopGateway(dir);
-    }
-    async ResolveSession(dir) {
-        return acquireLlmMeshSessionEnv(dir);
-    }
-}
-// ---------------------------------------------------------------------------
-// Paths
-// ---------------------------------------------------------------------------
-export function sentropicDir() {
-    return join(homedir(), ".sentropic");
-}
-export function llmMeshConfigPath(dir) {
-    return join(dir ?? sentropicDir(), "llm-mesh.json");
-}
-export function llmMeshPidPath(dir) {
-    return join(dir ?? sentropicDir(), "llm-mesh.pid");
-}
-export function llmMeshTokenPath(dir) {
-    return join(dir ?? sentropicDir(), "llm-mesh-token.json");
-}
-export function llmMeshLogPath(config, dir) {
-    return config?.logFile ?? join(dir ?? sentropicDir(), "llm-mesh.log");
-}
-// ---------------------------------------------------------------------------
-// Config read/write
-// ---------------------------------------------------------------------------
-function readJson(path) {
-    try {
-        return JSON.parse(readFileSync(path, "utf8"));
-    }
-    catch {
-        return null;
-    }
-}
-function writeSecret(path, value) {
-    mkdirSync(dirname(path), { recursive: true });
-    const tmp = `${path}.tmp.${process.pid}`;
-    writeFileSync(tmp, JSON.stringify(value, null, 2) + "\n", { mode: 0o600 });
-    chmodSync(tmp, 0o600);
-    renameSync(tmp, path);
-}
-export function readLlmMeshConfig(dir) {
-    const config = readJson(llmMeshConfigPath(dir));
-    if (!config)
-        return null;
-    const { accounts: _legacyAccounts, meshAccounts: _legacyPublicIds, ...publicConfig } = config;
-    return publicConfig;
-}
-export function writeLlmMeshConfig(config, dir) {
-    // The facade/keyring own credentials. Keep only public enrollment metadata
-    // in llm-mesh.json, including when migrating a pre-facade configuration.
-    const { accounts: _legacyCredentialRecords, meshAccounts: _legacyPublicIds, ...publicConfig } = config;
-    if (publicConfig.routing)
-        validateLlmMeshRoutingConfig(publicConfig.routing);
-    writeSecret(llmMeshConfigPath(dir), publicConfig);
-}
-export function updateLlmMeshRoutingConfig(routing, dir) {
-    const config = readLlmMeshConfig(dir) ?? {};
-    const next = routing
-        ? { ...config, routing: validateLlmMeshRoutingConfig(routing) }
-        : (() => {
-            const copy = { ...config };
-            delete copy.routing;
-            return copy;
-        })();
-    writeLlmMeshConfig(next, dir);
-    return next;
-}
-// ---------------------------------------------------------------------------
-// Gateway process management
-// ---------------------------------------------------------------------------
-/** Resolve the embedded gateway runtime entry point relative to this package. */
-export function gatewayScriptPath() {
-    const thisFile = fileURLToPath(import.meta.url);
-    return join(dirname(thisFile), "llm-gateway-runtime", "index.js");
-}
-/**
- * A gateway session is an account-affinity boundary, so a local CLI session
- * must never inherit a process-wide static identifier. Callers provide the
- * stable tmux/conversation identity when they have one; standalone gateway
- * management gets a fresh ephemeral identity instead.
- */
-export function gatewayClientSessionId(clientSessionId) {
-    const supplied = clientSessionId?.trim();
-    return supplied || `local-${randomBytes(16).toString("hex")}`;
-}
-/**
- * Start the llm-gateway as a detached background process.
- * Returns the PID, port, and a gw-token for Claude Code.
- */
-export async function startGateway(config, opts = {}) {
-    const port = config.port ?? 3002;
-    const stateDir = opts.stateDir;
-    // An explicitly isolated state root must not inherit a live gateway's log.
-    const logFile = stateDir ? llmMeshLogPath(undefined, stateDir) : llmMeshLogPath(config);
-    const gatewayScript = gatewayScriptPath();
-    if (!existsSync(gatewayScript)) {
-        throw new Error(`Gateway script not found: ${gatewayScript}\n` +
-            `Run \`npm run build -w @sentropic/remote-cli\` first.`);
-    }
-    mkdirSync(stateDir ?? sentropicDir(), { recursive: true });
-    const gatewayEnv = {
-        ...process.env,
-        PORT: String(port),
-        H2A_LLM_MESH_OWNER_SCOPE: llmMeshOwnerScopeRef(),
-        ...(config.routing
-            ? { H2A_LLM_MESH_ROUTING_JSON: JSON.stringify(config.routing) }
-            : {}),
-    };
-    // Start detached, piping stdout+stderr to logFile
-    const { openSync } = await import("node:fs");
-    const logFd = openSync(logFile, "a");
-    const child = spawn("node", [gatewayScript], {
-        detached: true,
-        stdio: ["ignore", logFd, logFd],
-        env: gatewayEnv,
-    });
-    child.unref();
-    const pid = child.pid;
-    // Write PID file
-    writeFileSync(llmMeshPidPath(stateDir), String(pid) + "\n");
-    // Wait for the gateway to be ready
-    const baseUrl = `http://localhost:${port}`;
-    await waitForHealth(baseUrl, 10_000);
-    // Acquire a session token
-    const sessionResp = await fetch(`${baseUrl}/v1/session`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({
-            sessionId: gatewayClientSessionId(opts.clientSessionId),
-            clientSessionId: opts.clientSessionId,
-            workspaceId: process.cwd(),
-        }),
-    });
-    if (!sessionResp.ok) {
-        throw new Error(`Session acquisition failed: ${sessionResp.status}`);
-    }
-    const session = (await sessionResp.json());
-    const gatewayToken = session.gatewayToken;
-    if (!gatewayToken)
-        throw new Error("No gatewayToken in session response");
-    // Persist only process metadata. The opaque bearer remains process-local and
-    // is reacquired for each caller affinity.
-    writeSecret(llmMeshTokenPath(stateDir), {
-        baseUrl,
-        pid,
-    });
-    return { pid, port, gatewayToken };
-}
-async function waitForHealth(baseUrl, timeoutMs) {
-    const deadline = Date.now() + timeoutMs;
-    while (Date.now() < deadline) {
-        try {
-            const resp = await fetch(`${baseUrl}/health`);
-            if (resp.ok)
-                return;
-        }
-        catch {
-            // not ready yet
-        }
-        await new Promise((r) => setTimeout(r, 200));
-    }
-    throw new Error(`Gateway did not become healthy within ${timeoutMs}ms`);
-}
-/** Read the running gateway's PID. Returns null if not running. */
-export function readGatewayPid(dir) {
-    try {
-        const raw = readFileSync(llmMeshPidPath(dir), "utf8").trim();
-        const pid = parseInt(raw, 10);
-        if (isNaN(pid))
-            return null;
-        // Check if the process is still alive
-        process.kill(pid, 0);
-        return pid;
-    }
-    catch {
-        return null;
-    }
-}
-function configuredGatewayBaseUrl(dir) {
-    const config = readLlmMeshConfig(dir);
-    if (!config)
-        return null;
-    return `http://localhost:${config.port ?? 3002}`;
-}
-/**
- * Acquire a fresh in-memory gateway token from the running local gateway.
- * Gateway tokens are intentionally not durable. The runtime metadata file
- * contains only the base URL and PID; every caller reacquires its own bearer.
- */
-export async function acquireLlmMeshSessionEnv(dir, clientSessionId) {
-    try {
-        let baseUrl;
-        let pid;
-        try {
-            const raw = readFileSync(llmMeshTokenPath(dir), "utf8");
-            const tokenFile = JSON.parse(raw);
-            baseUrl = tokenFile.baseUrl;
-            pid = tokenFile.pid;
-        }
-        catch {
-            baseUrl = configuredGatewayBaseUrl(dir) ?? undefined;
-            pid = readGatewayPid(dir) ?? undefined;
-        }
-        if (!baseUrl || !pid)
-            return null;
-        try {
-            process.kill(pid, 0);
-        }
-        catch {
-            return null;
-        }
-        const workspaceId = dir ?? process.cwd();
-        const sessionResp = await fetch(`${baseUrl}/v1/session`, {
-            method: "POST",
-            headers: { "content-type": "application/json" },
-            body: JSON.stringify({
-                sessionId: gatewayClientSessionId(clientSessionId),
-                clientSessionId,
-                workspaceId,
-            }),
-        });
-        if (!sessionResp.ok)
-            return null;
-        const session = (await sessionResp.json());
-        if (!session.gatewayToken)
-            return null;
-        return {
-            ANTHROPIC_BASE_URL: baseUrl,
-            ANTHROPIC_AUTH_TOKEN: session.gatewayToken,
-        };
-    }
-    catch {
-        return null;
-    }
-}
-/** Stop the running gateway. */
-export function stopGateway(dir) {
-    const pid = readGatewayPid(dir);
-    if (!pid)
-        return { stopped: false };
-    try {
-        process.kill(pid, "SIGTERM");
-    }
-    catch {
-        // already dead
-    }
-    try {
-        unlinkSync(llmMeshPidPath(dir));
-    }
-    catch {
-        // best-effort cleanup
-    }
-    return { stopped: true, pid };
-}
-//# sourceMappingURL=llm-mesh.js.map