@sentropic/llm-mesh 0.12.0 → 0.13.0

package/dist/node/keyring/macos-keychain-keyring.js

@@ -0,0 +1,17 @@
+export class MacOSKeychainKeyring {
+    memoryStore = new Map();
+    serviceName;
+    constructor(serviceName = 'sentropic-llm-mesh') {
+        this.serviceName = serviceName;
+    }
+    async getSecret(key) {
+        return this.memoryStore.get(`${this.serviceName}:${key}`) ?? null;
+    }
+    async setSecret(key, secret) {
+        this.memoryStore.set(`${this.serviceName}:${key}`, secret);
+    }
+    async deleteSecret(key) {
+        this.memoryStore.delete(`${this.serviceName}:${key}`);
+    }
+}
+//# sourceMappingURL=macos-keychain-keyring.js.map

package/dist/node/keyring/macos-keychain-keyring.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"macos-keychain-keyring.js","sourceRoot":"","sources":["../../../src/node/keyring/macos-keychain-keyring.ts"],"names":[],"mappings":"AAEA,MAAM,OAAO,oBAAoB;IACd,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,WAAW,CAAS;IAErC,YAAY,WAAW,GAAG,oBAAoB;QAC5C,IAAI,CAAC,WAAW,GAAG,WAAW,CAAC;IACjC,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW;QACzB,OAAO,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC;IACpE,CAAC;IAED,KAAK,CAAC,SAAS,CAAC,GAAW,EAAE,MAAc;QACzC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,EAAE,EAAE,MAAM,CAAC,CAAC;IAC7D,CAAC;IAED,KAAK,CAAC,YAAY,CAAC,GAAW;QAC5B,IAAI,CAAC,WAAW,CAAC,MAAM,CAAC,GAAG,IAAI,CAAC,WAAW,IAAI,GAAG,EAAE,CAAC,CAAC;IACxD,CAAC;CACF"}

package/dist/service/facade.d.ts

@@ -0,0 +1,52 @@
+import type { AccountTransportAcquireInput, AccountTransportAcquisition } from '../account-transports.js';
+import type { AccountTransportProviderId } from '../auth.js';
+import type { EnrollmentSession, StartEnrollmentInput } from '../enrollment/contracts.js';
+export interface ProviderRequest {
+    modelId: string;
+    contents: unknown[];
+    generationConfig?: unknown;
+}
+export type ProviderEvent = {
+    kind: 'content';
+    delta: string;
+} | {
+    kind: 'done';
+    usage: unknown;
+} | {
+    kind: 'error';
+    code: string;
+    message: string;
+};
+export interface ProviderAdapter {
+    execute(acquisition: AccountTransportAcquisition, request: ProviderRequest, signal: AbortSignal): AsyncIterable<ProviderEvent>;
+}
+export interface KeyringAdapter {
+    getSecret(key: string): Promise<string | null>;
+    setSecret(key: string, secret: string): Promise<void>;
+    deleteSecret(key: string): Promise<void>;
+}
+export interface ConfigResolver {
+    resolveConfig(configRef: string): Promise<Record<string, unknown>>;
+}
+export interface FacadeOptions {
+    configResolver: ConfigResolver;
+    keyring?: KeyringAdapter;
+    mode: 'cli' | 'portal';
+}
+export interface LlmMeshFacade {
+    enroll(providerId: AccountTransportProviderId, input: StartEnrollmentInput): Promise<EnrollmentSession>;
+    waitForCallback(enrollmentId: string): Promise<{
+        accountId: string;
+        label: string;
+    }>;
+    pollForCompletion(enrollmentId: string): Promise<{
+        accountId: string;
+        label: string;
+    }>;
+    cancel(enrollmentId: string): Promise<void>;
+    acquire(input: AccountTransportAcquireInput): Promise<AccountTransportAcquisition>;
+    release(acquisition: AccountTransportAcquisition): Promise<void>;
+    getAdapter(providerId: AccountTransportProviderId): ProviderAdapter;
+}
+export declare function createLlmMeshFacade(options: FacadeOptions): LlmMeshFacade;
+//# sourceMappingURL=facade.d.ts.map

package/dist/service/facade.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"facade.d.ts","sourceRoot":"","sources":["../../src/service/facade.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,4BAA4B,EAC5B,2BAA2B,EAC5B,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,YAAY,CAAC;AAC7D,OAAO,KAAK,EAEV,iBAAiB,EACjB,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AAQpC,MAAM,WAAW,eAAe;IAC9B,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,EAAE,CAAC;IACpB,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,MAAM,aAAa,GACrB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAClC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAChC;IAAE,IAAI,EAAE,OAAO,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAAC;AAErD,MAAM,WAAW,eAAe;IAC9B,OAAO,CACL,WAAW,EAAE,2BAA2B,EACxC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,WAAW,GAClB,aAAa,CAAC,aAAa,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,cAAc;IAC7B,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAAC;IAC/C,SAAS,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACtD,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC1C;AAED,MAAM,WAAW,cAAc;IAC7B,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;CACpE;AAED,MAAM,WAAW,aAAa;IAC5B,cAAc,EAAE,cAAc,CAAC;IAC/B,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAE5B,MAAM,CACJ,UAAU,EAAE,0BAA0B,EACtC,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC9B,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACrF,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IACvF,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAG5C,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,2BAA2B,CAAC,CAAC;IACnF,OAAO,CAAC,WAAW,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAGjE,UAAU,CAAC,UAAU,EAAE,0BAA0B,GAAG,eAAe,CAAC;CACrE;AAED,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,aAAa,GAAG,aAAa,CA+CzE"}

package/dist/service/facade.js

@@ -0,0 +1,51 @@
+import { ClaudeCodeEnrollmentProvider } from '../enrollment/claude-code.js';
+import { CloudCodeEnrollmentProvider } from '../enrollment/cloud-code.js';
+import { CodexEnrollmentProvider } from '../enrollment/codex.js';
+import { InMemoryKeyring } from '../node/keyring/in-memory-keyring.js';
+import { CloudCodeProviderAdapter } from '../transport/cloud-code-transport.js';
+import { LocalAccountTransportService } from './local-account-transport-service.js';
+export function createLlmMeshFacade(options) {
+    if (!options) {
+        throw new Error('LlmMeshFacade: options is required');
+    }
+    if (!options.configResolver) {
+        throw new Error('configResolver is required');
+    }
+    const keyring = options.keyring ?? new InMemoryKeyring();
+    const providers = new Map([
+        [
+            'cloud-code',
+            new CloudCodeEnrollmentProvider({ configResolver: options.configResolver }),
+        ],
+        ['codex', new CodexEnrollmentProvider({ configResolver: options.configResolver })],
+        ['claude-code', new ClaudeCodeEnrollmentProvider()],
+    ]);
+    const service = new LocalAccountTransportService(keyring, providers, options.configResolver);
+    return {
+        async enroll(providerId, input) {
+            return service.enroll(providerId, input);
+        },
+        async waitForCallback(enrollmentId) {
+            return service.waitForCallback(enrollmentId);
+        },
+        async pollForCompletion(enrollmentId) {
+            return service.pollForCompletion(enrollmentId);
+        },
+        async cancel(enrollmentId) {
+            return service.cancel(enrollmentId);
+        },
+        async acquire(input) {
+            return service.acquire(input);
+        },
+        async release(acquisition) {
+            return service.release(acquisition);
+        },
+        getAdapter(providerId) {
+            if (providerId === 'cloud-code') {
+                return new CloudCodeProviderAdapter();
+            }
+            throw new Error(`Adapter for ${providerId} not available locally`);
+        },
+    };
+}
+//# sourceMappingURL=facade.js.map

package/dist/service/facade.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"facade.js","sourceRoot":"","sources":["../../src/service/facade.ts"],"names":[],"mappings":"AAUA,OAAO,EAAE,4BAA4B,EAAE,MAAM,8BAA8B,CAAC;AAC5E,OAAO,EAAE,2BAA2B,EAAE,MAAM,6BAA6B,CAAC;AAC1E,OAAO,EAAE,uBAAuB,EAAE,MAAM,wBAAwB,CAAC;AACjE,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,wBAAwB,EAAE,MAAM,sCAAsC,CAAC;AAChF,OAAO,EAAE,4BAA4B,EAAE,MAAM,sCAAsC,CAAC;AAuDpF,MAAM,UAAU,mBAAmB,CAAC,OAAsB;IACxD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC;IACxD,CAAC;IAED,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CAAC,4BAA4B,CAAC,CAAC;IAChD,CAAC;IAED,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,IAAI,eAAe,EAAE,CAAC;IACzD,MAAM,SAAS,GAAG,IAAI,GAAG,CAA6B;QACpD;YACE,YAAY;YACZ,IAAI,2BAA2B,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC;SAC5E;QACD,CAAC,OAAO,EAAE,IAAI,uBAAuB,CAAC,EAAE,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;QAClF,CAAC,aAAa,EAAE,IAAI,4BAA4B,EAAE,CAAC;KACpD,CAAC,CAAC;IAEH,MAAM,OAAO,GAAG,IAAI,4BAA4B,CAAC,OAAO,EAAE,SAAS,EAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAE7F,OAAO;QACL,KAAK,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK;YAC5B,OAAO,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QAC3C,CAAC;QACD,KAAK,CAAC,eAAe,CAAC,YAAY;YAChC,OAAO,OAAO,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAC/C,CAAC;QACD,KAAK,CAAC,iBAAiB,CAAC,YAAY;YAClC,OAAO,OAAO,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACjD,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,YAAY;YACvB,OAAO,OAAO,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;QACtC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,KAAK;YACjB,OAAO,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;QACD,KAAK,CAAC,OAAO,CAAC,WAAW;YACvB,OAAO,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QACtC,CAAC;QACD,UAAU,CAAC,UAAU;YACnB,IAAI,UAAU,KAAK,YAAY,EAAE,CAAC;gBAChC,OAAO,IAAI,wBAAwB,EAAE,CAAC;YACxC,CAAC;YACD,MAAM,IAAI,KAAK,CAAC,eAAe,UAAU,wBAAwB,CAAC,CAAC;QACrE,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/service/local-account-transport-service.d.ts

@@ -0,0 +1,31 @@
+import { type AccountTransportAccount, type AccountTransportAcquireInput, type AccountTransportAcquisition } from '../account-transports.js';
+import type { EnrollmentProvider, EnrollmentSession, StartEnrollmentInput } from '../enrollment/contracts.js';
+import type { ConfigResolver, KeyringAdapter } from './facade.js';
+export declare class LocalAccountTransportService {
+    private readonly keyring;
+    private readonly providers;
+    private readonly configResolver;
+    private readonly coordinator;
+    private readonly accountsMap;
+    private readonly credentialVersions;
+    private readonly refreshInFlight;
+    constructor(keyring: KeyringAdapter, providers: Map<string, EnrollmentProvider>, configResolver: ConfigResolver);
+    enroll(providerId: string, input: StartEnrollmentInput): Promise<EnrollmentSession>;
+    waitForCallback(enrollmentId: string): Promise<{
+        accountId: string;
+        label: string;
+    }>;
+    pollForCompletion(enrollmentId: string): Promise<{
+        accountId: string;
+        label: string;
+    }>;
+    cancel(enrollmentId: string): Promise<void>;
+    registerAccount(account: AccountTransportAccount, configVersion?: string): void;
+    acquire(input: AccountTransportAcquireInput): Promise<AccountTransportAcquisition>;
+    release(_acquisition: AccountTransportAcquisition): Promise<void>;
+    private completeEnrollment;
+    private refreshToken;
+    private persistCredential;
+    private markReauthRequired;
+}
+//# sourceMappingURL=local-account-transport-service.d.ts.map

package/dist/service/local-account-transport-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-account-transport-service.d.ts","sourceRoot":"","sources":["../../src/service/local-account-transport-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,uBAAuB,EAC5B,KAAK,4BAA4B,EACjC,KAAK,2BAA2B,EACjC,MAAM,0BAA0B,CAAC;AAClC,OAAO,KAAK,EAIV,kBAAkB,EAClB,iBAAiB,EAGjB,oBAAoB,EACrB,MAAM,4BAA4B,CAAC;AACpC,OAAO,KAAK,EAAE,cAAc,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAElE,qBAAa,4BAA4B;IAOrC,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,cAAc;IARjC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAsC;IAClE,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA8C;IAC1E,OAAO,CAAC,QAAQ,CAAC,kBAAkB,CAA6B;IAChE,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkD;gBAG/D,OAAO,EAAE,cAAc,EACvB,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,EAC1C,cAAc,EAAE,cAAc;IAM3C,MAAM,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC;IAQnF,eAAe,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IASpF,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC;IAsCtF,MAAM,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASjD,eAAe,CAAC,OAAO,EAAE,uBAAuB,EAAE,aAAa,SAAW,GAAG,IAAI;IAO3E,OAAO,CAAC,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAAC,2BAA2B,CAAC;IA0ElF,OAAO,CAAC,YAAY,EAAE,2BAA2B,GAAG,OAAO,CAAC,IAAI,CAAC;YAMzD,kBAAkB;YAIlB,YAAY;YA0BZ,iBAAiB;YAQjB,kBAAkB;CAMjC"}

package/dist/service/local-account-transport-service.js

@@ -0,0 +1,181 @@
+import { AccountTransportAcquireError, InMemoryAccountTransportCoordinator, } from '../account-transports.js';
+export class LocalAccountTransportService {
+    keyring;
+    providers;
+    configResolver;
+    coordinator;
+    accountsMap = new Map();
+    credentialVersions = new Map();
+    refreshInFlight = new Map();
+    constructor(keyring, providers, configResolver) {
+        this.keyring = keyring;
+        this.providers = providers;
+        this.configResolver = configResolver;
+        this.coordinator = new InMemoryAccountTransportCoordinator();
+    }
+    // ── Enrollment (called via facade by h2a CLI) ──────────────────────────
+    async enroll(providerId, input) {
+        const provider = this.providers.get(providerId);
+        if (!provider) {
+            throw new Error(`Enrollment provider '${providerId}' not registered`);
+        }
+        return provider.start(input);
+    }
+    async waitForCallback(enrollmentId) {
+        const provider = this.providers.get('cloud-code');
+        if (!provider || !('waitForCallback' in provider) || typeof provider.waitForCallback !== 'function') {
+            throw new Error("No enrollment provider with 'waitForCallback' registered");
+        }
+        const res = await provider.waitForCallback(enrollmentId);
+        return { accountId: res.accountId, label: res.label };
+    }
+    async pollForCompletion(enrollmentId) {
+        const provider = this.providers.get('codex');
+        if (!provider || !('pollForCompletion' in provider) || typeof provider.pollForCompletion !== 'function') {
+            throw new Error("No enrollment provider with 'pollForCompletion' registered");
+        }
+        const res = await provider.pollForCompletion(enrollmentId);
+        if (res.credential) {
+            // P0-4: Persist credentials obtained via device flow poll into keyring/accounts
+            this.registerAccount({
+                accountId: res.accountId,
+                targetProviderId: 'codex',
+                transportProviderId: 'codex',
+                accessToken: res.credential.accessToken,
+                refreshToken: res.credential.refreshToken,
+                expiresAt: res.credential.expiresAt,
+                status: 'active',
+            });
+            await this.persistCredential({
+                accountId: res.accountId,
+                accountLabel: res.label,
+                providerId: 'codex',
+                status: 'active',
+                createdAt: new Date().toISOString(),
+                updatedAt: new Date().toISOString(),
+            }, {
+                accountId: res.accountId,
+                accessToken: res.credential.accessToken,
+                refreshToken: res.credential.refreshToken,
+                expiresAt: res.credential.expiresAt,
+                authClientConfigVersion: res.credential.authClientConfigVersion,
+            });
+        }
+        return { accountId: res.accountId, label: res.label };
+    }
+    async cancel(enrollmentId) {
+        for (const provider of this.providers.values()) {
+            if (provider.cancel) {
+                await provider.cancel(enrollmentId);
+            }
+        }
+    }
+    // ── Account Registration for Coordinator ──────────────────────────────
+    registerAccount(account, configVersion = 'v1.0.0') {
+        this.accountsMap.set(account.accountId, account);
+        this.credentialVersions.set(account.accountId, configVersion);
+        this.coordinator.addAccount(account);
+    }
+    // ── Runtime (called via facade by h2a gateway) ─────────────────────────
+    async acquire(input) {
+        // Attempt coordinator acquisition
+        let acquisition;
+        try {
+            acquisition = await this.coordinator.acquire(input);
+        }
+        catch (err) {
+            if (err instanceof AccountTransportAcquireError) {
+                throw err;
+            }
+            throw new AccountTransportAcquireError(`Acquire failed for ${input.transportProviderId}`, 'no_active_account');
+        }
+        const account = this.accountsMap.get(acquisition.material.accountId ?? '');
+        const nowMs = typeof input.now === 'number' ? input.now : Date.now();
+        // Check if access token is expired
+        if (account && account.expiresAt) {
+            const expiresAtMs = new Date(account.expiresAt).getTime();
+            if (expiresAtMs <= nowMs) {
+                try {
+                    const version = this.credentialVersions.get(account.accountId) ?? 'v1.0.0';
+                    const refreshed = await this.refreshToken({
+                        accountId: account.accountId,
+                        refreshToken: account.refreshToken ?? undefined,
+                        credentialVersion: version,
+                    });
+                    // Atomic persistence of updated credentials
+                    account.accessToken = refreshed.accessToken;
+                    if (refreshed.refreshToken) {
+                        account.refreshToken = refreshed.refreshToken;
+                    }
+                    account.expiresAt = refreshed.expiresAt;
+                    await this.persistCredential({
+                        accountId: account.accountId,
+                        accountLabel: account.accountLabel ?? undefined,
+                        providerId: account.transportProviderId,
+                        status: 'active',
+                        createdAt: new Date().toISOString(),
+                        updatedAt: new Date().toISOString(),
+                    }, {
+                        accountId: account.accountId,
+                        accessToken: refreshed.accessToken,
+                        refreshToken: refreshed.refreshToken,
+                        expiresAt: refreshed.expiresAt,
+                        authClientConfigVersion: refreshed.authClientConfigVersion,
+                    });
+                    // Update material with refreshed token
+                    acquisition.material.accessToken = refreshed.accessToken;
+                    if (refreshed.refreshToken) {
+                        acquisition.material.refreshToken = refreshed.refreshToken;
+                    }
+                    acquisition.material.expiresAt = refreshed.expiresAt;
+                }
+                catch (refreshErr) {
+                    await this.markReauthRequired(account.accountId);
+                    throw new AccountTransportAcquireError(`Account ${account.accountId} token refresh failed: ${refreshErr instanceof Error ? refreshErr.message : String(refreshErr)}`, 'no_active_account');
+                }
+            }
+        }
+        return acquisition;
+    }
+    async release(_acquisition) {
+        // Q2B abort -> release reservation without recording an outcome / zero account impact
+        return;
+    }
+    // ── Internal — never exposed to h2a ───────────────────────────────────────
+    async completeEnrollment(_input) {
+        // Handled internally by EnrollmentProvider.complete()
+    }
+    async refreshToken(input) {
+        // P0-5: Single-flight refresh map to prevent parallel refresh races
+        if (this.refreshInFlight.has(input.accountId)) {
+            return this.refreshInFlight.get(input.accountId);
+        }
+        const refreshPromise = (async () => {
+            try {
+                const account = this.accountsMap.get(input.accountId);
+                const providerId = account?.transportProviderId ?? 'cloud-code';
+                const provider = this.providers.get(providerId);
+                if (!provider) {
+                    throw new Error(`No provider registered for refresh: ${providerId}`);
+                }
+                return await provider.refresh(input);
+            }
+            finally {
+                this.refreshInFlight.delete(input.accountId);
+            }
+        })();
+        this.refreshInFlight.set(input.accountId, refreshPromise);
+        return refreshPromise;
+    }
+    async persistCredential(pub, env) {
+        await this.keyring.setSecret(`sentropic-llm-mesh:${pub.accountId}:public`, JSON.stringify(pub));
+        await this.keyring.setSecret(`sentropic-llm-mesh:${pub.accountId}:envelope`, JSON.stringify(env));
+    }
+    async markReauthRequired(accountId) {
+        const account = this.accountsMap.get(accountId);
+        if (account) {
+            account.status = 'reauth_required';
+        }
+    }
+}
+//# sourceMappingURL=local-account-transport-service.js.map

package/dist/service/local-account-transport-service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"local-account-transport-service.js","sourceRoot":"","sources":["../../src/service/local-account-transport-service.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,4BAA4B,EAC5B,mCAAmC,GAIpC,MAAM,0BAA0B,CAAC;AAalC,MAAM,OAAO,4BAA4B;IAOpB;IACA;IACA;IARF,WAAW,CAAsC;IACjD,WAAW,GAAG,IAAI,GAAG,EAAmC,CAAC;IACzD,kBAAkB,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,eAAe,GAAG,IAAI,GAAG,EAAuC,CAAC;IAElF,YACmB,OAAuB,EACvB,SAA0C,EAC1C,cAA8B;QAF9B,YAAO,GAAP,OAAO,CAAgB;QACvB,cAAS,GAAT,SAAS,CAAiC;QAC1C,mBAAc,GAAd,cAAc,CAAgB;QAE/C,IAAI,CAAC,WAAW,GAAG,IAAI,mCAAmC,EAAE,CAAC;IAC/D,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,MAAM,CAAC,UAAkB,EAAE,KAA2B;QAC1D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAChD,IAAI,CAAC,QAAQ,EAAE,CAAC;YACd,MAAM,IAAI,KAAK,CAAC,wBAAwB,UAAU,kBAAkB,CAAC,CAAC;QACxE,CAAC;QACD,OAAO,QAAQ,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/B,CAAC;IAED,KAAK,CAAC,eAAe,CAAC,YAAoB;QACxC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;QAClD,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,iBAAiB,IAAI,QAAQ,CAAC,IAAI,OAAQ,QAAgB,CAAC,eAAe,KAAK,UAAU,EAAE,CAAC;YAC7G,MAAM,IAAI,KAAK,CAAC,0DAA0D,CAAC,CAAC;QAC9E,CAAC;QACD,MAAM,GAAG,GAAG,MAAO,QAAgB,CAAC,eAAe,CAAC,YAAY,CAAC,CAAC;QAClE,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,iBAAiB,CAAC,YAAoB;QAC1C,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,CAAC,QAAQ,IAAI,CAAC,CAAC,mBAAmB,IAAI,QAAQ,CAAC,IAAI,OAAQ,QAAgB,CAAC,iBAAiB,KAAK,UAAU,EAAE,CAAC;YACjH,MAAM,IAAI,KAAK,CAAC,4DAA4D,CAAC,CAAC;QAChF,CAAC;QACD,MAAM,GAAG,GAAG,MAAO,QAAgB,CAAC,iBAAiB,CAAC,YAAY,CAAC,CAAC;QACpE,IAAI,GAAG,CAAC,UAAU,EAAE,CAAC;YACnB,gFAAgF;YAChF,IAAI,CAAC,eAAe,CAAC;gBACnB,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,gBAAgB,EAAE,OAAO;gBACzB,mBAAmB,EAAE,OAAO;gBAC5B,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW;gBACvC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,YAAY;gBACzC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,SAAS;gBACnC,MAAM,EAAE,QAAQ;aACjB,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,iBAAiB,CAC1B;gBACE,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,YAAY,EAAE,GAAG,CAAC,KAAK;gBACvB,UAAU,EAAE,OAAO;gBACnB,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;aACpC,EACD;gBACE,SAAS,EAAE,GAAG,CAAC,SAAS;gBACxB,WAAW,EAAE,GAAG,CAAC,UAAU,CAAC,WAAW;gBACvC,YAAY,EAAE,GAAG,CAAC,UAAU,CAAC,YAAY;gBACzC,SAAS,EAAE,GAAG,CAAC,UAAU,CAAC,SAAS;gBACnC,uBAAuB,EAAE,GAAG,CAAC,UAAU,CAAC,uBAAuB;aAChE,CACF,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC;IACxD,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,YAAoB;QAC/B,KAAK,MAAM,QAAQ,IAAI,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,EAAE,CAAC;YAC/C,IAAI,QAAQ,CAAC,MAAM,EAAE,CAAC;gBACpB,MAAM,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;YACtC,CAAC;QACH,CAAC;IACH,CAAC;IAED,yEAAyE;IACzE,eAAe,CAAC,OAAgC,EAAE,aAAa,GAAG,QAAQ;QACxE,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;QACjD,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,aAAa,CAAC,CAAC;QAC9D,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACvC,CAAC;IAED,0EAA0E;IAC1E,KAAK,CAAC,OAAO,CAAC,KAAmC;QAC/C,kCAAkC;QAClC,IAAI,WAAwC,CAAC;QAC7C,IAAI,CAAC;YACH,WAAW,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,GAAG,YAAY,4BAA4B,EAAE,CAAC;gBAChD,MAAM,GAAG,CAAC;YACZ,CAAC;YACD,MAAM,IAAI,4BAA4B,CACpC,sBAAsB,KAAK,CAAC,mBAAmB,EAAE,EACjD,mBAAmB,CACpB,CAAC;QACJ,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,WAAW,CAAC,QAAQ,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,OAAO,KAAK,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;QAErE,mCAAmC;QACnC,IAAI,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAC;YACjC,MAAM,WAAW,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,OAAO,EAAE,CAAC;YAC1D,IAAI,WAAW,IAAI,KAAK,EAAE,CAAC;gBACzB,IAAI,CAAC;oBACH,MAAM,OAAO,GAAG,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC;oBAC3E,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC;wBACxC,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;wBAC/C,iBAAiB,EAAE,OAAO;qBAC3B,CAAC,CAAC;oBAEH,4CAA4C;oBAC5C,OAAO,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;oBAC5C,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;wBAC3B,OAAO,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;oBAChD,CAAC;oBACD,OAAO,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;oBAExC,MAAM,IAAI,CAAC,iBAAiB,CAC1B;wBACE,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,SAAS;wBAC/C,UAAU,EAAE,OAAO,CAAC,mBAAmB;wBACvC,MAAM,EAAE,QAAQ;wBAChB,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;wBACnC,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;qBACpC,EACD;wBACE,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,WAAW,EAAE,SAAS,CAAC,WAAW;wBAClC,YAAY,EAAE,SAAS,CAAC,YAAY;wBACpC,SAAS,EAAE,SAAS,CAAC,SAAS;wBAC9B,uBAAuB,EAAE,SAAS,CAAC,uBAAuB;qBAC3D,CACF,CAAC;oBAEF,uCAAuC;oBACvC,WAAW,CAAC,QAAQ,CAAC,WAAW,GAAG,SAAS,CAAC,WAAW,CAAC;oBACzD,IAAI,SAAS,CAAC,YAAY,EAAE,CAAC;wBAC3B,WAAW,CAAC,QAAQ,CAAC,YAAY,GAAG,SAAS,CAAC,YAAY,CAAC;oBAC7D,CAAC;oBACD,WAAW,CAAC,QAAQ,CAAC,SAAS,GAAG,SAAS,CAAC,SAAS,CAAC;gBACvD,CAAC;gBAAC,OAAO,UAAU,EAAE,CAAC;oBACpB,MAAM,IAAI,CAAC,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;oBACjD,MAAM,IAAI,4BAA4B,CACpC,WAAW,OAAO,CAAC,SAAS,0BAA0B,UAAU,YAAY,KAAK,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,EAAE,EAC7H,mBAAmB,CACpB,CAAC;gBACJ,CAAC;YACH,CAAC;QACH,CAAC;QAED,OAAO,WAAW,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,YAAyC;QACrD,sFAAsF;QACtF,OAAO;IACT,CAAC;IAED,6EAA6E;IACrE,KAAK,CAAC,kBAAkB,CAAC,MAA+B;QAC9D,sDAAsD;IACxD,CAAC;IAEO,KAAK,CAAC,YAAY,CAAC,KAAmB;QAC5C,oEAAoE;QACpE,IAAI,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;YAC9C,OAAO,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAE,CAAC;QACpD,CAAC;QAED,MAAM,cAAc,GAAG,CAAC,KAAK,IAAI,EAAE;YACjC,IAAI,CAAC;gBACH,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;gBACtD,MAAM,UAAU,GAAG,OAAO,EAAE,mBAAmB,IAAI,YAAY,CAAC;gBAChE,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;gBAEhD,IAAI,CAAC,QAAQ,EAAE,CAAC;oBACd,MAAM,IAAI,KAAK,CAAC,uCAAuC,UAAU,EAAE,CAAC,CAAC;gBACvE,CAAC;gBAED,OAAO,MAAM,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACvC,CAAC;oBAAS,CAAC;gBACT,IAAI,CAAC,eAAe,CAAC,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;YAC/C,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;QAEL,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,KAAK,CAAC,SAAS,EAAE,cAAc,CAAC,CAAC;QAC1D,OAAO,cAAc,CAAC;IACxB,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,GAAkB,EAClB,GAAuB;QAEvB,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,sBAAsB,GAAG,CAAC,SAAS,SAAS,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;QAChG,MAAM,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,sBAAsB,GAAG,CAAC,SAAS,WAAW,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC;IACpG,CAAC;IAEO,KAAK,CAAC,kBAAkB,CAAC,SAAiB;QAChD,MAAM,OAAO,GAAG,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAChD,IAAI,OAAO,EAAE,CAAC;YACZ,OAAO,CAAC,MAAM,GAAG,iBAAiB,CAAC;QACrC,CAAC;IACH,CAAC;CACF"}

package/dist/transport/cloud-code-transport.d.ts

@@ -0,0 +1,26 @@
+import type { AccountTransportAcquisition } from '../account-transports.js';
+import type { ProviderAdapter, ProviderEvent, ProviderRequest } from '../service/facade.js';
+export declare const CLOUD_CODE_STREAM_URL = "https://daily-cloudcode-pa.googleapis.com/v1internal:streamGenerateContent?alt=sse";
+export declare const CLOUD_CODE_USER_AGENT = "antigravity/cli/1.1.10 (aidev_client; os_type=linux; arch=amd64; auth_method=consumer)";
+export interface CloudCodeEnvelope {
+    project: string;
+    requestId: string;
+    model: string;
+    userAgent: string;
+    request: {
+        contents: unknown[];
+        generationConfig?: unknown;
+    };
+}
+export declare function buildCloudCodeRequest(acquisition: AccountTransportAcquisition, request: ProviderRequest): {
+    url: string;
+    headers: Record<string, string>;
+    body: CloudCodeEnvelope;
+};
+export declare function parseCloudCodeSSE(stream: ReadableStream<Uint8Array>): AsyncIterable<ProviderEvent>;
+export declare class CloudCodeProviderAdapter implements ProviderAdapter {
+    private readonly fetchFn;
+    constructor(fetchFn?: typeof fetch);
+    execute(acquisition: AccountTransportAcquisition, request: ProviderRequest, signal: AbortSignal): AsyncIterable<ProviderEvent>;
+}
+//# sourceMappingURL=cloud-code-transport.d.ts.map

package/dist/transport/cloud-code-transport.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-code-transport.d.ts","sourceRoot":"","sources":["../../src/transport/cloud-code-transport.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,0BAA0B,CAAC;AAC5E,OAAO,KAAK,EACV,eAAe,EACf,aAAa,EACb,eAAe,EAChB,MAAM,sBAAsB,CAAC;AAE9B,eAAO,MAAM,qBAAqB,uFACoD,CAAC;AACvF,eAAO,MAAM,qBAAqB,2FACwD,CAAC;AAE3F,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE;QACP,QAAQ,EAAE,OAAO,EAAE,CAAC;QACpB,gBAAgB,CAAC,EAAE,OAAO,CAAC;KAC5B,CAAC;CACH;AAED,wBAAgB,qBAAqB,CACnC,WAAW,EAAE,2BAA2B,EACxC,OAAO,EAAE,eAAe,GACvB;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAAC,IAAI,EAAE,iBAAiB,CAAA;CAAE,CAsC3E;AAED,wBAAuB,iBAAiB,CACtC,MAAM,EAAE,cAAc,CAAC,UAAU,CAAC,GACjC,aAAa,CAAC,aAAa,CAAC,CA+D9B;AAED,qBAAa,wBAAyB,YAAW,eAAe;IAClD,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,GAAE,OAAO,KAAa;IAEnD,OAAO,CACZ,WAAW,EAAE,2BAA2B,EACxC,OAAO,EAAE,eAAe,EACxB,MAAM,EAAE,WAAW,GAClB,aAAa,CAAC,aAAa,CAAC;CA6HhC"}

package/dist/transport/cloud-code-transport.js

@@ -0,0 +1,213 @@
+import { randomUUID } from 'crypto';
+export const CLOUD_CODE_STREAM_URL = 'https://daily-cloudcode-pa.googleapis.com/v1internal:streamGenerateContent?alt=sse';
+export const CLOUD_CODE_USER_AGENT = 'antigravity/cli/1.1.10 (aidev_client; os_type=linux; arch=amd64; auth_method=consumer)';
+export function buildCloudCodeRequest(acquisition, request) {
+    const project = acquisition.runtime.metadata?.cloudaicompanionProject ??
+        acquisition.material.metadata?.cloudaicompanionProject;
+    if (!project || typeof project !== 'string' || project.trim().length === 0) {
+        throw new Error('Cloud Code transport error: cloudaicompanionProject is required in acquisition runtime metadata');
+    }
+    // P1-2: Always generate a valid UUID v4 for envelope requestId
+    const requestId = randomUUID();
+    const headers = {
+        Authorization: `Bearer ${acquisition.material.accessToken}`,
+        'User-Agent': CLOUD_CODE_USER_AGENT,
+        'Content-Type': 'application/json',
+        Accept: 'text/event-stream',
+        ...(acquisition.runtime.headers ?? {}),
+    };
+    const body = {
+        project: project.trim(),
+        requestId,
+        model: request.modelId,
+        userAgent: 'antigravity',
+        request: {
+            contents: request.contents,
+            ...(request.generationConfig ? { generationConfig: request.generationConfig } : {}),
+        },
+    };
+    return {
+        url: CLOUD_CODE_STREAM_URL,
+        headers,
+        body,
+    };
+}
+export async function* parseCloudCodeSSE(stream) {
+    const reader = stream.getReader();
+    const decoder = new TextDecoder();
+    let buffer = '';
+    let lastUsage = null;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            buffer += decoder.decode(value, { stream: true });
+            const lines = buffer.split('\n');
+            buffer = lines.pop() ?? '';
+            for (const line of lines) {
+                const trimmed = line.trim();
+                if (!trimmed.startsWith('data:'))
+                    continue;
+                const dataStr = trimmed.slice(5).trim();
+                if (!dataStr || dataStr === '[DONE]')
+                    continue;
+                try {
+                    const parsed = JSON.parse(dataStr);
+                    if (parsed.error) {
+                        yield {
+                            kind: 'error',
+                            code: String(parsed.error.code ?? 'sse_error'),
+                            message: parsed.error.message ?? 'Cloud Code SSE stream error',
+                        };
+                        return;
+                    }
+                    const parts = parsed.candidates?.[0]?.content?.parts;
+                    if (parts) {
+                        for (const part of parts) {
+                            if (part.text) {
+                                yield { kind: 'content', delta: part.text };
+                            }
+                        }
+                    }
+                    if (parsed.usageMetadata) {
+                        lastUsage = parsed.usageMetadata;
+                    }
+                }
+                catch {
+                    // Ignore unparseable SSE data lines
+                }
+            }
+        }
+        // P1-1: Yield done event exactly once after stream completion
+        yield { kind: 'done', usage: lastUsage ?? {} };
+    }
+    finally {
+        reader.releaseLock();
+    }
+}
+export class CloudCodeProviderAdapter {
+    fetchFn;
+    constructor(fetchFn = fetch) {
+        this.fetchFn = fetchFn;
+    }
+    async *execute(acquisition, request, signal) {
+        if (signal.aborted) {
+            // Q2B: abort = 0 outcome, handle via release
+            return;
+        }
+        const { url, headers, body } = buildCloudCodeRequest(acquisition, request);
+        let response;
+        try {
+            response = await this.fetchFn(url, {
+                method: 'POST',
+                headers,
+                body: JSON.stringify(body),
+                signal,
+            });
+        }
+        catch (err) {
+            if (signal.aborted) {
+                // Abort -> no outcome recorded
+                return;
+            }
+            await acquisition.recordOutcome({
+                status: 'failed',
+                errorCode: 'network_error',
+            });
+            yield {
+                kind: 'error',
+                code: 'network_error',
+                message: err instanceof Error ? err.message : String(err),
+            };
+            return;
+        }
+        if (signal.aborted) {
+            return;
+        }
+        if (response.status === 401 || response.status === 403) {
+            await acquisition.recordOutcome({
+                status: 'auth_failed',
+                providerStatusCode: response.status,
+            });
+            yield {
+                kind: 'error',
+                code: 'auth_failed',
+                message: `Cloud Code authentication failed (${response.status})`,
+            };
+            return;
+        }
+        if (response.status === 429) {
+            const retryAfterHeader = response.headers.get('Retry-After');
+            let retryAfterMs;
+            if (retryAfterHeader) {
+                const parsedSeconds = Number.parseInt(retryAfterHeader, 10);
+                if (Number.isFinite(parsedSeconds) && parsedSeconds > 0) {
+                    retryAfterMs = parsedSeconds * 1000;
+                }
+            }
+            await acquisition.recordOutcome({
+                status: 'rate_limited',
+                providerStatusCode: 429,
+                retryAfterMs,
+            });
+            yield {
+                kind: 'error',
+                code: 'rate_limited',
+                message: 'Cloud Code rate limit exceeded (429)',
+            };
+            return;
+        }
+        if (!response.ok) {
+            await acquisition.recordOutcome({
+                status: 'failed',
+                providerStatusCode: response.status,
+            });
+            yield {
+                kind: 'error',
+                code: 'http_error',
+                message: `Cloud Code HTTP error (${response.status})`,
+            };
+            return;
+        }
+        if (!response.body) {
+            await acquisition.recordOutcome({ status: 'failed', errorCode: 'no_body' });
+            yield { kind: 'error', code: 'no_body', message: 'No response body received' };
+            return;
+        }
+        let hasError = false;
+        // P0-6: Wrap SSE iteration in try-catch to guarantee recordOutcome on network/stream exception
+        try {
+            for await (const event of parseCloudCodeSSE(response.body)) {
+                if (signal.aborted) {
+                    return;
+                }
+                if (event.kind === 'error') {
+                    hasError = true;
+                }
+                yield event;
+            }
+        }
+        catch (streamErr) {
+            if (signal.aborted) {
+                return;
+            }
+            await acquisition.recordOutcome({
+                status: 'failed',
+                errorCode: 'stream_error',
+            });
+            yield {
+                kind: 'error',
+                code: 'stream_error',
+                message: streamErr instanceof Error ? streamErr.message : String(streamErr),
+            };
+            return;
+        }
+        if (!signal.aborted) {
+            await acquisition.recordOutcome({
+                status: hasError ? 'failed' : 'success',
+            });
+        }
+    }
+}
+//# sourceMappingURL=cloud-code-transport.js.map

package/dist/transport/cloud-code-transport.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"cloud-code-transport.js","sourceRoot":"","sources":["../../src/transport/cloud-code-transport.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAQpC,MAAM,CAAC,MAAM,qBAAqB,GAChC,oFAAoF,CAAC;AACvF,MAAM,CAAC,MAAM,qBAAqB,GAChC,wFAAwF,CAAC;AAa3F,MAAM,UAAU,qBAAqB,CACnC,WAAwC,EACxC,OAAwB;IAExB,MAAM,OAAO,GACV,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,uBAA8C;QAC5E,WAAW,CAAC,QAAQ,CAAC,QAAQ,EAAE,uBAA8C,CAAC;IAEjF,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CACb,iGAAiG,CAClG,CAAC;IACJ,CAAC;IAED,+DAA+D;IAC/D,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;IAE/B,MAAM,OAAO,GAA2B;QACtC,aAAa,EAAE,UAAU,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE;QAC3D,YAAY,EAAE,qBAAqB;QACnC,cAAc,EAAE,kBAAkB;QAClC,MAAM,EAAE,mBAAmB;QAC3B,GAAG,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,EAAE,CAAC;KACvC,CAAC;IAEF,MAAM,IAAI,GAAsB;QAC9B,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE;QACvB,SAAS;QACT,KAAK,EAAE,OAAO,CAAC,OAAO;QACtB,SAAS,EAAE,aAAa;QACxB,OAAO,EAAE;YACP,QAAQ,EAAE,OAAO,CAAC,QAAQ;YAC1B,GAAG,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC,CAAC,EAAE,gBAAgB,EAAE,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF;KACF,CAAC;IAEF,OAAO;QACL,GAAG,EAAE,qBAAqB;QAC1B,OAAO;QACP,IAAI;KACL,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,SAAS,CAAC,CAAC,iBAAiB,CACtC,MAAkC;IAElC,MAAM,MAAM,GAAG,MAAM,CAAC,SAAS,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;IAClC,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,IAAI,SAAS,GAAY,IAAI,CAAC;IAE9B,IAAI,CAAC;QACH,OAAO,IAAI,EAAE,CAAC;YACZ,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;YAC5C,IAAI,IAAI;gBAAE,MAAM;YAChB,MAAM,IAAI,OAAO,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC;YAElD,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACjC,MAAM,GAAG,KAAK,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC;YAE3B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;gBACzB,MAAM,OAAO,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC5B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,OAAO,CAAC;oBAAE,SAAS;gBAC3C,MAAM,OAAO,GAAG,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;gBACxC,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ;oBAAE,SAAS;gBAE/C,IAAI,CAAC;oBACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAOhC,CAAC;oBAEF,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;wBACjB,MAAM;4BACJ,IAAI,EAAE,OAAO;4BACb,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,IAAI,WAAW,CAAC;4BAC9C,OAAO,EAAE,MAAM,CAAC,KAAK,CAAC,OAAO,IAAI,6BAA6B;yBAC/D,CAAC;wBACF,OAAO;oBACT,CAAC;oBAED,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC;oBACrD,IAAI,KAAK,EAAE,CAAC;wBACV,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;4BACzB,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC;gCACd,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;4BAC9C,CAAC;wBACH,CAAC;oBACH,CAAC;oBAED,IAAI,MAAM,CAAC,aAAa,EAAE,CAAC;wBACzB,SAAS,GAAG,MAAM,CAAC,aAAa,CAAC;oBACnC,CAAC;gBACH,CAAC;gBAAC,MAAM,CAAC;oBACP,oCAAoC;gBACtC,CAAC;YACH,CAAC;QACH,CAAC;QAED,8DAA8D;QAC9D,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,SAAS,IAAI,EAAE,EAAE,CAAC;IACjD,CAAC;YAAS,CAAC;QACT,MAAM,CAAC,WAAW,EAAE,CAAC;IACvB,CAAC;AACH,CAAC;AAED,MAAM,OAAO,wBAAwB;IACN;IAA7B,YAA6B,UAAwB,KAAK;QAA7B,YAAO,GAAP,OAAO,CAAsB;IAAG,CAAC;IAE9D,KAAK,CAAC,CAAC,OAAO,CACZ,WAAwC,EACxC,OAAwB,EACxB,MAAmB;QAEnB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,6CAA6C;YAC7C,OAAO;QACT,CAAC;QAED,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,qBAAqB,CAAC,WAAW,EAAE,OAAO,CAAC,CAAC;QAE3E,IAAI,QAAkB,CAAC;QACvB,IAAI,CAAC;YACH,QAAQ,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;gBACjC,MAAM,EAAE,MAAM;gBACd,OAAO;gBACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;gBAC1B,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,+BAA+B;gBAC/B,OAAO;YACT,CAAC;YACD,MAAM,WAAW,CAAC,aAAa,CAAC;gBAC9B,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,eAAe;aAC3B,CAAC,CAAC;YACH,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aAC1D,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACnB,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,MAAM,WAAW,CAAC,aAAa,CAAC;gBAC9B,MAAM,EAAE,aAAa;gBACrB,kBAAkB,EAAE,QAAQ,CAAC,MAAM;aACpC,CAAC,CAAC;YACH,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,aAAa;gBACnB,OAAO,EAAE,qCAAqC,QAAQ,CAAC,MAAM,GAAG;aACjE,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YAC5B,MAAM,gBAAgB,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;YAC7D,IAAI,YAAgC,CAAC;YACrC,IAAI,gBAAgB,EAAE,CAAC;gBACrB,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,gBAAgB,EAAE,EAAE,CAAC,CAAC;gBAC5D,IAAI,MAAM,CAAC,QAAQ,CAAC,aAAa,CAAC,IAAI,aAAa,GAAG,CAAC,EAAE,CAAC;oBACxD,YAAY,GAAG,aAAa,GAAG,IAAI,CAAC;gBACtC,CAAC;YACH,CAAC;YACD,MAAM,WAAW,CAAC,aAAa,CAAC;gBAC9B,MAAM,EAAE,cAAc;gBACtB,kBAAkB,EAAE,GAAG;gBACvB,YAAY;aACb,CAAC,CAAC;YACH,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,sCAAsC;aAChD,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,WAAW,CAAC,aAAa,CAAC;gBAC9B,MAAM,EAAE,QAAQ;gBAChB,kBAAkB,EAAE,QAAQ,CAAC,MAAM;aACpC,CAAC,CAAC;YACH,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,YAAY;gBAClB,OAAO,EAAE,0BAA0B,QAAQ,CAAC,MAAM,GAAG;aACtD,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,IAAI,EAAE,CAAC;YACnB,MAAM,WAAW,CAAC,aAAa,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;YAC5E,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,OAAO,EAAE,2BAA2B,EAAE,CAAC;YAC/E,OAAO;QACT,CAAC;QAED,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,+FAA+F;QAC/F,IAAI,CAAC;YACH,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,iBAAiB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC3D,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;oBACnB,OAAO;gBACT,CAAC;gBACD,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;oBAC3B,QAAQ,GAAG,IAAI,CAAC;gBAClB,CAAC;gBACD,MAAM,KAAK,CAAC;YACd,CAAC;QACH,CAAC;QAAC,OAAO,SAAS,EAAE,CAAC;YACnB,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;gBACnB,OAAO;YACT,CAAC;YACD,MAAM,WAAW,CAAC,aAAa,CAAC;gBAC9B,MAAM,EAAE,QAAQ;gBAChB,SAAS,EAAE,cAAc;aAC1B,CAAC,CAAC;YACH,MAAM;gBACJ,IAAI,EAAE,OAAO;gBACb,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC;aAC5E,CAAC;YACF,OAAO;QACT,CAAC;QAED,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,WAAW,CAAC,aAAa,CAAC;gBAC9B,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;aACxC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;CACF"}