@sentropic/llm-mesh 0.34.0 → 0.35.0

package/README.md

@@ -140,6 +140,42 @@ const facade = createLlmMeshFacade({
 That migration option is only for pre-ownerScope local records. New enrollment
 always takes ownership from `StartEnrollmentInput.ownerScope`.
 
+## Device-flow enrollment CLI (`llm-mesh-enroll`)
+
+The `llm-mesh-enroll` bin enrolls seat-billed device-flow accounts
+(muse-code and codex, repeatable for N accounts) and probes muse-code seat
+accounts. The keyring key is read from the environment variable named by
+`--keyring-key-env` (never from argv): it must hold 32 bytes as 64 hex
+chars or 44/43-char base64 (a human passphrase is refused). stdout carries
+one JSON object per line, secrets never reach stdout, stderr, or error
+messages. `probe` only supports `--provider muse-code` and verifies the
+stored account provider before any token leaves the keyring; `--effort` is
+validated for forward compatibility but not forwarded on the Muse Chat wire.
+
+```sh
+export SENTROPIC_LLM_MESH_KEYRING_KEY  # owner-held 32-byte key (hex), set in the environment
+
+# 1. Enroll one account (repeat with a new --label per account).
+#    The owner approves each device login on accountscenter.meta.com.
+llm-mesh-enroll enroll --provider muse-code \
+  --keyring-dir ~/.sentropic/immo-detection-keyring \
+  --owner-scope tenant-immo:signal-detection \
+  --label "Immo Detection 1" \
+  --keyring-key-env SENTROPIC_LLM_MESH_KEYRING_KEY
+
+# 2. Probe the stored account (prints status plus latency plus usage only).
+llm-mesh-enroll probe --provider muse-code \
+  --keyring-dir ~/.sentropic/immo-detection-keyring \
+  --account <account-id-from-enroll> \
+  --model muse-wonder-1.0 --effort low \
+  --keyring-key-env SENTROPIC_LLM_MESH_KEYRING_KEY
+```
+
+A probe 402 means `billing_not_configured` on the non-seat `muse.ts`
+direct-key path: re-enroll a seat account with the device flow above.
+Exit codes: 0 ok, 2 usage, 3 enrollment failed, 4 account not found,
+5 keyring key, 6 probe failed, 7 billing not configured.
+
 ## Claude subscription enrollment (LOT 1)
 
 The facade supports browser PKCE enrollment and renewable Claude CLI credential

package/dist/enrollment/contracts.d.ts

@@ -96,7 +96,7 @@ export interface EnrollmentProvider {
     resolve(credential: PreparedCredential): Promise<ResolvedProviderMetadata>;
     refresh(input: RefreshInput): Promise<PreparedCredential>;
     waitForCallback?(enrollmentId: string): Promise<CompletedEnrollment>;
-    pollForCompletion?(enrollmentId: string): Promise<CompletedEnrollment>;
+    pollForCompletion?(enrollmentId: string, maxAttempts?: number): Promise<CompletedEnrollment>;
     cancel?(enrollmentId: string): Promise<void>;
 }
 //# sourceMappingURL=contracts.d.ts.map

package/dist/enrollment/contracts.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/enrollment/contracts.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnF;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,GAGD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAGN,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,YAAY,GAAG,OAAO,GAAG,aAAa,GAAG,MAAM,GAAG,cAAc,CAAC;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,sBAAsB,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAGtE,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjE,OAAO,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3E,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1D,eAAe,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrE,iBAAiB,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvE,MAAM,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C"}
+{"version":3,"file":"contracts.d.ts","sourceRoot":"","sources":["../../src/enrollment/contracts.ts"],"names":[],"mappings":"AAGA,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,mBAAmB,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,GACnF;IACE,IAAI,EAAE,aAAa,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,MAAM,CAAC;IACjB,cAAc,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,MAAM,CAAC;CACnB,GAGD;IACE,IAAI,EAAE,cAAc,CAAC;IACrB,YAAY,EAAE,MAAM,CAAC;IACrB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;CACnB,CAAC;AAGN,MAAM,WAAW,eAAe;IAC9B,YAAY,EAAE,MAAM,CAAC;IACrB,UAAU,EAAE,YAAY,GAAG,OAAO,GAAG,aAAa,GAAG,MAAM,GAAG,cAAc,CAAC;IAC7E,UAAU,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,MAAM,CAAC;IACrB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,KAAK,GAAG,QAAQ,CAAC;IACvB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,uBAAuB;IACtC,YAAY,EAAE,MAAM,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;IAChC,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAGD,MAAM,WAAW,YAAY;IAC3B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,iBAAiB,EAAE,MAAM,CAAC;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,yBAAyB,CAAC,EAAE,MAAM,CAAC;IACnC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,MAAM,WAAW,kBAAkB;IACjC,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,uBAAuB,EAAE,MAAM,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,UAAU,CAAC,EAAE,kBAAkB,CAAC;IAChC,QAAQ,CAAC,EAAE,wBAAwB,CAAC;CACrC;AAED,MAAM,WAAW,oBAAoB;IACnC,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,MAAM,CAAC;IACd,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE;QACR,IAAI,EAAE,sBAAsB,CAAC;QAC7B,OAAO,EAAE,MAAM,CAAC;KACjB,CAAC;CACH;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,KAAK,EAAE,oBAAoB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IAC/D,QAAQ,CAAC,KAAK,EAAE,uBAAuB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAGtE,kBAAkB,CAAC,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IACjE,OAAO,CAAC,UAAU,EAAE,kBAAkB,GAAG,OAAO,CAAC,wBAAwB,CAAC,CAAC;IAC3E,OAAO,CAAC,KAAK,EAAE,YAAY,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;IAC1D,eAAe,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACrE,iBAAiB,CAAC,CAAC,YAAY,EAAE,MAAM,EAAE,WAAW,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC7F,MAAM,CAAC,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C"}

package/dist/node/claude-code-cli-runner.d.ts

@@ -0,0 +1,56 @@
+import type { AnthropicAdapterClient } from '../adapters.js';
+import { ClaudeCodeRuntimeClient, type ClaudeCodeAccessProjection, type ClaudeCodeCliCapabilities, type ClaudeCodeCliEvent, type ClaudeCodeCliRequest, type ClaudeCodeCliRunner } from '../transport/claude-code-runtime-client.js';
+export declare const CLAUDE_CODE_OAUTH_ENV_VAR = "CLAUDE_CODE_OAUTH_TOKEN";
+export declare const CLAUDE_CODE_STREAM_PROTOCOL = "claude-code-stream-json-v1";
+export declare const DEFAULT_CLAUDE_CODE_CLI_PATH = "claude";
+export declare const DEFAULT_CLAUDE_CODE_EFFORT = "medium";
+export declare const DEFAULT_CLAUDE_CODE_TIMEOUT_MS = 300000;
+export declare const CLAUDE_CODE_RESULT_TIMEOUT_MS = 15000;
+export interface NodeClaudeCodeCliRunnerOptions {
+    readonly cliPath?: string;
+    readonly effort?: string;
+    readonly systemPromptFile?: string;
+    readonly timeoutMs?: number;
+    readonly collectStderrBytes?: number;
+}
+export declare class NodeClaudeCodeCliRunner implements ClaudeCodeCliRunner {
+    private readonly cliPath;
+    private readonly effort;
+    private readonly systemPromptFile?;
+    private readonly timeoutMs;
+    private readonly stderrTailBytes;
+    constructor(options?: NodeClaudeCodeCliRunnerOptions);
+    run(input: {
+        access: ClaudeCodeAccessProjection;
+        request: ClaudeCodeCliRequest;
+        signal: AbortSignal;
+    }): AsyncIterable<ClaudeCodeCliEvent>;
+    private execute;
+    private consume;
+}
+export interface ClaudeSeatAnthropicClientOptions {
+    readonly capabilities: ClaudeCodeCliCapabilities;
+    readonly cliPath?: string;
+    readonly effort?: string;
+    readonly systemPromptFile?: string;
+    readonly timeoutMs?: number;
+    readonly fallback?: AnthropicAdapterClient;
+    readonly now?: () => number;
+}
+/** Host capability attestation for a locally qualified `claude` CLI. */
+export interface ClaudeCodeCliProbeOptions {
+    readonly cliPath?: string;
+    readonly source: string;
+    readonly qualificationRef: string;
+    readonly timeoutMs?: number;
+}
+/** Probe `claude --version` and `claude --help` with a token-free env; never runs a workload. */
+export declare const probeClaudeCodeCliCapabilities: (options: ClaudeCodeCliProbeOptions) => Promise<ClaudeCodeCliCapabilities>;
+/**
+ * Factory for the consumer: builds the `clients.anthropic` runtime client
+ * over a dedicated Claude seat. Wire with
+ * `createDefaultProviderAdapters({ anthropic })`.
+ */
+export declare const createClaudeSeatAnthropicClient: (options: ClaudeSeatAnthropicClientOptions) => ClaudeCodeRuntimeClient;
+export type { ClaudeCodeAccessProjection, ClaudeCodeCliCapabilities, ClaudeCodeCliContent, ClaudeCodeCliEvent, ClaudeCodeCliRequest, ClaudeCodeCliRunner, } from '../transport/claude-code-runtime-client.js';
+//# sourceMappingURL=claude-code-cli-runner.d.ts.map

package/dist/node/claude-code-cli-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-code-cli-runner.d.ts","sourceRoot":"","sources":["../../src/node/claude-code-cli-runner.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,gBAAgB,CAAC;AAC7D,OAAO,EAEL,uBAAuB,EACvB,KAAK,0BAA0B,EAC/B,KAAK,yBAAyB,EAC9B,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACzB,MAAM,4CAA4C,CAAC;AAIpD,eAAO,MAAM,yBAAyB,4BAA4B,CAAC;AACnE,eAAO,MAAM,2BAA2B,+BAA+B,CAAC;AACxE,eAAO,MAAM,4BAA4B,WAAW,CAAC;AACrD,eAAO,MAAM,0BAA0B,WAAW,CAAC;AACnD,eAAO,MAAM,8BAA8B,SAAU,CAAC;AACtD,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAwBpD,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,CAAC;CACtC;AA2ID,qBAAa,uBAAwB,YAAW,mBAAmB;IACjE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAS;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAS;IAC3C,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAS;IACnC,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAS;gBAE7B,OAAO,GAAE,8BAAmC;IAyBxD,GAAG,CAAC,KAAK,EAAE;QACT,MAAM,EAAE,0BAA0B,CAAC;QAAC,OAAO,EAAE,oBAAoB,CAAC;QAAC,MAAM,EAAE,WAAW,CAAC;KACxF,GAAG,aAAa,CAAC,kBAAkB,CAAC;YAMtB,OAAO;YAiFP,OAAO;CAwIvB;AAED,MAAM,WAAW,gCAAgC;IAC/C,QAAQ,CAAC,YAAY,EAAE,yBAAyB,CAAC;IACjD,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,QAAQ,CAAC,EAAE,sBAAsB,CAAC;IAC3C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,wEAAwE;AACxE,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;CAC7B;AA6DD,iGAAiG;AACjG,eAAO,MAAM,8BAA8B,YAChC,yBAAyB,KACjC,QAAQ,yBAAyB,CAgCnC,CAAC;AAEF;;;;GAIG;AACH,eAAO,MAAM,+BAA+B,YACjC,gCAAgC,KACxC,uBAaF,CAAC;AAEF,YAAY,EACV,0BAA0B,EAC1B,yBAAyB,EACzB,oBAAoB,EACpB,kBAAkB,EAClB,oBAAoB,EACpB,mBAAmB,GACpB,MAAM,4CAA4C,CAAC"}