@skaile/workspaces 3.27.0 → 4.0.0

package/dist/bridge/drivers/opencode.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../bridge/src/drivers/opencode.ts"],"names":[],"mappings":";;;;;;;;;AAmCO,IAAM,cAAA,GAAN,cAA6B,mBAAA,CAAoB;AAAA,EAC7C,UAAA,GAAyB;AAAA,IAChC,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,UAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB;AAAA,GACvB;AAAA,EAEmB,GAAA,GAAc,gBAAgB,UAAU,CAAA;AAAA,EACxC,UAAA,GAAa,UAAA;AAAA,EACb,WAAA,GAAc,UAAA;AAAA,EACd,SAAA,GAAY,UAAA;AAAA,EAErB,SAAA,CAAU,SAAiB,QAAA,EAAwC;AAC3E,IAAA,MAAM,IAAA,GAAO,CAAC,KAAA,EAAO,OAAA,EAAS,YAAY,MAAM,CAAA;AAChD,IAAA,MAAM,QACJ,IAAA,CAAK,MAAA,CAAO,QAAA,IAAY,IAAA,CAAK,OAAO,KAAA,GAChC,CAAA,EAAG,IAAA,CAAK,MAAA,CAAO,QAAQ,CAAA,CAAA,EAAI,IAAA,CAAK,OAAO,KAAK,CAAA,CAAA,GAC5C,KAAK,MAAA,CAAO,KAAA;AAClB,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAChC,IAAA,IAAI,QAAA,EAAU,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEU,QAAA,GAAmC;AAC3C,IAAA,MAAM,GAAA,GAAM,KAAK,OAAA,CAAQ;AAAA,MACvB,mBAAA;AAAA,MACA,gBAAA;AAAA,MACA,gBAAA;AAAA,MACA,oBAAA;AAAA,MACA;AAAA,KACD,CAAA;AACD,IAAA,OAAO,EAAE,GAAG,GAAA,EAAK,GAAG,gBAAgB,IAAA,CAAK,MAAA,CAAO,OAAO,CAAA,EAAE;AAAA,EAC3D;AAAA,EAEU,WAAA,GAAsB;AAC9B,IAAA,OAAO,wFAAA;AAAA,EACT;AAAA,EAEU,WAAW,IAAA,EAAiB;AACpC,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,SAAA;AAAA,MACL,KAAK,eAAA;AAAA,MACL,KAAK,MAAA;AACH,QAAA,IAAA,CAAK,eAAe,IAAA,CAAK,EAAA,IAAM,KAAK,SAAA,IAAa,IAAA,CAAK,SAAS,EAAE,CAAA;AACjE,QAAA;AAAA,MAEF,KAAK,SAAA;AAAA,MACL,KAAK,cAAA;AAAA,MACL,KAAK,MAAA,EAAQ;AACX,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,SAAS,IAAA,IAAQ,WAAA;AAChD,QAAA,IAAI,SAAS,WAAA,EAAa;AAC1B,QAAA,MAAM,IAAA,GAAO,YAAY,IAAI,CAAA;AAC7B,QAAA,IAAI,IAAA,CAAK,SAAS,IAAA,IAAQ,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,CAAK,iBAAiB,IAAI,CAAA;AAAA,aACpE,IAAA,CAAK,mBAAmB,IAAI,CAAA;AACjC,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,MAAA;AAAA,MACL,KAAK,UAAA;AAAA,MACL,KAAK,YAAA;AACH,QAAA,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA,EAAQ,IAAA,CAAK,KAAA,IAAS,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAA;AACjF,QAAA;AAAA,MAEF,KAAK,aAAA;AAAA,MACL,KAAK,UAAA;AACH,QAAA,IAAA,CAAK,cAAA;AAAA,UACH,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA;AAAA,UAC1B,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,OAAA;AAAA,UACnC,OAAA,CAAQ,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,KAAK;AAAA,SACrC;AACA,QAAA;AAAA,MAEF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,IAAA,CAAK,KAAA,IAAS,OAAO,CAAC,CAAC,CAAA;AAClF,QAAA;AAAA,MAEF,KAAK,QAAA;AAAA,MACL,KAAK,MAAA;AAAA,MACL,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,cAAA,CAAe,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAU,CAAA;AACrD,QAAA,IAAA,CAAK,UAAA,CAAW;AAAA,UACd,MAAA,EAAQ,cAAc,IAAI,CAAA;AAAA,UAC1B,OAAA,EAAS,YAAY,IAAI,CAAA;AAAA,UACzB,OAAA,EAAS,WAAA,CAAY,IAAI,CAAA,IAAK;AAAA,SAC/B,CAAA;AACD,QAAA;AAAA;AACJ,EACF;AAAA,EAEA,MAAe,UAAA,GAAoC;AACjD,IAAA,OAAO,EAAC;AAAA,EACV;AACF;AAMO,IAAM,oBAAA,GAAkD;AAAA,EAC7D,EAAA,EAAI,UAAA;AAAA,EACJ,WAAA,EAAa,sBAAA,CAAuB,QAAA,EAAU,IAAA,IAAQ,UAAA;AAAA,EACtD,UAAA,EAAY,CAAA;AAAA,EACZ,YAAA,EAAgB,CAAA,CAAA,MAAA,CAAoB,MAAM,IAAI,CAAA;AAAA,EAC9C,QAAQ,OAAO,MAAA,EAAQ,IAAA,KAAS,IAAI,eAAe,MAAM;AAC3D","file":"opencode.js","sourcesContent":["import type { DriverTarget } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport * as z from \"zod\";\nimport { getBridgeLogger } from \"../logger.js\";\nimport type { ModelEntry } from \"../models.js\";\nimport { BUILTIN_DRIVER_CATALOG } from \"../registry.js\";\nimport type { AgentConfig, DriverInfo } from \"../types.js\";\nimport {\n  extractCost,\n  extractText,\n  extractTokens,\n  mapApiKeysToEnv,\n  SubprocessCliDriver,\n} from \"./_subprocess-cli.js\";\n\n/**\n * Agent driver for **OpenCode** (`opencode`), the model-agnostic open-source\n * coding agent.\n *\n * Spawns `opencode run \"<prompt>\" --format json` per turn and maps OpenCode's\n * JSON event stream to the unified {@link AgentEvent} stream. Model-agnostic:\n * the model is passed as `provider/model` via `-m`, and provider API keys are\n * forwarded through the environment.\n *\n * @remarks\n * - The prompt is a **positional argument** — OpenCode's `-p` flag is a\n *   basic-auth password, not the prompt.\n * - Session resume via `-s <id>`; the session id is captured from the run's\n *   session event and emitted as `session_info`.\n * - OpenCode's `run --format json` event field names are not fully pinned\n *   upstream; {@link handleJson} reads them defensively.\n *\n * @see https://github.com/sst/opencode\n * @docLink packages/bridge/drivers#opencode-driver\n */\nexport class OpenCodeDriver extends SubprocessCliDriver {\n  readonly driverInfo: DriverInfo = {\n    id: \"opencode\",\n    name: \"OpenCode\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n  };\n\n  protected readonly log: Logger = getBridgeLogger(\"opencode\");\n  protected readonly defaultBin = \"opencode\";\n  protected readonly productName = \"OpenCode\";\n  protected readonly envPrefix = \"OPENCODE\";\n\n  protected buildArgs(message: string, resumeId: string | undefined): string[] {\n    const args = [\"run\", message, \"--format\", \"json\"];\n    const model =\n      this.config.provider && this.config.model\n        ? `${this.config.provider}/${this.config.model}`\n        : this.config.model;\n    if (model) args.push(\"-m\", model);\n    if (resumeId) args.push(\"-s\", resumeId);\n    return args;\n  }\n\n  protected buildEnv(): Record<string, string> {\n    const env = this.baseEnv([\n      \"ANTHROPIC_API_KEY\",\n      \"OPENAI_API_KEY\",\n      \"GEMINI_API_KEY\",\n      \"OPENROUTER_API_KEY\",\n      \"GROQ_API_KEY\",\n    ]);\n    return { ...env, ...mapApiKeysToEnv(this.config.apiKeys) };\n  }\n\n  protected installHint(): string {\n    return \"OpenCode is not installed or not on your PATH. Install it with `npm i -g opencode-ai`.\";\n  }\n\n  protected handleJson(json: any): void {\n    switch (json?.type) {\n      case \"session\":\n      case \"session.start\":\n      case \"init\":\n        this.captureSession(json.id ?? json.sessionId ?? json.session?.id);\n        break;\n\n      case \"message\":\n      case \"message.part\":\n      case \"part\": {\n        const role = json.role ?? json.message?.role ?? \"assistant\";\n        if (role !== \"assistant\") break;\n        const text = extractText(json);\n        if (json.done === true || json.final === true) this.pushAssistantEnd(text);\n        else this.pushAssistantDelta(text);\n        break;\n      }\n\n      case \"tool\":\n      case \"tool_use\":\n      case \"tool.start\":\n        this.pushToolCall(json.name ?? json.tool ?? \"tool\", json.input ?? json.args ?? {});\n        break;\n\n      case \"tool_result\":\n      case \"tool.end\":\n        this.pushToolResult(\n          json.name ?? json.tool ?? \"tool\",\n          json.result ?? json.output ?? json.content,\n          Boolean(json.is_error ?? json.error),\n        );\n        break;\n\n      case \"error\":\n        this.pushError(this.classifyMessage(String(json.message ?? json.error ?? \"error\")));\n        break;\n\n      case \"result\":\n      case \"done\":\n      case \"finish\":\n        this.captureSession(json.sessionId ?? json.session_id);\n        this.pushResult({\n          tokens: extractTokens(json),\n          costUsd: extractCost(json),\n          summary: extractText(json) || \"Task completed\",\n        });\n        break;\n    }\n  }\n\n  override async listModels(): Promise<ModelEntry[]> {\n    return [];\n  }\n}\n\n/**\n * `DriverTarget` wrapper for the opencode driver. Registered into the plugin\n * registry by `registerBuiltinDrivers()`.\n */\nexport const opencodeDriverTarget: DriverTarget<AgentConfig> = {\n  id: \"opencode\",\n  displayName: BUILTIN_DRIVER_CATALOG.opencode?.name ?? \"OpenCode\",\n  apiVersion: 1,\n  configSchema: z.custom<AgentConfig>(() => true),\n  create: async (config, _ctx) => new OpenCodeDriver(config),\n};\n"]}
+{"version":3,"sources":["../../../bridge/src/provider-materialize/opencode-config.ts","../../../bridge/src/drivers/opencode.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;AAuEA,IAAM,oBAAA,GAAmE;AAAA,EACvE,oBAAA,EAAsB,mBAAA;AAAA,EACtB,oBAAA,EAAsB,2BAAA;AAAA,EACtB,kBAAA,EAAoB,gBAAA;AAAA,EACpB,sBAAA,EAAwB;AAC1B,CAAA;AAGA,IAAM,yBAAA,GAAkD;AAAA,EACtD,cAAA,EAAgB,IAAA;AAAA,EAChB,MAAA,EAAQ,IAAA;AAAA,EACR,OAAA,EAAS;AACX,CAAA;AAGO,IAAM,uBAAA,GAA0B,UAAA;AAGhC,IAAM,wBAAA,GAA2B,eAAA;AA2CjC,SAAS,sBAAA,CACd,YACA,KAAA,EACwD;AACxD,EAAA,MAAM,OAAA,GAAU,aAAa,KAAK,CAAA;AAClC,EAAA,MAAM,GAAA,GAAM,OAAA,GAAU,oBAAA,CAAqB,OAAO,CAAA,GAAI,MAAA;AACtD,EAAA,IAAI,CAAC,GAAA;AACH,IAAA,OAAO;AAAA,MACL,OAAA,EAAS,OAAA,GACL,CAAA,4CAAA,EAA+C,OAAO,CAAA,CAAA,CAAA,GACtD;AAAA,KACN;AACF,EAAA,MAAM,OAAA,GAAU,aAAa,KAAK,CAAA;AAClC,EAAA,IAAI,CAAC,OAAA;AACH,IAAA,OAAO,EAAE,SAAS,oEAAA,EAAqE;AAEzF,EAAA,MAAM,SAA2C,EAAC;AAClD,EAAA,KAAA,MAAW,CAAC,SAAA,EAAW,eAAe,CAAA,IAAK,aAAA,CAAc,KAAK,CAAA,EAAG;AAC/D,IAAA,MAAA,CAAO,eAAe,CAAA,GAAI,EAAE,IAAA,EAAM,CAAA,EAAG,MAAM,KAAA,IAAS,UAAU,CAAA,CAAA,EAAI,SAAS,CAAA,CAAA,EAAG;AAAA,EAChF;AAEA,EAAA,MAAM,KAAA,GAA+B;AAAA,IACnC,GAAA;AAAA,IACA,IAAA,EAAM,MAAM,KAAA,IAAS,UAAA;AAAA,IACrB,OAAA,EAAS,EAAE,OAAA,EAAS,OAAA,EAAQ;AAAA,IAC5B;AAAA,GACF;AACA,EAAA,MAAM,cAAA,GAAiB,MAAM,UAAA,EAAY,IAAA;AACzC,EAAA,IAAI,cAAA,IAAkB,0BAA0B,cAAc,CAAA;AAC5D,IAAA,KAAA,CAAM,OAAA,CAAQ,MAAA,GAAS,CAAA,KAAA,EAAQ,yBAAA,CAA0B,UAAU,CAAC,CAAA,CAAA,CAAA;AACtE,EAAA,IAAI,MAAM,OAAA,IAAW,MAAA,CAAO,KAAK,KAAA,CAAM,OAAO,EAAE,MAAA,GAAS,CAAA;AACvD,IAAA,KAAA,CAAM,OAAA,CAAQ,OAAA,GAAU,EAAE,GAAG,MAAM,OAAA,EAAQ;AAC7C,EAAA,OAAO,EAAE,KAAA,EAAM;AACjB;AAcO,SAAS,4BAA4B,OAAA,EAAgD;AAC1F,EAAA,MAAM,QAAA,GAAmC;AAAA,IACvC,OAAA,EAAS,iCAAA;AAAA,IACT,UAAU;AAAC,GACb;AACA,EAAA,MAAM,UAAkC,EAAC;AAEzC,EAAA,KAAA,MAAW,CAAC,UAAA,EAAY,KAAK,KAAK,iBAAA,CAAkB,OAAA,CAAQ,QAAQ,CAAA,EAAG;AAKrE,IAAA,IAAI,sBAAA,CAAuB,KAAK,CAAA,EAAG;AACnC,IAAA,MAAM,QAAA,GAAW,sBAAA,CAAuB,UAAA,EAAY,KAAK,CAAA;AACzD,IAAA,IAAI,SAAA,IAAa,QAAA,EAAU,OAAA,CAAQ,IAAA,CAAK,EAAE,IAAI,UAAA,EAAY,MAAA,EAAQ,QAAA,CAAS,OAAA,EAAS,CAAA;AAAA,SAC/E,QAAA,CAAS,QAAA,CAAS,UAAU,CAAA,GAAI,QAAA,CAAS,KAAA;AAAA,EAChD;AAEA,EAAA,MAAM,OAAA,GAAU,uBAAuB,OAAO,CAAA;AAC9C,EAAA,MAAM,QAAA,GAAW,OAAA,GAAU,oBAAA,CAAqB,OAAO,CAAA,GAAI,MAAA;AAC3D,EAAA,IAAI,WAAW,QAAA,EAAU;AACvB,IAAA,QAAA,CAAS,KAAA,GAAQ,QAAA;AACjB,IAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,QAAA,CAAS,OAAA,CAAQ,UAAU,CAAA;AAClD,IAAA,IAAI,SAAS,OAAA,CAAQ,eAAA,IAAmB,CAAC,KAAA,CAAM,MAAA,CAAO,QAAQ,eAAe,CAAA;AAC3E,MAAA,KAAA,CAAM,OAAO,OAAA,CAAQ,eAAe,IAAI,EAAE,IAAA,EAAM,QAAQ,eAAA,EAAgB;AAAA,EAC5E;AAEA,EAAA,OAAO,EAAE,UAAU,OAAA,EAAQ;AAC7B;AAmBO,SAAS,yBAAA,CACd,SACA,MAAA,EACyB;AACzB,EAAA,MAAM,KAAA,GAAQ,4BAA4B,OAAO,CAAA;AACjD,EAAA,MAAM,IAAA,GAAO,uBAAA,CAAwB,UAAA,EAAY,MAAM,CAAA;AACvD,EAAA,MAAM,GAAA,GAAM,IAAA,CAAK,IAAA,EAAM,uBAAuB,CAAA;AAC9C,EAAA,IAAI,OAAO,IAAA,CAAK,KAAA,CAAM,SAAS,QAAQ,CAAA,CAAE,WAAW,CAAA,EAAG;AACrD,IAAA,uBAAA,CAAwB,KAAK,wBAAwB,CAAA;AACrD,IAAA,OAAO,EAAE,GAAG,KAAA,EAAO,GAAA,EAAK,EAAC,EAAE;AAAA,EAC7B;AACA,EAAA,MAAM,IAAA,GAAO,sBAAA;AAAA,IACX,GAAA;AAAA,IACA,wBAAA;AAAA,IACA,GAAG,IAAA,CAAK,SAAA,CAAU,MAAM,QAAA,EAAU,IAAA,EAAM,CAAC,CAAC;AAAA;AAAA,GAC5C;AACA,EAAA,OAAO,EAAE,GAAG,KAAA,EAAO,GAAA,EAAK,EAAE,eAAA,EAAiB,IAAA,IAAQ,IAAA,EAAK;AAC1D;;;ACxMO,IAAM,cAAA,GAAN,cAA6B,mBAAA,CAAoB;AAAA,EAC7C,UAAA,GAAyB;AAAA,IAChC,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,UAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB;AAAA,GACvB;AAAA,EAEmB,GAAA,GAAc,gBAAgB,UAAU,CAAA;AAAA,EACxC,UAAA,GAAa,UAAA;AAAA,EACb,WAAA,GAAc,UAAA;AAAA,EACd,SAAA,GAAY,UAAA;AAAA,EAEvB,SAAA;AAAA;AAAA,EAGA,eAAA,GAAoC;AAC1C,IAAA,IAAA,CAAK,SAAA,KAAc,uBAAA,CAAwB,IAAA,CAAK,MAAM,CAAA;AACtD,IAAA,OAAO,IAAA,CAAK,SAAA;AAAA,EACd;AAAA,EAES,YAAY,KAAA,EAA0E;AAC7F,IAAA,KAAA,CAAM,YAAY,KAAK,CAAA;AACvB,IAAA,IAAI,KAAA,CAAM,KAAA,KAAU,MAAA,EAAW,IAAA,CAAK,SAAA,GAAY,MAAA;AAAA,EAClD;AAAA,EAES,QAAA,GAA+B;AACtC,IAAA,OAAO,uBAAuB,IAAA,CAAK,eAAA,EAAiB,CAAA,EAAG,eAAA,IAAmB,KAAK,MAAA,CAAO,KAAA;AAAA,EACxF;AAAA,EAEU,SAAA,CAAU,SAAiB,QAAA,EAAwC;AAC3E,IAAA,MAAM,IAAA,GAAO,CAAC,KAAA,EAAO,OAAA,EAAS,YAAY,MAAM,CAAA;AAChD,IAAA,MAAM,OAAA,GAAU,sBAAA,CAAuB,IAAA,CAAK,eAAA,EAAiB,CAAA;AAC7D,IAAA,MAAM,QAAQ,OAAA,GAAU,oBAAA,CAAqB,OAAO,CAAA,GAAI,KAAK,MAAA,CAAO,KAAA;AACpE,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAChC,IAAA,IAAI,QAAA,EAAU,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,QAAQ,CAAA;AACtC,IAAA,OAAO,IAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAaU,QAAA,GAAmC;AAC3C,IAAA,MAAM,OAAA,GAAU,KAAK,eAAA,EAAgB;AACrC,IAAA,MAAM,YAAA,GAAe,yBAAA,CAA0B,OAAA,EAAS,IAAA,CAAK,MAAM,CAAA;AACnE,IAAA,KAAA,MAAW,SAAS,YAAA,CAAa,OAAA;AAC/B,MAAA,IAAA,CAAK,GAAA,CAAI,KAAK,8CAAA,EAAgD;AAAA,QAC5D,YAAY,KAAA,CAAM,EAAA;AAAA,QAClB,QAAQ,KAAA,CAAM;AAAA,OACf,CAAA;AACH,IAAA,IAAI,YAAA,CAAa,IAAA;AACf,MAAA,IAAA,CAAK,IAAI,KAAA,CAAM,mCAAA,EAAqC,EAAE,IAAA,EAAM,YAAA,CAAa,MAAM,CAAA;AACjF,IAAA,OAAO;AAAA,MACL,GAAG,KAAK,OAAA,EAAQ;AAAA,MAChB,GAAG,4BAA4B,OAAO,CAAA;AAAA,MACtC,GAAG,YAAA,CAAa;AAAA,KAClB;AAAA,EACF;AAAA,EAEU,WAAA,GAAsB;AAC9B,IAAA,OAAO,wFAAA;AAAA,EACT;AAAA,EAEU,WAAW,IAAA,EAAiB;AACpC,IAAA,QAAQ,MAAM,IAAA;AAAM,MAClB,KAAK,SAAA;AAAA,MACL,KAAK,eAAA;AAAA,MACL,KAAK,MAAA;AACH,QAAA,IAAA,CAAK,eAAe,IAAA,CAAK,EAAA,IAAM,KAAK,SAAA,IAAa,IAAA,CAAK,SAAS,EAAE,CAAA;AACjE,QAAA;AAAA,MAEF,KAAK,SAAA;AAAA,MACL,KAAK,cAAA;AAAA,MACL,KAAK,MAAA,EAAQ;AACX,QAAA,MAAM,IAAA,GAAO,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,SAAS,IAAA,IAAQ,WAAA;AAChD,QAAA,IAAI,SAAS,WAAA,EAAa;AAC1B,QAAA,MAAM,IAAA,GAAO,YAAY,IAAI,CAAA;AAC7B,QAAA,IAAI,IAAA,CAAK,SAAS,IAAA,IAAQ,IAAA,CAAK,UAAU,IAAA,EAAM,IAAA,CAAK,iBAAiB,IAAI,CAAA;AAAA,aACpE,IAAA,CAAK,mBAAmB,IAAI,CAAA;AACjC,QAAA;AAAA,MACF;AAAA,MAEA,KAAK,MAAA;AAAA,MACL,KAAK,UAAA;AAAA,MACL,KAAK,YAAA;AACH,QAAA,IAAA,CAAK,YAAA,CAAa,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA,EAAQ,IAAA,CAAK,KAAA,IAAS,IAAA,CAAK,IAAA,IAAQ,EAAE,CAAA;AACjF,QAAA;AAAA,MAEF,KAAK,aAAA;AAAA,MACL,KAAK,UAAA;AACH,QAAA,IAAA,CAAK,cAAA;AAAA,UACH,IAAA,CAAK,IAAA,IAAQ,IAAA,CAAK,IAAA,IAAQ,MAAA;AAAA,UAC1B,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,MAAA,IAAU,IAAA,CAAK,OAAA;AAAA,UACnC,OAAA,CAAQ,IAAA,CAAK,QAAA,IAAY,IAAA,CAAK,KAAK;AAAA,SACrC;AACA,QAAA;AAAA,MAEF,KAAK,OAAA;AACH,QAAA,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,eAAA,CAAgB,MAAA,CAAO,IAAA,CAAK,WAAW,IAAA,CAAK,KAAA,IAAS,OAAO,CAAC,CAAC,CAAA;AAClF,QAAA;AAAA,MAEF,KAAK,QAAA;AAAA,MACL,KAAK,MAAA;AAAA,MACL,KAAK,QAAA;AACH,QAAA,IAAA,CAAK,cAAA,CAAe,IAAA,CAAK,SAAA,IAAa,IAAA,CAAK,UAAU,CAAA;AACrD,QAAA,IAAA,CAAK,UAAA,CAAW;AAAA,UACd,MAAA,EAAQ,cAAc,IAAI,CAAA;AAAA,UAC1B,OAAA,EAAS,YAAY,IAAI,CAAA;AAAA,UACzB,OAAA,EAAS,WAAA,CAAY,IAAI,CAAA,IAAK;AAAA,SAC/B,CAAA;AACD,QAAA;AAAA;AACJ,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAe,UAAA,GAAoC;AACjD,IAAA,OAAO,oBAAA,CAAqB,IAAA,CAAK,eAAA,EAAiB,CAAA;AAAA,EACpD;AACF;AAMO,IAAM,oBAAA,GAAkD;AAAA,EAC7D,EAAA,EAAI,UAAA;AAAA,EACJ,WAAA,EAAa,sBAAA,CAAuB,QAAA,EAAU,IAAA,IAAQ,UAAA;AAAA,EACtD,UAAA,EAAY,CAAA;AAAA,EACZ,YAAA,EAAgB,CAAA,CAAA,MAAA,CAAoB,MAAM,IAAI,CAAA;AAAA,EAC9C,QAAQ,OAAO,MAAA,EAAQ,IAAA,KAAS,IAAI,eAAe,MAAM,CAAA;AAAA,EACzD,UAAA,EAAY,OAAO,QAAA,EAAU,OAAA,KAC3B,IAAI,cAAA,CAAe;AAAA,IACjB,GAAA,EAAK,QAAQ,GAAA,EAAI;AAAA,IACjB,SAAA,EAAW,YAAA;AAAA,IACX,GAAG,oBAAA,CAAqB,QAAA,EAAU,OAAO;AAAA,GAC1C,EAAE,UAAA;AACP","file":"opencode.js","sourcesContent":["/**\n * OpenCode's `opencode.json` adapter — the file half of the OpenCode row\n * (§2.3).\n *\n * OpenCode names providers out of [models.dev](https://models.dev): a stock\n * endpoint is already in that list, so the env half's `-m <preset>/<model>`\n * reaches it with nothing written. An endpoint models.dev has never heard of —\n * a self-hosted gateway, a LiteLLM proxy, an Ollama box — exists for OpenCode\n * only if a `provider` block in `opencode.json` describes it:\n *\n * ```jsonc\n * {\n *   \"provider\": {\n *     \"corp-gateway\": {\n *       \"npm\": \"@ai-sdk/openai-compatible\",\n *       \"name\": \"Corp Gateway\",\n *       \"options\": {\n *         \"baseURL\": \"https://llm.corp.example/v1\",\n *         \"apiKey\": \"{env:SKAILE_AIP_CORP_GATEWAY_KEY}\"\n *       },\n *       \"models\": { \"corp-fast-1\": { \"name\": \"corp-fast-1\" } }\n *     }\n *   }\n * }\n * ```\n *\n * The block is keyed by {@link backendProviderName}, so the name in the file\n * is the name the env half already puts on `-m`. `npm` is the Vercel AI SDK\n * package for the entry's wire `surface`; OpenCode instantiates the provider\n * from it, which is why an entry on a surface with no package is left out\n * rather than guessed at.\n *\n * **Credentials never enter the file.** `options.apiKey` holds OpenCode's own\n * `{env:VAR}` indirection naming the per-entry variable\n * `SKAILE_AIP_<ID>_KEY`; the value rides in the child environment.\n *\n * The document is written to `<home>/opencode/opencode.json` and the child's\n * `XDG_CONFIG_HOME` is pointed at `<home>` — see\n * {@link driverSessionConfigHome} for why that, and not the developer's\n * `~/.config/opencode`.\n *\n * @docLink packages/bridge/drivers#one-shot-cli-drivers-gemini-qwen-opencode-goose-continue\n */\n\nimport { join } from \"node:path\";\nimport type {\n  AIProviderLlmEntry,\n  AIProviderSurface,\n} from \"@skaile/workspaces/core/provider-registry\";\nimport { providerCredentialEnvName } from \"./credential-env.js\";\nimport {\n  backendModelSelector,\n  entryBaseUrl,\n  entryModelIds,\n  entrySurface,\n  type EnvDriverSession,\n  isStockCatalogEndpoint,\n  resolveRegistryBinding,\n  selectableEntries,\n} from \"./env-drivers.js\";\nimport {\n  driverSessionConfigHome,\n  removeSessionConfigFile,\n  writeSessionConfigFile,\n} from \"./session-config-home.js\";\n\n/**\n * `surface` → the Vercel AI SDK package OpenCode loads for it. These are the\n * four surfaces `BUILTIN_DRIVER_CATALOG.opencode.surfaces` declares; a surface\n * with no package here cannot be instantiated, so the entry is skipped.\n */\nconst OPENCODE_NPM_PACKAGE: Partial<Record<AIProviderSurface, string>> = {\n  \"anthropic-messages\": \"@ai-sdk/anthropic\",\n  \"openai-completions\": \"@ai-sdk/openai-compatible\",\n  \"openai-responses\": \"@ai-sdk/openai\",\n  \"google-generative-ai\": \"@ai-sdk/google\",\n};\n\n/** Credential kinds whose value the adapter hands over in an env var. */\nconst ENV_DELIVERED_CREDENTIALS: Record<string, true> = {\n  api_key_header: true,\n  bearer: true,\n  command: true,\n};\n\n/** Subdirectory OpenCode reads its global config from, under the config home. */\nexport const OPENCODE_CONFIG_DIRNAME = \"opencode\";\n\n/** Filename OpenCode reads its global config from. */\nexport const OPENCODE_CONFIG_FILENAME = \"opencode.json\";\n\n/** One `provider.<id>` block, in OpenCode's own vocabulary. */\nexport interface OpenCodeProviderBlock {\n  /** AI SDK package OpenCode instantiates the provider from. */\n  npm: string;\n  /** Display name in the `/models` picker. */\n  name: string;\n  options: {\n    baseURL?: string;\n    /** OpenCode's `{env:VAR}` indirection — never a secret. */\n    apiKey?: string;\n    headers?: Record<string, string>;\n  };\n  /** Provider-side model id → its display entry. */\n  models: Record<string, { name: string }>;\n}\n\n/** The subset of `opencode.json` this adapter owns. */\nexport interface OpenCodeConfigDocument {\n  $schema: string;\n  /** `<provider>/<model>` the session selected, when it selected one. */\n  model?: string;\n  provider: Record<string, OpenCodeProviderBlock>;\n}\n\n/** An entry OpenCode cannot be taught, and why. */\nexport interface OpenCodeSkippedEntry {\n  id: string;\n  reason: string;\n}\n\n/** Result of {@link buildOpenCodeConfigDocument}. */\nexport interface OpenCodeConfigBuild {\n  document: OpenCodeConfigDocument;\n  /** Entries left out of the document — non-fatal, logged by the driver. */\n  skipped: OpenCodeSkippedEntry[];\n}\n\n/**\n * Render one entry as a provider block, or explain why OpenCode cannot load\n * it.\n */\nexport function renderOpenCodeProvider(\n  providerId: string,\n  entry: AIProviderLlmEntry,\n): { block: OpenCodeProviderBlock } | { skipped: string } {\n  const surface = entrySurface(entry);\n  const npm = surface ? OPENCODE_NPM_PACKAGE[surface] : undefined;\n  if (!npm)\n    return {\n      skipped: surface\n        ? `OpenCode has no AI SDK package for surface '${surface}'`\n        : \"entry declares no surface\",\n    };\n  const baseUrl = entryBaseUrl(entry);\n  if (!baseUrl)\n    return { skipped: \"entry states no base_url, and OpenCode does not know this provider\" };\n\n  const models: Record<string, { name: string }> = {};\n  for (const [logicalId, providerModelId] of entryModelIds(entry)) {\n    models[providerModelId] = { name: `${entry.label ?? providerId} ${logicalId}` };\n  }\n\n  const block: OpenCodeProviderBlock = {\n    npm,\n    name: entry.label ?? providerId,\n    options: { baseURL: baseUrl },\n    models,\n  };\n  const credentialKind = entry.credential?.kind;\n  if (credentialKind && ENV_DELIVERED_CREDENTIALS[credentialKind])\n    block.options.apiKey = `{env:${providerCredentialEnvName(providerId)}}`;\n  if (entry.headers && Object.keys(entry.headers).length > 0)\n    block.options.headers = { ...entry.headers };\n  return { block };\n}\n\n/**\n * Build the document for a session: one block per entry OpenCode cannot name\n * on its own, plus the selected `<provider>/<model>`.\n *\n * The selected model is added to its provider's `models` map even when no\n * `model_map` declared it — a selector naming a model the registry did not\n * enumerate still has to resolve, and `-m` would otherwise name a model the\n * provider block does not list.\n *\n * An empty registry renders nothing — there is no endpoint of the session's\n * own to tell OpenCode about, and models.dev already covers the stock ones.\n */\nexport function buildOpenCodeConfigDocument(session: EnvDriverSession): OpenCodeConfigBuild {\n  const document: OpenCodeConfigDocument = {\n    $schema: \"https://opencode.ai/config.json\",\n    provider: {},\n  };\n  const skipped: OpenCodeSkippedEntry[] = [];\n\n  for (const [providerId, entry] of selectableEntries(session.registry)) {\n    // OpenCode already knows every catalog endpoint through models.dev, under\n    // the same name `backendProviderName` gives `-m`. What it cannot know is\n    // an endpoint of the session's own, and that is exactly what this file is\n    // for — one rule, read by both halves.\n    if (isStockCatalogEndpoint(entry)) continue;\n    const rendered = renderOpenCodeProvider(providerId, entry);\n    if (\"skipped\" in rendered) skipped.push({ id: providerId, reason: rendered.skipped });\n    else document.provider[providerId] = rendered.block;\n  }\n\n  const binding = resolveRegistryBinding(session);\n  const selector = binding ? backendModelSelector(binding) : undefined;\n  if (binding && selector) {\n    document.model = selector;\n    const block = document.provider[binding.providerId];\n    if (block && binding.providerModelId && !block.models[binding.providerModelId])\n      block.models[binding.providerModelId] = { name: binding.providerModelId };\n  }\n\n  return { document, skipped };\n}\n\n/** What {@link materializeOpenCodeConfig} handed the driver. */\nexport interface OpenCodeMaterialization extends OpenCodeConfigBuild {\n  /** Child env fragment: `XDG_CONFIG_HOME`, or empty when nothing was written. */\n  env: Record<string, string>;\n  /** Absolute path of the rendered file, when one was written. */\n  path?: string;\n}\n\n/**\n * Render the session's custom endpoints and point the child at them.\n *\n * A session whose every endpoint is already a models.dev provider writes\n * nothing and leaves `XDG_CONFIG_HOME` alone: relocating it would hide the\n * developer's own `~/.config/opencode` for no gain. A file left by an earlier\n * render of the same session is removed in that case, so a session that drops\n * its custom endpoint stops answering to it.\n */\nexport function materializeOpenCodeConfig(\n  session: EnvDriverSession,\n  config: { cwd: string; sessionId?: string },\n): OpenCodeMaterialization {\n  const build = buildOpenCodeConfigDocument(session);\n  const home = driverSessionConfigHome(\"opencode\", config);\n  const dir = join(home, OPENCODE_CONFIG_DIRNAME);\n  if (Object.keys(build.document.provider).length === 0) {\n    removeSessionConfigFile(dir, OPENCODE_CONFIG_FILENAME);\n    return { ...build, env: {} };\n  }\n  const path = writeSessionConfigFile(\n    dir,\n    OPENCODE_CONFIG_FILENAME,\n    `${JSON.stringify(build.document, null, 2)}\\n`,\n  );\n  return { ...build, env: { XDG_CONFIG_HOME: home }, path };\n}\n","import type { DriverTarget } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport * as z from \"zod\";\nimport { getBridgeLogger } from \"../logger.js\";\nimport type { ModelEntry } from \"../models.js\";\nimport {\n  backendModelSelector,\n  credentialsForEveryProvider,\n  type EnvDriverSession,\n  registryModelEntries,\n  resolveEnvDriverSession,\n  resolveRegistryBinding,\n} from \"../provider-materialize/env-drivers.js\";\nimport { materializeOpenCodeConfig } from \"../provider-materialize/opencode-config.js\";\nimport { registryDriverConfig } from \"../provider-registry-derive.js\";\nimport { BUILTIN_DRIVER_CATALOG } from \"../registry.js\";\nimport type { AgentConfig, DriverInfo } from \"../types.js\";\nimport { extractCost, extractText, extractTokens, SubprocessCliDriver } from \"./_subprocess-cli.js\";\n\n/**\n * Agent driver for **OpenCode** (`opencode`), the model-agnostic open-source\n * coding agent.\n *\n * Spawns `opencode run \"<prompt>\" --format json` per turn and maps OpenCode's\n * JSON event stream to the unified {@link AgentEvent} stream. A\n * `credentials-n` backend (§2.3): every enabled AI provider entry's\n * credential reaches the child environment, and the active model is selected\n * as `-m <provider>/<model>`. An endpoint models.dev does not know is\n * additionally rendered into a session-private `opencode.json`\n * (`provider-materialize/opencode-config.ts`) that `XDG_CONFIG_HOME` points\n * the child at.\n *\n * @remarks\n * - The prompt is a **positional argument** — OpenCode's `-p` flag is a\n *   basic-auth password, not the prompt.\n * - Session resume via `-s <id>`; the session id is captured from the run's\n *   session event and emitted as `session_info`.\n * - OpenCode's `run --format json` event field names are not fully pinned\n *   upstream; {@link handleJson} reads them defensively.\n *\n * @see https://github.com/sst/opencode\n * @docLink packages/bridge/drivers#opencode-driver\n */\nexport class OpenCodeDriver extends SubprocessCliDriver {\n  readonly driverInfo: DriverInfo = {\n    id: \"opencode\",\n    name: \"OpenCode\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n  };\n\n  protected readonly log: Logger = getBridgeLogger(\"opencode\");\n  protected readonly defaultBin = \"opencode\";\n  protected readonly productName = \"OpenCode\";\n  protected readonly envPrefix = \"OPENCODE\";\n\n  private providers?: EnvDriverSession;\n\n  /** This session's AI providers, resolved once from the config. */\n  private providerSession(): EnvDriverSession {\n    this.providers ??= resolveEnvDriverSession(this.config);\n    return this.providers;\n  }\n\n  override reconfigure(patch: Partial<Pick<AgentConfig, \"model\" | \"thinking\" | \"effort\">>): void {\n    super.reconfigure(patch);\n    if (patch.model !== undefined) this.providers = undefined;\n  }\n\n  override getModel(): string | undefined {\n    return resolveRegistryBinding(this.providerSession())?.providerModelId ?? this.config.model;\n  }\n\n  protected buildArgs(message: string, resumeId: string | undefined): string[] {\n    const args = [\"run\", message, \"--format\", \"json\"];\n    const binding = resolveRegistryBinding(this.providerSession());\n    const model = binding ? backendModelSelector(binding) : this.config.model;\n    if (model) args.push(\"-m\", model);\n    if (resumeId) args.push(\"-s\", resumeId);\n    return args;\n  }\n\n  /**\n   * Base env plus one credential variable per enabled registry entry — the\n   * canonical `SKAILE_AIP_<ID>_KEY` and, for a stock catalog endpoint, the\n   * vendor carrier OpenCode reads on its own (`ANTHROPIC_API_KEY`, …). There\n   * is no per-driver key allowlist: what reaches the child is exactly what\n   * the registry can authenticate.\n   *\n   * This is also where the session's custom endpoints are rendered. It runs\n   * once per spawn, so a `reconfigure()` between turns re-renders rather than\n   * leaving the child pointed at the previous selection.\n   */\n  protected buildEnv(): Record<string, string> {\n    const session = this.providerSession();\n    const materialized = materializeOpenCodeConfig(session, this.config);\n    for (const entry of materialized.skipped)\n      this.log.warn(\"OpenCode cannot address an AI provider entry\", {\n        providerId: entry.id,\n        reason: entry.reason,\n      });\n    if (materialized.path)\n      this.log.debug(\"rendered OpenCode provider config\", { path: materialized.path });\n    return {\n      ...this.baseEnv(),\n      ...credentialsForEveryProvider(session),\n      ...materialized.env,\n    };\n  }\n\n  protected installHint(): string {\n    return \"OpenCode is not installed or not on your PATH. Install it with `npm i -g opencode-ai`.\";\n  }\n\n  protected handleJson(json: any): void {\n    switch (json?.type) {\n      case \"session\":\n      case \"session.start\":\n      case \"init\":\n        this.captureSession(json.id ?? json.sessionId ?? json.session?.id);\n        break;\n\n      case \"message\":\n      case \"message.part\":\n      case \"part\": {\n        const role = json.role ?? json.message?.role ?? \"assistant\";\n        if (role !== \"assistant\") break;\n        const text = extractText(json);\n        if (json.done === true || json.final === true) this.pushAssistantEnd(text);\n        else this.pushAssistantDelta(text);\n        break;\n      }\n\n      case \"tool\":\n      case \"tool_use\":\n      case \"tool.start\":\n        this.pushToolCall(json.name ?? json.tool ?? \"tool\", json.input ?? json.args ?? {});\n        break;\n\n      case \"tool_result\":\n      case \"tool.end\":\n        this.pushToolResult(\n          json.name ?? json.tool ?? \"tool\",\n          json.result ?? json.output ?? json.content,\n          Boolean(json.is_error ?? json.error),\n        );\n        break;\n\n      case \"error\":\n        this.pushError(this.classifyMessage(String(json.message ?? json.error ?? \"error\")));\n        break;\n\n      case \"result\":\n      case \"done\":\n      case \"finish\":\n        this.captureSession(json.sessionId ?? json.session_id);\n        this.pushResult({\n          tokens: extractTokens(json),\n          costUsd: extractCost(json),\n          summary: extractText(json) || \"Task completed\",\n        });\n        break;\n    }\n  }\n\n  /**\n   * OpenCode has no model-list endpoint of its own (it reads models.dev), so\n   * the session's registry is the list: every enabled entry's mapped ids,\n   * namespaced exactly as `-m` takes them.\n   */\n  override async listModels(): Promise<ModelEntry[]> {\n    return registryModelEntries(this.providerSession());\n  }\n}\n\n/**\n * `DriverTarget` wrapper for the opencode driver. Registered into the plugin\n * registry by `registerBuiltinDrivers()`.\n */\nexport const opencodeDriverTarget: DriverTarget<AgentConfig> = {\n  id: \"opencode\",\n  displayName: BUILTIN_DRIVER_CATALOG.opencode?.name ?? \"OpenCode\",\n  apiVersion: 1,\n  configSchema: z.custom<AgentConfig>(() => true),\n  create: async (config, _ctx) => new OpenCodeDriver(config),\n  listModels: async (registry, options) =>\n    new OpenCodeDriver({\n      cwd: process.cwd(),\n      sessionId: \"model-list\",\n      ...registryDriverConfig(registry, options),\n    }).listModels(),\n};\n"]}

package/dist/bridge/drivers/qwen.js

@@ -1,11 +1,14 @@
-import { GeminiFamilyDriver } from '../../chunk-FYIHH56K.js';
-import '../../chunk-3U3ZKYR7.js';
-import { fetchProviderModels } from '../../chunk-GURXUF2J.js';
+import { GeminiFamilyDriver } from '../../chunk-K3YR33F6.js';
+import { resolveRegistryBinding } from '../../chunk-LN2BQVRB.js';
+import { fetchProviderModels } from '../../chunk-3ZTQY276.js';
 import '../../chunk-GAH4YRCI.js';
-import { BUILTIN_DRIVER_CATALOG, getBridgeLogger } from '../../chunk-AQW4BWNR.js';
+import { BUILTIN_DRIVER_CATALOG, getBridgeLogger, entryCredentialValue, registryDriverConfig } from '../../chunk-SG4D2UOK.js';
 import '../../chunk-6E6PKKAD.js';
 import '../../chunk-FTG7CRFD.js';
+import '../../chunk-KSIRR5PL.js';
+import '../../chunk-ILG4BXYE.js';
 import '../../chunk-W4IPN3DD.js';
+import '../../chunk-N7B3LZ7V.js';
 import '../../chunk-NSBPE2FW.js';
 import * as z from 'zod';
 
@@ -22,25 +25,48 @@ var QwenDriver = class extends GeminiFamilyDriver {
   envPrefix = "QWEN";
   buildArgs(message, resumeId) {
     const args = ["-p", message, "-o", "stream-json", "--include-partial-messages"];
-    if (this.config.model) args.push("-m", this.config.model);
+    const model = this.registryBinding()?.providerModelId ?? this.config.model;
+    if (model) args.push("-m", model);
     if (resumeId) args.push("--resume", resumeId);
     return args;
   }
   buildEnv() {
     const env = this.baseEnv(["OPENAI_API_KEY", "OPENAI_BASE_URL", "OPENAI_MODEL"]);
-    const key = this.config.apiKeys?.openai ?? this.config.apiKeys?.qwen ?? this.config.env?.OPENAI_API_KEY ?? process.env.OPENAI_API_KEY;
-    if (key) env.OPENAI_API_KEY = key;
-    if (this.config.model) env.OPENAI_MODEL = this.config.model;
     env.QWEN_CODE_UNATTENDED_RETRY = "1";
+    const binding = this.registryBinding();
+    if (!binding) {
+      if (this.config.model) env.OPENAI_MODEL = this.config.model;
+      return env;
+    }
+    delete env.OPENAI_API_KEY;
+    delete env.OPENAI_BASE_URL;
+    delete env.OPENAI_MODEL;
+    const key = entryCredentialValue(binding.providerId, binding.entry, {
+      env: this.providerSession().lookupEnv
+    });
+    if (key) env.OPENAI_API_KEY = key;
+    if (binding.baseUrl) env.OPENAI_BASE_URL = binding.baseUrl;
+    if (binding.providerModelId) env.OPENAI_MODEL = binding.providerModelId;
     return env;
   }
   installHint() {
     return "Qwen Code is not installed or not on your PATH. Install it with `npm i -g @qwen-code/qwen-code`.";
   }
+  /**
+   * Discovery runs against the bound entry — its credential and its endpoint,
+   * so a custom OpenAI-compatible host lists its own models rather than
+   * OpenAI's.
+   */
   async listModels() {
-    const key = this.config.apiKeys?.openai ?? process.env.OPENAI_API_KEY;
+    const session = this.providerSession();
+    const binding = resolveRegistryBinding(session);
+    const key = binding ? entryCredentialValue(binding.providerId, binding.entry, { env: session.lookupEnv }) : session.lookupEnv.OPENAI_API_KEY;
     if (!key) return [];
-    const result = await fetchProviderModels("openai", key);
+    const result = await fetchProviderModels(
+      "openai",
+      key,
+      binding?.baseUrl ? { baseUrl: binding.baseUrl } : {}
+    );
     return result.ok ? result.models : [];
   }
 };
@@ -50,7 +76,11 @@ var qwenDriverTarget = {
   apiVersion: 1,
   configSchema: z.custom(() => true),
   create: async (config, _ctx) => new QwenDriver(config),
-  listModels: async (apiKeys) => new QwenDriver({ cwd: process.cwd(), sessionId: "model-list", apiKeys }).listModels()
+  listModels: async (registry, options) => new QwenDriver({
+    cwd: process.cwd(),
+    sessionId: "model-list",
+    ...registryDriverConfig(registry, options)
+  }).listModels()
 };
 
 export { QwenDriver, qwenDriverTarget };

package/dist/bridge/drivers/qwen.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../bridge/src/drivers/qwen.ts"],"names":[],"mappings":";;;;;;;;;;;AA0BO,IAAM,UAAA,GAAN,cAAyB,kBAAA,CAAmB;AAAA,EACxC,UAAA,GAAyB;AAAA,IAChC,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,WAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB;AAAA,GACvB;AAAA,EAEmB,GAAA,GAAc,gBAAgB,MAAM,CAAA;AAAA,EACpC,UAAA,GAAa,MAAA;AAAA,EACb,WAAA,GAAc,WAAA;AAAA,EACd,SAAA,GAAY,MAAA;AAAA,EAErB,SAAA,CAAU,SAAiB,QAAA,EAAwC;AAC3E,IAAA,MAAM,OAAO,CAAC,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,eAAe,4BAA4B,CAAA;AAC9E,IAAA,IAAI,IAAA,CAAK,OAAO,KAAA,EAAO,IAAA,CAAK,KAAK,IAAA,EAAM,IAAA,CAAK,OAAO,KAAK,CAAA;AACxD,IAAA,IAAI,QAAA,EAAU,IAAA,CAAK,IAAA,CAAK,UAAA,EAAY,QAAQ,CAAA;AAC5C,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEU,QAAA,GAAmC;AAC3C,IAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,CAAC,gBAAA,EAAkB,iBAAA,EAAmB,cAAc,CAAC,CAAA;AAC9E,IAAA,MAAM,GAAA,GACJ,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,UACrB,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,IAAA,IACrB,IAAA,CAAK,MAAA,CAAO,GAAA,EAAK,cAAA,IACjB,QAAQ,GAAA,CAAI,cAAA;AACd,IAAA,IAAI,GAAA,MAAS,cAAA,GAAiB,GAAA;AAC9B,IAAA,IAAI,KAAK,MAAA,CAAO,KAAA,EAAO,GAAA,CAAI,YAAA,GAAe,KAAK,MAAA,CAAO,KAAA;AACtD,IAAA,GAAA,CAAI,0BAAA,GAA6B,GAAA;AACjC,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEU,WAAA,GAAsB;AAC9B,IAAA,OAAO,kGAAA;AAAA,EACT;AAAA,EAEA,MAAe,UAAA,GAAoC;AACjD,IAAA,MAAM,MAAM,IAAA,CAAK,MAAA,CAAO,OAAA,EAAS,MAAA,IAAU,QAAQ,GAAA,CAAI,cAAA;AACvD,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAC;AAClB,IAAA,MAAM,MAAA,GAAS,MAAM,mBAAA,CAAoB,QAAA,EAAU,GAAG,CAAA;AACtD,IAAA,OAAO,MAAA,CAAO,EAAA,GAAK,MAAA,CAAO,MAAA,GAAS,EAAC;AAAA,EACtC;AACF;AAMO,IAAM,gBAAA,GAA8C;AAAA,EACzD,EAAA,EAAI,MAAA;AAAA,EACJ,WAAA,EAAa,sBAAA,CAAuB,IAAA,EAAM,IAAA,IAAQ,WAAA;AAAA,EAClD,UAAA,EAAY,CAAA;AAAA,EACZ,YAAA,EAAgB,CAAA,CAAA,MAAA,CAAoB,MAAM,IAAI,CAAA;AAAA,EAC9C,QAAQ,OAAO,MAAA,EAAQ,IAAA,KAAS,IAAI,WAAW,MAAM,CAAA;AAAA,EACrD,UAAA,EAAY,OAAO,OAAA,KACjB,IAAI,WAAW,EAAE,GAAA,EAAK,OAAA,CAAQ,GAAA,IAAO,SAAA,EAAW,YAAA,EAAc,OAAA,EAAS,EAAE,UAAA;AAC7E","file":"qwen.js","sourcesContent":["import type { DriverTarget } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport * as z from \"zod\";\nimport { getBridgeLogger } from \"../logger.js\";\nimport { fetchProviderModels, type ModelEntry } from \"../models.js\";\nimport { BUILTIN_DRIVER_CATALOG } from \"../registry.js\";\nimport type { AgentConfig, DriverInfo } from \"../types.js\";\nimport { GeminiFamilyDriver } from \"./gemini.js\";\n\n/**\n * Agent driver for **Qwen Code** (`qwen`) — a fork of Gemini CLI.\n *\n * Reuses {@link GeminiFamilyDriver}'s stream-json event mapping. Unlike Gemini,\n * Qwen is **model-agnostic / OpenAI-compatible**: it reads `OPENAI_API_KEY`,\n * `OPENAI_BASE_URL`, and `OPENAI_MODEL`, so it works against any\n * OpenAI-completions endpoint (Alibaba DashScope by default).\n *\n * @remarks\n * - Spawns `qwen -p \"<prompt>\" -o stream-json --include-partial-messages`.\n * - Sets `QWEN_CODE_UNATTENDED_RETRY=1` so the CLI backs off on 429/529 in\n *   unattended driver contexts.\n * - Supports headless session resume via `--resume <id>`.\n *\n * @see https://github.com/QwenLM/qwen-code\n * @docLink packages/bridge/drivers#qwen-driver\n */\nexport class QwenDriver extends GeminiFamilyDriver {\n  readonly driverInfo: DriverInfo = {\n    id: \"qwen\",\n    name: \"Qwen Code\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n  };\n\n  protected readonly log: Logger = getBridgeLogger(\"qwen\");\n  protected readonly defaultBin = \"qwen\";\n  protected readonly productName = \"Qwen Code\";\n  protected readonly envPrefix = \"QWEN\";\n\n  protected buildArgs(message: string, resumeId: string | undefined): string[] {\n    const args = [\"-p\", message, \"-o\", \"stream-json\", \"--include-partial-messages\"];\n    if (this.config.model) args.push(\"-m\", this.config.model);\n    if (resumeId) args.push(\"--resume\", resumeId);\n    return args;\n  }\n\n  protected buildEnv(): Record<string, string> {\n    const env = this.baseEnv([\"OPENAI_API_KEY\", \"OPENAI_BASE_URL\", \"OPENAI_MODEL\"]);\n    const key =\n      this.config.apiKeys?.openai ??\n      this.config.apiKeys?.qwen ??\n      this.config.env?.OPENAI_API_KEY ??\n      process.env.OPENAI_API_KEY;\n    if (key) env.OPENAI_API_KEY = key;\n    if (this.config.model) env.OPENAI_MODEL = this.config.model;\n    env.QWEN_CODE_UNATTENDED_RETRY = \"1\";\n    return env;\n  }\n\n  protected installHint(): string {\n    return \"Qwen Code is not installed or not on your PATH. Install it with `npm i -g @qwen-code/qwen-code`.\";\n  }\n\n  override async listModels(): Promise<ModelEntry[]> {\n    const key = this.config.apiKeys?.openai ?? process.env.OPENAI_API_KEY;\n    if (!key) return [];\n    const result = await fetchProviderModels(\"openai\", key);\n    return result.ok ? result.models : [];\n  }\n}\n\n/**\n * `DriverTarget` wrapper for the qwen driver. Registered into the plugin\n * registry by `registerBuiltinDrivers()`.\n */\nexport const qwenDriverTarget: DriverTarget<AgentConfig> = {\n  id: \"qwen\",\n  displayName: BUILTIN_DRIVER_CATALOG.qwen?.name ?? \"Qwen Code\",\n  apiVersion: 1,\n  configSchema: z.custom<AgentConfig>(() => true),\n  create: async (config, _ctx) => new QwenDriver(config),\n  listModels: async (apiKeys) =>\n    new QwenDriver({ cwd: process.cwd(), sessionId: \"model-list\", apiKeys }).listModels(),\n};\n"]}
+{"version":3,"sources":["../../../bridge/src/drivers/qwen.ts"],"names":[],"mappings":";;;;;;;;;;;;;;AA8BO,IAAM,UAAA,GAAN,cAAyB,kBAAA,CAAmB;AAAA,EACxC,UAAA,GAAyB;AAAA,IAChC,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,WAAA;AAAA,IACN,aAAA,EAAe,IAAA;AAAA,IACf,mBAAA,EAAqB;AAAA,GACvB;AAAA,EAEmB,GAAA,GAAc,gBAAgB,MAAM,CAAA;AAAA,EACpC,UAAA,GAAa,MAAA;AAAA,EACb,WAAA,GAAc,WAAA;AAAA,EACd,SAAA,GAAY,MAAA;AAAA,EAErB,SAAA,CAAU,SAAiB,QAAA,EAAwC;AAC3E,IAAA,MAAM,OAAO,CAAC,IAAA,EAAM,OAAA,EAAS,IAAA,EAAM,eAAe,4BAA4B,CAAA;AAC9E,IAAA,MAAM,QAAQ,IAAA,CAAK,eAAA,EAAgB,EAAG,eAAA,IAAmB,KAAK,MAAA,CAAO,KAAA;AACrE,IAAA,IAAI,KAAA,EAAO,IAAA,CAAK,IAAA,CAAK,IAAA,EAAM,KAAK,CAAA;AAChC,IAAA,IAAI,QAAA,EAAU,IAAA,CAAK,IAAA,CAAK,UAAA,EAAY,QAAQ,CAAA;AAC5C,IAAA,OAAO,IAAA;AAAA,EACT;AAAA,EAEU,QAAA,GAAmC;AAC3C,IAAA,MAAM,MAAM,IAAA,CAAK,OAAA,CAAQ,CAAC,gBAAA,EAAkB,iBAAA,EAAmB,cAAc,CAAC,CAAA;AAC9E,IAAA,GAAA,CAAI,0BAAA,GAA6B,GAAA;AACjC,IAAA,MAAM,OAAA,GAAU,KAAK,eAAA,EAAgB;AACrC,IAAA,IAAI,CAAC,OAAA,EAAS;AACZ,MAAA,IAAI,KAAK,MAAA,CAAO,KAAA,EAAO,GAAA,CAAI,YAAA,GAAe,KAAK,MAAA,CAAO,KAAA;AACtD,MAAA,OAAO,GAAA;AAAA,IACT;AAIA,IAAA,OAAO,GAAA,CAAI,cAAA;AACX,IAAA,OAAO,GAAA,CAAI,eAAA;AACX,IAAA,OAAO,GAAA,CAAI,YAAA;AACX,IAAA,MAAM,GAAA,GAAM,oBAAA,CAAqB,OAAA,CAAQ,UAAA,EAAY,QAAQ,KAAA,EAAO;AAAA,MAClE,GAAA,EAAK,IAAA,CAAK,eAAA,EAAgB,CAAE;AAAA,KAC7B,CAAA;AACD,IAAA,IAAI,GAAA,MAAS,cAAA,GAAiB,GAAA;AAC9B,IAAA,IAAI,OAAA,CAAQ,OAAA,EAAS,GAAA,CAAI,eAAA,GAAkB,OAAA,CAAQ,OAAA;AACnD,IAAA,IAAI,OAAA,CAAQ,eAAA,EAAiB,GAAA,CAAI,YAAA,GAAe,OAAA,CAAQ,eAAA;AACxD,IAAA,OAAO,GAAA;AAAA,EACT;AAAA,EAEU,WAAA,GAAsB;AAC9B,IAAA,OAAO,kGAAA;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAe,UAAA,GAAoC;AACjD,IAAA,MAAM,OAAA,GAAU,KAAK,eAAA,EAAgB;AACrC,IAAA,MAAM,OAAA,GAAU,uBAAuB,OAAO,CAAA;AAC9C,IAAA,MAAM,GAAA,GAAM,OAAA,GACR,oBAAA,CAAqB,OAAA,CAAQ,YAAY,OAAA,CAAQ,KAAA,EAAO,EAAE,GAAA,EAAK,OAAA,CAAQ,SAAA,EAAW,CAAA,GAClF,QAAQ,SAAA,CAAU,cAAA;AACtB,IAAA,IAAI,CAAC,GAAA,EAAK,OAAO,EAAC;AAClB,IAAA,MAAM,SAAS,MAAM,mBAAA;AAAA,MACnB,QAAA;AAAA,MACA,GAAA;AAAA,MACA,SAAS,OAAA,GAAU,EAAE,SAAS,OAAA,CAAQ,OAAA,KAAY;AAAC,KACrD;AACA,IAAA,OAAO,MAAA,CAAO,EAAA,GAAK,MAAA,CAAO,MAAA,GAAS,EAAC;AAAA,EACtC;AACF;AAMO,IAAM,gBAAA,GAA8C;AAAA,EACzD,EAAA,EAAI,MAAA;AAAA,EACJ,WAAA,EAAa,sBAAA,CAAuB,IAAA,EAAM,IAAA,IAAQ,WAAA;AAAA,EAClD,UAAA,EAAY,CAAA;AAAA,EACZ,YAAA,EAAgB,CAAA,CAAA,MAAA,CAAoB,MAAM,IAAI,CAAA;AAAA,EAC9C,QAAQ,OAAO,MAAA,EAAQ,IAAA,KAAS,IAAI,WAAW,MAAM,CAAA;AAAA,EACrD,UAAA,EAAY,OAAO,QAAA,EAAU,OAAA,KAC3B,IAAI,UAAA,CAAW;AAAA,IACb,GAAA,EAAK,QAAQ,GAAA,EAAI;AAAA,IACjB,SAAA,EAAW,YAAA;AAAA,IACX,GAAG,oBAAA,CAAqB,QAAA,EAAU,OAAO;AAAA,GAC1C,EAAE,UAAA;AACP","file":"qwen.js","sourcesContent":["import type { DriverTarget } from \"@skaile/workspaces/plugin-registry\";\nimport type { Logger } from \"@skaile/workspaces/types\";\nimport * as z from \"zod\";\nimport { getBridgeLogger } from \"../logger.js\";\nimport { fetchProviderModels, type ModelEntry } from \"../models.js\";\nimport { entryCredentialValue } from \"../provider-materialize/credential-env.js\";\nimport { resolveRegistryBinding } from \"../provider-materialize/env-drivers.js\";\nimport { registryDriverConfig } from \"../provider-registry-derive.js\";\nimport { BUILTIN_DRIVER_CATALOG } from \"../registry.js\";\nimport type { AgentConfig, DriverInfo } from \"../types.js\";\nimport { GeminiFamilyDriver } from \"./gemini.js\";\n\n/**\n * Agent driver for **Qwen Code** (`qwen`) — a fork of Gemini CLI.\n *\n * Reuses {@link GeminiFamilyDriver}'s stream-json event mapping. Unlike\n * Gemini, Qwen is **OpenAI-compatible**: it reads `OPENAI_API_KEY`,\n * `OPENAI_BASE_URL` and `OPENAI_MODEL`, so the AI provider entry the session's\n * model selector names maps onto it one-to-one — any `openai-completions`\n * endpoint (Alibaba DashScope by default).\n *\n * @remarks\n * - Spawns `qwen -p \"<prompt>\" -o stream-json --include-partial-messages`.\n * - Sets `QWEN_CODE_UNATTENDED_RETRY=1` so the CLI backs off on 429/529 in\n *   unattended driver contexts.\n * - Supports headless session resume via `--resume <id>`.\n *\n * @see https://github.com/QwenLM/qwen-code\n * @docLink packages/bridge/drivers#qwen-driver\n */\nexport class QwenDriver extends GeminiFamilyDriver {\n  readonly driverInfo: DriverInfo = {\n    id: \"qwen\",\n    name: \"Qwen Code\",\n    modelAgnostic: true,\n    supportsInBandAbort: false,\n  };\n\n  protected readonly log: Logger = getBridgeLogger(\"qwen\");\n  protected readonly defaultBin = \"qwen\";\n  protected readonly productName = \"Qwen Code\";\n  protected readonly envPrefix = \"QWEN\";\n\n  protected buildArgs(message: string, resumeId: string | undefined): string[] {\n    const args = [\"-p\", message, \"-o\", \"stream-json\", \"--include-partial-messages\"];\n    const model = this.registryBinding()?.providerModelId ?? this.config.model;\n    if (model) args.push(\"-m\", model);\n    if (resumeId) args.push(\"--resume\", resumeId);\n    return args;\n  }\n\n  protected buildEnv(): Record<string, string> {\n    const env = this.baseEnv([\"OPENAI_API_KEY\", \"OPENAI_BASE_URL\", \"OPENAI_MODEL\"]);\n    env.QWEN_CODE_UNATTENDED_RETRY = \"1\";\n    const binding = this.registryBinding();\n    if (!binding) {\n      if (this.config.model) env.OPENAI_MODEL = this.config.model;\n      return env;\n    }\n\n    // The entry is the authority: an inherited OPENAI_* triple must not\n    // silently re-point a session that names its own endpoint.\n    delete env.OPENAI_API_KEY;\n    delete env.OPENAI_BASE_URL;\n    delete env.OPENAI_MODEL;\n    const key = entryCredentialValue(binding.providerId, binding.entry, {\n      env: this.providerSession().lookupEnv,\n    });\n    if (key) env.OPENAI_API_KEY = key;\n    if (binding.baseUrl) env.OPENAI_BASE_URL = binding.baseUrl;\n    if (binding.providerModelId) env.OPENAI_MODEL = binding.providerModelId;\n    return env;\n  }\n\n  protected installHint(): string {\n    return \"Qwen Code is not installed or not on your PATH. Install it with `npm i -g @qwen-code/qwen-code`.\";\n  }\n\n  /**\n   * Discovery runs against the bound entry — its credential and its endpoint,\n   * so a custom OpenAI-compatible host lists its own models rather than\n   * OpenAI's.\n   */\n  override async listModels(): Promise<ModelEntry[]> {\n    const session = this.providerSession();\n    const binding = resolveRegistryBinding(session);\n    const key = binding\n      ? entryCredentialValue(binding.providerId, binding.entry, { env: session.lookupEnv })\n      : session.lookupEnv.OPENAI_API_KEY;\n    if (!key) return [];\n    const result = await fetchProviderModels(\n      \"openai\",\n      key,\n      binding?.baseUrl ? { baseUrl: binding.baseUrl } : {},\n    );\n    return result.ok ? result.models : [];\n  }\n}\n\n/**\n * `DriverTarget` wrapper for the qwen driver. Registered into the plugin\n * registry by `registerBuiltinDrivers()`.\n */\nexport const qwenDriverTarget: DriverTarget<AgentConfig> = {\n  id: \"qwen\",\n  displayName: BUILTIN_DRIVER_CATALOG.qwen?.name ?? \"Qwen Code\",\n  apiVersion: 1,\n  configSchema: z.custom<AgentConfig>(() => true),\n  create: async (config, _ctx) => new QwenDriver(config),\n  listModels: async (registry, options) =>\n    new QwenDriver({\n      cwd: process.cwd(),\n      sessionId: \"model-list\",\n      ...registryDriverConfig(registry, options),\n    }).listModels(),\n};\n"]}

package/dist/bridge/index.js

@@ -1,24 +1,27 @@
-export { BridgeRuntime, EventNormalizer, createRuntime, detectFileChange, detectFileChanges, labelToolCall, summarizeToolCall, summarizeToolResult, validateApiKey } from '../chunk-XMULHVKX.js';
-export { CLOUD_SECRET_ENV_KEYS, SUPPORTED_CLOUDS, buildClaudeCloudEnv, probeResumeTranscript, resolveClaudeConfigDir } from '../chunk-3NCGSSCU.js';
+export { BridgeRuntime, EventNormalizer, createRuntime, detectFileChange, detectFileChanges, labelToolCall, summarizeToolCall, summarizeToolResult, validateApiKey } from '../chunk-FODAC4RE.js';
+export { ANTHROPIC_DEFAULT_BASE_URL, buildClaudeEndpointEnv, claudeEndpointMode, probeResumeTranscript, resolveClaudeConfigDir } from '../chunk-WLFRA5RM.js';
 export { CODEX_NATIVE_STATE_FORMAT, CodexNativeStateUnavailable } from '../chunk-LOO5CB5M.js';
-export { dispatchCapability, filterRenderCapabilities, renderFallback } from '../chunk-UL4LD7KD.js';
-export { ModelTierResolutionError, PROVIDER_ENDPOINTS, PROVIDER_MODEL_TIERS, STATIC_MODELS, fetchProviderModels, getModels, getStaticModels, resolveModelTier, resolveProviderModelsUrl } from '../chunk-GURXUF2J.js';
+export { dispatchCapability, filterRenderCapabilities, renderFallback } from '../chunk-QQL3ET3J.js';
+export { ModelTierResolutionError, PROVIDER_MODEL_TIERS, STATIC_MODELS, fetchProviderModels, getModels, getStaticModels, modelIdTargetForEntry, resolveManifestModel, resolveModelCapabilities, resolveModelTier } from '../chunk-3ZTQY276.js';
 export { AccountUnavailableError, AuthError, classifyClaudeSdkError, reclassifyAuthAsAccountUnavailable } from '../chunk-GAH4YRCI.js';
-export { AgentDriver, BUILTIN_DRIVER_CATALOG, DRIVER_CATALOG, createDriver, getBridgeLogger, listDrivers, listModelsForDriver, registerBuiltinDrivers } from '../chunk-AQW4BWNR.js';
+export { AI_PROVIDER_PRESETS, AgentDriver, BUILTIN_DRIVER_CATALOG, DRIVER_CATALOG, PROVIDER_CREDENTIAL_ENV_PREFIX, PROVIDER_CREDENTIAL_ENV_SUFFIX, buildCredentialHeaders, catalogLayer, conventionalCredentialEnvName, createDriver, deriveRegistryFromLegacyApiKeys, entryCredentialEnv, entryCredentialValue, expandPreset, getBridgeLogger, getProviderPreset, listDrivers, listModelsForDriver, listProviderPresets, presetBaseUrl, probeProviderEntry, providerCredentialEnvName, registerBuiltinDrivers, registryCredentialEnv, registryDriverConfig, resolveEntryCredential, resolvePresetBaseUrl, resolveProbeUrl, toMergedRegistry } from '../chunk-SG4D2UOK.js';
 import '../chunk-6E6PKKAD.js';
-import '../chunk-72DG6GSB.js';
-import '../chunk-HSRHO7SK.js';
+import '../chunk-YS4XBN7O.js';
+import '../chunk-C3QLJTMB.js';
+import '../chunk-REILIKVM.js';
 import '../chunk-F3HNW354.js';
 import '../chunk-K5GBV4SA.js';
 import '../chunk-QVZA2MDT.js';
-import '../chunk-IB4XKQMQ.js';
-import '../chunk-MBARHWMZ.js';
+import '../chunk-K27T47OO.js';
 import '../chunk-MENCWIHW.js';
 import '../chunk-P4VHQA4N.js';
 import '../chunk-MKZOK4JU.js';
 import '../chunk-GEEW6SY2.js';
 import '../chunk-FTG7CRFD.js';
+import '../chunk-KSIRR5PL.js';
+import '../chunk-ILG4BXYE.js';
 import '../chunk-W4IPN3DD.js';
+import '../chunk-N7B3LZ7V.js';
 import '../chunk-NSBPE2FW.js';
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/bridge/src/cloud.d.ts

@@ -1,89 +1,80 @@
 /**
- * AI cloud-provider transport dimension for the `claude-sdk` driver.
+ * AI endpoint transport for the `claude-sdk` driver — the Claude Agent SDK's
+ * child-process environment.
  *
- * `cloud` is a config axis orthogonal to `provider` (model vendor) and
- * `driver` (agent runtime). Under `driver: claude-sdk` each non-default value
- * maps to one of the Claude Agent SDK's native env-var transports:
- * Amazon Bedrock, Google Vertex AI, Azure AI Foundry, or a generic
- * `ANTHROPIC_BASE_URL` gateway (LiteLLM / corporate proxy).
+ * {@link buildClaudeEndpointEnv} takes an **AI provider registry entry** and
+ * is what the driver calls, on every transport. It is plan §2.3's
+ * `buildEndpointEnv` for the claude-sdk row (named for the driver because the
+ * vars it emits — `CLAUDE_CODE_USE_*`, `ANTHROPIC_*` — are the Claude Agent
+ * SDK's own contract, not a portable one).
+ *
+ * A registry entry says what the deleted `cloud` axis said — Amazon Bedrock,
+ * Google Vertex AI, Azure AI Foundry, a generic gateway — with `surface` +
+ * `transport` + `base_url` + `credential`, and says it for the direct
+ * endpoint too, which the `cloud` axis could not address at all.
  *
  * Cross-repo contract: env key names and semantics here are load-bearing —
  * the platform resolves credential bundles against the same key set.
  */
+import { type AIProviderEntry } from "@skaile/workspaces/core/provider-registry";
 /**
- * Canonical list of supported cloud transports. `"default"` (or an absent
- * `cloud` field) means the provider's native API — today's behavior, unchanged.
- *
- * The codec in `core/workspace-config.ts` keeps a local copy (`KNOWN_CLOUDS`)
- * to avoid an import cycle; a drift test asserts parity.
- *
- * @since 1.3.0
+ * The Anthropic first-party endpoint. An entry that resolves to exactly this
+ * host needs no `ANTHROPIC_BASE_URL`: the SDK already points there, and an
+ * explicit value would make every default session look like a third-party
+ * redirect to Claude Code's own telemetry and auth heuristics.
  */
-export declare const SUPPORTED_CLOUDS: readonly ["default", "bedrock", "vertex", "azure", "gateway"];
-/** One of the supported cloud transport identifiers. */
-export type CloudId = (typeof SUPPORTED_CLOUDS)[number];
+export declare const ANTHROPIC_DEFAULT_BASE_URL = "https://api.anthropic.com";
 /**
- * Non-secret transport settings for a cloud. Sourced from skaile.yaml
- * `cloud_config` (snake_case on the wire, camelCase in-process — converted
- * exactly once at the settings/serve boundary).
+ * Which of the Claude Agent SDK's four native transports an entry addresses.
  *
- * Must stay field-identical with core's `CloudTransportConfig` and the inline
- * `AgentSessionConfig.cloudConfig` shape (kept separate to avoid a core↔bridge
- * import cycle) — a field added here must be added there too.
- *
- * @since 1.3.0
+ * The SDK has no `transport` field: it switches on a `CLAUDE_CODE_USE_*` flag.
+ * Bedrock and Vertex are their own wire surfaces, so they are recognized by
+ * `surface` as well as by `transport` — a legacy-derived entry that had no
+ * region (and therefore no `params`, and therefore no `transport`) is still a
+ * Bedrock session, exactly as it was before the registry existed.
  */
-export interface CloudConfig {
-    /** bedrock: AWS region (`AWS_REGION`); vertex: `CLOUD_ML_REGION`. */
-    region?: string;
-    /** vertex only: GCP project (`ANTHROPIC_VERTEX_PROJECT_ID`). */
-    projectId?: string;
-    /** azure only: Foundry resource name (`ANTHROPIC_FOUNDRY_RESOURCE`). */
-    resource?: string;
-    /** azure (alternative to `resource`) / gateway (required): endpoint base URL. */
-    baseUrl?: string;
+export type ClaudeEndpointMode = "anthropic" | "bedrock" | "vertex" | "foundry";
+/** Classify a registry entry into its {@link ClaudeEndpointMode}. */
+export declare function claudeEndpointMode(entry: AIProviderEntry): ClaudeEndpointMode;
+/** Arguments for {@link buildClaudeEndpointEnv}. */
+export interface ClaudeEndpointEnvInput {
+    /** The selected registry entry — the whole endpoint definition. */
+    entry: AIProviderEntry;
+    /**
+     * The entry's credential, already resolved from its `credential.ref`
+     * (`resolveEntryCredential`). Absent for `kind: none`, for an ambient
+     * `sigv4` / `google_adc` / `azure_entra` chain, for `oauth` (whose blob the
+     * runner writes to the Claude credentials file, never to the env), and for a
+     * reference that did not resolve.
+     */
+    credential?: string;
+    /**
+     * The driver's base environment — `process.env` with `undefined` dropped.
+     * The endpoint vars are layered **on top** of it, never instead of it, so
+     * `PATH`, `HOME` and `SKAILE_SESSION_ID` reach the child.
+     */
+    baseEnv: Record<string, string>;
+    /** `AgentConfig.env` plus any credential material the session carried. */
+    configEnv?: Record<string, string>;
 }
 /**
- * Secret env keys that make up the credential bundle for each non-default
- * cloud. The platform delivers these env-keyed in the `session_init` secrets
- * map; the runner picks them out via `resolveCloudSecretBundle`.
+ * Assemble the Claude Agent SDK child env for one registry entry (plan §2.3).
  *
- * Vertex note: `GOOGLE_APPLICATION_CREDENTIALS_JSON` is our convention for the
- * raw service-account JSON blob. The runner materializes it to a 0600 file and
- * hands the driver `GOOGLE_APPLICATION_CREDENTIALS` (a path) instead — the
- * driver never sees the raw JSON.
+ * Pure (no external state read, no input mutated). Starts from `baseEnv`
+ * merged with `configEnv`, scrubs the inherited Anthropic credential/routing
+ * vars and every `CLAUDE_CODE_USE_*` flag, then writes exactly what the entry
+ * describes: at most one transport flag, the endpoint, and the credential in
+ * the carrier its `kind` names.
  *
- * @since 1.3.0
- */
-export declare const CLOUD_SECRET_ENV_KEYS: Record<Exclude<CloudId, "default">, readonly string[]>;
-/**
- * Assemble the Claude Agent SDK child env for a non-default cloud transport.
- *
- * Pure function (no external state touched; the returned `env` is a fresh
- * object — inputs are never mutated): starts from `baseEnv` (caller passes a
- * copy of `process.env` with undefined stripped) merged with `configEnv`,
- * scrubs inherited Anthropic
- * credential/routing vars and every `CLAUDE_CODE_USE_*` flag, then sets exactly
- * one `CLAUDE_CODE_USE_*` flag (none for gateway) plus the cloud's credential
- * bundle and derived non-secret vars. AWS_* / GOOGLE_* ambient values are NOT
- * scrubbed, so a standalone CLI inherits ambient cloud credentials when no
- * explicit `cloudSecrets` bundle is provided. Gateway is the mirror case: its
- * carriers ARE the scrubbed Anthropic vars, so the gateway branch restores
- * them from `cloudSecrets` → `fallbackApiKey` (resolved `apiKeys.anthropic`)
- * → the pre-scrub config/ambient value — otherwise a standalone gateway
- * session would have no reachable auth carrier at all.
+ * Credential kinds (§1.4): `api_key_header` → `ANTHROPIC_API_KEY` (the SDK
+ * sends it as `x-api-key`); `bearer` → `ANTHROPIC_AUTH_TOKEN` (sent as
+ * `Authorization: Bearer`); `sigv4` / `google_adc` / `azure_entra` emit
+ * nothing and let the AWS/Google/Azure chain sign — which is why the scrub
+ * deliberately spares ambient `AWS_*` / `GOOGLE_*` values; `oauth` and `none`
+ * emit nothing, and the pre-scrub ambient carriers are restored so an OAuth or
+ * shell-configured session keeps the auth it had.
  *
- * Never returns `undefined` values; absent settings are simply omitted.
- *
- * @since 1.3.0
+ * Never returns `undefined` or empty values; absent settings are omitted.
  */
-export declare function buildClaudeCloudEnv(args: {
-    cloud: Exclude<CloudId, "default">;
-    cloudConfig?: CloudConfig;
-    cloudSecrets?: Record<string, string>;
-    baseEnv: Record<string, string>;
-    configEnv?: Record<string, string>;
-    /** Resolved API key (e.g. `apiKeys.anthropic`) — gateway auth fallback only. */
-    fallbackApiKey?: string;
-}): Record<string, string>;
+export declare function buildClaudeEndpointEnv(args: ClaudeEndpointEnvInput): Record<string, string>;
 //# sourceMappingURL=cloud.d.ts.map

package/dist/bridge/src/cloud.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../../bridge/src/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH;;;;;;;;GAQG;AACH,eAAO,MAAM,gBAAgB,+DAAgE,CAAC;AAE9F,wDAAwD;AACxD,MAAM,MAAM,OAAO,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC;AAExD;;;;;;;;;;GAUG;AACH,MAAM,WAAW,WAAW;IAC1B,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,gEAAgE;IAChE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,wEAAwE;IACxE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,qBAAqB,EAAE,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAUxF,CAAC;AAeF;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE;IACxC,KAAK,EAAE,OAAO,CAAC,OAAO,EAAE,SAAS,CAAC,CAAC;IACnC,WAAW,CAAC,EAAE,WAAW,CAAC;IAC1B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACnC,gFAAgF;IAChF,cAAc,CAAC,EAAE,MAAM,CAAC;CACzB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAuEzB"}
+{"version":3,"file":"cloud.d.ts","sourceRoot":"","sources":["../../../bridge/src/cloud.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EACL,KAAK,eAAe,EAIrB,MAAM,2CAA2C,CAAC;AAgBnD;;;;;GAKG;AACH,eAAO,MAAM,0BAA0B,8BAA8B,CAAC;AActE;;;;;;;;GAQG;AACH,MAAM,MAAM,kBAAkB,GAAG,WAAW,GAAG,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;AAEhF,qEAAqE;AACrE,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,eAAe,GAAG,kBAAkB,CAO7E;AAED,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC,mEAAmE;IACnE,KAAK,EAAE,eAAe,CAAC;IACvB;;;;;;OAMG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB;;;;OAIG;IACH,OAAO,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,0EAA0E;IAC1E,SAAS,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACpC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,sBAAsB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CA4E3F"}

package/dist/bridge/src/codex/config-toml.d.ts

@@ -0,0 +1,128 @@
+/**
+ * Codex's `config.toml` adapter — the AI provider registry materialized into
+ * the only provider surface the Codex CLI reads (plan §2.3, codex rows).
+ *
+ * Codex is a **file-shaped** driver: it takes its endpoints from
+ * `$CODEX_HOME/config.toml`, never from per-request options. Both codex modes
+ * therefore get a session-private `CODEX_HOME` holding a rendered document:
+ *
+ * - every addressable registry entry becomes `[model_providers.<id>]` with
+ *   `base_url`, `env_key`, `wire_api`, `query_params` and `http_headers`
+ *   mapping 1:1 onto the entry's `base_url`, `credential`, `surface`,
+ *   `query_params` and `headers`;
+ * - `model_provider` and `model` at the top level name the selected entry.
+ *
+ * The rendered file never contains a credential **value** — `env_key` holds
+ * the *name* of the per-entry variable (`SKAILE_AIP_<ID>_KEY`, minted by
+ * {@link providerCredentialEnvName}), and the value rides in the child
+ * environment. An `oauth` entry has no env carrier at all: it gets
+ * `requires_openai_auth`, which routes codex to its own auth manager.
+ *
+ * **Surface coverage.** Codex names the wire protocol `wire_api` and, as of
+ * codex-cli 0.154, accepts exactly one value: `responses`. `chat` was removed
+ * ("`wire_api = \"chat\"` is no longer supported", openai/codex#7782), and an
+ * unknown value fails the *whole* document at load time — one unaddressable
+ * entry would take the rest of the registry down with it. Entries whose
+ * surface codex cannot speak (`openai-completions`, `anthropic-messages`,
+ * `bedrock-converse-stream`, `google-*`) are therefore left out and reported
+ * in {@link CodexConfigBuild.skipped} for the driver to log.
+ *
+ * @docLink packages/bridge/drivers#codex-driver
+ */
+import { type AIProviderEntry, type AIProviderRegistry, type MergedAIProviderRegistry } from "@skaile/workspaces/core/provider-registry";
+/** One `[model_providers.<id>]` table, in codex's own vocabulary. */
+export interface CodexModelProviderTable {
+    /** Display name. Codex rejects a provider table without one. */
+    name: string;
+    base_url?: string;
+    /** Name of the variable carrying the credential — never the credential. */
+    env_key?: string;
+    wire_api?: string;
+    /** Routes codex to its own auth manager (ChatGPT subscription / stored key). */
+    requires_openai_auth?: boolean;
+    query_params?: Record<string, string>;
+    http_headers?: Record<string, string>;
+}
+/** The subset of codex's `config.toml` this adapter owns. */
+export interface CodexConfigDocument {
+    /** Entry id the session addresses; absent when nothing rendered. */
+    model_provider?: string;
+    /** Provider-side model id. */
+    model?: string;
+    model_providers: Record<string, CodexModelProviderTable>;
+}
+/** An entry codex cannot address, and why. */
+export interface CodexSkippedEntry {
+    id: string;
+    reason: string;
+}
+/** Result of {@link buildCodexConfigDocument}. */
+export interface CodexConfigBuild {
+    document: CodexConfigDocument;
+    /** Selected entry id, when it rendered. */
+    providerId?: string;
+    /** Provider-side model id of the selection, when the selector named one. */
+    model?: string;
+    /**
+     * Entries left out of the document. Non-fatal: codex keeps its built-in
+     * providers, so a session whose selection was skipped behaves exactly as it
+     * did before the registry existed.
+     */
+    skipped: CodexSkippedEntry[];
+    /** Notes from `modelRef` resolution (dangling role, disabled provider, …). */
+    warnings: string[];
+}
+/** Inputs {@link buildCodexConfigDocument} reads off an `AgentConfig`. */
+export interface CodexConfigInput {
+    registry?: AIProviderRegistry | MergedAIProviderRegistry;
+    /** `"<providerId>/<modelId>"`, a bare model id, or `"@role"`. */
+    modelRef?: string;
+    /** Legacy model field, used as the selector when `modelRef` is absent. */
+    model?: string;
+    /** Roles table (`skaile.yaml`), consulted for an `@role` selector. */
+    roles?: Record<string, string>;
+}
+/**
+ * Render one entry as a codex provider table, or explain why codex cannot
+ * address it.
+ */
+export declare function renderCodexProviderTable(id: string, entry: AIProviderEntry): {
+    table: CodexModelProviderTable;
+} | {
+    skipped: string;
+};
+/**
+ * Build the document for a session: every addressable entry, plus the
+ * selection when it resolved to one of them.
+ */
+export declare function buildCodexConfigDocument(input: CodexConfigInput): CodexConfigBuild;
+/** Serialize a document to TOML. Deterministic: registry order throughout. */
+export declare function renderCodexConfigToml(document: CodexConfigDocument): string;
+/**
+ * The session-private codex home.
+ *
+ * Deliberately outside `cwd`: codex's `workspace-write` sandbox makes the
+ * working tree writable by the model, and a config home inside it would let a
+ * turn rewrite its own `base_url`. `$SKAILE_HOME` (honoured by
+ * {@link globalSkaileDir}) relocates the whole tree, which is also the test
+ * seam.
+ */
+export declare function codexSessionHome(config: {
+    cwd: string;
+    sessionId?: string;
+}): string;
+/**
+ * Write `<home>/config.toml`, creating the home if needed. Atomic: a
+ * partially written document would fail codex's config load for the whole
+ * session.
+ *
+ * A document with no provider tables says nothing codex does not already
+ * know, so nothing is written and a file left by an earlier render is
+ * removed — a session that no longer carries a registry must not keep
+ * answering to the one it used to have.
+ *
+ * @returns the absolute path written, or `undefined` when there was nothing
+ *   to render.
+ */
+export declare function writeCodexConfigToml(home: string, document: CodexConfigDocument): string | undefined;
+//# sourceMappingURL=config-toml.d.ts.map

package/dist/bridge/src/codex/config-toml.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-toml.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/config-toml.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAMH,OAAO,EACL,KAAK,eAAe,EAEpB,KAAK,kBAAkB,EAGvB,KAAK,wBAAwB,EAI9B,MAAM,2CAA2C,CAAC;AAuBnD,qEAAqE;AACrE,MAAM,WAAW,uBAAuB;IACtC,gEAAgE;IAChE,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,2EAA2E;IAC3E,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gFAAgF;IAChF,oBAAoB,CAAC,EAAE,OAAO,CAAC;IAC/B,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACvC;AAED,6DAA6D;AAC7D,MAAM,WAAW,mBAAmB;IAClC,oEAAoE;IACpE,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,8BAA8B;IAC9B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,eAAe,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAC;CAC1D;AAED,8CAA8C;AAC9C,MAAM,WAAW,iBAAiB;IAChC,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,kDAAkD;AAClD,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,mBAAmB,CAAC;IAC9B,2CAA2C;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAC7B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,EAAE,CAAC;CACpB;AAED,0EAA0E;AAC1E,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,EAAE,kBAAkB,GAAG,wBAAwB,CAAC;IACzD,iEAAiE;IACjE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,0EAA0E;IAC1E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,sEAAsE;IACtE,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CACtC,EAAE,EAAE,MAAM,EACV,KAAK,EAAE,eAAe,GACrB;IAAE,KAAK,EAAE,uBAAuB,CAAA;CAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAA;CAAE,CA8B1D;AAED;;;GAGG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,gBAAgB,GAAG,gBAAgB,CA+BlF;AAED,8EAA8E;AAC9E,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,mBAAmB,GAAG,MAAM,CAM3E;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CASpF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,mBAAmB,GAC5B,MAAM,GAAG,SAAS,CAYpB"}

package/dist/bridge/src/codex/credentials.d.ts

@@ -1,3 +1,4 @@
+import { type AIProviderRegistry, type MergedAIProviderRegistry } from "@skaile/workspaces/core/provider-registry";
 import type { CodexCredentialDelivery, CodexSubscriptionRefreshInput, CodexSubscriptionRefreshResult } from "@skaile/workspaces/types";
 /** Validate credential shape and provenance without including input values in errors. */
 export declare function parseCodexCredential(value: unknown, now?: number): CodexCredentialDelivery;
@@ -9,4 +10,29 @@ export declare function parseCodexRefreshInput(value: unknown, pinned: Extract<C
 export declare function parseCodexRefreshResult(value: unknown, pinned: Extract<CodexCredentialDelivery, {
     kind: "codex-subscription";
 }>, now?: number): CodexSubscriptionRefreshResult;
+/**
+ * The AI provider registry a managed-codex session may carry (plan §2.2).
+ *
+ * Managed codex runs on a platform-minted, short-lived credential that the
+ * host never writes to disk and never puts in the child environment. That
+ * isolation is only meaningful if the session cannot *also* be told to talk
+ * somewhere else, or to pick a credential up from the environment. Restated
+ * on the registry, the admissible shape is exactly one enabled `llm` entry,
+ * on codex's own OpenAI surface, whose credential is a platform-injected
+ * `oauth` reference. A second entry, a different surface, or an `env:` /
+ * `cmd:` / `keyring:` reference is an invalid AI profile.
+ *
+ * `surface` is read literally — no catalog-preset fallback. No preset
+ * declares `openai-codex-responses`, so a preset-shaped entry reaching here
+ * is a mis-provisioned session, not a terse one.
+ *
+ * An absent or empty registry is *not* a violation: nothing was configured,
+ * and the credential the platform minted is the only one the session has.
+ * Every configured entry is judged, whichever layer it came from — the
+ * control-plane session layer, the user/workspace `providers.yml` files, or
+ * a runtime override.
+ *
+ * @returns the reason the registry is inadmissible, or `undefined` when it is.
+ */
+export declare function managedCodexRegistryViolation(registry: AIProviderRegistry | MergedAIProviderRegistry | undefined): string | undefined;
 //# sourceMappingURL=credentials.d.ts.map

package/dist/bridge/src/codex/credentials.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,8BAA8B,EAC/B,MAAM,0BAA0B,CAAC;AA0BlC,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,uBAAuB,CAa9F;AAED,+FAA+F;AAC/F,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,GACvE,6BAA6B,CAgB/B;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,EACxE,GAAG,SAAa,GACf,8BAA8B,CAsBhC"}
+{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/credentials.ts"],"names":[],"mappings":"AAAA,OAAO,EAEL,KAAK,kBAAkB,EAEvB,KAAK,wBAAwB,EAG9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,KAAK,EACV,uBAAuB,EACvB,6BAA6B,EAC7B,8BAA8B,EAC/B,MAAM,0BAA0B,CAAC;AA0BlC,yFAAyF;AACzF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,GAAG,SAAa,GAAG,uBAAuB,CAa9F;AAED,+FAA+F;AAC/F,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,GACvE,6BAA6B,CAgB/B;AAED,iGAAiG;AACjG,wBAAgB,uBAAuB,CACrC,KAAK,EAAE,OAAO,EACd,MAAM,EAAE,OAAO,CAAC,uBAAuB,EAAE;IAAE,IAAI,EAAE,oBAAoB,CAAA;CAAE,CAAC,EACxE,GAAG,SAAa,GACf,8BAA8B,CAsBhC;AAED;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,kBAAkB,GAAG,wBAAwB,GAAG,SAAS,GAClE,MAAM,GAAG,SAAS,CAmBpB"}

package/dist/bridge/src/codex/managed-driver.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"managed-driver.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/managed-driver.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EACX,KAAK,WAAW,EAGhB,KAAK,gBAAgB,EAItB,MAAM,aAAa,CAAC;AAwHrB,yFAAyF;AACzF,qBAAa,kBAAmB,SAAQ,WAAW;IA+DrC,OAAO,CAAC,MAAM;IA9D1B,QAAQ,CAAC,UAAU;;;;;MAKjB;IACF,OAAO,CAAC,MAAM,CAAC,CAAuB;IACtC,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,OAAO,CAAC,CAA6B;IAC7C,OAAO,CAAC,UAAU,CAAC,CAA0B;IAC7C,OAAO,CAAC,oBAAoB,CAAC,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,CAA0C;IAC3D,OAAO,CAAC,KAAK,CAAC,CAAqB;IACnC,OAAO,CAAC,UAAU,CAAwD;IAC1E,OAAO,CAAC,iBAAiB,CAAC,CAGxB;IACF,OAAO,CAAC,cAAc,CAOpB;IACF,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAC,CAAgB;IAClC,OAAO,CAAC,YAAY,CAAC,CAA8D;IACnF,OAAO,CAAC,MAAM,CAAC,CAAa;IAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAa;IACtC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,cAAc,CAAC,CAGrB;IACF,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoD;IAE9E,IAAa,oBAAoB,IAAI,OAAO,CAE3C;IACQ,kBAAkB,IAAI,OAAO;IAG7B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;gBAInE,MAAM,EAAE,WAAW;IAGvC,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IACD,IAAI,SAAS,IAAI,OAAO,CAEvB;IACQ,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA4Bd,UAAU;YAqSV,YAAY;YA8BZ,OAAO;IAwCrB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;YAsB9C,OAAO;IAuFf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B,IAAI,IAAI,IAAI;IAMG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB1B,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAI9F,OAAO,CAAC,eAAe;IAsDvB,OAAO,CAAC,YAAY;IA+GpB,OAAO,CAAC,IAAI;IAgGZ,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,eAAe;IAsBvB,OAAO,CAAC,UAAU;IA0BlB,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,UAAU;IA8DlB,OAAO,CAAC,KAAK;CAMd"}
+{"version":3,"file":"managed-driver.d.ts","sourceRoot":"","sources":["../../../../bridge/src/codex/managed-driver.ts"],"names":[],"mappings":"AAIA,OAAO,EACL,WAAW,EACX,KAAK,WAAW,EAGhB,KAAK,gBAAgB,EAItB,MAAM,aAAa,CAAC;AA4HrB,yFAAyF;AACzF,qBAAa,kBAAmB,SAAQ,WAAW;IA+DrC,OAAO,CAAC,MAAM;IA9D1B,QAAQ,CAAC,UAAU;;;;;MAKjB;IACF,OAAO,CAAC,MAAM,CAAC,CAAuB;IACtC,OAAO,CAAC,UAAU,CAAC,CAAgC;IACnD,OAAO,CAAC,OAAO,CAAC,CAA6B;IAC7C,OAAO,CAAC,UAAU,CAAC,CAA0B;IAC7C,OAAO,CAAC,oBAAoB,CAAC,CAAuB;IACpD,OAAO,CAAC,QAAQ,CAAC,CAA0C;IAC3D,OAAO,CAAC,KAAK,CAAC,CAAqB;IACnC,OAAO,CAAC,UAAU,CAAwD;IAC1E,OAAO,CAAC,iBAAiB,CAAC,CAGxB;IACF,OAAO,CAAC,cAAc,CAOpB;IACF,OAAO,CAAC,UAAU,CAAyB;IAC3C,OAAO,CAAC,UAAU,CAAK;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,gBAAgB,CAAS;IACjC,OAAO,CAAC,eAAe,CAAS;IAChC,OAAO,CAAC,QAAQ,CAAC,CAAgB;IACjC,OAAO,CAAC,OAAO,CAAoC;IACnD,OAAO,CAAC,QAAQ,CAAC,CAAS;IAC1B,OAAO,CAAC,YAAY,CAAC,CAAS;IAC9B,OAAO,CAAC,SAAS,CAAC,CAAgB;IAClC,OAAO,CAAC,YAAY,CAAC,CAA8D;IACnF,OAAO,CAAC,MAAM,CAAC,CAAa;IAC5B,OAAO,CAAC,gBAAgB,CAAC,CAAa;IACtC,OAAO,CAAC,kBAAkB,CAAqB;IAC/C,OAAO,CAAC,KAAK,CAAoC;IACjD,OAAO,CAAC,MAAM,CAAK;IACnB,OAAO,CAAC,aAAa,CAAK;IAC1B,OAAO,CAAC,cAAc,CAAC,CAGrB;IACF,OAAO,CAAC,kBAAkB,CAAS;IACnC,OAAO,CAAC,oBAAoB,CAAS;IACrC,OAAO,CAAC,QAAQ,CAAC,SAAS,CAAoD;IAE9E,IAAa,oBAAoB,IAAI,OAAO,CAE3C;IACQ,kBAAkB,IAAI,OAAO;IAG7B,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,EAAE,SAAS,CAAC,EAAE,MAAM,GAAG,OAAO;gBAInE,MAAM,EAAE,WAAW;IAGvC,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IACD,IAAI,SAAS,IAAI,OAAO,CAEvB;IACQ,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIjC,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YA4Bd,UAAU;YA0SV,YAAY;YA8BZ,OAAO;IAwCrB,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7B,WAAW,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC;YAsB9C,OAAO;IAuFf,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IA4B5B,IAAI,IAAI,IAAI;IAMG,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC;IAKjC,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAmB1B,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAI9F,OAAO,CAAC,eAAe;IAsDvB,OAAO,CAAC,YAAY;IA+GpB,OAAO,CAAC,IAAI;IAgGZ,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,eAAe;IAsBvB,OAAO,CAAC,UAAU;IA0BlB,OAAO,CAAC,gBAAgB;IAyBxB,OAAO,CAAC,UAAU;IAUlB,OAAO,CAAC,UAAU;IA8DlB,OAAO,CAAC,KAAK;CAMd"}