@skaile/workspaces 3.27.1 → 4.1.0

package/dist/bridge/src/drivers/omp.d.ts

@@ -1,33 +1,20 @@
 import type { DriverTarget } from "@skaile/workspaces/plugin-registry";
 import type { ModelEntry } from "../models.js";
 import { type AgentConfig, AgentDriver, type DriverInfo } from "../types.js";
-/**
- * Credential and routing env vars forwarded to the omp child process.
- *
- * omp is model-agnostic — it selects a provider from whichever of these it
- * finds. Forwarding only `ANTHROPIC_API_KEY`, as this allowlist used to,
- * silently reduced every non-Anthropic workspace to a fallback: the child had
- * no credential for the provider it was configured for and no way to say so.
- * It also omitted `ANTHROPIC_BASE_URL`, so an Anthropic-compatible gateway was
- * bypassed and traffic went to Anthropic's own API instead.
- *
- * The list mirrors the "Environment Variables" section of `omp --help`, which
- * is the authoritative statement of what the child actually reads. Widening it
- * is deliberate: these names *are* the provider credentials, so a host that
- * sets one in the runner's environment is asking for the agent to use it. Vars
- * outside this list — anything a platform provisions under its own naming —
- * still do not reach the child.
- *
- * @docLink packages/bridge/concepts#omp-env-whitelist
- */
-export declare const OMP_PROVIDER_ENV_KEYS: readonly ["ANTHROPIC_API_KEY", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_OAUTH_TOKEN", "ANTHROPIC_BASE_URL", "ANTHROPIC_CUSTOM_HEADERS", "ANTHROPIC_FOUNDRY_API_KEY", "FOUNDRY_BASE_URL", "CLAUDE_CODE_USE_FOUNDRY", "CLAUDE_CODE_CLIENT_CERT", "CLAUDE_CODE_CLIENT_KEY", "NODE_EXTRA_CA_CERTS", "OPENAI_API_KEY", "OPENAI_BASE_URL", "GEMINI_API_KEY", "COPILOT_GITHUB_TOKEN", "AZURE_OPENAI_API_KEY", "GROQ_API_KEY", "CEREBRAS_API_KEY", "XAI_API_KEY", "MISTRAL_API_KEY", "ZAI_API_KEY", "MINIMAX_API_KEY", "DEEPSEEK_API_KEY", "OPENROUTER_API_KEY", "KILO_API_KEY", "AI_GATEWAY_API_KEY", "OPENCODE_API_KEY", "CURSOR_ACCESS_TOKEN", "CLINE_API_KEY", "WAFER_SERVERLESS_API_KEY", "YOLO_AUTO_API_KEY", "ABLITERATION_API_KEY", "UMANS_AI_CODING_PLAN_API_KEY", "UMANS_WEBSEARCH_PROVIDER", "AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_REGION", "AWS_DEFAULT_REGION", "GOOGLE_CLOUD_PROJECT", "GOOGLE_CLOUD_LOCATION", "GOOGLE_APPLICATION_CREDENTIALS", "EXA_API_KEY", "BRAVE_API_KEY", "PERPLEXITY_API_KEY", "PERPLEXITY_COOKIES", "TAVILY_API_KEY", "TINYFISH_API_KEY", "FIRECRAWL_API_KEY", "ANTHROPIC_SEARCH_API_KEY", "ANTHROPIC_SEARCH_BASE_URL", "OMP_PROFILE"];
 /**
  * Build the explicit env allowlist forwarded to the omp child process.
  *
  * The runner's full environment is never inherited — only
- * {@link OMP_BASE_ENV_KEYS} (process essentials),
- * {@link OMP_PROVIDER_ENV_KEYS} (provider credentials and routing), and the
- * `PI_*` prefix (omp's own app config the host operator may have set).
+ * {@link OMP_BASE_ENV_KEYS} (process essentials) and the `PI_*` prefix (omp's
+ * own app config the host operator may have set).
+ *
+ * **Credentials are not on this list.** Every endpoint omp may address is a
+ * registry entry, serialized into the session's own `models.yml` with its
+ * credential named as `SKAILE_AIP_<ID>_KEY` and the value assigned after this
+ * allowlist is built (`./omp-models-yml.ts`). An ambient `ANTHROPIC_API_KEY`
+ * in the runner's shell is not a session's statement of intent and does not
+ * reach the child; `skaile providers add anthropic --preset anthropic
+ * --credential env:ANTHROPIC_API_KEY` is.
  *
  * Test seams (`OMP_BRIDGE_*`, `FAKE_OMP_*`) are passed through so the
  * subprocess harness in `tests/omp-driver.test.ts` can drive a fake-omp
@@ -174,6 +161,22 @@ export declare class OmpDriver extends AgentDriver {
     resetSession(): Promise<void>;
     private classifyProcessError;
     private classifyErrorMessage;
+    /**
+     * The models this session can select.
+     *
+     * Answered entirely from the registry: the ids are exactly the
+     * `<providerId>/<modelId>` selectors rendered into `models.yml`, so a
+     * picker offers every enabled endpoint instead of whichever one the
+     * ambient binary happens to be authenticated for. A registry whose
+     * entries name no models yields no entries here — that gap is closed by
+     * giving the entry a `discovery:` block (`PROVIDER-CONFIG-PLAN.md` §1.1),
+     * not by asking the omp binary what it happens to know. omp's own catalog
+     * (`omp models --json`) answers a different question — every model omp
+     * knows across every provider, regardless of what this session's registry
+     * enables or has credentials for — and shelling out to an ambient binary
+     * from this code path is itself a liability: it can block indefinitely
+     * reading a prompt from stdin when run inside another interactive session.
+     */
     listModels(): Promise<ModelEntry[]>;
     private cleanup;
 }

package/dist/bridge/src/drivers/omp.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"omp.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/omp.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAKvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,EAAE,KAAK,WAAW,EAAE,WAAW,EAAmB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAO9F;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,qBAAqB,mpCAiExB,CAAC;AAEX;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAalF;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,qJAgBpB,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAE9C,CAAC;AAyDF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAgBtE;AAkCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,SAAU,SAAQ,WAAW;IACxC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkC;IACtD,OAAO,CAAC,IAAI,CAA6B;IACzC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAM;IACtB,+DAA+D;IAC/D,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,UAAU,CAAuC;IAEzD,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IAEQ,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIvC;;;;;;;;OAQG;gBACS,MAAM,EAAE,WAAW;IAKlB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAOrB,MAAM;IA0LpB,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,WAAW;IAyEnB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAOnB;;;OAGG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;OAIG;YACW,gBAAgB;IAqC9B,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,IAAI;IAcZ;;;;;;;;;;;;OAYG;IACU,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBnD;;;;;;OAMG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAMnC,0EAA0E;IAC1E,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED;;;;;OAKG;IACH,IAAI,IAAI,IAAI;IAON,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAKnC,OAAO,CAAC,oBAAoB;IAyB5B,OAAO,CAAC,oBAAoB;IAoBb,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IA8BlD,OAAO,CAAC,OAAO;CAQhB;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,YAAY,CAAC,WAAW,CASrD,CAAC"}
+{"version":3,"file":"omp.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/omp.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAKvE,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAG/C,OAAO,EAAE,KAAK,WAAW,EAAE,WAAW,EAAmB,KAAK,UAAU,EAAE,MAAM,aAAa,CAAC;AAQ9F;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAalF;AAED;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,qJAgBpB,CAAC;AAEX,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,EAAE,SAAS,MAAM,EAE9C,CAAC;AAyDF;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,WAAW,CAAC,OAAO,CAAC,GAAG,MAAM,EAAE,CAgBtE;AAkCD;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AACH,qBAAa,SAAU,SAAQ,WAAW;IACxC,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAkC;IACtD,OAAO,CAAC,IAAI,CAA6B;IACzC,OAAO,CAAC,EAAE,CAA0B;IACpC,OAAO,CAAC,KAAK,CAAK;IAClB,OAAO,CAAC,MAAM,CAAc;IAC5B,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,YAAY,CAA8B;IAClD,OAAO,CAAC,YAAY,CAAgB;IACpC,OAAO,CAAC,QAAQ,CAAM;IACtB,+DAA+D;IAC/D,OAAO,CAAC,aAAa,CAAC,CAAS;IAC/B,+EAA+E;IAC/E,OAAO,CAAC,WAAW,CAA6B;IAChD,OAAO,CAAC,UAAU,CAAuC;IAEzD,IAAa,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAElD;IAEQ,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIvC;;;;;;;;OAQG;gBACS,MAAM,EAAE,WAAW;IAKlB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;YAOrB,MAAM;IAuNpB,OAAO,CAAC,kBAAkB;IAY1B,OAAO,CAAC,WAAW;IAyEnB;;;OAGG;IACH,OAAO,CAAC,WAAW;IAOnB;;;OAGG;IACH,OAAO,CAAC,UAAU;IAOlB;;;;OAIG;YACW,gBAAgB;IAqC9B,OAAO,CAAC,MAAM;IAId,OAAO,CAAC,IAAI;IAcZ;;;;;;;;;;;;OAYG;IACU,MAAM,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAuBnD;;;;;;OAMG;IACU,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;IAMnC,0EAA0E;IAC1E,IAAW,SAAS,IAAI,OAAO,CAE9B;IAED;;;;;OAKG;IACH,IAAI,IAAI,IAAI;IAON,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC;IAKnC,OAAO,CAAC,oBAAoB;IAyB5B,OAAO,CAAC,oBAAoB;IAoB5B;;;;;;;;;;;;;;;OAeG;IACY,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;IAIlD,OAAO,CAAC,OAAO;CAQhB;AAED;;;GAGG;AACH,eAAO,MAAM,eAAe,EAAE,YAAY,CAAC,WAAW,CAarD,CAAC"}

package/dist/bridge/src/drivers/opencode.d.ts

@@ -8,9 +8,13 @@ import { SubprocessCliDriver } from "./_subprocess-cli.js";
  * coding agent.
  *
  * Spawns `opencode run "<prompt>" --format json` per turn and maps OpenCode's
- * JSON event stream to the unified {@link AgentEvent} stream. Model-agnostic:
- * the model is passed as `provider/model` via `-m`, and provider API keys are
- * forwarded through the environment.
+ * JSON event stream to the unified {@link AgentEvent} stream. A
+ * `credentials-n` backend (§2.3): every enabled AI provider entry's
+ * credential reaches the child environment, and the active model is selected
+ * as `-m <provider>/<model>`. An endpoint models.dev does not know is
+ * additionally rendered into a session-private `opencode.json`
+ * (`provider-materialize/opencode-config.ts`) that `XDG_CONFIG_HOME` points
+ * the child at.
  *
  * @remarks
  * - The prompt is a **positional argument** — OpenCode's `-p` flag is a
@@ -29,10 +33,31 @@ export declare class OpenCodeDriver extends SubprocessCliDriver {
     protected readonly defaultBin = "opencode";
     protected readonly productName = "OpenCode";
     protected readonly envPrefix = "OPENCODE";
+    private providers?;
+    /** This session's AI providers, resolved once from the config. */
+    private providerSession;
+    reconfigure(patch: Partial<Pick<AgentConfig, "model" | "thinking" | "effort">>): void;
+    getModel(): string | undefined;
     protected buildArgs(message: string, resumeId: string | undefined): string[];
+    /**
+     * Base env plus one credential variable per enabled registry entry — the
+     * canonical `SKAILE_AIP_<ID>_KEY` and, for a stock catalog endpoint, the
+     * vendor carrier OpenCode reads on its own (`ANTHROPIC_API_KEY`, …). There
+     * is no per-driver key allowlist: what reaches the child is exactly what
+     * the registry can authenticate.
+     *
+     * This is also where the session's custom endpoints are rendered. It runs
+     * once per spawn, so a `reconfigure()` between turns re-renders rather than
+     * leaving the child pointed at the previous selection.
+     */
     protected buildEnv(): Record<string, string>;
     protected installHint(): string;
     protected handleJson(json: any): void;
+    /**
+     * OpenCode has no model-list endpoint of its own (it reads models.dev), so
+     * the session's registry is the list: every enabled entry's mapped ids,
+     * namespaced exactly as `-m` takes them.
+     */
     listModels(): Promise<ModelEntry[]>;
 }
 /**

package/dist/bridge/src/drivers/opencode.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/opencode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAE/C,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAKL,mBAAmB,EACpB,MAAM,sBAAsB,CAAC;AAE9B;;;;;;;;;;;;;;;;;;;GAmBG;AACH,qBAAa,cAAe,SAAQ,mBAAmB;IACrD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAA+B;IAC7D,SAAS,CAAC,QAAQ,CAAC,UAAU,cAAc;IAC3C,SAAS,CAAC,QAAQ,CAAC,WAAW,cAAc;IAC5C,SAAS,CAAC,QAAQ,CAAC,SAAS,cAAc;IAE1C,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE;IAW5E,SAAS,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAW5C,SAAS,CAAC,WAAW,IAAI,MAAM;IAI/B,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI;IAmDtB,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;CAGnD;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,YAAY,CAAC,WAAW,CAM1D,CAAC"}
+{"version":3,"file":"opencode.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/opencode.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,cAAc,CAAC;AAY/C,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAA2C,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAEpG;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,qBAAa,cAAe,SAAQ,mBAAmB;IACrD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAA+B;IAC7D,SAAS,CAAC,QAAQ,CAAC,UAAU,cAAc;IAC3C,SAAS,CAAC,QAAQ,CAAC,WAAW,cAAc;IAC5C,SAAS,CAAC,QAAQ,CAAC,SAAS,cAAc;IAE1C,OAAO,CAAC,SAAS,CAAC,CAAmB;IAErC,kEAAkE;IAClE,OAAO,CAAC,eAAe;IAKd,WAAW,CAAC,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,OAAO,GAAG,UAAU,GAAG,QAAQ,CAAC,CAAC,GAAG,IAAI;IAKrF,QAAQ,IAAI,MAAM,GAAG,SAAS;IAIvC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE;IAS5E;;;;;;;;;;OAUG;IACH,SAAS,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAiB5C,SAAS,CAAC,WAAW,IAAI,MAAM;IAI/B,SAAS,CAAC,UAAU,CAAC,IAAI,EAAE,GAAG,GAAG,IAAI;IAmDrC;;;;OAIG;IACY,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;CAGnD;AAED;;;GAGG;AACH,eAAO,MAAM,oBAAoB,EAAE,YAAY,CAAC,WAAW,CAY1D,CAAC"}

package/dist/bridge/src/drivers/qwen.d.ts

@@ -6,10 +6,11 @@ import { GeminiFamilyDriver } from "./gemini.js";
 /**
  * Agent driver for **Qwen Code** (`qwen`) — a fork of Gemini CLI.
  *
- * Reuses {@link GeminiFamilyDriver}'s stream-json event mapping. Unlike Gemini,
- * Qwen is **model-agnostic / OpenAI-compatible**: it reads `OPENAI_API_KEY`,
- * `OPENAI_BASE_URL`, and `OPENAI_MODEL`, so it works against any
- * OpenAI-completions endpoint (Alibaba DashScope by default).
+ * Reuses {@link GeminiFamilyDriver}'s stream-json event mapping. Unlike
+ * Gemini, Qwen is **OpenAI-compatible**: it reads `OPENAI_API_KEY`,
+ * `OPENAI_BASE_URL` and `OPENAI_MODEL`, so the AI provider entry the session's
+ * model selector names maps onto it one-to-one — any `openai-completions`
+ * endpoint (Alibaba DashScope by default).
  *
  * @remarks
  * - Spawns `qwen -p "<prompt>" -o stream-json --include-partial-messages`.
@@ -29,6 +30,11 @@ export declare class QwenDriver extends GeminiFamilyDriver {
     protected buildArgs(message: string, resumeId: string | undefined): string[];
     protected buildEnv(): Record<string, string>;
     protected installHint(): string;
+    /**
+     * Discovery runs against the bound entry — its credential and its endpoint,
+     * so a custom OpenAI-compatible host lists its own models rather than
+     * OpenAI's.
+     */
     listModels(): Promise<ModelEntry[]>;
 }
 /**

package/dist/bridge/src/drivers/qwen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"qwen.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/qwen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAEpE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;;;;;;;;;;GAgBG;AACH,qBAAa,UAAW,SAAQ,kBAAkB;IAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAA2B;IACzD,SAAS,CAAC,QAAQ,CAAC,UAAU,UAAU;IACvC,SAAS,CAAC,QAAQ,CAAC,WAAW,eAAe;IAC7C,SAAS,CAAC,QAAQ,CAAC,SAAS,UAAU;IAEtC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE;IAO5E,SAAS,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAa5C,SAAS,CAAC,WAAW,IAAI,MAAM;IAIhB,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;CAMnD;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAAY,CAAC,WAAW,CAQtD,CAAC"}
+{"version":3,"file":"qwen.d.ts","sourceRoot":"","sources":["../../../../bridge/src/drivers/qwen.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,0BAA0B,CAAC;AAGvD,OAAO,EAAuB,KAAK,UAAU,EAAE,MAAM,cAAc,CAAC;AAKpE,OAAO,KAAK,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD;;;;;;;;;;;;;;;;;GAiBG;AACH,qBAAa,UAAW,SAAQ,kBAAkB;IAChD,QAAQ,CAAC,UAAU,EAAE,UAAU,CAK7B;IAEF,SAAS,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAA2B;IACzD,SAAS,CAAC,QAAQ,CAAC,UAAU,UAAU;IACvC,SAAS,CAAC,QAAQ,CAAC,WAAW,eAAe;IAC7C,SAAS,CAAC,QAAQ,CAAC,SAAS,UAAU;IAEtC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,EAAE;IAQ5E,SAAS,CAAC,QAAQ,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC;IAuB5C,SAAS,CAAC,WAAW,IAAI,MAAM;IAI/B;;;;OAIG;IACY,UAAU,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC;CAcnD;AAED;;;GAGG;AACH,eAAO,MAAM,gBAAgB,EAAE,YAAY,CAAC,WAAW,CAYtD,CAAC"}

package/dist/bridge/src/index.d.ts

@@ -4,7 +4,9 @@ export { AccountUnavailableError, AuthError, type ClaudeSdkResultErrorInput, cla
 export * from "./logger.js";
 export * from "./models.js";
 export * from "./normalizer.js";
-export * from "./provider-endpoints.js";
+export * from "./provider-catalog.js";
+export * from "./provider-materialize/credential-env.js";
+export * from "./provider-registry-derive.js";
 export * from "./registry.js";
 export { probeResumeTranscript, type ResumeProbeOutcome, resolveClaudeConfigDir, } from "./drivers/resume-probe.js";
 export * from "./runtime.js";

package/dist/bridge/src/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../bridge/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,SAAS,EACT,KAAK,yBAAyB,EAC9B,sBAAsB,EACtB,kCAAkC,GACnC,MAAM,uBAAuB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,yBAAyB,CAAC;AACxC,cAAc,eAAe,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAEhC,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../bridge/src/index.ts"],"names":[],"mappings":"AAAA,cAAc,0BAA0B,CAAC;AACzC,cAAc,YAAY,CAAC;AAC3B,OAAO,EACL,uBAAuB,EACvB,SAAS,EACT,KAAK,yBAAyB,EAC9B,sBAAsB,EACtB,kCAAkC,GACnC,MAAM,uBAAuB,CAAC;AAC/B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,iBAAiB,CAAC;AAChC,cAAc,uBAAuB,CAAC;AAItC,cAAc,0CAA0C,CAAC;AACzD,cAAc,+BAA+B,CAAC;AAC9C,cAAc,eAAe,CAAC;AAC9B,OAAO,EACL,qBAAqB,EACrB,KAAK,kBAAkB,EACvB,sBAAsB,GACvB,MAAM,2BAA2B,CAAC;AACnC,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,iBAAiB,CAAC;AAEhC,OAAO,EAAE,yBAAyB,EAAE,2BAA2B,EAAE,MAAM,yBAAyB,CAAC"}

package/dist/bridge/src/models.d.ts

@@ -5,6 +5,8 @@
  * `getStaticModels(provider)` as an offline fallback.
  * OMP model listing is handled by `OmpDriver.listModels()` in the bridge driver.
  */
+import { type AIProviderCapabilities, type AIProviderLlmEntry, type AIProviderRegistry, type MergedAIProviderRegistry } from "@skaile/workspaces/core/provider-registry";
+import { type ModelIdTarget } from "@skaile/workspaces/types/manifests";
 /**
  * A single LLM model entry returned by the model catalog.
  *
@@ -64,13 +66,14 @@ export interface FetchModelsOptions {
  * `{ ok: false, models: [], error }` on any HTTP or network failure — the
  * caller should fall back to {@link getStaticModels} in that case.
  *
- * When the provider is reachable through a gateway, the request targets the
- * configured base URL rather than the provider's public API — see
- * {@link resolveProviderModelsUrl}. Without one, behaviour is unchanged.
+ * The endpoint, the credential header and the response path all come from the
+ * catalog preset named by `provider` ({@link resolvePresetBaseUrl},
+ * {@link resolveProbeUrl}, {@link buildCredentialHeaders}), so discovery hits
+ * the same host dispatch does — including a gateway named by `baseUrl` or by
+ * the vendor's own `*_BASE_URL` variable.
  *
- * @param provider - Provider name matching a key in the shared `PROVIDER_ENDPOINTS` map
- *   (e.g. `"anthropic"`, `"openai"`, `"google"`).
- * @param apiKey - API key forwarded in the request header or query parameter.
+ * @param provider - Catalog preset id (e.g. `"anthropic"`, `"openai"`, `"google"`).
+ * @param apiKey - API key presented in the preset's credential header.
  * @param options - Optional base-URL / environment overrides.
  * @returns Resolved model list with source attribution.
  * @docLink packages/bridge/api-reference#models
@@ -112,6 +115,85 @@ export declare const STATIC_MODELS: Record<string, ModelEntry[]>;
  * @docLink packages/bridge/api-reference#models
  */
 export declare function getStaticModels(provider: string): ModelEntry[];
+/** A registry in either of the two shapes consumers hold. */
+export type ProviderRegistryView = AIProviderRegistry | MergedAIProviderRegistry;
+/**
+ * Where a model selector is resolved. `registry` absent means no registry is
+ * configured at all — every resolver here then returns `undefined` and the
+ * caller keeps its pre-registry behaviour.
+ */
+export interface ModelRegistryContext {
+    /** The merged registry (`mergeRegistries`), or a single layer. */
+    registry?: ProviderRegistryView;
+    /** `skaile.yaml` `roles`: role name → model selector (`smol` → `groq/llama-3.1-8b`). */
+    roles?: Record<string, string>;
+    /**
+     * Entry the session already runs on. Scopes `model_map` lookups to it;
+     * absent lets the selector pick in registry order.
+     */
+    providerId?: string;
+}
+/**
+ * The wire facts that decide which model-id vocabulary an entry enforces
+ * (`modelIdSchemaForTarget`).
+ *
+ * `surface` and `base_url` fall back to the entry's preset: an entry written as
+ * `{kind: llm, preset: anthropic}` carries neither of its own until the catalog
+ * merge layer expands it, and validation must not depend on having been handed
+ * a merged registry.
+ */
+export declare function modelIdTargetForEntry(entry: AIProviderLlmEntry): ModelIdTarget;
+/** A manifest model preference resolved against the registry. */
+export interface ResolvedManifestModel {
+    /** Entry the preference routes to. */
+    providerId: string;
+    /** Logical id, after `@role` expansion and before `model_map`. */
+    modelId?: string;
+    /** Provider-side id — what goes on the wire: `model_map[modelId] ?? modelId`. */
+    providerModelId?: string;
+    /** Role name, when the preference was `@role`. */
+    role?: string;
+    /** The wire target `providerModelId` was checked against. */
+    target: ModelIdTarget;
+    /** Non-fatal notes: a dangling role, a disabled provider, a stale preset. */
+    warnings: string[];
+    /**
+     * Set when `providerModelId` is not a legal id for `target` — in practice,
+     * a non-Anthropic id on the first-party Anthropic Messages API. Never
+     * thrown: the caller decides whether a manifest that names a model its
+     * endpoint cannot serve is a warning or a failure.
+     */
+    error?: string;
+}
+/**
+ * Resolve an agent manifest's `model.preferred` (or any single entry of
+ * `model.fallback`) against the provider registry, then check the id it
+ * produces against the selected entry's own vocabulary.
+ *
+ * The three selector forms — `@role`, `<providerId>/<modelId>`, bare id — are
+ * resolved by `parseModelRef` (`@skaile/workspaces/core/provider-registry`),
+ * which owns that grammar; this adds the per-surface id check on top.
+ *
+ * Returns `undefined` when there is nothing to resolve: no preference, or no
+ * registry that can serve one.
+ */
+export declare function resolveManifestModel(preference: string | undefined, context?: ModelRegistryContext): ResolvedManifestModel | undefined;
+/**
+ * Resolve a model's capability facts — context window, thinking ceiling, tool
+ * and image support — from the registry entry that serves it.
+ *
+ * `capabilities` is keyed by the *logical* id (the `model_map` key), so a
+ * selector is resolved first and the record is read under both the logical and
+ * the provider-side id. `fallback` is the caller's own per-model table (the
+ * compaction window defaults, the platform's thinking limits); the entry wins
+ * field by field, and a field the entry does not state falls through.
+ *
+ * Returns `undefined` when neither source knows anything about the model.
+ */
+export declare function resolveModelCapabilities(selector: string | undefined, context?: ModelRegistryContext & {
+    /** Per-model-id capability table consulted for fields the entry omits. */
+    fallback?: Record<string, AIProviderCapabilities>;
+}): AIProviderCapabilities | undefined;
 /** Per-tier concrete model ids for one provider. */
 export interface ModelTierOverrides {
     small?: string;
@@ -119,10 +201,18 @@ export interface ModelTierOverrides {
     deep?: string;
 }
 /**
- * Built-in tier→model mapping per provider. This is the point of the closed
- * `small | default | deep` vocabulary: an authored flow names an intent and the
- * runtime owns which concrete model serves it, so flows stay portable across
- * model-lineup changes.
+ * Tier→model mapping per provider, for deployments with **no provider
+ * registry**. This is the point of the closed `small | default | deep`
+ * vocabulary: an authored flow names an intent and the runtime owns which
+ * concrete model serves it, so flows stay portable across model-lineup changes.
+ *
+ * It is no longer the source of truth for what a tier means. Where a registry
+ * exists, a tier resolves through `roles` and the selected entry's `model_map`
+ * (see {@link resolveModelTier}) — which works for every provider, names the
+ * ids that deployment actually serves, and is editable without a release. This
+ * table survives only for the pre-registry path, where nothing else can answer
+ * the question; a vendor missing from it there is a `ModelTierResolutionError`,
+ * not a guess.
  *
  * These are **direct provider-API ids**. A gateway transport (Bedrock, Vertex,
  * Azure) addresses the same models by different ids — Bedrock prefixes
@@ -148,27 +238,36 @@ export declare class ModelTierResolutionError extends Error {
     readonly provider: string | undefined;
     constructor(tier: "small" | "deep", provider: string | undefined);
 }
+/** Options {@link resolveModelTier} reads. */
+export interface ResolveModelTierOptions extends ModelRegistryContext {
+    /** Legacy provider id, keying {@link PROVIDER_MODEL_TIERS}. */
+    provider?: string;
+    /** Legacy cloud transport; anything but `default` disables the built-in table. */
+    cloud?: string;
+    /** Per-tier ids configured for this deployment. Wins over everything. */
+    overrides?: ModelTierOverrides;
+}
 /**
  * Resolve a Flow v2 `run.model` tier to a concrete model id.
  *
+ * Precedence, highest first: a configured `overrides` entry; the registry —
+ * `roles[tier]`, then the selected entry's `model_map[tier]`, which is how a
+ * tier is defined for *any* provider; and finally, **only when no registry is
+ * configured**, {@link PROVIDER_MODEL_TIERS} on the direct provider API.
+ *
  * `"default"` and an absent tier **inherit `sessionModel` first**. The session
  * model is the one id known to work for this deployment — it already carries
  * whatever provider, lineup and gateway translation the host configured — so
- * preferring a built-in over it would silently downgrade a configured model
+ * preferring any table over it would silently downgrade a configured model
  * and, on a gateway transport, substitute an id that provider cannot serve.
  *
- * `"small"` and `"deep"` never fall back to `sessionModel`: they resolve from
- * an override, then from {@link PROVIDER_MODEL_TIERS} on the direct provider
- * API, and otherwise throw {@link ModelTierResolutionError}. Inheriting there
+ * `"small"` and `"deep"` never fall back to `sessionModel`; when nothing above
+ * resolves them they throw {@link ModelTierResolutionError}. Inheriting there
  * would run an arbitrary model behind an author's explicit request for a cheap
  * or a strong one — a cost or quality surprise that shows up only in the bill
  * or the output. Failing names it at the node instead.
  *
  * Pure: no I/O, no environment reads.
  */
-export declare function resolveModelTier(tier: "small" | "default" | "deep" | undefined, sessionModel: string | undefined, options?: {
-    provider?: string;
-    cloud?: string;
-    overrides?: ModelTierOverrides;
-}): string | undefined;
+export declare function resolveModelTier(tier: "small" | "default" | "deep" | undefined, sessionModel: string | undefined, options?: ResolveModelTierOptions): string | undefined;
 //# sourceMappingURL=models.d.ts.map

package/dist/bridge/src/models.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../../bridge/src/models.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,yFAAyF;IACzF,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;CACd;AA6GD;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,EAAE,EAAE,OAAO,CAAC;IACZ,4CAA4C;IAC5C,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAmD5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAMD;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAgEtD,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAE9D;AAMD,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;GAsBG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAmC7E,CAAC;AAEF,qEAAqE;AACrE,qBAAa,wBAAyB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS;gBAD5B,IAAI,EAAE,OAAO,GAAG,MAAM,EACtB,QAAQ,EAAE,MAAM,GAAG,SAAS;CAQxC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,EAC9C,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,GAAE;IAAE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,kBAAkB,CAAA;CAAO,GAClF,MAAM,GAAG,SAAS,CAWpB"}
+{"version":3,"file":"models.d.ts","sourceRoot":"","sources":["../../../bridge/src/models.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,EACL,KAAK,sBAAsB,EAC3B,KAAK,kBAAkB,EACvB,KAAK,kBAAkB,EAEvB,KAAK,wBAAwB,EAI9B,MAAM,2CAA2C,CAAC;AACnD,OAAO,EAAE,KAAK,aAAa,EAA0B,MAAM,oCAAoC,CAAC;AAUhG;;;;;;;GAOG;AACH,MAAM,WAAW,UAAU;IACzB,yFAAyF;IACzF,EAAE,EAAE,MAAM,CAAC;IACX,iFAAiF;IACjF,IAAI,EAAE,MAAM,CAAC;CACd;AA8GD;;;;;;;;GAQG;AACH,MAAM,WAAW,iBAAiB;IAChC,iEAAiE;IACjE,EAAE,EAAE,OAAO,CAAC;IACZ,4CAA4C;IAC5C,MAAM,EAAE,UAAU,EAAE,CAAC;IACrB,6DAA6D;IAC7D,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,MAAM,EAAE,KAAK,GAAG,QAAQ,CAAC;CAC1B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB;;;;OAIG;IACH,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;CAC1C;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CA4D5B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,SAAS,CAC7B,QAAQ,EAAE,MAAM,EAChB,MAAM,CAAC,EAAE,MAAM,EACf,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAkB5B;AAMD;;;;;;;;;GASG;AACH,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,EAAE,CAgEtD,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,UAAU,EAAE,CAE9D;AAMD,6DAA6D;AAC7D,MAAM,MAAM,oBAAoB,GAAG,kBAAkB,GAAG,wBAAwB,CAAC;AAEjF;;;;GAIG;AACH,MAAM,WAAW,oBAAoB;IACnC,kEAAkE;IAClE,QAAQ,CAAC,EAAE,oBAAoB,CAAC;IAChC,wFAAwF;IACxF,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AASD;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,kBAAkB,GAAG,aAAa,CAS9E;AAED,iEAAiE;AACjE,MAAM,WAAW,qBAAqB;IACpC,sCAAsC;IACtC,UAAU,EAAE,MAAM,CAAC;IACnB,kEAAkE;IAClE,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,iFAAiF;IACjF,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,6DAA6D;IAC7D,MAAM,EAAE,aAAa,CAAC;IACtB,6EAA6E;IAC7E,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,GAAG,SAAS,EAC9B,OAAO,GAAE,oBAAyB,GACjC,qBAAqB,GAAG,SAAS,CA0BnC;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,MAAM,GAAG,SAAS,EAC5B,OAAO,GAAE,oBAAoB,GAAG;IAC9B,0EAA0E;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,sBAAsB,CAAC,CAAC;CAC9C,GACL,sBAAsB,GAAG,SAAS,CA8BpC;AAMD,oDAAoD;AACpD,MAAM,WAAW,kBAAkB;IACjC,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AACH,eAAO,MAAM,oBAAoB,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,CAAC,kBAAkB,CAAC,CAmC7E,CAAC;AAEF,qEAAqE;AACrE,qBAAa,wBAAyB,SAAQ,KAAK;IAE/C,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM;IAC/B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,SAAS;gBAD5B,IAAI,EAAE,OAAO,GAAG,MAAM,EACtB,QAAQ,EAAE,MAAM,GAAG,SAAS;CAQxC;AA0BD,8CAA8C;AAC9C,MAAM,WAAW,uBAAwB,SAAQ,oBAAoB;IACnE,+DAA+D;IAC/D,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,kFAAkF;IAClF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,SAAS,CAAC,EAAE,kBAAkB,CAAC;CAChC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,GAAG,SAAS,EAC9C,YAAY,EAAE,MAAM,GAAG,SAAS,EAChC,OAAO,GAAE,uBAA4B,GACpC,MAAM,GAAG,SAAS,CAoBpB"}

package/dist/bridge/src/provider-catalog.d.ts

@@ -0,0 +1,188 @@
+/**
+ * The AI provider catalog — the preset layer of the provider registry (§1.5,
+ * layer 5).
+ *
+ * A preset is the three-or-four literals an endpoint needs beyond a credential:
+ * its wire `surface`, its `base_url` (or the transport that derives one), the
+ * header the credential rides in, and the path a read-only probe can GET. With
+ * them, `skaile providers add --preset groq` needs nothing but an env var name.
+ *
+ * This replaced `provider-endpoints.ts` `PROVIDER_ENDPOINTS`: every endpoint
+ * that table knew is present here, with the surface/transport/credential facts
+ * it could not express.
+ *
+ * The record types come from `@skaile/workspaces/core/provider-registry` — the
+ * schema has exactly one home.
+ *
+ * @see PROVIDER-CONFIG-PLAN.md §1.2, §1.3, §2.5
+ */
+import { type AIProviderCredentialKind, type AIProviderDiscovery, type AIProviderEntry, type AIProviderKind, type AIProviderRegistryLayer, type AIProviderRegistryPatch, type AIProviderSurface, type AIProviderTransport } from "@skaile/workspaces/core/provider-registry";
+/**
+ * Where the credential goes on the wire. `{credential}` is replaced with the
+ * resolved secret. Needed because `credential.kind` alone is ambiguous:
+ * `api_key_header` is `x-api-key` for Anthropic, `x-goog-api-key` for Gemini,
+ * `api-key` for Azure OpenAI and `Authorization: Token …` for Deepgram.
+ */
+export interface AIProviderAuthHeader {
+    name: string;
+    template: string;
+}
+/** A catalog preset — the fields an entry inherits by naming it. */
+export interface AIProviderPreset {
+    /** Preset id; also the default entry id `skaile providers add` writes. */
+    id: string;
+    kind: AIProviderKind;
+    label: string;
+    /** `llm`/`embed` only. */
+    surface?: AIProviderSurface;
+    /** `llm`/`embed` only; omitted means `direct`. */
+    transport?: AIProviderTransport;
+    /** Literal endpoint. Absent when the transport derives one from `params`. */
+    base_url?: string;
+    /**
+     * Env var the vendor's own SDK reads as a base-URL override, when one
+     * exists. Consulted by the callers that still address an endpoint by preset
+     * id — model discovery, key validation, and the `settings.json` `apiKeys`
+     * normalizer — so a shell already pointed at a gateway keeps pointing there.
+     */
+    base_url_env?: string;
+    /** Static non-secret headers, e.g. Anthropic's `anthropic-version`. */
+    headers?: Record<string, string>;
+    /** Credential shape plus the conventional env var holding the secret. */
+    credential: {
+        kind: AIProviderCredentialKind;
+        env?: string;
+    };
+    /** Header the credential rides in; defaults per surface when omitted. */
+    auth_header?: AIProviderAuthHeader;
+    /** Default routing/voice parameters. */
+    params?: Record<string, string>;
+    /** `params` keys the operator must supply — the preset cannot know them. */
+    required_params?: string[];
+    /**
+     * Read-only path a health probe GETs, relative to `base_url`: the models
+     * list for LLM surfaces, an equivalent authenticated read for voice.
+     * Absent when the endpoint has none (Bedrock's runtime host).
+     */
+    probe_path?: string;
+    discovery?: AIProviderDiscovery;
+    /** Anything the operator has to know that the fields do not say. */
+    notes?: string;
+}
+/**
+ * Every preset the runtime ships.
+ *
+ * Insertion order is display order in `skaile providers list`: first-party
+ * clouds, then OpenAI-compatible vendors, then the transports that need
+ * routing parameters, then local runtimes and gateways, then voice.
+ *
+ * Sources: `platform/_devlog/reports/2026-09-20-inference-provider-market-survey.md`
+ * (36 endpoints, base URLs and auth headers verified there).
+ */
+export declare const AI_PROVIDER_PRESETS: Record<string, AIProviderPreset>;
+/** Presets in catalog order. */
+export declare function listProviderPresets(): AIProviderPreset[];
+/** Look up a preset by id. */
+export declare function getProviderPreset(id: string): AIProviderPreset | undefined;
+/**
+ * The endpoint `skaile providers list` shows for a preset: the literal when
+ * there is one, otherwise the transport's `base_url` template (§1.3) with its
+ * `{param}` placeholders left in — they are exactly what the operator must
+ * supply.
+ */
+export declare function presetBaseUrl(preset: AIProviderPreset): string | undefined;
+/**
+ * The endpoint a request to this preset should actually go to: an explicit
+ * override first, then the vendor's own `*_BASE_URL` variable
+ * ({@link AIProviderPreset.base_url_env}), then the preset literal.
+ *
+ * Behind a gateway the credential in play is the *gateway's*, not the
+ * vendor's, so discovery and key validation have to follow dispatch — firing
+ * either at the vendor's public API 401s and yields an empty catalog, which a
+ * caller that reads "empty" as "unknown" then degrades into "accept anything".
+ *
+ * Pure: reads only the `env` record it is handed.
+ */
+export declare function resolvePresetBaseUrl(preset: AIProviderPreset, options?: {
+    baseUrl?: string;
+    env?: Record<string, string | undefined>;
+}): string | undefined;
+/** Overrides {@link expandPreset} accepts from `skaile providers add`. */
+export interface ExpandPresetOptions {
+    /** `env:NAME` / `cmd:…` / `platform:…` / `keyring:…`. Never a literal. */
+    credentialRef?: string;
+    baseUrl?: string;
+    surface?: AIProviderSurface;
+    label?: string;
+    /** Transport routing parameters, or voice parameters for `stt`/`tts`. */
+    params?: Record<string, string>;
+}
+/**
+ * Materialize a preset into a registry entry.
+ *
+ * The credential is always a reference: the preset's conventional `env:` var
+ * unless the caller names another ref. No code path here can write a secret.
+ * For `transport: azure-openai` the `api_version` parameter is mirrored into
+ * `query_params['api-version']`, which is where the wire expects it (§1.3).
+ */
+export declare function expandPreset(preset: AIProviderPreset, options?: ExpandPresetOptions): AIProviderEntry;
+/**
+ * Build the catalog merge layer for a set of configured entries (§1.5).
+ *
+ * Only the presets actually referenced by a `preset:` key are expanded, keyed
+ * by the *entry* id — so `groq: {kind: llm, preset: groq}` deep-merges onto a
+ * full Groq definition while an unreferenced preset stays out of the registry.
+ *
+ * Takes the **pre-gate** merge (`LoadedProviderRegistry.patches`), not the
+ * gated registry: an entry that leaves `kind` or its transport `params` to the
+ * preset is exactly the one the gate drops before this layer exists, and a
+ * dropped entry names no preset to expand.
+ */
+export declare function catalogLayer(providers: AIProviderRegistryPatch): AIProviderRegistryLayer;
+/**
+ * The read-only URL a health probe or model discovery can GET for an entry —
+ * the models list on LLM surfaces, the equivalent authenticated read on voice
+ * ones. `undefined` when the entry has no endpoint yet (missing transport
+ * parameters) or the surface serves no such path (Bedrock runtime).
+ *
+ * This is the catalog method that supersedes `resolveProviderModelsUrl`.
+ */
+export declare function resolveProbeUrl(entry: AIProviderEntry): string | undefined;
+/**
+ * The header(s) that present a credential on the wire for an entry.
+ *
+ * `credential.kind` alone does not determine the header — `api_key_header` is
+ * `x-api-key` at Anthropic, `x-goog-api-key` at Google and `api-key` at Azure —
+ * so the preset's `auth_header` wins, then a per-surface default.
+ * Returns `{}` when the credential is signed elsewhere (`sigv4`, `google_adc`)
+ * or absent.
+ */
+export declare function buildCredentialHeaders(entry: AIProviderEntry, secret: string | undefined): Record<string, string>;
+/** Outcome of {@link probeProviderEntry}. Never carries the credential. */
+export interface AIProviderProbeResult {
+    /** The endpoint answered 2xx. */
+    ok: boolean;
+    /** `false` when no request was made — nothing was verified either way. */
+    probed: boolean;
+    url?: string;
+    status?: number;
+    /** Human-readable outcome. Secret-free. */
+    detail: string;
+}
+/** Options for {@link probeProviderEntry}. */
+export interface ProbeProviderOptions {
+    /** Resolved credential value, if the entry has one. Never logged. */
+    secret?: string;
+    /** Request deadline; default 8000 ms, matching `validateApiKey`. */
+    timeoutMs?: number;
+}
+/**
+ * Send one minimal, read-only request to an entry's endpoint and report what
+ * came back.
+ *
+ * Returns `probed: false` — rather than a false negative — when the entry has
+ * no probe path (Bedrock's runtime host) or no resolvable endpoint yet: a
+ * SigV4- or ADC-signed request is the transport SDK's job, not this function's.
+ */
+export declare function probeProviderEntry(entry: AIProviderEntry, options?: ProbeProviderOptions): Promise<AIProviderProbeResult>;
+//# sourceMappingURL=provider-catalog.d.ts.map

package/dist/bridge/src/provider-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-catalog.d.ts","sourceRoot":"","sources":["../../../bridge/src/provider-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAEL,KAAK,wBAAwB,EAC7B,KAAK,mBAAmB,EACxB,KAAK,eAAe,EACpB,KAAK,cAAc,EAGnB,KAAK,uBAAuB,EAC5B,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EAGzB,MAAM,2CAA2C,CAAC;AAEnD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;CAClB;AAED,oEAAoE;AACpE,MAAM,WAAW,gBAAgB;IAC/B,0EAA0E;IAC1E,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,0BAA0B;IAC1B,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,kDAAkD;IAClD,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,6EAA6E;IAC7E,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;;;OAKG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,uEAAuE;IACvE,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACjC,yEAAyE;IACzE,UAAU,EAAE;QAAE,IAAI,EAAE,wBAAwB,CAAC;QAAC,GAAG,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC7D,yEAAyE;IACzE,WAAW,CAAC,EAAE,oBAAoB,CAAC;IACnC,wCAAwC;IACxC,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,4EAA4E;IAC5E,eAAe,CAAC,EAAE,MAAM,EAAE,CAAC;IAC3B;;;;OAIG;IACH,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,SAAS,CAAC,EAAE,mBAAmB,CAAC;IAChC,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAQD;;;;;;;;;GASG;AACH,eAAO,MAAM,mBAAmB,EAAE,MAAM,CAAC,MAAM,EAAE,gBAAgB,CA0NhE,CAAC;AAEF,gCAAgC;AAChC,wBAAgB,mBAAmB,IAAI,gBAAgB,EAAE,CAExD;AAED,8BAA8B;AAC9B,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,gBAAgB,GAAG,SAAS,CAE1E;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAI1E;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAA;CAAO,GAC3E,MAAM,GAAG,SAAS,CAKpB;AAED,0EAA0E;AAC1E,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,iBAAiB,CAAC;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CACjC;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAC1B,MAAM,EAAE,gBAAgB,EACxB,OAAO,GAAE,mBAAwB,GAChC,eAAe,CAsCjB;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,CAAC,SAAS,EAAE,uBAAuB,GAAG,uBAAuB,CASxF;AAkBD;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,GAAG,SAAS,CAW1E;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,KAAK,EAAE,eAAe,EACtB,MAAM,EAAE,MAAM,GAAG,SAAS,GACzB,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAiBxB;AAED,2EAA2E;AAC3E,MAAM,WAAW,qBAAqB;IACpC,iCAAiC;IACjC,EAAE,EAAE,OAAO,CAAC;IACZ,0EAA0E;IAC1E,MAAM,EAAE,OAAO,CAAC;IAChB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,2CAA2C;IAC3C,MAAM,EAAE,MAAM,CAAC;CAChB;AAED,8CAA8C;AAC9C,MAAM,WAAW,oBAAoB;IACnC,qEAAqE;IACrE,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,oEAAoE;IACpE,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,wBAAsB,kBAAkB,CACtC,KAAK,EAAE,eAAe,EACtB,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,qBAAqB,CAAC,CAwChC"}