@skaile/workspaces 5.12.0 → 5.14.0

package/dist/model-endpoint/src/openai-responses.d.ts

@@ -0,0 +1,106 @@
+import type { AssistantMessage, AssistantMessageEvent } from "@earendil-works/pi-ai";
+import { type ParsedModelRequest } from "./openai-shared.js";
+/** Parsed `POST /v1/responses` body, in pi terms (`includeUsage` is always true: Responses always reports usage). */
+export type ResponsesRequest = ParsedModelRequest;
+export interface ResponseSummaryPart {
+    type: "summary_text";
+    text: string;
+}
+export interface ResponseReasoningItem {
+    type: "reasoning";
+    id: string;
+    summary: ResponseSummaryPart[];
+}
+export interface ResponseMessageItem {
+    type: "message";
+    id: string;
+    role: "assistant";
+    status: "in_progress" | "completed";
+    content: Array<{
+        type: "output_text";
+        text: string;
+        annotations: never[];
+    }>;
+}
+export interface ResponseFunctionCallItem {
+    type: "function_call";
+    id: string;
+    call_id: string;
+    name: string;
+    arguments: string;
+    status: "in_progress" | "completed";
+}
+export type ResponseOutputItem = ResponseReasoningItem | ResponseMessageItem | ResponseFunctionCallItem;
+export interface ResponseUsage {
+    input_tokens: number;
+    output_tokens: number;
+    total_tokens: number;
+    input_tokens_details: {
+        cached_tokens: number;
+    };
+    output_tokens_details: {
+        reasoning_tokens: number;
+    };
+}
+export interface ResponseObject {
+    id: string;
+    object: "response";
+    created_at: number;
+    model: string;
+    status: "in_progress" | "completed" | "incomplete";
+    incomplete_details: {
+        reason: "max_output_tokens";
+    } | null;
+    error: null;
+    output: ResponseOutputItem[];
+    usage: ResponseUsage | null;
+}
+export interface ResponsesMeta {
+    id: string;
+    created: number;
+    model: string;
+}
+/** One SSE event; `sequence_number` increases by one per event within a response. */
+export interface ResponsesStreamEvent {
+    type: string;
+    sequence_number: number;
+    [key: string]: unknown;
+}
+/**
+ * Validates an OpenAI Responses body (stateless subset) and maps it to a pi `Context`.
+ * `previous_response_id` is rejected because the endpoint keeps no response state.
+ */
+export declare function parseResponsesRequest(body: unknown): ResponsesRequest;
+/**
+ * Maps a finished pi message to a non-streaming Responses object. Output order is
+ * reasoning, message, then function calls. `error`/`aborted` throw 502.
+ */
+export declare function toResponse(message: AssistantMessage, meta: ResponsesMeta): ResponseObject;
+interface OpenBlock {
+    kind: "message" | "reasoning";
+    outputIndex: number;
+    itemId: string;
+    text: string;
+}
+/** Mutable per-stream mapper state; `error` is set instead of emitting an event on upstream failure. */
+export interface ResponsesStreamState {
+    readonly id: string;
+    readonly created: number;
+    readonly model: string;
+    /** Set when pi reports `error`/`aborted`; the server turns it into an SSE `error` event. */
+    error?: string;
+    sequence: number;
+    nextOutputIndex: number;
+    open: Map<number, OpenBlock>;
+    completed: Map<number, ResponseOutputItem>;
+}
+export declare function createResponsesStreamState(init: ResponsesMeta): ResponsesStreamState;
+/**
+ * Stateful pi-event → Responses SSE mapper. Function calls are buffered until
+ * `toolcall_end` (pi only knows call id and name then) and then emitted as a
+ * complete added/arguments/done sequence. A length stop ends with
+ * `response.incomplete`, everything else with `response.completed`.
+ */
+export declare function responsesEvents(event: AssistantMessageEvent, state: ResponsesStreamState): ResponsesStreamEvent[];
+export {};
+//# sourceMappingURL=openai-responses.d.ts.map

package/dist/model-endpoint/src/openai-responses.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-responses.d.ts","sourceRoot":"","sources":["../../../model-endpoint/src/openai-responses.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EAMtB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAWL,KAAK,kBAAkB,EASxB,MAAM,oBAAoB,CAAC;AAG5B,qHAAqH;AACrH,MAAM,MAAM,gBAAgB,GAAG,kBAAkB,CAAC;AAElD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,cAAc,CAAC;IACrB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,WAAW,CAAC;IAClB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,SAAS,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,WAAW,CAAC;IAClB,MAAM,EAAE,aAAa,GAAG,WAAW,CAAC;IACpC,OAAO,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,aAAa,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,KAAK,EAAE,CAAA;KAAE,CAAC,CAAC;CAC7E;AAED,MAAM,WAAW,wBAAwB;IACvC,IAAI,EAAE,eAAe,CAAC;IACtB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,aAAa,GAAG,WAAW,CAAC;CACrC;AAED,MAAM,MAAM,kBAAkB,GAC1B,qBAAqB,GACrB,mBAAmB,GACnB,wBAAwB,CAAC;AAE7B,MAAM,WAAW,aAAa;IAC5B,YAAY,EAAE,MAAM,CAAC;IACrB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,oBAAoB,EAAE;QAAE,aAAa,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,qBAAqB,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAA;KAAE,CAAC;CACrD;AAED,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,MAAM,EAAE,UAAU,CAAC;IACnB,UAAU,EAAE,MAAM,CAAC;IACnB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,aAAa,GAAG,WAAW,GAAG,YAAY,CAAC;IACnD,kBAAkB,EAAE;QAAE,MAAM,EAAE,mBAAmB,CAAA;KAAE,GAAG,IAAI,CAAC;IAC3D,KAAK,EAAE,IAAI,CAAC;IACZ,MAAM,EAAE,kBAAkB,EAAE,CAAC;IAC7B,KAAK,EAAE,aAAa,GAAG,IAAI,CAAC;CAC7B;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qFAAqF;AACrF,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,eAAe,EAAE,MAAM,CAAC;IACxB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC;CACxB;AA8ID;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,OAAO,GAAG,gBAAgB,CAoCrE;AAyFD;;;GAGG;AACH,wBAAgB,UAAU,CAAC,OAAO,EAAE,gBAAgB,EAAE,IAAI,EAAE,aAAa,GAAG,cAAc,CASzF;AAID,UAAU,SAAS;IACjB,IAAI,EAAE,SAAS,GAAG,WAAW,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,MAAM,CAAC;CACd;AAED,wGAAwG;AACxG,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,4FAA4F;IAC5F,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,eAAe,EAAE,MAAM,CAAC;IACxB,IAAI,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;IAC7B,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;CAC5C;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,aAAa,GAAG,oBAAoB,CAQpF;AA4GD;;;;;GAKG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,qBAAqB,EAC5B,KAAK,EAAE,oBAAoB,GAC1B,oBAAoB,EAAE,CAgGxB"}

package/dist/model-endpoint/src/openai-shared.d.ts

@@ -0,0 +1,77 @@
+import type { AssistantMessage, Context, ImageContent, JsonObject, Message, SamplingParams, ThinkingLevel, Tool, ToolResultMessage, Usage } from "@earendil-works/pi-ai";
+import { ModelEndpointError } from "./types.js";
+/** Model-call options both OpenAI surfaces translate into pi `stream()` options. */
+export interface ModelRequestOptions {
+    temperature?: number;
+    maxTokens?: number;
+    samplingParams?: SamplingParams;
+    reasoning?: ThinkingLevel;
+}
+/**
+ * Surface-independent result of parsing an OpenAI request. Both translators
+ * return this so the server can drive pi without knowing which wire format
+ * the caller spoke.
+ */
+export interface ParsedModelRequest {
+    model: string;
+    context: Context;
+    options: ModelRequestOptions;
+    stream: boolean;
+    includeUsage: boolean;
+}
+/** `400 invalid_request_error` for malformed or unsupported caller input. */
+export declare function badRequest(message: string): ModelEndpointError;
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export declare function requireModel(body: Record<string, unknown>): string;
+export declare function optionalBoolean(value: unknown, field: string): boolean;
+export declare function optionalNumber(value: unknown, field: string): number | undefined;
+export declare function optionalPositiveInt(value: unknown, field: string): number | undefined;
+/** `none` (or absent) disables reasoning; anything else must be a pi thinking level. */
+export declare function parseReasoningEffort(value: unknown, field: string): ThinkingLevel | undefined;
+/**
+ * Copies request fields pi has no named option for (top_p, seed, stop, ...)
+ * into `samplingParams`, which OpenAI-compatible pi adapters merge into the
+ * upstream body as-is.
+ */
+export declare function pickSamplingParams(body: Record<string, unknown>, keys: readonly string[]): SamplingParams | undefined;
+export declare function buildOptions(parts: {
+    temperature: number | undefined;
+    maxTokens: number | undefined;
+    samplingParams: SamplingParams | undefined;
+    reasoning: ThinkingLevel | undefined;
+}): ModelRequestOptions;
+/**
+ * Decodes a `data:` image URL into pi `ImageContent`. Remote URLs are rejected
+ * on purpose: fetching caller-supplied URLs from the runner would be an SSRF
+ * vector and the endpoint has no business doing I/O during translation.
+ */
+export declare function imageFromUrl(url: unknown, field: string): ImageContent;
+/**
+ * Tool `arguments` arrive as a JSON string; pi wants an object. Invalid JSON or a
+ * non-object value becomes `{}` so one malformed history entry cannot fail the call.
+ */
+export declare function parseToolArguments(value: unknown): JsonObject;
+export declare const DEFAULT_TOOL_PARAMETERS: {
+    readonly type: "object";
+    readonly properties: {};
+};
+export declare function toPiTool(name: string, description: unknown, parameters: unknown): Tool;
+/**
+ * Applies OpenAI `tool_choice` to the tool list. pi's `stream()` has no
+ * tool-choice option, so the choice is enforced by what we declare: `none`
+ * declares nothing, a named function declares only that function.
+ */
+export declare function selectTools(tools: Tool[], choice: unknown, forcedName: (choice: Record<string, unknown>) => unknown): Tool[];
+export declare function buildContext(systemParts: string[], messages: Message[], tools: Tool[]): Context;
+export declare function emptyUsage(): Usage;
+/** OpenAI counts cache reads/writes as prompt tokens; pi reports them separately. */
+export declare function promptTokens(usage: Usage): number;
+export declare function totalTokens(usage: Usage): number;
+/**
+ * An assistant turn replayed from the caller's history. It is stamped with a
+ * foreign api/provider so pi treats it as cross-provider history (dropping
+ * provider-specific signatures) rather than as its own output.
+ */
+export declare function historyAssistant(model: string, content: AssistantMessage["content"]): AssistantMessage;
+export declare function historyToolResult(toolCallId: string, toolName: string, text: string): ToolResultMessage;
+//# sourceMappingURL=openai-shared.d.ts.map

package/dist/model-endpoint/src/openai-shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-shared.d.ts","sourceRoot":"","sources":["../../../model-endpoint/src/openai-shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,gBAAgB,EAChB,OAAO,EACP,YAAY,EACZ,UAAU,EACV,OAAO,EACP,cAAc,EACd,aAAa,EACb,IAAI,EACJ,iBAAiB,EACjB,KAAK,EACN,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAEhD,oFAAoF;AACpF,MAAM,WAAW,mBAAmB;IAClC,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,cAAc,CAAC,EAAE,cAAc,CAAC;IAChC,SAAS,CAAC,EAAE,aAAa,CAAC;CAC3B;AAED;;;;GAIG;AACH,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,mBAAmB,CAAC;IAC7B,MAAM,EAAE,OAAO,CAAC;IAChB,YAAY,EAAE,OAAO,CAAC;CACvB;AAWD,6EAA6E;AAC7E,wBAAgB,UAAU,CAAC,OAAO,EAAE,MAAM,GAAG,kBAAkB,CAE9D;AAED,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE;AAED,wBAAgB,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAKlE;AAED,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAItE;AAED,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKhF;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAKrF;AAMD,wFAAwF;AACxF,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,aAAa,GAAG,SAAS,CAI7F;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,EAAE,SAAS,MAAM,EAAE,GACtB,cAAc,GAAG,SAAS,CAa5B;AAED,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAClC,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,cAAc,EAAE,cAAc,GAAG,SAAS,CAAC;IAC3C,SAAS,EAAE,aAAa,GAAG,SAAS,CAAC;CACtC,GAAG,mBAAmB,CAOtB;AAID;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,GAAG,YAAY,CAatE;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,UAAU,CAS7D;AAED,eAAO,MAAM,uBAAuB;;;CAA8C,CAAC;AAEnF,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,OAAO,EAAE,UAAU,EAAE,OAAO,GAAG,IAAI,CAMtF;AAED;;;;GAIG;AACH,wBAAgB,WAAW,CACzB,KAAK,EAAE,IAAI,EAAE,EACb,MAAM,EAAE,OAAO,EACf,UAAU,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,GACvD,IAAI,EAAE,CAaR;AAED,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,GAAG,OAAO,CAK/F;AAED,wBAAgB,UAAU,IAAI,KAAK,CASlC;AAED,qFAAqF;AACrF,wBAAgB,YAAY,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAEjD;AAED,wBAAgB,WAAW,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,CAEhD;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,MAAM,EACb,OAAO,EAAE,gBAAgB,CAAC,SAAS,CAAC,GACnC,gBAAgB,CAWlB;AAED,wBAAgB,iBAAiB,CAC/B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,MAAM,EAChB,IAAI,EAAE,MAAM,GACX,iBAAiB,CASnB"}

package/dist/model-endpoint/src/resolve.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Registry → pi `Model` + request auth.
+ *
+ * Reuses the registry's own resolution (`parseModelRef`, `entrySurface`,
+ * `entryBaseUrl`, `entryCredentialValue`) so the endpoint routes exactly like a
+ * harness driver does; the only logic added here is the pi-specific base-URL
+ * spelling and the "unknown model" check `parseModelRef` does not make.
+ */
+import { type MergedAIProviderRegistry } from "@skaile/workspaces/core/provider-registry";
+import { type ResolvedModel } from "./types.js";
+/** What {@link resolveModel} reads from the live session. */
+export interface ResolveDeps {
+    registry: MergedAIProviderRegistry;
+    lookupEnv: Record<string, string | undefined>;
+    roles?: Record<string, string>;
+}
+/**
+ * Resolve a request's `model` selector to everything one upstream call needs.
+ *
+ * The selector is `<providerId>/<model>`, a bare model id, or `@role`
+ * (see `parseModelRef`). An entry that declares models (`model_map` /
+ * `capabilities`) is a closed list: ids outside it are 404, matching what
+ * `/v1/models` advertises. An entry that declares none is open and forwards the
+ * id to the provider unchanged (discovery-based presets).
+ */
+export declare function resolveModel(selector: string, deps: ResolveDeps): ResolvedModel;
+/**
+ * Every model a caller can name, as `/v1/models` entries: ids are
+ * `<providerId>/<logicalId>` so two providers serving the same logical id stay
+ * distinguishable. Bare logical ids remain accepted on request.
+ */
+export declare function listModels(registry: MergedAIProviderRegistry): Array<{
+    id: string;
+    owned_by: string;
+}>;
+//# sourceMappingURL=resolve.d.ts.map

package/dist/model-endpoint/src/resolve.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve.d.ts","sourceRoot":"","sources":["../../../model-endpoint/src/resolve.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,EAGL,KAAK,wBAAwB,EAE9B,MAAM,2CAA2C,CAAC;AAQnD,OAAO,EAAsB,KAAK,aAAa,EAAE,MAAM,YAAY,CAAC;AAEpE,6DAA6D;AAC7D,MAAM,WAAW,WAAW;IAC1B,QAAQ,EAAE,wBAAwB,CAAC;IACnC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IAC9C,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAChC;AA+BD;;;;;;;;GAQG;AACH,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,WAAW,GAAG,aAAa,CA0D/E;AAOD;;;;GAIG;AACH,wBAAgB,UAAU,CACxB,QAAQ,EAAE,wBAAwB,GACjC,KAAK,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,CAAC,CAOzC"}

package/dist/model-endpoint/src/server.d.ts

@@ -0,0 +1,16 @@
+/**
+ * The loopback OpenAI-compatible HTTP server.
+ *
+ * Plain `node:http` so it runs identically under Node and Bun. pi-ai is
+ * imported lazily inside the handlers: the package is an optional peer, and
+ * merely importing `@skaile/workspaces/model-endpoint` must not fail without it.
+ */
+import { type ModelEndpointHandle, type ModelEndpointOptions } from "./types.js";
+/**
+ * Start the endpoint. Resolves once the socket is listening.
+ *
+ * Registry, env and roles are read per request through the getters so a
+ * session swap is visible immediately.
+ */
+export declare function startModelEndpoint(options: ModelEndpointOptions): Promise<ModelEndpointHandle>;
+//# sourceMappingURL=server.d.ts.map

package/dist/model-endpoint/src/server.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../../../model-endpoint/src/server.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAmBH,OAAO,EAEL,KAAK,mBAAmB,EACxB,KAAK,oBAAoB,EAG1B,MAAM,YAAY,CAAC;AAcpB;;;;;GAKG;AACH,wBAAsB,kBAAkB,CACtC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAAC,mBAAmB,CAAC,CAqP9B"}

package/dist/model-endpoint/src/types.d.ts

@@ -0,0 +1,78 @@
+/**
+ * Shared types of the model endpoint.
+ *
+ * Only type-only imports from pi-ai live here (erased at build), so the
+ * translators and the server can depend on this file without loading pi-ai.
+ * pi-ai is an optional peer; it is loaded lazily per request.
+ */
+import type { Api, AssistantMessageEventStream, Model, StreamOptions, TranscriptContext } from "@earendil-works/pi-ai";
+import type { MergedAIProviderRegistry } from "@skaile/workspaces/core/provider-registry";
+/** Everything one upstream call needs. */
+export interface ResolvedModel {
+    /** Registry id of the entry the model routes to. */
+    providerId: string;
+    /** Model id the caller asked for, after `@role` / provider-prefix stripping. */
+    logicalId: string;
+    /** pi model: `api` = entry surface, `baseUrl` = pi-ready entry endpoint, `id` = provider-side id (`model_map`). */
+    model: Model<Api>;
+    /** Resolved credential; `undefined` only for entries with an ambient credential chain. */
+    apiKey?: string;
+    /** Static `entry.headers`. */
+    headers?: Record<string, string>;
+}
+/** One request-log line sink. */
+export type ModelEndpointLog = (line: string) => void;
+/** pi-ai's per-surface `stream`, widened to the shape the server calls. */
+export type StreamFn = (model: Model<Api>, context: TranscriptContext, options?: StreamOptions & Record<string, unknown>) => AssistantMessageEventStream;
+/** The parts of a pi-ai `api/<surface>` module the server calls. */
+export interface PiApiModule {
+    stream: StreamFn;
+    streamSimple?: StreamFn;
+}
+/** Options of `startModelEndpoint`. */
+export interface ModelEndpointOptions {
+    /** Live registry view; read on every request so a `session_init` can swap it. */
+    getRegistry(): MergedAIProviderRegistry;
+    /** Env that credential refs and `SKAILE_AIP_<ID>_KEY` values resolve against; read per request. */
+    getLookupEnv(): Record<string, string | undefined>;
+    /** Roles table for `@role` selectors. */
+    getRoles?(): Record<string, string> | undefined;
+    /** Bearer token every request must present. */
+    token: string;
+    /** Bind address. Default `"127.0.0.1"`. */
+    host?: string;
+    /** Bind port. Default `0` (ephemeral). */
+    port?: number;
+    /** Request-log sink. */
+    log?: ModelEndpointLog;
+    /**
+     * Test seam: override pi-ai api loading. Default: dynamic import of `@earendil-works/pi-ai/api/<surface>`.
+     * `streamSimple` (every pi api module exports it) is used when the request asks for reasoning:
+     * only it maps a provider-neutral thinking level onto the surface's own effort field.
+     */
+    loadApi?(surface: string): Promise<PiApiModule>;
+    /** Test seam for the `/v1/embeddings` pass-through. Default `globalThis.fetch`. */
+    fetch?: typeof fetch;
+}
+/** A running endpoint. */
+export interface ModelEndpointHandle {
+    /** `http://${host}:${port}/v1` — what an OpenAI SDK takes as `baseURL`. */
+    url: string;
+    port: number;
+    token: string;
+    close(): Promise<void>;
+}
+/** The OpenAI error `type` values the endpoint emits. */
+export type ModelEndpointErrorType = "invalid_request_error" | "authentication_error" | "not_found_error" | "upstream_error" | "server_error";
+/**
+ * A failure with a defined HTTP shape. Translators and the resolver throw it
+ * so the server can render the OpenAI-style `{ error: {...} }` body without
+ * each call site knowing about HTTP.
+ */
+export declare class ModelEndpointError extends Error {
+    readonly status: number;
+    readonly type: ModelEndpointErrorType;
+    readonly code?: string;
+    constructor(status: number, message: string, code?: string, type?: ModelEndpointErrorType);
+}
+//# sourceMappingURL=types.d.ts.map

package/dist/model-endpoint/src/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../model-endpoint/src/types.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EACV,GAAG,EACH,2BAA2B,EAC3B,KAAK,EACL,aAAa,EACb,iBAAiB,EAClB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,2CAA2C,CAAC;AAE1F,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC5B,oDAAoD;IACpD,UAAU,EAAE,MAAM,CAAC;IACnB,gFAAgF;IAChF,SAAS,EAAE,MAAM,CAAC;IAClB,mHAAmH;IACnH,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,CAAC;IAClB,0FAA0F;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8BAA8B;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAClC;AAED,iCAAiC;AACjC,MAAM,MAAM,gBAAgB,GAAG,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;AAEtD,2EAA2E;AAC3E,MAAM,MAAM,QAAQ,GAAG,CACrB,KAAK,EAAE,KAAK,CAAC,GAAG,CAAC,EACjB,OAAO,EAAE,iBAAiB,EAC1B,OAAO,CAAC,EAAE,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAC9C,2BAA2B,CAAC;AAEjC,oEAAoE;AACpE,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,QAAQ,CAAC;IACjB,YAAY,CAAC,EAAE,QAAQ,CAAC;CACzB;AAED,uCAAuC;AACvC,MAAM,WAAW,oBAAoB;IACnC,iFAAiF;IACjF,WAAW,IAAI,wBAAwB,CAAC;IACxC,mGAAmG;IACnG,YAAY,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD,yCAAyC;IACzC,QAAQ,CAAC,IAAI,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAChD,+CAA+C;IAC/C,KAAK,EAAE,MAAM,CAAC;IACd,2CAA2C;IAC3C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,wBAAwB;IACxB,GAAG,CAAC,EAAE,gBAAgB,CAAC;IACvB;;;;OAIG;IACH,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,WAAW,CAAC,CAAC;IAChD,mFAAmF;IACnF,KAAK,CAAC,EAAE,OAAO,KAAK,CAAC;CACtB;AAED,0BAA0B;AAC1B,MAAM,WAAW,mBAAmB;IAClC,2EAA2E;IAC3E,GAAG,EAAE,MAAM,CAAC;IACZ,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACxB;AAED,yDAAyD;AACzD,MAAM,MAAM,sBAAsB,GAC9B,uBAAuB,GACvB,sBAAsB,GACtB,iBAAiB,GACjB,gBAAgB,GAChB,cAAc,CAAC;AAEnB;;;;GAIG;AACH,qBAAa,kBAAmB,SAAQ,KAAK;IAC3C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,sBAAsB,CAAC;IACtC,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAC;gBAEX,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,sBAAsB;CAO1F"}

package/dist/open-library-QNMIMZYS.js

@@ -0,0 +1,40 @@
+export { LocalCatalogDisabledError, openCatalogSource, openLibrary, openLibraryManager, resolveCatalogSource } from './chunk-ZDTZGEJG.js';
+import './chunk-GJGEDWRT.js';
+import './chunk-5IMGZAKH.js';
+import './chunk-QELQDY5K.js';
+import './chunk-X3RMRJNR.js';
+import './chunk-7RGTAEG6.js';
+import './chunk-NUELZWCF.js';
+import './chunk-QAYL3PYY.js';
+import './chunk-ODQGLELI.js';
+import './chunk-NVO6WECE.js';
+import './chunk-PXDWTJ3P.js';
+import './chunk-H5U7LNTJ.js';
+import './chunk-3TXEJN4W.js';
+import './chunk-FD2IPIE2.js';
+import './chunk-NOA6EJXE.js';
+import './chunk-KTBKW2FI.js';
+import './chunk-UQ6LFBPZ.js';
+import './chunk-CNZI37HV.js';
+import './chunk-57SF6W6E.js';
+import './chunk-OX2W5YF3.js';
+import './chunk-4GY63JU6.js';
+import './chunk-TYUJPQNX.js';
+import './chunk-D54T2F54.js';
+import './chunk-5BEFNLOR.js';
+import './chunk-A2ULN3KX.js';
+import './chunk-CAPKENNF.js';
+import './chunk-L5VSIPQD.js';
+import './chunk-IG5LZ3WU.js';
+import './chunk-IY5E7Y5W.js';
+import './chunk-RVRB27AN.js';
+import './chunk-M3P4BYRK.js';
+import './chunk-J4OYIYFQ.js';
+import './chunk-ICSCSM5D.js';
+import './chunk-DKXNKFKP.js';
+import './chunk-MJHSLODD.js';
+import './chunk-C3CAXQMA.js';
+import './chunk-BOFL7GIF.js';
+import './chunk-NSBPE2FW.js';
+//# sourceMappingURL=open-library-QNMIMZYS.js.map
+//# sourceMappingURL=open-library-QNMIMZYS.js.map

package/dist/{open-library-N6ESO6IK.js.map → open-library-QNMIMZYS.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"open-library-N6ESO6IK.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"open-library-QNMIMZYS.js"}

package/dist/open-registry-BOUCBDLF.js

@@ -0,0 +1,32 @@
+export { getKindRegistry, getKnownKinds } from './chunk-5IMGZAKH.js';
+import './chunk-QELQDY5K.js';
+import './chunk-X3RMRJNR.js';
+import './chunk-7RGTAEG6.js';
+import './chunk-NUELZWCF.js';
+import './chunk-ODQGLELI.js';
+import './chunk-NVO6WECE.js';
+import './chunk-PXDWTJ3P.js';
+import './chunk-H5U7LNTJ.js';
+import './chunk-3TXEJN4W.js';
+import './chunk-57SF6W6E.js';
+import './chunk-OX2W5YF3.js';
+import './chunk-4GY63JU6.js';
+import './chunk-TYUJPQNX.js';
+import './chunk-D54T2F54.js';
+import './chunk-5BEFNLOR.js';
+import './chunk-A2ULN3KX.js';
+import './chunk-CAPKENNF.js';
+import './chunk-L5VSIPQD.js';
+import './chunk-IG5LZ3WU.js';
+import './chunk-IY5E7Y5W.js';
+import './chunk-RVRB27AN.js';
+import './chunk-M3P4BYRK.js';
+import './chunk-J4OYIYFQ.js';
+import './chunk-ICSCSM5D.js';
+import './chunk-DKXNKFKP.js';
+import './chunk-MJHSLODD.js';
+import './chunk-C3CAXQMA.js';
+import './chunk-BOFL7GIF.js';
+import './chunk-NSBPE2FW.js';
+//# sourceMappingURL=open-registry-BOUCBDLF.js.map
+//# sourceMappingURL=open-registry-BOUCBDLF.js.map

package/dist/{open-registry-CBZ5MWTT.js.map → open-registry-BOUCBDLF.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"open-registry-CBZ5MWTT.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"open-registry-BOUCBDLF.js"}

package/dist/paths-B6SX6J6T.js

@@ -0,0 +1,22 @@
+export { AI_RESOURCES, MONOREPO_ROOT } from './chunk-ZBD6EITA.js';
+export { aiResourceRoots } from './chunk-OX2W5YF3.js';
+import './chunk-4GY63JU6.js';
+import './chunk-TYUJPQNX.js';
+import './chunk-D54T2F54.js';
+import './chunk-5BEFNLOR.js';
+import './chunk-A2ULN3KX.js';
+import './chunk-CAPKENNF.js';
+import './chunk-L5VSIPQD.js';
+import './chunk-IG5LZ3WU.js';
+import './chunk-IY5E7Y5W.js';
+import './chunk-RVRB27AN.js';
+import './chunk-M3P4BYRK.js';
+import './chunk-J4OYIYFQ.js';
+import './chunk-ICSCSM5D.js';
+import './chunk-DKXNKFKP.js';
+import './chunk-MJHSLODD.js';
+import './chunk-C3CAXQMA.js';
+import './chunk-BOFL7GIF.js';
+import './chunk-NSBPE2FW.js';
+//# sourceMappingURL=paths-B6SX6J6T.js.map
+//# sourceMappingURL=paths-B6SX6J6T.js.map

package/dist/{paths-U6W6MQNQ.js.map → paths-B6SX6J6T.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"paths-U6W6MQNQ.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"paths-B6SX6J6T.js"}

package/dist/{plugin-store-XMZSPVBF.js → plugin-store-MLFP3WJ7.js}

@@ -1,17 +1,17 @@
 import { pluginRegistry } from './chunk-6E6PKKAD.js';
-import { readPluginsLockSlice } from './chunk-T5TSLSRO.js';
+import { readPluginsLockSlice } from './chunk-OX2W5YF3.js';
 import './chunk-4GY63JU6.js';
-import './chunk-SHQMPGOL.js';
-import './chunk-PMECEZK3.js';
+import './chunk-TYUJPQNX.js';
+import './chunk-D54T2F54.js';
 import './chunk-5BEFNLOR.js';
 import './chunk-A2ULN3KX.js';
-import './chunk-PNOGX36L.js';
+import './chunk-CAPKENNF.js';
 import './chunk-L5VSIPQD.js';
-import './chunk-CPSIPIX7.js';
-import './chunk-CTP3XBMF.js';
+import './chunk-IG5LZ3WU.js';
+import './chunk-IY5E7Y5W.js';
 import './chunk-RVRB27AN.js';
-import './chunk-XTVSNWLL.js';
-import './chunk-PNTXHTBC.js';
+import './chunk-M3P4BYRK.js';
+import './chunk-J4OYIYFQ.js';
 import './chunk-ICSCSM5D.js';
 import './chunk-DKXNKFKP.js';
 import './chunk-MJHSLODD.js';
@@ -19,7 +19,7 @@ import './chunk-C3CAXQMA.js';
 import './chunk-BOFL7GIF.js';
 import './chunk-NSBPE2FW.js';
 import { pathToFileURL } from 'url';
-import { existsSync, readFileSync, writeFileSync, mkdirSync } from 'fs';
+import { existsSync, readFileSync, rmSync, writeFileSync, mkdirSync } from 'fs';
 import { join, resolve } from 'path';
 import { createHash } from 'crypto';
 
@@ -113,11 +113,9 @@ async function loadPlugins(projectDir, plugins, registry = pluginRegistry, opts
   }
   return { loaded, failed };
 }
-var defaultInstall = async (dir) => {
+async function runCapture(args, cwd) {
   const { portableSpawn } = await import('./core/index.js');
-  const hasLock = existsSync(`${dir}/bun.lock`) || existsSync(`${dir}/bun.lockb`) || existsSync(`${dir}/package-lock.json`);
-  const args = hasLock ? ["bun", "install", "--frozen-lockfile"] : ["bun", "install"];
-  const proc = portableSpawn(args, { cwd: dir });
+  const proc = portableSpawn(args, { cwd });
   const chunks = [];
   const decoder = new TextDecoder();
   const pump = async (stream) => {
@@ -130,7 +128,22 @@ var defaultInstall = async (dir) => {
   };
   await Promise.all([pump(proc.stdout), pump(proc.stderr)]);
   const code = await proc.exited;
-  return { ok: code === 0, output: chunks.join("") };
+  return { started: proc.pid !== -1, code, output: chunks.join("") };
+}
+var defaultInstall = async (dir, opts = {}) => {
+  const hasBunLock = existsSync(`${dir}/bun.lock`) || existsSync(`${dir}/bun.lockb`);
+  const hasNpmLock = existsSync(`${dir}/package-lock.json`);
+  const frozen = opts.frozen !== false;
+  const bunArgs = frozen && (hasBunLock || hasNpmLock) ? ["bun", "install", "--frozen-lockfile"] : ["bun", "install"];
+  const withBun = await runCapture(bunArgs, dir);
+  if (withBun.started) return { ok: withBun.code === 0, output: withBun.output };
+  const npmArgs = frozen && hasNpmLock ? ["npm", "ci", "--ignore-scripts", "--no-audit", "--no-fund"] : ["npm", "install", "--ignore-scripts", "--no-audit", "--no-fund"];
+  const withNpm = await runCapture(npmArgs, dir);
+  if (withNpm.started) return { ok: withNpm.code === 0, output: withNpm.output };
+  return {
+    ok: false,
+    output: "neither bun nor npm found on PATH; plugin install needs one of them (https://bun.sh or https://nodejs.org)"
+  };
 };
 function writePackageJson(projectDir, plugins) {
   const dependencies = {};
@@ -143,9 +156,20 @@ function writePackageJson(projectDir, plugins) {
     private: true,
     dependencies
   };
+  const file = pluginsPkgJson(projectDir);
+  const previous = existsSync(file) ? readFileSync(file, "utf8") : void 0;
+  let before;
+  try {
+    before = previous === void 0 ? void 0 : JSON.parse(previous).dependencies;
+  } catch {
+    before = void 0;
+  }
+  const sortedJson = (d) => JSON.stringify(Object.entries(d ?? {}).sort(([a], [b]) => a.localeCompare(b)));
+  const depsChanged = before === void 0 || sortedJson(before) !== sortedJson(dependencies);
   mkdirSync(pluginsDir(projectDir), { recursive: true });
-  writeFileSync(pluginsPkgJson(projectDir), `${JSON.stringify(pkg, null, 2)}
+  writeFileSync(file, `${JSON.stringify(pkg, null, 2)}
 `);
+  return { previous, depsChanged };
 }
 async function reconcilePlugins(projectDir, plugins, opts = {}) {
   if (plugins.length === 0) {
@@ -160,16 +184,34 @@ async function reconcilePlugins(projectDir, plugins, opts = {}) {
       return { changed: false, reason: "up-to-date" };
     }
   }
-  writePackageJson(projectDir, plugins);
+  const { previous, depsChanged } = writePackageJson(projectDir, plugins);
   const install = opts.runInstall ?? defaultInstall;
-  const result = await install(pluginsDir(projectDir));
+  const result = await install(pluginsDir(projectDir), { frozen: !depsChanged });
   if (!result.ok) {
+    if (previous === void 0) rmSync(pluginsPkgJson(projectDir), { force: true });
+    else writeFileSync(pluginsPkgJson(projectDir), previous);
     throw new Error(`plugin install failed:
 ${result.output}`);
   }
   writeFileSync(hashFile, wantHash);
   return { changed: true, reason: "reconciled" };
 }
+async function rollbackPluginStore(projectDir, previousPlugins, opts = {}) {
+  if (previousPlugins.length === 0) {
+    const dir = pluginsDir(projectDir);
+    rmSync(pluginsPkgJson(projectDir), { force: true });
+    rmSync(reconcileHashFile(projectDir), { force: true });
+    rmSync(nodeModulesDir(projectDir), { recursive: true, force: true });
+    for (const lock of ["bun.lock", "bun.lockb", "package-lock.json"]) {
+      rmSync(join(dir, lock), { force: true });
+    }
+    return;
+  }
+  try {
+    await reconcilePlugins(projectDir, previousPlugins, opts);
+  } catch {
+  }
+}
 
 // cli/src/plugin-store/index.ts
 async function ensurePluginsLoaded(projectDir, plugins, registry = pluginRegistry, opts = {}) {
@@ -180,6 +222,6 @@ async function ensurePluginsLoaded(projectDir, plugins, registry = pluginRegistr
   return loadPlugins(projectDir, plugins, registry, { log: opts.log });
 }
 
-export { ensurePluginsLoaded, loadPlugins, reconcilePlugins, specName };
-//# sourceMappingURL=plugin-store-XMZSPVBF.js.map
-//# sourceMappingURL=plugin-store-XMZSPVBF.js.map
+export { ensurePluginsLoaded, loadPlugins, reconcilePlugins, rollbackPluginStore, specName };
+//# sourceMappingURL=plugin-store-MLFP3WJ7.js.map
+//# sourceMappingURL=plugin-store-MLFP3WJ7.js.map