@skaile/workspaces 6.5.0 → 6.7.0

package/dist/{chunk-NSIOBKDX.js → chunk-6UP2EDFN.js}

@@ -1,51 +1,4 @@
-import { pluginRegistry } from './chunk-G5SUWZEU.js';
-import { resolveCredential } from './chunk-VSX2G7LA.js';
-import { AI_PROVIDER_BASE_URL_TEMPLATES, resolveEntryBaseUrl, parseCredentialRef, registryEntries, isEntryEnabled } from './chunk-RXGPFAMN.js';
-
-// bridge/src/harness-capabilities.ts
-var GENERIC_HARNESS_CAPABILITIES = {
-  inProcessMcpServers: false,
-  liveToolUpdates: true,
-  managedSession: false,
-  claudeCodeCredentials: false,
-  resumeNeedsTranscript: false
-};
-var BUILTIN_HARNESS_CAPABILITIES = {
-  // Recomposes its tools per turn, so a hot-plugged MCP server is live.
-  omp: {
-    inProcessMcpServers: false,
-    liveToolUpdates: true,
-    managedSession: false,
-    claudeCodeCredentials: false,
-    resumeNeedsTranscript: false
-  },
-  // The SDK takes in-process server instances and bakes its tool set at
-  // creation; it reads Claude's `~/.claude` credentials and JSONL transcripts.
-  "claude-sdk": {
-    inProcessMcpServers: true,
-    liveToolUpdates: false,
-    managedSession: false,
-    claudeCodeCredentials: true,
-    resumeNeedsTranscript: true
-  },
-  // Standalone SDK recomposes its tools per turn. A host-managed session
-  // (native app-server) refreshes its own native tool snapshot instead.
-  codex: {
-    inProcessMcpServers: false,
-    liveToolUpdates: true,
-    managedSession: true,
-    claudeCodeCredentials: false,
-    resumeNeedsTranscript: false
-  }
-};
-function harnessCapabilities(id) {
-  const declared = id ? Object.hasOwn(BUILTIN_HARNESS_CAPABILITIES, id) ? BUILTIN_HARNESS_CAPABILITIES[id] : pluginRegistry.get("harness", id)?.capabilities : void 0;
-  return { ...GENERIC_HARNESS_CAPABILITIES, ...declared };
-}
-function supportsLiveToolUpdates(id, managed = false) {
-  const caps = harnessCapabilities(id);
-  return caps.liveToolUpdates && !(managed && caps.managedSession);
-}
+import { AI_PROVIDER_BASE_URL_TEMPLATES, resolveEntryBaseUrl } from './chunk-RXGPFAMN.js';
 
 // bridge/src/provider-catalog.ts
 var ANTHROPIC_VERSION_HEADER = { "anthropic-version": "2023-06-01" };
@@ -399,268 +352,6 @@ async function probeProviderEntry(entry, options = {}) {
   }
 }
 
-// bridge/src/provider-materialize/credential-env.ts
-var PROVIDER_CREDENTIAL_ENV_PREFIX = "SKAILE_AIP_";
-var PROVIDER_CREDENTIAL_ENV_SUFFIX = "_KEY";
-function providerCredentialEnvName(providerId) {
-  const slug = providerId.replace(/[^A-Za-z0-9]/g, "_").toUpperCase();
-  return `${PROVIDER_CREDENTIAL_ENV_PREFIX}${slug}${PROVIDER_CREDENTIAL_ENV_SUFFIX}`;
-}
-function conventionalCredentialEnvName(entry) {
-  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : void 0;
-  if (preset?.credential.env) return preset.credential.env;
-  const ref = entry.credential?.ref ? parseCredentialRef(entry.credential.ref) : void 0;
-  return ref?.form === "env" ? ref.name : void 0;
-}
-function resolveEntryCredential(entry, options = {}) {
-  return resolveCredential(entry, {
-    ...options.env ? { env: options.env } : {},
-    ...options.secrets ? { secrets: options.secrets } : {},
-    ...options.allowCommand === void 0 ? {} : { allowCommand: options.allowCommand }
-  }).value;
-}
-function entryCredentialValue(providerId, entry, options = {}) {
-  return resolveEntryCredential(entry, options) ?? options.env?.[providerCredentialEnvName(providerId)];
-}
-function unresolvedProviderCredentials(registry, options = {}) {
-  const out = [];
-  for (const [id, entry] of registryEntries(registry)) {
-    if (entry.kind !== "llm" && entry.kind !== "embed") continue;
-    if (!isEntryEnabled(entry)) continue;
-    if (options.providerId && id !== options.providerId) continue;
-    const resolved = resolveCredential(entry, {
-      ...options.env ? { env: options.env } : {},
-      ...options.secrets ? { secrets: options.secrets } : {},
-      ...options.allowCommand === void 0 ? {} : { allowCommand: options.allowCommand }
-    });
-    if (!resolved.error) continue;
-    if (options.env?.[providerCredentialEnvName(id)]) continue;
-    out.push({ providerId: id, reason: resolved.error });
-  }
-  return out;
-}
-function entryCredentialEnv(providerId, entry, options = {}) {
-  const value = resolveEntryCredential(entry, options);
-  if (!value) return {};
-  const out = { [providerCredentialEnvName(providerId)]: value };
-  if (options.aliases !== false) {
-    const alias = conventionalCredentialEnvName(entry);
-    if (alias) out[alias] = value;
-  }
-  return out;
-}
-function registryCredentialEnv(registry, options = {}) {
-  const canonical = {};
-  const aliases = {};
-  for (const [id, entry] of registryEntries(registry)) {
-    if (options.providerId && id !== options.providerId) continue;
-    if (!isEntryEnabled(entry)) continue;
-    const value = resolveEntryCredential(entry, options);
-    if (!value) continue;
-    canonical[providerCredentialEnvName(id)] = value;
-    if (options.aliases === false) continue;
-    const alias = conventionalCredentialEnvName(entry);
-    if (alias && aliases[alias] === void 0) aliases[alias] = value;
-  }
-  return { ...aliases, ...canonical };
-}
-
-// bridge/src/registry.ts
-var INCLUDE_CLAUDE_SDK = typeof __INCLUDE_CLAUDE_SDK__ === "undefined" ? true : __INCLUDE_CLAUDE_SDK__;
-var INCLUDE_CODEX = typeof __INCLUDE_CODEX__ === "undefined" ? true : __INCLUDE_CODEX__;
-var OMP_SURFACES = [
-  "anthropic-messages",
-  "openai-completions",
-  "openai-responses",
-  "openai-codex-responses",
-  "azure-openai-responses",
-  "bedrock-converse-stream",
-  "google-generative-ai",
-  "google-vertex"
-];
-var BUILTIN_HARNESS_CATALOG = {
-  omp: {
-    id: "omp",
-    name: "omp (oh-my-pi)",
-    modelAgnostic: true,
-    supportsInBandAbort: true,
-    surfaces: OMP_SURFACES,
-    // omp renders the whole registry as its own `models.yml`, so every entry
-    // stays selectable and roles / per-subagent models resolve across them.
-    providerPlurality: "registry",
-    capabilities: BUILTIN_HARNESS_CAPABILITIES.omp
-  },
-  "claude-sdk": {
-    id: "claude-sdk",
-    name: "Claude Agent SDK",
-    modelAgnostic: false,
-    supportsInBandAbort: true,
-    // Anthropic's own API, plus the two clouds the SDK addresses natively.
-    // Foundry is `anthropic-messages` at a different host, not a surface.
-    surfaces: ["anthropic-messages", "bedrock-converse-stream", "google-vertex"],
-    providerPlurality: "single",
-    capabilities: BUILTIN_HARNESS_CAPABILITIES["claude-sdk"]
-  },
-  codex: {
-    id: "codex",
-    name: "OpenAI Codex",
-    modelAgnostic: false,
-    supportsInBandAbort: true,
-    // Codex's `wire_api` is `responses` or `chat`; its subscription transport
-    // is the codex-specific responses flavour.
-    surfaces: ["openai-codex-responses", "openai-responses", "openai-completions"],
-    providerPlurality: "single",
-    capabilities: BUILTIN_HARNESS_CAPABILITIES.codex
-  },
-  echo: {
-    id: "echo",
-    name: "Echo (E2E mock)",
-    modelAgnostic: true,
-    supportsInBandAbort: false,
-    // Deterministic mock: it never opens a connection, so it speaks no wire
-    // surface and no registry entry can be dispatched to it.
-    surfaces: [],
-    providerPlurality: "single"
-  },
-  gemini: {
-    id: "gemini",
-    name: "Gemini CLI",
-    modelAgnostic: false,
-    supportsInBandAbort: false,
-    surfaces: ["google-generative-ai"],
-    providerPlurality: "single"
-  },
-  qwen: {
-    id: "qwen",
-    name: "Qwen Code",
-    modelAgnostic: true,
-    supportsInBandAbort: false,
-    // Driven entirely through OPENAI_BASE_URL / OPENAI_API_KEY.
-    surfaces: ["openai-completions"],
-    providerPlurality: "single"
-  },
-  opencode: {
-    id: "opencode",
-    name: "OpenCode",
-    modelAgnostic: true,
-    supportsInBandAbort: false,
-    surfaces: [
-      "anthropic-messages",
-      "openai-completions",
-      "openai-responses",
-      "google-generative-ai"
-    ],
-    providerPlurality: "credentials-n"
-  },
-  goose: {
-    id: "goose",
-    name: "Goose",
-    modelAgnostic: true,
-    supportsInBandAbort: false,
-    surfaces: [
-      "anthropic-messages",
-      "openai-completions",
-      "google-generative-ai",
-      "bedrock-converse-stream"
-    ],
-    providerPlurality: "credentials-n"
-  },
-  continue: {
-    id: "continue",
-    name: "Continue CLI",
-    modelAgnostic: true,
-    supportsInBandAbort: false,
-    surfaces: ["anthropic-messages", "openai-completions", "google-generative-ai"],
-    providerPlurality: "credentials-n"
-  }
-};
-var _harnessesRegistered = false;
-async function registerBuiltinHarnesses(registry = pluginRegistry) {
-  if (registry === pluginRegistry && _harnessesRegistered) return;
-  if (!registry.get("harness", "omp")) {
-    const m = await import('./bridge/harnesses/omp.js');
-    registry.register("harness", m.ompHarnessTarget);
-  }
-  if (!registry.get("harness", "echo")) {
-    const m = await import('./bridge/harnesses/echo.js');
-    registry.register("harness", m.echoHarnessTarget);
-  }
-  if (INCLUDE_CLAUDE_SDK && !registry.get("harness", "claude-sdk")) {
-    const m = await import('./bridge/harnesses/claude-sdk.js');
-    registry.register("harness", m.claudeSdkHarnessTarget);
-  }
-  if (INCLUDE_CODEX && !registry.get("harness", "codex")) {
-    const m = await import('./bridge/harnesses/codex.js');
-    registry.register("harness", m.codexHarnessTarget);
-  }
-  if (!registry.get("harness", "gemini")) {
-    const m = await import('./bridge/harnesses/gemini.js');
-    registry.register("harness", m.geminiHarnessTarget);
-  }
-  if (!registry.get("harness", "qwen")) {
-    const m = await import('./bridge/harnesses/qwen.js');
-    registry.register("harness", m.qwenHarnessTarget);
-  }
-  if (!registry.get("harness", "opencode")) {
-    const m = await import('./bridge/harnesses/opencode.js');
-    registry.register("harness", m.opencodeHarnessTarget);
-  }
-  if (!registry.get("harness", "goose")) {
-    const m = await import('./bridge/harnesses/goose.js');
-    registry.register("harness", m.gooseHarnessTarget);
-  }
-  if (!registry.get("harness", "continue")) {
-    const m = await import('./bridge/harnesses/continue.js');
-    registry.register("harness", m.continueHarnessTarget);
-  }
-  if (registry === pluginRegistry) _harnessesRegistered = true;
-}
-async function createHarness(id, config, ctx) {
-  const target = await resolveHarnessTarget(id);
-  return target.create(config, ctx ?? {});
-}
-async function resolveHarnessTarget(id) {
-  await registerBuiltinHarnesses();
-  const target = pluginRegistry.get("harness", id);
-  if (!target) {
-    if (id in BUILTIN_HARNESS_CATALOG) {
-      throw new Error(`Agent harness "${id}" is not bundled in this build.`);
-    }
-    throw new Error(
-      `Unknown agent harness: "${id}". Available: ${listHarnesses().map((d) => d.id).join(", ")}`
-    );
-  }
-  return target;
-}
-function listHarnesses() {
-  const merged = /* @__PURE__ */ new Map();
-  for (const info of Object.values(BUILTIN_HARNESS_CATALOG)) {
-    merged.set(info.id, info);
-  }
-  for (const meta of pluginRegistry.list("harness")) {
-    if (!merged.has(meta.id)) {
-      const target = pluginRegistry.get("harness", meta.id);
-      merged.set(meta.id, {
-        id: meta.id,
-        name: meta.displayName,
-        modelAgnostic: target?.modelAgnostic ?? false,
-        supportsInBandAbort: target?.supportsInBandAbort ?? false,
-        // Left absent when the target declares nothing: "speaks no surface" and
-        // "did not say" are different claims, and the platform resolver must be
-        // able to tell them apart before it filters a harness out.
-        ...target?.surfaces ? { surfaces: target.surfaces } : {},
-        ...target?.providerPlurality ? { providerPlurality: target.providerPlurality } : {},
-        ...target?.capabilities ? { capabilities: target.capabilities } : {}
-      });
-    }
-  }
-  return [...merged.values()];
-}
-async function listModelsForHarness(harnessId, registry, options) {
-  const target = await resolveHarnessTarget(harnessId);
-  return await target.listModels?.(registry, options) ?? [];
-}
-
-export { AI_PROVIDER_PRESETS, BUILTIN_HARNESS_CATALOG, PROVIDER_CREDENTIAL_ENV_PREFIX, PROVIDER_CREDENTIAL_ENV_SUFFIX, buildCredentialHeaders, catalogLayer, conventionalCredentialEnvName, createHarness, entryCredentialEnv, entryCredentialValue, expandPreset, getProviderPreset, harnessCapabilities, listHarnesses, listModelsForHarness, listProviderPresets, presetBaseUrl, probeProviderEntry, providerCredentialEnvName, registerBuiltinHarnesses, registryCredentialEnv, resolveEntryCredential, resolvePresetBaseUrl, resolveProbeUrl, supportsLiveToolUpdates, unresolvedProviderCredentials };
-//# sourceMappingURL=chunk-NSIOBKDX.js.map
-//# sourceMappingURL=chunk-NSIOBKDX.js.map
+export { AI_PROVIDER_PRESETS, buildCredentialHeaders, catalogLayer, expandPreset, getProviderPreset, listProviderPresets, presetBaseUrl, probeProviderEntry, resolvePresetBaseUrl, resolveProbeUrl };
+//# sourceMappingURL=chunk-6UP2EDFN.js.map
+//# sourceMappingURL=chunk-6UP2EDFN.js.map

package/dist/chunk-6UP2EDFN.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../bridge/src/provider-catalog.ts"],"names":[],"mappings":";;;AAsFA,IAAM,wBAAA,GAAmD,EAAE,mBAAA,EAAqB,YAAA,EAAa;AAE7F,IAAM,SAAA,GAAkC,EAAE,IAAA,EAAM,WAAA,EAAa,UAAU,cAAA,EAAe;AAEtF,IAAM,kBAAA,GAAqB,YAAA;AAYpB,IAAM,mBAAA,GAAwD;AAAA,EACnE,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,WAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,WAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,YAAA,EAAc,oBAAA;AAAA,IACd,OAAA,EAAS,wBAAA;AAAA,IACT,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,mBAAA,EAAoB;AAAA,IAC/D,WAAA,EAAa,SAAA;AAAA,IACb,UAAA,EAAY,YAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,uBAAA;AAAwB,GAC7C;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,QAAA;AAAA,IACP,OAAA,EAAS,kBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,YAAA,EAAc,iBAAA;AAAA,IACd,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,gBAAA,EAAiB;AAAA,IACpD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EACE;AAAA,GACJ;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,OAAA,EAAS,sBAAA;AAAA,IACT,QAAA,EAAU,kDAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,gBAAA,EAAiB;AAAA,IAC5D,WAAA,EAAa,EAAE,IAAA,EAAM,gBAAA,EAAkB,UAAU,cAAA,EAAe;AAAA,IAChE,UAAA,EAAY,gBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,MAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,gCAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,cAAA,EAAe;AAAA,IAClD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,UAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,kBAAA,EAAmB;AAAA,IACtD,UAAA,EAAY,SAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EACE;AAAA,GACJ;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,8BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,oBAAA,EAAqB;AAAA,IACxD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,SAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,iBAAA,EAAkB;AAAA,IACrD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,GAAA,EAAK;AAAA,IACH,EAAA,EAAI,KAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,qBAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,aAAA,EAAc;AAAA,IACjD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,4BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,kBAAA,EAAmB;AAAA,IACtD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,SAAA,EAAW;AAAA,IACT,EAAA,EAAI,WAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,uCAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,mBAAA,EAAoB;AAAA,IACvD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,aAAA;AAAA,IACP,OAAA,EAAS,yBAAA;AAAA,IACT,SAAA,EAAW,SAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,OAAA,EAAQ;AAAA,IAC5B,eAAA,EAAiB,CAAC,QAAQ,CAAA;AAAA,IAC1B,KAAA,EAAO;AAAA,GACT;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,kBAAA;AAAA,IACP,OAAA,EAAS,eAAA;AAAA,IACT,SAAA,EAAW,QAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,YAAA,EAAa;AAAA,IACjC,MAAA,EAAQ,EAAE,SAAA,EAAW,QAAA,EAAS;AAAA,IAC9B,eAAA,EAAiB,CAAC,SAAA,EAAW,UAAU,CAAA;AAAA,IACvC,UAAA,EAAY;AAAA,GACd;AAAA,EACA,cAAA,EAAgB;AAAA,IACd,EAAA,EAAI,cAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,cAAA;AAAA,IACP,OAAA,EAAS,wBAAA;AAAA,IACT,SAAA,EAAW,cAAA;AAAA,IACX,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,sBAAA,EAAuB;AAAA,IAClE,WAAA,EAAa,EAAE,IAAA,EAAM,SAAA,EAAW,UAAU,cAAA,EAAe;AAAA,IACzD,eAAA,EAAiB,CAAC,UAAA,EAAY,YAAA,EAAc,aAAa,CAAA;AAAA,IACzD,UAAA,EAAY,SAAA;AAAA,IACZ,KAAA,EACE;AAAA,GACJ;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,6BAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,SAAA,EAAW,SAAA;AAAA,IACX,OAAA,EAAS,wBAAA;AAAA,IACT,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,2BAAA,EAA4B;AAAA,IACvE,WAAA,EAAa,SAAA;AAAA,IACb,eAAA,EAAiB,CAAC,UAAU,CAAA;AAAA,IAC5B,UAAA,EAAY;AAAA,GACd;AAAA,EACA,MAAA,EAAQ;AAAA,IACN,EAAA,EAAI,QAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,gBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,mBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA;AAAqB,GAC1C;AAAA,EACA,IAAA,EAAM;AAAA,IACJ,EAAA,EAAI,MAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,oBAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,MAAA,EAAO;AAAA,IAC3B,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EAAO;AAAA,GACT;AAAA,EACA,OAAA,EAAS;AAAA,IACP,EAAA,EAAI,SAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,eAAA;AAAA,IACP,OAAA,EAAS,oBAAA;AAAA,IACT,QAAA,EAAU,uBAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,QAAA,EAAU,KAAK,iBAAA,EAAkB;AAAA,IACrD,UAAA,EAAY,kBAAA;AAAA,IACZ,SAAA,EAAW,EAAE,IAAA,EAAM,oBAAA,EAAqB;AAAA,IACxC,KAAA,EAAO;AAAA,GACT;AAAA,EACA,QAAA,EAAU;AAAA,IACR,EAAA,EAAI,UAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,UAAA;AAAA,IACP,QAAA,EAAU,0BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,kBAAA,EAAmB;AAAA,IAC9D,WAAA,EAAa,EAAE,IAAA,EAAM,eAAA,EAAiB,UAAU,oBAAA,EAAqB;AAAA,IACrE,MAAA,EAAQ,EAAE,KAAA,EAAO,QAAA,EAAU,UAAU,IAAA,EAAK;AAAA,IAC1C,UAAA,EAAY;AAAA,GACd;AAAA,EACA,UAAA,EAAY;AAAA,IACV,EAAA,EAAI,YAAA;AAAA,IACJ,IAAA,EAAM,KAAA;AAAA,IACN,KAAA,EAAO,YAAA;AAAA,IACP,QAAA,EAAU,2BAAA;AAAA,IACV,UAAA,EAAY,EAAE,IAAA,EAAM,gBAAA,EAAkB,KAAK,oBAAA,EAAqB;AAAA,IAChE,WAAA,EAAa,EAAE,IAAA,EAAM,YAAA,EAAc,UAAU,cAAA,EAAe;AAAA,IAC5D,MAAA,EAAQ,EAAE,QAAA,EAAU,sBAAA,EAAwB,eAAe,eAAA,EAAgB;AAAA,IAC3E,UAAA,EAAY;AAAA;AAEhB;AAGO,SAAS,mBAAA,GAA0C;AACxD,EAAA,OAAO,MAAA,CAAO,OAAO,mBAAmB,CAAA;AAC1C;AAGO,SAAS,kBAAkB,EAAA,EAA0C;AAC1E,EAAA,OAAO,oBAAoB,EAAE,CAAA;AAC/B;AAQO,SAAS,cAAc,MAAA,EAA8C;AAC1E,EAAA,IAAI,MAAA,CAAO,QAAA,EAAU,OAAO,MAAA,CAAO,QAAA;AACnC,EAAA,IAAI,CAAC,MAAA,CAAO,SAAA,IAAa,MAAA,CAAO,SAAA,KAAc,UAAU,OAAO,MAAA;AAC/D,EAAA,OAAO,8BAAA,CAA+B,OAAO,SAAS,CAAA;AACxD;AAcO,SAAS,oBAAA,CACd,MAAA,EACA,OAAA,GAA0E,EAAC,EACvD;AACpB,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,EAAS,IAAA,EAAK;AACvC,EAAA,IAAI,UAAU,OAAO,QAAA;AACrB,EAAA,MAAM,OAAA,GAAU,OAAO,YAAA,GAAe,OAAA,CAAQ,MAAM,MAAA,CAAO,YAAY,CAAA,EAAG,IAAA,EAAK,GAAI,MAAA;AACnF,EAAA,OAAO,WAAW,MAAA,CAAO,QAAA;AAC3B;AAqBO,SAAS,YAAA,CACd,MAAA,EACA,OAAA,GAA+B,EAAC,EACf;AACjB,EAAA,MAAM,GAAA,GACJ,OAAA,CAAQ,aAAA,KAAkB,MAAA,CAAO,UAAA,CAAW,MAAM,CAAA,IAAA,EAAO,MAAA,CAAO,UAAA,CAAW,GAAG,CAAA,CAAA,GAAK,MAAA,CAAA;AACrF,EAAA,MAAM,UAAA,GAAa,GAAA,GAAM,EAAE,IAAA,EAAM,MAAA,CAAO,UAAA,CAAW,IAAA,EAAM,GAAA,EAAI,GAAI,EAAE,IAAA,EAAM,MAAA,CAAO,WAAW,IAAA,EAAK;AAChG,EAAA,MAAM,QAAA,GAAW,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,QAAA;AAC3C,EAAA,MAAM,SAAS,EAAE,GAAG,OAAO,MAAA,EAAQ,GAAG,QAAQ,MAAA,EAAO;AAErD,EAAA,IAAI,MAAA,CAAO,IAAA,KAAS,KAAA,IAAS,MAAA,CAAO,SAAS,KAAA,EAAO;AAClD,IAAA,OAAO;AAAA,MACL,MAAM,MAAA,CAAO,IAAA;AAAA,MACb,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,MAAA,CAAO,KAAA;AAAA,MAC/B,QAAQ,MAAA,CAAO,EAAA;AAAA,MACf,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,MAC/B,GAAI,MAAA,CAAO,OAAA,GAAU,EAAE,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,OAAA,EAAQ,EAAE,GAAI,EAAC;AAAA,MAC3D,UAAA;AAAA,MACA,GAAI,MAAA,CAAO,IAAA,CAAK,MAAM,CAAA,CAAE,SAAS,CAAA,GAAI,EAAE,MAAA,EAAwC,GAAI;AAAC,KACtF;AAAA,EACF;AAEA,EAAA,MAAM,SAAA,GAAY,OAAO,SAAA,IAAa,QAAA;AACtC,EAAA,MAAM,KAAA,GAA4B;AAAA,IAChC,IAAA,EAAM,MAAA,CAAO,IAAA,KAAS,OAAA,GAAU,OAAA,GAAU,KAAA;AAAA,IAC1C,KAAA,EAAO,OAAA,CAAQ,KAAA,IAAS,MAAA,CAAO,KAAA;AAAA,IAC/B,QAAQ,MAAA,CAAO,EAAA;AAAA,IACf,GAAK,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,OAAA,GAAW,EAAE,OAAA,EAAS,OAAA,CAAQ,OAAA,IAAW,MAAA,CAAO,OAAA,EAAQ,GAAI,EAAC;AAAA,IAC5F,GAAI,QAAA,GAAW,EAAE,QAAA,KAAa,EAAC;AAAA,IAC/B,GAAI,MAAA,CAAO,OAAA,GAAU,EAAE,OAAA,EAAS,EAAE,GAAG,MAAA,CAAO,OAAA,EAAQ,EAAE,GAAI,EAAC;AAAA,IAC3D,UAAA;AAAA,IACA,GAAI,MAAA,CAAO,SAAA,GAAY,EAAE,SAAA,EAAW,EAAE,GAAG,MAAA,CAAO,SAAA,EAAU,EAAE,GAAI;AAAC,GACnE;AAEA,EAAA,IAAI,cAAc,QAAA,EAAU;AAC1B,IAAA,MAAA,CAAO,MAAA,CAAO,KAAA,EAAO,EAAE,SAAA,EAAW,QAAQ,CAAA;AAC1C,IAAA,IAAI,SAAA,KAAc,cAAA,IAAkB,MAAA,CAAO,WAAA,EAAa;AACtD,MAAA,KAAA,CAAM,YAAA,GAAe,EAAE,aAAA,EAAe,MAAA,CAAO,WAAA,EAAY;AAAA,IAC3D;AAAA,EACF;AACA,EAAA,OAAO,KAAA;AACT;AAcO,SAAS,aAAa,SAAA,EAA6D;AACxF,EAAA,MAAM,WAA+B,EAAC;AACtC,EAAA,KAAA,MAAW,CAAC,EAAA,EAAI,KAAK,KAAK,MAAA,CAAO,OAAA,CAAQ,SAAS,CAAA,EAAG;AACnD,IAAA,IAAI,CAAC,MAAM,MAAA,EAAQ;AACnB,IAAA,MAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA;AAC/C,IAAA,IAAI,CAAC,MAAA,EAAQ;AACb,IAAA,QAAA,CAAS,EAAE,CAAA,GAAI,YAAA,CAAa,MAAM,CAAA;AAAA,EACpC;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,SAAA,EAAW,QAAA,EAAS;AACjD;AAQA,SAAS,eAAA,CAAgB,MAAc,IAAA,EAAsB;AAC3D,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACvC,EAAA,MAAM,WAAW,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,OAAO,OAAO,CAAA;AAC/C,EAAA,MAAM,IAAA,GAAO,SAAS,CAAC,CAAA;AACvB,EAAA,IAAI,IAAA,IAAQ,OAAA,CAAQ,WAAA,EAAY,CAAE,QAAA,CAAS,IAAI,IAAA,CAAK,WAAA,EAAa,CAAA,CAAE,CAAA,EAAG;AACpE,IAAA,OAAO,CAAA,EAAG,OAAO,CAAA,CAAA,EAAI,QAAA,CAAS,MAAM,CAAC,CAAA,CAAE,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA;AAAA,EAClD;AACA,EAAA,OAAO,CAAA,EAAG,OAAO,CAAA,EAAG,IAAI,CAAA,CAAA;AAC1B;AAUO,SAAS,gBAAgB,KAAA,EAA4C;AAC1E,EAAA,MAAM,IAAA,GAAO,oBAAoB,KAAK,CAAA;AACtC,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,MAAM,IAAA,GAAQ,KAAA,CAA6B,SAAA,EAAW,IAAA,IAAQ,MAAA,EAAQ,UAAA;AACtE,EAAA,IAAI,CAAC,MAAM,OAAO,MAAA;AAClB,EAAA,MAAM,GAAA,GAAM,eAAA,CAAgB,IAAA,EAAM,IAAI,CAAA;AACtC,EAAA,MAAM,QAAS,KAAA,CAA6B,YAAA;AAC5C,EAAA,IAAI,CAAC,SAAS,MAAA,CAAO,IAAA,CAAK,KAAK,CAAA,CAAE,MAAA,KAAW,GAAG,OAAO,GAAA;AACtD,EAAA,MAAM,MAAA,GAAS,IAAI,eAAA,CAAgB,KAAK,EAAE,QAAA,EAAS;AACnD,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,EAAG,MAAM,CAAA,CAAA;AACxD;AAWO,SAAS,sBAAA,CACd,OACA,MAAA,EACwB;AACxB,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,UAAA,EAAY,IAAA,IAAQ,MAAA;AACvC,EAAA,IAAI,CAAC,UAAU,IAAA,KAAS,MAAA,IAAU,SAAS,OAAA,IAAW,IAAA,KAAS,YAAA,EAAc,OAAO,EAAC;AAErF,EAAA,MAAM,SAAS,KAAA,CAAM,MAAA,GAAS,mBAAA,CAAoB,KAAA,CAAM,MAAM,CAAA,GAAI,MAAA;AAClE,EAAA,IAAI,QAAQ,WAAA,EAAa;AACvB,IAAA,OAAO;AAAA,MACL,CAAC,MAAA,CAAO,WAAA,CAAY,IAAI,GAAG,OAAO,WAAA,CAAY,QAAA,CAAS,OAAA,CAAQ,cAAA,EAAgB,MAAM;AAAA,KACvF;AAAA,EACF;AACA,EAAA,IAAI,SAAS,gBAAA,EAAkB;AAC7B,IAAA,MAAM,UAAW,KAAA,CAA6B,OAAA;AAC9C,IAAA,IAAI,OAAA,KAAY,sBAAA,EAAwB,OAAO,EAAE,kBAAkB,MAAA,EAAO;AAC1E,IAAA,IAAI,OAAA,KAAY,wBAAA,EAA0B,OAAO,EAAE,WAAW,MAAA,EAAO;AACrE,IAAA,OAAO,EAAE,aAAa,MAAA,EAAO;AAAA,EAC/B;AACA,EAAA,OAAO,EAAE,aAAA,EAAe,CAAA,OAAA,EAAU,MAAM,CAAA,CAAA,EAAG;AAC7C;AA8BA,eAAsB,kBAAA,CACpB,KAAA,EACA,OAAA,GAAgC,EAAC,EACD;AAChC,EAAA,MAAM,GAAA,GAAM,gBAAgB,KAAK,CAAA;AACjC,EAAA,IAAI,CAAC,GAAA,EAAK;AACR,IAAA,MAAM,IAAA,GAAO,oBAAoB,KAAK,CAAA;AACtC,IAAA,OAAO;AAAA,MACL,EAAA,EAAI,KAAA;AAAA,MACJ,MAAA,EAAQ,KAAA;AAAA,MACR,MAAA,EAAQ,IAAA,GACJ,CAAA,uDAAA,EAA0D,IAAI,CAAA,CAAA,CAAA,GAC9D;AAAA,KACN;AAAA,EACF;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,GAAG,KAAA,CAAM,OAAA;AAAA,IACT,GAAG,sBAAA,CAAuB,KAAA,EAAO,OAAA,CAAQ,MAAM;AAAA,GACjD;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,OAAA,CAAQ,aAAa,GAAI,CAAA;AAC9E,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAW,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,MAAA,EAAQ,KAAA,EAAO,OAAA,EAAS,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACvF,IAAA,IAAI,SAAS,EAAA,EAAI;AACf,MAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,MAAA,EAAQ,IAAA,EAAM,KAAK,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAQ,oBAAA,EAAqB;AAAA,IAC9F;AACA,IAAA,MAAM,MAAA,GACJ,QAAA,CAAS,MAAA,KAAW,GAAA,IAAO,QAAA,CAAS,WAAW,GAAA,GAC3C,6CAAA,GACA,CAAA,uBAAA,EAA0B,QAAA,CAAS,MAAM,CAAA,CAAA;AAC/C,IAAA,OAAO,EAAE,IAAI,KAAA,EAAO,MAAA,EAAQ,MAAM,GAAA,EAAK,MAAA,EAAQ,QAAA,CAAS,MAAA,EAAQ,MAAA,EAAO;AAAA,EACzE,SAAS,GAAA,EAAK;AACZ,IAAA,MAAM,UAAU,GAAA,YAAe,KAAA,GAAQ,GAAA,CAAI,OAAA,GAAU,OAAO,GAAG,CAAA;AAC/D,IAAA,MAAM,MAAA,GACJ,GAAA,YAAe,KAAA,IAAS,GAAA,CAAI,IAAA,KAAS,eACjC,CAAA,wBAAA,EAA2B,OAAA,CAAQ,SAAA,IAAa,GAAI,CAAA,EAAA,CAAA,GACpD,OAAA;AACN,IAAA,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,MAAA,EAAQ,IAAA,EAAM,KAAK,MAAA,EAAO;AAAA,EAChD,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF","file":"chunk-6UP2EDFN.js","sourcesContent":["/**\n * The AI provider catalog — the preset layer of the provider registry (§1.5,\n * layer 5).\n *\n * A preset is the three-or-four literals an endpoint needs beyond a credential:\n * its wire `surface`, its `base_url` (or the transport that derives one), the\n * header the credential rides in, and the path a read-only probe can GET. With\n * them, `skaile providers add --preset groq` needs nothing but an env var name.\n *\n * This replaced `provider-endpoints.ts` `PROVIDER_ENDPOINTS`: every endpoint\n * that table knew is present here, with the surface/transport/credential facts\n * it could not express.\n *\n * The record types come from `@skaile/workspaces/core/provider-registry` — the\n * schema has exactly one home.\n *\n * @see PROVIDER-CONFIG-PLAN.md §1.2, §1.3, §2.5\n */\n\nimport {\n  AI_PROVIDER_BASE_URL_TEMPLATES,\n  type AIProviderCredentialKind,\n  type AIProviderDiscovery,\n  type AIProviderEntry,\n  type AIProviderKind,\n  type AIProviderLlmEntry,\n  type AIProviderRegistry,\n  type AIProviderRegistryLayer,\n  type AIProviderRegistryPatch,\n  type AIProviderSurface,\n  type AIProviderTransport,\n  type AIProviderVoiceParams,\n  resolveEntryBaseUrl,\n} from \"@skaile/workspaces/core/provider-registry\";\n\n/**\n * Where the credential goes on the wire. `{credential}` is replaced with the\n * resolved secret. Needed because `credential.kind` alone is ambiguous:\n * `api_key_header` is `x-api-key` for Anthropic, `x-goog-api-key` for Gemini,\n * `api-key` for Azure OpenAI and `Authorization: Token …` for Deepgram.\n */\nexport interface AIProviderAuthHeader {\n  name: string;\n  template: string;\n}\n\n/** A catalog preset — the fields an entry inherits by naming it. */\nexport interface AIProviderPreset {\n  /** Preset id; also the default entry id `skaile providers add` writes. */\n  id: string;\n  kind: AIProviderKind;\n  label: string;\n  /** `llm`/`embed` only. */\n  surface?: AIProviderSurface;\n  /** `llm`/`embed` only; omitted means `direct`. */\n  transport?: AIProviderTransport;\n  /** Literal endpoint. Absent when the transport derives one from `params`. */\n  base_url?: string;\n  /**\n   * Env var the vendor's own SDK reads as a base-URL override, when one\n   * exists. Consulted by the callers that still address an endpoint by preset\n   * id — model discovery, key validation, and `skaile migrate providers` — so\n   * a shell already pointed at a gateway keeps pointing there.\n   */\n  base_url_env?: string;\n  /** Static non-secret headers, e.g. Anthropic's `anthropic-version`. */\n  headers?: Record<string, string>;\n  /** Credential shape plus the conventional env var holding the secret. */\n  credential: { kind: AIProviderCredentialKind; env?: string };\n  /** Header the credential rides in; defaults per surface when omitted. */\n  auth_header?: AIProviderAuthHeader;\n  /** Default routing/voice parameters. */\n  params?: Record<string, string>;\n  /** `params` keys the operator must supply — the preset cannot know them. */\n  required_params?: string[];\n  /**\n   * Read-only path a health probe GETs, relative to `base_url`: the models\n   * list for LLM surfaces, an equivalent authenticated read for voice.\n   * Absent when the endpoint has none (Bedrock's runtime host).\n   */\n  probe_path?: string;\n  discovery?: AIProviderDiscovery;\n  /** Anything the operator has to know that the fields do not say. */\n  notes?: string;\n}\n\nconst ANTHROPIC_VERSION_HEADER: Record<string, string> = { \"anthropic-version\": \"2023-06-01\" };\n\nconst X_API_KEY: AIProviderAuthHeader = { name: \"x-api-key\", template: \"{credential}\" };\n\nconst OPENAI_MODELS_PATH = \"/v1/models\";\n\n/**\n * Every preset the runtime ships.\n *\n * Insertion order is display order in `skaile providers list`: first-party\n * clouds, then OpenAI-compatible vendors, then the transports that need\n * routing parameters, then local runtimes and gateways, then voice.\n *\n * Sources: `platform/_devlog/reports/2026-09-20-inference-provider-market-survey.md`\n * (36 endpoints, base URLs and auth headers verified there).\n */\nexport const AI_PROVIDER_PRESETS: Record<string, AIProviderPreset> = {\n  anthropic: {\n    id: \"anthropic\",\n    kind: \"llm\",\n    label: \"Anthropic\",\n    surface: \"anthropic-messages\",\n    base_url: \"https://api.anthropic.com\",\n    base_url_env: \"ANTHROPIC_BASE_URL\",\n    headers: ANTHROPIC_VERSION_HEADER,\n    credential: { kind: \"api_key_header\", env: \"ANTHROPIC_API_KEY\" },\n    auth_header: X_API_KEY,\n    probe_path: \"/v1/models\",\n    discovery: { type: \"anthropic-models-list\" },\n  },\n  openai: {\n    id: \"openai\",\n    kind: \"llm\",\n    label: \"OpenAI\",\n    surface: \"openai-responses\",\n    base_url: \"https://api.openai.com/v1\",\n    base_url_env: \"OPENAI_BASE_URL\",\n    credential: { kind: \"bearer\", env: \"OPENAI_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes:\n      \"Responses is OpenAI's current API; set surface openai-completions for chat-only clients.\",\n  },\n  google: {\n    id: \"google\",\n    kind: \"llm\",\n    label: \"Google Gemini API\",\n    surface: \"google-generative-ai\",\n    base_url: \"https://generativelanguage.googleapis.com/v1beta\",\n    credential: { kind: \"api_key_header\", env: \"GEMINI_API_KEY\" },\n    auth_header: { name: \"x-goog-api-key\", template: \"{credential}\" },\n    probe_path: \"/v1beta/models\",\n    discovery: { type: \"google-models-list\" },\n  },\n  groq: {\n    id: \"groq\",\n    kind: \"llm\",\n    label: \"Groq\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.groq.com/openai/v1\",\n    credential: { kind: \"bearer\", env: \"GROQ_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  deepseek: {\n    id: \"deepseek\",\n    kind: \"llm\",\n    label: \"DeepSeek\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.deepseek.com\",\n    credential: { kind: \"bearer\", env: \"DEEPSEEK_API_KEY\" },\n    probe_path: \"/models\",\n    discovery: { type: \"openai-models-list\" },\n    notes:\n      \"Anthropic-shaped clients use https://api.deepseek.com/anthropic with surface anthropic-messages.\",\n  },\n  openrouter: {\n    id: \"openrouter\",\n    kind: \"llm\",\n    label: \"OpenRouter\",\n    surface: \"openai-completions\",\n    base_url: \"https://openrouter.ai/api/v1\",\n    credential: { kind: \"bearer\", env: \"OPENROUTER_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  mistral: {\n    id: \"mistral\",\n    kind: \"llm\",\n    label: \"Mistral\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.mistral.ai/v1\",\n    credential: { kind: \"bearer\", env: \"MISTRAL_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  xai: {\n    id: \"xai\",\n    kind: \"llm\",\n    label: \"xAI (Grok)\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.x.ai/v1\",\n    credential: { kind: \"bearer\", env: \"XAI_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  together: {\n    id: \"together\",\n    kind: \"llm\",\n    label: \"Together AI\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.together.ai/v1\",\n    credential: { kind: \"bearer\", env: \"TOGETHER_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  fireworks: {\n    id: \"fireworks\",\n    kind: \"llm\",\n    label: \"Fireworks AI\",\n    surface: \"openai-completions\",\n    base_url: \"https://api.fireworks.ai/inference/v1\",\n    credential: { kind: \"bearer\", env: \"FIREWORKS_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  bedrock: {\n    id: \"bedrock\",\n    kind: \"llm\",\n    label: \"AWS Bedrock\",\n    surface: \"bedrock-converse-stream\",\n    transport: \"bedrock\",\n    credential: { kind: \"sigv4\" },\n    required_params: [\"region\"],\n    notes: \"Credentials come from the AWS default chain; the runtime host serves no models list.\",\n  },\n  vertex: {\n    id: \"vertex\",\n    kind: \"llm\",\n    label: \"Google Vertex AI\",\n    surface: \"google-vertex\",\n    transport: \"vertex\",\n    credential: { kind: \"google_adc\" },\n    params: { publisher: \"google\" },\n    required_params: [\"project\", \"location\"],\n    probe_path: \"/models\",\n  },\n  \"azure-openai\": {\n    id: \"azure-openai\",\n    kind: \"llm\",\n    label: \"Azure OpenAI\",\n    surface: \"azure-openai-responses\",\n    transport: \"azure-openai\",\n    credential: { kind: \"api_key_header\", env: \"AZURE_OPENAI_API_KEY\" },\n    auth_header: { name: \"api-key\", template: \"{credential}\" },\n    required_params: [\"resource\", \"deployment\", \"api_version\"],\n    probe_path: \"/models\",\n    notes:\n      \"api_version is mirrored into query_params['api-version']; switch credential.kind to azure_entra for Entra tokens.\",\n  },\n  foundry: {\n    id: \"foundry\",\n    kind: \"llm\",\n    label: \"Claude on Microsoft Foundry\",\n    surface: \"anthropic-messages\",\n    transport: \"foundry\",\n    headers: ANTHROPIC_VERSION_HEADER,\n    credential: { kind: \"api_key_header\", env: \"ANTHROPIC_FOUNDRY_API_KEY\" },\n    auth_header: X_API_KEY,\n    required_params: [\"resource\"],\n    probe_path: \"/v1/models\",\n  },\n  ollama: {\n    id: \"ollama\",\n    kind: \"llm\",\n    label: \"Ollama (local)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:11434/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  lmstudio: {\n    id: \"lmstudio\",\n    kind: \"llm\",\n    label: \"LM Studio (local)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:1234/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n  },\n  vllm: {\n    id: \"vllm\",\n    kind: \"llm\",\n    label: \"vLLM (self-hosted)\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:8000/v1\",\n    credential: { kind: \"none\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes: \"A server started with --api-key expects credential.kind bearer and an env: ref.\",\n  },\n  litellm: {\n    id: \"litellm\",\n    kind: \"llm\",\n    label: \"LiteLLM proxy\",\n    surface: \"openai-completions\",\n    base_url: \"http://localhost:4000\",\n    credential: { kind: \"bearer\", env: \"LITELLM_API_KEY\" },\n    probe_path: OPENAI_MODELS_PATH,\n    discovery: { type: \"openai-models-list\" },\n    notes: \"The credential is the proxy's virtual key; upstream keys stay in the proxy config.\",\n  },\n  deepgram: {\n    id: \"deepgram\",\n    kind: \"stt\",\n    label: \"Deepgram\",\n    base_url: \"https://api.deepgram.com\",\n    credential: { kind: \"api_key_header\", env: \"DEEPGRAM_API_KEY\" },\n    auth_header: { name: \"Authorization\", template: \"Token {credential}\" },\n    params: { model: \"nova-3\", language: \"en\" },\n    probe_path: \"/v1/projects\",\n  },\n  elevenlabs: {\n    id: \"elevenlabs\",\n    kind: \"tts\",\n    label: \"ElevenLabs\",\n    base_url: \"https://api.elevenlabs.io\",\n    credential: { kind: \"api_key_header\", env: \"ELEVENLABS_API_KEY\" },\n    auth_header: { name: \"xi-api-key\", template: \"{credential}\" },\n    params: { voice_id: \"21m00Tcm4TlvDq8ikWAM\", output_format: \"mp3_44100_128\" },\n    probe_path: \"/v1/models\",\n  },\n};\n\n/** Presets in catalog order. */\nexport function listProviderPresets(): AIProviderPreset[] {\n  return Object.values(AI_PROVIDER_PRESETS);\n}\n\n/** Look up a preset by id. */\nexport function getProviderPreset(id: string): AIProviderPreset | undefined {\n  return AI_PROVIDER_PRESETS[id];\n}\n\n/**\n * The endpoint `skaile providers list` shows for a preset: the literal when\n * there is one, otherwise the transport's `base_url` template (§1.3) with its\n * `{param}` placeholders left in — they are exactly what the operator must\n * supply.\n */\nexport function presetBaseUrl(preset: AIProviderPreset): string | undefined {\n  if (preset.base_url) return preset.base_url;\n  if (!preset.transport || preset.transport === \"direct\") return undefined;\n  return AI_PROVIDER_BASE_URL_TEMPLATES[preset.transport];\n}\n\n/**\n * The endpoint a request to this preset should actually go to: an explicit\n * override first, then the vendor's own `*_BASE_URL` variable\n * ({@link AIProviderPreset.base_url_env}), then the preset literal.\n *\n * Behind a gateway the credential in play is the *gateway's*, not the\n * vendor's, so discovery and key validation have to follow dispatch — firing\n * either at the vendor's public API 401s and yields an empty catalog, which a\n * caller that reads \"empty\" as \"unknown\" then degrades into \"accept anything\".\n *\n * Pure: reads only the `env` record it is handed.\n */\nexport function resolvePresetBaseUrl(\n  preset: AIProviderPreset,\n  options: { baseUrl?: string; env?: Record<string, string | undefined> } = {},\n): string | undefined {\n  const explicit = options.baseUrl?.trim();\n  if (explicit) return explicit;\n  const fromEnv = preset.base_url_env ? options.env?.[preset.base_url_env]?.trim() : undefined;\n  return fromEnv || preset.base_url;\n}\n\n/** Overrides {@link expandPreset} accepts from `skaile providers add`. */\nexport interface ExpandPresetOptions {\n  /** `env:NAME` / `cmd:…` / `platform:…` / `keyring:…`. Never a literal. */\n  credentialRef?: string;\n  baseUrl?: string;\n  surface?: AIProviderSurface;\n  label?: string;\n  /** Transport routing parameters, or voice parameters for `stt`/`tts`. */\n  params?: Record<string, string>;\n}\n\n/**\n * Materialize a preset into a registry entry.\n *\n * The credential is always a reference: the preset's conventional `env:` var\n * unless the caller names another ref. No code path here can write a secret.\n * For `transport: azure-openai` the `api_version` parameter is mirrored into\n * `query_params['api-version']`, which is where the wire expects it (§1.3).\n */\nexport function expandPreset(\n  preset: AIProviderPreset,\n  options: ExpandPresetOptions = {},\n): AIProviderEntry {\n  const ref =\n    options.credentialRef ?? (preset.credential.env ? `env:${preset.credential.env}` : undefined);\n  const credential = ref ? { kind: preset.credential.kind, ref } : { kind: preset.credential.kind };\n  const base_url = options.baseUrl ?? preset.base_url;\n  const params = { ...preset.params, ...options.params };\n\n  if (preset.kind === \"stt\" || preset.kind === \"tts\") {\n    return {\n      kind: preset.kind,\n      label: options.label ?? preset.label,\n      preset: preset.id,\n      ...(base_url ? { base_url } : {}),\n      ...(preset.headers ? { headers: { ...preset.headers } } : {}),\n      credential,\n      ...(Object.keys(params).length > 0 ? { params: params as AIProviderVoiceParams } : {}),\n    };\n  }\n\n  const transport = preset.transport ?? \"direct\";\n  const entry: AIProviderLlmEntry = {\n    kind: preset.kind === \"embed\" ? \"embed\" : \"llm\",\n    label: options.label ?? preset.label,\n    preset: preset.id,\n    ...((options.surface ?? preset.surface) ? { surface: options.surface ?? preset.surface } : {}),\n    ...(base_url ? { base_url } : {}),\n    ...(preset.headers ? { headers: { ...preset.headers } } : {}),\n    credential,\n    ...(preset.discovery ? { discovery: { ...preset.discovery } } : {}),\n  } as AIProviderLlmEntry;\n\n  if (transport !== \"direct\") {\n    Object.assign(entry, { transport, params });\n    if (transport === \"azure-openai\" && params.api_version) {\n      entry.query_params = { \"api-version\": params.api_version };\n    }\n  }\n  return entry;\n}\n\n/**\n * Build the catalog merge layer for a set of configured entries (§1.5).\n *\n * Only the presets actually referenced by a `preset:` key are expanded, keyed\n * by the *entry* id — so `groq: {kind: llm, preset: groq}` deep-merges onto a\n * full Groq definition while an unreferenced preset stays out of the registry.\n *\n * Takes the **pre-gate** merge (`LoadedProviderRegistry.patches`), not the\n * gated registry: an entry that leaves `kind` or its transport `params` to the\n * preset is exactly the one the gate drops before this layer exists, and a\n * dropped entry names no preset to expand.\n */\nexport function catalogLayer(providers: AIProviderRegistryPatch): AIProviderRegistryLayer {\n  const expanded: AIProviderRegistry = {};\n  for (const [id, entry] of Object.entries(providers)) {\n    if (!entry.preset) continue;\n    const preset = AI_PROVIDER_PRESETS[entry.preset];\n    if (!preset) continue;\n    expanded[id] = expandPreset(preset);\n  }\n  return { layer: \"catalog\", providers: expanded };\n}\n\n/**\n * Join a base URL and a path without duplicating a shared leading segment:\n * `(\"https://gw/v1\", \"/v1/models\")` → `https://gw/v1/models`. Both spellings\n * are common in the wild, and a preset's path must work against a gateway base\n * the operator typed either way.\n */\nfunction joinBaseAndPath(base: string, path: string): string {\n  const trimmed = base.replace(/\\/+$/, \"\");\n  const segments = path.split(\"/\").filter(Boolean);\n  const lead = segments[0];\n  if (lead && trimmed.toLowerCase().endsWith(`/${lead.toLowerCase()}`)) {\n    return `${trimmed}/${segments.slice(1).join(\"/\")}`;\n  }\n  return `${trimmed}${path}`;\n}\n\n/**\n * The read-only URL a health probe or model discovery can GET for an entry —\n * the models list on LLM surfaces, the equivalent authenticated read on voice\n * ones. `undefined` when the entry has no endpoint yet (missing transport\n * parameters) or the surface serves no such path (Bedrock runtime).\n *\n * This is the catalog method that supersedes `resolveProviderModelsUrl`.\n */\nexport function resolveProbeUrl(entry: AIProviderEntry): string | undefined {\n  const base = resolveEntryBaseUrl(entry);\n  if (!base) return undefined;\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  const path = (entry as AIProviderLlmEntry).discovery?.path ?? preset?.probe_path;\n  if (!path) return undefined;\n  const url = joinBaseAndPath(base, path);\n  const query = (entry as AIProviderLlmEntry).query_params;\n  if (!query || Object.keys(query).length === 0) return url;\n  const search = new URLSearchParams(query).toString();\n  return `${url}${url.includes(\"?\") ? \"&\" : \"?\"}${search}`;\n}\n\n/**\n * The header(s) that present a credential on the wire for an entry.\n *\n * `credential.kind` alone does not determine the header — `api_key_header` is\n * `x-api-key` at Anthropic, `x-goog-api-key` at Google and `api-key` at Azure —\n * so the preset's `auth_header` wins, then a per-surface default.\n * Returns `{}` when the credential is signed elsewhere (`sigv4`, `google_adc`)\n * or absent.\n */\nexport function buildCredentialHeaders(\n  entry: AIProviderEntry,\n  secret: string | undefined,\n): Record<string, string> {\n  const kind = entry.credential?.kind ?? \"none\";\n  if (!secret || kind === \"none\" || kind === \"sigv4\" || kind === \"google_adc\") return {};\n\n  const preset = entry.preset ? AI_PROVIDER_PRESETS[entry.preset] : undefined;\n  if (preset?.auth_header) {\n    return {\n      [preset.auth_header.name]: preset.auth_header.template.replace(\"{credential}\", secret),\n    };\n  }\n  if (kind === \"api_key_header\") {\n    const surface = (entry as AIProviderLlmEntry).surface;\n    if (surface === \"google-generative-ai\") return { \"x-goog-api-key\": secret };\n    if (surface === \"azure-openai-responses\") return { \"api-key\": secret };\n    return { \"x-api-key\": secret };\n  }\n  return { Authorization: `Bearer ${secret}` };\n}\n\n/** Outcome of {@link probeProviderEntry}. Never carries the credential. */\nexport interface AIProviderProbeResult {\n  /** The endpoint answered 2xx. */\n  ok: boolean;\n  /** `false` when no request was made — nothing was verified either way. */\n  probed: boolean;\n  url?: string;\n  status?: number;\n  /** Human-readable outcome. Secret-free. */\n  detail: string;\n}\n\n/** Options for {@link probeProviderEntry}. */\nexport interface ProbeProviderOptions {\n  /** Resolved credential value, if the entry has one. Never logged. */\n  secret?: string;\n  /** Request deadline; default 8000 ms, matching `validateApiKey`. */\n  timeoutMs?: number;\n}\n\n/**\n * Send one minimal, read-only request to an entry's endpoint and report what\n * came back.\n *\n * Returns `probed: false` — rather than a false negative — when the entry has\n * no probe path (Bedrock's runtime host) or no resolvable endpoint yet: a\n * SigV4- or ADC-signed request is the transport SDK's job, not this function's.\n */\nexport async function probeProviderEntry(\n  entry: AIProviderEntry,\n  options: ProbeProviderOptions = {},\n): Promise<AIProviderProbeResult> {\n  const url = resolveProbeUrl(entry);\n  if (!url) {\n    const base = resolveEntryBaseUrl(entry);\n    return {\n      ok: false,\n      probed: false,\n      detail: base\n        ? `no read-only probe endpoint is defined for this entry (${base})`\n        : \"no base_url could be resolved — set base_url or the transport's params\",\n    };\n  }\n\n  const headers: Record<string, string> = {\n    ...entry.headers,\n    ...buildCredentialHeaders(entry, options.secret),\n  };\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), options.timeoutMs ?? 8000);\n  try {\n    const response = await fetch(url, { method: \"GET\", headers, signal: controller.signal });\n    if (response.ok) {\n      return { ok: true, probed: true, url, status: response.status, detail: \"endpoint reachable\" };\n    }\n    const detail =\n      response.status === 401 || response.status === 403\n        ? \"credential rejected (authentication failed)\"\n        : `endpoint returned HTTP ${response.status}`;\n    return { ok: false, probed: true, url, status: response.status, detail };\n  } catch (err) {\n    const message = err instanceof Error ? err.message : String(err);\n    const detail =\n      err instanceof Error && err.name === \"AbortError\"\n        ? `request timed out after ${options.timeoutMs ?? 8000}ms`\n        : message;\n    return { ok: false, probed: true, url, detail };\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n"]}

package/dist/{chunk-KUADKMNX.js → chunk-72TLO2AG.js}

@@ -1,5 +1,5 @@
-import { getAccessToken, loadStoreAuthConfig, hasStoredAuth } from './chunk-7EMS2GZO.js';
-import { globalSettingsPath, mapLegacyFields } from './chunk-UMLCKKIA.js';
+import { getAccessToken, loadStoreAuthConfig, hasStoredAuth } from './chunk-J7VEQORJ.js';
+import { globalSettingsPath, mapLegacyFields } from './chunk-TMJBEGS4.js';
 import { existsSync, readFileSync } from 'fs';
 
 function getStoreConfig() {
@@ -60,5 +60,5 @@ function isStoreAuthenticated() {
 }
 
 export { getStoreConfig, getStoreToken, isStoreAuthenticated, storeFetch };
-//# sourceMappingURL=chunk-KUADKMNX.js.map
-//# sourceMappingURL=chunk-KUADKMNX.js.map
+//# sourceMappingURL=chunk-72TLO2AG.js.map
+//# sourceMappingURL=chunk-72TLO2AG.js.map

package/dist/{chunk-KUADKMNX.js.map → chunk-72TLO2AG.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../cli/src/store-client.ts"],"names":[],"mappings":";;;;AAuBO,SAAS,cAAA,GAA8B;AAC5C,EAAA,MAAM,eAAe,kBAAA,EAAmB;AACxC,EAAA,IAAI,WAAgC,EAAC;AACrC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,gBAAgB,IAAA,CAAK,KAAA,CAAM,aAAa,YAAA,EAAc,OAAO,CAAC,CAAC,CAAA;AAAA,IAC5E,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,GAAW,EAAC;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,QAAA,CAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,gBAAA,IAAoB,0BAAA;AAAA,IAC1D,GAAA,EAAK;AAAA,GACP;AACF;AAOO,SAAS,cAAc,IAAA,EAAkC;AAC9D,EAAA,OAAO,cAAA,CAAe,mBAAA,EAAoB,EAAG,IAAI,CAAA;AACnD;AAaA,eAAsB,UAAA,CACpB,MAAA,EACA,IAAA,EACA,IAAA,EAOY;AACZ,EAAA,IAAI,GAAA,GAAM,CAAA,EAAG,MAAA,CAAO,GAAG,GAAG,IAAI,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,IAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,GAAA,IAAO,IAAI,EAAE,CAAA,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC,GACxB;AACA,EAAA,IAAI,OAAO,GAAA,EAAK;AACd,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,GAAG,CAAA,CAAA;AAAA,EAC9C;AAEA,EAAA,MAAM,SAAA,GAAyB;AAAA,IAC7B,MAAA,EAAQ,MAAM,MAAA,IAAU,KAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,IAAI,MAAM,IAAA,EAAM;AACd,IAAA,SAAA,CAAU,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,IAAA,EAAM,aAAa,IAAK,CAAA;AAC7E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,GAAG,SAAA,EAAW,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACxE,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAE,KAAA,EAAO,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,IAAG,CAAE,CAAA;AAI3E,MAAA,MAAM,CAAA,GAAI,IAAA;AACV,MAAA,MAAM,IAAI,MAAM,CAAA,CAAE,OAAA,IAAW,EAAE,KAAA,IAAS,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1E;AACA,IAAA,OAAO,IAAI,IAAA,EAAK;AAAA,EAClB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;AASO,SAAS,oBAAA,GAAgC;AAC9C,EAAA,OAAO,aAAA,CAAc,qBAAqB,CAAA;AAC5C","file":"chunk-KUADKMNX.js","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { globalSettingsPath, mapLegacyFields } from \"@skaile/workspaces/core\";\nimport { type AuthDeps, getAccessToken, hasStoredAuth, loadStoreAuthConfig } from \"./store-auth.ts\";\n\n/**\n * Connection configuration for the AI Asset Store API. `jwt` is normally left\n * null here and filled per-call by the caller from {@link getStoreToken} (the\n * device-flow session); it stays on the type for the `{ ...config, jwt }` spread.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport interface StoreConfig {\n  url: string;\n  jwt: string | null;\n}\n\n/**\n * Read the store API base URL (settings `storeUrl` → `SKAILE_STORE_URL` →\n * default). Auth is not read here — it lives in the device-flow session; see\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function getStoreConfig(): StoreConfig {\n  const settingsPath = globalSettingsPath();\n  let settings: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      settings = mapLegacyFields(JSON.parse(readFileSync(settingsPath, \"utf-8\")));\n    } catch {\n      settings = {};\n    }\n  }\n  return {\n    url: settings.storeUrl ?? process.env.SKAILE_STORE_URL ?? \"https://api.skaile.store\",\n    jwt: null,\n  };\n}\n\n/**\n * Return a valid store access token (Keycloak device-flow session, refreshed if\n * needed). Throws a \"run `skaile store login`\" error when there is no session.\n * This is the auth source for every `/api/v1/*` publisher call.\n */\nexport function getStoreToken(deps?: AuthDeps): Promise<string> {\n  return getAccessToken(loadStoreAuthConfig(), deps);\n}\n\n/**\n * Make an authenticated HTTP request to the store REST API.\n *\n * @param config - Store connection config (URL + auth token).\n * @param path - API path (e.g. `/api/assets`).\n * @param opts - Optional method, body, query params, extra headers, and\n *   `timeoutMs` (default 1500). Publisher calls pass a longer timeout because\n *   they trigger server-side clone/sync work.\n * @returns Parsed JSON response body.\n * @docLink cli/dev-guide#store-client\n */\nexport async function storeFetch<T = any>(\n  config: StoreConfig,\n  path: string,\n  opts?: {\n    method?: string;\n    body?: unknown;\n    params?: Record<string, string>;\n    headers?: Record<string, string>;\n    timeoutMs?: number;\n  },\n): Promise<T> {\n  let url = `${config.url}${path}`;\n  if (opts?.params) {\n    const sp = new URLSearchParams(opts.params);\n    url += `?${sp}`;\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    Accept: \"application/json\",\n    ...(opts?.headers ?? {}),\n  };\n  if (config.jwt) {\n    headers.Authorization = `Bearer ${config.jwt}`;\n  }\n\n  const fetchOpts: RequestInit = {\n    method: opts?.method ?? \"GET\",\n    headers,\n  };\n  if (opts?.body) {\n    fetchOpts.body = JSON.stringify(opts.body);\n  }\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), opts?.timeoutMs ?? 1_500);\n  try {\n    const res = await fetch(url, { ...fetchOpts, signal: controller.signal });\n    if (!res.ok) {\n      const body = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));\n      // Prefer the store's human-readable `message` (e.g. \"Namespace '@x' is\n      // reserved … Sign in with GitHub to claim it\") over the bare `error` code\n      // (`UNPROCESSABLE_CONTENT`) — the message is the actionable part.\n      const b = body as { message?: string; error?: string };\n      throw new Error(b.message ?? b.error ?? `Store API error: ${res.status}`);\n    }\n    return res.json() as Promise<T>;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Return `true` when a store session exists (a Keycloak device-flow token cached\n * at `~/.skaile/auth.json`). Validity/refresh is resolved on use via\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function isStoreAuthenticated(): boolean {\n  return hasStoredAuth(loadStoreAuthConfig());\n}\n"]}
+{"version":3,"sources":["../cli/src/store-client.ts"],"names":[],"mappings":";;;;AAuBO,SAAS,cAAA,GAA8B;AAC5C,EAAA,MAAM,eAAe,kBAAA,EAAmB;AACxC,EAAA,IAAI,WAAgC,EAAC;AACrC,EAAA,IAAI,UAAA,CAAW,YAAY,CAAA,EAAG;AAC5B,IAAA,IAAI;AACF,MAAA,QAAA,GAAW,gBAAgB,IAAA,CAAK,KAAA,CAAM,aAAa,YAAA,EAAc,OAAO,CAAC,CAAC,CAAA;AAAA,IAC5E,CAAA,CAAA,MAAQ;AACN,MAAA,QAAA,GAAW,EAAC;AAAA,IACd;AAAA,EACF;AACA,EAAA,OAAO;AAAA,IACL,GAAA,EAAK,QAAA,CAAS,QAAA,IAAY,OAAA,CAAQ,IAAI,gBAAA,IAAoB,0BAAA;AAAA,IAC1D,GAAA,EAAK;AAAA,GACP;AACF;AAOO,SAAS,cAAc,IAAA,EAAkC;AAC9D,EAAA,OAAO,cAAA,CAAe,mBAAA,EAAoB,EAAG,IAAI,CAAA;AACnD;AAaA,eAAsB,UAAA,CACpB,MAAA,EACA,IAAA,EACA,IAAA,EAOY;AACZ,EAAA,IAAI,GAAA,GAAM,CAAA,EAAG,MAAA,CAAO,GAAG,GAAG,IAAI,CAAA,CAAA;AAC9B,EAAA,IAAI,MAAM,MAAA,EAAQ;AAChB,IAAA,MAAM,EAAA,GAAK,IAAI,eAAA,CAAgB,IAAA,CAAK,MAAM,CAAA;AAC1C,IAAA,GAAA,IAAO,IAAI,EAAE,CAAA,CAAA;AAAA,EACf;AAEA,EAAA,MAAM,OAAA,GAAkC;AAAA,IACtC,cAAA,EAAgB,kBAAA;AAAA,IAChB,MAAA,EAAQ,kBAAA;AAAA,IACR,GAAI,IAAA,EAAM,OAAA,IAAW;AAAC,GACxB;AACA,EAAA,IAAI,OAAO,GAAA,EAAK;AACd,IAAA,OAAA,CAAQ,aAAA,GAAgB,CAAA,OAAA,EAAU,MAAA,CAAO,GAAG,CAAA,CAAA;AAAA,EAC9C;AAEA,EAAA,MAAM,SAAA,GAAyB;AAAA,IAC7B,MAAA,EAAQ,MAAM,MAAA,IAAU,KAAA;AAAA,IACxB;AAAA,GACF;AACA,EAAA,IAAI,MAAM,IAAA,EAAM;AACd,IAAA,SAAA,CAAU,IAAA,GAAO,IAAA,CAAK,SAAA,CAAU,IAAA,CAAK,IAAI,CAAA;AAAA,EAC3C;AAEA,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,OAAA,GAAU,WAAW,MAAM,UAAA,CAAW,OAAM,EAAG,IAAA,EAAM,aAAa,IAAK,CAAA;AAC7E,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,GAAA,EAAK,EAAE,GAAG,SAAA,EAAW,MAAA,EAAQ,UAAA,CAAW,MAAA,EAAQ,CAAA;AACxE,IAAA,IAAI,CAAC,IAAI,EAAA,EAAI;AACX,MAAA,MAAM,IAAA,GAAO,MAAM,GAAA,CAAI,IAAA,EAAK,CAAE,KAAA,CAAM,OAAO,EAAE,KAAA,EAAO,CAAA,KAAA,EAAQ,GAAA,CAAI,MAAM,IAAG,CAAE,CAAA;AAI3E,MAAA,MAAM,CAAA,GAAI,IAAA;AACV,MAAA,MAAM,IAAI,MAAM,CAAA,CAAE,OAAA,IAAW,EAAE,KAAA,IAAS,CAAA,iBAAA,EAAoB,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAAA,IAC1E;AACA,IAAA,OAAO,IAAI,IAAA,EAAK;AAAA,EAClB,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,OAAO,CAAA;AAAA,EACtB;AACF;AASO,SAAS,oBAAA,GAAgC;AAC9C,EAAA,OAAO,aAAA,CAAc,qBAAqB,CAAA;AAC5C","file":"chunk-72TLO2AG.js","sourcesContent":["import { existsSync, readFileSync } from \"node:fs\";\nimport { globalSettingsPath, mapLegacyFields } from \"@skaile/workspaces/core\";\nimport { type AuthDeps, getAccessToken, hasStoredAuth, loadStoreAuthConfig } from \"./store-auth.ts\";\n\n/**\n * Connection configuration for the AI Asset Store API. `jwt` is normally left\n * null here and filled per-call by the caller from {@link getStoreToken} (the\n * device-flow session); it stays on the type for the `{ ...config, jwt }` spread.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport interface StoreConfig {\n  url: string;\n  jwt: string | null;\n}\n\n/**\n * Read the store API base URL (settings `storeUrl` → `SKAILE_STORE_URL` →\n * default). Auth is not read here — it lives in the device-flow session; see\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function getStoreConfig(): StoreConfig {\n  const settingsPath = globalSettingsPath();\n  let settings: Record<string, any> = {};\n  if (existsSync(settingsPath)) {\n    try {\n      settings = mapLegacyFields(JSON.parse(readFileSync(settingsPath, \"utf-8\")));\n    } catch {\n      settings = {};\n    }\n  }\n  return {\n    url: settings.storeUrl ?? process.env.SKAILE_STORE_URL ?? \"https://api.skaile.store\",\n    jwt: null,\n  };\n}\n\n/**\n * Return a valid store access token (Keycloak device-flow session, refreshed if\n * needed). Throws a \"run `skaile store login`\" error when there is no session.\n * This is the auth source for every `/api/v1/*` publisher call.\n */\nexport function getStoreToken(deps?: AuthDeps): Promise<string> {\n  return getAccessToken(loadStoreAuthConfig(), deps);\n}\n\n/**\n * Make an authenticated HTTP request to the store REST API.\n *\n * @param config - Store connection config (URL + auth token).\n * @param path - API path (e.g. `/api/assets`).\n * @param opts - Optional method, body, query params, extra headers, and\n *   `timeoutMs` (default 1500). Publisher calls pass a longer timeout because\n *   they trigger server-side clone/sync work.\n * @returns Parsed JSON response body.\n * @docLink cli/dev-guide#store-client\n */\nexport async function storeFetch<T = any>(\n  config: StoreConfig,\n  path: string,\n  opts?: {\n    method?: string;\n    body?: unknown;\n    params?: Record<string, string>;\n    headers?: Record<string, string>;\n    timeoutMs?: number;\n  },\n): Promise<T> {\n  let url = `${config.url}${path}`;\n  if (opts?.params) {\n    const sp = new URLSearchParams(opts.params);\n    url += `?${sp}`;\n  }\n\n  const headers: Record<string, string> = {\n    \"Content-Type\": \"application/json\",\n    Accept: \"application/json\",\n    ...(opts?.headers ?? {}),\n  };\n  if (config.jwt) {\n    headers.Authorization = `Bearer ${config.jwt}`;\n  }\n\n  const fetchOpts: RequestInit = {\n    method: opts?.method ?? \"GET\",\n    headers,\n  };\n  if (opts?.body) {\n    fetchOpts.body = JSON.stringify(opts.body);\n  }\n\n  const controller = new AbortController();\n  const timeout = setTimeout(() => controller.abort(), opts?.timeoutMs ?? 1_500);\n  try {\n    const res = await fetch(url, { ...fetchOpts, signal: controller.signal });\n    if (!res.ok) {\n      const body = await res.json().catch(() => ({ error: `HTTP ${res.status}` }));\n      // Prefer the store's human-readable `message` (e.g. \"Namespace '@x' is\n      // reserved … Sign in with GitHub to claim it\") over the bare `error` code\n      // (`UNPROCESSABLE_CONTENT`) — the message is the actionable part.\n      const b = body as { message?: string; error?: string };\n      throw new Error(b.message ?? b.error ?? `Store API error: ${res.status}`);\n    }\n    return res.json() as Promise<T>;\n  } finally {\n    clearTimeout(timeout);\n  }\n}\n\n/**\n * Return `true` when a store session exists (a Keycloak device-flow token cached\n * at `~/.skaile/auth.json`). Validity/refresh is resolved on use via\n * {@link getStoreToken}.\n *\n * @docLink cli/dev-guide#store-client\n */\nexport function isStoreAuthenticated(): boolean {\n  return hasStoredAuth(loadStoreAuthConfig());\n}\n"]}

package/dist/{chunk-HPA3RP5E.js → chunk-AO57IFME.js}

@@ -1,6 +1,6 @@
 import { ReconfigureLedger, classifyGenericErrorMessage, RUNNER_AGENT_ENV_KEYS, stripRunnerPrivateEnv } from './chunk-5DE3DGVR.js';
 import { wrapAgentCommand, resolveAgentExec } from './chunk-7DN6JKP2.js';
-import { AgentHarness } from './chunk-E6UWI3TP.js';
+import { AgentHarness } from './chunk-PLLZSKOO.js';
 import { spawn } from 'child_process';
 import { createInterface } from 'readline';
 
@@ -450,5 +450,5 @@ function extractCost(json) {
 }
 
 export { SubprocessCliHarness, extractCost, extractText, extractTokens };
-//# sourceMappingURL=chunk-HPA3RP5E.js.map
-//# sourceMappingURL=chunk-HPA3RP5E.js.map
+//# sourceMappingURL=chunk-AO57IFME.js.map
+//# sourceMappingURL=chunk-AO57IFME.js.map