@spinabot/brigade 0.1.2 → 1.0.1

package/dist/infra/net/fetch-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-guard.js","sourceRoot":"","sources":["../../../src/infra/net/fetch-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,UAAU,CAAC;AAChD,OAAO,EAAE,QAAQ,IAAI,WAAW,EAAE,MAAM,UAAU,CAAC;AAEnD,OAAO,EAAE,uBAAuB,EAAE,MAAM,kCAAkC,CAAC;AAC3E,OAAO,EAAE,cAAc,EAAE,MAAM,iCAAiC,CAAC;AACjE,OAAO,EAAE,gCAAgC,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAEjF,6DAA6D;AAC7D,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAC,CAAC;AAEvC,0EAA0E;AAC1E,MAAM,OAAO,gBAAiB,SAAQ,KAAK;IACjC,GAAG,CAAS;IACZ,MAAM,CAAS;IACxB,YAAY,GAAW,EAAE,MAAc;QACtC,KAAK,CAAC,gCAAgC,GAAG,KAAK,MAAM,GAAG,CAAC,CAAC;QACzD,IAAI,CAAC,IAAI,GAAG,kBAAkB,CAAC;QAC/B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACtB,CAAC;CACD;AAED,4EAA4E;AAC5E,MAAM,OAAO,aAAc,SAAQ,KAAK;IAC9B,GAAG,CAAS;IACrB,YAAY,GAAW,EAAE,MAAc;QACtC,KAAK,CAAC,kBAAkB,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC;QAC3C,IAAI,CAAC,IAAI,GAAG,eAAe,CAAC;QAC5B,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;IAChB,CAAC;CACD;AAED;;;;GAIG;AACH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC;IACnC,WAAW;IACX,uBAAuB;IACvB,eAAe;IACf,cAAc;IACd,0BAA0B;IAC1B,yBAAyB;IACzB,oBAAoB;IACpB,iBAAiB;IACjB,eAAe;CACf,CAAC,CAAC;AAEH,8DAA8D;AAC9D,MAAM,2BAA2B,GAAG,CAAC,QAAQ,EAAE,WAAW,EAAE,YAAY,CAAC,CAAC;AAE1E;;;;;;GAMG;AACH,SAAS,mBAAmB,CAAC,IAAY;IACxC,0DAA0D;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,IAAI,CAAC;IACzF,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC9B,+DAA+D;IAC/D,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7F,gEAAgE;IAChE,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACvB,IAAI,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,qBAAqB,CAAC,IAAI,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;IAChD,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,EAAU;IAC/B,MAAM,KAAK,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;IAC/D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,EAAE,CAAC;QACvF,OAAO,cAAc,CAAC;IACvB,CAAC;IACD,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,GAAG,KAAyC,CAAC;IACzD,6BAA6B;IAC7B,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,uBAAuB,CAAC;IAC5C,+BAA+B;IAC/B,IAAI,CAAC,KAAK,EAAE;QAAE,OAAO,wBAAwB,CAAC;IAC9C,wBAAwB;IACxB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,mBAAmB,CAAC;IACjE,yBAAyB;IACzB,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,kBAAkB,CAAC;IACzC,+CAA+C;IAC/C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,0CAA0C,CAAC;IAC9E,kCAAkC;IAClC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE;QAAE,OAAO,6BAA6B,CAAC;IAC1E,mCAAmC;IACnC,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;QAAE,OAAO,8BAA8B,CAAC;IAClE,+BAA+B;IAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,4BAA4B,CAAC;IAC9D,0BAA0B;IAC1B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,yBAAyB,CAAC;IAC3D,yBAAyB;IACzB,IAAI,CAAC,IAAI,GAAG;QAAE,OAAO,wBAAwB,CAAC;IAC9C,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,SAAS,YAAY,CAAC,EAAU;IAC/B,kEAAkE;IAClE,6DAA6D;IAC7D,MAAM,MAAM,GAAG,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC;IACnC,iBAAiB;IACjB,IAAI,KAAK,KAAK,KAAK,IAAI,KAAK,KAAK,kBAAkB;QAAE,OAAO,eAAe,CAAC;IAC5E,mBAAmB;IACnB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,kBAAkB,CAAC;IAC9C,gCAAgC;IAChC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,qBAAqB,CAAC;IACnF,yBAAyB;IACzB,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9G,OAAO,6BAA6B,CAAC;IACtC,CAAC;IACD,gEAAgE;IAChE,2CAA2C;IAC3C,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9G,OAAO,yCAAyC,CAAC;IAClD,CAAC;IACD,4DAA4D;IAC5D,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,oBAAoB,CAAC,CAAC;IACjD,IAAI,MAAM,EAAE,CAAC;QACZ,MAAM,KAAK,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5C,IAAI,KAAK;YAAE,OAAO,sBAAsB,KAAK,EAAE,CAAC;IACjD,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACpD,MAAM,IAAI,GAAG,QAAQ,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,CAAC,IAAI;QAAE,OAAO,gBAAgB,CAAC;IACnC,IAAI,mBAAmB,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,uBAAuB,IAAI,GAAG,CAAC;IACzE,KAAK,MAAM,MAAM,IAAI,2BAA2B,EAAE,CAAC;QAClD,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;YAAE,OAAO,8BAA8B,MAAM,GAAG,CAAC;IAC3E,CAAC;IACD,wDAAwD;IACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IACvF,2EAA2E;IAC3E,yEAAyE;IACzE,4BAA4B;IAC5B,IAAI,mBAAmB,CAAC,QAAQ,CAAC;QAAE,OAAO,0CAA0C,CAAC;IACrF,IAAI,MAAM,CAAC,QAAQ,CAAC;QAAE,OAAO,YAAY,CAAC,QAAQ,CAAC,CAAC;IACpD,mDAAmD;IACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,QAAQ,CAAC;IACrD,IAAI,MAAM,CAAC,MAAM,CAAC;QAAE,OAAO,YAAY,CAAC,MAAM,CAAC,CAAC;IAChD,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,sBAAsB,CAAC;IACrF,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,MAAc;IACtD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,aAAa,CAAC;IACtB,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACjE,OAAO,uBAAuB,MAAM,CAAC,QAAQ,GAAG,CAAC;IAClD,CAAC;IACD,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzD,IAAI,UAAU;QAAE,OAAO,UAAU,CAAC;IAClC,sEAAsE;IACtE,iBAAiB;IACjB,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAC7C,uEAAuE;IACvE,sEAAsE;IACtE,gEAAgE;IAChE,+DAA+D;IAC/D,IAAI,CAAC;QACJ,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3E,KAAK,MAAM,CAAC,IAAI,SAAS,EAAE,CAAC;YAC3B,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;YAClF,IAAI,MAAM;gBAAE,OAAO,GAAG,MAAM,CAAC,QAAQ,gBAAgB,CAAC,CAAC,OAAO,KAAK,MAAM,EAAE,CAAC;QAC7E,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,+DAA+D;QAC/D,qEAAqE;QACrE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAmBD,gFAAgF;AAChF,MAAM,iBAAiB,GAAG,CAAC,eAAe,EAAE,QAAQ,EAAE,qBAAqB,CAAC,CAAC;AAE7E;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,MAAc,EACd,OAA4B,EAAE;IAE9B,MAAM,YAAY,GAAG,IAAI,CAAC,YAAY,IAAI,qBAAqB,CAAC;IAChE,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,IAAI,uBAAuB,GAAG,KAAK,CAAC;IACpE,MAAM,iBAAiB,GAAG,IAAI,eAAe,EAAE,CAAC;IAChD,MAAM,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,iBAAiB,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC;IAChG,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;IACvB,MAAM,MAAM,GAAG,YAAY,CAAC,CAAC,IAAI,CAAC,MAAM,EAAE,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;IAErE,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,UAAU,GAAG,MAAM,CAAC;IACxB,IAAI,aAAa,GAAG,CAAC,IAAI,CAAC,MAAM,IAAI,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;IACzD,IAAI,WAAW,GAAoC,IAAI,CAAC,IAAI,CAAC;IAC7D,IAAI,cAAc,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,IAAI,EAAE,CAAC,EAAE,CAAC;IAEjD,IAAI,CAAC;QACJ,KAAK,IAAI,GAAG,GAAG,CAAC,EAAE,GAAG,IAAI,YAAY,EAAE,GAAG,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,gBAAgB,CAAC,CAAC;YACvD,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YACxB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;YAEvB,MAAM,UAAU,GAAG,MAAM,kBAAkB,CAAC,UAAU,CAAC,CAAC;YACxD,IAAI,UAAU;gBAAE,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;YAEnE,2DAA2D;YAC3D,2DAA2D;YAC3D,4DAA4D;YAC5D,0DAA0D;YAC1D,yDAAyD;YACzD,EAAE;YACF,4DAA4D;YAC5D,6DAA6D;YAC7D,uDAAuD;YACvD,6BAA6B;YAC7B,IAAI,gBAAyD,CAAC;YAC9D,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC;YACtC,IAAI,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBACpC,IAAI,CAAC;oBACJ,MAAM,MAAM,GAAG,MAAM,gCAAgC,CAAC;wBACrD,QAAQ,EAAE,SAAS,CAAC,QAAQ;wBAC5B,eAAe,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,CACjC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,YAAY,CAAC,IAAI,CAAC;qBACvD,CAAC,CAAC;oBACH,IAAI,CAAC,MAAM,EAAE,CAAC;wBACb,MAAM,IAAI,gBAAgB,CAAC,UAAU,EAAE,oCAAoC,CAAC,CAAC;oBAC9E,CAAC;oBACD,gBAAgB,GAAG,MAAM,CAAC,UAAU,CAAC;gBACtC,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,IAAI,GAAG,YAAY,gBAAgB;wBAAE,MAAM,GAAG,CAAC;oBAC/C,gBAAgB,GAAG,SAAS,CAAC;gBAC9B,CAAC;YACF,CAAC;YAED,qEAAqE;YACrE,iEAAiE;YACjE,yCAAyC;YACzC,EAAE;YACF,6DAA6D;YAC7D,gEAAgE;YAChE,+DAA+D;YAC/D,8DAA8D;YAC9D,wDAAwD;YACxD,MAAM,OAAO,GAAG,GAAsB,EAAE;gBACvC,MAAM,IAAI,GAAgB;oBACzB,MAAM,EAAE,aAAa;oBACrB,OAAO,EAAE,cAAc;oBACvB,IAAI,EAAE,WAAW,IAAI,SAAS;oBAC9B,QAAQ,EAAE,QAAQ;oBAClB,MAAM;iBACN,CAAC;gBACF,IAAI,gBAAgB,EAAE,CAAC;oBACtB,2DAA2D;oBAC3D,0DAA0D;oBAC1D,wDAAwD;oBACxD,wDAAwD;oBACxD,2DAA2D;oBAC3D,kCAAkC;oBAClC,OAAO,WAAW,CAAC,UAAU,EAAE;wBAC9B,GAAG,IAAI;wBACP,UAAU,EAAE,gBAAgB;qBACF,CAAC,CAAC;gBAC9B,CAAC;gBACD,OAAO,KAAK,CAAC,UAAU,EAAE,IAAI,CAAC,CAAC;YAChC,CAAC,CAAC;YACF,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK;gBAC1B,CAAC,CAAC,MAAM,cAAc,CAAC,OAAO,EAAE,EAAE,GAAG,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,CAAC;gBAC1D,CAAC,CAAC,MAAM,OAAO,EAAE,CAAC;YAEnB,uDAAuD;YACvD,IAAI,QAAQ,CAAC,MAAM,GAAG,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAChF,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,UAAU,EAAE,aAAa,EAAE,KAAK,EAAE,CAAC;YACjE,CAAC;YACD,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAClD,IAAI,CAAC,QAAQ,EAAE,CAAC;gBACf,+DAA+D;gBAC/D,8DAA8D;gBAC9D,+CAA+C;gBAC/C,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,OAAO,QAAQ,CAAC,MAAM,0BAA0B,CAAC,CAAC;YACvF,CAAC;YAED,2DAA2D;YAC3D,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;gBACrB,IAAI,CAAC;oBACJ,OAAO,IAAI,GAAG,CAAC,QAAQ,EAAE,UAAU,CAAC,CAAC,QAAQ,EAAE,CAAC;gBACjD,CAAC;gBAAC,MAAM,CAAC;oBACR,OAAO,IAAI,CAAC;gBACb,CAAC;YACF,CAAC,CAAC,EAAE,CAAC;YACL,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,uBAAuB,QAAQ,EAAE,CAAC,CAAC;YAErF,IAAI,GAAG,KAAK,YAAY,EAAE,CAAC;gBAC1B,MAAM,IAAI,aAAa,CAAC,OAAO,EAAE,YAAY,YAAY,YAAY,CAAC,CAAC;YACxE,CAAC;YAED,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,MAAM,CAAC;YAC9C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC3C,MAAM,WAAW,GAAG,UAAU,KAAK,UAAU,CAAC;YAE9C,iEAAiE;YACjE,gEAAgE;YAChE,gEAAgE;YAChE,iEAAiE;YACjE,iEAAiE;YACjE,UAAU;YACV,IAAI,UAAU,GAAG,aAAa,CAAC;YAC/B,IAAI,QAAQ,GAAG,WAAW,CAAC;YAC3B,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;gBAC7B,UAAU,GAAG,KAAK,CAAC;gBACnB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,aAAa,KAAK,KAAK,IAAI,aAAa,KAAK,MAAM,EAAE,CAAC;gBACxH,UAAU,GAAG,KAAK,CAAC;gBACnB,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;iBAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,CAAC,IAAI,WAAW,EAAE,CAAC;gBAChF,QAAQ,GAAG,IAAI,CAAC;YACjB,CAAC;YAED,+DAA+D;YAC/D,+DAA+D;YAC/D,IAAI,WAAW,GAAG,cAAc,CAAC;YACjC,IAAI,WAAW,EAAE,CAAC;gBACjB,WAAW,GAAG,EAAE,CAAC;gBACjB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;oBACrD,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;wBAAE,WAAW,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;gBACtE,CAAC;YACF,CAAC;YAED,UAAU,GAAG,OAAO,CAAC;YACrB,aAAa,GAAG,UAAU,CAAC;YAC3B,WAAW,GAAG,QAAQ,CAAC;YACvB,cAAc,GAAG,WAAW,CAAC;QAC9B,CAAC;QACD,mDAAmD;QACnD,MAAM,IAAI,aAAa,CAAC,UAAU,EAAE,iCAAiC,CAAC,CAAC;IACxE,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,YAAY,CAAC,CAAC;IAC5B,CAAC;AACF,CAAC;AAED;;;GAGG;AACH,SAAS,YAAY,CAAC,OAA+C;IACpE,MAAM,IAAI,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAoB,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC,CAAC;IACtE,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC;IACtC,kEAAkE;IAClE,MAAM,KAAK,GAAI,WAAsE,CAAC,GAAG,CAAC;IAC1F,IAAI,OAAO,KAAK,KAAK,UAAU;QAAE,OAAO,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;IACtE,MAAM,GAAG,GAAG,IAAI,eAAe,EAAE,CAAC;IAClC,MAAM,OAAO,GAAG,CAAC,CAAW,EAAE,EAAE,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC9C,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC,CAAC,OAAO,EAAE,CAAC;YACf,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YACpB,MAAM;QACP,CAAC;QACD,CAAC,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IACtE,CAAC;IACD,OAAO,GAAG,CAAC,MAAM,CAAC;AACnB,CAAC"}

package/dist/infra/prototype-keys.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Object-key safety guard.
+ *
+ * `isBlockedObjectKey(key)` returns true for the three JavaScript object
+ * keys that, when used as a property name on a plain object literal or as
+ * a `Map.set(key, ...)` argument, can poison the prototype chain or
+ * corrupt the prototype-walk of any later reader: `__proto__`,
+ * `prototype`, `constructor`.
+ *
+ * Every Brigade subsystem that turns USER-CONTROLLED or MODEL-CONTROLLED
+ * input into a property name / map key MUST run it through this guard
+ * first. Today the consumers are: account-id canonicalisation, session-
+ * key normalisation, identity-link resolution, agent-id sanitisation,
+ * cron job-id sanitisation, sessions_send target-key resolution.
+ *
+ * Brand-scrubbed verbatim lift from the upstream reference codebase.
+ */
+export declare function isBlockedObjectKey(key: string): boolean;
+//# sourceMappingURL=prototype-keys.d.ts.map

package/dist/infra/prototype-keys.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"prototype-keys.d.ts","sourceRoot":"","sources":["../../src/infra/prototype-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAEvD"}

package/dist/infra/prototype-keys.js

@@ -0,0 +1,22 @@
+/**
+ * Object-key safety guard.
+ *
+ * `isBlockedObjectKey(key)` returns true for the three JavaScript object
+ * keys that, when used as a property name on a plain object literal or as
+ * a `Map.set(key, ...)` argument, can poison the prototype chain or
+ * corrupt the prototype-walk of any later reader: `__proto__`,
+ * `prototype`, `constructor`.
+ *
+ * Every Brigade subsystem that turns USER-CONTROLLED or MODEL-CONTROLLED
+ * input into a property name / map key MUST run it through this guard
+ * first. Today the consumers are: account-id canonicalisation, session-
+ * key normalisation, identity-link resolution, agent-id sanitisation,
+ * cron job-id sanitisation, sessions_send target-key resolution.
+ *
+ * Brand-scrubbed verbatim lift from the upstream reference codebase.
+ */
+const BLOCKED_OBJECT_KEYS = new Set(["__proto__", "prototype", "constructor"]);
+export function isBlockedObjectKey(key) {
+    return BLOCKED_OBJECT_KEYS.has(key);
+}
+//# sourceMappingURL=prototype-keys.js.map

package/dist/infra/prototype-keys.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"prototype-keys.js","sourceRoot":"","sources":["../../src/infra/prototype-keys.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,MAAM,mBAAmB,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,WAAW,EAAE,aAAa,CAAC,CAAC,CAAC;AAE/E,MAAM,UAAU,kBAAkB,CAAC,GAAW;IAC7C,OAAO,mBAAmB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC"}

package/dist/integrations/ollama.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Ollama integration.
+ *
+ * Ollama runs locally and exposes two parallel APIs:
+ *   1. Native Ollama API (`/api/tags`, `/api/generate`) — easiest for discovery.
+ *   2. OpenAI-compatible API at `/v1/...` — what we point Pi-AI at for streaming.
+ *
+ * Pi-AI doesn't ship Ollama as a built-in provider. We register it dynamically
+ * via the `~/.brigade/models.json` mechanism Pi exposes for custom providers.
+ * Each model the user has pulled becomes a Pi `Model<"openai-completions">`.
+ *
+ * Capability inference is best-effort — Ollama doesn't tell us a model's
+ * context window or whether it reasons. We pattern-match the model name
+ * against well-known families and fall back to safe defaults.
+ */
+export interface OllamaModelSummary {
+    id: string;
+    name: string;
+    sizeBytes?: number;
+    family?: string;
+    parameterSize?: string;
+}
+/**
+ * Hit Ollama's `/api/tags` and return the user's locally-installed models.
+ * Throws a friendly error if the server isn't running or returns no models.
+ */
+export declare function discoverOllamaModels(baseUrl?: string): Promise<OllamaModelSummary[]>;
+/**
+ * Best-effort capability guesses based on model id. Ollama exposes no metadata
+ * for context window or reasoning — we infer from the family name. Wrong
+ * guesses are non-fatal: contextWindow only affects display, and `reasoning`
+ * just means we'll set thinkingLevel="low" instead of "off" by default.
+ */
+export interface InferredCapabilities {
+    reasoning: boolean;
+    contextWindow: number;
+    maxTokens: number;
+    input: ("text" | "image")[];
+}
+export declare function inferOllamaModelCapabilities(modelId: string): InferredCapabilities;
+/**
+ * Write Brigade's Ollama provider entry into Pi's `~/.brigade/models.json`.
+ * Pi's `ModelRegistry.refresh()` picks this up and exposes the models as
+ * regular Pi models from then on.
+ *
+ * We MERGE rather than overwrite — the user (or other providers) may have
+ * existing entries in the file we shouldn't clobber.
+ */
+export declare function writeOllamaToModelsJson(modelsJsonPath: string, baseUrl: string, models: OllamaModelSummary[]): Promise<void>;
+/**
+ * Runtime re-discovery for local Ollama — enumerates `/api/tags` into the
+ * provider config so any pulled model resolves without a manual catalog
+ * edit.
+ *
+ * Called when the model registry MISSES an `ollama/<model>` id: the user has
+ * almost certainly `ollama pull`ed a model since onboarding. We re-query the
+ * local daemon, merge the full catalog into models.json (capability inference
+ * + zero cost + the OpenAI-compatible provider routing), and report whether the
+ * requested model now exists. Best-effort: never throws — on any failure
+ * (daemon down, no models) it returns `false` and the caller surfaces the
+ * normal "not registered" guidance.
+ *
+ * The caller is responsible for `modelRegistry.refresh()` + re-`find()` after
+ * this resolves true, so Pi picks up the freshly-written entries.
+ */
+export declare function rediscoverOllamaModel(modelsJsonPath: string, modelId: string, baseUrl?: string): Promise<boolean>;
+//# sourceMappingURL=ollama.d.ts.map

package/dist/integrations/ollama.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama.d.ts","sourceRoot":"","sources":["../../src/integrations/ollama.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAwBH,MAAM,WAAW,kBAAkB;IAClC,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,aAAa,CAAC,EAAE,MAAM,CAAC;CACvB;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CAAC,OAAO,GAAE,MAAyB,GAAG,OAAO,CAAC,kBAAkB,EAAE,CAAC,CAqC5G;AAED;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACpC,SAAS,EAAE,OAAO,CAAC;IACnB,aAAa,EAAE,MAAM,CAAC;IACtB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,CAAC;CAC5B;AAED,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAiDlF;AAED;;;;;;;GAOG;AACH,wBAAsB,uBAAuB,CAC5C,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,kBAAkB,EAAE,GAC1B,OAAO,CAAC,IAAI,CAAC,CAoDf;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAC1C,cAAc,EAAE,MAAM,EACtB,OAAO,EAAE,MAAM,EACf,OAAO,GAAE,MAAyB,GAChC,OAAO,CAAC,OAAO,CAAC,CAclB"}

package/dist/integrations/ollama.js

@@ -14,6 +14,8 @@
  * against well-known families and fall back to safe defaults.
  */
 import * as fs from "node:fs/promises";
+import path from "node:path";
+import { tryGetRuntimeContext } from "../storage/runtime-context.js";
 const DEFAULT_BASE_URL = "http://localhost:11434";
 const TIMEOUT_MS = 5000;
 /**
@@ -135,6 +137,57 @@ export async function writeOllamaToModelsJson(modelsJsonPath, baseUrl, models) {
         apiKey: "ollama-local-no-auth-required",
         models: modelDefs,
     };
+    // In convex mode resolveModelsPath routes to the OS cache dir, which may
+    // not exist yet on a fresh machine (boot only mkdirs it when a "models"
+    // blob already exists to materialise) — a bare write would ENOENT inside
+    // the wizard's retry loop, making Ollama unpickable. Filesystem mode:
+    // ~/.brigade always exists by this point, so this is a no-op.
+    await fs.mkdir(path.dirname(modelsJsonPath), { recursive: true });
     await fs.writeFile(modelsJsonPath, JSON.stringify(existing, null, 2), "utf8");
+    // Convex mode — the file just written lives in the OS cache (resolveModelsPath
+    // routed it there) and is a regenerable mirror; the durable copy is the
+    // sealed "models" blob. Push it so a fresh machine re-materialises the
+    // catalog at boot.
+    const rctx = tryGetRuntimeContext();
+    if (rctx?.mode === "convex") {
+        await rctx.store.auth
+            .writeAuthFileBlob("main", "models", existing)
+            .catch((err) => {
+            console.error(`brigade: models catalog write to convex failed — ${err.message}`);
+        });
+    }
+}
+/**
+ * Runtime re-discovery for local Ollama — enumerates `/api/tags` into the
+ * provider config so any pulled model resolves without a manual catalog
+ * edit.
+ *
+ * Called when the model registry MISSES an `ollama/<model>` id: the user has
+ * almost certainly `ollama pull`ed a model since onboarding. We re-query the
+ * local daemon, merge the full catalog into models.json (capability inference
+ * + zero cost + the OpenAI-compatible provider routing), and report whether the
+ * requested model now exists. Best-effort: never throws — on any failure
+ * (daemon down, no models) it returns `false` and the caller surfaces the
+ * normal "not registered" guidance.
+ *
+ * The caller is responsible for `modelRegistry.refresh()` + re-`find()` after
+ * this resolves true, so Pi picks up the freshly-written entries.
+ */
+export async function rediscoverOllamaModel(modelsJsonPath, modelId, baseUrl = DEFAULT_BASE_URL) {
+    let discovered;
+    try {
+        discovered = await discoverOllamaModels(baseUrl);
+    }
+    catch {
+        // Daemon unreachable / no models — let the caller surface the standard
+        // guidance (run `ollama pull`, check the daemon is up).
+        return false;
+    }
+    if (discovered.length === 0)
+        return false;
+    await writeOllamaToModelsJson(modelsJsonPath, baseUrl, discovered);
+    // Match on id OR name — `/api/tags` reports both, and the user may have
+    // typed either form when picking the model.
+    return discovered.some((m) => m.id === modelId || m.name === modelId);
 }
 //# sourceMappingURL=ollama.js.map

package/dist/integrations/ollama.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama.js","sourceRoot":"","sources":["../../src/integrations/ollama.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAEH,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,oBAAoB,EAAE,MAAM,+BAA+B,CAAC;AAErE,MAAM,gBAAgB,GAAG,wBAAwB,CAAC;AAClD,MAAM,UAAU,GAAG,IAAI,CAAC;AAwBxB;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,UAAkB,gBAAgB;IAC5E,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,WAAW,CAAC;IACrD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IAE/D,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC;IAC5D,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,IAAI,GAAG,YAAY,KAAK,IAAI,GAAG,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACvD,MAAM,IAAI,KAAK,CAAC,gCAAgC,UAAU,GAAG,IAAI,mCAAmC,CAAC,CAAC;QACvG,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,uDAAuD,CAAC,CAAC;IAC1E,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;IAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,mDAAmD,QAAQ,CAAC,MAAM,IAAI,CAAC,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAuB,CAAC;IAC3D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC;IAEjC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CACd,mHAAmH,CACnH,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACzB,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,IAAI;QACrB,IAAI,EAAE,CAAC,CAAC,IAAI;QACZ,SAAS,EAAE,CAAC,CAAC,IAAI;QACjB,MAAM,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM;QACzB,aAAa,EAAE,CAAC,CAAC,OAAO,EAAE,cAAc;KACxC,CAAC,CAAC,CAAC;AACL,CAAC;AAeD,MAAM,UAAU,4BAA4B,CAAC,OAAe;IAC3D,MAAM,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAEjC,oEAAoE;IACpE,yEAAyE;IACzE,wEAAwE;IACxE,gEAAgE;IAChE,+DAA+D;IAC/D,mEAAmE;IACnE,uCAAuC;IACvC,EAAE;IACF,wEAAwE;IACxE,+CAA+C;IAC/C,yDAAyD;IACzD,oEAAoE;IACpE,EAAE;IACF,4CAA4C;IAC5C,qDAAqD;IACrD,6DAA6D;IAC7D,oEAAoE;IACpE,0DAA0D;IAC1D,MAAM,SAAS,GACd,gBAAgB,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACjB,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAEnB,8CAA8C;IAC9C,MAAM,MAAM,GACX,UAAU,CAAC,IAAI,CAAC,EAAE,CAAC;QACnB,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC;QACtB,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,qBAAqB,CAAC,IAAI,CAAC,EAAE,CAAC;QAC9B,cAAc,CAAC,IAAI,CAAC,EAAE,CAAC;QACvB,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,0BAA0B,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,+BAA+B;IAErE,iEAAiE;IACjE,wCAAwC;IACxC,0BAA0B;IAC1B,0EAA0E;IAC1E,oEAAoE;IACpE,MAAM,aAAa,GAAG,MAAM,CAAC;IAC7B,MAAM,SAAS,GAAG,KAAK,CAAC;IAExB,MAAM,KAAK,GAAyB,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;IAE1E,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;AACvD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC5C,cAAsB,EACtB,OAAe,EACf,MAA4B;IAE5B,IAAI,QAAQ,GAAwC,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IACtE,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACtD,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC3B,IAAI,CAAC,QAAQ,CAAC,SAAS;YAAE,QAAQ,CAAC,SAAS,GAAG,EAAE,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,oFAAoF;IACrF,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE;QAClC,MAAM,IAAI,GAAG,4BAA4B,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QAChD,OAAO;YACN,EAAE,EAAE,CAAC,CAAC,EAAE;YACR,IAAI,EAAE,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,aAAa,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,aAAa,EAAE,IAAI,CAAC,aAAa;YACjC,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,EAAE,eAAe;SAC3E,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,SAAU,CAAC,QAAQ,CAAC,GAAG;QAC/B,OAAO,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK;QAC3C,GAAG,EAAE,oBAAoB;QACzB,4EAA4E;QAC5E,kEAAkE;QAClE,MAAM,EAAE,+BAA+B;QACvC,MAAM,EAAE,SAAS;KACjB,CAAC;IAEF,yEAAyE;IACzE,wEAAwE;IACxE,yEAAyE;IACzE,sEAAsE;IACtE,8DAA8D;IAC9D,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClE,MAAM,EAAE,CAAC,SAAS,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAE9E,+EAA+E;IAC/E,wEAAwE;IACxE,uEAAuE;IACvE,mBAAmB;IACnB,MAAM,IAAI,GAAG,oBAAoB,EAAE,CAAC;IACpC,IAAI,IAAI,EAAE,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI;aACnB,iBAAiB,CAAC,MAAM,EAAE,QAAiB,EAAE,QAAmC,CAAC;aACjF,KAAK,CAAC,CAAC,GAAU,EAAE,EAAE;YACrB,OAAO,CAAC,KAAK,CAAC,oDAAoD,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;QAClF,CAAC,CAAC,CAAC;IACL,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;;;;GAeG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAC1C,cAAsB,EACtB,OAAe,EACf,UAAkB,gBAAgB;IAElC,IAAI,UAAgC,CAAC;IACrC,IAAI,CAAC;QACJ,UAAU,GAAG,MAAM,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAClD,CAAC;IAAC,MAAM,CAAC;QACR,uEAAuE;QACvE,wDAAwD;QACxD,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IAC1C,MAAM,uBAAuB,CAAC,cAAc,EAAE,OAAO,EAAE,UAAU,CAAC,CAAC;IACnE,wEAAwE;IACxE,4CAA4C;IAC5C,OAAO,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC;AACvE,CAAC"}

package/dist/integrations/provider-discovery.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Cloud-provider model discovery — best-effort live metadata for a model id
+ * that isn't in the static catalog.
+ *
+ * Used by the never-miss resolver (`agents/model-resolution.ts`): on a
+ * `ModelRegistry.find` miss for a cloud provider, we hit the provider's
+ * models endpoint to (a) confirm the id exists and (b) read accurate
+ * capabilities (context window, vision, reasoning) so the synthesized
+ * Model isn't all-defaults.
+ *
+ * Everything here is defensive: short timeouts, every failure path returns
+ * `{ exists: false, meta: {} }` so the caller falls back to template/default
+ * synthesis rather than erroring. Local Ollama discovery lives separately in
+ * `integrations/ollama.ts` (native /api/tags); this module is for cloud +
+ * OpenAI-compatible HTTP endpoints.
+ */
+export interface DiscoveredModelMeta {
+    contextWindow?: number;
+    reasoning?: boolean;
+    vision?: boolean;
+}
+export interface DiscoveryResult {
+    /** True when the provider's model list actually contains this id. */
+    exists: boolean;
+    /** Best-effort capabilities (empty when unknown). */
+    meta: DiscoveredModelMeta;
+}
+/**
+ * Resolve best-effort live metadata for `provider/modelId`. `baseUrl` is the
+ * provider's API root (taken from a catalogued template model when available);
+ * `apiKey` is the provider's key from auth storage (omit for keyless lists).
+ * Never throws — returns `{ exists:false, meta:{} }` on any failure.
+ */
+export declare function discoverCloudModelMeta(provider: string, modelId: string, opts?: {
+    baseUrl?: string;
+    apiKey?: string;
+}): Promise<DiscoveryResult>;
+/**
+ * A live model entry from a cloud catalog, shaped so it can be used DIRECTLY as
+ * a (loose) Pi `Model`: the onboarding picker's `describeModel` and the gateway's
+ * `modelToSummary` only read provider/id/name/contextWindow/reasoning/input/cost,
+ * all populated here. Lets UIs list models newer than Pi's bundled snapshot.
+ */
+export interface LiveCloudModel {
+    provider: string;
+    id: string;
+    name: string;
+    contextWindow?: number;
+    reasoning: boolean;
+    input: string[];
+    cost?: {
+        input: number;
+        output: number;
+        cacheRead: number;
+        cacheWrite: number;
+    };
+}
+/**
+ * The FULL live OpenRouter catalog (every served model id), so model pickers can
+ * show models newer than Pi's bundled snapshot (e.g. the latest Opus/GPT/Gemini).
+ * Keyless, cached 5 min, short timeout. Returns the last good cache (or `[]`) on
+ * ANY failure so callers degrade to the static catalog rather than erroring —
+ * never throws. Pricing → `cost.input` is per-Mtok (OpenRouter quotes per-token).
+ */
+export declare function listOpenRouterModels(): Promise<LiveCloudModel[]>;
+//# sourceMappingURL=provider-discovery.d.ts.map

package/dist/integrations/provider-discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-discovery.d.ts","sourceRoot":"","sources":["../../src/integrations/provider-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,MAAM,WAAW,mBAAmB;IACnC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,MAAM,CAAC,EAAE,OAAO,CAAC;CACjB;AAED,MAAM,WAAW,eAAe;IAC/B,qEAAqE;IACrE,MAAM,EAAE,OAAO,CAAC;IAChB,qDAAqD;IACrD,IAAI,EAAE,mBAAmB,CAAC;CAC1B;AAyED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC3C,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,EACf,IAAI,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAC9C,OAAO,CAAC,eAAe,CAAC,CAQ1B;AAED;;;;;GAKG;AACH,MAAM,WAAW,cAAc;IAC9B,QAAQ,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,EAAE,OAAO,CAAC;IACnB,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,IAAI,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAC;CAChF;AAKD;;;;;;GAMG;AACH,wBAAsB,oBAAoB,IAAI,OAAO,CAAC,cAAc,EAAE,CAAC,CAsDtE"}

package/dist/integrations/provider-discovery.js

@@ -0,0 +1,166 @@
+/**
+ * Cloud-provider model discovery — best-effort live metadata for a model id
+ * that isn't in the static catalog.
+ *
+ * Used by the never-miss resolver (`agents/model-resolution.ts`): on a
+ * `ModelRegistry.find` miss for a cloud provider, we hit the provider's
+ * models endpoint to (a) confirm the id exists and (b) read accurate
+ * capabilities (context window, vision, reasoning) so the synthesized
+ * Model isn't all-defaults.
+ *
+ * Everything here is defensive: short timeouts, every failure path returns
+ * `{ exists: false, meta: {} }` so the caller falls back to template/default
+ * synthesis rather than erroring. Local Ollama discovery lives separately in
+ * `integrations/ollama.ts` (native /api/tags); this module is for cloud +
+ * OpenAI-compatible HTTP endpoints.
+ */
+const TIMEOUT_MS = 5000;
+const EMPTY = { exists: false, meta: {} };
+/** OpenRouter's public model list — no key needed, rich metadata. */
+const OPENROUTER_MODELS_URL = "https://openrouter.ai/api/v1/models";
+async function fetchJson(url, apiKey) {
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), TIMEOUT_MS);
+    try {
+        const headers = { Accept: "application/json" };
+        if (apiKey)
+            headers.Authorization = `Bearer ${apiKey}`;
+        const res = await fetch(url, { signal: controller.signal, headers });
+        if (!res.ok)
+            return null;
+        return (await res.json());
+    }
+    catch {
+        return null;
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+/**
+ * OpenRouter: rich catalog at /api/v1/models. Each entry carries
+ * `context_length`, `architecture.input_modalities` (vision), and
+ * `supported_parameters` (reasoning).
+ */
+async function discoverOpenRouter(modelId) {
+    const body = (await fetchJson(OPENROUTER_MODELS_URL));
+    const list = body?.data;
+    if (!Array.isArray(list))
+        return EMPTY;
+    const entry = list.find((m) => m.id === modelId || m.canonical_slug === modelId);
+    if (!entry)
+        return EMPTY;
+    const contextWindow = typeof entry.context_length === "number" && entry.context_length > 0
+        ? entry.context_length
+        : undefined;
+    const arch = entry.architecture;
+    const modalities = Array.isArray(arch?.input_modalities) ? arch?.input_modalities : [];
+    const vision = modalities.includes("image");
+    const supported = Array.isArray(entry.supported_parameters)
+        ? entry.supported_parameters
+        : [];
+    const reasoning = supported.includes("reasoning") || supported.includes("include_reasoning");
+    return { exists: true, meta: { contextWindow, vision, reasoning } };
+}
+/**
+ * Generic OpenAI-compatible `/v1/models` (OpenAI, Groq, Cerebras, DeepSeek,
+ * Mistral, xAI, custom endpoints). Most return ids only; Groq additionally
+ * includes `context_window`. We confirm existence and pull context_window
+ * when present — capabilities otherwise stay unknown (caller defaults them).
+ */
+async function discoverOpenAICompatible(baseUrl, modelId, apiKey) {
+    // baseUrl is the provider's API root (e.g. https://api.groq.com/openai/v1).
+    const url = `${baseUrl.replace(/\/$/, "")}/models`;
+    const body = (await fetchJson(url, apiKey));
+    const list = body?.data;
+    if (!Array.isArray(list))
+        return EMPTY;
+    const entry = list.find((m) => m.id === modelId);
+    if (!entry)
+        return EMPTY;
+    const ctx = entry.context_window ?? entry.context_length;
+    const contextWindow = typeof ctx === "number" && ctx > 0 ? ctx : undefined;
+    return { exists: true, meta: { contextWindow } };
+}
+/**
+ * Resolve best-effort live metadata for `provider/modelId`. `baseUrl` is the
+ * provider's API root (taken from a catalogued template model when available);
+ * `apiKey` is the provider's key from auth storage (omit for keyless lists).
+ * Never throws — returns `{ exists:false, meta:{} }` on any failure.
+ */
+export async function discoverCloudModelMeta(provider, modelId, opts = {}) {
+    try {
+        if (provider === "openrouter")
+            return await discoverOpenRouter(modelId);
+        if (opts.baseUrl)
+            return await discoverOpenAICompatible(opts.baseUrl, modelId, opts.apiKey);
+        return EMPTY;
+    }
+    catch {
+        return EMPTY;
+    }
+}
+const MODEL_LIST_TTL_MS = 5 * 60_000;
+let openRouterListCache = null;
+/**
+ * The FULL live OpenRouter catalog (every served model id), so model pickers can
+ * show models newer than Pi's bundled snapshot (e.g. the latest Opus/GPT/Gemini).
+ * Keyless, cached 5 min, short timeout. Returns the last good cache (or `[]`) on
+ * ANY failure so callers degrade to the static catalog rather than erroring —
+ * never throws. Pricing → `cost.input` is per-Mtok (OpenRouter quotes per-token).
+ */
+export async function listOpenRouterModels() {
+    const now = Date.now();
+    if (openRouterListCache && now - openRouterListCache.at < MODEL_LIST_TTL_MS) {
+        return openRouterListCache.models;
+    }
+    try {
+        const body = (await fetchJson(OPENROUTER_MODELS_URL));
+        const list = body?.data;
+        if (!Array.isArray(list))
+            return openRouterListCache?.models ?? [];
+        const out = [];
+        for (const entry of list) {
+            const id = typeof entry.id === "string" ? entry.id : undefined;
+            if (!id)
+                continue;
+            const contextWindow = typeof entry.context_length === "number" && entry.context_length > 0
+                ? entry.context_length
+                : undefined;
+            const arch = entry.architecture;
+            const modalities = Array.isArray(arch?.input_modalities) ? arch?.input_modalities : [];
+            const input = modalities.includes("image") ? ["text", "image"] : ["text"];
+            const supported = Array.isArray(entry.supported_parameters)
+                ? entry.supported_parameters
+                : [];
+            const reasoning = supported.includes("reasoning") || supported.includes("include_reasoning");
+            const pricing = entry.pricing;
+            const inTok = pricing && typeof pricing.prompt === "string" ? Number.parseFloat(pricing.prompt) : Number.NaN;
+            const outTok = pricing && typeof pricing.completion === "string" ? Number.parseFloat(pricing.completion) : Number.NaN;
+            const cost = Number.isFinite(inTok)
+                ? {
+                    input: inTok * 1_000_000,
+                    output: Number.isFinite(outTok) ? outTok * 1_000_000 : 0,
+                    cacheRead: 0,
+                    cacheWrite: 0,
+                }
+                : undefined;
+            const name = typeof entry.name === "string" && entry.name.length > 0 ? entry.name : id;
+            out.push({
+                provider: "openrouter",
+                id,
+                name,
+                ...(contextWindow !== undefined ? { contextWindow } : {}),
+                reasoning,
+                input,
+                ...(cost ? { cost } : {}),
+            });
+        }
+        openRouterListCache = { at: now, models: out };
+        return out;
+    }
+    catch {
+        return openRouterListCache?.models ?? [];
+    }
+}
+//# sourceMappingURL=provider-discovery.js.map

package/dist/integrations/provider-discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-discovery.js","sourceRoot":"","sources":["../../src/integrations/provider-discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,MAAM,UAAU,GAAG,IAAI,CAAC;AAexB,MAAM,KAAK,GAAoB,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC;AAE3D,qEAAqE;AACrE,MAAM,qBAAqB,GAAG,qCAAqC,CAAC;AAEpE,KAAK,UAAU,SAAS,CAAC,GAAW,EAAE,MAAe;IACpD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,UAAU,CAAC,CAAC;IAC/D,IAAI,CAAC;QACJ,MAAM,OAAO,GAA2B,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;QACvE,IAAI,MAAM;YAAE,OAAO,CAAC,aAAa,GAAG,UAAU,MAAM,EAAE,CAAC;QACvD,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,IAAI,CAAC;QACzB,OAAO,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAY,CAAC;IACtC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,IAAI,CAAC;IACb,CAAC;YAAS,CAAC;QACV,YAAY,CAAC,KAAK,CAAC,CAAC;IACrB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,kBAAkB,CAAC,OAAe;IAChD,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,qBAAqB,CAAC,CAE7C,CAAC;IACR,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,IAAI,CAAC,CAAC,cAAc,KAAK,OAAO,CAAC,CAAC;IACjF,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,aAAa,GAClB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC;QACnE,CAAC,CAAC,KAAK,CAAC,cAAc;QACtB,CAAC,CAAC,SAAS,CAAC;IACd,MAAM,IAAI,GAAG,KAAK,CAAC,YAA0D,CAAC;IAC9E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,gBAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;IACtG,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5C,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;QAC1D,CAAC,CAAE,KAAK,CAAC,oBAAkC;QAC3C,CAAC,CAAC,EAAE,CAAC;IACN,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAC7F,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,SAAS,EAAE,EAAE,CAAC;AACrE,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,wBAAwB,CACtC,OAAe,EACf,OAAe,EACf,MAAe;IAEf,4EAA4E;IAC5E,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,SAAS,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,GAAG,EAAE,MAAM,CAAC,CAAqD,CAAC;IAChG,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;IACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACvC,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,CAAC;IACjD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,MAAM,GAAG,GAAG,KAAK,CAAC,cAAc,IAAI,KAAK,CAAC,cAAc,CAAC;IACzD,MAAM,aAAa,GAAG,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3E,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,aAAa,EAAE,EAAE,CAAC;AAClD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC3C,QAAgB,EAChB,OAAe,EACf,OAA8C,EAAE;IAEhD,IAAI,CAAC;QACJ,IAAI,QAAQ,KAAK,YAAY;YAAE,OAAO,MAAM,kBAAkB,CAAC,OAAO,CAAC,CAAC;QACxE,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,MAAM,wBAAwB,CAAC,IAAI,CAAC,OAAO,EAAE,OAAO,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;QAC5F,OAAO,KAAK,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC;AAkBD,MAAM,iBAAiB,GAAG,CAAC,GAAG,MAAM,CAAC;AACrC,IAAI,mBAAmB,GAAoD,IAAI,CAAC;AAEhF;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,mBAAmB,IAAI,GAAG,GAAG,mBAAmB,CAAC,EAAE,GAAG,iBAAiB,EAAE,CAAC;QAC7E,OAAO,mBAAmB,CAAC,MAAM,CAAC;IACnC,CAAC;IACD,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,CAAC,MAAM,SAAS,CAAC,qBAAqB,CAAC,CAE7C,CAAC;QACR,MAAM,IAAI,GAAG,IAAI,EAAE,IAAI,CAAC;QACxB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,mBAAmB,EAAE,MAAM,IAAI,EAAE,CAAC;QACnE,MAAM,GAAG,GAAqB,EAAE,CAAC;QACjC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YAC1B,MAAM,EAAE,GAAG,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;YAC/D,IAAI,CAAC,EAAE;gBAAE,SAAS;YAClB,MAAM,aAAa,GAClB,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,IAAI,KAAK,CAAC,cAAc,GAAG,CAAC;gBACnE,CAAC,CAAC,KAAK,CAAC,cAAc;gBACtB,CAAC,CAAC,SAAS,CAAC;YACd,MAAM,IAAI,GAAG,KAAK,CAAC,YAA0D,CAAC;YAC9E,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,gBAAgB,CAAC,CAAC,CAAC,CAAE,IAAI,EAAE,gBAA8B,CAAC,CAAC,CAAC,EAAE,CAAC;YACtG,MAAM,KAAK,GAAG,UAAU,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC;YAC1E,MAAM,SAAS,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,oBAAoB,CAAC;gBAC1D,CAAC,CAAE,KAAK,CAAC,oBAAkC;gBAC3C,CAAC,CAAC,EAAE,CAAC;YACN,MAAM,SAAS,GAAG,SAAS,CAAC,QAAQ,CAAC,WAAW,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;YAC7F,MAAM,OAAO,GAAG,KAAK,CAAC,OAAiE,CAAC;YACxF,MAAM,KAAK,GAAG,OAAO,IAAI,OAAO,OAAO,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YAC7G,MAAM,MAAM,GACX,OAAO,IAAI,OAAO,OAAO,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;YACxG,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;gBAClC,CAAC,CAAC;oBACA,KAAK,EAAE,KAAK,GAAG,SAAS;oBACxB,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;oBACxD,SAAS,EAAE,CAAC;oBACZ,UAAU,EAAE,CAAC;iBACb;gBACF,CAAC,CAAC,SAAS,CAAC;YACb,MAAM,IAAI,GAAG,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,GAAG,CAAC,IAAI,CAAC;gBACR,QAAQ,EAAE,YAAY;gBACtB,EAAE;gBACF,IAAI;gBACJ,GAAG,CAAC,aAAa,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACzD,SAAS;gBACT,KAAK;gBACL,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzB,CAAC,CAAC;QACJ,CAAC;QACD,mBAAmB,GAAG,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC;QAC/C,OAAO,GAAG,CAAC;IACZ,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,mBAAmB,EAAE,MAAM,IAAI,EAAE,CAAC;IAC1C,CAAC;AACF,CAAC"}

package/dist/logging/redact.d.ts

@@ -0,0 +1,28 @@
+/**
+ * Sensitive-text redactor for transcript fetches + audit logs.
+ *
+ * Used by `sessions_history` before returning transcript chunks to a
+ * cross-session caller, and by any log line that could carry a token /
+ * key / phone number. The redaction is opportunistic — false negatives
+ * are acceptable (caller must still consider the visibility policy),
+ * but false positives must be RARE so the model still gets useful
+ * context.
+ *
+ * Patterns redacted (case-insensitive where relevant):
+ *
+ *   - Bearer / token / api key / secret prefixes followed by ≥16 alnum/=+/
+ *     characters → `<redacted:bearer-token>` etc.
+ *   - AWS access keys (`AKIA…`, `ASIA…`) → `<redacted:aws-key>`
+ *   - GitHub PATs (`ghp_`, `gho_`, `ghu_`, `ghs_`, `ghr_` + 36 alnum) →
+ *     `<redacted:github-token>`
+ *   - OpenAI / Anthropic / Google AI keys (`sk-…`, `sk-ant-…`, `AIza…`) →
+ *     `<redacted:provider-key>`
+ *   - Phone numbers in `+CCNNNNNNNNNN` form (≥10 digits after `+`) →
+ *     `<redacted:phone>`
+ *   - Email addresses → `<redacted:email>`
+ *
+ * Returns the input unchanged when no patterns matched (zero allocation
+ * for the common clean-text case).
+ */
+export declare function redactSensitiveText(input: string): string;
+//# sourceMappingURL=redact.d.ts.map

package/dist/logging/redact.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.d.ts","sourceRoot":"","sources":["../../src/logging/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAaH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAYzD"}

package/dist/logging/redact.js

@@ -0,0 +1,51 @@
+/**
+ * Sensitive-text redactor for transcript fetches + audit logs.
+ *
+ * Used by `sessions_history` before returning transcript chunks to a
+ * cross-session caller, and by any log line that could carry a token /
+ * key / phone number. The redaction is opportunistic — false negatives
+ * are acceptable (caller must still consider the visibility policy),
+ * but false positives must be RARE so the model still gets useful
+ * context.
+ *
+ * Patterns redacted (case-insensitive where relevant):
+ *
+ *   - Bearer / token / api key / secret prefixes followed by ≥16 alnum/=+/
+ *     characters → `<redacted:bearer-token>` etc.
+ *   - AWS access keys (`AKIA…`, `ASIA…`) → `<redacted:aws-key>`
+ *   - GitHub PATs (`ghp_`, `gho_`, `ghu_`, `ghs_`, `ghr_` + 36 alnum) →
+ *     `<redacted:github-token>`
+ *   - OpenAI / Anthropic / Google AI keys (`sk-…`, `sk-ant-…`, `AIza…`) →
+ *     `<redacted:provider-key>`
+ *   - Phone numbers in `+CCNNNNNNNNNN` form (≥10 digits after `+`) →
+ *     `<redacted:phone>`
+ *   - Email addresses → `<redacted:email>`
+ *
+ * Returns the input unchanged when no patterns matched (zero allocation
+ * for the common clean-text case).
+ */
+const PATTERNS = [
+    { re: /\b(?:Bearer\s+)[A-Za-z0-9._\-+/=]{16,}/gi, replacement: "<redacted:bearer-token>" },
+    { re: /\b(?:api[_-]?key|secret|token)["'\s:=]+[A-Za-z0-9._\-+/=]{16,}/gi, replacement: "<redacted:secret>" },
+    { re: /\b(?:A[KS]IA[0-9A-Z]{16})\b/g, replacement: "<redacted:aws-key>" },
+    { re: /\bgh[opusr]_[A-Za-z0-9]{36}\b/g, replacement: "<redacted:github-token>" },
+    { re: /\bsk-(?:ant-)?[A-Za-z0-9_\-]{20,}\b/g, replacement: "<redacted:provider-key>" },
+    { re: /\bAIza[A-Za-z0-9_\-]{35}\b/g, replacement: "<redacted:provider-key>" },
+    { re: /\+\d{10,15}\b/g, replacement: "<redacted:phone>" },
+    { re: /\b[A-Za-z0-9._%+\-]+@[A-Za-z0-9.\-]+\.[A-Za-z]{2,}\b/g, replacement: "<redacted:email>" },
+];
+export function redactSensitiveText(input) {
+    if (!input)
+        return input;
+    let out = input;
+    let touched = false;
+    for (const { re, replacement } of PATTERNS) {
+        const next = out.replace(re, replacement);
+        if (next !== out) {
+            touched = true;
+            out = next;
+        }
+    }
+    return touched ? out : input;
+}
+//# sourceMappingURL=redact.js.map

package/dist/logging/redact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redact.js","sourceRoot":"","sources":["../../src/logging/redact.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,MAAM,QAAQ,GAA+C;IAC5D,EAAE,EAAE,EAAE,0CAA0C,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC1F,EAAE,EAAE,EAAE,kEAAkE,EAAE,WAAW,EAAE,mBAAmB,EAAE;IAC5G,EAAE,EAAE,EAAE,8BAA8B,EAAE,WAAW,EAAE,oBAAoB,EAAE;IACzE,EAAE,EAAE,EAAE,gCAAgC,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAChF,EAAE,EAAE,EAAE,sCAAsC,EAAE,WAAW,EAAE,yBAAyB,EAAE;IACtF,EAAE,EAAE,EAAE,6BAA6B,EAAE,WAAW,EAAE,yBAAyB,EAAE;IAC7E,EAAE,EAAE,EAAE,gBAAgB,EAAE,WAAW,EAAE,kBAAkB,EAAE;IACzD,EAAE,EAAE,EAAE,uDAAuD,EAAE,WAAW,EAAE,kBAAkB,EAAE;CAChG,CAAC;AAEF,MAAM,UAAU,mBAAmB,CAAC,KAAa;IAChD,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,GAAG,GAAG,KAAK,CAAC;IAChB,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,KAAK,MAAM,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,QAAQ,EAAE,CAAC;QAC5C,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,EAAE,EAAE,WAAW,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,GAAG,EAAE,CAAC;YAClB,OAAO,GAAG,IAAI,CAAC;YACf,GAAG,GAAG,IAAI,CAAC;QACZ,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC;AAC9B,CAAC"}

package/dist/logging/subsystem-logger.d.ts

@@ -0,0 +1,77 @@
+export type LogLevel = "trace" | "debug" | "info" | "warn" | "error" | "fatal";
+export interface SubsystemLogger {
+    readonly subsystem: string;
+    trace(message: string, fields?: Record<string, unknown>): void;
+    debug(message: string, fields?: Record<string, unknown>): void;
+    info(message: string, fields?: Record<string, unknown>): void;
+    warn(message: string, fields?: Record<string, unknown>): void;
+    error(message: string, fields?: Record<string, unknown>): void;
+    fatal(message: string, fields?: Record<string, unknown>): void;
+    /** Append `name` to the subsystem tag. */
+    child(name: string): SubsystemLogger;
+    /** Return a logger that auto-merges `boundFields` into every emit's field bag. */
+    bind(boundFields: Record<string, unknown>): SubsystemLogger;
+}
+export declare function setLogLevel(level: LogLevel): void;
+export declare function setConsoleLogging(enabled: boolean): void;
+export declare function getActiveLogLevel(): LogLevel;
+export declare function createSubsystemLogger(subsystem: string): SubsystemLogger;
+/** Drained by the gateway on shutdown. */
+export declare function awaitSubsystemLogFlush(): Promise<void>;
+/** Test-only. */
+export declare function __resetSubsystemConvexSinkForTests(): void;
+export declare function describeLogState(): {
+    level: LogLevel;
+    consoleEnabled: boolean;
+    logFile: string | null;
+    host: string;
+};
+export declare function __resetLoggerStateForTests(): void;
+/**
+ * Append a structured record directly to the daily log file. Same write
+ * path as the standard logger emit — honours the size cap, no-ops if the
+ * level filter would drop it.
+ *
+ * Record MUST contain `level` + `subsystem`; everything else is structured
+ * metadata that gets serialised verbatim.
+ */
+export declare function appendSubsystemRecord(record: {
+    level: LogLevel;
+    subsystem: string;
+    message: string;
+    time?: string;
+    fields?: Record<string, unknown>;
+}): void;
+/**
+ * Read records from today's subsystem log file, optionally filtered by
+ * `level` / `subsystem` / `tail` byte budget. Malformed lines are skipped.
+ *
+ *   filter.level     — minimum LogLevel (records below the threshold are dropped)
+ *   filter.subsystem — exact-match string OR a prefix (when ending in "/")
+ *   filter.day       — YYYY-MM-DD; default today
+ *   filter.tailBytes — only parse the last N bytes (default 256 KiB)
+ *
+ * Returns records in file order (oldest-first within the tail slice).
+ */
+export declare function readSubsystemRecords(filter?: {
+    level?: LogLevel;
+    subsystem?: string;
+    day?: string;
+    tailBytes?: number;
+}): Array<{
+    time: string;
+    level: LogLevel;
+    subsystem: string;
+    message: string;
+    [field: string]: unknown;
+}>;
+/**
+ * Drop log files older than `olderThanMs`. Returns the count actually
+ * removed. The standard daily-roll prune already runs on the first emit
+ * of each process; this exposes the same logic for explicit cleanup
+ * (`brigade doctor --prune-logs`, store-level maintenance, tests).
+ */
+export declare function pruneSubsystemLogs(olderThanMs: number): {
+    removed: number;
+};
+//# sourceMappingURL=subsystem-logger.d.ts.map