@stigmer/runner 0.1.0-dev.20261017020314.g644422724c27

package/dist/agent-proxy/lanes.js

@@ -0,0 +1,255 @@
+/**
+ * The local proxy's lanes: for each path the agent host may call, where the
+ * call goes and with which of the runner's credentials. One rule for every
+ * lane — swap the credential, forward the bytes (`relay.ts`) — in two modes
+ * decided by the runner's own configuration:
+ *
+ *  - Forward, when the runner talks to the Stigmer platform's proxy
+ *    (`config.proxyEndpoint` set): the call goes to the same path there,
+ *    with the host's token replaced by the runner's control-plane token,
+ *    read per request so rotation stays the runner's. The execution id the
+ *    host's clients stamp (`X-Stigmer-Execution-Id`) passes through, because
+ *    the platform's proxy authorizes and meters by it and `server.ts` has
+ *    checked it names a live turn; no other scope header does.
+ *  - Terminate, when the runner calls its providers itself: the call goes
+ *    to the provider with the operator's key, or signed with the runner's
+ *    ambient cloud identity — exactly the credential the runner's own model
+ *    clients use (`shared/model-client.ts`), from the same settings. The
+ *    host's clients are direct-mode clients bound to these lanes
+ *    (`shared/model-lanes.ts`), so the wire each lane receives is already
+ *    the provider's.
+ *
+ * Lanes, and the mode each serves in:
+ *
+ * | Lane                         | Forward | Terminate |
+ * | ---------------------------- | ------- | --------- |
+ * | `llm/anthropic`, `llm/openai`| yes     | yes       |
+ * | `llm/bedrock`, `llm/vertex`, `llm/foundry` | no | yes |
+ * | `model-registry`             | yes     | yes (to the runner's own control plane) |
+ * | `checkpoints`                | yes     | no: a runner without the platform proxy checkpoints locally |
+ * | `otlp`                       | to the operator's collector, in both (`otlp-forward.ts`) | |
+ *
+ * What each lane may be asked, and by whom, is `server.ts`'s; this module
+ * only answers where and how.
+ */
+import { parseAnthropicBaseUrl } from "../shared/llm-backend.js";
+import { buildRegistryHeaders, resolveModelRegistryUrl } from "../shared/registry-endpoint.js";
+import { getRunnerSecret } from "../shared/runner-credential-store.js";
+import { forwardableHeaders } from "./relay.js";
+/** A lane that cannot serve the call: the status and the message the host's SDK reads. */
+export class LaneRefusal extends Error {
+    status;
+    constructor(status, message) {
+        super(message);
+        this.status = status;
+    }
+}
+const MODEL_PROVIDER_LANES = new Set(["anthropic", "openai", "bedrock", "vertex", "foundry"]);
+export function isModelProviderLane(name) {
+    return MODEL_PROVIDER_LANES.has(name);
+}
+/**
+ * The paths each model lane serves: the model calls the host's clients
+ * make (`shared/model-lanes.ts`), and nothing else under the provider's
+ * root. The operator's key reaches the provider's files, batches and
+ * fine-tuning too, and the runner's cloud identity every API of its
+ * project; none of that is the engine's to ask for.
+ */
+const MODEL_CALL_PATHS = {
+    anthropic: /^\/v1\/messages(\/count_tokens)?$/,
+    openai: /^\/v1\/(chat\/completions|responses)$/,
+    bedrock: /^\/model\/[^/]+\/(invoke|invoke-with-response-stream|count-tokens)$/,
+    vertex: /^\/projects\/[^/]+\/locations\/[^/]+\/publishers\/anthropic\/models\/[^/:]+:(rawPredict|streamRawPredict)$/,
+    foundry: /^\/v1\/messages(\/count_tokens)?$/,
+};
+/**
+ * Where one model call goes. `rest` is the path after the lane's prefix,
+ * with its query (`/v1/messages`, `/model/<id>/invoke-with-response-stream`).
+ */
+export async function modelUpstream(config, lane, rest, req, body) {
+    const method = req.method ?? "POST";
+    const path = rest.split("?")[0] ?? "";
+    if (!MODEL_CALL_PATHS[lane].test(path))
+        throw new LaneRefusal(404, `the ${lane} lane serves model calls only, not ${path}`);
+    if (config.proxyEndpoint !== null) {
+        if (lane !== "anthropic" && lane !== "openai") {
+            throw new LaneRefusal(404, `the ${lane} lane is not served: this runner's model calls go through the Stigmer platform`);
+        }
+        return {
+            url: laneUrl(config.proxyEndpoint, `/v1/proxy/llm/${lane}${rest}`),
+            method,
+            headers: { ...forwardableHeaders(req.headers, true), authorization: `Bearer ${runnerToken(config)}` },
+            body,
+        };
+    }
+    const headers = forwardableHeaders(req.headers, false);
+    switch (lane) {
+        case "anthropic":
+            return { url: laneUrl(anthropicBase(), rest), method, headers: { ...headers, "x-api-key": getRunnerSecret("ANTHROPIC_API_KEY") ?? "" }, body };
+        case "openai":
+            return { url: laneUrl(openAiBase(), stripV1(rest)), method, headers: { ...headers, authorization: `Bearer ${getRunnerSecret("OPENAI_API_KEY") ?? ""}` }, body };
+        case "bedrock":
+            return bedrockUpstream(rest, method, headers, body);
+        case "vertex":
+            return vertexUpstream(rest, method, headers, body);
+        case "foundry":
+            return foundryUpstream(rest, method, headers, body);
+        /* v8 ignore start -- @preserve: the never arm; the compiler proves no lane reaches it */
+        default: {
+            const exhaustive = lane;
+            throw new LaneRefusal(404, `unknown lane ${String(exhaustive)}`);
+        }
+        /* v8 ignore stop */
+    }
+}
+/** The model registry: the runner's own read of it, with the runner's credential. */
+export function registryUpstream(req) {
+    return {
+        url: new URL(resolveModelRegistryUrl()),
+        method: "GET",
+        headers: { ...forwardableHeaders(req.headers, false), ...buildRegistryHeaders() },
+        body: Buffer.alloc(0),
+    };
+}
+/** A checkpoint call, forwarded to the platform's checkpoint lane. `rest` keeps its query. */
+export function checkpointUpstream(config, rest, req, body) {
+    if (config.checkpointerType !== "http" || config.checkpointerProxyEndpoint === null) {
+        throw new LaneRefusal(404, "the checkpoint lane is not served: this runner checkpoints locally");
+    }
+    return {
+        url: laneUrl(config.checkpointerProxyEndpoint, `/v1/proxy/checkpoints${rest}`),
+        method: req.method ?? "GET",
+        headers: { ...forwardableHeaders(req.headers, false), authorization: `Bearer ${runnerToken(config)}` },
+        body,
+    };
+}
+// ─── Terminate-mode providers ─────────────────────────────────────────────
+/** The public Anthropic API root: the operator's gateway (`ANTHROPIC_BASE_URL`) or Anthropic's own. */
+function anthropicBase() {
+    const parsed = parseAnthropicBaseUrl();
+    if (!parsed.ok)
+        throw new LaneRefusal(500, parsed.message);
+    return parsed.baseUrl ?? "https://api.anthropic.com";
+}
+/** The OpenAI API root the SDK would use in the runner: `OPENAI_BASE_URL`, or OpenAI's own. */
+function openAiBase() {
+    return trimSlash(process.env.OPENAI_BASE_URL?.trim() || "https://api.openai.com/v1");
+}
+/** The OpenAI lane's path carries the SDK's `/v1` (`MODEL_CALL_PATHS`); the root above already ends in it. */
+function stripV1(rest) {
+    return rest.slice("/v1".length);
+}
+async function bedrockUpstream(rest, method, headers, body) {
+    const region = process.env.AWS_REGION?.trim();
+    if (!region)
+        throw new LaneRefusal(500, "the bedrock lane needs AWS_REGION on the runner");
+    const url = laneUrl(process.env.ANTHROPIC_BEDROCK_BASE_URL?.trim() || `https://bedrock-runtime.${region}.amazonaws.com`, rest);
+    const bearer = getRunnerSecret("AWS_BEARER_TOKEN_BEDROCK");
+    if (bearer)
+        return { url, method, headers: { ...headers, authorization: `Bearer ${bearer}` }, body };
+    // No bearer token: sign with the runner's AWS identity, through the
+    // Bedrock SDK's own signer, so the signature covers exactly what it would
+    // have covered had the runner made the call.
+    const { getAuthHeaders } = await import("@anthropic-ai/bedrock-sdk/core/auth");
+    let signed;
+    try {
+        signed = await getAuthHeaders({ method, headers: flattenHeaders(headers), body: body.toString("utf8") }, { url: url.toString(), regionName: region, awsAccessKey: null, awsSecretKey: null, awsSessionToken: null });
+    }
+    catch (err) {
+        throw new LaneRefusal(502, `${describe(err)}${causeOf(err)}`);
+    }
+    return { url, method, headers: { ...headers, ...signed }, body };
+}
+let googleAuth;
+async function vertexUpstream(rest, method, headers, body) {
+    const region = process.env.CLOUD_ML_REGION?.trim();
+    if (!region)
+        throw new LaneRefusal(500, "the vertex lane needs CLOUD_ML_REGION on the runner");
+    googleAuth ??= import("google-auth-library").then(({ GoogleAuth }) => new GoogleAuth({ scopes: "https://www.googleapis.com/auth/cloud-platform" }));
+    const auth = await googleAuth;
+    let authHeaders;
+    let project;
+    try {
+        authHeaders = await auth.getRequestHeaders();
+        project = process.env.ANTHROPIC_VERTEX_PROJECT_ID?.trim() || (await auth.getProjectId());
+    }
+    catch (err) {
+        throw new LaneRefusal(502, `Failed to acquire Google OAuth credentials: ${describe(err)}`);
+    }
+    // The host's client names a placeholder project (`shared/model-lanes.ts`);
+    // the project is the runner's identity's to say.
+    const path = rest.replace(/^\/projects\/[^/]+\//, `/projects/${encodeURIComponent(project)}/`);
+    const url = laneUrl(vertexBase(region), path);
+    return { url, method, headers: { ...headers, ...Object.fromEntries(authHeaders.entries()) }, body };
+}
+/** The Vertex API root for a region, as the Vertex SDK builds it, or `ANTHROPIC_VERTEX_BASE_URL`. */
+export function vertexBase(region) {
+    const explicit = process.env.ANTHROPIC_VERTEX_BASE_URL?.trim();
+    if (explicit)
+        return trimSlash(explicit);
+    switch (region) {
+        case "global":
+            return "https://aiplatform.googleapis.com/v1";
+        case "us":
+        case "eu":
+            return `https://aiplatform.${region}.rep.googleapis.com/v1`;
+        default:
+            return `https://${region}-aiplatform.googleapis.com/v1`;
+    }
+}
+let azureToken;
+async function foundryUpstream(rest, method, headers, body) {
+    const explicit = process.env.ANTHROPIC_FOUNDRY_BASE_URL?.trim();
+    const resource = process.env.ANTHROPIC_FOUNDRY_RESOURCE?.trim();
+    if (!explicit && !resource)
+        throw new LaneRefusal(500, "the foundry lane needs ANTHROPIC_FOUNDRY_RESOURCE or ANTHROPIC_FOUNDRY_BASE_URL on the runner");
+    const base = explicit || `https://${resource}.services.ai.azure.com/anthropic/`;
+    const url = laneUrl(base, rest);
+    const key = getRunnerSecret("ANTHROPIC_FOUNDRY_API_KEY")?.trim();
+    if (key)
+        return { url, method, headers: { ...headers, "x-api-key": key }, body };
+    azureToken ??= import("@azure/identity").then(({ DefaultAzureCredential, getBearerTokenProvider }) => getBearerTokenProvider(new DefaultAzureCredential(), "https://ai.azure.com/.default"));
+    let token;
+    try {
+        token = await (await azureToken)();
+    }
+    catch (err) {
+        throw new LaneRefusal(502, `Failed to acquire an Azure token for Microsoft Foundry: ${describe(err)}`);
+    }
+    return { url, method, headers: { ...headers, authorization: `Bearer ${token}` }, body };
+}
+// ─── Helpers ──────────────────────────────────────────────────────────────
+function runnerToken(config) {
+    const token = config.stigmerTokenRef.current;
+    if (!token)
+        throw new LaneRefusal(503, "the runner holds no Stigmer credential to forward this call with");
+    return token;
+}
+/**
+ * `base` with the host's `path` (which starts with `/`) appended, on
+ * `base`'s own origin and under its own path. The path is the agent host's
+ * to choose; the origin never is, so a path that would resolve elsewhere (a
+ * scheme, `//`, `..`) is refused before any credential is attached.
+ */
+export function laneUrl(base, path) {
+    const root = new URL(trimSlash(base));
+    const url = new URL(`${trimSlash(base)}${path}`);
+    if (url.origin !== root.origin || !url.pathname.startsWith(root.pathname)) {
+        throw new LaneRefusal(400, "the lane's path must stay under the lane's own endpoint");
+    }
+    return url;
+}
+function trimSlash(url) {
+    return url.replace(/\/+$/, "");
+}
+function flattenHeaders(headers) {
+    return Object.fromEntries(Object.entries(headers).map(([name, value]) => [name, Array.isArray(value) ? value.join(", ") : value]));
+}
+function describe(err) {
+    return err instanceof Error ? err.message : String(err);
+}
+function causeOf(err) {
+    const cause = err instanceof Error ? err.cause : undefined;
+    return cause instanceof Error ? ` (${cause.message})` : "";
+}
+//# sourceMappingURL=lanes.js.map

package/dist/agent-proxy/lanes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"lanes.js","sourceRoot":"","sources":["../../src/agent-proxy/lanes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAiCG;AAKH,OAAO,EAAE,qBAAqB,EAAE,MAAM,0BAA0B,CAAC;AACjE,OAAO,EAAE,oBAAoB,EAAE,uBAAuB,EAAE,MAAM,gCAAgC,CAAC;AAC/F,OAAO,EAAE,eAAe,EAAE,MAAM,sCAAsC,CAAC;AACvE,OAAO,EAAE,kBAAkB,EAAiB,MAAM,YAAY,CAAC;AAE/D,0FAA0F;AAC1F,MAAM,OAAO,WAAY,SAAQ,KAAK;IAEzB;IADX,YACW,MAAc,EACvB,OAAe;QAEf,KAAK,CAAC,OAAO,CAAC,CAAC;QAHN,WAAM,GAAN,MAAM,CAAQ;IAIzB,CAAC;CACF;AAKD,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAAoB,CAAC,WAAW,EAAE,QAAQ,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,CAAC,CAAC,CAAC;AAEtI,MAAM,UAAU,mBAAmB,CAAC,IAAY;IAC9C,OAAO,oBAAoB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACxC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,gBAAgB,GAAgD;IACpE,SAAS,EAAE,mCAAmC;IAC9C,MAAM,EAAE,uCAAuC;IAC/C,OAAO,EAAE,qEAAqE;IAC9E,MAAM,EAAE,4GAA4G;IACpH,OAAO,EAAE,mCAAmC;CAC7C,CAAC;AAEF;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,MAAc,EACd,IAAuB,EACvB,IAAY,EACZ,GAAoB,EACpB,IAAY;IAEZ,MAAM,MAAM,GAAG,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC;IACpC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACtC,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,OAAO,IAAI,sCAAsC,IAAI,EAAE,CAAC,CAAC;IAC5H,IAAI,MAAM,CAAC,aAAa,KAAK,IAAI,EAAE,CAAC;QAClC,IAAI,IAAI,KAAK,WAAW,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;YAC9C,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,OAAO,IAAI,gFAAgF,CAAC,CAAC;QAC1H,CAAC;QACD,OAAO;YACL,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,iBAAiB,IAAI,GAAG,IAAI,EAAE,CAAC;YAClE,MAAM;YACN,OAAO,EAAE,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,IAAI,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;YACrG,IAAI;SACL,CAAC;IACJ,CAAC;IACD,MAAM,OAAO,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;IACvD,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,WAAW;YACd,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,aAAa,EAAE,EAAE,IAAI,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,eAAe,CAAC,mBAAmB,CAAC,IAAI,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACjJ,KAAK,QAAQ;YACX,OAAO,EAAE,GAAG,EAAE,OAAO,CAAC,UAAU,EAAE,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,UAAU,eAAe,CAAC,gBAAgB,CAAC,IAAI,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QAClK,KAAK,SAAS;YACZ,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,KAAK,QAAQ;YACX,OAAO,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACrD,KAAK,SAAS;YACZ,OAAO,eAAe,CAAC,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;QACtD,yFAAyF;QACzF,OAAO,CAAC,CAAC,CAAC;YACR,MAAM,UAAU,GAAU,IAAI,CAAC;YAC/B,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,gBAAgB,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;QACnE,CAAC;QACD,oBAAoB;IACtB,CAAC;AACH,CAAC;AAED,qFAAqF;AACrF,MAAM,UAAU,gBAAgB,CAAC,GAAoB;IACnD,OAAO;QACL,GAAG,EAAE,IAAI,GAAG,CAAC,uBAAuB,EAAE,CAAC;QACvC,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,oBAAoB,EAAE,EAAE;QACjF,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;KACtB,CAAC;AACJ,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,kBAAkB,CAAC,MAAc,EAAE,IAAY,EAAE,GAAoB,EAAE,IAAY;IACjG,IAAI,MAAM,CAAC,gBAAgB,KAAK,MAAM,IAAI,MAAM,CAAC,yBAAyB,KAAK,IAAI,EAAE,CAAC;QACpF,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,oEAAoE,CAAC,CAAC;IACnG,CAAC;IACD,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,MAAM,CAAC,yBAAyB,EAAE,wBAAwB,IAAI,EAAE,CAAC;QAC9E,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;QAC3B,OAAO,EAAE,EAAE,GAAG,kBAAkB,CAAC,GAAG,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,aAAa,EAAE,UAAU,WAAW,CAAC,MAAM,CAAC,EAAE,EAAE;QACtG,IAAI;KACL,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E,uGAAuG;AACvG,SAAS,aAAa;IACpB,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,IAAI,CAAC,MAAM,CAAC,EAAE;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IAC3D,OAAO,MAAM,CAAC,OAAO,IAAI,2BAA2B,CAAC;AACvD,CAAC;AAED,+FAA+F;AAC/F,SAAS,UAAU;IACjB,OAAO,SAAS,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,IAAI,2BAA2B,CAAC,CAAC;AACvF,CAAC;AAED,8GAA8G;AAC9G,SAAS,OAAO,CAAC,IAAY;IAC3B,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;AAClC,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc,EAAE,OAA0C,EAAE,IAAY;IACnH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,CAAC;IAC9C,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,iDAAiD,CAAC,CAAC;IAC3F,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,IAAI,2BAA2B,MAAM,gBAAgB,EAAE,IAAI,CAAC,CAAC;IAC/H,MAAM,MAAM,GAAG,eAAe,CAAC,0BAA0B,CAAC,CAAC;IAC3D,IAAI,MAAM;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACrG,oEAAoE;IACpE,0EAA0E;IAC1E,6CAA6C;IAC7C,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,MAAM,CAAC,qCAAqC,CAAC,CAAC;IAC/E,IAAI,MAA8B,CAAC;IACnC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,cAAc,CAC3B,EAAE,MAAM,EAAE,OAAO,EAAE,cAAc,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,EACzE,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,YAAY,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,eAAe,EAAE,IAAI,EAAE,CAC3G,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,QAAQ,CAAC,GAAG,CAAC,GAAG,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAChE,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,EAAE,EAAE,IAAI,EAAE,CAAC;AACnE,CAAC;AAED,IAAI,UAAyE,CAAC;AAE9E,KAAK,UAAU,cAAc,CAAC,IAAY,EAAE,MAAc,EAAE,OAA0C,EAAE,IAAY;IAClH,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,IAAI,EAAE,CAAC;IACnD,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,qDAAqD,CAAC,CAAC;IAC/F,UAAU,KAAK,MAAM,CAAC,qBAAqB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,UAAU,EAAE,EAAE,EAAE,CAAC,IAAI,UAAU,CAAC,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC,CAAC,CAAC;IACpJ,MAAM,IAAI,GAAG,MAAM,UAAU,CAAC;IAC9B,IAAI,WAAoB,CAAC;IACzB,IAAI,OAAe,CAAC;IACpB,IAAI,CAAC;QACH,WAAW,GAAG,MAAM,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC7C,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,2BAA2B,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC;IAC3F,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,+CAA+C,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC7F,CAAC;IACD,2EAA2E;IAC3E,iDAAiD;IACjD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,sBAAsB,EAAE,aAAa,kBAAkB,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAC/F,MAAM,GAAG,GAAG,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC;IAC9C,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC,WAAW,CAAC,OAAO,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC;AACtG,CAAC;AAED,qGAAqG;AACrG,MAAM,UAAU,UAAU,CAAC,MAAc;IACvC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,IAAI,EAAE,CAAC;IAC/D,IAAI,QAAQ;QAAE,OAAO,SAAS,CAAC,QAAQ,CAAC,CAAC;IACzC,QAAQ,MAAM,EAAE,CAAC;QACf,KAAK,QAAQ;YACX,OAAO,sCAAsC,CAAC;QAChD,KAAK,IAAI,CAAC;QACV,KAAK,IAAI;YACP,OAAO,sBAAsB,MAAM,wBAAwB,CAAC;QAC9D;YACE,OAAO,WAAW,MAAM,+BAA+B,CAAC;IAC5D,CAAC;AACH,CAAC;AAED,IAAI,UAAsD,CAAC;AAE3D,KAAK,UAAU,eAAe,CAAC,IAAY,EAAE,MAAc,EAAE,OAA0C,EAAE,IAAY;IACnH,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAChE,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IAChE,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,+FAA+F,CAAC,CAAC;IACxJ,MAAM,IAAI,GAAG,QAAQ,IAAI,WAAW,QAAQ,mCAAmC,CAAC;IAChF,MAAM,GAAG,GAAG,OAAO,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;IAChC,MAAM,GAAG,GAAG,eAAe,CAAC,2BAA2B,CAAC,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,GAAG;QAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,WAAW,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,CAAC;IACjF,UAAU,KAAK,MAAM,CAAC,iBAAiB,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,EAAE,EAAE,CACnG,sBAAsB,CAAC,IAAI,sBAAsB,EAAE,EAAE,+BAA+B,CAAC,CACtF,CAAC;IACF,IAAI,KAAa,CAAC;IAClB,IAAI,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,MAAM,UAAU,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,2DAA2D,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzG,CAAC;IACD,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,EAAE,GAAG,OAAO,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;AAC1F,CAAC;AAED,6EAA6E;AAE7E,SAAS,WAAW,CAAC,MAAc;IACjC,MAAM,KAAK,GAAG,MAAM,CAAC,eAAe,CAAC,OAAO,CAAC;IAC7C,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,kEAAkE,CAAC,CAAC;IAC3G,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,OAAO,CAAC,IAAY,EAAE,IAAY;IAChD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;IACtC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,SAAS,CAAC,IAAI,CAAC,GAAG,IAAI,EAAE,CAAC,CAAC;IACjD,IAAI,GAAG,CAAC,MAAM,KAAK,IAAI,CAAC,MAAM,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1E,MAAM,IAAI,WAAW,CAAC,GAAG,EAAE,yDAAyD,CAAC,CAAC;IACxF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,cAAc,CAAC,OAA0C;IAChE,OAAO,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;AACrI,CAAC;AAED,SAAS,QAAQ,CAAC,GAAY;IAC5B,OAAO,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;AAC1D,CAAC;AAED,SAAS,OAAO,CAAC,GAAY;IAC3B,MAAM,KAAK,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3D,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,KAAK,CAAC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;AAC7D,CAAC"}

package/dist/agent-proxy/loopback-certificate.d.ts

@@ -0,0 +1,27 @@
+/**
+ * The certificate the local proxy's Cursor lane serves TLS with
+ * (`cursor-lane.ts`): one self-signed certificate for `127.0.0.1`, made at
+ * each runner start, whose private key never leaves the runner's memory.
+ *
+ * Why TLS on loopback at all: the Cursor SDK opens its agent run as an
+ * HTTP/2 bidirectional stream only for an `https:` backend; for an `http:`
+ * one it falls back to HTTP/1.1 and an emulation of the stream that the
+ * Stigmer platform's proxy does not serve. So the host's SDK is pointed at
+ * an `https://127.0.0.1` lane, and the host trusts exactly this certificate
+ * (`NODE_EXTRA_CA_CERTS`, `agent-host/hosting.ts`).
+ *
+ * Node can generate the key but not the certificate, so the certificate is
+ * encoded here, in the few DER structures X.509 needs: an EC P-256 key, a
+ * subject alternative name of IP 127.0.0.1, a ten-year validity (the
+ * certificate lives as long as one runner process, and its key with it),
+ * signed with ECDSA over SHA-256. The tests prove it the way the host uses
+ * it: Node's own X.509 parser reads it, and a TLS handshake that trusts it
+ * succeeds against `127.0.0.1`.
+ */
+/** A certificate and its key, both PEM; the key is the runner's alone. */
+export interface LoopbackCertificate {
+    readonly certPem: string;
+    readonly keyPem: string;
+}
+/** Make a fresh key and a self-signed certificate for `127.0.0.1`; `serial` is random but for a test's. */
+export declare function mintLoopbackCertificate(now?: Date, serial?: Buffer): LoopbackCertificate;

package/dist/agent-proxy/loopback-certificate.js

@@ -0,0 +1,115 @@
+/**
+ * The certificate the local proxy's Cursor lane serves TLS with
+ * (`cursor-lane.ts`): one self-signed certificate for `127.0.0.1`, made at
+ * each runner start, whose private key never leaves the runner's memory.
+ *
+ * Why TLS on loopback at all: the Cursor SDK opens its agent run as an
+ * HTTP/2 bidirectional stream only for an `https:` backend; for an `http:`
+ * one it falls back to HTTP/1.1 and an emulation of the stream that the
+ * Stigmer platform's proxy does not serve. So the host's SDK is pointed at
+ * an `https://127.0.0.1` lane, and the host trusts exactly this certificate
+ * (`NODE_EXTRA_CA_CERTS`, `agent-host/hosting.ts`).
+ *
+ * Node can generate the key but not the certificate, so the certificate is
+ * encoded here, in the few DER structures X.509 needs: an EC P-256 key, a
+ * subject alternative name of IP 127.0.0.1, a ten-year validity (the
+ * certificate lives as long as one runner process, and its key with it),
+ * signed with ECDSA over SHA-256. The tests prove it the way the host uses
+ * it: Node's own X.509 parser reads it, and a TLS handshake that trusts it
+ * succeeds against `127.0.0.1`.
+ */
+import { generateKeyPairSync, randomBytes, sign } from "node:crypto";
+const OID_COMMON_NAME = "2.5.4.3";
+const OID_ECDSA_SHA256 = "1.2.840.10045.4.3.2";
+const OID_SUBJECT_ALT_NAME = "2.5.29.17";
+const OID_EXT_KEY_USAGE = "2.5.29.37";
+const OID_SERVER_AUTH = "1.3.6.1.5.5.7.3.1";
+const VALIDITY_YEARS = 10;
+/** Make a fresh key and a self-signed certificate for `127.0.0.1`; `serial` is random but for a test's. */
+export function mintLoopbackCertificate(now = new Date(), serial = randomBytes(16)) {
+    const { privateKey, publicKey } = generateKeyPairSync("ec", { namedCurve: "P-256" });
+    const name = sequence(set(sequence(oid(OID_COMMON_NAME), utf8("stigmer agent proxy"))));
+    const notBefore = new Date(now.getTime() - 60 * 60 * 1000);
+    const notAfter = new Date(now.getTime());
+    notAfter.setUTCFullYear(notAfter.getUTCFullYear() + VALIDITY_YEARS);
+    const signatureAlgorithm = sequence(oid(OID_ECDSA_SHA256));
+    const extensions = sequence(sequence(oid(OID_SUBJECT_ALT_NAME), octetString(sequence(tlv(0x87, Buffer.from([127, 0, 0, 1]))))), sequence(oid(OID_EXT_KEY_USAGE), octetString(sequence(oid(OID_SERVER_AUTH)))));
+    const tbs = sequence(tlv(0xa0, integer(Buffer.from([2]))), integer(serial), signatureAlgorithm, name, sequence(time(notBefore), time(notAfter)), name, publicKey.export({ type: "spki", format: "der" }), tlv(0xa3, extensions));
+    const signature = sign("sha256", tbs, privateKey);
+    const certificate = sequence(tbs, signatureAlgorithm, tlv(0x03, Buffer.concat([Buffer.from([0]), signature])));
+    return {
+        certPem: pem("CERTIFICATE", certificate),
+        keyPem: privateKey.export({ type: "pkcs8", format: "pem" }).toString(),
+    };
+}
+// ─── DER ──────────────────────────────────────────────────────────────────
+function tlv(tag, content) {
+    return Buffer.concat([Buffer.from([tag]), length(content.length), content]);
+}
+function length(n) {
+    if (n < 0x80)
+        return Buffer.from([n]);
+    const bytes = [];
+    for (let rest = n; rest > 0; rest = Math.floor(rest / 256))
+        bytes.unshift(rest % 256);
+    return Buffer.from([0x80 | bytes.length, ...bytes]);
+}
+function sequence(...parts) {
+    return tlv(0x30, Buffer.concat(parts));
+}
+function set(...parts) {
+    return tlv(0x31, Buffer.concat(parts));
+}
+/**
+ * A non-negative INTEGER in DER's minimal form: leading zero bytes dropped
+ * (a parser refuses them as padding), then one zero put back when the first
+ * byte's high bit would read as a sign.
+ */
+function integer(value) {
+    let start = 0;
+    while (start < value.length - 1 && value[start] === 0)
+        start++;
+    const minimal = value.subarray(start);
+    return tlv(0x02, minimal[0] & 0x80 ? Buffer.concat([Buffer.from([0]), minimal]) : minimal);
+}
+function octetString(content) {
+    return tlv(0x04, content);
+}
+function utf8(text) {
+    return tlv(0x0c, Buffer.from(text, "utf8"));
+}
+/**
+ * A validity date as RFC 5280 requires: UTCTime (`YYMMDDHHMMSSZ`) through
+ * 2049, GeneralizedTime (`YYYYMMDDHHMMSSZ`) from 2050.
+ */
+function time(date) {
+    const two = (n) => String(n).padStart(2, "0");
+    const year = date.getUTCFullYear();
+    const text = (year < 2050 ? two(year % 100) : String(year)) +
+        two(date.getUTCMonth() + 1) +
+        two(date.getUTCDate()) +
+        two(date.getUTCHours()) +
+        two(date.getUTCMinutes()) +
+        two(date.getUTCSeconds()) +
+        "Z";
+    return tlv(year < 2050 ? 0x17 : 0x18, Buffer.from(text, "ascii"));
+}
+function oid(dotted) {
+    const [first = 0, second = 0, ...rest] = dotted.split(".").map(Number);
+    const bytes = [first * 40 + second];
+    for (const arc of rest) {
+        const groups = [];
+        for (let value = arc;; value = Math.floor(value / 128)) {
+            groups.unshift(value % 128);
+            if (value < 128)
+                break;
+        }
+        bytes.push(...groups.map((g, i) => (i < groups.length - 1 ? g | 0x80 : g)));
+    }
+    return tlv(0x06, Buffer.from(bytes));
+}
+function pem(label, der) {
+    const lines = der.toString("base64").match(/.{1,64}/g) ?? [];
+    return `-----BEGIN ${label}-----\n${lines.join("\n")}\n-----END ${label}-----\n`;
+}
+//# sourceMappingURL=loopback-certificate.js.map

package/dist/agent-proxy/loopback-certificate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"loopback-certificate.js","sourceRoot":"","sources":["../../src/agent-proxy/loopback-certificate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,mBAAmB,EAAE,WAAW,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAQrE,MAAM,eAAe,GAAG,SAAS,CAAC;AAClC,MAAM,gBAAgB,GAAG,qBAAqB,CAAC;AAC/C,MAAM,oBAAoB,GAAG,WAAW,CAAC;AACzC,MAAM,iBAAiB,GAAG,WAAW,CAAC;AACtC,MAAM,eAAe,GAAG,mBAAmB,CAAC;AAC5C,MAAM,cAAc,GAAG,EAAE,CAAC;AAE1B,2GAA2G;AAC3G,MAAM,UAAU,uBAAuB,CAAC,MAAY,IAAI,IAAI,EAAE,EAAE,SAAiB,WAAW,CAAC,EAAE,CAAC;IAC9F,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE,GAAG,mBAAmB,CAAC,IAAI,EAAE,EAAE,UAAU,EAAE,OAAO,EAAE,CAAC,CAAC;IACrF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,EAAE,IAAI,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC,CAAC;IACxF,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC,CAAC;IAC3D,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IACzC,QAAQ,CAAC,cAAc,CAAC,QAAQ,CAAC,cAAc,EAAE,GAAG,cAAc,CAAC,CAAC;IACpE,MAAM,kBAAkB,GAAG,QAAQ,CAAC,GAAG,CAAC,gBAAgB,CAAC,CAAC,CAAC;IAC3D,MAAM,UAAU,GAAG,QAAQ,CACzB,QAAQ,CAAC,GAAG,CAAC,oBAAoB,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAClG,QAAQ,CAAC,GAAG,CAAC,iBAAiB,CAAC,EAAE,WAAW,CAAC,QAAQ,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAC9E,CAAC;IACF,MAAM,GAAG,GAAG,QAAQ,CAClB,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EACpC,OAAO,CAAC,MAAM,CAAC,EACf,kBAAkB,EAClB,IAAI,EACJ,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC,EACzC,IAAI,EACJ,SAAS,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,EACjD,GAAG,CAAC,IAAI,EAAE,UAAU,CAAC,CACtB,CAAC;IACF,MAAM,SAAS,GAAG,IAAI,CAAC,QAAQ,EAAE,GAAG,EAAE,UAAU,CAAC,CAAC;IAClD,MAAM,WAAW,GAAG,QAAQ,CAAC,GAAG,EAAE,kBAAkB,EAAE,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;IAC/G,OAAO;QACL,OAAO,EAAE,GAAG,CAAC,aAAa,EAAE,WAAW,CAAC;QACxC,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE;KACvE,CAAC;AACJ,CAAC;AAED,6EAA6E;AAE7E,SAAS,GAAG,CAAC,GAAW,EAAE,OAAe;IACvC,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,MAAM,CAAC,CAAS;IACvB,IAAI,CAAC,GAAG,IAAI;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IACtC,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,IAAI,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,CAAC,EAAE,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,GAAG,GAAG,CAAC;QAAE,KAAK,CAAC,OAAO,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC;IACtF,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,GAAG,KAAK,CAAC,MAAM,EAAE,GAAG,KAAK,CAAC,CAAC,CAAC;AACtD,CAAC;AAED,SAAS,QAAQ,CAAC,GAAG,KAAe;IAClC,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED,SAAS,GAAG,CAAC,GAAG,KAAe;IAC7B,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;GAIG;AACH,SAAS,OAAO,CAAC,KAAa;IAC5B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,OAAO,KAAK,GAAG,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC;QAAE,KAAK,EAAE,CAAC;IAC/D,MAAM,OAAO,GAAG,KAAK,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC;IACtC,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAE,GAAG,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;AAC9F,CAAC;AAED,SAAS,WAAW,CAAC,OAAe;IAClC,OAAO,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,IAAI,CAAC,IAAY;IACxB,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;AAC9C,CAAC;AAED;;;GAGG;AACH,SAAS,IAAI,CAAC,IAAU;IACtB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IAC9D,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC;IACnC,MAAM,IAAI,GACR,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9C,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC;QAC3B,GAAG,CAAC,IAAI,CAAC,UAAU,EAAE,CAAC;QACtB,GAAG,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QACvB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACzB,GAAG,CAAC,IAAI,CAAC,aAAa,EAAE,CAAC;QACzB,GAAG,CAAC;IACN,OAAO,GAAG,CAAC,IAAI,GAAG,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;AACpE,CAAC;AAED,SAAS,GAAG,CAAC,MAAc;IACzB,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,MAAM,GAAG,CAAC,EAAE,GAAG,IAAI,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,CAAC,KAAK,GAAG,EAAE,GAAG,MAAM,CAAC,CAAC;IACpC,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,MAAM,MAAM,GAAa,EAAE,CAAC;QAC5B,KAAK,IAAI,KAAK,GAAG,GAAG,GAAI,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,EAAE,CAAC;YACxD,MAAM,CAAC,OAAO,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YAC5B,IAAI,KAAK,GAAG,GAAG;gBAAE,MAAM;QACzB,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,OAAO,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC;AACvC,CAAC;AAED,SAAS,GAAG,CAAC,KAAa,EAAE,GAAW;IACrC,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,EAAE,CAAC;IAC7D,OAAO,cAAc,KAAK,UAAU,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,cAAc,KAAK,SAAS,CAAC;AACnF,CAAC"}

package/dist/agent-proxy/otlp-forward.d.ts

@@ -0,0 +1,67 @@
+/**
+ * The local proxy's telemetry lane: the agent host's spans and metrics,
+ * forwarded to the operator's collector with the collector's login, which
+ * the host never holds.
+ *
+ * Why a lane: the host holds nothing the agent may not have (#2016), and a
+ * collector's login is not the agent's; for a tool like Langfuse it is a
+ * key that reads every exported conversation. So the host exports to this
+ * runner, as it reaches every other credentialed service, and the runner
+ * forwards (`server.ts`, the same door, the same host token).
+ *
+ * The host's exporters are OpenTelemetry's stock OTLP/HTTP ones
+ * (`otel-export.ts` `laneSpanExporter`), protobuf, or JSON when the operator
+ * chose `http/json`. The forward sends their body on unchanged through
+ * OpenTelemetry's own export delegates, with a serializer that returns its
+ * input, so the collector's endpoint, per-signal endpoint, path, login, TLS,
+ * compression, timeout and retry follow the standard settings exactly as the
+ * runner's own exporters do. gRPC carries the same protobuf message an HTTP
+ * export does, so a `grpc` operator's collector receives the host's bytes
+ * through the gRPC delegate as they came.
+ *
+ * Answers, in the shape the host's exporter reads: 200 with an empty export
+ * response when the collector took the batch; 503 when it did not, after
+ * the delegate's own retries, so the host's exporter retries once more
+ * inside its own bound; 404 when this runner exports no such signal; 415
+ * for a body in another encoding or compressed; 502, with a fixed sentence,
+ * when the exporter itself could not be built; 413 above
+ * {@link MAX_OTLP_BODY_BYTES}, after the body has been read to its end and
+ * dropped: the exporter streams its body, and a request cut off mid-body
+ * reads to it as a dropped connection, which it retries. A failing collector is logged when it starts
+ * failing and when it recovers, never per batch, and never a body.
+ *
+ * No live turn is required: a batch leaves the host on the span
+ * processor's schedule, often after its turn has settled. The residual is
+ * the proxy's: whoever holds the host's token can also send telemetry,
+ * which lands in the operator's collector beside the real spans; it can
+ * read nothing back and never reaches the login.
+ */
+import type { IncomingMessage, ServerResponse } from "node:http";
+import { type TelemetrySettings, type TelemetrySignal } from "../otel-export.js";
+/**
+ * The largest body the lane accepts: the bound every lane holds the host to
+ * (`relay.ts`), there to protect the runner's memory, not to judge a batch.
+ * A batch the operator raised (`OTEL_BSP_MAX_EXPORT_BATCH_SIZE`) with content
+ * on can pass 8 MiB; dropping it whole here would hide every engine span.
+ */
+export declare const MAX_OTLP_BODY_BYTES: number;
+/** The signal a lane path names, or `undefined` for any other path under the lane. */
+export declare function otlpSignalOf(rest: string): TelemetrySignal | undefined;
+/** The lane: admission, the body, the forward, the answer. Built once per proxy; delegates are built on first use. */
+export declare class OtlpForward {
+    private readonly settings;
+    private readonly delegates;
+    private readonly failing;
+    constructor(settings?: () => TelemetrySettings);
+    /** Serve one export the host's exporter sent; throws a {@link LaneRefusal} for a request the lane does not take. */
+    serve(req: IncomingMessage, res: ServerResponse, signal: TelemetrySignal): Promise<void>;
+    /** Send one encoded export to the collector; resolves to whether it took it. */
+    forward(signal: TelemetrySignal, body: Uint8Array): Promise<{
+        readonly ok: true;
+    } | {
+        readonly ok: false;
+        readonly message: string;
+    }>;
+    /** Flush and close every delegate. */
+    close(): Promise<void>;
+}