@tangle-network/cli-agent-registry 0.0.0-stage → 0.14.0

package/dist/specs-Bbiay_8K.mjs

@@ -0,0 +1,704 @@
+import { a as HARNESSES, r as NATIVE_SESSION_CONTRACTS } from "./native-session-contracts-DWFzgoye.mjs";
+import { n as BACKEND_TYPE } from "./backend-types-CREj4iOY.mjs";
+import { agentProfileJsonSchema, agentProfileSchema } from "@tangle-network/agent-interface";
+import { z } from "zod";
+import { harnessModelSupport } from "@tangle-network/agent-interface/harness-capabilities";
+//#region src/synthetic-router-model.mjs
+/** Synthetic Router model shared with bare-Node release probes. */
+const SYNTHETIC_ROUTER_MODEL = "tangle/canary-echo";
+//#endregion
+//#region src/spec.ts
+/**
+* The Router's synthetic model: the Router answers it itself, with no provider
+* call and no charge (tangle-router `lib/synthetic-models.ts`). It replies with
+* the text of the last "Reply with exactly <text>" instruction it receives, on
+* every wire a harness speaks (chat completions, Messages, Responses). The
+* production canary and the production benchmark's harness legs run it, so a
+* provider outage or a model-list change cannot page them and they cost $0.
+* A key reaches it only when its model list names it.
+*/
+/**
+* Env var name declared with `role` in this spec's extras, or undefined when
+* the spec declares none. At most one extra may carry a given role (enforced
+* by a registry test); the first declaration wins.
+*/
+function cliAgentEnvRoleName(spec, role) {
+	const extras = spec.envVars.extras;
+	if (!extras) return void 0;
+	for (const [name, extra] of Object.entries(extras)) if (extra.role === role) return name;
+}
+/** The wire a harness speaks; harnesses that declare none ride openai-compat. */
+function harnessModelWire(spec) {
+	return spec.modelWire ?? "openai-compat";
+}
+/**
+* Provider names that select the Router's OpenAI-compatible transport. They say
+* how a request travels, not which vendor serves the model, so a model check
+* never reads them as the model's provider.
+*/
+const ROUTER_TRANSPORT_PROVIDERS = new Set(["openai-compat", "tangle-router"]);
+/**
+* The model id a harness and model check reads: a `provider/model` slug as
+* given, a bare id qualified by its tuple's vendor provider, and a bare id
+* alone when the tuple names only the Router transport (agent-interface then
+* resolves its provider from the id's family).
+*/
+function canonicalModelSlug(model) {
+	const tuple = typeof model === "string" ? { model } : model;
+	const id = tuple?.model?.trim();
+	if (!id) return void 0;
+	if (id.includes("/")) return id;
+	const provider = tuple?.provider?.trim();
+	return provider && !ROUTER_TRANSPORT_PROVIDERS.has(provider) ? `${provider}/${id}` : id;
+}
+/**
+* Whether a harness can run a model, read from the one capability table in
+* `@tangle-network/agent-interface`: vendor locks (kimi-code runs Moonshot
+* models) and pairs measured to fail on production. A refused pair is refused
+* where it is chosen (create, run, an authored workflow action) with the
+* returned message, rather than provisioning a box whose first model call
+* fails. An absent model is the harness's own default and is always supported.
+*/
+function harnessModelSupportFor(harness, model, options = {}) {
+	const slug = canonicalModelSlug(model);
+	if (slug === void 0) return {
+		supported: true,
+		model: "",
+		provider: null
+	};
+	if (slug === "tangle/canary-echo") return {
+		supported: true,
+		model: slug,
+		provider: null
+	};
+	return harnessModelSupport(harness, slug, options);
+}
+/**
+* Env var names carrying this harness's claim-deliverable model tuple — the
+* names a warm-claim rebind may deliver to a live sidecar: the model /
+* base-URL / auth-mode roles plus declared extras. Deliberately EXCLUDES the
+* credential-bearing roles: `apiKey` (a BYO key outside egress proxy-swap
+* coverage would put a raw secret in the rebind body — the caller adds the
+* name back only when its transport guarantees a dummy value) and `authFiles`
+* (auth-file payloads are credential content and never ride a rebind).
+*/
+function cliAgentClaimEnvVarNames(spec) {
+	const names = [];
+	if (spec.envVars.model) names.push(spec.envVars.model);
+	if (spec.envVars.baseUrl) names.push(spec.envVars.baseUrl);
+	if (spec.envVars.authMode) names.push(spec.envVars.authMode);
+	if (spec.envVars.extras) names.push(...Object.keys(spec.envVars.extras));
+	return names;
+}
+//#endregion
+//#region src/specs.ts
+z.globalRegistry.add(agentProfileSchema, {
+	id: "AgentProfile",
+	...agentProfileJsonSchema
+});
+/**
+* Env var naming a sandbox's selected backend. Stamped into every create env
+* by the orchestrator (`buildSidecarContainerConfig`); read by the sidecar's
+* backend resolution (`resolveConfiguredBackend`) and by the host-agent's
+* warm-claim env selection to pick which spec's env vars the rebind delivers.
+*/
+const AGENT_BACKEND_ENV_VAR = "AGENT_BACKEND";
+/**
+* The managed-router model-key channel every backend shares: the box-side
+* value is always the salted proxy dummy (`proxy-model-token.<salt>`), which
+* the per-sandbox egress proxy swaps for the real budget-scoped key at the
+* network boundary. The opencode-derived NAME is pinned naming debt: FC
+* shared-snapshot salt recovery, resume re-key, and the egress proxy swap map
+* all key on this literal, so renaming it bricks managed-model auth
+* fleet-wide. Kept equal to the opencode spec's own apiKey declaration
+* (enforced by a registry test).
+*/
+const MANAGED_MODEL_KEY_ENV_VAR = "OPENCODE_MODEL_API_KEY";
+/**
+* Caller-owned auth by reference: the NAME of the box env var (a stored
+* secret) that holds the provider's key. The orchestrator sets it only when it
+* injected no managed key; the sidecar composes the named provider on that
+* credential. A variable name, never a secret, so it may ride every channel a
+* create's env takes to the guest — the kernel cmdline and a warm-claim rebind.
+*/
+const MANAGED_MODEL_KEY_NAME_ENV_VAR = "OPENCODE_MODEL_API_KEY_ENV";
+/**
+* Env var names declared across ALL registered harness specs, grouped by
+* their `CliAgentEnvVars` role. The ONE derivation every allowlist that must
+* track "what env names can a backend legitimately use" builds from — the
+* FC kernel-cmdline whitelist, the egress secret handling, the sidecar
+* terminal scrub, the SSH env forward, and the rebind union below. Deriving
+* from roles (not one flat set) lets each consumer apply its own security
+* policy per role: apiKey and oauthToken names are secret channels.
+* Native subscription tokens stay out of warm-claim delivery.
+*/
+function cliAgentEnvVarNamesByRole() {
+	const apiKey = /* @__PURE__ */ new Set();
+	const oauthToken = /* @__PURE__ */ new Set();
+	const model = /* @__PURE__ */ new Set();
+	const baseUrl = /* @__PURE__ */ new Set();
+	const authMode = /* @__PURE__ */ new Set();
+	const authFiles = /* @__PURE__ */ new Set();
+	const extras = /* @__PURE__ */ new Set();
+	for (const spec of CLI_AGENT_SPECS) {
+		if (spec.envVars.apiKey) apiKey.add(spec.envVars.apiKey);
+		if (spec.envVars.oauthToken) oauthToken.add(spec.envVars.oauthToken);
+		if (spec.envVars.model) model.add(spec.envVars.model);
+		if (spec.envVars.baseUrl) baseUrl.add(spec.envVars.baseUrl);
+		if (spec.envVars.authMode) authMode.add(spec.envVars.authMode);
+		if (spec.envVars.authFiles) authFiles.add(spec.envVars.authFiles);
+		for (const name of Object.keys(spec.envVars.extras ?? {})) extras.add(name);
+	}
+	return {
+		apiKey,
+		oauthToken,
+		model,
+		baseUrl,
+		authMode,
+		authFiles,
+		extras
+	};
+}
+/**
+* Union of every spec's `hostPassthroughEnvVars` — the operator tuning names
+* a host process (orchestrator system env, host-agent process env) may
+* forward into containers. Request/caller env always keeps precedence at the
+* host-agent boundary; the orchestrator system-env channel stays
+* operator-authoritative. Replaces the old `OPENCODE_*` prefix forward,
+* which leaked ANY stray host var with that prefix (model tuple and key
+* included) into every tenant.
+*/
+function cliAgentHostPassthroughEnvVarNames() {
+	const names = /* @__PURE__ */ new Set();
+	for (const spec of CLI_AGENT_SPECS) for (const name of spec.hostPassthroughEnvVars ?? []) names.add(name);
+	return names;
+}
+/**
+* Union of every env var name a warm-claim rebind may deliver, across all
+* registered harnesses. The ONE source both sides of the rebind derive from:
+* the host-agent selects its delivery from it and the sidecar rebind route
+* carves it out of the loader-control rejection, so the two can never drift
+* into "host delivers a name the sidecar 400s" — which silently cold-paths
+* every warm claim of that backend. Includes each spec's apiKey name because
+* acceptance is a superset of delivery: the HOST decides which key names are
+* safe to send (egress proxy-swap-covered only), while the sidecar must not
+* reject a name a valid host may deliver.
+*/
+function claimDeliverableEnvVarNames() {
+	const roles = cliAgentEnvVarNamesByRole();
+	return new Set([
+		AGENT_BACKEND_ENV_VAR,
+		MANAGED_MODEL_KEY_ENV_VAR,
+		MANAGED_MODEL_KEY_NAME_ENV_VAR,
+		...roles.model,
+		...roles.baseUrl,
+		...roles.authMode,
+		...roles.extras,
+		...roles.apiKey
+	]);
+}
+const CLI_AGENT_SPECS = [
+	{
+		name: BACKEND_TYPE.OPENCODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS.opencode,
+		messageStorageDir: ".opencode",
+		cliDirLayout: {
+			sessionData: ["snapshot/**"],
+			configAllow: ["bin/**"]
+		},
+		displayName: "OpenCode Agent",
+		description: "OpenCode CLI coding agent with native sessions, profiles, tools, and MCP.",
+		envVars: HARNESSES["opencode"].config.envVars,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: true,
+			multimodal: true,
+			contextWindow: 2e5,
+			mcp: true,
+			runtimeAttachments: { mcp: true },
+			sessions: true,
+			configurable: true,
+			interactions: [
+				"permission",
+				"question",
+				"plan"
+			],
+			imageInput: true
+		},
+		hostPassthroughEnvVars: [
+			"OPENCODE_MODEL_MODE",
+			"OPENCODE_CODEX_PLUGIN_VERSION",
+			"OPENCODE_EXPERIMENTAL_NATIVE_LLM"
+		],
+		interactiveSeededPrompt: true,
+		builtinTools: [
+			{
+				id: "apply_patch",
+				name: "Apply Patch",
+				description: "Apply a unified-diff patch to files"
+			},
+			{
+				id: "bash",
+				name: "Bash",
+				description: "Execute bash commands"
+			},
+			{
+				id: "codesearch",
+				name: "Code Search",
+				description: "Search code across the workspace"
+			},
+			{
+				id: "edit",
+				name: "Edit",
+				description: "Edit a file with string replacement"
+			},
+			{
+				id: "glob",
+				name: "Glob",
+				description: "Find files by glob pattern"
+			},
+			{
+				id: "grep",
+				name: "Grep",
+				description: "Search file contents using regular expressions"
+			},
+			{
+				id: "question",
+				name: "Question",
+				description: "Ask the user a question and wait for the answer"
+			},
+			{
+				id: "read",
+				name: "Read",
+				description: "Read file contents"
+			},
+			{
+				id: "skill",
+				name: "Skill",
+				description: "Invoke an installed skill"
+			},
+			{
+				id: "task",
+				name: "Task",
+				description: "Delegate a task to a subagent"
+			},
+			{
+				id: "todowrite",
+				name: "Todo Write",
+				description: "Maintain the turn's todo list"
+			},
+			{
+				id: "webfetch",
+				name: "Webfetch",
+				description: "Fetch and read web content"
+			},
+			{
+				id: "websearch",
+				name: "Websearch",
+				description: "Search the web"
+			},
+			{
+				id: "write",
+				name: "Write",
+				description: "Write content to a file"
+			}
+		],
+		runtime: HARNESSES["opencode"].lifecycle.runtime,
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: false
+	},
+	{
+		name: BACKEND_TYPE.CLAUDE_CODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS["claude-code"],
+		runtime: HARNESSES["claude-code"].lifecycle.runtime,
+		messageStorageDir: ".claude-code",
+		cliDirLayout: {
+			sessionData: [
+				"plans/**",
+				"file-history/**",
+				"debug/**",
+				"projects/*/*/subagents/**/*.meta.json",
+				"projects/*/*/tool-results/**"
+			],
+			configAllow: [
+				".last-cleanup",
+				"policy-limits.json*",
+				"remote-settings.json",
+				"skills/**"
+			],
+			credential: [
+				"backups/**",
+				"session-env/**",
+				"shell-snapshots/**",
+				"sessions/**"
+			]
+		},
+		displayName: "Claude Code",
+		description: "Anthropic Claude Code CLI-based agent backend.",
+		envVars: HARNESSES["claude-code"].config.envVars,
+		modelWire: HARNESSES["claude-code"].config.modelWire,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: true,
+			multimodal: true,
+			contextWindow: 2e5,
+			mcp: true,
+			runtimeAttachments: { mcp: true },
+			sessions: true,
+			configurable: true,
+			interactions: [
+				"permission",
+				"question",
+				"plan"
+			],
+			imageInput: true
+		},
+		securityCapabilities: [
+			"SYS_PTRACE",
+			"SETUID",
+			"SETGID",
+			"DAC_OVERRIDE",
+			"CHOWN",
+			"FOWNER"
+		],
+		interactiveSeededPrompt: true,
+		cliAuthHome: {
+			kind: "agent-home",
+			uid: 1e3,
+			home: "/home/agent"
+		},
+		hasCliAuth: true,
+		byoOAuth: true
+	},
+	{
+		name: BACKEND_TYPE.KIMI_CODE,
+		nativeSession: NATIVE_SESSION_CONTRACTS["kimi-code"],
+		runtime: HARNESSES["kimi-code"].lifecycle.runtime,
+		messageStorageDir: ".kimi-code",
+		displayName: "Kimi Code",
+		description: "Moonshot AI Kimi Code CLI — headless non-interactive mode via `kimi --print --output-format stream-json --prompt ...`. Defaults to OAuth (Kimi Code subscription) with credentials materialized from the host-managed ~/.kimi/credentials/kimi-code.json; falls back to MOONSHOT_API_KEY when an apiKey is supplied.",
+		envVars: HARNESSES["kimi-code"].config.envVars,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: true,
+			multimodal: true,
+			contextWindow: 262144,
+			mcp: false,
+			runtimeAttachments: { mcp: true },
+			sessions: true,
+			configurable: true,
+			interactions: [],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.CODEX,
+		nativeSession: NATIVE_SESSION_CONTRACTS.codex,
+		messageStorageDir: ".codex",
+		cliDirLayout: { sessionData: [
+			"logs_*.sqlite*",
+			"goals_*.sqlite*",
+			"memories_*.sqlite*"
+		] },
+		displayName: "Codex",
+		description: "OpenAI Codex CLI-based agent backend.",
+		envVars: HARNESSES["codex"].config.envVars,
+		modelWire: HARNESSES["codex"].config.modelWire,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: false,
+			multimodal: true,
+			contextWindow: 128e3,
+			mcp: false,
+			sessions: true,
+			configurable: false,
+			runtimeAttachments: { mcp: true },
+			interactions: [
+				"permission",
+				"question",
+				"plan"
+			],
+			imageInput: true
+		},
+		interactiveSeededPrompt: true,
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true,
+		byoOAuth: true
+	},
+	{
+		name: BACKEND_TYPE.AMP,
+		nativeSession: NATIVE_SESSION_CONTRACTS.amp,
+		messageStorageDir: ".amp-sessions",
+		displayName: "AMP (Sourcegraph)",
+		description: "Sourcegraph AMP CLI-based agent backend.",
+		callerCredentialOnly: true,
+		envVars: HARNESSES["amp"].config.envVars,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: false,
+			multimodal: false,
+			contextWindow: 128e3,
+			mcp: false,
+			sessions: true,
+			configurable: false,
+			interactions: [],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.FACTORY_DROIDS,
+		nativeSession: NATIVE_SESSION_CONTRACTS["factory-droids"],
+		messageStorageDir: ".factory-droids",
+		displayName: "Factory Droids",
+		description: "Factory Droids CLI-based agent backend. A managed box runs its Tangle Router model as a droid custom model; a caller's FACTORY_API_KEY runs on the caller's Factory account.",
+		envVars: HARNESSES["factory-droids"].config.envVars,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: false,
+			multimodal: false,
+			contextWindow: 128e3,
+			mcp: false,
+			sessions: true,
+			configurable: false,
+			interactions: ["question"],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.PI,
+		nativeSession: NATIVE_SESSION_CONTRACTS.pi,
+		runtime: HARNESSES["pi"].lifecycle.runtime,
+		messageStorageDir: ".pi/agent",
+		displayName: "Pi",
+		description: "Pi CLI backend. Managed OpenAI-compatible model tuples use one private runtime HOME models.json and the shared Pi model schema.",
+		envVars: HARNESSES["pi"].config.envVars,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: true,
+			multimodal: false,
+			contextWindow: 128e3,
+			mcp: true,
+			sessions: true,
+			configurable: true,
+			interactions: ["permission"],
+			runtimeAttachments: { mcp: true },
+			imageInput: false
+		},
+		interactiveSeededPrompt: true,
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.PRIME,
+		nativeSession: NATIVE_SESSION_CONTRACTS.prime,
+		messageStorageDir: ".prime-provider",
+		displayName: "Prime Agent (PrimeIntellect)",
+		description: "PrimeIntellect-ai/prime-agent — IPython-first coding agent (pi hard fork, fork line 0.7.x) driven over its native ACP mode. Model tuple travels via backend.model into a per-session materialized models.json, never env; the adapter pins PRIME_AGENT_CODING_AGENT_DIR to an isolated per-session agent dir (fail-closed harness-state isolation).",
+		envVars: HARNESSES["prime"].config.envVars,
+		hostPassthroughEnvVars: ["PRIME_AGENT_INSTALL_UV", "PRIME_AGENT_KERNEL_PYTHON"],
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: true,
+			multimodal: true,
+			contextWindow: 128e3,
+			mcp: false,
+			sessions: true,
+			configurable: true,
+			interactions: [],
+			imageInput: true
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: false
+	},
+	{
+		name: BACKEND_TYPE.HERMES,
+		nativeSession: NATIVE_SESSION_CONTRACTS.hermes,
+		messageStorageDir: ".hermes-agent",
+		cliDirLayout: {
+			sessionData: ["cache/spillover/**", "cache/delegation/**"],
+			configAllow: ["config.yaml"]
+		},
+		displayName: "Hermes Agent (Nous Research)",
+		description: "Open-source self-improving CLI agent. Persistent memory and skills live in $HERMES_HOME (pinned to the per-session workspace mount, not the read-only in-box $HOME) across same-tenant snapshot resumes — the learning loop is the differentiator. Provider-pluggable; defaults to OpenRouter via Tangle Router.",
+		envVars: HARNESSES["hermes"].config.envVars,
+		capabilities: {
+			streaming: false,
+			toolUse: true,
+			reasoning: false,
+			multimodal: false,
+			contextWindow: 2e5,
+			mcp: true,
+			sessions: true,
+			configurable: true,
+			interactions: [],
+			imageInput: true
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.FORGE,
+		nativeSession: NATIVE_SESSION_CONTRACTS.forge,
+		messageStorageDir: ".forge-agent",
+		displayName: "Forge (forgecode.dev)",
+		description: "Rust-built multi-provider coding agent from tailcallhq/forgecode. Speaks anthropic/openai/openrouter/gemini/deepseek/kimi + local providers (ollama, lm_studio, llama_cpp). Credentials live in ~/.forge/.credentials.json, materialized via the standard authFiles pipeline — no interactive `forge provider login` required.",
+		envVars: HARNESSES["forge"].config.envVars,
+		capabilities: {
+			streaming: false,
+			toolUse: true,
+			reasoning: true,
+			multimodal: false,
+			contextWindow: 2e5,
+			mcp: true,
+			sessions: true,
+			configurable: true,
+			interactions: [],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.OPENCLAW,
+		nativeSession: NATIVE_SESSION_CONTRACTS.openclaw,
+		messageStorageDir: ".openclaw-agent",
+		cliDirLayout: { configAllow: ["openclaw.json"] },
+		displayName: "OpenClaw (Orchestrator)",
+		description: "Orchestrator-tier CLI agent that dispatches to underlying coding-agent CLIs (claude-cli, codex-cli, gemini-cli) via its built-in cliBackends plugin model. Use this when you want one entry point that intelligently routes tasks to the right coding harness.",
+		envVars: HARNESSES["openclaw"].config.envVars,
+		capabilities: {
+			streaming: false,
+			toolUse: true,
+			reasoning: true,
+			multimodal: true,
+			contextWindow: 2e5,
+			mcp: true,
+			sessions: true,
+			configurable: true,
+			interactions: [],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.NANOCLAW,
+		nativeSession: null,
+		messageStorageDir: ".nanoclaw-agent",
+		displayName: "NanoClaw",
+		description: "NanoClaw local socket bridge. Requires a running NanoClaw install and uses its `pnpm run chat` CLI channel; the adapter does not manage NanoClaw's Docker/service lifecycle.",
+		envVars: HARNESSES["nanoclaw"].config.envVars,
+		capabilities: {
+			streaming: false,
+			toolUse: true,
+			reasoning: true,
+			multimodal: false,
+			contextWindow: 2e5,
+			mcp: false,
+			sessions: true,
+			configurable: true,
+			interactions: [],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: false
+	},
+	{
+		name: BACKEND_TYPE.ACP,
+		nativeSession: NATIVE_SESSION_CONTRACTS.acp,
+		messageStorageDir: ".acp-agent",
+		displayName: "ACP Bridge (multi-agent)",
+		description: "Generic Agent Client Protocol bridge — fronts any ACP-compliant agent binary (claude-agent-acp, codex-acp, gemini, openclaw acp, hermes acp). Pick the backing agent via config.subAgent; hermes runs on the box's Router model when none is named. One TypeScript adapter, many supported coding harnesses.",
+		envVars: HARNESSES["acp"].config.envVars,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: true,
+			multimodal: false,
+			contextWindow: 2e5,
+			mcp: false,
+			sessions: true,
+			configurable: true,
+			interactions: ["permission"],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: true
+	},
+	{
+		name: BACKEND_TYPE.CURSOR,
+		nativeSession: null,
+		messageStorageDir: ".cursor-sdk-sessions",
+		displayName: "Cursor Agent SDK",
+		description: "Cursor Agent SDK backend. Runs Cursor's local agent against the sandbox workspace via @cursor/sdk, using CURSOR_API_KEY or backend.model.apiKey for authentication.",
+		callerCredentialOnly: true,
+		egressHosts: ["api2.cursor.sh", "api.cursor.com"],
+		envVars: HARNESSES["cursor"].config.envVars,
+		capabilities: {
+			streaming: true,
+			toolUse: true,
+			reasoning: true,
+			multimodal: true,
+			contextWindow: 2e5,
+			mcp: true,
+			sessions: true,
+			configurable: true,
+			interactions: [],
+			imageInput: true
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: false
+	},
+	{
+		name: BACKEND_TYPE.CLI_BASE,
+		nativeSession: null,
+		displayName: "CLI Base (no agent)",
+		description: "Bare sandbox without an AI agent backend. Use when you want the workspace, tools, and SSH access but no LLM dispatch.",
+		envVars: HARNESSES["cli-base"].config.envVars,
+		capabilities: {
+			streaming: false,
+			toolUse: false,
+			reasoning: false,
+			multimodal: false,
+			contextWindow: 0,
+			mcp: false,
+			sessions: false,
+			configurable: false,
+			interactions: [],
+			imageInput: false
+		},
+		cliAuthHome: { kind: "inherit-home" },
+		hasCliAuth: false
+	}
+];
+function getSpec(name) {
+	return CLI_AGENT_SPECS.find((spec) => spec.name === name);
+}
+/**
+* The directory, relative to a session's storage path, where a backend's
+* message log lives: the one value adapters, the sidecar and the parked
+* export read. Throws for a backend whose spec names none.
+*/
+function messageStorageDirOf(name) {
+	const dir = getSpec(name)?.messageStorageDir;
+	if (!dir) throw new Error(`No message storage directory for backend ${name}`);
+	return dir;
+}
+//#endregion
+export { agentProfileSchema as a, cliAgentHostPassthroughEnvVarNames as c, canonicalModelSlug as d, cliAgentClaimEnvVarNames as f, SYNTHETIC_ROUTER_MODEL as g, harnessModelWire as h, MANAGED_MODEL_KEY_NAME_ENV_VAR as i, getSpec as l, harnessModelSupportFor as m, CLI_AGENT_SPECS as n, claimDeliverableEnvVarNames as o, cliAgentEnvRoleName as p, MANAGED_MODEL_KEY_ENV_VAR as r, cliAgentEnvVarNamesByRole as s, AGENT_BACKEND_ENV_VAR as t, messageStorageDirOf as u };
+
+//# sourceMappingURL=specs-Bbiay_8K.mjs.map

package/dist/specs.d.mts

@@ -0,0 +1,3 @@
+import { a as isBackendType, i as backendTypeSchema, n as BACKEND_TYPE, o as parseBackendType, r as BackendType, t as ALL_BACKEND_TYPES } from "./backend-types-CJH-wHS3.mjs";
+import { D as harnessModelSupportFor, O as harnessModelWire, T as cliAgentClaimEnvVarNames, _ as CliAgentModelWire, a as agentProfileSchema, c as cliAgentHostPassthroughEnvVarNames, i as MANAGED_MODEL_KEY_NAME_ENV_VAR, l as getSpec, n as CLI_AGENT_SPECS, o as claimDeliverableEnvVarNames, r as MANAGED_MODEL_KEY_ENV_VAR, s as cliAgentEnvVarNamesByRole, t as AGENT_BACKEND_ENV_VAR, u as messageStorageDirOf, w as canonicalModelSlug, y as CliAgentSpec } from "./specs-BSELpX1h.mjs";
+export { AGENT_BACKEND_ENV_VAR, ALL_BACKEND_TYPES, BACKEND_TYPE, BackendType, CLI_AGENT_SPECS, CliAgentModelWire, CliAgentSpec, MANAGED_MODEL_KEY_ENV_VAR, MANAGED_MODEL_KEY_NAME_ENV_VAR, agentProfileSchema, backendTypeSchema, canonicalModelSlug, claimDeliverableEnvVarNames, cliAgentClaimEnvVarNames, cliAgentEnvVarNamesByRole, cliAgentHostPassthroughEnvVarNames, getSpec, harnessModelSupportFor, harnessModelWire, isBackendType, messageStorageDirOf, parseBackendType };