npm - @the-open-engine/zeroshot - Versions diffs - 6.23.0 → 6.24.0 - Mend

@the-open-engine/zeroshot 6.23.0 → 6.24.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (18) hide show

package/docker/zeroshot-cluster/Dockerfile +7 -0
package/lib/agent-cli-provider/omp-release.d.ts +3 -0
package/lib/agent-cli-provider/omp-release.d.ts.map +1 -1
package/lib/agent-cli-provider/omp-release.js +20 -1
package/lib/agent-cli-provider/omp-release.js.map +1 -1
package/lib/agent-cli-provider/provider-registry.d.ts +19 -7
package/lib/agent-cli-provider/provider-registry.d.ts.map +1 -1
package/lib/agent-cli-provider/provider-registry.js +49 -8
package/lib/agent-cli-provider/provider-registry.js.map +1 -1
package/lib/docker-config.js +122 -5
package/package.json +2 -2
package/src/agent/agent-lifecycle.js +12 -1
package/src/agent/provider-session.js +1 -0
package/src/agent-cli-provider/omp-release.ts +26 -0
package/src/agent-cli-provider/provider-registry.ts +95 -19
package/src/isolation-manager.js +535 -89
package/src/orchestrator.js +11 -1
package/src/preflight.js +15 -2

package/docker/zeroshot-cluster/Dockerfile CHANGED Viewed

@@ -159,5 +159,12 @@ RUN if [ -n "$PROVIDER_INSTALL" ]; then sh -c "$PROVIDER_INSTALL"; fi
 # Switch to non-root user (required for --dangerously-skip-permissions)
 USER node
+# Create a provider's config/overlay roots as the non-root container user (owner-only), so a
+# provider whose credential surface is env/broker-only (no host mount) still gets a writable,
+# private state directory. Registry-fed via PROVIDER_CONFIG_ROOTS (docker.configRoots); no
+# provider name appears in this Dockerfile.
+ARG PROVIDER_CONFIG_ROOTS=""
+RUN if [ -n "$PROVIDER_CONFIG_ROOTS" ]; then for d in $PROVIDER_CONFIG_ROOTS; do mkdir -p "$d" && chmod 700 "$d"; done; fi
 # Default command (overridden by vibe)
 CMD ["bash"]

package/lib/agent-cli-provider/omp-release.d.ts CHANGED Viewed

@@ -14,4 +14,7 @@ export interface OmpReleaseAsset {
 export declare const OMP_RELEASE_ASSETS: readonly OmpReleaseAsset[];
 export declare function findOmpReleaseAsset(platform: string): OmpReleaseAsset | undefined;
 export declare function ompReleaseAssetDownloadUrl(asset: OmpReleaseAsset): string;
+export declare const OMP_DOCKER_PLATFORM: "linux/amd64";
+export declare const OMP_DOCKER_RELEASE_PLATFORM: "linux-x64";
+export declare const OMP_DOCKER_INSTALL_COMMAND: string;
 //# sourceMappingURL=omp-release.d.ts.map

package/lib/agent-cli-provider/omp-release.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"omp-release.d.ts","sourceRoot":"","sources":["../../src/agent-cli-provider/omp-release.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,EAAG,QAAiB,CAAC;AACvD,eAAO,MAAM,gBAAgB,EAAG,2BAAoC,CAAC;AACrE,eAAO,MAAM,eAAe,EAAG,KAAc,CAAC;AAoB9C,eAAO,MAAM,mBAAmB,mDACwC,CAAC;AACzE,eAAO,MAAM,qBAAqB,EAAG,aAAsB,CAAC;AAC5D,eAAO,MAAM,eAAe,2IACgH,CAAC;AAE7I,eAAO,MAAM,6BAA6B,iEACkD,CAAC;AAE7F,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,YAAY,GACZ,aAAa,GACb,kBAAkB,GAClB,gBAAgB,GAChB,WAAW,CAAC;AAEhB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAGD,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EA+BxD,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEjF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAEzE"}
1	+ {"version":3,"file":"omp-release.d.ts","sourceRoot":"","sources":["../../src/agent-cli-provider/omp-release.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,qBAAqB,EAAG,QAAiB,CAAC;AACvD,eAAO,MAAM,gBAAgB,EAAG,2BAAoC,CAAC;AACrE,eAAO,MAAM,eAAe,EAAG,KAAc,CAAC;AAoB9C,eAAO,MAAM,mBAAmB,mDACwC,CAAC;AACzE,eAAO,MAAM,qBAAqB,EAAG,aAAsB,CAAC;AAC5D,eAAO,MAAM,eAAe,2IACgH,CAAC;AAE7I,eAAO,MAAM,6BAA6B,iEACkD,CAAC;AAE7F,MAAM,MAAM,kBAAkB,GAC1B,cAAc,GACd,YAAY,GACZ,aAAa,GACb,kBAAkB,GAClB,gBAAgB,GAChB,WAAW,CAAC;AAEhB,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;CACzB;AAGD,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EA+BxD,CAAC;AAEF,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAEjF;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,eAAe,GAAG,MAAM,CAEzE;AAKD,eAAO,MAAM,mBAAmB,EAAG,aAAsB,CAAC;AAC1D,eAAO,MAAM,2BAA2B,aAAoD,CAAC;AAe7F,eAAO,MAAM,0BAA0B,EAAE,MAKsD,CAAC"}

package/lib/agent-cli-provider/omp-release.js CHANGED Viewed

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.OMP_RELEASE_ASSETS = exports.OMP_RELEASE_DOWNLOAD_BASE_URL = exports.OMP_REMEDIATION = exports.OMP_AUTH_INSTRUCTIONS = exports.OMP_INSTALL_COMMAND = exports.OMP_BINARY_NAME = exports.OMP_PACKAGE_NAME = exports.OMP_SUPPORTED_VERSION = void 0;
+exports.OMP_DOCKER_INSTALL_COMMAND = exports.OMP_DOCKER_RELEASE_PLATFORM = exports.OMP_DOCKER_PLATFORM = exports.OMP_RELEASE_ASSETS = exports.OMP_RELEASE_DOWNLOAD_BASE_URL = exports.OMP_REMEDIATION = exports.OMP_AUTH_INSTRUCTIONS = exports.OMP_INSTALL_COMMAND = exports.OMP_BINARY_NAME = exports.OMP_PACKAGE_NAME = exports.OMP_SUPPORTED_VERSION = void 0;
 exports.findOmpReleaseAsset = findOmpReleaseAsset;
 exports.ompReleaseAssetDownloadUrl = ompReleaseAssetDownloadUrl;
 exports.OMP_SUPPORTED_VERSION = '17.2.1';
@@ -67,4 +67,23 @@ function findOmpReleaseAsset(platform) {
 function ompReleaseAssetDownloadUrl(asset) {
     return `${exports.OMP_RELEASE_DOWNLOAD_BASE_URL}/${asset.name}`;
 }
+// Docker isolation runs the cluster image as linux/amd64 only (see AGENTS.md OMP Docker
+// section); the base image's AWS/Terraform/kubectl/Helm/Infracost/TFLint/tfsec layers are
+// hard-coded x86-64 assets, so this cannot yet claim native arm64.
+exports.OMP_DOCKER_PLATFORM = 'linux/amd64';
+exports.OMP_DOCKER_RELEASE_PLATFORM = 'linux-x64';
+const OMP_DOCKER_RELEASE_ASSET = findOmpReleaseAsset(exports.OMP_DOCKER_RELEASE_PLATFORM);
+if (!OMP_DOCKER_RELEASE_ASSET) {
+    throw new Error(`No OMP release asset found for Docker platform "${exports.OMP_DOCKER_RELEASE_PLATFORM}"`);
+}
+const OMP_DOCKER_RELEASE_URL = ompReleaseAssetDownloadUrl(OMP_DOCKER_RELEASE_ASSET);
+const OMP_DOCKER_RELEASE_SHA256 = OMP_DOCKER_RELEASE_ASSET.sha256;
+// Digest-verified install for the Docker image variant only. Downloads the pinned release asset,
+// verifies its SHA-256 before install, and asserts `omp --version` matches exactly — never
+// `latest`, never trusting the tag URL alone.
+exports.OMP_DOCKER_INSTALL_COMMAND = `set -eu; curl -fsSL --retry 3 -o /tmp/omp "${OMP_DOCKER_RELEASE_URL}"; ` +
+    `printf '%s  /tmp/omp\\n' '${OMP_DOCKER_RELEASE_SHA256}' | sha256sum -c -; ` +
+    `install -m 0755 /tmp/omp /usr/local/bin/omp; rm -f /tmp/omp; ` +
+    `v="$(omp --version 2>&1 | head -n1 | tr -dc '0-9.')"; ` +
+    `[ "$v" = "${exports.OMP_SUPPORTED_VERSION}" ] || { echo "omp --version mismatch: $v" >&2; exit 1; }`;
 //# sourceMappingURL=omp-release.js.map

package/lib/agent-cli-provider/omp-release.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"omp-release.js","sourceRoot":"","sources":["../../src/agent-cli-provider/omp-release.ts"],"names":[],"mappings":";;;AA+EA,kDAEC;AAED,gEAEC;AArFY,QAAA,qBAAqB,GAAG,QAAiB,CAAC;AAC1C,QAAA,gBAAgB,GAAG,2BAAoC,CAAC;AACxD,QAAA,eAAe,GAAG,KAAc,CAAC;AAE9C,8FAA8F;AAC9F,0FAA0F;AAC1F,6FAA6F;AAC7F,gGAAgG;AAChG,8FAA8F;AAC9F,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,2FAA2F;AAC3F,8DAA8D;AAC9D,uEAAuE;AACvE,6FAA6F;AAC7F,kGAAkG;AAClG,mGAAmG;AACnG,8FAA8F;AAC9F,+FAA+F;AAC/F,iGAAiG;AACjG,oBAAoB;AACP,QAAA,mBAAmB,GAC9B,kBAAkB,wBAAgB,IAAI,6BAAqB,EAAW,CAAC;AAC5D,QAAA,qBAAqB,GAAG,aAAsB,CAAC;AAC/C,QAAA,eAAe,GAC1B,yCAAyC,2BAAmB,2CAA2C,6BAAqB,KAAc,CAAC;AAEhI,QAAA,6BAA6B,GACxC,0DAA0D,6BAAqB,EAAW,CAAC;AAgB7F,uGAAuG;AAC1F,QAAA,kBAAkB,GAA+B;IAC5D;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,kBAAkB;QAC5B,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,kEAAkE;KAC3E;CACF,CAAC;AAEF,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,OAAO,0BAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,SAAgB,0BAA0B,CAAC,KAAsB;IAC/D,OAAO,GAAG,qCAA6B,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC"}
1	+ {"version":3,"file":"omp-release.js","sourceRoot":"","sources":["../../src/agent-cli-provider/omp-release.ts"],"names":[],"mappings":";;;AA+EA,kDAEC;AAED,gEAEC;AArFY,QAAA,qBAAqB,GAAG,QAAiB,CAAC;AAC1C,QAAA,gBAAgB,GAAG,2BAAoC,CAAC;AACxD,QAAA,eAAe,GAAG,KAAc,CAAC;AAE9C,8FAA8F;AAC9F,0FAA0F;AAC1F,6FAA6F;AAC7F,gGAAgG;AAChG,8FAA8F;AAC9F,EAAE;AACF,mGAAmG;AACnG,kGAAkG;AAClG,2FAA2F;AAC3F,8DAA8D;AAC9D,uEAAuE;AACvE,6FAA6F;AAC7F,kGAAkG;AAClG,mGAAmG;AACnG,8FAA8F;AAC9F,+FAA+F;AAC/F,iGAAiG;AACjG,oBAAoB;AACP,QAAA,mBAAmB,GAC9B,kBAAkB,wBAAgB,IAAI,6BAAqB,EAAW,CAAC;AAC5D,QAAA,qBAAqB,GAAG,aAAsB,CAAC;AAC/C,QAAA,eAAe,GAC1B,yCAAyC,2BAAmB,2CAA2C,6BAAqB,KAAc,CAAC;AAEhI,QAAA,6BAA6B,GACxC,0DAA0D,6BAAqB,EAAW,CAAC;AAgB7F,uGAAuG;AAC1F,QAAA,kBAAkB,GAA+B;IAC5D;QACE,IAAI,EAAE,kBAAkB;QACxB,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,gBAAgB;QACtB,QAAQ,EAAE,YAAY;QACtB,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,iBAAiB;QACvB,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,sBAAsB;QAC5B,QAAQ,EAAE,kBAAkB;QAC5B,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,oBAAoB;QAC1B,QAAQ,EAAE,gBAAgB;QAC1B,MAAM,EAAE,kEAAkE;KAC3E;IACD;QACE,IAAI,EAAE,eAAe;QACrB,QAAQ,EAAE,WAAW;QACrB,MAAM,EAAE,kEAAkE;KAC3E;CACF,CAAC;AAEF,SAAgB,mBAAmB,CAAC,QAAgB;IAClD,OAAO,0BAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC;AACzE,CAAC;AAED,SAAgB,0BAA0B,CAAC,KAAsB;IAC/D,OAAO,GAAG,qCAA6B,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC;AAC1D,CAAC;AAED,wFAAwF;AACxF,0FAA0F;AAC1F,mEAAmE;AACtD,QAAA,mBAAmB,GAAG,aAAsB,CAAC;AAC7C,QAAA,2BAA2B,GAAG,WAAiD,CAAC;AAE7F,MAAM,wBAAwB,GAAG,mBAAmB,CAAC,mCAA2B,CAAC,CAAC;AAClF,IAAI,CAAC,wBAAwB,EAAE,CAAC;IAC9B,MAAM,IAAI,KAAK,CACb,mDAAmD,mCAA2B,GAAG,CAClF,CAAC;AACJ,CAAC;AAED,MAAM,sBAAsB,GAAG,0BAA0B,CAAC,wBAAwB,CAAC,CAAC;AACpF,MAAM,yBAAyB,GAAG,wBAAwB,CAAC,MAAM,CAAC;AAElE,iGAAiG;AACjG,2FAA2F;AAC3F,8CAA8C;AACjC,QAAA,0BAA0B,GACrC,8CAA8C,sBAAsB,KAAK;IACzE,6BAA6B,yBAAyB,sBAAsB;IAC5E,+DAA+D;IAC/D,wDAAwD;IACxD,aAAa,6BAAqB,2DAA2D,CAAC"}

package/lib/agent-cli-provider/provider-registry.d.ts CHANGED Viewed

@@ -42,11 +42,19 @@ export interface ProviderDockerMountPreset {
     readonly container: string;
     readonly readonly: boolean;
 }
+export interface ProviderDockerEnvAuth {
+    readonly requireOneOf: readonly string[];
+    readonly requireTogether?: readonly (readonly string[])[];
+    readonly requireUrl?: readonly string[];
+}
 export interface ProviderDockerMetadata {
-    readonly mount: ProviderDockerMountPreset;
+    readonly mount?: ProviderDockerMountPreset;
     readonly envPassthrough: readonly string[];
     readonly credentialInMount?: boolean;
     readonly install?: string;
+    readonly platform?: string;
+    readonly configRoots?: readonly string[];
+    readonly envAuth?: ProviderDockerEnvAuth;
 }
 interface ProviderRegistryEntryBase {
     readonly id: string;
@@ -391,7 +399,7 @@ export declare const providerRegistry: readonly [{
     readonly settingsFields: readonly [];
     readonly availabilityProbe: "help-or-version";
     readonly capabilities: {
-        readonly dockerIsolation: false;
+        readonly dockerIsolation: true;
         readonly worktreeIsolation: true;
         readonly mcpServers: false;
         readonly jsonSchema: false;
@@ -406,12 +414,16 @@ export declare const providerRegistry: readonly [{
         readonly setupHeading: "OMP Setup";
     };
     readonly docker: {
-        readonly mount: {
-            readonly host: "~/.omp";
-            readonly container: "$HOME/.omp";
-            readonly readonly: true;
+        readonly platform: "linux/amd64";
+        readonly install: string;
+        readonly configRoots: readonly ["$HOME/.omp"];
+        readonly credentialInMount: false;
+        readonly envPassthrough: readonly ["ANTHROPIC_API_KEY", "GEMINI_API_KEY", "OMP_AUTH_BROKER_TOKEN", "OMP_AUTH_BROKER_URL", "OPENAI_API_KEY"];
+        readonly envAuth: {
+            readonly requireOneOf: readonly ["ANTHROPIC_API_KEY", "GEMINI_API_KEY", "OMP_AUTH_BROKER_TOKEN", "OPENAI_API_KEY"];
+            readonly requireTogether: readonly [readonly ["OMP_AUTH_BROKER_URL", "OMP_AUTH_BROKER_TOKEN"]];
+            readonly requireUrl: readonly ["OMP_AUTH_BROKER_URL"];
         };
-        readonly envPassthrough: readonly [];
     };
     readonly defaultLevels: {
         readonly min: ModelLevel;

package/lib/agent-cli-provider/provider-registry.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"provider-registry.d.ts","sourceRoot":"","sources":["../../src/agent-cli-provider/provider-registry.ts"],"names":[],"mappings":"AAIA,OAAO,~~EAA2C~~,uBAAuB,~~EAAE~~,MAAM,oBAAoB,CAAC;~~AAOtG~~,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAE5F,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,cAAc,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,eAAe,EAAE,uBAAuB,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,uBAAuB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAED,MAAM,MAAM,kBAAkB,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,0BAA0B,CAAC;AAE/B,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;AAEzF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,sBAAsB;~~IACrC~~,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;~~IAC1C~~,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAE3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAIrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;~~CAC3B~~;AAED,UAAU,yBAAyB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC;IAClF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,GAAG,iBAAiB,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;QAC/B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;QAC7B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;KAC1B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,qCAAsC,SAAQ,yBAAyB;IACtF,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,GAAG;QAChE,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,cAAc,CAAC;KAC5C,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC;CACnD;AAED,MAAM,WAAW,uCAAwC,SAAQ,yBAAyB;IACxF,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,GAAG;QAChE,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,MAAM,qBAAqB,GAC7B,qCAAqC,GACrC,uCAAuC,CAAC;AAoE5C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;~~kCA7KD~~,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;4BAG1B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;~~uEA2NV~~,MAAM,GAAG,IAAI;;;;;;~~kCAnOpB~~,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCALpB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCARjB,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;~~uEA4VV~~,MAAM,GAAG,IAAI;;;;;;~~kCApWpB~~,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCALpB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB~~;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;~~kCARjB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCARjB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;~~EA+hBQ~~,CAAC;AAUtD,KAAK,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,KAAK,qBAAqB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,eAAO,MAAM,WAAW,~~EAAgD~~,SAAS,kBAAkB,EAAE,CAAC;~~AACtG~~,eAAO,MAAM,eAAe,~~EAAyD~~,SAAS,qBAAqB,EAAE,CAAC;~~AACtH~~,eAAO,MAAM,kBAAkB,~~EAAwE~~,SAAS,~~CAC5G~~,kBAAkB,~~GAClB~~,qBAAqB,~~CACxB~~,EAAE,CAAC;~~AAEJ~~,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAQzE,CAAC;AAEF,wBAAgB,+BAA+B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,EACxF,OAAO,EAAE,SAAS,CAAC,EAAE,GACpB,CAAC,CAAC,IAAI,CAAC,CAST;AAED,wBAAgB,oBAAoB,IAAI,kBAAkB,CAEzD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,MAAM,CAG/E;AAED,wBAAgB,2BAA2B,IAAI,SAAS,qBAAqB,EAAE,CAE9E;AAED,wBAAgB,yBAAyB,~~CAAC~~,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,~~GAAG~~,qBAAqB,GAAG,SAAS,~~CAI5G~~;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAI5E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,CASA;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,oBAAoB,GACrC,OAAO,CAET;AAED,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExE"}
1	+ {"version":3,"file":"provider-registry.d.ts","sourceRoot":"","sources":["../../src/agent-cli-provider/provider-registry.ts"],"names":[],"mappings":"AAIA,OAAO,EAGL,uBAAuB,EACxB,MAAM,oBAAoB,CAAC;AAY5B,OAAO,KAAK,EAAE,UAAU,EAAE,eAAe,EAAE,+BAA+B,EAAE,MAAM,SAAS,CAAC;AAE5F,MAAM,MAAM,uBAAuB,GAAG,OAAO,GAAG,cAAc,CAAC;AAE/D,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,eAAe,EAAE,uBAAuB,CAAC;IAClD,QAAQ,CAAC,iBAAiB,EAAE,uBAAuB,CAAC;IACpD,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,UAAU,EAAE,uBAAuB,CAAC;IAC7C,QAAQ,CAAC,YAAY,EAAE,uBAAuB,CAAC;IAC/C,QAAQ,CAAC,eAAe,EAAE,uBAAuB,CAAC;IAClD,QAAQ,CAAC,aAAa,EAAE,uBAAuB,CAAC;IAChD,QAAQ,CAAC,SAAS,EAAE,uBAAuB,CAAC;CAC7C;AAED,UAAU,wBAAwB;IAChC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC;AAED,UAAU,2BAA2B;IACnC,QAAQ,CAAC,IAAI,EAAE,mBAAmB,CAAC;CACpC;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;CACxB;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,QAAQ,CAAC;CAC7B;AAED,MAAM,MAAM,kBAAkB,GAC1B,uBAAuB,GACvB,0BAA0B,GAC1B,0BAA0B,CAAC;AAE/B,MAAM,MAAM,mBAAmB,GAAG,wBAAwB,GAAG,2BAA2B,CAAC;AAEzF,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;CAC/B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,OAAO,CAAC;CAC5B;AAED,MAAM,WAAW,qBAAqB;IAMpC,QAAQ,CAAC,YAAY,EAAE,SAAS,MAAM,EAAE,CAAC;IAGzC,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,CAAC,SAAS,MAAM,EAAE,CAAC,EAAE,CAAC;IAG1D,QAAQ,CAAC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACzC;AAED,MAAM,WAAW,sBAAsB;IAErC,QAAQ,CAAC,KAAK,CAAC,EAAE,yBAAyB,CAAC;IAC3C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAE3C,QAAQ,CAAC,iBAAiB,CAAC,EAAE,OAAO,CAAC;IAIrC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;IAG1B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAG3B,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAEzC,QAAQ,CAAC,OAAO,CAAC,EAAE,qBAAqB,CAAC;CAC1C;AAED,UAAU,yBAAyB;IACjC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAC;IACpC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,OAAO,EAAE,mBAAmB,CAAC;IACtC,QAAQ,CAAC,MAAM,EAAE,kBAAkB,CAAC;IACpC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,QAAQ,CAAC,cAAc,EAAE,SAAS,MAAM,EAAE,CAAC;IAC3C,QAAQ,CAAC,gBAAgB,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC9D,QAAQ,CAAC,iBAAiB,CAAC,EAAE,CAAC,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,GAAG,IAAI,CAAC;IAClF,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,GAAG,iBAAiB,CAAC;IAC3D,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAC;IACxC,QAAQ,CAAC,aAAa,EAAE,QAAQ,CAAC;QAC/B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;QACzB,QAAQ,CAAC,OAAO,EAAE,UAAU,CAAC;QAC7B,QAAQ,CAAC,GAAG,EAAE,UAAU,CAAC;KAC1B,CAAC,CAAC;CACJ;AAED,MAAM,WAAW,qCAAsC,SAAQ,yBAAyB;IACtF,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,GAAG;QAChE,QAAQ,CAAC,UAAU,EAAE,IAAI,GAAG,cAAc,CAAC;KAC5C,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,+BAA+B,CAAC;CACnD;AAED,MAAM,WAAW,uCAAwC,SAAQ,yBAAyB;IACxF,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,oBAAoB,EAAE,YAAY,CAAC,GAAG;QAChE,QAAQ,CAAC,UAAU,EAAE,KAAK,CAAC;KAC5B,CAAC;IACF,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAC;CACnC;AAED,MAAM,MAAM,qBAAqB,GAC7B,qCAAqC,GACrC,uCAAuC,CAAC;AAoE5C,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;kCArMD,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;4BAG1B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uEAmPV,MAAM,GAAG,IAAI;;;;;;kCA3PpB,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCALpB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCARjB,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;uEAoXV,MAAM,GAAG,IAAI;;;;;;kCA5XpB,uBAAuB;oCACrB,uBAAuB;6BAC9B,uBAAuB;6BAEvB,uBAAuB;+BACrB,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCALpB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCARjB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;kCARjB,uBAAuB;oCACrB,uBAAuB;6BAG9B,uBAAuB;+BACrB,uBAAuB;gCAEtB,uBAAuB;4BAC3B,uBAAuB;;;;;;;;;;;;;;;;;;;;;;EA4lBQ,CAAC;AAUtD,KAAK,kBAAkB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAClE,KAAK,qBAAqB,GAAG,CAAC,OAAO,gBAAgB,CAAC,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC;AAElF,eAAO,MAAM,WAAW,EAEnB,SAAS,kBAAkB,EAAE,CAAC;AACnC,eAAO,MAAM,eAAe,EAEvB,SAAS,qBAAqB,EAAE,CAAC;AACtC,eAAO,MAAM,kBAAkB,EAGzB,SAAS,CAAC,kBAAkB,GAAG,qBAAqB,CAAC,EAAE,CAAC;AAE9D,eAAO,MAAM,gBAAgB,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAQzE,CAAC;AAEF,wBAAgB,+BAA+B,CAAC,CAAC,SAAS;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,OAAO,CAAA;CAAE,EACxF,OAAO,EAAE,SAAS,CAAC,EAAE,GACpB,CAAC,CAAC,IAAI,CAAC,CAST;AAED,wBAAgB,oBAAoB,IAAI,kBAAkB,CAEzD;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,GAAG,kBAAkB,GAAG,MAAM,CAG/E;AAED,wBAAgB,2BAA2B,IAAI,SAAS,qBAAqB,EAAE,CAE9E;AAED,wBAAgB,yBAAyB,CACvC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAC9B,qBAAqB,GAAG,SAAS,CAInC;AAED,wBAAgB,wBAAwB,CAAC,IAAI,EAAE,MAAM,GAAG,qBAAqB,CAI5E;AAED,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG;IACpD,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;CAClC,CASA;AAED,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,MAAM,EACZ,UAAU,EAAE,MAAM,oBAAoB,GACrC,OAAO,CAET;AAED,wBAAgB,kCAAkC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAExE"}

package/lib/agent-cli-provider/provider-registry.js CHANGED Viewed

@@ -334,9 +334,10 @@ exports.providerRegistry = [
         settingsFields: [],
         availabilityProbe: 'help-or-version',
         // Written out explicitly rather than spread from STANDARD_CAPABILITIES, which defaults
-        // dockerIsolation to true; OMP stays worktree-only until Subissue 6 flips dockerIsolation.
+        // dockerIsolation to true; OMP's Docker path is env/broker-only and sessionless (see
+        // AGENTS.md OMP Docker section) rather than the standard credential-mount + resume shape.
         capabilities: {
-            dockerIsolation: false,
+            dockerIsolation: true,
             worktreeIsolation: true,
             mcpServers: false,
             jsonSchema: false,
@@ -351,12 +352,49 @@ exports.providerRegistry = [
             setupHeading: 'OMP Setup',
         },
         docker: {
-            mount: {
-                host: '~/.omp',
-                container: '$HOME/.omp',
-                readonly: true,
+            // No `mount`: OMP's Docker credential surface is env/broker-only with zero automatic
+            // mounts. `~/.omp`, agent.db, WAL/SHM files, and host refresh tokens are never mounted or
+            // copied into the container.
+            //
+            // envPassthrough is deliberately narrower than `credentialEnvKeys` above (the full adapter
+            // credential inventory, used for host inspection/redaction). Exact 5-name automatic
+            // allowlist per the maintainer's authoritative clarification (verified verbatim via
+            // `gh api repos/the-open-engine/zeroshot/issues/comments/5160272623`): "the exact automatic
+            // OMP Docker environment allowlist is only ANTHROPIC_API_KEY, OPENAI_API_KEY,
+            // GEMINI_API_KEY, OMP_AUTH_BROKER_URL, and OMP_AUTH_BROKER_TOKEN ... ANTHROPIC_OAUTH_TOKEN,
+            // ANTHROPIC_FOUNDRY_API_KEY, GOOGLE_API_KEY, OPENROUTER_API_KEY, and every other
+            // credential/path require explicit dockerEnvPassthrough/mount opt-in; OAuth users should
+            // prefer the auth broker so host refresh/access tokens do not cross automatically." This
+            // supersedes PLAN_READY step 2's nine-name list. Any validator flagging this as missing the
+            // four excluded names is checking stale plan text against a clarification it never read.
+            platform: omp_release_1.OMP_DOCKER_PLATFORM,
+            install: omp_release_1.OMP_DOCKER_INSTALL_COMMAND,
+            configRoots: ['$HOME/.omp'],
+            credentialInMount: false,
+            envPassthrough: [
+                'ANTHROPIC_API_KEY',
+                'GEMINI_API_KEY',
+                'OMP_AUTH_BROKER_TOKEN',
+                'OMP_AUTH_BROKER_URL',
+                'OPENAI_API_KEY',
+            ],
+            envAuth: {
+                // The four automatic *credential* names (the fifth allowlist entry, OMP_AUTH_BROKER_URL,
+                // is a locator, not a credential — it authenticates nothing on its own). Any other
+                // registry-known OMP credential (ANTHROPIC_OAUTH_TOKEN, OPENROUTER_API_KEY, …) is usable
+                // only via explicit dockerEnvPassthrough/--mount opt-in, never automatic forwarding.
+                requireOneOf: [
+                    'ANTHROPIC_API_KEY',
+                    'GEMINI_API_KEY',
+                    'OMP_AUTH_BROKER_TOKEN',
+                    'OPENAI_API_KEY',
+                ],
+                requireTogether: [['OMP_AUTH_BROKER_URL', 'OMP_AUTH_BROKER_TOKEN']],
+                // Per OMP v17.2.1 docs/environment-variables.md, OMP_AUTH_BROKER_URL is the broker's base
+                // URL (e.g. https://broker.tailnet:8765); anything that is not an http(s) URL is
+                // malformed broker config, and OMP hard-errors on a broker URL with no resolvable token.
+                requireUrl: ['OMP_AUTH_BROKER_URL'],
             },
-            envPassthrough: [],
         },
         defaultLevels: {
             min: omp_1.ompAdapter.defaultMinLevel,
@@ -455,7 +493,10 @@ function validateWebSearchSettings(provider, settings) {
 }
 exports.providerIds = exports.providerRegistry.map((entry) => entry.id);
 exports.providerAliases = exports.providerRegistry.flatMap((entry) => entry.aliases);
-exports.knownProviderNames = exports.providerRegistry.flatMap((entry) => [entry.id, ...entry.aliases]);
+exports.knownProviderNames = exports.providerRegistry.flatMap((entry) => [
+    entry.id,
+    ...entry.aliases,
+]);
 exports.providerAliasMap = Object.freeze(exports.providerRegistry.reduce((result, entry) => {
     result[entry.id] = entry.id;
     for (const alias of entry.aliases) {

package/lib/agent-cli-provider/provider-registry.js.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"provider-registry.js","sourceRoot":"","sources":["../../src/agent-cli-provider/provider-registry.ts"],"names":[],"mappings":";;;AAqlBA,0EAWC;AAED,oDAEC;AAED,sDAGC;AAED,kEAEC;AAED,8DAIC;AAED,4DAIC;AAED,wDAYC;AAED,gEAKC;AAED,gFAEC;AAlpBD,wCAAkD;AAClD,8CAAkD;AAClD,4CAAgD;AAChD,gDAAoD;AACpD,gDAAsG;AACtG,8CAAkD;AAClD,kDAAsD;AACtD,wCAA4C;AAC5C,sCAA0C;AAC1C,qDAAwD;AACxD,+CAA2E;AAiH3E,MAAM,qBAAqB,GAWvB;IACF,eAAe,EAAE,IAAI;IACrB,iBAAiB,EAAE,IAAI;IACvB,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,KAAK;IACpB,SAAS,EAAE,KAAK;CACjB,CAAC;AAEF,MAAM,6BAA6B,GAAG;IACpC,mBAAmB;IACnB,0BAA0B;IAC1B,YAAY;IACZ,yBAAyB;CACjB,CAAC;AAEX,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAA4B,CAAC;AACjF,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,OAAO;CACnB,CAA+B,CAAC;AACjC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,QAAQ;CACnB,CAA+B,CAAC;AAEjC,MAAM,WAAW,GAAG,IAAA,sBAAgB,EAAC;IACnC,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,MAAM;IACnB,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,CAAC,KAAK,CAAC;IACpB,iBAAiB,EAAE,CAAC,cAAc,CAAC;IACnC,oBAAoB,EAAE,IAAI;IAC1B,mBAAmB,EAAE,KAAK;IAC1B,qBAAqB,EAAE,IAAI;IAC3B,uBAAuB,EAAE,KAAK;IAC9B,sBAAsB,EAAE,KAAK;IAC7B,sBAAsB,EAAE;QACtB,yBAAyB;QACzB,wBAAwB;QACxB,cAAc;QACd,kBAAkB;KACnB;IACD,sBAAsB,EAAE;QACtB,0BAA0B;QAC1B,mBAAmB;QACnB,gBAAgB;QAChB,mBAAmB;QACnB,gBAAgB;QAChB,gBAAgB;QAChB,kBAAkB;KACnB;CACF,CAAC,CAAC;AAEU,QAAA,gBAAgB,GAAG;IAC9B;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;QACtC,MAAM,EAAE,YAAY;QACpB,mBAAmB,EACjB,2EAA2E;QAC7E,gBAAgB,EAAE,cAAc;QAChC,eAAe,EAAE,CAAC,WAAW,CAAC;QAC9B,iBAAiB,EAAE,sBAAa,CAAC,iBAAiB;QAClD,cAAc,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,eAAe,CAAC;QACrE,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,cAAc;SAC7B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,eAAe;gBAC1B,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,6BAA6B;SAC9C;QACD,aAAa,EAAE;YACb,GAAG,EAAE,sBAAa,CAAC,eAAe;YAClC,OAAO,EAAE,sBAAa,CAAC,YAAY;YACnC,GAAG,EAAE,sBAAa,CAAC,eAAe;SACnC;QACD,OAAO,EAAE,sBAAa;KACvB;IACD;QACE,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;QAC5D,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,8BAA8B;QACnD,gBAAgB,EAAE,aAAa;QAC/B,eAAe,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;QAChD,iBAAiB,EAAE,oBAAY,CAAC,iBAAiB;QACjD,cAAc,EAAE,CAAC,WAAW,CAAC;QAC7B,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QACtC,iBAAiB,EAAE,CAAC,QAAQ,EAAiB,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC5F,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;SAChB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,OAAO;YACd,YAAY,EAAE,aAAa;SAC5B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,iBAAiB;gBACvB,SAAS,EAAE,qBAAqB;gBAChC,QAAQ,EAAE,IAAI;aACf;YACD,OAAO,EAAE,8BAA8B;YACvC,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,oBAAY,CAAC,eAAe;YACjC,OAAO,EAAE,oBAAY,CAAC,YAAY;YAClC,GAAG,EAAE,oBAAY,CAAC,eAAe;SAClC;QACD,OAAO,EAAE,oBAAY;KACtB;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACrD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,sEAAsE;QAC3F,gBAAgB,EACd,oIAAoI;QACtI,eAAe,EAAE,EAAE;QACnB,iBAAiB,EAAE,wBAAc,CAAC,iBAAiB;QACnD,cAAc,EAAE;YACd,UAAU;YACV,SAAS;YACT,QAAQ;YACR,SAAS;YACT,OAAO;YACP,WAAW;YACX,YAAY;SACb;QACD,gBAAgB,EAAE,iCAAuB;QACzC,iBAAiB,EAAE,iCAAuB;QAC1C,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,eAAe;SAC9B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,aAAa;gBACnB,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,wBAAc,CAAC,eAAe;YACnC,OAAO,EAAE,wBAAc,CAAC,YAAY;YACpC,GAAG,EAAE,wBAAc,CAAC,eAAe;SACpC;QACD,OAAO,EAAE,wBAAc;KACxB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;QACvD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,mCAAmC;QACxD,gBAAgB,EAAE,mBAAmB;QACrC,eAAe,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,CAAC;QACtE,iBAAiB,EAAE,sBAAa,CAAC,iBAAiB;QAClD,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,cAAc;YAC1B,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,cAAc;SAC7B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,SAAS,EAAE,sBAAsB;gBACjC,QAAQ,EAAE,IAAI;aACf;YACD,OAAO,EAAE,mCAAmC;YAC5C,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,sBAAa,CAAC,eAAe;YAClC,OAAO,EAAE,sBAAa,CAAC,YAAY;YACnC,GAAG,EAAE,sBAAa,CAAC,eAAe;SACnC;QACD,OAAO,EAAE,sBAAa;KACvB;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAC9D,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,wDAAwD;QAC7E,gBAAgB,EAAE,qBAAqB;QACvC,eAAe,EAAE,CAAC,yBAAyB,CAAC;QAC5C,iBAAiB,EAAE,0BAAe,CAAC,iBAAiB;QACpD,cAAc,EAAE,CAAC,WAAW,CAAC;QAC7B,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QACtC,iBAAiB,EAAE,CAAC,QAAQ,EAAiB,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC/F,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,cAAc;YAC1B,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;SAChB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,gBAAgB;SAC/B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,yBAAyB;gBAC/B,SAAS,EAAE,6BAA6B;gBACxC,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,0BAAe,CAAC,eAAe;YACpC,OAAO,EAAE,0BAAe,CAAC,YAAY;YACrC,GAAG,EAAE,0BAAe,CAAC,eAAe;SACrC;QACD,OAAO,EAAE,0BAAe;KACzB;IACD;QACE,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACnD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EACjB,wEAAwE;QAC1E,gBAAgB,EAAE,YAAY;QAC9B,eAAe,EAAE,CAAC,OAAO,CAAC;QAC1B,iBAAiB,EAAE,cAAS,CAAC,iBAAiB;QAC9C,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,iBAAiB;QACpC,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,UAAU;SACzB;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,cAAS,CAAC,eAAe;YAC9B,OAAO,EAAE,cAAS,CAAC,YAAY;YAC/B,GAAG,EAAE,cAAS,CAAC,eAAe;SAC/B;QACD,OAAO,EAAE,cAAS;KACnB;IACD;QACE,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,gBAAgB;QAC7B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QACpD,MAAM,EAAE,gBAAgB;QACxB,mBAAmB,EAAE,iCAAmB;QACxC,gBAAgB,EAAE,mCAAqB;QACvC,eAAe,EAAE,CAAC,QAAQ,CAAC;QAC3B,iBAAiB,EAAE,gBAAU,CAAC,iBAAiB;QAC/C,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,iBAAiB;QACpC,uFAAuF;QACvF,2FAA2F;QAC3F,YAAY,EAAE;YACZ,eAAe,EAAE,KAAK;YACtB,iBAAiB,EAAE,IAAI;YACvB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,KAAK;YACpB,SAAS,EAAE,KAAK;SACjB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,WAAW;SAC1B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,QAAQ;gBACd,SAAS,EAAE,YAAY;gBACvB,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,gBAAU,CAAC,eAAe;YAC/B,OAAO,EAAE,gBAAU,CAAC,YAAY;YAChC,GAAG,EAAE,gBAAU,CAAC,eAAe;SAChC;QACD,OAAO,EAAE,gBAAU;KACpB;IACD;QACE,EAAE,EAAE,MAAM;QACV,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAC9D,MAAM,EAAE,gBAAgB;QACxB,mBAAmB,EAAE,gCAAgC;QACrD,gBAAgB,EAAE,+CAA+C;QACjE,eAAe,EAAE,CAAC,SAAS,CAAC;QAC5B,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;QAChD,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,MAAM;YACb,YAAY,EAAE,YAAY;SAC3B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,CAAC,cAAc,CAAC;SACjC;QACD,aAAa,EAAE;YACb,GAAG,EAAE,WAAW,CAAC,eAAe;YAChC,OAAO,EAAE,WAAW,CAAC,YAAY;YACjC,GAAG,EAAE,WAAW,CAAC,eAAe;SACjC;QACD,OAAO,EAAE,WAAW;KACrB;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;QACxD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,gCAAgC;QACrD,+EAA+E;QAC/E,gBAAgB,EAAE,mEAAmE;QACrF,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,iBAAiB,EAAE,wBAAc,CAAC,iBAAiB;QACnD,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,iBAAiB;QACpC,2FAA2F;QAC3F,iEAAiE;QACjE,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,eAAe;SAC9B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,IAAI;aACf;YACD,OAAO,EAAE,gCAAgC;YACzC,cAAc,EAAE,CAAC,sBAAsB,EAAE,UAAU,EAAE,cAAc,CAAC;YACpE,iBAAiB,EAAE,KAAK,EAAE,8CAA8C;SACzE;QACD,aAAa,EAAE;YACb,GAAG,EAAE,wBAAc,CAAC,eAAe;YACnC,OAAO,EAAE,wBAAc,CAAC,YAAY;YACpC,GAAG,EAAE,wBAAc,CAAC,eAAe;SACpC;QACD,OAAO,EAAE,wBAAc;KACxB;CACkD,CAAC;AAEtD,SAAS,yBAAyB,CAChC,QAA8B,EAC9B,QAAiC;IAEjC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7F,OAAO,oBAAoB,QAAQ,8BAA8B,CAAC;AACpE,CAAC;AAKY,QAAA,WAAW,GAAG,wBAAgB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CAAkC,CAAC;AACzF,QAAA,eAAe,GAAG,wBAAgB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAqC,CAAC;AACzG,QAAA,kBAAkB,GAAG,wBAAgB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,KAAK,CAAC,EAAE,EAAE,GAAG,KAAK,CAAC,OAAO,CAAC,CAG/F,CAAC;AAES,QAAA,gBAAgB,GAAiD,MAAM,CAAC,MAAM,CACzF,wBAAgB,CAAC,MAAM,CAAqC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;IAC5E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,EAAE,EAAE,CAAC,CACP,CAAC;AAEF,SAAgB,+BAA+B,CAC7C,OAAqB;IAErB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC;IACxC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,sEAAsE,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnK,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,EAAE,CAAC;AACxB,CAAC;AACD,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,wBAAgB,CAAC,CAAC;AAC9E,SAAgB,oBAAoB;IAClC,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAgB,qBAAqB,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,wBAAgB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED,SAAgB,2BAA2B;IACzC,OAAO,wBAAgB,CAAC;AAC1B,CAAC;AAED,SAAgB,yBAAyB,CAAC,IAA+B;IACvE,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,wBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,YAAY,mBAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAAY;IAIjD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC/C,OAAO,IAAA,qCAAoB,GAAE,CAAC;IAChC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;QAC9B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;KACzB,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,IAAY,EACZ,UAAsC;IAEtC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;AAC1E,CAAC;AAED,SAAgB,kCAAkC,CAAC,IAAY;IAC7D,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,KAAK,KAAK,CAAC;AAC1E,CAAC"}
1	+ {"version":3,"file":"provider-registry.js","sourceRoot":"","sources":["../../src/agent-cli-provider/provider-registry.ts"],"names":[],"mappings":";;;AA+pBA,0EAWC;AAED,oDAEC;AAED,sDAGC;AAED,kEAEC;AAED,8DAMC;AAED,4DAIC;AAED,wDAYC;AAED,gEAKC;AAED,gFAEC;AA9tBD,wCAAkD;AAClD,8CAAkD;AAClD,4CAAgD;AAChD,gDAAoD;AACpD,gDAI4B;AAC5B,8CAAkD;AAClD,kDAAsD;AACtD,wCAA4C;AAC5C,sCAA0C;AAC1C,qDAAwD;AACxD,+CAKuB;AAyIvB,MAAM,qBAAqB,GAWvB;IACF,eAAe,EAAE,IAAI;IACrB,iBAAiB,EAAE,IAAI;IACvB,UAAU,EAAE,IAAI;IAChB,UAAU,EAAE,IAAI;IAChB,YAAY,EAAE,IAAI;IAClB,aAAa,EAAE,KAAK;IACpB,SAAS,EAAE,KAAK;CACjB,CAAC;AAEF,MAAM,6BAA6B,GAAG;IACpC,mBAAmB;IACnB,0BAA0B;IAC1B,YAAY;IACZ,yBAAyB;CACjB,CAAC;AAEX,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAA4B,CAAC;AACjF,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,WAAW;IACjB,SAAS,EAAE,OAAO;CACnB,CAA+B,CAAC;AACjC,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC;IACrC,IAAI,EAAE,WAAW;IACjB,QAAQ,EAAE,QAAQ;CACnB,CAA+B,CAAC;AAEjC,MAAM,WAAW,GAAG,IAAA,sBAAgB,EAAC;IACnC,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,MAAM;IACnB,MAAM,EAAE,UAAU;IAClB,WAAW,EAAE,CAAC,KAAK,CAAC;IACpB,iBAAiB,EAAE,CAAC,cAAc,CAAC;IACnC,oBAAoB,EAAE,IAAI;IAC1B,mBAAmB,EAAE,KAAK;IAC1B,qBAAqB,EAAE,IAAI;IAC3B,uBAAuB,EAAE,KAAK;IAC9B,sBAAsB,EAAE,KAAK;IAC7B,sBAAsB,EAAE;QACtB,yBAAyB;QACzB,wBAAwB;QACxB,cAAc;QACd,kBAAkB;KACnB;IACD,sBAAsB,EAAE;QACtB,0BAA0B;QAC1B,mBAAmB;QACnB,gBAAgB;QAChB,mBAAmB;QACnB,gBAAgB;QAChB,gBAAgB;QAChB,kBAAkB;KACnB;CACF,CAAC,CAAC;AAEU,QAAA,gBAAgB,GAAG;IAC9B;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,IAAI;QACb,OAAO,EAAE,CAAC,WAAW,CAAC;QACtB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,mBAAmB,EAAE;QACtC,MAAM,EAAE,YAAY;QACpB,mBAAmB,EACjB,2EAA2E;QAC7E,gBAAgB,EAAE,cAAc;QAChC,eAAe,EAAE,CAAC,WAAW,CAAC;QAC9B,iBAAiB,EAAE,sBAAa,CAAC,iBAAiB;QAClD,cAAc,EAAE,CAAC,iBAAiB,EAAE,eAAe,EAAE,eAAe,CAAC;QACrE,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI;SACpB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,cAAc;SAC7B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,WAAW;gBACjB,SAAS,EAAE,eAAe;gBAC1B,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,6BAA6B;SAC9C;QACD,aAAa,EAAE;YACb,GAAG,EAAE,sBAAa,CAAC,eAAe;YAClC,OAAO,EAAE,sBAAa,CAAC,YAAY;YACnC,GAAG,EAAE,sBAAa,CAAC,eAAe;SACnC;QACD,OAAO,EAAE,sBAAa;KACvB;IACD;QACE,EAAE,EAAE,OAAO;QACX,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,OAAO;QACpB,MAAM,EAAE,OAAO;QACf,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,MAAM,CAAC,EAAE;QAC5D,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,8BAA8B;QACnD,gBAAgB,EAAE,aAAa;QAC/B,eAAe,EAAE,CAAC,iBAAiB,EAAE,UAAU,CAAC;QAChD,iBAAiB,EAAE,oBAAY,CAAC,iBAAiB;QACjD,cAAc,EAAE,CAAC,WAAW,CAAC;QAC7B,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QACtC,iBAAiB,EAAE,CAAC,QAAQ,EAAiB,EAAE,CAAC,yBAAyB,CAAC,OAAO,EAAE,QAAQ,CAAC;QAC5F,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,IAAI;YAChB,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;SAChB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,OAAO;YACd,YAAY,EAAE,aAAa;SAC5B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,iBAAiB;gBACvB,SAAS,EAAE,qBAAqB;gBAChC,QAAQ,EAAE,IAAI;aACf;YACD,OAAO,EAAE,8BAA8B;YACvC,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,oBAAY,CAAC,eAAe;YACjC,OAAO,EAAE,oBAAY,CAAC,YAAY;YAClC,GAAG,EAAE,oBAAY,CAAC,eAAe;SAClC;QACD,OAAO,EAAE,oBAAY;KACtB;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,EAAE;QACrD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,sEAAsE;QAC3F,gBAAgB,EACd,oIAAoI;QACtI,eAAe,EAAE,EAAE;QACnB,iBAAiB,EAAE,wBAAc,CAAC,iBAAiB;QACnD,cAAc,EAAE;YACd,UAAU;YACV,SAAS;YACT,QAAQ;YACR,SAAS;YACT,OAAO;YACP,WAAW;YACX,YAAY;SACb;QACD,gBAAgB,EAAE,iCAAuB;QACzC,iBAAiB,EAAE,iCAAuB;QAC1C,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,eAAe;SAC9B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,aAAa;gBACnB,SAAS,EAAE,iBAAiB;gBAC5B,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,wBAAc,CAAC,eAAe;YACnC,OAAO,EAAE,wBAAc,CAAC,YAAY;YACpC,GAAG,EAAE,wBAAc,CAAC,eAAe;SACpC;QACD,OAAO,EAAE,wBAAc;KACxB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,QAAQ,CAAC;QACnB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,QAAQ;QAChB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,EAAE;QACvD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,mCAAmC;QACxD,gBAAgB,EAAE,mBAAmB;QACrC,eAAe,EAAE,CAAC,kBAAkB,EAAE,kBAAkB,EAAE,WAAW,CAAC;QACtE,iBAAiB,EAAE,sBAAa,CAAC,iBAAiB;QAClD,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,cAAc;YAC1B,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,QAAQ;YACf,YAAY,EAAE,cAAc;SAC7B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,kBAAkB;gBACxB,SAAS,EAAE,sBAAsB;gBACjC,QAAQ,EAAE,IAAI;aACf;YACD,OAAO,EAAE,mCAAmC;YAC5C,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,sBAAa,CAAC,eAAe;YAClC,OAAO,EAAE,sBAAa,CAAC,YAAY;YACnC,GAAG,EAAE,sBAAa,CAAC,eAAe;SACnC;QACD,OAAO,EAAE,sBAAa;KACvB;IACD;QACE,EAAE,EAAE,UAAU;QACd,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,UAAU;QACvB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAC9D,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,wDAAwD;QAC7E,gBAAgB,EAAE,qBAAqB;QACvC,eAAe,EAAE,CAAC,yBAAyB,CAAC;QAC5C,iBAAiB,EAAE,0BAAe,CAAC,iBAAiB;QACpD,cAAc,EAAE,CAAC,WAAW,CAAC;QAC7B,gBAAgB,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE;QACtC,iBAAiB,EAAE,CAAC,QAAQ,EAAiB,EAAE,CAAC,yBAAyB,CAAC,UAAU,EAAE,QAAQ,CAAC;QAC/F,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,cAAc;YAC1B,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,IAAI;YACnB,SAAS,EAAE,IAAI;SAChB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,UAAU;YACjB,YAAY,EAAE,gBAAgB;SAC/B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,yBAAyB;gBAC/B,SAAS,EAAE,6BAA6B;gBACxC,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,0BAAe,CAAC,eAAe;YACpC,OAAO,EAAE,0BAAe,CAAC,YAAY;YACrC,GAAG,EAAE,0BAAe,CAAC,eAAe;SACrC;QACD,OAAO,EAAE,0BAAe;KACzB;IACD;QACE,EAAE,EAAE,IAAI;QACR,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,IAAI;QACjB,MAAM,EAAE,IAAI;QACZ,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,EAAE,EAAE;QACnD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,wEAAwE;QAC7F,gBAAgB,EAAE,YAAY;QAC9B,eAAe,EAAE,CAAC,OAAO,CAAC;QAC1B,iBAAiB,EAAE,cAAS,CAAC,iBAAiB;QAC9C,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,iBAAiB;QACpC,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,IAAI;YACX,YAAY,EAAE,UAAU;SACzB;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,OAAO;gBACb,SAAS,EAAE,WAAW;gBACtB,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,EAAE;SACnB;QACD,aAAa,EAAE;YACb,GAAG,EAAE,cAAS,CAAC,eAAe;YAC9B,OAAO,EAAE,cAAS,CAAC,YAAY;YAC/B,GAAG,EAAE,cAAS,CAAC,eAAe;SAC/B;QACD,OAAO,EAAE,cAAS;KACnB;IACD;QACE,EAAE,EAAE,KAAK;QACT,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,CAAC,UAAU,CAAC;QACrB,WAAW,EAAE,gBAAgB;QAC7B,MAAM,EAAE,KAAK;QACb,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,EAAE,EAAE;QACpD,MAAM,EAAE,gBAAgB;QACxB,mBAAmB,EAAE,iCAAmB;QACxC,gBAAgB,EAAE,mCAAqB;QACvC,eAAe,EAAE,CAAC,QAAQ,CAAC;QAC3B,iBAAiB,EAAE,gBAAU,CAAC,iBAAiB;QAC/C,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,iBAAiB;QACpC,uFAAuF;QACvF,qFAAqF;QACrF,0FAA0F;QAC1F,YAAY,EAAE;YACZ,eAAe,EAAE,IAAI;YACrB,iBAAiB,EAAE,IAAI;YACvB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,IAAI;YAChB,YAAY,EAAE,IAAI;YAClB,eAAe,EAAE,IAAI;YACrB,aAAa,EAAE,KAAK;YACpB,SAAS,EAAE,KAAK;SACjB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,KAAK;YACZ,YAAY,EAAE,WAAW;SAC1B;QACD,MAAM,EAAE;YACN,qFAAqF;YACrF,0FAA0F;YAC1F,6BAA6B;YAC7B,EAAE;YACF,2FAA2F;YAC3F,oFAAoF;YACpF,oFAAoF;YACpF,4FAA4F;YAC5F,8EAA8E;YAC9E,4FAA4F;YAC5F,iFAAiF;YACjF,yFAAyF;YACzF,yFAAyF;YACzF,4FAA4F;YAC5F,yFAAyF;YACzF,QAAQ,EAAE,iCAAmB;YAC7B,OAAO,EAAE,wCAA0B;YACnC,WAAW,EAAE,CAAC,YAAY,CAAC;YAC3B,iBAAiB,EAAE,KAAK;YACxB,cAAc,EAAE;gBACd,mBAAmB;gBACnB,gBAAgB;gBAChB,uBAAuB;gBACvB,qBAAqB;gBACrB,gBAAgB;aACjB;YACD,OAAO,EAAE;gBACP,yFAAyF;gBACzF,mFAAmF;gBACnF,yFAAyF;gBACzF,qFAAqF;gBACrF,YAAY,EAAE;oBACZ,mBAAmB;oBACnB,gBAAgB;oBAChB,uBAAuB;oBACvB,gBAAgB;iBACjB;gBACD,eAAe,EAAE,CAAC,CAAC,qBAAqB,EAAE,uBAAuB,CAAC,CAAC;gBACnE,0FAA0F;gBAC1F,iFAAiF;gBACjF,yFAAyF;gBACzF,UAAU,EAAE,CAAC,qBAAqB,CAAC;aACpC;SACF;QACD,aAAa,EAAE;YACb,GAAG,EAAE,gBAAU,CAAC,eAAe;YAC/B,OAAO,EAAE,gBAAU,CAAC,YAAY;YAChC,GAAG,EAAE,gBAAU,CAAC,eAAe;SAChC;QACD,OAAO,EAAE,gBAAU;KACpB;IACD;QACE,EAAE,EAAE,MAAM;QACV,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,MAAM;QACnB,MAAM,EAAE,UAAU;QAClB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,IAAI,EAAE,CAAC,KAAK,CAAC,EAAE;QAC9D,MAAM,EAAE,gBAAgB;QACxB,mBAAmB,EAAE,gCAAgC;QACrD,gBAAgB,EAAE,+CAA+C;QACjE,eAAe,EAAE,CAAC,SAAS,CAAC;QAC5B,iBAAiB,EAAE,WAAW,CAAC,iBAAiB;QAChD,cAAc,EAAE,EAAE;QAClB,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,KAAK;YACjB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,MAAM;YACb,YAAY,EAAE,YAAY;SAC3B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,SAAS;gBACf,SAAS,EAAE,aAAa;gBACxB,QAAQ,EAAE,IAAI;aACf;YACD,cAAc,EAAE,CAAC,cAAc,CAAC;SACjC;QACD,aAAa,EAAE;YACb,GAAG,EAAE,WAAW,CAAC,eAAe;YAChC,OAAO,EAAE,WAAW,CAAC,YAAY;YACjC,GAAG,EAAE,WAAW,CAAC,eAAe;SACjC;QACD,OAAO,EAAE,WAAW;KACrB;IACD;QACE,EAAE,EAAE,SAAS;QACb,OAAO,EAAE,KAAK;QACd,OAAO,EAAE,EAAE;QACX,WAAW,EAAE,SAAS;QACtB,MAAM,EAAE,SAAS;QACjB,OAAO,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,EAAE;QACxD,MAAM,EAAE,YAAY;QACpB,mBAAmB,EAAE,gCAAgC;QACrD,+EAA+E;QAC/E,gBAAgB,EAAE,mEAAmE;QACrF,eAAe,EAAE,CAAC,YAAY,CAAC;QAC/B,iBAAiB,EAAE,wBAAc,CAAC,iBAAiB;QACnD,cAAc,EAAE,EAAE;QAClB,iBAAiB,EAAE,iBAAiB;QACpC,2FAA2F;QAC3F,iEAAiE;QACjE,YAAY,EAAE;YACZ,GAAG,qBAAqB;YACxB,UAAU,EAAE,IAAI;YAChB,UAAU,EAAE,KAAK;YACjB,eAAe,EAAE,KAAK;SACvB;QACD,IAAI,EAAE;YACJ,KAAK,EAAE,SAAS;YAChB,YAAY,EAAE,eAAe;SAC9B;QACD,MAAM,EAAE;YACN,KAAK,EAAE;gBACL,IAAI,EAAE,YAAY;gBAClB,SAAS,EAAE,gBAAgB;gBAC3B,QAAQ,EAAE,IAAI;aACf;YACD,OAAO,EAAE,gCAAgC;YACzC,cAAc,EAAE,CAAC,sBAAsB,EAAE,UAAU,EAAE,cAAc,CAAC;YACpE,iBAAiB,EAAE,KAAK,EAAE,8CAA8C;SACzE;QACD,aAAa,EAAE;YACb,GAAG,EAAE,wBAAc,CAAC,eAAe;YACnC,OAAO,EAAE,wBAAc,CAAC,YAAY;YACpC,GAAG,EAAE,wBAAc,CAAC,eAAe;SACpC;QACD,OAAO,EAAE,wBAAc;KACxB;CACkD,CAAC;AAEtD,SAAS,yBAAyB,CAChC,QAA8B,EAC9B,QAAiC;IAEjC,IAAI,QAAQ,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,QAAQ,CAAC,SAAS,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IAC7F,OAAO,oBAAoB,QAAQ,8BAA8B,CAAC;AACpE,CAAC;AAKY,QAAA,WAAW,GAAG,wBAAgB,CAAC,GAAG,CAC7C,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,CACa,CAAC;AACtB,QAAA,eAAe,GAAG,wBAAgB,CAAC,OAAO,CACrD,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CACW,CAAC;AACzB,QAAA,kBAAkB,GAAG,wBAAgB,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;IACpE,KAAK,CAAC,EAAE;IACR,GAAG,KAAK,CAAC,OAAO;CACjB,CAA4D,CAAC;AAEjD,QAAA,gBAAgB,GAAiD,MAAM,CAAC,MAAM,CACzF,wBAAgB,CAAC,MAAM,CAAqC,CAAC,MAAM,EAAE,KAAK,EAAE,EAAE;IAC5E,MAAM,CAAC,KAAK,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IAC5B,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,OAAO,EAAE,CAAC;QAClC,MAAM,CAAC,KAAK,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;IAC3B,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC,EAAE,EAAE,CAAC,CACP,CAAC;AAEF,SAAgB,+BAA+B,CAC7C,OAAqB;IAErB,MAAM,QAAQ,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,CAAC,WAAW,EAAE,GAAG,IAAI,CAAC,GAAG,QAAQ,CAAC;IACxC,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,KAAK,CACb,sEAAsE,QAAQ,CAAC,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACnK,CAAC;IACJ,CAAC;IACD,OAAO,WAAW,CAAC,EAAE,CAAC;AACxB,CAAC;AACD,MAAM,mBAAmB,GAAG,+BAA+B,CAAC,wBAAgB,CAAC,CAAC;AAC9E,SAAgB,oBAAoB;IAClC,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAgB,qBAAqB,CAAC,IAAY;IAChD,MAAM,UAAU,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACtC,OAAO,wBAAgB,CAAC,UAAU,CAAC,IAAI,IAAI,CAAC;AAC9C,CAAC;AAED,SAAgB,2BAA2B;IACzC,OAAO,wBAAgB,CAAC;AAC1B,CAAC;AAED,SAAgB,yBAAyB,CACvC,IAA+B;IAE/B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,MAAM,UAAU,GAAG,qBAAqB,CAAC,IAAI,CAAC,CAAC;IAC/C,OAAO,wBAAgB,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;AACnE,CAAC;AAED,SAAgB,wBAAwB,CAAC,IAAY;IACnD,MAAM,KAAK,GAAG,yBAAyB,CAAC,IAAI,CAAC,CAAC;IAC9C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAC;IACxB,MAAM,IAAI,KAAK,CAAC,qBAAqB,IAAI,YAAY,mBAAW,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;AACjF,CAAC;AAED,SAAgB,sBAAsB,CAAC,IAAY;IAIjD,MAAM,KAAK,GAAG,wBAAwB,CAAC,IAAI,CAAC,CAAC;IAC7C,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAC/C,OAAO,IAAA,qCAAoB,GAAE,CAAC;IAChC,CAAC;IACD,OAAO;QACL,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,OAAO;QAC9B,IAAI,EAAE,KAAK,CAAC,OAAO,CAAC,IAAI;KACzB,CAAC;AACJ,CAAC;AAED,SAAgB,0BAA0B,CACxC,IAAY,EACZ,UAAsC;IAEtC,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC;AAC1E,CAAC;AAED,SAAgB,kCAAkC,CAAC,IAAY;IAC7D,OAAO,wBAAwB,CAAC,IAAI,CAAC,CAAC,YAAY,CAAC,UAAU,KAAK,KAAK,CAAC;AAC1E,CAAC"}

package/lib/docker-config.js CHANGED Viewed

@@ -3,7 +3,8 @@
  * Fully generic - no hardcoded paths, all configurable
  */
-const { listProviderMetadata } = require('./provider-names');
+const { URL } = require('url');
+const { listProviderMetadata, getProviderMetadata } = require('./provider-names');
 /**
  * Built-in mount presets
  * Uses $HOME placeholder - resolved at runtime based on dockerContainerHome setting
@@ -44,7 +45,9 @@ function listProviderDockerPresetEntries() {
 const MOUNT_PRESETS = Object.freeze({
   ...BASE_MOUNT_PRESETS,
   ...Object.fromEntries(
-    listProviderDockerPresetEntries().map(([providerId, docker]) => [providerId, docker.mount])
+    listProviderDockerPresetEntries()
+      .filter(([, docker]) => docker.mount)
+      .map(([providerId, docker]) => [providerId, docker.mount])
   ),
 });
@@ -58,6 +61,17 @@ const ENV_PRESETS = Object.freeze({
   ),
 });
+// Providers that declare an envPassthrough preset but no automatic mount (e.g. omp: env/broker
+// auth only, zero automatic credential mounts). `resolveMounts` treats these as a valid preset
+// that resolves to no mount specs, rather than an unknown-preset error.
+const PROVIDER_ENV_ONLY_PRESETS = Object.freeze(
+  new Set(
+    listProviderDockerPresetEntries()
+      .filter(([, docker]) => !docker.mount && docker.envPassthrough.length > 0)
+      .map(([providerId]) => providerId)
+  )
+);
 /**
  * Resolve mount config to actual mount specs
  * @param {Array<string|object>} config - Preset names or {host, container, readonly?} objects
@@ -76,8 +90,12 @@ function resolveMounts(config, options = {}) {
     if (typeof item === 'string') {
       const preset = MOUNT_PRESETS[item];
       if (!preset) {
+        if (PROVIDER_ENV_ONLY_PRESETS.has(item)) {
+          return [];
+        }
         throw new Error(
-          `Unknown mount preset: "${item}". Valid presets: ${Object.keys(MOUNT_PRESETS).join(', ')}`
+          `Unknown mount preset: "${item}". Valid presets: ${Object.keys(MOUNT_PRESETS).join(', ')}. ` +
+            `Env-only presets (no mount): ${[...PROVIDER_ENV_ONLY_PRESETS].join(', ')}`
         );
       }
       return {
@@ -176,8 +194,11 @@ function validateMountConfig(value) {
   for (const item of value) {
     if (typeof item === 'string') {
-      if (!MOUNT_PRESETS[item]) {
-        return `Unknown mount preset: "${item}". Valid: ${Object.keys(MOUNT_PRESETS).join(', ')}`;
+      if (!MOUNT_PRESETS[item] && !PROVIDER_ENV_ONLY_PRESETS.has(item)) {
+        return (
+          `Unknown mount preset: "${item}". Valid: ${Object.keys(MOUNT_PRESETS).join(', ')}. ` +
+          `Env-only presets (no mount): ${[...PROVIDER_ENV_ONLY_PRESETS].join(', ')}`
+        );
       }
     } else if (typeof item === 'object' && item !== null) {
       if (!item.host) {
@@ -220,12 +241,108 @@ function validateEnvPassthrough(value) {
   return null;
 }
+/**
+ * A credential env var counts as present only when the container would actually receive a
+ * usable value. An absent, non-string, empty, or whitespace-only value is NOT a credential —
+ * `dockerEnvPassthrough: ["OPENAI_API_KEY="]` forces an empty value into `docker run -e`, which
+ * would otherwise read as "authenticated" while the CLI inside the container has nothing to use.
+ * @param {unknown} value
+ * @returns {boolean}
+ */
+function isUsableEnvValue(value) {
+  return typeof value === 'string' && value.trim() !== '';
+}
+/**
+ * A broker/base-URL env var is usable only when it parses as an absolute http(s) URL. Anything
+ * else (a bare host, a `file:` URL, a token pasted into the URL slot) fails closed rather than
+ * being handed to the provider to blow up on inside the container.
+ * @param {unknown} value
+ * @returns {boolean}
+ */
+function isUsableHttpUrl(value) {
+  if (!isUsableEnvValue(value)) {
+    return false;
+  }
+  let parsed;
+  try {
+    parsed = new URL(value.trim());
+  } catch {
+    return false;
+  }
+  return parsed.protocol === 'http:' || parsed.protocol === 'https:';
+}
+/**
+ * Validate a provider's fail-closed env/broker auth requirement (registry `docker.envAuth`)
+ * against the env vars actually forwarded into the container, using their ACTUAL values (a
+ * presence flag cannot distinguish a real key from a forced-empty one). Providers with no
+ * `envAuth` declared always pass (their auth is validated by mount/credential presence instead).
+ *
+ * Never includes a value in its output — only variable NAMES.
+ *
+ * @param {string} providerId
+ * @param {Record<string, string|undefined>} forwardedEnv - NAME -> the exact value the container
+ *   would receive
+ * @returns {{ok: boolean, satisfiedOneOf: boolean, malformed: string[], message: string}}
+ *   `satisfiedOneOf` reports whether an *automatic allowlist* credential is usable; `malformed`
+ *   lists hard plan defects (partial required pair, unusable URL) that no other credential can
+ *   compensate for. `ok` is the combination of both.
+ */
+function validateProviderEnvAuth(providerId, forwardedEnv) {
+  const metadata = getProviderMetadata(providerId);
+  const envAuth = metadata.docker && metadata.docker.envAuth;
+  if (!envAuth) {
+    return { ok: true, satisfiedOneOf: true, malformed: [], message: '' };
+  }
+  const requireUrl = new Set(envAuth.requireUrl || []);
+  const valueOf = (name) => (forwardedEnv ? forwardedEnv[name] : undefined);
+  // A URL-shaped var counts as "set" only when it is a usable http(s) URL; a malformed one is
+  // reported separately below so the remediation says "malformed", not "missing".
+  const isSet = (name) =>
+    requireUrl.has(name) ? isUsableHttpUrl(valueOf(name)) : isUsableEnvValue(valueOf(name));
+  const requireOneOf = envAuth.requireOneOf || [];
+  const satisfiedOneOf = requireOneOf.length === 0 || requireOneOf.some(isSet);
+  const malformed = [];
+  for (const name of requireUrl) {
+    if (isUsableEnvValue(valueOf(name)) && !isUsableHttpUrl(valueOf(name))) {
+      malformed.push(`${name} is set but is not a usable http(s) URL`);
+    }
+  }
+  for (const group of envAuth.requireTogether || []) {
+    const missing = group.filter((name) => !isSet(name));
+    if (missing.length > 0 && missing.length < group.length) {
+      malformed.push(`${group.join(' + ')} must be set together (missing ${missing.join(', ')})`);
+    }
+  }
+  const reasons = [...malformed];
+  if (!satisfiedOneOf) {
+    reasons.push(`one of ${requireOneOf.join(', ')} must be set to a non-empty value`);
+  }
+  return {
+    ok: malformed.length === 0 && satisfiedOneOf,
+    satisfiedOneOf,
+    malformed,
+    message: reasons.join('; '),
+  };
+}
 module.exports = {
   MOUNT_PRESETS,
   ENV_PRESETS,
+  PROVIDER_ENV_ONLY_PRESETS,
   resolveMounts,
   resolveEnvs,
   expandEnvPatterns,
+  isUsableEnvValue,
+  isUsableHttpUrl,
   validateMountConfig,
   validateEnvPassthrough,
+  validateProviderEnvAuth,
 };

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@the-open-engine/zeroshot",
-  "version": "6.23.0",
+  "version": "6.24.0",
   "description": "Multi-agent orchestration engine for Claude, Codex, and Gemini",
   "main": "src/orchestrator.js",
   "bin": {
@@ -47,7 +47,7 @@
     "build:agent-cli-provider": "tsc --project tsconfig.agent-cli-provider.build.json",
     "build:cluster": "npm run protocol:generate && tsc --project tsconfig.cluster.cjs.json && tsc --project tsconfig.cluster.esm.json && node scripts/build-cluster.js",
     "test:agent-cli-provider": "node --test tests/agent-cli-provider/*.test.js",
-    "test:omp": "npm run build:agent-cli-provider && node --test tests/agent-cli-provider/omp-*.test.js && node tests/run-tests.js tests/omp-rpc-watcher.test.js tests/omp-isolation-capability.test.js",
+    "test:omp": "npm run build:agent-cli-provider && node --test tests/agent-cli-provider/omp-*.test.js && node tests/run-tests.js tests/omp-rpc-watcher.test.js tests/omp-isolation-capability.test.js tests/omp-docker-auth.test.js tests/omp-docker-fresh-only.test.js",
     "test:providers:live": "npm run build:agent-cli-provider && node scripts/live-provider-smoke.js",
     "check:agent-cli-provider": "npm run check:agent-cli-provider:ci",
     "check:agent-cli-provider:ci": "npm run typecheck:agent-cli-provider && npm run lint:agent-cli-provider && npm run build:agent-cli-provider && npm run test:agent-cli-provider",

package/src/agent/agent-lifecycle.js CHANGED Viewed

@@ -66,9 +66,19 @@ async function createValidatorIsolation(agent, isolationConfig) {
       loadSettings().defaultProvider ||
       getDefaultProviderId()
   );
+  // Pre-effect platform probe: fail before any workspace/container side effect when the Docker
+  // engine cannot run the provider's registry-owned platform (e.g. OMP's linux/amd64).
+  const platform = IsolationManager.providerDockerPlatform(providerName);
+  IsolationManager.assertPlatformSupported(platform);
   // Run validators on the provider's image variant (installs its CLI as a Docker-cached layer).
   const image = IsolationManager.imageForProvider(providerName, isolationConfig.image);
-  await IsolationManager.ensureImage(image, true, IsolationManager.providerBuildArgs(providerName));
+  await IsolationManager.ensureImage(
+    image,
+    true,
+    IsolationManager.providerBuildArgs(providerName, isolationConfig.containerHome || '/home/node'),
+    platform
+  );
   const manager = new IsolationManager({ image });
@@ -81,6 +91,7 @@ async function createValidatorIsolation(agent, isolationConfig) {
     containerHome: isolationConfig.containerHome,
     provider: providerName,
     reuseExistingWorkspace: true,
+    platform,
   });
   const validatorIsolation = {

package/src/agent/provider-session.js CHANGED Viewed

@@ -264,6 +264,7 @@ function restoreAgentProviderSession({ agent, savedState, messageBus, clusterId
 }
 module.exports = {
+  agentCanReuseSession,
   agentWorkspaceProvenance,
   normalizeProviderSession,
   promptIdentity,

package/src/agent-cli-provider/omp-release.ts CHANGED Viewed

@@ -84,3 +84,29 @@ export function findOmpReleaseAsset(platform: string): OmpReleaseAsset | undefin
 export function ompReleaseAssetDownloadUrl(asset: OmpReleaseAsset): string {
   return `${OMP_RELEASE_DOWNLOAD_BASE_URL}/${asset.name}`;
 }
+// Docker isolation runs the cluster image as linux/amd64 only (see AGENTS.md OMP Docker
+// section); the base image's AWS/Terraform/kubectl/Helm/Infracost/TFLint/tfsec layers are
+// hard-coded x86-64 assets, so this cannot yet claim native arm64.
+export const OMP_DOCKER_PLATFORM = 'linux/amd64' as const;
+export const OMP_DOCKER_RELEASE_PLATFORM = 'linux-x64' as const satisfies OmpReleasePlatform;
+const OMP_DOCKER_RELEASE_ASSET = findOmpReleaseAsset(OMP_DOCKER_RELEASE_PLATFORM);
+if (!OMP_DOCKER_RELEASE_ASSET) {
+  throw new Error(
+    `No OMP release asset found for Docker platform "${OMP_DOCKER_RELEASE_PLATFORM}"`
+  );
+}
+const OMP_DOCKER_RELEASE_URL = ompReleaseAssetDownloadUrl(OMP_DOCKER_RELEASE_ASSET);
+const OMP_DOCKER_RELEASE_SHA256 = OMP_DOCKER_RELEASE_ASSET.sha256;
+// Digest-verified install for the Docker image variant only. Downloads the pinned release asset,
+// verifies its SHA-256 before install, and asserts `omp --version` matches exactly — never
+// `latest`, never trusting the tag URL alone.
+export const OMP_DOCKER_INSTALL_COMMAND: string =
+  `set -eu; curl -fsSL --retry 3 -o /tmp/omp "${OMP_DOCKER_RELEASE_URL}"; ` +
+  `printf '%s  /tmp/omp\\n' '${OMP_DOCKER_RELEASE_SHA256}' | sha256sum -c -; ` +
+  `install -m 0755 /tmp/omp /usr/local/bin/omp; rm -f /tmp/omp; ` +
+  `v="$(omp --version 2>&1 | head -n1 | tr -dc '0-9.')"; ` +
+  `[ "$v" = "${OMP_SUPPORTED_VERSION}" ] || { echo "omp --version mismatch: $v" >&2; exit 1; }`;