@the-open-engine/zeroshot 6.30.1 → 6.31.0

package/lib/agent-cli-provider/omp/sdk-settings-values.js

@@ -0,0 +1,112 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeUrl = safeUrl;
+exports.emptyHeaders = emptyHeaders;
+exports.rejectUnknown = rejectUnknown;
+exports.levelValue = levelValue;
+exports.enumValue = enumValue;
+exports.falseOnly = falseOnly;
+exports.booleanValue = booleanValue;
+exports.nonEmptyString = nonEmptyString;
+exports.nonNegativeNumber = nonNegativeNumber;
+exports.assertProviderId = assertProviderId;
+exports.stableValue = stableValue;
+exports.deepFreeze = deepFreeze;
+const contract_errors_1 = require("../contract-errors");
+const json_1 = require("../json");
+const sdk_settings_constants_1 = require("./sdk-settings-constants");
+function safeUrl(value, field) {
+    if (typeof value !== 'string' || value.length === 0 || value !== value.trim()) {
+        (0, contract_errors_1.invalidField)(field, `${field} must be a non-empty URL.`);
+    }
+    let parsed;
+    try {
+        parsed = new URL(value);
+    }
+    catch {
+        (0, contract_errors_1.invalidField)(field, `${field} must be an absolute URL.`);
+    }
+    if (parsed.username || parsed.password) {
+        (0, contract_errors_1.invalidField)(field, `${field} must not contain URL userinfo.`);
+    }
+    if (parsed.search || parsed.hash) {
+        (0, contract_errors_1.invalidField)(field, `${field} must not contain query parameters or fragments.`);
+    }
+    const loopback = parsed.hostname === 'localhost' || parsed.hostname === '127.0.0.1' || parsed.hostname === '::1';
+    if (parsed.protocol !== 'https:' && !(parsed.protocol === 'http:' && loopback)) {
+        (0, contract_errors_1.invalidField)(field, `${field} must use HTTPS, except for loopback HTTP providers.`);
+    }
+    return parsed.toString().replace(/\/$/, '');
+}
+function emptyHeaders(value, field) {
+    if (!(0, json_1.isRecord)(value))
+        (0, contract_errors_1.invalidField)(field, `${field} must be an object.`);
+    if (Object.keys(value).length !== 0) {
+        (0, contract_errors_1.invalidField)(field, 'Literal custom headers may persist credentials and are not accepted.');
+    }
+    return {};
+}
+function rejectUnknown(value, allowed, field) {
+    const unknown = Object.keys(value).find((key) => !allowed.has(key));
+    if (unknown !== undefined) {
+        (0, contract_errors_1.invalidField)(`${field}.${unknown}`, `Unknown OMP setting: ${field}.${unknown}.`);
+    }
+}
+function levelValue(value, field) {
+    return enumValue(value, sdk_settings_constants_1.LEVELS, field);
+}
+function enumValue(value, allowed, field) {
+    if (typeof value === 'string' && allowed.includes(value)) {
+        return value;
+    }
+    (0, contract_errors_1.invalidField)(field, `${field} must be one of: ${allowed.join(', ')}.`);
+}
+function falseOnly(value, field) {
+    if (value === false)
+        return false;
+    (0, contract_errors_1.invalidField)(field, `${field} must be false.`);
+}
+function booleanValue(value, field) {
+    if (typeof value === 'boolean')
+        return value;
+    (0, contract_errors_1.invalidField)(field, `${field} must be a boolean.`);
+}
+function nonEmptyString(value, field) {
+    if (typeof value === 'string' &&
+        value.length > 0 &&
+        value === value.trim() &&
+        !value.includes('\0')) {
+        return value;
+    }
+    (0, contract_errors_1.invalidField)(field, `${field} must be a non-empty string without surrounding whitespace.`);
+}
+function nonNegativeNumber(value, field) {
+    if (typeof value === 'number' && Number.isFinite(value) && value >= 0)
+        return value;
+    (0, contract_errors_1.invalidField)(field, `${field} must be a finite non-negative number.`);
+}
+function assertProviderId(provider, field) {
+    if (!sdk_settings_constants_1.PROVIDER_ID.test(provider)) {
+        (0, contract_errors_1.invalidField)(field, 'OMP provider IDs must use lowercase letters, numbers, dots, underscores, or hyphens.');
+    }
+}
+function stableValue(value) {
+    if (Array.isArray(value))
+        return value.map(stableValue);
+    if (!(0, json_1.isRecord)(value))
+        return value;
+    return Object.fromEntries(Object.keys(value)
+        .sort((left, right) => left.localeCompare(right))
+        .map((key) => [key, stableValue(value[key])]));
+}
+function deepFreeze(value) {
+    const candidate = value;
+    if (candidate === null || typeof candidate !== 'object' || Object.isFrozen(candidate)) {
+        return value;
+    }
+    for (const item of Object.values(candidate))
+        deepFreeze(item);
+    Object.freeze(candidate);
+    return value;
+}
+//# sourceMappingURL=sdk-settings-values.js.map

package/lib/agent-cli-provider/omp/sdk-settings-values.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-settings-values.js","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-settings-values.ts"],"names":[],"mappings":";;AAKA,0BAsBC;AAED,oCAMC;AAED,sCASC;AAED,gCAEC;AAED,8BASC;AAED,8BAGC;AAED,oCAGC;AAED,wCAUC;AAED,8CAGC;AAED,4CAOC;AAED,kCAQC;AAED,gCAQC;AArHD,wDAAkD;AAClD,kCAAmC;AACnC,qEAA+D;AAG/D,SAAgB,OAAO,CAAC,KAAc,EAAE,KAAa;IACnD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,IAAI,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;QAC9E,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,2BAA2B,CAAC,CAAC;IAC3D,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACvC,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,iCAAiC,CAAC,CAAC;IACjE,CAAC;IACD,IAAI,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC;QACjC,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,kDAAkD,CAAC,CAAC;IAClF,CAAC;IACD,MAAM,QAAQ,GACZ,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,WAAW,IAAI,MAAM,CAAC,QAAQ,KAAK,KAAK,CAAC;IAClG,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,QAAQ,CAAC,EAAE,CAAC;QAC/E,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,sDAAsD,CAAC,CAAC;IACtF,CAAC;IACD,OAAO,MAAM,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;AAC9C,CAAC;AAED,SAAgB,YAAY,CAAC,KAAc,EAAE,KAAa;IACxD,IAAI,CAAC,IAAA,eAAQ,EAAC,KAAK,CAAC;QAAE,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;IACzE,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACpC,IAAA,8BAAY,EAAC,KAAK,EAAE,sEAAsE,CAAC,CAAC;IAC9F,CAAC;IACD,OAAO,EAAE,CAAC;AACZ,CAAC;AAED,SAAgB,aAAa,CAC3B,KAA8B,EAC9B,OAA4B,EAC5B,KAAa;IAEb,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,OAAO,KAAK,SAAS,EAAE,CAAC;QAC1B,IAAA,8BAAY,EAAC,GAAG,KAAK,IAAI,OAAO,EAAE,EAAE,wBAAwB,KAAK,IAAI,OAAO,GAAG,CAAC,CAAC;IACnF,CAAC;AACH,CAAC;AAED,SAAgB,UAAU,CAAC,KAAc,EAAE,KAAa;IACtD,OAAO,SAAS,CAAC,KAAK,EAAE,+BAAM,EAAE,KAAK,CAAC,CAAC;AACzC,CAAC;AAED,SAAgB,SAAS,CACvB,KAAc,EACd,OAAU,EACV,KAAa;IAEb,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAK,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAChF,OAAO,KAAkB,CAAC;IAC5B,CAAC;IACD,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,oBAAoB,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACzE,CAAC;AAED,SAAgB,SAAS,CAAC,KAAc,EAAE,KAAa;IACrD,IAAI,KAAK,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IAClC,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,iBAAiB,CAAC,CAAC;AACjD,CAAC;AAED,SAAgB,YAAY,CAAC,KAAc,EAAE,KAAa;IACxD,IAAI,OAAO,KAAK,KAAK,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,qBAAqB,CAAC,CAAC;AACrD,CAAC;AAED,SAAgB,cAAc,CAAC,KAAc,EAAE,KAAa;IAC1D,IACE,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,CAAC,MAAM,GAAG,CAAC;QAChB,KAAK,KAAK,KAAK,CAAC,IAAI,EAAE;QACtB,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EACrB,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IACD,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,6DAA6D,CAAC,CAAC;AAC7F,CAAC;AAED,SAAgB,iBAAiB,CAAC,KAAc,EAAE,KAAa;IAC7D,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC;IACpF,IAAA,8BAAY,EAAC,KAAK,EAAE,GAAG,KAAK,wCAAwC,CAAC,CAAC;AACxE,CAAC;AAED,SAAgB,gBAAgB,CAAC,QAAgB,EAAE,KAAa;IAC9D,IAAI,CAAC,oCAAW,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;QAChC,IAAA,8BAAY,EACV,KAAK,EACL,sFAAsF,CACvF,CAAC;IACJ,CAAC;AACH,CAAC;AAED,SAAgB,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC;IACxD,IAAI,CAAC,IAAA,eAAQ,EAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,MAAM,CAAC,WAAW,CACvB,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC;SACf,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;SAChD,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAChD,CAAC;AACJ,CAAC;AAED,SAAgB,UAAU,CAAI,KAAQ;IACpC,MAAM,SAAS,GAAY,KAAK,CAAC;IACjC,IAAI,SAAS,KAAK,IAAI,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC;QACtF,OAAO,KAAK,CAAC;IACf,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC;QAAE,UAAU,CAAC,IAAI,CAAC,CAAC;IAC9D,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;IACzB,OAAO,KAAK,CAAC;AACf,CAAC"}

package/lib/agent-cli-provider/omp/sdk-settings.d.ts

@@ -0,0 +1,5 @@
+export { OMP_AUTH_BROKER_ENV_NAMES, OMP_SDK_REASONING_EFFORTS, OMP_SDK_TOOL_IDS, } from './sdk-settings-types';
+export type { ConfiguredOmpSdkSettings, ExactOmpModelSelector, OmpBrokerAuth, OmpEnvironmentAuth, OmpExecutionContext, OmpHomeAuth, OmpLevelOverride, OmpModelDefinition, OmpModelLevel, OmpModelsConfig, OmpNoneAuth, OmpProviderConfig, OmpReasoningEffort, OmpSdkAuth, OmpSdkSettings, OmpSdkToolId, OmpSettingsValidationContext, OmpTransport, } from './sdk-settings-types';
+export { parseExactOmpModelSelector } from './sdk-settings-selector';
+export { compilePrivateOmpModelsYaml, normalizeOmpSdkSettings, OMP_SDK_SETTINGS_DEFAULTS, resolveOmpSdkSettings, validateOmpSdkSettings, } from './sdk-settings-normalize';
+//# sourceMappingURL=sdk-settings.d.ts.map

package/lib/agent-cli-provider/omp/sdk-settings.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-settings.d.ts","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-settings.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,yBAAyB,EACzB,yBAAyB,EACzB,gBAAgB,GACjB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EACV,wBAAwB,EACxB,qBAAqB,EACrB,aAAa,EACb,kBAAkB,EAClB,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,aAAa,EACb,eAAe,EACf,WAAW,EACX,iBAAiB,EACjB,kBAAkB,EAClB,UAAU,EACV,cAAc,EACd,YAAY,EACZ,4BAA4B,EAC5B,YAAY,GACb,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,0BAA0B,EAAE,MAAM,yBAAyB,CAAC;AACrE,OAAO,EACL,2BAA2B,EAC3B,uBAAuB,EACvB,yBAAyB,EACzB,qBAAqB,EACrB,sBAAsB,GACvB,MAAM,0BAA0B,CAAC"}

package/lib/agent-cli-provider/omp/sdk-settings.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.validateOmpSdkSettings = exports.resolveOmpSdkSettings = exports.OMP_SDK_SETTINGS_DEFAULTS = exports.normalizeOmpSdkSettings = exports.compilePrivateOmpModelsYaml = exports.parseExactOmpModelSelector = exports.OMP_SDK_TOOL_IDS = exports.OMP_SDK_REASONING_EFFORTS = exports.OMP_AUTH_BROKER_ENV_NAMES = void 0;
+var sdk_settings_types_1 = require("./sdk-settings-types");
+Object.defineProperty(exports, "OMP_AUTH_BROKER_ENV_NAMES", { enumerable: true, get: function () { return sdk_settings_types_1.OMP_AUTH_BROKER_ENV_NAMES; } });
+Object.defineProperty(exports, "OMP_SDK_REASONING_EFFORTS", { enumerable: true, get: function () { return sdk_settings_types_1.OMP_SDK_REASONING_EFFORTS; } });
+Object.defineProperty(exports, "OMP_SDK_TOOL_IDS", { enumerable: true, get: function () { return sdk_settings_types_1.OMP_SDK_TOOL_IDS; } });
+var sdk_settings_selector_1 = require("./sdk-settings-selector");
+Object.defineProperty(exports, "parseExactOmpModelSelector", { enumerable: true, get: function () { return sdk_settings_selector_1.parseExactOmpModelSelector; } });
+var sdk_settings_normalize_1 = require("./sdk-settings-normalize");
+Object.defineProperty(exports, "compilePrivateOmpModelsYaml", { enumerable: true, get: function () { return sdk_settings_normalize_1.compilePrivateOmpModelsYaml; } });
+Object.defineProperty(exports, "normalizeOmpSdkSettings", { enumerable: true, get: function () { return sdk_settings_normalize_1.normalizeOmpSdkSettings; } });
+Object.defineProperty(exports, "OMP_SDK_SETTINGS_DEFAULTS", { enumerable: true, get: function () { return sdk_settings_normalize_1.OMP_SDK_SETTINGS_DEFAULTS; } });
+Object.defineProperty(exports, "resolveOmpSdkSettings", { enumerable: true, get: function () { return sdk_settings_normalize_1.resolveOmpSdkSettings; } });
+Object.defineProperty(exports, "validateOmpSdkSettings", { enumerable: true, get: function () { return sdk_settings_normalize_1.validateOmpSdkSettings; } });
+//# sourceMappingURL=sdk-settings.js.map

package/lib/agent-cli-provider/omp/sdk-settings.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-settings.js","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-settings.ts"],"names":[],"mappings":";;;AAAA,2DAI8B;AAH5B,+HAAA,yBAAyB,OAAA;AACzB,+HAAA,yBAAyB,OAAA;AACzB,sHAAA,gBAAgB,OAAA;AAsBlB,iEAAqE;AAA5D,mIAAA,0BAA0B,OAAA;AACnC,mEAMkC;AALhC,qIAAA,2BAA2B,OAAA;AAC3B,iIAAA,uBAAuB,OAAA;AACvB,mIAAA,yBAAyB,OAAA;AACzB,+HAAA,qBAAqB,OAAA;AACrB,gIAAA,sBAAsB,OAAA"}

package/lib/agent-cli-provider/omp/sdk-sidecar-context.d.ts

@@ -0,0 +1,11 @@
+import type { OmpSdkSidecarRequest } from './sdk-protocol';
+import { type CredentialChannel, type OmpAuthStorage, type OmpModel, type OmpModelRegistry, type OmpSdkBindings, type PrivateState } from './sdk-sidecar-types';
+export declare function privateState(): Promise<PrivateState>;
+export declare function isolateEnvironment(state: PrivateState, auth: OmpSdkSidecarRequest['auth']): Map<string, string | undefined>;
+export declare function restoreEnvironment(original: ReadonlyMap<string, string | undefined>): void;
+export declare function authStorage(sdk: OmpSdkBindings, request: OmpSdkSidecarRequest, state: PrivateState, provider: string, credentials: CredentialChannel): Promise<OmpAuthStorage>;
+export declare function exactModel(sdk: OmpSdkBindings, registry: OmpModelRegistry, storage: OmpAuthStorage, request: OmpSdkSidecarRequest): Readonly<OmpModel>;
+export declare function privateModelsConfig(request: OmpSdkSidecarRequest): {
+    readonly providers: Readonly<Record<string, Record<string, unknown>>>;
+};
+//# sourceMappingURL=sdk-sidecar-context.d.ts.map

package/lib/agent-cli-provider/omp/sdk-sidecar-context.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-sidecar-context.d.ts","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-sidecar-context.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAE3D,OAAO,EAKL,KAAK,iBAAiB,EACtB,KAAK,cAAc,EACnB,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACrB,KAAK,cAAc,EACnB,KAAK,YAAY,EAClB,MAAM,qBAAqB,CAAC;AAE7B,wBAAsB,YAAY,IAAI,OAAO,CAAC,YAAY,CAAC,CA0B1D;AACD,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,YAAY,EACnB,IAAI,EAAE,oBAAoB,CAAC,MAAM,CAAC,GACjC,GAAG,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAoBjC;AACD,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,GAAG,IAAI,CAa1F;AACD,wBAAsB,WAAW,CAC/B,GAAG,EAAE,cAAc,EACnB,OAAO,EAAE,oBAAoB,EAC7B,KAAK,EAAE,YAAY,EACnB,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,iBAAiB,GAC7B,OAAO,CAAC,cAAc,CAAC,CAkCzB;AACD,wBAAgB,UAAU,CACxB,GAAG,EAAE,cAAc,EACnB,QAAQ,EAAE,gBAAgB,EAC1B,OAAO,EAAE,cAAc,EACvB,OAAO,EAAE,oBAAoB,GAC5B,QAAQ,CAAC,QAAQ,CAAC,CAwDpB;AACD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,oBAAoB,GAAG;IAClE,QAAQ,CAAC,SAAS,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC;CACvE,CASA"}

package/lib/agent-cli-provider/omp/sdk-sidecar-context.js

@@ -0,0 +1,171 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.privateState = privateState;
+exports.isolateEnvironment = isolateEnvironment;
+exports.restoreEnvironment = restoreEnvironment;
+exports.authStorage = authStorage;
+exports.exactModel = exactModel;
+exports.privateModelsConfig = privateModelsConfig;
+const node_fs_1 = require("node:fs");
+const node_os_1 = require("node:os");
+const node_path_1 = require("node:path");
+const auth_policy_1 = require("./auth-policy");
+const sdk_sidecar_types_1 = require("./sdk-sidecar-types");
+async function privateState() {
+    const root = await node_fs_1.promises.mkdtemp((0, node_path_1.join)((0, node_os_1.tmpdir)(), 'zeroshot-omp-sdk-'));
+    try {
+        await node_fs_1.promises.chmod(root, 0o700);
+        const directories = [
+            'home',
+            'xdg-config',
+            'xdg-cache',
+            'xdg-data',
+            'xdg-state',
+            'agent',
+            'discovery-cwd',
+        ];
+        await Promise.all(directories.map((name) => node_fs_1.promises.mkdir((0, node_path_1.join)(root, name), { mode: 0o700 })));
+        return {
+            root,
+            agentDirectory: (0, node_path_1.join)(root, 'agent'),
+            authDatabasePath: (0, node_path_1.join)(root, 'agent', 'auth.db'),
+            brokerCachePath: (0, node_path_1.join)(root, 'agent', 'broker-snapshot.json'),
+            discoveryCwd: (0, node_path_1.join)(root, 'discovery-cwd'),
+            modelsPath: (0, node_path_1.join)(root, 'agent', 'models.yml'),
+        };
+    }
+    catch {
+        await node_fs_1.promises.rm(root, { force: true, maxRetries: 3, recursive: true });
+        throw new sdk_sidecar_types_1.SidecarFailure('cleanup-error', 'cleanup', false);
+    }
+}
+function isolateEnvironment(state, auth) {
+    const original = new Map();
+    const privateNames = new Set(sdk_sidecar_types_1.PRIVATE_BASE_ENV_KEYS);
+    for (const name of Object.keys(process.env)) {
+        if (name.startsWith('PI_') || name.startsWith('OMP_'))
+            privateNames.add(name);
+    }
+    if (auth.mode === 'environment') {
+        Object.values(auth.credentials).forEach(({ env }) => privateNames.add(env));
+    }
+    for (const name of privateNames) {
+        original.set(name, process.env[name]);
+        delete process.env[name];
+    }
+    process.env.HOME = (0, node_path_1.join)(state.root, 'home');
+    process.env.XDG_CONFIG_HOME = (0, node_path_1.join)(state.root, 'xdg-config');
+    process.env.XDG_CACHE_HOME = (0, node_path_1.join)(state.root, 'xdg-cache');
+    process.env.XDG_DATA_HOME = (0, node_path_1.join)(state.root, 'xdg-data');
+    process.env.XDG_STATE_HOME = (0, node_path_1.join)(state.root, 'xdg-state');
+    process.env.PI_CODING_AGENT_DIR = state.agentDirectory;
+    return original;
+}
+function restoreEnvironment(original) {
+    for (const name of Object.keys(process.env)) {
+        if (name.startsWith('PI_') || name.startsWith('OMP_'))
+            delete process.env[name];
+    }
+    original.forEach((value, key) => {
+        if (!sdk_sidecar_types_1.PRIVATE_BASE_ENV_KEYS.some((name) => name === key)) {
+            delete process.env[key];
+        }
+        else if (value === undefined) {
+            delete process.env[key];
+        }
+        else {
+            process.env[key] = value;
+        }
+    });
+}
+async function authStorage(sdk, request, state, provider, credentials) {
+    const environmentSecret = request.auth.mode === 'environment'
+        ? credentials.values[request.auth.credentials[provider]?.env ?? '']
+        : undefined;
+    if (request.auth.mode === 'environment' && !environmentSecret) {
+        throw new sdk_sidecar_types_1.SidecarFailure('provider-auth', 'auth', false);
+    }
+    const brokerCredentials = request.auth.mode === 'broker'
+        ? {
+            url: credentials.values.OMP_AUTH_BROKER_URL,
+            token: credentials.values.OMP_AUTH_BROKER_TOKEN,
+        }
+        : undefined;
+    if (request.auth.mode === 'broker' && (!brokerCredentials?.url || !brokerCredentials.token)) {
+        throw new sdk_sidecar_types_1.SidecarFailure('provider-auth', 'auth', false);
+    }
+    const storage = await (0, auth_policy_1.openOmpAuthStorage)({
+        mode: request.auth.mode,
+        privateAgentDirectory: state.agentDirectory,
+        privateDatabasePath: state.authDatabasePath,
+        brokerCachePath: state.brokerCachePath,
+        sourceLabel: 'zeroshot omp sdk broker',
+        createDatabase: (databasePath) => sdk.AuthStorage.create(databasePath),
+        discoverBroker: (agentDirectory, options) => sdk.discoverBrokerAuthStorage(agentDirectory, options),
+        ...(request.auth.mode === 'omp-home' ? { sourceDirectory: request.auth.path } : {}),
+        ...(brokerCredentials === undefined ? {} : { brokerCredentials }),
+    });
+    if (typeof environmentSecret === 'string') {
+        storage.setRuntimeApiKey(provider, environmentSecret);
+    }
+    return storage;
+}
+function exactModel(sdk, registry, storage, request) {
+    const parsed = sdk.parseModelString(request.modelSelector);
+    const model = parsed === undefined ? undefined : registry.find(parsed.provider, parsed.id);
+    if (parsed === undefined ||
+        `${parsed.provider}/${parsed.id}` !== request.modelSelector ||
+        model?.provider !== parsed.provider ||
+        model.id !== parsed.id) {
+        throw new sdk_sidecar_types_1.SidecarFailure('model-resolution', 'model', false);
+    }
+    const available = registry
+        .getAvailable()
+        .find((candidate) => candidate.provider === parsed.provider && candidate.id === parsed.id);
+    if (available === undefined ||
+        (request.auth.mode === 'none') === storage.hasAuth(parsed.provider)) {
+        throw new sdk_sidecar_types_1.SidecarFailure('provider-auth', 'auth', false);
+    }
+    const providerConfig = request.modelsConfig.providers[parsed.provider];
+    const models = (0, sdk_sidecar_types_1.isUnknownArray)(providerConfig?.models) ? providerConfig.models : [];
+    const declaredModel = models.find((candidate) => (0, sdk_sidecar_types_1.isRecord)(candidate) && candidate.id === parsed.id);
+    const declaredBaseUrl = (0, sdk_sidecar_types_1.isRecord)(declaredModel) && typeof declaredModel.baseUrl === 'string'
+        ? declaredModel.baseUrl
+        : typeof providerConfig?.baseUrl === 'string'
+            ? providerConfig.baseUrl
+            : undefined;
+    const declaredApi = (0, sdk_sidecar_types_1.isRecord)(declaredModel) && typeof declaredModel.api === 'string'
+        ? declaredModel.api
+        : typeof providerConfig?.api === 'string'
+            ? providerConfig.api
+            : undefined;
+    const routeExposed = model.api !== undefined || model.baseUrl !== undefined;
+    const availableRouteExposed = available.api !== undefined || available.baseUrl !== undefined;
+    if (routeExposed !== availableRouteExposed ||
+        (routeExposed && (model.api === undefined || model.baseUrl === undefined)) ||
+        (availableRouteExposed && (available.api === undefined || available.baseUrl === undefined)) ||
+        (routeExposed && declaredBaseUrl !== undefined && model.baseUrl !== declaredBaseUrl) ||
+        (routeExposed && declaredApi !== undefined && model.api !== declaredApi) ||
+        model.api !== available.api ||
+        model.baseUrl !== available.baseUrl) {
+        throw new sdk_sidecar_types_1.SidecarFailure('model-resolution', 'model', false);
+    }
+    return Object.freeze({
+        provider: model.provider,
+        id: model.id,
+        ...(model.api === undefined ? {} : { api: model.api }),
+        ...(model.baseUrl === undefined ? {} : { baseUrl: model.baseUrl }),
+    });
+}
+function privateModelsConfig(request) {
+    const providers = {};
+    for (const [provider, config] of Object.entries(request.modelsConfig.providers)) {
+        const copy = JSON.parse(JSON.stringify(config));
+        if (!(0, sdk_sidecar_types_1.isRecord)(copy))
+            throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+        delete copy.apiKey;
+        providers[provider] = copy;
+    }
+    return { providers };
+}
+//# sourceMappingURL=sdk-sidecar-context.js.map

package/lib/agent-cli-provider/omp/sdk-sidecar-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-sidecar-context.js","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-sidecar-context.ts"],"names":[],"mappings":";;AAmBA,oCA0BC;AACD,gDAuBC;AACD,gDAaC;AACD,kCAwCC;AACD,gCA6DC;AACD,kDAWC;AAtMD,qCAAyC;AACzC,qCAAiC;AACjC,yCAAiC;AAGjC,+CAAmD;AACnD,2DAW6B;AAEtB,KAAK,UAAU,YAAY;IAChC,MAAM,IAAI,GAAG,MAAM,kBAAE,CAAC,OAAO,CAAC,IAAA,gBAAI,EAAC,IAAA,gBAAM,GAAE,EAAE,mBAAmB,CAAC,CAAC,CAAC;IACnE,IAAI,CAAC;QACH,MAAM,kBAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;QAC5B,MAAM,WAAW,GAAG;YAClB,MAAM;YACN,YAAY;YACZ,WAAW;YACX,UAAU;YACV,WAAW;YACX,OAAO;YACP,eAAe;SAChB,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,kBAAE,CAAC,KAAK,CAAC,IAAA,gBAAI,EAAC,IAAI,EAAE,IAAI,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1F,OAAO;YACL,IAAI;YACJ,cAAc,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,CAAC;YACnC,gBAAgB,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,EAAE,SAAS,CAAC;YAChD,eAAe,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,EAAE,sBAAsB,CAAC;YAC5D,YAAY,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,eAAe,CAAC;YACzC,UAAU,EAAE,IAAA,gBAAI,EAAC,IAAI,EAAE,OAAO,EAAE,YAAY,CAAC;SAC9C,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,kBAAE,CAAC,EAAE,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACnE,MAAM,IAAI,kCAAc,CAAC,eAAe,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAC9D,CAAC;AACH,CAAC;AACD,SAAgB,kBAAkB,CAChC,KAAmB,EACnB,IAAkC;IAElC,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA8B,CAAC;IACvD,MAAM,YAAY,GAAG,IAAI,GAAG,CAAS,yCAAqB,CAAC,CAAC;IAC5D,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAChF,CAAC;IACD,IAAI,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QAChC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IAC9E,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,YAAY,EAAE,CAAC;QAChC,QAAQ,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,CAAC,GAAG,CAAC,IAAI,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC5C,OAAO,CAAC,GAAG,CAAC,eAAe,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,IAAI,EAAE,YAAY,CAAC,CAAC;IAC7D,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,aAAa,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACzD,OAAO,CAAC,GAAG,CAAC,cAAc,GAAG,IAAA,gBAAI,EAAC,KAAK,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC;IAC3D,OAAO,CAAC,GAAG,CAAC,mBAAmB,GAAG,KAAK,CAAC,cAAc,CAAC;IACvD,OAAO,QAAQ,CAAC;AAClB,CAAC;AACD,SAAgB,kBAAkB,CAAC,QAAiD;IAClF,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5C,IAAI,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC;YAAE,OAAO,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IAClF,CAAC;IACD,QAAQ,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;QAC9B,IAAI,CAAC,yCAAqB,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACxD,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC/B,OAAO,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1B,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QAC3B,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC;AACM,KAAK,UAAU,WAAW,CAC/B,GAAmB,EACnB,OAA6B,EAC7B,KAAmB,EACnB,QAAgB,EAChB,WAA8B;IAE9B,MAAM,iBAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa;QACjC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,EAAE,GAAG,IAAI,EAAE,CAAC;QACnE,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,IAAI,CAAC,iBAAiB,EAAE,CAAC;QAC9D,MAAM,IAAI,kCAAc,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,iBAAiB,GACrB,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ;QAC5B,CAAC,CAAC;YACE,GAAG,EAAE,WAAW,CAAC,MAAM,CAAC,mBAAmB;YAC3C,KAAK,EAAE,WAAW,CAAC,MAAM,CAAC,qBAAqB;SAChD;QACH,CAAC,CAAC,SAAS,CAAC;IAChB,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,iBAAiB,EAAE,GAAG,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC,EAAE,CAAC;QAC5F,MAAM,IAAI,kCAAc,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,IAAA,gCAAkB,EAAC;QACvC,IAAI,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI;QACvB,qBAAqB,EAAE,KAAK,CAAC,cAAc;QAC3C,mBAAmB,EAAE,KAAK,CAAC,gBAAgB;QAC3C,eAAe,EAAE,KAAK,CAAC,eAAe;QACtC,WAAW,EAAE,yBAAyB;QACtC,cAAc,EAAE,CAAC,YAAY,EAAE,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,MAAM,CAAC,YAAY,CAAC;QACtE,cAAc,EAAE,CAAC,cAAc,EAAE,OAAO,EAAE,EAAE,CAC1C,GAAG,CAAC,yBAAyB,CAAC,cAAc,EAAE,OAAO,CAAC;QACxD,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnF,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC;KAClE,CAAC,CAAC;IACH,IAAI,OAAO,iBAAiB,KAAK,QAAQ,EAAE,CAAC;QAC1C,OAAO,CAAC,gBAAgB,CAAC,QAAQ,EAAE,iBAAiB,CAAC,CAAC;IACxD,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AACD,SAAgB,UAAU,CACxB,GAAmB,EACnB,QAA0B,EAC1B,OAAuB,EACvB,OAA6B;IAE7B,MAAM,MAAM,GAAG,GAAG,CAAC,gBAAgB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3D,MAAM,KAAK,GAAG,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;IAC3F,IACE,MAAM,KAAK,SAAS;QACpB,GAAG,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,EAAE,EAAE,KAAK,OAAO,CAAC,aAAa;QAC3D,KAAK,EAAE,QAAQ,KAAK,MAAM,CAAC,QAAQ;QACnC,KAAK,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,EACtB,CAAC;QACD,MAAM,IAAI,kCAAc,CAAC,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,MAAM,SAAS,GAAG,QAAQ;SACvB,YAAY,EAAE;SACd,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,QAAQ,KAAK,MAAM,CAAC,QAAQ,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CAAC,CAAC;IAC7F,IACE,SAAS,KAAK,SAAS;QACvB,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,MAAM,CAAC,KAAK,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,EACnE,CAAC;QACD,MAAM,IAAI,kCAAc,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,MAAM,cAAc,GAAG,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IACvE,MAAM,MAAM,GAAG,IAAA,kCAAc,EAAC,cAAc,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC;IACnF,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAC/B,CAAC,SAAS,EAAE,EAAE,CAAC,IAAA,4BAAQ,EAAC,SAAS,CAAC,IAAI,SAAS,CAAC,EAAE,KAAK,MAAM,CAAC,EAAE,CACjE,CAAC;IACF,MAAM,eAAe,GACnB,IAAA,4BAAQ,EAAC,aAAa,CAAC,IAAI,OAAO,aAAa,CAAC,OAAO,KAAK,QAAQ;QAClE,CAAC,CAAC,aAAa,CAAC,OAAO;QACvB,CAAC,CAAC,OAAO,cAAc,EAAE,OAAO,KAAK,QAAQ;YAC3C,CAAC,CAAC,cAAc,CAAC,OAAO;YACxB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,WAAW,GACf,IAAA,4BAAQ,EAAC,aAAa,CAAC,IAAI,OAAO,aAAa,CAAC,GAAG,KAAK,QAAQ;QAC9D,CAAC,CAAC,aAAa,CAAC,GAAG;QACnB,CAAC,CAAC,OAAO,cAAc,EAAE,GAAG,KAAK,QAAQ;YACvC,CAAC,CAAC,cAAc,CAAC,GAAG;YACpB,CAAC,CAAC,SAAS,CAAC;IAClB,MAAM,YAAY,GAAG,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC;IAC5E,MAAM,qBAAqB,GAAG,SAAS,CAAC,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC;IAC7F,IACE,YAAY,KAAK,qBAAqB;QACtC,CAAC,YAAY,IAAI,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAC1E,CAAC,qBAAqB,IAAI,CAAC,SAAS,CAAC,GAAG,KAAK,SAAS,IAAI,SAAS,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC;QAC3F,CAAC,YAAY,IAAI,eAAe,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,eAAe,CAAC;QACpF,CAAC,YAAY,IAAI,WAAW,KAAK,SAAS,IAAI,KAAK,CAAC,GAAG,KAAK,WAAW,CAAC;QACxE,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,GAAG;QAC3B,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,OAAO,EACnC,CAAC;QACD,MAAM,IAAI,kCAAc,CAAC,kBAAkB,EAAE,OAAO,EAAE,KAAK,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,GAAG,CAAC,KAAK,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC;QACtD,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;KACnE,CAAC,CAAC;AACL,CAAC;AACD,SAAgB,mBAAmB,CAAC,OAA6B;IAG/D,MAAM,SAAS,GAA4C,EAAE,CAAC;IAC9D,KAAK,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,SAAS,CAAC,EAAE,CAAC;QAChF,MAAM,IAAI,GAAY,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACzD,IAAI,CAAC,IAAA,4BAAQ,EAAC,IAAI,CAAC;YAAE,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QACnF,OAAO,IAAI,CAAC,MAAM,CAAC;QACnB,SAAS,CAAC,QAAQ,CAAC,GAAG,IAAI,CAAC;IAC7B,CAAC;IACD,OAAO,EAAE,SAAS,EAAE,CAAC;AACvB,CAAC"}

package/lib/agent-cli-provider/omp/sdk-sidecar-credentials.d.ts

@@ -0,0 +1,5 @@
+import { type OmpSdkSidecarRequest } from './sdk-protocol';
+import { type CredentialChannel } from './sdk-sidecar-types';
+export declare function readCredentialChannel(fd: number): CredentialChannel;
+export declare function credentialsForRequest(request: OmpSdkSidecarRequest, channel: CredentialChannel): CredentialChannel;
+//# sourceMappingURL=sdk-sidecar-credentials.d.ts.map

package/lib/agent-cli-provider/omp/sdk-sidecar-credentials.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-sidecar-credentials.d.ts","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-sidecar-credentials.ts"],"names":[],"mappings":"AAGA,OAAO,EAAgC,KAAK,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AACzF,OAAO,EAOL,KAAK,iBAAiB,EACvB,MAAM,qBAAqB,CAAC;AAS7B,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,iBAAiB,CAqDnE;AACD,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,oBAAoB,EAC7B,OAAO,EAAE,iBAAiB,GACzB,iBAAiB,CAqBnB"}

package/lib/agent-cli-provider/omp/sdk-sidecar-credentials.js

@@ -0,0 +1,94 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readCredentialChannel = readCredentialChannel;
+exports.credentialsForRequest = credentialsForRequest;
+const node_fs_1 = require("node:fs");
+const node_util_1 = require("node:util");
+const sdk_protocol_1 = require("./sdk-protocol");
+const sdk_sidecar_types_1 = require("./sdk-sidecar-types");
+function closeCredentialChannel(fd) {
+    try {
+        (0, node_fs_1.closeSync)(fd);
+    }
+    catch {
+        throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+    }
+}
+function readCredentialChannel(fd) {
+    if (!Number.isInteger(fd) || fd < 3) {
+        throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+    }
+    const buffer = Buffer.allocUnsafe(sdk_protocol_1.OMP_SDK_MAX_CREDENTIAL_BYTES + 1);
+    let offset = 0;
+    try {
+        while (offset <= sdk_protocol_1.OMP_SDK_MAX_CREDENTIAL_BYTES) {
+            const count = (0, node_fs_1.readSync)(fd, buffer, offset, buffer.byteLength - offset, null);
+            if (count === 0)
+                break;
+            offset += count;
+        }
+    }
+    catch {
+        throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+    }
+    finally {
+        closeCredentialChannel(fd);
+    }
+    if (offset === 0 || offset > sdk_protocol_1.OMP_SDK_MAX_CREDENTIAL_BYTES) {
+        throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+    }
+    let parsed;
+    try {
+        const text = new node_util_1.TextDecoder('utf-8', { fatal: true }).decode(buffer.subarray(0, offset));
+        parsed = JSON.parse(text);
+    }
+    catch {
+        throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+    }
+    if (!(0, sdk_sidecar_types_1.isRecord)(parsed) ||
+        Object.keys(parsed).length !== 2 ||
+        parsed.protocolVersion !== 1 ||
+        !(0, sdk_sidecar_types_1.isRecord)(parsed.values)) {
+        throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+    }
+    const entries = Object.entries(parsed.values);
+    if (entries.length > sdk_sidecar_types_1.MAX_CREDENTIAL_COUNT) {
+        throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+    }
+    const values = {};
+    for (const [name, value] of entries) {
+        if (!sdk_sidecar_types_1.CREDENTIAL_NAME.test(name) ||
+            Buffer.byteLength(name) > sdk_sidecar_types_1.MAX_CREDENTIAL_NAME_BYTES ||
+            typeof value !== 'string' ||
+            value.length === 0 ||
+            Buffer.byteLength(value) > sdk_sidecar_types_1.MAX_CREDENTIAL_VALUE_BYTES) {
+            throw new sdk_sidecar_types_1.SidecarFailure('invalid-request', 'request', false);
+        }
+        values[name] = value;
+    }
+    return { values: Object.freeze(values) };
+}
+function credentialsForRequest(request, channel) {
+    const provider = request.modelSelector.slice(0, request.modelSelector.indexOf('/'));
+    let expected;
+    if (request.auth.mode === 'environment') {
+        const reference = request.auth.credentials[provider];
+        if (reference === undefined)
+            throw new sdk_sidecar_types_1.SidecarFailure('provider-auth', 'auth', false);
+        expected = [reference.env];
+    }
+    else if (request.auth.mode === 'broker') {
+        expected = ['OMP_AUTH_BROKER_TOKEN', 'OMP_AUTH_BROKER_URL'];
+    }
+    else {
+        expected = [];
+    }
+    const actual = Object.keys(channel.values).sort((left, right) => left.localeCompare(right));
+    const sortedExpected = [...expected].sort((left, right) => left.localeCompare(right));
+    if (actual.length !== sortedExpected.length ||
+        actual.some((name, index) => name !== sortedExpected[index])) {
+        throw new sdk_sidecar_types_1.SidecarFailure('provider-auth', 'auth', false);
+    }
+    return channel;
+}
+//# sourceMappingURL=sdk-sidecar-credentials.js.map

package/lib/agent-cli-provider/omp/sdk-sidecar-credentials.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-sidecar-credentials.js","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-sidecar-credentials.ts"],"names":[],"mappings":";;AAqBA,sDAqDC;AACD,sDAwBC;AAnGD,qCAA8C;AAC9C,yCAAwC;AAExC,iDAAyF;AACzF,2DAQ6B;AAE7B,SAAS,sBAAsB,CAAC,EAAU;IACxC,IAAI,CAAC;QACH,IAAA,mBAAS,EAAC,EAAE,CAAC,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;AACH,CAAC;AACD,SAAgB,qBAAqB,CAAC,EAAU;IAC9C,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;QACpC,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,2CAA4B,GAAG,CAAC,CAAC,CAAC;IACpE,IAAI,MAAM,GAAG,CAAC,CAAC;IACf,IAAI,CAAC;QACH,OAAO,MAAM,IAAI,2CAA4B,EAAE,CAAC;YAC9C,MAAM,KAAK,GAAG,IAAA,kBAAQ,EAAC,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,UAAU,GAAG,MAAM,EAAE,IAAI,CAAC,CAAC;YAC7E,IAAI,KAAK,KAAK,CAAC;gBAAE,MAAM;YACvB,MAAM,IAAI,KAAK,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;YAAS,CAAC;QACT,sBAAsB,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC;IACD,IAAI,MAAM,KAAK,CAAC,IAAI,MAAM,GAAG,2CAA4B,EAAE,CAAC;QAC1D,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,uBAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QAC1F,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,IACE,CAAC,IAAA,4BAAQ,EAAC,MAAM,CAAC;QACjB,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,KAAK,CAAC;QAChC,MAAM,CAAC,eAAe,KAAK,CAAC;QAC5B,CAAC,IAAA,4BAAQ,EAAC,MAAM,CAAC,MAAM,CAAC,EACxB,CAAC;QACD,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC9C,IAAI,OAAO,CAAC,MAAM,GAAG,wCAAoB,EAAE,CAAC;QAC1C,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,MAAM,GAA2B,EAAE,CAAC;IAC1C,KAAK,MAAM,CAAC,IAAI,EAAE,KAAK,CAAC,IAAI,OAAO,EAAE,CAAC;QACpC,IACE,CAAC,mCAAe,CAAC,IAAI,CAAC,IAAI,CAAC;YAC3B,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,GAAG,6CAAyB;YACnD,OAAO,KAAK,KAAK,QAAQ;YACzB,KAAK,CAAC,MAAM,KAAK,CAAC;YAClB,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,GAAG,8CAA0B,EACrD,CAAC;YACD,MAAM,IAAI,kCAAc,CAAC,iBAAiB,EAAE,SAAS,EAAE,KAAK,CAAC,CAAC;QAChE,CAAC;QACD,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;IACvB,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC;AAC3C,CAAC;AACD,SAAgB,qBAAqB,CACnC,OAA6B,EAC7B,OAA0B;IAE1B,MAAM,QAAQ,GAAG,OAAO,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC;IACpF,IAAI,QAA2B,CAAC;IAChC,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;QACxC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,SAAS,KAAK,SAAS;YAAE,MAAM,IAAI,kCAAc,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;QACtF,QAAQ,GAAG,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC7B,CAAC;SAAM,IAAI,OAAO,CAAC,IAAI,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC1C,QAAQ,GAAG,CAAC,uBAAuB,EAAE,qBAAqB,CAAC,CAAC;IAC9D,CAAC;SAAM,CAAC;QACN,QAAQ,GAAG,EAAE,CAAC;IAChB,CAAC;IACD,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IAC5F,MAAM,cAAc,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC;IACtF,IACE,MAAM,CAAC,MAAM,KAAK,cAAc,CAAC,MAAM;QACvC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC,IAAI,KAAK,cAAc,CAAC,KAAK,CAAC,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,kCAAc,CAAC,eAAe,EAAE,MAAM,EAAE,KAAK,CAAC,CAAC;IAC3D,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/lib/agent-cli-provider/omp/sdk-sidecar-execute.d.ts

@@ -0,0 +1,5 @@
+import { type OmpSdkProtocolFrame } from './sdk-protocol';
+import { type OmpSdkSidecarOptions } from './sdk-sidecar-types';
+export declare function executeOmpSdkSidecar(input: unknown, options?: OmpSdkSidecarOptions): Promise<OmpSdkProtocolFrame>;
+export declare function serializeOmpSdkFrame(frame: OmpSdkProtocolFrame): string;
+//# sourceMappingURL=sdk-sidecar-execute.d.ts.map

package/lib/agent-cli-provider/omp/sdk-sidecar-execute.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sdk-sidecar-execute.d.ts","sourceRoot":"","sources":["../../../src/agent-cli-provider/omp/sdk-sidecar-execute.ts"],"names":[],"mappings":"AAGA,OAAO,EAKL,KAAK,mBAAmB,EAEzB,MAAM,gBAAgB,CAAC;AAmBxB,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,qBAAqB,CAAC;AAmI7B,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,OAAO,EACd,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,mBAAmB,CAAC,CAwB9B;AACD,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,mBAAmB,GAAG,MAAM,CAMvE"}