@vizuh/sabi 0.1.2 → 0.1.3

package/README.md

@@ -1,7 +1,12 @@
-# @vizuh/sabi
+# @vizuh/sabi: Command Code adapter
+
+This npm artifact is one Sabi adapter, not the whole Sabi product. Sabi also supports a local
+OpenAI-compatible proxy for OpenCode, Hermes, Prime Agent, Kilo and other clients, plus an
+experimental controller surface for Claude Code, Codex and Orca. See the
+[adapter directory](../../../docs/adapters/README.md) for the product map and evidence boundaries.
 
 Adaptive inference scheduling for [Command Code](https://commandcode.ai): a mod that plans each
-continuing round — model and reasoning effort — from the trajectory's own state (tool calls and
+continuing round, including model and reasoning effort, from the trajectory's own state (tool calls and
 their results, failure evidence, context size). Round 1 always runs on your session model; from
 round 2 on, a read round goes cheap, edits and tests go mid, and a failing tool escalates.
 
@@ -10,15 +15,16 @@ lives in the [repository](https://github.com/vizuh/sabi).
 
 The two paths are independent:
 
-- **Command Code mod:** no Sabi provider key and no proxy; it routes the subscription already
+- The Command Code mod needs no Sabi provider key or proxy. It routes the subscription already
   available to Command Code.
-- **Local proxy:** works with OpenCode, Hermes, Kilo and other OpenAI-compatible clients, using
-  OpenRouter, Ollama or another configured upstream.
+- The local proxy works with OpenCode, Hermes, Kilo, and other OpenAI-compatible clients. It uses
+  OpenRouter, Ollama, or another configured upstream.
 
 For the proxy, Sabi loads only the credential names referenced by `sabi.config.json`. Existing
 environment variables win, followed by `SABI_SECRETS_FILE`, the nearest workspace `secrets/.env`,
-and `~/.config/sabi/secrets.env` or `~/.config/sabi/.env`. It never copies secret values into a
-harness config, terminal, worktree, log or Git. Users who do not use Jev can set `judge.enabled` to
+and `~/.config/sabi/secrets.env` or `~/.config/sabi/.env`. It does not copy loaded values into generated harness configuration or logs. If you use a workspace
+secrets/.env, that source file is already in the worktree: keep it out of version control, add it to
+.gitignore, and protect its file permissions. Users who do not use Jev can set `judge.enabled` to
 `false`; users without a central secrets file can keep exporting provider variables normally.
 
 ## Install
@@ -43,7 +49,7 @@ cmd mods remove sabi
 
 The package ships a default `sabi.config.json` next to the bundle, so it works with no setup.
 To change tiers, policy or telemetry, put your own `sabi.config.json` in the project you run in,
-or at `~/.config/sabi/sabi.config.json` — both take precedence over the shipped default (or set
+or at `~/.config/sabi/sabi.config.json`; both take precedence over the shipped default (or set
 `SABI_CONFIG` to point at one explicitly).
 
 `harness.tiers` defaults to the strongest Command Code ids available from the Go plan up. A model

package/mod/sabi.mjs

@@ -1,4 +1,4 @@
-// @vizuh/sabi 0.1.2 — generated by pack.mjs from packages/adapters/command-code/mod/sabi.ts.
+// @vizuh/sabi 0.1.3 — generated by pack.mjs from packages/adapters/command-code/mod/sabi.ts.
 // Source and docs: https://github.com/vizuh/sabi
 
 // packages/core/src/state.ts
@@ -589,6 +589,31 @@ function validateConfig(value, source = "<inline>") {
       throw new Error(`Sabi config ${source}: telemetry.captureChars must be a positive number`);
     }
   }
+  const controller = config.controller;
+  if (controller !== void 0) {
+    if (!isObject(controller)) throw new Error(`Sabi config ${source}: controller must be an object`);
+    const controllerFields = /* @__PURE__ */ new Set(["preferredHarnesses", "harnesses"]);
+    for (const field of Object.keys(controller)) {
+      if (!controllerFields.has(field)) throw new Error(`Sabi config ${source}: controller.${field} is not a supported field`);
+    }
+    const validateStrings = (value2, label) => {
+      if (!Array.isArray(value2) || value2.some((item) => typeof item !== "string" || !item.trim())) {
+        throw new Error(`Sabi config ${source}: ${label} must be an array of nonempty strings`);
+      }
+      if (new Set(value2).size !== value2.length) throw new Error(`Sabi config ${source}: ${label} must not contain duplicates`);
+    };
+    if (controller.preferredHarnesses !== void 0) validateStrings(controller.preferredHarnesses, "controller.preferredHarnesses");
+    if (controller.harnesses !== void 0) {
+      if (!isObject(controller.harnesses)) throw new Error(`Sabi config ${source}: controller.harnesses must be an object`);
+      for (const [harnessName, settings] of Object.entries(controller.harnesses)) {
+        if (!isObject(settings)) throw new Error(`Sabi config ${source}: controller.harnesses.${harnessName} must be an object`);
+        for (const field of Object.keys(settings)) {
+          if (field !== "preferredModels") throw new Error(`Sabi config ${source}: controller.harnesses.${harnessName}.${field} is not a supported field`);
+        }
+        if (settings.preferredModels !== void 0) validateStrings(settings.preferredModels, `controller.harnesses.${harnessName}.preferredModels`);
+      }
+    }
+  }
   const harness = config.harness;
   if (harness !== void 0) {
     if (typeof harness !== "object" || harness === null) {
@@ -612,6 +637,25 @@ function validateConfig(value, source = "<inline>") {
   return { ...config, upstreams, models, aliases, policy };
 }
 
+// packages/core/src/log.ts
+import { appendFileSync, existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2 } from "node:fs";
+import { createHash, randomUUID } from "node:crypto";
+import path2 from "node:path";
+function defaultLogPath() {
+  return process.env.SABI_LOG?.trim() || path2.join(process.cwd(), ".sabi", "decisions.jsonl");
+}
+function appendDecision(record, logFile = defaultLogPath()) {
+  mkdirSync(path2.dirname(logFile), { recursive: true });
+  appendFileSync(logFile, `${JSON.stringify(record)}
+`);
+}
+function hashIdentity(kind, ...parts) {
+  return createHash("sha256").update(JSON.stringify([kind, ...parts])).digest("hex");
+}
+function sessionIdFor(session, client = "unknown") {
+  return session === void 0 ? randomUUID() : hashIdentity("session", client, session);
+}
+
 // packages/core/src/harness.ts
 function roundKindOf(round, calls) {
   if (round.assistantTurns === 0 || round.lastRole === "user") return "first-turn";
@@ -733,8 +777,10 @@ function sanitizeReason(reason, policy) {
 import * as readline from "node:readline/promises";
 
 // packages/adapters/command-code/mod/sabi.ts
+import path3 from "node:path";
 var MOD_ID = "sabi";
 var DECISION_TYPE = "sabi/decision";
+var CLIENT_ID = "command-code";
 function readLedger(state) {
   const raw = state.modState?.[MOD_ID] ?? {};
   return {
@@ -746,7 +792,8 @@ function readLedger(state) {
     toolNames: Array.isArray(raw.toolNames) ? raw.toolNames : [],
     hasTools: raw.hasTools === true,
     lastModel: raw.lastModel,
-    lastUsage: raw.lastUsage
+    lastUsage: raw.lastUsage,
+    sessionId: typeof raw.sessionId === "string" ? raw.sessionId : void 0
   };
 }
 function writeLedger(state, ledger) {
@@ -755,6 +802,29 @@ function writeLedger(state, ledger) {
 function compactedSince(ledger, stats) {
   return ledger.messageCount > 0 && stats.messageCount > 0 && stats.messageCount < ledger.messageCount;
 }
+function hashedToolNames(names) {
+  return names.map((name) => hashIdentity("tool", name));
+}
+function toUsageTotals(usage) {
+  if (!usage) return void 0;
+  const validTokens = (value) => typeof value === "number" && Number.isSafeInteger(value) && value >= 0;
+  if (!validTokens(usage.inputTokens) || !validTokens(usage.outputTokens)) return void 0;
+  const cachedTokens = usage.cachedInputTokens === void 0 ? 0 : usage.cachedInputTokens;
+  if (!validTokens(cachedTokens) || cachedTokens > usage.inputTokens) return void 0;
+  const promptTokens = usage.inputTokens;
+  const completionTokens = usage.outputTokens;
+  const totalTokens = promptTokens + completionTokens;
+  if (!Number.isSafeInteger(totalTokens)) return void 0;
+  return {
+    promptTokens,
+    completionTokens,
+    cachedTokens,
+    totalTokens
+  };
+}
+function logPathFor(ctx) {
+  return ctx?.cwd?.trim() ? path3.join(ctx.cwd, ".sabi", "decisions.jsonl") : void 0;
+}
 function sabi(cmd) {
   let config;
   try {
@@ -785,6 +855,9 @@ function sabi(cmd) {
       nextPlan = void 0;
       servedBy = void 0;
       const ledger = readLedger(state);
+      if (!ledger.sessionId) {
+        ledger.sessionId = sessionIdFor(void 0, CLIENT_ID);
+      }
       return writeLedger(state, { ...ledger, rounds: turnNumber });
     },
     // Sabi observes tool outcomes and never rewrites what the model sees.
@@ -847,7 +920,7 @@ function sabi(cmd) {
         lastUsage: usedThisTurn ? usage : void 0
       };
       previousFailure = adopted ? { failure: adopted.state.failure, failureEvidence: adopted.state.failureEvidence } : void 0;
-      recordDecision(ctx, {
+      recordCustomEntry(ctx, {
         turn: turnNumber,
         planned: servingPlan ? {
           tier: servingPlan.tier,
@@ -869,11 +942,49 @@ function sabi(cmd) {
         // Decision records never embed raw tool output by default; snippet capture is opt-in.
         captureSnippets: telemetry.captureSnippets
       });
+      if (servingPlan) {
+        const sessionId = ledger.sessionId ?? sessionIdFor(void 0, CLIENT_ID);
+        const usageTotals = toUsageTotals(usage);
+        const decision = {
+          ts: (/* @__PURE__ */ new Date()).toISOString(),
+          sessionId,
+          // sessionKnown stays false: the host does not expose a real session ID to the mod.
+          client: CLIENT_ID,
+          turnId: hashIdentity("turn", sessionId, String(turnNumber)),
+          servedModel: servedBy ?? void 0,
+          alias: "sabi-code",
+          mode: "auto",
+          rule: servingPlan.rule,
+          tier: servingPlan.tier,
+          reason: sanitizeReason(String(servingPlan.reason ?? ""), telemetry),
+          // This is the host adapter, not a provider entitlement claim.
+          upstream: CLIENT_ID,
+          upstreamModel: servingPlan.model,
+          stream: false,
+          state: {
+            ...servingPlan.state,
+            // Hash tool names; never persist raw tool outputs or args.
+            toolNames: hashedToolNames(servingPlan.state.toolNames),
+            lastToolNames: hashedToolNames(servingPlan.state.lastToolNames)
+          },
+          sessionKnown: false,
+          ...usageTotals ? { usage: usageTotals } : {},
+          // outcome means the model request round completed, not that the whole task succeeded.
+          outcome: "ok"
+        };
+        const logFile = logPathFor(ctx);
+        if (logFile) {
+          try {
+            appendDecision(decision, logFile);
+          } catch {
+          }
+        }
+      }
       return writeLedger(state, next);
     }
   });
 }
-function recordDecision(ctx, data) {
+function recordCustomEntry(ctx, data) {
   ctx?.session?.appendCustomEntry({ customType: DECISION_TYPE, data });
 }
 export {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@vizuh/sabi",
-  "version": "0.1.2",
+  "version": "0.1.3",
   "description": "Adaptive inference scheduling for Command Code: one bundled mod that routes each continuing round by model, effort and trajectory state.",
   "type": "module",
   "license": "MIT",

package/sabi.config.json

@@ -1,5 +1,5 @@
 {
-  "provenance": "Model ids, context windows and prices verified live from https://openrouter.ai/api/v1/models on 2026-09-18; input modalities for the same ids verified from the same endpoint the same day (`architecture.input_modalities`). Prices are USD per 1M tokens. Declared modalities are enforced: an undeclared capability is unknown, a declared one is binding.",
+  "provenance": "Model ids, context windows, output limits and prices verified live from https://openrouter.ai/api/v1/models on 2026-09-20; input modalities for the same ids verified from the same endpoint. Prices are USD per 1M tokens. Declared modalities are enforced: an undeclared capability is unknown, a declared one is binding.",
   "server": { "host": "127.0.0.1", "port": 8787 },
   "upstreams": {
     "openrouter": {
@@ -22,6 +22,7 @@
       "upstream": "openrouter",
       "model": "deepseek/deepseek-v4-flash-0731",
       "contextWindow": 1310720,
+      "maxOutputTokens": 943718,
       "capabilities": { "inputModalities": ["text"] },
       "cost": { "input": 0.06, "output": 0.12, "cacheRead": 0.012 }
     },
@@ -29,6 +30,7 @@
       "upstream": "openrouter",
       "model": "openai/gpt-5.6-luna",
       "contextWindow": 1050000,
+      "maxOutputTokens": 128000,
       "capabilities": { "inputModalities": ["text", "image", "file"] },
       "cost": { "input": 0.2, "output": 1.2, "cacheRead": 0.02 }
     },
@@ -36,6 +38,7 @@
       "upstream": "openrouter",
       "model": "anthropic/claude-sonnet-5",
       "contextWindow": 1000000,
+      "maxOutputTokens": 128000,
       "capabilities": { "inputModalities": ["text", "image", "file"] },
       "cost": { "input": 2, "output": 10, "cacheRead": 0.2 }
     },
@@ -70,6 +73,13 @@
     "captureSnippets": false,
     "captureChars": 800
   },
+  "controller": {
+    "preferredHarnesses": ["opencode", "command-code", "claude", "codex", "hermes"],
+    "harnesses": {
+      "command-code": { "preferredModels": ["moonshotai/kimi-k3"] },
+      "opencode": { "preferredModels": ["opencode-go/kimi-k3"] }
+    }
+  },
   "judge": {
     "enabled": true,
     "baseURL": "https://api.typesafe.ai/v1",