@xenosystem/acp-agent 0.1.1 → 0.2.1

package/dist/providers/xenoAgentsApiProvider.js

@@ -0,0 +1,302 @@
+/**
+ * `xeno-agents-api` — drive a XENO **hosted agent run** through the ACP provider contract.
+ *
+ * Unlike every other provider in this package, this one does NOT spawn a local CLI/process. It
+ * maps the frozen v1 provider-runtime contract (definition → session → prompt → cancel) onto the
+ * hosted-runs wire client (`../hosted/xeno-agents-client.ts`, the vendored `@xeno/agents-client`):
+ *
+ *   - `createSession()`        → allocates an ACP-local session id; run creation is deferred to prompt.
+ *   - `prompt(request, ctx)`   → `client.createRun({ prompt })` + `client.attach(runId)`, translating
+ *                                each hosted `RunEvent` to `ProviderEvent`s (see
+ *                                `xenoAgentsApiEventMapper.ts`) which the ACP server maps to
+ *                                `session/update` notifications. Token usage is returned in the result.
+ *   - `cancel(sessionId)`      → `client.stopRun(runId)` (graceful) + the prompt AbortSignal breaks attach.
+ *
+ * The run executes in the CLOUD (api.xenostudio.ai); this provider is a thin, streaming bridge. It
+ * therefore truthfully declares `authRequirement`/`networkRequirement: required` and carries no
+ * LOCAL filesystem/terminal authority (the hosted run does its own I/O server-side). Consequently
+ * the capability gate classifies it `requires_approval` — it never runs "just because it exists";
+ * the CLI's `resolveProviderStatus` (policy + approval) is the authoritative run-gate, exactly like
+ * `claude-local`.
+ *
+ * AUTH/CONFIG INTEGRATION POINT (xeno-acp has NO account layer): the platform bearer token + base
+ * URL are supplied via provider `options` — `{ token, baseUrl?, workspace?, fetchImpl?, client? }` —
+ * or, as a fallback, the `XENO_AGENTS_API_TOKEN` / `XENO_AGENTS_API_BASE_URL` /
+ * `XENO_AGENTS_API_WORKSPACE` environment variables. An embedder (e.g. XENO Hub) that already holds
+ * a token injects it directly through `options.token`; tests inject a mock `options.client`.
+ */
+import { createAgentsClient, isAgentsApiError } from "../hosted/xeno-agents-client.js";
+import { createEventFactory } from "./providerEvents.js";
+import { ProviderConfigurationError, ProviderInternalError } from "./providerErrors.js";
+import { renderPromptText } from "./claudeLocalProvider.js";
+import { extractRunUsage, mapRunEventToProviderPayloads, terminalDispositionFor, } from "./xenoAgentsApiEventMapper.js";
+export const XENO_AGENTS_API_ID = "xeno-agents-api";
+export const XENO_AGENTS_API_DEFAULT_HOST = "api.xenostudio.ai";
+/** Truthful capability declaration: streams text + tool calls, needs auth + network, no LOCAL I/O. */
+export const XENO_AGENTS_API_CAPABILITIES = {
+    streamsText: true,
+    emitsPlan: false,
+    emitsToolCalls: true,
+    emitsUsage: true,
+    supportsCancel: true,
+    supportsMultipleSessions: true,
+    requiresAuth: true, // a platform bearer token
+    usesNetwork: true, // calls api.xenostudio.ai
+    canReadFiles: false, // the hosted run does its own I/O in the cloud, not on this machine
+    canWriteFiles: false,
+    canRunTerminal: false,
+};
+/** Env fallbacks used only when the corresponding option is not supplied. */
+export const XENO_AGENTS_API_TOKEN_ENV = "XENO_AGENTS_API_TOKEN";
+export const XENO_AGENTS_API_BASE_URL_ENV = "XENO_AGENTS_API_BASE_URL";
+export const XENO_AGENTS_API_WORKSPACE_ENV = "XENO_AGENTS_API_WORKSPACE";
+class XenoAgentsApiRuntime {
+    definition;
+    options;
+    client;
+    sessionSeq = 0;
+    promptCount = 0;
+    /** Active hosted run id per ACP session, so `cancel` can stop the right run. */
+    activeRuns = new Map();
+    constructor(definition, config) {
+        this.definition = definition;
+        this.options = (config?.options ?? {});
+    }
+    initialize() { }
+    createSession() {
+        this.sessionSeq += 1;
+        return { sessionId: `${XENO_AGENTS_API_ID}-session-${this.sessionSeq}`, createdAt: new Date().toISOString() };
+    }
+    cancel(sessionId) {
+        const runId = this.activeRuns.get(sessionId);
+        if (!runId)
+            return;
+        // Fire-and-forget graceful stop; the prompt's AbortSignal also breaks the attach loop.
+        const client = this.client;
+        if (client) {
+            void client.stopRun(runId).catch(() => {
+                /* best-effort; the run may already be terminal */
+            });
+        }
+    }
+    dispose() {
+        this.activeRuns.clear();
+    }
+    diagnostics() {
+        return {
+            provider: this.definition.id,
+            sessionsCreated: this.sessionSeq,
+            promptsRun: this.promptCount,
+            activeRuns: this.activeRuns.size,
+            baseUrl: this.client?.baseUrl,
+        };
+    }
+    /** Resolve (once) the hosted-runs client from an injected client, options, or env. */
+    resolveClient() {
+        if (this.client)
+            return this.client;
+        if (this.options.client) {
+            this.client = this.options.client;
+            return this.client;
+        }
+        const token = this.options.token ?? envToken();
+        if (!token) {
+            throw new ProviderConfigurationError({
+                safeMessage: `${XENO_AGENTS_API_ID} requires a platform token (options.token or ${XENO_AGENTS_API_TOKEN_ENV})`,
+                providerId: this.definition.id,
+            });
+        }
+        const baseUrl = this.options.baseUrl ?? envString(XENO_AGENTS_API_BASE_URL_ENV);
+        const workspace = this.options.workspace ?? envString(XENO_AGENTS_API_WORKSPACE_ENV);
+        this.client = createAgentsClient({
+            token,
+            ...(baseUrl ? { baseUrl } : {}),
+            ...(workspace ? { workspace } : {}),
+            ...(this.options.fetchImpl ? { fetchImpl: this.options.fetchImpl } : {}),
+        });
+        return this.client;
+    }
+    async prompt(request, ctx) {
+        this.promptCount += 1;
+        let client;
+        try {
+            client = this.resolveClient();
+        }
+        catch (err) {
+            const error = err instanceof ProviderConfigurationError
+                ? err
+                : new ProviderConfigurationError({ safeMessage: "failed to configure hosted client", providerId: this.definition.id });
+            ctx.emit(factoryFor(this.definition.id, request).next("failed", { disposition: "failed", message: error.safeMessage }));
+            return { disposition: "failed", error };
+        }
+        const promptText = renderPromptText(request.prompt, request.systemPrompt) || "Reply concisely.";
+        const factory = factoryFor(this.definition.id, request);
+        const emit = (kind, payload) => ctx.emit(factory.next(kind, payload));
+        const model = request.model ?? this.options.model;
+        const createInput = {
+            prompt: promptText,
+            ...(model ? { model } : {}),
+            ...(request.cwd ? { cwd: request.cwd } : {}),
+            // This provider forwards `cwd`: an ACP client asks it to work IN a
+            // directory, so file work is the expected outcome, not an edge case.
+            // The server ENFORCES permissionMode and reads an omitted one as
+            // `default` — Read/Glob/Grep allowed, Write/Edit REFUSED — which would
+            // leave this provider able to read files it can never change, and fail
+            // silently at that. Say what we need explicitly.
+            //
+            // `acceptEdits` is the NARROWEST mode that permits edits inside the run's
+            // jail. `bypassPermissions` would also work and is deliberately NOT used:
+            // it is blanket autonomy that ignores deny rules, which is more authority
+            // than "edit the workspace you were pointed at" requires.
+            //
+            // Overridable: `runDefaults` spreads last, so an embedder can still pin
+            // this to `plan`/`default` for a read-only deployment.
+            permissionMode: "acceptEdits",
+            ...(this.options.runDefaults ?? {}),
+        };
+        let usage;
+        let disposition = "completed";
+        let saw = false;
+        try {
+            const run = await client.createRun(createInput, { signal: ctx.signal });
+            this.activeRuns.set(request.sessionId, run.runId);
+            ctx.log(`hosted run created: ${run.runId} (status=${run.status})`);
+            for await (const ev of client.attach(run.runId, { signal: ctx.signal, reconnect: true })) {
+                const u = extractRunUsage(ev);
+                if (u)
+                    usage = u;
+                for (const mapped of mapRunEventToProviderPayloads(ev)) {
+                    emit(mapped.kind, mapped.payload);
+                }
+                const terminal = terminalDispositionFor(ev.type);
+                if (terminal) {
+                    disposition = terminal;
+                    saw = true;
+                    if (terminal === "failed") {
+                        const message = ev.error ?? ev.reason ?? "hosted run failed";
+                        emit("failed", { disposition: "failed", message });
+                    }
+                    break;
+                }
+            }
+        }
+        catch (err) {
+            // A caller-driven abort surfaces as an aborted signal → treat as cancelled, not failed.
+            if (ctx.signal.aborted) {
+                emit("cancelled", { disposition: "cancelled" });
+                return { disposition: "cancelled", ...(usage ? { usage } : {}) };
+            }
+            const safeMessage = isAgentsApiError(err)
+                ? `hosted run error: ${err.code} (HTTP ${err.status})`
+                : `hosted run error: ${err?.message ?? String(err)}`;
+            const error = new ProviderInternalError({ safeMessage, providerId: this.definition.id });
+            emit("failed", { disposition: "failed", message: safeMessage });
+            return { disposition: "failed", error, ...(usage ? { usage } : {}) };
+        }
+        finally {
+            this.activeRuns.delete(request.sessionId);
+        }
+        if (ctx.signal.aborted && !saw) {
+            emit("cancelled", { disposition: "cancelled" });
+            return { disposition: "cancelled", ...(usage ? { usage } : {}) };
+        }
+        if (disposition === "cancelled") {
+            emit("cancelled", { disposition: "cancelled" });
+        }
+        else if (disposition === "completed") {
+            emit("completed", { disposition: "completed" });
+        }
+        return { disposition, ...(usage ? { usage } : {}) };
+    }
+}
+function factoryFor(providerId, request) {
+    return createEventFactory({
+        providerId,
+        sessionId: request.sessionId,
+        requestId: request.requestId,
+        now: () => new Date().toISOString(),
+    });
+}
+function envToken() {
+    return envString(XENO_AGENTS_API_TOKEN_ENV);
+}
+function envString(key) {
+    const v = typeof process !== "undefined" && process.env ? process.env[key] : undefined;
+    return typeof v === "string" && v.trim() ? v : undefined;
+}
+/** Default auth policy: a single required platform-token secret reference (metadata only). */
+function defaultAuthPolicy() {
+    return {
+        requirement: "required",
+        allowedSecretRefs: [
+            { id: XENO_AGENTS_API_TOKEN_ENV, kind: "manual", label: "XENO platform token (OIDC JWT / platform API key)", required: true, redactionHint: "credential" },
+        ],
+        allowPlainEnv: false,
+        allowProcessEnv: false,
+        allowCredentialFiles: false,
+        allowInteractiveLogin: false,
+    };
+}
+/** Default egress policy: HTTPS to the XENO agents-api host only (metadata only). */
+function defaultEgressPolicy() {
+    return {
+        mode: "allowlist",
+        allowedHosts: [XENO_AGENTS_API_DEFAULT_HOST],
+        blockedHosts: [],
+        allowLocalhost: false,
+        allowPrivateNetwork: false,
+        allowHttp: false,
+        allowHttps: true,
+        maxRedirects: 0,
+    };
+}
+/**
+ * The `xeno-agents-api` provider definition: a REAL, enabled, XENO-owned, **approval-gated**
+ * hosted bridge. `authRequirement`/`networkRequirement` are `required` (truthful), so the capability
+ * gate returns `requires_approval` — never runnable without a current policy + approval.
+ */
+export function createXenoAgentsApiDefinition() {
+    const definition = {
+        id: XENO_AGENTS_API_ID,
+        displayName: "XENO Hosted Agents API",
+        description: "Drives a XENO hosted agent run (api.xenostudio.ai/v1/agents) through the ACP provider contract — no local process. XENO-owned, approval-gated; needs a platform token + network; no local filesystem or terminal authority.",
+        kind: "gateway",
+        trustClass: "xeno-owned",
+        authRequirement: "required",
+        networkRequirement: "required",
+        ioAuthority: { filesystem: "none", terminal: "none" },
+        capabilities: XENO_AGENTS_API_CAPABILITIES,
+        enabled: true,
+        authPolicy: defaultAuthPolicy(),
+        egressPolicy: defaultEgressPolicy(),
+        metadata: {
+            acpEntrypoint: "none",
+            installedLocally: false,
+            displayAlias: "XENO Hosted Agents",
+            note: "Hosted-runs bridge: maps createRun/attach/stopRun onto the ACP provider-runtime contract. Executes in the cloud.",
+            streaming: {
+                mode: "streaming",
+                safeMessage: "Streams the hosted run's model text + tool events as ACP updates over the attach channel.",
+            },
+            setupHints: [
+                `Provide a platform token via options.token or ${XENO_AGENTS_API_TOKEN_ENV}.`,
+                "Review policy.",
+                "Approve provider.",
+                "Run providers test.",
+            ],
+        },
+        modelDiscovery: {
+            status: "available",
+            source: "operator_config",
+            defaultModelId: null,
+            allowCustomModel: true, // the hosted API accepts any model id it recognizes (e.g. gpt-5.5)
+            models: [],
+            safeMessage: "Model selection is passed through to the hosted run; any model id the server accepts is allowed.",
+        },
+        createRuntime(config) {
+            return new XenoAgentsApiRuntime(definition, config);
+        },
+    };
+    return definition;
+}
+//# sourceMappingURL=xenoAgentsApiProvider.js.map

package/dist/providers/xenoAgentsApiProvider.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xenoAgentsApiProvider.js","sourceRoot":"","sources":["../../src/providers/xenoAgentsApiProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;AAEH,OAAO,EAAE,kBAAkB,EAAE,gBAAgB,EAA8D,MAAM,iCAAiC,CAAC;AACnJ,OAAO,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AACxF,OAAO,EAAE,gBAAgB,EAAE,MAAM,0BAA0B,CAAC;AAC5D,OAAO,EACL,eAAe,EACf,6BAA6B,EAC7B,sBAAsB,GACvB,MAAM,+BAA+B,CAAC;AAcvC,MAAM,CAAC,MAAM,kBAAkB,GAAG,iBAAiB,CAAC;AACpD,MAAM,CAAC,MAAM,4BAA4B,GAAG,mBAAmB,CAAC;AAEhE,sGAAsG;AACtG,MAAM,CAAC,MAAM,4BAA4B,GAA0B;IACjE,WAAW,EAAE,IAAI;IACjB,SAAS,EAAE,KAAK;IAChB,cAAc,EAAE,IAAI;IACpB,UAAU,EAAE,IAAI;IAChB,cAAc,EAAE,IAAI;IACpB,wBAAwB,EAAE,IAAI;IAC9B,YAAY,EAAE,IAAI,EAAE,0BAA0B;IAC9C,WAAW,EAAE,IAAI,EAAE,0BAA0B;IAC7C,YAAY,EAAE,KAAK,EAAE,oEAAoE;IACzF,aAAa,EAAE,KAAK;IACpB,cAAc,EAAE,KAAK;CACtB,CAAC;AAEF,6EAA6E;AAC7E,MAAM,CAAC,MAAM,yBAAyB,GAAG,uBAAuB,CAAC;AACjE,MAAM,CAAC,MAAM,4BAA4B,GAAG,0BAA0B,CAAC;AACvE,MAAM,CAAC,MAAM,6BAA6B,GAAG,2BAA2B,CAAC;AAmBzE,MAAM,oBAAoB;IACf,UAAU,CAAqB;IACvB,OAAO,CAAuB;IACvC,MAAM,CAAgB;IACtB,UAAU,GAAG,CAAC,CAAC;IACf,WAAW,GAAG,CAAC,CAAC;IACxB,gFAAgF;IAC/D,UAAU,GAAG,IAAI,GAAG,EAAkB,CAAC;IAExD,YAAY,UAA8B,EAAE,MAA8B;QACxE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;QAC7B,IAAI,CAAC,OAAO,GAAG,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,CAAyB,CAAC;IACjE,CAAC;IAED,UAAU,KAAU,CAAC;IAErB,aAAa;QACX,IAAI,CAAC,UAAU,IAAI,CAAC,CAAC;QACrB,OAAO,EAAE,SAAS,EAAE,GAAG,kBAAkB,YAAY,IAAI,CAAC,UAAU,EAAE,EAAE,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;IAChH,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,MAAM,KAAK,GAAG,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QAC7C,IAAI,CAAC,KAAK;YAAE,OAAO;QACnB,uFAAuF;QACvF,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;QAC3B,IAAI,MAAM,EAAE,CAAC;YACX,KAAK,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE;gBACpC,kDAAkD;YACpD,CAAC,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;IAC1B,CAAC;IAED,WAAW;QACT,OAAO;YACL,QAAQ,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;YAC5B,eAAe,EAAE,IAAI,CAAC,UAAU;YAChC,UAAU,EAAE,IAAI,CAAC,WAAW;YAC5B,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,IAAI;YAChC,OAAO,EAAE,IAAI,CAAC,MAAM,EAAE,OAAO;SAC9B,CAAC;IACJ,CAAC;IAED,sFAAsF;IAC9E,aAAa;QACnB,IAAI,IAAI,CAAC,MAAM;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC;QACpC,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC;YACxB,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,OAAO,IAAI,CAAC,MAAM,CAAC;QACrB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC/C,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,0BAA0B,CAAC;gBACnC,WAAW,EACT,GAAG,kBAAkB,gDAAgD,yBAAyB,GAAG;gBACnG,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE;aAC/B,CAAC,CAAC;QACL,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,SAAS,CAAC,4BAA4B,CAAC,CAAC;QAChF,MAAM,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,SAAS,CAAC,6BAA6B,CAAC,CAAC;QACrF,IAAI,CAAC,MAAM,GAAG,kBAAkB,CAAC;YAC/B,KAAK;YACL,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,GAAG,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzE,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC;IACrB,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,OAA8B,EAAE,GAA2B;QACtE,IAAI,CAAC,WAAW,IAAI,CAAC,CAAC;QAEtB,IAAI,MAAoB,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,aAAa,EAAE,CAAC;QAChC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,KAAK,GAAG,GAAG,YAAY,0BAA0B;gBACrD,CAAC,CAAC,GAAG;gBACL,CAAC,CAAC,IAAI,0BAA0B,CAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YACzH,GAAG,CAAC,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;YACxH,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC;QAC1C,CAAC;QAED,MAAM,UAAU,GAAG,gBAAgB,CAAC,OAAO,CAAC,MAAM,EAAE,OAAO,CAAC,YAAY,CAAC,IAAI,kBAAkB,CAAC;QAChG,MAAM,OAAO,GAAG,UAAU,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,CAAC,IAAwC,EAAE,OAAgB,EAAQ,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC;QAEzH,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,IAAI,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC;QAClD,MAAM,WAAW,GAAmB;YAClC,MAAM,EAAE,UAAU;YAClB,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3B,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC5C,mEAAmE;YACnE,qEAAqE;YACrE,iEAAiE;YACjE,uEAAuE;YACvE,uEAAuE;YACvE,iDAAiD;YACjD,EAAE;YACF,0EAA0E;YAC1E,0EAA0E;YAC1E,0EAA0E;YAC1E,0DAA0D;YAC1D,EAAE;YACF,wEAAwE;YACxE,uDAAuD;YACvD,cAAc,EAAE,aAAa;YAC7B,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,WAAW,IAAI,EAAE,CAAC;SACpC,CAAC;QAEF,IAAI,KAAgC,CAAC;QACrC,IAAI,WAAW,GAAwC,WAAW,CAAC;QACnE,IAAI,GAAG,GAAG,KAAK,CAAC;QAEhB,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,SAAS,CAAC,WAAW,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACxE,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,uBAAuB,GAAG,CAAC,KAAK,YAAY,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC;YAEnE,IAAI,KAAK,EAAE,MAAM,EAAE,IAAI,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;gBACzF,MAAM,CAAC,GAAG,eAAe,CAAC,EAAE,CAAC,CAAC;gBAC9B,IAAI,CAAC;oBAAE,KAAK,GAAG,CAAC,CAAC;gBAEjB,KAAK,MAAM,MAAM,IAAI,6BAA6B,CAAC,EAAE,CAAC,EAAE,CAAC;oBACvD,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;gBACpC,CAAC;gBAED,MAAM,QAAQ,GAAG,sBAAsB,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC;gBACjD,IAAI,QAAQ,EAAE,CAAC;oBACb,WAAW,GAAG,QAAQ,CAAC;oBACvB,GAAG,GAAG,IAAI,CAAC;oBACX,IAAI,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC1B,MAAM,OAAO,GAAG,EAAE,CAAC,KAAK,IAAI,EAAE,CAAC,MAAM,IAAI,mBAAmB,CAAC;wBAC7D,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;oBACrD,CAAC;oBACD,MAAM;gBACR,CAAC;YACH,CAAC;QACH,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,wFAAwF;YACxF,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;gBACvB,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;gBAChD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;YACnE,CAAC;YACD,MAAM,WAAW,GAAG,gBAAgB,CAAC,GAAG,CAAC;gBACvC,CAAC,CAAC,qBAAqB,GAAG,CAAC,IAAI,UAAU,GAAG,CAAC,MAAM,GAAG;gBACtD,CAAC,CAAC,qBAAsB,GAAa,EAAE,OAAO,IAAI,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;YAClE,MAAM,KAAK,GAAG,IAAI,qBAAqB,CAAC,EAAE,WAAW,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;YACzF,IAAI,CAAC,QAAQ,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC;YAChE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACvE,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,CAAC,OAAO,IAAI,CAAC,GAAG,EAAE,CAAC;YAC/B,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;YAChD,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;QACnE,CAAC;QAED,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;YAChC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;aAAM,IAAI,WAAW,KAAK,WAAW,EAAE,CAAC;YACvC,IAAI,CAAC,WAAW,EAAE,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,CAAC;QAClD,CAAC;QACD,OAAO,EAAE,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC;IACtD,CAAC;CACF;AAED,SAAS,UAAU,CAAC,UAAkB,EAAE,OAA8B;IACpE,OAAO,kBAAkB,CAAC;QACxB,UAAU;QACV,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC,CAAC;AACL,CAAC;AAED,SAAS,QAAQ;IACf,OAAO,SAAS,CAAC,yBAAyB,CAAC,CAAC;AAC9C,CAAC;AAED,SAAS,SAAS,CAAC,GAAW;IAC5B,MAAM,CAAC,GAAG,OAAO,OAAO,KAAK,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3D,CAAC;AAED,8FAA8F;AAC9F,SAAS,iBAAiB;IACxB,OAAO;QACL,WAAW,EAAE,UAAU;QACvB,iBAAiB,EAAE;YACjB,EAAE,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,mDAAmD,EAAE,QAAQ,EAAE,IAAI,EAAE,aAAa,EAAE,YAAY,EAAE;SAC3J;QACD,aAAa,EAAE,KAAK;QACpB,eAAe,EAAE,KAAK;QACtB,oBAAoB,EAAE,KAAK;QAC3B,qBAAqB,EAAE,KAAK;KAC7B,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,mBAAmB;IAC1B,OAAO;QACL,IAAI,EAAE,WAAW;QACjB,YAAY,EAAE,CAAC,4BAA4B,CAAC;QAC5C,YAAY,EAAE,EAAE;QAChB,cAAc,EAAE,KAAK;QACrB,mBAAmB,EAAE,KAAK;QAC1B,SAAS,EAAE,KAAK;QAChB,UAAU,EAAE,IAAI;QAChB,YAAY,EAAE,CAAC;KAChB,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,6BAA6B;IAC3C,MAAM,UAAU,GAAuB;QACrC,EAAE,EAAE,kBAAkB;QACtB,WAAW,EAAE,wBAAwB;QACrC,WAAW,EACT,6NAA6N;QAC/N,IAAI,EAAE,SAAS;QACf,UAAU,EAAE,YAAY;QACxB,eAAe,EAAE,UAAU;QAC3B,kBAAkB,EAAE,UAAU;QAC9B,WAAW,EAAE,EAAE,UAAU,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE;QACrD,YAAY,EAAE,4BAA4B;QAC1C,OAAO,EAAE,IAAI;QACb,UAAU,EAAE,iBAAiB,EAAE;QAC/B,YAAY,EAAE,mBAAmB,EAAE;QACnC,QAAQ,EAAE;YACR,aAAa,EAAE,MAAM;YACrB,gBAAgB,EAAE,KAAK;YACvB,YAAY,EAAE,oBAAoB;YAClC,IAAI,EAAE,kHAAkH;YACxH,SAAS,EAAE;gBACT,IAAI,EAAE,WAAW;gBACjB,WAAW,EAAE,2FAA2F;aACzG;YACD,UAAU,EAAE;gBACV,iDAAiD,yBAAyB,GAAG;gBAC7E,gBAAgB;gBAChB,mBAAmB;gBACnB,qBAAqB;aACtB;SACF;QACD,cAAc,EAAE;YACd,MAAM,EAAE,WAAW;YACnB,MAAM,EAAE,iBAAiB;YACzB,cAAc,EAAE,IAAI;YACpB,gBAAgB,EAAE,IAAI,EAAE,mEAAmE;YAC3F,MAAM,EAAE,EAAE;YACV,WAAW,EAAE,kGAAkG;SAChH;QACD,aAAa,CAAC,MAA8B;YAC1C,OAAO,IAAI,oBAAoB,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QACtD,CAAC;KACF,CAAC;IACF,OAAO,UAAU,CAAC;AACpB,CAAC"}

package/dist/providers/xenoSdkAdapterProcess.d.ts

@@ -0,0 +1,50 @@
+/**
+ * The `xeno-sdk` ADAPTER PROCESS — where the XENO Agent SDK actually runs.
+ *
+ * This module is loaded only inside the supervised child (`cli.js adapter
+ * --provider xeno-sdk`). It is deliberately NOT imported by the ACP endpoint:
+ * `@xenosystem/acp-agent` keeps zero I/O authority, and the SDK brings network, tools
+ * and credentials with it.
+ *
+ * ## Credentials never travel through env
+ *
+ * The supervisor's env allowlist forbids `*_API_KEY` / `*_TOKEN` / `*_SECRET` by
+ * policy. The SDK does not need them to: `readXenoApiKey()` resolves the
+ * operator's own credential from `~/.xeno/credentials.json`, exactly as the
+ * Claude CLI resolves its own local session for `claude-local`. So the adapter
+ * self-authenticates, the policy holds unmodified, and no secret is forwarded by
+ * this process or visible in its environment.
+ *
+ * If no credential is present the adapter FAILS BY NAME rather than running a
+ * degraded turn — an agent that silently produces nothing is indistinguishable
+ * from one that had nothing to say.
+ */
+import { type XenoSdkEmit } from "./xenoSdkProvider.js";
+export interface XenoSdkAdapterRunOptions {
+    model: string;
+    promptText: string;
+    emit: XenoSdkEmit;
+    /** Injected for tests; defaults to the real SDK. */
+    loadSdk?: () => Promise<XenoSdkModule>;
+    maxIterations?: number;
+    maxTokens?: number;
+    systemPrompt?: string;
+}
+/** The narrow slice of `@xenosystem/agent-sdk` this adapter depends on. */
+export interface XenoSdkModule {
+    AgentLoop: new (config: Record<string, unknown>) => {
+        run: (prompt: string) => Promise<unknown>;
+    };
+    PermissionEngine: new (config?: Record<string, unknown>) => unknown;
+    readXenoApiKey: () => string | undefined;
+    XENO_API_BASE: string;
+}
+/**
+ * Runs one turn and emits the v1 adapter protocol on the supplied writer.
+ *
+ * Resolves once the turn is finished. It never throws: a failure is a `failed`
+ * protocol event, because the supervisor reads stdout and an exception would
+ * reach the host as a dead process rather than a described failure.
+ */
+export declare function runXenoSdkAdapterTurn(options: XenoSdkAdapterRunOptions): Promise<void>;
+//# sourceMappingURL=xenoSdkAdapterProcess.d.ts.map

package/dist/providers/xenoSdkAdapterProcess.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xenoSdkAdapterProcess.d.ts","sourceRoot":"","sources":["../../src/providers/xenoSdkAdapterProcess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAA0B,KAAK,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAEhF,MAAM,WAAW,wBAAwB;IACvC,KAAK,EAAE,MAAM,CAAC;IACd,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,WAAW,CAAC;IAClB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,OAAO,CAAC,aAAa,CAAC,CAAC;IACvC,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,2EAA2E;AAC3E,MAAM,WAAW,aAAa;IAC5B,SAAS,EAAE,KAAK,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK;QAAE,GAAG,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;KAAE,CAAC;IAClG,gBAAgB,EAAE,KAAK,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC;IACpE,cAAc,EAAE,MAAM,MAAM,GAAG,SAAS,CAAC;IACzC,aAAa,EAAE,MAAM,CAAC;CACvB;AAKD;;;;;;GAMG;AACH,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAiC5F"}

package/dist/providers/xenoSdkAdapterProcess.js

@@ -0,0 +1,65 @@
+/**
+ * The `xeno-sdk` ADAPTER PROCESS — where the XENO Agent SDK actually runs.
+ *
+ * This module is loaded only inside the supervised child (`cli.js adapter
+ * --provider xeno-sdk`). It is deliberately NOT imported by the ACP endpoint:
+ * `@xenosystem/acp-agent` keeps zero I/O authority, and the SDK brings network, tools
+ * and credentials with it.
+ *
+ * ## Credentials never travel through env
+ *
+ * The supervisor's env allowlist forbids `*_API_KEY` / `*_TOKEN` / `*_SECRET` by
+ * policy. The SDK does not need them to: `readXenoApiKey()` resolves the
+ * operator's own credential from `~/.xeno/credentials.json`, exactly as the
+ * Claude CLI resolves its own local session for `claude-local`. So the adapter
+ * self-authenticates, the policy holds unmodified, and no secret is forwarded by
+ * this process or visible in its environment.
+ *
+ * If no credential is present the adapter FAILS BY NAME rather than running a
+ * degraded turn — an agent that silently produces nothing is indistinguishable
+ * from one that had nothing to say.
+ */
+import { createXenoSdkEventSink } from "./xenoSdkProvider.js";
+const DEFAULT_SYSTEM_PROMPT = "You are the XENO Agent, reached over the Agent Client Protocol. Answer the request directly.";
+/**
+ * Runs one turn and emits the v1 adapter protocol on the supplied writer.
+ *
+ * Resolves once the turn is finished. It never throws: a failure is a `failed`
+ * protocol event, because the supervisor reads stdout and an exception would
+ * reach the host as a dead process rather than a described failure.
+ */
+export async function runXenoSdkAdapterTurn(options) {
+    const sink = createXenoSdkEventSink(options.emit);
+    try {
+        const sdk = await (options.loadSdk?.() ?? loadRealSdk());
+        const apiKey = sdk.readXenoApiKey();
+        if (!apiKey) {
+            // Named refusal, not an empty turn.
+            sink.onError(new Error("no XENO credential found (~/.xeno/credentials.json)"), "xeno-sdk-auth");
+            return;
+        }
+        const loop = new sdk.AgentLoop({
+            apiKey,
+            baseURL: sdk.XENO_API_BASE,
+            model: options.model,
+            maxTokens: options.maxTokens ?? 8192,
+            maxIterations: options.maxIterations ?? 24,
+            systemPrompt: options.systemPrompt ?? DEFAULT_SYSTEM_PROMPT,
+            permissionEngine: new sdk.PermissionEngine(),
+            onText: sink.onText,
+            onToolStart: sink.onToolStart,
+            onToolEnd: sink.onToolEnd,
+            onError: sink.onError,
+        });
+        await loop.run(options.promptText);
+        sink.completed();
+    }
+    catch (error) {
+        sink.onError(error instanceof Error ? error : new Error(String(error)), "xeno-sdk-run");
+    }
+}
+async function loadRealSdk() {
+    const mod = (await import("@xenosystem/agent-sdk"));
+    return mod;
+}
+//# sourceMappingURL=xenoSdkAdapterProcess.js.map

package/dist/providers/xenoSdkAdapterProcess.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"xenoSdkAdapterProcess.js","sourceRoot":"","sources":["../../src/providers/xenoSdkAdapterProcess.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,OAAO,EAAE,sBAAsB,EAAoB,MAAM,sBAAsB,CAAC;AAqBhF,MAAM,qBAAqB,GACzB,8FAA8F,CAAC;AAEjG;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,OAAiC;IAC3E,MAAM,IAAI,GAAG,sBAAsB,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE,IAAI,WAAW,EAAE,CAAC,CAAC;QACzD,MAAM,MAAM,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;QACpC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,oCAAoC;YACpC,IAAI,CAAC,OAAO,CACV,IAAI,KAAK,CAAC,qDAAqD,CAAC,EAChE,eAAe,CAChB,CAAC;YACF,OAAO;QACT,CAAC;QAED,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC;YAC7B,MAAM;YACN,OAAO,EAAE,GAAG,CAAC,aAAa;YAC1B,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI;YACpC,aAAa,EAAE,OAAO,CAAC,aAAa,IAAI,EAAE;YAC1C,YAAY,EAAE,OAAO,CAAC,YAAY,IAAI,qBAAqB;YAC3D,gBAAgB,EAAE,IAAI,GAAG,CAAC,gBAAgB,EAAE;YAC5C,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,WAAW,EAAE,IAAI,CAAC,WAAW;YAC7B,SAAS,EAAE,IAAI,CAAC,SAAS;YACzB,OAAO,EAAE,IAAI,CAAC,OAAO;SACtB,CAAC,CAAC;QAEH,MAAM,IAAI,CAAC,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;QACnC,IAAI,CAAC,SAAS,EAAE,CAAC;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC,OAAO,CAAC,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IAC1F,CAAC;AACH,CAAC;AAED,KAAK,UAAU,WAAW;IACxB,MAAM,GAAG,GAAG,CAAC,MAAM,MAAM,CAAC,uBAAuB,CAAC,CAA6B,CAAC;IAChF,OAAO,GAAG,CAAC;AACb,CAAC"}

package/dist/providers/xenoSdkProvider.d.ts

@@ -0,0 +1,85 @@
+/**
+ * `xeno-sdk` — the XENO Agent SDK reachable over ACP.
+ *
+ * This is the keystone of the locked XENO Agent ADE architecture
+ * (`xeno-agent-interface/docs/specs/XENO_AGENT_ADE_SPEC.md` §2.6): **our own agent
+ * becomes an ACP provider like any other**, so `sdk-native` stops being a
+ * privileged in-process lane.
+ *
+ * The reason is not tidiness. §2.2 requires third-party agents to be first-class,
+ * and with two execution paths that is a gate somebody has to keep green forever
+ * — every new capability lands on the privileged path first, and the privileged
+ * path is the one that grows shortcuts. With one bus it is STRUCTURAL: our agent
+ * cannot outgrow the path foreign agents use, because it is the same path.
+ *
+ * ## Where the SDK actually runs
+ *
+ * In the supervised ADAPTER PROCESS, never in the ACP endpoint. `@xenosystem/acp-agent`
+ * keeps zero I/O authority: it spawns, it reads v1 protocol lines from stdout,
+ * and it maps them to `session/update`. The SDK's own tool authority, network
+ * access and credentials live inside the child, behind the process supervisor —
+ * exactly where a third-party CLI's do.
+ *
+ * ## Why the prompt goes over stdin
+ *
+ * `claude-local` passes its prompt as argv because the Claude CLI requires it.
+ * We own both ends here, so the prompt goes over **stdin**: argv is visible to
+ * every local user through the process table, and it has a length limit that a
+ * real agent prompt will eventually exceed. The harness supports `stdin`
+ * directly (`AdapterHarnessConfig.adapter.stdin`), so this costs nothing.
+ *
+ * ## Honest declarations
+ *
+ * The SDK agent talks to a model. So `requiresAuth` and `usesNetwork` are TRUE,
+ * which routes this provider through the auth/egress policy validators and the
+ * manual-approval gate. It is deliberately NOT declared as a no-auth local
+ * adapter: that would be the convenient lie that makes it runnable "just because
+ * it exists", and the security layer would be evaluating a fiction.
+ */
+import type { ProviderCapabilitySet, ProviderDefinition, ProviderPromptRequest } from "./providerTypes.js";
+import type { RunnabilityInput } from "../config/providerRunnability.js";
+export declare const XENO_SDK_ID = "xeno-sdk";
+/** Default model surface. Overridable by config; never hardcoded downstream. */
+export declare const XENO_SDK_DEFAULT_MODEL = "gpt-5.5";
+export declare const XENO_SDK_CAPABILITIES: ProviderCapabilitySet;
+/** The v1 protocol line writer the adapter process emits through. */
+export type XenoSdkEmit = (event: Record<string, unknown>) => void;
+/**
+ * The AgentLoop callbacks, expressed as v1 protocol events.
+ *
+ * Deliberately PURE and separated from constructing an `AgentLoop`: this is the
+ * whole translation layer between our agent and ACP, and it must be testable
+ * without a model, a network or a key. The live runner below is a thin shell
+ * around it, so almost nothing that can be wrong lives outside a test's reach.
+ */
+export declare function createXenoSdkEventSink(emit: XenoSdkEmit): {
+    onText: (text: string) => void;
+    onToolStart: (name: string, input: Record<string, unknown>) => void;
+    onToolEnd: (name: string, result: {
+        success?: boolean;
+        error?: unknown;
+    }) => void;
+    onError: (error: Error, context: string) => void;
+    completed: (stopReason?: string) => void;
+    toolCallIdFor: (name: string) => string;
+};
+/** Where the adapter process lives — this package's own CLI, never a third-party binary. */
+export declare function xenoSdkAdapterEntrypoint(): string;
+export interface XenoSdkOptions {
+    runnability?: RunnabilityInput;
+    model?: string;
+    timeoutMs?: number;
+}
+/**
+ * The adapter argv. The prompt is NOT here — see the module header: argv is
+ * world-readable through the process table and length-limited, and the harness
+ * accepts stdin directly.
+ */
+export declare function xenoSdkAdapterCommand(model: string): {
+    executable: string;
+    args: string[];
+};
+/** Flattens the prompt blocks into the text the SDK agent receives on stdin. */
+export declare function renderXenoSdkPrompt(request: ProviderPromptRequest): string;
+export declare function createXenoSdkDefinition(): ProviderDefinition;
+//# sourceMappingURL=xenoSdkProvider.d.ts.map

package/dist/providers/xenoSdkProvider.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"xenoSdkProvider.d.ts","sourceRoot":"","sources":["../../src/providers/xenoSdkProvider.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,OAAO,KAAK,EACV,qBAAqB,EACrB,kBAAkB,EAClB,qBAAqB,EAMtB,MAAM,oBAAoB,CAAC;AAC5B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,kCAAkC,CAAC;AAEzE,eAAO,MAAM,WAAW,aAAa,CAAC;AAEtC,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,YAAY,CAAC;AAEhD,eAAO,MAAM,qBAAqB,EAAE,qBAcnC,CAAC;AAEF,qEAAqE;AACrE,MAAM,MAAM,WAAW,GAAG,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;AAEnE;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CAAC,IAAI,EAAE,WAAW,GAAG;IACzD,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IAC/B,WAAW,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;IACpE,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE;QAAE,OAAO,CAAC,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAE,KAAK,IAAI,CAAC;IAClF,OAAO,EAAE,CAAC,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;IACjD,SAAS,EAAE,CAAC,UAAU,CAAC,EAAE,MAAM,KAAK,IAAI,CAAC;IACzC,aAAa,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAAC;CACzC,CA2CA;AAED,4FAA4F;AAC5F,wBAAgB,wBAAwB,IAAI,MAAM,CAEjD;AAED,MAAM,WAAW,cAAc;IAC7B,WAAW,CAAC,EAAE,gBAAgB,CAAC;IAC/B,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GACZ;IAAE,UAAU,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,EAAE,CAAA;CAAE,CAKxC;AA0DD,gFAAgF;AAChF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,qBAAqB,GAAG,MAAM,CAK1E;AAED,wBAAgB,uBAAuB,IAAI,kBAAkB,CAiC5D"}