@xenosystem/agent-interface-electron-host 0.1.35 → 0.1.37

package/dist/sdkAgent.d.ts

@@ -104,6 +104,16 @@ export declare function registerSdkNativeGovernedAutomationTools(options: {
     agentId?: string;
     sessionId?: string;
     workspaceId?: string;
+    /**
+     * Where XENO Use is, from the host's ONE resolver (`resolveMachineEndpoint`). Optional because
+     * a host without it is a host with no machine to drive — not an error.
+     */
+    machineEndpoint?: {
+        baseUrl: string;
+        bearer: string;
+        deviceId?: string;
+        allowedApplications: string[];
+    };
 }): number;
 export type { AgentPermissionProfileName, AgentSandboxCapabilities, } from '@xenosystem/agent-interface-host/node';
 export interface SdkAgentRunOptions {
@@ -140,6 +150,24 @@ export interface SdkAgentRunOptions {
     enableThinking?: boolean;
     reasoningEffort?: string;
     getAuthToken: () => string | null;
+    /**
+     * Authorize one inference request as the SIGNED-IN ACCOUNT.
+     *
+     * 🔴 This is the DEFAULT credential, and `getAuthToken` is the bring-your-own override — not the
+     * other way round. A person signed into XENO should not also need an API key, and until this
+     * existed they did: the lane could only express a static bearer, so a signed-in account with no
+     * key was reported as "requires the host-managed direct credential" and refused.
+     *
+     * Per-request because a DPoP proof binds to one method and URL. The gateway requires that scheme
+     * for an OIDC token, so a single string handed over once could never have carried it.
+     */
+    authorizeRequest?: (target: {
+        method: string;
+        url: string;
+    }) => Promise<{
+        authorization: string;
+        dpop?: string;
+    } | null>;
     getPlatformAuthToken?: () => string | null;
     mainWindow: SdkAgentSurface;
     signal: AbortSignal;
@@ -195,6 +223,17 @@ export interface AgentCommandExecutionEnvironment {
         };
     };
 }
+/**
+ * Exported for tests ONLY — it is not part of the host's public surface.
+ *
+ * This predicate decides whether a failed turn is RETRIED and whether it falls back, so its
+ * classification is behaviour, not wording, and it earned a gate the hard way (see the
+ * auth-dependency note below). Testing it through a whole turn would need a live provider
+ * failure, which is exactly the shape that goes untested and then ships.
+ */
+export declare function isCloudApiTransientErrorMessage(message: string): boolean;
+/** Exported for tests ONLY — see {@link isCloudApiTransientErrorMessage}. Not a public API. */
+export declare function sanitizeAgentRunErrorMessage(error: Error | string): string;
 export declare function runSdkAgent(options: SdkAgentRunOptions): Promise<void>;
 export declare function grantSdkAccess(params: unknown): {
     success: boolean;

package/dist/sdkAgent.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sdkAgent.d.ts","sourceRoot":"","sources":["../src/sdkAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAA2B,KAAK,8BAA8B,EAAE,MAAM,uCAAuC,CAAA;AAQpH,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAI3D,OAAO,EAkBL,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAK7B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAGvB,MAAM,uCAAuC,CAAA;AAgC9C,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ,CAAA;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KACpB,CAAA;CACF;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AA2CD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAEnF;AA4BD,KAAK,qBAAqB,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,CAAA;AAEjH,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,UAAU,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,qBAAqB,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAgCD;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAIhF;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOnF;AAqzED,iBAAe,OAAO;eAzBT,cAAc,uBAAuB,CAAC,CAAC,WAAW,CAAC;yBACzC,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;kBACpE,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;+BACzC,cAAc,uBAAuB,CAAC,CAAC,2BAA2B,CAAC;oCAC9D,cAAc,uBAAuB,CAAC,CAAC,gCAAgC,CAAC;yBACnF,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;gCACtD,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC;6CACvD,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC;uCACvF,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;sBAC5F,cAAc,uBAAuB,CAAC,CAAC,kBAAkB,CAAC;uCACzC,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;oBAC9F,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;qBACvD,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;kBAC5D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;uBACjD,cAAc,uBAAuB,CAAC,CAAC,mBAAmB,CAAC;yBACzD,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;qBACjE,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;8BAChD,cAAc,uBAAuB,CAAC,CAAC,0BAA0B,CAAC;4BACpE,cAAc,uBAAuB,CAAC,CAAC,wBAAwB,CAAC;2BACjE,cAAc,uBAAuB,CAAC,CAAC,uBAAuB,CAAC;oBACtE,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;kBAC1D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;8BAC1C,OAAO;GAgClC;AAOD,UAAU,+BAA+B;IACvC,mBAAmB,EAAE,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAA;IAClF,0BAA0B,EAAE,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC,CAAA;IAChG,uCAAuC,EAAE,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC,CAAA;CAC3H;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CAAC,OAAO,EAAE;IAChE,GAAG,EAAE,+BAA+B,CAAA;IACpC,YAAY,EAAE,OAAO,uBAAuB,EAAE,YAAY,CAAA;IAC1D,WAAW,EAAE,OAAO,uBAAuB,EAAE,6BAA6B,CAAA;IAC1E,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB,GAAG,MAAM,CAiBT;AAED,YAAY,EACV,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,uCAAuC,CAAA;AAE9C,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAC,8BAA8B,CAAA;IAClD,oBAAoB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE;QACZ,aAAa,EAAE,CAAC,CAAA;QAChB,cAAc,EAAE,MAAM,CAAA;QACtB,mBAAmB,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClD,mGAAmG;IACnG,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAC1C,UAAU,EAAE,eAAe,CAAA;IAC3B,MAAM,EAAE,WAAW,CAAA;IACnB,YAAY,CAAC,EAAE,wBAAwB,CAAA;IACvC,iBAAiB,CAAC,EAAE,0BAA0B,CAAA;IAC9C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,mBAAmB,EAAE,CAAA;IACtE,6FAA6F;IAC7F,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,wFAAwF;IACxF,aAAa,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;IACtC,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAA;IAC/D,mFAAmF;IACnF,iCAAiC,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/F,yGAAyG;IACzG,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,mBAAmB,CAAA;QAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;KACtE,CAAC,CAAA;IACF;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,gCAAgC,CAAA;CACxD;AAED,MAAM,WAAW,gCAAgC;IAC/C,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG;QAC7D,QAAQ,EAAE,oBAAoB,CAAA;QAC9B,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjC,CAAA;CACF;AAumCD,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E;AA2iED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsCpF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BnF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA+BtF;AAED,wBAAgB,iCAAiC,IAAI;IACnD,gBAAgB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACjJ,CAOA;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC3F,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;QACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,WAAW,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAClD,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5E,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KAAE,CAAC,CAAA;IACpO,aAAa,CAAC,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/H,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KACpE,CAAC,CAAA;IACF,eAAe,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACtD,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,iBAAiB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACvG,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,gBAAgB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpH,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACnE,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;IACF,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;CACH;AAED,wBAAgB,6BAA6B,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,OAAO,CAAA;CAAO,GAAG,uBAAuB,CAoO3I"}
+{"version":3,"file":"sdkAgent.d.ts","sourceRoot":"","sources":["../src/sdkAgent.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH,OAAO,EAEL,KAAK,sBAAsB,EAC5B,MAAM,kCAAkC,CAAA;AACzC,OAAO,EAKL,KAAK,oBAAoB,EAC1B,MAAM,uCAAuC,CAAA;AAC9C,OAAO,EAA2B,KAAK,8BAA8B,EAAE,MAAM,uCAAuC,CAAA;AASpH,YAAY,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAC3D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAA;AAI3D,OAAO,EAkBL,KAAK,0BAA0B,EAC/B,KAAK,wBAAwB,EAK7B,KAAK,oBAAoB,EACzB,KAAK,iBAAiB,EAGvB,MAAM,uCAAuC,CAAA;AA4C9C,UAAU,mBAAmB;IAC3B,IAAI,EAAE,MAAM,CAAA;IACZ,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE;QACZ,IAAI,EAAE,QAAQ,CAAA;QACd,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;QACnC,QAAQ,CAAC,EAAE,MAAM,EAAE,CAAA;KACpB,CAAA;CACF;AAED,UAAU,eAAe;IACvB,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AA2CD,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAEnF;AA4BD,KAAK,qBAAqB,GAAG,oBAAoB,GAAG,aAAa,GAAG,cAAc,GAAG,aAAa,GAAG,YAAY,CAAA;AAEjH,MAAM,WAAW,mBAAmB;IAClC,EAAE,CAAC,EAAE,MAAM,CAAA;IACX,OAAO,EAAE,UAAU,GAAG,SAAS,CAAA;IAC/B,MAAM,EAAE,qBAAqB,CAAA;IAC7B,OAAO,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAgCD;;;;;;GAMG;AACH,wBAAsB,0BAA0B,CAC9C,cAAc,EAAE,MAAM,EACtB,KAAK,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,GAChE,OAAO,CAAC;IAAE,MAAM,EAAE,UAAU,GAAG,UAAU,CAAC;IAAC,YAAY,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAAC,CAIhF;AAED,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAOnF;AAqzED,iBAAe,OAAO;eAzBT,cAAc,uBAAuB,CAAC,CAAC,WAAW,CAAC;yBACzC,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;kBACpE,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;+BACzC,cAAc,uBAAuB,CAAC,CAAC,2BAA2B,CAAC;oCAC9D,cAAc,uBAAuB,CAAC,CAAC,gCAAgC,CAAC;yBACnF,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;gCACtD,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC;6CACvD,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC;uCACvF,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;sBAC5F,cAAc,uBAAuB,CAAC,CAAC,kBAAkB,CAAC;uCACzC,cAAc,uBAAuB,CAAC,CAAC,mCAAmC,CAAC;oBAC9F,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;qBACvD,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;kBAC5D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;uBACjD,cAAc,uBAAuB,CAAC,CAAC,mBAAmB,CAAC;yBACzD,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC;qBACjE,cAAc,uBAAuB,CAAC,CAAC,iBAAiB,CAAC;8BAChD,cAAc,uBAAuB,CAAC,CAAC,0BAA0B,CAAC;4BACpE,cAAc,uBAAuB,CAAC,CAAC,wBAAwB,CAAC;2BACjE,cAAc,uBAAuB,CAAC,CAAC,uBAAuB,CAAC;oBACtE,cAAc,uBAAuB,CAAC,CAAC,gBAAgB,CAAC;kBAC1D,cAAc,uBAAuB,CAAC,CAAC,cAAc,CAAC;8BAC1C,OAAO;GAgClC;AAOD,UAAU,+BAA+B;IACvC,mBAAmB,EAAE,cAAc,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAA;IAClF,0BAA0B,EAAE,cAAc,uBAAuB,CAAC,CAAC,4BAA4B,CAAC,CAAA;IAChG,uCAAuC,EAAE,cAAc,uBAAuB,CAAC,CAAC,yCAAyC,CAAC,CAAA;CAC3H;AAED;;;;GAIG;AACH,wBAAgB,wCAAwC,CAAC,OAAO,EAAE;IAChE,GAAG,EAAE,+BAA+B,CAAA;IACpC,YAAY,EAAE,OAAO,uBAAuB,EAAE,YAAY,CAAA;IAC1D,WAAW,EAAE,OAAO,uBAAuB,EAAE,6BAA6B,CAAA;IAC1E,YAAY,EAAE,wBAAwB,CAAA;IACtC,GAAG,EAAE,MAAM,CAAA;IACX,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;OAGG;IACH,eAAe,CAAC,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,mBAAmB,EAAE,MAAM,EAAE,CAAA;KAAE,CAAA;CACxG,GAAG,MAAM,CAuCT;AAED,YAAY,EACV,0BAA0B,EAC1B,wBAAwB,GACzB,MAAM,uCAAuC,CAAA;AAE9C,MAAM,WAAW,kBAAkB;IACjC,kBAAkB,CAAC,EAAC,8BAA8B,CAAA;IAClD,oBAAoB,CAAC,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QAAC,MAAM,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAA;IAC1H,SAAS,EAAE,MAAM,CAAA;IACjB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,WAAW,CAAC,EAAE;QACZ,aAAa,EAAE,CAAC,CAAA;QAChB,cAAc,EAAE,MAAM,CAAA;QACtB,mBAAmB,EAAE,MAAM,CAAA;KAC5B,CAAA;IACD,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAClD,mGAAmG;IACnG,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9E,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,OAAO,CAAA;IACxB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,YAAY,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IACjC;;;;;;;;;;OAUG;IACH,gBAAgB,CAAC,EAAE,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,GAAG,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC;QAAE,aAAa,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAC,CAAA;IACxH,oBAAoB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;IAC1C,UAAU,EAAE,eAAe,CAAA;IAC3B,MAAM,EAAE,WAAW,CAAA;IACnB,YAAY,CAAC,EAAE,wBAAwB,CAAA;IACvC,iBAAiB,CAAC,EAAE,0BAA0B,CAAA;IAC9C,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,aAAa,CAAC,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,GAAG,mBAAmB,EAAE,CAAA;IACtE,6FAA6F;IAC7F,qBAAqB,CAAC,EAAE,OAAO,CAAA;IAC/B,wFAAwF;IACxF,aAAa,CAAC,EAAE,SAAS,GAAG,UAAU,CAAA;IACtC,iFAAiF;IACjF,uBAAuB,CAAC,EAAE,CAAC,KAAK,EAAE,oBAAoB,KAAK,IAAI,CAAA;IAC/D,mFAAmF;IACnF,iCAAiC,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/F,yGAAyG;IACzG,iBAAiB,CAAC,EAAE,iBAAiB,CAAA;IACrC;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,KAAK,CAAC;QACxB,UAAU,EAAE,mBAAmB,CAAA;QAC/B,OAAO,EAAE,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,OAAO,CAAC,eAAe,CAAC,CAAA;KACtE,CAAC,CAAA;IACF;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,OAAO,CAAA;IACtB;;;;;OAKG;IACH,oBAAoB,CAAC,EAAE,gCAAgC,CAAA;CACxD;AAED,MAAM,WAAW,gCAAgC;IAC/C,yBAAyB,CAAC,cAAc,EAAE,MAAM,GAAG,SAAS,GAAG;QAC7D,QAAQ,EAAE,oBAAoB,CAAA;QAC9B,SAAS,EAAE;YAAE,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KACjC,CAAA;CACF;AAoID;;;;;;;GAOG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CA2BxE;AAgBD,+FAA+F;AAC/F,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,KAAK,GAAG,MAAM,GAAG,MAAM,CA+E1E;AA05BD,wBAAsB,WAAW,CAAC,OAAO,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ5E;AAwnED,wBAAgB,cAAc,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAsCpF;AAED,wBAAgB,aAAa,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA0BnF;AAED,wBAAgB,gBAAgB,CAAC,MAAM,EAAE,OAAO,GAAG;IAAE,OAAO,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CA+BtF;AAED,wBAAgB,iCAAiC,IAAI;IACnD,gBAAgB,CAAC,MAAM,EAAE;QAAE,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACjJ,CAOA;AAED,MAAM,WAAW,uBAAuB;IACtC,YAAY,CAAC,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC3F,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAA;QACpB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;QAC7B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,WAAW,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAClD,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5E,OAAO,EAAE,OAAO,CAAA;QAChB,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,UAAU,CAAC,EAAE,MAAM,CAAA;QACnB,kBAAkB,CAAC,EAAE,MAAM,CAAA;QAC3B,qBAAqB,CAAC,EAAE,MAAM,CAAA;QAC9B,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,aAAa,CAAC,MAAM,EAAE;QAAE,cAAc,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC9H,aAAa,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KAAE,CAAC,CAAA;IACpO,aAAa,CAAC,MAAM,EAAE;QAAE,gBAAgB,EAAE,MAAM,CAAC;QAAC,iBAAiB,CAAC,EAAE,MAAM,EAAE,CAAC;QAAC,2BAA2B,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC/H,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,OAAO,CAAA;QAChB,mBAAmB,CAAC,EAAE,MAAM,CAAA;QAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,IAAI,CAAC,EAAE,mBAAmB,GAAG,kBAAkB,GAAG,iBAAiB,CAAA;KACpE,CAAC,CAAA;IACF,eAAe,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACtD,OAAO,EAAE,OAAO,CAAA;QAChB,WAAW,CAAC,EAAE,OAAO,EAAE,CAAA;QACvB,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,iBAAiB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,cAAc,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACvG,OAAO,EAAE,OAAO,CAAA;QAChB,QAAQ,CAAC,EAAE,OAAO,CAAA;QAClB,qBAAqB,CAAC,EAAE,OAAO,CAAA;QAC/B,KAAK,CAAC,EAAE,MAAM,CAAA;KACf,CAAC,CAAA;IACF,gBAAgB,CAAC,MAAM,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAAE,OAAO,EAAE,OAAO,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACpH,cAAc,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QACnE,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;IACF,QAAQ,CAAC,MAAM,EAAE;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,GAAG,OAAO,CAAC;QAC5C,OAAO,EAAE,OAAO,CAAA;QAChB,MAAM,CAAC,EAAE,MAAM,CAAA;QACf,KAAK,CAAC,EAAE,MAAM,CAAA;QACd,OAAO,CAAC,EAAE,MAAM,CAAA;QAChB,MAAM,CAAC,EAAE,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAA;QACnE,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACxB,SAAS,CAAC,EAAE,MAAM,CAAA;KACnB,CAAC,CAAA;CACH;AAED,wBAAgB,6BAA6B,CAAC,OAAO,GAAE;IAAE,aAAa,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,OAAO,OAAO,CAAA;CAAO,GAAG,uBAAuB,CAoO3I"}

package/dist/sdkAgent.js

@@ -11,6 +11,7 @@
 import { createPermissionWaitRegistry, } from '@xenosystem/agent-interface-host';
 import { commandSucceeded, commandShellArgv, LocalCommandExecutor, } from '@xenosystem/agent-interface-host/node';
 import { sdkExecutionSettlements } from '@xenosystem/agent-interface-host/node';
+import { resolveMachineTarget } from '@xenosystem/agent-interface-host/node';
 import { spawn } from 'child_process';
 import { createHash } from 'node:crypto';
 import { requireSdkReasoningEffort } from './sdkReasoning.js';
@@ -25,7 +26,19 @@ import { answerChooseDirectoryRequest, answerWorkspacePlacementRequest, buildRun
 import { clickBrowserSurface, gotoBrowserSurface, keyBrowserSurface, listBrowserSurfacesForAgent, listPtySurfaceSessions, readPtySurfaceOutput, snapshotBrowserSurface, typeBrowserSurface, writePtySurfaceInput, } from './surfaceRuntimeBridge.js';
 import { loadWorkspaceTreeFromDisk, saveWorkspaceTreeToDisk } from './workspaceStateBridge.js';
 const DEFAULT_CLOUD_API_BASE = 'https://api.xenostudio.ai';
-const DEFAULT_DIRECT_API_BASE = 'http://direct-api.xenostudio.ai:8443';
+/**
+ * 🔴 `https`, and it was `http` — the one scheme this endpoint refuses.
+ *
+ * Measured against the live host: `http://direct-api.xenostudio.ai:8443/v1/models` answers
+ * **400 `HTTPS required. Use https://direct-api.xenostudio.ai:8443`**, while the same path over
+ * https answers 401, the correct "authenticate first". So every request built on this default was
+ * rejected before authentication was even considered, and the failure surfaced far away as a
+ * generic cloud-unavailable error rather than as a bad URL.
+ *
+ * ⚠️ It also sends a credential over plaintext to a host that will not serve it — the redirect
+ * never happens because the server answers 400 instead of 301.
+ */
+const DEFAULT_DIRECT_API_BASE = 'https://direct-api.xenostudio.ai:8443';
 function normalizeApiBase(baseURL) {
     return baseURL.trim().replace(/\/+$/, '');
 }
@@ -2233,6 +2246,28 @@ export function registerSdkNativeGovernedAutomationTools(options) {
     const environment = structuredClone(options.environment);
     if (options.capabilities.browser === false)
         delete environment.browser;
+    /**
+     * 🔴 The computer surface was registered and could never resolve an adapter.
+     *
+     * `readXenoHostAutomationEnvironment()` fills `environment.computer` from ambient `XENO_USE_*`
+     * variables, and NOTHING in this repo ever set them — measured, zero configuration sites — so
+     * every turn registered COMPUTER_OBSERVE and COMPUTER_ACT against an endpoint that did not
+     * exist. The tools were present, the profile allowed them, and the adapter behind them was
+     * undefined: the "built, wired, unreachable" shape this repo keeps finding, in its quietest
+     * form, because a tool that cannot resolve its adapter fails at CALL time and reads to the
+     * model as the machine being unavailable rather than as us never having connected it.
+     *
+     * The host's resolver now supplies it, so the machine the PERSON can grant in Machine mode and
+     * the machine the MODEL can reach mid-turn are the same machine, configured once.
+     */
+    if (options.machineEndpoint) {
+        environment.computer = {
+            baseUrl: options.machineEndpoint.baseUrl,
+            token: options.machineEndpoint.bearer,
+            ...(options.machineEndpoint.deviceId ? { deviceId: options.machineEndpoint.deviceId } : {}),
+            allowedApplications: [...options.machineEndpoint.allowedApplications],
+        };
+    }
     if (options.capabilities.appLaunch === false)
         delete environment.computer;
     const profile = options.sdk.compileAgentProfile(profileDefinition);
@@ -2257,10 +2292,27 @@ function isCloudTunnelFailure(status, body) {
 function isUsingConfiguredDirectCloudApi() {
     return CLOUD_API_BASE === DIRECT_API_BASE || !!process.env.XENO_AGENT_API_BASE || !!process.env.XENO_DIRECT_API_BASE;
 }
-async function shouldUsePlatformChatFallback(hasDirectApiKey) {
+/**
+ * Whether this turn must go through the hosted text-only relay instead of the SDK runtime.
+ *
+ * 🔴 `hasDirectCredential` is NOT "has an API key", and that difference is the whole fix. This
+ * read `!hasDirectApiKey` and was called with `!!apiKey`, so a person signed into XENO with no key
+ * was diverted into the relay before the SDK ever ran — and since an engineering turn refuses to
+ * be downgraded, the turn died with "the tool-capable SDK runtime is unavailable". The account was
+ * valid at the gateway the entire time.
+ *
+ * That is the third place this equivalence was written. The lane policy and the model catalogue
+ * were fixed first; this one sits below both, so a turn could pass every credential check above it
+ * and still be routed away from the runtime here. Measured against the live gateway: an account
+ * with no API key produced `platform-chat-fallback-…` request ids until this changed.
+ *
+ * The relay exists for a real case — the direct cloud API being unreachable — so the probe below
+ * still runs. What no longer happens is treating "no API key" as "no credential".
+ */
+async function shouldUsePlatformChatFallback(hasDirectCredential) {
     if (isUsingConfiguredDirectCloudApi())
         return false;
-    if (!hasDirectApiKey)
+    if (!hasDirectCredential)
         return true;
     const now = Date.now();
     if (cloudChatFallbackCache && (now - cloudChatFallbackCache.checkedAt) < 30000) {
@@ -2353,8 +2405,27 @@ function extractRetryAfterMs(message) {
 function extractCloudflareRay(message) {
     return message.match(/\bcf-ray=([a-z0-9-]+)\b/i)?.[1] || message.match(/Cloudflare Ray ID:\s*([a-z0-9]+)/i)?.[1] || null;
 }
-function isCloudApiTransientErrorMessage(message) {
+/**
+ * Exported for tests ONLY — it is not part of the host's public surface.
+ *
+ * This predicate decides whether a failed turn is RETRIED and whether it falls back, so its
+ * classification is behaviour, not wording, and it earned a gate the hard way (see the
+ * auth-dependency note below). Testing it through a whole turn would need a live provider
+ * failure, which is exactly the shape that goes untested and then ships.
+ */
+export function isCloudApiTransientErrorMessage(message) {
     const status = extractCloudApiStatus(message);
+    /**
+     * 🔴 An authentication-dependency failure arrives as 503 and is NOT transient.
+     *
+     * This predicate drives retries and the text-only fallback, not just wording. When the gateway
+     * could not reach its auth dependency (measured 2026-09-14: a missing GRANT on
+     * `oauth_session_state`), every turn burned its retries and a fallback against a fault that
+     * could never clear — and then reported upstream capacity. Retrying a permanent authorization
+     * fault is load against our own gateway with no possible success.
+     */
+    if (/auth[_-]dependency[_-]unavailable/i.test(message))
+        return false;
     return status === 408
         || status === 429
         || status === 500
@@ -2384,7 +2455,8 @@ function stripHtmlForErrorPreview(message) {
         .replace(/\s+/g, ' ')
         .trim();
 }
-function sanitizeAgentRunErrorMessage(error) {
+/** Exported for tests ONLY — see {@link isCloudApiTransientErrorMessage}. Not a public API. */
+export function sanitizeAgentRunErrorMessage(error) {
     const rawMessage = typeof error === 'string' ? error : (error.message || String(error));
     const status = extractCloudApiStatus(rawMessage);
     const retryAfterMs = extractRetryAfterMs(rawMessage);
@@ -2424,6 +2496,27 @@ function sanitizeAgentRunErrorMessage(error) {
             cfRay ? `Cloudflare Ray: ${cfRay}.` : null,
         ].filter(Boolean).join(' ');
     }
+    /**
+     * 🔴 An AUTHENTICATION fault is not a transient one, even when it arrives as 503.
+     *
+     * The gateway answers `503 auth_dependency_unavailable` when its own auth dependency fails —
+     * measured 2026-09-14, that was a missing database GRANT on `oauth_session_state`, which no
+     * amount of retrying could ever clear. Reported as "temporarily unavailable, try again in a
+     * moment" it read as upstream capacity for hours, and the gateway log was simultaneously full
+     * of a DIFFERENT caller's genuine `gpt-*` capacity events, which made the wrong answer look
+     * confirmed. Advice that cannot work is worse than no advice: it sends the reader away from
+     * the cause.
+     *
+     * Checked BEFORE the transient branch because the status alone cannot separate them.
+     */
+    if (/auth[_-]dependency[_-]unavailable/i.test(rawMessage)) {
+        return [
+            `Cloud API could not authenticate this request (HTTP ${status || 503}).`,
+            'The XENO gateway reached its authentication dependency and it failed, so retrying will not help.',
+            'Report this with the time of the request.',
+            cfRay ? `Cloudflare Ray: ${cfRay}.` : null,
+        ].filter(Boolean).join(' ');
+    }
     if (status && isCloudApiTransientErrorMessage(rawMessage)) {
         return [
             `Cloud API is temporarily unavailable (HTTP ${status}).`,
@@ -3215,7 +3308,7 @@ export async function runSdkAgent(options) {
     }
 }
 async function runSdkAgentOwned(options, ownerId) {
-    const { requestId, conversationId, hostBinding, sdkSessionId, subagentRunId, workspaceId, teamId, agentId, model, messages, systemPrompt, maxIterations = 10, enableThinking = false, reasoningEffort, getAuthToken, getPlatformAuthToken, mainWindow, signal, capabilities, permissionProfile, allowedDirectories, approvalRules: rawApprovalRules, allowTextOnlyFallback = false, toolExecution, onPersistedRuntimeEvent, prepareRuntimeEventForPersistence, runtimeEventStore: injectedRuntimeEventStore, coordinationTools, isProduction, executionEnvironment, workspaceEnvironment, } = options;
+    const { requestId, conversationId, hostBinding, sdkSessionId, subagentRunId, workspaceId, teamId, agentId, model, messages, systemPrompt, maxIterations = 10, enableThinking = false, reasoningEffort, getAuthToken, authorizeRequest, getPlatformAuthToken, mainWindow, signal, capabilities, permissionProfile, allowedDirectories, approvalRules: rawApprovalRules, allowTextOnlyFallback = false, toolExecution, onPersistedRuntimeEvent, prepareRuntimeEventForPersistence, runtimeEventStore: injectedRuntimeEventStore, coordinationTools, isProduction, executionEnvironment, workspaceEnvironment, } = options;
     const approvalRules = normalizeApprovalRules(rawApprovalRules);
     const resolvedPermissionProfile = resolveAgentPermissionProfile({
         ...(permissionProfile ? { requestedProfile: permissionProfile } : {}),
@@ -3586,6 +3679,11 @@ async function runSdkAgentOwned(options, ownerId) {
     // selected XENO_BROWSER_DRIVER resolves either XENO Browser or the XENO
     // Extension native bridge; configured XENO Use device automation joins the
     // same lease, execution-contract, policy, and evidence runtime.
+    //
+    // The XENO Use half of that sentence was ASPIRATIONAL until the endpoint below was passed: the
+    // environment reader fills `computer` only from ambient XENO_USE_* variables, which nothing in
+    // this repo set. Resolving it here is what makes the claim true.
+    const machineEndpointStatus = await resolveMachineTarget();
     const governedAutomationToolCount = registerSdkNativeGovernedAutomationTools({
         sdk,
         toolRegistry,
@@ -3596,6 +3694,7 @@ async function runSdkAgentOwned(options, ownerId) {
         agentId: agentId || '__main_assistant__',
         ...(sdkSessionId || conversationId ? { sessionId: sdkSessionId || conversationId } : {}),
         ...(workspaceId ? { workspaceId } : {}),
+        ...(machineEndpointStatus.endpoint ? { machineEndpoint: machineEndpointStatus.endpoint } : {}),
     });
     if (governedAutomationToolCount > 0) {
         logAgentDebug('registered SDK-governed XENO automation tools', {
@@ -4279,6 +4378,31 @@ async function runSdkAgentOwned(options, ownerId) {
     if (isLocalModel) {
         baseURL = 'http://localhost:3338';
     }
+    else if (!process.env.XENO_AGENT_API_BASE && !process.env.XENO_DIRECT_API_BASE) {
+        /**
+         * 🔴 The DIRECT origin, not the Cloudflare-fronted host — which is what `DIRECT_API_BASE` has
+         * existed for all along, reachable only if somebody set an environment variable by hand.
+         *
+         * Measured 2026-09-14, and it is why an agent turn kept failing: a turn selecting
+         * `claude-sonnet-5` reported `HTTP 503` with a Cloudflare Ray id, while the gateway's own log
+         * recorded **zero** `claude-sonnet-5` requests in the entire hour. The request never reached
+         * the origin. Every 503 the gateway did log belonged to another caller's `gpt-*` traffic
+         * running 40–110 requests a minute — which is exactly how this failure kept being
+         * misdiagnosed as upstream capacity.
+         *
+         * The two hosts are distinguishable in one probe:
+         *   https://api.xenostudio.ai/v1/models          -> Server: cloudflare, CF-RAY present
+         *   https://direct-api.xenostudio.ai:8443/v1/models -> Server: nginx, no CF-RAY, HTTP 401
+         *
+         * An agent turn is long, streaming and tool-driven — the shape a CDN is least suited to, and
+         * Cloudflare's 100s ceiling cuts exactly that. `xeno-agent-cli` already defaults to this
+         * origin for the same reason.
+         *
+         * ⚠️ Both environment variables still win when set, so an operator can pin either host, and
+         * the local-model branch above is untouched.
+         */
+        baseURL = DIRECT_API_BASE;
+    }
     // Build the system prompt
     const workspaceToolInstructions = [
         'Workspace tool order:',
@@ -4335,7 +4459,11 @@ async function runSdkAgentOwned(options, ownerId) {
     });
     const finalSystemPrompt = `${systemPrompt || 'You are a helpful AI assistant in the XENO Hub desktop application.'}\n\n${runtimeAuthorityInstructions}\n\n${toolHonestyInstructions}\n\n${workspaceToolInstructions}\n\n${taskTrackingInstructions}\n\n${liveSurfaceInstructions}`.trim();
     const runtimeSystemPrompt = isLocalModel ? normalizeLocalRuntimeText(finalSystemPrompt) : finalSystemPrompt;
-    if (!isLocalModel && await shouldUsePlatformChatFallback(!!apiKey)) {
+    // An account authorizer is a direct credential exactly as an API key is: the gateway accepts a
+    // DPoP-bound OIDC token, so a signed-in person needs no key. Passing only `!!apiKey` here is what
+    // routed every keyless account into the relay and then refused the turn.
+    const hasDirectCredential = Boolean(apiKey) || Boolean(authorizeRequest);
+    if (!isLocalModel && await shouldUsePlatformChatFallback(hasDirectCredential)) {
         if (!allowTextOnlyFallback) {
             emitPlatformChatFallbackFailure(new Error('The tool-capable SDK runtime is unavailable. XENO Agent will not downgrade this engineering turn to a text-only relay.'));
             clearVisibleProgressWatchdog();
@@ -4548,6 +4676,9 @@ async function runSdkAgentOwned(options, ownerId) {
     const agent = new sdk.AgentLoop({
         ownerSessionId: ownerId,
         apiKey,
+        // the account first; `apiKey` stays as the BYO override the SDK falls back to when absent.
+        // A local model needs no XENO credential at all, so it is deliberately not authorized here.
+        ...(authorizeRequest && !isLocalModel ? { authorizeRequest } : {}),
         baseURL,
         model: isLocalModel ? model : modelId,
         ...(reasoningEffort ? { effort: requireSdkReasoningEffort(reasoningEffort, sdk.AGENT_EFFORT_LEVELS) } : {}),
@@ -4965,11 +5096,51 @@ async function runSdkAgentOwned(options, ownerId) {
                 message: 'Agent model run failed.',
                 error: sanitizeAgentRunErrorMessage(error),
             });
+            /**
+             * 🔴 The RAW provider message, next to the sanitized one — and the distinction is the whole
+             * reason this exists. `sanitizeAgentRunErrorMessage` PARSES the status, the retry hint and
+             * the Cloudflare ray out of the provider's message and then returns a formatted sentence,
+             * discarding everything it did not recognise. So the fact that would identify the failure is
+             * present, read once, and thrown away.
+             *
+             * Measured 2026-09-14: a turn reported `Cloud API is temporarily unavailable (HTTP 503)`
+             * while the gateway's own log showed `200 | 955ms` for the same model on the same path, and
+             * no error entry existed on the origin for our request at all. Those cannot all describe the
+             * same request — and the transcript could not settle it, because the only surviving evidence
+             * was the sentence the sanitizer produced.
+             *
+             * ⚠️ Debug log only, never the runtime event: a provider body can carry request ids, header
+             * echoes and account identifiers, and the runtime event is persisted and surfaced. The
+             * sanitized message stays the thing a person is shown.
+             */
             logAgentDebug('Agent run errored', {
                 requestId,
                 model,
-                error: sanitizeAgentRunErrorMessage(error)
+                error: sanitizeAgentRunErrorMessage(error),
+                rawProviderMessage: (error?.message || String(error)).slice(0, 2000),
+                rawProviderName: error?.name,
             });
+            /**
+             * Opt-in raw capture, because a packaged app's main-process console reaches nobody.
+             *
+             * 🔴 `sanitizeAgentRunErrorMessage` REWRITES the provider's message into a sentence — it
+             * matched a status and produced "Cloud API is temporarily unavailable (HTTP 503)" while
+             * `waitMs: 5` showed no request had left the machine and the gateway logged zero requests
+             * for that model. The rendered sentence is therefore not evidence of where a failure came
+             * from, and for a day it was the only surviving trace.
+             *
+             * ⚠️ OFF by default and never a runtime event: a provider message can carry request ids and
+             * header echoes, and runtime events are persisted and rendered. This writes to a file only
+             * when an operator sets `XENO_AGENT_DEBUG_RAW_ERRORS=1`, for exactly this kind of session.
+             */
+            if (process.env.XENO_AGENT_DEBUG_RAW_ERRORS === '1') {
+                try {
+                    const target = join(homedir(), '.xeno', 'raw-provider-errors.log');
+                    const line = `${new Date().toISOString()} ${model} ${error?.name ?? 'Error'}: ${(error?.message || String(error)).slice(0, 4000)}\n`;
+                    writeFileSync(target, line, { encoding: 'utf-8', flag: 'a' });
+                }
+                catch { /* diagnostics must never break a turn */ }
+            }
             if (allowTextOnlyFallback && !isLocalModel && isCloudApiTransientErrorMessage(error.message || '')) {
                 try {
                     const fallback = await emitPlatformChatFallback({