@zhixuan92/multi-model-agent-core 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Zhang Zhixuan
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,112 @@
+# @zhixuan92/multi-model-agent-core
+
+Runtime library for [`multi-model-agent`](https://github.com/zhixuan312/multi-model-agent): provider runners (Claude, Codex, OpenAI-compatible), routing logic (capability / quality tier / cost), config schema, and a sandboxed file/shell tool layer.
+
+This is the building-block library. If you just want to run the MCP server, install [`@zhixuan92/multi-model-agent-mcp`](https://www.npmjs.com/package/@zhixuan92/multi-model-agent-mcp) instead.
+
+## Install
+
+```bash
+npm install @zhixuan92/multi-model-agent-core
+```
+
+If you plan to use `openai-compatible` providers, also install the optional peer dependencies:
+
+```bash
+npm install @openai/agents openai
+```
+
+Requires Node `>= 22`. ESM only.
+
+## What's exported
+
+```ts
+import {
+  // Config
+  loadConfigFromFile,
+  parseConfig,
+  multiModelConfigSchema,
+
+  // Provider factory + dispatch
+  createProvider,
+  runTasks,
+
+  // Routing helpers
+  selectProviderForTask,
+  getProviderEligibility,
+  getBaseCapabilities,
+  resolveTaskCapabilities,
+  findModelProfile,
+  getEffectiveCostTier,
+} from '@zhixuan92/multi-model-agent-core';
+
+import type {
+  MultiModelConfig,
+  ProviderConfig,
+  TaskSpec,
+  RunResult,
+  RunStatus,
+  Tier,
+  Capability,
+  CostTier,
+  Effort,
+  SandboxPolicy,
+} from '@zhixuan92/multi-model-agent-core';
+```
+
+Subpath exports are available for tree-shaking-friendly imports:
+
+| Subpath | What |
+| --- | --- |
+| `./config/schema` | `parseConfig`, `multiModelConfigSchema` |
+| `./config/load` | `loadConfigFromFile` |
+| `./routing/capabilities` | base provider capability table |
+| `./routing/model-profiles` | tier/cost defaults per model name prefix |
+| `./routing/select-provider-for-task` | routing decision |
+| `./routing/get-provider-eligibility` | per-provider eligibility breakdown with reasons |
+| `./routing/resolve-task-capabilities` | merges per-task overrides into provider capabilities |
+| `./provider` | `createProvider` factory |
+| `./run-tasks` | `runTasks` parallel dispatcher |
+| `./types` | all shared types |
+
+## Quick example
+
+```ts
+import { runTasks } from '@zhixuan92/multi-model-agent-core';
+
+const config = {
+  providers: {
+    claude: { type: 'claude', model: 'claude-sonnet-4-6' },
+    codex: { type: 'codex', model: 'gpt-5-codex' },
+  },
+  defaults: { maxTurns: 200, timeoutMs: 600_000, tools: 'full' },
+};
+
+const results = await runTasks(
+  [
+    { prompt: 'Refactor auth.ts to use JWT.', tier: 'reasoning', requiredCapabilities: ['file_read', 'file_write'] },
+    { prompt: 'List all .ts files.', tier: 'trivial', requiredCapabilities: ['glob'] },
+  ],
+  config,
+);
+
+for (const r of results) {
+  console.log(r.status, r.output);
+}
+```
+
+`runTasks` runs each task on the cheapest eligible provider in parallel and returns a result per task. Pin a task to a specific provider by adding `provider: 'claude'`.
+
+## Sandbox
+
+File tools enforce `sandboxPolicy: 'cwd-only'` by default — paths must resolve (via `fs.realpath`) inside the task's `cwd`. `runShell` is hard-disabled under `cwd-only`. `readFile` rejects targets larger than 50 MiB and `writeFile` rejects content larger than 100 MiB before touching memory or disk.
+
+## Documentation
+
+Full docs, configuration reference, supported providers, and the routing matrix live in the project README:
+
+→ **<https://github.com/zhixuan312/multi-model-agent#readme>**
+
+## License
+
+[MIT](./LICENSE) — Copyright (c) 2026 Zhang Zhixuan

package/dist/auth/claude-oauth.d.ts

@@ -0,0 +1,6 @@
+export interface ClaudeAuth {
+    apiKey?: string;
+    useOAuth: boolean;
+}
+export declare function getClaudeAuth(): ClaudeAuth;
+//# sourceMappingURL=claude-oauth.d.ts.map

package/dist/auth/claude-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/claude-oauth.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,OAAO,CAAC;CACnB;AAED,wBAAgB,aAAa,IAAI,UAAU,CAM1C"}

package/dist/auth/claude-oauth.js

@@ -0,0 +1,8 @@
+export function getClaudeAuth() {
+    const apiKey = process.env.ANTHROPIC_API_KEY;
+    return {
+        apiKey: apiKey || undefined,
+        useOAuth: !apiKey,
+    };
+}
+//# sourceMappingURL=claude-oauth.js.map

package/dist/auth/claude-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"claude-oauth.js","sourceRoot":"","sources":["../../src/auth/claude-oauth.ts"],"names":[],"mappings":"AAKA,MAAM,UAAU,aAAa;IAC3B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAC7C,OAAO;QACL,MAAM,EAAE,MAAM,IAAI,SAAS;QAC3B,QAAQ,EAAE,CAAC,MAAM;KAClB,CAAC;AACJ,CAAC"}

package/dist/auth/codex-oauth.d.ts

@@ -0,0 +1,6 @@
+export interface CodexAuth {
+    accessToken: string;
+    accountId: string;
+}
+export declare function getCodexAuth(): CodexAuth | null;
+//# sourceMappingURL=codex-oauth.d.ts.map

package/dist/auth/codex-oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-oauth.d.ts","sourceRoot":"","sources":["../../src/auth/codex-oauth.ts"],"names":[],"mappings":"AAaA,MAAM,WAAW,SAAS;IACxB,WAAW,EAAE,MAAM,CAAC;IACpB,SAAS,EAAE,MAAM,CAAC;CACnB;AA8BD,wBAAgB,YAAY,IAAI,SAAS,GAAG,IAAI,CAgB/C"}

package/dist/auth/codex-oauth.js

@@ -0,0 +1,50 @@
+import fs from 'fs';
+import path from 'path';
+import os from 'os';
+const CODEX_AUTH_PATH = () => path.join(os.homedir(), '.codex', 'auth.json');
+// Track which paths we have already warned about so getCodexAuth() can be
+// called repeatedly (it is, on every sub-agent dispatch) without spamming
+// stderr with the same chmod warning.
+const warnedPaths = new Set();
+function warnIfWorldReadable(authPath) {
+    // Permission bits are POSIX-only. On Windows, mode bits are not meaningful.
+    if (process.platform === 'win32')
+        return;
+    if (warnedPaths.has(authPath))
+        return;
+    try {
+        const stats = fs.statSync(authPath);
+        const groupOrOtherReadable = (stats.mode & 0o077) !== 0;
+        if (groupOrOtherReadable) {
+            warnedPaths.add(authPath);
+            const mode = (stats.mode & 0o777).toString(8);
+            // eslint-disable-next-line no-console
+            console.warn(`[multi-model-agent] WARNING: ${authPath} has permissions 0${mode} ` +
+                `and is readable by other users on this system. Run \`chmod 600 ${authPath}\` ` +
+                `to restrict access to your Codex OAuth token.`);
+        }
+    }
+    catch {
+        // statSync should not normally fail here (we just confirmed existsSync),
+        // but if it does there's nothing useful to warn about.
+    }
+}
+export function getCodexAuth() {
+    const authPath = CODEX_AUTH_PATH();
+    if (!fs.existsSync(authPath))
+        return null;
+    warnIfWorldReadable(authPath);
+    try {
+        const raw = JSON.parse(fs.readFileSync(authPath, 'utf-8'));
+        if (!raw.tokens?.access_token || !raw.tokens?.account_id)
+            return null;
+        return {
+            accessToken: raw.tokens.access_token,
+            accountId: raw.tokens.account_id,
+        };
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=codex-oauth.js.map

package/dist/auth/codex-oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-oauth.js","sourceRoot":"","sources":["../../src/auth/codex-oauth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,IAAI,MAAM,MAAM,CAAC;AACxB,OAAO,EAAE,MAAM,IAAI,CAAC;AAEpB,MAAM,eAAe,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,WAAW,CAAC,CAAC;AAc7E,0EAA0E;AAC1E,0EAA0E;AAC1E,sCAAsC;AACtC,MAAM,WAAW,GAAG,IAAI,GAAG,EAAU,CAAC;AAEtC,SAAS,mBAAmB,CAAC,QAAgB;IAC3C,4EAA4E;IAC5E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO;IACzC,IAAI,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC;QAAE,OAAO;IACtC,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,EAAE,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;QACpC,MAAM,oBAAoB,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC;QACxD,IAAI,oBAAoB,EAAE,CAAC;YACzB,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;YAC1B,MAAM,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC9C,sCAAsC;YACtC,OAAO,CAAC,IAAI,CACV,gCAAgC,QAAQ,qBAAqB,IAAI,GAAG;gBAClE,kEAAkE,QAAQ,KAAK;gBAC/E,+CAA+C,CAClD,CAAC;QACJ,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,uDAAuD;IACzD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,YAAY;IAC1B,MAAM,QAAQ,GAAG,eAAe,EAAE,CAAC;IACnC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,IAAI,CAAC;IAE1C,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAE9B,IAAI,CAAC;QACH,MAAM,GAAG,GAAkB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QAC1E,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,YAAY,IAAI,CAAC,GAAG,CAAC,MAAM,EAAE,UAAU;YAAE,OAAO,IAAI,CAAC;QACtE,OAAO;YACL,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,YAAY;YACpC,SAAS,EAAE,GAAG,CAAC,MAAM,CAAC,UAAU;SACjC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/config/load.d.ts

@@ -0,0 +1,8 @@
+import type { MultiModelConfig } from '../types.js';
+/**
+ * Load and parse a config file by path.
+ * No auto-lookup — callers must provide the path.
+ * Core has no knowledge of MULTI_MODEL_CONFIG env var or home-directory discovery.
+ */
+export declare function loadConfigFromFile(path: string): Promise<MultiModelConfig>;
+//# sourceMappingURL=load.d.ts.map

package/dist/config/load.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.d.ts","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AA6BpD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAiBhF"}

package/dist/config/load.js

@@ -0,0 +1,49 @@
+import fs from 'fs';
+import { multiModelConfigSchema } from './schema.js';
+/**
+ * Warn if any openai-compatible provider in the parsed config carries an
+ * inline `apiKey` instead of using `apiKeyEnv`. The schema permits both for
+ * backwards compatibility, but storing a plaintext API key in a config file
+ * that may end up in a backup, dotfile repo, or git is a footgun. We surface
+ * the issue at load time, once, so the operator notices.
+ */
+function warnOnInlineApiKey(config, configPath) {
+    const offenders = [];
+    for (const [name, provider] of Object.entries(config.providers)) {
+        if (provider.type === 'openai-compatible' &&
+            typeof provider.apiKey === 'string') {
+            offenders.push(name);
+        }
+    }
+    if (offenders.length > 0) {
+        // eslint-disable-next-line no-console
+        console.warn(`[multi-model-agent] WARNING: ${configPath} stores an inline \`apiKey\` for ` +
+            `provider(s): ${offenders.join(', ')}. Prefer \`apiKeyEnv\` and read the key ` +
+            `from an environment variable so it never lands in version control.`);
+    }
+}
+/**
+ * Load and parse a config file by path.
+ * No auto-lookup — callers must provide the path.
+ * Core has no knowledge of MULTI_MODEL_CONFIG env var or home-directory discovery.
+ */
+export async function loadConfigFromFile(path) {
+    return new Promise((resolve, reject) => {
+        fs.readFile(path, 'utf-8', (err, data) => {
+            if (err) {
+                reject(new Error(`Config file not found: ${path}`));
+                return;
+            }
+            try {
+                const raw = JSON.parse(data);
+                const parsed = multiModelConfigSchema.parse(raw);
+                warnOnInlineApiKey(parsed, path);
+                resolve(parsed);
+            }
+            catch (e) {
+                reject(new Error(`Invalid config at ${path}: ${e instanceof Error ? e.message : String(e)}`));
+            }
+        });
+    });
+}
+//# sourceMappingURL=load.js.map

package/dist/config/load.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"load.js","sourceRoot":"","sources":["../../src/config/load.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,MAAM,IAAI,CAAC;AACpB,OAAO,EAAE,sBAAsB,EAAE,MAAM,aAAa,CAAC;AAGrD;;;;;;GAMG;AACH,SAAS,kBAAkB,CAAC,MAAwB,EAAE,UAAkB;IACtE,MAAM,SAAS,GAAa,EAAE,CAAC;IAC/B,KAAK,MAAM,CAAC,IAAI,EAAE,QAAQ,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAChE,IACE,QAAQ,CAAC,IAAI,KAAK,mBAAmB;YACrC,OAAQ,QAAiC,CAAC,MAAM,KAAK,QAAQ,EAC7D,CAAC;YACD,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvB,CAAC;IACH,CAAC;IACD,IAAI,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzB,sCAAsC;QACtC,OAAO,CAAC,IAAI,CACV,gCAAgC,UAAU,mCAAmC;YAC3E,gBAAgB,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,0CAA0C;YAC9E,oEAAoE,CACvE,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAC,IAAY;IACnD,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACrC,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE;YACvC,IAAI,GAAG,EAAE,CAAC;gBACR,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,IAAI,EAAE,CAAC,CAAC,CAAC;gBACpD,OAAO;YACT,CAAC;YACD,IAAI,CAAC;gBACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;gBAC7B,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACjD,kBAAkB,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACjC,OAAO,CAAC,MAAM,CAAC,CAAC;YAClB,CAAC;YAAC,OAAO,CAAC,EAAE,CAAC;gBACX,MAAM,CAAC,IAAI,KAAK,CAAC,qBAAqB,IAAI,KAAK,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;YAChG,CAAC;QACH,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}

package/dist/config/schema.d.ts

@@ -0,0 +1,275 @@
+import { z } from 'zod';
+import type { MultiModelConfig } from '../types.js';
+export declare const codexProviderConfigSchema: z.ZodObject<{
+    type: z.ZodLiteral<"codex">;
+    model: z.ZodString;
+    effort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>;
+    maxTurns: z.ZodOptional<z.ZodNumber>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        "cwd-only": "cwd-only";
+    }>>;
+    hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        web_search: "web_search";
+        image_generation: "image_generation";
+        code_interpreter: "code_interpreter";
+    }>>>;
+    costTier: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        free: "free";
+    }>>;
+}, z.core.$strip>;
+export declare const claudeProviderConfigSchema: z.ZodObject<{
+    type: z.ZodLiteral<"claude">;
+    model: z.ZodString;
+    effort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>;
+    maxTurns: z.ZodOptional<z.ZodNumber>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        "cwd-only": "cwd-only";
+    }>>;
+    hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        web_search: "web_search";
+        image_generation: "image_generation";
+        code_interpreter: "code_interpreter";
+    }>>>;
+    costTier: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        free: "free";
+    }>>;
+}, z.core.$strip>;
+export declare const openAICompatibleProviderConfigSchema: z.ZodObject<{
+    type: z.ZodLiteral<"openai-compatible">;
+    model: z.ZodString;
+    baseUrl: z.ZodString;
+    apiKey: z.ZodOptional<z.ZodString>;
+    apiKeyEnv: z.ZodOptional<z.ZodString>;
+    effort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>;
+    maxTurns: z.ZodOptional<z.ZodNumber>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        "cwd-only": "cwd-only";
+    }>>;
+    hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        web_search: "web_search";
+        image_generation: "image_generation";
+        code_interpreter: "code_interpreter";
+    }>>>;
+    costTier: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        free: "free";
+    }>>;
+}, z.core.$strip>;
+export declare const providerConfigSchema: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    type: z.ZodLiteral<"codex">;
+    model: z.ZodString;
+    effort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>;
+    maxTurns: z.ZodOptional<z.ZodNumber>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        "cwd-only": "cwd-only";
+    }>>;
+    hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        web_search: "web_search";
+        image_generation: "image_generation";
+        code_interpreter: "code_interpreter";
+    }>>>;
+    costTier: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        free: "free";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"claude">;
+    model: z.ZodString;
+    effort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>;
+    maxTurns: z.ZodOptional<z.ZodNumber>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        "cwd-only": "cwd-only";
+    }>>;
+    hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        web_search: "web_search";
+        image_generation: "image_generation";
+        code_interpreter: "code_interpreter";
+    }>>>;
+    costTier: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        free: "free";
+    }>>;
+}, z.core.$strip>, z.ZodObject<{
+    type: z.ZodLiteral<"openai-compatible">;
+    model: z.ZodString;
+    baseUrl: z.ZodString;
+    apiKey: z.ZodOptional<z.ZodString>;
+    apiKeyEnv: z.ZodOptional<z.ZodString>;
+    effort: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        low: "low";
+        medium: "medium";
+        high: "high";
+    }>>;
+    maxTurns: z.ZodOptional<z.ZodNumber>;
+    timeoutMs: z.ZodOptional<z.ZodNumber>;
+    sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+        none: "none";
+        "cwd-only": "cwd-only";
+    }>>;
+    hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+        web_search: "web_search";
+        image_generation: "image_generation";
+        code_interpreter: "code_interpreter";
+    }>>>;
+    costTier: z.ZodOptional<z.ZodEnum<{
+        low: "low";
+        medium: "medium";
+        high: "high";
+        free: "free";
+    }>>;
+}, z.core.$strip>], "type">;
+export declare const multiModelConfigSchema: z.ZodObject<{
+    providers: z.ZodDefault<z.ZodRecord<z.ZodString, z.ZodDiscriminatedUnion<[z.ZodObject<{
+        type: z.ZodLiteral<"codex">;
+        model: z.ZodString;
+        effort: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>>;
+        maxTurns: z.ZodOptional<z.ZodNumber>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            "cwd-only": "cwd-only";
+        }>>;
+        hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            web_search: "web_search";
+            image_generation: "image_generation";
+            code_interpreter: "code_interpreter";
+        }>>>;
+        costTier: z.ZodOptional<z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            free: "free";
+        }>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"claude">;
+        model: z.ZodString;
+        effort: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>>;
+        maxTurns: z.ZodOptional<z.ZodNumber>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            "cwd-only": "cwd-only";
+        }>>;
+        hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            web_search: "web_search";
+            image_generation: "image_generation";
+            code_interpreter: "code_interpreter";
+        }>>>;
+        costTier: z.ZodOptional<z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            free: "free";
+        }>>;
+    }, z.core.$strip>, z.ZodObject<{
+        type: z.ZodLiteral<"openai-compatible">;
+        model: z.ZodString;
+        baseUrl: z.ZodString;
+        apiKey: z.ZodOptional<z.ZodString>;
+        apiKeyEnv: z.ZodOptional<z.ZodString>;
+        effort: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            low: "low";
+            medium: "medium";
+            high: "high";
+        }>>;
+        maxTurns: z.ZodOptional<z.ZodNumber>;
+        timeoutMs: z.ZodOptional<z.ZodNumber>;
+        sandboxPolicy: z.ZodOptional<z.ZodEnum<{
+            none: "none";
+            "cwd-only": "cwd-only";
+        }>>;
+        hostedTools: z.ZodOptional<z.ZodArray<z.ZodEnum<{
+            web_search: "web_search";
+            image_generation: "image_generation";
+            code_interpreter: "code_interpreter";
+        }>>>;
+        costTier: z.ZodOptional<z.ZodEnum<{
+            low: "low";
+            medium: "medium";
+            high: "high";
+            free: "free";
+        }>>;
+    }, z.core.$strip>], "type">>>;
+    defaults: z.ZodDefault<z.ZodObject<{
+        maxTurns: z.ZodDefault<z.ZodNumber>;
+        timeoutMs: z.ZodDefault<z.ZodNumber>;
+        tools: z.ZodDefault<z.ZodEnum<{
+            none: "none";
+            full: "full";
+        }>>;
+    }, z.core.$strip>>;
+}, z.core.$strip>;
+export interface ParsedConfigSuccess {
+    config: MultiModelConfig;
+    success: true;
+}
+export interface ParsedConfigFailure {
+    success: false;
+    error: string;
+}
+export type ParseConfigResult = ParsedConfigSuccess | ParsedConfigFailure;
+/**
+ * Parse a raw config object — validates schema, no side effects.
+ * Does NOT load from disk.
+ */
+export declare function parseConfig(raw: unknown): MultiModelConfig;
+//# sourceMappingURL=schema.d.ts.map

package/dist/config/schema.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.d.ts","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,KAAK,EAGV,gBAAgB,EAGjB,MAAM,aAAa,CAAC;AASrB,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;iBASpC,CAAC;AAEH,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;;;;;;;;;iBASrC,CAAC;AAEH,eAAO,MAAM,oCAAoC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY/C,CAAC;AAEH,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;2BAI/B,CAAC;AAUH,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAGjC,CAAC;AAEH,MAAM,WAAW,mBAAmB;IAClC,MAAM,EAAE,gBAAgB,CAAA;IACxB,OAAO,EAAE,IAAI,CAAA;CACd;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,KAAK,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;CACd;AAED,MAAM,MAAM,iBAAiB,GAAG,mBAAmB,GAAG,mBAAmB,CAAA;AAEzE;;;GAGG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,OAAO,GAAG,gBAAgB,CAE1D"}

package/dist/config/schema.js

@@ -0,0 +1,62 @@
+import { z } from 'zod';
+// === Per-provider Zod schemas ===
+const effortSchema = z.enum(['none', 'low', 'medium', 'high']);
+const costTierSchema = z.enum(['free', 'low', 'medium', 'high']);
+const hostedToolsSchema = z.array(z.enum(['web_search', 'image_generation', 'code_interpreter']));
+const sandboxPolicySchema = z.enum(['none', 'cwd-only']).optional();
+export const codexProviderConfigSchema = z.object({
+    type: z.literal('codex'),
+    model: z.string(),
+    effort: effortSchema.optional(),
+    maxTurns: z.number().int().positive().optional(),
+    timeoutMs: z.number().int().positive().optional(),
+    sandboxPolicy: sandboxPolicySchema,
+    hostedTools: hostedToolsSchema.optional(),
+    costTier: costTierSchema.optional(),
+});
+export const claudeProviderConfigSchema = z.object({
+    type: z.literal('claude'),
+    model: z.string(),
+    effort: effortSchema.optional(),
+    maxTurns: z.number().int().positive().optional(),
+    timeoutMs: z.number().int().positive().optional(),
+    sandboxPolicy: sandboxPolicySchema,
+    hostedTools: hostedToolsSchema.optional(),
+    costTier: costTierSchema.optional(),
+});
+export const openAICompatibleProviderConfigSchema = z.object({
+    type: z.literal('openai-compatible'),
+    model: z.string(),
+    baseUrl: z.string().min(1, 'baseUrl is required for openai-compatible providers'),
+    apiKey: z.string().optional(),
+    apiKeyEnv: z.string().optional(),
+    effort: effortSchema.optional(),
+    maxTurns: z.number().int().positive().optional(),
+    timeoutMs: z.number().int().positive().optional(),
+    sandboxPolicy: sandboxPolicySchema,
+    hostedTools: hostedToolsSchema.optional(),
+    costTier: costTierSchema.optional(),
+});
+export const providerConfigSchema = z.discriminatedUnion('type', [
+    codexProviderConfigSchema,
+    claudeProviderConfigSchema,
+    openAICompatibleProviderConfigSchema,
+]);
+// === MultiModelConfig schema ===
+const defaultsSchema = z.object({
+    maxTurns: z.number().int().positive().default(200),
+    timeoutMs: z.number().int().positive().default(600_000),
+    tools: z.enum(['none', 'full']).default('full'),
+}).default(() => ({ maxTurns: 200, timeoutMs: 600_000, tools: 'full' }));
+export const multiModelConfigSchema = z.object({
+    providers: z.record(z.string(), providerConfigSchema).default({}),
+    defaults: defaultsSchema,
+});
+/**
+ * Parse a raw config object — validates schema, no side effects.
+ * Does NOT load from disk.
+ */
+export function parseConfig(raw) {
+    return multiModelConfigSchema.parse(raw);
+}
+//# sourceMappingURL=schema.js.map

package/dist/config/schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"schema.js","sourceRoot":"","sources":["../../src/config/schema.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AASxB,mCAAmC;AAEnC,MAAM,YAAY,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AAC/D,MAAM,cAAc,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC;AACjE,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,kBAAkB,EAAE,kBAAkB,CAAC,CAAC,CAAC,CAAC;AAClG,MAAM,mBAAmB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC;AAEpE,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC;IACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,aAAa,EAAE,mBAAmB;IAClC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACzB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,aAAa,EAAE,mBAAmB;IAClC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oCAAoC,GAAG,CAAC,CAAC,MAAM,CAAC;IAC3D,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC;IACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;IACjB,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,qDAAqD,CAAC;IACjF,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,YAAY,CAAC,QAAQ,EAAE;IAC/B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IAChD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACjD,aAAa,EAAE,mBAAmB;IAClC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,EAAE;IACzC,QAAQ,EAAE,cAAc,CAAC,QAAQ,EAAE;CACpC,CAAC,CAAC;AAEH,MAAM,CAAC,MAAM,oBAAoB,GAAG,CAAC,CAAC,kBAAkB,CAAC,MAAM,EAAE;IAC/D,yBAAyB;IACzB,0BAA0B;IAC1B,oCAAoC;CACrC,CAAC,CAAC;AAEH,kCAAkC;AAElC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9B,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC;IAClD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC;IACvD,KAAK,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC;CAChD,CAAC,CAAC,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,QAAQ,EAAE,GAAG,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,MAAe,EAAE,CAAC,CAAC,CAAC;AAElF,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC7C,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,oBAAoB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACjE,QAAQ,EAAE,cAAc;CACzB,CAAC,CAAC;AAcH;;;GAGG;AACH,MAAM,UAAU,WAAW,CAAC,GAAY;IACtC,OAAO,sBAAsB,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;AAC3C,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,11 @@
+export { loadConfigFromFile } from './config/load.js';
+export { parseConfig, multiModelConfigSchema } from './config/schema.js';
+export type { Tier, Capability, ToolMode, SandboxPolicy, Effort, CostTier, RunStatus, TaskSpec, ProviderConfig, CodexProviderConfig, ClaudeProviderConfig, OpenAICompatibleProviderConfig, MultiModelConfig, TokenUsage, RunResult, Provider, RunOptions, EligibilityFailureCheck, EligibilityFailure, ProviderEligibility, } from './types.js';
+export { createProvider } from './provider.js';
+export { runTasks } from './run-tasks.js';
+export { getBaseCapabilities } from './routing/capabilities.js';
+export { resolveTaskCapabilities } from './routing/resolve-task-capabilities.js';
+export { findModelProfile, getEffectiveCostTier } from './routing/model-profiles.js';
+export { selectProviderForTask } from './routing/select-provider-for-task.js';
+export { getProviderEligibility } from './routing/get-provider-eligibility.js';
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AACtD,OAAO,EAAE,WAAW,EAAE,sBAAsB,EAAE,MAAM,oBAAoB,CAAC;AAGzE,YAAY,EACV,IAAI,EACJ,UAAU,EACV,QAAQ,EACR,aAAa,EACb,MAAM,EACN,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,cAAc,EACd,mBAAmB,EACnB,oBAAoB,EACpB,8BAA8B,EAC9B,gBAAgB,EAChB,UAAU,EACV,SAAS,EACT,QAAQ,EACR,UAAU,EACV,uBAAuB,EACvB,kBAAkB,EAClB,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAGpB,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAC;AAG/C,OAAO,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AAG1C,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAChE,OAAO,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAC;AACjF,OAAO,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,MAAM,6BAA6B,CAAC;AACrF,OAAO,EAAE,qBAAqB,EAAE,MAAM,uCAAuC,CAAC;AAC9E,OAAO,EAAE,sBAAsB,EAAE,MAAM,uCAAuC,CAAC"}