actoviq-agent-sdk 0.4.21 → 0.4.22

package/dist/src/keyway/embeddedKeyway.js

@@ -0,0 +1,81 @@
+import path from 'node:path';
+import { UsageLedger } from '../usage/usageLedger.js';
+import { usageDatabasePath } from '../usage/usageQueryService.js';
+import { KeywayModelApi } from './keywayModelApi.js';
+import { KeywayLoopbackGatewayController } from './keywayLoopbackGateway.js';
+import { HadamardKeywayProviderExecutor, } from './keywayProviderExecutor.js';
+/** Loads the independently versioned Keyway TS packages without a Python sidecar. */
+export async function loadKeywaySdkModules() {
+    const corePackage = '@keyway-router/core';
+    const nodePackage = '@keyway-router/node';
+    try {
+        const [core, node] = await Promise.all([import(corePackage), import(nodePackage)]);
+        if (core.KEYWAY_CONTRACT_VERSION !== 1) {
+            throw new Error(`Unsupported Keyway contract version: ${String(core.KEYWAY_CONTRACT_VERSION)}`);
+        }
+        return { core, node };
+    }
+    catch (error) {
+        throw new Error('Keyway TS packages are unavailable. Install matching @keyway-router/core and @keyway-router/node versions.', { cause: error });
+    }
+}
+export async function createEmbeddedKeyway(options) {
+    const modules = options.modules ?? await loadKeywaySdkModules();
+    const store = new modules.node.SqliteKeywayStore({
+        filePath: options.keywayDatabaseFile ?? path.join(options.homeDir, 'keyway', 'keyway.sqlite'),
+    });
+    const usageLedger = await UsageLedger.open({
+        filename: options.usageDatabaseFile ?? usageDatabasePath(options.homeDir),
+    });
+    try {
+        const executor = new HadamardKeywayProviderExecutor(options);
+        const core = modules.core.createKeywayCore({
+            store,
+            secretStore: options.secretStore,
+            executor,
+            usageSink: {
+                async append(event) {
+                    usageLedger.append(event);
+                },
+            },
+        });
+        const gateway = new KeywayLoopbackGatewayController({ core, store });
+        return {
+            core,
+            store,
+            executor,
+            gateway,
+            modelApi(modelOptions) {
+                return new KeywayModelApi({ core, ...modelOptions });
+            },
+            async close() {
+                await gateway.stop();
+                usageLedger.close();
+                store.close();
+            },
+        };
+    }
+    catch (error) {
+        usageLedger.close();
+        store.close();
+        throw error;
+    }
+}
+/**
+ * Headless/TUI policy: env refs are always readable; managed write-only secrets
+ * require an explicit AES-256-GCM master key and are never stored as plaintext.
+ */
+export async function createHeadlessKeywaySecretStore(options) {
+    const modules = options.modules ?? await loadKeywaySdkModules();
+    const environment = options.environment ?? process.env;
+    const environmentStore = new modules.node.EnvironmentSecretStore(environment);
+    const masterKey = environment.HADAMARD_KEYWAY_MASTER_KEY?.trim();
+    if (!masterKey)
+        return environmentStore;
+    const managed = new modules.node.EncryptedFileSecretStore({
+        filePath: path.join(options.homeDir, 'keyway', 'secrets.aes-gcm.json'),
+        masterKey: modules.node.decodeMasterKey(masterKey),
+    });
+    return new modules.node.CompositeSecretStore(managed, environmentStore);
+}
+//# sourceMappingURL=embeddedKeyway.js.map

package/dist/src/keyway/embeddedKeyway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"embeddedKeyway.js","sourceRoot":"","sources":["../../../src/keyway/embeddedKeyway.ts"],"names":[],"mappings":"AAAA,OAAO,IAAI,MAAM,WAAW,CAAC;AAG7B,OAAO,EAAE,WAAW,EAAE,MAAM,yBAAyB,CAAC;AACtD,OAAO,EAAE,iBAAiB,EAAE,MAAM,+BAA+B,CAAC;AAClE,OAAO,EAAE,cAAc,EAA8B,MAAM,qBAAqB,CAAC;AACjF,OAAO,EAAE,+BAA+B,EAAE,MAAM,4BAA4B,CAAC;AAC7E,OAAO,EACL,8BAA8B,GAE/B,MAAM,6BAA6B,CAAC;AA+BrC,qFAAqF;AACrF,MAAM,CAAC,KAAK,UAAU,oBAAoB;IACxC,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,MAAM,WAAW,GAAG,qBAAqB,CAAC;IAC1C,IAAI,CAAC;QACH,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;QACnF,IAAI,IAAI,CAAC,uBAAuB,KAAK,CAAC,EAAE,CAAC;YACvC,MAAM,IAAI,KAAK,CAAC,wCAAwC,MAAM,CAAC,IAAI,CAAC,uBAAuB,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,IAAI,EAAqC,CAAC;IAC3D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,4GAA4G,EAC5G,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,oBAAoB,CAAC,OAA8B;IACvE,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAC;IAChE,MAAM,KAAK,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC;QAC/C,QAAQ,EAAE,OAAO,CAAC,kBAAkB,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,eAAe,CAAC;KAC9F,CAAC,CAAC;IACH,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,IAAI,CAAC;QACzC,QAAQ,EAAE,OAAO,CAAC,iBAAiB,IAAI,iBAAiB,CAAC,OAAO,CAAC,OAAO,CAAC;KAC1E,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,IAAI,8BAA8B,CAAC,OAAO,CAAC,CAAC;QAC7D,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,gBAAgB,CAAC;YACzC,KAAK;YACL,WAAW,EAAE,OAAO,CAAC,WAAW;YAChC,QAAQ;YACR,SAAS,EAAE;gBACT,KAAK,CAAC,MAAM,CAAC,KAAK;oBAChB,WAAW,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;gBAC5B,CAAC;aACF;SACF,CAAC,CAAC;QACH,MAAM,OAAO,GAAG,IAAI,+BAA+B,CAAC,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACrE,OAAO;YACL,IAAI;YACJ,KAAK;YACL,QAAQ;YACR,OAAO;YACP,QAAQ,CAAC,YAAY;gBACnB,OAAO,IAAI,cAAc,CAAC,EAAE,IAAI,EAAE,GAAG,YAAY,EAAE,CAAC,CAAC;YACvD,CAAC;YACD,KAAK,CAAC,KAAK;gBACT,MAAM,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrB,WAAW,CAAC,KAAK,EAAE,CAAC;gBACpB,KAAK,CAAC,KAAK,EAAE,CAAC;YAChB,CAAC;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,WAAW,CAAC,KAAK,EAAE,CAAC;QACpB,KAAK,CAAC,KAAK,EAAE,CAAC;QACd,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,+BAA+B,CACnD,OAAyC;IAEzC,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAC;IAChE,MAAM,WAAW,GAAG,OAAO,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC;IACvD,MAAM,gBAAgB,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,sBAAsB,CAAC,WAAW,CAAC,CAAC;IAC9E,MAAM,SAAS,GAAG,WAAW,CAAC,0BAA0B,EAAE,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,SAAS;QAAE,OAAO,gBAAgB,CAAC;IACxC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,IAAI,CAAC,wBAAwB,CAAC;QACxD,QAAQ,EAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE,sBAAsB,CAAC;QACtE,SAAS,EAAE,OAAO,CAAC,IAAI,CAAC,eAAe,CAAC,SAAS,CAAC;KACnD,CAAC,CAAC;IACH,OAAO,IAAI,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAC;AAC1E,CAAC"}

package/dist/src/keyway/keywayLoopbackGateway.d.ts

@@ -0,0 +1,30 @@
+import type { KeywayCorePort, KeywayGatewayModulePort, KeywayStorePort } from './keywayPorts.js';
+export interface KeywayLoopbackStatus {
+    running: boolean;
+    host?: string;
+    port?: number;
+    url?: string;
+    authentication: 'client-key' | 'none';
+}
+export interface KeywayLoopbackStartResult extends KeywayLoopbackStatus {
+    /** Returned exactly once when a new gateway starts; never persisted or exposed by status(). */
+    clientKey?: string;
+    newlyStarted: boolean;
+}
+export interface KeywayLoopbackGatewayControllerOptions {
+    core: KeywayCorePort;
+    store: KeywayStorePort;
+    gatewayModule?: KeywayGatewayModulePort;
+}
+export declare class KeywayLoopbackGatewayController {
+    private readonly options;
+    private gateway?;
+    private starting?;
+    constructor(options: KeywayLoopbackGatewayControllerOptions);
+    status(): KeywayLoopbackStatus;
+    start(port?: number): Promise<KeywayLoopbackStartResult>;
+    stop(): Promise<KeywayLoopbackStatus>;
+    private startNew;
+}
+export declare function loadKeywayGatewayModule(): Promise<KeywayGatewayModulePort>;
+//# sourceMappingURL=keywayLoopbackGateway.d.ts.map

package/dist/src/keyway/keywayLoopbackGateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywayLoopbackGateway.d.ts","sourceRoot":"","sources":["../../../src/keyway/keywayLoopbackGateway.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,cAAc,EAAE,uBAAuB,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEjG,MAAM,WAAW,oBAAoB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,cAAc,EAAE,YAAY,GAAG,MAAM,CAAC;CACvC;AAED,MAAM,WAAW,yBAA0B,SAAQ,oBAAoB;IACrE,+FAA+F;IAC/F,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,EAAE,OAAO,CAAC;CACvB;AAED,MAAM,WAAW,sCAAsC;IACrD,IAAI,EAAE,cAAc,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,aAAa,CAAC,EAAE,uBAAuB,CAAC;CACzC;AAED,qBAAa,+BAA+B;IAO9B,OAAO,CAAC,QAAQ,CAAC,OAAO;IANpC,OAAO,CAAC,OAAO,CAAC,CAA2E;IAC3F,OAAO,CAAC,QAAQ,CAAC,CAGd;gBAE0B,OAAO,EAAE,sCAAsC;IAE5E,MAAM,IAAI,oBAAoB;IAIxB,KAAK,CAAC,IAAI,SAAI,GAAG,OAAO,CAAC,yBAAyB,CAAC;IAoBnD,IAAI,IAAI,OAAO,CAAC,oBAAoB,CAAC;YAS7B,QAAQ;CAYvB;AAED,wBAAsB,uBAAuB,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAchF"}

package/dist/src/keyway/keywayLoopbackGateway.js

@@ -0,0 +1,71 @@
+import { randomBytes } from 'node:crypto';
+export class KeywayLoopbackGatewayController {
+    options;
+    gateway;
+    starting;
+    constructor(options) {
+        this.options = options;
+    }
+    status() {
+        return this.gateway?.status() ?? { running: false, authentication: 'client-key' };
+    }
+    async start(port = 0) {
+        if (this.gateway)
+            return { ...this.gateway.status(), newlyStarted: false };
+        if (!Number.isInteger(port) || port < 0 || port > 65_535) {
+            throw new TypeError('Gateway port must be an integer from 0 to 65535.');
+        }
+        if (this.starting) {
+            await this.starting;
+            return { ...this.gateway.status(), newlyStarted: false };
+        }
+        const starting = this.startNew(port);
+        this.starting = starting;
+        try {
+            const { gateway, clientKey } = await starting;
+            this.gateway = gateway;
+            return { ...gateway.status(), clientKey, newlyStarted: true };
+        }
+        finally {
+            if (this.starting === starting)
+                this.starting = undefined;
+        }
+    }
+    async stop() {
+        if (this.starting) {
+            try {
+                await this.starting;
+            }
+            catch { /* start() reports the original failure */ }
+        }
+        await this.gateway?.close();
+        this.gateway = undefined;
+        return this.status();
+    }
+    async startNew(port) {
+        const module = this.options.gatewayModule ?? await loadKeywayGatewayModule();
+        const clientKey = `db_sk_${randomBytes(24).toString('base64url')}`;
+        const gateway = await module.LoopbackGateway.start({
+            core: this.options.core,
+            store: this.options.store,
+            clientKeys: [clientKey],
+            host: '127.0.0.1',
+            port,
+        });
+        return { gateway, clientKey };
+    }
+}
+export async function loadKeywayGatewayModule() {
+    const packageName = '@keyway-router/gateway';
+    try {
+        const module = await import(packageName);
+        if (module.KEYWAY_GATEWAY_VERSION !== 1) {
+            throw new Error(`Unsupported Keyway gateway version: ${String(module.KEYWAY_GATEWAY_VERSION)}`);
+        }
+        return module;
+    }
+    catch (error) {
+        throw new Error('Keyway loopback gateway is unavailable. Install matching @keyway-router/gateway version.', { cause: error });
+    }
+}
+//# sourceMappingURL=keywayLoopbackGateway.js.map

package/dist/src/keyway/keywayLoopbackGateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywayLoopbackGateway.js","sourceRoot":"","sources":["../../../src/keyway/keywayLoopbackGateway.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAwB1C,MAAM,OAAO,+BAA+B;IAOb;IANrB,OAAO,CAA4E;IACnF,QAAQ,CAGb;IAEH,YAA6B,OAA+C;QAA/C,YAAO,GAAP,OAAO,CAAwC;IAAG,CAAC;IAEhF,MAAM;QACJ,OAAO,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;IACpF,CAAC;IAED,KAAK,CAAC,KAAK,CAAC,IAAI,GAAG,CAAC;QAClB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,EAAE,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC3E,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,MAAM,EAAE,CAAC;YACzD,MAAM,IAAI,SAAS,CAAC,kDAAkD,CAAC,CAAC;QAC1E,CAAC;QACD,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,MAAM,IAAI,CAAC,QAAQ,CAAC;YACpB,OAAO,EAAE,GAAG,IAAI,CAAC,OAAQ,CAAC,MAAM,EAAE,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAC5D,CAAC;QACD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,CAAC,QAAQ,GAAG,QAAQ,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,QAAQ,CAAC;YAC9C,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;YACvB,OAAO,EAAE,GAAG,OAAO,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC;QAChE,CAAC;gBAAS,CAAC;YACT,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ;gBAAE,IAAI,CAAC,QAAQ,GAAG,SAAS,CAAC;QAC5D,CAAC;IACH,CAAC;IAED,KAAK,CAAC,IAAI;QACR,IAAI,IAAI,CAAC,QAAQ,EAAE,CAAC;YAClB,IAAI,CAAC;gBAAC,MAAM,IAAI,CAAC,QAAQ,CAAC;YAAC,CAAC;YAAC,MAAM,CAAC,CAAC,0CAA0C,CAAC,CAAC;QACnF,CAAC;QACD,MAAM,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,CAAC;QAC5B,IAAI,CAAC,OAAO,GAAG,SAAS,CAAC;QACzB,OAAO,IAAI,CAAC,MAAM,EAAE,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,QAAQ,CAAC,IAAY;QACjC,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,aAAa,IAAI,MAAM,uBAAuB,EAAE,CAAC;QAC7E,MAAM,SAAS,GAAG,SAAS,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;QACnE,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,eAAe,CAAC,KAAK,CAAC;YACjD,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,IAAI;YACvB,KAAK,EAAE,IAAI,CAAC,OAAO,CAAC,KAAK;YACzB,UAAU,EAAE,CAAC,SAAS,CAAC;YACvB,IAAI,EAAE,WAAW;YACjB,IAAI;SACL,CAAC,CAAC;QACH,OAAO,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC;IAChC,CAAC;CACF;AAED,MAAM,CAAC,KAAK,UAAU,uBAAuB;IAC3C,MAAM,WAAW,GAAG,wBAAwB,CAAC;IAC7C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,MAAM,CAAC,WAAW,CAAuC,CAAC;QAC/E,IAAI,MAAM,CAAC,sBAAsB,KAAK,CAAC,EAAE,CAAC;YACxC,MAAM,IAAI,KAAK,CAAC,uCAAuC,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,EAAE,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0FAA0F,EAC1F,EAAE,KAAK,EAAE,KAAK,EAAE,CACjB,CAAC;IACJ,CAAC;AACH,CAAC"}

package/dist/src/keyway/keywayMigrationService.d.ts

@@ -0,0 +1,44 @@
+import type { KeywaySdkModulesPort, KeywaySecretStorePort, KeywayStorePort } from './keywayPorts.js';
+export interface BridgeMigrationPreviewItem {
+    configName: string;
+    kind: 'managed-api' | 'native-cli';
+    ready: boolean;
+    targetId: string;
+    routeId: string;
+    credentialId?: string;
+    containsLegacyApiKey: boolean;
+    issues: readonly string[];
+}
+export interface BridgeMigrationPreview {
+    source: 'bridge-configs';
+    items: readonly BridgeMigrationPreviewItem[];
+    ready: number;
+    blocked: number;
+    oauthSessionSecretsRead: false;
+}
+export interface PortableMigrationPreview {
+    source: 'keyway-export-v1';
+    counts: Record<string, number>;
+    secretsIncluded: false;
+    issuedKeysRequireRotation: boolean;
+}
+export interface KeywayMigrationServiceOptions {
+    homeDir: string;
+    store: KeywayStorePort;
+    secretStore: KeywaySecretStorePort;
+    modules?: KeywaySdkModulesPort;
+    now?: () => Date;
+}
+/** Preview-first migration. Bridge API keys are copied only on explicit apply; native OAuth is never read. */
+export declare class KeywayMigrationService {
+    private readonly options;
+    constructor(options: KeywayMigrationServiceOptions);
+    previewBridgeConfigs(): BridgeMigrationPreview;
+    importBridgeConfigs(): Promise<Record<string, unknown>>;
+    previewPortableFile(filePath: string): Promise<PortableMigrationPreview>;
+    importPortableFile(filePath: string): Promise<Record<string, unknown>>;
+    private applyBridgeConfig;
+    private capture;
+    private restore;
+}
+//# sourceMappingURL=keywayMigrationService.d.ts.map

package/dist/src/keyway/keywayMigrationService.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywayMigrationService.d.ts","sourceRoot":"","sources":["../../../src/keyway/keywayMigrationService.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAIV,oBAAoB,EACpB,qBAAqB,EACrB,eAAe,EAChB,MAAM,kBAAkB,CAAC;AAG1B,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,aAAa,GAAG,YAAY,CAAC;IACnC,KAAK,EAAE,OAAO,CAAC;IACf,QAAQ,EAAE,MAAM,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;IAChB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,oBAAoB,EAAE,OAAO,CAAC;IAC9B,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;CAC3B;AAED,MAAM,WAAW,sBAAsB;IACrC,MAAM,EAAE,gBAAgB,CAAC;IACzB,KAAK,EAAE,SAAS,0BAA0B,EAAE,CAAC;IAC7C,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,uBAAuB,EAAE,KAAK,CAAC;CAChC;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC/B,eAAe,EAAE,KAAK,CAAC;IACvB,yBAAyB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,6BAA6B;IAC5C,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,eAAe,CAAC;IACvB,WAAW,EAAE,qBAAqB,CAAC;IACnC,OAAO,CAAC,EAAE,oBAAoB,CAAC;IAC/B,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,8GAA8G;AAC9G,qBAAa,sBAAsB;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAAP,OAAO,EAAE,6BAA6B;IAEnE,oBAAoB,IAAI,sBAAsB;IAWxC,mBAAmB,IAAI,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAoBvD,mBAAmB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,wBAAwB,CAAC;IAOxE,kBAAkB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YAc9D,iBAAiB;YA0DjB,OAAO;YAoBP,OAAO;CAoBtB"}

package/dist/src/keyway/keywayMigrationService.js

@@ -0,0 +1,219 @@
+import { readFile } from 'node:fs/promises';
+import { randomUUID } from 'node:crypto';
+import { isManagedExternalCliRuntime, readBridgeConfigs, } from '../parity/bridgeConfigs.js';
+import { loadKeywaySdkModules } from './embeddedKeyway.js';
+/** Preview-first migration. Bridge API keys are copied only on explicit apply; native OAuth is never read. */
+export class KeywayMigrationService {
+    options;
+    constructor(options) {
+        this.options = options;
+    }
+    previewBridgeConfigs() {
+        const items = readBridgeConfigs(this.options.homeDir).configs.map(config => previewConfig(config));
+        return {
+            source: 'bridge-configs',
+            items,
+            ready: items.filter(item => item.ready).length,
+            blocked: items.filter(item => !item.ready).length,
+            oauthSessionSecretsRead: false,
+        };
+    }
+    async importBridgeConfigs() {
+        const configs = readBridgeConfigs(this.options.homeDir).configs;
+        const plans = configs.map(config => ({ config, preview: previewConfig(config) }))
+            .filter(item => item.preview.ready);
+        const before = await this.capture(plans.map(item => item.preview));
+        try {
+            for (const { config, preview } of plans)
+                await this.applyBridgeConfig(config, preview);
+            return {
+                imported: plans.length,
+                skipped: configs.length - plans.length,
+                rollback: 'automatic-on-failure',
+                legacyApiKeysRetained: true,
+                oauthSessionSecretsRead: false,
+            };
+        }
+        catch (error) {
+            await this.restore(before);
+            throw error;
+        }
+    }
+    async previewPortableFile(filePath) {
+        const value = await readPortableFile(filePath);
+        const modules = this.options.modules ?? await loadKeywaySdkModules();
+        modules.core.assertKeywayExportV1(value);
+        return portablePreview(value);
+    }
+    async importPortableFile(filePath) {
+        const value = await readPortableFile(filePath);
+        const modules = this.options.modules ?? await loadKeywaySdkModules();
+        modules.core.assertKeywayExportV1(value);
+        const result = await modules.node.importKeywayV1(this.options.store, value);
+        return {
+            ...result,
+            rollback: 'sqlite-transaction',
+            secretsIncluded: false,
+            credentialsRequireSecretBinding: true,
+            issuedKeysRequireRotation: true,
+        };
+    }
+    async applyBridgeConfig(config, preview) {
+        const model = config.model ?? config.models?.[0]?.name;
+        if (!model)
+            throw new TypeError(`Bridge config ${config.name} has no model.`);
+        const now = (this.options.now?.() ?? new Date()).toISOString();
+        if (preview.kind === 'native-cli') {
+            this.options.store.saveTarget({
+                kind: 'native-cli',
+                id: preview.targetId,
+                runtime: config.runtime,
+                configId: config.name,
+                enabled: true,
+            });
+        }
+        else {
+            const providerId = `bridge.${slug(config.name)}`;
+            this.options.store.saveTarget({
+                kind: 'managed-api',
+                id: preview.targetId,
+                providerId,
+                protocol: config.provider,
+                baseUrl: config.baseURL,
+                enabled: true,
+            });
+            const credentialId = preview.credentialId;
+            const secretRef = `secret:${credentialId}`;
+            await this.options.secretStore.put(secretRef, config.apiKey);
+            this.options.store.saveCredential({
+                id: credentialId,
+                providerId,
+                secretRef,
+                label: config.name,
+                priority: 0,
+                weight: 1,
+                enabled: true,
+                createdAt: now,
+                updatedAt: now,
+            });
+        }
+        this.options.store.saveRoute({
+            id: preview.routeId,
+            alias: `bridge-${slug(config.name)}`,
+            mode: 'direct',
+            enabled: true,
+            createdAt: now,
+            updatedAt: now,
+            candidates: [{
+                    id: `${preview.routeId}.candidate.1`,
+                    targetId: preview.targetId,
+                    upstreamModel: model,
+                    priority: 0,
+                    weight: 1,
+                    enabled: true,
+                }],
+        });
+    }
+    async capture(items) {
+        const [targets, credentials, routes] = await Promise.all([
+            this.options.store.listTargets(),
+            this.options.store.listManagedCredentials(),
+            this.options.store.listRoutes(),
+        ]);
+        const ids = new Set(items.flatMap(item => [item.targetId, item.routeId, ...(item.credentialId ? [item.credentialId] : [])]));
+        const selectedCredentials = credentials.filter(item => ids.has(item.id));
+        return {
+            ids,
+            targets: targets.filter(item => ids.has(item.id)),
+            credentials: selectedCredentials,
+            routes: routes.filter(item => ids.has(item.id)),
+            secrets: new Map(await Promise.all(selectedCredentials.map(async (item) => [
+                item.secretRef,
+                await this.options.secretStore.resolve(item.secretRef),
+            ]))),
+        };
+    }
+    async restore(backup) {
+        for (const route of await this.options.store.listRoutes()) {
+            if (backup.ids.has(route.id))
+                this.options.store.deleteRoute(route.id);
+        }
+        for (const credential of await this.options.store.listManagedCredentials()) {
+            if (backup.ids.has(credential.id)) {
+                this.options.store.deleteCredential(credential.id);
+                await this.options.secretStore.remove(credential.secretRef);
+            }
+        }
+        for (const target of await this.options.store.listTargets()) {
+            if (backup.ids.has(target.id))
+                this.options.store.deleteTarget(target.id);
+        }
+        for (const target of backup.targets)
+            this.options.store.saveTarget(target);
+        for (const credential of backup.credentials)
+            this.options.store.saveCredential(credential);
+        for (const route of backup.routes)
+            this.options.store.saveRoute(route);
+        for (const [ref, value] of backup.secrets) {
+            if (value !== undefined)
+                await this.options.secretStore.put(ref, value);
+        }
+    }
+}
+function previewConfig(config) {
+    const name = slug(config.name);
+    const kind = (config.execution ?? 'api') === 'cli' ? 'native-cli' : 'managed-api';
+    const issues = [];
+    if (!config.model && !config.models?.[0]?.name)
+        issues.push('No model is configured.');
+    if (kind === 'native-cli') {
+        if (!isManagedExternalCliRuntime(config.runtime))
+            issues.push('Runtime is not a managed native CLI.');
+        const authSource = config.authSource ?? 'native';
+        if (authSource !== 'native') {
+            issues.push('CLI config uses explicit API-key auth; only native CLI auth can be migrated without changing semantics.');
+        }
+    }
+    else {
+        if (!config.baseURL)
+            issues.push('No base URL is configured.');
+        if (!config.apiKey)
+            issues.push('No legacy API key is available to copy.');
+    }
+    return {
+        configName: config.name,
+        kind,
+        ready: issues.length === 0,
+        targetId: `target.bridge.${name}`,
+        routeId: `route.bridge.${name}`,
+        ...(kind === 'managed-api' ? { credentialId: `credential.bridge.${name}` } : {}),
+        containsLegacyApiKey: kind === 'managed-api' && !!config.apiKey,
+        issues,
+    };
+}
+function slug(value) {
+    const result = value.trim().replace(/[^A-Za-z0-9._:-]+/gu, '-').replace(/^-+|-+$/gu, '');
+    return result || randomUUID();
+}
+async function readPortableFile(filePath) {
+    const raw = await readFile(filePath, 'utf8');
+    return JSON.parse(raw);
+}
+function portablePreview(value) {
+    const count = (field) => Array.isArray(value[field]) ? value[field].length : 0;
+    return {
+        source: 'keyway-export-v1',
+        counts: {
+            groups: count('groups'),
+            targets: count('targets'),
+            credentialMetadata: count('credentialMetadata'),
+            routes: count('routes'),
+            budgetPolicies: count('budgetPolicies'),
+            issuedKeys: count('issuedKeys'),
+            usageEvents: count('usageEvents'),
+        },
+        secretsIncluded: false,
+        issuedKeysRequireRotation: count('issuedKeys') > 0,
+    };
+}
+//# sourceMappingURL=keywayMigrationService.js.map

package/dist/src/keyway/keywayMigrationService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywayMigrationService.js","sourceRoot":"","sources":["../../../src/keyway/keywayMigrationService.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,2BAA2B,EAC3B,iBAAiB,GAElB,MAAM,4BAA4B,CAAC;AASpC,OAAO,EAAE,oBAAoB,EAAE,MAAM,qBAAqB,CAAC;AAoC3D,8GAA8G;AAC9G,MAAM,OAAO,sBAAsB;IACJ;IAA7B,YAA6B,OAAsC;QAAtC,YAAO,GAAP,OAAO,CAA+B;IAAG,CAAC;IAEvE,oBAAoB;QAClB,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,CAAC;QACnG,OAAO;YACL,MAAM,EAAE,gBAAgB;YACxB,KAAK;YACL,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YAC9C,OAAO,EAAE,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,MAAM;YACjD,uBAAuB,EAAE,KAAK;SAC/B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,mBAAmB;QACvB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC;QAChE,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,aAAa,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;aAC9E,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACtC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC;YACH,KAAK,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,KAAK;gBAAE,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvF,OAAO;gBACL,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,OAAO,EAAE,OAAO,CAAC,MAAM,GAAG,KAAK,CAAC,MAAM;gBACtC,QAAQ,EAAE,sBAAsB;gBAChC,qBAAqB,EAAE,IAAI;gBAC3B,uBAAuB,EAAE,KAAK;aAC/B,CAAC;QACJ,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC3B,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED,KAAK,CAAC,mBAAmB,CAAC,QAAgB;QACxC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACzC,OAAO,eAAe,CAAC,KAAgC,CAAC,CAAC;IAC3D,CAAC;IAED,KAAK,CAAC,kBAAkB,CAAC,QAAgB;QACvC,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,IAAI,MAAM,oBAAoB,EAAE,CAAC;QACrE,OAAO,CAAC,IAAI,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC;QACzC,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAC5E,OAAO;YACL,GAAG,MAAM;YACT,QAAQ,EAAE,oBAAoB;YAC9B,eAAe,EAAE,KAAK;YACtB,+BAA+B,EAAE,IAAI;YACrC,yBAAyB,EAAE,IAAI;SAChC,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,iBAAiB,CAC7B,MAA6B,EAC7B,OAAmC;QAEnC,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC;QACvD,IAAI,CAAC,KAAK;YAAE,MAAM,IAAI,SAAS,CAAC,iBAAiB,MAAM,CAAC,IAAI,gBAAgB,CAAC,CAAC;QAC9E,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,EAAE,IAAI,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/D,IAAI,OAAO,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC5B,IAAI,EAAE,YAAY;gBAClB,EAAE,EAAE,OAAO,CAAC,QAAQ;gBACpB,OAAO,EAAE,MAAM,CAAC,OAAO;gBACvB,QAAQ,EAAE,MAAM,CAAC,IAAI;gBACrB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;QACL,CAAC;aAAM,CAAC;YACN,MAAM,UAAU,GAAG,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC;YACjD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC5B,IAAI,EAAE,aAAa;gBACnB,EAAE,EAAE,OAAO,CAAC,QAAQ;gBACpB,UAAU;gBACV,QAAQ,EAAE,MAAM,CAAC,QAAQ;gBACzB,OAAO,EAAE,MAAM,CAAC,OAAQ;gBACxB,OAAO,EAAE,IAAI;aACd,CAAC,CAAC;YACH,MAAM,YAAY,GAAG,OAAO,CAAC,YAAa,CAAC;YAC3C,MAAM,SAAS,GAAG,UAAU,YAAY,EAAE,CAAC;YAC3C,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,SAAS,EAAE,MAAM,CAAC,MAAO,CAAC,CAAC;YAC9D,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC;gBAChC,EAAE,EAAE,YAAY;gBAChB,UAAU;gBACV,SAAS;gBACT,KAAK,EAAE,MAAM,CAAC,IAAI;gBAClB,QAAQ,EAAE,CAAC;gBACX,MAAM,EAAE,CAAC;gBACT,OAAO,EAAE,IAAI;gBACb,SAAS,EAAE,GAAG;gBACd,SAAS,EAAE,GAAG;aACf,CAAC,CAAC;QACL,CAAC;QACD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC;YAC3B,EAAE,EAAE,OAAO,CAAC,OAAO;YACnB,KAAK,EAAE,UAAU,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE;YACpC,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,IAAI;YACb,SAAS,EAAE,GAAG;YACd,SAAS,EAAE,GAAG;YACd,UAAU,EAAE,CAAC;oBACX,EAAE,EAAE,GAAG,OAAO,CAAC,OAAO,cAAc;oBACpC,QAAQ,EAAE,OAAO,CAAC,QAAQ;oBAC1B,aAAa,EAAE,KAAK;oBACpB,QAAQ,EAAE,CAAC;oBACX,MAAM,EAAE,CAAC;oBACT,OAAO,EAAE,IAAI;iBACd,CAAC;SACH,CAAC,CAAC;IACL,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,KAA4C;QAChE,MAAM,CAAC,OAAO,EAAE,WAAW,EAAE,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;YACvD,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE;YAChC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE;YAC3C,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE;SAChC,CAAC,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7H,MAAM,mBAAmB,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;QACzE,OAAO;YACL,GAAG;YACH,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACjD,WAAW,EAAE,mBAAmB;YAChC,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YAC/C,OAAO,EAAE,IAAI,GAAG,CAAC,MAAM,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,GAAG,CAAC,KAAK,EAAC,IAAI,EAAC,EAAE,CAAC;gBACvE,IAAI,CAAC,SAAS;gBACd,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,CAAC;aAC9C,CAAC,CAAC,CAAC;SACd,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAO,CAAC,MAAuB;QAC3C,KAAK,MAAM,KAAK,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,EAAE,EAAE,CAAC;YAC1D,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzE,CAAC;QACD,KAAK,MAAM,UAAU,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,sBAAsB,EAAE,EAAE,CAAC;YAC3E,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC,EAAE,CAAC;gBAClC,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,gBAAgB,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC;gBACnD,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,MAAM,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;YAC9D,CAAC;QACH,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,WAAW,EAAE,EAAE,CAAC;YAC5D,IAAI,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC;gBAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;QAC5E,CAAC;QACD,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAC3E,KAAK,MAAM,UAAU,IAAI,MAAM,CAAC,WAAW;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,cAAc,CAAC,UAAU,CAAC,CAAC;QAC3F,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM;YAAE,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QACvE,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YAC1C,IAAI,KAAK,KAAK,SAAS;gBAAE,MAAM,IAAI,CAAC,OAAO,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;QAC1E,CAAC;IACH,CAAC;CACF;AAUD,SAAS,aAAa,CAAC,MAA6B;IAClD,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC/B,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,KAAK,CAAC,KAAK,KAAK,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,aAAa,CAAC;IAClF,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI;QAAE,MAAM,CAAC,IAAI,CAAC,yBAAyB,CAAC,CAAC;IACvF,IAAI,IAAI,KAAK,YAAY,EAAE,CAAC;QAC1B,IAAI,CAAC,2BAA2B,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,sCAAsC,CAAC,CAAC;QACtG,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,QAAQ,CAAC;QACjD,IAAI,UAAU,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;QACzH,CAAC;IACH,CAAC;SAAM,CAAC;QACN,IAAI,CAAC,MAAM,CAAC,OAAO;YAAE,MAAM,CAAC,IAAI,CAAC,4BAA4B,CAAC,CAAC;QAC/D,IAAI,CAAC,MAAM,CAAC,MAAM;YAAE,MAAM,CAAC,IAAI,CAAC,yCAAyC,CAAC,CAAC;IAC7E,CAAC;IACD,OAAO;QACL,UAAU,EAAE,MAAM,CAAC,IAAI;QACvB,IAAI;QACJ,KAAK,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC1B,QAAQ,EAAE,iBAAiB,IAAI,EAAE;QACjC,OAAO,EAAE,gBAAgB,IAAI,EAAE;QAC/B,GAAG,CAAC,IAAI,KAAK,aAAa,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,qBAAqB,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAChF,oBAAoB,EAAE,IAAI,KAAK,aAAa,IAAI,CAAC,CAAC,MAAM,CAAC,MAAM;QAC/D,MAAM;KACP,CAAC;AACJ,CAAC;AAED,SAAS,IAAI,CAAC,KAAa;IACzB,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACzF,OAAO,MAAM,IAAI,UAAU,EAAE,CAAC;AAChC,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,QAAgB;IAC9C,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC7C,OAAO,IAAI,CAAC,KAAK,CAAC,GAAG,CAAY,CAAC;AACpC,CAAC;AAED,SAAS,eAAe,CAAC,KAA8B;IACrD,MAAM,KAAK,GAAG,CAAC,KAAa,EAAE,EAAE,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC;IACvF,OAAO;QACL,MAAM,EAAE,kBAAkB;QAC1B,MAAM,EAAE;YACN,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;YACvB,OAAO,EAAE,KAAK,CAAC,SAAS,CAAC;YACzB,kBAAkB,EAAE,KAAK,CAAC,oBAAoB,CAAC;YAC/C,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC;YACvB,cAAc,EAAE,KAAK,CAAC,gBAAgB,CAAC;YACvC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC;YAC/B,WAAW,EAAE,KAAK,CAAC,aAAa,CAAC;SAClC;QACD,eAAe,EAAE,KAAK;QACtB,yBAAyB,EAAE,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC;KACnD,CAAC;AACJ,CAAC"}

package/dist/src/keyway/keywayModelApi.d.ts

@@ -0,0 +1,24 @@
+import type { Message } from '../provider/types.js';
+import type { ModelApi, ModelRequest, ModelStreamHandle } from '../types.js';
+import type { KeywayCorePort } from './keywayPorts.js';
+export interface KeywayModelApiOptions {
+    core: KeywayCorePort;
+    routeAlias: string;
+    configurationId?: string;
+    projectId?: string;
+    agentId?: string;
+    sessionId?: string;
+    workDir?: string;
+}
+/** Legacy ModelApi facade so clean SDK/TUI/GUI can select a Keyway gateway route. */
+export declare class KeywayModelApi implements ModelApi {
+    private readonly options;
+    private nativeSessionId?;
+    constructor(options: KeywayModelApiOptions);
+    createMessage(request: ModelRequest): Promise<Message>;
+    streamMessage(request: ModelRequest): ModelStreamHandle;
+    private start;
+    private streamEvents;
+    private finalMessage;
+}
+//# sourceMappingURL=keywayModelApi.d.ts.map

package/dist/src/keyway/keywayModelApi.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywayModelApi.d.ts","sourceRoot":"","sources":["../../../src/keyway/keywayModelApi.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,OAAO,EAAoC,MAAM,sBAAsB,CAAC;AACtF,OAAO,KAAK,EAAE,QAAQ,EAAE,YAAY,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAC;AAM7E,OAAO,KAAK,EACV,cAAc,EAIf,MAAM,kBAAkB,CAAC;AAE1B,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,cAAc,CAAC;IACrB,UAAU,EAAE,MAAM,CAAC;IACnB,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAED,qFAAqF;AACrF,qBAAa,cAAe,YAAW,QAAQ;IAGjC,OAAO,CAAC,QAAQ,CAAC,OAAO;IAFpC,OAAO,CAAC,eAAe,CAAC,CAAS;gBAEJ,OAAO,EAAE,qBAAqB;IAErD,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC;IAK5D,aAAa,CAAC,OAAO,EAAE,YAAY,GAAG,iBAAiB;IAUvD,OAAO,CAAC,KAAK;IAyBb,OAAO,CAAC,YAAY;IAUpB,OAAO,CAAC,YAAY;CAQrB"}

package/dist/src/keyway/keywayModelApi.js

@@ -0,0 +1,106 @@
+import { randomUUID } from 'node:crypto';
+import { keywayDataToMessageStreamEvent, keywayOutputToMessage, } from './keywayProviderExecutor.js';
+/** Legacy ModelApi facade so clean SDK/TUI/GUI can select a Keyway gateway route. */
+export class KeywayModelApi {
+    options;
+    nativeSessionId;
+    constructor(options) {
+        this.options = options;
+    }
+    async createMessage(request) {
+        const execution = this.start(request, 'generate');
+        return this.finalMessage(await execution.result, request.model);
+    }
+    streamMessage(request) {
+        const execution = this.start(request, 'stream');
+        const result = execution.result.then(value => this.finalMessage(value, request.model));
+        void result.catch(() => undefined);
+        return {
+            [Symbol.asyncIterator]: () => this.streamEvents(execution),
+            finalMessage: () => result,
+        };
+    }
+    start(request, operation) {
+        const requestId = randomUUID();
+        return this.options.core.execute({
+            requestId,
+            correlationId: this.options.sessionId ?? requestId,
+            routeAlias: this.options.routeAlias,
+            requestedModel: request.model,
+            operation,
+            payload: toJson({
+                modelRequest: stripSignal(request),
+                prompt: lastUserPrompt(request.messages),
+                ...(this.nativeSessionId ? { resume: this.nativeSessionId } : {}),
+                ...(this.options.workDir ? { workDir: this.options.workDir } : {}),
+            }),
+            estimatedUsage: { requests: 1 },
+            metadata: {
+                ...(this.options.configurationId ? { configurationId: this.options.configurationId } : {}),
+                ...(this.options.projectId ? { projectId: this.options.projectId } : {}),
+                ...(this.options.agentId ? { agentId: this.options.agentId } : {}),
+                ...(this.options.sessionId ? { sessionId: this.options.sessionId } : {}),
+            },
+            ...(request.signal ? { signal: request.signal } : {}),
+        });
+    }
+    streamEvents(execution) {
+        return (async function* () {
+            for await (const event of execution) {
+                if (event.type !== 'data')
+                    continue;
+                const mapped = keywayDataToMessageStreamEvent(event.value);
+                if (mapped)
+                    yield mapped;
+            }
+        })();
+    }
+    finalMessage(result, model) {
+        const output = asRecord(result.output);
+        const nativeSessionId = optionalString(output?.sessionId);
+        if (nativeSessionId)
+            this.nativeSessionId = nativeSessionId;
+        const message = keywayOutputToMessage(result.output, model);
+        message.usage = providerUsageShape(result.usage);
+        return message;
+    }
+}
+function stripSignal(request) {
+    const { signal: _signal, ...value } = request;
+    return value;
+}
+function lastUserPrompt(messages) {
+    const user = [...messages].reverse().find(message => message.role === 'user');
+    if (!user)
+        return '';
+    if (typeof user.content === 'string')
+        return user.content;
+    return user.content.map(block => {
+        if (typeof block === 'string')
+            return block;
+        if (typeof block === 'object' && block !== null && 'text' in block && typeof block.text === 'string') {
+            return block.text;
+        }
+        return '';
+    }).filter(Boolean).join('\n');
+}
+function providerUsageShape(usage) {
+    return {
+        input_tokens: usage.inputTokens,
+        output_tokens: usage.outputTokens,
+        cache_read_input_tokens: usage.cacheReadTokens,
+        cache_creation_input_tokens: usage.cacheWriteTokens,
+    };
+}
+function toJson(value) {
+    return JSON.parse(JSON.stringify(value));
+}
+function asRecord(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value)
+        ? value
+        : undefined;
+}
+function optionalString(value) {
+    return typeof value === 'string' && value ? value : undefined;
+}
+//# sourceMappingURL=keywayModelApi.js.map

package/dist/src/keyway/keywayModelApi.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keywayModelApi.js","sourceRoot":"","sources":["../../../src/keyway/keywayModelApi.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAKzC,OAAO,EACL,8BAA8B,EAC9B,qBAAqB,GACtB,MAAM,6BAA6B,CAAC;AAkBrC,qFAAqF;AACrF,MAAM,OAAO,cAAc;IAGI;IAFrB,eAAe,CAAU;IAEjC,YAA6B,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;IAAG,CAAC;IAE/D,KAAK,CAAC,aAAa,CAAC,OAAqB;QACvC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,UAAU,CAAC,CAAC;QAClD,OAAO,IAAI,CAAC,YAAY,CAAC,MAAM,SAAS,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC;IAClE,CAAC;IAED,aAAa,CAAC,OAAqB;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QAChD,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,KAAK,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC;QACvF,KAAK,MAAM,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QACnC,OAAO;YACL,CAAC,MAAM,CAAC,aAAa,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC;YAC1D,YAAY,EAAE,GAAG,EAAE,CAAC,MAAM;SAC3B,CAAC;IACJ,CAAC;IAEO,KAAK,CAAC,OAAqB,EAAE,SAAgC;QACnE,MAAM,SAAS,GAAG,UAAU,EAAE,CAAC;QAC/B,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC;YAC/B,SAAS;YACT,aAAa,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,IAAI,SAAS;YAClD,UAAU,EAAE,IAAI,CAAC,OAAO,CAAC,UAAU;YACnC,cAAc,EAAE,OAAO,CAAC,KAAK;YAC7B,SAAS;YACT,OAAO,EAAE,MAAM,CAAC;gBACd,YAAY,EAAE,WAAW,CAAC,OAAO,CAAC;gBAClC,MAAM,EAAE,cAAc,CAAC,OAAO,CAAC,QAAQ,CAAC;gBACxC,GAAG,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACjE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACnE,CAAC;YACF,cAAc,EAAE,EAAE,QAAQ,EAAE,CAAC,EAAE;YAC/B,QAAQ,EAAE;gBACR,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,IAAI,CAAC,OAAO,CAAC,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC1F,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBACxE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAClE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACzE;YACD,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtD,CAAC,CAAC;IACL,CAAC;IAEO,YAAY,CAAC,SAAoC;QACvD,OAAO,CAAC,KAAK,SAAS,CAAC;YACrB,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,SAAS,EAAE,CAAC;gBACpC,IAAI,KAAK,CAAC,IAAI,KAAK,MAAM;oBAAE,SAAS;gBACpC,MAAM,MAAM,GAAG,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;gBAC3D,IAAI,MAAM;oBAAE,MAAM,MAAM,CAAC;YAC3B,CAAC;QACH,CAAC,CAAC,EAAE,CAAC;IACP,CAAC;IAEO,YAAY,CAAC,MAAiC,EAAE,KAAa;QACnE,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QACvC,MAAM,eAAe,GAAG,cAAc,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC1D,IAAI,eAAe;YAAE,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;QAC5D,MAAM,OAAO,GAAG,qBAAqB,CAAC,MAAM,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC5D,OAAO,CAAC,KAAK,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACjD,OAAO,OAAO,CAAC;IACjB,CAAC;CACF;AAED,SAAS,WAAW,CAAC,OAAqB;IACxC,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,CAAC;IAC9C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,cAAc,CAAC,QAAiC;IACvD,MAAM,IAAI,GAAG,CAAC,GAAG,QAAQ,CAAC,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,KAAK,MAAM,CAAC,CAAC;IAC9E,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,IAAI,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,OAAO,CAAC;IAC1D,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE;QAC9B,IAAI,OAAO,KAAK,KAAK,QAAQ;YAAE,OAAO,KAAK,CAAC;QAC5C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,MAAM,IAAI,KAAK,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACrG,OAAO,KAAK,CAAC,IAAI,CAAC;QACpB,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAChC,CAAC;AAED,SAAS,kBAAkB,CAAC,KAAoB;IAC9C,OAAO;QACL,YAAY,EAAE,KAAK,CAAC,WAAW;QAC/B,aAAa,EAAE,KAAK,CAAC,YAAY;QACjC,uBAAuB,EAAE,KAAK,CAAC,eAAe;QAC9C,2BAA2B,EAAE,KAAK,CAAC,gBAAgB;KACpD,CAAC;AACJ,CAAC;AAED,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAe,CAAC;AACzD,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC;QAClC,CAAC,CAAC,SAAS,CAAC;AAChB,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAChE,CAAC"}