agenticreplay 0.1.0 → 0.1.2

package/node_modules/@agenticreplay/adapters/dist/detect.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Detection runs before every recording, and a detector that throws would take the whole run with
+ * it. Every helper here answers false instead of failing.
+ */
+export declare function hasBinary(name: string): Promise<boolean>;
+/**
+ * The path a launcher must actually spawn, or undefined when the name is not on PATH.
+ *
+ * Detection and launching have to agree. On Windows an npm-installed agent is three shims —
+ * `claude`, `claude.cmd`, `claude.ps1` — and only the `.cmd` is something `CreateProcess` will
+ * run. `spawn` does no PATHEXT resolution of its own, so a launcher handed the bare name finds
+ * the extensionless shell script, cannot execute it, and reports ENOENT for an agent that
+ * `agenticreplay doctor` had just called present. Resolving here, against the same PATHEXT walk detection
+ * uses, is what keeps the two answers the same.
+ *
+ * Not `shell: true`: that would hand the agent's own arguments to a command interpreter.
+ */
+export declare function resolveBinary(name: string): Promise<string | undefined>;
+/** What `spawn` must actually be given to launch `command` with `args`. */
+export interface LaunchTarget {
+    file: string;
+    args: string[];
+    /** True only for a Windows batch shim, which `spawn` refuses to run any other way. */
+    shell: boolean;
+}
+/**
+ * Resolve a command to something `spawn` can launch on this platform.
+ *
+ * Windows makes this three cases rather than one. An npm-installed agent is a set of shims —
+ * `claude`, `claude.cmd`, `claude.ps1` — and `spawn` does no PATHEXT resolution, so the bare name
+ * finds the extensionless shell script and fails ENOENT. Resolving to the `.cmd` then hits the
+ * second wall: since the batch-injection fix, Node refuses to spawn `.cmd` or `.bat` without a
+ * shell and answers EINVAL. Only a batch shim needs that shell, and only then do the arguments
+ * have to survive cmd.exe, which is what the quoting is for. A real `.exe` still spawns directly.
+ */
+export declare function resolveLaunch(command: string, args: string[]): Promise<LaunchTarget>;
+/**
+ * The home directory as the *child process* will see it. A host that hands us a rebuilt env object
+ * detaches `process.env` from the OS environment, and `os.homedir()` then answers for a home the
+ * agent will never be launched with — so the JS-visible value wins where it is set.
+ */
+export declare function homeDir(): string;
+/** True when `~/<relative>` exists — the cheap "this agent has been run here before" signal. */
+export declare function homeDirHas(relative: string): boolean;
+/** True when any of the given binaries or home-relative config paths is present. */
+export declare function detectAgent(binaries: string[], homePaths: string[]): Promise<boolean>;
+//# sourceMappingURL=detect.d.ts.map

package/node_modules/@agenticreplay/adapters/dist/detect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.d.ts","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAMA;;;GAGG;AACH,wBAAsB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAY9D;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAK7E;AAED,2EAA2E;AAC3E,MAAM,WAAW,YAAY;IAC3B,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,EAAE,CAAC;IACf,sFAAsF;IACtF,KAAK,EAAE,OAAO,CAAC;CAChB;AAkBD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,YAAY,CAAC,CAK1F;AAwBD;;;;GAIG;AACH,wBAAgB,OAAO,IAAI,MAAM,CAEhC;AAED,gGAAgG;AAChG,wBAAgB,UAAU,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAMpD;AAED,oFAAoF;AACpF,wBAAsB,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAM3F"}

package/node_modules/@agenticreplay/adapters/dist/detect.js

@@ -0,0 +1,123 @@
+import { execFile } from 'node:child_process';
+import { existsSync } from 'node:fs';
+import { access, stat } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { delimiter, extname, join } from 'node:path';
+/**
+ * Detection runs before every recording, and a detector that throws would take the whole run with
+ * it. Every helper here answers false instead of failing.
+ */
+export async function hasBinary(name) {
+    if (process.platform === 'win32') {
+        return (await resolveWindowsBinary(name, process.env.PATH ?? '')) !== undefined;
+    }
+    return new Promise((resolve) => {
+        // execFile, never a shell: `name` reaches the lookup as one argv element, so an agent id
+        // carrying shell metacharacters cannot become a command.
+        execFile('which', [name], { timeout: 5_000 }, (err, stdout) => {
+            resolve(!err && stdout.trim().length > 0);
+        });
+    });
+}
+/**
+ * The path a launcher must actually spawn, or undefined when the name is not on PATH.
+ *
+ * Detection and launching have to agree. On Windows an npm-installed agent is three shims —
+ * `claude`, `claude.cmd`, `claude.ps1` — and only the `.cmd` is something `CreateProcess` will
+ * run. `spawn` does no PATHEXT resolution of its own, so a launcher handed the bare name finds
+ * the extensionless shell script, cannot execute it, and reports ENOENT for an agent that
+ * `agenticreplay doctor` had just called present. Resolving here, against the same PATHEXT walk detection
+ * uses, is what keeps the two answers the same.
+ *
+ * Not `shell: true`: that would hand the agent's own arguments to a command interpreter.
+ */
+export async function resolveBinary(name) {
+    if (process.platform !== 'win32')
+        return name;
+    // An explicit path is already the answer; PATH does not enter into it.
+    if (name.includes('/') || name.includes('\\'))
+        return name;
+    return resolveWindowsBinary(name, process.env.PATH ?? '');
+}
+/** cmd.exe reads these before the program does, so they have to be escaped for it first. */
+const CMD_META = /([()\][%!^"`<>&|;, *?])/g;
+/**
+ * Quote one argument so that cmd.exe hands the program back exactly the string we started with.
+ *
+ * Two parsers run in sequence: cmd.exe strips `^` escapes, then the program's own CommandLineToArgv
+ * splits what is left. So the backslash-before-quote doubling has to happen first, and the `^`
+ * escaping of everything — the quotes we just added included — second.
+ */
+function quoteForCmd(arg) {
+    let quoted = arg.replace(/(\\*)"/g, '$1$1\\"');
+    quoted = quoted.replace(/(\\*)$/, '$1$1');
+    return `"${quoted}"`.replace(CMD_META, '^$&');
+}
+/**
+ * Resolve a command to something `spawn` can launch on this platform.
+ *
+ * Windows makes this three cases rather than one. An npm-installed agent is a set of shims —
+ * `claude`, `claude.cmd`, `claude.ps1` — and `spawn` does no PATHEXT resolution, so the bare name
+ * finds the extensionless shell script and fails ENOENT. Resolving to the `.cmd` then hits the
+ * second wall: since the batch-injection fix, Node refuses to spawn `.cmd` or `.bat` without a
+ * shell and answers EINVAL. Only a batch shim needs that shell, and only then do the arguments
+ * have to survive cmd.exe, which is what the quoting is for. A real `.exe` still spawns directly.
+ */
+export async function resolveLaunch(command, args) {
+    if (process.platform !== 'win32')
+        return { file: command, args, shell: false };
+    const file = (await resolveBinary(command)) ?? command;
+    if (!/\.(cmd|bat)$/i.test(file))
+        return { file, args, shell: false };
+    return { file: quoteForCmd(file), args: args.map(quoteForCmd), shell: true };
+}
+async function resolveWindowsBinary(name, pathVar) {
+    const extensions = extname(name) !== ''
+        ? ['']
+        : (process.env.PATHEXT ?? '.COM;.EXE;.BAT;.CMD').split(';').filter(Boolean);
+    for (const entry of pathVar.split(delimiter)) {
+        if (entry === '')
+            continue;
+        for (const extension of extensions) {
+            const candidate = join(entry, `${name}${extension.toLowerCase()}`);
+            try {
+                if ((await stat(candidate)).isFile()) {
+                    await access(candidate);
+                    return candidate;
+                }
+            }
+            catch {
+                // Keep searching the rest of PATH. Detection must never take the CLI down.
+            }
+        }
+    }
+    return undefined;
+}
+/**
+ * The home directory as the *child process* will see it. A host that hands us a rebuilt env object
+ * detaches `process.env` from the OS environment, and `os.homedir()` then answers for a home the
+ * agent will never be launched with — so the JS-visible value wins where it is set.
+ */
+export function homeDir() {
+    return process.env['HOME'] || process.env['USERPROFILE'] || homedir();
+}
+/** True when `~/<relative>` exists — the cheap "this agent has been run here before" signal. */
+export function homeDirHas(relative) {
+    try {
+        return existsSync(join(homeDir(), relative));
+    }
+    catch {
+        return false;
+    }
+}
+/** True when any of the given binaries or home-relative config paths is present. */
+export async function detectAgent(binaries, homePaths) {
+    if (homePaths.some(homeDirHas))
+        return true;
+    for (const bin of binaries) {
+        if (await hasBinary(bin))
+            return true;
+    }
+    return false;
+}
+//# sourceMappingURL=detect.js.map

package/node_modules/@agenticreplay/adapters/dist/detect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"detect.js","sourceRoot":"","sources":["../src/detect.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC9C,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,kBAAkB,CAAC;AAChD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAErD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,IAAY;IAC1C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;QACjC,OAAO,CAAC,MAAM,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,KAAK,SAAS,CAAC;IAClF,CAAC;IAED,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE;QAC7B,yFAAyF;QACzF,yDAAyD;QACzD,QAAQ,CAAC,OAAO,EAAE,CAAC,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,EAAE;YAC5D,OAAO,CAAC,CAAC,GAAG,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC;QAC5C,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,IAAY;IAC9C,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAC9C,uEAAuE;IACvE,IAAI,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3D,OAAO,oBAAoB,CAAC,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;AAC5D,CAAC;AAUD,4FAA4F;AAC5F,MAAM,QAAQ,GAAG,0BAA0B,CAAC;AAE5C;;;;;;GAMG;AACH,SAAS,WAAW,CAAC,GAAW;IAC9B,IAAI,MAAM,GAAG,GAAG,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC;IAC/C,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IAC1C,OAAO,IAAI,MAAM,GAAG,CAAC,OAAO,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;AAChD,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe,EAAE,IAAc;IACjE,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC/E,MAAM,IAAI,GAAG,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,IAAI,OAAO,CAAC;IACvD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACrE,OAAO,EAAE,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,WAAW,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;AAC/E,CAAC;AAED,KAAK,UAAU,oBAAoB,CAAC,IAAY,EAAE,OAAe;IAC/D,MAAM,UAAU,GACd,OAAO,CAAC,IAAI,CAAC,KAAK,EAAE;QAClB,CAAC,CAAC,CAAC,EAAE,CAAC;QACN,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,OAAO,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAChF,KAAK,MAAM,KAAK,IAAI,OAAO,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QAC7C,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QAC3B,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;YACnC,MAAM,SAAS,GAAG,IAAI,CAAC,KAAK,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;YACnE,IAAI,CAAC;gBACH,IAAI,CAAC,MAAM,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC;oBACrC,MAAM,MAAM,CAAC,SAAS,CAAC,CAAC;oBACxB,OAAO,SAAS,CAAC;gBACnB,CAAC;YACH,CAAC;YAAC,MAAM,CAAC;gBACP,2EAA2E;YAC7E,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,OAAO;IACrB,OAAO,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,OAAO,EAAE,CAAC;AACxE,CAAC;AAED,gGAAgG;AAChG,MAAM,UAAU,UAAU,CAAC,QAAgB;IACzC,IAAI,CAAC;QACH,OAAO,UAAU,CAAC,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,CAAC,CAAC,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,CAAC,KAAK,UAAU,WAAW,CAAC,QAAkB,EAAE,SAAmB;IACvE,IAAI,SAAS,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5C,KAAK,MAAM,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC3B,IAAI,MAAM,SAAS,CAAC,GAAG,CAAC;YAAE,OAAO,IAAI,CAAC;IACxC,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/env.d.ts

@@ -0,0 +1,60 @@
+/**
+ * Placeholder key for runs where the user has no credential in the environment. The proxy is
+ * holding the real one (or serving from a trace), but SDK clients refuse to start without
+ * *something* — so an obviously-fake value beats an empty string that looks like a real key.
+ */
+export declare const PLACEHOLDER_KEY = "agenticreplay-recorded";
+/** An env var set to the empty string is unset for our purposes: an empty key breaks clients. */
+export declare function readEnv(env: Record<string, string | undefined>, name: string): string | undefined;
+/** Joins a path onto the proxy url without producing `//`, whether or not the base ends in `/`. */
+export declare function proxyBase(proxyUrl: string, path?: string): string;
+/**
+ * A proxy base URL that carries `original` as its destination — but only where it can be carried.
+ *
+ * `forwardBasePath` encodes whatever it is handed; `decodeForwardPath` deliberately refuses a
+ * decoded URL with credentials, a query, a fragment or a non-http(s) scheme. Encoding without
+ * asking produced a `/forward/` segment nothing could read, and that failed in the worst available
+ * way: the proxy could not recover the announced origin, so the call went to the configured
+ * upstream — or to `api.openai.com` — carrying the harness's credential for a *different* gateway,
+ * which is the exact failure this rewrite exists to prevent. Worse, the undecodable segment is the
+ * request path, so a base URL like `https://tenant:pw@gw.example/v1` wrote the gateway password
+ * into the trace verbatim, where `agenticreplay show`, `agenticreplay export` and any attached bug report carry it.
+ *
+ * So: ask the decoder first, and where the answer is no, fall back to the plain proxy path. That
+ * is what this did before origins could be carried at all — the call reaches the proxy and is
+ * forwarded to the configured upstream, which fails loudly against the wrong origin instead of
+ * quietly leaking. Carrying it *without* the credential is not an option: the client reads this
+ * value to build its request, so dropping the userinfo would simply stop it authenticating.
+ */
+export declare function forwardOrProxyBase(proxyUrl: string, original: string, fallbackPath?: string): string;
+/** Copies `name` from the run environment into the launch overlay, or a placeholder if unset. */
+export declare function passKey(target: Record<string, string>, env: Record<string, string | undefined>, name: string): void;
+/** Copies `name` only if it is actually set — used for optional tokens we must not invent. */
+export declare function passThrough(target: Record<string, string>, env: Record<string, string | undefined>, name: string): void;
+/**
+ * Point base-URL variables agenticreplay does not know about at the proxy.
+ *
+ * Read from `AGENTICREPLAY_BASE_URL_VARS`: a comma-separated list of variable names, each optionally with
+ * `=<path>` when the origin is not OpenAI-shaped. `/v1` is the default suffix because that is what
+ * an OpenAI-compatible override wants, and it is what every example in the wild ends in.
+ *
+ * This exists because enumerating them is hopeless. Hermes alone overrides per provider —
+ * `NOVITA_BASE_URL`, `GLM_BASE_URL`, `KIMI_BASE_URL`, `MINIMAX_BASE_URL`, `HF_BASE_URL`,
+ * `NEBIUS_BASE_URL` and a dozen more in one `.env.example` — and a list of names baked in here
+ * would be stale the week after it was written. A harness the author has never heard of is the
+ * normal case, so it gets a mechanism rather than a pull request.
+ *
+ * The variable is consumed, never forwarded: it names other variables and means nothing downstream.
+ *
+ * Where the variable already held an origin and the user did not spell out a path, the rewrite
+ * goes through `/forward/` so the request arrives carrying the destination agenticreplay took it away
+ * from. That matters as soon as a run has two of them. A retrieval stack is the ordinary case —
+ * chat through a gateway, embeddings at a dedicated provider or a local Ollama — and agenticreplay's
+ * upstream map is keyed by wire dialect, so "the same dialect at two origins" is a configuration
+ * `--upstream-openai` cannot express. Without the original target the second origin's calls were
+ * forwarded to the first one's, or, with no override configured at all, to `api.openai.com`
+ * carrying the second provider's credential. With it, `passthroughOrigin` restores the address
+ * the client announced and nothing has to be guessed.
+ */
+export declare function applyNamedBaseUrls(target: Record<string, string>, env: Record<string, string | undefined>, proxyUrl: string): void;
+//# sourceMappingURL=env.d.ts.map

package/node_modules/@agenticreplay/adapters/dist/env.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.d.ts","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,eAAO,MAAM,eAAe,2BAA2B,CAAC;AAExD,iGAAiG;AACjG,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAGjG;AAED,mGAAmG;AACnG,wBAAgB,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,SAAK,GAAG,MAAM,CAG7D;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,YAAY,SAAO,GAClB,MAAM,CAMR;AAED,iGAAiG;AACjG,wBAAgB,OAAO,CACrB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,IAAI,EAAE,MAAM,GACX,IAAI,CAEN;AAED,8FAA8F;AAC9F,wBAAgB,WAAW,CACzB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,IAAI,EAAE,MAAM,GACX,IAAI,CAGN;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,EAC9B,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,EACvC,QAAQ,EAAE,MAAM,GACf,IAAI,CAkBN"}

package/node_modules/@agenticreplay/adapters/dist/env.js

@@ -0,0 +1,99 @@
+import { decodeForwardPath, forwardBasePath } from '@agenticreplay/proxy';
+/**
+ * Placeholder key for runs where the user has no credential in the environment. The proxy is
+ * holding the real one (or serving from a trace), but SDK clients refuse to start without
+ * *something* — so an obviously-fake value beats an empty string that looks like a real key.
+ */
+export const PLACEHOLDER_KEY = 'agenticreplay-recorded';
+/** An env var set to the empty string is unset for our purposes: an empty key breaks clients. */
+export function readEnv(env, name) {
+    const value = env[name];
+    return value !== undefined && value !== '' ? value : undefined;
+}
+/** Joins a path onto the proxy url without producing `//`, whether or not the base ends in `/`. */
+export function proxyBase(proxyUrl, path = '') {
+    const base = proxyUrl.replace(/\/+$/, '');
+    return path ? `${base}/${path.replace(/^\/+/, '')}` : base;
+}
+/**
+ * A proxy base URL that carries `original` as its destination — but only where it can be carried.
+ *
+ * `forwardBasePath` encodes whatever it is handed; `decodeForwardPath` deliberately refuses a
+ * decoded URL with credentials, a query, a fragment or a non-http(s) scheme. Encoding without
+ * asking produced a `/forward/` segment nothing could read, and that failed in the worst available
+ * way: the proxy could not recover the announced origin, so the call went to the configured
+ * upstream — or to `api.openai.com` — carrying the harness's credential for a *different* gateway,
+ * which is the exact failure this rewrite exists to prevent. Worse, the undecodable segment is the
+ * request path, so a base URL like `https://tenant:pw@gw.example/v1` wrote the gateway password
+ * into the trace verbatim, where `agenticreplay show`, `agenticreplay export` and any attached bug report carry it.
+ *
+ * So: ask the decoder first, and where the answer is no, fall back to the plain proxy path. That
+ * is what this did before origins could be carried at all — the call reaches the proxy and is
+ * forwarded to the configured upstream, which fails loudly against the wrong origin instead of
+ * quietly leaking. Carrying it *without* the credential is not an option: the client reads this
+ * value to build its request, so dropping the userinfo would simply stop it authenticating.
+ */
+export function forwardOrProxyBase(proxyUrl, original, fallbackPath = 'v1') {
+    const forward = forwardBasePath(original);
+    // Round-tripped through the decoder itself, rather than restating its rules here, so the two
+    // sides of the encoding cannot drift apart again.
+    if (decodeForwardPath(forward) !== undefined)
+        return proxyBase(proxyUrl, forward);
+    return proxyBase(proxyUrl, fallbackPath);
+}
+/** Copies `name` from the run environment into the launch overlay, or a placeholder if unset. */
+export function passKey(target, env, name) {
+    target[name] = readEnv(env, name) ?? PLACEHOLDER_KEY;
+}
+/** Copies `name` only if it is actually set — used for optional tokens we must not invent. */
+export function passThrough(target, env, name) {
+    const value = readEnv(env, name);
+    if (value !== undefined)
+        target[name] = value;
+}
+/**
+ * Point base-URL variables agenticreplay does not know about at the proxy.
+ *
+ * Read from `AGENTICREPLAY_BASE_URL_VARS`: a comma-separated list of variable names, each optionally with
+ * `=<path>` when the origin is not OpenAI-shaped. `/v1` is the default suffix because that is what
+ * an OpenAI-compatible override wants, and it is what every example in the wild ends in.
+ *
+ * This exists because enumerating them is hopeless. Hermes alone overrides per provider —
+ * `NOVITA_BASE_URL`, `GLM_BASE_URL`, `KIMI_BASE_URL`, `MINIMAX_BASE_URL`, `HF_BASE_URL`,
+ * `NEBIUS_BASE_URL` and a dozen more in one `.env.example` — and a list of names baked in here
+ * would be stale the week after it was written. A harness the author has never heard of is the
+ * normal case, so it gets a mechanism rather than a pull request.
+ *
+ * The variable is consumed, never forwarded: it names other variables and means nothing downstream.
+ *
+ * Where the variable already held an origin and the user did not spell out a path, the rewrite
+ * goes through `/forward/` so the request arrives carrying the destination agenticreplay took it away
+ * from. That matters as soon as a run has two of them. A retrieval stack is the ordinary case —
+ * chat through a gateway, embeddings at a dedicated provider or a local Ollama — and agenticreplay's
+ * upstream map is keyed by wire dialect, so "the same dialect at two origins" is a configuration
+ * `--upstream-openai` cannot express. Without the original target the second origin's calls were
+ * forwarded to the first one's, or, with no override configured at all, to `api.openai.com`
+ * carrying the second provider's credential. With it, `passthroughOrigin` restores the address
+ * the client announced and nothing has to be guessed.
+ */
+export function applyNamedBaseUrls(target, env, proxyUrl) {
+    for (const entry of (readEnv(env, 'AGENTICREPLAY_BASE_URL_VARS') ?? '').split(',')) {
+        const [rawName, rawPath] = entry.split('=');
+        const name = (rawName ?? '').trim();
+        if (name === '')
+            continue;
+        const original = readEnv(env, name);
+        // An explicit `=<path>` is the user saying where on the proxy this variable should point, and
+        // it still wins: it is how someone names a non-OpenAI-shaped origin, and rewriting it as a
+        // forward would silently ignore what they typed.
+        if (rawPath === undefined && original !== undefined) {
+            target[name] = forwardOrProxyBase(proxyUrl, original);
+            continue;
+        }
+        // A path of `/` means the bare origin. `proxyBase` would otherwise leave the separator behind
+        // and hand the harness `http://host:port/`, which some clients then join into a double slash.
+        const path = (rawPath ?? 'v1').trim().replace(/^\/+|\/+$/g, '');
+        target[name] = proxyBase(proxyUrl, path);
+    }
+}
+//# sourceMappingURL=env.js.map

package/node_modules/@agenticreplay/adapters/dist/env.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"env.js","sourceRoot":"","sources":["../src/env.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,sBAAsB,CAAC;AAE1E;;;;GAIG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,wBAAwB,CAAC;AAExD,iGAAiG;AACjG,MAAM,UAAU,OAAO,CAAC,GAAuC,EAAE,IAAY;IAC3E,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACxB,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjE,CAAC;AAED,mGAAmG;AACnG,MAAM,UAAU,SAAS,CAAC,QAAgB,EAAE,IAAI,GAAG,EAAE;IACnD,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IAC1C,OAAO,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,IAAI,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7D,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAAgB,EAChB,QAAgB,EAChB,YAAY,GAAG,IAAI;IAEnB,MAAM,OAAO,GAAG,eAAe,CAAC,QAAQ,CAAC,CAAC;IAC1C,6FAA6F;IAC7F,kDAAkD;IAClD,IAAI,iBAAiB,CAAC,OAAO,CAAC,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;IAClF,OAAO,SAAS,CAAC,QAAQ,EAAE,YAAY,CAAC,CAAC;AAC3C,CAAC;AAED,iGAAiG;AACjG,MAAM,UAAU,OAAO,CACrB,MAA8B,EAC9B,GAAuC,EACvC,IAAY;IAEZ,MAAM,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,eAAe,CAAC;AACvD,CAAC;AAED,8FAA8F;AAC9F,MAAM,UAAU,WAAW,CACzB,MAA8B,EAC9B,GAAuC,EACvC,IAAY;IAEZ,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IACjC,IAAI,KAAK,KAAK,SAAS;QAAE,MAAM,CAAC,IAAI,CAAC,GAAG,KAAK,CAAC;AAChD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,UAAU,kBAAkB,CAChC,MAA8B,EAC9B,GAAuC,EACvC,QAAgB;IAEhB,KAAK,MAAM,KAAK,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE,6BAA6B,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC;QACnF,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,EAAE;YAAE,SAAS;QAC1B,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACpC,8FAA8F;QAC9F,2FAA2F;QAC3F,iDAAiD;QACjD,IAAI,OAAO,KAAK,SAAS,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YACpD,MAAM,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;YACtD,SAAS;QACX,CAAC;QACD,8FAA8F;QAC9F,8FAA8F;QAC9F,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;QAChE,MAAM,CAAC,IAAI,CAAC,GAAG,SAAS,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAC3C,CAAC;AACH,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/exec.d.ts

@@ -0,0 +1,25 @@
+import type { Adapter } from '@agenticreplay/plugin-api';
+/**
+ * Any agent at all, captured at the transport.
+ *
+ * The other adapters here each name a harness and the variable it reads. This one names neither,
+ * because the cases it exists for have nothing to name:
+ *
+ *   - a bot with its origin hardcoded in source — a Grok bot posting to `https://api.x.ai/v1`
+ *     because someone typed that string, which no environment variable will ever move;
+ *   - an agent in a language the fetch hook cannot reach, which is every language except JS;
+ *   - an editor that spawns the real agent as a child, where agenticreplay launches the editor and the
+ *     agent inherits the capture two processes down.
+ *
+ * For all three the redirect happens below the agent, at the socket: `--tls-intercept` terminates
+ * the TLS the agent established itself. That is applied by the run rather than by this adapter,
+ * which is why `prepare` looks nearly empty — the emptiness is the design.
+ *
+ * It is deliberately not `generic-openai` with a better name. That adapter sets `OPENAI_BASE_URL`,
+ * `OPENAI_API_BASE` and `ANTHROPIC_BASE_URL` at once, which is right when you know your agent
+ * reads one of them and actively wrong when you do not: an injected origin silently repoints a
+ * harness that would otherwise have called somewhere else, and the trace then describes a run the
+ * user never asked for. Pointing an unknown agent nowhere is the honest default.
+ */
+export declare const execAdapter: Adapter;
+//# sourceMappingURL=exec.d.ts.map

package/node_modules/@agenticreplay/adapters/dist/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../src/exec.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAyB,MAAM,2BAA2B,CAAC;AAGhF;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,eAAO,MAAM,WAAW,EAAE,OAiCzB,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/exec.js

@@ -0,0 +1,51 @@
+import { applyNamedBaseUrls } from './env.js';
+/**
+ * Any agent at all, captured at the transport.
+ *
+ * The other adapters here each name a harness and the variable it reads. This one names neither,
+ * because the cases it exists for have nothing to name:
+ *
+ *   - a bot with its origin hardcoded in source — a Grok bot posting to `https://api.x.ai/v1`
+ *     because someone typed that string, which no environment variable will ever move;
+ *   - an agent in a language the fetch hook cannot reach, which is every language except JS;
+ *   - an editor that spawns the real agent as a child, where agenticreplay launches the editor and the
+ *     agent inherits the capture two processes down.
+ *
+ * For all three the redirect happens below the agent, at the socket: `--tls-intercept` terminates
+ * the TLS the agent established itself. That is applied by the run rather than by this adapter,
+ * which is why `prepare` looks nearly empty — the emptiness is the design.
+ *
+ * It is deliberately not `generic-openai` with a better name. That adapter sets `OPENAI_BASE_URL`,
+ * `OPENAI_API_BASE` and `ANTHROPIC_BASE_URL` at once, which is right when you know your agent
+ * reads one of them and actively wrong when you do not: an injected origin silently repoints a
+ * harness that would otherwise have called somewhere else, and the trace then describes a run the
+ * user never asked for. Pointing an unknown agent nowhere is the honest default.
+ */
+export const execAdapter = {
+    id: 'exec',
+    // `any` is what someone types when their agent is not on the list, which is the whole audience.
+    aliases: ['any'],
+    // Redirecting nothing is the intent, not a defect. See the `capture` field on `Adapter`.
+    capture: 'transport',
+    async detect(_cwd) {
+        // Never automatic. An adapter that does not know what it would be launching must not claim a
+        // workspace — the same rule `generic-openai` and `node` follow, for the same reason.
+        return false;
+    },
+    async prepare(ctx) {
+        const [command, ...args] = ctx.userArgs;
+        if (command === undefined || command === '') {
+            throw new Error('exec needs the command to run: agenticreplay record exec --tls-intercept -- <command> [args...], ' +
+                'e.g. agenticreplay record exec --tls-intercept -- python bot.py');
+        }
+        // Nothing is invented: no origin, and no credential. An agent recorded this way authenticates
+        // with whatever it already had, because agenticreplay never learned which provider it talks to.
+        const env = {};
+        // The one exception, and only because the operator asked for it by name. This is what makes
+        // `exec` useful for a harness that reads an unusual variable but has no adapter yet, without
+        // needing interception at all.
+        applyNamedBaseUrls(env, ctx.env, ctx.proxyUrl);
+        return { command, args, env };
+    },
+};
+//# sourceMappingURL=exec.js.map

package/node_modules/@agenticreplay/adapters/dist/exec.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.js","sourceRoot":"","sources":["../src/exec.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,MAAM,UAAU,CAAC;AAE9C;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,CAAC,MAAM,WAAW,GAAY;IAClC,EAAE,EAAE,MAAM;IACV,gGAAgG;IAChG,OAAO,EAAE,CAAC,KAAK,CAAC;IAEhB,yFAAyF;IACzF,OAAO,EAAE,WAAW;IAEpB,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,6FAA6F;QAC7F,qFAAqF;QACrF,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAkB;QAC9B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,mGAAmG;gBACjG,iEAAiE,CACpE,CAAC;QACJ,CAAC;QAED,8FAA8F;QAC9F,gGAAgG;QAChG,MAAM,GAAG,GAA2B,EAAE,CAAC;QACvC,4FAA4F;QAC5F,6FAA6F;QAC7F,+BAA+B;QAC/B,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAE/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;CACF,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/generic-openai.d.ts

@@ -0,0 +1,8 @@
+import type { Adapter } from '@agenticreplay/plugin-api';
+/**
+ * The escape hatch for any agent nobody has written an adapter for: the user supplies the command,
+ * and every base-url variable in common use is redirected at once. `detect` is always false — an
+ * adapter that cannot know what it is launching must never be chosen automatically.
+ */
+export declare const genericOpenAiAdapter: Adapter;
+//# sourceMappingURL=generic-openai.d.ts.map

package/node_modules/@agenticreplay/adapters/dist/generic-openai.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-openai.d.ts","sourceRoot":"","sources":["../src/generic-openai.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAyB,MAAM,2BAA2B,CAAC;AAGhF;;;;GAIG;AACH,eAAO,MAAM,oBAAoB,EAAE,OA2BlC,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/generic-openai.js

@@ -0,0 +1,31 @@
+import { applyNamedBaseUrls, passKey, passThrough, proxyBase } from './env.js';
+/**
+ * The escape hatch for any agent nobody has written an adapter for: the user supplies the command,
+ * and every base-url variable in common use is redirected at once. `detect` is always false — an
+ * adapter that cannot know what it is launching must never be chosen automatically.
+ */
+export const genericOpenAiAdapter = {
+    id: 'generic-openai',
+    async detect(_cwd) {
+        return false;
+    },
+    async prepare(ctx) {
+        const [command, ...args] = ctx.userArgs;
+        if (command === undefined || command === '') {
+            throw new Error('generic-openai needs the command to run: agenticreplay record generic-openai -- <command> [args...]');
+        }
+        const env = {
+            OPENAI_BASE_URL: proxyBase(ctx.proxyUrl, 'v1'),
+            // Pre-1.0 OpenAI SDKs and many ports read OPENAI_API_BASE instead.
+            OPENAI_API_BASE: proxyBase(ctx.proxyUrl, 'v1'),
+            ANTHROPIC_BASE_URL: proxyBase(ctx.proxyUrl),
+        };
+        passKey(env, ctx.env, 'OPENAI_API_KEY');
+        // Only passed on if the user already had one: an invented Anthropic key could flip an unknown
+        // agent's provider auto-selection and change which model it calls.
+        passThrough(env, ctx.env, 'ANTHROPIC_API_KEY');
+        applyNamedBaseUrls(env, ctx.env, ctx.proxyUrl);
+        return { command, args, env };
+    },
+};
+//# sourceMappingURL=generic-openai.js.map

package/node_modules/@agenticreplay/adapters/dist/generic-openai.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"generic-openai.js","sourceRoot":"","sources":["../src/generic-openai.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,kBAAkB,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,MAAM,UAAU,CAAC;AAE/E;;;;GAIG;AACH,MAAM,CAAC,MAAM,oBAAoB,GAAY;IAC3C,EAAE,EAAE,gBAAgB;IAEpB,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,KAAK,CAAC;IACf,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAkB;QAC9B,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC;QACxC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;YAC5C,MAAM,IAAI,KAAK,CACb,qGAAqG,CACtG,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,GAA2B;YAClC,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC9C,mEAAmE;YACnE,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC9C,kBAAkB,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;SAC5C,CAAC;QACF,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QACxC,8FAA8F;QAC9F,mEAAmE;QACnE,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QAC/C,kBAAkB,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC/C,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC;IAChC,CAAC;CACF,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/goose.d.ts

@@ -0,0 +1,39 @@
+import type { Adapter } from '@agenticreplay/plugin-api';
+/**
+ * goose — Block's agent, and the one harness so far that reads a *different* set of variables
+ * than every other OpenAI-shaped client.
+ *
+ * Three facts decided this adapter, each measured against goose 1.49.0 rather than inferred, by
+ * pointing it at a sink server and reading back the request line:
+ *
+ * 1. **`OPENAI_HOST` outranks `OPENAI_BASE_URL`.** `openai_def.rs` resolves the origin in priority
+ *    order — `OPENAI_HOST` from the environment first, `OPENAI_BASE_URL` second — so a user who
+ *    has `OPENAI_HOST` set for some other tool keeps it, and the run goes to their origin while
+ *    agenticreplay reports a successful recording with an empty trace. Setting only `OPENAI_BASE_URL` is
+ *    the `capture.empty` shape the adapter contract exists to prevent, so this adapter sets both.
+ *    Pointed at the same proxy they agree, and neither a stale value nor the priority order can
+ *    route around it.
+ *
+ * 2. **goose does not read `ANTHROPIC_BASE_URL`.** Its Anthropic provider reads `ANTHROPIC_HOST`
+ *    (`anthropic_def.rs`), and a sink pointed at by `ANTHROPIC_BASE_URL` alone receives nothing at
+ *    all. This is precisely why `generic-openai` is not good enough for goose: it sets the
+ *    variable the rest of the ecosystem reads, which here is the one variable that does nothing.
+ *
+ * 3. **The traffic is the Responses API.** With either variable set, goose issues
+ *    `POST /v1/responses`, not `/v1/chat/completions` — plus one `GET /v1/models` on start-up. The
+ *    proxy's `openai-responses` dialect claims it (`matches: (p) => p.endsWith('/responses')`), so
+ *    no path rewriting is needed; it is recorded here because "it happens to work" and "it is
+ *    known to work" are different claims, and only the second survives an upstream refactor.
+ *
+ * `Config::get_param` reads the environment before the config file for every key it resolves
+ * (`config/base.rs`), which is what makes per-process redirection possible at all — goose's
+ * persisted `~/.config/goose/config.yaml` cannot win against the overlay agenticreplay sets.
+ *
+ * **What this adapter does not capture.** goose runs its shell without going through agenticreplay's PATH
+ * shim, so a run full of `shell` tool calls still reports `shell.ineffective`: the commands appear
+ * as tool calls with their output, but the real exit code, the real duration and the
+ * stdout/stderr split are not in the trace. Record with `--no-shell` to claim nothing rather than
+ * to claim that.
+ */
+export declare const gooseAdapter: Adapter;
+//# sourceMappingURL=goose.d.ts.map

package/node_modules/@agenticreplay/adapters/dist/goose.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose.d.ts","sourceRoot":"","sources":["../src/goose.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAyB,MAAM,2BAA2B,CAAC;AAIhF;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,eAAO,MAAM,YAAY,EAAE,OA8C1B,CAAC"}

package/node_modules/@agenticreplay/adapters/dist/goose.js

@@ -0,0 +1,81 @@
+import { detectAgent } from './detect.js';
+import { passKey, passThrough, proxyBase, readEnv } from './env.js';
+/**
+ * goose — Block's agent, and the one harness so far that reads a *different* set of variables
+ * than every other OpenAI-shaped client.
+ *
+ * Three facts decided this adapter, each measured against goose 1.49.0 rather than inferred, by
+ * pointing it at a sink server and reading back the request line:
+ *
+ * 1. **`OPENAI_HOST` outranks `OPENAI_BASE_URL`.** `openai_def.rs` resolves the origin in priority
+ *    order — `OPENAI_HOST` from the environment first, `OPENAI_BASE_URL` second — so a user who
+ *    has `OPENAI_HOST` set for some other tool keeps it, and the run goes to their origin while
+ *    agenticreplay reports a successful recording with an empty trace. Setting only `OPENAI_BASE_URL` is
+ *    the `capture.empty` shape the adapter contract exists to prevent, so this adapter sets both.
+ *    Pointed at the same proxy they agree, and neither a stale value nor the priority order can
+ *    route around it.
+ *
+ * 2. **goose does not read `ANTHROPIC_BASE_URL`.** Its Anthropic provider reads `ANTHROPIC_HOST`
+ *    (`anthropic_def.rs`), and a sink pointed at by `ANTHROPIC_BASE_URL` alone receives nothing at
+ *    all. This is precisely why `generic-openai` is not good enough for goose: it sets the
+ *    variable the rest of the ecosystem reads, which here is the one variable that does nothing.
+ *
+ * 3. **The traffic is the Responses API.** With either variable set, goose issues
+ *    `POST /v1/responses`, not `/v1/chat/completions` — plus one `GET /v1/models` on start-up. The
+ *    proxy's `openai-responses` dialect claims it (`matches: (p) => p.endsWith('/responses')`), so
+ *    no path rewriting is needed; it is recorded here because "it happens to work" and "it is
+ *    known to work" are different claims, and only the second survives an upstream refactor.
+ *
+ * `Config::get_param` reads the environment before the config file for every key it resolves
+ * (`config/base.rs`), which is what makes per-process redirection possible at all — goose's
+ * persisted `~/.config/goose/config.yaml` cannot win against the overlay agenticreplay sets.
+ *
+ * **What this adapter does not capture.** goose runs its shell without going through agenticreplay's PATH
+ * shim, so a run full of `shell` tool calls still reports `shell.ineffective`: the commands appear
+ * as tool calls with their output, but the real exit code, the real duration and the
+ * stdout/stderr split are not in the trace. Record with `--no-shell` to claim nothing rather than
+ * to claim that.
+ */
+export const gooseAdapter = {
+    id: 'goose',
+    harnessVersions: '>=1.49.0',
+    async detect(_cwd) {
+        return detectAgent(['goose'], ['.config/goose']);
+    },
+    async prepare(ctx) {
+        const env = {
+            // Both, deliberately — see fact 1. `OPENAI_HOST` takes an origin and goose appends the
+            // endpoint itself; `OPENAI_BASE_URL` takes the `/v1` form the rest of the ecosystem uses.
+            OPENAI_HOST: proxyBase(ctx.proxyUrl),
+            OPENAI_BASE_URL: proxyBase(ctx.proxyUrl, 'v1'),
+            // Not `ANTHROPIC_BASE_URL`: goose reads neither that nor `ANTHROPIC_API_BASE`. See fact 2.
+            ANTHROPIC_HOST: proxyBase(ctx.proxyUrl),
+        };
+        // Same credential rule as the other adapters. Which keys the harness can see decides which
+        // provider it picks, so inventing one for a provider the user never configured can change
+        // which model answers — and a recorded run that answers differently from the same command
+        // uninstrumented is the worst kind of capture bug. A placeholder stands in only when there is
+        // nothing to disturb.
+        const hasAny = readEnv(ctx.env, 'OPENAI_API_KEY') !== undefined ||
+            readEnv(ctx.env, 'ANTHROPIC_API_KEY') !== undefined;
+        if (hasAny) {
+            passThrough(env, ctx.env, 'OPENAI_API_KEY');
+            passThrough(env, ctx.env, 'ANTHROPIC_API_KEY');
+        }
+        else {
+            passKey(env, ctx.env, 'OPENAI_API_KEY');
+        }
+        // Passed on, never invented: goose has no default provider or model for a custom endpoint, and
+        // which one the recording is meant to exercise is the operator's to say. Inventing either
+        // would make `agenticreplay record goose` launch a different agent than `goose` does.
+        passThrough(env, ctx.env, 'GOOSE_PROVIDER');
+        passThrough(env, ctx.env, 'GOOSE_MODEL');
+        // `OPENAI_BASE_PATH` is read from the environment ahead of the config file whenever the host
+        // came from `OPENAI_BASE_URL`, so a value left over from a Docker Model Runner setup would
+        // move the path agenticreplay serves. Passing it through keeps the recording faithful to the command
+        // the user actually ran; the proxy matches `/chat/completions` with or without a `/v1`.
+        passThrough(env, ctx.env, 'OPENAI_BASE_PATH');
+        return { command: 'goose', args: [...ctx.userArgs], env };
+    },
+};
+//# sourceMappingURL=goose.js.map

package/node_modules/@agenticreplay/adapters/dist/goose.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"goose.js","sourceRoot":"","sources":["../src/goose.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,UAAU,CAAC;AAEpE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AACH,MAAM,CAAC,MAAM,YAAY,GAAY;IACnC,EAAE,EAAE,OAAO;IACX,eAAe,EAAE,UAAU;IAE3B,KAAK,CAAC,MAAM,CAAC,IAAY;QACvB,OAAO,WAAW,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,eAAe,CAAC,CAAC,CAAC;IACnD,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,GAAkB;QAC9B,MAAM,GAAG,GAA2B;YAClC,uFAAuF;YACvF,0FAA0F;YAC1F,WAAW,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;YACpC,eAAe,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,EAAE,IAAI,CAAC;YAC9C,2FAA2F;YAC3F,cAAc,EAAE,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;SACxC,CAAC;QAEF,2FAA2F;QAC3F,0FAA0F;QAC1F,0FAA0F;QAC1F,8FAA8F;QAC9F,sBAAsB;QACtB,MAAM,MAAM,GACV,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,KAAK,SAAS;YAChD,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,KAAK,SAAS,CAAC;QACtD,IAAI,MAAM,EAAE,CAAC;YACX,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;YAC5C,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;QACjD,CAAC;aAAM,CAAC;YACN,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC1C,CAAC;QAED,+FAA+F;QAC/F,0FAA0F;QAC1F,sFAAsF;QACtF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,gBAAgB,CAAC,CAAC;QAC5C,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,aAAa,CAAC,CAAC;QACzC,6FAA6F;QAC7F,2FAA2F;QAC3F,qGAAqG;QACrG,wFAAwF;QACxF,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,kBAAkB,CAAC,CAAC;QAE9C,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,GAAG,CAAC,QAAQ,CAAC,EAAE,GAAG,EAAE,CAAC;IAC5D,CAAC;CACF,CAAC"}