agents-bridge 0.3.5 → 0.3.9

package/dist/agents/model-auto-binding.js

@@ -1,18 +1,22 @@
 import { randomBytes } from 'node:crypto';
-import { mkdir, open, readFile } from 'node:fs/promises';
-import { dirname } from 'node:path';
 import { normalizeBotlinkChannelConfigs } from '../config/zod-schema.js';
 import { resolveAgentConfigs } from './agent-resolver.js';
 import { resolveAgent } from './agent-router.js';
 import { resolveOpenApiBaseUrl } from '../cli/botlink-openapi.js';
+import { createSecureModelControlFile, readSecureModelControlFile } from './model-control-files.js';
 export function modelSwitchAllowed(config, agentId) {
     return config.agents.list?.find(a => a.id === agentId)?.allowModelSwitch ?? config.agents.defaults.allowModelSwitch ?? true;
 }
 /** Reuses legacy channel routing and credentials; never rewrites Agent IDs or sessions. */
 export async function automaticModelControl(config, agentId, statePath, logger) {
-    const explicit = config.agents.list?.find(a => a.id === agentId)?.modelControl;
-    if (explicit)
-        return { ...explicit, allowModelSwitch: modelSwitchAllowed(config, agentId) };
+    const agentSetting = config.agents.list?.find(a => a.id === agentId)?.modelControl;
+    const configured = agentSetting !== undefined ? agentSetting : config.agents.defaults.modelControl;
+    if (configured === false) {
+        logger.info({ agentId, event: 'MODEL_CONTROL_DISABLED' }, 'Model control disabled by configuration');
+        return undefined;
+    }
+    if (configured)
+        return { ...configured, allowModelSwitch: modelSwitchAllowed(config, agentId) };
     const resolved = resolveAgentConfigs(config, logger);
     const ref = resolved.agents.get(agentId).model.primary;
     const slash = ref.indexOf('/'), provider = ref.slice(0, slash), initial = ref.slice(slash + 1);
@@ -31,37 +35,25 @@ export async function automaticModelControl(config, agentId, statePath, logger)
     }
     const account = accounts[0].config;
     const endpoint = `${resolveOpenApiBaseUrl(account)}/openapi/agent/model-control/poll`;
+    const endpointUrl = new URL(endpoint);
+    if (endpointUrl.protocol !== 'https:' || endpointUrl.username || endpointUrl.password || endpointUrl.hash)
+        throw new Error('MODEL_CONTROL_HTTPS_REQUIRED');
     const path = statePath + '.device';
-    await mkdir(dirname(path), { recursive: true });
     let secret;
     try {
-        secret = (await readFile(path, 'utf8')).trim();
+        secret = (await readSecureModelControlFile(path)).trim();
     }
     catch (e) {
         if (e.code !== 'ENOENT')
             throw e;
         secret = randomBytes(32).toString('hex');
         try {
-            const f = await open(path, 'wx', 0o600);
-            try {
-                await f.writeFile(secret);
-                await f.sync();
-            }
-            finally {
-                await f.close();
-            }
+            await createSecureModelControlFile(path, secret);
         }
         catch (e) {
             if (e.code !== 'EEXIST')
                 throw e;
-            secret = (await readFile(path, 'utf8')).trim();
-        }
-        const dir = await open(dirname(path), 'r');
-        try {
-            await dir.sync();
-        }
-        finally {
-            await dir.close();
+            secret = (await readSecureModelControlFile(path)).trim();
         }
     }
     if (!/^[a-f0-9]{64}$/.test(secret))

package/dist/agents/model-auto-binding.js.map

@@ -1 +1 @@
-{"version":3,"file":"model-auto-binding.js","sourceRoot":"","sources":["../../src/agents/model-auto-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAA;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AACnC,OAAO,EAAE,8BAA8B,EAAkB,MAAM,yBAAyB,CAAA;AAExF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAGjE,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,OAAe;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAA;AAC7H,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAiB,EAAE,OAAe,EAAE,SAAiB,EAAE,MAAc;IAC/G,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,YAAY,CAAA;IAC9E,IAAI,QAAQ;QAAE,OAAO,EAAE,GAAG,QAAQ,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;IAC3F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,KAAK,CAAC,OAAO,CAAA;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAC9F,MAAM,OAAO,GAA6B,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,EAAC,YAAY,EAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC,SAAS,EAAC,aAAa,EAAC,cAAc,CAAC,EAAE,CAAA;IACpK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IACpF,MAAM,QAAQ,GAAG,8BAA8B,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAC,SAAS,EAAC,EAAE,EAAE;QAC9F,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,GAAG,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAA;QAChL,MAAM,MAAM,GAAG,YAAY,CAAC,EAAC,MAAM,EAAC,EAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,EAAE,EAAC,QAAQ,EAAC,SAAS,EAAC,MAAM,EAAC,EAAE,EAAC,EAAoB,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAA;QACjM,4EAA4E;QAC5E,OAAO,MAAM,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAA;IAC5G,CAAC,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAC,OAAO,EAAC,YAAY,EAAC,QAAQ,CAAC,MAAM,EAAC,EAAE,wFAAwF,CAAC,CAAA;QAC7I,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAClC,MAAM,QAAQ,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,mCAAmC,CAAA;IACrF,MAAM,IAAI,GAAG,SAAS,GAAG,SAAS,CAAA;IAClC,MAAM,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAC,IAAI,EAAE,CAAC,CAAA;IAC9C,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IACrD,OAAO,CAAK,EAAE,CAAC;QACb,IAAG,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,CAAA;QAC/B,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxC,IAAI,CAAC;YAAC,MAAM,CAAC,GAAG,MAAM,IAAI,CAAC,IAAI,EAAC,IAAI,EAAC,KAAK,CAAC,CAAC;YAAC,IAAI,CAAC;gBAAC,MAAM,CAAC,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAA;YAAC,CAAC;oBAAS,CAAC;gBAAC,MAAM,CAAC,CAAC,KAAK,EAAE,CAAA;YAAC,CAAC;QAAC,CAAC;QAC5H,OAAM,CAAK,EAAE,CAAC;YAAC,IAAG,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAAC,MAAM,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAC,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;QAC/F,MAAM,GAAG,GAAC,MAAM,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAC,GAAG,CAAC,CAAC;QAAA,IAAG,CAAC;YAAA,MAAM,GAAG,CAAC,IAAI,EAAE,CAAA;QAAA,CAAC;gBAAO,CAAC;YAAA,MAAM,GAAG,CAAC,KAAK,EAAE,CAAA;QAAA,CAAC;IACzF,CAAC;IACD,IAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAChF,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,OAAO,CAAC,SAAS,EAAC,YAAY,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,CAAC,CAAC,CAAC,EAAC,gBAAgB,EAAC,kBAAkB,CAAC,MAAM,EAAC,OAAO,CAAC,EAAC,CAAA;AAC1K,CAAC"}
+{"version":3,"file":"model-auto-binding.js","sourceRoot":"","sources":["../../src/agents/model-auto-binding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AACzC,OAAO,EAAE,8BAA8B,EAAkB,MAAM,yBAAyB,CAAA;AAExF,OAAO,EAAE,mBAAmB,EAAE,MAAM,qBAAqB,CAAA;AACzD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAA;AAChD,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAA;AAEjE,OAAO,EAAE,4BAA4B,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAA;AAEnG,MAAM,UAAU,kBAAkB,CAAC,MAAiB,EAAE,OAAe;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,gBAAgB,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,gBAAgB,IAAI,IAAI,CAAA;AAC7H,CAAC;AAED,2FAA2F;AAC3F,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,MAAiB,EAAE,OAAe,EAAE,SAAiB,EAAE,MAAc;IAC/G,MAAM,YAAY,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,OAAO,CAAC,EAAE,YAAY,CAAA;IAClF,MAAM,UAAU,GAAG,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,YAAY,CAAA;IAClG,IAAI,UAAU,KAAK,KAAK,EAAE,CAAC;QACzB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,wBAAwB,EAAE,EAAE,yCAAyC,CAAC,CAAA;QACpG,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,IAAI,UAAU;QAAE,OAAO,EAAE,GAAG,UAAU,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,MAAM,EAAE,OAAO,CAAC,EAAE,CAAA;IAC/F,MAAM,QAAQ,GAAG,mBAAmB,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IACpD,MAAM,GAAG,GAAG,QAAQ,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAE,CAAC,KAAK,CAAC,OAAO,CAAA;IACvD,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,QAAQ,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,EAAE,OAAO,GAAG,GAAG,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAA;IAC9F,MAAM,OAAO,GAA6B,EAAE,YAAY,EAAE,CAAC,QAAQ,EAAC,MAAM,EAAC,OAAO,EAAC,YAAY,EAAC,UAAU,CAAC,EAAE,WAAW,EAAE,CAAC,SAAS,EAAC,aAAa,EAAC,cAAc,CAAC,EAAE,CAAA;IACpK,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,yBAAyB,CAAC,IAAI,CAAC,OAAO,CAAC;QAAE,OAAO,SAAS,CAAA;IACpF,MAAM,QAAQ,GAAG,8BAA8B,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,EAAC,SAAS,EAAC,EAAE,EAAE;QAC9F,MAAM,QAAQ,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,IAAI,CAAC,GAAG,EAAC,SAAS,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,IAAI,CAAC,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAA;QAChL,MAAM,MAAM,GAAG,YAAY,CAAC,EAAC,MAAM,EAAC,EAAC,OAAO,EAAC,SAAS,EAAC,SAAS,EAAC,MAAM,EAAC,EAAE,EAAC,QAAQ,EAAC,SAAS,EAAC,MAAM,EAAC,EAAE,EAAC,EAAoB,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC,cAAc,CAAC,CAAC,EAAE,CAAA;QACjM,4EAA4E;QAC5E,OAAO,MAAM,KAAK,OAAO,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,CAAA;IAC5G,CAAC,CAAC,CAAA;IACF,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC1B,MAAM,CAAC,IAAI,CAAC,EAAC,OAAO,EAAC,YAAY,EAAC,QAAQ,CAAC,MAAM,EAAC,EAAE,wFAAwF,CAAC,CAAA;QAC7I,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC,MAAM,CAAA;IAClC,MAAM,QAAQ,GAAG,GAAG,qBAAqB,CAAC,OAAO,CAAC,mCAAmC,CAAA;IACrF,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,CAAA;IACrC,IAAI,WAAW,CAAC,QAAQ,KAAK,QAAQ,IAAI,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,QAAQ,IAAI,WAAW,CAAC,IAAI;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;IAC1J,MAAM,IAAI,GAAG,SAAS,GAAG,SAAS,CAAA;IAClC,IAAI,MAAc,CAAA;IAClB,IAAI,CAAC;QAAC,MAAM,GAAG,CAAC,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;IAAC,CAAC;IAChE,OAAO,CAAK,EAAE,CAAC;QACb,IAAG,CAAC,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,CAAC,CAAA;QAC/B,MAAM,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAA;QACxC,IAAI,CAAC;YAAC,MAAM,4BAA4B,CAAC,IAAI,EAAE,MAAM,CAAC,CAAA;QAAC,CAAC;QACxD,OAAM,CAAK,EAAE,CAAC;YAAC,IAAG,CAAC,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,CAAC,CAAC;YAAC,MAAM,GAAG,CAAC,MAAM,0BAA0B,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;QAAC,CAAC;IAC5G,CAAC;IACD,IAAG,CAAC,gBAAgB,CAAC,IAAI,CAAC,MAAM,CAAC;QAAC,MAAM,IAAI,KAAK,CAAC,6BAA6B,CAAC,CAAA;IAChF,OAAO,EAAC,QAAQ,EAAC,QAAQ,EAAC,OAAO,CAAC,SAAS,EAAC,YAAY,EAAC,MAAM,EAAC,MAAM,EAAC,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,OAAO,CAAC,QAAQ,CAAC,EAAC,OAAO,CAAC,CAAC,CAAC,EAAC,gBAAgB,EAAC,kBAAkB,CAAC,MAAM,EAAC,OAAO,CAAC,EAAC,CAAA;AAC1K,CAAC"}

package/dist/agents/model-control-files.d.ts

@@ -0,0 +1,5 @@
+export declare function ensureSecureModelControlDirectory(path: string): Promise<void>;
+export declare function readSecureModelControlFile(path: string): Promise<string>;
+export declare function createSecureModelControlFile(path: string, contents: string): Promise<void>;
+export declare function writeSecureModelControlFile(path: string, contents: string): Promise<void>;
+//# sourceMappingURL=model-control-files.d.ts.map

package/dist/agents/model-control-files.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-control-files.d.ts","sourceRoot":"","sources":["../../src/agents/model-control-files.ts"],"names":[],"mappings":"AAWA,wBAAsB,iCAAiC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CASnF;AAWD,wBAAsB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS9E;AAOD,wBAAsB,4BAA4B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAYhG;AAED,wBAAsB,2BAA2B,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAwB/F"}

package/dist/agents/model-control-files.js

@@ -0,0 +1,101 @@
+import { constants } from 'node:fs';
+import { lstat, mkdir, open, realpath, rename, unlink } from 'node:fs/promises';
+import { dirname, resolve } from 'node:path';
+import { randomUUID } from 'node:crypto';
+const MAX_MODEL_CONTROL_FILE_BYTES = 64 * 1024;
+function expectedUid() {
+    return typeof process.geteuid === 'function' ? process.geteuid() : typeof process.getuid === 'function' ? process.getuid() : undefined;
+}
+export async function ensureSecureModelControlDirectory(path) {
+    const directory = resolve(path);
+    await mkdir(directory, { recursive: true, mode: 0o700 });
+    const info = await lstat(directory);
+    if (!info.isDirectory() || info.isSymbolicLink())
+        throw new Error('INSECURE_MODEL_CONTROL_DIRECTORY');
+    const uid = expectedUid();
+    if (uid !== undefined && info.uid !== uid)
+        throw new Error('INSECURE_MODEL_CONTROL_DIRECTORY_OWNER');
+    if ((info.mode & 0o022) !== 0)
+        throw new Error('INSECURE_MODEL_CONTROL_DIRECTORY_MODE');
+    if (await realpath(directory) !== directory)
+        throw new Error('INSECURE_MODEL_CONTROL_DIRECTORY_PATH');
+}
+async function validateOpenFile(file) {
+    const info = await file.stat();
+    if (!info.isFile() || info.isSymbolicLink())
+        throw new Error('INSECURE_MODEL_CONTROL_FILE_TYPE');
+    const uid = expectedUid();
+    if (uid !== undefined && info.uid !== uid)
+        throw new Error('INSECURE_MODEL_CONTROL_FILE_OWNER');
+    if ((info.mode & 0o777) !== 0o600)
+        throw new Error('INSECURE_MODEL_CONTROL_FILE_MODE');
+    if (info.size > MAX_MODEL_CONTROL_FILE_BYTES)
+        throw new Error('MODEL_CONTROL_FILE_TOO_LARGE');
+}
+export async function readSecureModelControlFile(path) {
+    await ensureSecureModelControlDirectory(dirname(path));
+    const file = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+    try {
+        await validateOpenFile(file);
+        return await file.readFile('utf8');
+    }
+    finally {
+        await file.close();
+    }
+}
+async function syncDirectory(path) {
+    const directory = await open(path, constants.O_RDONLY | constants.O_DIRECTORY | constants.O_NOFOLLOW);
+    try {
+        await directory.sync();
+    }
+    finally {
+        await directory.close();
+    }
+}
+export async function createSecureModelControlFile(path, contents) {
+    await ensureSecureModelControlDirectory(dirname(path));
+    const file = await open(path, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        await validateOpenFile(file);
+        await file.writeFile(contents);
+        await validateOpenFile(file);
+        await file.sync();
+    }
+    finally {
+        await file.close();
+    }
+    await syncDirectory(dirname(path));
+}
+export async function writeSecureModelControlFile(path, contents) {
+    await ensureSecureModelControlDirectory(dirname(path));
+    try {
+        const existing = await open(path, constants.O_RDONLY | constants.O_NOFOLLOW);
+        try {
+            await validateOpenFile(existing);
+        }
+        finally {
+            await existing.close();
+        }
+    }
+    catch (error) {
+        if (error?.code !== 'ENOENT')
+            throw error;
+    }
+    const temporaryPath = `${path}.${randomUUID()}.tmp`;
+    const file = await open(temporaryPath, constants.O_WRONLY | constants.O_CREAT | constants.O_EXCL | constants.O_NOFOLLOW, 0o600);
+    try {
+        await validateOpenFile(file);
+        await file.writeFile(contents);
+        await validateOpenFile(file);
+        await file.sync();
+    }
+    catch (error) {
+        await file.close().catch(() => undefined);
+        await unlink(temporaryPath).catch(() => undefined);
+        throw error;
+    }
+    await file.close();
+    await rename(temporaryPath, path);
+    await syncDirectory(dirname(path));
+}
+//# sourceMappingURL=model-control-files.js.map

package/dist/agents/model-control-files.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-control-files.js","sourceRoot":"","sources":["../../src/agents/model-control-files.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAA;AACnC,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,kBAAkB,CAAA;AAC/E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAA;AAC5C,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAExC,MAAM,4BAA4B,GAAG,EAAE,GAAG,IAAI,CAAA;AAE9C,SAAS,WAAW;IAClB,OAAO,OAAO,OAAO,CAAC,OAAO,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAA;AACxI,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iCAAiC,CAAC,IAAY;IAClE,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/B,MAAM,KAAK,CAAC,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAA;IACxD,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,CAAA;IACnC,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACrG,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;IACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAA;IACpG,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;IACvF,IAAI,MAAM,QAAQ,CAAC,SAAS,CAAC,KAAK,SAAS;QAAE,MAAM,IAAI,KAAK,CAAC,uCAAuC,CAAC,CAAA;AACvG,CAAC;AAED,KAAK,UAAU,gBAAgB,CAAC,IAAsC;IACpE,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IAC9B,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,CAAC,cAAc,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IAChG,MAAM,GAAG,GAAG,WAAW,EAAE,CAAA;IACzB,IAAI,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,GAAG;QAAE,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAA;IAC/F,IAAI,CAAC,IAAI,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAA;IACtF,IAAI,IAAI,CAAC,IAAI,GAAG,4BAA4B;QAAE,MAAM,IAAI,KAAK,CAAC,8BAA8B,CAAC,CAAA;AAC/F,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAAC,IAAY;IAC3D,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACxE,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC5B,OAAO,MAAM,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAA;IACpC,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAY;IACvC,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,WAAW,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;IACrG,IAAI,CAAC;QAAC,MAAM,SAAS,CAAC,IAAI,EAAE,CAAA;IAAC,CAAC;YAAS,CAAC;QAAC,MAAM,SAAS,CAAC,KAAK,EAAE,CAAA;IAAC,CAAC;AACpE,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,4BAA4B,CAAC,IAAY,EAAE,QAAgB;IAC/E,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACtD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IACtH,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC9B,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;YAAS,CAAC;QACT,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IACpB,CAAC;IACD,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;AACpC,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,2BAA2B,CAAC,IAAY,EAAE,QAAgB;IAC9E,MAAM,iCAAiC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;IACtD,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,UAAU,CAAC,CAAA;QAC5E,IAAI,CAAC;YAAC,MAAM,gBAAgB,CAAC,QAAQ,CAAC,CAAA;QAAC,CAAC;gBAAS,CAAC;YAAC,MAAM,QAAQ,CAAC,KAAK,EAAE,CAAA;QAAC,CAAC;IAC7E,CAAC;IAAC,OAAO,KAAU,EAAE,CAAC;QACpB,IAAI,KAAK,EAAE,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAA;IAC3C,CAAC;IAED,MAAM,aAAa,GAAG,GAAG,IAAI,IAAI,UAAU,EAAE,MAAM,CAAA;IACnD,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,QAAQ,GAAG,SAAS,CAAC,OAAO,GAAG,SAAS,CAAC,MAAM,GAAG,SAAS,CAAC,UAAU,EAAE,KAAK,CAAC,CAAA;IAC/H,IAAI,CAAC;QACH,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAA;QAC9B,MAAM,gBAAgB,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,IAAI,CAAC,IAAI,EAAE,CAAA;IACnB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QACzC,MAAM,MAAM,CAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAA;QAClD,MAAM,KAAK,CAAA;IACb,CAAC;IACD,MAAM,IAAI,CAAC,KAAK,EAAE,CAAA;IAClB,MAAM,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAA;IACjC,MAAM,aAAa,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAA;AACpC,CAAC"}

package/dist/agents/model-controller.d.ts

@@ -1,3 +1,4 @@
+import type { Logger } from '../types/index.js';
 import type { CliSessionStore } from './cli-session-store.js';
 export interface ModelControlConfig {
     allowModelSwitch?: boolean;
@@ -6,6 +7,18 @@ export interface ModelControlConfig {
     deviceSecret: string;
     models: string[];
 }
+interface ModelControllerDependencies {
+    fetch?: typeof fetch;
+    now?: () => number;
+    random?: () => number;
+    setTimeout?: typeof setTimeout;
+    clearTimeout?: typeof clearTimeout;
+    pollIntervalMs?: number;
+    baseBackoffMs?: number;
+    maxBackoffMs?: number;
+    requestTimeoutMs?: number;
+}
+export declare const MODEL_CONTROL_MAX_RESPONSE_BYTES: number;
 /** Agent-scoped durable overlay. No context or session identifiers are rewritten. */
 export declare class ModelController {
     private config;
@@ -13,20 +26,44 @@ export declare class ModelController {
     private initialModel;
     private sessions;
     private provider;
+    private logger?;
     private connectionId;
     private timer?;
-    private busy;
+    private inFlight?;
     private ready;
     private lastSeen;
     private stopped;
+    private started;
+    private failures;
+    private availability;
     private state?;
     private loaded;
-    constructor(config: ModelControlConfig, path: string, initialModel: string, sessions: CliSessionStore, provider?: 'claude-cli' | 'codex-cli');
+    private loadPromise?;
+    private readonly fetchFn;
+    private readonly now;
+    private readonly random;
+    private readonly setTimer;
+    private readonly clearTimer;
+    private readonly pollIntervalMs;
+    private readonly baseBackoffMs;
+    private readonly maxBackoffMs;
+    private readonly requestTimeoutMs;
+    constructor(config: ModelControlConfig, path: string, initialModel: string, sessions: CliSessionStore, provider?: 'claude-cli' | 'codex-cli', logger?: Pick<Logger, "info" | "warn"> | undefined, dependencies?: ModelControllerDependencies);
     setAllowModelSwitch(allowed: boolean): void;
     start(): void;
     stop(): void;
     modelAtStart(): Promise<string>;
+    private markUnavailable;
+    private markAvailable;
     private save;
+    private ensureLoaded;
+    private schedule;
+    private retryDelay;
+    private runScheduled;
     tick(): Promise<void>;
+    private runSingleFlight;
+    private parseResponse;
+    private performTick;
 }
+export {};
 //# sourceMappingURL=model-controller.d.ts.map

package/dist/agents/model-controller.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"model-controller.d.ts","sourceRoot":"","sources":["../../src/agents/model-controller.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAE7D,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAMD,qFAAqF;AACrF,qBAAa,eAAe;IASd,OAAO,CAAC,MAAM;IAAsB,OAAO,CAAC,IAAI;IAAU,OAAO,CAAC,YAAY;IAAU,OAAO,CAAC,QAAQ;IAAmB,OAAO,CAAC,QAAQ;IARvJ,OAAO,CAAC,YAAY,CAAe;IACnC,OAAO,CAAC,KAAK,CAAC,CAAgC;IAC9C,OAAO,CAAC,IAAI,CAAQ;IACpB,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,QAAQ,CAAI;IACpB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,KAAK,CAAC,CAAY;IAC1B,OAAO,CAAC,MAAM,CAAQ;gBACF,MAAM,EAAE,kBAAkB,EAAU,IAAI,EAAE,MAAM,EAAU,YAAY,EAAE,MAAM,EAAU,QAAQ,EAAE,eAAe,EAAU,QAAQ,GAAE,YAAY,GAAG,WAA0B;IAClM,mBAAmB,CAAC,OAAO,EAAE,OAAO;IACpC,KAAK;IACL,IAAI;IACE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;YAOvB,IAAI;IAUZ,IAAI;CA+CX"}
+{"version":3,"file":"model-controller.d.ts","sourceRoot":"","sources":["../../src/agents/model-controller.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,mBAAmB,CAAA;AAC/C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,wBAAwB,CAAA;AAO7D,MAAM,WAAW,kBAAkB;IACjC,gBAAgB,CAAC,EAAE,OAAO,CAAA;IAC1B,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAMD,UAAU,2BAA2B;IACnC,KAAK,CAAC,EAAE,OAAO,KAAK,CAAA;IACpB,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,MAAM,CAAA;IACrB,UAAU,CAAC,EAAE,OAAO,UAAU,CAAA;IAC9B,YAAY,CAAC,EAAE,OAAO,YAAY,CAAA;IAClC,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,eAAO,MAAM,gCAAgC,QAAY,CAAA;AAkBzD,qFAAqF;AACrF,qBAAa,eAAe;IAwBxB,OAAO,CAAC,MAAM;IACd,OAAO,CAAC,IAAI;IACZ,OAAO,CAAC,YAAY;IACpB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,QAAQ;IAChB,OAAO,CAAC,MAAM,CAAC;IA5BjB,OAAO,CAAC,YAAY,CAAuB;IAC3C,OAAO,CAAC,KAAK,CAAC,CAA+B;IAC7C,OAAO,CAAC,QAAQ,CAAC,CAAkB;IACnC,OAAO,CAAC,KAAK,CAAQ;IACrB,OAAO,CAAC,QAAQ,CAAI;IACpB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,OAAO,CAAQ;IACvB,OAAO,CAAC,QAAQ,CAAI;IACpB,OAAO,CAAC,YAAY,CAAqD;IACzE,OAAO,CAAC,KAAK,CAAC,CAAY;IAC1B,OAAO,CAAC,MAAM,CAAQ;IACtB,OAAO,CAAC,WAAW,CAAC,CAAe;IACnC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAc;IACtC,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAc;IAClC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAc;IACrC,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAmB;IAC5C,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;IAChD,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAQ;IACvC,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAQ;IACtC,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAQ;IACrC,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAQ;gBAG/B,MAAM,EAAE,kBAAkB,EAC1B,IAAI,EAAE,MAAM,EACZ,YAAY,EAAE,MAAM,EACpB,QAAQ,EAAE,eAAe,EACzB,QAAQ,GAAE,YAAY,GAAG,WAA0B,EACnD,MAAM,CAAC,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,YAAA,EAC9C,YAAY,GAAE,2BAAgC;IAehD,mBAAmB,CAAC,OAAO,EAAE,OAAO;IAEpC,KAAK;IAOL,IAAI;IAOE,YAAY,IAAI,OAAO,CAAC,MAAM,CAAC;IAUrC,OAAO,CAAC,eAAe;IAMvB,OAAO,CAAC,aAAa;YAMP,IAAI;YAKJ,YAAY;IAwB1B,OAAO,CAAC,QAAQ;IAMhB,OAAO,CAAC,UAAU;YAKJ,YAAY;IAapB,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC;IAE3B,OAAO,CAAC,eAAe;YAMT,aAAa;YAyCb,WAAW;CAyC1B"}

package/dist/agents/model-controller.js

@@ -1,6 +1,22 @@
 import { createHash, randomUUID } from 'node:crypto';
-import { mkdir, open, readFile, rename } from 'node:fs/promises';
-import { dirname } from 'node:path';
+import { createSecureModelControlFile, readSecureModelControlFile, writeSecureModelControlFile, } from './model-control-files.js';
+export const MODEL_CONTROL_MAX_RESPONSE_BYTES = 64 * 1024;
+function parseSavedState(raw, models) {
+    const value = JSON.parse(raw);
+    if (!value || !models.includes(String(value.modelId)) || !Number.isSafeInteger(value.version) || Number(value.version) < 0) {
+        throw new Error('INVALID_MODEL_CONTROL_STATE');
+    }
+    if (value.result) {
+        const result = value.result;
+        if (typeof result.requestId !== 'string' || !['applied', 'failed'].includes(result.state)
+            || !models.includes(result.modelId) || !Number.isSafeInteger(result.version) || result.version < 0) {
+            throw new Error('INVALID_MODEL_CONTROL_STATE');
+        }
+        if (result.modelId !== value.modelId || result.version !== value.version)
+            throw new Error('INVALID_MODEL_CONTROL_STATE');
+    }
+    return value;
+}
 /** Agent-scoped durable overlay. No context or session identifiers are rewritten. */
 export class ModelController {
     config;
@@ -8,97 +24,226 @@ export class ModelController {
     initialModel;
     sessions;
     provider;
+    logger;
     connectionId = randomUUID();
     timer;
-    busy = false;
+    inFlight;
     ready = false;
     lastSeen = 0;
     stopped = false;
+    started = false;
+    failures = 0;
+    availability = 'unknown';
     state;
     loaded = false;
-    constructor(config, path, initialModel, sessions, provider = 'claude-cli') {
+    loadPromise;
+    fetchFn;
+    now;
+    random;
+    setTimer;
+    clearTimer;
+    pollIntervalMs;
+    baseBackoffMs;
+    maxBackoffMs;
+    requestTimeoutMs;
+    constructor(config, path, initialModel, sessions, provider = 'claude-cli', logger, dependencies = {}) {
         this.config = config;
         this.path = path;
         this.initialModel = initialModel;
         this.sessions = sessions;
         this.provider = provider;
+        this.logger = logger;
+        const endpoint = new URL(config.endpoint);
+        if (endpoint.protocol !== 'https:' || endpoint.username || endpoint.password || endpoint.hash)
+            throw new Error('MODEL_CONTROL_HTTPS_REQUIRED');
+        this.fetchFn = dependencies.fetch ?? globalThis.fetch;
+        this.now = dependencies.now ?? Date.now;
+        this.random = dependencies.random ?? Math.random;
+        this.setTimer = dependencies.setTimeout ?? setTimeout;
+        this.clearTimer = dependencies.clearTimeout ?? clearTimeout;
+        this.pollIntervalMs = dependencies.pollIntervalMs ?? 2_000;
+        this.baseBackoffMs = dependencies.baseBackoffMs ?? 2_000;
+        this.maxBackoffMs = dependencies.maxBackoffMs ?? 60_000;
+        this.requestTimeoutMs = dependencies.requestTimeoutMs ?? 8_000;
     }
     setAllowModelSwitch(allowed) { this.config = { ...this.config, allowModelSwitch: allowed }; this.ready = false; }
-    start() { void this.tick(); this.timer = setInterval(() => void this.tick(), 2000); this.timer.unref(); }
-    stop() { this.stopped = true; this.ready = false; clearInterval(this.timer); }
-    async modelAtStart() {
-        for (let i = 0; i < 300 && !this.stopped; i++) {
-            if (this.ready && this.state && Date.now() - this.lastSeen < 20000)
-                return this.state.modelId;
-            await new Promise(resolve => setTimeout(resolve, 200));
-        }
-        throw new Error('MODEL_CONTROL_UNAVAILABLE: model change is awaiting executor confirmation');
+    start() {
+        if (this.started && !this.stopped)
+            return;
+        this.started = true;
+        this.stopped = false;
+        this.schedule(0);
     }
-    async save(state) {
-        await mkdir(dirname(this.path), { recursive: true });
-        const tmp = `${this.path}.${randomUUID()}.tmp`;
-        const file = await open(tmp, 'wx', 0o600);
-        try {
-            await file.writeFile(JSON.stringify(state));
-            await file.sync();
-        }
-        finally {
-            await file.close();
-        }
-        await rename(tmp, this.path);
-        const dir = await open(dirname(this.path), 'r');
+    stop() {
+        this.stopped = true;
+        this.ready = false;
+        if (this.timer)
+            this.clearTimer(this.timer);
+        this.timer = undefined;
+    }
+    async modelAtStart() {
         try {
-            await dir.sync();
+            await this.ensureLoaded();
         }
-        finally {
-            await dir.close();
+        catch {
+            this.markUnavailable('STATE_UNAVAILABLE', 'initial');
+            return this.initialModel;
         }
+        const model = this.state?.modelId ?? this.initialModel;
+        if (this.availability !== 'available' || this.now() - this.lastSeen >= 20_000)
+            this.markUnavailable('SERVICE_UNAVAILABLE', this.state ? 'durable' : 'initial');
+        return model;
+    }
+    markUnavailable(reason, source) {
+        if (this.availability === 'unavailable')
+            return;
+        this.availability = 'unavailable';
+        this.logger?.warn({ event: 'MODEL_CONTROL_AVAILABILITY', state: 'unavailable', reason, source }, 'Model control unavailable; using safe fallback model');
+    }
+    markAvailable() {
+        const recovered = this.availability === 'unavailable';
+        this.availability = 'available';
+        if (recovered)
+            this.logger?.info({ event: 'MODEL_CONTROL_AVAILABILITY', state: 'available' }, 'Model control availability recovered');
+    }
+    async save(state) {
+        await writeSecureModelControlFile(this.path, JSON.stringify(state));
         this.state = state;
     }
-    async tick() {
-        if (this.busy || this.stopped)
+    async ensureLoaded() {
+        if (this.loaded)
             return;
-        this.busy = true;
-        try {
-            if (!this.loaded) {
-                await mkdir(dirname(this.path), { recursive: true });
+        if (this.loadPromise)
+            return this.loadPromise;
+        this.loadPromise = (async () => {
+            try {
+                const connection = JSON.parse(await readSecureModelControlFile(this.path + '.connection'));
+                this.connectionId = String(connection.id ?? '');
+            }
+            catch (error) {
+                if (error?.code !== 'ENOENT')
+                    throw error;
                 try {
-                    this.connectionId = JSON.parse(await readFile(this.path + '.connection', 'utf8')).id;
+                    await createSecureModelControlFile(this.path + '.connection', JSON.stringify({ id: this.connectionId }));
                 }
-                catch (e) {
-                    if (e.code !== 'ENOENT')
-                        throw e;
-                    const f = await open(this.path + '.connection', 'wx', 0o600);
-                    try {
-                        await f.writeFile(JSON.stringify({ id: this.connectionId }));
-                        await f.sync();
-                    }
-                    finally {
-                        await f.close();
-                    }
+                catch (createError) {
+                    if (createError?.code !== 'EEXIST')
+                        throw createError;
+                    const connection = JSON.parse(await readSecureModelControlFile(this.path + '.connection'));
+                    this.connectionId = String(connection.id ?? '');
                 }
-                if (!/^[a-f0-9-]{36}$/.test(this.connectionId))
-                    throw new Error('INVALID_EXECUTOR_CONNECTION');
-                try {
-                    this.state = JSON.parse(await readFile(this.path, 'utf8'));
-                }
-                catch (e) {
-                    if (e.code !== 'ENOENT')
-                        throw e;
+            }
+            if (!/^[a-f0-9-]{36}$/.test(this.connectionId))
+                throw new Error('INVALID_EXECUTOR_CONNECTION');
+            try {
+                this.state = parseSavedState(await readSecureModelControlFile(this.path), this.config.models);
+            }
+            catch (error) {
+                if (error?.code !== 'ENOENT')
+                    throw error;
+            }
+            this.loaded = true;
+        })().finally(() => { this.loadPromise = undefined; });
+        return this.loadPromise;
+    }
+    schedule(delayMs) {
+        if (this.stopped)
+            return;
+        this.timer = this.setTimer(() => void this.runScheduled(), delayMs);
+        this.timer.unref?.();
+    }
+    retryDelay() {
+        const exponential = Math.min(this.maxBackoffMs, this.baseBackoffMs * (2 ** Math.max(0, this.failures - 1)));
+        return Math.min(this.maxBackoffMs, Math.round(exponential * (0.5 + this.random())));
+    }
+    async runScheduled() {
+        if (this.stopped)
+            return;
+        const succeeded = await this.runSingleFlight();
+        if (this.stopped)
+            return;
+        if (succeeded) {
+            this.failures = 0;
+            this.schedule(this.pollIntervalMs);
+        }
+        else {
+            this.failures += 1;
+            this.schedule(this.retryDelay());
+        }
+    }
+    async tick() { await this.runSingleFlight(); }
+    runSingleFlight() {
+        if (this.inFlight)
+            return this.inFlight;
+        this.inFlight = this.performTick().finally(() => { this.inFlight = undefined; });
+        return this.inFlight;
+    }
+    async parseResponse(response) {
+        const declaredHeader = response.headers.get('content-length');
+        if (declaredHeader !== null) {
+            const declaredLength = Number(declaredHeader);
+            if (!/^\d+$/.test(declaredHeader) || !Number.isSafeInteger(declaredLength)) {
+                await response.body?.cancel().catch(() => undefined);
+                throw new Error('INVALID_MODEL_CONTROL_CONTENT_LENGTH');
+            }
+            if (declaredLength > MODEL_CONTROL_MAX_RESPONSE_BYTES) {
+                await response.body?.cancel().catch(() => undefined);
+                throw new Error('MODEL_CONTROL_RESPONSE_TOO_LARGE');
+            }
+        }
+        if (!response.body)
+            throw new Error('INVALID_MODEL_CONTROL_RESPONSE_BODY');
+        const reader = response.body.getReader();
+        const chunks = [];
+        let byteLength = 0;
+        try {
+            while (true) {
+                const { done, value } = await reader.read();
+                if (done)
+                    break;
+                if (!value?.byteLength)
+                    continue;
+                byteLength += value.byteLength;
+                if (byteLength > MODEL_CONTROL_MAX_RESPONSE_BYTES) {
+                    await reader.cancel().catch(() => undefined);
+                    throw new Error('MODEL_CONTROL_RESPONSE_TOO_LARGE');
                 }
-                this.loaded = true;
+                chunks.push(value);
             }
+        }
+        catch (error) {
+            await reader.cancel().catch(() => undefined);
+            throw error;
+        }
+        finally {
+            reader.releaseLock();
+        }
+        const bytes = new Uint8Array(byteLength);
+        let offset = 0;
+        for (const chunk of chunks) {
+            bytes.set(chunk, offset);
+            offset += chunk.byteLength;
+        }
+        return JSON.parse(new TextDecoder().decode(bytes));
+    }
+    async performTick() {
+        if (this.stopped)
+            return false;
+        try {
+            await this.ensureLoaded();
             const capabilityRevision = createHash('sha256').update(JSON.stringify([this.config.models, this.config.allowModelSwitch ?? true])).digest('hex');
-            const response = await fetch(this.config.endpoint, {
-                method: 'POST', headers: { 'content-type': 'application/json', authorization: `Bearer ${this.config.botToken}`, 'X-Model-Device-Secret': this.config.deviceSecret },
+            const response = await this.fetchFn(this.config.endpoint, {
+                method: 'POST',
+                redirect: 'error',
+                headers: { 'content-type': 'application/json', authorization: `Bearer ${this.config.botToken}`, 'X-Model-Device-Secret': this.config.deviceSecret },
                 body: JSON.stringify({ protocolVersion: 2, allowModelSwitch: this.config.allowModelSwitch ?? true, initialModel: this.initialModel, connectionId: this.connectionId, provider: this.provider, models: this.config.models, capabilityRevision, result: this.state?.result }),
-                signal: AbortSignal.timeout(8000),
+                signal: AbortSignal.timeout(this.requestTimeoutMs),
             });
             if (!response.ok) {
                 await response.body?.cancel();
                 throw new Error('MODEL_CONTROL_REJECTED');
             }
-            const r = await response.json();
+            const r = await this.parseResponse(response);
             if (r.protocolVersion !== 2)
                 throw new Error('MODEL_SERVER_UPGRADE_REQUIRED');
             if (!Number.isSafeInteger(r.version) || !this.config.models.includes(r.modelId))
@@ -113,26 +258,26 @@ export class ModelController {
                 throw new Error('MODEL_CONFIGURATION_DRIFT');
             if (current.result)
                 await this.save({ modelId: current.modelId, version: current.version });
-            this.lastSeen = Date.now();
+            this.lastSeen = this.now();
             if (r.command) {
                 this.ready = false;
                 const command = r.command;
-                if (Number(command.expected_version) !== current.version)
+                if (typeof command.id !== 'string' || !command.id || Number(command.expected_version) !== current.version)
                     throw new Error('MODEL_VERSION_CONFLICT');
                 const entries = Object.values(await this.sessions.list());
                 const compatible = this.config.allowModelSwitch !== false && this.config.models.includes(command.target_model) && entries.every(s => !s.provider || (s.provider === this.provider && !!s.cliSessionIds?.[this.provider]));
                 const next = compatible ? { modelId: command.target_model, version: current.version + 1 } : { modelId: current.modelId, version: current.version };
                 await this.save({ ...next, result: { requestId: command.id, state: compatible ? 'applied' : 'failed', ...next } });
-                // Keep the start gate closed until the durable result is acknowledged on the next poll.
             }
             else
                 this.ready = true;
+            this.markAvailable();
+            return true;
         }
         catch {
             this.ready = false;
-        }
-        finally {
-            this.busy = false;
+            this.markUnavailable('POLL_FAILED', this.state ? 'durable' : 'initial');
+            return false;
         }
     }
 }