anypick 1.0.0 → 1.1.1

package/dist/public.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"public.js","names":[],"sources":["../src/public.ts"],"sourcesContent":["import type { AnyPick } from './core/app';\nimport type { AnyPickEventSink } from './core/events';\n\n/** Options accepted by the supported programmatic application factory. */\nexport interface CreateAnyPickAppOptions {\n  /** Data root. Defaults to `~/.anypick` (or `ANYPICK_HOME`). */\n  root?: string;\n  /** Optional sanitized lifecycle-event sink owned by the caller. */\n  events?: AnyPickEventSink;\n}\n\n/**\n * Open a fully initialized AnyPick application.\n *\n * The promise resolves only after schema migration, legacy migration, plugin\n * loading, and startup recovery have completed. The returned facade excludes\n * SQLite, stores, journals, and leases; call `close()` when finished.\n */\nexport async function createAnyPickApp(options: CreateAnyPickAppOptions = {}): Promise<AnyPick> {\n  const { createAppReady } = await import('./core/app');\n  return createAppReady(options);\n}\n\nexport type { AnyPick } from './core/app';\n"],"mappings":";;;;;;;;AAkBA,eAAsB,iBAAiB,UAAmC,CAAC,GAAqB;CAC9F,MAAM,EAAE,mBAAmB,MAAM,OAAO;CACxC,OAAO,eAAe,OAAO;AAC/B"}

package/dist/sources/account-adapters.d.ts

@@ -1,64 +0,0 @@
-/**
- * Account-source adapters — transport classification via transportFor(clientId).
- * Replaces the coarse Provider.supportsProxy flag (spec §20.1).
- */
-import type { Account, AccountMeta, Provider, SourceAdapter, TransportCapability } from '../types.js';
-/** Codex native login: direct for codex client; unsupported for others without proxy. */
-export declare function codexAccountAdapter(account: Account): SourceAdapter;
-/** Claude Code native login: direct only for Claude Code. */
-export declare function claudeAccountAdapter(account: Account): SourceAdapter;
-/** Gemini CLI: direct for gemini client; builtin proxy for Claude/Codex. */
-export declare function geminiAccountAdapter(account: Account): SourceAdapter;
-/** Grok: built-in dual-protocol proxy for Claude/Codex. */
-export declare function grokAccountAdapter(account: Account): SourceAdapter;
-/** OpenCode: built-in Zen/Go proxy for Claude/Codex when API keys present. */
-export declare function opencodeAccountAdapter(account: Account): SourceAdapter;
-/**
- * Kiro: external kirolink proxy (spec §19.5).
- *
- * Classification shares `resolveKiroProxyCommand` with the launcher in
- * `providers/kiro.ts`, so the gate and the spawn can never disagree on a
- * binary name or on an env override. Missing → external_manual_proxy
- * (activation exits 7 before any mutation).
- */
-export declare function kiroAccountAdapter(account: Account, opts?: {
-    findExecutable?: (name: string) => string | null;
-}): SourceAdapter;
-/** How a pool serves a borrowing client, when the provider can proxy at all. */
-export type PoolProxyTransport = Extract<TransportCapability, 'managed_builtin_proxy' | 'managed_external_proxy'>;
-/**
- * Multi-account pool source (opt-in). Same transports as a proxy-capable
- * account for the provider, without native auth write.
- *
- * A pool only ever serves a *borrowing* client through a proxy, so the single
- * axis of variation is which proxy the provider manages — passed in by the
- * provider's own `poolSourceAdapter()` rather than branched on here. Invariant:
- * only `claude` and `codex` accept a source from another provider, so every
- * other client is `unsupported` regardless of the pool.
- */
-export declare function poolAdapterFor(providerId: string, provider: Provider, opts?: {
-    proxyTransport?: PoolProxyTransport;
-}): SourceAdapter;
-/** Generic fallback for unknown providers. */
-export declare function genericAccountAdapter(account: Pick<AccountMeta, 'provider' | 'name'>, provider: Provider): SourceAdapter;
-/**
- * Build a SourceAdapter for a saved account. Providers own their transport
- * policy; core has only a conservative generic fallback for third-party
- * providers that have not implemented the extension contract yet.
- */
-export declare function accountAdapterFor(provider: Provider, account: Account): SourceAdapter;
-/**
- * Build a `SourceAdapter` for a managed proxy endpoint injection.
- *
- * This is the source-layer factory for `RuntimeService.applyProxyEndpoint`,
- * which previously hand-constructed an ad-hoc `SourceAdapter` inline in the
- * core service. Keeping adapter construction here honours the rule that core
- * must never contain client/source-shaped logic. When the real `Provider` is
- * available we delegate to `genericAccountAdapter` so capabilities/transport
- * classification stay consistent with the rest of the system; callers that
- * only have a provider id + name (e.g. ephemeral runs before a snapshot
- * exists) pass `provider: undefined` and get a neutral account adapter whose
- * `transportFor` always reports `managed_builtin_proxy`.
- */
-export declare function proxyEndpointSourceAdapter(providerId: string, accountName: string, provider?: Provider): SourceAdapter;
-//# sourceMappingURL=account-adapters.d.ts.map

package/dist/sources/account-adapters.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"account-adapters.d.ts","sourceRoot":"","sources":["../../src/sources/account-adapters.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,OAAO,EACP,WAAW,EAEX,QAAQ,EACR,aAAa,EAEb,mBAAmB,EACpB,MAAM,UAAU,CAAC;AAqBlB,yFAAyF;AACzF,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAkBnE;AAED,6DAA6D;AAC7D,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAapE;AAED,4EAA4E;AAC5E,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAoBpE;AAED,2DAA2D;AAC3D,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAgBlE;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAgBtE;AAED;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAChC,OAAO,EAAE,OAAO,EAChB,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAA;CAAO,GAC9D,aAAa,CAyBf;AAED,gFAAgF;AAChF,MAAM,MAAM,kBAAkB,GAAG,OAAO,CACtC,mBAAmB,EACnB,uBAAuB,GAAG,wBAAwB,CACnD,CAAC;AAEF;;;;;;;;;GASG;AACH,wBAAgB,cAAc,CAC5B,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,QAAQ,EAClB,IAAI,GAAE;IAAE,cAAc,CAAC,EAAE,kBAAkB,CAAA;CAAO,GACjD,aAAa,CAkBf;AAED,8CAA8C;AAC9C,wBAAgB,qBAAqB,CACnC,OAAO,EAAE,IAAI,CAAC,WAAW,EAAE,UAAU,GAAG,MAAM,CAAC,EAC/C,QAAQ,EAAE,QAAQ,GACjB,aAAa,CAqBf;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,OAAO,GAAG,aAAa,CAKrF;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,MAAM,EAClB,WAAW,EAAE,MAAM,EACnB,QAAQ,CAAC,EAAE,QAAQ,GAClB,aAAa,CAgBf"}

package/dist/sources/account-adapters.js

@@ -1,205 +0,0 @@
-import { providerCanProxy } from "../core/capabilities.js";
-import { accountRef } from "../core/refs.js";
-import { resolveKiroProxyCommand, resolveKiroProxyCommandCached } from "./kiro-proxy-bin.js";
-//#region src/sources/account-adapters.ts
-function baseAccountCapabilities(provider, overrides = {}) {
-	return {
-		sourceKind: "account",
-		provider,
-		nativeClients: [],
-		protocols: ["openai", "anthropic"],
-		canRefresh: false,
-		supportsModelDiscovery: false,
-		requiresNativeAuthWrite: false,
-		...overrides
-	};
-}
-/** Codex native login: direct for codex client; unsupported for others without proxy. */
-function codexAccountAdapter(account) {
-	return {
-		sourceRef: accountRef(account.meta.provider, account.meta.name),
-		capabilities: baseAccountCapabilities("codex", {
-			nativeClients: ["codex"],
-			protocols: ["openai"],
-			canRefresh: true,
-			requiresNativeAuthWrite: true
-		}),
-		transportFor(clientId) {
-			if (clientId === "codex") return "direct";
-			return "unsupported";
-		}
-	};
-}
-/** Claude Code native login: direct only for Claude Code. */
-function claudeAccountAdapter(account) {
-	return {
-		sourceRef: accountRef(account.meta.provider, account.meta.name),
-		capabilities: baseAccountCapabilities("claude", {
-			nativeClients: ["claude"],
-			protocols: ["anthropic"],
-			requiresNativeAuthWrite: true
-		}),
-		transportFor(clientId) {
-			return clientId === "claude" ? "direct" : "unsupported";
-		}
-	};
-}
-/** Gemini CLI: direct for gemini client; builtin proxy for Claude/Codex. */
-function geminiAccountAdapter(account) {
-	return {
-		sourceRef: accountRef(account.meta.provider, account.meta.name),
-		capabilities: baseAccountCapabilities("gemini", {
-			nativeClients: ["gemini"],
-			protocols: ["openai", "anthropic"],
-			canRefresh: false,
-			requiresNativeAuthWrite: true
-		}),
-		transportFor(clientId) {
-			if (clientId === "gemini") return "direct";
-			if (clientId === "claude" || clientId === "codex") return "managed_builtin_proxy";
-			return "unsupported";
-		}
-	};
-}
-/** Grok: built-in dual-protocol proxy for Claude/Codex. */
-function grokAccountAdapter(account) {
-	return {
-		sourceRef: accountRef(account.meta.provider, account.meta.name),
-		capabilities: baseAccountCapabilities("grok", {
-			nativeClients: [],
-			protocols: ["openai", "anthropic"],
-			canRefresh: false
-		}),
-		transportFor(clientId) {
-			if (clientId === "claude" || clientId === "codex") return "managed_builtin_proxy";
-			return "unsupported";
-		}
-	};
-}
-/** OpenCode: built-in Zen/Go proxy for Claude/Codex when API keys present. */
-function opencodeAccountAdapter(account) {
-	return {
-		sourceRef: accountRef(account.meta.provider, account.meta.name),
-		capabilities: baseAccountCapabilities("opencode", {
-			nativeClients: [],
-			protocols: ["openai", "anthropic"],
-			canRefresh: true
-		}),
-		transportFor(clientId) {
-			if (clientId === "claude" || clientId === "codex") return "managed_builtin_proxy";
-			return "unsupported";
-		}
-	};
-}
-/**
-* Kiro: external kirolink proxy (spec §19.5).
-*
-* Classification shares `resolveKiroProxyCommand` with the launcher in
-* `providers/kiro.ts`, so the gate and the spawn can never disagree on a
-* binary name or on an env override. Missing → external_manual_proxy
-* (activation exits 7 before any mutation).
-*/
-function kiroAccountAdapter(account, opts = {}) {
-	return {
-		sourceRef: accountRef(account.meta.provider, account.meta.name),
-		capabilities: baseAccountCapabilities("kiro", {
-			nativeClients: ["kiro"],
-			protocols: ["openai", "anthropic"],
-			canRefresh: false,
-			requiresNativeAuthWrite: true
-		}),
-		transportFor(clientId) {
-			if (clientId === "kiro") return "direct";
-			if (clientId === "claude" || clientId === "codex") return (opts.findExecutable ? resolveKiroProxyCommand({ findExecutable: opts.findExecutable }) : resolveKiroProxyCommandCached()) ? "managed_external_proxy" : "external_manual_proxy";
-			return "unsupported";
-		}
-	};
-}
-/**
-* Multi-account pool source (opt-in). Same transports as a proxy-capable
-* account for the provider, without native auth write.
-*
-* A pool only ever serves a *borrowing* client through a proxy, so the single
-* axis of variation is which proxy the provider manages — passed in by the
-* provider's own `poolSourceAdapter()` rather than branched on here. Invariant:
-* only `claude` and `codex` accept a source from another provider, so every
-* other client is `unsupported` regardless of the pool.
-*/
-function poolAdapterFor(providerId, provider, opts = {}) {
-	const sourceRef = {
-		kind: "account-pool",
-		provider: providerId
-	};
-	const proxyTransport = opts.proxyTransport ?? "managed_builtin_proxy";
-	return {
-		sourceRef,
-		capabilities: baseAccountCapabilities(providerId, {
-			nativeClients: [],
-			protocols: ["openai", "anthropic"],
-			canRefresh: false,
-			requiresNativeAuthWrite: false
-		}),
-		transportFor(clientId) {
-			if (!providerCanProxy(provider)) return "unsupported";
-			return clientId === "claude" || clientId === "codex" ? proxyTransport : "unsupported";
-		}
-	};
-}
-/** Generic fallback for unknown providers. */
-function genericAccountAdapter(account, provider) {
-	return {
-		sourceRef: accountRef(account.provider, account.name),
-		capabilities: baseAccountCapabilities(provider.id, {
-			nativeClients: provider.id === account.provider ? [provider.id] : [],
-			requiresNativeAuthWrite: true
-		}),
-		transportFor(clientId) {
-			if (clientId === provider.id) return "direct";
-			if (providerCanProxy(provider) && (clientId === "claude" || clientId === "codex")) return "managed_builtin_proxy";
-			return "unsupported";
-		}
-	};
-}
-/**
-* Build a SourceAdapter for a saved account. Providers own their transport
-* policy; core has only a conservative generic fallback for third-party
-* providers that have not implemented the extension contract yet.
-*/
-function accountAdapterFor(provider, account) {
-	if (provider.sourceAdapter) return provider.sourceAdapter(account);
-	return genericAccountAdapter(account.meta, provider);
-}
-/**
-* Build a `SourceAdapter` for a managed proxy endpoint injection.
-*
-* This is the source-layer factory for `RuntimeService.applyProxyEndpoint`,
-* which previously hand-constructed an ad-hoc `SourceAdapter` inline in the
-* core service. Keeping adapter construction here honours the rule that core
-* must never contain client/source-shaped logic. When the real `Provider` is
-* available we delegate to `genericAccountAdapter` so capabilities/transport
-* classification stay consistent with the rest of the system; callers that
-* only have a provider id + name (e.g. ephemeral runs before a snapshot
-* exists) pass `provider: undefined` and get a neutral account adapter whose
-* `transportFor` always reports `managed_builtin_proxy`.
-*/
-function proxyEndpointSourceAdapter(providerId, accountName, provider) {
-	if (provider) return genericAccountAdapter({
-		provider: providerId,
-		name: accountName
-	}, provider);
-	return {
-		sourceRef: accountRef(providerId, accountName),
-		capabilities: baseAccountCapabilities(providerId, {
-			nativeClients: [],
-			protocols: ["openai", "anthropic"],
-			requiresNativeAuthWrite: false
-		}),
-		transportFor(_clientId) {
-			return "managed_builtin_proxy";
-		}
-	};
-}
-//#endregion
-export { accountAdapterFor, claudeAccountAdapter, codexAccountAdapter, geminiAccountAdapter, genericAccountAdapter, grokAccountAdapter, kiroAccountAdapter, opencodeAccountAdapter, poolAdapterFor, proxyEndpointSourceAdapter };
-
-//# sourceMappingURL=account-adapters.js.map

package/dist/sources/account-adapters.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"account-adapters.js","names":[],"sources":["../../src/sources/account-adapters.ts"],"sourcesContent":["/**\n * Account-source adapters — transport classification via transportFor(clientId).\n * Replaces the coarse Provider.supportsProxy flag (spec §20.1).\n */\n\nimport type {\n  Account,\n  AccountMeta,\n  ClientId,\n  Provider,\n  SourceAdapter,\n  SourceCapabilities,\n  TransportCapability,\n} from '../types';\nimport { accountRef } from '../core/refs';\nimport { providerCanProxy } from '../core/capabilities';\nimport { resolveKiroProxyCommand, resolveKiroProxyCommandCached } from './kiro-proxy-bin';\n\nfunction baseAccountCapabilities(\n  provider: string,\n  overrides: Partial<SourceCapabilities> = {},\n): SourceCapabilities {\n  return {\n    sourceKind: 'account',\n    provider,\n    nativeClients: [],\n    protocols: ['openai', 'anthropic'],\n    canRefresh: false,\n    supportsModelDiscovery: false,\n    requiresNativeAuthWrite: false,\n    ...overrides,\n  };\n}\n\n/** Codex native login: direct for codex client; unsupported for others without proxy. */\nexport function codexAccountAdapter(account: Account): SourceAdapter {\n  const sourceRef = accountRef(account.meta.provider, account.meta.name);\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities('codex', {\n      nativeClients: ['codex'],\n      protocols: ['openai'],\n      canRefresh: true,\n      requiresNativeAuthWrite: true,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      if (clientId === 'codex') {\n        return 'direct';\n      }\n      // Codex native auth is not a gateway for Claude/Kiro\n      return 'unsupported';\n    },\n  };\n}\n\n/** Claude Code native login: direct only for Claude Code. */\nexport function claudeAccountAdapter(account: Account): SourceAdapter {\n  const sourceRef = accountRef(account.meta.provider, account.meta.name);\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities('claude', {\n      nativeClients: ['claude'],\n      protocols: ['anthropic'],\n      requiresNativeAuthWrite: true,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      return clientId === 'claude' ? 'direct' : 'unsupported';\n    },\n  };\n}\n\n/** Gemini CLI: direct for gemini client; builtin proxy for Claude/Codex. */\nexport function geminiAccountAdapter(account: Account): SourceAdapter {\n  const sourceRef = accountRef(account.meta.provider, account.meta.name);\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities('gemini', {\n      nativeClients: ['gemini'],\n      protocols: ['openai', 'anthropic'],\n      canRefresh: false,\n      requiresNativeAuthWrite: true,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      if (clientId === 'gemini') {\n        return 'direct';\n      }\n      if (clientId === 'claude' || clientId === 'codex') {\n        return 'managed_builtin_proxy';\n      }\n      return 'unsupported';\n    },\n  };\n}\n\n/** Grok: built-in dual-protocol proxy for Claude/Codex. */\nexport function grokAccountAdapter(account: Account): SourceAdapter {\n  const sourceRef = accountRef(account.meta.provider, account.meta.name);\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities('grok', {\n      nativeClients: [],\n      protocols: ['openai', 'anthropic'],\n      canRefresh: false,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      if (clientId === 'claude' || clientId === 'codex') {\n        return 'managed_builtin_proxy';\n      }\n      return 'unsupported';\n    },\n  };\n}\n\n/** OpenCode: built-in Zen/Go proxy for Claude/Codex when API keys present. */\nexport function opencodeAccountAdapter(account: Account): SourceAdapter {\n  const sourceRef = accountRef(account.meta.provider, account.meta.name);\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities('opencode', {\n      nativeClients: [],\n      protocols: ['openai', 'anthropic'],\n      canRefresh: true,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      if (clientId === 'claude' || clientId === 'codex') {\n        return 'managed_builtin_proxy';\n      }\n      return 'unsupported';\n    },\n  };\n}\n\n/**\n * Kiro: external kirolink proxy (spec §19.5).\n *\n * Classification shares `resolveKiroProxyCommand` with the launcher in\n * `providers/kiro.ts`, so the gate and the spawn can never disagree on a\n * binary name or on an env override. Missing → external_manual_proxy\n * (activation exits 7 before any mutation).\n */\nexport function kiroAccountAdapter(\n  account: Account,\n  opts: { findExecutable?: (name: string) => string | null } = {},\n): SourceAdapter {\n  const sourceRef = accountRef(account.meta.provider, account.meta.name);\n\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities('kiro', {\n      nativeClients: ['kiro'],\n      protocols: ['openai', 'anthropic'],\n      canRefresh: false,\n      requiresNativeAuthWrite: true,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      if (clientId === 'kiro') {\n        return 'direct';\n      }\n      if (clientId === 'claude' || clientId === 'codex') {\n        // The test seam bypasses env-driven discovery; the live path caches.\n        const command = opts.findExecutable\n          ? resolveKiroProxyCommand({ findExecutable: opts.findExecutable })\n          : resolveKiroProxyCommandCached();\n        return command ? 'managed_external_proxy' : 'external_manual_proxy';\n      }\n      return 'unsupported';\n    },\n  };\n}\n\n/** How a pool serves a borrowing client, when the provider can proxy at all. */\nexport type PoolProxyTransport = Extract<\n  TransportCapability,\n  'managed_builtin_proxy' | 'managed_external_proxy'\n>;\n\n/**\n * Multi-account pool source (opt-in). Same transports as a proxy-capable\n * account for the provider, without native auth write.\n *\n * A pool only ever serves a *borrowing* client through a proxy, so the single\n * axis of variation is which proxy the provider manages — passed in by the\n * provider's own `poolSourceAdapter()` rather than branched on here. Invariant:\n * only `claude` and `codex` accept a source from another provider, so every\n * other client is `unsupported` regardless of the pool.\n */\nexport function poolAdapterFor(\n  providerId: string,\n  provider: Provider,\n  opts: { proxyTransport?: PoolProxyTransport } = {},\n): SourceAdapter {\n  const sourceRef = { kind: 'account-pool' as const, provider: providerId };\n  const proxyTransport = opts.proxyTransport ?? 'managed_builtin_proxy';\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities(providerId, {\n      nativeClients: [],\n      protocols: ['openai', 'anthropic'],\n      canRefresh: false,\n      requiresNativeAuthWrite: false,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      if (!providerCanProxy(provider)) {\n        return 'unsupported';\n      }\n      return clientId === 'claude' || clientId === 'codex' ? proxyTransport : 'unsupported';\n    },\n  };\n}\n\n/** Generic fallback for unknown providers. */\nexport function genericAccountAdapter(\n  account: Pick<AccountMeta, 'provider' | 'name'>,\n  provider: Provider,\n): SourceAdapter {\n  const sourceRef = accountRef(account.provider, account.name);\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities(provider.id, {\n      nativeClients: provider.id === account.provider ? [provider.id] : [],\n      requiresNativeAuthWrite: true,\n    }),\n    transportFor(clientId: ClientId): TransportCapability {\n      if (clientId === provider.id) {\n        return 'direct';\n      }\n      // Cross-provider account transport is deliberately narrow. The client\n      // registry says what exists; this adapter remains the authority for what\n      // is safe to pair (ADR 0011 / account-adapter invariant).\n      if (providerCanProxy(provider) && (clientId === 'claude' || clientId === 'codex')) {\n        return 'managed_builtin_proxy';\n      }\n      return 'unsupported';\n    },\n  };\n}\n\n/**\n * Build a SourceAdapter for a saved account. Providers own their transport\n * policy; core has only a conservative generic fallback for third-party\n * providers that have not implemented the extension contract yet.\n */\nexport function accountAdapterFor(provider: Provider, account: Account): SourceAdapter {\n  if (provider.sourceAdapter) {\n    return provider.sourceAdapter(account);\n  }\n  return genericAccountAdapter(account.meta, provider);\n}\n\n/**\n * Build a `SourceAdapter` for a managed proxy endpoint injection.\n *\n * This is the source-layer factory for `RuntimeService.applyProxyEndpoint`,\n * which previously hand-constructed an ad-hoc `SourceAdapter` inline in the\n * core service. Keeping adapter construction here honours the rule that core\n * must never contain client/source-shaped logic. When the real `Provider` is\n * available we delegate to `genericAccountAdapter` so capabilities/transport\n * classification stay consistent with the rest of the system; callers that\n * only have a provider id + name (e.g. ephemeral runs before a snapshot\n * exists) pass `provider: undefined` and get a neutral account adapter whose\n * `transportFor` always reports `managed_builtin_proxy`.\n */\nexport function proxyEndpointSourceAdapter(\n  providerId: string,\n  accountName: string,\n  provider?: Provider,\n): SourceAdapter {\n  if (provider) {\n    return genericAccountAdapter({ provider: providerId, name: accountName }, provider);\n  }\n  const sourceRef = accountRef(providerId, accountName);\n  return {\n    sourceRef,\n    capabilities: baseAccountCapabilities(providerId, {\n      nativeClients: [],\n      protocols: ['openai', 'anthropic'],\n      requiresNativeAuthWrite: false,\n    }),\n    transportFor(_clientId: ClientId): TransportCapability {\n      return 'managed_builtin_proxy';\n    },\n  };\n}\n"],"mappings":";;;;AAkBA,SAAS,wBACP,UACA,YAAyC,CAAC,GACtB;CACpB,OAAO;EACL,YAAY;EACZ;EACA,eAAe,CAAC;EAChB,WAAW,CAAC,UAAU,WAAW;EACjC,YAAY;EACZ,wBAAwB;EACxB,yBAAyB;EACzB,GAAG;CACL;AACF;;AAGA,SAAgB,oBAAoB,SAAiC;CAEnE,OAAO;EACL,WAFgB,WAAW,QAAQ,KAAK,UAAU,QAAQ,KAAK,IAE/D;EACA,cAAc,wBAAwB,SAAS;GAC7C,eAAe,CAAC,OAAO;GACvB,WAAW,CAAC,QAAQ;GACpB,YAAY;GACZ,yBAAyB;EAC3B,CAAC;EACD,aAAa,UAAyC;GACpD,IAAI,aAAa,SACf,OAAO;GAGT,OAAO;EACT;CACF;AACF;;AAGA,SAAgB,qBAAqB,SAAiC;CAEpE,OAAO;EACL,WAFgB,WAAW,QAAQ,KAAK,UAAU,QAAQ,KAAK,IAE/D;EACA,cAAc,wBAAwB,UAAU;GAC9C,eAAe,CAAC,QAAQ;GACxB,WAAW,CAAC,WAAW;GACvB,yBAAyB;EAC3B,CAAC;EACD,aAAa,UAAyC;GACpD,OAAO,aAAa,WAAW,WAAW;EAC5C;CACF;AACF;;AAGA,SAAgB,qBAAqB,SAAiC;CAEpE,OAAO;EACL,WAFgB,WAAW,QAAQ,KAAK,UAAU,QAAQ,KAAK,IAE/D;EACA,cAAc,wBAAwB,UAAU;GAC9C,eAAe,CAAC,QAAQ;GACxB,WAAW,CAAC,UAAU,WAAW;GACjC,YAAY;GACZ,yBAAyB;EAC3B,CAAC;EACD,aAAa,UAAyC;GACpD,IAAI,aAAa,UACf,OAAO;GAET,IAAI,aAAa,YAAY,aAAa,SACxC,OAAO;GAET,OAAO;EACT;CACF;AACF;;AAGA,SAAgB,mBAAmB,SAAiC;CAElE,OAAO;EACL,WAFgB,WAAW,QAAQ,KAAK,UAAU,QAAQ,KAAK,IAE/D;EACA,cAAc,wBAAwB,QAAQ;GAC5C,eAAe,CAAC;GAChB,WAAW,CAAC,UAAU,WAAW;GACjC,YAAY;EACd,CAAC;EACD,aAAa,UAAyC;GACpD,IAAI,aAAa,YAAY,aAAa,SACxC,OAAO;GAET,OAAO;EACT;CACF;AACF;;AAGA,SAAgB,uBAAuB,SAAiC;CAEtE,OAAO;EACL,WAFgB,WAAW,QAAQ,KAAK,UAAU,QAAQ,KAAK,IAE/D;EACA,cAAc,wBAAwB,YAAY;GAChD,eAAe,CAAC;GAChB,WAAW,CAAC,UAAU,WAAW;GACjC,YAAY;EACd,CAAC;EACD,aAAa,UAAyC;GACpD,IAAI,aAAa,YAAY,aAAa,SACxC,OAAO;GAET,OAAO;EACT;CACF;AACF;;;;;;;;;AAUA,SAAgB,mBACd,SACA,OAA6D,CAAC,GAC/C;CAGf,OAAO;EACL,WAHgB,WAAW,QAAQ,KAAK,UAAU,QAAQ,KAAK,IAG/D;EACA,cAAc,wBAAwB,QAAQ;GAC5C,eAAe,CAAC,MAAM;GACtB,WAAW,CAAC,UAAU,WAAW;GACjC,YAAY;GACZ,yBAAyB;EAC3B,CAAC;EACD,aAAa,UAAyC;GACpD,IAAI,aAAa,QACf,OAAO;GAET,IAAI,aAAa,YAAY,aAAa,SAKxC,QAHgB,KAAK,iBACjB,wBAAwB,EAAE,gBAAgB,KAAK,eAAe,CAAC,IAC/D,8BAA8B,KACjB,2BAA2B;GAE9C,OAAO;EACT;CACF;AACF;;;;;;;;;;;AAkBA,SAAgB,eACd,YACA,UACA,OAAgD,CAAC,GAClC;CACf,MAAM,YAAY;EAAE,MAAM;EAAyB,UAAU;CAAW;CACxE,MAAM,iBAAiB,KAAK,kBAAkB;CAC9C,OAAO;EACL;EACA,cAAc,wBAAwB,YAAY;GAChD,eAAe,CAAC;GAChB,WAAW,CAAC,UAAU,WAAW;GACjC,YAAY;GACZ,yBAAyB;EAC3B,CAAC;EACD,aAAa,UAAyC;GACpD,IAAI,CAAC,iBAAiB,QAAQ,GAC5B,OAAO;GAET,OAAO,aAAa,YAAY,aAAa,UAAU,iBAAiB;EAC1E;CACF;AACF;;AAGA,SAAgB,sBACd,SACA,UACe;CAEf,OAAO;EACL,WAFgB,WAAW,QAAQ,UAAU,QAAQ,IAErD;EACA,cAAc,wBAAwB,SAAS,IAAI;GACjD,eAAe,SAAS,OAAO,QAAQ,WAAW,CAAC,SAAS,EAAE,IAAI,CAAC;GACnE,yBAAyB;EAC3B,CAAC;EACD,aAAa,UAAyC;GACpD,IAAI,aAAa,SAAS,IACxB,OAAO;GAKT,IAAI,iBAAiB,QAAQ,MAAM,aAAa,YAAY,aAAa,UACvE,OAAO;GAET,OAAO;EACT;CACF;AACF;;;;;;AAOA,SAAgB,kBAAkB,UAAoB,SAAiC;CACrF,IAAI,SAAS,eACX,OAAO,SAAS,cAAc,OAAO;CAEvC,OAAO,sBAAsB,QAAQ,MAAM,QAAQ;AACrD;;;;;;;;;;;;;;AAeA,SAAgB,2BACd,YACA,aACA,UACe;CACf,IAAI,UACF,OAAO,sBAAsB;EAAE,UAAU;EAAY,MAAM;CAAY,GAAG,QAAQ;CAGpF,OAAO;EACL,WAFgB,WAAW,YAAY,WAEvC;EACA,cAAc,wBAAwB,YAAY;GAChD,eAAe,CAAC;GAChB,WAAW,CAAC,UAAU,WAAW;GACjC,yBAAyB;EAC3B,CAAC;EACD,aAAa,WAA0C;GACrD,OAAO;EACT;CACF;AACF"}

package/dist/sources/gateway-adapters.d.ts

@@ -1,26 +0,0 @@
-/**
- * Gateway-source adapters from RuntimeProfile / catalog metadata.
- * Spec §20.1.2 — transport is source×client, not a boolean.
- */
-import type { CatalogProvider, ClientId, Protocol, RuntimeProfile, SourceAdapter, TransportCapability } from '../types.js';
-import type { ClientRegistry } from '../clients/registry.js';
-/**
- * Classify gateway transport for a client based on declared protocols
- * and catalog provider identity.
- */
-export declare function gatewayTransportFor(clientId: ClientId, protocols: readonly Protocol[], opts: {
-    catalogProvider?: CatalogProvider;
-    clients: Pick<ClientRegistry, 'has' | 'get'>;
-}): TransportCapability;
-export declare function gatewayAdapterFromProfile(profile: RuntimeProfile, opts: {
-    catalogProvider?: CatalogProvider;
-    clients: Pick<ClientRegistry, 'has' | 'get'>;
-}): SourceAdapter;
-export declare function createGatewaySourceAdapter(opts: {
-    name: string;
-    provider: string;
-    protocols: Protocol[];
-    catalogProvider?: CatalogProvider;
-    clients: Pick<ClientRegistry, 'has' | 'get'>;
-}): SourceAdapter;
-//# sourceMappingURL=gateway-adapters.d.ts.map

package/dist/sources/gateway-adapters.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-adapters.d.ts","sourceRoot":"","sources":["../../src/sources/gateway-adapters.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EACV,eAAe,EACf,QAAQ,EACR,QAAQ,EACR,cAAc,EACd,aAAa,EAEb,mBAAmB,EACpB,MAAM,UAAU,CAAC;AAElB,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAe1D;;;GAGG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,QAAQ,EAClB,SAAS,EAAE,SAAS,QAAQ,EAAE,EAC9B,IAAI,EAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,KAAK,CAAC,CAAA;CAAE,GACxF,mBAAmB,CAerB;AAED,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,cAAc,EACvB,IAAI,EAAE;IAAE,eAAe,CAAC,EAAE,eAAe,CAAC;IAAC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,KAAK,CAAC,CAAA;CAAE,GACxF,aAAa,CAwBf;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,QAAQ,EAAE,CAAC;IACtB,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC,OAAO,EAAE,IAAI,CAAC,cAAc,EAAE,KAAK,GAAG,KAAK,CAAC,CAAC;CAC9C,GAAG,aAAa,CAiBhB"}

package/dist/sources/gateway-adapters.js

@@ -1,43 +0,0 @@
-import { gatewayRef } from "../core/refs.js";
-//#region src/sources/gateway-adapters.ts
-function protocolsFromApiStyle(style) {
-	switch (style) {
-		case "openai": return ["openai"];
-		case "anthropic": return ["anthropic"];
-		case "custom": return ["openai", "anthropic"];
-		default: return ["openai"];
-	}
-}
-/**
-* Classify gateway transport for a client based on declared protocols
-* and catalog provider identity.
-*/
-function gatewayTransportFor(clientId, protocols, opts) {
-	if (!opts.catalogProvider || !opts.clients.has(clientId)) return "unsupported";
-	const accepted = opts.clients.get(clientId).capabilities?.acceptedProtocols ?? [];
-	if (!protocols.some((p) => accepted.includes(p))) return "unsupported";
-	return "direct";
-}
-function gatewayAdapterFromProfile(profile, opts) {
-	const sourceRef = gatewayRef(profile.meta.name);
-	const protocols = [opts.catalogProvider?.protocols ?? protocolsFromApiStyle(opts.catalogProvider?.apiStyle ?? "custom")].flat();
-	return {
-		sourceRef,
-		capabilities: {
-			sourceKind: "gateway",
-			provider: profile.meta.provider,
-			nativeClients: [],
-			protocols,
-			canRefresh: false,
-			supportsModelDiscovery: false,
-			requiresNativeAuthWrite: false
-		},
-		transportFor(clientId) {
-			return gatewayTransportFor(clientId, protocols, opts);
-		}
-	};
-}
-//#endregion
-export { gatewayAdapterFromProfile, gatewayTransportFor };
-
-//# sourceMappingURL=gateway-adapters.js.map

package/dist/sources/gateway-adapters.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"gateway-adapters.js","names":[],"sources":["../../src/sources/gateway-adapters.ts"],"sourcesContent":["/**\n * Gateway-source adapters from RuntimeProfile / catalog metadata.\n * Spec §20.1.2 — transport is source×client, not a boolean.\n */\n\nimport type {\n  CatalogProvider,\n  ClientId,\n  Protocol,\n  RuntimeProfile,\n  SourceAdapter,\n  SourceCapabilities,\n  TransportCapability,\n} from '../types';\nimport { gatewayRef } from '../core/refs';\nimport type { ClientRegistry } from '../clients/registry';\n\nfunction protocolsFromApiStyle(style: CatalogProvider['apiStyle']): Protocol[] {\n  switch (style) {\n    case 'openai':\n      return ['openai'];\n    case 'anthropic':\n      return ['anthropic'];\n    case 'custom':\n      return ['openai', 'anthropic'];\n    default:\n      return ['openai'];\n  }\n}\n\n/**\n * Classify gateway transport for a client based on declared protocols\n * and catalog provider identity.\n */\nexport function gatewayTransportFor(\n  clientId: ClientId,\n  protocols: readonly Protocol[],\n  opts: { catalogProvider?: CatalogProvider; clients: Pick<ClientRegistry, 'has' | 'get'> },\n): TransportCapability {\n  // A gateway is direct only when its implementation was registered in this\n  // app instance. Client protocol capabilities come from the client adapter,\n  // not a core-maintained id matrix.\n  if (!opts.catalogProvider || !opts.clients.has(clientId)) {\n    return 'unsupported';\n  }\n  const accepted = opts.clients.get(clientId).capabilities?.acceptedProtocols ?? [];\n\n  const overlap = protocols.some((p) => accepted.includes(p));\n  if (!overlap) {\n    return 'unsupported';\n  }\n\n  return 'direct';\n}\n\nexport function gatewayAdapterFromProfile(\n  profile: RuntimeProfile,\n  opts: { catalogProvider?: CatalogProvider; clients: Pick<ClientRegistry, 'has' | 'get'> },\n): SourceAdapter {\n  const sourceRef = gatewayRef(profile.meta.name);\n  const protocols = [\n    opts.catalogProvider?.protocols ??\n      protocolsFromApiStyle(opts.catalogProvider?.apiStyle ?? 'custom'),\n  ].flat();\n\n  const capabilities: SourceCapabilities = {\n    sourceKind: 'gateway',\n    provider: profile.meta.provider,\n    nativeClients: [],\n    protocols,\n    canRefresh: false,\n    supportsModelDiscovery: false,\n    requiresNativeAuthWrite: false,\n  };\n\n  return {\n    sourceRef,\n    capabilities,\n    transportFor(clientId: ClientId): TransportCapability {\n      return gatewayTransportFor(clientId, protocols, opts);\n    },\n  };\n}\n\nexport function createGatewaySourceAdapter(opts: {\n  name: string;\n  provider: string;\n  protocols: Protocol[];\n  catalogProvider?: CatalogProvider;\n  clients: Pick<ClientRegistry, 'has' | 'get'>;\n}): SourceAdapter {\n  const sourceRef = gatewayRef(opts.name);\n  return {\n    sourceRef,\n    capabilities: {\n      sourceKind: 'gateway',\n      provider: opts.provider,\n      nativeClients: [],\n      protocols: opts.protocols,\n      canRefresh: false,\n      supportsModelDiscovery: false,\n      requiresNativeAuthWrite: false,\n    },\n    transportFor(clientId: ClientId): TransportCapability {\n      return gatewayTransportFor(clientId, opts.protocols, opts);\n    },\n  };\n}\n"],"mappings":";;AAiBA,SAAS,sBAAsB,OAAgD;CAC7E,QAAQ,OAAR;EACE,KAAK,UACH,OAAO,CAAC,QAAQ;EAClB,KAAK,aACH,OAAO,CAAC,WAAW;EACrB,KAAK,UACH,OAAO,CAAC,UAAU,WAAW;EAC/B,SACE,OAAO,CAAC,QAAQ;CACpB;AACF;;;;;AAMA,SAAgB,oBACd,UACA,WACA,MACqB;CAIrB,IAAI,CAAC,KAAK,mBAAmB,CAAC,KAAK,QAAQ,IAAI,QAAQ,GACrD,OAAO;CAET,MAAM,WAAW,KAAK,QAAQ,IAAI,QAAQ,CAAC,CAAC,cAAc,qBAAqB,CAAC;CAGhF,IAAI,CADY,UAAU,MAAM,MAAM,SAAS,SAAS,CAAC,CACpD,GACH,OAAO;CAGT,OAAO;AACT;AAEA,SAAgB,0BACd,SACA,MACe;CACf,MAAM,YAAY,WAAW,QAAQ,KAAK,IAAI;CAC9C,MAAM,YAAY,CAChB,KAAK,iBAAiB,aACpB,sBAAsB,KAAK,iBAAiB,YAAY,QAAQ,CACpE,CAAC,CAAC,KAAK;CAYP,OAAO;EACL;EACA,cAAA;GAXA,YAAY;GACZ,UAAU,QAAQ,KAAK;GACvB,eAAe,CAAC;GAChB;GACA,YAAY;GACZ,wBAAwB;GACxB,yBAAyB;EAKzB;EACA,aAAa,UAAyC;GACpD,OAAO,oBAAoB,UAAU,WAAW,IAAI;EACtD;CACF;AACF"}

package/dist/sources/kiro-proxy-bin.d.ts

@@ -1,41 +0,0 @@
-/**
- * Kiro external-proxy discovery (spec §19.5).
- *
- * One resolver shared by the capability gate (`kiroAccountAdapter.transportFor`)
- * and the launcher (`KiroProvider.startProxy`). They previously kept separate
- * binary-name lists and separate env handling, so a machine could pass the gate
- * and then fail to spawn — or be refused a proxy it could actually run.
- */
-/**
- * Every name a kirolink build has shipped as. The gate and the launcher must
- * agree on this list; splitting it is what let `kiro-link` pass classification
- * and then fail to spawn.
- */
-export declare const KIRO_PROXY_BINARIES: readonly ['kirolink', 'kiro-proxy', 'kiro-link'];
-/** A resolved way to run the bridge: a bin on disk, or a JS entry needing node. */
-export type KiroProxyCommand = {
-    kind: 'bin';
-    path: string;
-} | {
-    kind: 'node-entry';
-    entry: string;
-};
-export interface KiroProxyDiscoveryOptions {
-    /**
-     * Test seam. When provided it *replaces* discovery entirely — no env
-     * overrides, no derived directories — so a test cannot be perturbed by the
-     * machine it runs on.
-     */
-    findExecutable?: (name: string) => string | null;
-}
-/**
- * Locate the bridge, or null when the machine has no way to run it.
- *
- * Order follows spec §19.5: explicit configuration, then PATH, then
- * runtime-derived package-manager and user-local bin directories.
- */
-export declare function resolveKiroProxyCommand(opts?: KiroProxyDiscoveryOptions): KiroProxyCommand | null;
-export declare function resolveKiroProxyCommandCached(opts?: KiroProxyDiscoveryOptions): KiroProxyCommand | null;
-/** Test helper: drop the discovery cache. */
-export declare function resetKiroProxyDiscoveryCache(): void;
-//# sourceMappingURL=kiro-proxy-bin.d.ts.map

package/dist/sources/kiro-proxy-bin.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"kiro-proxy-bin.d.ts","sourceRoot":"","sources":["../../src/sources/kiro-proxy-bin.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAMH;;;;GAIG;AACH,eAAO,MAAM,mBAAmB,YAAI,UAAU,EAAE,YAAY,EAAE,WAAW,CAAU,CAAC;AAEpF,mFAAmF;AACnF,MAAM,MAAM,gBAAgB,GACxB;IAAE,IAAI,EAAE,KAAK,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC7B;IAAE,IAAI,EAAE,YAAY,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAC;AAE1C,MAAM,WAAW,yBAAyB;IACxC;;;;OAIG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CAClD;AAmED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,IAAI,GAAE,yBAA8B,GACnC,gBAAgB,GAAG,IAAI,CAiCzB;AAcD,wBAAgB,6BAA6B,CAC3C,IAAI,GAAE,yBAA8B,GACnC,gBAAgB,GAAG,IAAI,CAiBzB;AAED,6CAA6C;AAC7C,wBAAgB,4BAA4B,IAAI,IAAI,CAEnD"}

package/dist/sources/kiro-proxy-bin.js

@@ -1,140 +0,0 @@
-import { accessSync, constants, existsSync } from "node:fs";
-import { join } from "node:path";
-import { homedir } from "node:os";
-//#region src/sources/kiro-proxy-bin.ts
-/**
-* Kiro external-proxy discovery (spec §19.5).
-*
-* One resolver shared by the capability gate (`kiroAccountAdapter.transportFor`)
-* and the launcher (`KiroProvider.startProxy`). They previously kept separate
-* binary-name lists and separate env handling, so a machine could pass the gate
-* and then fail to spawn — or be refused a proxy it could actually run.
-*/
-/**
-* Every name a kirolink build has shipped as. The gate and the launcher must
-* agree on this list; splitting it is what let `kiro-link` pass classification
-* and then fail to spawn.
-*/
-var KIRO_PROXY_BINARIES = [
-	"kirolink",
-	"kiro-proxy",
-	"kiro-link"
-];
-/**
-* Executable directories derived at runtime, never hardcoded developer homes.
-*
-* A tray started from the LaunchAgent inherits a bare
-* `/usr/bin:/bin:/usr/sbin:/sbin`, so a package-manager install of kirolink is
-* invisible to PATH alone even though the same binary resolves fine from a
-* shell. This list is what makes the login tray behave like the terminal.
-*/
-function derivedBinDirs() {
-	const home = homedir();
-	const fromEnv = [
-		process.env.PNPM_HOME,
-		process.env.npm_config_prefix ? join(process.env.npm_config_prefix, "bin") : void 0,
-		process.env.NPM_CONFIG_PREFIX ? join(process.env.NPM_CONFIG_PREFIX, "bin") : void 0,
-		process.env.BUN_INSTALL ? join(process.env.BUN_INSTALL, "bin") : void 0,
-		process.env.VOLTA_HOME ? join(process.env.VOLTA_HOME, "bin") : void 0
-	];
-	const conventional = [
-		join(home, ".local", "bin"),
-		join(home, ".bun", "bin"),
-		join(home, ".npm-global", "bin"),
-		"/opt/homebrew/bin",
-		"/usr/local/bin",
-		"/home/linuxbrew/.linuxbrew/bin"
-	];
-	return [...fromEnv, ...conventional].filter((dir) => Boolean(dir?.trim()));
-}
-function pathDirs() {
-	const sep = process.platform === "win32" ? ";" : ":";
-	return (process.env.PATH ?? "").split(sep).filter(Boolean);
-}
-function isExecutable(path) {
-	try {
-		accessSync(path, constants.X_OK);
-		return true;
-	} catch {
-		return false;
-	}
-}
-/** Candidate filenames for one bare name, honouring PATHEXT on Windows. */
-function fileNames(name) {
-	if (process.platform !== "win32") return [name];
-	return [name, ...(process.env.PATHEXT ?? ".EXE;.CMD;.BAT").split(";").filter(Boolean).map((ext) => name + ext)];
-}
-function searchDirs(dirs, name) {
-	for (const dir of dirs) for (const file of fileNames(name)) {
-		const candidate = join(dir, file);
-		if (isExecutable(candidate)) return candidate;
-	}
-	return null;
-}
-/**
-* Locate the bridge, or null when the machine has no way to run it.
-*
-* Order follows spec §19.5: explicit configuration, then PATH, then
-* runtime-derived package-manager and user-local bin directories.
-*/
-function resolveKiroProxyCommand(opts = {}) {
-	if (opts.findExecutable) {
-		for (const name of KIRO_PROXY_BINARIES) {
-			const path = opts.findExecutable(name);
-			if (path) return {
-				kind: "bin",
-				path
-			};
-		}
-		return null;
-	}
-	const jsEntry = process.env.KIROLINK_JS?.trim();
-	if (jsEntry && existsSync(jsEntry)) return {
-		kind: "node-entry",
-		entry: jsEntry
-	};
-	const explicit = process.env.KIROLINK_BIN?.trim();
-	if (explicit) return isExecutable(explicit) ? {
-		kind: "bin",
-		path: explicit
-	} : null;
-	const dirs = [...pathDirs(), ...derivedBinDirs()];
-	for (const name of KIRO_PROXY_BINARIES) {
-		const path = searchDirs(dirs, name);
-		if (path) return {
-			kind: "bin",
-			path
-		};
-	}
-	return null;
-}
-var memo = null;
-/**
-* Process-lifetime cache with a short TTL (spec §19.5 allows caching for the
-* current process). `transportFor` runs for every account × client on every
-* tray snapshot — roughly every 2.5s — and each miss is dozens of sync stats.
-* The TTL is what still lets a mid-session `npm i -g kirolink` be noticed.
-*/
-var MEMO_TTL_MS = 5e3;
-function resolveKiroProxyCommandCached(opts = {}) {
-	if (opts.findExecutable) return resolveKiroProxyCommand(opts);
-	const key = [
-		process.env.KIROLINK_JS ?? "",
-		process.env.KIROLINK_BIN ?? "",
-		process.env.PATH ?? "",
-		process.env.PNPM_HOME ?? ""
-	].join("\0");
-	const now = Date.now();
-	if (memo && memo.key === key && now - memo.at < MEMO_TTL_MS) return memo.command;
-	const command = resolveKiroProxyCommand(opts);
-	memo = {
-		key,
-		at: now,
-		command
-	};
-	return command;
-}
-//#endregion
-export { KIRO_PROXY_BINARIES, resolveKiroProxyCommand, resolveKiroProxyCommandCached };
-
-//# sourceMappingURL=kiro-proxy-bin.js.map

package/dist/sources/kiro-proxy-bin.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"kiro-proxy-bin.js","names":[],"sources":["../../src/sources/kiro-proxy-bin.ts"],"sourcesContent":["/**\n * Kiro external-proxy discovery (spec §19.5).\n *\n * One resolver shared by the capability gate (`kiroAccountAdapter.transportFor`)\n * and the launcher (`KiroProvider.startProxy`). They previously kept separate\n * binary-name lists and separate env handling, so a machine could pass the gate\n * and then fail to spawn — or be refused a proxy it could actually run.\n */\n\nimport { accessSync, constants, existsSync } from 'node:fs';\nimport { homedir } from 'node:os';\nimport { join } from 'node:path';\n\n/**\n * Every name a kirolink build has shipped as. The gate and the launcher must\n * agree on this list; splitting it is what let `kiro-link` pass classification\n * and then fail to spawn.\n */\nexport const KIRO_PROXY_BINARIES = ['kirolink', 'kiro-proxy', 'kiro-link'] as const;\n\n/** A resolved way to run the bridge: a bin on disk, or a JS entry needing node. */\nexport type KiroProxyCommand =\n  | { kind: 'bin'; path: string }\n  | { kind: 'node-entry'; entry: string };\n\nexport interface KiroProxyDiscoveryOptions {\n  /**\n   * Test seam. When provided it *replaces* discovery entirely — no env\n   * overrides, no derived directories — so a test cannot be perturbed by the\n   * machine it runs on.\n   */\n  findExecutable?: (name: string) => string | null;\n}\n\n/**\n * Executable directories derived at runtime, never hardcoded developer homes.\n *\n * A tray started from the LaunchAgent inherits a bare\n * `/usr/bin:/bin:/usr/sbin:/sbin`, so a package-manager install of kirolink is\n * invisible to PATH alone even though the same binary resolves fine from a\n * shell. This list is what makes the login tray behave like the terminal.\n */\nfunction derivedBinDirs(): string[] {\n  const home = homedir();\n  const fromEnv = [\n    process.env.PNPM_HOME,\n    process.env.npm_config_prefix ? join(process.env.npm_config_prefix, 'bin') : undefined,\n    process.env.NPM_CONFIG_PREFIX ? join(process.env.NPM_CONFIG_PREFIX, 'bin') : undefined,\n    process.env.BUN_INSTALL ? join(process.env.BUN_INSTALL, 'bin') : undefined,\n    process.env.VOLTA_HOME ? join(process.env.VOLTA_HOME, 'bin') : undefined,\n  ];\n  const conventional = [\n    join(home, '.local', 'bin'),\n    join(home, '.bun', 'bin'),\n    join(home, '.npm-global', 'bin'),\n    '/opt/homebrew/bin',\n    '/usr/local/bin',\n    '/home/linuxbrew/.linuxbrew/bin',\n  ];\n  return [...fromEnv, ...conventional].filter((dir): dir is string => Boolean(dir?.trim()));\n}\n\nfunction pathDirs(): string[] {\n  const sep = process.platform === 'win32' ? ';' : ':';\n  return (process.env.PATH ?? '').split(sep).filter(Boolean);\n}\n\nfunction isExecutable(path: string): boolean {\n  try {\n    accessSync(path, constants.X_OK);\n    return true;\n  } catch {\n    return false;\n  }\n}\n\n/** Candidate filenames for one bare name, honouring PATHEXT on Windows. */\nfunction fileNames(name: string): string[] {\n  if (process.platform !== 'win32') {\n    return [name];\n  }\n  const exts = (process.env.PATHEXT ?? '.EXE;.CMD;.BAT').split(';').filter(Boolean);\n  return [name, ...exts.map((ext) => name + ext)];\n}\n\nfunction searchDirs(dirs: readonly string[], name: string): string | null {\n  for (const dir of dirs) {\n    for (const file of fileNames(name)) {\n      const candidate = join(dir, file);\n      // X_OK rather than existence: a non-executable hit would pass the gate and\n      // then fail at spawn, which is the divergence this module exists to close.\n      if (isExecutable(candidate)) {\n        return candidate;\n      }\n    }\n  }\n  return null;\n}\n\n/**\n * Locate the bridge, or null when the machine has no way to run it.\n *\n * Order follows spec §19.5: explicit configuration, then PATH, then\n * runtime-derived package-manager and user-local bin directories.\n */\nexport function resolveKiroProxyCommand(\n  opts: KiroProxyDiscoveryOptions = {},\n): KiroProxyCommand | null {\n  if (opts.findExecutable) {\n    for (const name of KIRO_PROXY_BINARIES) {\n      const path = opts.findExecutable(name);\n      if (path) {\n        return { kind: 'bin', path };\n      }\n    }\n    return null;\n  }\n\n  // A JS entry is run through node, so it needs to be readable, not executable.\n  const jsEntry = process.env.KIROLINK_JS?.trim();\n  if (jsEntry && existsSync(jsEntry)) {\n    return { kind: 'node-entry', entry: jsEntry };\n  }\n\n  const explicit = process.env.KIROLINK_BIN?.trim();\n  if (explicit) {\n    // An explicit override is honoured or it is nothing — falling back to a\n    // discovered binary would silently serve a different install than the one\n    // the user pinned.\n    return isExecutable(explicit) ? { kind: 'bin', path: explicit } : null;\n  }\n\n  const dirs = [...pathDirs(), ...derivedBinDirs()];\n  for (const name of KIRO_PROXY_BINARIES) {\n    const path = searchDirs(dirs, name);\n    if (path) {\n      return { kind: 'bin', path };\n    }\n  }\n  return null;\n}\n\ntype Memo = { key: string; at: number; command: KiroProxyCommand | null };\n\nlet memo: Memo | null = null;\n\n/**\n * Process-lifetime cache with a short TTL (spec §19.5 allows caching for the\n * current process). `transportFor` runs for every account × client on every\n * tray snapshot — roughly every 2.5s — and each miss is dozens of sync stats.\n * The TTL is what still lets a mid-session `npm i -g kirolink` be noticed.\n */\nconst MEMO_TTL_MS = 5000;\n\nexport function resolveKiroProxyCommandCached(\n  opts: KiroProxyDiscoveryOptions = {},\n): KiroProxyCommand | null {\n  if (opts.findExecutable) {\n    return resolveKiroProxyCommand(opts);\n  }\n  const key = [\n    process.env.KIROLINK_JS ?? '',\n    process.env.KIROLINK_BIN ?? '',\n    process.env.PATH ?? '',\n    process.env.PNPM_HOME ?? '',\n  ].join('\u0000');\n  const now = Date.now();\n  if (memo && memo.key === key && now - memo.at < MEMO_TTL_MS) {\n    return memo.command;\n  }\n  const command = resolveKiroProxyCommand(opts);\n  memo = { key, at: now, command };\n  return command;\n}\n\n/** Test helper: drop the discovery cache. */\nexport function resetKiroProxyDiscoveryCache(): void {\n  memo = null;\n}\n"],"mappings":";;;;;;;;;;;;;;;;;AAkBA,IAAa,sBAAsB;CAAC;CAAY;CAAc;AAAW;;;;;;;;;AAwBzE,SAAS,iBAA2B;CAClC,MAAM,OAAO,QAAQ;CACrB,MAAM,UAAU;EACd,QAAQ,IAAI;EACZ,QAAQ,IAAI,oBAAoB,KAAK,QAAQ,IAAI,mBAAmB,KAAK,IAAI,KAAA;EAC7E,QAAQ,IAAI,oBAAoB,KAAK,QAAQ,IAAI,mBAAmB,KAAK,IAAI,KAAA;EAC7E,QAAQ,IAAI,cAAc,KAAK,QAAQ,IAAI,aAAa,KAAK,IAAI,KAAA;EACjE,QAAQ,IAAI,aAAa,KAAK,QAAQ,IAAI,YAAY,KAAK,IAAI,KAAA;CACjE;CACA,MAAM,eAAe;EACnB,KAAK,MAAM,UAAU,KAAK;EAC1B,KAAK,MAAM,QAAQ,KAAK;EACxB,KAAK,MAAM,eAAe,KAAK;EAC/B;EACA;EACA;CACF;CACA,OAAO,CAAC,GAAG,SAAS,GAAG,YAAY,CAAC,CAAC,QAAQ,QAAuB,QAAQ,KAAK,KAAK,CAAC,CAAC;AAC1F;AAEA,SAAS,WAAqB;CAC5B,MAAM,MAAM,QAAQ,aAAa,UAAU,MAAM;CACjD,QAAQ,QAAQ,IAAI,QAAQ,GAAA,CAAI,MAAM,GAAG,CAAC,CAAC,OAAO,OAAO;AAC3D;AAEA,SAAS,aAAa,MAAuB;CAC3C,IAAI;EACF,WAAW,MAAM,UAAU,IAAI;EAC/B,OAAO;CACT,QAAQ;EACN,OAAO;CACT;AACF;;AAGA,SAAS,UAAU,MAAwB;CACzC,IAAI,QAAQ,aAAa,SACvB,OAAO,CAAC,IAAI;CAGd,OAAO,CAAC,MAAM,IADA,QAAQ,IAAI,WAAW,iBAAA,CAAkB,MAAM,GAAG,CAAC,CAAC,OAAO,OACxD,CAAA,CAAK,KAAK,QAAQ,OAAO,GAAG,CAAC;AAChD;AAEA,SAAS,WAAW,MAAyB,MAA6B;CACxE,KAAK,MAAM,OAAO,MAChB,KAAK,MAAM,QAAQ,UAAU,IAAI,GAAG;EAClC,MAAM,YAAY,KAAK,KAAK,IAAI;EAGhC,IAAI,aAAa,SAAS,GACxB,OAAO;CAEX;CAEF,OAAO;AACT;;;;;;;AAQA,SAAgB,wBACd,OAAkC,CAAC,GACV;CACzB,IAAI,KAAK,gBAAgB;EACvB,KAAK,MAAM,QAAQ,qBAAqB;GACtC,MAAM,OAAO,KAAK,eAAe,IAAI;GACrC,IAAI,MACF,OAAO;IAAE,MAAM;IAAO;GAAK;EAE/B;EACA,OAAO;CACT;CAGA,MAAM,UAAU,QAAQ,IAAI,aAAa,KAAK;CAC9C,IAAI,WAAW,WAAW,OAAO,GAC/B,OAAO;EAAE,MAAM;EAAc,OAAO;CAAQ;CAG9C,MAAM,WAAW,QAAQ,IAAI,cAAc,KAAK;CAChD,IAAI,UAIF,OAAO,aAAa,QAAQ,IAAI;EAAE,MAAM;EAAO,MAAM;CAAS,IAAI;CAGpE,MAAM,OAAO,CAAC,GAAG,SAAS,GAAG,GAAG,eAAe,CAAC;CAChD,KAAK,MAAM,QAAQ,qBAAqB;EACtC,MAAM,OAAO,WAAW,MAAM,IAAI;EAClC,IAAI,MACF,OAAO;GAAE,MAAM;GAAO;EAAK;CAE/B;CACA,OAAO;AACT;AAIA,IAAI,OAAoB;;;;;;;AAQxB,IAAM,cAAc;AAEpB,SAAgB,8BACd,OAAkC,CAAC,GACV;CACzB,IAAI,KAAK,gBACP,OAAO,wBAAwB,IAAI;CAErC,MAAM,MAAM;EACV,QAAQ,IAAI,eAAe;EAC3B,QAAQ,IAAI,gBAAgB;EAC5B,QAAQ,IAAI,QAAQ;EACpB,QAAQ,IAAI,aAAa;CAC3B,CAAC,CAAC,KAAK,IAAG;CACV,MAAM,MAAM,KAAK,IAAI;CACrB,IAAI,QAAQ,KAAK,QAAQ,OAAO,MAAM,KAAK,KAAK,aAC9C,OAAO,KAAK;CAEd,MAAM,UAAU,wBAAwB,IAAI;CAC5C,OAAO;EAAE;EAAK,IAAI;EAAK;CAAQ;CAC/B,OAAO;AACT"}

package/dist/sources/proxy-hub-adapters.d.ts

@@ -1,7 +0,0 @@
-import type { ProxyHubResourceRef, SourceAdapter } from '../types.js';
-/**
- * The Hub is a local managed transport, not a provider. Individual provider
- * compatibility is validated while attaching its compiled route manifest.
- */
-export declare function proxyHubAdapter(ref: ProxyHubResourceRef): SourceAdapter;
-//# sourceMappingURL=proxy-hub-adapters.d.ts.map

package/dist/sources/proxy-hub-adapters.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-hub-adapters.d.ts","sourceRoot":"","sources":["../../src/sources/proxy-hub-adapters.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAY,mBAAmB,EAAE,aAAa,EAAuB,MAAM,UAAU,CAAC;AAElG;;;GAGG;AACH,wBAAgB,eAAe,CAAC,GAAG,EAAE,mBAAmB,GAAG,aAAa,CAkBvE"}

package/dist/sources/proxy-hub-adapters.js

@@ -1,26 +0,0 @@
-//#region src/sources/proxy-hub-adapters.ts
-/**
-* The Hub is a local managed transport, not a provider. Individual provider
-* compatibility is validated while attaching its compiled route manifest.
-*/
-function proxyHubAdapter(ref) {
-	return {
-		sourceRef: ref,
-		capabilities: {
-			sourceKind: "proxy-hub",
-			provider: "proxy-hub",
-			nativeClients: [],
-			protocols: ["openai", "anthropic"],
-			canRefresh: false,
-			supportsModelDiscovery: true,
-			requiresNativeAuthWrite: false
-		},
-		transportFor(clientId) {
-			return clientId === "claude" || clientId === "codex" ? "managed_builtin_proxy" : "unsupported";
-		}
-	};
-}
-//#endregion
-export { proxyHubAdapter };
-
-//# sourceMappingURL=proxy-hub-adapters.js.map

package/dist/sources/proxy-hub-adapters.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"proxy-hub-adapters.js","names":[],"sources":["../../src/sources/proxy-hub-adapters.ts"],"sourcesContent":["import type { ClientId, ProxyHubResourceRef, SourceAdapter, TransportCapability } from '../types';\n\n/**\n * The Hub is a local managed transport, not a provider. Individual provider\n * compatibility is validated while attaching its compiled route manifest.\n */\nexport function proxyHubAdapter(ref: ProxyHubResourceRef): SourceAdapter {\n  return {\n    sourceRef: ref,\n    capabilities: {\n      sourceKind: 'proxy-hub',\n      provider: 'proxy-hub',\n      nativeClients: [],\n      protocols: ['openai', 'anthropic'],\n      canRefresh: false,\n      supportsModelDiscovery: true,\n      requiresNativeAuthWrite: false,\n    },\n    transportFor(clientId: ClientId): TransportCapability {\n      return clientId === 'claude' || clientId === 'codex'\n        ? 'managed_builtin_proxy'\n        : 'unsupported';\n    },\n  };\n}\n"],"mappings":";;;;;AAMA,SAAgB,gBAAgB,KAAyC;CACvE,OAAO;EACL,WAAW;EACX,cAAc;GACZ,YAAY;GACZ,UAAU;GACV,eAAe,CAAC;GAChB,WAAW,CAAC,UAAU,WAAW;GACjC,YAAY;GACZ,wBAAwB;GACxB,yBAAyB;EAC3B;EACA,aAAa,UAAyC;GACpD,OAAO,aAAa,YAAY,aAAa,UACzC,0BACA;EACN;CACF;AACF"}