audit-tools 0.33.4 → 0.33.7

package/dist/shared/providers/providerPathGuard.d.ts

@@ -57,10 +57,10 @@ export declare function resolveConversationHostProvider(options?: {
  * both orchestrators.
  *
  * NOTE: this returns the configured provider verbatim when set — a run with
- * `provider: codex` (codex as the driving host) keys to codex. The audit
- * host-review path additionally DEMOTES a headless in-process backend to a
- * worker (see `resolveHostDispatchProviderName`), routing the driver identity
- * through {@link resolveConversationHostProvider} instead.
+ * `provider: codex` (codex as the driving host) keys to codex. The host-DISPATCH
+ * paths additionally treat a headless in-process backend as a worker, not a
+ * driver (see {@link resolveHostDispatchProviderName}), routing the driver
+ * identity through {@link resolveConversationHostProvider} instead.
  */
 export declare function resolveHostProviderName(sessionConfig: {
     provider?: ProviderName;
@@ -69,4 +69,33 @@ export declare function resolveHostProviderName(sessionConfig: {
     explicit?: ProviderName;
     env?: NodeJS.ProcessEnv;
 }): ResolvedProviderName;
+/**
+ * The identity of the agent DRIVING the host fan-out this invocation — what the
+ * host-dispatch pool / host-session quota key is keyed to (and charged against).
+ * When `sessionConfig.provider` names a headless in-process backend (codex /
+ * opencode / openai-compatible / agy — plus the command-shaped backends under a
+ * draw whose `commandWorkers` policy admits them), that provider is a WORKER,
+ * never the driver: the conversation host that reached the host-dispatch path
+ * resolves via {@link resolveConversationHostProvider} (auto-detected, and
+ * overridable via `--host-provider` / `host_provider` — NOT the literal
+ * `claude-code`, which mis-charged a Codex host's fan-out to the Claude pool).
+ * An explicit conversation-host provider (vscode-task / antigravity /
+ * claude-code — and, for audit's policy, worker-command / subprocess-template)
+ * IS a driver and passes through unchanged.
+ *
+ * This is the founding-bug fix ([[capability-is-per-auditor-not-per-audit]]): a
+ * run started with `provider: codex` and later resumed by a Claude host never
+ * keys or charges the host fan-out against codex's meter. Hoisted to shared
+ * (H2+H4 collapse, plan D5) so audit and remediate key their fan-outs through
+ * the ONE resolver; the `isHeadlessPrimaryProvider` read here is DRIVER
+ * IDENTITY, not branch selection — it survives the branch-pair deletion.
+ * [[host-provider-misattribution-nim-codex]]
+ */
+export declare function resolveHostDispatchProviderName(sessionConfig: {
+    provider?: ProviderName;
+    host_provider?: ProviderName;
+} | null | undefined, options?: {
+    commandWorkers?: boolean;
+    env?: NodeJS.ProcessEnv;
+}): ResolvedProviderName;
 //# sourceMappingURL=providerPathGuard.d.ts.map

package/dist/shared/providers/providerPathGuard.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providerPathGuard.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/providerPathGuard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,oBAAoB,EACrB,MAAM,2BAA2B,CAAC;AAqCnC;;;GAGG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,GAC1C,IAAI,CAEN;AAiBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,oBAAoB,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAoBT;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IACxD,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,aAAa,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,oBAAoB,CAUvB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE;IAAE,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,aAAa,CAAC,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC3F,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,GAC7D,oBAAoB,CAUtB"}
+{"version":3,"file":"providerPathGuard.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/providerPathGuard.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,YAAY,EACZ,oBAAoB,EACrB,MAAM,2BAA2B,CAAC;AAsCnC;;;GAGG;AACH,wBAAgB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAEtD;AAED;;;;GAIG;AACH,wBAAgB,0BAA0B,CACxC,IAAI,EAAE,CAAC,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,IAAI,GAC1C,IAAI,CAEN;AAiBD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,oBAAoB,EAC9B,GAAG,GAAE,MAAM,CAAC,UAAwB,GACnC,OAAO,CAoBT;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,CAAC,EAAE;IACxD,QAAQ,CAAC,EAAE,YAAY,CAAC;IACxB,aAAa,CAAC,EAAE;QAAE,aAAa,CAAC,EAAE,YAAY,CAAA;KAAE,GAAG,IAAI,CAAC;IACxD,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAC;CACzB,GAAG,oBAAoB,CAUvB;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,CACrC,aAAa,EAAE;IAAE,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,aAAa,CAAC,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC3F,OAAO,CAAC,EAAE;IAAE,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,GAC7D,oBAAoB,CAUtB;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,+BAA+B,CAC7C,aAAa,EAAE;IAAE,QAAQ,CAAC,EAAE,YAAY,CAAC;IAAC,aAAa,CAAC,EAAE,YAAY,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,EAC3F,OAAO,CAAC,EAAE;IAAE,cAAc,CAAC,EAAE,OAAO,CAAC;IAAC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;CAAE,GAC9D,oBAAoB,CAKtB"}

package/dist/shared/providers/providerPathGuard.js

@@ -1,4 +1,5 @@
 import { spawnSync } from "node:child_process";
+import { isHeadlessPrimaryProvider } from "./inProcessWorkers.js";
 /**
  * Single-sourced PATH detection + self-spawn guard for the provider subsystem.
  *
@@ -132,10 +133,10 @@ export function resolveConversationHostProvider(options) {
  * both orchestrators.
  *
  * NOTE: this returns the configured provider verbatim when set — a run with
- * `provider: codex` (codex as the driving host) keys to codex. The audit
- * host-review path additionally DEMOTES a headless in-process backend to a
- * worker (see `resolveHostDispatchProviderName`), routing the driver identity
- * through {@link resolveConversationHostProvider} instead.
+ * `provider: codex` (codex as the driving host) keys to codex. The host-DISPATCH
+ * paths additionally treat a headless in-process backend as a worker, not a
+ * driver (see {@link resolveHostDispatchProviderName}), routing the driver
+ * identity through {@link resolveConversationHostProvider} instead.
  */
 export function resolveHostProviderName(sessionConfig, options) {
     const provider = sessionConfig?.provider;
@@ -148,4 +149,32 @@ export function resolveHostProviderName(sessionConfig, options) {
     }
     return provider;
 }
+/**
+ * The identity of the agent DRIVING the host fan-out this invocation — what the
+ * host-dispatch pool / host-session quota key is keyed to (and charged against).
+ * When `sessionConfig.provider` names a headless in-process backend (codex /
+ * opencode / openai-compatible / agy — plus the command-shaped backends under a
+ * draw whose `commandWorkers` policy admits them), that provider is a WORKER,
+ * never the driver: the conversation host that reached the host-dispatch path
+ * resolves via {@link resolveConversationHostProvider} (auto-detected, and
+ * overridable via `--host-provider` / `host_provider` — NOT the literal
+ * `claude-code`, which mis-charged a Codex host's fan-out to the Claude pool).
+ * An explicit conversation-host provider (vscode-task / antigravity /
+ * claude-code — and, for audit's policy, worker-command / subprocess-template)
+ * IS a driver and passes through unchanged.
+ *
+ * This is the founding-bug fix ([[capability-is-per-auditor-not-per-audit]]): a
+ * run started with `provider: codex` and later resumed by a Claude host never
+ * keys or charges the host fan-out against codex's meter. Hoisted to shared
+ * (H2+H4 collapse, plan D5) so audit and remediate key their fan-outs through
+ * the ONE resolver; the `isHeadlessPrimaryProvider` read here is DRIVER
+ * IDENTITY, not branch selection — it survives the branch-pair deletion.
+ * [[host-provider-misattribution-nim-codex]]
+ */
+export function resolveHostDispatchProviderName(sessionConfig, options) {
+    if (isHeadlessPrimaryProvider(sessionConfig?.provider, options)) {
+        return resolveConversationHostProvider({ sessionConfig, env: options?.env });
+    }
+    return resolveHostProviderName(sessionConfig, { env: options?.env });
+}
 //# sourceMappingURL=providerPathGuard.js.map

package/dist/shared/providers/providerPathGuard.js.map

@@ -1 +1 @@
-{"version":3,"file":"providerPathGuard.js","sourceRoot":"","sources":["../../../src/shared/providers/providerPathGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAM/C;;;;;;;;;;;;;;;;;;GAkBG;AAEH,6EAA6E;AAC7E,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE;QACjD,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,IAAI,iBAAiB,GAAiC,kBAAkB,CAAC;AAEzE;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAA2C;IAE3C,iBAAiB,GAAG,IAAI,IAAI,kBAAkB,CAAC;AACjD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAAkD;IAC3E,aAAa,EAAE,YAAY;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,OAAO,CACZ,GAAG,CAAC,KAAK;YACP,GAAG,CAAC,WAAW;YACf,GAAG,CAAC,eAAe;YACnB,GAAG,CAAC,kCAAkC,CACzC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,oFAAoF;QACpF,yDAAyD;QACzD,OAAO,OAAO,CACZ,GAAG,CAAC,OAAO;YACT,GAAG,CAAC,eAAe;YACnB,GAAG,CAAC,UAAU,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAI/C;IACC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACnE,MAAM,UAAU,GAAG,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC;IACzD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IACzE,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACxC,IAAI,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACjE,IAAI,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACrC,aAA2F,EAC3F,OAA8D;IAE9D,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAClD,OAAO,+BAA+B,CAAC;YACrC,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,aAAa;YACb,GAAG,EAAE,OAAO,EAAE,GAAG;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC"}
+{"version":3,"file":"providerPathGuard.js","sourceRoot":"","sources":["../../../src/shared/providers/providerPathGuard.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,MAAM,oBAAoB,CAAC;AAK/C,OAAO,EAAE,yBAAyB,EAAE,MAAM,uBAAuB,CAAC;AAElE;;;;;;;;;;;;;;;;;;GAkBG;AAEH,6EAA6E;AAC7E,SAAS,kBAAkB,CAAC,OAAe;IACzC,MAAM,aAAa,GAAG,OAAO,CAAC,QAAQ,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACvE,8EAA8E;IAC9E,8EAA8E;IAC9E,yEAAyE;IACzE,MAAM,MAAM,GAAG,SAAS,CAAC,aAAa,EAAE,CAAC,OAAO,CAAC,EAAE;QACjD,KAAK,EAAE,QAAQ;QACf,WAAW,EAAE,IAAI;KAClB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED,IAAI,iBAAiB,GAAiC,kBAAkB,CAAC;AAEzE;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,OAAe;IAC3C,OAAO,iBAAiB,CAAC,OAAO,CAAC,CAAC;AACpC,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,0BAA0B,CACxC,IAA2C;IAE3C,iBAAiB,GAAG,IAAI,IAAI,kBAAkB,CAAC;AACjD,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,qBAAqB,GAAkD;IAC3E,aAAa,EAAE,YAAY;CAC5B,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,kBAAkB,CAChC,QAA8B,EAC9B,MAAyB,OAAO,CAAC,GAAG;IAEpC,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,OAAO,OAAO,CACZ,GAAG,CAAC,KAAK;YACP,GAAG,CAAC,WAAW;YACf,GAAG,CAAC,eAAe;YACnB,GAAG,CAAC,kCAAkC,CACzC,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,oFAAoF;QACpF,yDAAyD;QACzD,OAAO,OAAO,CACZ,GAAG,CAAC,OAAO;YACT,GAAG,CAAC,eAAe;YACnB,GAAG,CAAC,UAAU,CACjB,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,qBAAqB,CAAC,QAAQ,CAAC,CAAC;IAC/C,OAAO,MAAM,KAAK,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACtD,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,+BAA+B,CAAC,OAI/C;IACC,MAAM,QAAQ,GAAG,OAAO,EAAE,QAAQ,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM;QAAE,OAAO,QAAQ,CAAC;IACnE,MAAM,UAAU,GAAG,OAAO,EAAE,aAAa,EAAE,aAAa,CAAC;IACzD,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,MAAM;QAAE,OAAO,UAAU,CAAC;IACzE,MAAM,GAAG,GAAG,OAAO,EAAE,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC;IACxC,IAAI,kBAAkB,CAAC,OAAO,EAAE,GAAG,CAAC;QAAE,OAAO,OAAO,CAAC;IACrD,IAAI,kBAAkB,CAAC,aAAa,EAAE,GAAG,CAAC;QAAE,OAAO,aAAa,CAAC;IACjE,IAAI,kBAAkB,CAAC,KAAK,EAAE,GAAG,CAAC;QAAE,OAAO,KAAK,CAAC;IACjD,OAAO,aAAa,CAAC;AACvB,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,uBAAuB,CACrC,aAA2F,EAC3F,OAA8D;IAE9D,MAAM,QAAQ,GAAG,aAAa,EAAE,QAAQ,CAAC;IACzC,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,KAAK,MAAM,EAAE,CAAC;QAClD,OAAO,+BAA+B,CAAC;YACrC,QAAQ,EAAE,OAAO,EAAE,QAAQ;YAC3B,aAAa;YACb,GAAG,EAAE,OAAO,EAAE,GAAG;SAClB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,MAAM,UAAU,+BAA+B,CAC7C,aAA2F,EAC3F,OAA+D;IAE/D,IAAI,yBAAyB,CAAC,aAAa,EAAE,QAAQ,EAAE,OAAO,CAAC,EAAE,CAAC;QAChE,OAAO,+BAA+B,CAAC,EAAE,aAAa,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;IAC/E,CAAC;IACD,OAAO,uBAAuB,CAAC,aAAa,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC,CAAC;AACvE,CAAC"}

package/dist/shared/providers/proxyCatalog.d.ts

@@ -1,14 +1,14 @@
 import type { DispatchableSource } from "../types/sessionConfig.js";
 /**
- * The POPULATE cache for the repair-proxy lane: `GET <proxy>/registry` expanded into
- * ready-to-fold `claude-worker` {@link DispatchableSource}s, written once per populate
- * (Gate-0 build / explicit refresh) and READ by resolve — never fetched mid-resolve
- * (`docs/reviews/commit3-proxy-kind1-transport-plan-2026-07-16.md` §populate/resolve).
+ * The POPULATE cache for the proxy lane: discovered via `GET <proxy>/v1/models` +
+ * `GET <proxy>/model/info` (OpenAI-compatible surfaces) expanded into ready-to-fold
+ * `claude-worker` {@link DispatchableSource}s, written once per populate (Gate-0 build
+ * / explicit refresh) and READ by resolve — never fetched mid-resolve.
  *
  * Named `catalog-cache.json`, NOT the `catalog-<auditor-id>.json` the reserved-name
  * comment at `auditorSources.ts` anticipates: populate/resolve run on the AMBIENT
  * path, where no auditor id exists to key on. The cache is machine-level like the
- * declaration beside it — and it is a CACHE of live registry state, not resolved
+ * declaration beside it — and it is a CACHE of live discovery state, not resolved
  * per-auditor capability, so an auditor-id key would assert an isolation the data
  * doesn't have. Per-auditor never-inherit still holds: every resolve re-proves proxy
  * REACH itself; the cache only supplies the expansion.
@@ -38,15 +38,17 @@ export interface ProxyCatalog {
     sources: DispatchableSource[];
 }
 export interface PopulateProxyCatalogOptions {
-    /** The repair-proxy base url (`GET <endpoint>/registry`). */
+    /** The proxy base url (`GET <endpoint>/v1/models`, `GET <endpoint>/model/info`). */
     endpoint: string;
-    /** Models expanded per backend provider (declared `repair_proxy.top_k`); default {@link DEFAULT_PROXY_TOP_K}. */
+    /** Models expanded per backend provider (declared `proxy.top_k`); default {@link DEFAULT_PROXY_TOP_K}. */
     topK?: number;
     /**
-     * Operator-declared blended $/Mtok for the proxied lane (`repair_proxy.cost_per_mtok`,
-     * the free-to-operator axis). WINS over any registry list price.
+     * Operator-declared blended $/Mtok for the proxied lane (`proxy.cost_per_mtok`,
+     * the free-to-operator axis). WINS over any advert price.
      */
     costPerMtok?: number;
+    /** Env var holding the proxy's master key when authentication is required. */
+    apiKeyEnv?: string;
     /** Injectable fetch (tests); defaults to global fetch. */
     fetchImpl?: typeof fetch;
     /** Home dir override for the cache path (tests). */
@@ -68,13 +70,14 @@ export interface PopulateProxyCatalogResult {
     }>;
 }
 /**
- * POPULATE: fetch `GET <endpoint>/registry` and write the expanded `claude-worker`
- * sources to the machine-level cache. Network-bound and cacheable — runs at Gate-0
- * build / explicit refresh, NEVER inside `resolveAmbientSources` (which only READS
- * via {@link readProxyCatalog}). Never throws: a failed fetch returns
- * `{written:false, reason}` and leaves any prior cache untouched; an empty/zero-match
- * registry WRITES an empty expansion (fresh knowledge — resolve reports the lane
- * unexpanded with a reason).
+ * POPULATE: discover and expand models from an OpenAI-compatible proxy
+ * (`GET <endpoint>/v1/models` + `GET <endpoint>/model/info`) into
+ * ready-to-fold `claude-worker` sources, then write to the machine-level cache.
+ * Network-bound and cacheable — runs at Gate-0 build / explicit refresh, NEVER
+ * inside `resolveAmbientSources` (which only READS via {@link readProxyCatalog}).
+ * Never throws: a failed fetch returns `{written:false, reason}` and leaves any
+ * prior cache untouched; an empty discovery WRITES an empty expansion (fresh
+ * knowledge — resolve reports the lane unexpanded with a reason).
  */
 export declare function populateProxyCatalog(options: PopulateProxyCatalogOptions): Promise<PopulateProxyCatalogResult>;
 export interface ReadProxyCatalogDeps {

package/dist/shared/providers/proxyCatalog.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxyCatalog.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/proxyCatalog.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGpE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,QAAc,CAAC;AAEvD,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAaD,MAAM,WAAW,2BAA2B;IAC1C,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,iHAAiH;IACjH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,uFAAuF;IACvF,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAsSD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAkGrC;AAED,MAAM,WAAW,oBAAoB;IACnC,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACnD;AAUD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,oBAAyB,GAC9B,YAAY,GAAG,IAAI,CAmBrB"}
+{"version":3,"file":"proxyCatalog.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/proxyCatalog.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGpE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,QAAc,CAAC;AAEvD,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AA8BD,MAAM,WAAW,2BAA2B;IAC1C,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;IACjB,0GAA0G;IAC1G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,uFAAuF;IACvF,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAiWD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAyJrC;AAED,MAAM,WAAW,oBAAoB;IACnC,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACnD;AAUD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,oBAAyB,GAC9B,YAAY,GAAG,IAAI,CAmBrB"}