audit-tools 0.33.6 → 0.33.7

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (37) hide show
  1. package/dist/audit/cli/nextStepCommand.js +3 -3
  2. package/dist/audit/cli/nextStepCommand.js.map +1 -1
  3. package/dist/remediate/steps/sessionConfigLoad.js +1 -1
  4. package/dist/remediate/steps/sessionConfigLoad.js.map +1 -1
  5. package/dist/shared/dispatch/admissionLoop.d.ts +1 -1
  6. package/dist/shared/dispatch/admissionLoop.js +1 -1
  7. package/dist/shared/index.js +1 -1
  8. package/dist/shared/index.js.map +1 -1
  9. package/dist/shared/providers/auditorSources.d.ts +39 -44
  10. package/dist/shared/providers/auditorSources.d.ts.map +1 -1
  11. package/dist/shared/providers/auditorSources.js +90 -63
  12. package/dist/shared/providers/auditorSources.js.map +1 -1
  13. package/dist/shared/providers/claudeWorkerProvider.d.ts +12 -11
  14. package/dist/shared/providers/claudeWorkerProvider.d.ts.map +1 -1
  15. package/dist/shared/providers/claudeWorkerProvider.js +23 -16
  16. package/dist/shared/providers/claudeWorkerProvider.js.map +1 -1
  17. package/dist/shared/providers/providerConfirmation.d.ts +2 -2
  18. package/dist/shared/providers/providerConfirmation.js +2 -2
  19. package/dist/shared/providers/providerConfirmation.js.map +1 -1
  20. package/dist/shared/providers/proxyCatalog.d.ts +19 -16
  21. package/dist/shared/providers/proxyCatalog.d.ts.map +1 -1
  22. package/dist/shared/providers/proxyCatalog.js +272 -181
  23. package/dist/shared/providers/proxyCatalog.js.map +1 -1
  24. package/dist/shared/providers/sharedProviderConfirmation.d.ts +1 -1
  25. package/dist/shared/providers/sharedProviderConfirmation.js +2 -2
  26. package/dist/shared/providers/sharedProviderConfirmation.js.map +1 -1
  27. package/dist/shared/quota/apiPool.js +4 -4
  28. package/dist/shared/quota/apiPool.js.map +1 -1
  29. package/dist/shared/quota/capacity.d.ts +1 -1
  30. package/dist/shared/types/providerConfirmation.d.ts +2 -2
  31. package/dist/shared/types/sessionConfig.d.ts +9 -8
  32. package/dist/shared/types/sessionConfig.d.ts.map +1 -1
  33. package/dist/shared/types/sessionConfig.js +1 -1
  34. package/dist/shared/types/sessionConfig.js.map +1 -1
  35. package/dist/shared/validation/sessionConfig.js +1 -1
  36. package/dist/shared/validation/sessionConfig.js.map +1 -1
  37. package/package.json +1 -1
@@ -1,14 +1,14 @@
1
1
  import type { DispatchableSource } from "../types/sessionConfig.js";
2
2
  /**
3
- * The POPULATE cache for the repair-proxy lane: `GET <proxy>/registry` expanded into
4
- * ready-to-fold `claude-worker` {@link DispatchableSource}s, written once per populate
5
- * (Gate-0 build / explicit refresh) and READ by resolve — never fetched mid-resolve
6
- * (`docs/reviews/commit3-proxy-kind1-transport-plan-2026-07-16.md` §populate/resolve).
3
+ * The POPULATE cache for the proxy lane: discovered via `GET <proxy>/v1/models` +
4
+ * `GET <proxy>/model/info` (OpenAI-compatible surfaces) expanded into ready-to-fold
5
+ * `claude-worker` {@link DispatchableSource}s, written once per populate (Gate-0 build
6
+ * / explicit refresh) and READ by resolve — never fetched mid-resolve.
7
7
  *
8
8
  * Named `catalog-cache.json`, NOT the `catalog-<auditor-id>.json` the reserved-name
9
9
  * comment at `auditorSources.ts` anticipates: populate/resolve run on the AMBIENT
10
10
  * path, where no auditor id exists to key on. The cache is machine-level like the
11
- * declaration beside it — and it is a CACHE of live registry state, not resolved
11
+ * declaration beside it — and it is a CACHE of live discovery state, not resolved
12
12
  * per-auditor capability, so an auditor-id key would assert an isolation the data
13
13
  * doesn't have. Per-auditor never-inherit still holds: every resolve re-proves proxy
14
14
  * REACH itself; the cache only supplies the expansion.
@@ -38,15 +38,17 @@ export interface ProxyCatalog {
38
38
  sources: DispatchableSource[];
39
39
  }
40
40
  export interface PopulateProxyCatalogOptions {
41
- /** The repair-proxy base url (`GET <endpoint>/registry`). */
41
+ /** The proxy base url (`GET <endpoint>/v1/models`, `GET <endpoint>/model/info`). */
42
42
  endpoint: string;
43
- /** Models expanded per backend provider (declared `repair_proxy.top_k`); default {@link DEFAULT_PROXY_TOP_K}. */
43
+ /** Models expanded per backend provider (declared `proxy.top_k`); default {@link DEFAULT_PROXY_TOP_K}. */
44
44
  topK?: number;
45
45
  /**
46
- * Operator-declared blended $/Mtok for the proxied lane (`repair_proxy.cost_per_mtok`,
47
- * the free-to-operator axis). WINS over any registry list price.
46
+ * Operator-declared blended $/Mtok for the proxied lane (`proxy.cost_per_mtok`,
47
+ * the free-to-operator axis). WINS over any advert price.
48
48
  */
49
49
  costPerMtok?: number;
50
+ /** Env var holding the proxy's master key when authentication is required. */
51
+ apiKeyEnv?: string;
50
52
  /** Injectable fetch (tests); defaults to global fetch. */
51
53
  fetchImpl?: typeof fetch;
52
54
  /** Home dir override for the cache path (tests). */
@@ -68,13 +70,14 @@ export interface PopulateProxyCatalogResult {
68
70
  }>;
69
71
  }
70
72
  /**
71
- * POPULATE: fetch `GET <endpoint>/registry` and write the expanded `claude-worker`
72
- * sources to the machine-level cache. Network-bound and cacheable — runs at Gate-0
73
- * build / explicit refresh, NEVER inside `resolveAmbientSources` (which only READS
74
- * via {@link readProxyCatalog}). Never throws: a failed fetch returns
75
- * `{written:false, reason}` and leaves any prior cache untouched; an empty/zero-match
76
- * registry WRITES an empty expansion (fresh knowledge — resolve reports the lane
77
- * unexpanded with a reason).
73
+ * POPULATE: discover and expand models from an OpenAI-compatible proxy
74
+ * (`GET <endpoint>/v1/models` + `GET <endpoint>/model/info`) into
75
+ * ready-to-fold `claude-worker` sources, then write to the machine-level cache.
76
+ * Network-bound and cacheable — runs at Gate-0 build / explicit refresh, NEVER
77
+ * inside `resolveAmbientSources` (which only READS via {@link readProxyCatalog}).
78
+ * Never throws: a failed fetch returns `{written:false, reason}` and leaves any
79
+ * prior cache untouched; an empty discovery WRITES an empty expansion (fresh
80
+ * knowledge — resolve reports the lane unexpanded with a reason).
78
81
  */
79
82
  export declare function populateProxyCatalog(options: PopulateProxyCatalogOptions): Promise<PopulateProxyCatalogResult>;
80
83
  export interface ReadProxyCatalogDeps {
@@ -1 +1 @@
1
- {"version":3,"file":"proxyCatalog.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/proxyCatalog.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGpE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,QAAc,CAAC;AAEvD,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AAaD,MAAM,WAAW,2BAA2B;IAC1C,6DAA6D;IAC7D,QAAQ,EAAE,MAAM,CAAC;IACjB,iHAAiH;IACjH,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,uFAAuF;IACvF,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAsSD;;;;;;;;GAQG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAkGrC;AAED,MAAM,WAAW,oBAAoB;IACnC,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACnD;AAUD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,oBAAyB,GAC9B,YAAY,GAAG,IAAI,CAmBrB"}
1
+ {"version":3,"file":"proxyCatalog.d.ts","sourceRoot":"","sources":["../../../src/shared/providers/proxyCatalog.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,2BAA2B,CAAC;AAGpE;;;;;;;;;;;;;GAaG;AACH,eAAO,MAAM,sBAAsB,uBAAuB,CAAC;AAE3D,wFAAwF;AACxF,eAAO,MAAM,mBAAmB,IAAI,CAAC;AAErC,gEAAgE;AAChE,eAAO,MAAM,yBAAyB,OAAO,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,0BAA0B,IAAI,CAAC;AAE5C;;;;GAIG;AACH,eAAO,MAAM,2BAA2B,QAAc,CAAC;AAEvD,yFAAyF;AACzF,wBAAgB,uBAAuB,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEhE;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC3B,yFAAyF;IACzF,UAAU,EAAE,MAAM,CAAC;IACnB,wDAAwD;IACxD,QAAQ,EAAE,MAAM,CAAC;IACjB,8EAA8E;IAC9E,OAAO,EAAE,kBAAkB,EAAE,CAAC;CAC/B;AA8BD,MAAM,WAAW,2BAA2B;IAC1C,oFAAoF;IACpF,QAAQ,EAAE,MAAM,CAAC;IACjB,0GAA0G;IAC1G,IAAI,CAAC,EAAE,MAAM,CAAC;IACd;;;OAGG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,8EAA8E;IAC9E,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,uDAAuD;IACvD,GAAG,CAAC,EAAE,MAAM,IAAI,CAAC;CAClB;AAED,MAAM,WAAW,0BAA0B;IACzC,2EAA2E;IAC3E,OAAO,EAAE,kBAAkB,EAAE,CAAC;IAC9B,uFAAuF;IACvF,OAAO,EAAE,OAAO,CAAC;IACjB,iFAAiF;IACjF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,8DAA8D;IAC9D,OAAO,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CAChD;AAiWD;;;;;;;;;GASG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,2BAA2B,GACnC,OAAO,CAAC,0BAA0B,CAAC,CAyJrC;AAED,MAAM,WAAW,oBAAoB;IACnC,oDAAoD;IACpD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,2EAA2E;IAC3E,eAAe,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,GAAG,IAAI,CAAC;CACnD;AAUD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,oBAAyB,GAC9B,YAAY,GAAG,IAAI,CAmBrB"}