lastlight 0.15.0 → 0.16.1

package/dist/engine/llm.js

@@ -1,269 +0,0 @@
-/**
- * Thin one-shot LLM chat helper used by the prompt-injection screener and the
- * intent classifier. Powered by `src/providers.ts` — that registry is the
- * single source of truth for which providers this helper can call.
- *
- * The screener + classifier are deliberately small and explicit. They need a
- * cheap/fast model on the SAME provider the user picked (or any registered
- * provider whose key is present) so the agent's primary model and the cheap
- * helper share one footprint. We support two request families:
- *
- *   `openai-completions`   — body `{ model, messages, <maxTokensField> }`,
- *                            response `choices[0].message.content`. Covers
- *                            OpenAI, OpenRouter, Groq, Cerebras, xAI,
- *                            Hugging Face, Moonshot, NVIDIA, Fireworks,
- *                            Together, DeepSeek, Z.AI, and Google/Mistral
- *                            via their OpenAI-compatible endpoints.
- *   `anthropic-messages`   — `system` field + content-block response.
- *                            Covers Anthropic, Kimi for Coding, MiniMax.
- *
- * Scope: this helper supports the providers listed in `src/providers.ts`.
- * Workflow phases themselves are provider-agnostic (whatever pi-ai
- * supports); only the screener/classifier path is constrained here.
- */
-import { PROVIDERS, providerByPrefix } from "../providers.js";
-import { getRuntimeConfig } from "../config/config.js";
-// ── Resolvers (exported for unit tests) ──────────────────────────────────────
-/**
- * Resolve a `provider/model` spec (or a bare model id) into a routing
- * decision. Prefers an explicit `<prefix>/<model>` over name-inference.
- *
- * @throws if the prefix is present but not registered — silently
- * mis-routing a `xai/grok-4` to OpenAI would bill the wrong account and
- * fail at request time with a confusing error, so we surface it early.
- */
-export function resolveProvider(model) {
-    const slash = model.indexOf("/");
-    if (slash > 0) {
-        const prefix = model.slice(0, slash).toLowerCase();
-        const tail = model.slice(slash + 1);
-        const spec = providerByPrefix(prefix);
-        if (spec) {
-            return {
-                provider: spec.prefix,
-                modelId: tail,
-                api: spec.api,
-            };
-        }
-        throw new Error(`llm helper: unsupported provider prefix "${prefix}" ` +
-            `(registered: ${PROVIDERS.map((p) => p.prefix).join(", ")})`);
-    }
-    // Bare model id — fall back to inference by name. OpenRouter's nested
-    // `vendor/model` ids are handled above (its prefix is "openrouter").
-    if (/^claude/i.test(model)) {
-        return { provider: "anthropic", modelId: model, api: "anthropic-messages" };
-    }
-    if (/^gpt/i.test(model) || /^o\d/.test(model)) {
-        return { provider: "openai", modelId: model, api: "openai-completions" };
-    }
-    // Anything else: assume OpenAI-completions shape against an OpenAI endpoint.
-    return { provider: "openai", modelId: model, api: "openai-completions" };
-}
-/**
- * Resolve the model id for a tiny one-shot helper call (classifier / screener).
- * Precedence for a given `taskType`:
- *   1. an explicit per-task entry in the config `models:` map (`models.classifier`,
- *      `models.screener`) — which already has env `OPENCODE_MODELS` /
- *      `LASTLIGHT_MODELS` layered on top at config-load, so this covers both
- *      config.yaml and the env override in one lookup;
- *   2. the env `OPENCODE_MODELS` map read directly — a fallback for contexts
- *      where runtime config isn't loaded (some CLI / test paths);
- *   3. the first configured provider in `PROVIDERS` order (registry order:
- *      Anthropic first, then OpenAI, OpenRouter, then the rest — `src/providers.ts`).
- *
- * Note: only an EXPLICIT per-task entry counts — never `models.default` — so the
- * cheap helpers stay cheap unless a deployment deliberately pins them.
- */
-export function defaultFastModel(taskType) {
-    if (taskType) {
-        const configured = getRuntimeConfig()?.models?.[taskType];
-        if (configured)
-            return configured;
-        const override = readOpencodeModelOverride(taskType);
-        if (override)
-            return override;
-    }
-    for (const spec of PROVIDERS) {
-        if (process.env[spec.envKey])
-            return `${spec.prefix}/${spec.fastModel}`;
-    }
-    // No keys set — fall back to the OpenAI default; chat() will then throw a
-    // clear "OPENAI_API_KEY not set" error at call time.
-    const openaiSpec = providerByPrefix("openai");
-    return `${openaiSpec.prefix}/${openaiSpec.fastModel}`;
-}
-function readOpencodeModelOverride(taskType) {
-    const raw = process.env.OPENCODE_MODELS;
-    if (!raw)
-        return undefined;
-    try {
-        const parsed = JSON.parse(raw);
-        const v = parsed?.[taskType];
-        return typeof v === "string" ? v : undefined;
-    }
-    catch {
-        return undefined;
-    }
-}
-// ── Request builders ────────────────────────────────────────────────────────
-function apiKeyFor(spec) {
-    const apiKey = process.env[spec.envKey];
-    if (!apiKey)
-        throw new Error(`${spec.envKey} not set`);
-    return apiKey;
-}
-/** Append `/messages` (Anthropic-style) taking baseUrl shape into account. */
-function anthropicUrl(spec) {
-    return spec.baseUrl.endsWith("/v1")
-        ? `${spec.baseUrl}/messages`
-        : `${spec.baseUrl}/v1/messages`;
-}
-/** Append `/chat/completions` (OpenAI-style). */
-function openaiUrl(spec) {
-    return `${spec.baseUrl}/chat/completions`;
-}
-function buildRequest(spec, modelId, messages, opts, apiKey, signal) {
-    if (spec.api === "anthropic-messages") {
-        return buildAnthropicMessages({ spec, modelId, messages, opts, apiKey, signal });
-    }
-    return buildOpenaiCompletions({ spec, modelId, messages, opts, apiKey, signal });
-}
-function buildAnthropicMessages(args) {
-    const { spec, modelId, messages, opts, apiKey, signal } = args;
-    const system = messages
-        .filter((m) => m.role === "system")
-        .map((m) => m.content)
-        .join("\n");
-    return {
-        url: anthropicUrl(spec),
-        init: {
-            method: "POST",
-            signal,
-            headers: {
-                "content-type": "application/json",
-                "x-api-key": apiKey,
-                "anthropic-version": "2023-06-01",
-            },
-            body: JSON.stringify({
-                model: modelId,
-                max_tokens: opts.maxTokens ?? 256,
-                ...(system ? { system } : {}),
-                messages: messages
-                    .filter((m) => m.role !== "system")
-                    .map((m) => ({ role: m.role, content: m.content })),
-            }),
-        },
-    };
-}
-function buildOpenaiCompletions(args) {
-    const { spec, modelId, messages, opts, apiKey, signal } = args;
-    // OpenAI's `max_completion_tokens` (newer family) vs. the cross-provider
-    // `max_tokens`. Almost every OpenAI-completions provider accepts `max_tokens`;
-    // OpenAI itself prefers `max_completion_tokens` so we surface that as a
-    // per-provider override in the registry.
-    const maxField = spec.maxTokensField ?? "max_tokens";
-    const headers = {
-        "content-type": "application/json",
-        authorization: `Bearer ${apiKey}`,
-    };
-    if (spec.extraHeaders) {
-        for (const [k, v] of Object.entries(spec.extraHeaders))
-            headers[k] = v;
-    }
-    return {
-        url: openaiUrl(spec),
-        init: {
-            method: "POST",
-            signal,
-            headers,
-            body: JSON.stringify({
-                model: modelId,
-                [maxField]: opts.maxTokens ?? 256,
-                messages,
-            }),
-        },
-    };
-}
-// ── Response extractors ─────────────────────────────────────────────────────
-function extractAnthropicText(data) {
-    const content = data.content ?? [];
-    return content
-        .filter((block) => block.type === "text" && typeof block.text === "string")
-        .map((block) => block.text)
-        .join("");
-}
-function extractOpenaiText(data) {
-    return (data.choices?.[0]?.message?.content ??
-        "");
-}
-function extractText(spec, data) {
-    return spec.api === "anthropic-messages" ? extractAnthropicText(data) : extractOpenaiText(data);
-}
-// ── Public API ───────────────────────────────────────────────────────────────
-/**
- * Make a provider-agnostic chat call and return the final assistant text.
- *
- * @throws if the relevant API key isn't set or the upstream returns non-2xx
- */
-export async function chat(model, messages, opts = {}) {
-    const { provider, modelId, api } = resolveProvider(model);
-    const spec = providerByPrefix(provider);
-    // For bare-id inference where the prefix isn't in the registry (the
-    // generic "assume OpenAI" fallback), synthesize a pseudo-spec so the
-    // OpenAI-completions builder still runs.
-    const resolvedSpec = spec ?? {
-        prefix: provider,
-        displayName: provider,
-        envKey: "OPENAI_API_KEY",
-        baseUrl: "https://api.openai.com/v1",
-        api,
-        host: "openai.com",
-        fastModel: modelId,
-        sampleModel: modelId,
-    };
-    return withRetry(async (signal) => {
-        const apiKey = apiKeyFor(resolvedSpec);
-        const { url, init } = buildRequest(resolvedSpec, modelId, messages, opts, apiKey, signal);
-        const res = await fetch(url, init);
-        if (!res.ok) {
-            const text = await res.text().catch(() => "");
-            throw new Error(`${resolvedSpec.prefix} api ${res.status}: ${text}`);
-        }
-        const data = await res.json();
-        return extractText(resolvedSpec, data);
-    }, opts.timeoutMs ?? 30_000);
-}
-/** Compatibility wrapper for older single-turn call sites. */
-export async function callLlm(model, systemPrompt, userPrompt, opts = {}) {
-    return chat(model, [
-        { role: "system", content: systemPrompt },
-        { role: "user", content: userPrompt },
-    ], opts);
-}
-/**
- * Single retry on transient upstream failures. The screener and classifier
- * call this inline on every incoming event, so a single 429/503 from the
- * provider would otherwise silently drop the event and break routing.
- */
-async function withRetry(call, timeoutMs) {
-    for (let attempt = 0; attempt < 2; attempt++) {
-        const ctrl = new AbortController();
-        const timer = setTimeout(() => ctrl.abort(), timeoutMs);
-        try {
-            return await call(ctrl.signal);
-        }
-        catch (err) {
-            const msg = err instanceof Error ? err.message : String(err);
-            const transient = /\b(429|5\d\d)\b/.test(msg);
-            if (attempt === 1 || !transient)
-                throw err;
-            await new Promise((r) => setTimeout(r, 750));
-        }
-        finally {
-            clearTimeout(timer);
-        }
-    }
-    // Unreachable — loop either returns or throws.
-    throw new Error("chat: retry loop fell through");
-}
-//# sourceMappingURL=llm.js.map

package/dist/engine/llm.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"llm.js","sourceRoot":"","sources":["../../src/engine/llm.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAEH,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAmC,MAAM,iBAAiB,CAAC;AAC/F,OAAO,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AA6BvD,gFAAgF;AAEhF;;;;;;;GAOG;AACH,MAAM,UAAU,eAAe,CAAC,KAAa;IAC3C,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IACjC,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QACd,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,CAAC;QACnD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;QACpC,MAAM,IAAI,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC;QACtC,IAAI,IAAI,EAAE,CAAC;YACT,OAAO;gBACL,QAAQ,EAAE,IAAI,CAAC,MAAM;gBACrB,OAAO,EAAE,IAAI;gBACb,GAAG,EAAE,IAAI,CAAC,GAAG;aACd,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,KAAK,CACb,4CAA4C,MAAM,IAAI;YACpD,gBAAgB,SAAS,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAC/D,CAAC;IACJ,CAAC;IAED,sEAAsE;IACtE,qEAAqE;IACrE,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,WAAW,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC;IAC9E,CAAC;IACD,IAAI,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC;QAC9C,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC;IAC3E,CAAC;IAED,6EAA6E;IAC7E,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,oBAAoB,EAAE,CAAC;AAC3E,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAAiB;IAChD,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,gBAAgB,EAAE,EAAE,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC1D,IAAI,UAAU;YAAE,OAAO,UAAU,CAAC;QAClC,MAAM,QAAQ,GAAG,yBAAyB,CAAC,QAAQ,CAAC,CAAC;QACrD,IAAI,QAAQ;YAAE,OAAO,QAAQ,CAAC;IAChC,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,SAAS,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,GAAG,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,SAAS,EAAE,CAAC;IAC1E,CAAC;IACD,0EAA0E;IAC1E,qDAAqD;IACrD,MAAM,UAAU,GAAG,gBAAgB,CAAC,QAAQ,CAAE,CAAC;IAC/C,OAAO,GAAG,UAAU,CAAC,MAAM,IAAI,UAAU,CAAC,SAAS,EAAE,CAAC;AACxD,CAAC;AAED,SAAS,yBAAyB,CAAC,QAAgB;IACjD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IACxC,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,MAAM,CAAC,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,CAAC;QAC7B,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,+EAA+E;AAE/E,SAAS,SAAS,CAAC,IAAkB;IACnC,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IACxC,IAAI,CAAC,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,GAAG,IAAI,CAAC,MAAM,UAAU,CAAC,CAAC;IACvD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,8EAA8E;AAC9E,SAAS,YAAY,CAAC,IAAkB;IACtC,OAAO,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC;QACjC,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,WAAW;QAC5B,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,cAAc,CAAC;AACpC,CAAC;AAED,iDAAiD;AACjD,SAAS,SAAS,CAAC,IAAkB;IACnC,OAAO,GAAG,IAAI,CAAC,OAAO,mBAAmB,CAAC;AAC5C,CAAC;AAED,SAAS,YAAY,CACnB,IAAkB,EAClB,OAAe,EACf,QAAuB,EACvB,IAAiB,EACjB,MAAc,EACd,MAAmB;IAEnB,IAAI,IAAI,CAAC,GAAG,KAAK,oBAAoB,EAAE,CAAC;QACtC,OAAO,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;AACnF,CAAC;AAED,SAAS,sBAAsB,CAAC,IAO/B;IACC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/D,MAAM,MAAM,GAAG,QAAQ;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;SAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;SACrB,IAAI,CAAC,IAAI,CAAC,CAAC;IACd,OAAO;QACL,GAAG,EAAE,YAAY,CAAC,IAAI,CAAC;QACvB,IAAI,EAAE;YACJ,MAAM,EAAE,MAAM;YACd,MAAM;YACN,OAAO,EAAE;gBACP,cAAc,EAAE,kBAAkB;gBAClC,WAAW,EAAE,MAAM;gBACnB,mBAAmB,EAAE,YAAY;aAClC;YACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,OAAO;gBACd,UAAU,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG;gBACjC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7B,QAAQ,EAAE,QAAQ;qBACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC;qBAClC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;aACtD,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,IAO/B;IACC,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,IAAI,CAAC;IAC/D,yEAAyE;IACzE,+EAA+E;IAC/E,wEAAwE;IACxE,yCAAyC;IACzC,MAAM,QAAQ,GAAG,IAAI,CAAC,cAAc,IAAI,YAAY,CAAC;IACrD,MAAM,OAAO,GAA2B;QACtC,cAAc,EAAE,kBAAkB;QAClC,aAAa,EAAE,UAAU,MAAM,EAAE;KAClC,CAAC;IACF,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;QACtB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,YAAY,CAAC;YAAE,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IACzE,CAAC;IACD,OAAO;QACL,GAAG,EAAE,SAAS,CAAC,IAAI,CAAC;QACpB,IAAI,EAAE;YACJ,MAAM,EAAE,MAAM;YACd,MAAM;YACN,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,KAAK,EAAE,OAAO;gBACd,CAAC,QAAQ,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,GAAG;gBACjC,QAAQ;aACT,CAAC;SACH;KACF,CAAC;AACJ,CAAC;AAED,+EAA+E;AAE/E,SAAS,oBAAoB,CAAC,IAAa;IACzC,MAAM,OAAO,GAAI,IAA8D,CAAC,OAAO,IAAI,EAAE,CAAC;IAC9F,OAAO,OAAO;SACX,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,KAAK,MAAM,IAAI,OAAO,KAAK,CAAC,IAAI,KAAK,QAAQ,CAAC;SAC1E,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAc,CAAC;SACpC,IAAI,CAAC,EAAE,CAAC,CAAC;AACd,CAAC;AAED,SAAS,iBAAiB,CAAC,IAAa;IACtC,OAAO,CACJ,IAAgE,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO;QAChG,EAAE,CACH,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,IAAkB,EAAE,IAAa;IACpD,OAAO,IAAI,CAAC,GAAG,KAAK,oBAAoB,CAAC,CAAC,CAAC,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,iBAAiB,CAAC,IAAI,CAAC,CAAC;AAClG,CAAC;AAED,gFAAgF;AAEhF;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,IAAI,CACxB,KAAa,EACb,QAAuB,EACvB,OAAoB,EAAE;IAEtB,MAAM,EAAE,QAAQ,EAAE,OAAO,EAAE,GAAG,EAAE,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IAC1D,MAAM,IAAI,GAAG,gBAAgB,CAAC,QAAQ,CAAC,CAAC;IACxC,oEAAoE;IACpE,qEAAqE;IACrE,yCAAyC;IACzC,MAAM,YAAY,GAChB,IAAI,IAAI;QACN,MAAM,EAAE,QAAQ;QAChB,WAAW,EAAE,QAAQ;QACrB,MAAM,EAAE,gBAAgB;QACxB,OAAO,EAAE,2BAA2B;QACpC,GAAG;QACH,IAAI,EAAE,YAAY;QAClB,SAAS,EAAE,OAAO;QAClB,WAAW,EAAE,OAAO;KACrB,CAAC;IACJ,OAAO,SAAS,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;QAChC,MAAM,MAAM,GAAG,SAAS,CAAC,YAAY,CAAC,CAAC;QACvC,MAAM,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,YAAY,CAAC,YAAY,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;QAC1F,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC;YAC9C,MAAM,IAAI,KAAK,CAAC,GAAG,YAAY,CAAC,MAAM,QAAQ,GAAG,CAAC,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;QACvE,CAAC;QACD,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QAC9B,OAAO,WAAW,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC;IACzC,CAAC,EAAE,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,8DAA8D;AAC9D,MAAM,CAAC,KAAK,UAAU,OAAO,CAC3B,KAAa,EACb,YAAoB,EACpB,UAAkB,EAClB,OAAuB,EAAE;IAEzB,OAAO,IAAI,CACT,KAAK,EACL;QACE,EAAE,IAAI,EAAE,QAAQ,EAAE,OAAO,EAAE,YAAY,EAAE;QACzC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,UAAU,EAAE;KACtC,EACD,IAAI,CACL,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,SAAS,CACtB,IAA8C,EAC9C,SAAiB;IAEjB,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,CAAC,EAAE,OAAO,EAAE,EAAE,CAAC;QAC7C,MAAM,IAAI,GAAG,IAAI,eAAe,EAAE,CAAC;QACnC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;QACxD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACjC,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC7D,MAAM,SAAS,GAAG,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC9C,IAAI,OAAO,KAAK,CAAC,IAAI,CAAC,SAAS;gBAAE,MAAM,GAAG,CAAC;YAC3C,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC/C,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,KAAK,CAAC,CAAC;QACtB,CAAC;IACH,CAAC;IACD,+CAA+C;IAC/C,MAAM,IAAI,KAAK,CAAC,+BAA+B,CAAC,CAAC;AACnD,CAAC"}

package/dist/engine/oauth.d.ts

@@ -1,43 +0,0 @@
-import { getOAuthProvider, getOAuthProviders, type OAuthCredentials } from "@earendil-works/pi-ai/oauth";
-/** Stored form — pi-ai's CLI tags each entry with `type: "oauth"`; we match it. */
-export type StoredCredentials = OAuthCredentials & {
-    type?: string;
-};
-export type AuthMap = Record<string, StoredCredentials>;
-/** OAuth providers that CANNOT fall back to an API key — login is mandatory. */
-export declare const OAUTH_ONLY_PROVIDERS: ReadonlySet<string>;
-/** OAuth provider id backing a model spec, or undefined if it's API-key based. */
-export declare function oauthProviderIdForModel(spec: string): string | undefined;
-/**
- * The env var pi-ai reads inside a sandbox for a provider's OAuth token, when
- * one exists. Returns undefined for providers with no env-var route (Codex),
- * which therefore cannot authenticate in the agentic-pi sandbox.
- */
-export declare function oauthEnvVarForProvider(id: string): string | undefined;
-/**
- * Resolve the credential-store path. Precedence:
- *   1. explicit argument (a caller-computed path),
- *   2. `LASTLIGHT_AUTH_FILE` (hard override),
- *   3. `<stateDir | $STATE_DIR | ./data>/auth.json`.
- * The CLI writes here and the harness reads here, so both must agree; passing
- * the harness's resolved `stateDir` keeps them aligned even if the process cwd
- * differs.
- */
-export declare function resolveAuthFile(explicit?: string, stateDir?: string): string;
-export declare function loadAuthMap(file?: string, stateDir?: string): AuthMap;
-export declare function saveAuthMap(map: AuthMap, file?: string, stateDir?: string): void;
-export declare function hasOAuthCredentials(id: string, file?: string, stateDir?: string): boolean;
-export interface OAuthKeyResult {
-    apiKey: string;
-    credentials: OAuthCredentials;
-}
-/**
- * Resolve a usable API key for an OAuth provider from stored credentials,
- * refreshing an expired token and persisting the rotated credentials back to
- * the store. Returns null when nothing is stored for `id`. Throws only if a
- * refresh actually fails (expired refresh token, revoked grant) — callers
- * should surface that as "re-run login".
- */
-export declare function resolveOAuthApiKey(id: string, file?: string, stateDir?: string): Promise<OAuthKeyResult | null>;
-/** Re-exported so callers depend on this module, not pi-ai's oauth entry directly. */
-export { getOAuthProvider, getOAuthProviders };

package/dist/engine/oauth.js

@@ -1,103 +0,0 @@
-/**
- * OAuth credential management for LLM providers that authenticate with a
- * subscription login instead of a static API key — ChatGPT Plus/Pro (Codex),
- * Claude Pro/Max, and GitHub Copilot.
- *
- * pi-ai (`@earendil-works/pi-ai/oauth`) owns the actual OAuth flows, token
- * refresh, and credential→apiKey conversion; this module is the thin Last
- * Light layer on top:
- *   - a single on-disk credential store (`auth.json`, same JSON shape pi-ai's
- *     own CLI writes) resolved under `$STATE_DIR` so the CLI (writer) and the
- *     running harness (reader) agree on one path,
- *   - `resolveOAuthApiKey()` — refresh-if-expired + persist rotated creds +
- *     return a usable key, used by the in-process chat path,
- *   - the model-prefix → provider-id map and the sandbox env-var route so the
- *     chat and sandbox executors can both find the right credential.
- *
- * Two consumption seams with different reach:
- *   - **chat** (in-process pi-ai) — passes `apiKey` in the stream options, so
- *     ALL three OAuth providers work, Codex included.
- *   - **sandbox** (agentic-pi) — has no apiKey option; it reads provider creds
- *     from env only. pi-ai honours `ANTHROPIC_OAUTH_TOKEN` and
- *     `COPILOT_GITHUB_TOKEN`, but Codex (chatgpt.com backend) has no env route,
- *     so a Codex model cannot run in the sandbox. See `oauthEnvVarForProvider`.
- */
-import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import { getOAuthApiKey, getOAuthProvider, getOAuthProviders, } from "@earendil-works/pi-ai/oauth";
-import { OAUTH_PROVIDERS, oauthProviderByModelPrefix, oauthProviderById } from "../providers.js";
-/** OAuth providers that CANNOT fall back to an API key — login is mandatory. */
-export const OAUTH_ONLY_PROVIDERS = new Set(OAUTH_PROVIDERS.filter((p) => p.oauthOnly).map((p) => p.id));
-/** OAuth provider id backing a model spec, or undefined if it's API-key based. */
-export function oauthProviderIdForModel(spec) {
-    const prefix = spec.includes("/") ? spec.slice(0, spec.indexOf("/")) : spec;
-    return oauthProviderByModelPrefix(prefix)?.id;
-}
-/**
- * The env var pi-ai reads inside a sandbox for a provider's OAuth token, when
- * one exists. Returns undefined for providers with no env-var route (Codex),
- * which therefore cannot authenticate in the agentic-pi sandbox.
- */
-export function oauthEnvVarForProvider(id) {
-    return oauthProviderById(id)?.sandboxEnvVar ?? undefined;
-}
-/**
- * Resolve the credential-store path. Precedence:
- *   1. explicit argument (a caller-computed path),
- *   2. `LASTLIGHT_AUTH_FILE` (hard override),
- *   3. `<stateDir | $STATE_DIR | ./data>/auth.json`.
- * The CLI writes here and the harness reads here, so both must agree; passing
- * the harness's resolved `stateDir` keeps them aligned even if the process cwd
- * differs.
- */
-export function resolveAuthFile(explicit, stateDir) {
-    if (explicit)
-        return resolve(explicit);
-    if (process.env.LASTLIGHT_AUTH_FILE)
-        return resolve(process.env.LASTLIGHT_AUTH_FILE);
-    return resolve(stateDir || process.env.STATE_DIR || "data", "auth.json");
-}
-export function loadAuthMap(file, stateDir) {
-    const path = resolveAuthFile(file, stateDir);
-    if (!existsSync(path))
-        return {};
-    try {
-        const parsed = JSON.parse(readFileSync(path, "utf8"));
-        return parsed && typeof parsed === "object" ? parsed : {};
-    }
-    catch {
-        return {};
-    }
-}
-export function saveAuthMap(map, file, stateDir) {
-    const path = resolveAuthFile(file, stateDir);
-    mkdirSync(dirname(path), { recursive: true });
-    // Mode 0600 — the file holds long-lived refresh tokens.
-    writeFileSync(path, JSON.stringify(map, null, 2), { mode: 0o600 });
-}
-export function hasOAuthCredentials(id, file, stateDir) {
-    return !!loadAuthMap(file, stateDir)[id];
-}
-/**
- * Resolve a usable API key for an OAuth provider from stored credentials,
- * refreshing an expired token and persisting the rotated credentials back to
- * the store. Returns null when nothing is stored for `id`. Throws only if a
- * refresh actually fails (expired refresh token, revoked grant) — callers
- * should surface that as "re-run login".
- */
-export async function resolveOAuthApiKey(id, file, stateDir) {
-    const map = loadAuthMap(file, stateDir);
-    if (!map[id])
-        return null;
-    const res = await getOAuthApiKey(id, map);
-    if (!res)
-        return null;
-    // Persist the rotated credentials so the next refresh chains from the new
-    // token rather than re-using a spent one.
-    map[id] = { type: "oauth", ...res.newCredentials };
-    saveAuthMap(map, file, stateDir);
-    return { apiKey: res.apiKey, credentials: res.newCredentials };
-}
-/** Re-exported so callers depend on this module, not pi-ai's oauth entry directly. */
-export { getOAuthProvider, getOAuthProviders };
-//# sourceMappingURL=oauth.js.map

package/dist/engine/oauth.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../src/engine/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAC7C,OAAO,EACL,cAAc,EACd,gBAAgB,EAChB,iBAAiB,GAElB,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,eAAe,EAAE,0BAA0B,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AAMjG,gFAAgF;AAChF,MAAM,CAAC,MAAM,oBAAoB,GAAwB,IAAI,GAAG,CAC9D,eAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAC5D,CAAC;AAEF,kFAAkF;AAClF,MAAM,UAAU,uBAAuB,CAAC,IAAY;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC5E,OAAO,0BAA0B,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;AAChD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,EAAU;IAC/C,OAAO,iBAAiB,CAAC,EAAE,CAAC,EAAE,aAAa,IAAI,SAAS,CAAC;AAC3D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe,CAAC,QAAiB,EAAE,QAAiB;IAClE,IAAI,QAAQ;QAAE,OAAO,OAAO,CAAC,QAAQ,CAAC,CAAC;IACvC,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB;QAAE,OAAO,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;IACrF,OAAO,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,MAAM,EAAE,WAAW,CAAC,CAAC;AAC3E,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,IAAa,EAAE,QAAiB;IAC1D,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;QACtD,OAAO,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAE,MAAkB,CAAC,CAAC,CAAC,EAAE,CAAC;IACzE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,MAAM,UAAU,WAAW,CAAC,GAAY,EAAE,IAAa,EAAE,QAAiB;IACxE,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IAC7C,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,wDAAwD;IACxD,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,EAAU,EAAE,IAAa,EAAE,QAAiB;IAC9E,OAAO,CAAC,CAAC,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC;AAC3C,CAAC;AAOD;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,EAAU,EACV,IAAa,EACb,QAAiB;IAEjB,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC;IACxC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,GAAG,GAAG,MAAM,cAAc,CAAC,EAAE,EAAE,GAAG,CAAC,CAAC;IAC1C,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAC;IACtB,0EAA0E;IAC1E,0CAA0C;IAC1C,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,GAAG,GAAG,CAAC,cAAc,EAAE,CAAC;IACnD,WAAW,CAAC,GAAG,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;IACjC,OAAO,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,cAAc,EAAE,CAAC;AACjE,CAAC;AAED,sFAAsF;AACtF,OAAO,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,CAAC"}

package/dist/engine/router.d.ts

@@ -1,29 +0,0 @@
-import type { EventEnvelope } from "../connectors/types.js";
-import type { StateDb } from "../state/db.js";
-/**
- * A routing decision — the single term for "what should process this event"
- * is `handler`. It names either an in-process handler (chat, status-report,
- * approval-response, …) or a workflow (issue-triage, pr-review, build, …);
- * the dispatcher decides which. The router itself performs no side effects.
- */
-export type Route = {
-    action: "handler";
-    handler: string;
-    context: Record<string, unknown>;
-} | {
-    action: "reply";
-    message: string;
-} | {
-    action: "ignore";
-    reason: string;
-};
-/** Optional dependencies the router needs to short-circuit paused runs. */
-export interface RouterDeps {
-    db?: StateDb;
-}
-/**
- * Event routing — deterministic for most events, LLM-classified for comments.
- * Maps normalized events to the handler that should process them. Returns a
- * decision only; the dispatcher performs the side effects.
- */
-export declare function routeEvent(envelope: EventEnvelope, deps?: RouterDeps): Promise<Route>;