limen-ai 1.0.0

package/dist/substrate/transport/adapters/groq_adapter.js

@@ -0,0 +1,179 @@
+/**
+ * Groq API adapter (OpenAI-compatible Chat Completions format).
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5C (Sprint 5C — Ollama + Groq + Mistral Adapters)
+ * Implements: ProviderAdapter for Groq's OpenAI-compatible Chat Completions API.
+ *
+ * Groq speaks the OpenAI Chat Completions wire format — this is a thin wrapper
+ * around openai_compat.ts shared functions. Minimal adapter.
+ *
+ * Auth: Authorization: Bearer {key} — same as OpenAI
+ * URL: {baseUrl}/openai/v1/chat/completions (default baseUrl: https://api.groq.com)
+ * Request: Delegates to buildOpenAICompatRequest() from openai_compat.ts
+ * Response: Delegates to parseOpenAICompatResponse() from openai_compat.ts
+ * Streaming: SSE via parseSSEStream() — same pattern as OpenAI Chat Completions
+ * Deliberation: Always estimated with 0 tokens (Groq does not report reasoning tokens)
+ *
+ * Security:
+ *   - C-SEC-P5-01/02: API key NEVER in logs or error messages
+ *   - C-SEC-P5-04 / CR-1: API key resolved ONCE at creation
+ *   - C-SEC-P5-22: Provider output is untrusted input
+ *   - C-SEC-P5-23: Tool call structural validation (via openai_compat)
+ *
+ * Retryable: 429, 500, 502, 503
+ */
+import { buildOpenAICompatRequest, parseOpenAICompatResponse, } from './openai_compat.js';
+import { parseSSEStream } from '../stream_parser.js';
+// ─── Constants ───
+/** Retryable HTTP status codes for Groq */
+const RETRYABLE_STATUS_CODES = new Set([429, 500, 502, 503]);
+// ─── Groq Adapter Factory ───
+/**
+ * Create a Groq API adapter.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the Groq API (e.g., 'https://api.groq.com')
+ * @param apiKey - API key (resolved ONCE at creation — CR-1 / C-SEC-P5-04)
+ * @param time - Optional TimeProvider for clock injection (Hard Stop #7)
+ */
+export function createGroqAdapter(providerId, baseUrl, apiKey, time) {
+    // CR-1 / C-SEC-P5-04: Key resolved once at creation
+    const resolvedKey = apiKey;
+    function buildRequest(request, streaming) {
+        const headers = {
+            'content-type': 'application/json',
+            'authorization': `Bearer ${resolvedKey}`,
+        };
+        const url = `${baseUrl}/openai/v1/chat/completions`;
+        return buildOpenAICompatRequest(request, streaming, url, headers);
+    }
+    function parseResponse(httpResponse) {
+        return parseOpenAICompatResponse(httpResponse, providerId);
+    }
+    function parseStream(body, signal) {
+        // Groq does not report reasoning tokens — deliberation is always estimated
+        let deliberation = {
+            deliberationTokens: 0,
+            accountingMode: 'estimated',
+            providerReportedThinkingTokens: null,
+        };
+        let totalMs = 0;
+        const clock = time ?? { nowMs: () => Date.now() }; // clock-exempt: fallback only
+        const streamStart = clock.nowMs();
+        async function* processStream() {
+            for await (const event of parseSSEStream(body, signal, time)) {
+                // Skip empty data
+                if (!event.data || event.data === '[DONE]')
+                    continue;
+                let parsed;
+                try {
+                    parsed = JSON.parse(event.data);
+                }
+                catch {
+                    continue; // Skip unparseable events
+                }
+                const choices = parsed.choices;
+                if (!Array.isArray(choices) || choices.length === 0) {
+                    // Check for usage-only event (streaming usage stats)
+                    const streamUsage = parsed.usage;
+                    if (streamUsage) {
+                        const promptToks = typeof streamUsage.prompt_tokens === 'number' ? streamUsage.prompt_tokens : 0;
+                        const completionToks = typeof streamUsage.completion_tokens === 'number' ? streamUsage.completion_tokens : 0;
+                        yield {
+                            type: 'usage',
+                            inputTokens: promptToks,
+                            outputTokens: completionToks,
+                        };
+                    }
+                    continue;
+                }
+                const firstChoice = choices[0];
+                const delta = firstChoice.delta;
+                const finishReason = firstChoice.finish_reason;
+                if (delta) {
+                    // Content delta
+                    const content = delta.content;
+                    if (typeof content === 'string' && content.length > 0) {
+                        yield {
+                            type: 'content_delta',
+                            delta: content,
+                        };
+                    }
+                    // Tool call deltas
+                    const toolCallDeltas = delta.tool_calls;
+                    if (Array.isArray(toolCallDeltas)) {
+                        for (const tcd of toolCallDeltas) {
+                            const fn = tcd.function;
+                            const id = typeof tcd.id === 'string' ? tcd.id : '';
+                            const name = typeof fn?.name === 'string' ? fn.name : '';
+                            const argsDelta = typeof fn?.arguments === 'string' ? fn.arguments : '';
+                            if (argsDelta || id || name) {
+                                yield {
+                                    type: 'tool_call_delta',
+                                    toolCallId: id,
+                                    name,
+                                    inputDelta: argsDelta,
+                                };
+                            }
+                        }
+                    }
+                }
+                // Finish reason
+                if (finishReason) {
+                    const mapped = finishReason === 'stop' ? 'stop'
+                        : finishReason === 'length' ? 'length'
+                            : finishReason === 'tool_calls' ? 'tool_use'
+                                : finishReason === 'content_filter' ? 'content_filter'
+                                    : 'stop';
+                    yield {
+                        type: 'done',
+                        finishReason: mapped,
+                    };
+                }
+            }
+            // Set timing after stream completes
+            totalMs = clock.nowMs() - streamStart;
+        }
+        return {
+            stream: processStream(),
+            getDeliberation: () => deliberation,
+            getTotalMs: () => totalMs || (clock.nowMs() - streamStart),
+        };
+    }
+    function supportsStreaming() {
+        return true;
+    }
+    function isRetryableStatus(status) {
+        return RETRYABLE_STATUS_CODES.has(status);
+    }
+    const adapter = {
+        providerId,
+        buildRequest,
+        parseResponse,
+        parseStream,
+        supportsStreaming,
+        isRetryableStatus,
+    };
+    return Object.freeze(adapter);
+}
+/**
+ * Create a Groq adapter with API key from environment variable.
+ * C-SEC-P5-01/02: Key is read from env and NEVER logged.
+ * CR-1: Key resolved once at creation.
+ *
+ * @param providerId - Provider identifier (defaults to 'groq')
+ * @param time - Optional TimeProvider
+ * @throws Error if GROQ_API_KEY env var is not set (message does NOT include key value)
+ */
+export function createGroqAdapterFromEnv(providerId = 'groq', time) {
+    const apiKey = process.env['GROQ_API_KEY'];
+    // C-SEC-P5-01: NEVER include the key value in error messages
+    if (!apiKey) {
+        throw new Error(`TRANSPORT_MISSING_API_KEY: API key environment variable is not set. Provider: ${providerId}`);
+    }
+    return createGroqAdapter(providerId, 'https://api.groq.com', apiKey, time);
+}
+// ─── Exported for testing ───
+export { RETRYABLE_STATUS_CODES };
+//# sourceMappingURL=groq_adapter.js.map

package/dist/substrate/transport/adapters/groq_adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"groq_adapter.js","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/groq_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAcH,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,oBAAoB;AAEpB,2CAA2C;AAC3C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7D,+BAA+B;AAE/B;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAC/B,UAAkB,EAClB,OAAe,EACf,MAAc,EACd,IAAmB;IAEnB,oDAAoD;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC;IAE3B,SAAS,YAAY,CAAC,OAAmB,EAAE,SAAkB;QAC3D,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,WAAW,EAAE;SACzC,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,OAAO,6BAA6B,CAAC;QACpD,OAAO,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,SAAS,aAAa,CAAC,YAAmC;QACxD,OAAO,yBAAyB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,WAAW,CAClB,IAAgC,EAChC,MAAoB;QAEpB,2EAA2E;QAC3E,IAAI,YAAY,GAAwB;YACtC,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,WAAW;YAC3B,8BAA8B,EAAE,IAAI;SACrC,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,8BAA8B;QACjF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAElC,KAAK,SAAS,CAAC,CAAC,aAAa;YAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7D,kBAAkB;gBAClB,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAErD,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,0BAA0B;gBACtC,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAqD,CAAC;gBAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpD,qDAAqD;oBACrD,MAAM,WAAW,GAAG,MAAM,CAAC,KAA4C,CAAC;oBACxE,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;wBACjG,MAAM,cAAc,GAAG,OAAO,WAAW,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;wBAE7G,MAAM;4BACJ,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,UAAU;4BACvB,YAAY,EAAE,cAAc;yBAC7B,CAAC;oBACJ,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,WAAW,CAAC,KAA4C,CAAC;gBACvE,MAAM,YAAY,GAAG,WAAW,CAAC,aAA0C,CAAC;gBAE5E,IAAI,KAAK,EAAE,CAAC;oBACV,gBAAgB;oBAChB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtD,MAAM;4BACJ,IAAI,EAAE,eAAe;4BACrB,KAAK,EAAE,OAAO;yBACf,CAAC;oBACJ,CAAC;oBAED,mBAAmB;oBACnB,MAAM,cAAc,GAAG,KAAK,CAAC,UAAwD,CAAC;oBACtF,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;wBAClC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;4BACjC,MAAM,EAAE,GAAG,GAAG,CAAC,QAA+C,CAAC;4BAC/D,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACpD,MAAM,IAAI,GAAG,OAAO,EAAE,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;4BACzD,MAAM,SAAS,GAAG,OAAO,EAAE,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;4BAExE,IAAI,SAAS,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;gCAC5B,MAAM;oCACJ,IAAI,EAAE,iBAAiB;oCACvB,UAAU,EAAE,EAAE;oCACd,IAAI;oCACJ,UAAU,EAAE,SAAS;iCACtB,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,gBAAgB;gBAChB,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,MAAM,GAAG,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,MAAe;wBACtD,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAiB;4BAC/C,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,UAAmB;gCACrD,CAAC,CAAC,YAAY,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAyB;oCAC/D,CAAC,CAAC,MAAe,CAAC;oBAEpB,MAAM;wBACJ,IAAI,EAAE,MAAM;wBACZ,YAAY,EAAE,MAAM;qBACrB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,oCAAoC;YACpC,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC;QACxC,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa,EAAE;YACvB,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY;YACnC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,SAAS,iBAAiB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,iBAAiB,CAAC,MAAc;QACvC,OAAO,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,UAAU;QACV,YAAY;QACZ,aAAa;QACb,WAAW;QACX,iBAAiB;QACjB,iBAAiB;KAClB,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,wBAAwB,CACtC,aAAqB,MAAM,EAC3B,IAAmB;IAEnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;IAE3C,6DAA6D;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iFAAiF,UAAU,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO,iBAAiB,CAAC,UAAU,EAAE,sBAAsB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAC7E,CAAC;AAED,+BAA+B;AAC/B,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/substrate/transport/adapters/mistral_adapter.d.ts

@@ -0,0 +1,50 @@
+/**
+ * Mistral API adapter (OpenAI-compatible Chat Completions format).
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5C (Sprint 5C — Ollama + Groq + Mistral Adapters)
+ * Implements: ProviderAdapter for Mistral's OpenAI-compatible Chat Completions API.
+ *
+ * Mistral speaks the OpenAI Chat Completions wire format — this is a thin wrapper
+ * around openai_compat.ts shared functions. Minimal adapter.
+ *
+ * Auth: Authorization: Bearer {key} — same as OpenAI
+ * URL: {baseUrl}/v1/chat/completions (default baseUrl: https://api.mistral.ai)
+ * Request: Delegates to buildOpenAICompatRequest() from openai_compat.ts
+ * Response: Delegates to parseOpenAICompatResponse() from openai_compat.ts
+ * Streaming: SSE via parseSSEStream() — same pattern as OpenAI Chat Completions
+ * Deliberation: Always estimated with 0 tokens (Mistral does not report reasoning tokens)
+ *
+ * Security:
+ *   - C-SEC-P5-01/02: API key NEVER in logs or error messages
+ *   - C-SEC-P5-04 / CR-1: API key resolved ONCE at creation
+ *   - C-SEC-P5-22: Provider output is untrusted input
+ *   - C-SEC-P5-23: Tool call structural validation (via openai_compat)
+ *
+ * Retryable: 429, 500, 502, 503
+ */
+import type { ProviderAdapter } from '../transport_types.js';
+import type { TimeProvider } from '../../../kernel/interfaces/time.js';
+/** Retryable HTTP status codes for Mistral */
+declare const RETRYABLE_STATUS_CODES: Set<number>;
+/**
+ * Create a Mistral API adapter.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the Mistral API (e.g., 'https://api.mistral.ai')
+ * @param apiKey - API key (resolved ONCE at creation — CR-1 / C-SEC-P5-04)
+ * @param time - Optional TimeProvider for clock injection (Hard Stop #7)
+ */
+export declare function createMistralAdapter(providerId: string, baseUrl: string, apiKey: string, time?: TimeProvider): ProviderAdapter;
+/**
+ * Create a Mistral adapter with API key from environment variable.
+ * C-SEC-P5-01/02: Key is read from env and NEVER logged.
+ * CR-1: Key resolved once at creation.
+ *
+ * @param providerId - Provider identifier (defaults to 'mistral')
+ * @param time - Optional TimeProvider
+ * @throws Error if MISTRAL_API_KEY env var is not set (message does NOT include key value)
+ */
+export declare function createMistralAdapterFromEnv(providerId?: string, time?: TimeProvider): ProviderAdapter;
+export { RETRYABLE_STATUS_CODES };
+//# sourceMappingURL=mistral_adapter.d.ts.map

package/dist/substrate/transport/adapters/mistral_adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mistral_adapter.d.ts","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/mistral_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EACV,eAAe,EAMhB,MAAM,uBAAuB,CAAC;AAU/B,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAIvE,8CAA8C;AAC9C,QAAA,MAAM,sBAAsB,aAAgC,CAAC;AAI7D;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,MAAM,EACf,MAAM,EAAE,MAAM,EACd,IAAI,CAAC,EAAE,YAAY,GAClB,eAAe,CA4IjB;AAED;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,CACzC,UAAU,GAAE,MAAkB,EAC9B,IAAI,CAAC,EAAE,YAAY,GAClB,eAAe,CAWjB;AAGD,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/substrate/transport/adapters/mistral_adapter.js

@@ -0,0 +1,179 @@
+/**
+ * Mistral API adapter (OpenAI-compatible Chat Completions format).
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5C (Sprint 5C — Ollama + Groq + Mistral Adapters)
+ * Implements: ProviderAdapter for Mistral's OpenAI-compatible Chat Completions API.
+ *
+ * Mistral speaks the OpenAI Chat Completions wire format — this is a thin wrapper
+ * around openai_compat.ts shared functions. Minimal adapter.
+ *
+ * Auth: Authorization: Bearer {key} — same as OpenAI
+ * URL: {baseUrl}/v1/chat/completions (default baseUrl: https://api.mistral.ai)
+ * Request: Delegates to buildOpenAICompatRequest() from openai_compat.ts
+ * Response: Delegates to parseOpenAICompatResponse() from openai_compat.ts
+ * Streaming: SSE via parseSSEStream() — same pattern as OpenAI Chat Completions
+ * Deliberation: Always estimated with 0 tokens (Mistral does not report reasoning tokens)
+ *
+ * Security:
+ *   - C-SEC-P5-01/02: API key NEVER in logs or error messages
+ *   - C-SEC-P5-04 / CR-1: API key resolved ONCE at creation
+ *   - C-SEC-P5-22: Provider output is untrusted input
+ *   - C-SEC-P5-23: Tool call structural validation (via openai_compat)
+ *
+ * Retryable: 429, 500, 502, 503
+ */
+import { buildOpenAICompatRequest, parseOpenAICompatResponse, } from './openai_compat.js';
+import { parseSSEStream } from '../stream_parser.js';
+// ─── Constants ───
+/** Retryable HTTP status codes for Mistral */
+const RETRYABLE_STATUS_CODES = new Set([429, 500, 502, 503]);
+// ─── Mistral Adapter Factory ───
+/**
+ * Create a Mistral API adapter.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the Mistral API (e.g., 'https://api.mistral.ai')
+ * @param apiKey - API key (resolved ONCE at creation — CR-1 / C-SEC-P5-04)
+ * @param time - Optional TimeProvider for clock injection (Hard Stop #7)
+ */
+export function createMistralAdapter(providerId, baseUrl, apiKey, time) {
+    // CR-1 / C-SEC-P5-04: Key resolved once at creation
+    const resolvedKey = apiKey;
+    function buildRequest(request, streaming) {
+        const headers = {
+            'content-type': 'application/json',
+            'authorization': `Bearer ${resolvedKey}`,
+        };
+        const url = `${baseUrl}/v1/chat/completions`;
+        return buildOpenAICompatRequest(request, streaming, url, headers);
+    }
+    function parseResponse(httpResponse) {
+        return parseOpenAICompatResponse(httpResponse, providerId);
+    }
+    function parseStream(body, signal) {
+        // Mistral does not report reasoning tokens — deliberation is always estimated
+        let deliberation = {
+            deliberationTokens: 0,
+            accountingMode: 'estimated',
+            providerReportedThinkingTokens: null,
+        };
+        let totalMs = 0;
+        const clock = time ?? { nowMs: () => Date.now() }; // clock-exempt: fallback only
+        const streamStart = clock.nowMs();
+        async function* processStream() {
+            for await (const event of parseSSEStream(body, signal, time)) {
+                // Skip empty data
+                if (!event.data || event.data === '[DONE]')
+                    continue;
+                let parsed;
+                try {
+                    parsed = JSON.parse(event.data);
+                }
+                catch {
+                    continue; // Skip unparseable events
+                }
+                const choices = parsed.choices;
+                if (!Array.isArray(choices) || choices.length === 0) {
+                    // Check for usage-only event (streaming usage stats)
+                    const streamUsage = parsed.usage;
+                    if (streamUsage) {
+                        const promptToks = typeof streamUsage.prompt_tokens === 'number' ? streamUsage.prompt_tokens : 0;
+                        const completionToks = typeof streamUsage.completion_tokens === 'number' ? streamUsage.completion_tokens : 0;
+                        yield {
+                            type: 'usage',
+                            inputTokens: promptToks,
+                            outputTokens: completionToks,
+                        };
+                    }
+                    continue;
+                }
+                const firstChoice = choices[0];
+                const delta = firstChoice.delta;
+                const finishReason = firstChoice.finish_reason;
+                if (delta) {
+                    // Content delta
+                    const content = delta.content;
+                    if (typeof content === 'string' && content.length > 0) {
+                        yield {
+                            type: 'content_delta',
+                            delta: content,
+                        };
+                    }
+                    // Tool call deltas
+                    const toolCallDeltas = delta.tool_calls;
+                    if (Array.isArray(toolCallDeltas)) {
+                        for (const tcd of toolCallDeltas) {
+                            const fn = tcd.function;
+                            const id = typeof tcd.id === 'string' ? tcd.id : '';
+                            const name = typeof fn?.name === 'string' ? fn.name : '';
+                            const argsDelta = typeof fn?.arguments === 'string' ? fn.arguments : '';
+                            if (argsDelta || id || name) {
+                                yield {
+                                    type: 'tool_call_delta',
+                                    toolCallId: id,
+                                    name,
+                                    inputDelta: argsDelta,
+                                };
+                            }
+                        }
+                    }
+                }
+                // Finish reason
+                if (finishReason) {
+                    const mapped = finishReason === 'stop' ? 'stop'
+                        : finishReason === 'length' ? 'length'
+                            : finishReason === 'tool_calls' ? 'tool_use'
+                                : finishReason === 'content_filter' ? 'content_filter'
+                                    : 'stop';
+                    yield {
+                        type: 'done',
+                        finishReason: mapped,
+                    };
+                }
+            }
+            // Set timing after stream completes
+            totalMs = clock.nowMs() - streamStart;
+        }
+        return {
+            stream: processStream(),
+            getDeliberation: () => deliberation,
+            getTotalMs: () => totalMs || (clock.nowMs() - streamStart),
+        };
+    }
+    function supportsStreaming() {
+        return true;
+    }
+    function isRetryableStatus(status) {
+        return RETRYABLE_STATUS_CODES.has(status);
+    }
+    const adapter = {
+        providerId,
+        buildRequest,
+        parseResponse,
+        parseStream,
+        supportsStreaming,
+        isRetryableStatus,
+    };
+    return Object.freeze(adapter);
+}
+/**
+ * Create a Mistral adapter with API key from environment variable.
+ * C-SEC-P5-01/02: Key is read from env and NEVER logged.
+ * CR-1: Key resolved once at creation.
+ *
+ * @param providerId - Provider identifier (defaults to 'mistral')
+ * @param time - Optional TimeProvider
+ * @throws Error if MISTRAL_API_KEY env var is not set (message does NOT include key value)
+ */
+export function createMistralAdapterFromEnv(providerId = 'mistral', time) {
+    const apiKey = process.env['MISTRAL_API_KEY'];
+    // C-SEC-P5-01: NEVER include the key value in error messages
+    if (!apiKey) {
+        throw new Error(`TRANSPORT_MISSING_API_KEY: API key environment variable is not set. Provider: ${providerId}`);
+    }
+    return createMistralAdapter(providerId, 'https://api.mistral.ai', apiKey, time);
+}
+// ─── Exported for testing ───
+export { RETRYABLE_STATUS_CODES };
+//# sourceMappingURL=mistral_adapter.js.map

package/dist/substrate/transport/adapters/mistral_adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mistral_adapter.js","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/mistral_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAcH,OAAO,EACL,wBAAwB,EACxB,yBAAyB,GAC1B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAGrD,oBAAoB;AAEpB,8CAA8C;AAC9C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC;AAE7D,kCAAkC;AAElC;;;;;;;GAOG;AACH,MAAM,UAAU,oBAAoB,CAClC,UAAkB,EAClB,OAAe,EACf,MAAc,EACd,IAAmB;IAEnB,oDAAoD;IACpD,MAAM,WAAW,GAAG,MAAM,CAAC;IAE3B,SAAS,YAAY,CAAC,OAAmB,EAAE,SAAkB;QAC3D,MAAM,OAAO,GAA2B;YACtC,cAAc,EAAE,kBAAkB;YAClC,eAAe,EAAE,UAAU,WAAW,EAAE;SACzC,CAAC;QAEF,MAAM,GAAG,GAAG,GAAG,OAAO,sBAAsB,CAAC;QAC7C,OAAO,wBAAwB,CAAC,OAAO,EAAE,SAAS,EAAE,GAAG,EAAE,OAAO,CAAC,CAAC;IACpE,CAAC;IAED,SAAS,aAAa,CAAC,YAAmC;QACxD,OAAO,yBAAyB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC7D,CAAC;IAED,SAAS,WAAW,CAClB,IAAgC,EAChC,MAAoB;QAEpB,8EAA8E;QAC9E,IAAI,YAAY,GAAwB;YACtC,kBAAkB,EAAE,CAAC;YACrB,cAAc,EAAE,WAAW;YAC3B,8BAA8B,EAAE,IAAI;SACrC,CAAC;QACF,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,MAAM,KAAK,GAAG,IAAI,IAAI,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,8BAA8B;QACjF,MAAM,WAAW,GAAG,KAAK,CAAC,KAAK,EAAE,CAAC;QAElC,KAAK,SAAS,CAAC,CAAC,aAAa;YAC3B,IAAI,KAAK,EAAE,MAAM,KAAK,IAAI,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,CAAC;gBAC7D,kBAAkB;gBAClB,IAAI,CAAC,KAAK,CAAC,IAAI,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ;oBAAE,SAAS;gBAErD,IAAI,MAA+B,CAAC;gBACpC,IAAI,CAAC;oBACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,CAA4B,CAAC;gBAC7D,CAAC;gBAAC,MAAM,CAAC;oBACP,SAAS,CAAC,0BAA0B;gBACtC,CAAC;gBAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAqD,CAAC;gBAC7E,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;oBACpD,qDAAqD;oBACrD,MAAM,WAAW,GAAG,MAAM,CAAC,KAA4C,CAAC;oBACxE,IAAI,WAAW,EAAE,CAAC;wBAChB,MAAM,UAAU,GAAG,OAAO,WAAW,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC;wBACjG,MAAM,cAAc,GAAG,OAAO,WAAW,CAAC,iBAAiB,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC,CAAC;wBAE7G,MAAM;4BACJ,IAAI,EAAE,OAAO;4BACb,WAAW,EAAE,UAAU;4BACvB,YAAY,EAAE,cAAc;yBAC7B,CAAC;oBACJ,CAAC;oBACD,SAAS;gBACX,CAAC;gBAED,MAAM,WAAW,GAAG,OAAO,CAAC,CAAC,CAAE,CAAC;gBAChC,MAAM,KAAK,GAAG,WAAW,CAAC,KAA4C,CAAC;gBACvE,MAAM,YAAY,GAAG,WAAW,CAAC,aAA0C,CAAC;gBAE5E,IAAI,KAAK,EAAE,CAAC;oBACV,gBAAgB;oBAChB,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;oBAC9B,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;wBACtD,MAAM;4BACJ,IAAI,EAAE,eAAe;4BACrB,KAAK,EAAE,OAAO;yBACf,CAAC;oBACJ,CAAC;oBAED,mBAAmB;oBACnB,MAAM,cAAc,GAAG,KAAK,CAAC,UAAwD,CAAC;oBACtF,IAAI,KAAK,CAAC,OAAO,CAAC,cAAc,CAAC,EAAE,CAAC;wBAClC,KAAK,MAAM,GAAG,IAAI,cAAc,EAAE,CAAC;4BACjC,MAAM,EAAE,GAAG,GAAG,CAAC,QAA+C,CAAC;4BAC/D,MAAM,EAAE,GAAG,OAAO,GAAG,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;4BACpD,MAAM,IAAI,GAAG,OAAO,EAAE,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;4BACzD,MAAM,SAAS,GAAG,OAAO,EAAE,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC;4BAExE,IAAI,SAAS,IAAI,EAAE,IAAI,IAAI,EAAE,CAAC;gCAC5B,MAAM;oCACJ,IAAI,EAAE,iBAAiB;oCACvB,UAAU,EAAE,EAAE;oCACd,IAAI;oCACJ,UAAU,EAAE,SAAS;iCACtB,CAAC;4BACJ,CAAC;wBACH,CAAC;oBACH,CAAC;gBACH,CAAC;gBAED,gBAAgB;gBAChB,IAAI,YAAY,EAAE,CAAC;oBACjB,MAAM,MAAM,GAAG,YAAY,KAAK,MAAM,CAAC,CAAC,CAAC,MAAe;wBACtD,CAAC,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAiB;4BAC/C,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,UAAmB;gCACrD,CAAC,CAAC,YAAY,KAAK,gBAAgB,CAAC,CAAC,CAAC,gBAAyB;oCAC/D,CAAC,CAAC,MAAe,CAAC;oBAEpB,MAAM;wBACJ,IAAI,EAAE,MAAM;wBACZ,YAAY,EAAE,MAAM;qBACrB,CAAC;gBACJ,CAAC;YACH,CAAC;YAED,oCAAoC;YACpC,OAAO,GAAG,KAAK,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC;QACxC,CAAC;QAED,OAAO;YACL,MAAM,EAAE,aAAa,EAAE;YACvB,eAAe,EAAE,GAAG,EAAE,CAAC,YAAY;YACnC,UAAU,EAAE,GAAG,EAAE,CAAC,OAAO,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,GAAG,WAAW,CAAC;SAC3D,CAAC;IACJ,CAAC;IAED,SAAS,iBAAiB;QACxB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,SAAS,iBAAiB,CAAC,MAAc;QACvC,OAAO,sBAAsB,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC;IAED,MAAM,OAAO,GAAoB;QAC/B,UAAU;QACV,YAAY;QACZ,aAAa;QACb,WAAW;QACX,iBAAiB;QACjB,iBAAiB;KAClB,CAAC;IAEF,OAAO,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;AAChC,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B,CACzC,aAAqB,SAAS,EAC9B,IAAmB;IAEnB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAC;IAE9C,6DAA6D;IAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,MAAM,IAAI,KAAK,CACb,iFAAiF,UAAU,EAAE,CAC9F,CAAC;IACJ,CAAC;IAED,OAAO,oBAAoB,CAAC,UAAU,EAAE,wBAAwB,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC;AAClF,CAAC;AAED,+BAA+B;AAC/B,OAAO,EAAE,sBAAsB,EAAE,CAAC"}

package/dist/substrate/transport/adapters/ollama_adapter.d.ts

@@ -0,0 +1,66 @@
+/**
+ * Ollama API adapter (local-only, NDJSON, no auth).
+ * S ref: §25.4 (LLM Gateway), I-01 (no SDK deps), I-04 (provider independence)
+ *
+ * Phase: 5C (Sprint 5C — Ollama + Groq + Mistral Adapters)
+ * Implements: ProviderAdapter for Ollama's local REST API.
+ *
+ * Ollama is fundamentally different from cloud providers:
+ *   - Local-only: C-SEC-P5-05 enforces localhost/127.0.0.1/[::1] restriction
+ *   - No auth: No API key, no Bearer token
+ *   - NDJSON streaming: Not SSE. Each line is a complete JSON object.
+ *   - Custom request format: `options` object instead of top-level fields
+ *   - Custom response format: `message` (singular), `prompt_eval_count`, `eval_count`
+ *   - Tool calls: `arguments` is an OBJECT (not JSON string like OpenAI)
+ *
+ * Auth: NONE. Ollama is a local server.
+ * URL: {baseUrl}/api/chat (default baseUrl: http://localhost:11434)
+ *
+ * C-SEC-P5-05: URL validation — ONLY allow localhost/127.0.0.1/[::1].
+ *              Throws TRANSPORT_INVALID_URL if non-local.
+ * C-SEC-P5-19 exception: TLS NOT required for localhost.
+ * C-SEC-P5-23: Tool call validation — name matches TOOL_NAME_PATTERN, args is object.
+ *
+ * Retryable: 429, 500, 502, 503
+ */
+import type { ProviderAdapter } from '../transport_types.js';
+import type { LlmToolCall } from '../../interfaces/substrate.js';
+import type { TimeProvider } from '../../../kernel/interfaces/time.js';
+/** Retryable HTTP status codes for Ollama */
+declare const RETRYABLE_STATUS_CODES: Set<number>;
+/** C-SEC-P5-23: Valid tool name pattern */
+declare const TOOL_NAME_PATTERN: RegExp;
+/** C-SEC-P5-05: Allowed localhost hostnames */
+declare const LOCALHOST_HOSTNAMES: Set<string>;
+/**
+ * C-SEC-P5-05: Validate that a URL points to localhost only.
+ * Ollama MUST only connect to local servers.
+ * Throws with TRANSPORT_INVALID_URL if non-local.
+ */
+declare function validateLocalhostUrl(baseUrl: string): void;
+/**
+ * Validate an Ollama tool call.
+ * C-SEC-P5-23: Name must match pattern, args must be an object.
+ * Ollama tool_calls use `arguments` as an OBJECT (not JSON string).
+ * Ollama does NOT provide a tool call id — we generate one.
+ */
+declare function validateOllamaToolCall(tc: Record<string, unknown>, index: number): LlmToolCall | null;
+/**
+ * Create an Ollama API adapter.
+ *
+ * C-SEC-P5-05: Validates that baseUrl is localhost at creation time.
+ * No API key — Ollama is a local server.
+ *
+ * @param providerId - Provider identifier for health tracking
+ * @param baseUrl - Base URL for the Ollama server (default: http://localhost:11434)
+ * @param time - Optional TimeProvider for clock injection (Hard Stop #7)
+ * @throws Error with TRANSPORT_INVALID_URL if baseUrl is not localhost
+ */
+export declare function createOllamaAdapter(providerId: string, baseUrl?: string, time?: TimeProvider): ProviderAdapter;
+/**
+ * Map Ollama done_reason to Limen finish reason.
+ * Ollama uses: 'stop', 'length', or undefined (defaults to 'stop').
+ */
+declare function mapOllamaFinishReason(reason: string | undefined, hasToolCalls: boolean): 'stop' | 'length' | 'tool_use' | 'content_filter';
+export { RETRYABLE_STATUS_CODES, TOOL_NAME_PATTERN, validateLocalhostUrl, validateOllamaToolCall, mapOllamaFinishReason, LOCALHOST_HOSTNAMES, };
+//# sourceMappingURL=ollama_adapter.d.ts.map

package/dist/substrate/transport/adapters/ollama_adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ollama_adapter.d.ts","sourceRoot":"","sources":["../../../../src/substrate/transport/adapters/ollama_adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AAEH,OAAO,KAAK,EACV,eAAe,EAMhB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EAKV,WAAW,EACZ,MAAM,+BAA+B,CAAC;AAEvC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oCAAoC,CAAC;AAIvE,6CAA6C;AAC7C,QAAA,MAAM,sBAAsB,aAAgC,CAAC;AAE7D,2CAA2C;AAC3C,QAAA,MAAM,iBAAiB,QAA6B,CAAC;AAErD,+CAA+C;AAC/C,QAAA,MAAM,mBAAmB,aAA+C,CAAC;AAIzE;;;;GAIG;AACH,iBAAS,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAmBnD;AAID;;;;;GAKG;AACH,iBAAS,sBAAsB,CAC7B,EAAE,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC3B,KAAK,EAAE,MAAM,GACZ,WAAW,GAAG,IAAI,CAoBpB;AA+KD;;;;;;;;;;GAUG;AACH,wBAAgB,mBAAmB,CACjC,UAAU,EAAE,MAAM,EAClB,OAAO,GAAE,MAAiC,EAC1C,IAAI,CAAC,EAAE,YAAY,GAClB,eAAe,CAwGjB;AAID;;;GAGG;AACH,iBAAS,qBAAqB,CAC5B,MAAM,EAAE,MAAM,GAAG,SAAS,EAC1B,YAAY,EAAE,OAAO,GACpB,MAAM,GAAG,QAAQ,GAAG,UAAU,GAAG,gBAAgB,CAUnD;AAGD,OAAO,EACL,sBAAsB,EACtB,iBAAiB,EACjB,oBAAoB,EACpB,sBAAsB,EACtB,qBAAqB,EACrB,mBAAmB,GACpB,CAAC"}