octoflow-core 1.0.0

package/dist/adapters/agents/backends/openai-api.d.ts

@@ -0,0 +1,13 @@
+import type { ApiJsonObject, Backend, BackendToolDef, OpenAiApiBackendConfig } from '../../../domain/contracts/backends.js';
+interface OpenAiToolDef {
+    type: 'function';
+    function: {
+        name: string;
+        description?: string;
+        parameters?: ApiJsonObject;
+    };
+}
+export declare function toOpenAiTools(tools: BackendToolDef[]): OpenAiToolDef[];
+export declare function createOpenAiApiBackend(config?: OpenAiApiBackendConfig): Backend;
+export {};
+//# sourceMappingURL=openai-api.d.ts.map

package/dist/adapters/agents/backends/openai-api.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"openai-api.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/backends/openai-api.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,aAAa,EACb,OAAO,EAIP,cAAc,EACd,sBAAsB,EACvB,MAAM,uCAAuC,CAAC;AAoG/C,UAAU,aAAa;IACrB,IAAI,EAAE,UAAU,CAAC;IACjB,QAAQ,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,aAAa,CAAA;KAAE,CAAC;CAC9E;AAED,wBAAgB,aAAa,CAAC,KAAK,EAAE,cAAc,EAAE,GAAG,aAAa,EAAE,CAStE;AACD,wBAAgB,sBAAsB,CACpC,MAAM,GAAE,sBAA2B,GAClC,OAAO,CAkNT"}

package/dist/adapters/agents/backends/openai-api.js

@@ -0,0 +1,251 @@
+import {
+  createUsage
+} from "../../../domain/contracts/messages.js";
+import {
+  ApiHttpError,
+  ApiKeyError
+} from "../../../domain/errors/index.js";
+import { createPromptCacheUsage } from "../../../domain/prompt-cache.js";
+import { buildPromptEnvelope } from "../../../prompts/envelope.js";
+import { buildFetchWithTimeout } from "../../../utils/timeout.js";
+import { APPROVAL_POSTURE_OPENAI_API } from "../approval-posture.js";
+import {
+  createToolCallAccumulator,
+  emitToolCallEvents,
+  isCustomApiBaseUrl,
+  normalizeToolSchema,
+  parseSseDataLine,
+  resolveApiBaseUrl
+} from "./api-shared.js";
+import {
+  buildOpenAiPayloadWithPrompt,
+  structuredHistoryToMessages
+} from "./native-messages/index.js";
+import {
+  BACKEND_METADATA,
+  createInfoFields
+} from "./shared.js";
+const META = BACKEND_METADATA["openai-api"];
+const DEFAULT_BASE_URL = "https://api.openai.com/v1";
+const BASE_URL_ENV_KEY = "OPENAI_BASE_URL";
+function parseSSELine(line) {
+  return parseSseDataLine(line);
+}
+function accumulateToolCalls(accumulators, deltas) {
+  for (const d of deltas) {
+    let acc = accumulators.get(d.index);
+    if (!acc) {
+      acc = createToolCallAccumulator(d.id ?? `call_${d.index}`);
+      accumulators.set(d.index, acc);
+    }
+    if (d.id) acc.id = d.id;
+    if (d.function?.name) acc.name += d.function.name;
+    if (d.function?.arguments) acc.arguments += d.function.arguments;
+  }
+}
+function buildPayload(request) {
+  const history = request.messages ?? structuredHistoryToMessages(request.structuredHistory);
+  const options = request.systemPromptParts ? { systemPromptParts: request.systemPromptParts } : void 0;
+  return buildOpenAiPayloadWithPrompt(
+    history,
+    request.systemPrompt,
+    request.prompt,
+    options
+  );
+}
+function resolveBaseUrl(config, env) {
+  return resolveApiBaseUrl(config, env, BASE_URL_ENV_KEY, DEFAULT_BASE_URL);
+}
+function isCustomUrl(config) {
+  return isCustomApiBaseUrl(config, BASE_URL_ENV_KEY, DEFAULT_BASE_URL);
+}
+function isDefaultOpenAiBaseUrl(baseUrl) {
+  return baseUrl.replace(/\/+$/, "") === DEFAULT_BASE_URL;
+}
+function toOpenAiTools(tools) {
+  return tools.map((t) => ({
+    type: "function",
+    function: {
+      name: t.name,
+      description: t.description,
+      parameters: normalizeToolSchema(t.schema)
+    }
+  }));
+}
+function createOpenAiApiBackend(config = {}) {
+  const apiKey = typeof config.OPENAI_API_KEY === "string" ? config.OPENAI_API_KEY : process.env.OPENAI_API_KEY;
+  const customUrl = isCustomUrl(config);
+  const capabilities = {
+    streaming: true,
+    sessionPersistence: false,
+    workingDirectory: false,
+    forceMode: false,
+    systemPrompt: true,
+    planning: false,
+    tools: true,
+    mcp: false,
+    structuredHistory: true,
+    multimodal: ["image/*", "audio/*"],
+    approvalCallback: APPROVAL_POSTURE_OPENAI_API
+  };
+  return {
+    name: META.name,
+    displayName: META.displayName,
+    ...createInfoFields(META, capabilities, () => ({
+      host: resolveBaseUrl(config)
+    })),
+    models: META.models,
+    defaultModel: META.defaultModel,
+    contextWindow: META.contextWindow,
+    maxOutputTokens: META.maxOutputTokens,
+    canResume: false,
+    streamParserName: "openai",
+    capabilities,
+    isInstalled() {
+      return Promise.resolve(Boolean(apiKey));
+    },
+    getVersion() {
+      return Promise.resolve(null);
+    },
+    validateModel(model) {
+      if (customUrl) return model.length > 0;
+      return META.models.includes(model);
+    },
+    generateSessionId() {
+      return "";
+    },
+    buildExecutionPlan(request) {
+      const model = request.model || this.defaultModel;
+      const stdin = buildPromptEnvelope({
+        systemPrompt: request.systemPrompt,
+        userMessage: request.prompt
+      });
+      return {
+        args: [],
+        env: {
+          ...apiKey ? { OPENAI_API_KEY: apiKey } : {},
+          ...request.env ?? {}
+        },
+        stdin,
+        parser: this.streamParserName,
+        timeoutMs: request.timeoutMs,
+        execute: async function* (options) {
+          const resolvedApiKey = options.env.OPENAI_API_KEY || apiKey;
+          if (!resolvedApiKey) {
+            throw new ApiKeyError(
+              "openai-api",
+              "OPENAI_API_KEY is required. Set it via the environment variable or pass apiKey in backend config."
+            );
+          }
+          const baseUrl = resolveBaseUrl(config, options.env);
+          const endpoint = `${baseUrl.replace(/\/+$/, "")}/chat/completions`;
+          const fetchWithTimeout = buildFetchWithTimeout(
+            globalThis.fetch,
+            options.timeoutMs ?? request.timeoutMs,
+            options.signal ?? request.signal
+          );
+          const openaiPayload = buildPayload(request);
+          const body = {
+            model,
+            messages: openaiPayload.messages,
+            stream: true,
+            stream_options: { include_usage: true }
+          };
+          if (request.maxOutputTokens != null) {
+            body.max_completion_tokens = request.maxOutputTokens;
+          }
+          const cacheEnabled = request.cache?.enabled !== false;
+          const systemCacheMode = request.cacheControl?.system;
+          const shouldUsePromptCaching = cacheEnabled && systemCacheMode !== "static";
+          if (shouldUsePromptCaching && openaiPayload.promptCacheKey) {
+            body.prompt_cache_key = openaiPayload.promptCacheKey;
+          }
+          if (shouldUsePromptCaching && request.cache?.retention && isDefaultOpenAiBaseUrl(baseUrl)) {
+            body.prompt_cache_retention = request.cache.retention;
+          }
+          if (request.tools && request.tools.length > 0) {
+            body.tools = toOpenAiTools(request.tools);
+            body.tool_choice = "auto";
+          }
+          const extraHeaders = config.EXTRA_HEADERS ?? {};
+          const response = await fetchWithTimeout(endpoint, {
+            method: "POST",
+            headers: {
+              Authorization: `Bearer ${resolvedApiKey}`,
+              "Content-Type": "application/json",
+              ...extraHeaders
+            },
+            body: JSON.stringify(body)
+          });
+          if (!response.ok) {
+            const errBody = await response.text().catch(() => "");
+            throw new ApiHttpError("openai-api", response.status, errBody);
+          }
+          const reader = response.body?.getReader();
+          if (!reader) {
+            throw new Error("OpenAI API response body is not readable");
+          }
+          const decoder = new TextDecoder();
+          let buffer = "";
+          let fullText = "";
+          let usage = null;
+          const toolCallAccumulators = /* @__PURE__ */ new Map();
+          try {
+            while (true) {
+              const { done, value } = await reader.read();
+              if (done) break;
+              buffer += decoder.decode(value, { stream: true });
+              const lines = buffer.split("\n");
+              buffer = lines.pop() ?? "";
+              for (const rawLine of lines) {
+                const chunk = parseSSELine(rawLine.trim());
+                if (!chunk) continue;
+                const delta = chunk.choices?.[0]?.delta;
+                if (delta?.content) {
+                  fullText += delta.content;
+                  yield { type: "text", text: delta.content };
+                }
+                if (delta?.tool_calls) {
+                  accumulateToolCalls(toolCallAccumulators, delta.tool_calls);
+                }
+                if (chunk.usage) {
+                  const cachedInputTokens = chunk.usage.prompt_tokens_details?.cached_tokens;
+                  const cache = cachedInputTokens != null || openaiPayload.promptCacheKey ? createPromptCacheUsage({
+                    source: "openai",
+                    inputTokenMode: "total",
+                    inputTokens: chunk.usage.prompt_tokens ?? 0,
+                    outputTokens: chunk.usage.completion_tokens ?? 0,
+                    ...cachedInputTokens != null ? { cachedInputTokens } : {},
+                    promptCacheKey: openaiPayload.promptCacheKey
+                  }) : void 0;
+                  usage = createUsage(
+                    chunk.usage.prompt_tokens ?? 0,
+                    chunk.usage.completion_tokens ?? 0,
+                    {
+                      cachedInputTokens,
+                      ...cache ? { cache } : {}
+                    }
+                  );
+                }
+              }
+            }
+          } finally {
+            reader.releaseLock();
+          }
+          for (const event of emitToolCallEvents(toolCallAccumulators)) {
+            yield event;
+          }
+          yield { type: "result", text: fullText, usage };
+        }
+      };
+    },
+    extractSessionId(_output) {
+      return null;
+    }
+  };
+}
+export {
+  createOpenAiApiBackend,
+  toOpenAiTools
+};
+//# sourceMappingURL=openai-api.js.map

package/dist/adapters/agents/backends/openai-api.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/adapters/agents/backends/openai-api.ts"],
+  "sourcesContent": ["import type {\n  ApiJsonObject,\n  Backend,\n  BackendCapabilities,\n  BackendExecutionPlan,\n  BackendRunRequest,\n  BackendToolDef,\n  OpenAiApiBackendConfig,\n} from '../../../domain/contracts/backends.js';\nimport {\n  createUsage,\n  type UsageStats,\n} from '../../../domain/contracts/messages.js';\nimport {\n  ApiHttpError,\n  ApiKeyError,\n} from '../../../domain/errors/index.js';\nimport { createPromptCacheUsage } from '../../../domain/prompt-cache.js';\nimport { buildPromptEnvelope } from '../../../prompts/envelope.js';\nimport { buildFetchWithTimeout } from '../../../utils/timeout.js';\nimport { APPROVAL_POSTURE_OPENAI_API } from '../approval-posture.js';\nimport {\n  createToolCallAccumulator,\n  emitToolCallEvents,\n  isCustomApiBaseUrl,\n  normalizeToolSchema,\n  parseSseDataLine,\n  resolveApiBaseUrl,\n  type ToolCallAccumulator,\n} from './api-shared.js';\nimport {\n  buildOpenAiPayloadWithPrompt,\n  structuredHistoryToMessages,\n} from './native-messages/index.js';\nimport {\n  BACKEND_METADATA,\n  createInfoFields,\n  type OpenAiCompatUsage,\n} from './shared.js';\n\nconst META = BACKEND_METADATA['openai-api'];\nconst DEFAULT_BASE_URL = 'https://api.openai.com/v1';\nconst BASE_URL_ENV_KEY = 'OPENAI_BASE_URL';\n\ninterface OpenAiToolCallDelta {\n  index: number;\n  id?: string;\n  function?: { name?: string; arguments?: string };\n}\n\ninterface OpenAiStreamChunk {\n  choices?: Array<{\n    delta?: {\n      content?: string;\n      tool_calls?: OpenAiToolCallDelta[];\n    };\n    finish_reason?: string | null;\n  }>;\n  usage?: OpenAiCompatUsage;\n}\nfunction parseSSELine(line: string): OpenAiStreamChunk | null {\n  return parseSseDataLine<OpenAiStreamChunk>(line);\n}\n\nfunction accumulateToolCalls(\n  accumulators: Map<number, ToolCallAccumulator>,\n  deltas: OpenAiToolCallDelta[]\n): void {\n  for (const d of deltas) {\n    let acc = accumulators.get(d.index);\n    if (!acc) {\n      acc = createToolCallAccumulator(d.id ?? `call_${d.index}`);\n      accumulators.set(d.index, acc);\n    }\n    if (d.id) acc.id = d.id;\n    if (d.function?.name) acc.name += d.function.name;\n    if (d.function?.arguments) acc.arguments += d.function.arguments;\n  }\n}\nfunction buildPayload(request: BackendRunRequest) {\n  const history =\n    request.messages ?? structuredHistoryToMessages(request.structuredHistory);\n  const options = request.systemPromptParts\n    ? { systemPromptParts: request.systemPromptParts }\n    : undefined;\n  return buildOpenAiPayloadWithPrompt(\n    history,\n    request.systemPrompt,\n    request.prompt,\n    options\n  );\n}\n\nfunction resolveBaseUrl(\n  config: OpenAiApiBackendConfig,\n  env?: Record<string, string>\n): string {\n  return resolveApiBaseUrl(config, env, BASE_URL_ENV_KEY, DEFAULT_BASE_URL);\n}\n\nfunction isCustomUrl(config: OpenAiApiBackendConfig): boolean {\n  return isCustomApiBaseUrl(config, BASE_URL_ENV_KEY, DEFAULT_BASE_URL);\n}\n\nfunction isDefaultOpenAiBaseUrl(baseUrl: string): boolean {\n  return baseUrl.replace(/\\/+$/, '') === DEFAULT_BASE_URL;\n}\n\ninterface OpenAiToolDef {\n  type: 'function';\n  function: { name: string; description?: string; parameters?: ApiJsonObject };\n}\n\nexport function toOpenAiTools(tools: BackendToolDef[]): OpenAiToolDef[] {\n  return tools.map((t) => ({\n    type: 'function' as const,\n    function: {\n      name: t.name,\n      description: t.description,\n      parameters: normalizeToolSchema(t.schema),\n    },\n  }));\n}\nexport function createOpenAiApiBackend(\n  config: OpenAiApiBackendConfig = {}\n): Backend {\n  const apiKey =\n    typeof config.OPENAI_API_KEY === 'string'\n      ? config.OPENAI_API_KEY\n      : process.env.OPENAI_API_KEY;\n  const customUrl = isCustomUrl(config);\n\n  const capabilities: BackendCapabilities = {\n    streaming: true,\n    sessionPersistence: false,\n    workingDirectory: false,\n    forceMode: false,\n    systemPrompt: true,\n    planning: false,\n    tools: true,\n    mcp: false,\n    structuredHistory: true,\n    multimodal: ['image/*', 'audio/*'],\n    approvalCallback: APPROVAL_POSTURE_OPENAI_API,\n  };\n\n  return {\n    name: META.name,\n    displayName: META.displayName,\n    ...createInfoFields(META, capabilities, () => ({\n      host: resolveBaseUrl(config),\n    })),\n    models: META.models,\n    defaultModel: META.defaultModel,\n    contextWindow: META.contextWindow,\n    maxOutputTokens: META.maxOutputTokens,\n    canResume: false,\n    streamParserName: 'openai',\n    capabilities,\n\n    isInstalled(): Promise<boolean> {\n      return Promise.resolve(Boolean(apiKey));\n    },\n\n    getVersion(): Promise<string | null> {\n      return Promise.resolve(null);\n    },\n\n    validateModel(model: string): boolean {\n      if (customUrl) return model.length > 0;\n      return META.models.includes(model);\n    },\n\n    generateSessionId(): string {\n      return '';\n    },\n\n    buildExecutionPlan(request: BackendRunRequest): BackendExecutionPlan {\n      const model = request.model || this.defaultModel;\n      const stdin = buildPromptEnvelope({\n        systemPrompt: request.systemPrompt,\n        userMessage: request.prompt,\n      });\n\n      return {\n        args: [],\n        env: {\n          ...(apiKey ? { OPENAI_API_KEY: apiKey } : {}),\n          ...(request.env ?? {}),\n        },\n        stdin,\n        parser: this.streamParserName,\n        timeoutMs: request.timeoutMs,\n        execute: async function* (options) {\n          const resolvedApiKey = options.env.OPENAI_API_KEY || apiKey;\n          if (!resolvedApiKey) {\n            throw new ApiKeyError(\n              'openai-api',\n              'OPENAI_API_KEY is required. Set it via the environment variable or pass apiKey in backend config.'\n            );\n          }\n\n          const baseUrl = resolveBaseUrl(config, options.env);\n          const endpoint = `${baseUrl.replace(/\\/+$/, '')}/chat/completions`;\n\n          const fetchWithTimeout = buildFetchWithTimeout(\n            globalThis.fetch,\n            options.timeoutMs ?? request.timeoutMs,\n            options.signal ?? request.signal\n          );\n\n          const openaiPayload = buildPayload(request);\n          const body: ApiJsonObject = {\n            model,\n            messages: openaiPayload.messages,\n            stream: true,\n            stream_options: { include_usage: true },\n          };\n\n          if (request.maxOutputTokens != null) {\n            body.max_completion_tokens = request.maxOutputTokens;\n          }\n\n          const cacheEnabled = request.cache?.enabled !== false;\n          // Per-send override: 'static' disables for this call.\n          const systemCacheMode = request.cacheControl?.system;\n          const shouldUsePromptCaching =\n            cacheEnabled && systemCacheMode !== 'static';\n\n          if (shouldUsePromptCaching && openaiPayload.promptCacheKey) {\n            body.prompt_cache_key = openaiPayload.promptCacheKey;\n          }\n\n          if (\n            shouldUsePromptCaching &&\n            request.cache?.retention &&\n            isDefaultOpenAiBaseUrl(baseUrl)\n          ) {\n            body.prompt_cache_retention = request.cache.retention;\n          }\n\n          if (request.tools && request.tools.length > 0) {\n            body.tools = toOpenAiTools(request.tools);\n            body.tool_choice = 'auto';\n          }\n\n          const extraHeaders = config.EXTRA_HEADERS ?? {};\n          const response = await fetchWithTimeout(endpoint, {\n            method: 'POST',\n            headers: {\n              Authorization: `Bearer ${resolvedApiKey}`,\n              'Content-Type': 'application/json',\n              ...extraHeaders,\n            },\n            body: JSON.stringify(body),\n          });\n\n          if (!response.ok) {\n            const errBody = await response.text().catch(() => '');\n            throw new ApiHttpError('openai-api', response.status, errBody);\n          }\n\n          const reader = response.body?.getReader();\n          if (!reader) {\n            throw new Error('OpenAI API response body is not readable');\n          }\n\n          const decoder = new TextDecoder();\n          let buffer = '';\n          let fullText = '';\n          let usage: UsageStats | null = null;\n          const toolCallAccumulators = new Map<number, ToolCallAccumulator>();\n\n          try {\n            while (true) {\n              const { done, value } = await reader.read();\n              if (done) break;\n              buffer += decoder.decode(value, { stream: true });\n              const lines = buffer.split('\\n');\n              buffer = lines.pop() ?? '';\n              for (const rawLine of lines) {\n                const chunk = parseSSELine(rawLine.trim());\n                if (!chunk) continue;\n                const delta = chunk.choices?.[0]?.delta;\n                if (delta?.content) {\n                  fullText += delta.content;\n                  yield { type: 'text', text: delta.content };\n                }\n                if (delta?.tool_calls) {\n                  accumulateToolCalls(toolCallAccumulators, delta.tool_calls);\n                }\n                if (chunk.usage) {\n                  const cachedInputTokens =\n                    chunk.usage.prompt_tokens_details?.cached_tokens;\n                  const cache =\n                    cachedInputTokens != null || openaiPayload.promptCacheKey\n                      ? createPromptCacheUsage({\n                          source: 'openai',\n                          inputTokenMode: 'total',\n                          inputTokens: chunk.usage.prompt_tokens ?? 0,\n                          outputTokens: chunk.usage.completion_tokens ?? 0,\n                          ...(cachedInputTokens != null\n                            ? { cachedInputTokens }\n                            : {}),\n                          promptCacheKey: openaiPayload.promptCacheKey,\n                        })\n                      : undefined;\n                  usage = createUsage(\n                    chunk.usage.prompt_tokens ?? 0,\n                    chunk.usage.completion_tokens ?? 0,\n                    {\n                      cachedInputTokens,\n                      ...(cache ? { cache } : {}),\n                    }\n                  );\n                }\n              }\n            }\n          } finally {\n            reader.releaseLock();\n          }\n\n          for (const event of emitToolCallEvents(toolCallAccumulators)) {\n            yield event;\n          }\n\n          yield { type: 'result', text: fullText, usage };\n        },\n      };\n    },\n\n    extractSessionId(_output: string): string | null {\n      return null;\n    },\n  };\n}\n"],
+  "mappings": "AASA;AAAA,EACE;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP,SAAS,8BAA8B;AACvC,SAAS,2BAA2B;AACpC,SAAS,6BAA6B;AACtC,SAAS,mCAAmC;AAC5C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OACK;AACP;AAAA,EACE;AAAA,EACA;AAAA,OAEK;AAEP,MAAM,OAAO,iBAAiB,YAAY;AAC1C,MAAM,mBAAmB;AACzB,MAAM,mBAAmB;AAkBzB,SAAS,aAAa,MAAwC;AAC5D,SAAO,iBAAoC,IAAI;AACjD;AAEA,SAAS,oBACP,cACA,QACM;AACN,aAAW,KAAK,QAAQ;AACtB,QAAI,MAAM,aAAa,IAAI,EAAE,KAAK;AAClC,QAAI,CAAC,KAAK;AACR,YAAM,0BAA0B,EAAE,MAAM,QAAQ,EAAE,KAAK,EAAE;AACzD,mBAAa,IAAI,EAAE,OAAO,GAAG;AAAA,IAC/B;AACA,QAAI,EAAE,GAAI,KAAI,KAAK,EAAE;AACrB,QAAI,EAAE,UAAU,KAAM,KAAI,QAAQ,EAAE,SAAS;AAC7C,QAAI,EAAE,UAAU,UAAW,KAAI,aAAa,EAAE,SAAS;AAAA,EACzD;AACF;AACA,SAAS,aAAa,SAA4B;AAChD,QAAM,UACJ,QAAQ,YAAY,4BAA4B,QAAQ,iBAAiB;AAC3E,QAAM,UAAU,QAAQ,oBACpB,EAAE,mBAAmB,QAAQ,kBAAkB,IAC/C;AACJ,SAAO;AAAA,IACL;AAAA,IACA,QAAQ;AAAA,IACR,QAAQ;AAAA,IACR;AAAA,EACF;AACF;AAEA,SAAS,eACP,QACA,KACQ;AACR,SAAO,kBAAkB,QAAQ,KAAK,kBAAkB,gBAAgB;AAC1E;AAEA,SAAS,YAAY,QAAyC;AAC5D,SAAO,mBAAmB,QAAQ,kBAAkB,gBAAgB;AACtE;AAEA,SAAS,uBAAuB,SAA0B;AACxD,SAAO,QAAQ,QAAQ,QAAQ,EAAE,MAAM;AACzC;AAOO,SAAS,cAAc,OAA0C;AACtE,SAAO,MAAM,IAAI,CAAC,OAAO;AAAA,IACvB,MAAM;AAAA,IACN,UAAU;AAAA,MACR,MAAM,EAAE;AAAA,MACR,aAAa,EAAE;AAAA,MACf,YAAY,oBAAoB,EAAE,MAAM;AAAA,IAC1C;AAAA,EACF,EAAE;AACJ;AACO,SAAS,uBACd,SAAiC,CAAC,GACzB;AACT,QAAM,SACJ,OAAO,OAAO,mBAAmB,WAC7B,OAAO,iBACP,QAAQ,IAAI;AAClB,QAAM,YAAY,YAAY,MAAM;AAEpC,QAAM,eAAoC;AAAA,IACxC,WAAW;AAAA,IACX,oBAAoB;AAAA,IACpB,kBAAkB;AAAA,IAClB,WAAW;AAAA,IACX,cAAc;AAAA,IACd,UAAU;AAAA,IACV,OAAO;AAAA,IACP,KAAK;AAAA,IACL,mBAAmB;AAAA,IACnB,YAAY,CAAC,WAAW,SAAS;AAAA,IACjC,kBAAkB;AAAA,EACpB;AAEA,SAAO;AAAA,IACL,MAAM,KAAK;AAAA,IACX,aAAa,KAAK;AAAA,IAClB,GAAG,iBAAiB,MAAM,cAAc,OAAO;AAAA,MAC7C,MAAM,eAAe,MAAM;AAAA,IAC7B,EAAE;AAAA,IACF,QAAQ,KAAK;AAAA,IACb,cAAc,KAAK;AAAA,IACnB,eAAe,KAAK;AAAA,IACpB,iBAAiB,KAAK;AAAA,IACtB,WAAW;AAAA,IACX,kBAAkB;AAAA,IAClB;AAAA,IAEA,cAAgC;AAC9B,aAAO,QAAQ,QAAQ,QAAQ,MAAM,CAAC;AAAA,IACxC;AAAA,IAEA,aAAqC;AACnC,aAAO,QAAQ,QAAQ,IAAI;AAAA,IAC7B;AAAA,IAEA,cAAc,OAAwB;AACpC,UAAI,UAAW,QAAO,MAAM,SAAS;AACrC,aAAO,KAAK,OAAO,SAAS,KAAK;AAAA,IACnC;AAAA,IAEA,oBAA4B;AAC1B,aAAO;AAAA,IACT;AAAA,IAEA,mBAAmB,SAAkD;AACnE,YAAM,QAAQ,QAAQ,SAAS,KAAK;AACpC,YAAM,QAAQ,oBAAoB;AAAA,QAChC,cAAc,QAAQ;AAAA,QACtB,aAAa,QAAQ;AAAA,MACvB,CAAC;AAED,aAAO;AAAA,QACL,MAAM,CAAC;AAAA,QACP,KAAK;AAAA,UACH,GAAI,SAAS,EAAE,gBAAgB,OAAO,IAAI,CAAC;AAAA,UAC3C,GAAI,QAAQ,OAAO,CAAC;AAAA,QACtB;AAAA,QACA;AAAA,QACA,QAAQ,KAAK;AAAA,QACb,WAAW,QAAQ;AAAA,QACnB,SAAS,iBAAiB,SAAS;AACjC,gBAAM,iBAAiB,QAAQ,IAAI,kBAAkB;AACrD,cAAI,CAAC,gBAAgB;AACnB,kBAAM,IAAI;AAAA,cACR;AAAA,cACA;AAAA,YACF;AAAA,UACF;AAEA,gBAAM,UAAU,eAAe,QAAQ,QAAQ,GAAG;AAClD,gBAAM,WAAW,GAAG,QAAQ,QAAQ,QAAQ,EAAE,CAAC;AAE/C,gBAAM,mBAAmB;AAAA,YACvB,WAAW;AAAA,YACX,QAAQ,aAAa,QAAQ;AAAA,YAC7B,QAAQ,UAAU,QAAQ;AAAA,UAC5B;AAEA,gBAAM,gBAAgB,aAAa,OAAO;AAC1C,gBAAM,OAAsB;AAAA,YAC1B;AAAA,YACA,UAAU,cAAc;AAAA,YACxB,QAAQ;AAAA,YACR,gBAAgB,EAAE,eAAe,KAAK;AAAA,UACxC;AAEA,cAAI,QAAQ,mBAAmB,MAAM;AACnC,iBAAK,wBAAwB,QAAQ;AAAA,UACvC;AAEA,gBAAM,eAAe,QAAQ,OAAO,YAAY;AAEhD,gBAAM,kBAAkB,QAAQ,cAAc;AAC9C,gBAAM,yBACJ,gBAAgB,oBAAoB;AAEtC,cAAI,0BAA0B,cAAc,gBAAgB;AAC1D,iBAAK,mBAAmB,cAAc;AAAA,UACxC;AAEA,cACE,0BACA,QAAQ,OAAO,aACf,uBAAuB,OAAO,GAC9B;AACA,iBAAK,yBAAyB,QAAQ,MAAM;AAAA,UAC9C;AAEA,cAAI,QAAQ,SAAS,QAAQ,MAAM,SAAS,GAAG;AAC7C,iBAAK,QAAQ,cAAc,QAAQ,KAAK;AACxC,iBAAK,cAAc;AAAA,UACrB;AAEA,gBAAM,eAAe,OAAO,iBAAiB,CAAC;AAC9C,gBAAM,WAAW,MAAM,iBAAiB,UAAU;AAAA,YAChD,QAAQ;AAAA,YACR,SAAS;AAAA,cACP,eAAe,UAAU,cAAc;AAAA,cACvC,gBAAgB;AAAA,cAChB,GAAG;AAAA,YACL;AAAA,YACA,MAAM,KAAK,UAAU,IAAI;AAAA,UAC3B,CAAC;AAED,cAAI,CAAC,SAAS,IAAI;AAChB,kBAAM,UAAU,MAAM,SAAS,KAAK,EAAE,MAAM,MAAM,EAAE;AACpD,kBAAM,IAAI,aAAa,cAAc,SAAS,QAAQ,OAAO;AAAA,UAC/D;AAEA,gBAAM,SAAS,SAAS,MAAM,UAAU;AACxC,cAAI,CAAC,QAAQ;AACX,kBAAM,IAAI,MAAM,0CAA0C;AAAA,UAC5D;AAEA,gBAAM,UAAU,IAAI,YAAY;AAChC,cAAI,SAAS;AACb,cAAI,WAAW;AACf,cAAI,QAA2B;AAC/B,gBAAM,uBAAuB,oBAAI,IAAiC;AAElE,cAAI;AACF,mBAAO,MAAM;AACX,oBAAM,EAAE,MAAM,MAAM,IAAI,MAAM,OAAO,KAAK;AAC1C,kBAAI,KAAM;AACV,wBAAU,QAAQ,OAAO,OAAO,EAAE,QAAQ,KAAK,CAAC;AAChD,oBAAM,QAAQ,OAAO,MAAM,IAAI;AAC/B,uBAAS,MAAM,IAAI,KAAK;AACxB,yBAAW,WAAW,OAAO;AAC3B,sBAAM,QAAQ,aAAa,QAAQ,KAAK,CAAC;AACzC,oBAAI,CAAC,MAAO;AACZ,sBAAM,QAAQ,MAAM,UAAU,CAAC,GAAG;AAClC,oBAAI,OAAO,SAAS;AAClB,8BAAY,MAAM;AAClB,wBAAM,EAAE,MAAM,QAAQ,MAAM,MAAM,QAAQ;AAAA,gBAC5C;AACA,oBAAI,OAAO,YAAY;AACrB,sCAAoB,sBAAsB,MAAM,UAAU;AAAA,gBAC5D;AACA,oBAAI,MAAM,OAAO;AACf,wBAAM,oBACJ,MAAM,MAAM,uBAAuB;AACrC,wBAAM,QACJ,qBAAqB,QAAQ,cAAc,iBACvC,uBAAuB;AAAA,oBACrB,QAAQ;AAAA,oBACR,gBAAgB;AAAA,oBAChB,aAAa,MAAM,MAAM,iBAAiB;AAAA,oBAC1C,cAAc,MAAM,MAAM,qBAAqB;AAAA,oBAC/C,GAAI,qBAAqB,OACrB,EAAE,kBAAkB,IACpB,CAAC;AAAA,oBACL,gBAAgB,cAAc;AAAA,kBAChC,CAAC,IACD;AACN,0BAAQ;AAAA,oBACN,MAAM,MAAM,iBAAiB;AAAA,oBAC7B,MAAM,MAAM,qBAAqB;AAAA,oBACjC;AAAA,sBACE;AAAA,sBACA,GAAI,QAAQ,EAAE,MAAM,IAAI,CAAC;AAAA,oBAC3B;AAAA,kBACF;AAAA,gBACF;AAAA,cACF;AAAA,YACF;AAAA,UACF,UAAE;AACA,mBAAO,YAAY;AAAA,UACrB;AAEA,qBAAW,SAAS,mBAAmB,oBAAoB,GAAG;AAC5D,kBAAM;AAAA,UACR;AAEA,gBAAM,EAAE,MAAM,UAAU,MAAM,UAAU,MAAM;AAAA,QAChD;AAAA,MACF;AAAA,IACF;AAAA,IAEA,iBAAiB,SAAgC;AAC/C,aAAO;AAAA,IACT;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/adapters/agents/backends/security-flags.d.ts

@@ -0,0 +1,29 @@
+import type { ExecutionRuntimePolicy } from '../../../domain/contracts/backends.js';
+export declare function getAdditionalWritableRoots(policy: ExecutionRuntimePolicy | null | undefined): string[];
+export declare function getAdditionalAccessibleRoots(policy: ExecutionRuntimePolicy | null | undefined): string[];
+export declare function mapClaudePermissionMode(policy: ExecutionRuntimePolicy | null | undefined): string | undefined;
+export declare function buildClaudeSettings(policy: ExecutionRuntimePolicy | null | undefined): string | null;
+export declare function mapCodexSandboxMode(policy: ExecutionRuntimePolicy | null | undefined): string | undefined;
+export declare function mapCodexApprovalPolicy(policy: ExecutionRuntimePolicy | null | undefined): string | undefined;
+export declare function mapCursorSandboxMode(policy: ExecutionRuntimePolicy | null | undefined): string | undefined;
+/**
+ * Maps OctoFlow sandbox policy to the Gemini CLI `--sandbox` flag.
+ *
+ * Gemini CLI `--sandbox` is a boolean flag: present = enable OS-level sandboxing.
+ * OctoFlow `policy.sandbox === 'off'` means the caller explicitly disabled sandboxing;
+ * any other value means sandboxing should be active when the CLI supports it.
+ * Returns `true` when the flag should be added, `false`/`undefined` otherwise.
+ */
+export declare function mapGeminiSandboxMode(policy: ExecutionRuntimePolicy | null | undefined): boolean;
+/**
+ * Maps OctoFlow approval policy to the Gemini CLI `--approval-mode` value.
+ *
+ * Gemini CLI `--approval-mode` choices:
+ *   `default`   — prompt before every action (maps to OctoFlow `manual`)
+ *   `auto_edit` — auto-approve file edits, prompt for other tools (no OctoFlow equivalent yet)
+ *   `yolo`      — auto-approve everything (maps to OctoFlow `off`)
+ *   `plan`      — read-only, no tool execution (no OctoFlow equivalent yet)
+ */
+export declare function mapGeminiApprovalMode(policy: ExecutionRuntimePolicy | null | undefined): string | undefined;
+export declare function shouldForceCursor(policy: ExecutionRuntimePolicy | null | undefined): boolean;
+//# sourceMappingURL=security-flags.d.ts.map

package/dist/adapters/agents/backends/security-flags.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-flags.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/backends/security-flags.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAEV,sBAAsB,EACvB,MAAM,uCAAuC,CAAC;AA6B/C,wBAAgB,0BAA0B,CACxC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,EAAE,CAEV;AAED,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,EAAE,CAKV;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,IAAI,CAiCf;AAED,wBAAgB,mBAAmB,CACjC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,SAAS,CAGpB;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,OAAO,CAGT;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,MAAM,GAAG,SAAS,CAGpB;AAED,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAChD,OAAO,CAET"}

package/dist/adapters/agents/backends/security-flags.js

@@ -0,0 +1,96 @@
+import path from "node:path";
+function uniquePaths(paths) {
+  return [...new Set(paths.filter((value) => value.length > 0))];
+}
+function isSameOrWithin(root, candidate) {
+  const relative = path.relative(root, candidate);
+  return relative === "" || !relative.startsWith("..") && !path.isAbsolute(relative);
+}
+function getPolicyRoots(policy, select) {
+  if (!policy?.filesystem) return [];
+  const roots = select(policy);
+  return uniquePaths(
+    roots.filter(
+      (candidate) => candidate !== policy.workspace && !isSameOrWithin(policy.workspace, candidate)
+    )
+  );
+}
+function getAdditionalWritableRoots(policy) {
+  return getPolicyRoots(policy, (value) => value.filesystem.writableRoots);
+}
+function getAdditionalAccessibleRoots(policy) {
+  return getPolicyRoots(policy, (value) => [
+    ...value.filesystem.readableRoots,
+    ...value.filesystem.writableRoots
+  ]);
+}
+function mapClaudePermissionMode(policy) {
+  if (!policy || policy.approvalMode === "inherit") return void 0;
+  return policy.approvalMode === "off" ? "bypassPermissions" : "default";
+}
+function buildClaudeSettings(policy) {
+  if (!policy) return null;
+  const settings = {};
+  if (policy.sandbox === "off") {
+    settings.sandbox = {
+      enabled: false
+    };
+  } else {
+    const filesystem = {};
+    const writableRoots = getAdditionalWritableRoots(policy);
+    if (writableRoots.length > 0) {
+      filesystem.allowWrite = writableRoots;
+    }
+    if (policy.filesystem.denyPaths.length > 0) {
+      filesystem.denyRead = uniquePaths(policy.filesystem.denyPaths);
+    }
+    settings.sandbox = {
+      enabled: true,
+      failIfUnavailable: true,
+      allowUnsandboxedCommands: false,
+      ...Object.keys(filesystem).length > 0 ? { filesystem } : {}
+    };
+  }
+  if (policy.network === "none") {
+    settings.permissions = {
+      deny: ["WebFetch"]
+    };
+  }
+  return JSON.stringify(settings);
+}
+function mapCodexSandboxMode(policy) {
+  if (!policy) return void 0;
+  return policy.sandbox === "off" ? "danger-full-access" : "workspace-write";
+}
+function mapCodexApprovalPolicy(policy) {
+  if (!policy || policy.approvalMode === "inherit") return void 0;
+  return policy.approvalMode === "off" ? "never" : "untrusted";
+}
+function mapCursorSandboxMode(policy) {
+  if (!policy) return void 0;
+  return policy.sandbox === "off" ? "disabled" : "enabled";
+}
+function mapGeminiSandboxMode(policy) {
+  if (!policy) return false;
+  return policy.sandbox !== "off";
+}
+function mapGeminiApprovalMode(policy) {
+  if (!policy || policy.approvalMode === "inherit") return void 0;
+  return policy.approvalMode === "off" ? "yolo" : "default";
+}
+function shouldForceCursor(policy) {
+  return policy?.approvalMode === "off";
+}
+export {
+  buildClaudeSettings,
+  getAdditionalAccessibleRoots,
+  getAdditionalWritableRoots,
+  mapClaudePermissionMode,
+  mapCodexApprovalPolicy,
+  mapCodexSandboxMode,
+  mapCursorSandboxMode,
+  mapGeminiApprovalMode,
+  mapGeminiSandboxMode,
+  shouldForceCursor
+};
+//# sourceMappingURL=security-flags.js.map

package/dist/adapters/agents/backends/security-flags.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/adapters/agents/backends/security-flags.ts"],
+  "sourcesContent": ["import path from 'node:path';\n\nimport type {\n  ApiJsonObject,\n  ExecutionRuntimePolicy,\n} from '../../../domain/contracts/backends.js';\n\nfunction uniquePaths(paths: string[]): string[] {\n  return [...new Set(paths.filter((value) => value.length > 0))];\n}\n\nfunction isSameOrWithin(root: string, candidate: string): boolean {\n  const relative = path.relative(root, candidate);\n  return (\n    relative === '' ||\n    (!relative.startsWith('..') && !path.isAbsolute(relative))\n  );\n}\n\nfunction getPolicyRoots(\n  policy: ExecutionRuntimePolicy | null | undefined,\n  select: (policy: ExecutionRuntimePolicy) => string[]\n): string[] {\n  if (!policy?.filesystem) return [];\n  const roots = select(policy);\n  return uniquePaths(\n    roots.filter(\n      (candidate) =>\n        candidate !== policy.workspace &&\n        !isSameOrWithin(policy.workspace, candidate)\n    )\n  );\n}\n\nexport function getAdditionalWritableRoots(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string[] {\n  return getPolicyRoots(policy, (value) => value.filesystem.writableRoots);\n}\n\nexport function getAdditionalAccessibleRoots(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string[] {\n  return getPolicyRoots(policy, (value) => [\n    ...value.filesystem.readableRoots,\n    ...value.filesystem.writableRoots,\n  ]);\n}\n\nexport function mapClaudePermissionMode(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string | undefined {\n  if (!policy || policy.approvalMode === 'inherit') return undefined;\n  return policy.approvalMode === 'off' ? 'bypassPermissions' : 'default';\n}\n\nexport function buildClaudeSettings(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string | null {\n  if (!policy) return null;\n\n  const settings: ApiJsonObject = {};\n  if (policy.sandbox === 'off') {\n    settings.sandbox = {\n      enabled: false,\n    };\n  } else {\n    const filesystem: { [key: string]: string[] | undefined } = {};\n    const writableRoots = getAdditionalWritableRoots(policy);\n    if (writableRoots.length > 0) {\n      filesystem.allowWrite = writableRoots;\n    }\n    if (policy.filesystem.denyPaths.length > 0) {\n      filesystem.denyRead = uniquePaths(policy.filesystem.denyPaths);\n    }\n\n    settings.sandbox = {\n      enabled: true,\n      failIfUnavailable: true,\n      allowUnsandboxedCommands: false,\n      ...(Object.keys(filesystem).length > 0 ? { filesystem } : {}),\n    };\n  }\n\n  if (policy.network === 'none') {\n    settings.permissions = {\n      deny: ['WebFetch'],\n    };\n  }\n\n  return JSON.stringify(settings);\n}\n\nexport function mapCodexSandboxMode(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string | undefined {\n  if (!policy) return undefined;\n  return policy.sandbox === 'off' ? 'danger-full-access' : 'workspace-write';\n}\n\nexport function mapCodexApprovalPolicy(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string | undefined {\n  if (!policy || policy.approvalMode === 'inherit') return undefined;\n  return policy.approvalMode === 'off' ? 'never' : 'untrusted';\n}\n\nexport function mapCursorSandboxMode(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string | undefined {\n  if (!policy) return undefined;\n  return policy.sandbox === 'off' ? 'disabled' : 'enabled';\n}\n\n/**\n * Maps OctoFlow sandbox policy to the Gemini CLI `--sandbox` flag.\n *\n * Gemini CLI `--sandbox` is a boolean flag: present = enable OS-level sandboxing.\n * OctoFlow `policy.sandbox === 'off'` means the caller explicitly disabled sandboxing;\n * any other value means sandboxing should be active when the CLI supports it.\n * Returns `true` when the flag should be added, `false`/`undefined` otherwise.\n */\nexport function mapGeminiSandboxMode(\n  policy: ExecutionRuntimePolicy | null | undefined\n): boolean {\n  if (!policy) return false;\n  return policy.sandbox !== 'off';\n}\n\n/**\n * Maps OctoFlow approval policy to the Gemini CLI `--approval-mode` value.\n *\n * Gemini CLI `--approval-mode` choices:\n *   `default`   \u2014 prompt before every action (maps to OctoFlow `manual`)\n *   `auto_edit` \u2014 auto-approve file edits, prompt for other tools (no OctoFlow equivalent yet)\n *   `yolo`      \u2014 auto-approve everything (maps to OctoFlow `off`)\n *   `plan`      \u2014 read-only, no tool execution (no OctoFlow equivalent yet)\n */\nexport function mapGeminiApprovalMode(\n  policy: ExecutionRuntimePolicy | null | undefined\n): string | undefined {\n  if (!policy || policy.approvalMode === 'inherit') return undefined;\n  return policy.approvalMode === 'off' ? 'yolo' : 'default';\n}\n\nexport function shouldForceCursor(\n  policy: ExecutionRuntimePolicy | null | undefined\n): boolean {\n  return policy?.approvalMode === 'off';\n}\n"],
+  "mappings": "AAAA,OAAO,UAAU;AAOjB,SAAS,YAAY,OAA2B;AAC9C,SAAO,CAAC,GAAG,IAAI,IAAI,MAAM,OAAO,CAAC,UAAU,MAAM,SAAS,CAAC,CAAC,CAAC;AAC/D;AAEA,SAAS,eAAe,MAAc,WAA4B;AAChE,QAAM,WAAW,KAAK,SAAS,MAAM,SAAS;AAC9C,SACE,aAAa,MACZ,CAAC,SAAS,WAAW,IAAI,KAAK,CAAC,KAAK,WAAW,QAAQ;AAE5D;AAEA,SAAS,eACP,QACA,QACU;AACV,MAAI,CAAC,QAAQ,WAAY,QAAO,CAAC;AACjC,QAAM,QAAQ,OAAO,MAAM;AAC3B,SAAO;AAAA,IACL,MAAM;AAAA,MACJ,CAAC,cACC,cAAc,OAAO,aACrB,CAAC,eAAe,OAAO,WAAW,SAAS;AAAA,IAC/C;AAAA,EACF;AACF;AAEO,SAAS,2BACd,QACU;AACV,SAAO,eAAe,QAAQ,CAAC,UAAU,MAAM,WAAW,aAAa;AACzE;AAEO,SAAS,6BACd,QACU;AACV,SAAO,eAAe,QAAQ,CAAC,UAAU;AAAA,IACvC,GAAG,MAAM,WAAW;AAAA,IACpB,GAAG,MAAM,WAAW;AAAA,EACtB,CAAC;AACH;AAEO,SAAS,wBACd,QACoB;AACpB,MAAI,CAAC,UAAU,OAAO,iBAAiB,UAAW,QAAO;AACzD,SAAO,OAAO,iBAAiB,QAAQ,sBAAsB;AAC/D;AAEO,SAAS,oBACd,QACe;AACf,MAAI,CAAC,OAAQ,QAAO;AAEpB,QAAM,WAA0B,CAAC;AACjC,MAAI,OAAO,YAAY,OAAO;AAC5B,aAAS,UAAU;AAAA,MACjB,SAAS;AAAA,IACX;AAAA,EACF,OAAO;AACL,UAAM,aAAsD,CAAC;AAC7D,UAAM,gBAAgB,2BAA2B,MAAM;AACvD,QAAI,cAAc,SAAS,GAAG;AAC5B,iBAAW,aAAa;AAAA,IAC1B;AACA,QAAI,OAAO,WAAW,UAAU,SAAS,GAAG;AAC1C,iBAAW,WAAW,YAAY,OAAO,WAAW,SAAS;AAAA,IAC/D;AAEA,aAAS,UAAU;AAAA,MACjB,SAAS;AAAA,MACT,mBAAmB;AAAA,MACnB,0BAA0B;AAAA,MAC1B,GAAI,OAAO,KAAK,UAAU,EAAE,SAAS,IAAI,EAAE,WAAW,IAAI,CAAC;AAAA,IAC7D;AAAA,EACF;AAEA,MAAI,OAAO,YAAY,QAAQ;AAC7B,aAAS,cAAc;AAAA,MACrB,MAAM,CAAC,UAAU;AAAA,IACnB;AAAA,EACF;AAEA,SAAO,KAAK,UAAU,QAAQ;AAChC;AAEO,SAAS,oBACd,QACoB;AACpB,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,OAAO,YAAY,QAAQ,uBAAuB;AAC3D;AAEO,SAAS,uBACd,QACoB;AACpB,MAAI,CAAC,UAAU,OAAO,iBAAiB,UAAW,QAAO;AACzD,SAAO,OAAO,iBAAiB,QAAQ,UAAU;AACnD;AAEO,SAAS,qBACd,QACoB;AACpB,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,OAAO,YAAY,QAAQ,aAAa;AACjD;AAUO,SAAS,qBACd,QACS;AACT,MAAI,CAAC,OAAQ,QAAO;AACpB,SAAO,OAAO,YAAY;AAC5B;AAWO,SAAS,sBACd,QACoB;AACpB,MAAI,CAAC,UAAU,OAAO,iBAAiB,UAAW,QAAO;AACzD,SAAO,OAAO,iBAAiB,QAAQ,SAAS;AAClD;AAEO,SAAS,kBACd,QACS;AACT,SAAO,QAAQ,iBAAiB;AAClC;",
+  "names": []
+}

package/dist/adapters/agents/backends/shared.d.ts

@@ -0,0 +1,83 @@
+import type { Backend, BackendCapabilities } from '../../../domain/contracts/backends.js';
+import { type BackendInfo, type BackendInfoType, type BridgeProtocol } from '../../../domain/protocol.js';
+export { clearCliCache, type CliConfigKey, getCliVersion, isCliInstalled, isCliInstalledAsync, readCliConfigModel, } from './cli-helpers.js';
+export type OpenAiCompatUsage = {
+    prompt_tokens?: number;
+    completion_tokens?: number;
+    prompt_tokens_details?: {
+        cached_tokens?: number;
+    };
+};
+export type BackendMeta = {
+    name: string;
+    displayName: string;
+    cli?: string;
+    models: string[];
+    defaultModel: string;
+    /**
+     * Conservative default context window (tokens) for this backend.
+     * Always 200K — the safe baseline across models. For the actual per-model
+     * context window, use `getContextWindow(modelId)` from model-matrix.ts.
+     */
+    contextWindow: number;
+    /** Default max output tokens for this backend's default model. */
+    maxOutputTokens: number;
+    authType: 'cli-login' | 'desktop-app' | 'device-auth' | 'api-key';
+    authEnvVar?: string;
+    authInstructions: string;
+    /** RFC-16: wire protocol spoken by this backend. */
+    protocol: BridgeProtocol;
+    /** RFC-16: provider label (vendor/service behind this backend). */
+    provider: string;
+    /** RFC-16: runtime type categorization for `BackendInfo.type`. */
+    infoType: BackendInfoType;
+    /** RFC-16: default host/base URL (API backends) or command (CLI). */
+    defaultHost: string | null;
+};
+export type KnownBackendKey = 'claude-code-cli' | 'cursor-cli' | 'codex-cli' | 'gemini-cli' | 'gemini-api' | 'openai-api' | 'anthropic-api' | 'ollama' | 'acp-cli';
+export declare const BACKEND_METADATA: Record<KnownBackendKey, BackendMeta>;
+interface ToBackendInfoArgs {
+    /** Backend name (any string — built-in key, `custom`, `custom-api`, `a2a`, or a vercel subtype). */
+    backend: string;
+    type: BackendInfoType;
+    protocol: BridgeProtocol;
+    provider: string | null;
+    model: string | null;
+    host: string | null;
+    version?: string | null;
+    capabilities: BackendCapabilities;
+}
+/**
+ * : convenience helper that produces the three `Backend`-interface
+ * fields every built-in backend must add (`protocol`, `provider`, `info()`).
+ * Built-in backends spread the result into their return literal.
+ */
+export declare function createInfoFields(meta: BackendMeta, capabilities: BackendCapabilities, resolve: () => {
+    host?: string | null;
+    model?: string | null;
+    version?: string | null;
+}): {
+    protocol: BridgeProtocol;
+    provider: string;
+    info(): BackendInfo;
+};
+export declare function createCliBackendBase(meta: BackendMeta, capabilities: BackendCapabilities, streamParserName: NonNullable<Backend['streamParserName']>, options: {
+    canResume?: boolean;
+    resolveInstalled: () => Promise<boolean>;
+    resolveVersion: () => string | null;
+    /**
+     * Optional: return the live account-configured model from the CLI's user
+     * config file (e.g. `~/.codex/config.toml`). When non-null the returned
+     * value overrides the static `meta.defaultModel` stored in
+     * `BACKEND_METADATA`. Used by codex-cli (and friends) so the bridge
+     * honours whatever model the user has configured without hardcoding it.
+     */
+    resolveConfigModel?: () => string | null;
+}): Pick<Backend, 'name' | 'displayName' | 'protocol' | 'provider' | 'info' | 'models' | 'defaultModel' | 'configModel' | 'contextWindow' | 'maxOutputTokens' | 'canResume' | 'streamParserName' | 'capabilities' | 'isInstalled' | 'getVersion'>;
+/**
+ * : pure builder for a `BackendInfo` snapshot. Used by every
+ * `Backend.info()` implementation and by `Bridge.info()` when composing
+ * candidate summaries from `inspectBackends()`.
+ */
+export declare function toBackendInfo(args: ToBackendInfoArgs): BackendInfo;
+//# sourceMappingURL=shared.d.ts.map

package/dist/adapters/agents/backends/shared.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"shared.d.ts","sourceRoot":"","sources":["../../../../src/adapters/agents/backends/shared.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EACV,OAAO,EACP,mBAAmB,EACpB,MAAM,uCAAuC,CAAC;AAC/C,OAAO,EACL,KAAK,WAAW,EAEhB,KAAK,eAAe,EACpB,KAAK,cAAc,EAEpB,MAAM,6BAA6B,CAAC;AAGrC,OAAO,EACL,aAAa,EACb,KAAK,YAAY,EACjB,aAAa,EACb,cAAc,EACd,mBAAmB,EACnB,kBAAkB,GACnB,MAAM,kBAAkB,CAAC;AAE1B,MAAM,MAAM,iBAAiB,GAAG;IAC9B,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,qBAAqB,CAAC,EAAE;QACtB,aAAa,CAAC,EAAE,MAAM,CAAC;KACxB,CAAC;CACH,CAAC;AAEF,MAAM,MAAM,WAAW,GAAG;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,YAAY,EAAE,MAAM,CAAC;IACrB;;;;OAIG;IACH,aAAa,EAAE,MAAM,CAAC;IACtB,kEAAkE;IAClE,eAAe,EAAE,MAAM,CAAC;IACxB,QAAQ,EAAE,WAAW,GAAG,aAAa,GAAG,aAAa,GAAG,SAAS,CAAC;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,gBAAgB,EAAE,MAAM,CAAC;IACzB,oDAAoD;IACpD,QAAQ,EAAE,cAAc,CAAC;IACzB,mEAAmE;IACnE,QAAQ,EAAE,MAAM,CAAC;IACjB,kEAAkE;IAClE,QAAQ,EAAE,eAAe,CAAC;IAC1B,qEAAqE;IACrE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAC;CAC5B,CAAC;AAEF,MAAM,MAAM,eAAe,GACvB,iBAAiB,GACjB,YAAY,GACZ,WAAW,GACX,YAAY,GACZ,YAAY,GACZ,YAAY,GACZ,eAAe,GACf,QAAQ,GACR,SAAS,CAAC;AAEd,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,eAAe,EAAE,WAAW,CAgNjE,CAAC;AACF,UAAU,iBAAiB;IACzB,oGAAoG;IACpG,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,eAAe,CAAC;IACtB,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,IAAI,EAAE,MAAM,GAAG,IAAI,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,YAAY,EAAE,mBAAmB,CAAC;CACnC;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,WAAW,EACjB,YAAY,EAAE,mBAAmB,EACjC,OAAO,EAAE,MAAM;IACb,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,KAAK,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB,GACA;IACD,QAAQ,EAAE,cAAc,CAAC;IACzB,QAAQ,EAAE,MAAM,CAAC;IACjB,IAAI,IAAI,WAAW,CAAC;CACrB,CAkBA;AACD,wBAAgB,oBAAoB,CAClC,IAAI,EAAE,WAAW,EACjB,YAAY,EAAE,mBAAmB,EACjC,gBAAgB,EAAE,WAAW,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,EAC1D,OAAO,EAAE;IACP,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,gBAAgB,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAC;IACzC,cAAc,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;IACpC;;;;;;OAMG;IACH,kBAAkB,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAC;CAC1C,GACA,IAAI,CACL,OAAO,EACL,MAAM,GACN,aAAa,GACb,UAAU,GACV,UAAU,GACV,MAAM,GACN,QAAQ,GACR,cAAc,GACd,aAAa,GACb,eAAe,GACf,iBAAiB,GACjB,WAAW,GACX,kBAAkB,GAClB,cAAc,GACd,aAAa,GACb,YAAY,CACf,CA4BA;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,iBAAiB,GAAG,WAAW,CAsClE"}