scoutline 0.10.2 → 0.12.0

package/dist/lib/config-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.d.ts","sourceRoot":"","sources":["../../src/lib/config-store.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AAEvC,OAAO,EAAgB,KAAK,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,eAAO,MAAM,cAAc,EAAG,CAAU,CAAC;AAEzC,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,MAAM,EAAE,UAAU,GAAG,YAAY,CAAC;IAC3C,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,WAAW,cAAc;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,YAAY,CAAC,EAAE,oBAAoB,CAAC;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,OAAO,EAAE,OAAO,cAAc,CAAC;IACxC,QAAQ,CAAC,eAAe,CAAC,EAAE,OAAO,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,CAAC,CAAC;IAChE,QAAQ,CAAC,SAAS,CAAC,EAAE,OAAO,CAAC;CAC9B;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,aAAa,KAAK,IAAI,CAAC;CACvD;AAED,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC;CACpC;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,kBAAkB,CAAC;IAClC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,MAAM,MAAM,gBAAgB,GACxB;IAAE,QAAQ,CAAC,MAAM,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;CAAE,GACxD;IACE,QAAQ,CAAC,MAAM,EAAE,OAAO,CAAC;IACzB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,eAAe,CAAC;IACjC,QAAQ,CAAC,QAAQ,EAAE,SAAS,aAAa,EAAE,CAAC;CAC7C,GACD;IACE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAC;IAC3B,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;CACpC,CAAC;AAEN,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,CAAC;CACxC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;CAC1B;AAED,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,qBAAqB,EAC1B,QAAQ,EAAE,kBAAkB,GAC3B,MAAM,CAER;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAK1C;AAED,wBAAgB,cAAc,CAAC,IAAI,SAAsB,GAAG,MAAM,CAEjE;AA6GD,wBAAsB,UAAU,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,eAAe,CAAC,CAkB3F;AAED,wBAAsB,aAAa,CAAC,OAAO,GAAE,kBAAuB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA4B/F;AAED,wBAAsB,iBAAiB,CACrC,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,GAAG,UAAU,EAC7B,OAAO,GAAE,oBAAyB,GACjC,OAAO,CAAC,IAAI,CAAC,CA+Cf;AAED,wBAAsB,WAAW,CAC/B,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,IAAI,CAAC,CAef;AAMD;;;;;GAKG;AACH,MAAM,WAAW,oBAAoB;IACnC,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,YAAY,CAAC,GAAG,EAAE,MAAM,CAAC,UAAU,GAAG,OAAO,CAAC;IAC9C;;;;;OAKG;IACH,QAAQ,CAAC,iBAAiB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CAChD;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,oBAAoB,CAClC,GAAG,EAAE,MAAM,CAAC,UAAU,EACtB,MAAM,EAAE,eAAe,EACvB,WAAW,EAAE,SAAS,oBAAoB,EAAE,GAC3C,MAAM,CAAC,UAAU,CA6BnB;AAYD;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,WAAW,0BAA0B;IACzC,OAAO,CAAC,UAAU,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CACnE;AAED;;;;;;;;GAQG;AACH,wBAAgB,iCAAiC,CAC/C,OAAO,GAAE,kBAAuB,GAC/B,0BAA0B,CAqB5B;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,WAAW,cAAc;IAC7B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CAC/B;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,GAAE,kBAAuB,GAAG,cAAc,CAmB5F"}

package/dist/lib/config-store.js

@@ -0,0 +1,332 @@
+import * as os from "node:os";
+import * as path from "node:path";
+import * as fs from "node:fs/promises";
+import { randomUUID } from "node:crypto";
+import { PROVIDER_IDS } from "../providers/types.js";
+import { ConfigurationError } from "./errors.js";
+export const CONFIG_VERSION = 1;
+export function resolveConfigRootPure(env, platform) {
+    return env.SCOUTLINE_CONFIG_DIR || path.join(platform.homedir, ".scoutline");
+}
+export function resolveConfigRoot() {
+    return resolveConfigRootPure({ SCOUTLINE_CONFIG_DIR: process.env.SCOUTLINE_CONFIG_DIR }, { homedir: os.homedir() });
+}
+export function configFilePath(root = resolveConfigRoot()) {
+    return path.join(root, "config.json");
+}
+function emptyConfig() {
+    return { version: CONFIG_VERSION, providers: {} };
+}
+function corruptConfig() {
+    return new ConfigurationError("config.json is corrupt", "Run `scoutline init` to reconfigure, or fix/remove the file.");
+}
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function parseVerification(value) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value))
+        throw corruptConfig();
+    const { status, checkedAt, reason } = value;
+    if ((status !== "verified" && status !== "unverified") ||
+        typeof checkedAt !== "number" ||
+        !Number.isFinite(checkedAt) ||
+        checkedAt < 0 ||
+        (reason !== undefined && typeof reason !== "string")) {
+        throw corruptConfig();
+    }
+    return {
+        status,
+        checkedAt,
+        ...(reason?.trim() ? { reason: reason.trim() } : {}),
+    };
+}
+function parseProviderConfig(value) {
+    if (!isRecord(value))
+        throw corruptConfig();
+    const { apiKey, onboarded } = value;
+    if ((apiKey !== undefined && typeof apiKey !== "string") ||
+        (onboarded !== undefined && typeof onboarded !== "boolean")) {
+        throw corruptConfig();
+    }
+    const verification = parseVerification(value.verification);
+    return {
+        ...(apiKey?.trim() ? { apiKey } : {}),
+        ...(onboarded !== undefined ? { onboarded } : {}),
+        ...(verification ? { verification } : {}),
+    };
+}
+function parseConfig(contents) {
+    let parsed;
+    try {
+        parsed = JSON.parse(contents);
+    }
+    catch {
+        throw corruptConfig();
+    }
+    if (!isRecord(parsed))
+        throw corruptConfig();
+    const version = parsed.version;
+    if (version !== CONFIG_VERSION) {
+        throw new ConfigurationError(`Unsupported config version ${String(version)}`, "Upgrade Scoutline to read this config file.");
+    }
+    if ((parsed.fallbackEnabled !== undefined && typeof parsed.fallbackEnabled !== "boolean") ||
+        (parsed.hintShown !== undefined && typeof parsed.hintShown !== "boolean") ||
+        (parsed.providers !== undefined && !isRecord(parsed.providers))) {
+        throw corruptConfig();
+    }
+    const providers = {};
+    const warnings = [];
+    for (const [providerId, value] of Object.entries(parsed.providers ?? {})) {
+        if (!PROVIDER_IDS.includes(providerId)) {
+            warnings.push({
+                code: "UNKNOWN_PROVIDER",
+                providerId,
+                message: `Ignoring unknown provider "${providerId}" in config.json.`,
+            });
+            continue;
+        }
+        providers[providerId] = parseProviderConfig(value);
+    }
+    return {
+        config: {
+            version: CONFIG_VERSION,
+            ...(parsed.fallbackEnabled !== undefined
+                ? { fallbackEnabled: parsed.fallbackEnabled }
+                : {}),
+            providers,
+            ...(parsed.hintShown !== undefined ? { hintShown: parsed.hintShown } : {}),
+        },
+        warnings,
+    };
+}
+export async function readConfig(options = {}) {
+    const file = options.filePath ?? configFilePath();
+    let contents;
+    try {
+        contents = await fs.readFile(file, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT")
+            return emptyConfig();
+        throw new ConfigurationError("Unable to read config.json", "Run `scoutline init` to reconfigure, or fix/remove the file.");
+    }
+    const parsed = parseConfig(contents);
+    const onWarning = options.onWarning ??
+        ((warning) => process.stderr.write(`Warning: ${warning.message}\n`));
+    for (const warning of parsed.warnings)
+        onWarning(warning);
+    return parsed.config;
+}
+export async function inspectConfig(options = {}) {
+    const filePath = options.filePath ?? configFilePath();
+    let contents;
+    try {
+        contents = await fs.readFile(filePath, "utf8");
+    }
+    catch (error) {
+        if (error.code === "ENOENT") {
+            return { status: "absent", filePath };
+        }
+        return {
+            status: "corrupt",
+            filePath,
+            error: new ConfigurationError("Unable to read config.json", "Run `scoutline init` to reconfigure, or fix/remove the file."),
+        };
+    }
+    try {
+        const parsed = parseConfig(contents);
+        return { status: "valid", filePath, config: parsed.config, warnings: parsed.warnings };
+    }
+    catch (error) {
+        return {
+            status: "corrupt",
+            filePath,
+            error: error,
+        };
+    }
+}
+export async function atomicReplaceFile(filePath, contents, options = {}) {
+    const platform = options.platform ?? process.platform;
+    const root = path.dirname(filePath);
+    await fs.mkdir(root, { recursive: true, mode: 0o700 });
+    if (platform !== "win32")
+        await fs.chmod(root, 0o700);
+    const randomId = options.randomId ?? randomUUID;
+    let tempPath;
+    let handle;
+    for (let attempt = 0; attempt < 16; attempt += 1) {
+        tempPath = path.join(root, `.${path.basename(filePath)}.${process.pid}.${randomId()}.tmp`);
+        try {
+            handle = await fs.open(tempPath, "wx", 0o600);
+            break;
+        }
+        catch (error) {
+            if (error.code !== "EEXIST")
+                throw error;
+        }
+    }
+    if (!handle || !tempPath) {
+        throw new Error("Unable to allocate a unique atomic-write temp file");
+    }
+    let renamed = false;
+    try {
+        await handle.writeFile(contents);
+        await handle.sync();
+        await handle.close();
+        handle = undefined;
+        // Node's rename maps to an atomic replacing rename on supported Windows
+        // filesystems. If that guarantee is unavailable, fail closed: never unlink
+        // the live config as a non-atomic fallback.
+        await (options.rename ?? fs.rename)(tempPath, filePath);
+        renamed = true;
+        if (platform !== "win32") {
+            const directory = await fs.open(root, "r");
+            try {
+                await directory.sync();
+            }
+            finally {
+                await directory.close();
+            }
+        }
+    }
+    finally {
+        await handle?.close().catch(() => { });
+        if (!renamed)
+            await fs.unlink(tempPath).catch(() => { });
+    }
+}
+export async function writeConfig(config, options = {}) {
+    const parsed = parseConfig(JSON.stringify(config));
+    const onWarning = options.onWarning ??
+        ((warning) => process.stderr.write(`Warning: ${warning.message}\n`));
+    for (const warning of parsed.warnings)
+        onWarning(warning);
+    const payload = `${JSON.stringify(parsed.config, null, 2)}\n`;
+    try {
+        await atomicReplaceFile(options.filePath ?? configFilePath(), payload, options.atomic);
+    }
+    catch {
+        throw new ConfigurationError("Unable to write config.json", "Check the config directory permissions and try again.");
+    }
+}
+/**
+ * Build the resolved environment view that shared commands see: the
+ * injected `env` with file-configured API keys layered in for any
+ * Provider that is NOT already configured via `env`.
+ *
+ * Precedence rules (Plan A — T2a):
+ *   - **Env overrides file.** A non-blank key already present in `env`
+ *     (including aliases like `ZAI_API_KEY`) wins; the file key for that
+ *     Provider is not written. This preserves the documented alias
+ *     precedence (`Z_AI_API_KEY` > `ZAI_API_KEY` > file key).
+ *   - **`process.env` is never mutated.** The returned object is a fresh
+ *     shallow copy; the caller owns its lifetime.
+ *   - File keys are written into the Provider's CANONICAL variable
+ *     (the first `credentialEnvVars` entry, e.g. `Z_AI_API_KEY` for zai)
+ *     so the existing `resolveXApiKey` resolvers discover them without a
+ *     new code path.
+ *
+ * A Provider with no matching descriptor, a blank file key, or no
+ * `credentialEnvVars` is silently skipped.
+ */
+export function resolveEnvFromConfig(env, config, descriptors) {
+    const resolved = { ...env };
+    const byId = new Map(descriptors.map((d) => [d.id, d]));
+    for (const [providerId, providerConfig] of Object.entries(config.providers)) {
+        const fileKey = providerConfig.apiKey;
+        if (typeof fileKey !== "string" || fileKey.trim().length === 0)
+            continue;
+        const descriptor = byId.get(providerId);
+        if (!descriptor)
+            continue;
+        // Env wins: if the Provider is already configured through the
+        // injected env (primary OR alias), the file key must not clobber it.
+        if (descriptor.isConfigured(env))
+            continue;
+        const canonical = descriptor.credentialEnvVars?.[0];
+        if (typeof canonical !== "string" || canonical.length === 0)
+            continue;
+        // Only populate when the canonical slot is absent or blank in the
+        // resolved view. This guards against an earlier iteration writing a
+        // different Provider's alias into the same variable name (none exist
+        // today, but the guard keeps the function total).
+        const existing = resolved[canonical];
+        if (typeof existing === "string" && existing.trim().length > 0)
+            continue;
+        resolved[canonical] = fileKey;
+    }
+    return resolved;
+}
+/**
+ * Production {@link VerificationPromotionStore}. Reads the live config,
+ * flips the matching Provider record's `verification.status` from
+ * `unverified` to `verified`, and rewrites the file atomically. A
+ * record that is absent, has no verification field, or is already
+ * `verified` is a no-op (no write, no error). The read-modify-write is
+ * not cross-process locked; Doctor is a single-shot CLI command and the
+ * atomic rename keeps the final state crash-safe against partial writes.
+ */
+export function createDefaultVerificationPromoter(options = {}) {
+    return {
+        async promote(providerId, checkedAt) {
+            const inspection = await inspectConfig(options);
+            if (inspection.status !== "valid")
+                return;
+            const existing = inspection.config.providers[providerId];
+            if (!existing || !existing.verification)
+                return;
+            if (existing.verification.status === "verified")
+                return;
+            const updated = {
+                ...inspection.config,
+                providers: {
+                    ...inspection.config.providers,
+                    [providerId]: {
+                        ...existing,
+                        verification: { status: "verified", checkedAt },
+                    },
+                },
+            };
+            await writeConfig(updated, options);
+        },
+    };
+}
+/**
+ * Production {@link HintShownStore}. Reads the live config, sets
+ * `hintShown: true` if it is currently unset/false, and rewrites the
+ * file atomically. Same read-modify-write caveats as the verification
+ * promoter.
+ *
+ * When the config is ABSENT, the store creates a minimal config file
+ * (`{version:1, providers:{}, hintShown:true}`) so the hint does NOT
+ * repeat on every subsequent run — the ticket's "one-time marker"
+ * contract requires persistence, and absent-config is the common case
+ * for a user who just installed scoutline and is running on env vars.
+ * A CORRUPT config is a no-op (init is the recovery path; the hint
+ * store must not silently rewrite a corrupt file).
+ */
+export function createDefaultHintShownStore(options = {}) {
+    return {
+        async setHintShown() {
+            const inspection = await inspectConfig(options);
+            if (inspection.status === "corrupt")
+                return;
+            if (inspection.status === "valid") {
+                if (inspection.config.hintShown === true)
+                    return;
+                const updated = {
+                    ...inspection.config,
+                    hintShown: true,
+                };
+                await writeConfig(updated, options);
+                return;
+            }
+            // Absent — create a minimal config carrying just the marker so the
+            // hint does not repeat. This is the common env-only-install case.
+            await writeConfig({ version: CONFIG_VERSION, providers: {}, hintShown: true }, options);
+        },
+    };
+}
+//# sourceMappingURL=config-store.js.map

package/dist/lib/config-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config-store.js","sourceRoot":"","sources":["../../src/lib/config-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,SAAS,CAAC;AAC9B,OAAO,KAAK,IAAI,MAAM,WAAW,CAAC;AAClC,OAAO,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACvC,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAmB,MAAM,uBAAuB,CAAC;AACtE,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAEjD,MAAM,CAAC,MAAM,cAAc,GAAG,CAAU,CAAC;AAgEzC,MAAM,UAAU,qBAAqB,CACnC,GAA0B,EAC1B,QAA4B;IAE5B,OAAO,GAAG,CAAC,oBAAoB,IAAI,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;AAC/E,CAAC;AAED,MAAM,UAAU,iBAAiB;IAC/B,OAAO,qBAAqB,CAC1B,EAAE,oBAAoB,EAAE,OAAO,CAAC,GAAG,CAAC,oBAAoB,EAAE,EAC1D,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,EAAE,EAAE,CAC1B,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAI,GAAG,iBAAiB,EAAE;IACvD,OAAO,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,CAAC,CAAC;AACxC,CAAC;AAED,SAAS,WAAW;IAClB,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;AACpD,CAAC;AAOD,SAAS,aAAa;IACpB,OAAO,IAAI,kBAAkB,CAC3B,wBAAwB,EACxB,8DAA8D,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,aAAa,EAAE,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,GAAG,KAAK,CAAC;IAC5C,IACE,CAAC,MAAM,KAAK,UAAU,IAAI,MAAM,KAAK,YAAY,CAAC;QAClD,OAAO,SAAS,KAAK,QAAQ;QAC7B,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC;QAC3B,SAAS,GAAG,CAAC;QACb,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC,EACpD,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,OAAO;QACL,MAAM;QACN,SAAS;QACT,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACrD,CAAC;AACJ,CAAC;AAED,SAAS,mBAAmB,CAAC,KAAc;IACzC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,aAAa,EAAE,CAAC;IAC5C,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,GAAG,KAAK,CAAC;IACpC,IACE,CAAC,MAAM,KAAK,SAAS,IAAI,OAAO,MAAM,KAAK,QAAQ,CAAC;QACpD,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,SAAS,KAAK,SAAS,CAAC,EAC3D,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,MAAM,YAAY,GAAG,iBAAiB,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAC3D,OAAO;QACL,GAAG,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACrC,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACjD,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC;AAED,SAAS,WAAW,CAAC,QAAgB;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,MAAM,aAAa,EAAE,CAAC;IAC7C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC;IAC/B,IAAI,OAAO,KAAK,cAAc,EAAE,CAAC;QAC/B,MAAM,IAAI,kBAAkB,CAC1B,8BAA8B,MAAM,CAAC,OAAO,CAAC,EAAE,EAC/C,6CAA6C,CAC9C,CAAC;IACJ,CAAC;IACD,IACE,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,eAAe,KAAK,SAAS,CAAC;QACrF,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,OAAO,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC;QACzE,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,EAC/D,CAAC;QACD,MAAM,aAAa,EAAE,CAAC;IACxB,CAAC;IAED,MAAM,SAAS,GAAgD,EAAE,CAAC;IAClE,MAAM,QAAQ,GAAoB,EAAE,CAAC;IACrC,KAAK,MAAM,CAAC,UAAU,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,EAAE,CAAC;QACzE,IAAI,CAAE,YAAkC,CAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;YAC9D,QAAQ,CAAC,IAAI,CAAC;gBACZ,IAAI,EAAE,kBAAkB;gBACxB,UAAU;gBACV,OAAO,EAAE,8BAA8B,UAAU,mBAAmB;aACrE,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QACD,SAAS,CAAC,UAAwB,CAAC,GAAG,mBAAmB,CAAC,KAAK,CAAC,CAAC;IACnE,CAAC;IAED,OAAO;QACL,MAAM,EAAE;YACN,OAAO,EAAE,cAAc;YACvB,GAAG,CAAC,MAAM,CAAC,eAAe,KAAK,SAAS;gBACtC,CAAC,CAAC,EAAE,eAAe,EAAE,MAAM,CAAC,eAA0B,EAAE;gBACxD,CAAC,CAAC,EAAE,CAAC;YACP,SAAS;YACT,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAoB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtF;QACD,QAAQ;KACT,CAAC;AACJ,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,OAAO,GAAuB,EAAE;IAC/D,MAAM,IAAI,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IAClD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC;IAC7C,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,OAAO,WAAW,EAAE,CAAC;QAC7E,MAAM,IAAI,kBAAkB,CAC1B,4BAA4B,EAC5B,8DAA8D,CAC/D,CAAC;IACJ,CAAC;IACD,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;IACrC,MAAM,SAAS,GACb,OAAO,CAAC,SAAS;QACjB,CAAC,CAAC,OAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;QAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1D,OAAO,MAAM,CAAC,MAAM,CAAC;AACvB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAO,GAAuB,EAAE;IAClE,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,CAAC;IACtD,IAAI,QAAgB,CAAC;IACrB,IAAI,CAAC;QACH,QAAQ,GAAG,MAAM,EAAE,CAAC,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC;IACjD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;YACvD,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QACxC,CAAC;QACD,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,KAAK,EAAE,IAAI,kBAAkB,CAC3B,4BAA4B,EAC5B,8DAA8D,CAC/D;SACF,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,WAAW,CAAC,QAAQ,CAAC,CAAC;QACrC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,QAAQ,EAAE,CAAC;IACzF,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,QAAQ;YACR,KAAK,EAAE,KAA2B;SACnC,CAAC;IACJ,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,QAAgB,EAChB,QAA6B,EAC7B,OAAO,GAAyB,EAAE;IAElC,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;IACpC,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IACvD,IAAI,QAAQ,KAAK,OAAO;QAAE,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IAEtD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,UAAU,CAAC;IAChD,IAAI,QAA4B,CAAC;IACjC,IAAI,MAAuD,CAAC;IAC5D,KAAK,IAAI,OAAO,GAAG,CAAC,EAAE,OAAO,GAAG,EAAE,EAAE,OAAO,IAAI,CAAC,EAAE,CAAC;QACjD,QAAQ,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,OAAO,CAAC,GAAG,IAAI,QAAQ,EAAE,MAAM,CAAC,CAAC;QAC3F,IAAI,CAAC;YACH,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,QAAQ,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;YAC9C,MAAM;QACR,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;gBAAE,MAAM,KAAK,CAAC;QACtE,CAAC;IACH,CAAC;IACD,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oDAAoD,CAAC,CAAC;IACxE,CAAC;IAED,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,MAAM,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjC,MAAM,MAAM,CAAC,IAAI,EAAE,CAAC;QACpB,MAAM,MAAM,CAAC,KAAK,EAAE,CAAC;QACrB,MAAM,GAAG,SAAS,CAAC;QAEnB,wEAAwE;QACxE,2EAA2E;QAC3E,4CAA4C;QAC5C,MAAM,CAAC,OAAO,CAAC,MAAM,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC;QACxD,OAAO,GAAG,IAAI,CAAC;QAEf,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;YACzB,MAAM,SAAS,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC;YAC3C,IAAI,CAAC;gBACH,MAAM,SAAS,CAAC,IAAI,EAAE,CAAC;YACzB,CAAC;oBAAS,CAAC;gBACT,MAAM,SAAS,CAAC,KAAK,EAAE,CAAC;YAC1B,CAAC;QACH,CAAC;IACH,CAAC;YAAS,CAAC;QACT,MAAM,MAAM,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QACtC,IAAI,CAAC,OAAO;YAAE,MAAM,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1D,CAAC;AACH,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,MAAuB,EACvB,OAAO,GAAuB,EAAE;IAEhC,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,SAAS,GACb,OAAO,CAAC,SAAS;QACjB,CAAC,CAAC,OAAsB,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,YAAY,OAAO,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;IACtF,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ;QAAE,SAAS,CAAC,OAAO,CAAC,CAAC;IAC1D,MAAM,OAAO,GAAG,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,iBAAiB,CAAC,OAAO,CAAC,QAAQ,IAAI,cAAc,EAAE,EAAE,OAAO,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IACzF,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,kBAAkB,CAC1B,6BAA6B,EAC7B,uDAAuD,CACxD,CAAC;IACJ,CAAC;AACH,CAAC;AAwBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,oBAAoB,CAClC,GAAsB,EACtB,MAAuB,EACvB,WAA4C;IAE5C,MAAM,QAAQ,GAAsB,EAAE,GAAG,GAAG,EAAE,CAAC;IAC/C,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAU,CAAC,CAAC,CAAC;IAEjE,KAAK,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC5E,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC;QACtC,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEzE,MAAM,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QACxC,IAAI,CAAC,UAAU;YAAE,SAAS;QAE1B,8DAA8D;QAC9D,qEAAqE;QACrE,IAAI,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC;YAAE,SAAS;QAE3C,MAAM,SAAS,GAAG,UAAU,CAAC,iBAAiB,EAAE,CAAC,CAAC,CAAC,CAAC;QACpD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;YAAE,SAAS;QAEtE,kEAAkE;QAClE,oEAAoE;QACpE,qEAAqE;QACrE,kDAAkD;QAClD,MAAM,QAAQ,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;QACrC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,SAAS;QAEzE,QAAQ,CAAC,SAAS,CAAC,GAAG,OAAO,CAAC;IAChC,CAAC;IAED,OAAO,QAAQ,CAAC;AAClB,CAAC;AAkCD;;;;;;;;GAQG;AACH,MAAM,UAAU,iCAAiC,CAC/C,OAAO,GAAuB,EAAE;IAEhC,OAAO;QACL,KAAK,CAAC,OAAO,CAAC,UAAU,EAAE,SAAS;YACjC,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO;gBAAE,OAAO;YAC1C,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS,CAAC,UAAU,CAAC,CAAC;YACzD,IAAI,CAAC,QAAQ,IAAI,CAAC,QAAQ,CAAC,YAAY;gBAAE,OAAO;YAChD,IAAI,QAAQ,CAAC,YAAY,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO;YACxD,MAAM,OAAO,GAAoB;gBAC/B,GAAG,UAAU,CAAC,MAAM;gBACpB,SAAS,EAAE;oBACT,GAAG,UAAU,CAAC,MAAM,CAAC,SAAS;oBAC9B,CAAC,UAAU,CAAC,EAAE;wBACZ,GAAG,QAAQ;wBACX,YAAY,EAAE,EAAE,MAAM,EAAE,UAAU,EAAE,SAAS,EAAE;qBAChD;iBACF;aACF,CAAC;YACF,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;KACF,CAAC;AACJ,CAAC;AAoBD;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAO,GAAuB,EAAE;IAC1E,OAAO;QACL,KAAK,CAAC,YAAY;YAChB,MAAM,UAAU,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,UAAU,CAAC,MAAM,KAAK,SAAS;gBAAE,OAAO;YAC5C,IAAI,UAAU,CAAC,MAAM,KAAK,OAAO,EAAE,CAAC;gBAClC,IAAI,UAAU,CAAC,MAAM,CAAC,SAAS,KAAK,IAAI;oBAAE,OAAO;gBACjD,MAAM,OAAO,GAAoB;oBAC/B,GAAG,UAAU,CAAC,MAAM;oBACpB,SAAS,EAAE,IAAI;iBAChB,CAAC;gBACF,MAAM,WAAW,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACpC,OAAO;YACT,CAAC;YACD,mEAAmE;YACnE,kEAAkE;YAClE,MAAM,WAAW,CAAC,EAAE,OAAO,EAAE,cAAc,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,EAAE,OAAO,CAAC,CAAC;QAC1F,CAAC;KACF,CAAC;AACJ,CAAC"}

package/dist/lib/config.d.ts

@@ -11,11 +11,11 @@ export interface ZaiConfig {
     topP: number;
     maxTokens: number;
 }
-export declare function loadConfig(): ZaiConfig;
+export declare function loadConfig(env?: NodeJS.ProcessEnv): ZaiConfig;
 export declare function getMcpEndpoints(): {
     readonly ZREAD: "https://api.z.ai/api/mcp/zread/mcp";
     readonly WEB_SEARCH: "https://api.z.ai/api/mcp/web_search_prime/mcp";
     readonly WEB_READER: "https://api.z.ai/api/mcp/web_reader/mcp";
 };
-export declare function getApiKey(): string;
+export declare function getApiKey(env?: NodeJS.ProcessEnv): string;
 //# sourceMappingURL=config.d.ts.map

package/dist/lib/config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAuBD,wBAAgB,UAAU,IAAI,SAAS,CA0BtC;AAED,wBAAgB,eAAe;oBAzCtB,oCAAoC;yBAC/B,+CAA+C;yBAC/C,yCAAyC;EAyCtD;AAED,wBAAgB,SAAS,IAAI,MAAM,CAUlC"}
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAIH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAC;IACf,IAAI,EAAE,KAAK,GAAG,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,MAAM,CAAC;IACpB,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;CACnB;AAgCD,wBAAgB,UAAU,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,SAAS,CAwB1E;AAED,wBAAgB,eAAe;oBAhDtB,oCAAoC;yBAC/B,+CAA+C;yBAC/C,yCAAyC;EAgDtD;AAED,wBAAgB,SAAS,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAUtE"}

package/dist/lib/config.js

@@ -20,8 +20,16 @@ const MISSING_KEY_HELP = [
     "Get your API key at:",
     "  https://z.ai/manage-apikey/apikey-list",
 ].join("\n");
-export function loadConfig() {
-    const apiKey = process.env.Z_AI_API_KEY || process.env.ZAI_API_KEY;
+//
+// T2a — Credential view: `loadConfig` and `getApiKey` accept an explicit
+// `env` parameter (defaulting to `process.env`) so the resolved
+// environment built in `main` — which merges file-configured keys on top
+// of the injected `MainDependencies.env` — reaches every Z.AI credential
+// reader. The signature is additive: existing no-argument callers keep
+// working unchanged against ambient `process.env`.
+//
+export function loadConfig(env = process.env) {
+    const apiKey = env.Z_AI_API_KEY || env.ZAI_API_KEY;
     if (!apiKey) {
         // P1-09: throw a normalized ConfigurationError (exit 3) instead of
         // terminating the process. Callers route through invokeCommand, which
@@ -29,24 +37,24 @@ export function loadConfig() {
         // transport is constructed and no process streams are touched here.
         throw new ConfigurationError("Z_AI_API_KEY environment variable is required", MISSING_KEY_HELP);
     }
-    const mode = (process.env.Z_AI_MODE || process.env.PLATFORM_MODE || "ZAI").toUpperCase();
-    const baseUrl = process.env.Z_AI_BASE_URL || BASE_URLS[mode] || BASE_URLS.ZAI;
+    const mode = (env.Z_AI_MODE || env.PLATFORM_MODE || "ZAI").toUpperCase();
+    const baseUrl = env.Z_AI_BASE_URL || BASE_URLS[mode] || BASE_URLS.ZAI;
     return {
         apiKey,
         mode,
         baseUrl,
-        timeout: parseInt(process.env.Z_AI_TIMEOUT || "30000", 10),
-        visionModel: process.env.Z_AI_VISION_MODEL || "glm-4.6v",
-        temperature: parseFloat(process.env.Z_AI_TEMPERATURE || "0.8"),
-        topP: parseFloat(process.env.Z_AI_TOP_P || "0.6"),
-        maxTokens: parseInt(process.env.Z_AI_MAX_TOKENS || "32768", 10),
+        timeout: parseInt(env.Z_AI_TIMEOUT || "30000", 10),
+        visionModel: env.Z_AI_VISION_MODEL || "glm-4.6v",
+        temperature: parseFloat(env.Z_AI_TEMPERATURE || "0.8"),
+        topP: parseFloat(env.Z_AI_TOP_P || "0.6"),
+        maxTokens: parseInt(env.Z_AI_MAX_TOKENS || "32768", 10),
     };
 }
 export function getMcpEndpoints() {
     return MCP_ENDPOINTS;
 }
-export function getApiKey() {
-    const apiKey = process.env.Z_AI_API_KEY || process.env.ZAI_API_KEY;
+export function getApiKey(env = process.env) {
+    const apiKey = env.Z_AI_API_KEY || env.ZAI_API_KEY;
     if (!apiKey) {
         // P1-09: throw instead of process.exit(3); see loadConfig for rationale.
         throw new ConfigurationError("Z_AI_API_KEY environment variable is required", 'export Z_AI_API_KEY="your-api-key"');

package/dist/lib/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAajD,MAAM,SAAS,GAAG;IAChB,kDAAkD;IAClD,GAAG,EAAE,qCAAqC;IAC1C,KAAK,EAAE,sCAAsC;CACrC,CAAC;AAEX,uBAAuB;AACvB,MAAM,aAAa,GAAG;IACpB,KAAK,EAAE,oCAAoC;IAC3C,UAAU,EAAE,+CAA+C;IAC3D,UAAU,EAAE,yCAAyC;CAC7C,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,YAAY;IACZ,sCAAsC;IACtC,EAAE;IACF,sBAAsB;IACtB,0CAA0C;CAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,UAAU;IACxB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IAEnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,mEAAmE;QACnE,sEAAsE;QACtE,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,EAAE,gBAAgB,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC,WAAW,EAE3E,CAAC;IACZ,MAAM,OAAO,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;IAE9E,OAAO;QACL,MAAM;QACN,IAAI;QACJ,OAAO;QACP,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,EAAE,EAAE,CAAC;QAC1D,WAAW,EAAE,OAAO,CAAC,GAAG,CAAC,iBAAiB,IAAI,UAAU;QACxD,WAAW,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC;QAC9D,IAAI,EAAE,UAAU,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC;QACjD,SAAS,EAAE,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,EAAE,EAAE,CAAC;KAChE,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,SAAS;IACvB,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,CAAC,GAAG,CAAC,WAAW,CAAC;IACnE,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,yEAAyE;QACzE,MAAM,IAAI,kBAAkB,CAC1B,+CAA+C,EAC/C,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/lib/config.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAAE,kBAAkB,EAAE,MAAM,aAAa,CAAC;AAajD,MAAM,SAAS,GAAG;IAChB,kDAAkD;IAClD,GAAG,EAAE,qCAAqC;IAC1C,KAAK,EAAE,sCAAsC;CACrC,CAAC;AAEX,uBAAuB;AACvB,MAAM,aAAa,GAAG;IACpB,KAAK,EAAE,oCAAoC;IAC3C,UAAU,EAAE,+CAA+C;IAC3D,UAAU,EAAE,yCAAyC;CAC7C,CAAC;AAEX,MAAM,gBAAgB,GAAG;IACvB,YAAY;IACZ,sCAAsC;IACtC,EAAE;IACF,sBAAsB;IACtB,0CAA0C;CAC3C,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,EAAE;AACF,yEAAyE;AACzE,gEAAgE;AAChE,yEAAyE;AACzE,yEAAyE;AACzE,uEAAuE;AACvE,mDAAmD;AACnD,EAAE;AAEF,MAAM,UAAU,UAAU,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC7D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,WAAW,CAAC;IAEnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,mEAAmE;QACnE,sEAAsE;QACtE,iEAAiE;QACjE,oEAAoE;QACpE,MAAM,IAAI,kBAAkB,CAAC,+CAA+C,EAAE,gBAAgB,CAAC,CAAC;IAClG,CAAC;IAED,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,aAAa,IAAI,KAAK,CAAC,CAAC,WAAW,EAAqB,CAAC;IAC5F,MAAM,OAAO,GAAG,GAAG,CAAC,aAAa,IAAI,SAAS,CAAC,IAAI,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC;IAEtE,OAAO;QACL,MAAM;QACN,IAAI;QACJ,OAAO;QACP,OAAO,EAAE,QAAQ,CAAC,GAAG,CAAC,YAAY,IAAI,OAAO,EAAE,EAAE,CAAC;QAClD,WAAW,EAAE,GAAG,CAAC,iBAAiB,IAAI,UAAU;QAChD,WAAW,EAAE,UAAU,CAAC,GAAG,CAAC,gBAAgB,IAAI,KAAK,CAAC;QACtD,IAAI,EAAE,UAAU,CAAC,GAAG,CAAC,UAAU,IAAI,KAAK,CAAC;QACzC,SAAS,EAAE,QAAQ,CAAC,GAAG,CAAC,eAAe,IAAI,OAAO,EAAE,EAAE,CAAC;KACxD,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,eAAe;IAC7B,OAAO,aAAa,CAAC;AACvB,CAAC;AAED,MAAM,UAAU,SAAS,CAAC,GAAG,GAAsB,OAAO,CAAC,GAAG;IAC5D,MAAM,MAAM,GAAG,GAAG,CAAC,YAAY,IAAI,GAAG,CAAC,WAAW,CAAC;IACnD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,yEAAyE;QACzE,MAAM,IAAI,kBAAkB,CAC1B,+CAA+C,EAC/C,oCAAoC,CACrC,CAAC;IACJ,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/dist/lib/consumption.d.ts

@@ -0,0 +1,144 @@
+/**
+ * Consumption event + sink (Plan B — PB-T2).
+ *
+ * A **typed consumption event** represents one billable Provider
+ * transport attempt. Shared execution emits it at the execution seam
+ * (`lib/execution.ts`) — after the cache-miss check, around each
+ * `operation.invoke()` call — so cache hits emit nothing and a retried
+ * operation emits one event per attempt.
+ *
+ * Boundary rules:
+ *   - Imports quota-store types (the sink writes to it) and provider
+ *     identity types. No provider transport, no command presentation.
+ *   - The sink is **best-effort**: a record failure is converted to a
+ *     redacted warning and never propagates. A successful Provider
+ *     result still returns; the retry/fallback classifier is never
+ *     consulted on accounting state.
+ *   - The amount is an explicit exact/estimate/unknown discriminated
+ *     value. There is no `number = 1` default — Research/Vision and
+ *     other variable-cost capabilities persist `unknown` or an
+ *     explicit estimate rather than fake-precise consumption.
+ *
+ * Persistence lifecycle:
+ *   - The sink's `record()` promise is awaited before the billable
+ *     invoke returns outward, so the consumption write survives the
+ *     bin's immediate `process.exit(status)`. A rejection is converted
+ *     to a stderr warning; the outer promise still resolves.
+ *
+ * Relation to PB-T1 / PB-T3:
+ *   - The sink calls PB-T1's `QuotaStore.writeConsumption`, advancing
+ *     `locallyUpdatedAt` and adjusting the matching category's count
+ *     set when one is exposed. `observedAt` (ground truth) never moves.
+ *   - The event carries canonical data (capability ID, category, unit,
+ *     amount). PB-T3 maps capabilities→categories and PB-T4 ranks;
+ *     PB-T2 records raw, provider-neutral events and lets later layers
+ *     interpret them.
+ */
+import type { ProviderId } from "../providers/types.js";
+import type { QuotaUnit, ConsumptionAmount, QuotaStore } from "./quota-store.js";
+/**
+ * A single billable Provider transport attempt. Emitted once per
+ * `invoke()` inside `executeProviderOperation` — never at wrapper
+ * level, never on cache hit, never from `quota`/`doctor`.
+ *
+ * `attempt` is the 1-based attempt index within one
+ * `executeProviderOperation` loop (1 = first try, 2 = first retry...).
+ */
+export interface ConsumptionEvent {
+    readonly provider: ProviderId;
+    readonly capabilityId: string;
+    readonly category?: string;
+    readonly unit?: QuotaUnit;
+    readonly amount: ConsumptionAmount;
+    readonly attempt: number;
+    readonly at: number;
+}
+/**
+ * Provider-neutral metadata a billable wrapper passes into
+ * `executeProviderOperation`. Identifies *what* is being consumed,
+ * independent of *where* the event is recorded. The sink
+ * (`ExecutionDependencies.consume`) is the *where*.
+ *
+ * `amount` defaults to {@link defaultAmountForCapability} when the
+ * wrapper does not know a precise cost from the response usage — most
+ * providers do not return per-call usage.
+ */
+export interface ConsumptionContext {
+    readonly provider: ProviderId;
+    readonly capabilityId: string;
+    readonly category?: string;
+    readonly unit?: QuotaUnit;
+    readonly amount: ConsumptionAmount;
+}
+/**
+ * Injectable sink. Production wires
+ * {@link createQuotaStoreConsumptionSink} (atomic read-merge-write
+ * against `~/.scoutline/state.json` via PB-T1's store); tests inject
+ * {@link createInMemoryConsumptionSink} so assertions never touch disk.
+ *
+ * Contract: `record()` MUST NOT throw on accounting failure. The
+ * shared-execution emission site does not catch — the sink converts
+ * any internal failure to a warning before resolution. This keeps the
+ * retry/fallback classifier free of accounting concerns.
+ */
+export interface ConsumptionSink {
+    record(event: ConsumptionEvent): Promise<void>;
+}
+/**
+ * Default {@link ConsumptionAmount} for a capability when the wrapper
+ * has no response-usage to derive from. Most providers do not return
+ * per-call usage, so the default is **unknown** — never a fake-precise
+ * "1".
+ *
+ * Capabilities whose unit-cost is reliably one (Search, Repository,
+ * Reader, Map) get `{ kind: "estimate", value: 1 }`. Capabilities
+ * with variable cost (Research = 4–250 credits, Vision = variable
+ * tokens, Crawl = per-page) default to `unknown`. PB-T3 refines these
+ * mappings; PB-T2 records the honest default.
+ */
+export declare function defaultAmountForCapability(capabilityId: string): ConsumptionAmount;
+export interface ConsumptionSinkOptions {
+    readonly store: QuotaStore;
+    readonly now?: () => number;
+    /**
+     * Best-effort warning sink. A write failure is isolated through this
+     * callback; the recorded event's promise still resolves. Production
+     * wires a stderr notice; tests inject a recorder. Default writes a
+     * redacted message to stderr (no event detail, no PII).
+     */
+    readonly onWarning?: (message: string) => void;
+}
+/**
+ * Build a production {@link ConsumptionSink} that writes through
+ * {@link QuotaStore.writeConsumption}. The sink is fail-safe: any
+ * internal rejection (disk full, permission, race) is converted to a
+ * warning and the recorded promise resolves so shared execution never
+ * observes an accounting failure.
+ *
+ * The store's per-file mutex serializes concurrent writes within the
+ * process; cross-process concurrency is last-write-wins (acceptable
+ * for an observational heuristic; PB-T1's atomic rename keeps the
+ * final state crash-safe).
+ */
+export declare function createQuotaStoreConsumptionSink(options: ConsumptionSinkOptions): ConsumptionSink;
+/**
+ * Build an in-memory {@link ConsumptionSink} for hermetic tests. Records
+ * every event in `events` (in arrival order); never rejects. Use this
+ * to assert exact event sequences for cache-hit suppression, retry
+ * emission, and observational-handler silence.
+ */
+export declare function createInMemoryConsumptionSink(): ConsumptionSink & {
+    readonly events: ConsumptionEvent[];
+};
+/**
+ * Emit one {@link ConsumptionEvent} through `sink`, deriving the event
+ * from `context` + `attempt`. The promise ALWAYS resolves: a sink
+ * failure has already been converted to a warning inside the sink, and
+ * this helper adds a defensive outer try/catch so an exception in the
+ * context-derivation path can never escape into the retry classifier.
+ *
+ * Returns void — shared execution awaits it before the invoke returns
+ * outward, but the resolution value carries no information.
+ */
+export declare function emitConsumption(sink: ConsumptionSink, context: ConsumptionContext, attempt: number, now: () => number): Promise<void>;
+//# sourceMappingURL=consumption.d.ts.map

package/dist/lib/consumption.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"consumption.d.ts","sourceRoot":"","sources":["../../src/lib/consumption.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAmCG;AAEH,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,KAAK,EAAE,SAAS,EAAE,iBAAiB,EAAE,UAAU,EAAE,MAAM,kBAAkB,CAAC;AAMjF;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;IACnC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;CACrB;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,QAAQ,EAAE,UAAU,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,CAAC;IAC1B,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAC;CACpC;AAED;;;;;;;;;;GAUG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,CAAC,KAAK,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAChD;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,0BAA0B,CAAC,YAAY,EAAE,MAAM,GAAG,iBAAiB,CAoBlF;AAMD,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;;;;;OAKG;IACH,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,IAAI,CAAC;CAChD;AAMD;;;;;;;;;;;GAWG;AACH,wBAAgB,+BAA+B,CAAC,OAAO,EAAE,sBAAsB,GAAG,eAAe,CAwBhG;AAMD;;;;;GAKG;AACH,wBAAgB,6BAA6B,IAAI,eAAe,GAAG;IACjE,QAAQ,CAAC,MAAM,EAAE,gBAAgB,EAAE,CAAC;CACrC,CAUA;AAMD;;;;;;;;;GASG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,eAAe,EACrB,OAAO,EAAE,kBAAkB,EAC3B,OAAO,EAAE,MAAM,EACf,GAAG,EAAE,MAAM,MAAM,GAChB,OAAO,CAAC,IAAI,CAAC,CAgBf"}