sealbridge 0.0.1 → 0.1.0

package/dist/packages/adapters/dist/command.js

@@ -0,0 +1,365 @@
+// SPDX-License-Identifier: Apache-2.0
+import { spawn } from 'node:child_process';
+import { access, writeFile } from 'node:fs/promises';
+import { constants } from 'node:fs';
+import { delimiter, isAbsolute, join } from 'node:path';
+import { startCredentialProxy } from './credential-proxy.js';
+import { sanitizedEnvironment } from '../../sandbox/dist/index.js';
+export async function resolveCommand(command) {
+    if (isAbsolute(command))
+        return command;
+    if (command.includes('/'))
+        throw new Error('COMMAND_MUST_BE_ABSOLUTE_OR_ON_PATH');
+    for (const dir of (process.env.PATH ?? '/usr/local/bin:/usr/bin:/bin').split(delimiter)) {
+        if (!isAbsolute(dir))
+            continue;
+        const path = join(dir, command);
+        try {
+            await access(path, constants.X_OK);
+            return path;
+        }
+        catch {
+            /* next executable directory */
+        }
+    }
+    throw new Error('COMMAND_NOT_FOUND: ' + command);
+}
+export const runCommand = async (request) => {
+    const command = await resolveCommand(request.command);
+    // Windows refuses to spawn a .js/.cjs/.mjs path directly (EFTYPE). Run it with this Node.
+    const script = /\.(?:cjs|mjs|js)$/i.test(command);
+    const binary = script ? process.execPath : command;
+    const args = script ? [command, ...request.args] : request.args;
+    return new Promise((resolve, reject) => {
+        const child = spawn(binary, args, {
+            cwd: request.cwd,
+            env: request.env,
+            stdio: ['pipe', 'pipe', 'pipe'],
+            shell: false,
+            detached: process.platform !== 'win32',
+        });
+        let stdout = '', stderr = '', size = 0, settled = false;
+        const kill = () => {
+            try {
+                if (process.platform !== 'win32' && child.pid)
+                    process.kill(-child.pid, 'SIGKILL');
+                else
+                    child.kill('SIGKILL');
+            }
+            catch {
+                /* already exited */
+            }
+        };
+        const finish = (error, code = 0) => {
+            if (settled)
+                return;
+            settled = true;
+            clearTimeout(timer);
+            request.signal.removeEventListener('abort', abort);
+            kill();
+            error ? reject(error) : resolve({ stdout, stderr, exitCode: code });
+        };
+        const abort = () => finish(new Error('ADAPTER_ABORTED'));
+        const timer = setTimeout(() => finish(new Error('ADAPTER_TIMEOUT')), request.timeoutMs);
+        request.signal.addEventListener('abort', abort, { once: true });
+        if (request.signal.aborted)
+            abort();
+        child.stdout.on('data', (b) => {
+            size += b.length;
+            if (size > 4194304)
+                finish(new Error('ADAPTER_OUTPUT_LIMIT'));
+            else
+                stdout += b.toString();
+        });
+        child.stderr.on('data', (b) => {
+            stderr = (stderr + b.toString()).slice(-4096);
+        });
+        child.on('error', () => finish(new Error('ADAPTER_SPAWN_FAILED')));
+        child.on('close', (code) => finish(code === 0 ? undefined : new Error('ADAPTER_EXIT: ' + code), code ?? 1));
+        child.stdin.on('error', () => { });
+        child.stdin.end(request.input);
+    });
+};
+export function parseJsonDeliverable(value) {
+    if (typeof value !== 'string')
+        return JSON.parse(JSON.stringify(value));
+    const text = value
+        .trim()
+        .replace(/^```(?:json)?\s*\n?/, '')
+        .replace(/\n?```$/, '');
+    try {
+        return JSON.parse(text);
+    }
+    catch {
+        throw new Error('ADAPTER_INVALID_JSON');
+    }
+}
+export class CommandAgentAdapter {
+    options;
+    id;
+    name;
+    skills;
+    constructor(options) {
+        this.options = options;
+        this.id = options.id ?? 'command';
+        this.name = options.name ?? 'Command Worker';
+        this.skills = options.skills ?? [{ id: 'json-task', name: 'JSON task' }];
+    }
+    invocation() {
+        if (Array.isArray(this.options.command)) {
+            const [command, ...args] = this.options.command;
+            if (!command)
+                throw new Error('MISSING_COMMAND');
+            return { command, args: [...args, ...(this.options.args ?? [])] };
+        }
+        // String commands are explicitly owner-configured shell scripts.
+        return {
+            command: '/bin/sh',
+            args: ['-c', this.options.command, 'acp-task', ...(this.options.args ?? [])],
+        };
+    }
+    /** Executable and arguments that `executeCommand` will spawn. */
+    resolvedInvocation() {
+        return this.invocation();
+    }
+    decode(stdout, _context) {
+        return parseJsonDeliverable(stdout);
+    }
+    encodeInput(context) {
+        return JSON.stringify(context.input);
+    }
+    async executeTask(context) {
+        return this.executeCommand(context);
+    }
+    async executeCommand(context, environment = {}) {
+        context.signal.throwIfAborted();
+        const started = Date.now();
+        const input = JSON.stringify(context.input), inputFile = join(context.workspaceDir, 'input.json');
+        await writeFile(inputFile, input, { mode: 0o600 });
+        const invocation = this.invocation();
+        try {
+            const result = await (this.options.runner ?? runCommand)({
+                ...invocation,
+                cwd: context.workspaceDir,
+                env: {
+                    ...sanitizedEnvironment(context.workspaceDir),
+                    PATH: '/usr/local/bin:/usr/bin:/bin',
+                    TASK_INPUT_FILE: inputFile,
+                    ...environment,
+                },
+                input: this.encodeInput(context),
+                signal: context.signal,
+                timeoutMs: context.manifest.budget.maxWallClockSeconds * 1000,
+            });
+            context.signal.throwIfAborted();
+            if (result.exitCode && result.exitCode !== 0)
+                throw new Error('ADAPTER_EXIT: ' + result.exitCode);
+            return this.decode(result.stdout, context);
+        }
+        finally {
+            context.reportUsage({ wallTimeMs: Date.now() - started });
+            context.reportIsolation?.('workspace_process');
+        }
+    }
+}
+const CLAUDE_PERMISSION_MODES = [
+    'acceptEdits',
+    'auto',
+    'bypassPermissions',
+    'default',
+    'dontAsk',
+    'plan',
+];
+const CODEX_SANDBOX_MODES = ['read-only', 'workspace-write', 'danger-full-access'];
+const CLAUDE_READ_ONLY_TOOLS = 'Read,Glob,Grep';
+const CLAUDE_DISALLOWED_TOOLS = 'Bash,Edit,Write,MultiEdit,NotebookEdit,WebFetch,WebSearch';
+function joinTools(value) {
+    return typeof value === 'string' ? value : value.join(',');
+}
+function cliFlagPresent(args, names) {
+    return args.some((arg) => names.some((name) => arg === name || arg.startsWith(name + '=')));
+}
+function assertOneOf(value, allowed, code) {
+    if (!allowed.includes(value))
+        throw new Error(code);
+    return value;
+}
+function claudeRestrictionArgs(options, extra) {
+    const unsafe = options.allowUnsafeTools === true;
+    const flags = [];
+    const tools = options.tools !== undefined ? options.tools : options.allowedTools;
+    if (!cliFlagPresent(extra, ['--tools'])) {
+        if (tools !== undefined)
+            flags.push('--tools', joinTools(tools));
+        else if (!unsafe)
+            flags.push('--tools', CLAUDE_READ_ONLY_TOOLS);
+    }
+    if (!cliFlagPresent(extra, ['--disallowedTools', '--disallowed-tools'])) {
+        if (options.disallowedTools !== undefined)
+            flags.push('--disallowedTools', joinTools(options.disallowedTools));
+        else if (!unsafe)
+            flags.push('--disallowedTools', CLAUDE_DISALLOWED_TOOLS);
+    }
+    if (!cliFlagPresent(extra, ['--permission-mode', '--permissionMode'])) {
+        if (options.permissionMode !== undefined)
+            flags.push('--permission-mode', assertOneOf(options.permissionMode, CLAUDE_PERMISSION_MODES, 'INVALID_PERMISSION_MODE'));
+        else if (!unsafe)
+            flags.push('--permission-mode', 'dontAsk');
+    }
+    return flags;
+}
+/** Argv for Claude Code. Read-only tool flags apply unless the owner relaxes that flag. */
+export function resolveClaudeCodeCliCommand(options = {}) {
+    const extra = options.extraArgs ?? [];
+    return {
+        command: options.binaryPath ?? 'claude',
+        args: ['-p', '--output-format', 'json', ...claudeRestrictionArgs(options, extra), ...extra],
+    };
+}
+/** Argv for `codex exec`. `--sandbox read-only` applies unless the owner sets another sandbox. */
+export function resolveCodexCliCommand(options = {}) {
+    const extra = options.extraArgs ?? [];
+    const args = ['exec', '--json', '--skip-git-repo-check'];
+    if (!cliFlagPresent(extra, ['--sandbox', '-s']))
+        args.push('--sandbox', assertOneOf(options.sandbox ?? 'read-only', CODEX_SANDBOX_MODES, 'INVALID_SANDBOX_MODE'));
+    args.push(...extra, '-');
+    return { command: options.binaryPath ?? 'codex', args };
+}
+function commandList(resolved) {
+    return [resolved.command, ...resolved.args];
+}
+function usage(context, value, meteredByProxy = false) {
+    // The proxy already charged this task from the provider response.
+    // Stdout repeats those totals and must not be recorded again.
+    if (meteredByProxy)
+        return;
+    const inputTokens = Number(value.input_tokens ?? value.prompt_tokens ?? 0), outputTokens = Number(value.output_tokens ?? value.completion_tokens ?? 0);
+    context.reportUsage({
+        inputTokens,
+        outputTokens,
+        totalTokens: Number(value.total_tokens ?? inputTokens + outputTokens),
+    });
+}
+class ProviderCliAdapter extends CommandAgentAdapter {
+    cliOptions = {};
+    /** Set while the task's provider traffic is going through the credential proxy. */
+    activeProxy;
+    /** Stdout usage repeats totals the proxy has already recorded. */
+    proxyAlreadyMetered() {
+        return (this.activeProxy?.responsesMetered ?? 0) > 0;
+    }
+    encodeInput(context) {
+        return JSON.stringify({
+            title: context.manifest.task.title,
+            description: context.manifest.task.description,
+            input: context.input,
+            outputSchema: context.manifest.io.outputSchema,
+            instruction: 'Return only a JSON deliverable.',
+        });
+    }
+    async executeTask(context) {
+        this.activeProxy = undefined;
+        const anthropic = this.providerStyle === 'anthropic';
+        const key = this.cliOptions.apiKey ??
+            process.env[this.cliOptions.apiKeyEnv ?? (anthropic ? 'ANTHROPIC_API_KEY' : 'OPENAI_API_KEY')];
+        if (!key || this.cliOptions.runner || this.cliOptions.command)
+            return super.executeTask(context);
+        const proxy = await startCredentialProxy({
+            apiKey: key,
+            baseUrl: this.cliOptions.baseUrl ??
+                (anthropic ? 'https://api.anthropic.com/v1' : 'https://api.openai.com/v1'),
+            style: this.providerStyle,
+            signal: context.signal,
+            fetch: this.cliOptions.fetch,
+            budget: context.manifest.budget,
+            reportUsage: (metrics) => context.reportUsage(metrics),
+            maxRequests: this.cliOptions.maxRequests,
+        });
+        this.activeProxy = proxy;
+        try {
+            return await this.executeCommand(context, anthropic
+                ? {
+                    ANTHROPIC_BASE_URL: proxy.url,
+                    ANTHROPIC_API_KEY: proxy.token,
+                    CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC: '1',
+                }
+                : { OPENAI_BASE_URL: proxy.url + '/v1', OPENAI_API_KEY: proxy.token });
+        }
+        finally {
+            this.activeProxy = undefined;
+            await proxy.close();
+        }
+    }
+}
+export class ClaudeCodeAdapter extends ProviderCliAdapter {
+    providerStyle = 'anthropic';
+    constructor(options = {}) {
+        // `command` replaces the argv. Otherwise the CLI starts with read-only tool flags.
+        super({
+            ...options,
+            command: options.command ?? commandList(resolveClaudeCodeCliCommand(options)),
+            id: 'claude',
+            name: 'Claude Code',
+        });
+        this.cliOptions = options;
+    }
+    decode(stdout, context) {
+        const value = parseJsonDeliverable(stdout);
+        if (value && typeof value === 'object' && !Array.isArray(value)) {
+            if (value.usage && typeof value.usage === 'object')
+                usage(context, value.usage, this.proxyAlreadyMetered());
+            if (value.is_error === true)
+                throw new Error('CLAUDE_TASK_FAILED');
+            if ('structured_output' in value)
+                return parseJsonDeliverable(value.structured_output);
+            if ('result' in value)
+                return parseJsonDeliverable(value.result);
+        }
+        return value;
+    }
+}
+/** Claude Code CLI adapter. Same class as `ClaudeCodeAdapter`. */
+export const ClaudeCodeCliAdapter = ClaudeCodeAdapter;
+export class CodexCliAdapter extends ProviderCliAdapter {
+    providerStyle = 'openai';
+    constructor(options = {}) {
+        // `command` replaces the argv. Otherwise model shell commands stay in the read-only sandbox.
+        super({
+            ...options,
+            command: options.command ?? commandList(resolveCodexCliCommand(options)),
+            id: 'codex',
+            name: 'Codex CLI',
+        });
+        this.cliOptions = options;
+    }
+    decode(stdout, context) {
+        let direct;
+        try {
+            direct = JSON.parse(stdout);
+        }
+        catch {
+            direct = null;
+        }
+        if (direct && typeof direct === 'object' && !Array.isArray(direct) && !('type' in direct)) {
+            if (direct.usage && typeof direct.usage === 'object')
+                usage(context, direct.usage, this.proxyAlreadyMetered());
+            return 'result' in direct ? parseJsonDeliverable(direct.result) : direct;
+        }
+        let result;
+        for (const line of stdout.trim().split('\n')) {
+            const event = JSON.parse(line);
+            if (event.type === 'turn.failed' || event.type === 'error')
+                throw new Error('CODEX_TASK_FAILED');
+            if (event.usage)
+                usage(context, event.usage, this.proxyAlreadyMetered());
+            if (event.item?.type === 'agent_message' && event.item.text)
+                result = parseJsonDeliverable(event.item.text);
+            if (event.result !== undefined)
+                result = parseJsonDeliverable(event.result);
+        }
+        if (result === undefined)
+            throw new Error('CODEX_MISSING_RESULT');
+        return result;
+    }
+}
+//# sourceMappingURL=command.js.map

package/dist/packages/adapters/dist/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../src/command.ts"],"names":[],"mappings":"AAAA,sCAAsC;AACtC,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,kBAAkB,CAAC;AACrD,OAAO,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACpC,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACxD,OAAO,EAAE,oBAAoB,EAA8B,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAkBpD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,OAAe;IAClD,IAAI,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,OAAO,CAAC;IACxC,IAAI,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;IAClF,KAAK,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,8BAA8B,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,EAAE,CAAC;QACxF,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS;QAC/B,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,CAAC;YACnC,OAAO,IAAI,CAAC;QACd,CAAC;QAAC,MAAM,CAAC;YACP,+BAA+B;QACjC,CAAC;IACH,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,qBAAqB,GAAG,OAAO,CAAC,CAAC;AACnD,CAAC;AACD,MAAM,CAAC,MAAM,UAAU,GAAkB,KAAK,EAAE,OAAO,EAAE,EAAE;IACzD,MAAM,OAAO,GAAG,MAAM,cAAc,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;IACtD,0FAA0F;IAC1F,MAAM,MAAM,GAAG,oBAAoB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC;IACnD,MAAM,IAAI,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC;IAChE,OAAO,IAAI,OAAO,CAAgB,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACpD,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,EAAE,IAAI,EAAE;YAChC,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,GAAG,EAAE,OAAO,CAAC,GAAG;YAChB,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;YAC/B,KAAK,EAAE,KAAK;YACZ,QAAQ,EAAE,OAAO,CAAC,QAAQ,KAAK,OAAO;SACvC,CAAC,CAAC;QACH,IAAI,MAAM,GAAG,EAAE,EACb,MAAM,GAAG,EAAE,EACX,IAAI,GAAG,CAAC,EACR,OAAO,GAAG,KAAK,CAAC;QAClB,MAAM,IAAI,GAAG,GAAG,EAAE;YAChB,IAAI,CAAC;gBACH,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,GAAG;oBAAE,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;;oBAC9E,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YAC7B,CAAC;YAAC,MAAM,CAAC;gBACP,oBAAoB;YACtB,CAAC;QACH,CAAC,CAAC;QACF,MAAM,MAAM,GAAG,CAAC,KAAa,EAAE,IAAI,GAAG,CAAC,EAAE,EAAE;YACzC,IAAI,OAAO;gBAAE,OAAO;YACpB,OAAO,GAAG,IAAI,CAAC;YACf,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,OAAO,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACnD,IAAI,EAAE,CAAC;YACP,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,CAAC;QACzD,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC;QACxF,OAAO,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAChE,IAAI,OAAO,CAAC,MAAM,CAAC,OAAO;YAAE,KAAK,EAAE,CAAC;QACpC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,IAAI,IAAI,CAAC,CAAC,MAAM,CAAC;YACjB,IAAI,IAAI,GAAG,OAAO;gBAAE,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;;gBACzD,MAAM,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAC;QAC9B,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,CAAS,EAAE,EAAE;YACpC,MAAM,GAAG,CAAC,MAAM,GAAG,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC;QAChD,CAAC,CAAC,CAAC;QACH,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC,CAAC;QACnE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAI,EAAE,EAAE,CACzB,MAAM,CAAC,IAAI,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,gBAAgB,GAAG,IAAI,CAAC,EAAE,IAAI,IAAI,CAAC,CAAC,CAC/E,CAAC;QACF,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;QAClC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACjC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC;AACF,MAAM,UAAU,oBAAoB,CAAC,KAAc;IACjD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAS,CAAC;IAChF,MAAM,IAAI,GAAG,KAAK;SACf,IAAI,EAAE;SACN,OAAO,CAAC,qBAAqB,EAAE,EAAE,CAAC;SAClC,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;IAC1B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAS,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;IAC1C,CAAC;AACH,CAAC;AASD,MAAM,OAAO,mBAAmB;IAIT;IAHZ,EAAE,CAAS;IACX,IAAI,CAAS;IACb,MAAM,CAAe;IAC9B,YAAqB,OAA8B;QAA9B,YAAO,GAAP,OAAO,CAAuB;QACjD,IAAI,CAAC,EAAE,GAAG,OAAO,CAAC,EAAE,IAAI,SAAS,CAAC;QAClC,IAAI,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,IAAI,gBAAgB,CAAC;QAC7C,IAAI,CAAC,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3E,CAAC;IACS,UAAU;QAClB,IAAI,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;YACxC,MAAM,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC;YAChD,IAAI,CAAC,OAAO;gBAAE,MAAM,IAAI,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACjD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,GAAG,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC;QACpE,CAAC;QACD,iEAAiE;QACjE,OAAO;YACL,OAAO,EAAE,SAAS;YAClB,IAAI,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,UAAU,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC;SAC7E,CAAC;IACJ,CAAC;IACD,iEAAiE;IACjE,kBAAkB;QAChB,OAAO,IAAI,CAAC,UAAU,EAAE,CAAC;IAC3B,CAAC;IACS,MAAM,CAAC,MAAc,EAAE,QAA0B;QACzD,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;IACtC,CAAC;IACS,WAAW,CAAC,OAAyB;QAC7C,OAAO,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACvC,CAAC;IACD,KAAK,CAAC,WAAW,CAAC,OAAyB;QACzC,OAAO,IAAI,CAAC,cAAc,CAAC,OAAO,CAAC,CAAC;IACtC,CAAC;IACS,KAAK,CAAC,cAAc,CAC5B,OAAyB,EACzB,cAAiC,EAAE;QAEnC,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;QAChC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC3B,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,KAAK,CAAC,EACzC,SAAS,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,EAAE,YAAY,CAAC,CAAC;QACvD,MAAM,SAAS,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QACnD,MAAM,UAAU,GAAG,IAAI,CAAC,UAAU,EAAE,CAAC;QACrC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,UAAU,CAAC,CAAC;gBACvD,GAAG,UAAU;gBACb,GAAG,EAAE,OAAO,CAAC,YAAY;gBACzB,GAAG,EAAE;oBACH,GAAG,oBAAoB,CAAC,OAAO,CAAC,YAAY,CAAC;oBAC7C,IAAI,EAAE,8BAA8B;oBACpC,eAAe,EAAE,SAAS;oBAC1B,GAAG,WAAW;iBACf;gBACD,KAAK,EAAE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC;gBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,SAAS,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI;aAC9D,CAAC,CAAC;YACH,OAAO,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;YAChC,IAAI,MAAM,CAAC,QAAQ,IAAI,MAAM,CAAC,QAAQ,KAAK,CAAC;gBAC1C,MAAM,IAAI,KAAK,CAAC,gBAAgB,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC;YACtD,OAAO,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QAC7C,CAAC;gBAAS,CAAC;YACT,OAAO,CAAC,WAAW,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,OAAO,EAAE,CAAC,CAAC;YAC1D,OAAO,CAAC,eAAe,EAAE,CAAC,mBAAmB,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;CACF;AAgBD,MAAM,uBAAuB,GAAG;IAC9B,aAAa;IACb,MAAM;IACN,mBAAmB;IACnB,SAAS;IACT,SAAS;IACT,MAAM;CACE,CAAC;AAEX,MAAM,mBAAmB,GAAG,CAAC,WAAW,EAAE,iBAAiB,EAAE,oBAAoB,CAAU,CAAC;AA0B5F,MAAM,sBAAsB,GAAG,gBAAgB,CAAC;AAChD,MAAM,uBAAuB,GAAG,2DAA2D,CAAC;AAC5F,SAAS,SAAS,CAAC,KAAkB;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AAC7D,CAAC;AACD,SAAS,cAAc,CAAC,IAAuB,EAAE,KAAwB;IACvE,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,GAAG,KAAK,IAAI,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;AAC9F,CAAC;AACD,SAAS,WAAW,CAAmB,KAAa,EAAE,OAAqB,EAAE,IAAY;IACvF,IAAI,CAAE,OAA6B,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC;IAC3E,OAAO,KAAU,CAAC;AACpB,CAAC;AACD,SAAS,qBAAqB,CAC5B,OAAiC,EACjC,KAAwB;IAExB,MAAM,MAAM,GAAG,OAAO,CAAC,gBAAgB,KAAK,IAAI,CAAC;IACjD,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;IACjF,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC;QACxC,IAAI,KAAK,KAAK,SAAS;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;aAC5D,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,sBAAsB,CAAC,CAAC;IAClE,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,oBAAoB,CAAC,CAAC,EAAE,CAAC;QACxE,IAAI,OAAO,CAAC,eAAe,KAAK,SAAS;YACvC,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,OAAO,CAAC,eAAe,CAAC,CAAC,CAAC;aACjE,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,uBAAuB,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,mBAAmB,EAAE,kBAAkB,CAAC,CAAC,EAAE,CAAC;QACtE,IAAI,OAAO,CAAC,cAAc,KAAK,SAAS;YACtC,KAAK,CAAC,IAAI,CACR,mBAAmB,EACnB,WAAW,CAAC,OAAO,CAAC,cAAc,EAAE,uBAAuB,EAAE,yBAAyB,CAAC,CACxF,CAAC;aACC,IAAI,CAAC,MAAM;YAAE,KAAK,CAAC,IAAI,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AACD,2FAA2F;AAC3F,MAAM,UAAU,2BAA2B,CACzC,UAAoC,EAAE;IAEtC,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IACtC,OAAO;QACL,OAAO,EAAE,OAAO,CAAC,UAAU,IAAI,QAAQ;QACvC,IAAI,EAAE,CAAC,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC;KAC5F,CAAC;AACJ,CAAC;AACD,kGAAkG;AAClG,MAAM,UAAU,sBAAsB,CAAC,UAA+B,EAAE;IACtE,MAAM,KAAK,GAAG,OAAO,CAAC,SAAS,IAAI,EAAE,CAAC;IACtC,MAAM,IAAI,GAAG,CAAC,MAAM,EAAE,QAAQ,EAAE,uBAAuB,CAAC,CAAC;IACzD,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,CAAC,WAAW,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,CAAC,IAAI,CACP,WAAW,EACX,WAAW,CAAC,OAAO,CAAC,OAAO,IAAI,WAAW,EAAE,mBAAmB,EAAE,sBAAsB,CAAC,CACzF,CAAC;IACJ,IAAI,CAAC,IAAI,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC,CAAC;IACzB,OAAO,EAAE,OAAO,EAAE,OAAO,CAAC,UAAU,IAAI,OAAO,EAAE,IAAI,EAAE,CAAC;AAC1D,CAAC;AACD,SAAS,WAAW,CAAC,QAA4B;IAC/C,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;AAC9C,CAAC;AACD,SAAS,KAAK,CACZ,OAAyB,EACzB,KAA8B,EAC9B,cAAc,GAAG,KAAK;IAEtB,kEAAkE;IAClE,8DAA8D;IAC9D,IAAI,cAAc;QAAE,OAAO;IAC3B,MAAM,WAAW,GAAG,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,aAAa,IAAI,CAAC,CAAC,EACxE,YAAY,GAAG,MAAM,CAAC,KAAK,CAAC,aAAa,IAAI,KAAK,CAAC,iBAAiB,IAAI,CAAC,CAAC,CAAC;IAC7E,OAAO,CAAC,WAAW,CAAC;QAClB,WAAW;QACX,YAAY;QACZ,WAAW,EAAE,MAAM,CAAC,KAAK,CAAC,YAAY,IAAI,WAAW,GAAG,YAAY,CAAC;KACtE,CAAC,CAAC;AACL,CAAC;AACD,MAAe,kBAAmB,SAAQ,mBAAmB;IACjD,UAAU,GAAe,EAAE,CAAC;IACtC,mFAAmF;IACzE,WAAW,CAAyB;IAE9C,kEAAkE;IACxD,mBAAmB;QAC3B,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,gBAAgB,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;IACvD,CAAC;IACkB,WAAW,CAAC,OAAyB;QACtD,OAAO,IAAI,CAAC,SAAS,CAAC;YACpB,KAAK,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,KAAK;YAClC,WAAW,EAAE,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,WAAW;YAC9C,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,YAAY,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,YAAY;YAC9C,WAAW,EAAE,iCAAiC;SAC/C,CAAC,CAAC;IACL,CAAC;IACQ,KAAK,CAAC,WAAW,CAAC,OAAyB;QAClD,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;QAC7B,MAAM,SAAS,GAAG,IAAI,CAAC,aAAa,KAAK,WAAW,CAAC;QACrD,MAAM,GAAG,GACP,IAAI,CAAC,UAAU,CAAC,MAAM;YACtB,OAAO,CAAC,GAAG,CACT,IAAI,CAAC,UAAU,CAAC,SAAS,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAClF,CAAC;QACJ,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,UAAU,CAAC,MAAM,IAAI,IAAI,CAAC,UAAU,CAAC,OAAO;YAC3D,OAAO,KAAK,CAAC,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,KAAK,GAAG,MAAM,oBAAoB,CAAC;YACvC,MAAM,EAAE,GAAG;YACX,OAAO,EACL,IAAI,CAAC,UAAU,CAAC,OAAO;gBACvB,CAAC,SAAS,CAAC,CAAC,CAAC,8BAA8B,CAAC,CAAC,CAAC,2BAA2B,CAAC;YAC5E,KAAK,EAAE,IAAI,CAAC,aAAa;YACzB,MAAM,EAAE,OAAO,CAAC,MAAM;YACtB,KAAK,EAAE,IAAI,CAAC,UAAU,CAAC,KAAK;YAC5B,MAAM,EAAE,OAAO,CAAC,QAAQ,CAAC,MAAM;YAC/B,WAAW,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC;YACtD,WAAW,EAAE,IAAI,CAAC,UAAU,CAAC,WAAW;SACzC,CAAC,CAAC;QACH,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC;QACzB,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,cAAc,CAC9B,OAAO,EACP,SAAS;gBACP,CAAC,CAAC;oBACE,kBAAkB,EAAE,KAAK,CAAC,GAAG;oBAC7B,iBAAiB,EAAE,KAAK,CAAC,KAAK;oBAC9B,wCAAwC,EAAE,GAAG;iBAC9C;gBACH,CAAC,CAAC,EAAE,eAAe,EAAE,KAAK,CAAC,GAAG,GAAG,KAAK,EAAE,cAAc,EAAE,KAAK,CAAC,KAAK,EAAE,CACxE,CAAC;QACJ,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,WAAW,GAAG,SAAS,CAAC;YAC7B,MAAM,KAAK,CAAC,KAAK,EAAE,CAAC;QACtB,CAAC;IACH,CAAC;CACF;AACD,MAAM,OAAO,iBAAkB,SAAQ,kBAAkB;IAC7C,aAAa,GAAG,WAAoB,CAAC;IAC/C,YAAY,UAAoC,EAAE;QAChD,mFAAmF;QACnF,KAAK,CAAC;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,2BAA2B,CAAC,OAAO,CAAC,CAAC;YAC7E,EAAE,EAAE,QAAQ;YACZ,IAAI,EAAE,aAAa;SACpB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;IAC5B,CAAC;IACkB,MAAM,CAAC,MAAc,EAAE,OAAyB;QACjE,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAyB,CAAC;QACnE,IAAI,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,IAAI,KAAK,CAAC,KAAK,IAAI,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ;gBAChD,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAgC,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACrF,IAAI,KAAK,CAAC,QAAQ,KAAK,IAAI;gBAAE,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,CAAC;YACnE,IAAI,mBAAmB,IAAI,KAAK;gBAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;YACvF,IAAI,QAAQ,IAAI,KAAK;gBAAE,OAAO,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QACnE,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;CACF;AACD,kEAAkE;AAClE,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AAEtD,MAAM,OAAO,eAAgB,SAAQ,kBAAkB;IAC3C,aAAa,GAAG,QAAiB,CAAC;IAC5C,YAAY,UAA+B,EAAE;QAC3C,6FAA6F;QAC7F,KAAK,CAAC;YACJ,GAAG,OAAO;YACV,OAAO,EAAE,OAAO,CAAC,OAAO,IAAI,WAAW,CAAC,sBAAsB,CAAC,OAAO,CAAC,CAAC;YACxE,EAAE,EAAE,OAAO;YACX,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,IAAI,CAAC,UAAU,GAAG,OAAO,CAAC;IAC5B,CAAC;IACkB,MAAM,CAAC,MAAc,EAAE,OAAyB;QACjE,IAAI,MAAY,CAAC;QACjB,IAAI,CAAC;YACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAS,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,MAAM,GAAG,IAAI,CAAC;QAChB,CAAC;QACD,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,IAAI,MAAM,CAAC,EAAE,CAAC;YAC1F,IAAI,MAAM,CAAC,KAAK,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;gBAClD,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,KAAgC,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACtF,OAAO,QAAQ,IAAI,MAAM,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;QAC3E,CAAC;QACD,IAAI,MAAwB,CAAC;QAC7B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7C,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAK5B,CAAC;YACF,IAAI,KAAK,CAAC,IAAI,KAAK,aAAa,IAAI,KAAK,CAAC,IAAI,KAAK,OAAO;gBACxD,MAAM,IAAI,KAAK,CAAC,mBAAmB,CAAC,CAAC;YACvC,IAAI,KAAK,CAAC,KAAK;gBAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,mBAAmB,EAAE,CAAC,CAAC;YACzE,IAAI,KAAK,CAAC,IAAI,EAAE,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,CAAC,IAAI;gBACzD,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;YACjD,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;gBAAE,MAAM,GAAG,oBAAoB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;QAC9E,CAAC;QACD,IAAI,MAAM,KAAK,SAAS;YAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC;QAClE,OAAO,MAAM,CAAC;IAChB,CAAC;CACF"}

package/dist/packages/adapters/dist/credential-proxy.d.ts

@@ -0,0 +1,37 @@
+import type { BudgetSpec } from '@acp/core';
+import type { QuotaMeter } from '@acp/runtime';
+export interface ProxyUsageMetrics {
+    inputTokens?: number;
+    outputTokens?: number;
+    totalTokens?: number;
+    toolCalls?: number;
+}
+/** Fields the proxy reads from a runtime `QuotaMeter`. */
+export type ProxyQuotaMeter = Pick<QuotaMeter, 'record' | 'controller'>;
+export interface CredentialProxyOptions {
+    apiKey: string;
+    baseUrl: string;
+    style: 'openai' | 'anthropic';
+    signal: AbortSignal;
+    fetch?: typeof fetch;
+    /** When set, each proxied response is charged with `meter.record`. */
+    meter?: ProxyQuotaMeter;
+    /** Called once per proxied response that carries provider usage. */
+    reportUsage?: (metrics: ProxyUsageMetrics) => void;
+    /** Token caps checked before another upstream request is forwarded. */
+    budget?: BudgetSpec;
+    /**
+     * Maximum upstream requests. Defaults to `budget.maxToolInvocations` when that
+     * value is positive, otherwise 16.
+     */
+    maxRequests?: number;
+}
+export interface CredentialProxyHandle {
+    url: string;
+    token: string;
+    /** Provider responses whose usage was recorded for this proxy. */
+    readonly responsesMetered: number;
+    close: () => Promise<void>;
+}
+/** Task-scoped loopback broker. Only the host fetch sees the real provider key. */
+export declare function startCredentialProxy(options: CredentialProxyOptions): Promise<CredentialProxyHandle>;