visionclaw 0.1.205-beta.4 → 0.1.205-beta.6

package/dist/agent/applied-credential-signature.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Applied-credential signature manifest.
+ *
+ * Persisted alongside materialised tunnel credentials at
+ * `<profileTunnelDir>/.applied-signature.json`. Records the signature
+ * the server handed us with the last bundle we successfully applied.
+ *
+ * The manifest is the *only* piece of state the agent has to remember
+ * across process restarts about credential bundles — everything else
+ * (creds JSON, config.yml) is reconstructable from a fresh server
+ * delivery. The signature is opaque to us; we just echo it back on the
+ * next heartbeat so the server can decide whether to re-ship the body.
+ *
+ * Self-healing properties (intentional):
+ *   - Manifest missing on disk → no signature sent → server sends
+ *     bundle → we re-apply and rewrite the manifest. Recovers any
+ *     install where the manifest was deleted but credentials weren't,
+ *     or vice versa.
+ *   - Manifest present but probe says no live tunnel files → we treat
+ *     the manifest as unusable (return null from `loadIfValid`), the
+ *     next heartbeat goes signature-free, the server re-ships the
+ *     bundle, and we land back in a coherent state.
+ *   - Process restart with everything intact → manifest signature is
+ *     sent on the startup heartbeat, server replies with no
+ *     `credentialBundle`, no disk writes, no tunnel restart.
+ */
+/**
+ * Read the persisted signature, if any. Returns `null` when the file
+ * does not exist, fails to parse, has the wrong shape, or refers to a
+ * tunnel state that no longer matches what's on disk.
+ *
+ * The on-disk-coherence check (`probeLocalTunnelCredential()`) is what
+ * gives us self-healing: a stranded manifest from a wiped tunnel dir
+ * gets ignored, forcing a fresh bundle on the next heartbeat.
+ */
+export declare function loadAppliedSignatureIfValid(): string | null;
+/**
+ * Persist the signature for the most recently applied bundle. Best-
+ * effort: a write failure is logged but does not throw, since the
+ * worst case is just an extra full-bundle delivery on the next
+ * heartbeat.
+ *
+ * The file is written with 0o600 to match the credentials sitting next
+ * to it; the directory itself is already 0o700 from
+ * `runtime-credentials.ts`.
+ */
+export declare function writeAppliedSignature(signature: string): void;
+/**
+ * Forget the persisted signature. Used by tests; production code never
+ * needs to delete it explicitly because writes overwrite in place.
+ */
+export declare function __clearAppliedSignatureForTests(): void;
+//# sourceMappingURL=applied-credential-signature.d.ts.map

package/dist/agent/applied-credential-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applied-credential-signature.d.ts","sourceRoot":"","sources":["../../src/agent/applied-credential-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAwBH;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,GAAG,IAAI,CA2C3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAgC7D;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAMtD"}

package/dist/agent/applied-credential-signature.js

@@ -0,0 +1,137 @@
+/**
+ * Applied-credential signature manifest.
+ *
+ * Persisted alongside materialised tunnel credentials at
+ * `<profileTunnelDir>/.applied-signature.json`. Records the signature
+ * the server handed us with the last bundle we successfully applied.
+ *
+ * The manifest is the *only* piece of state the agent has to remember
+ * across process restarts about credential bundles — everything else
+ * (creds JSON, config.yml) is reconstructable from a fresh server
+ * delivery. The signature is opaque to us; we just echo it back on the
+ * next heartbeat so the server can decide whether to re-ship the body.
+ *
+ * Self-healing properties (intentional):
+ *   - Manifest missing on disk → no signature sent → server sends
+ *     bundle → we re-apply and rewrite the manifest. Recovers any
+ *     install where the manifest was deleted but credentials weren't,
+ *     or vice versa.
+ *   - Manifest present but probe says no live tunnel files → we treat
+ *     the manifest as unusable (return null from `loadIfValid`), the
+ *     next heartbeat goes signature-free, the server re-ships the
+ *     bundle, and we land back in a coherent state.
+ *   - Process restart with everything intact → manifest signature is
+ *     sent on the startup heartbeat, server replies with no
+ *     `credentialBundle`, no disk writes, no tunnel restart.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { getProfileTunnelDir } from "../config/index.js";
+import { probeLocalTunnelCredential } from "./runtime-credentials.js";
+import { logger } from "../logger.js";
+const MANIFEST_FILENAME = ".applied-signature.json";
+const MANIFEST_VERSION = 1;
+function getManifestPath() {
+    return path.join(getProfileTunnelDir(), MANIFEST_FILENAME);
+}
+/**
+ * Read the persisted signature, if any. Returns `null` when the file
+ * does not exist, fails to parse, has the wrong shape, or refers to a
+ * tunnel state that no longer matches what's on disk.
+ *
+ * The on-disk-coherence check (`probeLocalTunnelCredential()`) is what
+ * gives us self-healing: a stranded manifest from a wiped tunnel dir
+ * gets ignored, forcing a fresh bundle on the next heartbeat.
+ */
+export function loadAppliedSignatureIfValid() {
+    const manifestPath = getManifestPath();
+    if (!fs.existsSync(manifestPath))
+        return null;
+    let raw;
+    try {
+        raw = fs.readFileSync(manifestPath, "utf-8");
+    }
+    catch (err) {
+        logger.warn(`Applied-signature manifest unreadable: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        logger.warn(`Applied-signature manifest malformed; ignoring`);
+        return null;
+    }
+    if (!parsed ||
+        typeof parsed !== "object" ||
+        !("signature" in parsed) ||
+        typeof parsed.signature !== "string" ||
+        parsed.signature.trim() === "") {
+        return null;
+    }
+    const signature = parsed.signature.trim();
+    // Coherence: a manifest is only meaningful when the credentials it
+    // refers to actually still exist on disk. If the tunnel files were
+    // wiped (e.g. operator deleted `~/.visionclaw/profiles/default/tunnel`)
+    // the stored signature lies about our state, so pretend we have none
+    // and let the server reissue the bundle.
+    if (probeLocalTunnelCredential() === null) {
+        return null;
+    }
+    return signature;
+}
+/**
+ * Persist the signature for the most recently applied bundle. Best-
+ * effort: a write failure is logged but does not throw, since the
+ * worst case is just an extra full-bundle delivery on the next
+ * heartbeat.
+ *
+ * The file is written with 0o600 to match the credentials sitting next
+ * to it; the directory itself is already 0o700 from
+ * `runtime-credentials.ts`.
+ */
+export function writeAppliedSignature(signature) {
+    if (typeof signature !== "string" || signature.trim() === "")
+        return;
+    const manifestPath = getManifestPath();
+    const dir = path.dirname(manifestPath);
+    try {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    catch {
+        // best-effort; the credential apply path will have created it
+    }
+    const payload = {
+        version: MANIFEST_VERSION,
+        signature: signature.trim(),
+        appliedAt: new Date().toISOString(),
+    };
+    try {
+        fs.writeFileSync(manifestPath, JSON.stringify(payload, null, 2), "utf-8");
+        if (process.platform !== "win32") {
+            try {
+                fs.chmodSync(manifestPath, 0o600);
+            }
+            catch {
+                // best-effort; directory perms still protect
+            }
+        }
+    }
+    catch (err) {
+        logger.warn(`Failed to persist applied-signature manifest: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Forget the persisted signature. Used by tests; production code never
+ * needs to delete it explicitly because writes overwrite in place.
+ */
+export function __clearAppliedSignatureForTests() {
+    try {
+        fs.rmSync(getManifestPath(), { force: true });
+    }
+    catch {
+        // ignore
+    }
+}
+//# sourceMappingURL=applied-credential-signature.js.map

package/dist/agent/applied-credential-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applied-credential-signature.js","sourceRoot":"","sources":["../../src/agent/applied-credential-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAW3B,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC;QACxB,OAAQ,MAAiC,CAAC,SAAS,KAAK,QAAQ;QAC/D,MAAgC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAI,MAAgC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAErE,mEAAmE;IACnE,mEAAmE;IACnE,wEAAwE;IACxE,qEAAqE;IACrE,yCAAyC;IACzC,IAAI,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO;IAErE,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;IAED,MAAM,OAAO,GAAsB;QACjC,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B;IAC7C,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC"}

package/dist/agent/engines/client-factory.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Factory for creating the correct Anthropic client (direct API vs Bedrock)
+ * and resolving provider-specific model IDs.
+ */
+import Anthropic from "@anthropic-ai/sdk";
+import OpenAI, { AzureOpenAI } from "openai";
+import { type Model, type Provider, type VisionClawConfig } from "../../config/types.js";
+export declare const OPENAI_MODEL = "gpt-5.5";
+export declare const AZURE_OPENAI_API_VERSION = "preview";
+export declare function isOpenAIProvider(provider: Provider): provider is "openai" | "azure-openai";
+/**
+ * True for any GPT-family model (e.g. "gpt-5.5", future "gpt-6", "gpt-5.5-mini").
+ * Routing to the OpenAI Agents SDK only depends on the family, not the exact
+ * version, so we match by prefix instead of pinning to a single literal.
+ */
+export declare function isGptModel(model: Model | undefined): boolean;
+export declare function getProviderLabel(provider: Provider): string;
+export declare function getRuntimeLabel(config: VisionClawConfig): string;
+/**
+ * Create an Anthropic-compatible client based on the provider in the config.
+ *
+ * - `"anthropic"`: uses the direct API with `anthropicApiKey`.
+ * - `"bedrock"`: uses `AnthropicBedrock` with explicit AWS credentials when
+ *   provided, otherwise falls back to the default AWS credential provider chain.
+ */
+export declare function createClient(config: VisionClawConfig): Anthropic;
+export declare function hasProviderCredentials(provider: Provider, config: VisionClawConfig): boolean;
+export declare function createOpenAIClient(config: VisionClawConfig): OpenAI | AzureOpenAI;
+export declare function configureOpenAIProvider(config: VisionClawConfig): void;
+/**
+ * Return the correct model identifier for direct SDK calls
+ * (fast-responder, tool-alarm-evaluator, etc.).
+ *
+ * Agent SDK `query()` calls do NOT need this - the SDK maps models
+ * internally when `CLAUDE_CODE_USE_BEDROCK=1` or `CLAUDE_CODE_USE_VERTEX=1` is set.
+ */
+export declare function getModelId(config: VisionClawConfig): string;
+/**
+ * Return the Sonnet model identifier for lightweight side-calls
+ * (fast-responder, etc.) that don't need the full Opus model.
+ * For non-Claude providers, falls back to the main model.
+ */
+export declare function getFastResponderModelId(config: VisionClawConfig): string;
+/**
+ * Build the `env` record for the Agent SDK `query()` options.
+ *
+ * - Anthropic: passes `ANTHROPIC_API_KEY`.
+ * - Bedrock: passes `CLAUDE_CODE_USE_BEDROCK`, `AWS_REGION`,
+ *   `AWS_BEARER_TOKEN_BEDROCK` (for the Claude Code CLI), and IAM
+ *   credentials when available.
+ * - Vertex: passes `CLAUDE_CODE_USE_VERTEX`, `CLOUD_ML_REGION`,
+ *   and `GOOGLE_APPLICATION_CREDENTIALS` for service account auth.
+ */
+export declare function buildAgentEnv(config: VisionClawConfig): Record<string, string | undefined>;
+/**
+ * Start the API logging proxy if running in dev mode with the Anthropic
+ * or 9Router provider.  No-ops (and returns immediately) in production,
+ * for Bedrock (which bypasses ANTHROPIC_BASE_URL), or for OpenAI providers.
+ *
+ * Call once at startup, before the first `buildAgentEnv()` call.
+ */
+export declare function maybeStartApiProxy(config: VisionClawConfig): Promise<void>;
+//# sourceMappingURL=client-factory.d.ts.map

package/dist/agent/engines/client-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.d.ts","sourceRoot":"","sources":["../../../src/agent/engines/client-factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAG1C,OAAO,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAqB/B,eAAO,MAAM,YAAY,YAAY,CAAC;AACtC,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAElD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,GACjB,QAAQ,IAAI,QAAQ,GAAG,cAAc,CAEvC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAe3D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAWhE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CA4ChE;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAkB5F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,WAAW,CA2BjF;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAkBtE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAuB3D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAOxE;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAsI1F;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhF"}

package/dist/agent/engines/client-factory.js

@@ -0,0 +1,382 @@
+/**
+ * Factory for creating the correct Anthropic client (direct API vs Bedrock)
+ * and resolving provider-specific model IDs.
+ */
+import Anthropic from "@anthropic-ai/sdk";
+import { AnthropicBedrock } from "@anthropic-ai/bedrock-sdk";
+import { AnthropicVertex } from "@anthropic-ai/vertex-sdk";
+import OpenAI, { AzureOpenAI } from "openai";
+import { setDefaultOpenAIClient, setOpenAIAPI, setTracingExportApiKey } from "@openai/agents";
+import { assertSupportedModelProvider, } from "../../config/types.js";
+import { startApiProxy } from "../api-proxy.js";
+import { getConfigDir } from "../../config/index.js";
+import path from "node:path";
+import { logger } from "../../logger.js";
+import { resolveAnthropicApiKey } from "../../anthropic-credentials.js";
+import { resolveOpenAIApiKey } from "../../openai-credentials.js";
+/** Detect dev mode: tsx runs .ts entry, production runs compiled .js. */
+const isDevMode = process.argv[1]?.endsWith(".ts") ?? false;
+/** Singleton proxy handle - lazily started on first Anthropic dev-mode query. */
+let proxyHandle = null;
+const ANTHROPIC_SONNET_MODEL = "claude-sonnet-4-6";
+const ANTHROPIC_OPUS_MODEL = "claude-opus-4-6";
+const BEDROCK_SONNET_MODEL = "us.anthropic.claude-sonnet-4-6";
+const BEDROCK_OPUS_MODEL = "us.anthropic.claude-opus-4-6-v1";
+const NINEROUTER_MODEL_PREFIX = "cc";
+const NINEROUTER_SONNET_MODEL = `${NINEROUTER_MODEL_PREFIX}/claude-sonnet-4-6`;
+const NINEROUTER_OPUS_MODEL = `${NINEROUTER_MODEL_PREFIX}/claude-opus-4-6`;
+export const OPENAI_MODEL = "gpt-5.5";
+export const AZURE_OPENAI_API_VERSION = "preview";
+export function isOpenAIProvider(provider) {
+    return provider === "openai" || provider === "azure-openai";
+}
+/**
+ * True for any GPT-family model (e.g. "gpt-5.5", future "gpt-6", "gpt-5.5-mini").
+ * Routing to the OpenAI Agents SDK only depends on the family, not the exact
+ * version, so we match by prefix instead of pinning to a single literal.
+ */
+export function isGptModel(model) {
+    return typeof model === "string" && model.startsWith("gpt-");
+}
+export function getProviderLabel(provider) {
+    switch (provider) {
+        case "bedrock":
+            return "Bedrock";
+        case "vertex":
+            return "Vertex AI";
+        case "9router":
+            return "9Router";
+        case "openai":
+            return "OpenAI";
+        case "azure-openai":
+            return "Azure OpenAI";
+        default:
+            return "Anthropic";
+    }
+}
+export function getRuntimeLabel(config) {
+    if (isGptModel(config.model)) {
+        return config.provider === "azure-openai"
+            ? "Azure OpenAI via OpenAI Agents SDK"
+            : "OpenAI Agents SDK";
+    }
+    if (config.provider === "bedrock")
+        return "Amazon Bedrock via Claude Agent SDK";
+    if (config.provider === "vertex")
+        return "Google Vertex AI via Claude Agent SDK";
+    if (config.provider === "9router")
+        return "9Router via Claude Agent SDK";
+    return "Claude Agent SDK";
+}
+/**
+ * Create an Anthropic-compatible client based on the provider in the config.
+ *
+ * - `"anthropic"`: uses the direct API with `anthropicApiKey`.
+ * - `"bedrock"`: uses `AnthropicBedrock` with explicit AWS credentials when
+ *   provided, otherwise falls back to the default AWS credential provider chain.
+ */
+export function createClient(config) {
+    assertSupportedModelProvider(config.model, config.provider);
+    if (isOpenAIProvider(config.provider)) {
+        throw new Error("createClient() only supports Anthropic, Bedrock, Vertex, and 9Router providers");
+    }
+    if (config.provider === "vertex") {
+        // Set credentials env var for ADC before constructing the client
+        if (config.googleApplicationCredentials) {
+            process.env.GOOGLE_APPLICATION_CREDENTIALS = config.googleApplicationCredentials;
+        }
+        const projectId = config.vertexProjectId ?? process.env.GOOGLE_CLOUD_PROJECT;
+        const region = config.vertexRegion;
+        return new AnthropicVertex({
+            projectId,
+            region,
+        });
+    }
+    if (config.provider === "bedrock") {
+        const region = config.awsRegion ?? "us-west-2";
+        if (config.awsAccessKeyId && config.awsSecretAccessKey) {
+            return new AnthropicBedrock({
+                awsRegion: region,
+                awsAccessKey: config.awsAccessKeyId,
+                awsSecretKey: config.awsSecretAccessKey,
+                awsSessionToken: config.awsSessionToken ?? null,
+            });
+        }
+        return new AnthropicBedrock({ awsRegion: region });
+    }
+    if (config.provider === "9router") {
+        return new Anthropic({
+            apiKey: config.ninerouterApiKey ?? "unused",
+            baseURL: config.ninerouterBaseUrl,
+        });
+    }
+    return new Anthropic({
+        apiKey: resolveAnthropicApiKey(config),
+        ...(config.anthropicBaseUrl ? { baseURL: config.anthropicBaseUrl } : {}),
+    });
+}
+export function hasProviderCredentials(provider, config) {
+    switch (provider) {
+        case "bedrock":
+            // purposely ignore awsBearerToken
+            return !!(config.awsAccessKeyId && config.awsSecretAccessKey);
+        case "anthropic":
+            return !!resolveAnthropicApiKey(config);
+        case "9router":
+            return !!config.ninerouterApiKey;
+        case "vertex":
+            return !!(config.googleApplicationCredentials ?? process.env.GOOGLE_APPLICATION_CREDENTIALS);
+        case "openai":
+            return !!resolveOpenAIApiKey(config);
+        case "azure-openai":
+            return !!(config.azureOpenAIEndpoint && config.azureOpenAIApiKey && config.azureOpenAIDeployment);
+        default:
+            return false;
+    }
+}
+export function createOpenAIClient(config) {
+    assertSupportedModelProvider(config.model, config.provider);
+    if (!isOpenAIProvider(config.provider)) {
+        throw new Error("createOpenAIClient() requires the OpenAI or Azure OpenAI provider");
+    }
+    if (config.provider === "azure-openai") {
+        if (!config.azureOpenAIEndpoint) {
+            throw new Error("Azure OpenAI endpoint is not configured");
+        }
+        if (!config.azureOpenAIApiKey) {
+            throw new Error("Azure OpenAI API key is not configured");
+        }
+        if (!config.azureOpenAIDeployment) {
+            throw new Error("Azure OpenAI deployment is not configured");
+        }
+        return new AzureOpenAI({
+            endpoint: config.azureOpenAIEndpoint,
+            apiKey: config.azureOpenAIApiKey,
+            apiVersion: config.azureOpenAIApiVersion ?? AZURE_OPENAI_API_VERSION,
+            deployment: config.azureOpenAIDeployment,
+        });
+    }
+    return new OpenAI({ apiKey: resolveOpenAIApiKey(config) });
+}
+export function configureOpenAIProvider(config) {
+    assertSupportedModelProvider(config.model, config.provider);
+    if (!isGptModel(config.model)) {
+        return;
+    }
+    if (config.provider === "openai" && !resolveOpenAIApiKey(config)) {
+        throw new Error("OpenAI API key is not configured");
+    }
+    setDefaultOpenAIClient(createOpenAIClient(config));
+    if (config.provider === "openai") {
+        setTracingExportApiKey(resolveOpenAIApiKey(config) ?? "");
+    }
+    setOpenAIAPI("responses");
+}
+/**
+ * Return the correct model identifier for direct SDK calls
+ * (fast-responder, tool-alarm-evaluator, etc.).
+ *
+ * Agent SDK `query()` calls do NOT need this - the SDK maps models
+ * internally when `CLAUDE_CODE_USE_BEDROCK=1` or `CLAUDE_CODE_USE_VERTEX=1` is set.
+ */
+export function getModelId(config) {
+    assertSupportedModelProvider(config.model, config.provider);
+    if (config.model === "claude-sonnet-4-6") {
+        if (config.provider === "bedrock")
+            return BEDROCK_SONNET_MODEL;
+        if (config.provider === "9router")
+            return NINEROUTER_SONNET_MODEL;
+        return ANTHROPIC_SONNET_MODEL;
+    }
+    if (config.model === "claude-opus-4-6") {
+        if (config.provider === "bedrock")
+            return BEDROCK_OPUS_MODEL;
+        if (config.provider === "9router")
+            return NINEROUTER_OPUS_MODEL;
+        return ANTHROPIC_OPUS_MODEL;
+    }
+    if (config.provider === "azure-openai") {
+        if (!config.azureOpenAIDeployment) {
+            throw new Error("Azure OpenAI deployment is not configured");
+        }
+        return config.azureOpenAIDeployment;
+    }
+    return OPENAI_MODEL;
+}
+/**
+ * Return the Sonnet model identifier for lightweight side-calls
+ * (fast-responder, etc.) that don't need the full Opus model.
+ * For non-Claude providers, falls back to the main model.
+ */
+export function getFastResponderModelId(config) {
+    if (config.model === "claude-opus-4-6" || config.model === "claude-sonnet-4-6") {
+        if (config.provider === "bedrock")
+            return BEDROCK_SONNET_MODEL;
+        if (config.provider === "9router")
+            return NINEROUTER_SONNET_MODEL;
+        return ANTHROPIC_SONNET_MODEL;
+    }
+    return getModelId(config);
+}
+/**
+ * Build the `env` record for the Agent SDK `query()` options.
+ *
+ * - Anthropic: passes `ANTHROPIC_API_KEY`.
+ * - Bedrock: passes `CLAUDE_CODE_USE_BEDROCK`, `AWS_REGION`,
+ *   `AWS_BEARER_TOKEN_BEDROCK` (for the Claude Code CLI), and IAM
+ *   credentials when available.
+ * - Vertex: passes `CLAUDE_CODE_USE_VERTEX`, `CLOUD_ML_REGION`,
+ *   and `GOOGLE_APPLICATION_CREDENTIALS` for service account auth.
+ */
+export function buildAgentEnv(config) {
+    assertSupportedModelProvider(config.model, config.provider);
+    const base = { ...process.env };
+    // Trigger SDK auto-compaction at 80% context usage (default is ~95%).
+    // This fires between turns within a single query() call, preventing
+    // unbounded context growth during long-running agent sessions.
+    base.CLAUDE_AUTOCOMPACT_PCT_OVERRIDE = "80";
+    // TODO: Consider enabling session-memory compaction for higher-quality
+    // summaries: base.ENABLE_CLAUDE_CODE_SM_COMPACT = "1";
+    // --- CLI auto-memory ---
+    //
+    // The Claude Code CLI binary owns auto-memory: it picks up a project
+    // memory directory (reported as `memory_paths` on `system/init`), writes
+    // `CLAUDE.md` / `MEMORY.md` there after long-running sessions, and
+    // surfaces relevant files back into future turns via the recall
+    // supervisor (`system/memory_recall` events). We keep the default-ON
+    // behavior and observe it in stream-handler.
+    //
+    // The CLI reads its on/off switch via the env var `CLAUDE_CODE_DISABLE_AUTO_MEMORY`
+    // and the settings field `autoMemoryEnabled`. `buildAgentEnv()` spreads
+    // `process.env` at the top of this function, so whatever the operator has
+    // in their shell (or MDM-managed config) wins. If we ever add our own
+    // dial to this, put it here.
+    //
+    // Defensive: if the outer process has accidentally set
+    // `CLAUDE_CODE_DISABLE_AUTO_MEMORY` to a truthy value, log a warning so
+    // operators notice. We do not override it — killing a legitimately
+    // opted-out environment would be more surprising than losing the
+    // observability we just added.
+    const disableAutoMemory = base.CLAUDE_CODE_DISABLE_AUTO_MEMORY;
+    if (disableAutoMemory && /^(1|true|yes)$/i.test(disableAutoMemory)) {
+        logger.warn(`[auto-memory] CLAUDE_CODE_DISABLE_AUTO_MEMORY=${disableAutoMemory} in process.env; CLI auto-memory will be disabled. Unset it to enable memory_recall observability.`);
+    }
+    if (config.provider === "vertex") {
+        base.CLAUDE_CODE_USE_VERTEX = "1";
+        base.CLOUD_ML_REGION = config.vertexRegion;
+        // Vertex doesn't support all beta features yet; disable to avoid unsupported-header errors
+        base.CLAUDE_CODE_DISABLE_EXPERIMENTAL_BETAS = "1";
+        if (config.googleApplicationCredentials) {
+            base.GOOGLE_APPLICATION_CREDENTIALS = config.googleApplicationCredentials;
+        }
+        if (config.vertexProjectId) {
+            base.GOOGLE_CLOUD_PROJECT = config.vertexProjectId;
+        }
+        delete base.ANTHROPIC_API_KEY;
+        delete base.CLAUDE_CODE_USE_BEDROCK;
+        delete base.AWS_REGION;
+        delete base.AWS_BEARER_TOKEN_BEDROCK;
+        delete base.AWS_ACCESS_KEY_ID;
+        delete base.AWS_SECRET_ACCESS_KEY;
+        delete base.AWS_SESSION_TOKEN;
+        return base;
+    }
+    if (config.provider === "bedrock") {
+        base.CLAUDE_CODE_USE_BEDROCK = "1";
+        base.AWS_REGION = config.awsRegion ?? "us-west-2";
+        if (config.awsBearerToken)
+            base.AWS_BEARER_TOKEN_BEDROCK = config.awsBearerToken;
+        if (config.awsAccessKeyId)
+            base.AWS_ACCESS_KEY_ID = config.awsAccessKeyId;
+        if (config.awsSecretAccessKey)
+            base.AWS_SECRET_ACCESS_KEY = config.awsSecretAccessKey;
+        if (config.awsSessionToken)
+            base.AWS_SESSION_TOKEN = config.awsSessionToken;
+        delete base.ANTHROPIC_API_KEY;
+        return base;
+    }
+    if (config.provider === "azure-openai") {
+        base.AZURE_OPENAI_ENDPOINT = config.azureOpenAIEndpoint;
+        base.AZURE_OPENAI_API_KEY = config.azureOpenAIApiKey;
+        base.AZURE_OPENAI_API_VERSION = config.azureOpenAIApiVersion ?? AZURE_OPENAI_API_VERSION;
+        base.AZURE_OPENAI_DEPLOYMENT = config.azureOpenAIDeployment;
+        delete base.OPENAI_API_KEY;
+        delete base.ANTHROPIC_API_KEY;
+        delete base.CLAUDE_CODE_USE_BEDROCK;
+        delete base.AWS_REGION;
+        delete base.AWS_BEARER_TOKEN_BEDROCK;
+        delete base.AWS_ACCESS_KEY_ID;
+        delete base.AWS_SECRET_ACCESS_KEY;
+        delete base.AWS_SESSION_TOKEN;
+        return base;
+    }
+    if (config.provider === "openai") {
+        base.OPENAI_API_KEY = resolveOpenAIApiKey(config);
+        delete base.AZURE_OPENAI_ENDPOINT;
+        delete base.AZURE_OPENAI_API_KEY;
+        delete base.AZURE_OPENAI_API_VERSION;
+        delete base.AZURE_OPENAI_DEPLOYMENT;
+        delete base.ANTHROPIC_API_KEY;
+        delete base.CLAUDE_CODE_USE_BEDROCK;
+        delete base.AWS_REGION;
+        delete base.AWS_BEARER_TOKEN_BEDROCK;
+        delete base.AWS_ACCESS_KEY_ID;
+        delete base.AWS_SECRET_ACCESS_KEY;
+        delete base.AWS_SESSION_TOKEN;
+        return base;
+    }
+    // Anthropic direct API or 9Router (Anthropic-compatible proxy).
+    if (config.provider === "9router") {
+        base.ANTHROPIC_API_KEY = config.ninerouterApiKey ?? "unused";
+        base.ANTHROPIC_BASE_URL = config.ninerouterBaseUrl;
+    }
+    else {
+        base.ANTHROPIC_API_KEY = resolveAnthropicApiKey(config);
+        if (config.anthropicBaseUrl) {
+            base.ANTHROPIC_BASE_URL = config.anthropicBaseUrl;
+        }
+    }
+    // Dev-mode only: route API calls through the logging proxy
+    if (isDevMode && proxyHandle) {
+        base.ANTHROPIC_BASE_URL = `http://127.0.0.1:${proxyHandle.port}`;
+    }
+    delete base.CLAUDE_CODE_USE_BEDROCK;
+    delete base.CLAUDE_CODE_USE_VERTEX;
+    delete base.AWS_REGION;
+    delete base.AWS_BEARER_TOKEN_BEDROCK;
+    delete base.AWS_ACCESS_KEY_ID;
+    delete base.AWS_SECRET_ACCESS_KEY;
+    delete base.AWS_SESSION_TOKEN;
+    delete base.OPENAI_API_KEY;
+    delete base.AZURE_OPENAI_ENDPOINT;
+    delete base.AZURE_OPENAI_API_KEY;
+    delete base.AZURE_OPENAI_API_VERSION;
+    delete base.AZURE_OPENAI_DEPLOYMENT;
+    return base;
+}
+/**
+ * Start the API logging proxy if running in dev mode with the Anthropic
+ * or 9Router provider.  No-ops (and returns immediately) in production,
+ * for Bedrock (which bypasses ANTHROPIC_BASE_URL), or for OpenAI providers.
+ *
+ * Call once at startup, before the first `buildAgentEnv()` call.
+ */
+export async function maybeStartApiProxy(config) {
+    if (!isDevMode)
+        return;
+    if (config.provider !== "anthropic" && config.provider !== "9router")
+        return;
+    if (proxyHandle)
+        return;
+    try {
+        const logDir = path.join(getConfigDir(), "logs");
+        const targetBaseUrl = config.provider === "9router"
+            ? config.ninerouterBaseUrl
+            : (config.anthropicBaseUrl ?? "https://api.anthropic.com");
+        proxyHandle = await startApiProxy({ logDir, targetBaseUrl });
+    }
+    catch (err) {
+        logger.warn(`[api-proxy] Failed to start: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+//# sourceMappingURL=client-factory.js.map