visionclaw 0.1.206-beta.14 → 0.1.206-beta.16

package/dist/agent/applied-credential-signature.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Applied-credential signature manifest.
+ *
+ * Persisted alongside materialised tunnel credentials at
+ * `<profileTunnelDir>/.applied-signature.json`. Records the signature
+ * the server handed us with the last bundle we successfully applied.
+ *
+ * The manifest is the *only* piece of state the agent has to remember
+ * across process restarts about credential bundles — everything else
+ * (creds JSON, config.yml) is reconstructable from a fresh server
+ * delivery. The signature is opaque to us; we just echo it back on the
+ * next heartbeat so the server can decide whether to re-ship the body.
+ *
+ * Self-healing properties (intentional):
+ *   - Manifest missing on disk → no signature sent → server sends
+ *     bundle → we re-apply and rewrite the manifest. Recovers any
+ *     install where the manifest was deleted but credentials weren't,
+ *     or vice versa.
+ *   - Manifest present but probe says no live tunnel files → we treat
+ *     the manifest as unusable (return null from `loadIfValid`), the
+ *     next heartbeat goes signature-free, the server re-ships the
+ *     bundle, and we land back in a coherent state.
+ *   - Process restart with everything intact → manifest signature is
+ *     sent on the startup heartbeat, server replies with no
+ *     `credentialBundle`, no disk writes, no tunnel restart.
+ */
+/**
+ * Read the persisted signature, if any. Returns `null` when the file
+ * does not exist, fails to parse, has the wrong shape, or refers to a
+ * tunnel state that no longer matches what's on disk.
+ *
+ * The on-disk-coherence check (`probeLocalTunnelCredential()`) is what
+ * gives us self-healing: a stranded manifest from a wiped tunnel dir
+ * gets ignored, forcing a fresh bundle on the next heartbeat.
+ */
+export declare function loadAppliedSignatureIfValid(): string | null;
+/**
+ * Persist the signature for the most recently applied bundle. Best-
+ * effort: a write failure is logged but does not throw, since the
+ * worst case is just an extra full-bundle delivery on the next
+ * heartbeat.
+ *
+ * The file is written with 0o600 to match the credentials sitting next
+ * to it; the directory itself is already 0o700 from
+ * `runtime-credentials.ts`.
+ */
+export declare function writeAppliedSignature(signature: string): void;
+/**
+ * Forget the persisted signature. Used by tests; production code never
+ * needs to delete it explicitly because writes overwrite in place.
+ */
+export declare function __clearAppliedSignatureForTests(): void;
+//# sourceMappingURL=applied-credential-signature.d.ts.map

package/dist/agent/applied-credential-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applied-credential-signature.d.ts","sourceRoot":"","sources":["../../src/agent/applied-credential-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAwBH;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,GAAG,IAAI,CA2C3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAgC7D;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAMtD"}

package/dist/agent/applied-credential-signature.js

@@ -0,0 +1,137 @@
+/**
+ * Applied-credential signature manifest.
+ *
+ * Persisted alongside materialised tunnel credentials at
+ * `<profileTunnelDir>/.applied-signature.json`. Records the signature
+ * the server handed us with the last bundle we successfully applied.
+ *
+ * The manifest is the *only* piece of state the agent has to remember
+ * across process restarts about credential bundles — everything else
+ * (creds JSON, config.yml) is reconstructable from a fresh server
+ * delivery. The signature is opaque to us; we just echo it back on the
+ * next heartbeat so the server can decide whether to re-ship the body.
+ *
+ * Self-healing properties (intentional):
+ *   - Manifest missing on disk → no signature sent → server sends
+ *     bundle → we re-apply and rewrite the manifest. Recovers any
+ *     install where the manifest was deleted but credentials weren't,
+ *     or vice versa.
+ *   - Manifest present but probe says no live tunnel files → we treat
+ *     the manifest as unusable (return null from `loadIfValid`), the
+ *     next heartbeat goes signature-free, the server re-ships the
+ *     bundle, and we land back in a coherent state.
+ *   - Process restart with everything intact → manifest signature is
+ *     sent on the startup heartbeat, server replies with no
+ *     `credentialBundle`, no disk writes, no tunnel restart.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { getProfileTunnelDir } from "../config/index.js";
+import { probeLocalTunnelCredential } from "./runtime-credentials.js";
+import { logger } from "../logger.js";
+const MANIFEST_FILENAME = ".applied-signature.json";
+const MANIFEST_VERSION = 1;
+function getManifestPath() {
+    return path.join(getProfileTunnelDir(), MANIFEST_FILENAME);
+}
+/**
+ * Read the persisted signature, if any. Returns `null` when the file
+ * does not exist, fails to parse, has the wrong shape, or refers to a
+ * tunnel state that no longer matches what's on disk.
+ *
+ * The on-disk-coherence check (`probeLocalTunnelCredential()`) is what
+ * gives us self-healing: a stranded manifest from a wiped tunnel dir
+ * gets ignored, forcing a fresh bundle on the next heartbeat.
+ */
+export function loadAppliedSignatureIfValid() {
+    const manifestPath = getManifestPath();
+    if (!fs.existsSync(manifestPath))
+        return null;
+    let raw;
+    try {
+        raw = fs.readFileSync(manifestPath, "utf-8");
+    }
+    catch (err) {
+        logger.warn(`Applied-signature manifest unreadable: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        logger.warn(`Applied-signature manifest malformed; ignoring`);
+        return null;
+    }
+    if (!parsed ||
+        typeof parsed !== "object" ||
+        !("signature" in parsed) ||
+        typeof parsed.signature !== "string" ||
+        parsed.signature.trim() === "") {
+        return null;
+    }
+    const signature = parsed.signature.trim();
+    // Coherence: a manifest is only meaningful when the credentials it
+    // refers to actually still exist on disk. If the tunnel files were
+    // wiped (e.g. operator deleted `~/.visionclaw/profiles/default/tunnel`)
+    // the stored signature lies about our state, so pretend we have none
+    // and let the server reissue the bundle.
+    if (probeLocalTunnelCredential() === null) {
+        return null;
+    }
+    return signature;
+}
+/**
+ * Persist the signature for the most recently applied bundle. Best-
+ * effort: a write failure is logged but does not throw, since the
+ * worst case is just an extra full-bundle delivery on the next
+ * heartbeat.
+ *
+ * The file is written with 0o600 to match the credentials sitting next
+ * to it; the directory itself is already 0o700 from
+ * `runtime-credentials.ts`.
+ */
+export function writeAppliedSignature(signature) {
+    if (typeof signature !== "string" || signature.trim() === "")
+        return;
+    const manifestPath = getManifestPath();
+    const dir = path.dirname(manifestPath);
+    try {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    catch {
+        // best-effort; the credential apply path will have created it
+    }
+    const payload = {
+        version: MANIFEST_VERSION,
+        signature: signature.trim(),
+        appliedAt: new Date().toISOString(),
+    };
+    try {
+        fs.writeFileSync(manifestPath, JSON.stringify(payload, null, 2), "utf-8");
+        if (process.platform !== "win32") {
+            try {
+                fs.chmodSync(manifestPath, 0o600);
+            }
+            catch {
+                // best-effort; directory perms still protect
+            }
+        }
+    }
+    catch (err) {
+        logger.warn(`Failed to persist applied-signature manifest: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Forget the persisted signature. Used by tests; production code never
+ * needs to delete it explicitly because writes overwrite in place.
+ */
+export function __clearAppliedSignatureForTests() {
+    try {
+        fs.rmSync(getManifestPath(), { force: true });
+    }
+    catch {
+        // ignore
+    }
+}
+//# sourceMappingURL=applied-credential-signature.js.map

package/dist/agent/applied-credential-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applied-credential-signature.js","sourceRoot":"","sources":["../../src/agent/applied-credential-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAW3B,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC;QACxB,OAAQ,MAAiC,CAAC,SAAS,KAAK,QAAQ;QAC/D,MAAgC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAI,MAAgC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAErE,mEAAmE;IACnE,mEAAmE;IACnE,wEAAwE;IACxE,qEAAqE;IACrE,yCAAyC;IACzC,IAAI,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO;IAErE,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;IAED,MAAM,OAAO,GAAsB;QACjC,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B;IAC7C,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC"}

package/dist/agent/engine-switch-handler.d.ts

@@ -1,18 +1,11 @@
 import type { CommandHandler } from "./command-dispatcher.js";
-import { type VisionClawConfig } from "../config/types.js";
+import type { VisionClawConfig } from "../config/types.js";
 /**
  * Creates a CommandHandler for the "switch_engine" remote command.
  *
- * Mirrors the Telegram `/engine` command semantics: the payload only
- * carries the target engine family (`gpt` | `claude`); the handler picks
- * the default model for that family and the first compatible provider
- * (llm-gateway), persists the config, and schedules a restart so the new
- * engine takes effect.
- *
- * Idempotent by design: after the restart the server re-delivers the
- * command (the pre-restart ack usually doesn't make it out in time), at
- * which point the engine family already matches and the handler acks
- * `completed` as a no-op — closing the command loop.
+ * Payload `{ engine: "gpt" | "claude" | "<modelId>" }`:
+ * - gpt/claude → default family model + first compatible provider
+ * - other → pinned model id (Pi + llm-gateway), validated via `/v1/models`
  */
 export declare function createEngineSwitchHandler(config: VisionClawConfig): CommandHandler;
 //# sourceMappingURL=engine-switch-handler.d.ts.map

package/dist/agent/engine-switch-handler.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine-switch-handler.d.ts","sourceRoot":"","sources":["../../src/agent/engine-switch-handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,EAA6C,KAAK,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAYtG;;;;;;;;;;;;;GAaG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc,CA+DlF"}
+{"version":3,"file":"engine-switch-handler.d.ts","sourceRoot":"","sources":["../../src/agent/engine-switch-handler.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,yBAAyB,CAAC;AAC9D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAkB3D;;;;;;GAMG;AACH,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,gBAAgB,GAAG,cAAc,CA6ElF"}

package/dist/agent/engine-switch-handler.js

@@ -1,58 +1,66 @@
 import { z } from "zod";
-import { getSupportedProvidersForModel } from "../config/types.js";
-import { DEFAULT_CLAUDE_MODEL, GPT_HEAVY_MODEL } from "../config/models.js";
-import { isClaudeModel } from "./engines/engine-factory.js";
 import { saveConfig, writePendingRestart } from "../config/index.js";
 import { logger } from "../logger.js";
+import { describeEngineTarget, isAlreadyOnEngineTarget, resolveEngineSwitchTarget, validateEngineSwitchTarget, } from "./engine-switch-target.js";
+import { LlmGatewayModelsError } from "./llm-gateway-models.js";
+/** Family aliases or a concrete pinned model id (e.g. kimi-k3). */
 const EngineSwitchPayloadSchema = z.object({
-    engine: z.enum(["gpt", "claude"]),
+    engine: z.string().trim().min(1),
 });
 const RESTART_DELAY = 5_000;
 /**
  * Creates a CommandHandler for the "switch_engine" remote command.
  *
- * Mirrors the Telegram `/engine` command semantics: the payload only
- * carries the target engine family (`gpt` | `claude`); the handler picks
- * the default model for that family and the first compatible provider
- * (llm-gateway), persists the config, and schedules a restart so the new
- * engine takes effect.
- *
- * Idempotent by design: after the restart the server re-delivers the
- * command (the pre-restart ack usually doesn't make it out in time), at
- * which point the engine family already matches and the handler acks
- * `completed` as a no-op — closing the command loop.
+ * Payload `{ engine: "gpt" | "claude" | "<modelId>" }`:
+ * - gpt/claude → default family model + first compatible provider
+ * - other → pinned model id (Pi + llm-gateway), validated via `/v1/models`
  */
 export function createEngineSwitchHandler(config) {
     return async (commandId, payload) => {
         const parsed = EngineSwitchPayloadSchema.safeParse(payload);
         if (!parsed.success) {
-            const errMsg = `Invalid switch_engine payload: expected { engine: "gpt" | "claude" }`;
+            const errMsg = `Invalid switch_engine payload: expected { engine: "gpt" | "claude" | "<modelId>" }`;
+            logger.err(`[engine-switch-handler] ${errMsg} (id=${commandId})`);
+            return {
+                status: "failed",
+                result: JSON.stringify({ error: errMsg }),
+            };
+        }
+        const target = resolveEngineSwitchTarget(parsed.data.engine);
+        if (!target) {
+            const errMsg = `Invalid switch_engine engine value: "${parsed.data.engine}"`;
             logger.err(`[engine-switch-handler] ${errMsg} (id=${commandId})`);
             return {
                 status: "failed",
                 result: JSON.stringify({ error: errMsg }),
             };
         }
-        const targetFamily = parsed.data.engine;
-        const currentFamily = isClaudeModel(config.model) ? "claude" : "gpt";
-        if (currentFamily === targetFamily) {
-            logger.system(`[engine-switch-handler] Already on ${targetFamily} engine (model=${config.model}); no-op (id=${commandId})`);
+        if (isAlreadyOnEngineTarget(config, target)) {
+            const label = describeEngineTarget(target);
+            logger.system(`[engine-switch-handler] Already on ${label} (model=${config.model}); no-op (id=${commandId})`);
             return {
                 status: "completed",
-                result: JSON.stringify({ message: `Already using ${targetFamily} engine (model=${config.model})` }),
+                result: JSON.stringify({ message: `Already using ${label} (model=${config.model})` }),
+            };
+        }
+        try {
+            await validateEngineSwitchTarget(config, target);
+        }
+        catch (err) {
+            const errMsg = err instanceof LlmGatewayModelsError || err instanceof Error
+                ? err.message
+                : String(err);
+            logger.err(`[engine-switch-handler] ${errMsg} (id=${commandId})`);
+            return {
+                status: "failed",
+                result: JSON.stringify({ error: errMsg }),
             };
         }
-        const targetModel = targetFamily === "gpt" ? GPT_HEAVY_MODEL : DEFAULT_CLAUDE_MODEL;
-        const [targetProvider] = getSupportedProvidersForModel(targetModel);
         // Run every fallible side effect *before* persisting the config. If any
         // of these throw, the config is untouched and the no-op fast path above
         // won't trigger on redelivery — so the admin can simply resend the
         // command and get a full switch attempt. (After saveConfig, only the
         // setTimeout-based scheduleRestart remains, which cannot fail.)
-        //
-        // Marker so the agent notifies the owner after the restart. Worst case
-        // (saveConfig throws below) this leaves a stray pending-restart marker
-        // that produces one redundant owner notification — harmless.
         writePendingRestart({
             channel: "onboarding-server",
             sender: "admin",
@@ -60,17 +68,16 @@ export function createEngineSwitchHandler(config) {
         });
         const { scheduleRestart } = await import("../utils/restart.js");
         const { runGracefulShutdown } = await import("./state.js");
-        // Mutate in place so the shared in-memory config object (held by the
-        // heartbeat manager and other subsystems) reflects the change too.
-        config.model = targetModel;
-        config.provider = targetProvider;
+        config.model = target.model;
+        config.provider = target.provider;
         saveConfig(config);
-        logger.system(`[engine-switch-handler] Engine switch to ${targetFamily} (${targetModel}, provider=${targetProvider}) requested via onboarding server (id=${commandId})`);
+        const label = describeEngineTarget(target);
+        logger.system(`[engine-switch-handler] Engine switch to ${label} (${target.model}, provider=${target.provider}) requested via onboarding server (id=${commandId})`);
         scheduleRestart(RESTART_DELAY, runGracefulShutdown);
         return {
             status: "completed",
             result: JSON.stringify({
-                message: `Switching to ${targetFamily} engine (${targetModel}, provider=${targetProvider}); restarting in ${RESTART_DELAY / 1000}s`,
+                message: `Switching to ${label} (${target.model}, provider=${target.provider}); restarting in ${RESTART_DELAY / 1000}s`,
             }),
         };
     };

package/dist/agent/engine-switch-handler.js.map

@@ -1 +1 @@
-{"version":3,"file":"engine-switch-handler.js","sourceRoot":"","sources":["../../src/agent/engine-switch-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB,OAAO,EAAE,6BAA6B,EAAqC,MAAM,oBAAoB,CAAC;AACtG,OAAO,EAAE,oBAAoB,EAAE,eAAe,EAAE,MAAM,qBAAqB,CAAC;AAC5E,OAAO,EAAE,aAAa,EAAE,MAAM,6BAA6B,CAAC;AAC5D,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;CAClC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAwB;IAChE,OAAO,KAAK,EAAE,SAAiB,EAAE,OAAgB,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,sEAAsE,CAAC;YACtF,MAAM,CAAC,GAAG,CAAC,2BAA2B,MAAM,QAAQ,SAAS,GAAG,CAAC,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,QAAiB;gBACzB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;aAC1C,CAAC;QACJ,CAAC;QAED,MAAM,YAAY,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC;QACxC,MAAM,aAAa,GAAG,aAAa,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC;QACrE,IAAI,aAAa,KAAK,YAAY,EAAE,CAAC;YACnC,MAAM,CAAC,MAAM,CACX,sCAAsC,YAAY,kBAAkB,MAAM,CAAC,KAAK,gBAAgB,SAAS,GAAG,CAC7G,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,WAAoB;gBAC5B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,YAAY,kBAAkB,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;aACpG,CAAC;QACJ,CAAC;QAED,MAAM,WAAW,GAAU,YAAY,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC;QAC3F,MAAM,CAAC,cAAc,CAAC,GAAG,6BAA6B,CAAC,WAAW,CAAC,CAAC;QAEpE,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,gEAAgE;QAChE,EAAE;QACF,uEAAuE;QACvE,uEAAuE;QACvE,6DAA6D;QAC7D,mBAAmB,CAAC;YAClB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAE3D,qEAAqE;QACrE,mEAAmE;QACnE,MAAM,CAAC,KAAK,GAAG,WAAW,CAAC;QAC3B,MAAM,CAAC,QAAQ,GAAG,cAAc,CAAC;QACjC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEnB,MAAM,CAAC,MAAM,CACX,4CAA4C,YAAY,KAAK,WAAW,cAAc,cAAc,yCAAyC,SAAS,GAAG,CAC1J,CAAC;QAEF,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAEpD,OAAO;YACL,MAAM,EAAE,WAAoB;YAC5B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,OAAO,EAAE,gBAAgB,YAAY,YAAY,WAAW,cAAc,cAAc,oBAAoB,aAAa,GAAG,IAAI,GAAG;aACpI,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"engine-switch-handler.js","sourceRoot":"","sources":["../../src/agent/engine-switch-handler.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB,OAAO,EAAE,UAAU,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACrE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AACtC,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EACvB,yBAAyB,EACzB,0BAA0B,GAC3B,MAAM,2BAA2B,CAAC;AACnC,OAAO,EAAE,qBAAqB,EAAE,MAAM,yBAAyB,CAAC;AAEhE,mEAAmE;AACnE,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CACjC,CAAC,CAAC;AAEH,MAAM,aAAa,GAAG,KAAK,CAAC;AAE5B;;;;;;GAMG;AACH,MAAM,UAAU,yBAAyB,CAAC,MAAwB;IAChE,OAAO,KAAK,EAAE,SAAiB,EAAE,OAAgB,EAAE,EAAE;QACnD,MAAM,MAAM,GAAG,yBAAyB,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC;QAC5D,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACpB,MAAM,MAAM,GAAG,oFAAoF,CAAC;YACpG,MAAM,CAAC,GAAG,CAAC,2BAA2B,MAAM,QAAQ,SAAS,GAAG,CAAC,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,QAAiB;gBACzB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;aAC1C,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAG,yBAAyB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC7D,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,MAAM,GAAG,wCAAwC,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC;YAC7E,MAAM,CAAC,GAAG,CAAC,2BAA2B,MAAM,QAAQ,SAAS,GAAG,CAAC,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,QAAiB;gBACzB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;aAC1C,CAAC;QACJ,CAAC;QAED,IAAI,uBAAuB,CAAC,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC;YAC5C,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;YAC3C,MAAM,CAAC,MAAM,CACX,sCAAsC,KAAK,WAAW,MAAM,CAAC,KAAK,gBAAgB,SAAS,GAAG,CAC/F,CAAC;YACF,OAAO;gBACL,MAAM,EAAE,WAAoB;gBAC5B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,OAAO,EAAE,iBAAiB,KAAK,WAAW,MAAM,CAAC,KAAK,GAAG,EAAE,CAAC;aACtF,CAAC;QACJ,CAAC;QAED,IAAI,CAAC;YACH,MAAM,0BAA0B,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;QACnD,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,MAAM,MAAM,GAAG,GAAG,YAAY,qBAAqB,IAAI,GAAG,YAAY,KAAK;gBACzE,CAAC,CAAC,GAAG,CAAC,OAAO;gBACb,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAChB,MAAM,CAAC,GAAG,CAAC,2BAA2B,MAAM,QAAQ,SAAS,GAAG,CAAC,CAAC;YAClE,OAAO;gBACL,MAAM,EAAE,QAAiB;gBACzB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;aAC1C,CAAC;QACJ,CAAC;QAED,wEAAwE;QACxE,wEAAwE;QACxE,mEAAmE;QACnE,qEAAqE;QACrE,gEAAgE;QAChE,mBAAmB,CAAC;YAClB,OAAO,EAAE,mBAAmB;YAC5B,MAAM,EAAE,OAAO;YACf,WAAW,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACtC,CAAC,CAAC;QACH,MAAM,EAAE,eAAe,EAAE,GAAG,MAAM,MAAM,CAAC,qBAAqB,CAAC,CAAC;QAChE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC;QAE3D,MAAM,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC5B,MAAM,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC;QAClC,UAAU,CAAC,MAAM,CAAC,CAAC;QAEnB,MAAM,KAAK,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC;QAC3C,MAAM,CAAC,MAAM,CACX,4CAA4C,KAAK,KAAK,MAAM,CAAC,KAAK,cAAc,MAAM,CAAC,QAAQ,yCAAyC,SAAS,GAAG,CACrJ,CAAC;QAEF,eAAe,CAAC,aAAa,EAAE,mBAAmB,CAAC,CAAC;QAEpD,OAAO;YACL,MAAM,EAAE,WAAoB;YAC5B,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC;gBACrB,OAAO,EAAE,gBAAgB,KAAK,KAAK,MAAM,CAAC,KAAK,cAAc,MAAM,CAAC,QAAQ,oBAAoB,aAAa,GAAG,IAAI,GAAG;aACxH,CAAC;SACH,CAAC;IACJ,CAAC,CAAC;AACJ,CAAC"}

package/dist/agent/engine-switch-target.d.ts

@@ -0,0 +1,33 @@
+/**
+ * Shared resolution for `/engine` / `switch_engine` targets.
+ */
+import { getEngineSwitchKey, isPinnedModel } from "../config/models.js";
+import { type Model, type Provider, type VisionClawConfig } from "../config/types.js";
+export type EngineSwitchTarget = {
+    kind: "family";
+    family: "claude" | "gpt";
+    model: Model;
+    provider: Provider;
+} | {
+    kind: "pinned";
+    model: Model;
+    provider: Provider;
+};
+/** Parse `/engine <token>` — `claude`/`gpt` are families; anything else is a pinned model id. */
+export declare function parseEngineSwitchToken(token: string): {
+    family: "claude" | "gpt";
+} | {
+    pinnedModelId: string;
+} | null;
+export declare function resolveEngineSwitchTarget(token: string): EngineSwitchTarget | null;
+export declare function isAlreadyOnEngineTarget(config: Pick<VisionClawConfig, "model">, target: EngineSwitchTarget): boolean;
+/**
+ * Validate a pinned switch against LLM Gateway `/v1/models`.
+ * Family switches are no-ops here.
+ */
+export declare function validateEngineSwitchTarget(config: VisionClawConfig, target: EngineSwitchTarget, options?: {
+    fetchImpl?: typeof fetch;
+}): Promise<void>;
+export declare function describeEngineTarget(target: EngineSwitchTarget): string;
+export { isPinnedModel, getEngineSwitchKey };
+//# sourceMappingURL=engine-switch-target.d.ts.map

package/dist/agent/engine-switch-target.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-switch-target.d.ts","sourceRoot":"","sources":["../../src/agent/engine-switch-target.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EAGL,kBAAkB,EAElB,aAAa,EACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACtB,MAAM,oBAAoB,CAAC;AAG5B,MAAM,MAAM,kBAAkB,GAC1B;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,MAAM,EAAE,QAAQ,GAAG,KAAK,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,GAC9E;IAAE,IAAI,EAAE,QAAQ,CAAC;IAAC,KAAK,EAAE,KAAK,CAAC;IAAC,QAAQ,EAAE,QAAQ,CAAA;CAAE,CAAC;AAEzD,iGAAiG;AACjG,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG;IAAE,MAAM,EAAE,QAAQ,GAAG,KAAK,CAAA;CAAE,GAAG;IAAE,aAAa,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAmBrH;AAED,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,MAAM,GACZ,kBAAkB,GAAG,IAAI,CAa3B;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,IAAI,CAAC,gBAAgB,EAAE,OAAO,CAAC,EACvC,MAAM,EAAE,kBAAkB,GACzB,OAAO,CAMT;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE,kBAAkB,EAC1B,OAAO,GAAE;IAAE,SAAS,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GACzC,OAAO,CAAC,IAAI,CAAC,CAcf;AAED,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,kBAAkB,GAAG,MAAM,CAKvE;AAED,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/agent/engine-switch-target.js

@@ -0,0 +1,72 @@
+/**
+ * Shared resolution for `/engine` / `switch_engine` targets.
+ */
+import { DEFAULT_CLAUDE_MODEL, GPT_HEAVY_MODEL, getEngineSwitchKey, isKnownModel, isPinnedModel, } from "../config/models.js";
+import { getSupportedProvidersForModel, } from "../config/types.js";
+import { assertLlmGatewaySupportsModel } from "./llm-gateway-models.js";
+/** Parse `/engine <token>` — `claude`/`gpt` are families; anything else is a pinned model id. */
+export function parseEngineSwitchToken(token) {
+    const trimmed = token.trim();
+    if (!trimmed)
+        return null;
+    const lower = trimmed.toLowerCase();
+    if (lower === "claude" || lower === "gpt") {
+        return { family: lower };
+    }
+    // Reject reserved runtime aliases that are not valid pinned gateway model ids.
+    if (lower === "pi" || lower === "pi-coding" || lower === "coding") {
+        return null;
+    }
+    // Reject built-in family model ids (e.g. claude-fable-5, gpt-5.6-luna):
+    // they are NOT pinned models — isPinnedModel() would be false after the
+    // switch, so routing would silently fall back to family behavior. Users
+    // should switch families via `/engine claude` / `/engine gpt` instead.
+    if (isKnownModel(trimmed)) {
+        return null;
+    }
+    return { pinnedModelId: trimmed };
+}
+export function resolveEngineSwitchTarget(token) {
+    const parsed = parseEngineSwitchToken(token);
+    if (!parsed)
+        return null;
+    if ("family" in parsed) {
+        const model = parsed.family === "gpt" ? GPT_HEAVY_MODEL : DEFAULT_CLAUDE_MODEL;
+        const [provider] = getSupportedProvidersForModel(model);
+        return { kind: "family", family: parsed.family, model, provider };
+    }
+    const model = parsed.pinnedModelId;
+    const [provider] = getSupportedProvidersForModel(model);
+    return { kind: "pinned", model, provider };
+}
+export function isAlreadyOnEngineTarget(config, target) {
+    const currentKey = getEngineSwitchKey(config.model);
+    if (target.kind === "family") {
+        return currentKey === target.family;
+    }
+    return currentKey === target.model;
+}
+/**
+ * Validate a pinned switch against LLM Gateway `/v1/models`.
+ * Family switches are no-ops here.
+ */
+export async function validateEngineSwitchTarget(config, target, options = {}) {
+    if (target.kind !== "pinned")
+        return;
+    if (target.provider !== "llm-gateway") {
+        throw new Error(`Pinned model "${target.model}" requires provider llm-gateway`);
+    }
+    // Prefer credentials from config; after switch we will set provider to llm-gateway.
+    await assertLlmGatewaySupportsModel({
+        llmGatewayBaseUrl: config.llmGatewayBaseUrl,
+        llmGatewayApiKey: config.llmGatewayApiKey,
+    }, target.model, options);
+}
+export function describeEngineTarget(target) {
+    if (target.kind === "family") {
+        return `${target.family} engine`;
+    }
+    return `pinned model "${target.model}"`;
+}
+export { isPinnedModel, getEngineSwitchKey };
+//# sourceMappingURL=engine-switch-target.js.map

package/dist/agent/engine-switch-target.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"engine-switch-target.js","sourceRoot":"","sources":["../../src/agent/engine-switch-target.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,kBAAkB,EAClB,YAAY,EACZ,aAAa,GACd,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACL,6BAA6B,GAI9B,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EAAE,6BAA6B,EAAE,MAAM,yBAAyB,CAAC;AAMxE,iGAAiG;AACjG,MAAM,UAAU,sBAAsB,CAAC,KAAa;IAClD,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC7B,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAC1B,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACpC,IAAI,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,KAAK,EAAE,CAAC;QAC1C,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IAC3B,CAAC;IACD,+EAA+E;IAC/E,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,WAAW,IAAI,KAAK,KAAK,QAAQ,EAAE,CAAC;QAClE,OAAO,IAAI,CAAC;IACd,CAAC;IACD,wEAAwE;IACxE,wEAAwE;IACxE,wEAAwE;IACxE,uEAAuE;IACvE,IAAI,YAAY,CAAC,OAAO,CAAC,EAAE,CAAC;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,EAAE,aAAa,EAAE,OAAO,EAAE,CAAC;AACpC,CAAC;AAED,MAAM,UAAU,yBAAyB,CACvC,KAAa;IAEb,MAAM,MAAM,GAAG,sBAAsB,CAAC,KAAK,CAAC,CAAC;IAC7C,IAAI,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAEzB,IAAI,QAAQ,IAAI,MAAM,EAAE,CAAC;QACvB,MAAM,KAAK,GAAU,MAAM,CAAC,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,oBAAoB,CAAC;QACtF,MAAM,CAAC,QAAQ,CAAC,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;QACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;IACpE,CAAC;IAED,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC;IACnC,MAAM,CAAC,QAAQ,CAAC,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC;IACxD,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC7C,CAAC;AAED,MAAM,UAAU,uBAAuB,CACrC,MAAuC,EACvC,MAA0B;IAE1B,MAAM,UAAU,GAAG,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACpD,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,UAAU,KAAK,MAAM,CAAC,MAAM,CAAC;IACtC,CAAC;IACD,OAAO,UAAU,KAAK,MAAM,CAAC,KAAK,CAAC;AACrC,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,MAAwB,EACxB,MAA0B,EAC1B,UAAwC,EAAE;IAE1C,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ;QAAE,OAAO;IACrC,IAAI,MAAM,CAAC,QAAQ,KAAK,aAAa,EAAE,CAAC;QACtC,MAAM,IAAI,KAAK,CAAC,iBAAiB,MAAM,CAAC,KAAK,iCAAiC,CAAC,CAAC;IAClF,CAAC;IACD,oFAAoF;IACpF,MAAM,6BAA6B,CACjC;QACE,iBAAiB,EAAE,MAAM,CAAC,iBAAiB;QAC3C,gBAAgB,EAAE,MAAM,CAAC,gBAAgB;KAC1C,EACD,MAAM,CAAC,KAAK,EACZ,OAAO,CACR,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,oBAAoB,CAAC,MAA0B;IAC7D,IAAI,MAAM,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,GAAG,MAAM,CAAC,MAAM,SAAS,CAAC;IACnC,CAAC;IACD,OAAO,iBAAiB,MAAM,CAAC,KAAK,GAAG,CAAC;AAC1C,CAAC;AAED,OAAO,EAAE,aAAa,EAAE,kBAAkB,EAAE,CAAC"}

package/dist/agent/engines/client-factory.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Factory for creating the correct Anthropic client (direct API vs Bedrock)
+ * and resolving provider-specific model IDs.
+ */
+import Anthropic from "@anthropic-ai/sdk";
+import OpenAI, { AzureOpenAI } from "openai";
+import { type Model, type Provider, type VisionClawConfig } from "../../config/types.js";
+export declare const OPENAI_MODEL = "gpt-5.5";
+export declare const AZURE_OPENAI_API_VERSION = "preview";
+export declare function isOpenAIProvider(provider: Provider): provider is "openai" | "azure-openai";
+/**
+ * True for any GPT-family model (e.g. "gpt-5.5", future "gpt-6", "gpt-5.5-mini").
+ * Routing to the OpenAI Agents SDK only depends on the family, not the exact
+ * version, so we match by prefix instead of pinning to a single literal.
+ */
+export declare function isGptModel(model: Model | undefined): boolean;
+export declare function getProviderLabel(provider: Provider): string;
+export declare function getRuntimeLabel(config: VisionClawConfig): string;
+/**
+ * Create an Anthropic-compatible client based on the provider in the config.
+ *
+ * - `"anthropic"`: uses the direct API with `anthropicApiKey`.
+ * - `"bedrock"`: uses `AnthropicBedrock` with explicit AWS credentials when
+ *   provided, otherwise falls back to the default AWS credential provider chain.
+ */
+export declare function createClient(config: VisionClawConfig): Anthropic;
+export declare function hasProviderCredentials(provider: Provider, config: VisionClawConfig): boolean;
+export declare function createOpenAIClient(config: VisionClawConfig): OpenAI | AzureOpenAI;
+export declare function configureOpenAIProvider(config: VisionClawConfig): void;
+/**
+ * Return the correct model identifier for direct SDK calls
+ * (fast-responder, tool-alarm-evaluator, etc.).
+ *
+ * Agent SDK `query()` calls do NOT need this - the SDK maps models
+ * internally when `CLAUDE_CODE_USE_BEDROCK=1` or `CLAUDE_CODE_USE_VERTEX=1` is set.
+ */
+export declare function getModelId(config: VisionClawConfig): string;
+/**
+ * Return the Sonnet model identifier for lightweight side-calls
+ * (fast-responder, etc.) that don't need the full Opus model.
+ * For non-Claude providers, falls back to the main model.
+ */
+export declare function getFastResponderModelId(config: VisionClawConfig): string;
+/**
+ * Build the `env` record for the Agent SDK `query()` options.
+ *
+ * - Anthropic: passes `ANTHROPIC_API_KEY`.
+ * - Bedrock: passes `CLAUDE_CODE_USE_BEDROCK`, `AWS_REGION`,
+ *   `AWS_BEARER_TOKEN_BEDROCK` (for the Claude Code CLI), and IAM
+ *   credentials when available.
+ * - Vertex: passes `CLAUDE_CODE_USE_VERTEX`, `CLOUD_ML_REGION`,
+ *   and `GOOGLE_APPLICATION_CREDENTIALS` for service account auth.
+ */
+export declare function buildAgentEnv(config: VisionClawConfig): Record<string, string | undefined>;
+/**
+ * Start the API logging proxy if running in dev mode with the Anthropic
+ * or 9Router provider.  No-ops (and returns immediately) in production,
+ * for Bedrock (which bypasses ANTHROPIC_BASE_URL), or for OpenAI providers.
+ *
+ * Call once at startup, before the first `buildAgentEnv()` call.
+ */
+export declare function maybeStartApiProxy(config: VisionClawConfig): Promise<void>;
+//# sourceMappingURL=client-factory.d.ts.map

package/dist/agent/engines/client-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.d.ts","sourceRoot":"","sources":["../../../src/agent/engines/client-factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAG1C,OAAO,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAqB/B,eAAO,MAAM,YAAY,YAAY,CAAC;AACtC,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAElD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,GACjB,QAAQ,IAAI,QAAQ,GAAG,cAAc,CAEvC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAe3D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAWhE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CA4ChE;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAkB5F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,WAAW,CA2BjF;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAkBtE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAuB3D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAOxE;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAsI1F;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhF"}