visionclaw 0.1.210-beta.8 → 0.1.210

package/CHANGELOG.md

@@ -1,3 +1,26 @@
+## [0.1.210](https://github.com/babelcloud/visionclaw/compare/v0.1.209...v0.1.210) (2026-08-20)
+
+### Bug Fixes
+
+* **gmail:** route replies to originating thread (#1582) ([ff6ba92](https://github.com/babelcloud/visionclaw/commit/ff6ba92ff192d18a54e6eb77f9d219b29c2e144b))
+
+### Features
+
+* **session-manager:** enhance session capabilities with detailed host and browser configurations ([c110629](https://github.com/babelcloud/visionclaw/commit/c1106295fec909d51eb2827a8a300dca6e14cf08))
+* **financial-tool:** expose A-share earnings events (#1573) ([0607e15](https://github.com/babelcloud/visionclaw/commit/0607e15e9c499eca61adf65a2d9d4cffc66f73cf))
+* gate desktop runtime surfaces by local availability (#1570) ([49f36a4](https://github.com/babelcloud/visionclaw/commit/49f36a45a064297a40339176969d70276c9b1550))
+* **financial-tool:** expose A-share index data (#1558) ([33cb71a](https://github.com/babelcloud/visionclaw/commit/33cb71a6032446b2144924d4a05c8bc080e1f264))
+* **financial-tool:** add HK EOD option chains (#1554) ([54b6206](https://github.com/babelcloud/visionclaw/commit/54b6206acbbbf70deea47134ea2a818f50cc2dd4))
+* add optional managed tunnel capability (#1552) ([2d39977](https://github.com/babelcloud/visionclaw/commit/2d399775fbe5fa334029f2f7c702d9b507b5294d))
+* **agent:** add Gemini capability vertical (#1535) ([dde3bc8](https://github.com/babelcloud/visionclaw/commit/dde3bc87282327e3c0b2427dbf0a9970dc0c74bf))
+* **financial-tool:** release gate that can actually fail (#1528) ([bf89ed4](https://github.com/babelcloud/visionclaw/commit/bf89ed483d1c536a825210b90908fc64ea399df0))
+* **financial-tool:** add instrument context (#1526) ([beb0cf9](https://github.com/babelcloud/visionclaw/commit/beb0cf90f764711eec8852dc014cc90d0593c0fb))
+* **financial-tool:** add PIT factors and macro series (#1524) ([ba041e9](https://github.com/babelcloud/visionclaw/commit/ba041e9f7b298bfd71eac7efff3dd6f69531f66b))
+* **agent:** add versioned capability set foundation (#1518) ([698c34a](https://github.com/babelcloud/visionclaw/commit/698c34a3a368386a36aa3e27cfa0e7572f96b42b))
+* **agent:** support disabling proactive wakes (#1502) ([bf5b4f1](https://github.com/babelcloud/visionclaw/commit/bf5b4f1cee2bd61003a6434d2d4d1062f4e67de2))
+* **linux:** add desktop capability parity (#1416) ([54427ed](https://github.com/babelcloud/visionclaw/commit/54427ed41d321ccfd0cff5b3a8391b560fc54af9))
+
+
 ## [0.1.209](https://github.com/babelcloud/visionclaw/compare/v0.1.208...v0.1.209) (2026-08-12)
 
 ### Bug Fixes

package/dist/agent/applied-credential-signature.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Applied-credential signature manifest.
+ *
+ * Persisted alongside materialised tunnel credentials at
+ * `<profileTunnelDir>/.applied-signature.json`. Records the signature
+ * the server handed us with the last bundle we successfully applied.
+ *
+ * The manifest is the *only* piece of state the agent has to remember
+ * across process restarts about credential bundles — everything else
+ * (creds JSON, config.yml) is reconstructable from a fresh server
+ * delivery. The signature is opaque to us; we just echo it back on the
+ * next heartbeat so the server can decide whether to re-ship the body.
+ *
+ * Self-healing properties (intentional):
+ *   - Manifest missing on disk → no signature sent → server sends
+ *     bundle → we re-apply and rewrite the manifest. Recovers any
+ *     install where the manifest was deleted but credentials weren't,
+ *     or vice versa.
+ *   - Manifest present but probe says no live tunnel files → we treat
+ *     the manifest as unusable (return null from `loadIfValid`), the
+ *     next heartbeat goes signature-free, the server re-ships the
+ *     bundle, and we land back in a coherent state.
+ *   - Process restart with everything intact → manifest signature is
+ *     sent on the startup heartbeat, server replies with no
+ *     `credentialBundle`, no disk writes, no tunnel restart.
+ */
+/**
+ * Read the persisted signature, if any. Returns `null` when the file
+ * does not exist, fails to parse, has the wrong shape, or refers to a
+ * tunnel state that no longer matches what's on disk.
+ *
+ * The on-disk-coherence check (`probeLocalTunnelCredential()`) is what
+ * gives us self-healing: a stranded manifest from a wiped tunnel dir
+ * gets ignored, forcing a fresh bundle on the next heartbeat.
+ */
+export declare function loadAppliedSignatureIfValid(): string | null;
+/**
+ * Persist the signature for the most recently applied bundle. Best-
+ * effort: a write failure is logged but does not throw, since the
+ * worst case is just an extra full-bundle delivery on the next
+ * heartbeat.
+ *
+ * The file is written with 0o600 to match the credentials sitting next
+ * to it; the directory itself is already 0o700 from
+ * `runtime-credentials.ts`.
+ */
+export declare function writeAppliedSignature(signature: string): void;
+/**
+ * Forget the persisted signature. Used by tests; production code never
+ * needs to delete it explicitly because writes overwrite in place.
+ */
+export declare function __clearAppliedSignatureForTests(): void;
+//# sourceMappingURL=applied-credential-signature.d.ts.map

package/dist/agent/applied-credential-signature.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"applied-credential-signature.d.ts","sourceRoot":"","sources":["../../src/agent/applied-credential-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAwBH;;;;;;;;GAQG;AACH,wBAAgB,2BAA2B,IAAI,MAAM,GAAG,IAAI,CA2C3D;AAED;;;;;;;;;GASG;AACH,wBAAgB,qBAAqB,CAAC,SAAS,EAAE,MAAM,GAAG,IAAI,CAgC7D;AAED;;;GAGG;AACH,wBAAgB,+BAA+B,IAAI,IAAI,CAMtD"}

package/dist/agent/applied-credential-signature.js

@@ -0,0 +1,137 @@
+/**
+ * Applied-credential signature manifest.
+ *
+ * Persisted alongside materialised tunnel credentials at
+ * `<profileTunnelDir>/.applied-signature.json`. Records the signature
+ * the server handed us with the last bundle we successfully applied.
+ *
+ * The manifest is the *only* piece of state the agent has to remember
+ * across process restarts about credential bundles — everything else
+ * (creds JSON, config.yml) is reconstructable from a fresh server
+ * delivery. The signature is opaque to us; we just echo it back on the
+ * next heartbeat so the server can decide whether to re-ship the body.
+ *
+ * Self-healing properties (intentional):
+ *   - Manifest missing on disk → no signature sent → server sends
+ *     bundle → we re-apply and rewrite the manifest. Recovers any
+ *     install where the manifest was deleted but credentials weren't,
+ *     or vice versa.
+ *   - Manifest present but probe says no live tunnel files → we treat
+ *     the manifest as unusable (return null from `loadIfValid`), the
+ *     next heartbeat goes signature-free, the server re-ships the
+ *     bundle, and we land back in a coherent state.
+ *   - Process restart with everything intact → manifest signature is
+ *     sent on the startup heartbeat, server replies with no
+ *     `credentialBundle`, no disk writes, no tunnel restart.
+ */
+import fs from "node:fs";
+import path from "node:path";
+import { getProfileTunnelDir } from "../config/index.js";
+import { probeLocalTunnelCredential } from "./runtime-credentials.js";
+import { logger } from "../logger.js";
+const MANIFEST_FILENAME = ".applied-signature.json";
+const MANIFEST_VERSION = 1;
+function getManifestPath() {
+    return path.join(getProfileTunnelDir(), MANIFEST_FILENAME);
+}
+/**
+ * Read the persisted signature, if any. Returns `null` when the file
+ * does not exist, fails to parse, has the wrong shape, or refers to a
+ * tunnel state that no longer matches what's on disk.
+ *
+ * The on-disk-coherence check (`probeLocalTunnelCredential()`) is what
+ * gives us self-healing: a stranded manifest from a wiped tunnel dir
+ * gets ignored, forcing a fresh bundle on the next heartbeat.
+ */
+export function loadAppliedSignatureIfValid() {
+    const manifestPath = getManifestPath();
+    if (!fs.existsSync(manifestPath))
+        return null;
+    let raw;
+    try {
+        raw = fs.readFileSync(manifestPath, "utf-8");
+    }
+    catch (err) {
+        logger.warn(`Applied-signature manifest unreadable: ${err instanceof Error ? err.message : String(err)}`);
+        return null;
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        logger.warn(`Applied-signature manifest malformed; ignoring`);
+        return null;
+    }
+    if (!parsed ||
+        typeof parsed !== "object" ||
+        !("signature" in parsed) ||
+        typeof parsed.signature !== "string" ||
+        parsed.signature.trim() === "") {
+        return null;
+    }
+    const signature = parsed.signature.trim();
+    // Coherence: a manifest is only meaningful when the credentials it
+    // refers to actually still exist on disk. If the tunnel files were
+    // wiped (e.g. operator deleted `~/.visionclaw/profiles/default/tunnel`)
+    // the stored signature lies about our state, so pretend we have none
+    // and let the server reissue the bundle.
+    if (probeLocalTunnelCredential() === null) {
+        return null;
+    }
+    return signature;
+}
+/**
+ * Persist the signature for the most recently applied bundle. Best-
+ * effort: a write failure is logged but does not throw, since the
+ * worst case is just an extra full-bundle delivery on the next
+ * heartbeat.
+ *
+ * The file is written with 0o600 to match the credentials sitting next
+ * to it; the directory itself is already 0o700 from
+ * `runtime-credentials.ts`.
+ */
+export function writeAppliedSignature(signature) {
+    if (typeof signature !== "string" || signature.trim() === "")
+        return;
+    const manifestPath = getManifestPath();
+    const dir = path.dirname(manifestPath);
+    try {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    catch {
+        // best-effort; the credential apply path will have created it
+    }
+    const payload = {
+        version: MANIFEST_VERSION,
+        signature: signature.trim(),
+        appliedAt: new Date().toISOString(),
+    };
+    try {
+        fs.writeFileSync(manifestPath, JSON.stringify(payload, null, 2), "utf-8");
+        if (process.platform !== "win32") {
+            try {
+                fs.chmodSync(manifestPath, 0o600);
+            }
+            catch {
+                // best-effort; directory perms still protect
+            }
+        }
+    }
+    catch (err) {
+        logger.warn(`Failed to persist applied-signature manifest: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+/**
+ * Forget the persisted signature. Used by tests; production code never
+ * needs to delete it explicitly because writes overwrite in place.
+ */
+export function __clearAppliedSignatureForTests() {
+    try {
+        fs.rmSync(getManifestPath(), { force: true });
+    }
+    catch {
+        // ignore
+    }
+}
+//# sourceMappingURL=applied-credential-signature.js.map

package/dist/agent/applied-credential-signature.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"applied-credential-signature.js","sourceRoot":"","sources":["../../src/agent/applied-credential-signature.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AACzD,OAAO,EAAE,0BAA0B,EAAE,MAAM,0BAA0B,CAAC;AACtE,OAAO,EAAE,MAAM,EAAE,MAAM,cAAc,CAAC;AAEtC,MAAM,iBAAiB,GAAG,yBAAyB,CAAC;AACpD,MAAM,gBAAgB,GAAG,CAAC,CAAC;AAW3B,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,mBAAmB,EAAE,EAAE,iBAAiB,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,2BAA2B;IACzC,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,IAAI,CAAC;IAE9C,IAAI,GAAW,CAAC;IAChB,IAAI,CAAC;QACH,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,YAAY,EAAE,OAAO,CAAC,CAAC;IAC/C,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,0CAA0C,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAC7F,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC3B,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,IAAI,CAAC,gDAAgD,CAAC,CAAC;QAC9D,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IACE,CAAC,MAAM;QACP,OAAO,MAAM,KAAK,QAAQ;QAC1B,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC;QACxB,OAAQ,MAAiC,CAAC,SAAS,KAAK,QAAQ;QAC/D,MAAgC,CAAC,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE,EACzD,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;IACD,MAAM,SAAS,GAAI,MAAgC,CAAC,SAAS,CAAC,IAAI,EAAE,CAAC;IAErE,mEAAmE;IACnE,mEAAmE;IACnE,wEAAwE;IACxE,qEAAqE;IACrE,yCAAyC;IACzC,IAAI,0BAA0B,EAAE,KAAK,IAAI,EAAE,CAAC;QAC1C,OAAO,IAAI,CAAC;IACd,CAAC;IAED,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,qBAAqB,CAAC,SAAiB;IACrD,IAAI,OAAO,SAAS,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO;IAErE,MAAM,YAAY,GAAG,eAAe,EAAE,CAAC;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;IAEvC,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACzC,CAAC;IAAC,MAAM,CAAC;QACP,8DAA8D;IAChE,CAAC;IAED,MAAM,OAAO,GAAsB;QACjC,OAAO,EAAE,gBAAgB;QACzB,SAAS,EAAE,SAAS,CAAC,IAAI,EAAE;QAC3B,SAAS,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;KACpC,CAAC;IAEF,IAAI,CAAC;QACH,EAAE,CAAC,aAAa,CAAC,YAAY,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QAC1E,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO,EAAE,CAAC;YACjC,IAAI,CAAC;gBACH,EAAE,CAAC,SAAS,CAAC,YAAY,EAAE,KAAK,CAAC,CAAC;YACpC,CAAC;YAAC,MAAM,CAAC;gBACP,6CAA6C;YAC/C,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,IAAI,CACT,iDAAiD,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CACpG,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,+BAA+B;IAC7C,IAAI,CAAC;QACH,EAAE,CAAC,MAAM,CAAC,eAAe,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC"}

package/dist/agent/capabilities.d.ts

@@ -0,0 +1,56 @@
+/**
+ * Versioned, server-authoritative optional runtime surfaces.
+ *
+ * Core model routing, local execution, localhost health/status, and the TUI
+ * control channel are deliberately not switches: every Agent needs them to be
+ * operable. Everything in this list may be omitted by an explicit setup.
+ */
+export declare const AGENT_CAPABILITIES: readonly ["managed_workspace", "messaging_channels", "interactive_onboarding", "heartbeat", "tunnel", "gemini", "computer_use", "memory", "skills", "dynamic_mcp", "upgrade", "event_trigger", "external_integrations"];
+export type AgentCapability = (typeof AGENT_CAPABILITIES)[number];
+export interface AgentCapabilitySetData {
+    schemaVersion: 1;
+    enabled: AgentCapability[];
+}
+interface CapabilityCredentialBody {
+    tunnel?: unknown;
+    tunnelRotation?: unknown;
+    google?: unknown;
+    zoho?: unknown;
+    serpapi?: unknown;
+    gemini?: unknown;
+    llmGateway?: unknown;
+    eventTrigger?: unknown;
+    finApp?: unknown;
+    financialTool?: unknown;
+}
+interface CapabilityConfigShape {
+    capabilitySet?: AgentCapabilitySetData;
+    workspaceEnabled?: boolean;
+}
+/**
+ * Central capability policy object. Call sites ask a positive question
+ * (`capabilities.has("gemini")`) instead of re-implementing legacy defaults or
+ * decoding the wire object themselves.
+ */
+export declare class CapabilitySet {
+    private readonly enabled;
+    private readonly legacyMode;
+    private constructor();
+    /** Today's behavior. Only the pre-existing Workspace flag can narrow it. */
+    static legacy(options?: {
+        workspaceEnabled?: boolean;
+    }): CapabilitySet;
+    static explicit(data: AgentCapabilitySetData): CapabilitySet;
+    static parse(value: unknown): CapabilitySet;
+    /** Missing capability data is the compatibility contract, never an empty set. */
+    static fromConfig(config: CapabilityConfigShape): CapabilitySet;
+    has(capability: AgentCapability): boolean;
+    /** Client-side defense in depth for a mistakenly over-broad bundle. */
+    filterCredentialBody<T extends CapabilityCredentialBody>(body: T): Partial<T>;
+    /** Unknown admin commands remain compatible only for legacy/full Agents. */
+    allowsPendingCommand(command: string): boolean;
+    toJSON(): AgentCapabilitySetData;
+}
+export declare function hasAgentCapability(config: CapabilityConfigShape, capability: AgentCapability): boolean;
+export {};
+//# sourceMappingURL=capabilities.d.ts.map

package/dist/agent/capabilities.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.d.ts","sourceRoot":"","sources":["../../src/agent/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,eAAO,MAAM,kBAAkB,yNAcrB,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,kBAAkB,CAAC,CAAC,MAAM,CAAC,CAAC;AAElE,MAAM,WAAW,sBAAsB;IACrC,aAAa,EAAE,CAAC,CAAC;IACjB,OAAO,EAAE,eAAe,EAAE,CAAC;CAC5B;AAED,UAAU,wBAAwB;IAChC,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,YAAY,CAAC,EAAE,OAAO,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,CAAC;IACjB,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,UAAU,qBAAqB;IAC7B,aAAa,CAAC,EAAE,sBAAsB,CAAC;IACvC,gBAAgB,CAAC,EAAE,OAAO,CAAC;CAC5B;AASD;;;;GAIG;AACH,qBAAa,aAAa;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA+B;IACvD,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAU;IAErC,OAAO;IAKP,4EAA4E;IAC5E,MAAM,CAAC,MAAM,CAAC,OAAO,GAAE;QAAE,gBAAgB,CAAC,EAAE,OAAO,CAAA;KAAO,GAAG,aAAa;IAO1E,MAAM,CAAC,QAAQ,CAAC,IAAI,EAAE,sBAAsB,GAAG,aAAa;IAI5D,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,OAAO,GAAG,aAAa;IAkB3C,iFAAiF;IACjF,MAAM,CAAC,UAAU,CACf,MAAM,EAAE,qBAAqB,GAC5B,aAAa;IAMhB,GAAG,CAAC,UAAU,EAAE,eAAe,GAAG,OAAO;IAIzC,uEAAuE;IACvE,oBAAoB,CAAC,CAAC,SAAS,wBAAwB,EAAE,IAAI,EAAE,CAAC,GAAG,OAAO,CAAC,CAAC,CAAC;IAqB7E,4EAA4E;IAC5E,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO;IAY9C,MAAM,IAAI,sBAAsB;CAMjC;AAED,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,qBAAqB,EAC7B,UAAU,EAAE,eAAe,GAC1B,OAAO,CAET"}

package/dist/agent/capabilities.js

@@ -0,0 +1,121 @@
+/**
+ * Versioned, server-authoritative optional runtime surfaces.
+ *
+ * Core model routing, local execution, localhost health/status, and the TUI
+ * control channel are deliberately not switches: every Agent needs them to be
+ * operable. Everything in this list may be omitted by an explicit setup.
+ */
+export const AGENT_CAPABILITIES = [
+    "managed_workspace",
+    "messaging_channels",
+    "interactive_onboarding",
+    "heartbeat",
+    "tunnel",
+    "gemini",
+    "computer_use",
+    "memory",
+    "skills",
+    "dynamic_mcp",
+    "upgrade",
+    "event_trigger",
+    "external_integrations",
+];
+const KNOWN_CAPABILITIES = new Set(AGENT_CAPABILITIES);
+function canonicalCapabilities(values) {
+    const selected = new Set(values);
+    return AGENT_CAPABILITIES.filter((capability) => selected.has(capability));
+}
+/**
+ * Central capability policy object. Call sites ask a positive question
+ * (`capabilities.has("gemini")`) instead of re-implementing legacy defaults or
+ * decoding the wire object themselves.
+ */
+export class CapabilitySet {
+    enabled;
+    legacyMode;
+    constructor(enabled, legacyMode = false) {
+        this.enabled = new Set(canonicalCapabilities(enabled));
+        this.legacyMode = legacyMode;
+    }
+    /** Today's behavior. Only the pre-existing Workspace flag can narrow it. */
+    static legacy(options = {}) {
+        const enabled = options.workspaceEnabled === false
+            ? AGENT_CAPABILITIES.filter((capability) => capability !== "managed_workspace")
+            : AGENT_CAPABILITIES;
+        return new CapabilitySet(enabled, true);
+    }
+    static explicit(data) {
+        return CapabilitySet.parse(data);
+    }
+    static parse(value) {
+        if (!value || typeof value !== "object" || Array.isArray(value)) {
+            throw new Error("Agent capability set must be an object");
+        }
+        const data = value;
+        if (data.schemaVersion !== 1 || !Array.isArray(data.enabled)) {
+            throw new Error("Unsupported Agent capability schema");
+        }
+        const enabled = [];
+        for (const rawCapability of data.enabled) {
+            if (typeof rawCapability !== "string" || !KNOWN_CAPABILITIES.has(rawCapability)) {
+                throw new Error(`Unknown Agent capability: ${String(rawCapability)}`);
+            }
+            enabled.push(rawCapability);
+        }
+        return new CapabilitySet(enabled);
+    }
+    /** Missing capability data is the compatibility contract, never an empty set. */
+    static fromConfig(config) {
+        return config.capabilitySet
+            ? CapabilitySet.explicit(config.capabilitySet)
+            : CapabilitySet.legacy({ workspaceEnabled: config.workspaceEnabled });
+    }
+    has(capability) {
+        return this.enabled.has(capability);
+    }
+    /** Client-side defense in depth for a mistakenly over-broad bundle. */
+    filterCredentialBody(body) {
+        return {
+            ...(this.has("tunnel") && body.tunnel !== undefined ? { tunnel: body.tunnel } : {}),
+            ...(this.has("tunnel") && body.tunnelRotation !== undefined
+                ? { tunnelRotation: body.tunnelRotation }
+                : {}),
+            ...(this.has("managed_workspace") && body.google !== undefined ? { google: body.google } : {}),
+            ...(this.has("managed_workspace") && body.zoho !== undefined ? { zoho: body.zoho } : {}),
+            ...(this.has("external_integrations") && body.serpapi !== undefined ? { serpapi: body.serpapi } : {}),
+            ...(this.has("gemini") && body.gemini !== undefined ? { gemini: body.gemini } : {}),
+            ...(body.llmGateway !== undefined ? { llmGateway: body.llmGateway } : {}),
+            ...(this.has("event_trigger") && body.eventTrigger !== undefined
+                ? { eventTrigger: body.eventTrigger }
+                : {}),
+            ...(this.has("messaging_channels") && body.finApp !== undefined ? { finApp: body.finApp } : {}),
+            ...(this.has("external_integrations") && body.financialTool !== undefined
+                ? { financialTool: body.financialTool }
+                : {}),
+        };
+    }
+    /** Unknown admin commands remain compatible only for legacy/full Agents. */
+    allowsPendingCommand(command) {
+        if (command === "upgrade" || command === "upgrade_beta")
+            return this.has("upgrade");
+        if (command === "create_rdp_session") {
+            return this.has("computer_use") && this.has("tunnel");
+        }
+        if (command === "notify")
+            return this.has("messaging_channels");
+        if (["collect_data", "usage", "usage_backfill", "switch_engine"].includes(command)) {
+            return true;
+        }
+        return this.legacyMode;
+    }
+    toJSON() {
+        return {
+            schemaVersion: 1,
+            enabled: canonicalCapabilities([...this.enabled]),
+        };
+    }
+}
+export function hasAgentCapability(config, capability) {
+    return CapabilitySet.fromConfig(config).has(capability);
+}
+//# sourceMappingURL=capabilities.js.map

package/dist/agent/capabilities.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capabilities.js","sourceRoot":"","sources":["../../src/agent/capabilities.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,mBAAmB;IACnB,oBAAoB;IACpB,wBAAwB;IACxB,WAAW;IACX,QAAQ;IACR,QAAQ;IACR,cAAc;IACd,QAAQ;IACR,QAAQ;IACR,aAAa;IACb,SAAS;IACT,eAAe;IACf,uBAAuB;CACf,CAAC;AA2BX,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAS,kBAAkB,CAAC,CAAC;AAE/D,SAAS,qBAAqB,CAAC,MAAkC;IAC/D,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IACjC,OAAO,kBAAkB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,OAAO,aAAa;IACP,OAAO,CAA+B;IACtC,UAAU,CAAU;IAErC,YAAoB,OAAmC,EAAE,UAAU,GAAG,KAAK;QACzE,IAAI,CAAC,OAAO,GAAG,IAAI,GAAG,CAAC,qBAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;QACvD,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,4EAA4E;IAC5E,MAAM,CAAC,MAAM,CAAC,UAA0C,EAAE;QACxD,MAAM,OAAO,GAAG,OAAO,CAAC,gBAAgB,KAAK,KAAK;YAChD,CAAC,CAAC,kBAAkB,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,EAAE,CAAC,UAAU,KAAK,mBAAmB,CAAC;YAC/E,CAAC,CAAC,kBAAkB,CAAC;QACvB,OAAO,IAAI,aAAa,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAC1C,CAAC;IAED,MAAM,CAAC,QAAQ,CAAC,IAA4B;QAC1C,OAAO,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACnC,CAAC;IAED,MAAM,CAAC,KAAK,CAAC,KAAc;QACzB,IAAI,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;YAChE,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;QAC5D,CAAC;QACD,MAAM,IAAI,GAAG,KAAgC,CAAC;QAC9C,IAAI,IAAI,CAAC,aAAa,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,OAAO,CAAC,EAAE,CAAC;YAC7D,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;QACzD,CAAC;QACD,MAAM,OAAO,GAAsB,EAAE,CAAC;QACtC,KAAK,MAAM,aAAa,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;YACzC,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,CAAC,kBAAkB,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,CAAC;gBAChF,MAAM,IAAI,KAAK,CAAC,6BAA6B,MAAM,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC;YACxE,CAAC;YACD,OAAO,CAAC,IAAI,CAAC,aAAgC,CAAC,CAAC;QACjD,CAAC;QACD,OAAO,IAAI,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,CAAC;IAED,iFAAiF;IACjF,MAAM,CAAC,UAAU,CACf,MAA6B;QAE7B,OAAO,MAAM,CAAC,aAAa;YACzB,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,MAAM,CAAC,aAAa,CAAC;YAC9C,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,EAAE,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,EAAE,CAAC,CAAC;IAC1E,CAAC;IAED,GAAG,CAAC,UAA2B;QAC7B,OAAO,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,uEAAuE;IACvE,oBAAoB,CAAqC,IAAO;QAC9D,OAAO;YACL,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,cAAc,KAAK,SAAS;gBACzD,CAAC,CAAC,EAAE,cAAc,EAAE,IAAI,CAAC,cAAc,EAAE;gBACzC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9F,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,mBAAmB,CAAC,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACxF,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACrG,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACnF,GAAG,CAAC,IAAI,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACzE,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,IAAI,CAAC,YAAY,KAAK,SAAS;gBAC9D,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE;gBACrC,CAAC,CAAC,EAAE,CAAC;YACP,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,IAAI,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/F,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,IAAI,CAAC,aAAa,KAAK,SAAS;gBACvE,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE;gBACvC,CAAC,CAAC,EAAE,CAAC;SACM,CAAC;IAClB,CAAC;IAED,4EAA4E;IAC5E,oBAAoB,CAAC,OAAe;QAClC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,cAAc;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACpF,IAAI,OAAO,KAAK,oBAAoB,EAAE,CAAC;YACrC,OAAO,IAAI,CAAC,GAAG,CAAC,cAAc,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QACxD,CAAC;QACD,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,oBAAoB,CAAC,CAAC;QAChE,IAAI,CAAC,cAAc,EAAE,OAAO,EAAE,gBAAgB,EAAE,eAAe,CAAC,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;YACnF,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED,MAAM;QACJ,OAAO;YACL,aAAa,EAAE,CAAC;YAChB,OAAO,EAAE,qBAAqB,CAAC,CAAC,GAAG,IAAI,CAAC,OAAO,CAAC,CAAC;SAClD,CAAC;IACJ,CAAC;CACF;AAED,MAAM,UAAU,kBAAkB,CAChC,MAA6B,EAC7B,UAA2B;IAE3B,OAAO,aAAa,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;AAC1D,CAAC"}

package/dist/agent/credential-backed-surface.d.ts

@@ -13,7 +13,9 @@ export interface CredentialBackedRuntimeSurface {
     finApp: boolean;
     serpApi: boolean;
 }
-export declare function resolveCredentialBackedRuntimeSurface(config: VisionClawConfig): CredentialBackedRuntimeSurface;
+export declare function resolveCredentialBackedRuntimeSurface(config: VisionClawConfig, overrides?: {
+    finApp?: boolean;
+}): CredentialBackedRuntimeSurface;
 /**
  * Opaque revision key for process-lifetime integration wiring. Hashing keeps
  * raw credentials out of the comparison value in case it is logged later.

package/dist/agent/credential-backed-surface.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-backed-surface.d.ts","sourceRoot":"","sources":["../../src/agent/credential-backed-surface.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAS3D;;;;;;;GAOG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,gBAAgB,GACvB,8BAA8B,CAOhC;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAgBR;AAED,iFAAiF;AACjF,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,8BAA8B,GACtC,MAAM,EAAE,CAKV"}
+{"version":3,"file":"credential-backed-surface.d.ts","sourceRoot":"","sources":["../../src/agent/credential-backed-surface.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAC;AAS3D;;;;;;;GAOG;AACH,MAAM,WAAW,8BAA8B;IAC7C,YAAY,EAAE,OAAO,CAAC;IACtB,aAAa,EAAE,OAAO,CAAC;IACvB,MAAM,EAAE,OAAO,CAAC;IAChB,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,qCAAqC,CACnD,MAAM,EAAE,gBAAgB,EACxB,SAAS,GAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAO,GACnC,8BAA8B,CAOhC;AAED;;;GAGG;AACH,wBAAgB,sCAAsC,CACpD,MAAM,EAAE,gBAAgB,GACvB,MAAM,CAgBR;AAED,iFAAiF;AACjF,wBAAgB,iCAAiC,CAC/C,OAAO,EAAE,8BAA8B,GACtC,MAAM,EAAE,CAKV"}

package/dist/agent/credential-backed-surface.js

@@ -3,11 +3,11 @@ import { resolveEventTriggerCredentials } from "../event-trigger-credentials.js"
 import { resolveFinancialToolApiKey, resolveFinancialToolBaseUrl, } from "../financial-tool-credentials.js";
 import { resolveFinAppCredentials } from "../finapp-credentials.js";
 import { resolveSerpApiKey } from "../serpapi-credentials.js";
-export function resolveCredentialBackedRuntimeSurface(config) {
+export function resolveCredentialBackedRuntimeSurface(config, overrides = {}) {
     return {
         eventTrigger: resolveEventTriggerCredentials(config) !== null,
         financialTool: Boolean(resolveFinancialToolApiKey(config)),
-        finApp: resolveFinAppCredentials(config) !== null,
+        finApp: overrides.finApp ?? resolveFinAppCredentials(config) !== null,
         serpApi: Boolean(resolveSerpApiKey(config)),
     };
 }

package/dist/agent/credential-backed-surface.js.map

@@ -1 +1 @@
-{"version":3,"file":"credential-backed-surface.js","sourceRoot":"","sources":["../../src/agent/credential-backed-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAiB9D,MAAM,UAAU,qCAAqC,CACnD,MAAwB;IAExB,OAAO;QACL,YAAY,EAAE,8BAA8B,CAAC,MAAM,CAAC,KAAK,IAAI;QAC7D,aAAa,EAAE,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,EAAE,wBAAwB,CAAC,MAAM,CAAC,KAAK,IAAI;QACjD,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAwB;IAExB,MAAM,YAAY,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,YAAY;QACZ,aAAa,EAAE,mBAAmB;YAChC,CAAC,CAAC;gBACE,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,2BAA2B,CAAC,MAAM,CAAC;aAC7C;YACH,CAAC,CAAC,IAAI;QACR,MAAM;QACN,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI;KAC3C,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iCAAiC,CAC/C,OAAuC;IAEvC,OAAO;QACL,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC"}
+{"version":3,"file":"credential-backed-surface.js","sourceRoot":"","sources":["../../src/agent/credential-backed-surface.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EAAE,8BAA8B,EAAE,MAAM,iCAAiC,CAAC;AACjF,OAAO,EACL,0BAA0B,EAC1B,2BAA2B,GAC5B,MAAM,kCAAkC,CAAC;AAC1C,OAAO,EAAE,wBAAwB,EAAE,MAAM,0BAA0B,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAC;AAiB9D,MAAM,UAAU,qCAAqC,CACnD,MAAwB,EACxB,YAAkC,EAAE;IAEpC,OAAO;QACL,YAAY,EAAE,8BAA8B,CAAC,MAAM,CAAC,KAAK,IAAI;QAC7D,aAAa,EAAE,OAAO,CAAC,0BAA0B,CAAC,MAAM,CAAC,CAAC;QAC1D,MAAM,EAAE,SAAS,CAAC,MAAM,IAAI,wBAAwB,CAAC,MAAM,CAAC,KAAK,IAAI;QACrE,OAAO,EAAE,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC;KAC5C,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sCAAsC,CACpD,MAAwB;IAExB,MAAM,YAAY,GAAG,8BAA8B,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAChD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC,MAAM,CAAC,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC;QAC9B,YAAY;QACZ,aAAa,EAAE,mBAAmB;YAChC,CAAC,CAAC;gBACE,MAAM,EAAE,mBAAmB;gBAC3B,OAAO,EAAE,2BAA2B,CAAC,MAAM,CAAC;aAC7C;YACH,CAAC,CAAC,IAAI;QACR,MAAM;QACN,OAAO,EAAE,iBAAiB,CAAC,MAAM,CAAC,IAAI,IAAI;KAC3C,CAAC,CAAC;IACH,OAAO,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7D,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,iCAAiC,CAC/C,OAAuC;IAEvC,OAAO;QACL,GAAG,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/agent/engines/client-factory.d.ts

@@ -0,0 +1,63 @@
+/**
+ * Factory for creating the correct Anthropic client (direct API vs Bedrock)
+ * and resolving provider-specific model IDs.
+ */
+import Anthropic from "@anthropic-ai/sdk";
+import OpenAI, { AzureOpenAI } from "openai";
+import { type Model, type Provider, type VisionClawConfig } from "../../config/types.js";
+export declare const OPENAI_MODEL = "gpt-5.5";
+export declare const AZURE_OPENAI_API_VERSION = "preview";
+export declare function isOpenAIProvider(provider: Provider): provider is "openai" | "azure-openai";
+/**
+ * True for any GPT-family model (e.g. "gpt-5.5", future "gpt-6", "gpt-5.5-mini").
+ * Routing to the OpenAI Agents SDK only depends on the family, not the exact
+ * version, so we match by prefix instead of pinning to a single literal.
+ */
+export declare function isGptModel(model: Model | undefined): boolean;
+export declare function getProviderLabel(provider: Provider): string;
+export declare function getRuntimeLabel(config: VisionClawConfig): string;
+/**
+ * Create an Anthropic-compatible client based on the provider in the config.
+ *
+ * - `"anthropic"`: uses the direct API with `anthropicApiKey`.
+ * - `"bedrock"`: uses `AnthropicBedrock` with explicit AWS credentials when
+ *   provided, otherwise falls back to the default AWS credential provider chain.
+ */
+export declare function createClient(config: VisionClawConfig): Anthropic;
+export declare function hasProviderCredentials(provider: Provider, config: VisionClawConfig): boolean;
+export declare function createOpenAIClient(config: VisionClawConfig): OpenAI | AzureOpenAI;
+export declare function configureOpenAIProvider(config: VisionClawConfig): void;
+/**
+ * Return the correct model identifier for direct SDK calls
+ * (fast-responder, tool-alarm-evaluator, etc.).
+ *
+ * Agent SDK `query()` calls do NOT need this - the SDK maps models
+ * internally when `CLAUDE_CODE_USE_BEDROCK=1` or `CLAUDE_CODE_USE_VERTEX=1` is set.
+ */
+export declare function getModelId(config: VisionClawConfig): string;
+/**
+ * Return the Sonnet model identifier for lightweight side-calls
+ * (fast-responder, etc.) that don't need the full Opus model.
+ * For non-Claude providers, falls back to the main model.
+ */
+export declare function getFastResponderModelId(config: VisionClawConfig): string;
+/**
+ * Build the `env` record for the Agent SDK `query()` options.
+ *
+ * - Anthropic: passes `ANTHROPIC_API_KEY`.
+ * - Bedrock: passes `CLAUDE_CODE_USE_BEDROCK`, `AWS_REGION`,
+ *   `AWS_BEARER_TOKEN_BEDROCK` (for the Claude Code CLI), and IAM
+ *   credentials when available.
+ * - Vertex: passes `CLAUDE_CODE_USE_VERTEX`, `CLOUD_ML_REGION`,
+ *   and `GOOGLE_APPLICATION_CREDENTIALS` for service account auth.
+ */
+export declare function buildAgentEnv(config: VisionClawConfig): Record<string, string | undefined>;
+/**
+ * Start the API logging proxy if running in dev mode with the Anthropic
+ * or 9Router provider.  No-ops (and returns immediately) in production,
+ * for Bedrock (which bypasses ANTHROPIC_BASE_URL), or for OpenAI providers.
+ *
+ * Call once at startup, before the first `buildAgentEnv()` call.
+ */
+export declare function maybeStartApiProxy(config: VisionClawConfig): Promise<void>;
+//# sourceMappingURL=client-factory.d.ts.map

package/dist/agent/engines/client-factory.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-factory.d.ts","sourceRoot":"","sources":["../../../src/agent/engines/client-factory.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,SAAS,MAAM,mBAAmB,CAAC;AAG1C,OAAO,MAAM,EAAE,EAAE,WAAW,EAAE,MAAM,QAAQ,CAAC;AAE7C,OAAO,EAEL,KAAK,KAAK,EACV,KAAK,QAAQ,EACb,KAAK,gBAAgB,EACtB,MAAM,uBAAuB,CAAC;AAqB/B,eAAO,MAAM,YAAY,YAAY,CAAC;AACtC,eAAO,MAAM,wBAAwB,YAAY,CAAC;AAElD,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE,QAAQ,GACjB,QAAQ,IAAI,QAAQ,GAAG,cAAc,CAEvC;AAED;;;;GAIG;AACH,wBAAgB,UAAU,CAAC,KAAK,EAAE,KAAK,GAAG,SAAS,GAAG,OAAO,CAE5D;AAED,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,QAAQ,GAAG,MAAM,CAe3D;AAED,wBAAgB,eAAe,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAWhE;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,CA4ChE;AAED,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAkB5F;AAED,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,GAAG,WAAW,CA2BjF;AAED,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAkBtE;AAED;;;;;;GAMG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAuB3D;AAED;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAOxE;AAED;;;;;;;;;GASG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,gBAAgB,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC,CAsI1F;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,IAAI,CAAC,CAgBhF"}