wotann 0.5.0

package/dist/providers/capability-fingerprint.js

@@ -0,0 +1,227 @@
+/**
+ * Provider Capability Fingerprinting — dynamic capability detection per model.
+ *
+ * Instead of hardcoding what each model can do, WOTANN probes models
+ * at session start with lightweight capability tests and builds a
+ * provider-specific capability map.
+ *
+ * This enables WOTANN to:
+ * 1. Route tasks to the most capable model (e.g., structured output → GPT-5.4)
+ * 2. Fall back gracefully when a capability is missing
+ * 3. Detect new capabilities as models are updated
+ * 4. Generate provider-specific prompts that leverage unique strengths
+ *
+ * Wave DH-1: scoped per-provider model id consts. The STATIC_CAPABILITIES
+ * keys embed `provider:model` ids — keep the model halves in named consts
+ * so future bumps stay in one block.
+ */
+// Anthropic-native namespace ids used in static capability keys.
+const ANTHROPIC_OPUS = "claude-opus-4-7";
+const ANTHROPIC_SONNET = "claude-sonnet-4-7";
+// ── Probes ───────────────────────────────────────────────
+const CAPABILITY_PROBES = [
+    {
+        id: "structured-output",
+        name: "Structured Output (JSON)",
+        testPrompt: "Return only a JSON object with keys 'name' (string) and 'age' (number). No other text.",
+        expectedPattern: /\{[^}]*"name"\s*:\s*"[^"]*"\s*,\s*"age"\s*:\s*\d+[^}]*\}/,
+        timeoutMs: 10_000,
+    },
+    {
+        id: "extended-thinking",
+        name: "Extended Thinking",
+        testPrompt: "Think step by step about what 2+2 equals, show your reasoning.",
+        expectedPattern: /\b(think|step|reason)\b/i,
+        timeoutMs: 15_000,
+    },
+    {
+        id: "code-execution",
+        name: "Code Execution",
+        testPrompt: "Execute this Python code and return the result: print(2**10)",
+        expectedPattern: /1024/,
+        timeoutMs: 30_000,
+    },
+];
+// ── Static Capabilities (known from docs, no probing needed) ──
+const STATIC_CAPABILITIES = {
+    [`anthropic:${ANTHROPIC_OPUS}`]: [
+        "tool-calling",
+        "vision",
+        "extended-thinking",
+        "computer-use",
+        "prompt-caching",
+        "streaming",
+        "system-prompt",
+        "temperature-control",
+        "stop-sequences",
+        "parallel-tool-calls",
+        "multi-modal",
+    ],
+    [`anthropic:${ANTHROPIC_SONNET}`]: [
+        "tool-calling",
+        "vision",
+        "extended-thinking",
+        "computer-use",
+        "prompt-caching",
+        "streaming",
+        "system-prompt",
+        "temperature-control",
+        "stop-sequences",
+        "parallel-tool-calls",
+        "multi-modal",
+    ],
+    "openai:gpt-5.4": [
+        "structured-output",
+        "tool-calling",
+        "vision",
+        "streaming",
+        "json-mode",
+        "code-execution",
+        "web-search",
+        "function-calling",
+        "multi-modal",
+        "audio-input",
+        "audio-output",
+        "system-prompt",
+        "temperature-control",
+        "stop-sequences",
+        "logprobs",
+        "parallel-tool-calls",
+        "embeddings",
+        "fine-tuning",
+    ],
+    "gemini:gemini-2.5-pro": [
+        "structured-output",
+        "tool-calling",
+        "vision",
+        "streaming",
+        "json-mode",
+        "code-execution",
+        "multi-modal",
+        "system-prompt",
+        "temperature-control",
+        "prompt-caching",
+    ],
+    "ollama:qwen3-coder-next": [
+        "tool-calling",
+        "streaming",
+        "system-prompt",
+        "temperature-control",
+        "stop-sequences",
+    ],
+};
+export class CapabilityFingerprinter {
+    fingerprints = new Map();
+    /**
+     * Get a fingerprint from cache or generate a static one.
+     */
+    getFingerprint(provider, model) {
+        const key = `${provider}:${model}`;
+        const cached = this.fingerprints.get(key);
+        if (cached)
+            return cached;
+        // Use static capabilities
+        const staticCaps = STATIC_CAPABILITIES[key] ?? [];
+        const capabilities = CAPABILITY_PROBES.map((probe) => ({
+            id: probe.id,
+            supported: staticCaps.includes(probe.id),
+            confidence: staticCaps.includes(probe.id) ? 1.0 : 0.0,
+            latencyMs: 0,
+            notes: staticCaps.includes(probe.id) ? "Static - from known capabilities" : "Not detected",
+        }));
+        // Add static-only capabilities not in probes
+        for (const capId of staticCaps) {
+            if (!capabilities.some((c) => c.id === capId)) {
+                capabilities.push({
+                    id: capId,
+                    supported: true,
+                    confidence: 1.0,
+                    latencyMs: 0,
+                    notes: "Static - from known capabilities",
+                });
+            }
+        }
+        const fingerprint = {
+            provider,
+            model,
+            capabilities,
+            probedAt: new Date().toISOString(),
+            totalProbeTimeMs: 0,
+        };
+        this.fingerprints.set(key, fingerprint);
+        return fingerprint;
+    }
+    /**
+     * Probe a model for a specific capability.
+     */
+    async probeCapability(provider, model, capabilityId, executor) {
+        const probe = CAPABILITY_PROBES.find((p) => p.id === capabilityId);
+        if (!probe) {
+            return {
+                id: capabilityId,
+                supported: false,
+                confidence: 0,
+                latencyMs: 0,
+                notes: "No probe defined",
+            };
+        }
+        const start = Date.now();
+        try {
+            const response = await Promise.race([
+                executor(probe.testPrompt),
+                new Promise((_, reject) => setTimeout(() => reject(new Error("timeout")), probe.timeoutMs)),
+            ]);
+            const latencyMs = Date.now() - start;
+            const supported = probe.expectedPattern.test(response);
+            return {
+                id: capabilityId,
+                supported,
+                confidence: supported ? 0.9 : 0.1,
+                latencyMs,
+                notes: supported ? "Probe passed" : "Probe failed - pattern not matched",
+            };
+        }
+        catch {
+            return {
+                id: capabilityId,
+                supported: false,
+                confidence: 0,
+                latencyMs: Date.now() - start,
+                notes: "Probe timed out or errored",
+            };
+        }
+    }
+    /**
+     * Check if a provider/model supports a specific capability.
+     */
+    hasCapability(provider, model, capabilityId) {
+        const fingerprint = this.getFingerprint(provider, model);
+        return fingerprint.capabilities.some((c) => c.id === capabilityId && c.supported);
+    }
+    /**
+     * Find the best model for a specific capability across all fingerprinted providers.
+     */
+    bestModelForCapability(capabilityId) {
+        for (const [, fingerprint] of this.fingerprints) {
+            const cap = fingerprint.capabilities.find((c) => c.id === capabilityId);
+            if (cap?.supported) {
+                return { provider: fingerprint.provider, model: fingerprint.model };
+            }
+        }
+        // Check static capabilities as fallback
+        for (const [key, caps] of Object.entries(STATIC_CAPABILITIES)) {
+            if (caps.includes(capabilityId)) {
+                const [provider, model] = key.split(":");
+                return { provider: provider, model: model };
+            }
+        }
+        return null;
+    }
+    /**
+     * Get all probes for testing.
+     */
+    getProbes() {
+        return CAPABILITY_PROBES;
+    }
+}
+//# sourceMappingURL=capability-fingerprint.js.map

package/dist/providers/capability-fingerprint.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"capability-fingerprint.js","sourceRoot":"","sources":["../../src/providers/capability-fingerprint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,iEAAiE;AACjE,MAAM,cAAc,GAAG,iBAAiB,CAAC;AACzC,MAAM,gBAAgB,GAAG,mBAAmB,CAAC;AAkD7C,4DAA4D;AAE5D,MAAM,iBAAiB,GAA+B;IACpD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,0BAA0B;QAChC,UAAU,EACR,wFAAwF;QAC1F,eAAe,EAAE,0DAA0D;QAC3E,SAAS,EAAE,MAAM;KAClB;IACD;QACE,EAAE,EAAE,mBAAmB;QACvB,IAAI,EAAE,mBAAmB;QACzB,UAAU,EAAE,gEAAgE;QAC5E,eAAe,EAAE,0BAA0B;QAC3C,SAAS,EAAE,MAAM;KAClB;IACD;QACE,EAAE,EAAE,gBAAgB;QACpB,IAAI,EAAE,gBAAgB;QACtB,UAAU,EAAE,8DAA8D;QAC1E,eAAe,EAAE,MAAM;QACvB,SAAS,EAAE,MAAM;KAClB;CACF,CAAC;AAEF,iEAAiE;AAEjE,MAAM,mBAAmB,GAA4C;IACnE,CAAC,aAAa,cAAc,EAAE,CAAC,EAAE;QAC/B,cAAc;QACd,QAAQ;QACR,mBAAmB;QACnB,cAAc;QACd,gBAAgB;QAChB,WAAW;QACX,eAAe;QACf,qBAAqB;QACrB,gBAAgB;QAChB,qBAAqB;QACrB,aAAa;KACd;IACD,CAAC,aAAa,gBAAgB,EAAE,CAAC,EAAE;QACjC,cAAc;QACd,QAAQ;QACR,mBAAmB;QACnB,cAAc;QACd,gBAAgB;QAChB,WAAW;QACX,eAAe;QACf,qBAAqB;QACrB,gBAAgB;QAChB,qBAAqB;QACrB,aAAa;KACd;IACD,gBAAgB,EAAE;QAChB,mBAAmB;QACnB,cAAc;QACd,QAAQ;QACR,WAAW;QACX,WAAW;QACX,gBAAgB;QAChB,YAAY;QACZ,kBAAkB;QAClB,aAAa;QACb,aAAa;QACb,cAAc;QACd,eAAe;QACf,qBAAqB;QACrB,gBAAgB;QAChB,UAAU;QACV,qBAAqB;QACrB,YAAY;QACZ,aAAa;KACd;IACD,uBAAuB,EAAE;QACvB,mBAAmB;QACnB,cAAc;QACd,QAAQ;QACR,WAAW;QACX,WAAW;QACX,gBAAgB;QAChB,aAAa;QACb,eAAe;QACf,qBAAqB;QACrB,gBAAgB;KACjB;IACD,yBAAyB,EAAE;QACzB,cAAc;QACd,WAAW;QACX,eAAe;QACf,qBAAqB;QACrB,gBAAgB;KACjB;CACF,CAAC;AAEF,MAAM,OAAO,uBAAuB;IACjB,YAAY,GAAqC,IAAI,GAAG,EAAE,CAAC;IAE5E;;OAEG;IACH,cAAc,CAAC,QAAgB,EAAE,KAAa;QAC5C,MAAM,GAAG,GAAG,GAAG,QAAQ,IAAI,KAAK,EAAE,CAAC;QACnC,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC1C,IAAI,MAAM;YAAE,OAAO,MAAM,CAAC;QAE1B,0BAA0B;QAC1B,MAAM,UAAU,GAAG,mBAAmB,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC;QAClD,MAAM,YAAY,GAAuB,iBAAiB,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;YACzE,EAAE,EAAE,KAAK,CAAC,EAAE;YACZ,SAAS,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YACxC,UAAU,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YACrD,SAAS,EAAE,CAAC;YACZ,KAAK,EAAE,UAAU,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,kCAAkC,CAAC,CAAC,CAAC,cAAc;SAC3F,CAAC,CAAC,CAAC;QAEJ,6CAA6C;QAC7C,KAAK,MAAM,KAAK,IAAI,UAAU,EAAE,CAAC;YAC/B,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,KAAK,CAAC,EAAE,CAAC;gBAC9C,YAAY,CAAC,IAAI,CAAC;oBAChB,EAAE,EAAE,KAAK;oBACT,SAAS,EAAE,IAAI;oBACf,UAAU,EAAE,GAAG;oBACf,SAAS,EAAE,CAAC;oBACZ,KAAK,EAAE,kCAAkC;iBAC1C,CAAC,CAAC;YACL,CAAC;QACH,CAAC;QAED,MAAM,WAAW,GAAwB;YACvC,QAAQ;YACR,KAAK;YACL,YAAY;YACZ,QAAQ,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;YAClC,gBAAgB,EAAE,CAAC;SACpB,CAAC;QAEF,IAAI,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACxC,OAAO,WAAW,CAAC;IACrB,CAAC;IAED;;OAEG;IACH,KAAK,CAAC,eAAe,CACnB,QAAgB,EAChB,KAAa,EACb,YAA0B,EAC1B,QAA6C;QAE7C,MAAM,KAAK,GAAG,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;QACnE,IAAI,CAAC,KAAK,EAAE,CAAC;YACX,OAAO;gBACL,EAAE,EAAE,YAAY;gBAChB,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,CAAC;gBACZ,KAAK,EAAE,kBAAkB;aAC1B,CAAC;QACJ,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QACzB,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC;gBAClC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;gBAC1B,IAAI,OAAO,CAAS,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,CAChC,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,SAAS,CAAC,CAChE;aACF,CAAC,CAAC;YAEH,MAAM,SAAS,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;YACrC,MAAM,SAAS,GAAG,KAAK,CAAC,eAAe,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;YAEvD,OAAO;gBACL,EAAE,EAAE,YAAY;gBAChB,SAAS;gBACT,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;gBACjC,SAAS;gBACT,KAAK,EAAE,SAAS,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,oCAAoC;aACzE,CAAC;QACJ,CAAC;QAAC,MAAM,CAAC;YACP,OAAO;gBACL,EAAE,EAAE,YAAY;gBAChB,SAAS,EAAE,KAAK;gBAChB,UAAU,EAAE,CAAC;gBACb,SAAS,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK;gBAC7B,KAAK,EAAE,4BAA4B;aACpC,CAAC;QACJ,CAAC;IACH,CAAC;IAED;;OAEG;IACH,aAAa,CAAC,QAAgB,EAAE,KAAa,EAAE,YAA0B;QACvE,MAAM,WAAW,GAAG,IAAI,CAAC,cAAc,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACzD,OAAO,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,IAAI,CAAC,CAAC,SAAS,CAAC,CAAC;IACpF,CAAC;IAED;;OAEG;IACH,sBAAsB,CAAC,YAA0B;QAC/C,KAAK,MAAM,CAAC,EAAE,WAAW,CAAC,IAAI,IAAI,CAAC,YAAY,EAAE,CAAC;YAChD,MAAM,GAAG,GAAG,WAAW,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,YAAY,CAAC,CAAC;YACxE,IAAI,GAAG,EAAE,SAAS,EAAE,CAAC;gBACnB,OAAO,EAAE,QAAQ,EAAE,WAAW,CAAC,QAAQ,EAAE,KAAK,EAAE,WAAW,CAAC,KAAK,EAAE,CAAC;YACtE,CAAC;QACH,CAAC;QAED,wCAAwC;QACxC,KAAK,MAAM,CAAC,GAAG,EAAE,IAAI,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAE,CAAC;YAC9D,IAAI,IAAI,CAAC,QAAQ,CAAC,YAAY,CAAC,EAAE,CAAC;gBAChC,MAAM,CAAC,QAAQ,EAAE,KAAK,CAAC,GAAG,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;gBACzC,OAAO,EAAE,QAAQ,EAAE,QAAS,EAAE,KAAK,EAAE,KAAM,EAAE,CAAC;YAChD,CAAC;QACH,CAAC;QAED,OAAO,IAAI,CAAC;IACd,CAAC;IAED;;OAEG;IACH,SAAS;QACP,OAAO,iBAAiB,CAAC;IAC3B,CAAC;CACF"}

package/dist/providers/circuit-breaker.d.ts

@@ -0,0 +1,65 @@
+/**
+ * Circuit breaker for provider health.
+ *
+ * Prevents thundering-herd retries when a provider is down. Three
+ * states:
+ *   - CLOSED:    requests flow normally, failures tracked in rolling window
+ *   - OPEN:      requests fail fast (no I/O), auto-transitions to HALF_OPEN
+ *                after cooldown
+ *   - HALF_OPEN: limited probe requests allowed; success → CLOSED;
+ *                failure → OPEN
+ *
+ * Tripping rule: if failure rate ≥ threshold AND request count ≥ minimum
+ * within the rolling window, open the circuit.
+ *
+ * This pairs with retry-strategies.ts: retries happen BEFORE hitting
+ * the breaker; the breaker decides whether to attempt at all.
+ */
+export type BreakerState = "closed" | "open" | "half-open";
+export interface BreakerConfig {
+    /** Failure rate (0-1) at which to trip. Default 0.5. */
+    readonly failureThreshold?: number;
+    /** Min requests in window before tripping is possible. Default 10. */
+    readonly minRequests?: number;
+    /** Rolling window duration in ms. Default 60_000. */
+    readonly windowMs?: number;
+    /** Cooldown in OPEN state before half-open probe. Default 30_000. */
+    readonly openDurationMs?: number;
+    /** Success count in half-open needed to close. Default 2. */
+    readonly probeSuccessesRequired?: number;
+    /** Inject time source. Default Date.now. */
+    readonly now?: () => number;
+}
+export interface BreakerStats {
+    readonly state: BreakerState;
+    readonly requestCount: number;
+    readonly failureCount: number;
+    readonly successCount: number;
+    readonly failureRate: number;
+    readonly openedAt: number | null;
+}
+export declare class CircuitBreaker {
+    private state;
+    private openedAt;
+    private history;
+    private halfOpenSuccessCount;
+    private readonly config;
+    constructor(config?: BreakerConfig);
+    /**
+     * Should we allow a request through? Also auto-transitions from
+     * open → half-open when cooldown expires.
+     */
+    canRequest(): boolean;
+    /** Record a successful request. */
+    recordSuccess(): void;
+    /** Record a failed request. */
+    recordFailure(): void;
+    /** Manually reset to closed state (e.g. after deploying a fix). */
+    reset(): void;
+    /** Current breaker state. */
+    getState(): BreakerState;
+    stats(): BreakerStats;
+    private pruneHistory;
+}
+export declare function withBreaker<T>(fn: () => Promise<T>, breaker: CircuitBreaker): Promise<T>;
+//# sourceMappingURL=circuit-breaker.d.ts.map

package/dist/providers/circuit-breaker.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.d.ts","sourceRoot":"","sources":["../../src/providers/circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAIH,MAAM,MAAM,YAAY,GAAG,QAAQ,GAAG,MAAM,GAAG,WAAW,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,wDAAwD;IACxD,QAAQ,CAAC,gBAAgB,CAAC,EAAE,MAAM,CAAC;IACnC,sEAAsE;IACtE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;IAC9B,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,qEAAqE;IACrE,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,4CAA4C;IAC5C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,KAAK,EAAE,YAAY,CAAC;IAC7B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CAClC;AASD,qBAAa,cAAc;IACzB,OAAO,CAAC,KAAK,CAA0B;IACvC,OAAO,CAAC,QAAQ,CAAuB;IACvC,OAAO,CAAC,OAAO,CAAqB;IACpC,OAAO,CAAC,oBAAoB,CAAK;IACjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAA+D;gBAE1E,MAAM,GAAE,aAAkB;IAWtC;;;OAGG;IACH,UAAU,IAAI,OAAO;IAkBrB,mCAAmC;IACnC,aAAa,IAAI,IAAI;IAiBrB,+BAA+B;IAC/B,aAAa,IAAI,IAAI;IAwBrB,mEAAmE;IACnE,KAAK,IAAI,IAAI;IAOb,6BAA6B;IAC7B,QAAQ,IAAI,YAAY;IAKxB,KAAK,IAAI,YAAY;IAerB,OAAO,CAAC,YAAY;CAIrB;AAID,wBAAsB,WAAW,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,cAAc,GAAG,OAAO,CAAC,CAAC,CAAC,CAY9F"}

package/dist/providers/circuit-breaker.js

@@ -0,0 +1,137 @@
+/**
+ * Circuit breaker for provider health.
+ *
+ * Prevents thundering-herd retries when a provider is down. Three
+ * states:
+ *   - CLOSED:    requests flow normally, failures tracked in rolling window
+ *   - OPEN:      requests fail fast (no I/O), auto-transitions to HALF_OPEN
+ *                after cooldown
+ *   - HALF_OPEN: limited probe requests allowed; success → CLOSED;
+ *                failure → OPEN
+ *
+ * Tripping rule: if failure rate ≥ threshold AND request count ≥ minimum
+ * within the rolling window, open the circuit.
+ *
+ * This pairs with retry-strategies.ts: retries happen BEFORE hitting
+ * the breaker; the breaker decides whether to attempt at all.
+ */
+export class CircuitBreaker {
+    state = "closed";
+    openedAt = null;
+    history = [];
+    halfOpenSuccessCount = 0;
+    config;
+    constructor(config = {}) {
+        this.config = {
+            failureThreshold: config.failureThreshold ?? 0.5,
+            minRequests: config.minRequests ?? 10,
+            windowMs: config.windowMs ?? 60_000,
+            openDurationMs: config.openDurationMs ?? 30_000,
+            probeSuccessesRequired: config.probeSuccessesRequired ?? 2,
+            now: config.now ?? (() => Date.now()),
+        };
+    }
+    /**
+     * Should we allow a request through? Also auto-transitions from
+     * open → half-open when cooldown expires.
+     */
+    canRequest() {
+        this.pruneHistory();
+        const now = this.config.now();
+        if (this.state === "open") {
+            if (this.openedAt !== null && now - this.openedAt >= this.config.openDurationMs) {
+                // Transition to half-open
+                this.state = "half-open";
+                this.halfOpenSuccessCount = 0;
+                return true;
+            }
+            return false;
+        }
+        // closed or half-open → allow
+        return true;
+    }
+    /** Record a successful request. */
+    recordSuccess() {
+        this.history.push({ at: this.config.now(), success: true });
+        this.pruneHistory();
+        if (this.state === "half-open") {
+            this.halfOpenSuccessCount++;
+            if (this.halfOpenSuccessCount >= this.config.probeSuccessesRequired) {
+                // Recovery confirmed — close the circuit
+                this.state = "closed";
+                this.openedAt = null;
+                this.halfOpenSuccessCount = 0;
+                // Reset history to avoid old failures re-tripping immediately
+                this.history = [];
+            }
+        }
+    }
+    /** Record a failed request. */
+    recordFailure() {
+        const now = this.config.now();
+        this.history.push({ at: now, success: false });
+        this.pruneHistory();
+        if (this.state === "half-open") {
+            // Single failure in half-open → reopen
+            this.state = "open";
+            this.openedAt = now;
+            this.halfOpenSuccessCount = 0;
+            return;
+        }
+        if (this.state === "closed") {
+            // Check if we should trip
+            const count = this.history.length;
+            const failures = this.history.filter((e) => !e.success).length;
+            if (count >= this.config.minRequests && failures / count >= this.config.failureThreshold) {
+                this.state = "open";
+                this.openedAt = now;
+            }
+        }
+    }
+    /** Manually reset to closed state (e.g. after deploying a fix). */
+    reset() {
+        this.state = "closed";
+        this.openedAt = null;
+        this.halfOpenSuccessCount = 0;
+        this.history = [];
+    }
+    /** Current breaker state. */
+    getState() {
+        this.pruneHistory();
+        return this.state;
+    }
+    stats() {
+        this.pruneHistory();
+        const count = this.history.length;
+        const failures = this.history.filter((e) => !e.success).length;
+        const successes = count - failures;
+        return {
+            state: this.state,
+            requestCount: count,
+            failureCount: failures,
+            successCount: successes,
+            failureRate: count > 0 ? failures / count : 0,
+            openedAt: this.openedAt,
+        };
+    }
+    pruneHistory() {
+        const cutoff = this.config.now() - this.config.windowMs;
+        this.history = this.history.filter((e) => e.at >= cutoff);
+    }
+}
+// ── Runner wrapper ────────────────────────────────────
+export async function withBreaker(fn, breaker) {
+    if (!breaker.canRequest()) {
+        throw new Error("CircuitBreaker: circuit is OPEN — failing fast");
+    }
+    try {
+        const result = await fn();
+        breaker.recordSuccess();
+        return result;
+    }
+    catch (err) {
+        breaker.recordFailure();
+        throw err;
+    }
+}
+//# sourceMappingURL=circuit-breaker.js.map

package/dist/providers/circuit-breaker.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"circuit-breaker.js","sourceRoot":"","sources":["../../src/providers/circuit-breaker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAqCH,MAAM,OAAO,cAAc;IACjB,KAAK,GAAiB,QAAQ,CAAC;IAC/B,QAAQ,GAAkB,IAAI,CAAC;IAC/B,OAAO,GAAkB,EAAE,CAAC;IAC5B,oBAAoB,GAAG,CAAC,CAAC;IAChB,MAAM,CAA+D;IAEtF,YAAY,SAAwB,EAAE;QACpC,IAAI,CAAC,MAAM,GAAG;YACZ,gBAAgB,EAAE,MAAM,CAAC,gBAAgB,IAAI,GAAG;YAChD,WAAW,EAAE,MAAM,CAAC,WAAW,IAAI,EAAE;YACrC,QAAQ,EAAE,MAAM,CAAC,QAAQ,IAAI,MAAM;YACnC,cAAc,EAAE,MAAM,CAAC,cAAc,IAAI,MAAM;YAC/C,sBAAsB,EAAE,MAAM,CAAC,sBAAsB,IAAI,CAAC;YAC1D,GAAG,EAAE,MAAM,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;SACtC,CAAC;IACJ,CAAC;IAED;;;OAGG;IACH,UAAU;QACR,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAE9B,IAAI,IAAI,CAAC,KAAK,KAAK,MAAM,EAAE,CAAC;YAC1B,IAAI,IAAI,CAAC,QAAQ,KAAK,IAAI,IAAI,GAAG,GAAG,IAAI,CAAC,QAAQ,IAAI,IAAI,CAAC,MAAM,CAAC,cAAc,EAAE,CAAC;gBAChF,0BAA0B;gBAC1B,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC;gBACzB,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC;gBAC9B,OAAO,IAAI,CAAC;YACd,CAAC;YACD,OAAO,KAAK,CAAC;QACf,CAAC;QAED,8BAA8B;QAC9B,OAAO,IAAI,CAAC;IACd,CAAC;IAED,mCAAmC;IACnC,aAAa;QACX,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QAC5D,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,oBAAoB,EAAE,CAAC;YAC5B,IAAI,IAAI,CAAC,oBAAoB,IAAI,IAAI,CAAC,MAAM,CAAC,sBAAsB,EAAE,CAAC;gBACpE,yCAAyC;gBACzC,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;gBACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;gBACrB,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC;gBAC9B,8DAA8D;gBAC9D,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;YACpB,CAAC;QACH,CAAC;IACH,CAAC;IAED,+BAA+B;IAC/B,aAAa;QACX,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,CAAC;QAC9B,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC,CAAC;QAC/C,IAAI,CAAC,YAAY,EAAE,CAAC;QAEpB,IAAI,IAAI,CAAC,KAAK,KAAK,WAAW,EAAE,CAAC;YAC/B,uCAAuC;YACvC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;YACpB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;YACpB,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC;YAC9B,OAAO;QACT,CAAC;QAED,IAAI,IAAI,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;YAC5B,0BAA0B;YAC1B,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;YAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;YAC/D,IAAI,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,WAAW,IAAI,QAAQ,GAAG,KAAK,IAAI,IAAI,CAAC,MAAM,CAAC,gBAAgB,EAAE,CAAC;gBACzF,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC;gBACpB,IAAI,CAAC,QAAQ,GAAG,GAAG,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,mEAAmE;IACnE,KAAK;QACH,IAAI,CAAC,KAAK,GAAG,QAAQ,CAAC;QACtB,IAAI,CAAC,QAAQ,GAAG,IAAI,CAAC;QACrB,IAAI,CAAC,oBAAoB,GAAG,CAAC,CAAC;QAC9B,IAAI,CAAC,OAAO,GAAG,EAAE,CAAC;IACpB,CAAC;IAED,6BAA6B;IAC7B,QAAQ;QACN,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,KAAK;QACH,IAAI,CAAC,YAAY,EAAE,CAAC;QACpB,MAAM,KAAK,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC;QAClC,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC;QAC/D,MAAM,SAAS,GAAG,KAAK,GAAG,QAAQ,CAAC;QACnC,OAAO;YACL,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,YAAY,EAAE,KAAK;YACnB,YAAY,EAAE,QAAQ;YACtB,YAAY,EAAE,SAAS;YACvB,WAAW,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;YAC7C,QAAQ,EAAE,IAAI,CAAC,QAAQ;SACxB,CAAC;IACJ,CAAC;IAEO,YAAY;QAClB,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC;QACxD,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,MAAM,CAAC,CAAC;IAC5D,CAAC;CACF;AAED,yDAAyD;AAEzD,MAAM,CAAC,KAAK,UAAU,WAAW,CAAI,EAAoB,EAAE,OAAuB;IAChF,IAAI,CAAC,OAAO,CAAC,UAAU,EAAE,EAAE,CAAC;QAC1B,MAAM,IAAI,KAAK,CAAC,gDAAgD,CAAC,CAAC;IACpE,CAAC;IACD,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,EAAE,CAAC;QAC1B,OAAO,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,CAAC,aAAa,EAAE,CAAC;QACxB,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}

package/dist/providers/claude-cli-backend.d.ts

@@ -0,0 +1,213 @@
+/**
+ * claude-cli-backend — spawns the `claude` binary as a subprocess, parses
+ * stream-json, and lets the binary own its own credentials.
+ *
+ * Follows the pattern OpenClaw documents as sanctioned (per
+ * docs.openclaw.ai/concepts/oauth + FAQ). NOT a claim that this usage is
+ * "Anthropic-sanctioned" — that's OpenClaw's hedged wording, not ours to
+ * strengthen.
+ *
+ * Key architectural invariant: WOTANN never sends a Claude subscription
+ * access token to api.anthropic.com itself. Only the `claude` binary does,
+ * exactly the same way a shell-invoked `claude -p` does. WOTANN is a
+ * launcher + parser, not an authentication broker. `readClaudeCliCredentials`
+ * is DISPLAY-ONLY — the returned `accessTokenPreview` is an 8-char prefix
+ * for onboarding expiry badges and must never be shipped as an
+ * Authorization header.
+ *
+ * Replaces src/providers/anthropic-subscription.ts (self-token-using
+ * antipattern deleted per V9 T0.1).
+ *
+ * Wave DH-1: scoped per-provider consts. When Anthropic ships new versions,
+ * this single block updates everywhere this adapter references them.
+ */
+import type { ProviderAdapter } from "./types.js";
+/**
+ * 38 env vars that MUST be deleted from the child process environment
+ * before `spawn("claude", ...)`. Source: OpenClaw@main
+ * extensions/anthropic/cli-shared.ts:50-89 (MIT-licensed, reproduced
+ * verbatim).
+ *
+ * Rationale:
+ * - ANTHROPIC_* API_KEY / TOKEN vars would cause the CLI to bypass the
+ *   subscription session and bill against a raw API key.
+ * - CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST is a host-managed marker — if
+ *   left set, the run counts against the hosting provider's tier, NOT
+ *   the user's subscription quota. This was the single highest-impact
+ *   miss before V9 closure.
+ * - CLAUDE_CONFIG_DIR would redirect the CLI's settings to a wrong path.
+ * - OTEL_* vars would cross-contaminate WOTANN telemetry with CLI spans.
+ */
+export declare const CLAUDE_CLI_CLEAR_ENV: readonly ["ANTHROPIC_API_KEY", "ANTHROPIC_API_KEY_OLD", "ANTHROPIC_API_TOKEN", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_BASE_URL", "ANTHROPIC_CUSTOM_HEADERS", "ANTHROPIC_OAUTH_TOKEN", "ANTHROPIC_UNIX_SOCKET", "CLAUDE_CONFIG_DIR", "CLAUDE_CODE_API_KEY_FILE_DESCRIPTOR", "CLAUDE_CODE_ENTRYPOINT", "CLAUDE_CODE_OAUTH_REFRESH_TOKEN", "CLAUDE_CODE_OAUTH_SCOPES", "CLAUDE_CODE_OAUTH_TOKEN", "CLAUDE_CODE_OAUTH_TOKEN_FILE_DESCRIPTOR", "CLAUDE_CODE_PLUGIN_CACHE_DIR", "CLAUDE_CODE_PLUGIN_SEED_DIR", "CLAUDE_CODE_REMOTE", "CLAUDE_CODE_USE_BEDROCK", "CLAUDE_CODE_USE_FOUNDRY", "CLAUDE_CODE_USE_VERTEX", "CLAUDE_CODE_USE_COWORK_PLUGINS", "CLAUDE_CODE_PROVIDER_MANAGED_BY_HOST", "OTEL_SERVICE_NAME", "OTEL_RESOURCE_ATTRIBUTES", "OTEL_EXPORTER_OTLP_ENDPOINT", "OTEL_EXPORTER_OTLP_HEADERS", "OTEL_EXPORTER_OTLP_PROTOCOL", "OTEL_EXPORTER_OTLP_TIMEOUT", "OTEL_TRACES_EXPORTER", "OTEL_METRICS_EXPORTER", "OTEL_LOGS_EXPORTER", "OTEL_TRACES_SAMPLER", "OTEL_TRACES_SAMPLER_ARG", "OTEL_METRIC_EXPORT_INTERVAL", "OTEL_METRIC_EXPORT_TIMEOUT", "OTEL_LOG_LEVEL", "OTEL_PROPAGATORS", "OTEL_SPAN_ATTRIBUTE_VALUE_LENGTH_LIMIT", "OTEL_SPAN_ATTRIBUTE_COUNT_LIMIT", "HTTP_PROXY", "HTTPS_PROXY", "ALL_PROXY", "NO_PROXY", "http_proxy", "https_proxy", "all_proxy", "no_proxy", "NODE_OPTIONS", "NODE_EXTRA_CA_CERTS", "NODE_TLS_REJECT_UNAUTHORIZED", "SSL_CERT_FILE", "SSL_CERT_DIR", "REQUESTS_CA_BUNDLE", "CURL_CA_BUNDLE", "npm_config_proxy", "npm_config_https_proxy", "npm_config_http_proxy", "npm_config_registry", "npm_config_strict_ssl", "npm_config_cafile"];
+export interface ClaudeCredential {
+    readonly type: "oauth" | "token";
+    /**
+     * 8-char prefix of the access token — for display in the expiry badge
+     * only. NEVER ship as an Authorization header anywhere. Not suitable
+     * for authentication; only for showing the user which session is
+     * active.
+     */
+    readonly accessTokenPreview?: string;
+    /** Unix epoch milliseconds; undefined if not present in source. */
+    readonly expiresAt?: number;
+    readonly source: "keychain" | "file";
+}
+export interface ClaudeInvokeOptions {
+    readonly prompt: string;
+    readonly model: "opus" | "sonnet" | "haiku";
+    readonly systemPrompt?: string;
+    readonly sessionId?: string;
+    readonly mcpConfigPath?: string;
+    readonly pluginDir?: string;
+    /**
+     * Path to a JSON hooks-config file the spawned `claude` binary should
+     * load (mirrors `claude --hooks-config <path>`). When provided, paired
+     * with `assembleClaudeBridgeDeps()` on the WOTANN side so the in-process
+     * bridge and the CLI agree on hook ownership. Optional — omitted means
+     * the CLI uses its own default discovery.
+     */
+    readonly hooksConfig?: string;
+    /**
+     * Path to an agents directory the spawned `claude` binary should load
+     * (mirrors `claude --agents <path>`). Optional. When set, exposes the
+     * WOTANN-curated agent set to the subprocess.
+     */
+    readonly agents?: string;
+    /**
+     * Path to a channels config the spawned `claude` binary should load
+     * (mirrors `claude --channels <path>`). Optional. When set, surfaces
+     * Telegram/Discord/iMessage adapters to the subprocess.
+     */
+    readonly channels?: string;
+}
+export interface ClaudeCliChild {
+    readonly messages: AsyncIterable<unknown>;
+    /** Unix exit code once the child exits. Resolves on child-exit only. */
+    readonly exitCode: Promise<number>;
+}
+/**
+ * Read the currently-active Claude CLI credential for display only. Use
+ * the returned `accessTokenPreview` exclusively for onboarding UI
+ * (expiry badge) — NEVER as an Authorization header. The `claude`
+ * binary reads its own credentials when spawned; WOTANN must not
+ * re-ship them anywhere.
+ *
+ * Precedence (matches Claude CLI's own lookup order):
+ *   1. macOS Keychain `Claude Code-credentials` / `Claude Code`
+ *   2. `~/.claude/.credentials.json`
+ *
+ * Returns `null` if no credential is present or the source is
+ * unparseable. Errors are swallowed deliberately so callers can show a
+ * single "not authenticated" state without branching on reason.
+ */
+export declare function readClaudeCliCredentials(): Promise<ClaudeCredential | null>;
+/**
+ * One-shot migration for users upgrading from prior WOTANN versions that
+ * wrote `~/.wotann/anthropic-oauth.json`. Moves the file to
+ * `~/.wotann/.legacy/` with a timestamp suffix, so users retain a 30-day
+ * rollback window. The archived file is never read — only preserved.
+ *
+ * Returns true if a migration happened; false if there was nothing to
+ * migrate. Never throws — caller just logs the return value.
+ */
+export declare function migrateLegacyCredentialFile(): boolean;
+/**
+ * Strip 38 vars from a process env snapshot before spawning `claude`.
+ * Pure — takes the parent env, returns a new env. Never mutates the
+ * caller's env. See CLAUDE_CLI_CLEAR_ENV above for the rationale of
+ * each var.
+ */
+export declare function scrubClaudeEnv(parent: NodeJS.ProcessEnv): NodeJS.ProcessEnv;
+/**
+ * Spawn `claude -p …` with the exact argv shape OpenClaw documents
+ * as sanctioned, return stream-json messages as an async iterable, and
+ * expose the exit code as a promise.
+ *
+ * Key flag pins (all forced — not user-configurable at this layer):
+ *   --setting-sources user         isolates from any project-level
+ *                                  settings that might redirect auth
+ *   --permission-mode bypassPermissions
+ *                                  WOTANN is the trust authority; the
+ *                                  CLI must not prompt the user mid-run
+ *   --output-format stream-json    allows incremental parsing for
+ *                                  real-time UI
+ *   --include-partial-messages     surfaces mid-turn tokens
+ *   --verbose                      ensures tool-use events are emitted
+ *
+ * All user-supplied inputs (prompt, model, sessionId, systemPrompt,
+ * mcpConfigPath, pluginDir) are passed as argv — never interpolated
+ * into a shell string. spawn() is called without `shell: true`, so
+ * there is no shell parsing layer that could interpret metacharacters.
+ */
+export declare function invokeClaudeCli(opts: ClaudeInvokeOptions): ClaudeCliChild;
+/**
+ * Cheap check: is the `claude` binary on PATH and responsive? Used during
+ * provider discovery and the "Found existing Claude login" banner in
+ * onboarding. Returns false on ENOENT, timeout, or any non-"claude" output.
+ */
+export declare function isClaudeCliAvailable(): boolean;
+/**
+ * Shape returned to the desktop "Found existing login — tap to import"
+ * banner. Kept identical to the legacy `anthropic-subscription.ts` export
+ * so callers don't need a shape migration.
+ *
+ * `path` is the source the credential was found at (keychain or
+ * `.credentials.json`) — never a token itself. Callers use it only for
+ * display ("via macOS Keychain" / "via ~/.claude/.credentials.json").
+ */
+export interface AnthropicCredentialDetection {
+    readonly found: boolean;
+    readonly path?: string;
+    readonly expiresAt?: number | null;
+}
+/**
+ * Detect whether the user has a usable Claude CLI credential, without
+ * spawning a login flow. Async because macOS Keychain lookup is an IPC
+ * call (`security find-generic-password`). Returns {found:false} if
+ * neither source yields a credential.
+ */
+export declare function detectExistingAnthropicCredential(): Promise<AnthropicCredentialDetection>;
+/**
+ * Result envelope the desktop "Sign in with Claude Max" toast expects.
+ * Kept shape-compatible with the legacy `startAnthropicLogin` return so
+ * the RPC handler in `src/daemon/kairos-rpc.ts` needs no caller rewrite.
+ */
+export interface AnthropicCliLoginResult {
+    readonly success: boolean;
+    readonly provider: "anthropic";
+    readonly expiresAt: number | null;
+    readonly tokenSource?: string;
+    readonly error?: string;
+}
+/**
+ * Delegate to `claude login`. Exec-only — NEVER copies the resulting
+ * token to `~/.wotann/anthropic-oauth.json` (that was the self-token-using
+ * antipattern removed per V9 T0.1). The `claude` binary owns its own
+ * credential lifecycle; WOTANN just kicks off the browser flow and
+ * reports whether the CLI finished successfully.
+ *
+ * Returns a Promise that resolves on CLI exit. Never rejects — failures
+ * are reported via the envelope's `error` field to keep the RPC surface
+ * clean.
+ */
+export declare function startAnthropicLogin(): Promise<AnthropicCliLoginResult>;
+/**
+ * Build a `ProviderAdapter` that routes Anthropic queries through the
+ * spawned `claude` binary. Replaces the legacy
+ * `createAnthropicSubscriptionAdapter()` (SDK-based, deleted per V9 T0.1).
+ *
+ * The old adapter imported `@anthropic-ai/claude-agent-sdk` and called
+ * `sdkQuery()` — effectively the SDK was spawning the same `claude`
+ * binary internally and wrapping it in typed iterators. This adapter
+ * cuts out the middleman: spawn directly, parse stream-json messages
+ * at the JSON level, yield `StreamChunk`s matching the same interface.
+ *
+ * Emits the same StreamChunk taxonomy as the old adapter:
+ *   - text         per `content_block_delta` text_delta OR final assistant text block
+ *   - thinking     per `content_block_delta` thinking_delta OR final assistant thinking block
+ *   - tool_use     per assistant tool_use block (with toolName, toolInput, toolCallId)
+ *   - done         per terminal `result` message (subtype "success")
+ *   - error        per terminal `result` message (subtype != "success") or parse failure
+ */
+export declare function createAnthropicCliAdapter(): ProviderAdapter;
+//# sourceMappingURL=claude-cli-backend.d.ts.map