@agent-native/core 0.132.2 → 0.133.0

package/dist/agent/engine/error-detail.js.map

@@ -1 +1 @@
-{"version":3,"file":"error-detail.js","sourceRoot":"","sources":["../../../src/agent/engine/error-detail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,UAAU,uBAAuB,CACrC,GAAY,EACZ,QAAQ,GAAW,uBAAuB;IAE1C,MAAM,IAAI,GACR,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,GAAa,GAAkC,EAAE,KAAK,CAAC;IAChE,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACxE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACrE,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC","sourcesContent":["/**\n * Compose an error's message with its `cause` chain.\n *\n * Provider SDKs collapse the real failure into a generic wrapper message —\n * the Anthropic SDK reports every transport failure as exactly\n * \"Connection error.\" and undici reports \"fetch failed\" — and keep the actual\n * reason (ECONNRESET, UND_ERR_SOCKET, TLS failure, request too large) only on\n * `.cause`. Recording `err.message` alone makes every one of them\n * indistinguishable after the fact, which is how a whole class of production\n * failures becomes undiagnosable.\n *\n * Classification (`isConnectionError`, `isRetryableError`) must keep matching\n * on the bare `err.message` — this is for the RECORDED detail only.\n */\nconst DEFAULT_MAX_CAUSE_LINKS = 4;\nconst MAX_CAUSE_LINK_CHARS = 200;\n\nexport function describeErrorWithCauses(\n  err: unknown,\n  maxLinks: number = DEFAULT_MAX_CAUSE_LINKS,\n): string {\n  const head =\n    err instanceof Error ? err.message : String(err ?? \"Unknown error\");\n  const links: string[] = [];\n  const seen = new Set<unknown>([err]);\n  let cause: unknown = (err as { cause?: unknown } | null)?.cause;\n  while (cause !== undefined && cause !== null && links.length < maxLinks) {\n    if (seen.has(cause)) break;\n    seen.add(cause);\n    const code = (cause as { code?: unknown }).code;\n    const message = cause instanceof Error ? cause.message : String(cause);\n    const text = (typeof code === \"string\" ? `${code} ${message}` : message)\n      .trim()\n      .slice(0, MAX_CAUSE_LINK_CHARS);\n    if (text) links.push(text);\n    cause = (cause as { cause?: unknown }).cause;\n  }\n  return links.length > 0 ? `${head} (cause: ${links.join(\" <- \")})` : head;\n}\n"]}
+{"version":3,"file":"error-detail.js","sourceRoot":"","sources":["../../../src/agent/engine/error-detail.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAClC,MAAM,oBAAoB,GAAG,GAAG,CAAC;AAEjC,MAAM,UAAU,uBAAuB,CACrC,GAAY,EACZ,QAAQ,GAAW,uBAAuB;IAE1C,MAAM,IAAI,GACR,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,IAAI,eAAe,CAAC,CAAC;IACtE,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,GAAG,CAAU,CAAC,GAAG,CAAC,CAAC,CAAC;IACrC,IAAI,KAAK,GAAa,GAAkC,EAAE,KAAK,CAAC;IAChE,OAAO,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,MAAM,GAAG,QAAQ,EAAE,CAAC;QACxE,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,MAAM;QAC3B,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAChB,MAAM,IAAI,GAAI,KAA4B,CAAC,IAAI,CAAC;QAChD,MAAM,OAAO,GAAG,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACvE,MAAM,IAAI,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,GAAG,IAAI,IAAI,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC;aACrE,IAAI,EAAE;aACN,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC;QAClC,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3B,KAAK,GAAI,KAA6B,CAAC,KAAK,CAAC;IAC/C,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,YAAY,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC;AAC5E,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,UAAU,gCAAgC,CAAC,OAAe;IAC9D,MAAM,UAAU,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IACzC,OAAO,CACL,UAAU,CAAC,QAAQ,CAAC,kBAAkB,CAAC;QACvC,UAAU,CAAC,QAAQ,CAAC,uBAAuB,CAAC,CAC7C,CAAC;AACJ,CAAC;AAED,2EAA2E;AAC3E,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,OAAO,gCAAgC,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AASD;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,qBAAqB,CACnC,GAAY,EACZ,QAAQ,GAAG,KAAK;IAEhB,uEAAuE;IACvE,+BAA+B;IAC/B,MAAM,OAAO,GAAG,GAAqC,CAAC;IACtD,MAAM,aAAa,GAAG,CACpB,OAAO,EAAE,SAAS,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,GAAG,CAKvD,CAAC;IAET,MAAM,UAAU,GACd,OAAO,aAAa,EAAE,UAAU,KAAK,QAAQ;QAC3C,CAAC,CAAC,aAAa,CAAC,UAAU;QAC1B,CAAC,CAAC,SAAS,CAAC;IAEhB,4EAA4E;IAC5E,2EAA2E;IAC3E,4EAA4E;IAC5E,8EAA8E;IAC9E,MAAM,SAAS,GAAG,uBAAuB,CAAC,GAAG,CAAC,CAAC;IAC/C,MAAM,iBAAiB,GACrB,CAAC,QAAQ;QACT,UAAU,KAAK,SAAS;QACxB,CAAC,gCAAgC,CAAC,SAAS,CAAC;YAC1C,gCAAgC,CAC9B,OAAO,aAAa,EAAE,OAAO,KAAK,QAAQ;gBACxC,CAAC,CAAC,aAAa,CAAC,OAAO;gBACvB,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC,CAC1B,CAAC,CAAC;IAEP,MAAM,iBAAiB,GACrB,OAAO,aAAa,EAAE,WAAW,KAAK,SAAS;QAC7C,CAAC,CAAC,aAAa,CAAC,WAAW;QAC3B,CAAC,CAAC,iBAAiB,IAAI,QAAQ;YAC7B,CAAC,CAAC,IAAI;YACN,CAAC,CAAC,SAAS,CAAC;IAElB,OAAO;QACL,2EAA2E;QAC3E,sEAAsE;QACtE,8DAA8D;QAC9D,GAAG,CAAC,UAAU,KAAK,SAAS;YAC1B,CAAC,CAAC,EAAE,SAAS,EAAE,QAAQ,UAAU,EAAE,EAAE,UAAU,EAAE;YACjD,CAAC,CAAC,iBAAiB,IAAI,QAAQ;gBAC7B,CAAC,CAAC,EAAE,SAAS,EAAE,wBAAwB,EAAE;gBACzC,CAAC,CAAC,8DAA8D;oBAC9D,wDAAwD;oBACxD,CAAC,GAAG,EAAE;wBACJ,MAAM,IAAI,GAAG,yBAAyB,CAAC,SAAS,CAAC,CAAC;wBAClD,OAAO,IAAI,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBACzC,CAAC,CAAC,EAAE,CAAC;QACX,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAClE,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,MAAM,UAAU,yBAAyB,CACvC,OAA2B;IAE3B,IAAI,CAAC,OAAO;QAAE,OAAO,SAAS,CAAC;IAC/B,MAAM,GAAG,GAAG,OAAO,CAAC,WAAW,EAAE,CAAC;IAClC,IAAI,gCAAgC,CAAC,GAAG,CAAC;QAAE,OAAO,wBAAwB,CAAC;IAC3E,uEAAuE;IACvE,IAAI,GAAG,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACtD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,mBAAmB,CAAC,IAAI,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QAC7D,OAAO,UAAU,CAAC;IACpB,CAAC;IACD,IACE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC;QACzB,GAAG,CAAC,QAAQ,CAAC,SAAS,CAAC;QACvB,GAAG,CAAC,QAAQ,CAAC,mDAAmD,CAAC,EACjE,CAAC;QACD,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,mCAAmC,CAAC,EAAE,CAAC;QACtD,OAAO,+BAA+B,CAAC;IACzC,CAAC;IACD,2EAA2E;IAC3E,qEAAqE;IACrE,0EAA0E;IAC1E,0EAA0E;IAC1E,6BAA6B;IAC7B,EAAE;IACF,4EAA4E;IAC5E,yEAAyE;IACzE,2EAA2E;IAC3E,oDAAoD;IACpD,IACE,GAAG,CAAC,QAAQ,CAAC,oCAAoC,CAAC;QAClD,GAAG,CAAC,QAAQ,CAAC,4BAA4B,CAAC;QAC1C,CAAC,GAAG,CAAC,QAAQ,CAAC,kBAAkB,CAAC;YAC/B,CAAC,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC,CAAC,EACtD,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,CAAC,+BAA+B,CAAC,IAAI,GAAG,KAAK,cAAc,EAAE,CAAC;QAC5E,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,IACE,wGAAwG,CAAC,IAAI,CAC3G,OAAO,CACR,EACD,CAAC;QACD,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC","sourcesContent":["/**\n * Compose an error's message with its `cause` chain.\n *\n * Provider SDKs collapse the real failure into a generic wrapper message —\n * the Anthropic SDK reports every transport failure as exactly\n * \"Connection error.\" and undici reports \"fetch failed\" — and keep the actual\n * reason (ECONNRESET, UND_ERR_SOCKET, TLS failure, request too large) only on\n * `.cause`. Recording `err.message` alone makes every one of them\n * indistinguishable after the fact, which is how a whole class of production\n * failures becomes undiagnosable.\n */\nconst DEFAULT_MAX_CAUSE_LINKS = 4;\nconst MAX_CAUSE_LINK_CHARS = 200;\n\nexport function describeErrorWithCauses(\n  err: unknown,\n  maxLinks: number = DEFAULT_MAX_CAUSE_LINKS,\n): string {\n  const head =\n    err instanceof Error ? err.message : String(err ?? \"Unknown error\");\n  const links: string[] = [];\n  const seen = new Set<unknown>([err]);\n  let cause: unknown = (err as { cause?: unknown } | null)?.cause;\n  while (cause !== undefined && cause !== null && links.length < maxLinks) {\n    if (seen.has(cause)) break;\n    seen.add(cause);\n    const code = (cause as { code?: unknown }).code;\n    const message = cause instanceof Error ? cause.message : String(cause);\n    const text = (typeof code === \"string\" ? `${code} ${message}` : message)\n      .trim()\n      .slice(0, MAX_CAUSE_LINK_CHARS);\n    if (text) links.push(text);\n    cause = (cause as { cause?: unknown }).cause;\n  }\n  return links.length > 0 ? `${head} (cause: ${links.join(\" <- \")})` : head;\n}\n\n/**\n * The single provider-transport-failure classifier. Every layer that decides\n * \"is this a network blip?\" — engine error codes, run-level retry, Sentry\n * suppression — must call THIS, on `describeErrorWithCauses(err)` rather than\n * on a bare `err.message`.\n *\n * Four divergent copies of this predicate existed, and they disagreed on\n * exactly the string production actually throws. The AI SDK's `RetryError`\n * reports `\"Failed after 2 attempts. Last error: Cannot connect to API: …\"`,\n * so a copy anchored with `startsWith` scored it as unclassified while a copy\n * using `includes` scored it as retryable. The result was a split brain: the\n * agent loop retried the turn, but the run persisted `error_code = 'unknown'`,\n * which the client does not list as auto-recoverable — so a transient TLS\n * reset ended the user's chat with a dead error instead of resuming. That one\n * mismatch accounted for ~150 failed production runs in a week.\n *\n * Substring matching is deliberate: the real message is always a provider SDK\n * wrapper around the transport error, never bare, and the wrapper prefix\n * differs per SDK and per version.\n */\nexport function isProviderConnectionErrorMessage(message: string): boolean {\n  const normalized = message.toLowerCase();\n  return (\n    normalized.includes(\"connection error\") ||\n    normalized.includes(\"cannot connect to api\")\n  );\n}\n\n/** `isProviderConnectionErrorMessage` over an error's full cause chain. */\nexport function isProviderConnectionError(err: unknown): boolean {\n  return isProviderConnectionErrorMessage(describeErrorWithCauses(err));\n}\n\n/** Classification fields an AI SDK provider failure carries. */\nexport interface ProviderErrorClassification {\n  errorCode?: string;\n  statusCode?: number;\n  providerRetryable?: boolean;\n}\n\n/**\n * Classify a provider error from the AI SDK, whichever way it surfaced.\n *\n * `streamText` does not throw for a failed provider request — it emits an\n * `error` part on `fullStream` — so there are two arrival paths, and only the\n * thrown one used to be classified. The stream-part path discarded\n * `statusCode`, `errorCode`, and `isRetryable` entirely, which is why every\n * provider HTTP failure on an ai-sdk engine landed as `unknown`: a 429 was only\n * retried if its prose happened to contain \"rate_limit\", and a\n * 100%-reproducible config 400 was indistinguishable from any other unclassified\n * failure, so it had no signature to alert on. Both call sites go through here.\n *\n * `timedOut` is the caller's own first-event deadline, which only the streaming\n * path can know.\n */\nexport function classifyProviderError(\n  err: unknown,\n  timedOut = false,\n): ProviderErrorClassification {\n  // The AI SDK wraps exhausted retries in RetryError and keeps the final\n  // APICallError on `lastError`.\n  const wrapped = err as { lastError?: unknown } | null;\n  const providerError = (\n    wrapped?.lastError instanceof Error ? wrapped.lastError : err\n  ) as {\n    statusCode?: unknown;\n    isRetryable?: unknown;\n    message?: unknown;\n  } | null;\n\n  const statusCode =\n    typeof providerError?.statusCode === \"number\"\n      ? providerError.statusCode\n      : undefined;\n\n  // Classify on the cause chain of the ORIGINAL error, not the unwrapped one:\n  // when RetryError does not expose `lastError` as an Error the unwrap falls\n  // back to the wrapper, whose message (\"Failed after 2 attempts. Last error:\n  // …\") only *embeds* the transport failure. Matching the wrapper is the point.\n  const described = describeErrorWithCauses(err);\n  const isConnectionError =\n    !timedOut &&\n    statusCode === undefined &&\n    (isProviderConnectionErrorMessage(described) ||\n      isProviderConnectionErrorMessage(\n        typeof providerError?.message === \"string\"\n          ? providerError.message\n          : String(providerError),\n      ));\n\n  const providerRetryable =\n    typeof providerError?.isRetryable === \"boolean\"\n      ? providerError.isRetryable\n      : isConnectionError || timedOut\n        ? true\n        : undefined;\n\n  return {\n    // Tag every known status as `http_<status>` (not just 401) so a rate limit\n    // surfaces as `http_429`: the structured statusCode drives turn-level\n    // retries, but run-level continuation keys off the errorCode.\n    ...(statusCode !== undefined\n      ? { errorCode: `http_${statusCode}`, statusCode }\n      : isConnectionError || timedOut\n        ? { errorCode: \"provider_network_error\" }\n        : // Nothing structured — fall back to reading the message, so a\n          // stream-part 529/timeout is not silently unclassified.\n          (() => {\n            const code = classifyTerminalErrorCode(described);\n            return code ? { errorCode: code } : {};\n          })()),\n    ...(providerRetryable !== undefined ? { providerRetryable } : {}),\n  };\n}\n\n/**\n * Last-resort error code for a terminal error that reached persistence with no\n * structured code. Persisting `\"unknown\"` is not a neutral default: the client\n * auto-recovers a fixed list of transport codes, so an unclassified transient\n * blip ends the user's chat while the identical failure carrying its real code\n * resumes. Over four days that gap was 28% of ALL production chat turns.\n *\n * The invariant is NOT \"only transport failures may be named\". It is: a code\n * returned here must be absent from the client's recoverable list unless a\n * fresh attempt genuinely helps. Naming a deterministic failure is what stops\n * it from reaching the user as raw provider text and hiding inside `unknown`;\n * naming it *recoverable* is what buys a retry spiral. Those are different\n * decisions, and `error-detail.spec.ts` asserts the deterministic codes below\n * stay non-recoverable.\n */\nexport function classifyTerminalErrorCode(\n  message: string | undefined,\n): string | undefined {\n  if (!message) return undefined;\n  const msg = message.toLowerCase();\n  if (isProviderConnectionErrorMessage(msg)) return \"provider_network_error\";\n  // Word-bounded: request ids and hashes routinely contain a bare \"529\".\n  if (msg.includes(\"overloaded\") || /\\b529\\b/.test(msg)) {\n    return \"overloaded_error\";\n  }\n  if (msg.includes(\"too many requests\") || /\\b429\\b/.test(msg)) {\n    return \"http_429\";\n  }\n  if (\n    msg.includes(\"timed out\") ||\n    msg.includes(\"timeout\") ||\n    msg.includes(\"too much time has passed without sending any data\")\n  ) {\n    return \"timeout\";\n  }\n  if (msg.includes(\"stream ended without a stop event\")) {\n    return \"builder_gateway_network_error\";\n  }\n  // Deterministic below this line — named so they stop landing in `unknown`,\n  // never retried. Both were measured against the 13 prod app DBs over\n  // 2026-07-24..31: 27 turns/week and 14 turns/week respectively, each with\n  // exactly 1.00 runs/turn, i.e. the chat died on the first attempt showing\n  // the raw provider sentence.\n  //\n  // The request side already avoids emitting reasoning_effort alongside tools\n  // (see ai-sdk-engine.ts). This classifies the failure for the paths that\n  // still reach the provider — another gateway, a stale deploy — so it reads\n  // as a configuration problem rather than a mystery.\n  if (\n    msg.includes(\"reasoning_effort are not supported\") ||\n    msg.includes(\"reasoning_effort to 'none'\") ||\n    (msg.includes(\"reasoning_effort\") &&\n      (msg.includes(\"tools\") || msg.includes(\"function\")))\n  ) {\n    return \"provider_config_error\";\n  }\n  if (msg.includes(\"missing authentication header\") || msg === \"unauthorized\") {\n    return \"authentication_error\";\n  }\n  if (\n    /(?:err_)?ssl|tlsv?\\d|tls handshake|ssl routines|econnreset|econnrefused|und_err_socket|socket hang up/i.test(\n      message,\n    )\n  ) {\n    return \"provider_network_error\";\n  }\n  return undefined;\n}\n"]}

package/dist/agent/engine/failure-taxonomy.d.ts

@@ -0,0 +1,24 @@
+export declare const AGENT_FAILURE_TAXONOMY_CODES: readonly ["provider_network_error", "provider_config_error", "overloaded_error", "authentication_error", "unknown"];
+export type AgentFailureTaxonomyCode = (typeof AGENT_FAILURE_TAXONOMY_CODES)[number];
+export type AgentFailureRegime = "interactive" | "scheduled";
+export interface AgentFailureTaxonomy {
+    code: AgentFailureTaxonomyCode;
+    label: string;
+    regime: AgentFailureRegime;
+    source: "error_code" | "error_detail" | "unknown";
+}
+/**
+ * Classify the production failure families used by the Factory triage queue.
+ * The regime is deliberately derived from the durable run id, not inferred
+ * from prose: scheduled runs use the `job-` namespace and interactive runs do
+ * not. This keeps a healthy chat sample from hiding a scheduled outage.
+ */
+export declare function classifyAgentFailure(input: {
+    runId?: unknown;
+    errorCode?: unknown;
+    errorDetail?: unknown;
+    terminalReason?: unknown;
+    terminalEvent?: unknown;
+    regime?: AgentFailureRegime;
+}): AgentFailureTaxonomy;
+//# sourceMappingURL=failure-taxonomy.d.ts.map

package/dist/agent/engine/failure-taxonomy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-taxonomy.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/failure-taxonomy.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,4BAA4B,YACvC,wBAAwB,EACxB,uBAAuB,EACvB,kBAAkB,EAClB,sBAAsB,EACtB,SAAS,CACD,CAAC;AAEX,MAAM,MAAM,wBAAwB,GAClC,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AAEhD,MAAM,MAAM,kBAAkB,GAAG,aAAa,GAAG,WAAW,CAAC;AAE7D,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,wBAAwB,CAAC;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,kBAAkB,CAAC;IAC3B,MAAM,EAAE,YAAY,GAAG,cAAc,GAAG,SAAS,CAAC;CACnD;AA6CD;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE;IAC1C,KAAK,CAAC,EAAE,OAAO,CAAC;IAChB,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB,WAAW,CAAC,EAAE,OAAO,CAAC;IACtB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,MAAM,CAAC,EAAE,kBAAkB,CAAC;CAC7B,GAAG,oBAAoB,CA4CvB"}

package/dist/agent/engine/failure-taxonomy.js

@@ -0,0 +1,88 @@
+import { classifyTerminalErrorCode } from "./error-detail.js";
+export const AGENT_FAILURE_TAXONOMY_CODES = [
+    "provider_network_error",
+    "provider_config_error",
+    "overloaded_error",
+    "authentication_error",
+    "unknown",
+];
+const LABELS = {
+    provider_network_error: "SSL/TLS provider transport drop",
+    provider_config_error: "Model reasoning_effort with tools",
+    overloaded_error: "Provider overloaded_error",
+    authentication_error: "Missing provider authentication",
+    unknown: "Unclassified failure",
+};
+function knownCode(value) {
+    const normalized = typeof value === "string" ? value.trim().toLowerCase() : "";
+    if (normalized === "provider_network_error" ||
+        normalized === "connection_error" ||
+        normalized === "network_error" ||
+        normalized === "ssl_error" ||
+        normalized === "tls_error") {
+        return "provider_network_error";
+    }
+    if (normalized === "provider_config_error" ||
+        normalized === "reasoning_effort_tools") {
+        return "provider_config_error";
+    }
+    if (normalized === "overloaded_error" ||
+        normalized === "provider_overloaded") {
+        return "overloaded_error";
+    }
+    if (normalized === "authentication_error" ||
+        normalized === "missing_authentication_header" ||
+        normalized === "http_401" ||
+        normalized === "unauthorized") {
+        return "authentication_error";
+    }
+    return undefined;
+}
+/**
+ * Classify the production failure families used by the Factory triage queue.
+ * The regime is deliberately derived from the durable run id, not inferred
+ * from prose: scheduled runs use the `job-` namespace and interactive runs do
+ * not. This keeps a healthy chat sample from hiding a scheduled outage.
+ */
+export function classifyAgentFailure(input) {
+    const regime = input.regime ??
+        (typeof input.runId === "string" && input.runId.startsWith("job-")
+            ? "scheduled"
+            : "interactive");
+    const explicit = knownCode(input.errorCode);
+    if (explicit) {
+        return {
+            code: explicit,
+            label: LABELS[explicit],
+            regime,
+            source: "error_code",
+        };
+    }
+    const evidence = [
+        input.errorCode,
+        input.errorDetail,
+        input.terminalReason,
+        input.terminalEvent,
+    ].filter((value) => value !== undefined && value !== null);
+    for (const value of evidence) {
+        const text = typeof value === "string"
+            ? value
+            : (JSON.stringify(value) ?? String(value));
+        const classified = knownCode(classifyTerminalErrorCode(text));
+        if (classified) {
+            return {
+                code: classified,
+                label: LABELS[classified],
+                regime,
+                source: "error_detail",
+            };
+        }
+    }
+    return {
+        code: "unknown",
+        label: LABELS.unknown,
+        regime,
+        source: "unknown",
+    };
+}
+//# sourceMappingURL=failure-taxonomy.js.map

package/dist/agent/engine/failure-taxonomy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"failure-taxonomy.js","sourceRoot":"","sources":["../../../src/agent/engine/failure-taxonomy.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,yBAAyB,EAAE,MAAM,mBAAmB,CAAC;AAE9D,MAAM,CAAC,MAAM,4BAA4B,GAAG;IAC1C,wBAAwB;IACxB,uBAAuB;IACvB,kBAAkB;IAClB,sBAAsB;IACtB,SAAS;CACD,CAAC;AAcX,MAAM,MAAM,GAA6C;IACvD,sBAAsB,EAAE,iCAAiC;IACzD,qBAAqB,EAAE,mCAAmC;IAC1D,gBAAgB,EAAE,2BAA2B;IAC7C,oBAAoB,EAAE,iCAAiC;IACvD,OAAO,EAAE,sBAAsB;CAChC,CAAC;AAEF,SAAS,SAAS,CAAC,KAAc;IAC/B,MAAM,UAAU,GACd,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IACE,UAAU,KAAK,wBAAwB;QACvC,UAAU,KAAK,kBAAkB;QACjC,UAAU,KAAK,eAAe;QAC9B,UAAU,KAAK,WAAW;QAC1B,UAAU,KAAK,WAAW,EAC1B,CAAC;QACD,OAAO,wBAAwB,CAAC;IAClC,CAAC;IACD,IACE,UAAU,KAAK,uBAAuB;QACtC,UAAU,KAAK,wBAAwB,EACvC,CAAC;QACD,OAAO,uBAAuB,CAAC;IACjC,CAAC;IACD,IACE,UAAU,KAAK,kBAAkB;QACjC,UAAU,KAAK,qBAAqB,EACpC,CAAC;QACD,OAAO,kBAAkB,CAAC;IAC5B,CAAC;IACD,IACE,UAAU,KAAK,sBAAsB;QACrC,UAAU,KAAK,+BAA+B;QAC9C,UAAU,KAAK,UAAU;QACzB,UAAU,KAAK,cAAc,EAC7B,CAAC;QACD,OAAO,sBAAsB,CAAC;IAChC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAOpC;IACC,MAAM,MAAM,GACV,KAAK,CAAC,MAAM;QACZ,CAAC,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,KAAK,CAAC,UAAU,CAAC,MAAM,CAAC;YAChE,CAAC,CAAC,WAAW;YACb,CAAC,CAAC,aAAa,CAAC,CAAC;IACrB,MAAM,QAAQ,GAAG,SAAS,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO;YACL,IAAI,EAAE,QAAQ;YACd,KAAK,EAAE,MAAM,CAAC,QAAQ,CAAC;YACvB,MAAM;YACN,MAAM,EAAE,YAAY;SACrB,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG;QACf,KAAK,CAAC,SAAS;QACf,KAAK,CAAC,WAAW;QACjB,KAAK,CAAC,cAAc;QACpB,KAAK,CAAC,aAAa;KACpB,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC;IAC3D,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;QAC7B,MAAM,IAAI,GACR,OAAO,KAAK,KAAK,QAAQ;YACvB,CAAC,CAAC,KAAK;YACP,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC;QAC/C,MAAM,UAAU,GAAG,SAAS,CAAC,yBAAyB,CAAC,IAAI,CAAC,CAAC,CAAC;QAC9D,IAAI,UAAU,EAAE,CAAC;YACf,OAAO;gBACL,IAAI,EAAE,UAAU;gBAChB,KAAK,EAAE,MAAM,CAAC,UAAU,CAAC;gBACzB,MAAM;gBACN,MAAM,EAAE,cAAc;aACvB,CAAC;QACJ,CAAC;IACH,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,MAAM,CAAC,OAAO;QACrB,MAAM;QACN,MAAM,EAAE,SAAS;KAClB,CAAC;AACJ,CAAC","sourcesContent":["import { classifyTerminalErrorCode } from \"./error-detail.js\";\n\nexport const AGENT_FAILURE_TAXONOMY_CODES = [\n  \"provider_network_error\",\n  \"provider_config_error\",\n  \"overloaded_error\",\n  \"authentication_error\",\n  \"unknown\",\n] as const;\n\nexport type AgentFailureTaxonomyCode =\n  (typeof AGENT_FAILURE_TAXONOMY_CODES)[number];\n\nexport type AgentFailureRegime = \"interactive\" | \"scheduled\";\n\nexport interface AgentFailureTaxonomy {\n  code: AgentFailureTaxonomyCode;\n  label: string;\n  regime: AgentFailureRegime;\n  source: \"error_code\" | \"error_detail\" | \"unknown\";\n}\n\nconst LABELS: Record<AgentFailureTaxonomyCode, string> = {\n  provider_network_error: \"SSL/TLS provider transport drop\",\n  provider_config_error: \"Model reasoning_effort with tools\",\n  overloaded_error: \"Provider overloaded_error\",\n  authentication_error: \"Missing provider authentication\",\n  unknown: \"Unclassified failure\",\n};\n\nfunction knownCode(value: unknown): AgentFailureTaxonomyCode | undefined {\n  const normalized =\n    typeof value === \"string\" ? value.trim().toLowerCase() : \"\";\n  if (\n    normalized === \"provider_network_error\" ||\n    normalized === \"connection_error\" ||\n    normalized === \"network_error\" ||\n    normalized === \"ssl_error\" ||\n    normalized === \"tls_error\"\n  ) {\n    return \"provider_network_error\";\n  }\n  if (\n    normalized === \"provider_config_error\" ||\n    normalized === \"reasoning_effort_tools\"\n  ) {\n    return \"provider_config_error\";\n  }\n  if (\n    normalized === \"overloaded_error\" ||\n    normalized === \"provider_overloaded\"\n  ) {\n    return \"overloaded_error\";\n  }\n  if (\n    normalized === \"authentication_error\" ||\n    normalized === \"missing_authentication_header\" ||\n    normalized === \"http_401\" ||\n    normalized === \"unauthorized\"\n  ) {\n    return \"authentication_error\";\n  }\n  return undefined;\n}\n\n/**\n * Classify the production failure families used by the Factory triage queue.\n * The regime is deliberately derived from the durable run id, not inferred\n * from prose: scheduled runs use the `job-` namespace and interactive runs do\n * not. This keeps a healthy chat sample from hiding a scheduled outage.\n */\nexport function classifyAgentFailure(input: {\n  runId?: unknown;\n  errorCode?: unknown;\n  errorDetail?: unknown;\n  terminalReason?: unknown;\n  terminalEvent?: unknown;\n  regime?: AgentFailureRegime;\n}): AgentFailureTaxonomy {\n  const regime =\n    input.regime ??\n    (typeof input.runId === \"string\" && input.runId.startsWith(\"job-\")\n      ? \"scheduled\"\n      : \"interactive\");\n  const explicit = knownCode(input.errorCode);\n  if (explicit) {\n    return {\n      code: explicit,\n      label: LABELS[explicit],\n      regime,\n      source: \"error_code\",\n    };\n  }\n\n  const evidence = [\n    input.errorCode,\n    input.errorDetail,\n    input.terminalReason,\n    input.terminalEvent,\n  ].filter((value) => value !== undefined && value !== null);\n  for (const value of evidence) {\n    const text =\n      typeof value === \"string\"\n        ? value\n        : (JSON.stringify(value) ?? String(value));\n    const classified = knownCode(classifyTerminalErrorCode(text));\n    if (classified) {\n      return {\n        code: classified,\n        label: LABELS[classified],\n        regime,\n        source: \"error_detail\",\n      };\n    }\n  }\n\n  return {\n    code: \"unknown\",\n    label: LABELS.unknown,\n    regime,\n    source: \"unknown\",\n  };\n}\n"]}

package/dist/agent/engine/index.d.ts

@@ -2,9 +2,10 @@
  * Public exports for the pluggable agent engine system.
  */
 export type { AgentEngine, EngineCapabilities, EngineTool, EngineMessage, EngineContentPart, EngineTextPart, EngineImagePart, EngineToolCallPart, EngineToolResultPart, EngineThinkingPart, EngineEvent, EngineStreamOptions, } from "./types.js";
-export { registerAgentEngine, getAgentEngineEntry, listAgentEngines, resolveEngine, getConfiguredEngineNameForRequest, getStoredModelForEngine, normalizeModelForEngine, resolveEnginePreservesCustomModels, type NormalizeModelOptions, detectEngineFromEnv, detectEngineFromEnvForRequest, detectEngineFromUserSecrets, isAgentEngineSettingConfigured, isAgentEnginePackageInstalled, isStoredEngineUsable, isStoredEngineUsableForRequest, isResolvedEngineUsableForRequest, type AgentEngineEntry, type ResolveEngineConfig, } from "./registry.js";
+export { registerAgentEngine, getAgentEngineEntry, listAgentEngines, resolveEngine, getConfiguredEngineNameForRequest, getStoredModelForEngine, normalizeModelForEngine, resolveDelegatedRunModel, resolveEnginePreservesCustomModels, type NormalizeModelOptions, detectEngineFromEnv, detectEngineFromEnvForRequest, detectEngineFromUserSecrets, isAgentEngineSettingConfigured, isAgentEnginePackageInstalled, isStoredEngineUsable, isStoredEngineUsableForRequest, isResolvedEngineUsableForRequest, type AgentEngineEntry, type ResolveEngineConfig, } from "./registry.js";
 export { createBuilderEngine, BUILDER_DEFAULT_MODEL, BUILDER_SUPPORTED_MODELS, BUILDER_CAPABILITIES, } from "./builder-engine.js";
 export { createAnthropicEngine, ANTHROPIC_DEFAULT_MODEL, ANTHROPIC_SUPPORTED_MODELS, ANTHROPIC_CAPABILITIES, } from "./anthropic-engine.js";
 export { createAISDKEngine, type AISDKProvider } from "./ai-sdk-engine.js";
 export { registerBuiltinEngines } from "./builtin.js";
+export { AGENT_FAILURE_TAXONOMY_CODES, classifyAgentFailure, type AgentFailureRegime, type AgentFailureTaxonomy, type AgentFailureTaxonomyCode, } from "./failure-taxonomy.js";
 //# sourceMappingURL=index.d.ts.map

package/dist/agent/engine/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,EACvB,kCAAkC,EAClC,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,oBAAoB,EACpB,8BAA8B,EAC9B,gCAAgC,EAChC,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,YAAY,EACV,WAAW,EACX,kBAAkB,EAClB,UAAU,EACV,aAAa,EACb,iBAAiB,EACjB,cAAc,EACd,eAAe,EACf,kBAAkB,EAClB,oBAAoB,EACpB,kBAAkB,EAClB,WAAW,EACX,mBAAmB,GACpB,MAAM,YAAY,CAAC;AAEpB,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,kCAAkC,EAClC,KAAK,qBAAqB,EAC1B,mBAAmB,EACnB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,oBAAoB,EACpB,8BAA8B,EAC9B,gCAAgC,EAChC,KAAK,gBAAgB,EACrB,KAAK,mBAAmB,GACzB,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAE,KAAK,aAAa,EAAE,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,EACpB,KAAK,kBAAkB,EACvB,KAAK,oBAAoB,EACzB,KAAK,wBAAwB,GAC9B,MAAM,uBAAuB,CAAC"}

package/dist/agent/engine/index.js

@@ -1,9 +1,10 @@
 /**
  * Public exports for the pluggable agent engine system.
  */
-export { registerAgentEngine, getAgentEngineEntry, listAgentEngines, resolveEngine, getConfiguredEngineNameForRequest, getStoredModelForEngine, normalizeModelForEngine, resolveEnginePreservesCustomModels, detectEngineFromEnv, detectEngineFromEnvForRequest, detectEngineFromUserSecrets, isAgentEngineSettingConfigured, isAgentEnginePackageInstalled, isStoredEngineUsable, isStoredEngineUsableForRequest, isResolvedEngineUsableForRequest, } from "./registry.js";
+export { registerAgentEngine, getAgentEngineEntry, listAgentEngines, resolveEngine, getConfiguredEngineNameForRequest, getStoredModelForEngine, normalizeModelForEngine, resolveDelegatedRunModel, resolveEnginePreservesCustomModels, detectEngineFromEnv, detectEngineFromEnvForRequest, detectEngineFromUserSecrets, isAgentEngineSettingConfigured, isAgentEnginePackageInstalled, isStoredEngineUsable, isStoredEngineUsableForRequest, isResolvedEngineUsableForRequest, } from "./registry.js";
 export { createBuilderEngine, BUILDER_DEFAULT_MODEL, BUILDER_SUPPORTED_MODELS, BUILDER_CAPABILITIES, } from "./builder-engine.js";
 export { createAnthropicEngine, ANTHROPIC_DEFAULT_MODEL, ANTHROPIC_SUPPORTED_MODELS, ANTHROPIC_CAPABILITIES, } from "./anthropic-engine.js";
 export { createAISDKEngine } from "./ai-sdk-engine.js";
 export { registerBuiltinEngines } from "./builtin.js";
+export { AGENT_FAILURE_TAXONOMY_CODES, classifyAgentFailure, } from "./failure-taxonomy.js";
 //# sourceMappingURL=index.js.map

package/dist/agent/engine/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agent/engine/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiBH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,EACvB,kCAAkC,EAElC,mBAAmB,EACnB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,oBAAoB,EACpB,8BAA8B,EAC9B,gCAAgC,GAGjC,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAsB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC","sourcesContent":["/**\n * Public exports for the pluggable agent engine system.\n */\n\nexport type {\n  AgentEngine,\n  EngineCapabilities,\n  EngineTool,\n  EngineMessage,\n  EngineContentPart,\n  EngineTextPart,\n  EngineImagePart,\n  EngineToolCallPart,\n  EngineToolResultPart,\n  EngineThinkingPart,\n  EngineEvent,\n  EngineStreamOptions,\n} from \"./types.js\";\n\nexport {\n  registerAgentEngine,\n  getAgentEngineEntry,\n  listAgentEngines,\n  resolveEngine,\n  getConfiguredEngineNameForRequest,\n  getStoredModelForEngine,\n  normalizeModelForEngine,\n  resolveEnginePreservesCustomModels,\n  type NormalizeModelOptions,\n  detectEngineFromEnv,\n  detectEngineFromEnvForRequest,\n  detectEngineFromUserSecrets,\n  isAgentEngineSettingConfigured,\n  isAgentEnginePackageInstalled,\n  isStoredEngineUsable,\n  isStoredEngineUsableForRequest,\n  isResolvedEngineUsableForRequest,\n  type AgentEngineEntry,\n  type ResolveEngineConfig,\n} from \"./registry.js\";\n\nexport {\n  createBuilderEngine,\n  BUILDER_DEFAULT_MODEL,\n  BUILDER_SUPPORTED_MODELS,\n  BUILDER_CAPABILITIES,\n} from \"./builder-engine.js\";\n\nexport {\n  createAnthropicEngine,\n  ANTHROPIC_DEFAULT_MODEL,\n  ANTHROPIC_SUPPORTED_MODELS,\n  ANTHROPIC_CAPABILITIES,\n} from \"./anthropic-engine.js\";\nexport { createAISDKEngine, type AISDKProvider } from \"./ai-sdk-engine.js\";\nexport { registerBuiltinEngines } from \"./builtin.js\";\n"]}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agent/engine/index.ts"],"names":[],"mappings":"AAAA;;GAEG;AAiBH,OAAO,EACL,mBAAmB,EACnB,mBAAmB,EACnB,gBAAgB,EAChB,aAAa,EACb,iCAAiC,EACjC,uBAAuB,EACvB,uBAAuB,EACvB,wBAAwB,EACxB,kCAAkC,EAElC,mBAAmB,EACnB,6BAA6B,EAC7B,2BAA2B,EAC3B,8BAA8B,EAC9B,6BAA6B,EAC7B,oBAAoB,EACpB,8BAA8B,EAC9B,gCAAgC,GAGjC,MAAM,eAAe,CAAC;AAEvB,OAAO,EACL,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,oBAAoB,GACrB,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EACL,qBAAqB,EACrB,uBAAuB,EACvB,0BAA0B,EAC1B,sBAAsB,GACvB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,iBAAiB,EAAsB,MAAM,oBAAoB,CAAC;AAC3E,OAAO,EAAE,sBAAsB,EAAE,MAAM,cAAc,CAAC;AACtD,OAAO,EACL,4BAA4B,EAC5B,oBAAoB,GAIrB,MAAM,uBAAuB,CAAC","sourcesContent":["/**\n * Public exports for the pluggable agent engine system.\n */\n\nexport type {\n  AgentEngine,\n  EngineCapabilities,\n  EngineTool,\n  EngineMessage,\n  EngineContentPart,\n  EngineTextPart,\n  EngineImagePart,\n  EngineToolCallPart,\n  EngineToolResultPart,\n  EngineThinkingPart,\n  EngineEvent,\n  EngineStreamOptions,\n} from \"./types.js\";\n\nexport {\n  registerAgentEngine,\n  getAgentEngineEntry,\n  listAgentEngines,\n  resolveEngine,\n  getConfiguredEngineNameForRequest,\n  getStoredModelForEngine,\n  normalizeModelForEngine,\n  resolveDelegatedRunModel,\n  resolveEnginePreservesCustomModels,\n  type NormalizeModelOptions,\n  detectEngineFromEnv,\n  detectEngineFromEnvForRequest,\n  detectEngineFromUserSecrets,\n  isAgentEngineSettingConfigured,\n  isAgentEnginePackageInstalled,\n  isStoredEngineUsable,\n  isStoredEngineUsableForRequest,\n  isResolvedEngineUsableForRequest,\n  type AgentEngineEntry,\n  type ResolveEngineConfig,\n} from \"./registry.js\";\n\nexport {\n  createBuilderEngine,\n  BUILDER_DEFAULT_MODEL,\n  BUILDER_SUPPORTED_MODELS,\n  BUILDER_CAPABILITIES,\n} from \"./builder-engine.js\";\n\nexport {\n  createAnthropicEngine,\n  ANTHROPIC_DEFAULT_MODEL,\n  ANTHROPIC_SUPPORTED_MODELS,\n  ANTHROPIC_CAPABILITIES,\n} from \"./anthropic-engine.js\";\nexport { createAISDKEngine, type AISDKProvider } from \"./ai-sdk-engine.js\";\nexport { registerBuiltinEngines } from \"./builtin.js\";\nexport {\n  AGENT_FAILURE_TAXONOMY_CODES,\n  classifyAgentFailure,\n  type AgentFailureRegime,\n  type AgentFailureTaxonomy,\n  type AgentFailureTaxonomyCode,\n} from \"./failure-taxonomy.js\";\n"]}

package/dist/agent/engine/registry.d.ts

@@ -55,6 +55,21 @@ export interface NormalizeModelOptions {
     preserveCustomModels?: boolean;
 }
 export declare function normalizeModelForEngine(engine: Pick<AgentEngine, "name" | "defaultModel" | "supportedModels" | "preserveCustomModels">, model: string | null | undefined, options?: NormalizeModelOptions): string;
+type ModelResolvableEngine = Pick<AgentEngine, "name" | "defaultModel" | "supportedModels" | "preserveCustomModels">;
+/**
+ * Model for a delegated (A2A) run, in strict precedence: the receiving app's
+ * explicit configuration, then its own stored setting, then the caller's hint,
+ * then the engine default. An app that pins a model keeps it; a hint only fills
+ * the gap where the receiver would otherwise take a default it never chose.
+ *
+ * A rejected hint is logged and dropped — a delegated run must never fail over
+ * a preference.
+ */
+export declare function resolveDelegatedRunModel(engine: ModelResolvableEngine, options: {
+    explicitModel?: string | null;
+    storedModel?: string | null;
+    callerModelHint?: string | null;
+}): string;
 /**
  * Whether models saved or read for this engine ENTRY should be preserved
  * verbatim instead of normalized against the built-in catalog.
@@ -206,4 +221,5 @@ export declare function resolveEngine(config: ResolveEngineConfig): Promise<Agen
 export declare function getStoredModelForEngine(engine: AgentEngine | string, options?: {
     appId?: string;
 }): Promise<string | undefined>;
+export {};
 //# sourceMappingURL=registry.d.ts.map

package/dist/agent/engine/registry.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAkBH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIlE,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0BAA0B;IAC1B,YAAY,EAAE,kBAAkB,CAAC;IACjC,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,6DAA6D;IAC7D,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,4CAA4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC;CACtD;AAKD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAajE;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,SAAS,CAE9B;AAED,yCAAyC;AACzC,wBAAgB,gBAAgB,IAAI,gBAAgB,EAAE,CAErD;AA0ED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAOT;AA4DD,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,IAAI,CACV,WAAW,EACX,MAAM,GAAG,cAAc,GAAG,iBAAiB,GAAG,sBAAsB,CACrE,EACD,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,OAAO,GAAE,qBAA0B,GAClC,MAAM,CAsBR;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,GACpC,OAAO,CAAC,OAAO,CAAC,CAOlB;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAqC7D;AA+BD;;;;;GAKG;AACH,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAgBtF;AAUD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA0EpF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAOvE;AAqKD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAST;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,YAAY,CAAC,EACT,MAAM,GACN,WAAW,GACX;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA0B7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,WAAW,CAAC,CAoItB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,WAAW,GAAG,MAAM,EAC5B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgC7B"}
+{"version":3,"file":"registry.d.ts","sourceRoot":"","sources":["../../../src/agent/engine/registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAmBH,OAAO,KAAK,EAAE,WAAW,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAIlE,MAAM,WAAW,gBAAgB;IAC/B,yEAAyE;IACzE,IAAI,EAAE,MAAM,CAAC;IACb,kCAAkC;IAClC,KAAK,EAAE,MAAM,CAAC;IACd,0CAA0C;IAC1C,WAAW,EAAE,MAAM,CAAC;IACpB,+DAA+D;IAC/D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,0BAA0B;IAC1B,YAAY,EAAE,kBAAkB,CAAC;IACjC,2BAA2B;IAC3B,YAAY,EAAE,MAAM,CAAC;IACrB,mDAAmD;IACnD,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,6DAA6D;IAC7D,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,4CAA4C;IAC5C,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,WAAW,CAAC;CACtD;AAKD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,GAAG,IAAI,CAajE;AAED,uEAAuE;AACvE,wBAAgB,mBAAmB,CACjC,IAAI,EAAE,MAAM,GACX,gBAAgB,GAAG,SAAS,CAE9B;AAED,yCAAyC;AACzC,wBAAgB,gBAAgB,IAAI,gBAAgB,EAAE,CAErD;AA0ED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAOT;AA4DD,MAAM,WAAW,qBAAqB;IACpC;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAC;CAChC;AAED,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,IAAI,CACV,WAAW,EACX,MAAM,GAAG,cAAc,GAAG,iBAAiB,GAAG,sBAAsB,CACrE,EACD,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,EAChC,OAAO,GAAE,qBAA0B,GAClC,MAAM,CAsBR;AAED,KAAK,qBAAqB,GAAG,IAAI,CAC/B,WAAW,EACX,MAAM,GAAG,cAAc,GAAG,iBAAiB,GAAG,sBAAsB,CACrE,CAAC;AAiCF;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,qBAAqB,EAC7B,OAAO,EAAE;IACP,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5B,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC,GACA,MAAM,CAUR;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,kCAAkC,CACtD,KAAK,EAAE,IAAI,CAAC,gBAAgB,EAAE,MAAM,CAAC,GACpC,OAAO,CAAC,OAAO,CAAC,CAOlB;AAYD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,IAAI,gBAAgB,GAAG,IAAI,CAqC7D;AAkDD;;;;;GAKG;AACH,wBAAsB,6BAA6B,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAgBtF;AAUD;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAsB,2BAA2B,IAAI,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CA0EpF;AAED;;;;;;GAMG;AACH,wBAAgB,8BAA8B,CAAC,MAAM,EAAE,OAAO,GAAG,OAAO,CAOvE;AAqKD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CAClC,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAST;AAED;;;;;;;GAOG;AACH,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,OAAO,EACf,KAAK,EAAE,gBAAgB,GACtB,OAAO,CAAC,OAAO,CAAC,CASlB;AAED;;;;;GAKG;AACH,wBAAsB,gCAAgC,CACpD,MAAM,EAAE,WAAW,EACnB,OAAO,GAAE;IAAE,MAAM,CAAC,EAAE,MAAM,CAAA;CAAO,GAChC,OAAO,CAAC,OAAO,CAAC,CAuBlB;AAED,MAAM,WAAW,mBAAmB;IAClC,0EAA0E;IAC1E,YAAY,CAAC,EACT,MAAM,GACN,WAAW,GACX;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;KAAE,CAAC;IACtD,uDAAuD;IACvD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED;;;;;;;;;GASG;AACH,wBAAsB,iCAAiC,CACrD,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA0B7B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,mBAAmB,GAC1B,OAAO,CAAC,WAAW,CAAC,CAoItB;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,uBAAuB,CAC3C,MAAM,EAAE,WAAW,GAAG,MAAM,EAC5B,OAAO,GAAE;IAAE,KAAK,CAAC,EAAE,MAAM,CAAA;CAAO,GAC/B,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAgC7B"}

package/dist/agent/engine/registry.js

@@ -8,7 +8,7 @@
  * Built-in engines (anthropic, ai-sdk) are auto-registered by builtin.ts.
  */
 import { createRequire } from "node:module";
-import { assertCredentialStoreReadable, canUseDeployCredentialFallbackForRequest, getProviderCredentialAuthFailure, readDeployCredentialEnv, resolveBuilderCredentialsDetailed, resolveSecret, } from "../../server/credential-provider.js";
+import { assertCredentialStoreReadable, canUseDeployCredentialFallbackForRequest, getBuilderCredentialAuthFailure, getProviderCredentialAuthFailure, readDeployCredentialEnv, resolveBuilderCredentialsDetailed, resolveSecret, } from "../../server/credential-provider.js";
 import { getSetting } from "../../settings/store.js";
 import { getAgentAppModelDefaultForCurrentRequest } from "../app-model-defaults.js";
 import { normalizeOpenAiBaseUrl, OPENAI_BASE_URL_ENV_VAR, } from "./openai-compatible-endpoint.js";
@@ -183,6 +183,52 @@ export function normalizeModelForEngine(engine, model, options = {}) {
     return (findLatestSupportedVersionMatch(candidate, engine.supportedModels) ??
         engine.defaultModel);
 }
+/**
+ * Bound an untrusted, caller-supplied model preference to this engine's own
+ * catalog. Returns `undefined` — never a substitute — when the hint names
+ * anything the engine does not already offer, so a peer can never move the run
+ * to a different provider, an unknown id, or a capability tier this engine was
+ * not going to serve on its own.
+ */
+function resolveModelHintForEngine(engine, hint) {
+    const candidate = typeof hint === "string" ? hint.trim() : "";
+    if (!candidate || candidate === "auto")
+        return undefined;
+    // An engine with no catalog, or one that passes custom ids through verbatim
+    // (an OpenAI-compatible gateway), cannot prove membership — so it takes no
+    // hint at all rather than forwarding an unverifiable id to a provider.
+    if (engine.preserveCustomModels || engine.supportedModels.length === 0) {
+        return undefined;
+    }
+    const normalized = normalizeModelForEngine(engine, candidate);
+    // `normalizeModelForEngine` answers `defaultModel` both for "this IS the
+    // default" and for "no idea what this is", so an unmatched hint is only
+    // distinguishable by re-checking the raw candidate. Anything else it returns
+    // is a real catalog hit.
+    const matched = normalized === engine.defaultModel
+        ? engine.supportedModels.includes(candidate)
+        : engine.supportedModels.includes(normalized);
+    return matched ? normalized : undefined;
+}
+/**
+ * Model for a delegated (A2A) run, in strict precedence: the receiving app's
+ * explicit configuration, then its own stored setting, then the caller's hint,
+ * then the engine default. An app that pins a model keeps it; a hint only fills
+ * the gap where the receiver would otherwise take a default it never chose.
+ *
+ * A rejected hint is logged and dropped — a delegated run must never fail over
+ * a preference.
+ */
+export function resolveDelegatedRunModel(engine, options) {
+    const own = options.explicitModel ?? options.storedModel;
+    if (own)
+        return normalizeModelForEngine(engine, own);
+    const hinted = resolveModelHintForEngine(engine, options.callerModelHint);
+    if (!hinted && options.callerModelHint) {
+        console.log(`[a2a] Ignoring caller model hint "${options.callerModelHint}" — not offered by engine ${engine.name}`);
+    }
+    return normalizeModelForEngine(engine, hinted ?? engine.defaultModel);
+}
 /**
  * Whether models saved or read for this engine ENTRY should be preserved
  * verbatim instead of normalized against the built-in catalog.
@@ -258,26 +304,45 @@ export function detectEngineFromEnv() {
     }
     return null;
 }
-async function envKeyUsableForEntry(entry, key) {
+async function envKeyUsableForEntry(key) {
     if (!(canUseDeployCredentialFallbackForRequest(key) &&
         !!readDeployCredentialEnv(key))) {
         return false;
     }
-    if (entry.name === "builder") {
-        return true;
-    }
     const value = readDeployCredentialEnv(key);
     if (!value)
         return false;
     return !(await getProviderCredentialAuthFailure({ key, value }));
 }
+/**
+ * Builder's deploy-env fallback is checked as a pair, not per-key: the
+ * auth-failure marker is fingerprinted from privateKey+publicKey together
+ * (see `builderCredentialFingerprint`), so a single-key lookup can never
+ * match it. Without this, a rejected deploy-level Builder key would keep
+ * reporting "usable" through this env-only path forever — the same class of
+ * bug as the per-scope check in `credential-provider.ts`'s
+ * `isCompleteBuilderConnection`.
+ */
+async function hasUsableBuilderEnvKeys() {
+    const privateKey = canUseDeployCredentialFallbackForRequest("BUILDER_PRIVATE_KEY")
+        ? readDeployCredentialEnv("BUILDER_PRIVATE_KEY")
+        : null;
+    const publicKey = canUseDeployCredentialFallbackForRequest("BUILDER_PUBLIC_KEY")
+        ? readDeployCredentialEnv("BUILDER_PUBLIC_KEY")
+        : null;
+    if (!privateKey || !publicKey)
+        return false;
+    return !(await getBuilderCredentialAuthFailure({ privateKey, publicKey }));
+}
 async function hasUsableEnvKeys(entry) {
     if (!isAgentEnginePackageInstalled(entry))
         return false;
     if (entry.requiredEnvVars.length === 0)
         return false;
+    if (entry.name === "builder")
+        return hasUsableBuilderEnvKeys();
     for (const key of entry.requiredEnvVars) {
-        if (!(await envKeyUsableForEntry(entry, key)))
+        if (!(await envKeyUsableForEntry(key)))
             return false;
     }
     return true;