@intutic/shared-types 2.3.0 → 2.5.0

package/dist/providerVerification.js

@@ -28,7 +28,11 @@
  */
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.buildVerificationProbe = buildVerificationProbe;
+exports.parseProviderModels = parseProviderModels;
+exports.buildVerificationProbeAsync = buildVerificationProbeAsync;
+exports.classifyProbe = classifyProbe;
 exports.classifyProbeResponse = classifyProbeResponse;
+const cloudProbe_js_1 = require("./cloudProbe.js");
 /**
  * Strip trailing `/` characters, without a regex. `endpoint`/`apiBase` are
  * workspace-provisioned credential fields — CodeQL correctly flagged the
@@ -50,15 +54,14 @@ function stripTrailingSlashes(s) {
  *
  * `fields` is the provider's credential field map exactly as stored — the
  * same shape `PROVIDER_REGISTRY`'s `ProviderCredentialField.key`s describe
- * (`providers.ts`), e.g. `{ apiKey: '...' }` for Anthropic, `{ apiKey, endpoint,
- * deploymentName }` for Azure OpenAI.
+ * (`providers.ts`), e.g. `{ apiKey: '...' }` for Anthropic, `{ apiKey, endpoint }`
+ * for Azure OpenAI.
  *
- * Bedrock and Vertex AI return `null`: verifying them means SigV4 request
- * signing or a GCP OAuth2/JWT exchange, neither of which exists anywhere in
- * this codebase yet (the same "real per-provider engineering, not a config
- * change" boundary that also keeps routing those two providers out). A
- * caller seeing `null` should say "cannot verify automatically," not fail
- * the credential.
+ * Bedrock and Vertex AI return `null` here: their probe is signed per
+ * request, which takes WebCrypto and is asynchronous — see
+ * `buildVerificationProbeAsync`, which every executor calls. A caller seeing
+ * `null` from that should say "cannot verify automatically," not fail the
+ * credential.
  */
 function buildVerificationProbe(provider, fields) {
     switch (provider) {
@@ -66,21 +69,16 @@ function buildVerificationProbe(provider, fields) {
             const apiKey = fields.apiKey;
             if (!apiKey)
                 return null;
-            // Anthropic's API has no /v1/models endpoint to probe cheaply, so the
-            // cheapest real call is a 1-max-token message — costs about one token.
+            // Listing models is the cheapest authenticated call Anthropic has: it
+            // spends no tokens, and the answer says which models the key reaches.
+            // 1000 is the page-size ceiling, enough for the whole catalog in one call.
             return {
-                url: 'https://api.anthropic.com/v1/messages',
-                method: 'POST',
+                url: 'https://api.anthropic.com/v1/models?limit=1000',
+                method: 'GET',
                 headers: {
                     'x-api-key': apiKey,
                     'anthropic-version': '2023-06-01',
-                    'content-type': 'application/json',
                 },
-                body: JSON.stringify({
-                    model: 'claude-haiku-4-5',
-                    max_tokens: 1,
-                    messages: [{ role: 'user', content: 'hi' }],
-                }),
             };
         }
         case 'openai': {
@@ -138,7 +136,7 @@ function buildVerificationProbe(provider, fields) {
             if (!apiKey)
                 return null;
             return {
-                url: `https://generativelanguage.googleapis.com/v1beta/models?key=${encodeURIComponent(apiKey)}`,
+                url: `https://generativelanguage.googleapis.com/v1beta/models?pageSize=1000&key=${encodeURIComponent(apiKey)}`,
                 method: 'GET',
                 headers: {},
             };
@@ -174,6 +172,68 @@ function buildVerificationProbe(provider, fields) {
             return null;
     }
 }
+/** `body[listKey][].{idKey}` values that are non-empty strings. */
+function pluck(body, listKey, idKey) {
+    if (typeof body !== 'object' || body === null)
+        return null;
+    const list = body[listKey];
+    if (!Array.isArray(list))
+        return null;
+    const ids = [];
+    for (const entry of list) {
+        const id = typeof entry === 'object' && entry !== null ? entry[idKey] : undefined;
+        if (typeof id === 'string' && id.length > 0)
+            ids.push(id);
+    }
+    return ids;
+}
+/**
+ * The model ids in a provider's list-models answer (the body a `valid`
+ * verification probe got back), deduplicated and sorted; `null` when this
+ * provider's probe does not list the models a request can name, or the body
+ * is not the expected shape.
+ *
+ * Azure OpenAI's probe lists base models, while a request names a deployment,
+ * so its list would mislead; Bedrock and Vertex AI probe identity, not models.
+ */
+function parseProviderModels(provider, body) {
+    let ids;
+    switch (provider) {
+        case 'anthropic':
+        case 'openai':
+        case 'mistral':
+        case 'openrouter':
+        case 'deepseek':
+            ids = pluck(body, 'data', 'id');
+            break;
+        case 'gemini':
+            // Gemini names a model `models/gemini-2.5-pro`; requests use the bare id.
+            ids = pluck(body, 'models', 'name')?.map((n) => (n.startsWith('models/') ? n.slice('models/'.length) : n)) ?? null;
+            break;
+        case 'cohere':
+        case 'ollama':
+            ids = pluck(body, 'models', 'name');
+            break;
+        default:
+            return null;
+    }
+    if (!ids)
+        return null;
+    return [...new Set(ids.filter((id) => id.length > 0))].sort();
+}
+/**
+ * The probe for any provider: a signed cloud probe for Bedrock and Vertex AI
+ * (`cloudProbe.ts`), the plain request description otherwise.
+ */
+async function buildVerificationProbeAsync(provider, fields, now = new Date()) {
+    return (await (0, cloudProbe_js_1.buildCloudVerificationProbe)(provider, fields, now)) ?? buildVerificationProbe(provider, fields);
+}
+/** The verdict for a probe's answer: the probe's own reading when it has one. */
+function classifyProbe(probe, status, headers) {
+    return probe.classify
+        ? probe.classify(status, headers ?? { get: () => null })
+        : classifyProbeResponse(status);
+}
 /**
  * Classify a probe's HTTP response. Deliberately narrow about what counts as
  * "invalid": only 401/403 mean the credential itself is wrong. A 429

package/dist/providerVerification.js.map

@@ -1 +1 @@
-{"version":3,"file":"providerVerification.js","sourceRoot":"","sources":["../src/providerVerification.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AAyCH,wDAqHC;AAcD,sDAIC;AA9KD;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,CAAS;IACrC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,EAAE,CAAA;IAC3C,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC;AAUD;;;;;;;;;;;;;;;GAeG;AACH,SAAgB,sBAAsB,CACpC,QAAgB,EAChB,MAA8B;IAE9B,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,sEAAsE;YACtE,uEAAuE;YACvE,OAAO;gBACL,GAAG,EAAE,uCAAuC;gBAC5C,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE;oBACP,WAAW,EAAE,MAAM;oBACnB,mBAAmB,EAAE,YAAY;oBACjC,cAAc,EAAE,kBAAkB;iBACnC;gBACD,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,KAAK,EAAE,kBAAkB;oBACzB,UAAU,EAAE,CAAC;oBACb,QAAQ,EAAE,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;iBAC5C,CAAC;aACH,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,kCAAkC;gBACvC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,kCAAkC;gBACvC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,qCAAqC;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,oCAAoC;gBACzC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,kCAAkC;gBACvC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,+DAA+D,kBAAkB,CAAC,MAAM,CAAC,EAAE;gBAChG,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE;aACZ,CAAA;QACH,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpF,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACrC,OAAO;gBACL,GAAG,EAAE,GAAG,QAAQ,uCAAuC;gBACvD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACjF,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YACzB,mEAAmE;YACnE,sEAAsE;YACtE,uDAAuD;YACvD,OAAO;gBACL,GAAG,EAAE,GAAG,OAAO,WAAW;gBAC1B,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE;aACZ,CAAA;QACH,CAAC;QAED,KAAK,SAAS,CAAC;QACf,KAAK,WAAW;YACd,OAAO,IAAI,CAAA;QAEb;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC;AAID;;;;;;;;;GASG;AACH,SAAgB,qBAAqB,CAAC,UAAkB;IACtD,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG;QAAE,OAAO,OAAO,CAAA;IACzD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IAC9D,OAAO,SAAS,CAAA;AAClB,CAAC"}
+{"version":3,"file":"providerVerification.js","sourceRoot":"","sources":["../src/providerVerification.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;GA0BG;;AAgDH,wDAgHC;AA0BD,kDAuBC;AAMD,kEAMC;AAGD,sCAQC;AAYD,sDAIC;AAtPD,mDAA6D;AAE7D;;;;;;;;GAQG;AACH,SAAS,oBAAoB,CAAC,CAAS;IACrC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAA;IAClB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,EAAE,CAAA;IAC3C,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAA;AACxB,CAAC;AAgBD;;;;;;;;;;;;;;GAcG;AACH,SAAgB,sBAAsB,CACpC,QAAgB,EAChB,MAA8B;IAE9B,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,sEAAsE;YACtE,sEAAsE;YACtE,2EAA2E;YAC3E,OAAO;gBACL,GAAG,EAAE,gDAAgD;gBACrD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE;oBACP,WAAW,EAAE,MAAM;oBACnB,mBAAmB,EAAE,YAAY;iBAClC;aACF,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,kCAAkC;gBACvC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,SAAS,CAAC,CAAC,CAAC;YACf,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,kCAAkC;gBACvC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,YAAY,CAAC,CAAC,CAAC;YAClB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,qCAAqC;gBAC1C,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,UAAU,CAAC,CAAC,CAAC;YAChB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,oCAAoC;gBACzC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,kCAAkC;gBACvC,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;aAC/C,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,IAAI,CAAC,MAAM;gBAAE,OAAO,IAAI,CAAA;YACxB,OAAO;gBACL,GAAG,EAAE,6EAA6E,kBAAkB,CAAC,MAAM,CAAC,EAAE;gBAC9G,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE;aACZ,CAAA;QACH,CAAC;QAED,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,CAAA;YAC5B,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACpF,IAAI,CAAC,MAAM,IAAI,CAAC,QAAQ;gBAAE,OAAO,IAAI,CAAA;YACrC,OAAO;gBACL,GAAG,EAAE,GAAG,QAAQ,uCAAuC;gBACvD,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE,SAAS,EAAE,MAAM,EAAE;aAC/B,CAAA;QACH,CAAC;QAED,KAAK,QAAQ,CAAC,CAAC,CAAC;YACd,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;YACjF,IAAI,CAAC,OAAO;gBAAE,OAAO,IAAI,CAAA;YACzB,mEAAmE;YACnE,sEAAsE;YACtE,uDAAuD;YACvD,OAAO;gBACL,GAAG,EAAE,GAAG,OAAO,WAAW;gBAC1B,MAAM,EAAE,KAAK;gBACb,OAAO,EAAE,EAAE;aACZ,CAAA;QACH,CAAC;QAED,KAAK,SAAS,CAAC;QACf,KAAK,WAAW;YACd,OAAO,IAAI,CAAA;QAEb;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC;AAID,mEAAmE;AACnE,SAAS,KAAK,CAAC,IAAa,EAAE,OAAe,EAAE,KAAa;IAC1D,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IAC1D,MAAM,IAAI,GAAI,IAAgC,CAAC,OAAO,CAAC,CAAA;IACvD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAA;IACrC,MAAM,GAAG,GAAa,EAAE,CAAA;IACxB,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;QACzB,MAAM,EAAE,GAAG,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,CAAC,CAAC,CAAE,KAAiC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAA;QAC9G,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IAC3D,CAAC;IACD,OAAO,GAAG,CAAA;AACZ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,mBAAmB,CAAC,QAAgB,EAAE,IAAa;IACjE,IAAI,GAAoB,CAAA;IACxB,QAAQ,QAAQ,EAAE,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,QAAQ,CAAC;QACd,KAAK,SAAS,CAAC;QACf,KAAK,YAAY,CAAC;QAClB,KAAK,UAAU;YACb,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAA;YAC/B,MAAK;QACP,KAAK,QAAQ;YACX,0EAA0E;YAC1E,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAA;YAClH,MAAK;QACP,KAAK,QAAQ,CAAC;QACd,KAAK,QAAQ;YACX,GAAG,GAAG,KAAK,CAAC,IAAI,EAAE,QAAQ,EAAE,MAAM,CAAC,CAAA;YACnC,MAAK;QACP;YACE,OAAO,IAAI,CAAA;IACf,CAAC;IACD,IAAI,CAAC,GAAG;QAAE,OAAO,IAAI,CAAA;IACrB,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAA;AAC/D,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,2BAA2B,CAC/C,QAAgB,EAChB,MAA8B,EAC9B,MAAY,IAAI,IAAI,EAAE;IAEtB,OAAO,CAAC,MAAM,IAAA,2CAA2B,EAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,CAAC,CAAC,IAAI,sBAAsB,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAA;AAC/G,CAAC;AAED,iFAAiF;AACjF,SAAgB,aAAa,CAC3B,KAA2B,EAC3B,MAAc,EACd,OAA8C;IAE9C,OAAO,KAAK,CAAC,QAAQ;QACnB,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,OAAO,IAAI,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC;QACxD,CAAC,CAAC,qBAAqB,CAAC,MAAM,CAAC,CAAA;AACnC,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,qBAAqB,CAAC,UAAkB;IACtD,IAAI,UAAU,IAAI,GAAG,IAAI,UAAU,GAAG,GAAG;QAAE,OAAO,OAAO,CAAA;IACzD,IAAI,UAAU,KAAK,GAAG,IAAI,UAAU,KAAK,GAAG;QAAE,OAAO,SAAS,CAAA;IAC9D,OAAO,SAAS,CAAA;AAClB,CAAC"}

package/dist/providers.d.ts

@@ -11,6 +11,11 @@
  * new provider's *field layout* is a data change here, not new code in
  * every place that touches credentials.
  *
+ * AWS Bedrock, Google Vertex AI and Azure OpenAI are routed by the proxy's
+ * `src/cloud` module: requests name them as `bedrock/<model id>`,
+ * `vertex/<model>` and `azure/<deployment>`, and the stored blob is the
+ * region/endpoint plus credential that module signs or authenticates with.
+ *
  * Deliberately NOT exhaustive — LiteLLM supports 100+ providers. This is a
  * representative slice spanning the shapes that actually differ (single
  * key, multi-field cloud credential, self-hosted endpoint, structured
@@ -19,13 +24,16 @@
  * of these shapes is adding one entry, not new plumbing.
  *
  * `routingLive: true` means `packages/proxy` actually forwards requests to
- * this provider today (`fetch_provider_credential` in `proxy.rs` knows its
- * field name). `routingLive: false` means the credential can be
- * pre-provisioned here, but nothing in the proxy calls it yet — routing
- * support is separate, real per-provider engineering (a new `Provider`
- * enum variant, `get_model_provider`, pricing in `pricing.rs`), not a
- * config change. The dashboard wizard must say so, not imply the key is
- * live the moment it's saved.
+ * this provider today: it has an upstream for it (`provider_from_wire_id` in
+ * `proxy.rs`, which a proxy test holds this flag to). Gemini models are served
+ * on the Messages, Chat Completions and Responses routes, through the
+ * Gemini API translation; the proxy refuses the native `/v1beta/models/…`
+ * route, whose model is named in the URL. `routingLive: false` means the
+ * credential can be pre-provisioned here, but nothing in the proxy calls it
+ * yet — routing support is separate, real per-provider engineering (a new
+ * `Provider` enum variant, `get_model_provider`, pricing in `pricing.rs`),
+ * not a config change. The dashboard wizard must say so, not imply the key
+ * is live the moment it's saved.
  *
  * @module
  */
@@ -47,6 +55,15 @@ export interface ProviderDefinition {
     /** Link to the provider's own API-key docs, shown in the wizard. */
     docsUrl?: string;
     fields: ProviderCredentialField[];
+    /**
+     * Alternative credential sets, at least one of which must be complete —
+     * e.g. Bedrock takes an access key pair OR a Bedrock API key. Each inner
+     * list names field keys that are required together. Fields named here
+     * are `required: false` individually.
+     */
+    requiresOneOf?: string[][];
+    /** Shown above the fields: how requests name this provider's models. */
+    usageHint?: string;
     /** See module doc — whether packages/proxy currently routes to this provider. */
     routingLive: boolean;
 }
@@ -93,11 +110,31 @@ export declare const DEEPSEEK_API_MODEL_IDS: readonly ["deepseek-chat", "deepsee
  * against the Rust source; if the heuristic changes there, change it here in
  * the same commit.
  *
- * Order matters and matches the Rust exactly: claude → gemini → '/'
- * (OpenRouter's vendor/model namespacing — checked before the mistral
- * prefixes so "mistralai/..." routes to OpenRouter) → an exact DeepSeek API
- * id ({@link DEEPSEEK_API_MODEL_IDS}) → mistral prefixes → OpenAI as the
- * default arm.
+ * Order matters and matches the Rust exactly: a cloud prefix
+ * ({@link cloudProviderForModel}) → claude → gemini → '/' (OpenRouter's
+ * vendor/model namespacing — checked before the mistral prefixes so
+ * "mistralai/..." routes to OpenRouter) → an exact DeepSeek API id
+ * ({@link DEEPSEEK_API_MODEL_IDS}) → mistral prefixes → OpenAI as the
+ * default arm. A `config.yaml` model alias is not visible here: it lives in
+ * the proxy's own configuration.
+ */
+export declare function inferProviderForModel(model: string): CloudProviderId | 'anthropic' | 'gemini' | 'openrouter' | 'deepseek' | 'mistral' | 'openai';
+/** Registry ids of the providers the proxy reaches through its cloud adapters. */
+export type CloudProviderId = 'bedrock' | 'vertex_ai' | 'azure_openai';
+/**
+ * The cloud provider a `bedrock/`, `vertex/` (or `vertex_ai/`) or `azure/`
+ * model name routes to — `crate::cloud::parse_prefixed` in the proxy.
+ */
+export declare function cloudProviderForModel(model: string): CloudProviderId | undefined;
+/** Host suffixes a workspace's Azure endpoint may use — `AZURE_HOST_SUFFIXES` in the proxy. */
+export declare const AZURE_ENDPOINT_HOST_SUFFIXES: readonly [".openai.azure.com", ".services.ai.azure.com", ".cognitiveservices.azure.com"];
+/**
+ * The same checks the proxy applies when it reads a stored cloud credential
+ * (`cloud::config::from_workspace`), so a credential the proxy would refuse
+ * is refused when it is saved instead. Returns the reason, or `null`.
+ * Regions, locations and project ids become part of a hostname or URL path;
+ * the Azure endpoint is a host the gateway sends the key to, so it must be
+ * an Azure resource over TLS.
  */
-export declare function inferProviderForModel(model: string): 'anthropic' | 'gemini' | 'openrouter' | 'deepseek' | 'mistral' | 'openai';
+export declare function checkCloudCredentialFields(providerId: string, values: Record<string, string>): string | null;
 //# sourceMappingURL=providers.d.ts.map

package/dist/providers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;AAEH,6DAA6D;AAC7D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,uBAAuB;IACtC,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,iBAAiB,CAAA;IACvB,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,uBAAuB,EAAE,CAAA;IACjC,iFAAiF;IACjF,WAAW,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,yBAAyB,4CAA6C,CAAA;AAEnF,eAAO,MAAM,iBAAiB,EAAE,kBAAkB,EAgGjD,CAAA;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEhF;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,mEAAoE,CAAA;AAEvG;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GACZ,WAAW,GAAG,QAAQ,GAAG,YAAY,GAAG,UAAU,GAAG,SAAS,GAAG,QAAQ,CAU3E"}
+{"version":3,"file":"providers.d.ts","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,6DAA6D;AAC7D,MAAM,MAAM,iBAAiB,GAAG,MAAM,GAAG,UAAU,GAAG,UAAU,CAAA;AAEhE,MAAM,WAAW,uBAAuB;IACtC,iFAAiF;IACjF,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,iBAAiB,CAAA;IACvB,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,oEAAoE;IACpE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,uBAAuB,EAAE,CAAA;IACjC;;;;;OAKG;IACH,aAAa,CAAC,EAAE,MAAM,EAAE,EAAE,CAAA;IAC1B,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iFAAiF;IACjF,WAAW,EAAE,OAAO,CAAA;CACrB;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,eAAO,MAAM,yBAAyB,4CAA6C,CAAA;AAEnF,eAAO,MAAM,iBAAiB,EAAE,kBAAkB,EA6GjD,CAAA;AAED,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,MAAM,GAAG,kBAAkB,GAAG,SAAS,CAEhF;AAED,wBAAgB,iBAAiB,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAErD;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,mEAAoE,CAAA;AAEvG;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CACnC,KAAK,EAAE,MAAM,GAEX,eAAe,GACf,WAAW,GACX,QAAQ,GACR,YAAY,GACZ,UAAU,GACV,SAAS,GACT,QAAQ,CAYX;AAED,kFAAkF;AAClF,MAAM,MAAM,eAAe,GAAG,SAAS,GAAG,WAAW,GAAG,cAAc,CAAA;AAEtE;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,MAAM,GAAG,eAAe,GAAG,SAAS,CAchF;AAED,+FAA+F;AAC/F,eAAO,MAAM,4BAA4B,0FAI/B,CAAA;AAIV;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,MAAM,GAAG,IAAI,CAuC5G"}

package/dist/providers.js

@@ -12,6 +12,11 @@
  * new provider's *field layout* is a data change here, not new code in
  * every place that touches credentials.
  *
+ * AWS Bedrock, Google Vertex AI and Azure OpenAI are routed by the proxy's
+ * `src/cloud` module: requests name them as `bedrock/<model id>`,
+ * `vertex/<model>` and `azure/<deployment>`, and the stored blob is the
+ * region/endpoint plus credential that module signs or authenticates with.
+ *
  * Deliberately NOT exhaustive — LiteLLM supports 100+ providers. This is a
  * representative slice spanning the shapes that actually differ (single
  * key, multi-field cloud credential, self-hosted endpoint, structured
@@ -20,21 +25,26 @@
  * of these shapes is adding one entry, not new plumbing.
  *
  * `routingLive: true` means `packages/proxy` actually forwards requests to
- * this provider today (`fetch_provider_credential` in `proxy.rs` knows its
- * field name). `routingLive: false` means the credential can be
- * pre-provisioned here, but nothing in the proxy calls it yet — routing
- * support is separate, real per-provider engineering (a new `Provider`
- * enum variant, `get_model_provider`, pricing in `pricing.rs`), not a
- * config change. The dashboard wizard must say so, not imply the key is
- * live the moment it's saved.
+ * this provider today: it has an upstream for it (`provider_from_wire_id` in
+ * `proxy.rs`, which a proxy test holds this flag to). Gemini models are served
+ * on the Messages, Chat Completions and Responses routes, through the
+ * Gemini API translation; the proxy refuses the native `/v1beta/models/…`
+ * route, whose model is named in the URL. `routingLive: false` means the
+ * credential can be pre-provisioned here, but nothing in the proxy calls it
+ * yet — routing support is separate, real per-provider engineering (a new
+ * `Provider` enum variant, `get_model_provider`, pricing in `pricing.rs`),
+ * not a config change. The dashboard wizard must say so, not imply the key
+ * is live the moment it's saved.
  *
  * @module
  */
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.DEEPSEEK_API_MODEL_IDS = exports.PROVIDER_REGISTRY = exports.LIVE_ROUTING_PROVIDER_IDS = void 0;
+exports.AZURE_ENDPOINT_HOST_SUFFIXES = exports.DEEPSEEK_API_MODEL_IDS = exports.PROVIDER_REGISTRY = exports.LIVE_ROUTING_PROVIDER_IDS = void 0;
 exports.getProviderDefinition = getProviderDefinition;
 exports.isKnownProviderId = isKnownProviderId;
 exports.inferProviderForModel = inferProviderForModel;
+exports.cloudProviderForModel = cloudProviderForModel;
+exports.checkCloudCredentialFields = checkCloudCredentialFields;
 /**
  * The 3 providers this system supported before this registry existed —
  * their storage format (`{provider}_api_key`, a flat string field) is
@@ -75,34 +85,45 @@ exports.PROVIDER_REGISTRY = [
         displayName: 'Google Gemini',
         docsUrl: 'https://aistudio.google.com/app/apikey',
         fields: [{ key: 'apiKey', label: 'API Key', type: 'password', required: true }],
-        // The proxy resolves gemini-* models but forwards the request without
-        // translating it to Gemini's generateContent format, so no request
-        // succeeds. The key keeps its flat-field storage
-        // (LIVE_ROUTING_PROVIDER_IDS), so a key saved now is the one the proxy
-        // reads once Gemini routing ships.
-        routingLive: false,
+        routingLive: true,
     },
     {
         id: 'azure_openai',
         displayName: 'Azure OpenAI',
-        docsUrl: 'https://learn.microsoft.com/azure/ai-services/openai/how-to/create-resource',
+        docsUrl: 'https://learn.microsoft.com/azure/ai-foundry/openai/how-to/create-resource',
         fields: [
+            {
+                key: 'endpoint',
+                label: 'Resource Endpoint',
+                type: 'text',
+                required: true,
+                placeholder: 'https://your-resource.openai.azure.com',
+                helpText: 'An *.openai.azure.com, *.services.ai.azure.com or *.cognitiveservices.azure.com resource URL.',
+            },
             { key: 'apiKey', label: 'API Key', type: 'password', required: true },
-            { key: 'endpoint', label: 'Resource Endpoint', type: 'text', required: true, placeholder: 'https://your-resource.openai.azure.com' },
-            { key: 'deploymentName', label: 'Deployment Name', type: 'text', required: true },
         ],
-        routingLive: false,
+        usageHint: 'Name a deployment as azure/<deployment> in the model field.',
+        routingLive: true,
     },
     {
         id: 'bedrock',
         displayName: 'AWS Bedrock',
         docsUrl: 'https://docs.aws.amazon.com/bedrock/latest/userguide/getting-started.html',
         fields: [
-            { key: 'awsAccessKeyId', label: 'AWS Access Key ID', type: 'password', required: true },
-            { key: 'awsSecretAccessKey', label: 'AWS Secret Access Key', type: 'password', required: true },
             { key: 'awsRegion', label: 'AWS Region', type: 'text', required: true, placeholder: 'us-east-1' },
+            { key: 'awsAccessKeyId', label: 'AWS Access Key ID', type: 'password', required: false },
+            { key: 'awsSecretAccessKey', label: 'AWS Secret Access Key', type: 'password', required: false },
+            {
+                key: 'apiKey',
+                label: 'Bedrock API Key',
+                type: 'password',
+                required: false,
+                helpText: 'Instead of an access key pair.',
+            },
         ],
-        routingLive: false,
+        requiresOneOf: [['awsAccessKeyId', 'awsSecretAccessKey'], ['apiKey']],
+        usageHint: 'Name a model as bedrock/<model id>, e.g. bedrock/anthropic.claude-opus-4-7.',
+        routingLive: true,
     },
     {
         id: 'vertex_ai',
@@ -110,9 +131,11 @@ exports.PROVIDER_REGISTRY = [
         docsUrl: 'https://cloud.google.com/vertex-ai/docs/authentication',
         fields: [
             { key: 'projectId', label: 'GCP Project ID', type: 'text', required: true },
+            { key: 'location', label: 'Location', type: 'text', required: false, placeholder: 'global' },
             { key: 'serviceAccountJson', label: 'Service Account JSON', type: 'textarea', required: true, helpText: 'The full JSON key file contents for a service account with Vertex AI access.' },
         ],
-        routingLive: false,
+        usageHint: 'Name a model as vertex/<model>, e.g. vertex/claude-sonnet-4-5@20250929 or vertex/gemini-2.5-pro.',
+        routingLive: true,
     },
     {
         id: 'cohere',
@@ -178,13 +201,18 @@ exports.DEEPSEEK_API_MODEL_IDS = ['deepseek-chat', 'deepseek-reasoner', 'deepsee
  * against the Rust source; if the heuristic changes there, change it here in
  * the same commit.
  *
- * Order matters and matches the Rust exactly: claude → gemini → '/'
- * (OpenRouter's vendor/model namespacing — checked before the mistral
- * prefixes so "mistralai/..." routes to OpenRouter) → an exact DeepSeek API
- * id ({@link DEEPSEEK_API_MODEL_IDS}) → mistral prefixes → OpenAI as the
- * default arm.
+ * Order matters and matches the Rust exactly: a cloud prefix
+ * ({@link cloudProviderForModel}) → claude → gemini → '/' (OpenRouter's
+ * vendor/model namespacing — checked before the mistral prefixes so
+ * "mistralai/..." routes to OpenRouter) → an exact DeepSeek API id
+ * ({@link DEEPSEEK_API_MODEL_IDS}) → mistral prefixes → OpenAI as the
+ * default arm. A `config.yaml` model alias is not visible here: it lives in
+ * the proxy's own configuration.
  */
 function inferProviderForModel(model) {
+    const cloud = cloudProviderForModel(model);
+    if (cloud)
+        return cloud;
     const m = model.toLowerCase();
     if (m.includes('claude'))
         return 'anthropic';
@@ -199,4 +227,80 @@ function inferProviderForModel(model) {
     }
     return 'openai';
 }
+/**
+ * The cloud provider a `bedrock/`, `vertex/` (or `vertex_ai/`) or `azure/`
+ * model name routes to — `crate::cloud::parse_prefixed` in the proxy.
+ */
+function cloudProviderForModel(model) {
+    const slash = model.indexOf('/');
+    if (slash <= 0 || model.slice(slash + 1).trim() === '')
+        return undefined;
+    switch (model.slice(0, slash).toLowerCase()) {
+        case 'bedrock':
+            return 'bedrock';
+        case 'vertex':
+        case 'vertex_ai':
+            return 'vertex_ai';
+        case 'azure':
+            return 'azure_openai';
+        default:
+            return undefined;
+    }
+}
+/** Host suffixes a workspace's Azure endpoint may use — `AZURE_HOST_SUFFIXES` in the proxy. */
+exports.AZURE_ENDPOINT_HOST_SUFFIXES = [
+    '.openai.azure.com',
+    '.services.ai.azure.com',
+    '.cognitiveservices.azure.com',
+];
+const CLOUD_NAME = /^[a-z0-9][a-z0-9-]{0,31}$/;
+/**
+ * The same checks the proxy applies when it reads a stored cloud credential
+ * (`cloud::config::from_workspace`), so a credential the proxy would refuse
+ * is refused when it is saved instead. Returns the reason, or `null`.
+ * Regions, locations and project ids become part of a hostname or URL path;
+ * the Azure endpoint is a host the gateway sends the key to, so it must be
+ * an Azure resource over TLS.
+ */
+function checkCloudCredentialFields(providerId, values) {
+    switch (providerId) {
+        case 'bedrock':
+            return CLOUD_NAME.test(values.awsRegion ?? '') ? null : 'AWS Region must be a region name such as us-east-1';
+        case 'vertex_ai': {
+            if (!/^[a-z0-9-]{1,64}$/.test(values.projectId ?? ''))
+                return 'GCP Project ID must be a project id or number';
+            if (values.location !== undefined && !CLOUD_NAME.test(values.location)) {
+                return 'Location must be a location name such as us-east5 or global';
+            }
+            let doc;
+            try {
+                doc = JSON.parse(values.serviceAccountJson ?? '');
+            }
+            catch {
+                return 'Service Account JSON is not valid JSON';
+            }
+            const type = doc?.type;
+            return type === 'service_account' || type === 'authorized_user'
+                ? null
+                : 'Service Account JSON must be a service_account (or authorized_user) credential file';
+        }
+        case 'azure_openai': {
+            let url;
+            try {
+                url = new URL(values.endpoint ?? '');
+            }
+            catch {
+                return 'Resource Endpoint must be a URL';
+            }
+            const host = url.hostname.toLowerCase();
+            const label = exports.AZURE_ENDPOINT_HOST_SUFFIXES.map((sfx) => (host.endsWith(sfx) ? host.slice(0, -sfx.length) : null)).find((l) => l !== null);
+            const ok = url.protocol === 'https:' && url.port === '' && url.username === '' && !!label && /^[a-z0-9-]+$/.test(label);
+            return ok
+                ? null
+                : 'Resource Endpoint must be https://<resource>.openai.azure.com, .services.ai.azure.com or .cognitiveservices.azure.com';
+        }
+        default:
+            return null;
+    }
+}
 //# sourceMappingURL=providers.js.map

package/dist/providers.js.map

@@ -1 +1 @@
-{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA8BG;;;AAiJH,sDAEC;AAED,8CAEC;AA6BD,sDAYC;AAtKD;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,yBAAyB,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAEtE,QAAA,iBAAiB,GAAyB;IACrD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,6CAA6C;QACtD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAC1G,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QACtG,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,sEAAsE;QACtE,mEAAmE;QACnE,iDAAiD;QACjD,uEAAuE;QACvE,mCAAmC;QACnC,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,6EAA6E;QACtF,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;YACrE,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wCAAwC,EAAE;YACpI,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,iBAAiB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;SAClF;QACD,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,2EAA2E;QACpF,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;YACvF,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC/F,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;SAClG;QACD,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3E,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,8EAA8E,EAAE;SACzL;QACD,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,kEAAkE;QAClE,wEAAwE;QACxE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;QACtH,WAAW,EAAE,KAAK;KACnB;CACF,CAAA;AAED,SAAgB,qBAAqB,CAAC,EAAU;IAC9C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,CAAU,CAAA;AAEvG;;;;;;;;;;;;;;;;GAgBG;AACH,SAAgB,qBAAqB,CACnC,KAAa;IAEb,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAA;IAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAA;IACxC,IAAK,8BAA4C,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAA;IAChF,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC"}
+{"version":3,"file":"providers.js","sourceRoot":"","sources":["../src/providers.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;;;AAuKH,sDAEC;AAED,8CAEC;AA+BD,sDAqBC;AASD,sDAcC;AAmBD,gEAuCC;AA/QD;;;;;;;;;;;;;;;;;;GAkBG;AACU,QAAA,yBAAyB,GAAG,CAAC,WAAW,EAAE,QAAQ,EAAE,QAAQ,CAAU,CAAA;AAEtE,QAAA,iBAAiB,GAAyB;IACrD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,WAAW;QACxB,OAAO,EAAE,6CAA6C;QACtD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,YAAY,EAAE,CAAC;QAC1G,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,sCAAsC;QAC/C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,CAAC;QACtG,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,eAAe;QAC5B,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,cAAc;QAClB,WAAW,EAAE,cAAc;QAC3B,OAAO,EAAE,4EAA4E;QACrF,MAAM,EAAE;YACN;gBACE,GAAG,EAAE,UAAU;gBACf,KAAK,EAAE,mBAAmB;gBAC1B,IAAI,EAAE,MAAM;gBACZ,QAAQ,EAAE,IAAI;gBACd,WAAW,EAAE,wCAAwC;gBACrD,QAAQ,EAAE,+FAA+F;aAC1G;YACD,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE;SACtE;QACD,SAAS,EAAE,6DAA6D;QACxE,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,aAAa;QAC1B,OAAO,EAAE,2EAA2E;QACpF,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,WAAW,EAAE;YACjG,EAAE,GAAG,EAAE,gBAAgB,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YACxF,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,uBAAuB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,KAAK,EAAE;YAChG;gBACE,GAAG,EAAE,QAAQ;gBACb,KAAK,EAAE,iBAAiB;gBACxB,IAAI,EAAE,UAAU;gBAChB,QAAQ,EAAE,KAAK;gBACf,QAAQ,EAAE,gCAAgC;aAC3C;SACF;QACD,aAAa,EAAE,CAAC,CAAC,gBAAgB,EAAE,oBAAoB,CAAC,EAAE,CAAC,QAAQ,CAAC,CAAC;QACrE,SAAS,EAAE,6EAA6E;QACxF,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,WAAW;QACf,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE;YACN,EAAE,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,gBAAgB,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE;YAC3E,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAAE;YAC5F,EAAE,GAAG,EAAE,oBAAoB,EAAE,KAAK,EAAE,sBAAsB,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,QAAQ,EAAE,8EAA8E,EAAE;SACzL;QACD,SAAS,EAAE,kGAAkG;QAC7G,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,QAAQ;QACrB,OAAO,EAAE,uCAAuC;QAChD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,KAAK;KACnB;IACD;QACE,EAAE,EAAE,SAAS;QACb,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,qCAAqC;QAC9C,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,YAAY;QAChB,WAAW,EAAE,YAAY;QACzB,OAAO,EAAE,4BAA4B;QACrC,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,kEAAkE;QAClE,wEAAwE;QACxE,EAAE,EAAE,UAAU;QACd,WAAW,EAAE,UAAU;QACvB,OAAO,EAAE,wCAAwC;QACjD,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,QAAQ,EAAE,KAAK,EAAE,SAAS,EAAE,IAAI,EAAE,UAAU,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAC;QAC/E,WAAW,EAAE,IAAI;KAClB;IACD;QACE,EAAE,EAAE,QAAQ;QACZ,WAAW,EAAE,sBAAsB;QACnC,OAAO,EAAE,wDAAwD;QACjE,MAAM,EAAE,CAAC,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,WAAW,EAAE,wBAAwB,EAAE,CAAC;QACtH,WAAW,EAAE,KAAK;KACnB;CACF,CAAA;AAED,SAAgB,qBAAqB,CAAC,EAAU;IAC9C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED,SAAgB,iBAAiB,CAAC,EAAU;IAC1C,OAAO,yBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACnD,CAAC;AAED;;;;;;;GAOG;AACU,QAAA,sBAAsB,GAAG,CAAC,eAAe,EAAE,mBAAmB,EAAE,gBAAgB,CAAU,CAAA;AAEvG;;;;;;;;;;;;;;;;;;GAkBG;AACH,SAAgB,qBAAqB,CACnC,KAAa;IASb,MAAM,KAAK,GAAG,qBAAqB,CAAC,KAAK,CAAC,CAAA;IAC1C,IAAI,KAAK;QAAE,OAAO,KAAK,CAAA;IACvB,MAAM,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,CAAA;IAC7B,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,WAAW,CAAA;IAC5C,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAA;IACzC,IAAI,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,YAAY,CAAA;IACxC,IAAK,8BAA4C,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,UAAU,CAAA;IAChF,IAAI,CAAC,CAAC,UAAU,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,UAAU,CAAC,WAAW,CAAC,EAAE,CAAC;QACzF,OAAO,SAAS,CAAA;IAClB,CAAC;IACD,OAAO,QAAQ,CAAA;AACjB,CAAC;AAKD;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,KAAa;IACjD,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAA;IAChC,IAAI,KAAK,IAAI,CAAC,IAAI,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAA;IACxE,QAAQ,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC;QAC5C,KAAK,SAAS;YACZ,OAAO,SAAS,CAAA;QAClB,KAAK,QAAQ,CAAC;QACd,KAAK,WAAW;YACd,OAAO,WAAW,CAAA;QACpB,KAAK,OAAO;YACV,OAAO,cAAc,CAAA;QACvB;YACE,OAAO,SAAS,CAAA;IACpB,CAAC;AACH,CAAC;AAED,+FAA+F;AAClF,QAAA,4BAA4B,GAAG;IAC1C,mBAAmB;IACnB,wBAAwB;IACxB,8BAA8B;CACtB,CAAA;AAEV,MAAM,UAAU,GAAG,2BAA2B,CAAA;AAE9C;;;;;;;GAOG;AACH,SAAgB,0BAA0B,CAAC,UAAkB,EAAE,MAA8B;IAC3F,QAAQ,UAAU,EAAE,CAAC;QACnB,KAAK,SAAS;YACZ,OAAO,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,oDAAoD,CAAA;QAC9G,KAAK,WAAW,CAAC,CAAC,CAAC;YACjB,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC;gBAAE,OAAO,+CAA+C,CAAA;YAC7G,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC;gBACvE,OAAO,6DAA6D,CAAA;YACtE,CAAC;YACD,IAAI,GAAY,CAAA;YAChB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAA;YACnD,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,wCAAwC,CAAA;YACjD,CAAC;YACD,MAAM,IAAI,GAAI,GAAiC,EAAE,IAAI,CAAA;YACrD,OAAO,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,iBAAiB;gBAC7D,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,qFAAqF,CAAA;QAC3F,CAAC;QACD,KAAK,cAAc,CAAC,CAAC,CAAC;YACpB,IAAI,GAAQ,CAAA;YACZ,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAA;YACtC,CAAC;YAAC,MAAM,CAAC;gBACP,OAAO,iCAAiC,CAAA;YAC1C,CAAC;YACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAA;YACvC,MAAM,KAAK,GAAG,oCAA4B,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CACpH,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAClB,CAAA;YACD,MAAM,EAAE,GAAG,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,CAAC,CAAC,KAAK,IAAI,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;YACvH,OAAO,EAAE;gBACP,CAAC,CAAC,IAAI;gBACN,CAAC,CAAC,uHAAuH,CAAA;QAC7H,CAAC;QACD;YACE,OAAO,IAAI,CAAA;IACf,CAAC;AACH,CAAC"}

package/dist/spendBudgets.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Spend budgets and key rate limits — how much LLM spend a workspace, one
+ * virtual key or one member may run up per day or per month, and how many
+ * requests and tokens a virtual key may send per minute.
+ *
+ * A budget is `hard` or `soft`. The LLM proxy refuses a request that a hard
+ * budget's remainder does not cover (`BUDGET_EXCEEDED`, 429, before the
+ * request leaves); a soft budget never refuses. Both raise the workspace's
+ * budget alerts — once at the alert threshold and once at the limit, per
+ * period — as `finops.budget.threshold` / `finops.budget.exceeded`.
+ *
+ * Periods are fixed UTC windows, like MCP call budgets (`mcpBudgets.ts`): a
+ * day starts at 00:00 UTC, a month on the 1st at 00:00 UTC. The window id is
+ * part of every per-key and per-member spend counter's Valkey key, so a new
+ * day or month starts from zero and an old counter expires on its own.
+ *
+ * Spend is what the control plane records per completed call
+ * (`finopsService.incrementSpend`), so a request's own cost lands after it
+ * finishes: the proxy checks a hard budget against the spend recorded so far
+ * plus the request's estimated cost, with the same 20% margin the workspace
+ * cap has always used.
+ *
+ * @module
+ */
+import { z } from 'zod';
+/** A budget's period: a UTC calendar day or a UTC calendar month. */
+export type SpendBudgetPeriod = 'day' | 'month';
+/** `hard` refuses requests the remainder does not cover; `soft` only alerts. */
+export type SpendBudgetEnforcement = 'hard' | 'soft';
+/**
+ * Whose spend a budget limits:
+ * - `workspace` every call in the workspace (Settings › Billing › Budget Limits);
+ * - `key`       the calls one virtual key makes;
+ * - `member`    the calls made with the virtual keys one member owns.
+ */
+export type SpendBudgetScope = 'workspace' | 'key' | 'member';
+export interface SpendBudget {
+    period: SpendBudgetPeriod;
+    limitUsd: number;
+    enforcement: SpendBudgetEnforcement;
+}
+export declare const SPEND_BUDGET_PERIODS: readonly SpendBudgetPeriod[];
+export declare const SPEND_BUDGET_SCOPES: readonly SpendBudgetScope[];
+export declare const MAX_SPEND_BUDGET_USD = 1000000;
+/**
+ * The member budget that applies to every member without one of their own,
+ * period by period. A member's own day budget replaces the default day
+ * budget; the default month budget still applies to them unless they have a
+ * month budget too.
+ */
+export declare const MEMBER_BUDGET_DEFAULT = "default";
+export declare const SpendBudgetSchema: z.ZodObject<{
+    period: z.ZodEnum<["day", "month"]>;
+    limitUsd: z.ZodNumber;
+    enforcement: z.ZodDefault<z.ZodEnum<["hard", "soft"]>>;
+}, "strict", z.ZodTypeAny, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement: "hard" | "soft";
+}, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement?: "hard" | "soft" | undefined;
+}>;
+/** One budget per period at most: a key or member has a day budget, a month budget, both or neither. */
+export declare const SpendBudgetListSchema: z.ZodEffects<z.ZodArray<z.ZodObject<{
+    period: z.ZodEnum<["day", "month"]>;
+    limitUsd: z.ZodNumber;
+    enforcement: z.ZodDefault<z.ZodEnum<["hard", "soft"]>>;
+}, "strict", z.ZodTypeAny, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement: "hard" | "soft";
+}, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement?: "hard" | "soft" | undefined;
+}>, "many">, {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement: "hard" | "soft";
+}[], {
+    period: "day" | "month";
+    limitUsd: number;
+    enforcement?: "hard" | "soft" | undefined;
+}[]>;
+/** Requests and tokens one virtual key may send per minute; `null` (or absent) means no limit. */
+export interface KeyRateLimit {
+    rpm: number | null;
+    tpm: number | null;
+}
+export declare const MAX_KEY_RPM = 100000;
+export declare const MAX_KEY_TPM = 100000000;
+export declare const KeyRateLimitSchema: z.ZodObject<{
+    rpm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+    tpm: z.ZodOptional<z.ZodNullable<z.ZodNumber>>;
+}, "strict", z.ZodTypeAny, {
+    rpm?: number | null | undefined;
+    tpm?: number | null | undefined;
+}, {
+    rpm?: number | null | undefined;
+    tpm?: number | null | undefined;
+}>;
+/**
+ * One hard budget as the proxy reads it from a virtual key's cached auth
+ * entry (`hardBudgets`) and from `GET /api/v1/auth/key-context`. Soft budgets
+ * are not sent: the proxy never refuses on one.
+ */
+export interface HardBudgetWire {
+    scope: SpendBudgetScope;
+    period: SpendBudgetPeriod;
+    limitUsd: number;
+}
+/** The UTC window a moment falls in: its id (part of the counter key), when it began and when it resets. */
+export declare function spendBudgetWindow(period: SpendBudgetPeriod, nowMs: number): {
+    id: string;
+    startMs: number;
+    resetAtMs: number;
+};
+/** A budget in words, for alerts, refusals and the dashboard. */
+export declare function describeSpendBudget(scope: SpendBudgetScope, budget: SpendBudget, subjectLabel?: string): string;
+//# sourceMappingURL=spendBudgets.d.ts.map

package/dist/spendBudgets.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spendBudgets.d.ts","sourceRoot":"","sources":["../src/spendBudgets.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAA;AAEvB,qEAAqE;AACrE,MAAM,MAAM,iBAAiB,GAAG,KAAK,GAAG,OAAO,CAAA;AAE/C,gFAAgF;AAChF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,MAAM,CAAA;AAEpD;;;;;GAKG;AACH,MAAM,MAAM,gBAAgB,GAAG,WAAW,GAAG,KAAK,GAAG,QAAQ,CAAA;AAE7D,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,iBAAiB,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,sBAAsB,CAAA;CACpC;AAED,eAAO,MAAM,oBAAoB,EAAE,SAAS,iBAAiB,EAAqB,CAAA;AAClF,eAAO,MAAM,mBAAmB,EAAE,SAAS,gBAAgB,EAAmC,CAAA;AAC9F,eAAO,MAAM,oBAAoB,UAAY,CAAA;AAE7C;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,YAAY,CAAA;AAE9C,eAAO,MAAM,iBAAiB;;;;;;;;;;;;EAMnB,CAAA;AAEX,wGAAwG;AACxG,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;IAS9B,CAAA;AAEJ,kGAAkG;AAClG,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;CACnB;AAED,eAAO,MAAM,WAAW,SAAU,CAAA;AAClC,eAAO,MAAM,WAAW,YAAc,CAAA;AAEtC,eAAO,MAAM,kBAAkB;;;;;;;;;EAKpB,CAAA;AAEX;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,gBAAgB,CAAA;IACvB,MAAM,EAAE,iBAAiB,CAAA;IACzB,QAAQ,EAAE,MAAM,CAAA;CACjB;AAED,4GAA4G;AAC5G,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,iBAAiB,EACzB,KAAK,EAAE,MAAM,GACZ;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAUpD;AAED,iEAAiE;AACjE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,MAAM,GAAG,MAAM,CAW/G"}