@lobu/core 2.8.0

package/dist/otel.js

@@ -0,0 +1,251 @@
+"use strict";
+/**
+ * OpenTelemetry tracing setup for distributed tracing with Grafana Tempo.
+ * Provides Chrome DevTools-style waterfall visualization in Grafana.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.SpanStatusCode = exports.SpanKind = void 0;
+exports.initTracing = initTracing;
+exports.getTracer = getTracer;
+exports.shutdownTracing = shutdownTracing;
+exports.flushTracing = flushTracing;
+exports.createSpan = createSpan;
+exports.withSpan = withSpan;
+exports.getCurrentSpan = getCurrentSpan;
+exports.runInSpanContext = runInSpanContext;
+exports.createRootSpan = createRootSpan;
+exports.createChildSpan = createChildSpan;
+exports.withChildSpan = withChildSpan;
+exports.getTraceparent = getTraceparent;
+const api_1 = require("@opentelemetry/api");
+Object.defineProperty(exports, "SpanKind", { enumerable: true, get: function () { return api_1.SpanKind; } });
+Object.defineProperty(exports, "SpanStatusCode", { enumerable: true, get: function () { return api_1.SpanStatusCode; } });
+const exporter_trace_otlp_http_1 = require("@opentelemetry/exporter-trace-otlp-http");
+const resources_1 = require("@opentelemetry/resources");
+const sdk_trace_node_1 = require("@opentelemetry/sdk-trace-node");
+const semantic_conventions_1 = require("@opentelemetry/semantic-conventions");
+const logger_1 = require("./logger");
+const logger = (0, logger_1.createLogger)("otel");
+let provider = null;
+let tracer = null;
+/**
+ * Initialize OpenTelemetry tracing.
+ * Call this once at application startup.
+ *
+ * @example
+ * initTracing({
+ *   serviceName: "lobu-gateway",
+ *   tempoEndpoint: "http://lobu-tempo:4318/v1/traces",
+ * });
+ */
+function initTracing(config) {
+    if (provider) {
+        return; // Already initialized
+    }
+    const enabled = config.enabled ?? !!config.tempoEndpoint;
+    if (!enabled) {
+        logger.debug("Tracing disabled (no TEMPO_ENDPOINT configured)");
+        return;
+    }
+    const resource = new resources_1.Resource({
+        [semantic_conventions_1.ATTR_SERVICE_NAME]: config.serviceName,
+        [semantic_conventions_1.ATTR_SERVICE_VERSION]: config.serviceVersion || "1.0.0",
+    });
+    provider = new sdk_trace_node_1.NodeTracerProvider({ resource });
+    // Configure OTLP exporter to send traces to Tempo
+    const exporter = new exporter_trace_otlp_http_1.OTLPTraceExporter({
+        url: config.tempoEndpoint,
+        timeoutMillis: 30000, // 30 second timeout for reliability
+    });
+    // Use SimpleSpanProcessor for immediate export (better for short-lived workers)
+    provider.addSpanProcessor(new sdk_trace_node_1.SimpleSpanProcessor(exporter));
+    provider.register();
+    tracer = api_1.trace.getTracer(config.serviceName, config.serviceVersion);
+    logger.info(`Tracing initialized: ${config.serviceName} -> ${config.tempoEndpoint}`);
+}
+/**
+ * Get the configured tracer. Returns null if not initialized.
+ */
+function getTracer() {
+    return tracer;
+}
+/**
+ * Shutdown tracing gracefully.
+ */
+async function shutdownTracing() {
+    if (provider) {
+        await provider.shutdown();
+        provider = null;
+        tracer = null;
+    }
+}
+/**
+ * Force flush all pending spans to the exporter.
+ * Call this after processing a message to ensure spans are exported promptly.
+ */
+async function flushTracing() {
+    if (provider) {
+        await provider.forceFlush();
+    }
+}
+/**
+ * Create a new span for tracing.
+ * If tracing is not initialized, returns a no-op span.
+ *
+ * @param name Span name (e.g., "queue_processing", "agent_execution")
+ * @param attributes Optional attributes to add to the span
+ * @param parentContext Optional parent context for trace correlation
+ */
+function createSpan(name, attributes, kind = api_1.SpanKind.INTERNAL) {
+    if (!tracer) {
+        return null;
+    }
+    const span = tracer.startSpan(name, {
+        kind,
+        attributes,
+    });
+    return span;
+}
+/**
+ * Execute a function within a span context.
+ * Automatically handles span lifecycle (start, end, error recording).
+ *
+ * @example
+ * const result = await withSpan("process_message", async (span) => {
+ *   span?.setAttribute("messageId", messageId);
+ *   return await processMessage();
+ * });
+ */
+async function withSpan(name, fn, attributes) {
+    const span = createSpan(name, attributes);
+    try {
+        const result = await fn(span);
+        span?.setStatus({ code: api_1.SpanStatusCode.OK });
+        return result;
+    }
+    catch (error) {
+        if (span) {
+            span.setStatus({
+                code: api_1.SpanStatusCode.ERROR,
+                message: error instanceof Error ? error.message : String(error),
+            });
+            span.recordException(error);
+        }
+        throw error;
+    }
+    finally {
+        span?.end();
+    }
+}
+/**
+ * Get current active span from context.
+ */
+function getCurrentSpan() {
+    return api_1.trace.getActiveSpan();
+}
+/**
+ * Run a function within a span context, propagating the span.
+ */
+function runInSpanContext(span, fn) {
+    const ctx = api_1.trace.setSpan(api_1.context.active(), span);
+    return api_1.context.with(ctx, fn);
+}
+/**
+ * Create a root span and return traceparent header for propagation.
+ * Use this at the entry point (message ingestion) to start a trace.
+ *
+ * @example
+ * const { span, traceparent } = createRootSpan("message_received", { messageId });
+ * // Store traceparent in message metadata for downstream propagation
+ * await queueProducer.enqueueMessage({ ...data, platformMetadata: { traceparent } });
+ * span.end();
+ */
+function createRootSpan(name, attributes) {
+    if (!tracer) {
+        return { span: null, traceparent: null };
+    }
+    const span = tracer.startSpan(name, {
+        kind: api_1.SpanKind.SERVER,
+        attributes,
+    });
+    // Extract W3C traceparent header from span context
+    const spanContext = span.spanContext();
+    const traceparent = `00-${spanContext.traceId}-${spanContext.spanId}-01`;
+    return { span, traceparent };
+}
+/**
+ * Create a child span from a traceparent header.
+ * Use this to continue a trace in downstream services (queue consumer, worker).
+ *
+ * @example
+ * const traceparent = data.platformMetadata?.traceparent;
+ * const span = createChildSpan("queue_processing", traceparent, { jobId });
+ * // ... do work ...
+ * span?.end();
+ */
+function createChildSpan(name, traceparent, attributes) {
+    if (!tracer) {
+        return null;
+    }
+    if (!traceparent) {
+        // No parent context - create independent span
+        return createSpan(name, attributes);
+    }
+    // Parse W3C traceparent: 00-traceId-parentSpanId-flags
+    const parts = traceparent.split("-");
+    if (parts.length !== 4) {
+        return createSpan(name, attributes);
+    }
+    const traceId = parts[1];
+    const parentSpanId = parts[2];
+    // Create span context from traceparent
+    const parentContext = api_1.trace.setSpanContext(api_1.context.active(), {
+        traceId,
+        spanId: parentSpanId,
+        traceFlags: 1, // sampled
+        isRemote: true,
+    });
+    // Start span as child of the propagated context
+    return tracer.startSpan(name, { kind: api_1.SpanKind.INTERNAL, attributes }, parentContext);
+}
+/**
+ * Run a function within a child span context.
+ * Automatically handles span lifecycle and error recording.
+ *
+ * @example
+ * const result = await withChildSpan("process_job", traceparent, async (span) => {
+ *   span?.setAttribute("jobId", jobId);
+ *   return await processJob();
+ * });
+ */
+async function withChildSpan(name, traceparent, fn, attributes) {
+    const span = createChildSpan(name, traceparent, attributes);
+    try {
+        const result = await fn(span);
+        span?.setStatus({ code: api_1.SpanStatusCode.OK });
+        return result;
+    }
+    catch (error) {
+        if (span) {
+            span.setStatus({
+                code: api_1.SpanStatusCode.ERROR,
+                message: error instanceof Error ? error.message : String(error),
+            });
+            span.recordException(error);
+        }
+        throw error;
+    }
+    finally {
+        span?.end();
+    }
+}
+/**
+ * Extract traceparent from span for propagation to downstream services.
+ */
+function getTraceparent(span) {
+    if (!span)
+        return null;
+    const ctx = span.spanContext();
+    return `00-${ctx.traceId}-${ctx.spanId}-01`;
+}
+//# sourceMappingURL=otel.js.map

package/dist/otel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"otel.js","sourceRoot":"","sources":["../src/otel.ts"],"names":[],"mappings":";AAAA;;;GAGG;;;AAsCH,kCAiCC;AAKD,8BAEC;AAKD,0CAMC;AAMD,oCAIC;AAUD,gCAeC;AAYD,4BAuBC;AAKD,wCAEC;AAKD,4CAGC;AAYD,wCAkBC;AAYD,0CAqCC;AAYD,sCAwBC;AAKD,wCAIC;AAvSD,4CAA8E;AA0SrE,yFA1SS,cAAQ,OA0ST;AAAE,+FA1SS,oBAAc,OA0ST;AAzSjC,sFAA4E;AAC5E,wDAAoD;AACpD,kEAGuC;AACvC,8EAG6C;AAC7C,qCAAwC;AAExC,MAAM,MAAM,GAAG,IAAA,qBAAY,EAAC,MAAM,CAAC,CAAC;AAEpC,IAAI,QAAQ,GAA8B,IAAI,CAAC;AAC/C,IAAI,MAAM,GAAkB,IAAI,CAAC;AASjC;;;;;;;;;GASG;AACH,SAAgB,WAAW,CAAC,MAAkB;IAC5C,IAAI,QAAQ,EAAE,CAAC;QACb,OAAO,CAAC,sBAAsB;IAChC,CAAC;IAED,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,IAAI,CAAC,CAAC,MAAM,CAAC,aAAa,CAAC;IACzD,IAAI,CAAC,OAAO,EAAE,CAAC;QACb,MAAM,CAAC,KAAK,CAAC,iDAAiD,CAAC,CAAC;QAChE,OAAO;IACT,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,oBAAQ,CAAC;QAC5B,CAAC,wCAAiB,CAAC,EAAE,MAAM,CAAC,WAAW;QACvC,CAAC,2CAAoB,CAAC,EAAE,MAAM,CAAC,cAAc,IAAI,OAAO;KACzD,CAAC,CAAC;IAEH,QAAQ,GAAG,IAAI,mCAAkB,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC;IAEhD,kDAAkD;IAClD,MAAM,QAAQ,GAAG,IAAI,4CAAiB,CAAC;QACrC,GAAG,EAAE,MAAM,CAAC,aAAa;QACzB,aAAa,EAAE,KAAK,EAAE,oCAAoC;KAC3D,CAAC,CAAC;IAEH,gFAAgF;IAChF,QAAQ,CAAC,gBAAgB,CAAC,IAAI,oCAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC;IAC7D,QAAQ,CAAC,QAAQ,EAAE,CAAC;IAEpB,MAAM,GAAG,WAAK,CAAC,SAAS,CAAC,MAAM,CAAC,WAAW,EAAE,MAAM,CAAC,cAAc,CAAC,CAAC;IAEpE,MAAM,CAAC,IAAI,CACT,wBAAwB,MAAM,CAAC,WAAW,OAAO,MAAM,CAAC,aAAa,EAAE,CACxE,CAAC;AACJ,CAAC;AAED;;GAEG;AACH,SAAgB,SAAS;IACvB,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;GAEG;AACI,KAAK,UAAU,eAAe;IACnC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,QAAQ,EAAE,CAAC;QAC1B,QAAQ,GAAG,IAAI,CAAC;QAChB,MAAM,GAAG,IAAI,CAAC;IAChB,CAAC;AACH,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,YAAY;IAChC,IAAI,QAAQ,EAAE,CAAC;QACb,MAAM,QAAQ,CAAC,UAAU,EAAE,CAAC;IAC9B,CAAC;AACH,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,UAAU,CACxB,IAAY,EACZ,UAAsD,EACtD,OAAiB,cAAQ,CAAC,QAAQ;IAElC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;QAClC,IAAI;QACJ,UAAU;KACX,CAAC,CAAC;IAEH,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,QAAQ,CAC5B,IAAY,EACZ,EAAqC,EACrC,UAAsD;IAEtD,MAAM,IAAI,GAAG,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IAE1C,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAc,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,oBAAc,CAAC,KAAK;gBAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAAC,KAAc,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,GAAG,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc;IAC5B,OAAO,WAAK,CAAC,aAAa,EAAE,CAAC;AAC/B,CAAC;AAED;;GAEG;AACH,SAAgB,gBAAgB,CAAI,IAAU,EAAE,EAAW;IACzD,MAAM,GAAG,GAAG,WAAK,CAAC,OAAO,CAAC,aAAO,CAAC,MAAM,EAAE,EAAE,IAAI,CAAC,CAAC;IAClD,OAAO,aAAO,CAAC,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,cAAc,CAC5B,IAAY,EACZ,UAAsD;IAEtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IAC3C,CAAC;IAED,MAAM,IAAI,GAAG,MAAM,CAAC,SAAS,CAAC,IAAI,EAAE;QAClC,IAAI,EAAE,cAAQ,CAAC,MAAM;QACrB,UAAU;KACX,CAAC,CAAC;IAEH,mDAAmD;IACnD,MAAM,WAAW,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IACvC,MAAM,WAAW,GAAG,MAAM,WAAW,CAAC,OAAO,IAAI,WAAW,CAAC,MAAM,KAAK,CAAC;IAEzE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;AAC/B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,eAAe,CAC7B,IAAY,EACZ,WAAsC,EACtC,UAAsD;IAEtD,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC;IACd,CAAC;IAED,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,8CAA8C;QAC9C,OAAO,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,uDAAuD;IACvD,MAAM,KAAK,GAAG,WAAW,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,UAAU,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;IACtC,CAAC;IAED,MAAM,OAAO,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAC1B,MAAM,YAAY,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;IAE/B,uCAAuC;IACvC,MAAM,aAAa,GAAG,WAAK,CAAC,cAAc,CAAC,aAAO,CAAC,MAAM,EAAE,EAAE;QAC3D,OAAO;QACP,MAAM,EAAE,YAAY;QACpB,UAAU,EAAE,CAAC,EAAE,UAAU;QACzB,QAAQ,EAAE,IAAI;KACf,CAAC,CAAC;IAEH,gDAAgD;IAChD,OAAO,MAAM,CAAC,SAAS,CACrB,IAAI,EACJ,EAAE,IAAI,EAAE,cAAQ,CAAC,QAAQ,EAAE,UAAU,EAAE,EACvC,aAAa,CACd,CAAC;AACJ,CAAC;AAED;;;;;;;;;GASG;AACI,KAAK,UAAU,aAAa,CACjC,IAAY,EACZ,WAAsC,EACtC,EAAqC,EACrC,UAAsD;IAEtD,MAAM,IAAI,GAAG,eAAe,CAAC,IAAI,EAAE,WAAW,EAAE,UAAU,CAAC,CAAC;IAE5D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,EAAE,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,EAAE,SAAS,CAAC,EAAE,IAAI,EAAE,oBAAc,CAAC,EAAE,EAAE,CAAC,CAAC;QAC7C,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,IAAI,EAAE,CAAC;YACT,IAAI,CAAC,SAAS,CAAC;gBACb,IAAI,EAAE,oBAAc,CAAC,KAAK;gBAC1B,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;aAChE,CAAC,CAAC;YACH,IAAI,CAAC,eAAe,CAAC,KAAc,CAAC,CAAC;QACvC,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;YAAS,CAAC;QACT,IAAI,EAAE,GAAG,EAAE,CAAC;IACd,CAAC;AACH,CAAC;AAED;;GAEG;AACH,SAAgB,cAAc,CAAC,IAAiB;IAC9C,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,GAAG,GAAG,IAAI,CAAC,WAAW,EAAE,CAAC;IAC/B,OAAO,MAAM,GAAG,CAAC,OAAO,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;AAC9C,CAAC"}

package/dist/plugin-types.d.ts

@@ -0,0 +1,42 @@
+/**
+ * OpenClaw plugin types for Lobu.
+ *
+ * Supports loading existing OpenClaw community plugins.
+ */
+/** Supported plugin slots */
+export type PluginSlot = "tool" | "provider" | "memory";
+/** Configuration for a single plugin */
+export interface PluginConfig {
+    /** npm package name or local path (e.g., "@openclaw/voice-call", "./my-plugin") */
+    source: string;
+    /** Which slot this plugin fills */
+    slot: PluginSlot;
+    /** Whether this plugin is enabled (default: true) */
+    enabled?: boolean;
+    /** Plugin-specific configuration passed through to the plugin runtime */
+    config?: Record<string, unknown>;
+}
+/** Top-level plugins configuration stored in agent settings */
+export interface PluginsConfig {
+    plugins: PluginConfig[];
+}
+/** Metadata about a loaded plugin */
+export interface PluginManifest {
+    /** Source identifier (package name or path) */
+    source: string;
+    /** Plugin slot */
+    slot: PluginSlot;
+    /** Display name (from package or source) */
+    name: string;
+}
+/**
+ * A provider registration captured from pi.registerProvider().
+ * The config is opaque here — it's passed directly to ModelRegistry.registerProvider().
+ */
+export interface ProviderRegistration {
+    /** Provider name (e.g., "corporate-ai", "my-proxy") */
+    name: string;
+    /** Provider config (ProviderConfigInput from pi-coding-agent) */
+    config: Record<string, unknown>;
+}
+//# sourceMappingURL=plugin-types.d.ts.map

package/dist/plugin-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-types.d.ts","sourceRoot":"","sources":["../src/plugin-types.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAEH,6BAA6B;AAC7B,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,UAAU,GAAG,QAAQ,CAAC;AAExD,wCAAwC;AACxC,MAAM,WAAW,YAAY;IAC3B,mFAAmF;IACnF,MAAM,EAAE,MAAM,CAAC;IACf,mCAAmC;IACnC,IAAI,EAAE,UAAU,CAAC;IACjB,qDAAqD;IACrD,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,yEAAyE;IACzE,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CAClC;AAED,+DAA+D;AAC/D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,YAAY,EAAE,CAAC;CACzB;AAED,qCAAqC;AACrC,MAAM,WAAW,cAAc;IAC7B,+CAA+C;IAC/C,MAAM,EAAE,MAAM,CAAC;IACf,kBAAkB;IAClB,IAAI,EAAE,UAAU,CAAC;IACjB,4CAA4C;IAC5C,IAAI,EAAE,MAAM,CAAC;CACd;AAED;;;GAGG;AACH,MAAM,WAAW,oBAAoB;IACnC,uDAAuD;IACvD,IAAI,EAAE,MAAM,CAAC;IACb,iEAAiE;IACjE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC"}

package/dist/plugin-types.js

@@ -0,0 +1,8 @@
+"use strict";
+/**
+ * OpenClaw plugin types for Lobu.
+ *
+ * Supports loading existing OpenClaw community plugins.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=plugin-types.js.map

package/dist/plugin-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin-types.js","sourceRoot":"","sources":["../src/plugin-types.ts"],"names":[],"mappings":";AAAA;;;;GAIG"}

package/dist/provider-config-types.d.ts

@@ -0,0 +1,53 @@
+/**
+ * Shared types for config-driven LLM providers.
+ * Loaded from the `providers` section of system skills config.
+ */
+export interface ProviderConfigEntry {
+    /** Display name in settings page (e.g. "Groq") */
+    displayName: string;
+    /** Provider icon URL */
+    iconUrl: string;
+    /** Env var name for API key (e.g. "GROQ_API_KEY") */
+    envVarName: string;
+    /** Provider's API base URL (e.g. "https://api.groq.com/openai") */
+    upstreamBaseUrl: string;
+    /** HTML help text for the settings page API key input */
+    apiKeyInstructions: string;
+    /** Placeholder text for the API key input */
+    apiKeyPlaceholder: string;
+    /** SDK compatibility hint — "openai" means OpenAI-compatible API format */
+    sdkCompat?: "openai";
+    /** Default model ID when none is configured */
+    defaultModel?: string;
+    /** Relative path to fetch model list (e.g. "/v1/models") */
+    modelsEndpoint?: string;
+    /** Override provider name for model registry lookup */
+    registryAlias?: string;
+    /** Whether to show in "Add Provider" catalog (default: true) */
+    catalogVisible?: boolean;
+    /**
+     * Optional speech-to-text configuration.
+     * If omitted and sdkCompat is "openai", STT is enabled with default endpoint/model.
+     * Use this block to override endpoint/model or disable STT for a provider.
+     */
+    stt?: {
+        /** Set false to disable STT even when this block exists. */
+        enabled?: boolean;
+        /** STT protocol compatibility; currently only OpenAI-compatible is supported here. */
+        sdkCompat?: "openai";
+        /** Optional upstream base URL override for STT requests. */
+        baseUrl?: string;
+        /** Relative or absolute transcription endpoint path/URL. */
+        transcriptionPath?: string;
+        /** STT model ID (for OpenAI-compatible endpoints). */
+        model?: string;
+    };
+}
+/** Metadata passed from gateway to worker for config-driven providers. */
+export interface ConfigProviderMeta {
+    sdkCompat?: "openai";
+    defaultModel?: string;
+    registryAlias?: string;
+    baseUrlEnvVar: string;
+}
+//# sourceMappingURL=provider-config-types.d.ts.map

package/dist/provider-config-types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config-types.d.ts","sourceRoot":"","sources":["../src/provider-config-types.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,MAAM,WAAW,mBAAmB;IAClC,kDAAkD;IAClD,WAAW,EAAE,MAAM,CAAC;IACpB,wBAAwB;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,qDAAqD;IACrD,UAAU,EAAE,MAAM,CAAC;IACnB,mEAAmE;IACnE,eAAe,EAAE,MAAM,CAAC;IACxB,yDAAyD;IACzD,kBAAkB,EAAE,MAAM,CAAC;IAC3B,6CAA6C;IAC7C,iBAAiB,EAAE,MAAM,CAAC;IAC1B,2EAA2E;IAC3E,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,+CAA+C;IAC/C,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,4DAA4D;IAC5D,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,gEAAgE;IAChE,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB;;;;OAIG;IACH,GAAG,CAAC,EAAE;QACJ,4DAA4D;QAC5D,OAAO,CAAC,EAAE,OAAO,CAAC;QAClB,sFAAsF;QACtF,SAAS,CAAC,EAAE,QAAQ,CAAC;QACrB,4DAA4D;QAC5D,OAAO,CAAC,EAAE,MAAM,CAAC;QACjB,4DAA4D;QAC5D,iBAAiB,CAAC,EAAE,MAAM,CAAC;QAC3B,sDAAsD;QACtD,KAAK,CAAC,EAAE,MAAM,CAAC;KAChB,CAAC;CACH;AAED,0EAA0E;AAC1E,MAAM,WAAW,kBAAkB;IACjC,SAAS,CAAC,EAAE,QAAQ,CAAC;IACrB,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,aAAa,EAAE,MAAM,CAAC;CACvB"}

package/dist/provider-config-types.js

@@ -0,0 +1,7 @@
+"use strict";
+/**
+ * Shared types for config-driven LLM providers.
+ * Loaded from the `providers` section of system skills config.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=provider-config-types.js.map

package/dist/provider-config-types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-config-types.js","sourceRoot":"","sources":["../src/provider-config-types.ts"],"names":[],"mappings":";AAAA;;;GAGG"}

package/dist/redis/base-store.d.ts

@@ -0,0 +1,73 @@
+import type Redis from "ioredis";
+import { type Logger } from "../logger";
+export interface RedisStoreConfig {
+    redis: Redis;
+    keyPrefix: string;
+    loggerName: string;
+}
+/**
+ * Base class for all Redis-backed stores
+ * Provides common CRUD operations with JSON serialization
+ *
+ * Consolidates:
+ * - packages/gateway/src/auth/credential-store.ts (BaseCredentialStore)
+ * - packages/gateway/src/infrastructure/redis/store.ts (BaseRedisStore)
+ */
+export declare abstract class BaseRedisStore<T> {
+    protected logger: Logger;
+    protected redis: Redis;
+    protected keyPrefix: string;
+    constructor(config: RedisStoreConfig);
+    /**
+     * Build Redis key from parts
+     */
+    protected buildKey(...parts: string[]): string;
+    /**
+     * Get value from Redis
+     * Returns null if not found or validation fails
+     */
+    protected get(key: string): Promise<T | null>;
+    /**
+     * Set value in Redis
+     */
+    protected set(key: string, value: T, ttlSeconds?: number): Promise<void>;
+    /**
+     * Delete value from Redis
+     */
+    protected delete(key: string): Promise<void>;
+    /**
+     * Scan for all keys matching a prefix (cursor-based, production-safe).
+     * Returns full key strings matching `{prefix}*`.
+     */
+    protected scanByPrefix(prefix: string): Promise<string[]>;
+    /**
+     * Check if key exists in Redis
+     */
+    protected exists(key: string): Promise<boolean>;
+    /**
+     * Serialize value to string
+     * Override for custom serialization
+     */
+    protected serialize(value: T): string;
+    /**
+     * Deserialize string to value
+     * Override for custom deserialization
+     */
+    protected deserialize(data: string): T;
+    /**
+     * Validate value after deserialization
+     * Override to add custom validation logic
+     * Return false to reject invalid data
+     */
+    protected validate(_value: T): boolean;
+}
+/**
+ * Specialized base for credential stores
+ * Validates that accessToken field exists
+ */
+export declare abstract class BaseCredentialStore<T extends {
+    accessToken: string;
+}> extends BaseRedisStore<T> {
+    protected validate(value: T): boolean;
+}
+//# sourceMappingURL=base-store.d.ts.map

package/dist/redis/base-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-store.d.ts","sourceRoot":"","sources":["../../src/redis/base-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,KAAK,MAAM,SAAS,CAAC;AACjC,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAC;AAOtD,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,KAAK,CAAC;IACb,SAAS,EAAE,MAAM,CAAC;IAClB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED;;;;;;;GAOG;AACH,8BAAsB,cAAc,CAAC,CAAC;IACpC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC;IACzB,SAAS,CAAC,KAAK,EAAE,KAAK,CAAC;IACvB,SAAS,CAAC,SAAS,EAAE,MAAM,CAAC;gBAEhB,MAAM,EAAE,gBAAgB;IAMpC;;OAEG;IACH,SAAS,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,EAAE,GAAG,MAAM;IAI9C;;;OAGG;cACa,GAAG,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAyBnD;;OAEG;cACa,GAAG,CACjB,GAAG,EAAE,MAAM,EACX,KAAK,EAAE,CAAC,EACR,UAAU,CAAC,EAAE,MAAM,GAClB,OAAO,CAAC,IAAI,CAAC;IAiBhB;;OAEG;cACa,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAWlD;;;OAGG;cACa,YAAY,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,EAAE,CAAC;IAwB/D;;OAEG;cACa,MAAM,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAarD;;;OAGG;IACH,SAAS,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC,GAAG,MAAM;IAQrC;;;OAGG;IACH,SAAS,CAAC,WAAW,CAAC,IAAI,EAAE,MAAM,GAAG,CAAC;IAQtC;;;;OAIG;IACH,SAAS,CAAC,QAAQ,CAAC,MAAM,EAAE,CAAC,GAAG,OAAO;CAGvC;AAED;;;GAGG;AACH,8BAAsB,mBAAmB,CACvC,CAAC,SAAS;IAAE,WAAW,EAAE,MAAM,CAAA;CAAE,CACjC,SAAQ,cAAc,CAAC,CAAC,CAAC;cACN,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO;CAO/C"}

package/dist/redis/base-store.js

@@ -0,0 +1,174 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.BaseCredentialStore = exports.BaseRedisStore = void 0;
+const logger_1 = require("../logger");
+const json_1 = require("../utils/json");
+function errMsg(error) {
+    return error instanceof Error ? error.message : String(error);
+}
+/**
+ * Base class for all Redis-backed stores
+ * Provides common CRUD operations with JSON serialization
+ *
+ * Consolidates:
+ * - packages/gateway/src/auth/credential-store.ts (BaseCredentialStore)
+ * - packages/gateway/src/infrastructure/redis/store.ts (BaseRedisStore)
+ */
+class BaseRedisStore {
+    constructor(config) {
+        this.redis = config.redis;
+        this.keyPrefix = config.keyPrefix;
+        this.logger = (0, logger_1.createLogger)(config.loggerName);
+    }
+    /**
+     * Build Redis key from parts
+     */
+    buildKey(...parts) {
+        return [this.keyPrefix, ...parts].join(":");
+    }
+    /**
+     * Get value from Redis
+     * Returns null if not found or validation fails
+     */
+    async get(key) {
+        try {
+            const data = await this.redis.get(key);
+            if (!data) {
+                return null;
+            }
+            const value = this.deserialize(data);
+            // Validate after deserialization
+            if (!this.validate(value)) {
+                this.logger.warn("Invalid data after deserialization", { key });
+                return null;
+            }
+            return value;
+        }
+        catch (error) {
+            this.logger.error("Failed to get from Redis", {
+                error: errMsg(error),
+                key,
+            });
+            return null;
+        }
+    }
+    /**
+     * Set value in Redis
+     */
+    async set(key, value, ttlSeconds) {
+        try {
+            const data = this.serialize(value);
+            if (ttlSeconds) {
+                await this.redis.setex(key, ttlSeconds, data);
+            }
+            else {
+                await this.redis.set(key, data);
+            }
+        }
+        catch (error) {
+            this.logger.error("Failed to set in Redis", {
+                error: errMsg(error),
+                key,
+            });
+            throw error;
+        }
+    }
+    /**
+     * Delete value from Redis
+     */
+    async delete(key) {
+        try {
+            await this.redis.del(key);
+        }
+        catch (error) {
+            this.logger.error("Failed to delete from Redis", {
+                error: errMsg(error),
+                key,
+            });
+        }
+    }
+    /**
+     * Scan for all keys matching a prefix (cursor-based, production-safe).
+     * Returns full key strings matching `{prefix}*`.
+     */
+    async scanByPrefix(prefix) {
+        const results = [];
+        let cursor = "0";
+        try {
+            do {
+                const [nextCursor, keys] = await this.redis.scan(cursor, "MATCH", `${prefix}*`, "COUNT", 100);
+                cursor = nextCursor;
+                results.push(...keys);
+            } while (cursor !== "0");
+        }
+        catch (error) {
+            this.logger.error("Failed to scan by prefix", {
+                error: errMsg(error),
+                prefix,
+            });
+        }
+        return results;
+    }
+    /**
+     * Check if key exists in Redis
+     */
+    async exists(key) {
+        try {
+            const result = await this.redis.exists(key);
+            return result === 1;
+        }
+        catch (error) {
+            this.logger.error("Failed to check existence in Redis", {
+                error: errMsg(error),
+                key,
+            });
+            return false;
+        }
+    }
+    /**
+     * Serialize value to string
+     * Override for custom serialization
+     */
+    serialize(value) {
+        const result = (0, json_1.safeJsonStringify)(value);
+        if (result === null) {
+            throw new Error("Failed to serialize value to JSON");
+        }
+        return result;
+    }
+    /**
+     * Deserialize string to value
+     * Override for custom deserialization
+     */
+    deserialize(data) {
+        const result = (0, json_1.safeJsonParse)(data);
+        if (result === null) {
+            throw new Error("Failed to deserialize JSON data");
+        }
+        return result;
+    }
+    /**
+     * Validate value after deserialization
+     * Override to add custom validation logic
+     * Return false to reject invalid data
+     */
+    validate(_value) {
+        return true;
+    }
+}
+exports.BaseRedisStore = BaseRedisStore;
+/**
+ * Specialized base for credential stores
+ * Validates that accessToken field exists
+ */
+class BaseCredentialStore extends BaseRedisStore {
+    validate(value) {
+        if (!value.accessToken) {
+            this.logger.warn("Invalid credentials: missing accessToken");
+            return false;
+        }
+        return true;
+    }
+}
+exports.BaseCredentialStore = BaseCredentialStore;
+//# sourceMappingURL=base-store.js.map

package/dist/redis/base-store.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-store.js","sourceRoot":"","sources":["../../src/redis/base-store.ts"],"names":[],"mappings":";;;AACA,sCAAsD;AACtD,wCAAiE;AAEjE,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAChE,CAAC;AAQD;;;;;;;GAOG;AACH,MAAsB,cAAc;IAKlC,YAAY,MAAwB;QAClC,IAAI,CAAC,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;QAC1B,IAAI,CAAC,SAAS,GAAG,MAAM,CAAC,SAAS,CAAC;QAClC,IAAI,CAAC,MAAM,GAAG,IAAA,qBAAY,EAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChD,CAAC;IAED;;OAEG;IACO,QAAQ,CAAC,GAAG,KAAe;QACnC,OAAO,CAAC,IAAI,CAAC,SAAS,EAAE,GAAG,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAC9C,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,GAAG,CAAC,GAAW;QAC7B,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACvC,IAAI,CAAC,IAAI,EAAE,CAAC;gBACV,OAAO,IAAI,CAAC;YACd,CAAC;YAED,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC;YAErC,iCAAiC;YACjC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;gBAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;gBAChE,OAAO,IAAI,CAAC;YACd,CAAC;YAED,OAAO,KAAK,CAAC;QACf,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBAC5C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,GAAG;aACJ,CAAC,CAAC;YACH,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,GAAG,CACjB,GAAW,EACX,KAAQ,EACR,UAAmB;QAEnB,IAAI,CAAC;YACH,MAAM,IAAI,GAAG,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;YACnC,IAAI,UAAU,EAAE,CAAC;gBACf,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,EAAE,UAAU,EAAE,IAAI,CAAC,CAAC;YAChD,CAAC;iBAAM,CAAC;gBACN,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;YAClC,CAAC;QACH,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;gBAC1C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,GAAG;aACJ,CAAC,CAAC;YACH,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,MAAM,CAAC,GAAW;QAChC,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAC5B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,6BAA6B,EAAE;gBAC/C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,GAAG;aACJ,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,KAAK,CAAC,YAAY,CAAC,MAAc;QACzC,MAAM,OAAO,GAAa,EAAE,CAAC;QAC7B,IAAI,MAAM,GAAG,GAAG,CAAC;QACjB,IAAI,CAAC;YACH,GAAG,CAAC;gBACF,MAAM,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAC9C,MAAM,EACN,OAAO,EACP,GAAG,MAAM,GAAG,EACZ,OAAO,EACP,GAAG,CACJ,CAAC;gBACF,MAAM,GAAG,UAAU,CAAC;gBACpB,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;YACxB,CAAC,QAAQ,MAAM,KAAK,GAAG,EAAE;QAC3B,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,0BAA0B,EAAE;gBAC5C,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,MAAM;aACP,CAAC,CAAC;QACL,CAAC;QACD,OAAO,OAAO,CAAC;IACjB,CAAC;IAED;;OAEG;IACO,KAAK,CAAC,MAAM,CAAC,GAAW;QAChC,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YAC5C,OAAO,MAAM,KAAK,CAAC,CAAC;QACtB,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC,oCAAoC,EAAE;gBACtD,KAAK,EAAE,MAAM,CAAC,KAAK,CAAC;gBACpB,GAAG;aACJ,CAAC,CAAC;YACH,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED;;;OAGG;IACO,SAAS,CAAC,KAAQ;QAC1B,MAAM,MAAM,GAAG,IAAA,wBAAiB,EAAC,KAAK,CAAC,CAAC;QACxC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,mCAAmC,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACO,WAAW,CAAC,IAAY;QAChC,MAAM,MAAM,GAAG,IAAA,oBAAa,EAAI,IAAI,CAAC,CAAC;QACtC,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;QACrD,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;;OAIG;IACO,QAAQ,CAAC,MAAS;QAC1B,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAjKD,wCAiKC;AAED;;;GAGG;AACH,MAAsB,mBAEpB,SAAQ,cAAiB;IACN,QAAQ,CAAC,KAAQ;QAClC,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,CAAC,CAAC;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC;CACF;AAVD,kDAUC"}

package/dist/sentry.d.ts

@@ -0,0 +1,12 @@
+/**
+ * Initialize Sentry with configuration from environment variables
+ * Falls back to hardcoded DSN if SENTRY_DSN is not provided
+ * Uses dynamic import to avoid module resolution issues in dev mode
+ */
+export declare function initSentry(): Promise<void>;
+/**
+ * Get the initialized Sentry instance
+ * @returns Sentry instance or null if not initialized
+ */
+export declare function getSentry(): typeof import("@sentry/node") | null;
+//# sourceMappingURL=sentry.d.ts.map

package/dist/sentry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sentry.d.ts","sourceRoot":"","sources":["../src/sentry.ts"],"names":[],"mappings":"AAaA;;;;GAIG;AACH,wBAAsB,UAAU,kBA2B/B;AAED;;;GAGG;AACH,wBAAgB,SAAS,IAAI,cAAc,cAAc,CAAC,GAAG,IAAI,CAEhE"}