@makaio/framework 1.0.0-dev-1779048017991 → 1.0.0-dev-1781022866275

package/dist/adapters/config/index.d.mts

@@ -1,429 +0,0 @@
-import { g as BaseAgentConnectorConfig } from "../../types-CD1LJwPc.mjs";
-import { z } from "zod";
-import { IMakaioBus, MakaioBusContext } from "@makaio/framework/bus";
-import { AIModelSchema, ProtocolId, ProviderContext } from "@makaio/framework/contracts";
-import { BaseAdapterConfigSchema, CredentialRef, ProviderConfigSchema, ProviderDefaultsSchema } from "@makaio/framework/contracts/config";
-import { ClientExecutionContext } from "@makaio/framework/contracts/client";
-import { ProviderRecord } from "@makaio/framework/services/settings/storage";
-import { TimeoutConfig, TrackedTimeoutConfig } from "@makaio/framework/utils";
-import { ProviderConfigFileRecord } from "@makaio/framework/services/adapter-subsystem";
-import { Simplify } from "type-fest";
-
-//#region adapters/core/src/config/resolve-credential-ref.d.ts
-/**
- * Dependency overrides for credential resolution.
- */
-interface ResolveCredentialRefDeps {
-  /** Read a file path for file: refs. */
-  readFile?: (path: string) => Promise<string>;
-  /** Read an environment variable for env: refs. */
-  readEnv?: (name: string) => string | undefined;
-  /** Resolve keychain credentials for keychain: refs. */
-  resolveKeychain?: (service: string, account: string) => Promise<string | null>;
-}
-/**
- * Resolve a credential reference to its runtime value.
- *
- * Supported formats:
- * - env:VAR_NAME
- * - file:/path/to/secret
- * - keychain:service:account (requires resolveKeychain)
- * @param ref - Credential reference string
- * @param deps - Optional dependency overrides for resolution
- * @returns Resolved credential value or null if not found
- */
-declare function resolveCredentialRef(ref: CredentialRef, deps?: ResolveCredentialRefDeps): Promise<string | null>;
-//#endregion
-//#region adapters/core/src/config/preset.d.ts
-/**
- * Resolve a provider definition by ID and require a concrete `defaultModel`.
- * @param definitions - Available provider definitions for an adapter.
- * @param definitionId - Provider definition identifier to resolve.
- * @returns The matching definition with a guaranteed `defaultModel`.
- * @throws Error when the definition does not exist or does not define `defaultModel`.
- */
-declare function getDefinitionOrThrow<TDefinition extends {
-  id: string;
-  defaultModel?: string;
-}>(definitions: TDefinition[], definitionId: string): TDefinition & {
-  defaultModel: string;
-};
-//#endregion
-//#region adapters/core/src/config/schemas.d.ts
-/**
- * Base schema for adapter provider configuration.
- *
- * Adapters extend this schema to add provider-specific fields.
- * All fields use `.describe()` to provide UI hints for form generation.
- *
- * This schema is intentionally empty - it serves as a type marker.
- * Adapters define their own providerSettings fields.
- * @example
- * ```typescript
- * // In adapter definition:
- * const MyProviderSettingsSchema = BaseProviderSettingsSchema.extend({
- *   apiKey: z.string().describe('API key for authentication'),
- *   baseUrl: z.string().url().optional().describe('Custom API endpoint'),
- * });
- * ```
- */
-declare const BaseProviderConfigSchema: z.ZodRecord<z.ZodString, z.ZodUnknown>;
-//#endregion
-//#region adapters/core/src/config/types.d.ts
-/**
- * Base provider configuration type.
- * Adapters extend this for their provider-specific fields.
- */
-type BaseProviderConfig = z.infer<typeof BaseProviderConfigSchema>;
-/**
- * AI model information type.
- */
-type AIModel = z.infer<typeof AIModelSchema>;
-/**
- * Provider defaults configuration type.
- */
-type ProviderDefaults = z.infer<typeof ProviderDefaultsSchema>;
-/**
- * Configuration for a single adapter provider.
- */
-type ProviderConfig = z.infer<typeof ProviderConfigSchema>;
-/**
- * Adapter configuration file structure.
- * Stored at `~/.makaio/adapters/<adapterName>/config.json`.
- */
-type BaseAdapterConfig = z.infer<typeof BaseAdapterConfigSchema>;
-//#endregion
-//#region adapters/core/src/config/factory.d.ts
-/**
- * Adapter-level defaults that can be set by the factory.
- * Generic over TConfig to get type-safe providerConfig.
- * Excludes runtime fields (agentId, sessionId, adapterName).
- * All fields optional — model comes from provider config at runtime.
- */
-type AdapterDefaults<TConfig extends BaseAgentConnectorConfig = BaseAgentConnectorConfig> = Partial<Omit<TConfig, 'agentId' | 'sessionId' | 'adapterName' | 'bus'>>;
-/**
- * Options for creating an adapter config factory.
- * Captures the adapter-specific constants needed to resolve config.
- * @typeParam TConfig - The adapter's full config type for type-safe defaults
- */
-interface CreateAdapterConfigFactoryOptions<TConfig extends BaseAgentConnectorConfig> {
-  /** Adapter type name (e.g., 'claude-code', 'gemini-sdk') */
-  adapterName: string;
-  /** Adapter-level defaults (model required, others optional including providerConfig) */
-  adapterDefaults: AdapterDefaults<TConfig>;
-  /**
-   * Optional Zod schema for provider config validation.
-   * Currently unused — pass `null`. Retained as an extension point for
-   * future runtime validation of merged provider config shapes.
-   */
-  schema: z.ZodObject<z.ZodRawShape> | null;
-  /** Adapter definition containing defaultTimeouts */
-  adapterDefinition: {
-    defaultTimeouts?: TimeoutConfig;
-  };
-  /** Wire protocol used to select the correct provider endpoint URL from endpointOverrides. */
-  protocol: ProtocolId;
-}
-/**
- * Minimal input shape required by the factory.
- * Adapters pass their full ConfigFactoryInput which extends this.
- */
-interface AdapterConfigFactoryInput<TConfig extends BaseAgentConnectorConfig> {
-  bus: TConfig extends BaseAgentConnectorConfig<infer TBus> ? TBus : never;
-  agentId: string;
-  adapterName: string;
-  adapterId: string;
-  /**
-   * Unresolved provider context (credential refs, not plaintext).
-   * Connectors resolve credentials locally via `resolveConnectorCredentials()`.
-   */
-  providerContext: ProviderContext;
-  model?: string;
-  cwd?: string;
-  env?: Record<string, string>;
-  providerConfig?: Partial<TConfig['providerConfig']>;
-  runtimeTimeouts?: TimeoutConfig;
-}
-/**
- * Fields guaranteed by the factory (overrides any optional versions from input).
- */
-interface FactoryGuaranteedFields<TProviderConfig> {
-  adapterName: string;
-  model: string;
-  cwd: string;
-  timeouts: TrackedTimeoutConfig;
-  providerConfig: TProviderConfig;
-}
-/**
- * Result type: input + adapter defaults + guaranteed fields.
- * Simplify flattens the intersection for better type display.
- */
-type ConfigFactoryResult<TInput extends AdapterConfigFactoryInput<TConfig>, TConfig extends BaseAgentConnectorConfig, TProviderConfig = TConfig['providerConfig']> = Simplify<AdapterDefaults<TConfig> & Omit<TInput, 'providerConfig'> & FactoryGuaranteedFields<TProviderConfig>>;
-type AdapterConfigFactory<TConfig extends BaseAgentConnectorConfig, TProviderConfig> = {
-  getConfig: <TInput extends AdapterConfigFactoryInput<TConfig>>(input: TInput) => Promise<ConfigFactoryResult<TInput, TConfig, TProviderConfig>>; /** Lazily evaluate the thunk and return adapter defaults (model, fastModel, etc.) */
-  getDefaults: () => AdapterDefaults<TConfig>;
-};
-/**
- * Create a standardized adapter config factory.
- *
- * Eliminates ceremony by encapsulating the common pattern:
- * 1. Read unresolved providerContext (credential refs only — no plaintext on the bus)
- * 2. resolveTimeouts with adapter + runtime layers
- * 3. Merge providerConfigDefaults with runtime providerConfig (credentials resolved by connector)
- *
- * The factory is pure: it does not dispatch any bus requests and does not
- * resolve credentials. Connectors call `resolveConnectorCredentials()` locally.
- *
- * Options are provided via thunk to enable lazy evaluation, avoiding circular
- * dependency issues when config.ts imports from index.ts (for adapterDefinition)
- * and adapter.ts (for adapterName).
- * @param optionsThunk - Thunk returning factory configuration options
- * @returns Factory with getConfig method
- * @example
- * ```typescript
- * export const GeminiSdkConfig = createAdapterConfigFactory<GeminiConnectorConfig>(() => ({
- *   adapterName: GeminiSdkAdapterName,
- *   adapterDefaults: { model: 'gemini-2.5-pro' },
- *   schema: null,
- *   adapterDefinition: { defaultTimeouts: DEFAULT_TIMEOUTS },
- *   protocol: 'openai',
- * }));
- * ```
- */
-declare function createAdapterConfigFactory<TConfig extends BaseAgentConnectorConfig, TProviderConfig = TConfig['providerConfig']>(optionsThunk: () => CreateAdapterConfigFactoryOptions<TConfig>): AdapterConfigFactory<TConfig, TProviderConfig>;
-//#endregion
-//#region adapters/core/src/config/resolve-provider-endpoint.d.ts
-/**
- * Resolved HTTP endpoint credentials for a provider.
- * Returned by {@link resolveProviderEndpoint} for use by infrastructure-layer
- * consumers (bridges, cloud STT/TTS clients, etc.) that need to make direct
- * HTTP calls to a provider API without an agent context.
- */
-interface ProviderEndpoint {
-  /** Base URL for the provider's HTTP API. */
-  baseUrl: string;
-  /**
-   * API key for authenticating requests to the provider.
-   * This helper is intentionally scoped to apiKey-authenticated HTTP providers.
-   */
-  apiKey: string;
-}
-/**
- * Resolve `{ baseUrl, apiKey }` for a given provider config and wire protocol
- * without requiring an agent context.
- *
- * Intended for infrastructure-layer consumers (e.g., adapter-voice-bridge, cloud
- * STT/TTS providers) that need to make HTTP calls to cloud providers but are not
- * part of an agent turn.
- *
- * Delegates the common lookup chain (config → definition → endpoint → credentials)
- * to {@link resolveProviderResolution} and applies strict validation on the result:
- * both `baseUrl` and `apiKey` must be present or an error is thrown.
- *
- * Resolution order for the endpoint URL:
- * 1. `ProviderConfig.endpointOverrides[protocol]` (user-customised URL)
- * 2. `ProviderDefinition.endpoints[protocol]` (default from provider package)
- *
- * Credentials are resolved from the config's stored credential refs via the bus.
- * @param bus - Makaio bus instance used to query storage and resolve credential refs
- * @param providerConfigId - UUID of the ProviderConfig entity to resolve
- * @param protocol - Wire protocol to select the correct endpoint URL
- * @returns Resolved `{ baseUrl, apiKey }` for the provider
- * @throws Error when the ProviderConfig or its ProviderDefinition is not found, or
- *   when `baseUrl` or `apiKey` cannot be resolved from any source
- */
-declare function resolveProviderEndpoint(bus: IMakaioBus, providerConfigId: string, protocol: ProtocolId): Promise<ProviderEndpoint>;
-//#endregion
-//#region adapters/core/src/config/resolve-provider-resolution.d.ts
-/**
- * Fully resolved provider data returned by {@link resolveProviderResolution}.
- *
- * Callers use this to build protocol-specific outputs (e.g. adapter config,
- * HTTP endpoint) without duplicating the lookup chain.
- */
-interface ProviderResolution {
-  /** Bus-safe provider config read model from the adapter subsystem. */
-  config: ProviderConfigFileRecord;
-  /** The ProviderDefinition record referenced by the config. */
-  definition: ProviderRecord;
-  /**
-   * Resolved base URL for the requested protocol.
-   * `null` when neither the config override nor the definition declares an
-   * endpoint for the requested protocol.
-   */
-  baseUrl: string | null;
-  /**
-   * Plaintext credentials resolved from the config's credential refs.
-   * Empty object when no credentials are configured or none resolve.
-   */
-  credentials: Record<string, string>;
-}
-/**
- * Resolve a ProviderConfig to its full runtime data: config record,
- * definition record, endpoint URL, and plaintext credentials.
- *
- * Encapsulates the common lookup chain shared by the adapter config factory
- * and the provider endpoint resolver:
- * 1. `AdapterSubsystemSubjects.getProviderConfig` for the canonical read model
- * 2. `AdapterSubsystemSubjects.buildProviderContext` for runtime credential refs and endpoint overrides
- * 3. `ProviderStorageSubjects.get` for provider-definition metadata
- * 4. `context.endpointOverrides?.[protocol] ?? definition.endpoints?.[protocol]`
- * 5. Opens a DirectChannel via `CredentialSubjects.getChannelToken` and
- *    resolves each credential ref; the channel is closed after use.
- *
- * Callers keep only their differing post-resolution logic (e.g., strict
- * `baseUrl` / `apiKey` validation for HTTP bridges vs. nullable `baseUrl`
- * for adapter factories that allow env-var fallbacks).
- * @param bus - Bus instance for storage and credential requests
- * @param providerConfigId - UUID of the ProviderConfig to resolve
- * @param protocol - Wire protocol used to select the correct endpoint URL
- * @returns Fully resolved provider data
- * @throws Error when the ProviderConfig or its ProviderDefinition is not found
- */
-declare function resolveProviderResolution(bus: IMakaioBus, providerConfigId: string, protocol: ProtocolId): Promise<ProviderResolution>;
-//#endregion
-//#region adapters/core/src/config/resolve-connector-credentials.d.ts
-/** Minimal bus surface needed to resolve credentials against the shared runtime context. */
-interface CredentialBusContextProvider {
-  getContext(): MakaioBusContext;
-}
-/**
- * Resolve credential references to plaintext values at the connector layer.
- *
- * Opens an encrypted DirectChannel, resolves all refs in parallel, and
- * closes the channel after use. Connectors call this during initialization
- * or credential rotation — plaintext never leaves the connector.
- *
- * Returns an empty object immediately when `credentialRefs` is empty,
- * avoiding an unnecessary channel round-trip. Partial failures are
- * tolerated: refs that fail to resolve are omitted and logged. Callers
- * must still validate any required credential fields before using the
- * returned record to build env or client config.
- * @param bus - Bus instance with context access for channel token retrieval
- * @param credentialRefs - Credential refs keyed by field name
- * @returns Plaintext credential values keyed by field name
- */
-declare function resolveConnectorCredentials(bus: CredentialBusContextProvider, credentialRefs: Record<string, CredentialRef>): Promise<Record<string, string>>;
-//#endregion
-//#region adapters/core/src/config/build-credential-env.d.ts
-/**
- * Build environment variables from resolved credentials.
- *
- * Maps plaintext credential values to their environment variable names
- * using the provider definition's `credentialEnvVars` mapping. Subprocess
- * adapters use this to set the correct env vars before spawning.
- * @example
- * ```typescript
- * // { apiKey: 'sk-...' } + { apiKey: 'ANTHROPIC_API_KEY' }
- * // → { ANTHROPIC_API_KEY: 'sk-...' }
- * ```
- * @param credentials - Resolved plaintext credentials keyed by field name
- * @param credentialEnvVars - Mapping from credential field names to env var names
- * @returns Environment variables ready for process.env / subprocess spawn
- */
-declare function buildCredentialEnv(credentials: Record<string, string>, credentialEnvVars: Record<string, string> | undefined): Record<string, string>;
-//#endregion
-//#region adapters/core/src/config/resolve-session-environment.d.ts
-/** Minimal bus surface needed for session environment resolution. */
-interface SessionEnvironmentBus {
-  getContext(): MakaioBusContext;
-}
-/**
- * Unresolved provider context fields needed for session environment resolution.
- *
- * Mirrors the relevant subset of {@link ProviderContext} from `@makaio/contracts`
- * so callers can pass the full provider context object without importing it here.
- */
-interface ProviderContextShape {
-  /** Provider config UUID carried by full provider contexts. */
-  providerConfigId?: string;
-  /** Provider definition ID carried by full provider contexts. */
-  definitionId?: string;
-  /** Credential references keyed by field name. */
-  credentialRefs: Record<string, CredentialRef>;
-  /** Maps credential field names to env var names for subprocess adapters. */
-  credentialEnvVars?: Record<string, string>;
-  /** Ambient provider credential env vars to strip before explicit credential injection. */
-  ambientCredentialEnvVars?: readonly string[];
-}
-/**
- * Input options for {@link resolveSessionEnvironment}.
- */
-interface SessionEnvironmentOptions {
-  /** Bus instance used to resolve credential references. */
-  bus: SessionEnvironmentBus;
-  /**
-   * Unresolved provider context carrying credential refs and env-var mapping.
-   * When `undefined`, the credential steps are skipped and `credentials` / `credEnv`
-   * are returned as empty objects.
-   */
-  providerContext: ProviderContextShape | undefined;
-  /**
-   * Stable client identifier passed to `resolveClientBinary`
-   * (e.g. `'claude-code'`, `'qwen'`, `'github-copilot'`).
-   */
-  clientId: string;
-  /**
-   * Base environment variables that are merged into `spawnEnv` before credential
-   * env and binary env are applied.  Typically the connector's own `this.env`.
-   */
-  baseEnv?: Record<string, string>;
-}
-/**
- * Fully resolved session environment returned by {@link resolveSessionEnvironment}.
- *
- * All three resolution steps are returned individually so callers that need
- * non-standard composition (e.g. optional binary env) can do so without
- * repeating the resolution calls.
- */
-interface SessionEnvironmentResult {
-  /**
-   * Plaintext credentials keyed by field name.
-   * Empty when `providerContext` is `undefined` or carries no credential refs.
-   */
-  credentials: Record<string, string>;
-  /**
-   * Environment variables derived from `credentials` via the provider's
-   * `credentialEnvVars` mapping.
-   * Empty when `providerContext` is `undefined` or carries no `credentialEnvVars`.
-   */
-  credEnv: Record<string, string>;
-  /**
-   * Execution context for the resolved client binary, or `undefined` when
-   * no `client.resolveBinary` handler is registered (framework-only boot).
-   */
-  resolvedBinary: ClientExecutionContext | undefined;
-  /**
-   * Merged spawn environment for the common case:
-   * `{ ...cleanBaseEnv, ...credEnv, ...(resolvedBinary?.env ?? {}) }`.
-   *
-   * Ambient provider credential env vars are stripped from base env first.
-   * Credential env then takes precedence so that explicitly resolved secrets are
-   * restored. Binary env finally wins over credential env to enforce config
-   * isolation.
-   */
-  spawnEnv: Record<string, string>;
-}
-/**
- * Resolve credentials, build credential environment variables, and locate the
- * client binary — the three-step pattern shared by subprocess connectors.
- *
- * Encapsulates:
- * 1. `resolveConnectorCredentials(bus, credentialRefs)` — opens an encrypted
- *    DirectChannel, resolves each ref, and closes the channel.
- * 2. `buildCredentialEnv(credentials, credentialEnvVars)` — maps credential
- *    values to subprocess env var names.
- * 3. `resolveClientBinary(clientId)` — dispatches `client.resolveBinary` on the
- *    static bus; returns `undefined` in framework-only boot.
- *
- * The returned {@link SessionEnvironmentResult} includes every intermediate
- * value so callers with non-standard composition strategies (e.g. connectors
- * that treat binary env as optional or pass credentials through a different
- * channel) can compose the final env themselves.
- * @param options - Session environment resolution options
- * @returns Resolved credentials, credential env, binary execution context, and
- *   merged spawn environment
- */
-declare function resolveSessionEnvironment(options: SessionEnvironmentOptions): Promise<SessionEnvironmentResult>;
-//#endregion
-export { type AIModel, AIModelSchema, type AdapterConfigFactoryInput, type AdapterDefaults, type BaseAdapterConfig, BaseAdapterConfigSchema, type BaseProviderConfig, BaseProviderConfigSchema, type ConfigFactoryResult, type CreateAdapterConfigFactoryOptions, type FactoryGuaranteedFields, type ProviderConfig, ProviderConfigSchema, type ProviderDefaults, ProviderDefaultsSchema, type ProviderEndpoint, type ProviderResolution, type ResolveCredentialRefDeps, type SessionEnvironmentOptions, type SessionEnvironmentResult, buildCredentialEnv, createAdapterConfigFactory, getDefinitionOrThrow, resolveConnectorCredentials, resolveCredentialRef, resolveProviderEndpoint, resolveProviderResolution, resolveSessionEnvironment };

package/dist/adapters/config/index.mjs

@@ -1 +0,0 @@
-import{t as e}from"../../cleanEnvForAdapter-DvcIGXTG.mjs";import{z as t}from"zod";import{createBusInstance as n,openChannel as r}from"@makaio/framework/bus";import{AIModelSchema as i,CredentialSubjects as a}from"@makaio/framework/contracts";import{BaseAdapterConfigSchema as o,ProviderConfigSchema as s,ProviderDefaultsSchema as c}from"@makaio/framework/contracts/config";import l from"node:fs/promises";import{ProviderStorageSubjects as u}from"@makaio/framework/services/settings/storage";import{resolveTimeouts as d}from"@makaio/framework/utils";import{AdapterSubsystemSubjects as f}from"@makaio/framework/services/adapter-subsystem";import{resolveClientBinary as p}from"@makaio/framework/clients";async function m(e,t={}){if(e.startsWith(`env:`)){let n=e.slice(4);if(!n)throw Error(`Credential reference is missing environment variable name`);return(t.readEnv??(e=>process.env[e]))(n)||null}if(e.startsWith(`file:`)){let n=e.slice(5);if(!n)throw Error(`Credential reference is missing file path`);return(await(t.readFile??(async e=>await l.readFile(e,`utf-8`)))(n)).trim()||null}if(e.startsWith(`keychain:`)){let[n,...r]=e.slice(9).split(`:`);if(!n||r.length===0)throw Error(`Credential reference is missing keychain service or account`);if(!t.resolveKeychain)throw Error(`Keychain credential resolution is not configured`);return t.resolveKeychain(n,r.join(`:`))}return e||null}function h(e,t){let n=e.find(e=>e.id===t);if(!n)throw Error(`Provider definition not found: '${t}'`);if(!g(n))throw Error(`Provider definition '${t}' is missing a defaultModel`);return n}function g(e){return typeof e.defaultModel==`string`&&e.defaultModel.length>0}const _=t.record(t.string(),t.unknown());function v(e){return{getDefaults:()=>e().adapterDefaults,getConfig:async t=>{let{adapterName:n,adapterDefaults:r,adapterDefinition:i,protocol:a}=e(),{providerContext:o}=t,s=o.endpointOverrides?.[a]??null,c=d([{layer:`adapter`,source:n,config:i.defaultTimeouts},{layer:`runtime`,source:`config.ts`,config:t.runtimeTimeouts}]),l={...r.providerConfig,...t.providerConfig,baseUrl:s??t.providerConfig?.baseUrl??r.providerConfig?.baseUrl},u=t.model??r.model;if(!u)throw Error(`No model resolved for adapter "${n}" (agentId: ${t.agentId}). Provide a model explicitly or configure adapterDefaults.model.`);return{...r,...t,adapterName:t.adapterName,model:u,cwd:t.cwd??r.cwd??process.cwd(),timeouts:c,providerConfig:l}}}}async function y(e,t){let i=Object.entries(t);if(i.length===0)return{};let o={},s=e.getContext(),{token:c}=await n({context:s}).request(a.getChannelToken,{}),l=await r(s,`credentials`,{token:c,transports:[]});try{let e=await Promise.allSettled(i.map(([,e])=>l.request(a.resolve,{ref:e})));for(let t=0;t<i.length;t++){let[n,r]=i[t],a=e[t];if(a.status===`fulfilled`)if(a.value.value!==null)o[n]=a.value.value;else if(a.value.error){let e=JSON.stringify(r);console.warn(`[resolveConnectorCredentials] Failed to resolve field '${n}' (ref ${e}):`,a.value.error)}else{let e=JSON.stringify(r);console.info(`[resolveConnectorCredentials] Credential unavailable for field '${n}' (ref ${e}); omitting it from the resolved connector credentials.`)}else{let e=JSON.stringify(r);console.warn(`[resolveConnectorCredentials] Failed to resolve field '${n}' (ref ${e}):`,a.reason)}}}finally{l.close()}return o}async function b(e,t,n){let{config:r}=await e.request(f.getProviderConfig,{id:t});if(!r)throw Error(`ProviderConfig '${t}' not found`);let{context:i}=await e.request(f.buildProviderContext,{providerConfigId:t});if(!i)throw Error(`ProviderConfig '${t}' not found`);if(i.definitionId!==r.definitionId)throw Error(`ProviderConfig '${t}' changed during resolution; retry`);let{provider:a}=await e.request(u.get,{id:i.definitionId});if(!a)throw Error(`ProviderDefinition '${r.definitionId}' not found for config '${t}'`);return{config:r,definition:a,baseUrl:i.endpointOverrides?.[n]??a.endpoints?.[n]??null,credentials:await y(e,i.credentialRefs)}}async function x(e,t,n){let{baseUrl:r,credentials:i}=await b(e,t,n);if(!r)throw Error(`Could not resolve baseUrl for ProviderConfig '${t}' with protocol '${n}'. Ensure the provider definition or config override declares an endpoint for this protocol.`);let a=i.apiKey;if(!a)throw Error(`Could not resolve apiKey for ProviderConfig '${t}'. Store credentials via settings before using this provider.`);return{baseUrl:r,apiKey:a}}function S(e,t){if(!t)return{};let n={};for(let[r,i]of Object.entries(t)){let t=e[r];t!==void 0&&(n[i]=t)}return n}async function C(t){let{bus:n,providerContext:r,clientId:i,baseEnv:a={}}=t,o=await y(n,r?.credentialRefs??{}),s=S(o,r?.credentialEnvVars),c=await p(i);return{credentials:o,credEnv:s,resolvedBinary:c,spawnEnv:{...e(a,{omitEnvVars:r?.ambientCredentialEnvVars}),...s,...c?.env??{}}}}export{i as AIModelSchema,o as BaseAdapterConfigSchema,_ as BaseProviderConfigSchema,s as ProviderConfigSchema,c as ProviderDefaultsSchema,S as buildCredentialEnv,v as createAdapterConfigFactory,h as getDefinitionOrThrow,y as resolveConnectorCredentials,m as resolveCredentialRef,x as resolveProviderEndpoint,b as resolveProviderResolution,C as resolveSessionEnvironment};