@makaio/framework 1.0.0-dev-1783705652236 → 1.0.0-dev-1783940945655

package/dist/{index-C23g_M_J2.d.mts → index-5s_dN3cg2.d.mts}

@@ -27,6 +27,16 @@ type SpawnDelegationAllowSet = Set<string>;
 declare function isPeerAuthorizedToDelegate(peer: TransportPeerContext | undefined, allowSet: SpawnDelegationAllowSet): boolean;
 //#endregion
 //#region services/core/src/subagent/subagent-service.d.ts
+/** Stable failures while finalizing a failed subagent spawn. */
+type SubagentFailureFinalizationErrorCode = 'child-session-close-failed' | 'failure-publication-failed';
+/** Credential-free diagnostic for one failed spawn-finalization operation. */
+declare class SubagentFailureFinalizationError extends Error {
+  readonly code: SubagentFailureFinalizationErrorCode;
+  /**
+   * @param code - Stable finalization failure category.
+   */
+  constructor(code: SubagentFailureFinalizationErrorCode);
+}
 /**
  * Orchestrates subagent execution lifecycle.
  *
@@ -121,6 +131,7 @@ declare class SubagentService extends BaseService {
    * @param phase - Spawn phase where failure occurred
    * @param reason - Error object or message
    * @returns Normalized error message
+   * @throws AggregateError when child cleanup or failure publication also fails.
    */
   private failSpawn;
   /**
@@ -172,6 +183,12 @@ declare class SubagentService extends BaseService {
    * @param subagentId - Subagent whose child session should be closed.
    */
   private closeChildSession;
+  /**
+   * Close a tracked child session while preserving failures for transactional callers.
+   * @param subagentId - Subagent whose child session should be closed.
+   * @throws Error when the session close request fails.
+   */
+  private requestChildSessionClose;
   /**
    * Check whether a subagent has reached a terminal status.
    * @param status - Subagent status to inspect.
@@ -522,4 +539,4 @@ declare class SubagentManager {
   sweepHung(inactivityTimeoutMs: number): number;
 }
 //#endregion
-export { InternalPendingRequest as a, SubagentServiceToken as c, SpawnDelegationAllowSet as d, isPeerAuthorizedToDelegate as f, InputResolver as i, subagentServicePackage as l, TrackOptions as n, SpawnOptions as o, AwaitResult as r, TrackedSubagent as s, SubagentManager as t, SubagentService as u };
+export { InternalPendingRequest as a, SubagentServiceToken as c, SubagentFailureFinalizationErrorCode as d, SubagentService as f, InputResolver as i, subagentServicePackage as l, isPeerAuthorizedToDelegate as m, TrackOptions as n, SpawnOptions as o, SpawnDelegationAllowSet as p, AwaitResult as r, TrackedSubagent as s, SubagentManager as t, SubagentFailureFinalizationError as u };

package/dist/index-9dISOTLT.d.mts

@@ -0,0 +1,174 @@
+import { z } from "zod";
+import { ProviderConfigAuthSchema } from "@makaio/framework/contracts/auth";
+import { AdapterFile, ProviderConfigFile } from "@makaio/framework/contracts/config";
+
+//#region services/core/src/adapter-subsystem/types.d.ts
+/**
+ * Loaded adapter file set keyed by adapter name.
+ */
+interface AdapterFileConfigSet {
+  /** Adapter file payloads keyed by canonical adapter name. */
+  configs: Map<string, AdapterFile>;
+}
+/**
+ * Loaded provider config file set keyed by provider config ID.
+ */
+interface ProviderConfigFileSet {
+  /** Provider config file payloads keyed by canonical provider config ID. */
+  configs: Map<string, ProviderConfigFile>;
+}
+/**
+ * Repository interface injected into the adapter subsystem service.
+ */
+interface IAdapterConfigRepository {
+  /**
+   * Load all adapter files from the canonical config store.
+   */
+  loadAdapterConfigs(): Promise<AdapterFileConfigSet>;
+  /**
+   * Load all provider config files from the canonical config store.
+   */
+  loadProviderConfigs(): Promise<ProviderConfigFileSet>;
+  /**
+   * Persist a provider config file at the given canonical ID.
+   * @param id - Canonical provider config ID
+   * @param config - File payload to persist
+   */
+  writeProviderConfig(id: string, config: ProviderConfigFile): Promise<void>;
+  /**
+   * Delete a provider config file by canonical ID.
+   * @param id - Canonical provider config ID
+   * @returns `true` when a file was removed
+   */
+  deleteProviderConfig(id: string): Promise<boolean>;
+  /**
+   * Persist an adapter file at the given canonical name.
+   * @param name - Canonical adapter name
+   * @param config - File payload to persist
+   */
+  writeAdapterFile(name: string, config: AdapterFile): Promise<void>;
+  /**
+   * Delete an adapter file by canonical name.
+   * @param name - Canonical adapter name
+   * @returns `true` when a file was removed
+   */
+  deleteAdapterFile(name: string): Promise<boolean>;
+}
+//#endregion
+//#region services/core/src/adapter-subsystem/write-types.d.ts
+/**
+ * Canonical create payload for provider configs.
+ *
+ * Authentication is structurally complete at creation time. Callers that need
+ * to store plaintext first create a disabled config whose auth selection
+ * already contains stored credential refs, then enable it after storage
+ * succeeds.
+ */
+declare const CreateCanonicalProviderConfigInputSchema: z.ZodObject<{
+  definitionId: z.ZodString;
+  name: z.ZodOptional<z.ZodString>;
+  auth: z.ZodDiscriminatedUnion<[z.ZodObject<{
+    mode: z.ZodLiteral<"explicit">;
+    method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      owner: z.ZodLiteral<"provider">;
+      providerDefinitionId: z.ZodString;
+      methodId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      owner: z.ZodLiteral<"client">;
+      clientId: z.ZodString;
+      methodId: z.ZodString;
+    }, z.core.$strict>], "owner">;
+    credentialRefs: z.ZodRecord<z.ZodString, z.core.$ZodBranded<z.ZodString, "CredentialRef", "out">>;
+  }, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodLiteral<"inferred">;
+    method: z.ZodObject<{
+      owner: z.ZodLiteral<"client">;
+      clientId: z.ZodString;
+      methodId: z.ZodString;
+    }, z.core.$strict>;
+    account: z.ZodOptional<z.ZodObject<{
+      managerId: z.ZodString;
+      accountId: z.ZodString;
+    }, z.core.$strict>>;
+  }, z.core.$strict>, z.ZodObject<{
+    mode: z.ZodLiteral<"none">;
+    method: z.ZodDiscriminatedUnion<[z.ZodObject<{
+      owner: z.ZodLiteral<"provider">;
+      providerDefinitionId: z.ZodString;
+      methodId: z.ZodString;
+    }, z.core.$strict>, z.ZodObject<{
+      owner: z.ZodLiteral<"client">;
+      clientId: z.ZodString;
+      methodId: z.ZodString;
+    }, z.core.$strict>], "owner">;
+  }, z.core.$strict>], "mode">;
+  managedBy: z.ZodOptional<z.ZodObject<{
+    kind: z.ZodLiteral<"client">;
+    clientId: z.ZodString;
+  }, z.core.$strict>>;
+  endpointOverrides: z.ZodOptional<z.ZodObject<{
+    anthropic: z.ZodOptional<z.ZodString>;
+    openai: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>;
+  modelVisibility: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    disabled: "disabled";
+    enabled: "enabled";
+    visible: "visible";
+  }>>>;
+  modelFilterMode: z.ZodOptional<z.ZodEnum<{
+    allowlist: "allowlist";
+    "show-all": "show-all";
+  }>>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * Canonical patch payload for provider configs.
+ *
+ * Model-filter mode changes flow through `setModelFilterMode`; authentication
+ * changes flow through `setProviderConfigAuth`. Lifecycle management is fixed
+ * at creation and is not part of the generic patch seam.
+ */
+declare const CanonicalProviderConfigPatchSchema: z.ZodObject<{
+  name: z.ZodOptional<z.ZodString>;
+  endpointOverrides: z.ZodOptional<z.ZodNullable<z.ZodObject<{
+    anthropic: z.ZodOptional<z.ZodString>;
+    openai: z.ZodOptional<z.ZodString>;
+  }, z.core.$strip>>>;
+  modelVisibility: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodEnum<{
+    disabled: "disabled";
+    enabled: "enabled";
+    visible: "visible";
+  }>>>;
+  enabled: z.ZodOptional<z.ZodBoolean>;
+}, z.core.$strict>;
+/**
+ * Inferred canonical create payload (post-validation, with branded credential refs).
+ */
+type CreateCanonicalProviderConfigInput = z.infer<typeof CreateCanonicalProviderConfigInputSchema>;
+/**
+ * Bus-layer create payload (pre-validation input type, with unbranded credential refs).
+ *
+ * The bus infrastructure uses `z.input` for request payloads so callers can pass
+ * plain strings that the schema validates and brands. Service handlers receive
+ * this type from the bus context; only the Zod parse step produces the fully
+ * branded {@link CreateCanonicalProviderConfigInput}.
+ */
+type CreateCanonicalProviderConfigInputPayload = z.input<typeof CreateCanonicalProviderConfigInputSchema>;
+/**
+ * Inferred canonical patch payload.
+ */
+type CanonicalProviderConfigPatch = z.infer<typeof CanonicalProviderConfigPatchSchema>;
+/**
+ * Inferred canonical auth replacement (post-validation, with branded refs).
+ */
+type CanonicalProviderConfigAuth = z.infer<typeof ProviderConfigAuthSchema>;
+/**
+ * Bus-layer auth replacement payload (pre-validation input type).
+ *
+ * Request handlers receive the schema input shape from the bus context, so
+ * credential refs inside explicit selections arrive as plain strings until
+ * the schema parse brands them.
+ */
+type CanonicalProviderConfigAuthPayload = z.input<typeof ProviderConfigAuthSchema>;
+//#endregion
+export { CreateCanonicalProviderConfigInput as a, AdapterFileConfigSet as c, CanonicalProviderConfigPatchSchema as i, IAdapterConfigRepository as l, CanonicalProviderConfigAuthPayload as n, CreateCanonicalProviderConfigInputPayload as o, CanonicalProviderConfigPatch as r, CreateCanonicalProviderConfigInputSchema as s, CanonicalProviderConfigAuth as t, ProviderConfigFileSet as u };