@mono-agent/agent-app 0.20.14 → 0.21.1

package/dist/provider-auth-checks.js

@@ -0,0 +1,349 @@
+import { randomUUID } from "node:crypto";
+import { PROVIDER_AUTH_CHECK_SCHEMA, ProviderAuthOperationError, } from "@mono-agent/agent-contracts";
+import { resolveConfiguredProviders } from "@mono-agent/config";
+import { runPiProviderCheck } from "@mono-agent/agent-runtime/ai";
+import { createPiOAuthApiKeyResolver, parseMonoRuntimeModelReference, runtimeOptionsForLocalProvider, } from "@mono-agent/runtime-adapter";
+import { selectProviderAuthCheckModel } from "./provider-model-catalog.js";
+import { providerAuthStatusSnapshot } from "./provider-auth-status.js";
+const CHECK_RETENTION_MS = 10 * 60 * 1_000;
+const CHECK_COOLDOWN_MS = 60 * 1_000;
+const PROVIDER_TIMEOUT_MS = 30 * 1_000;
+const BATCH_TIMEOUT_MS = 120 * 1_000;
+const MAX_CONCURRENCY = 2;
+export function createProviderAuthCheckManager(options) {
+    const sessions = new Map();
+    const byIdempotencyKey = new Map();
+    const credentialRevisions = new Map();
+    const now = options.now ?? Date.now;
+    const providerTimeoutMs = options.providerTimeoutMs ?? PROVIDER_TIMEOUT_MS;
+    const batchTimeoutMs = options.batchTimeoutMs ?? BATCH_TIMEOUT_MS;
+    const cooldownMs = options.cooldownMs ?? CHECK_COOLDOWN_MS;
+    let lastTerminalAt = Number.NEGATIVE_INFINITY;
+    let stopping = false;
+    let pendingAdmission;
+    const current = () => [...sessions.values()].find((session) => session.snapshot.state === "running");
+    const replaceResult = (session, providerId, result) => {
+        session.snapshot = {
+            ...session.snapshot,
+            updatedAt: new Date(now()).toISOString(),
+            results: session.snapshot.results.map((candidate) => candidate.providerId === providerId ? result : candidate),
+        };
+    };
+    const finish = (session, state) => {
+        if (session.snapshot.state !== "running")
+            return;
+        if (session.batchTimeout !== undefined)
+            clearTimeout(session.batchTimeout);
+        const finishedAt = new Date(now()).toISOString();
+        session.snapshot = {
+            ...session.snapshot,
+            state,
+            updatedAt: finishedAt,
+            expiresAt: new Date(now() + CHECK_RETENTION_MS).toISOString(),
+        };
+        lastTerminalAt = now();
+        session.retention = setTimeout(() => {
+            sessions.delete(session.snapshot.id);
+            if (byIdempotencyKey.get(session.idempotencyKey) === session.snapshot.id) {
+                byIdempotencyKey.delete(session.idempotencyKey);
+            }
+        }, CHECK_RETENTION_MS);
+        session.retention.unref?.();
+    };
+    const execute = options.execute ?? defaultExecutor(options);
+    const runOne = async (session, result) => {
+        if (result.model === undefined || result.selectionBasis === undefined)
+            return;
+        if (session.abort.signal.aborted) {
+            replaceResult(session, result.providerId, terminalResult(result, session.batchTimedOut ? "not_run" : "cancelled", now));
+            return;
+        }
+        replaceResult(session, result.providerId, { ...result, state: "running" });
+        const controller = new AbortController();
+        session.providerAborts.set(result.providerId, controller);
+        const abort = () => controller.abort(session.abort.signal.reason);
+        session.abort.signal.addEventListener("abort", abort, { once: true });
+        let timedOut = false;
+        const timeout = setTimeout(() => {
+            timedOut = true;
+            controller.abort(new Error("Provider check timed out."));
+        }, providerTimeoutMs);
+        timeout.unref?.();
+        let outcome;
+        try {
+            const aborted = new Promise((resolve) => {
+                if (controller.signal.aborted) {
+                    resolve(inconclusive());
+                    return;
+                }
+                controller.signal.addEventListener("abort", () => resolve(inconclusive()), { once: true });
+            });
+            const executed = execute(parseMonoRuntimeModelReference(result.model), controller.signal)
+                .catch(() => inconclusive());
+            outcome = await Promise.race([executed, aborted]);
+        }
+        finally {
+            clearTimeout(timeout);
+            session.abort.signal.removeEventListener("abort", abort);
+            session.providerAborts.delete(result.providerId);
+        }
+        const checkedAt = new Date(now()).toISOString();
+        const revision = credentialRevisions.get(result.providerId) ?? 0;
+        const capturedRevision = session.revisions.get(result.providerId) ?? 0;
+        const state = revision !== capturedRevision
+            ? "stale"
+            : timedOut || session.batchTimedOut
+                ? "timeout"
+                : session.cancelled
+                    ? "cancelled"
+                    : outcome.state;
+        const finalResult = {
+            ...result,
+            state,
+            checkedAt,
+            code: revision !== capturedRevision ? "stale"
+                : timedOut || session.batchTimedOut ? "timeout"
+                    : session.cancelled ? "cancelled"
+                        : outcome.code,
+            message: state === "stale" ? "Credential changed before the check completed."
+                : state === "timeout" ? "The provider check timed out."
+                    : state === "cancelled" ? "The provider check was cancelled."
+                        : outcome.message,
+        };
+        replaceResult(session, result.providerId, finalResult);
+        if (state === "passed")
+            options.observations.recordSuccess(result.providerId, result.model, checkedAt);
+        else if (state === "auth_failed")
+            options.observations.recordFailure(result.providerId, result.model, "provider_auth", checkedAt);
+        else if (state === "network_failed" || state === "timeout") {
+            options.observations.recordFailure(result.providerId, result.model, "provider_unavailable", checkedAt);
+        }
+        else if (state === "quota_limited" || state === "model_not_entitled" || state === "inconclusive") {
+            options.observations.invalidate(result.providerId, checkedAt);
+        }
+    };
+    const runBatch = async (session) => {
+        let index = 0;
+        const selected = session.snapshot.results.filter((result) => result.state === "pending");
+        const worker = async () => {
+            while (index < selected.length) {
+                const next = selected[index++];
+                if (next === undefined)
+                    return;
+                await runOne(session, next);
+            }
+        };
+        await Promise.all(Array.from({ length: Math.min(MAX_CONCURRENCY, selected.length) }, worker));
+        if (session.batchTimedOut) {
+            for (const result of session.snapshot.results) {
+                if (result.state === "pending")
+                    replaceResult(session, result.providerId, terminalResult(result, "not_run", now));
+            }
+        }
+        finish(session, session.cancelled ? "cancelled" : "completed");
+    };
+    const conflict = (message = "Provider live checks are already active.") => new ProviderAuthOperationError("provider_auth_conflict", message, 409);
+    const prepare = async (admission) => {
+        try {
+            const status = await (options.statusSnapshot?.() ?? providerAuthStatusSnapshot(options));
+            if (admission.cancelled || stopping || pendingAdmission !== admission) {
+                throw conflict("Provider authentication is stopping.");
+            }
+            if (options.isLoginActive()) {
+                throw conflict("Provider authentication is active. Finish or cancel it before running live checks.");
+            }
+            if (current() !== undefined)
+                throw conflict();
+            const resolvedProviders = resolveConfiguredProviders(options.config);
+            const configuredRoutes = status.providers.flatMap((provider) => provider.usages.flatMap((usage) => {
+                try {
+                    return [parseMonoRuntimeModelReference(usage.model)];
+                }
+                catch {
+                    return [];
+                }
+            }));
+            const results = status.providers.map((provider) => {
+                const selection = selectProviderAuthCheckModel(provider.providerId, {
+                    providers: resolvedProviders.entries,
+                    configuredRoutes,
+                });
+                return selection.kind === "selected"
+                    ? {
+                        providerId: provider.providerId,
+                        label: provider.label,
+                        state: "pending",
+                        model: selection.model.reference,
+                        selectionBasis: selection.selectionBasis,
+                    }
+                    : {
+                        providerId: provider.providerId,
+                        label: provider.label,
+                        state: "unsupported",
+                        code: selection.code,
+                        message: selection.message,
+                        checkedAt: new Date(now()).toISOString(),
+                    };
+            });
+            const createdAt = new Date(now()).toISOString();
+            const session = {
+                snapshot: {
+                    schema: PROVIDER_AUTH_CHECK_SCHEMA,
+                    id: randomUUID(),
+                    state: "running",
+                    createdAt,
+                    updatedAt: createdAt,
+                    expiresAt: new Date(now() + CHECK_RETENTION_MS).toISOString(),
+                    results,
+                },
+                idempotencyKey: admission.idempotencyKey,
+                abort: new AbortController(),
+                providerAborts: new Map(),
+                revisions: new Map(status.providers.map((provider) => [provider.providerId, credentialRevisions.get(provider.providerId) ?? 0])),
+                cancelled: false,
+                batchTimedOut: false,
+            };
+            sessions.set(session.snapshot.id, session);
+            byIdempotencyKey.set(admission.idempotencyKey, session.snapshot.id);
+            if (pendingAdmission === admission)
+                pendingAdmission = undefined;
+            session.batchTimeout = setTimeout(() => {
+                session.batchTimedOut = true;
+                session.abort.abort(new Error("Provider check batch timed out."));
+            }, batchTimeoutMs);
+            session.batchTimeout.unref?.();
+            session.run = runBatch(session);
+            await Promise.resolve();
+            admission.resolve(session.snapshot);
+        }
+        catch (error) {
+            admission.reject(error);
+        }
+        finally {
+            if (pendingAdmission === admission)
+                pendingAdmission = undefined;
+        }
+    };
+    return {
+        isActive: () => pendingAdmission !== undefined || current() !== undefined,
+        start(input) {
+            if (stopping)
+                return Promise.reject(conflict("Provider authentication is stopping."));
+            const replayId = byIdempotencyKey.get(input.idempotencyKey);
+            if (replayId !== undefined) {
+                const replay = sessions.get(replayId);
+                if (replay !== undefined)
+                    return Promise.resolve(replay.snapshot);
+            }
+            if (pendingAdmission !== undefined) {
+                return pendingAdmission.idempotencyKey === input.idempotencyKey
+                    ? pendingAdmission.promise
+                    : Promise.reject(conflict());
+            }
+            if (options.isLoginActive()) {
+                return Promise.reject(conflict("Provider authentication is active. Finish or cancel it before running live checks."));
+            }
+            if (current() !== undefined)
+                return Promise.reject(conflict());
+            if (now() - lastTerminalAt < cooldownMs) {
+                const remainingMs = cooldownMs - (now() - lastTerminalAt);
+                return Promise.reject(new ProviderAuthOperationError("provider_auth_rate_limited", "Wait before running provider checks again.", 429, Math.max(1, Math.ceil(remainingMs / 1_000))));
+            }
+            let resolve;
+            let reject;
+            const promise = new Promise((resolvePromise, rejectPromise) => {
+                resolve = resolvePromise;
+                reject = rejectPromise;
+            });
+            const admission = {
+                idempotencyKey: input.idempotencyKey,
+                promise,
+                resolve,
+                reject,
+                cancelled: false,
+            };
+            pendingAdmission = admission;
+            void prepare(admission);
+            return promise;
+        },
+        async get(checkId) {
+            return sessions.get(checkId)?.snapshot;
+        },
+        async cancel(checkId) {
+            const session = sessions.get(checkId);
+            if (session === undefined || session.snapshot.state !== "running")
+                return;
+            session.cancelled = true;
+            session.abort.abort(new Error("Provider checks were cancelled."));
+            for (const result of session.snapshot.results) {
+                if (result.state === "pending")
+                    replaceResult(session, result.providerId, terminalResult(result, "cancelled", now));
+            }
+            await session.run?.catch(() => undefined);
+        },
+        credentialPersisted(providerId) {
+            credentialRevisions.set(providerId, (credentialRevisions.get(providerId) ?? 0) + 1);
+            const session = current();
+            session?.providerAborts.get(providerId)?.abort(new Error("Credential changed during provider check."));
+        },
+        async stop() {
+            stopping = true;
+            const preparing = pendingAdmission;
+            if (preparing !== undefined) {
+                preparing.cancelled = true;
+                pendingAdmission = undefined;
+                preparing.reject(conflict("Provider authentication is stopping."));
+            }
+            const active = current();
+            if (active !== undefined) {
+                active.cancelled = true;
+                active.abort.abort(new Error("Provider checks stopped."));
+                await active.run?.catch(() => undefined);
+            }
+            for (const session of sessions.values()) {
+                if (session.retention !== undefined)
+                    clearTimeout(session.retention);
+                if (session.batchTimeout !== undefined)
+                    clearTimeout(session.batchTimeout);
+            }
+            sessions.clear();
+            byIdempotencyKey.clear();
+        },
+    };
+}
+function inconclusive() {
+    return { state: "inconclusive", code: "inconclusive", message: "The provider check failed without a safe diagnosis." };
+}
+function terminalResult(result, state, now) {
+    return {
+        ...result,
+        state,
+        checkedAt: new Date(now()).toISOString(),
+        code: state,
+        message: state === "cancelled" ? "The provider check was cancelled." : "The provider check did not start before the batch deadline.",
+    };
+}
+function defaultExecutor(options) {
+    const resolved = resolveConfiguredProviders(options.config);
+    const resolver = createPiOAuthApiKeyResolver({ path: resolved.piAuthPath });
+    const locals = resolved.entries.filter((provider) => provider.type !== undefined || provider.id === "ollama" || provider.id === "lmstudio");
+    return async (model, signal) => {
+        const runtimeOptions = runtimeOptionsForLocalProvider(model, locals);
+        const configured = locals.find((provider) => provider.id === model.provider);
+        const envKey = configured?.apiKeyEnv === undefined ? undefined : options.env[configured.apiKeyEnv];
+        const customProvider = runtimeOptions.customProvider === undefined || envKey === undefined
+            ? runtimeOptions.customProvider
+            : { ...runtimeOptions.customProvider, api_key: envKey };
+        return await runPiProviderCheck({
+            model,
+            resolvePiApiKey: resolver,
+            runtimeOptions: {
+                ...runtimeOptions,
+                ...(customProvider === undefined ? {} : { customProvider }),
+            },
+            environment: options.env,
+            abortSignal: signal,
+        });
+    };
+}
+//# sourceMappingURL=provider-auth-checks.js.map

package/dist/provider-auth-checks.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-checks.js","sourceRoot":"","sources":["../src/provider-auth-checks.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAEzC,OAAO,EACL,0BAA0B,EAC1B,0BAA0B,GAM3B,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAChE,OAAO,EAAE,kBAAkB,EAAE,MAAM,8BAA8B,CAAC;AAClE,OAAO,EACL,2BAA2B,EAC3B,8BAA8B,EAC9B,8BAA8B,GAG/B,MAAM,6BAA6B,CAAC;AAErC,OAAO,EAAE,4BAA4B,EAAE,MAAM,6BAA6B,CAAC;AAE3E,OAAO,EAAE,0BAA0B,EAAkC,MAAM,2BAA2B,CAAC;AAEvG,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC3C,MAAM,iBAAiB,GAAG,EAAE,GAAG,KAAK,CAAC;AACrC,MAAM,mBAAmB,GAAG,EAAE,GAAG,KAAK,CAAC;AACvC,MAAM,gBAAgB,GAAG,GAAG,GAAG,KAAK,CAAC;AACrC,MAAM,eAAe,GAAG,CAAC,CAAC;AAkD1B,MAAM,UAAU,8BAA8B,CAC5C,OAA8C;IAE9C,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA4B,CAAC;IACrD,MAAM,gBAAgB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACnD,MAAM,mBAAmB,GAAG,IAAI,GAAG,EAAkB,CAAC;IACtD,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACpC,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,mBAAmB,CAAC;IAC3E,MAAM,cAAc,GAAG,OAAO,CAAC,cAAc,IAAI,gBAAgB,CAAC;IAClE,MAAM,UAAU,GAAG,OAAO,CAAC,UAAU,IAAI,iBAAiB,CAAC;IAC3D,IAAI,cAAc,GAAG,MAAM,CAAC,iBAAiB,CAAC;IAC9C,IAAI,QAAQ,GAAG,KAAK,CAAC;IACrB,IAAI,gBAAmD,CAAC;IAExD,MAAM,OAAO,GAAG,GAAG,EAAE,CAAC,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;IACrG,MAAM,aAAa,GAAG,CAAC,OAAyB,EAAE,UAAkB,EAAE,MAA+B,EAAE,EAAE;QACvG,OAAO,CAAC,QAAQ,GAAG;YACjB,GAAG,OAAO,CAAC,QAAQ;YACnB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YACxC,OAAO,EAAE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,UAAU,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;SAC/G,CAAC;IACJ,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,CAAC,OAAyB,EAAE,KAAgC,EAAE,EAAE;QAC7E,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO;QACjD,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;YAAE,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QACjD,OAAO,CAAC,QAAQ,GAAG;YACjB,GAAG,OAAO,CAAC,QAAQ;YACnB,KAAK;YACL,SAAS,EAAE,UAAU;YACrB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC,WAAW,EAAE;SAC9D,CAAC;QACF,cAAc,GAAG,GAAG,EAAE,CAAC;QACvB,OAAO,CAAC,SAAS,GAAG,UAAU,CAAC,GAAG,EAAE;YAClC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,gBAAgB,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;gBACzE,gBAAgB,CAAC,MAAM,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;YAClD,CAAC;QACH,CAAC,EAAE,kBAAkB,CAAC,CAAC;QACvB,OAAO,CAAC,SAAS,CAAC,KAAK,EAAE,EAAE,CAAC;IAC9B,CAAC,CAAC;IAEF,MAAM,OAAO,GAAG,OAAO,CAAC,OAAO,IAAI,eAAe,CAAC,OAAO,CAAC,CAAC;IAC5D,MAAM,MAAM,GAAG,KAAK,EAAE,OAAyB,EAAE,MAA+B,EAAE,EAAE;QAClF,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,MAAM,CAAC,cAAc,KAAK,SAAS;YAAE,OAAO;QAC9E,IAAI,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;YACjC,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;YACxH,OAAO;QACT,CAAC;QACD,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,GAAG,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAC;QAC3E,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;QACzC,OAAO,CAAC,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,EAAE,UAAU,CAAC,CAAC;QAC1D,MAAM,KAAK,GAAG,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAClE,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QACtE,IAAI,QAAQ,GAAG,KAAK,CAAC;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,GAAG,EAAE;YAC9B,QAAQ,GAAG,IAAI,CAAC;YAChB,UAAU,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,2BAA2B,CAAC,CAAC,CAAC;QAC3D,CAAC,EAAE,iBAAiB,CAAC,CAAC;QACtB,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC;QAClB,IAAI,OAAmC,CAAC;QACxC,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,IAAI,OAAO,CAA6B,CAAC,OAAO,EAAE,EAAE;gBAClE,IAAI,UAAU,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;oBAC9B,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;oBACxB,OAAO;gBACT,CAAC;gBACD,UAAU,CAAC,MAAM,CAAC,gBAAgB,CAAC,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,YAAY,EAAE,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;YAC7F,CAAC,CAAC,CAAC;YACH,MAAM,QAAQ,GAAG,OAAO,CAAC,8BAA8B,CAAC,MAAM,CAAC,KAAK,CAAC,EAAE,UAAU,CAAC,MAAM,CAAC;iBACtF,KAAK,CAAC,GAAG,EAAE,CAAC,YAAY,EAAE,CAAC,CAAC;YAC/B,OAAO,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;QACpD,CAAC;gBAAS,CAAC;YACT,YAAY,CAAC,OAAO,CAAC,CAAC;YACtB,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,mBAAmB,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;YACzD,OAAO,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QACnD,CAAC;QACD,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAChD,MAAM,QAAQ,GAAG,mBAAmB,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACjE,MAAM,gBAAgB,GAAG,OAAO,CAAC,SAAS,CAAC,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;QACvE,MAAM,KAAK,GAAG,QAAQ,KAAK,gBAAgB;YACzC,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,aAAa;gBACjC,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,OAAO,CAAC,SAAS;oBACjB,CAAC,CAAC,WAAW;oBACb,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,MAAM,WAAW,GAA4B;YAC3C,GAAG,MAAM;YACT,KAAK;YACL,SAAS;YACT,IAAI,EAAE,QAAQ,KAAK,gBAAgB,CAAC,CAAC,CAAC,OAAO;gBAC3C,CAAC,CAAC,QAAQ,IAAI,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS;oBAC7C,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW;wBAC/B,CAAC,CAAC,OAAO,CAAC,IAAI;YACpB,OAAO,EAAE,KAAK,KAAK,OAAO,CAAC,CAAC,CAAC,gDAAgD;gBAC3E,CAAC,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,+BAA+B;oBACrD,CAAC,CAAC,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,mCAAmC;wBAC3D,CAAC,CAAC,OAAO,CAAC,OAAO;SACxB,CAAC;QACF,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,KAAK,KAAK,QAAQ;YAAE,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,CAAC,CAAC;aAClG,IAAI,KAAK,KAAK,aAAa;YAAE,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,eAAe,EAAE,SAAS,CAAC,CAAC;aAC7H,IAAI,KAAK,KAAK,gBAAgB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;YAC3D,OAAO,CAAC,YAAY,CAAC,aAAa,CAAC,MAAM,CAAC,UAAU,EAAE,MAAM,CAAC,KAAK,EAAE,sBAAsB,EAAE,SAAS,CAAC,CAAC;QACzG,CAAC;aAAM,IAAI,KAAK,KAAK,eAAe,IAAI,KAAK,KAAK,oBAAoB,IAAI,KAAK,KAAK,cAAc,EAAE,CAAC;YACnG,OAAO,CAAC,YAAY,CAAC,UAAU,CAAC,MAAM,CAAC,UAAU,EAAE,SAAS,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,KAAK,EAAE,OAAyB,EAAE,EAAE;QACnD,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC;QACzF,MAAM,MAAM,GAAG,KAAK,IAAI,EAAE;YACxB,OAAO,KAAK,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC;gBAC/B,MAAM,IAAI,GAAG,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAC;gBAC/B,IAAI,IAAI,KAAK,SAAS;oBAAE,OAAO;gBAC/B,MAAM,MAAM,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;YAC9B,CAAC;QACH,CAAC,CAAC;QACF,MAAM,OAAO,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,CAAC,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QAC9F,IAAI,OAAO,CAAC,aAAa,EAAE,CAAC;YAC1B,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;oBAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,SAAS,EAAE,GAAG,CAAC,CAAC,CAAC;YACpH,CAAC;QACH,CAAC;QACD,MAAM,CAAC,OAAO,EAAE,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC;IACjE,CAAC,CAAC;IAEF,MAAM,QAAQ,GAAG,CAAC,OAAO,GAAG,0CAA0C,EAAE,EAAE,CACxE,IAAI,0BAA0B,CAAC,wBAAwB,EAAE,OAAO,EAAE,GAAG,CAAC,CAAC;IAEzE,MAAM,OAAO,GAAG,KAAK,EAAE,SAAgC,EAAE,EAAE;QACzD,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,IAAI,0BAA0B,CAAC,OAAO,CAAC,CAAC,CAAC;YACzF,IAAI,SAAS,CAAC,SAAS,IAAI,QAAQ,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACtE,MAAM,QAAQ,CAAC,sCAAsC,CAAC,CAAC;YACzD,CAAC;YACD,IAAI,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC5B,MAAM,QAAQ,CAAC,oFAAoF,CAAC,CAAC;YACvG,CAAC;YACD,IAAI,OAAO,EAAE,KAAK,SAAS;gBAAE,MAAM,QAAQ,EAAE,CAAC;YAC9C,MAAM,iBAAiB,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YACrE,MAAM,gBAAgB,GAAG,MAAM,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,EAAE;gBAChG,IAAI,CAAC;oBAAC,OAAO,CAAC,8BAA8B,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC;gBAAC,CAAC;gBAAC,MAAM,CAAC;oBAAC,OAAO,EAAE,CAAC;gBAAC,CAAC;YACpF,CAAC,CAAC,CAAC,CAAC;YACJ,MAAM,OAAO,GAA8B,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE;gBAC3E,MAAM,SAAS,GAAG,4BAA4B,CAAC,QAAQ,CAAC,UAAU,EAAE;oBAClE,SAAS,EAAE,iBAAiB,CAAC,OAAO;oBACpC,gBAAgB;iBACjB,CAAC,CAAC;gBACH,OAAO,SAAS,CAAC,IAAI,KAAK,UAAU;oBAClC,CAAC,CAAC;wBACE,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,KAAK,EAAE,SAAS;wBAChB,KAAK,EAAE,SAAS,CAAC,KAAK,CAAC,SAAS;wBAChC,cAAc,EAAE,SAAS,CAAC,cAAc;qBACzC;oBACH,CAAC,CAAC;wBACE,UAAU,EAAE,QAAQ,CAAC,UAAU;wBAC/B,KAAK,EAAE,QAAQ,CAAC,KAAK;wBACrB,KAAK,EAAE,aAAa;wBACpB,IAAI,EAAE,SAAS,CAAC,IAAI;wBACpB,OAAO,EAAE,SAAS,CAAC,OAAO;wBAC1B,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;qBACzC,CAAC;YACR,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,GAAG,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAChD,MAAM,OAAO,GAAqB;gBAChC,QAAQ,EAAE;oBACR,MAAM,EAAE,0BAA0B;oBAClC,EAAE,EAAE,UAAU,EAAE;oBAChB,KAAK,EAAE,SAAS;oBAChB,SAAS;oBACT,SAAS,EAAE,SAAS;oBACpB,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,kBAAkB,CAAC,CAAC,WAAW,EAAE;oBAC7D,OAAO;iBACR;gBACD,cAAc,EAAE,SAAS,CAAC,cAAc;gBACxC,KAAK,EAAE,IAAI,eAAe,EAAE;gBAC5B,cAAc,EAAE,IAAI,GAAG,EAAE;gBACzB,SAAS,EAAE,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,QAAQ,CAAC,UAAU,EAAE,mBAAmB,CAAC,GAAG,CAAC,QAAQ,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;gBAChI,SAAS,EAAE,KAAK;gBAChB,aAAa,EAAE,KAAK;aACrB,CAAC;YACF,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,OAAO,CAAC,CAAC;YAC3C,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,EAAE,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;YACpE,IAAI,gBAAgB,KAAK,SAAS;gBAAE,gBAAgB,GAAG,SAAS,CAAC;YACjE,OAAO,CAAC,YAAY,GAAG,UAAU,CAAC,GAAG,EAAE;gBACrC,OAAO,CAAC,aAAa,GAAG,IAAI,CAAC;gBAC7B,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;YACpE,CAAC,EAAE,cAAc,CAAC,CAAC;YACnB,OAAO,CAAC,YAAY,CAAC,KAAK,EAAE,EAAE,CAAC;YAC/B,OAAO,CAAC,GAAG,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC;YAChC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC;YACxB,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QACtC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAC1B,CAAC;gBAAS,CAAC;YACT,IAAI,gBAAgB,KAAK,SAAS;gBAAE,gBAAgB,GAAG,SAAS,CAAC;QACnE,CAAC;IACH,CAAC,CAAC;IAEF,OAAO;QACL,QAAQ,EAAE,GAAG,EAAE,CAAC,gBAAgB,KAAK,SAAS,IAAI,OAAO,EAAE,KAAK,SAAS;QACzE,KAAK,CAAC,KAAK;YACT,IAAI,QAAQ;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC,CAAC;YACtF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,GAAG,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;YAC5D,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;gBAC3B,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;gBACtC,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO,OAAO,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;YACpE,CAAC;YACD,IAAI,gBAAgB,KAAK,SAAS,EAAE,CAAC;gBACnC,OAAO,gBAAgB,CAAC,cAAc,KAAK,KAAK,CAAC,cAAc;oBAC7D,CAAC,CAAC,gBAAgB,CAAC,OAAO;oBAC1B,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YACjC,CAAC;YACD,IAAI,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC;gBAC5B,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,CAAC,oFAAoF,CAAC,CAAC,CAAC;YACxH,CAAC;YACD,IAAI,OAAO,EAAE,KAAK,SAAS;gBAAE,OAAO,OAAO,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC,CAAC;YAC/D,IAAI,GAAG,EAAE,GAAG,cAAc,GAAG,UAAU,EAAE,CAAC;gBACxC,MAAM,WAAW,GAAG,UAAU,GAAG,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,CAAC;gBAC1D,OAAO,OAAO,CAAC,MAAM,CAAC,IAAI,0BAA0B,CAClD,4BAA4B,EAC5B,4CAA4C,EAC5C,GAAG,EACH,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,GAAG,KAAK,CAAC,CAAC,CAC5C,CAAC,CAAC;YACL,CAAC;YACD,IAAI,OAA0C,CAAC;YAC/C,IAAI,MAAwC,CAAC;YAC7C,MAAM,OAAO,GAAG,IAAI,OAAO,CAAmC,CAAC,cAAc,EAAE,aAAa,EAAE,EAAE;gBAC9F,OAAO,GAAG,cAAc,CAAC;gBACzB,MAAM,GAAG,aAAa,CAAC;YACzB,CAAC,CAAC,CAAC;YACH,MAAM,SAAS,GAA0B;gBACvC,cAAc,EAAE,KAAK,CAAC,cAAc;gBACpC,OAAO;gBACP,OAAO;gBACP,MAAM;gBACN,SAAS,EAAE,KAAK;aACjB,CAAC;YACF,gBAAgB,GAAG,SAAS,CAAC;YAC7B,KAAK,OAAO,CAAC,SAAS,CAAC,CAAC;YACxB,OAAO,OAAO,CAAC;QACjB,CAAC;QACD,KAAK,CAAC,GAAG,CAAC,OAAO;YACf,OAAO,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,QAAQ,CAAC;QACzC,CAAC;QACD,KAAK,CAAC,MAAM,CAAC,OAAO;YAClB,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;YACtC,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,CAAC,QAAQ,CAAC,KAAK,KAAK,SAAS;gBAAE,OAAO;YAC1E,OAAO,CAAC,SAAS,GAAG,IAAI,CAAC;YACzB,OAAO,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC,CAAC;YAClE,KAAK,MAAM,MAAM,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,EAAE,CAAC;gBAC9C,IAAI,MAAM,CAAC,KAAK,KAAK,SAAS;oBAAE,aAAa,CAAC,OAAO,EAAE,MAAM,CAAC,UAAU,EAAE,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,CAAC,CAAC;YACtH,CAAC;YACD,MAAM,OAAO,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC5C,CAAC;QACD,mBAAmB,CAAC,UAAU;YAC5B,mBAAmB,CAAC,GAAG,CAAC,UAAU,EAAE,CAAC,mBAAmB,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;YACpF,MAAM,OAAO,GAAG,OAAO,EAAE,CAAC;YAC1B,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,KAAK,CAAC,IAAI,KAAK,CAAC,2CAA2C,CAAC,CAAC,CAAC;QACzG,CAAC;QACD,KAAK,CAAC,IAAI;YACR,QAAQ,GAAG,IAAI,CAAC;YAChB,MAAM,SAAS,GAAG,gBAAgB,CAAC;YACnC,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAC5B,SAAS,CAAC,SAAS,GAAG,IAAI,CAAC;gBAC3B,gBAAgB,GAAG,SAAS,CAAC;gBAC7B,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,sCAAsC,CAAC,CAAC,CAAC;YACrE,CAAC;YACD,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;YACzB,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;gBACzB,MAAM,CAAC,SAAS,GAAG,IAAI,CAAC;gBACxB,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC,CAAC;gBAC1D,MAAM,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;YAC3C,CAAC;YACD,KAAK,MAAM,OAAO,IAAI,QAAQ,CAAC,MAAM,EAAE,EAAE,CAAC;gBACxC,IAAI,OAAO,CAAC,SAAS,KAAK,SAAS;oBAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;gBACrE,IAAI,OAAO,CAAC,YAAY,KAAK,SAAS;oBAAE,YAAY,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YAC7E,CAAC;YACD,QAAQ,CAAC,KAAK,EAAE,CAAC;YACjB,gBAAgB,CAAC,KAAK,EAAE,CAAC;QAC3B,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,YAAY;IACnB,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;AACzH,CAAC;AAED,SAAS,cAAc,CACrB,MAA+B,EAC/B,KAA8B,EAC9B,GAAiB;IAEjB,OAAO;QACL,GAAG,MAAM;QACT,KAAK;QACL,SAAS,EAAE,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;QACxC,IAAI,EAAE,KAAK;QACX,OAAO,EAAE,KAAK,KAAK,WAAW,CAAC,CAAC,CAAC,mCAAmC,CAAC,CAAC,CAAC,6DAA6D;KACrI,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAkC;IACzD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5D,MAAM,QAAQ,GAAG,2BAA2B,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,UAAU,EAAE,CAAC,CAAC;IAC5E,MAAM,MAAM,GAAG,QAAQ,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAuC,EAAE,CACvF,QAAQ,CAAC,IAAI,KAAK,SAAS,IAAI,QAAQ,CAAC,EAAE,KAAK,QAAQ,IAAI,QAAQ,CAAC,EAAE,KAAK,UAAU,CAAC,CAAC;IACzF,OAAO,KAAK,EAAE,KAA4B,EAAE,MAAmB,EAAuC,EAAE;QACtG,MAAM,cAAc,GAAG,8BAA8B,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC;QACrE,MAAM,UAAU,GAAG,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,QAAQ,CAAC,EAAE,KAAK,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7E,MAAM,MAAM,GAAG,UAAU,EAAE,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAC,SAAS,CAAC,CAAC;QACnG,MAAM,cAAc,GAAG,cAAc,CAAC,cAAc,KAAK,SAAS,IAAI,MAAM,KAAK,SAAS;YACxF,CAAC,CAAC,cAAc,CAAC,cAAc;YAC/B,CAAC,CAAC,EAAE,GAAG,cAAc,CAAC,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;QAC1D,OAAO,MAAM,kBAAkB,CAAC;YAC9B,KAAK;YACL,eAAe,EAAE,QAAQ;YACzB,cAAc,EAAE;gBACd,GAAG,cAAc;gBACjB,GAAG,CAAC,cAAc,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,CAAC;aAC5D;YACD,WAAW,EAAE,OAAO,CAAC,GAAG;YACxB,WAAW,EAAE,MAAM;SACpB,CAAC,CAAC;IACL,CAAC,CAAC;AACJ,CAAC"}

package/dist/provider-auth-observations.d.ts

@@ -0,0 +1,22 @@
+import type { ProviderAuthProviderStatus } from "@mono-agent/agent-contracts";
+import type { RunSummary } from "@mono-agent/observability";
+interface ProviderObservation {
+    readonly verifiedAt?: string;
+    readonly failure?: NonNullable<ProviderAuthProviderStatus["lastFailure"]>;
+}
+export interface ProviderAuthObservationTracker {
+    /** Capture the current credential generation before this run can reach a provider. */
+    runStarted(runId: string): void;
+    observe(summary: RunSummary): void;
+    get(providerId: string): ProviderObservation | undefined;
+    /** Retain observations only for the agent's current bounded used-provider set. */
+    retainProviders(providerIds: readonly string[]): void;
+    /** Invalidate proof for the replaced credential while retaining only unrelated availability evidence. */
+    credentialPersisted(providerId: string): void;
+    recordSuccess(providerId: string, model: string, observedAt?: string): void;
+    recordFailure(providerId: string, model: string, kind: "provider_auth" | "provider_unavailable", observedAt?: string): void;
+    invalidate(providerId: string, observedAt?: string): void;
+}
+export declare function createProviderAuthObservationTracker(now?: () => number): ProviderAuthObservationTracker;
+export {};
+//# sourceMappingURL=provider-auth-observations.d.ts.map

package/dist/provider-auth-observations.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-observations.d.ts","sourceRoot":"","sources":["../src/provider-auth-observations.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,6BAA6B,CAAC;AAE9E,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,2BAA2B,CAAC;AAM5D,UAAU,mBAAmB;IAC3B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,OAAO,CAAC,EAAE,WAAW,CAAC,0BAA0B,CAAC,aAAa,CAAC,CAAC,CAAC;CAC3E;AAOD,MAAM,WAAW,8BAA8B;IAC7C,sFAAsF;IACtF,UAAU,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAChC,OAAO,CAAC,OAAO,EAAE,UAAU,GAAG,IAAI,CAAC;IACnC,GAAG,CAAC,UAAU,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAAC;IACzD,kFAAkF;IAClF,eAAe,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,CAAC;IACtD,yGAAyG;IACzG,mBAAmB,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9C,aAAa,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC5E,aAAa,CACX,UAAU,EAAE,MAAM,EAClB,KAAK,EAAE,MAAM,EACb,IAAI,EAAE,eAAe,GAAG,sBAAsB,EAC9C,UAAU,CAAC,EAAE,MAAM,GAClB,IAAI,CAAC;IACR,UAAU,CAAC,UAAU,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC3D;AAED,wBAAgB,oCAAoC,CAClD,GAAG,GAAE,MAAM,MAAiB,GAC3B,8BAA8B,CAiHhC"}

package/dist/provider-auth-observations.js

@@ -0,0 +1,139 @@
+import { MAX_PROVIDER_AUTH_ITEMS } from "@mono-agent/agent-contracts";
+import { parseMonoRuntimeModelReference } from "@mono-agent/runtime-adapter";
+const FAILURE_TTL_MS = 24 * 60 * 60 * 1_000;
+const MAX_TRACKED_RUNS = MAX_PROVIDER_AUTH_ITEMS * 4;
+export function createProviderAuthObservationTracker(now = Date.now) {
+    const observations = new Map();
+    const runGenerations = new Map();
+    let credentialGeneration = 0;
+    const providerOf = (model) => {
+        if (model === undefined)
+            return undefined;
+        try {
+            return parseMonoRuntimeModelReference(model).provider;
+        }
+        catch {
+            return undefined;
+        }
+    };
+    const isoNow = () => new Date(now()).toISOString();
+    const orderedSet = (providerId, value) => {
+        const current = observations.get(providerId);
+        if (current !== undefined && Date.parse(current.latestObservedAt) > Date.parse(value.latestObservedAt))
+            return;
+        observations.delete(providerId);
+        observations.set(providerId, value);
+        trimOldest();
+    };
+    const failureFor = (kind, model, observedAt = isoNow()) => {
+        const providerId = providerOf(model);
+        if (providerId === undefined || (kind !== "provider_auth" && kind !== "provider_unavailable"))
+            return;
+        orderedSet(providerId, {
+            latestObservedAt: observedAt,
+            failure: {
+                kind,
+                message: kind === "provider_auth"
+                    ? "Provider rejected the configured credential."
+                    : "Provider was unavailable.",
+                model: model,
+                observedAt,
+            },
+        });
+    };
+    const trimOldest = () => {
+        while (observations.size > MAX_PROVIDER_AUTH_ITEMS) {
+            const oldest = observations.keys().next().value;
+            if (oldest === undefined)
+                return;
+            observations.delete(oldest);
+        }
+    };
+    return {
+        runStarted(runId) {
+            runGenerations.delete(runId);
+            runGenerations.set(runId, credentialGeneration);
+            while (runGenerations.size > MAX_TRACKED_RUNS) {
+                const oldest = runGenerations.keys().next().value;
+                if (oldest === undefined)
+                    return;
+                runGenerations.delete(oldest);
+            }
+        },
+        observe(summary) {
+            const runGeneration = runGenerations.get(summary.runId);
+            runGenerations.delete(summary.runId);
+            // A missing marker was evicted or did not pass through the app-owned start
+            // hook. A changed generation means some credential was persisted while
+            // the run was active. In either case its provider evidence is ambiguous,
+            // including every failed attempt in failoverHistory, so fail closed.
+            if (runGeneration === undefined || runGeneration !== credentialGeneration)
+                return;
+            const observedAt = validIso(summary.endedAt) ?? validIso(summary.updatedAt) ?? isoNow();
+            for (const attempt of summary.failoverHistory ?? []) {
+                failureFor(attempt.failureKind, attempt.model, observedAt);
+            }
+            if (summary.status === "succeeded") {
+                const providerId = providerOf(summary.model);
+                if (providerId !== undefined) {
+                    orderedSet(providerId, { verifiedAt: observedAt, latestObservedAt: observedAt });
+                }
+            }
+            else {
+                failureFor(summary.failureKind, summary.model, observedAt);
+            }
+        },
+        get(providerId) {
+            const value = observations.get(providerId);
+            if (value?.failure !== undefined
+                && now() - Date.parse(value.failure.observedAt) >= FAILURE_TTL_MS) {
+                const verifiedAt = value.verifiedAt;
+                const replacement = verifiedAt === undefined
+                    ? undefined
+                    : { verifiedAt, latestObservedAt: value.latestObservedAt };
+                if (replacement === undefined)
+                    observations.delete(providerId);
+                else
+                    observations.set(providerId, replacement);
+                return verifiedAt === undefined ? undefined : { verifiedAt };
+            }
+            if (value === undefined || value.verifiedAt === undefined && value.failure === undefined)
+                return undefined;
+            return {
+                ...(value.verifiedAt === undefined ? {} : { verifiedAt: value.verifiedAt }),
+                ...(value.failure === undefined ? {} : { failure: value.failure }),
+            };
+        },
+        retainProviders(providerIds) {
+            const retained = new Set(providerIds.slice(0, MAX_PROVIDER_AUTH_ITEMS));
+            for (const providerId of observations.keys()) {
+                if (!retained.has(providerId))
+                    observations.delete(providerId);
+            }
+        },
+        credentialPersisted(providerId) {
+            credentialGeneration += 1;
+            observations.delete(providerId);
+        },
+        recordSuccess(providerId, model, observedAt = isoNow()) {
+            if (providerOf(model) !== providerId)
+                return;
+            orderedSet(providerId, { verifiedAt: observedAt, latestObservedAt: observedAt });
+        },
+        recordFailure(providerId, model, kind, observedAt = isoNow()) {
+            if (providerOf(model) !== providerId)
+                return;
+            failureFor(kind, model, observedAt);
+        },
+        invalidate(providerId, observedAt = isoNow()) {
+            orderedSet(providerId, { latestObservedAt: observedAt });
+        },
+    };
+}
+function validIso(value) {
+    if (value === undefined)
+        return undefined;
+    const parsed = Date.parse(value);
+    return Number.isFinite(parsed) && new Date(parsed).toISOString() === value ? value : undefined;
+}
+//# sourceMappingURL=provider-auth-observations.js.map

package/dist/provider-auth-observations.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-observations.js","sourceRoot":"","sources":["../src/provider-auth-observations.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,uBAAuB,EAAE,MAAM,6BAA6B,CAAC;AAEtE,OAAO,EAAE,8BAA8B,EAAE,MAAM,6BAA6B,CAAC;AAE7E,MAAM,cAAc,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAC5C,MAAM,gBAAgB,GAAG,uBAAuB,GAAG,CAAC,CAAC;AA+BrD,MAAM,UAAU,oCAAoC,CAClD,MAAoB,IAAI,CAAC,GAAG;IAE5B,MAAM,YAAY,GAAG,IAAI,GAAG,EAAuC,CAAC;IACpE,MAAM,cAAc,GAAG,IAAI,GAAG,EAAkB,CAAC;IACjD,IAAI,oBAAoB,GAAG,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,CAAC,KAAyB,EAAsB,EAAE;QACnE,IAAI,KAAK,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QAC1C,IAAI,CAAC;YACH,OAAO,8BAA8B,CAAC,KAAK,CAAC,CAAC,QAAkB,CAAC;QAClE,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,SAAS,CAAC;QACnB,CAAC;IACH,CAAC,CAAC;IACF,MAAM,MAAM,GAAG,GAAG,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,UAAU,GAAG,CAAC,UAAkB,EAAE,KAAkC,EAAE,EAAE;QAC5E,MAAM,OAAO,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;QAC7C,IAAI,OAAO,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,gBAAgB,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,gBAAgB,CAAC;YAAE,OAAO;QAC/G,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAChC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC,CAAC;QACpC,UAAU,EAAE,CAAC;IACf,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,CAAC,IAAwB,EAAE,KAAyB,EAAE,UAAU,GAAG,MAAM,EAAE,EAAE,EAAE;QAChG,MAAM,UAAU,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC;QACrC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,KAAK,eAAe,IAAI,IAAI,KAAK,sBAAsB,CAAC;YAAE,OAAO;QACtG,UAAU,CAAC,UAAU,EAAE;YACrB,gBAAgB,EAAE,UAAU;YAC5B,OAAO,EAAE;gBACP,IAAI;gBACJ,OAAO,EAAE,IAAI,KAAK,eAAe;oBAC/B,CAAC,CAAC,8CAA8C;oBAChD,CAAC,CAAC,2BAA2B;gBAC/B,KAAK,EAAE,KAAe;gBACtB,UAAU;aACX;SACF,CAAC,CAAC;IACL,CAAC,CAAC;IACF,MAAM,UAAU,GAAG,GAAG,EAAE;QACtB,OAAO,YAAY,CAAC,IAAI,GAAG,uBAAuB,EAAE,CAAC;YACnD,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;YACtE,IAAI,MAAM,KAAK,SAAS;gBAAE,OAAO;YACjC,YAAY,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAC9B,CAAC;IACH,CAAC,CAAC;IACF,OAAO;QACL,UAAU,CAAC,KAAK;YACd,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YAC7B,cAAc,CAAC,GAAG,CAAC,KAAK,EAAE,oBAAoB,CAAC,CAAC;YAChD,OAAO,cAAc,CAAC,IAAI,GAAG,gBAAgB,EAAE,CAAC;gBAC9C,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAA2B,CAAC;gBACxE,IAAI,MAAM,KAAK,SAAS;oBAAE,OAAO;gBACjC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;QACD,OAAO,CAAC,OAAO;YACb,MAAM,aAAa,GAAG,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACxD,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrC,2EAA2E;YAC3E,uEAAuE;YACvE,yEAAyE;YACzE,qEAAqE;YACrE,IAAI,aAAa,KAAK,SAAS,IAAI,aAAa,KAAK,oBAAoB;gBAAE,OAAO;YAClF,MAAM,UAAU,GAAG,QAAQ,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,QAAQ,CAAC,OAAO,CAAC,SAAS,CAAC,IAAI,MAAM,EAAE,CAAC;YACxF,KAAK,MAAM,OAAO,IAAI,OAAO,CAAC,eAAe,IAAI,EAAE,EAAE,CAAC;gBACpD,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7D,CAAC;YACD,IAAI,OAAO,CAAC,MAAM,KAAK,WAAW,EAAE,CAAC;gBACnC,MAAM,UAAU,GAAG,UAAU,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBAC7C,IAAI,UAAU,KAAK,SAAS,EAAE,CAAC;oBAC7B,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;gBACnF,CAAC;YACH,CAAC;iBAAM,CAAC;gBACN,UAAU,CAAC,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,CAAC,CAAC;YAC7D,CAAC;QACH,CAAC;QACD,GAAG,CAAC,UAAU;YACZ,MAAM,KAAK,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;YAC3C,IAAI,KAAK,EAAE,OAAO,KAAK,SAAS;mBAC3B,GAAG,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,cAAc,EAAE,CAAC;gBACpE,MAAM,UAAU,GAAG,KAAK,CAAC,UAAU,CAAC;gBACpC,MAAM,WAAW,GAA4C,UAAU,KAAK,SAAS;oBACnF,CAAC,CAAC,SAAS;oBACX,CAAC,CAAC,EAAE,UAAU,EAAE,gBAAgB,EAAE,KAAK,CAAC,gBAAgB,EAAE,CAAC;gBAC7D,IAAI,WAAW,KAAK,SAAS;oBAAE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;;oBAC1D,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,WAAW,CAAC,CAAC;gBAC/C,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAC;YAC/D,CAAC;YACD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,UAAU,KAAK,SAAS,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,OAAO,SAAS,CAAC;YAC3G,OAAO;gBACL,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC;gBAC3E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC;aACnE,CAAC;QACJ,CAAC;QACD,eAAe,CAAC,WAAW;YACzB,MAAM,QAAQ,GAAG,IAAI,GAAG,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC,CAAC;YACxE,KAAK,MAAM,UAAU,IAAI,YAAY,CAAC,IAAI,EAAE,EAAE,CAAC;gBAC7C,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,UAAU,CAAC;oBAAE,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;YACjE,CAAC;QACH,CAAC;QACD,mBAAmB,CAAC,UAAU;YAC5B,oBAAoB,IAAI,CAAC,CAAC;YAC1B,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;QAClC,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,UAAU,GAAG,MAAM,EAAE;YACpD,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;gBAAE,OAAO;YAC7C,UAAU,CAAC,UAAU,EAAE,EAAE,UAAU,EAAE,UAAU,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QACnF,CAAC;QACD,aAAa,CAAC,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,EAAE;YAC1D,IAAI,UAAU,CAAC,KAAK,CAAC,KAAK,UAAU;gBAAE,OAAO;YAC7C,UAAU,CAAC,IAAI,EAAE,KAAK,EAAE,UAAU,CAAC,CAAC;QACtC,CAAC;QACD,UAAU,CAAC,UAAU,EAAE,UAAU,GAAG,MAAM,EAAE;YAC1C,UAAU,CAAC,UAAU,EAAE,EAAE,gBAAgB,EAAE,UAAU,EAAE,CAAC,CAAC;QAC3D,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAyB;IACzC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACjC,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,WAAW,EAAE,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACjG,CAAC"}

package/dist/provider-auth-operator.d.ts

@@ -0,0 +1,19 @@
+import { type ProviderAuthOperator, type ProviderAuthStatusSnapshot } from "@mono-agent/agent-contracts";
+import { loginPiProviderAuth } from "@mono-agent/agent-runtime/ai";
+import { persistPiProviderCredential } from "./provider-setup.js";
+import { type CreateProviderAuthCheckManagerOptions } from "./provider-auth-checks.js";
+import { type ProviderAuthStatusOptions } from "./provider-auth-status.js";
+export interface CreateProviderAuthOperatorOptions extends ProviderAuthStatusOptions {
+    readonly platform?: NodeJS.Platform;
+    readonly login?: typeof loginPiProviderAuth;
+    readonly persist?: typeof persistPiProviderCredential;
+    readonly now?: () => number;
+    readonly checkExecute?: CreateProviderAuthCheckManagerOptions["execute"];
+    readonly checkProviderTimeoutMs?: number;
+    readonly checkBatchTimeoutMs?: number;
+    readonly checkCooldownMs?: number;
+    /** Deterministic test seam shared by login and check admission preparation. */
+    readonly statusSnapshot?: () => Promise<ProviderAuthStatusSnapshot>;
+}
+export declare function createProviderAuthOperator(options: CreateProviderAuthOperatorOptions): ProviderAuthOperator;
+//# sourceMappingURL=provider-auth-operator.d.ts.map

package/dist/provider-auth-operator.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-auth-operator.d.ts","sourceRoot":"","sources":["../src/provider-auth-operator.ts"],"names":[],"mappings":"AAEA,OAAO,EAOL,KAAK,oBAAoB,EAKzB,KAAK,0BAA0B,EAChC,MAAM,6BAA6B,CAAC;AACrC,OAAO,EAAE,mBAAmB,EAAE,MAAM,8BAA8B,CAAC;AAEnE,OAAO,EAAE,2BAA2B,EAAE,MAAM,qBAAqB,CAAC;AAClE,OAAO,EAEL,KAAK,qCAAqC,EAC3C,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAA8B,KAAK,yBAAyB,EAAE,MAAM,2BAA2B,CAAC;AAmCvG,MAAM,WAAW,iCAAkC,SAAQ,yBAAyB;IAClF,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC,QAAQ,CAAC;IACpC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,mBAAmB,CAAC;IAC5C,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,2BAA2B,CAAC;IACtD,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,QAAQ,CAAC,YAAY,CAAC,EAAE,qCAAqC,CAAC,SAAS,CAAC,CAAC;IACzE,QAAQ,CAAC,sBAAsB,CAAC,EAAE,MAAM,CAAC;IACzC,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,CAAC;IACtC,QAAQ,CAAC,eAAe,CAAC,EAAE,MAAM,CAAC;IAClC,+EAA+E;IAC/E,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,OAAO,CAAC,0BAA0B,CAAC,CAAC;CACrE;AAED,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,iCAAiC,GAAG,oBAAoB,CA0V3G"}