@omnicross/daemon 0.4.3 → 0.4.4

package/dist/cli.cjs

@@ -8684,7 +8684,7 @@ async function handleAdminApi(req, res, path2, deps) {
       case "server":
         return await handleServer(req, res, method, deps);
       case "images":
-        return await handleImages(res, method, rest, deps);
+        return await handleImages(req, res, method, rest, deps);
       case "search":
         return await handleSearchAdmin(req, res, method, rest, deps);
       case "accounts":
@@ -10231,7 +10231,41 @@ function imageEndpointUrls(base) {
     edits: `${base}/v1/images/edits`
   }) : null;
 }
-async function handleImages(res, method, rest, deps) {
+function imageProviderEvidence(images, capabilities) {
+  const evidenceAt = safeStatusTimestamp(capabilities?.oldestEvidenceAt);
+  const resolvedAt = safeStatusTimestamp(capabilities?.resolvedAt);
+  if (evidenceAt === void 0 || resolvedAt === void 0) return null;
+  const expiresAt = evidenceAt <= Number.MAX_SAFE_INTEGER - images.evidenceTtlMs ? evidenceAt + images.evidenceTtlMs : void 0;
+  return Object.freeze({
+    verifiedAt: evidenceAt,
+    ageMs: Math.max(0, resolvedAt - evidenceAt),
+    ...expiresAt !== void 0 ? { expiresAt } : {}
+  });
+}
+async function handleImagesVerifyLive(req, res, deps) {
+  const verifier = deps.imageLiveVerifier;
+  if (!verifier) {
+    return writeJsonError(res, 501, "Images live verification is not available");
+  }
+  const serverConfig = await (0, import_outbound_api5.loadServerConfig)(deps.settingsStore);
+  const images = serverConfig.images ?? import_outbound_api5.DEFAULT_IMAGES_SERVER_CONFIG;
+  req.resume();
+  const controller = new AbortController();
+  req.on("close", () => controller.abort());
+  const result = await verifier.verifyLive(images, controller.signal);
+  const antigravityRouted = Object.values(images.models).includes("antigravity-subscription");
+  return writeJson4(res, 200, {
+    ...result,
+    ...antigravityRouted ? { antigravityDeferred: true } : {}
+  });
+}
+async function handleImages(req, res, method, rest, deps) {
+  if (rest.length === 1 && rest[0] === "verify-live") {
+    if (method !== "POST") {
+      return writeJsonError(res, 405, `method ${method} not allowed on Images verify-live`);
+    }
+    return handleImagesVerifyLive(req, res, deps);
+  }
   if (rest.length !== 1 || rest[0] !== "capabilities") {
     return writeJsonError(res, 404, "unknown Images admin resource");
   }
@@ -10246,14 +10280,14 @@ async function handleImages(res, method, rest, deps) {
   const capability = await reader.inspectCapability(IMAGE_ADMIN_STATUS_TENANT);
   const resources = safeRuntimeResources(reader.resourceStatus());
   const outbound = deps.outboundApiServer.getStatus();
-  const evidenceAt = safeStatusTimestamp(capability.capabilities?.oldestEvidenceAt);
-  const resolvedAt = safeStatusTimestamp(capability.capabilities?.resolvedAt);
-  const expiresAt = evidenceAt !== void 0 && evidenceAt <= Number.MAX_SAFE_INTEGER - images.evidenceTtlMs ? evidenceAt + images.evidenceTtlMs : void 0;
-  const evidence = evidenceAt !== void 0 && resolvedAt !== void 0 ? Object.freeze({
-    verifiedAt: evidenceAt,
-    ageMs: Math.max(0, resolvedAt - evidenceAt),
-    ...expiresAt !== void 0 ? { expiresAt } : {}
-  }) : null;
+  const evidence = imageProviderEvidence(images, capability.capabilities);
+  const providers = (capability.providers ?? []).map((provider) => Object.freeze({
+    providerId: provider.providerId,
+    available: provider.available === true,
+    reason: provider.available ? null : safeImageCapabilityReason(provider.reason),
+    models: Object.freeze([...provider.models]),
+    evidence: imageProviderEvidence(images, provider.capabilities)
+  }));
   const draining = lifecycle.draining.map((generation) => Object.freeze({
     generationId: safeImageGenerationId(generation.generationId),
     enabled: generation.enabled,
@@ -10274,6 +10308,7 @@ async function handleImages(res, method, rest, deps) {
       evidence,
       features: safeCapabilityValues(capability.capabilities, images.defaultModel)
     },
+    providers,
     runtime: {
       disposed: lifecycle.disposed,
       generationId: safeImageGenerationId(lifecycle.current.generationId),
@@ -10504,7 +10539,7 @@ async function handleUiStatic(req, res, urlPath, uiDist) {
 }
 
 // src/admin/version.ts
-var DAEMON_VERSION = true ? "0.4.3" : "0.0.0-dev";
+var DAEMON_VERSION = true ? "0.4.4" : "0.0.0-dev";
 
 // src/admin/AdminServer.ts
 var LOOPBACK_ADDR = "127.0.0.1";
@@ -12771,15 +12806,32 @@ function createImageRuntimeGeneration(options) {
     const inspectCapability = async (apiKeyId) => {
       const providerCapabilities = /* @__PURE__ */ new Map();
       let defaultProviderError;
+      const providerRows = [];
       for (const providerId of [...new Set(Object.values(config.models))]) {
         try {
-          providerCapabilities.set(providerId, await inspectOneProvider(providerId, apiKeyId));
+          const capabilities2 = await inspectOneProvider(providerId, apiKeyId);
+          providerCapabilities.set(providerId, capabilities2);
+          const affirmed = capabilities2.available === true && capabilities2.generate === true;
+          providerRows.push({
+            providerId,
+            available: affirmed,
+            ...!affirmed ? { reason: capabilities2.reason ?? "runtime_unavailable" } : {},
+            models: affirmed ? Object.entries(config.models).filter(([model, modelProvider]) => modelProvider === providerId && capabilities2.models.includes(model)).map(([model]) => model) : [],
+            capabilities: capabilities2
+          });
         } catch (error) {
           if (providerId === defaultProviderId) defaultProviderError = error;
+          providerRows.push({
+            providerId,
+            available: false,
+            reason: error instanceof import_image_generation5.ImageGenerationError && (error.code === "upstream_auth_required" || error.code === "invalid_api_key") ? "account_unverified" : "runtime_unavailable",
+            models: []
+          });
         }
       }
+      const providers2 = Object.freeze(providerRows);
       const routedModels = Object.freeze(
-        [...providerCapabilities.entries()].flatMap(([providerId, capabilities2]) => capabilities2.available === true && capabilities2.generate === true ? Object.entries(config.models).filter(([model, modelProvider]) => modelProvider === providerId && capabilities2.models.includes(model)).map(([model]) => model) : [])
+        providerRows.flatMap((row) => row.available ? row.models : [])
       );
       const capabilities = providerCapabilities.get(defaultProviderId);
       if (!capabilities) {
@@ -12789,6 +12841,7 @@ function createImageRuntimeGeneration(options) {
           providerId: defaultProviderId,
           model: config.defaultModel,
           routedModels,
+          providers: providers2,
           reason: defaultProviderError instanceof import_image_generation5.ImageGenerationError && (defaultProviderError.code === "upstream_auth_required" || defaultProviderError.code === "invalid_api_key") ? "account_unverified" : "runtime_unavailable"
         });
       }
@@ -12799,6 +12852,7 @@ function createImageRuntimeGeneration(options) {
         providerId: defaultProviderId,
         model: config.defaultModel,
         routedModels,
+        providers: providers2,
         ...!available ? { reason: capabilities.reason ?? "runtime_unavailable" } : {},
         capabilities
       });
@@ -21259,6 +21313,7 @@ function buildDaemon(config, paths) {
     outboundApiServer,
     imageRuntimeConfig,
     imageRuntimeStatus: paths.imageRuntimeStatus ?? imageRuntimeManager,
+    imageLiveVerifier: paths.imageLiveVerifier ?? imageDoctor,
     imageConfigAudit: paths.imageConfigAudit ?? ((record) => {
       imageObservability.recordConfigurationAudit(record);
     }),

package/dist/cli.js

@@ -8818,7 +8818,7 @@ async function handleAdminApi(req, res, path2, deps) {
       case "server":
         return await handleServer(req, res, method, deps);
       case "images":
-        return await handleImages(res, method, rest, deps);
+        return await handleImages(req, res, method, rest, deps);
       case "search":
         return await handleSearchAdmin(req, res, method, rest, deps);
       case "accounts":
@@ -10365,7 +10365,41 @@ function imageEndpointUrls(base) {
     edits: `${base}/v1/images/edits`
   }) : null;
 }
-async function handleImages(res, method, rest, deps) {
+function imageProviderEvidence(images, capabilities) {
+  const evidenceAt = safeStatusTimestamp(capabilities?.oldestEvidenceAt);
+  const resolvedAt = safeStatusTimestamp(capabilities?.resolvedAt);
+  if (evidenceAt === void 0 || resolvedAt === void 0) return null;
+  const expiresAt = evidenceAt <= Number.MAX_SAFE_INTEGER - images.evidenceTtlMs ? evidenceAt + images.evidenceTtlMs : void 0;
+  return Object.freeze({
+    verifiedAt: evidenceAt,
+    ageMs: Math.max(0, resolvedAt - evidenceAt),
+    ...expiresAt !== void 0 ? { expiresAt } : {}
+  });
+}
+async function handleImagesVerifyLive(req, res, deps) {
+  const verifier = deps.imageLiveVerifier;
+  if (!verifier) {
+    return writeJsonError(res, 501, "Images live verification is not available");
+  }
+  const serverConfig = await loadServerConfig3(deps.settingsStore);
+  const images = serverConfig.images ?? DEFAULT_IMAGES_SERVER_CONFIG;
+  req.resume();
+  const controller = new AbortController();
+  req.on("close", () => controller.abort());
+  const result = await verifier.verifyLive(images, controller.signal);
+  const antigravityRouted = Object.values(images.models).includes("antigravity-subscription");
+  return writeJson4(res, 200, {
+    ...result,
+    ...antigravityRouted ? { antigravityDeferred: true } : {}
+  });
+}
+async function handleImages(req, res, method, rest, deps) {
+  if (rest.length === 1 && rest[0] === "verify-live") {
+    if (method !== "POST") {
+      return writeJsonError(res, 405, `method ${method} not allowed on Images verify-live`);
+    }
+    return handleImagesVerifyLive(req, res, deps);
+  }
   if (rest.length !== 1 || rest[0] !== "capabilities") {
     return writeJsonError(res, 404, "unknown Images admin resource");
   }
@@ -10380,14 +10414,14 @@ async function handleImages(res, method, rest, deps) {
   const capability = await reader.inspectCapability(IMAGE_ADMIN_STATUS_TENANT);
   const resources = safeRuntimeResources(reader.resourceStatus());
   const outbound = deps.outboundApiServer.getStatus();
-  const evidenceAt = safeStatusTimestamp(capability.capabilities?.oldestEvidenceAt);
-  const resolvedAt = safeStatusTimestamp(capability.capabilities?.resolvedAt);
-  const expiresAt = evidenceAt !== void 0 && evidenceAt <= Number.MAX_SAFE_INTEGER - images.evidenceTtlMs ? evidenceAt + images.evidenceTtlMs : void 0;
-  const evidence = evidenceAt !== void 0 && resolvedAt !== void 0 ? Object.freeze({
-    verifiedAt: evidenceAt,
-    ageMs: Math.max(0, resolvedAt - evidenceAt),
-    ...expiresAt !== void 0 ? { expiresAt } : {}
-  }) : null;
+  const evidence = imageProviderEvidence(images, capability.capabilities);
+  const providers = (capability.providers ?? []).map((provider) => Object.freeze({
+    providerId: provider.providerId,
+    available: provider.available === true,
+    reason: provider.available ? null : safeImageCapabilityReason(provider.reason),
+    models: Object.freeze([...provider.models]),
+    evidence: imageProviderEvidence(images, provider.capabilities)
+  }));
   const draining = lifecycle.draining.map((generation) => Object.freeze({
     generationId: safeImageGenerationId(generation.generationId),
     enabled: generation.enabled,
@@ -10408,6 +10442,7 @@ async function handleImages(res, method, rest, deps) {
       evidence,
       features: safeCapabilityValues(capability.capabilities, images.defaultModel)
     },
+    providers,
     runtime: {
       disposed: lifecycle.disposed,
       generationId: safeImageGenerationId(lifecycle.current.generationId),
@@ -10637,7 +10672,7 @@ async function handleUiStatic(req, res, urlPath, uiDist) {
 }
 
 // src/admin/version.ts
-var DAEMON_VERSION = true ? "0.4.3" : "0.0.0-dev";
+var DAEMON_VERSION = true ? "0.4.4" : "0.0.0-dev";
 
 // src/admin/AdminServer.ts
 var LOOPBACK_ADDR = "127.0.0.1";
@@ -12949,15 +12984,32 @@ function createImageRuntimeGeneration(options) {
     const inspectCapability = async (apiKeyId) => {
       const providerCapabilities = /* @__PURE__ */ new Map();
       let defaultProviderError;
+      const providerRows = [];
       for (const providerId of [...new Set(Object.values(config.models))]) {
         try {
-          providerCapabilities.set(providerId, await inspectOneProvider(providerId, apiKeyId));
+          const capabilities2 = await inspectOneProvider(providerId, apiKeyId);
+          providerCapabilities.set(providerId, capabilities2);
+          const affirmed = capabilities2.available === true && capabilities2.generate === true;
+          providerRows.push({
+            providerId,
+            available: affirmed,
+            ...!affirmed ? { reason: capabilities2.reason ?? "runtime_unavailable" } : {},
+            models: affirmed ? Object.entries(config.models).filter(([model, modelProvider]) => modelProvider === providerId && capabilities2.models.includes(model)).map(([model]) => model) : [],
+            capabilities: capabilities2
+          });
         } catch (error) {
           if (providerId === defaultProviderId) defaultProviderError = error;
+          providerRows.push({
+            providerId,
+            available: false,
+            reason: error instanceof ImageGenerationError4 && (error.code === "upstream_auth_required" || error.code === "invalid_api_key") ? "account_unverified" : "runtime_unavailable",
+            models: []
+          });
         }
       }
+      const providers2 = Object.freeze(providerRows);
       const routedModels = Object.freeze(
-        [...providerCapabilities.entries()].flatMap(([providerId, capabilities2]) => capabilities2.available === true && capabilities2.generate === true ? Object.entries(config.models).filter(([model, modelProvider]) => modelProvider === providerId && capabilities2.models.includes(model)).map(([model]) => model) : [])
+        providerRows.flatMap((row) => row.available ? row.models : [])
       );
       const capabilities = providerCapabilities.get(defaultProviderId);
       if (!capabilities) {
@@ -12967,6 +13019,7 @@ function createImageRuntimeGeneration(options) {
           providerId: defaultProviderId,
           model: config.defaultModel,
           routedModels,
+          providers: providers2,
           reason: defaultProviderError instanceof ImageGenerationError4 && (defaultProviderError.code === "upstream_auth_required" || defaultProviderError.code === "invalid_api_key") ? "account_unverified" : "runtime_unavailable"
         });
       }
@@ -12977,6 +13030,7 @@ function createImageRuntimeGeneration(options) {
         providerId: defaultProviderId,
         model: config.defaultModel,
         routedModels,
+        providers: providers2,
         ...!available ? { reason: capabilities.reason ?? "runtime_unavailable" } : {},
         capabilities
       });
@@ -21538,6 +21592,7 @@ function buildDaemon(config, paths) {
     outboundApiServer,
     imageRuntimeConfig,
     imageRuntimeStatus: paths.imageRuntimeStatus ?? imageRuntimeManager,
+    imageLiveVerifier: paths.imageLiveVerifier ?? imageDoctor,
     imageConfigAudit: paths.imageConfigAudit ?? ((record) => {
       imageObservability.recordConfigurationAudit(record);
     }),

package/dist/index.cjs

@@ -7917,7 +7917,7 @@ async function handleAdminApi(req, res, path2, deps) {
       case "server":
         return await handleServer(req, res, method, deps);
       case "images":
-        return await handleImages(res, method, rest, deps);
+        return await handleImages(req, res, method, rest, deps);
       case "search":
         return await handleSearchAdmin(req, res, method, rest, deps);
       case "accounts":
@@ -9464,7 +9464,41 @@ function imageEndpointUrls(base) {
     edits: `${base}/v1/images/edits`
   }) : null;
 }
-async function handleImages(res, method, rest, deps) {
+function imageProviderEvidence(images, capabilities) {
+  const evidenceAt = safeStatusTimestamp(capabilities?.oldestEvidenceAt);
+  const resolvedAt = safeStatusTimestamp(capabilities?.resolvedAt);
+  if (evidenceAt === void 0 || resolvedAt === void 0) return null;
+  const expiresAt = evidenceAt <= Number.MAX_SAFE_INTEGER - images.evidenceTtlMs ? evidenceAt + images.evidenceTtlMs : void 0;
+  return Object.freeze({
+    verifiedAt: evidenceAt,
+    ageMs: Math.max(0, resolvedAt - evidenceAt),
+    ...expiresAt !== void 0 ? { expiresAt } : {}
+  });
+}
+async function handleImagesVerifyLive(req, res, deps) {
+  const verifier = deps.imageLiveVerifier;
+  if (!verifier) {
+    return writeJsonError(res, 501, "Images live verification is not available");
+  }
+  const serverConfig = await (0, import_outbound_api5.loadServerConfig)(deps.settingsStore);
+  const images = serverConfig.images ?? import_outbound_api5.DEFAULT_IMAGES_SERVER_CONFIG;
+  req.resume();
+  const controller = new AbortController();
+  req.on("close", () => controller.abort());
+  const result = await verifier.verifyLive(images, controller.signal);
+  const antigravityRouted = Object.values(images.models).includes("antigravity-subscription");
+  return writeJson4(res, 200, {
+    ...result,
+    ...antigravityRouted ? { antigravityDeferred: true } : {}
+  });
+}
+async function handleImages(req, res, method, rest, deps) {
+  if (rest.length === 1 && rest[0] === "verify-live") {
+    if (method !== "POST") {
+      return writeJsonError(res, 405, `method ${method} not allowed on Images verify-live`);
+    }
+    return handleImagesVerifyLive(req, res, deps);
+  }
   if (rest.length !== 1 || rest[0] !== "capabilities") {
     return writeJsonError(res, 404, "unknown Images admin resource");
   }
@@ -9479,14 +9513,14 @@ async function handleImages(res, method, rest, deps) {
   const capability = await reader.inspectCapability(IMAGE_ADMIN_STATUS_TENANT);
   const resources = safeRuntimeResources(reader.resourceStatus());
   const outbound = deps.outboundApiServer.getStatus();
-  const evidenceAt = safeStatusTimestamp(capability.capabilities?.oldestEvidenceAt);
-  const resolvedAt = safeStatusTimestamp(capability.capabilities?.resolvedAt);
-  const expiresAt = evidenceAt !== void 0 && evidenceAt <= Number.MAX_SAFE_INTEGER - images.evidenceTtlMs ? evidenceAt + images.evidenceTtlMs : void 0;
-  const evidence = evidenceAt !== void 0 && resolvedAt !== void 0 ? Object.freeze({
-    verifiedAt: evidenceAt,
-    ageMs: Math.max(0, resolvedAt - evidenceAt),
-    ...expiresAt !== void 0 ? { expiresAt } : {}
-  }) : null;
+  const evidence = imageProviderEvidence(images, capability.capabilities);
+  const providers = (capability.providers ?? []).map((provider) => Object.freeze({
+    providerId: provider.providerId,
+    available: provider.available === true,
+    reason: provider.available ? null : safeImageCapabilityReason(provider.reason),
+    models: Object.freeze([...provider.models]),
+    evidence: imageProviderEvidence(images, provider.capabilities)
+  }));
   const draining = lifecycle.draining.map((generation) => Object.freeze({
     generationId: safeImageGenerationId(generation.generationId),
     enabled: generation.enabled,
@@ -9507,6 +9541,7 @@ async function handleImages(res, method, rest, deps) {
       evidence,
       features: safeCapabilityValues(capability.capabilities, images.defaultModel)
     },
+    providers,
     runtime: {
       disposed: lifecycle.disposed,
       generationId: safeImageGenerationId(lifecycle.current.generationId),
@@ -9737,7 +9772,7 @@ async function handleUiStatic(req, res, urlPath, uiDist) {
 }
 
 // src/admin/version.ts
-var DAEMON_VERSION = true ? "0.4.3" : "0.0.0-dev";
+var DAEMON_VERSION = true ? "0.4.4" : "0.0.0-dev";
 
 // src/admin/AdminServer.ts
 var LOOPBACK_ADDR = "127.0.0.1";
@@ -12037,15 +12072,32 @@ function createImageRuntimeGeneration(options) {
     const inspectCapability = async (apiKeyId) => {
       const providerCapabilities = /* @__PURE__ */ new Map();
       let defaultProviderError;
+      const providerRows = [];
       for (const providerId of [...new Set(Object.values(config.models))]) {
         try {
-          providerCapabilities.set(providerId, await inspectOneProvider(providerId, apiKeyId));
+          const capabilities2 = await inspectOneProvider(providerId, apiKeyId);
+          providerCapabilities.set(providerId, capabilities2);
+          const affirmed = capabilities2.available === true && capabilities2.generate === true;
+          providerRows.push({
+            providerId,
+            available: affirmed,
+            ...!affirmed ? { reason: capabilities2.reason ?? "runtime_unavailable" } : {},
+            models: affirmed ? Object.entries(config.models).filter(([model, modelProvider]) => modelProvider === providerId && capabilities2.models.includes(model)).map(([model]) => model) : [],
+            capabilities: capabilities2
+          });
         } catch (error) {
           if (providerId === defaultProviderId) defaultProviderError = error;
+          providerRows.push({
+            providerId,
+            available: false,
+            reason: error instanceof import_image_generation5.ImageGenerationError && (error.code === "upstream_auth_required" || error.code === "invalid_api_key") ? "account_unverified" : "runtime_unavailable",
+            models: []
+          });
         }
       }
+      const providers2 = Object.freeze(providerRows);
       const routedModels = Object.freeze(
-        [...providerCapabilities.entries()].flatMap(([providerId, capabilities2]) => capabilities2.available === true && capabilities2.generate === true ? Object.entries(config.models).filter(([model, modelProvider]) => modelProvider === providerId && capabilities2.models.includes(model)).map(([model]) => model) : [])
+        providerRows.flatMap((row) => row.available ? row.models : [])
       );
       const capabilities = providerCapabilities.get(defaultProviderId);
       if (!capabilities) {
@@ -12055,6 +12107,7 @@ function createImageRuntimeGeneration(options) {
           providerId: defaultProviderId,
           model: config.defaultModel,
           routedModels,
+          providers: providers2,
           reason: defaultProviderError instanceof import_image_generation5.ImageGenerationError && (defaultProviderError.code === "upstream_auth_required" || defaultProviderError.code === "invalid_api_key") ? "account_unverified" : "runtime_unavailable"
         });
       }
@@ -12065,6 +12118,7 @@ function createImageRuntimeGeneration(options) {
         providerId: defaultProviderId,
         model: config.defaultModel,
         routedModels,
+        providers: providers2,
         ...!available ? { reason: capabilities.reason ?? "runtime_unavailable" } : {},
         capabilities
       });
@@ -21072,6 +21126,7 @@ function buildDaemon(config, paths) {
     outboundApiServer,
     imageRuntimeConfig,
     imageRuntimeStatus: paths.imageRuntimeStatus ?? imageRuntimeManager,
+    imageLiveVerifier: paths.imageLiveVerifier ?? imageDoctor,
     imageConfigAudit: paths.imageConfigAudit ?? ((record) => {
       imageObservability.recordConfigurationAudit(record);
     }),