@shipfox/api-agent 2.0.0

package/dist/core/model-provider-config-service.d.ts

@@ -0,0 +1,32 @@
+import { type ModelProviderRef, type SupportedModelProviderId } from '@shipfox/api-agent-dto';
+import type { ModelProviderConfig } from './entities/model-provider-config.js';
+import { probeModelProviderCredentials } from './model-provider-validation.js';
+export interface TestAndSaveModelProviderConfigParams {
+    workspaceId: string;
+    providerId: SupportedModelProviderId;
+    defaultModel?: string | null | undefined;
+    credentials: Record<string, string>;
+    editedBy?: string | null | undefined;
+    setAsDefault?: boolean | undefined;
+    signal?: AbortSignal | undefined;
+}
+export interface TestAndSaveModelProviderConfigOptions {
+    probe?: typeof probeModelProviderCredentials;
+    pruneStaleSecrets?: ((params: {
+        workspaceId: string;
+        namespace: string;
+        expectedKeys: string[];
+    }) => Promise<void>) | undefined;
+}
+export interface UpdateModelProviderConfigDefaultModelParams {
+    workspaceId: string;
+    providerId: ModelProviderRef;
+    defaultModel: string | null;
+}
+export declare function testAndSaveModelProviderConfig(params: TestAndSaveModelProviderConfigParams, options?: TestAndSaveModelProviderConfigOptions): Promise<ModelProviderConfig>;
+export declare function updateModelProviderConfigDefaultModel(params: UpdateModelProviderConfigDefaultModelParams): Promise<ModelProviderConfig>;
+export declare function deleteModelProviderConfig(params: {
+    workspaceId: string;
+    providerId: ModelProviderRef;
+}): Promise<boolean>;
+//# sourceMappingURL=model-provider-config-service.d.ts.map

package/dist/core/model-provider-config-service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider-config-service.d.ts","sourceRoot":"","sources":["../../src/core/model-provider-config-service.ts"],"names":[],"mappings":"AAAA,OAAO,EAGL,KAAK,gBAAgB,EAErB,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAShC,OAAO,KAAK,EAAC,mBAAmB,EAAC,MAAM,qCAAqC,CAAC;AAQ7E,OAAO,EAAC,6BAA6B,EAAmB,MAAM,gCAAgC,CAAC;AAE/F,MAAM,WAAW,oCAAoC;IACnD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,wBAAwB,CAAC;IACrC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACzC,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,CAAC;IACrC,YAAY,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,qCAAqC;IACpD,KAAK,CAAC,EAAE,OAAO,6BAA6B,CAAC;IAC7C,iBAAiB,CAAC,EACd,CAAC,CAAC,MAAM,EAAE;QAAC,WAAW,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,EAAE,CAAA;KAAC,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC,GAC7F,SAAS,CAAC;CACf;AAED,MAAM,WAAW,2CAA2C;IAC1D,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,gBAAgB,CAAC;IAC7B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;CAC7B;AAED,wBAAsB,8BAA8B,CAClD,MAAM,EAAE,oCAAoC,EAC5C,OAAO,GAAE,qCAA0C,GAClD,OAAO,CAAC,mBAAmB,CAAC,CA2D9B;AAED,wBAAsB,qCAAqC,CACzD,MAAM,EAAE,2CAA2C,GAClD,OAAO,CAAC,mBAAmB,CAAC,CAwC9B;AAED,wBAAsB,yBAAyB,CAAC,MAAM,EAAE;IACtD,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,gBAAgB,CAAC;CAC9B,GAAG,OAAO,CAAC,OAAO,CAAC,CAOnB"}

package/dist/core/model-provider-config-service.js

@@ -0,0 +1,133 @@
+import { DEFAULT_AGENT_THINKING, getModelProviderEntry, modelProviderCredentialKeysMatch } from '@shipfox/api-agent-dto';
+import { deleteSecrets, getSecretsByNamespace, setSecrets } from '@shipfox/api-secrets';
+import { deleteModelProviderConfig as deleteModelProviderConfigRow, getModelProviderConfig, updateModelProviderDefaultModel, upsertModelProviderConfig } from '#db/index.js';
+import { agentSystemNamespace, credentialsToStoreValues } from './credential-fingerprints.js';
+import { InvalidAgentModelError, InvalidCredentialFieldsError, ModelProviderConfigNotFoundError, UnsupportedModelProviderError } from './errors.js';
+import { buildModelProviderCatalog } from './model-provider-catalog.js';
+import { probeModelProviderCredentials, runProviderProbe } from './model-provider-validation.js';
+export async function testAndSaveModelProviderConfig(params, options = {}) {
+    const probe = options.probe ?? probeModelProviderCredentials;
+    const entry = getModelProviderEntry(params.providerId);
+    if (entry === undefined || entry.support_status !== 'supported') {
+        throw new UnsupportedModelProviderError(params.providerId);
+    }
+    if (entry.default_model === null) throw new UnsupportedModelProviderError(params.providerId);
+    if (!modelProviderCredentialKeysMatch(params.providerId, params.credentials)) {
+        throw new InvalidCredentialFieldsError(params.providerId);
+    }
+    const existingConfig = await getModelProviderConfig({
+        workspaceId: params.workspaceId,
+        providerId: params.providerId
+    });
+    const modelSelection = resolveDefaultModel(params.providerId, params.defaultModel !== undefined ? params.defaultModel : existingConfig?.defaultModel);
+    await runProviderProbe({
+        probe,
+        args: {
+            providerId: params.providerId,
+            model: modelSelection.probeModel,
+            credentials: params.credentials,
+            ...params.signal ? {
+                signal: params.signal
+            } : {}
+        },
+        metricLabel: params.providerId,
+        providerId: params.providerId,
+        secrets: Object.values(params.credentials),
+        signal: params.signal
+    });
+    const pruneStaleSecrets = options.pruneStaleSecrets ?? pruneStaleProviderCredentialSecrets;
+    const namespace = agentSystemNamespace(params.providerId);
+    const values = credentialsToStoreValues(params.providerId, params.credentials);
+    await setSecrets({
+        workspaceId: params.workspaceId,
+        namespace,
+        values,
+        editedBy: params.editedBy
+    });
+    const config = await upsertModelProviderConfig({
+        workspaceId: params.workspaceId,
+        providerId: params.providerId,
+        defaultModel: modelSelection.storedModel,
+        defaultThinking: DEFAULT_AGENT_THINKING,
+        setAsDefault: params.setAsDefault
+    });
+    await pruneStaleSecrets({
+        workspaceId: params.workspaceId,
+        namespace,
+        expectedKeys: Object.keys(values)
+    }).catch(()=>undefined);
+    return config;
+}
+export async function updateModelProviderConfigDefaultModel(params) {
+    const existingConfig = await getModelProviderConfig({
+        workspaceId: params.workspaceId,
+        providerId: params.providerId
+    });
+    if (!existingConfig) {
+        throw new ModelProviderConfigNotFoundError(params.workspaceId, params.providerId);
+    }
+    if (existingConfig.kind === 'custom') {
+        if (params.defaultModel !== null && !existingConfig.models?.some((model)=>model.id === params.defaultModel)) {
+            throw new InvalidAgentModelError('pi', params.providerId, params.defaultModel);
+        }
+        const config = await updateModelProviderDefaultModel({
+            workspaceId: params.workspaceId,
+            providerId: params.providerId,
+            defaultModel: params.defaultModel
+        });
+        if (!config) throw new ModelProviderConfigNotFoundError(params.workspaceId, params.providerId);
+        return config;
+    }
+    const providerId = params.providerId;
+    const entry = getModelProviderEntry(providerId);
+    if (entry === undefined || entry.support_status !== 'supported') {
+        throw new UnsupportedModelProviderError(params.providerId);
+    }
+    if (entry.default_model === null) throw new UnsupportedModelProviderError(params.providerId);
+    const modelSelection = resolveDefaultModel(providerId, params.defaultModel);
+    const config = await updateModelProviderDefaultModel({
+        workspaceId: params.workspaceId,
+        providerId: params.providerId,
+        defaultModel: modelSelection.storedModel
+    });
+    if (!config) throw new ModelProviderConfigNotFoundError(params.workspaceId, params.providerId);
+    return config;
+}
+export async function deleteModelProviderConfig(params) {
+    const deleted = await deleteModelProviderConfigRow(params);
+    await deleteSecrets({
+        workspaceId: params.workspaceId,
+        namespace: agentSystemNamespace(params.providerId)
+    });
+    return deleted;
+}
+function resolveDefaultModel(providerId, requestedModel) {
+    const catalogEntry = buildModelProviderCatalog().find((entry)=>entry.id === providerId);
+    if (catalogEntry === undefined || catalogEntry.support_status !== 'supported' || catalogEntry.default_model === null) {
+        throw new UnsupportedModelProviderError(providerId);
+    }
+    const model = requestedModel ?? catalogEntry.default_model;
+    if (!catalogEntry.models.some((candidate)=>candidate.id === model)) {
+        throw new InvalidAgentModelError('pi', providerId, model);
+    }
+    return {
+        probeModel: model,
+        storedModel: requestedModel ?? null
+    };
+}
+async function pruneStaleProviderCredentialSecrets(params) {
+    const stored = await getSecretsByNamespace({
+        workspaceId: params.workspaceId,
+        namespace: params.namespace
+    });
+    const expected = new Set(params.expectedKeys);
+    const staleKeys = Object.keys(stored).filter((key)=>!expected.has(key));
+    if (staleKeys.length === 0) return;
+    await deleteSecrets({
+        workspaceId: params.workspaceId,
+        namespace: params.namespace,
+        keys: staleKeys
+    });
+}
+
+//# sourceMappingURL=model-provider-config-service.js.map

package/dist/core/model-provider-config-service.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/model-provider-config-service.ts"],"sourcesContent":["import {\n  DEFAULT_AGENT_THINKING,\n  getModelProviderEntry,\n  type ModelProviderRef,\n  modelProviderCredentialKeysMatch,\n  type SupportedModelProviderId,\n} from '@shipfox/api-agent-dto';\nimport {deleteSecrets, getSecretsByNamespace, setSecrets} from '@shipfox/api-secrets';\nimport {\n  deleteModelProviderConfig as deleteModelProviderConfigRow,\n  getModelProviderConfig,\n  updateModelProviderDefaultModel,\n  upsertModelProviderConfig,\n} from '#db/index.js';\nimport {agentSystemNamespace, credentialsToStoreValues} from './credential-fingerprints.js';\nimport type {ModelProviderConfig} from './entities/model-provider-config.js';\nimport {\n  InvalidAgentModelError,\n  InvalidCredentialFieldsError,\n  ModelProviderConfigNotFoundError,\n  UnsupportedModelProviderError,\n} from './errors.js';\nimport {buildModelProviderCatalog} from './model-provider-catalog.js';\nimport {probeModelProviderCredentials, runProviderProbe} from './model-provider-validation.js';\n\nexport interface TestAndSaveModelProviderConfigParams {\n  workspaceId: string;\n  providerId: SupportedModelProviderId;\n  defaultModel?: string | null | undefined;\n  credentials: Record<string, string>;\n  editedBy?: string | null | undefined;\n  setAsDefault?: boolean | undefined;\n  signal?: AbortSignal | undefined;\n}\n\nexport interface TestAndSaveModelProviderConfigOptions {\n  probe?: typeof probeModelProviderCredentials;\n  pruneStaleSecrets?:\n    | ((params: {workspaceId: string; namespace: string; expectedKeys: string[]}) => Promise<void>)\n    | undefined;\n}\n\nexport interface UpdateModelProviderConfigDefaultModelParams {\n  workspaceId: string;\n  providerId: ModelProviderRef;\n  defaultModel: string | null;\n}\n\nexport async function testAndSaveModelProviderConfig(\n  params: TestAndSaveModelProviderConfigParams,\n  options: TestAndSaveModelProviderConfigOptions = {},\n): Promise<ModelProviderConfig> {\n  const probe = options.probe ?? probeModelProviderCredentials;\n  const entry = getModelProviderEntry(params.providerId);\n  if (entry === undefined || entry.support_status !== 'supported') {\n    throw new UnsupportedModelProviderError(params.providerId);\n  }\n  if (entry.default_model === null) throw new UnsupportedModelProviderError(params.providerId);\n\n  if (!modelProviderCredentialKeysMatch(params.providerId, params.credentials)) {\n    throw new InvalidCredentialFieldsError(params.providerId);\n  }\n\n  const existingConfig = await getModelProviderConfig({\n    workspaceId: params.workspaceId,\n    providerId: params.providerId,\n  });\n  const modelSelection = resolveDefaultModel(\n    params.providerId,\n    params.defaultModel !== undefined ? params.defaultModel : existingConfig?.defaultModel,\n  );\n\n  await runProviderProbe({\n    probe,\n    args: {\n      providerId: params.providerId,\n      model: modelSelection.probeModel,\n      credentials: params.credentials,\n      ...(params.signal ? {signal: params.signal} : {}),\n    },\n    metricLabel: params.providerId,\n    providerId: params.providerId,\n    secrets: Object.values(params.credentials),\n    signal: params.signal,\n  });\n  const pruneStaleSecrets = options.pruneStaleSecrets ?? pruneStaleProviderCredentialSecrets;\n  const namespace = agentSystemNamespace(params.providerId);\n  const values = credentialsToStoreValues(params.providerId, params.credentials);\n  await setSecrets({\n    workspaceId: params.workspaceId,\n    namespace,\n    values,\n    editedBy: params.editedBy,\n  });\n\n  const config = await upsertModelProviderConfig({\n    workspaceId: params.workspaceId,\n    providerId: params.providerId,\n    defaultModel: modelSelection.storedModel,\n    defaultThinking: DEFAULT_AGENT_THINKING,\n    setAsDefault: params.setAsDefault,\n  });\n\n  await pruneStaleSecrets({\n    workspaceId: params.workspaceId,\n    namespace,\n    expectedKeys: Object.keys(values),\n  }).catch(() => undefined);\n\n  return config;\n}\n\nexport async function updateModelProviderConfigDefaultModel(\n  params: UpdateModelProviderConfigDefaultModelParams,\n): Promise<ModelProviderConfig> {\n  const existingConfig = await getModelProviderConfig({\n    workspaceId: params.workspaceId,\n    providerId: params.providerId,\n  });\n  if (!existingConfig) {\n    throw new ModelProviderConfigNotFoundError(params.workspaceId, params.providerId);\n  }\n  if (existingConfig.kind === 'custom') {\n    if (\n      params.defaultModel !== null &&\n      !existingConfig.models?.some((model) => model.id === params.defaultModel)\n    ) {\n      throw new InvalidAgentModelError('pi', params.providerId, params.defaultModel);\n    }\n\n    const config = await updateModelProviderDefaultModel({\n      workspaceId: params.workspaceId,\n      providerId: params.providerId,\n      defaultModel: params.defaultModel,\n    });\n    if (!config) throw new ModelProviderConfigNotFoundError(params.workspaceId, params.providerId);\n    return config;\n  }\n\n  const providerId = params.providerId as SupportedModelProviderId;\n  const entry = getModelProviderEntry(providerId);\n  if (entry === undefined || entry.support_status !== 'supported') {\n    throw new UnsupportedModelProviderError(params.providerId);\n  }\n  if (entry.default_model === null) throw new UnsupportedModelProviderError(params.providerId);\n\n  const modelSelection = resolveDefaultModel(providerId, params.defaultModel);\n  const config = await updateModelProviderDefaultModel({\n    workspaceId: params.workspaceId,\n    providerId: params.providerId,\n    defaultModel: modelSelection.storedModel,\n  });\n  if (!config) throw new ModelProviderConfigNotFoundError(params.workspaceId, params.providerId);\n  return config;\n}\n\nexport async function deleteModelProviderConfig(params: {\n  workspaceId: string;\n  providerId: ModelProviderRef;\n}): Promise<boolean> {\n  const deleted = await deleteModelProviderConfigRow(params);\n  await deleteSecrets({\n    workspaceId: params.workspaceId,\n    namespace: agentSystemNamespace(params.providerId),\n  });\n  return deleted;\n}\n\nfunction resolveDefaultModel(\n  providerId: SupportedModelProviderId,\n  requestedModel: string | null | undefined,\n): {probeModel: string; storedModel: string | null} {\n  const catalogEntry = buildModelProviderCatalog().find((entry) => entry.id === providerId);\n  if (\n    catalogEntry === undefined ||\n    catalogEntry.support_status !== 'supported' ||\n    catalogEntry.default_model === null\n  ) {\n    throw new UnsupportedModelProviderError(providerId);\n  }\n\n  const model = requestedModel ?? catalogEntry.default_model;\n  if (!catalogEntry.models.some((candidate) => candidate.id === model)) {\n    throw new InvalidAgentModelError('pi', providerId, model);\n  }\n  return {probeModel: model, storedModel: requestedModel ?? null};\n}\n\nasync function pruneStaleProviderCredentialSecrets(params: {\n  workspaceId: string;\n  namespace: string;\n  expectedKeys: string[];\n}): Promise<void> {\n  const stored = await getSecretsByNamespace({\n    workspaceId: params.workspaceId,\n    namespace: params.namespace,\n  });\n  const expected = new Set(params.expectedKeys);\n  const staleKeys = Object.keys(stored).filter((key) => !expected.has(key));\n  if (staleKeys.length === 0) return;\n\n  await deleteSecrets({\n    workspaceId: params.workspaceId,\n    namespace: params.namespace,\n    keys: staleKeys,\n  });\n}\n"],"names":["DEFAULT_AGENT_THINKING","getModelProviderEntry","modelProviderCredentialKeysMatch","deleteSecrets","getSecretsByNamespace","setSecrets","deleteModelProviderConfig","deleteModelProviderConfigRow","getModelProviderConfig","updateModelProviderDefaultModel","upsertModelProviderConfig","agentSystemNamespace","credentialsToStoreValues","InvalidAgentModelError","InvalidCredentialFieldsError","ModelProviderConfigNotFoundError","UnsupportedModelProviderError","buildModelProviderCatalog","probeModelProviderCredentials","runProviderProbe","testAndSaveModelProviderConfig","params","options","probe","entry","providerId","undefined","support_status","default_model","credentials","existingConfig","workspaceId","modelSelection","resolveDefaultModel","defaultModel","args","model","probeModel","signal","metricLabel","secrets","Object","values","pruneStaleSecrets","pruneStaleProviderCredentialSecrets","namespace","editedBy","config","storedModel","defaultThinking","setAsDefault","expectedKeys","keys","catch","updateModelProviderConfigDefaultModel","kind","models","some","id","deleted","requestedModel","catalogEntry","find","candidate","stored","expected","Set","staleKeys","filter","key","has","length"],"mappings":"AAAA,SACEA,sBAAsB,EACtBC,qBAAqB,EAErBC,gCAAgC,QAE3B,yBAAyB;AAChC,SAAQC,aAAa,EAAEC,qBAAqB,EAAEC,UAAU,QAAO,uBAAuB;AACtF,SACEC,6BAA6BC,4BAA4B,EACzDC,sBAAsB,EACtBC,+BAA+B,EAC/BC,yBAAyB,QACpB,eAAe;AACtB,SAAQC,oBAAoB,EAAEC,wBAAwB,QAAO,+BAA+B;AAE5F,SACEC,sBAAsB,EACtBC,4BAA4B,EAC5BC,gCAAgC,EAChCC,6BAA6B,QACxB,cAAc;AACrB,SAAQC,yBAAyB,QAAO,8BAA8B;AACtE,SAAQC,6BAA6B,EAAEC,gBAAgB,QAAO,iCAAiC;AAyB/F,OAAO,eAAeC,+BACpBC,MAA4C,EAC5CC,UAAiD,CAAC,CAAC;IAEnD,MAAMC,QAAQD,QAAQC,KAAK,IAAIL;IAC/B,MAAMM,QAAQvB,sBAAsBoB,OAAOI,UAAU;IACrD,IAAID,UAAUE,aAAaF,MAAMG,cAAc,KAAK,aAAa;QAC/D,MAAM,IAAIX,8BAA8BK,OAAOI,UAAU;IAC3D;IACA,IAAID,MAAMI,aAAa,KAAK,MAAM,MAAM,IAAIZ,8BAA8BK,OAAOI,UAAU;IAE3F,IAAI,CAACvB,iCAAiCmB,OAAOI,UAAU,EAAEJ,OAAOQ,WAAW,GAAG;QAC5E,MAAM,IAAIf,6BAA6BO,OAAOI,UAAU;IAC1D;IAEA,MAAMK,iBAAiB,MAAMtB,uBAAuB;QAClDuB,aAAaV,OAAOU,WAAW;QAC/BN,YAAYJ,OAAOI,UAAU;IAC/B;IACA,MAAMO,iBAAiBC,oBACrBZ,OAAOI,UAAU,EACjBJ,OAAOa,YAAY,KAAKR,YAAYL,OAAOa,YAAY,GAAGJ,gBAAgBI;IAG5E,MAAMf,iBAAiB;QACrBI;QACAY,MAAM;YACJV,YAAYJ,OAAOI,UAAU;YAC7BW,OAAOJ,eAAeK,UAAU;YAChCR,aAAaR,OAAOQ,WAAW;YAC/B,GAAIR,OAAOiB,MAAM,GAAG;gBAACA,QAAQjB,OAAOiB,MAAM;YAAA,IAAI,CAAC,CAAC;QAClD;QACAC,aAAalB,OAAOI,UAAU;QAC9BA,YAAYJ,OAAOI,UAAU;QAC7Be,SAASC,OAAOC,MAAM,CAACrB,OAAOQ,WAAW;QACzCS,QAAQjB,OAAOiB,MAAM;IACvB;IACA,MAAMK,oBAAoBrB,QAAQqB,iBAAiB,IAAIC;IACvD,MAAMC,YAAYlC,qBAAqBU,OAAOI,UAAU;IACxD,MAAMiB,SAAS9B,yBAAyBS,OAAOI,UAAU,EAAEJ,OAAOQ,WAAW;IAC7E,MAAMxB,WAAW;QACf0B,aAAaV,OAAOU,WAAW;QAC/Bc;QACAH;QACAI,UAAUzB,OAAOyB,QAAQ;IAC3B;IAEA,MAAMC,SAAS,MAAMrC,0BAA0B;QAC7CqB,aAAaV,OAAOU,WAAW;QAC/BN,YAAYJ,OAAOI,UAAU;QAC7BS,cAAcF,eAAegB,WAAW;QACxCC,iBAAiBjD;QACjBkD,cAAc7B,OAAO6B,YAAY;IACnC;IAEA,MAAMP,kBAAkB;QACtBZ,aAAaV,OAAOU,WAAW;QAC/Bc;QACAM,cAAcV,OAAOW,IAAI,CAACV;IAC5B,GAAGW,KAAK,CAAC,IAAM3B;IAEf,OAAOqB;AACT;AAEA,OAAO,eAAeO,sCACpBjC,MAAmD;IAEnD,MAAMS,iBAAiB,MAAMtB,uBAAuB;QAClDuB,aAAaV,OAAOU,WAAW;QAC/BN,YAAYJ,OAAOI,UAAU;IAC/B;IACA,IAAI,CAACK,gBAAgB;QACnB,MAAM,IAAIf,iCAAiCM,OAAOU,WAAW,EAAEV,OAAOI,UAAU;IAClF;IACA,IAAIK,eAAeyB,IAAI,KAAK,UAAU;QACpC,IACElC,OAAOa,YAAY,KAAK,QACxB,CAACJ,eAAe0B,MAAM,EAAEC,KAAK,CAACrB,QAAUA,MAAMsB,EAAE,KAAKrC,OAAOa,YAAY,GACxE;YACA,MAAM,IAAIrB,uBAAuB,MAAMQ,OAAOI,UAAU,EAAEJ,OAAOa,YAAY;QAC/E;QAEA,MAAMa,SAAS,MAAMtC,gCAAgC;YACnDsB,aAAaV,OAAOU,WAAW;YAC/BN,YAAYJ,OAAOI,UAAU;YAC7BS,cAAcb,OAAOa,YAAY;QACnC;QACA,IAAI,CAACa,QAAQ,MAAM,IAAIhC,iCAAiCM,OAAOU,WAAW,EAAEV,OAAOI,UAAU;QAC7F,OAAOsB;IACT;IAEA,MAAMtB,aAAaJ,OAAOI,UAAU;IACpC,MAAMD,QAAQvB,sBAAsBwB;IACpC,IAAID,UAAUE,aAAaF,MAAMG,cAAc,KAAK,aAAa;QAC/D,MAAM,IAAIX,8BAA8BK,OAAOI,UAAU;IAC3D;IACA,IAAID,MAAMI,aAAa,KAAK,MAAM,MAAM,IAAIZ,8BAA8BK,OAAOI,UAAU;IAE3F,MAAMO,iBAAiBC,oBAAoBR,YAAYJ,OAAOa,YAAY;IAC1E,MAAMa,SAAS,MAAMtC,gCAAgC;QACnDsB,aAAaV,OAAOU,WAAW;QAC/BN,YAAYJ,OAAOI,UAAU;QAC7BS,cAAcF,eAAegB,WAAW;IAC1C;IACA,IAAI,CAACD,QAAQ,MAAM,IAAIhC,iCAAiCM,OAAOU,WAAW,EAAEV,OAAOI,UAAU;IAC7F,OAAOsB;AACT;AAEA,OAAO,eAAezC,0BAA0Be,MAG/C;IACC,MAAMsC,UAAU,MAAMpD,6BAA6Bc;IACnD,MAAMlB,cAAc;QAClB4B,aAAaV,OAAOU,WAAW;QAC/Bc,WAAWlC,qBAAqBU,OAAOI,UAAU;IACnD;IACA,OAAOkC;AACT;AAEA,SAAS1B,oBACPR,UAAoC,EACpCmC,cAAyC;IAEzC,MAAMC,eAAe5C,4BAA4B6C,IAAI,CAAC,CAACtC,QAAUA,MAAMkC,EAAE,KAAKjC;IAC9E,IACEoC,iBAAiBnC,aACjBmC,aAAalC,cAAc,KAAK,eAChCkC,aAAajC,aAAa,KAAK,MAC/B;QACA,MAAM,IAAIZ,8BAA8BS;IAC1C;IAEA,MAAMW,QAAQwB,kBAAkBC,aAAajC,aAAa;IAC1D,IAAI,CAACiC,aAAaL,MAAM,CAACC,IAAI,CAAC,CAACM,YAAcA,UAAUL,EAAE,KAAKtB,QAAQ;QACpE,MAAM,IAAIvB,uBAAuB,MAAMY,YAAYW;IACrD;IACA,OAAO;QAACC,YAAYD;QAAOY,aAAaY,kBAAkB;IAAI;AAChE;AAEA,eAAehB,oCAAoCvB,MAIlD;IACC,MAAM2C,SAAS,MAAM5D,sBAAsB;QACzC2B,aAAaV,OAAOU,WAAW;QAC/Bc,WAAWxB,OAAOwB,SAAS;IAC7B;IACA,MAAMoB,WAAW,IAAIC,IAAI7C,OAAO8B,YAAY;IAC5C,MAAMgB,YAAY1B,OAAOW,IAAI,CAACY,QAAQI,MAAM,CAAC,CAACC,MAAQ,CAACJ,SAASK,GAAG,CAACD;IACpE,IAAIF,UAAUI,MAAM,KAAK,GAAG;IAE5B,MAAMpE,cAAc;QAClB4B,aAAaV,OAAOU,WAAW;QAC/Bc,WAAWxB,OAAOwB,SAAS;QAC3BO,MAAMe;IACR;AACF"}

package/dist/core/model-provider-validation.d.ts

@@ -0,0 +1,31 @@
+import { type CustomAgentModelDto, type ModelProviderApi, type ModelProviderRef, type SupportedModelProviderId } from '@shipfox/api-agent-dto';
+import { type EgressPolicy } from '@shipfox/node-egress-guard';
+export interface ProbeModelProviderCredentialsParams {
+    providerId: SupportedModelProviderId;
+    model: string;
+    credentials: Record<string, string>;
+    signal?: AbortSignal | undefined;
+}
+export interface ProbeCustomModelProviderCredentialsParams {
+    providerId: ModelProviderRef;
+    api: ModelProviderApi;
+    baseUrl: string;
+    model: CustomAgentModelDto;
+    apiKey?: string | undefined;
+    headers?: Record<string, string> | undefined;
+    signal?: AbortSignal | undefined;
+}
+export interface RunProviderProbeParams<TArgs> {
+    probe: (args: TArgs) => Promise<void>;
+    args: TArgs;
+    metricLabel: SupportedModelProviderId | 'custom';
+    providerId: ModelProviderRef;
+    secrets: string[];
+    signal?: AbortSignal | undefined;
+}
+export declare function runProviderProbe<TArgs>(params: RunProviderProbeParams<TArgs>): Promise<void>;
+export declare function probeModelProviderCredentials(params: ProbeModelProviderCredentialsParams): Promise<void>;
+export declare function probeCustomModelProviderCredentials(params: ProbeCustomModelProviderCredentialsParams): Promise<void>;
+export declare function sanitizeModelProviderError(error: unknown, secrets: string[]): string;
+export declare function egressPolicy(): EgressPolicy;
+//# sourceMappingURL=model-provider-validation.d.ts.map

package/dist/core/model-provider-validation.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-provider-validation.d.ts","sourceRoot":"","sources":["../../src/core/model-provider-validation.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,KAAK,mBAAmB,EAExB,KAAK,gBAAgB,EACrB,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAChC,OAAO,EAAC,KAAK,YAAY,EAA0B,MAAM,4BAA4B,CAAC;AAiBtF,MAAM,WAAW,mCAAmC;IAClD,UAAU,EAAE,wBAAwB,CAAC;IACrC,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACpC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,yCAAyC;IACxD,UAAU,EAAE,gBAAgB,CAAC;IAC7B,GAAG,EAAE,gBAAgB,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,mBAAmB,CAAC;IAC3B,MAAM,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC5B,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAAG,SAAS,CAAC;IAC7C,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,MAAM,WAAW,sBAAsB,CAAC,KAAK;IAC3C,KAAK,EAAE,CAAC,IAAI,EAAE,KAAK,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACtC,IAAI,EAAE,KAAK,CAAC;IACZ,WAAW,EAAE,wBAAwB,GAAG,QAAQ,CAAC;IACjD,UAAU,EAAE,gBAAgB,CAAC;IAC7B,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAC;CAClC;AAED,wBAAsB,gBAAgB,CAAC,KAAK,EAC1C,MAAM,EAAE,sBAAsB,CAAC,KAAK,CAAC,GACpC,OAAO,CAAC,IAAI,CAAC,CAmBf;AAED,wBAAsB,6BAA6B,CACjD,MAAM,EAAE,mCAAmC,GAC1C,OAAO,CAAC,IAAI,CAAC,CAiCf;AAED,wBAAsB,mCAAmC,CACvD,MAAM,EAAE,yCAAyC,GAChD,OAAO,CAAC,IAAI,CAAC,CAgBf;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,MAAM,CAQpF;AAED,wBAAgB,YAAY,IAAI,YAAY,CAK3C"}

package/dist/core/model-provider-validation.js

@@ -0,0 +1,220 @@
+import { complete, getModels } from '@earendil-works/pi-ai';
+import { getModelProviderEntry } from '@shipfox/api-agent-dto';
+import { parseEgressHostDenylist } from '@shipfox/node-egress-guard';
+import { redactSecrets, secretWireForms } from '@shipfox/redact';
+import { config } from '#config.js';
+import { modelProviderValidationCount } from '#metrics/index.js';
+import { appendCustomProviderPath } from './custom-provider-url.js';
+import { InvalidAgentModelError, InvalidCredentialFieldsError, ModelProviderValidationError, ModelProviderValidationUnavailableError, UnsupportedModelProviderError } from './errors.js';
+const PROBE_MAX_TOKENS = 64;
+const MAX_SANITIZED_ERROR_LENGTH = 500;
+const CUSTOM_PROBE_PROMPT = 'Reply with OK.';
+export async function runProviderProbe(params) {
+    try {
+        await params.probe(params.args);
+    } catch (error) {
+        if (params.signal?.aborted) throw error;
+        modelProviderValidationCount.add(1, {
+            model_provider: params.metricLabel,
+            outcome: 'failed'
+        });
+        if (error instanceof InvalidAgentModelError) throw error;
+        const sanitizedMessage = sanitizeModelProviderError(error, params.secrets);
+        throw new ModelProviderValidationError(params.providerId, sanitizedMessage);
+    }
+    modelProviderValidationCount.add(1, {
+        model_provider: params.metricLabel,
+        outcome: 'succeeded'
+    });
+}
+export async function probeModelProviderCredentials(params) {
+    const entry = getModelProviderEntry(params.providerId);
+    if (entry === undefined || entry.support_status !== 'supported') {
+        throw new UnsupportedModelProviderError(params.providerId);
+    }
+    const model = getModels(params.providerId).find((candidate)=>candidate.id === params.model);
+    if (!model) throw new InvalidAgentModelError('pi', params.providerId, params.model);
+    const secretField = entry.credential_fields.find((field)=>field.secret);
+    if (!secretField) throw new ModelProviderValidationUnavailableError(params.providerId);
+    const apiKey = credentialValue(params, secretField.key);
+    const context = {
+        messages: [
+            {
+                role: 'user',
+                content: 'Reply with OK.',
+                timestamp: Date.now()
+            }
+        ]
+    };
+    const options = {
+        apiKey,
+        maxTokens: PROBE_MAX_TOKENS,
+        maxRetries: 0,
+        timeoutMs: config.AGENT_PROVIDER_VALIDATION_TIMEOUT_MS,
+        ...modelProviderCredentialOptions(params),
+        ...params.signal ? {
+            signal: params.signal
+        } : {}
+    };
+    const result = await complete(model, context, options);
+    rejectModelProviderErrorResult(result);
+}
+export async function probeCustomModelProviderCredentials(params) {
+    const response = await fetch(customProbeUrl(params), {
+        method: 'POST',
+        headers: customProbeHeaders(params),
+        body: JSON.stringify(customProbeBody(params)),
+        redirect: 'error',
+        signal: timeoutSignal(params.signal, config.AGENT_PROVIDER_VALIDATION_TIMEOUT_MS)
+    });
+    try {
+        if (!response.ok) {
+            throw new Error(`Provider returned HTTP ${response.status}.`);
+        }
+    } finally{
+        await response.body?.cancel();
+    }
+}
+export function sanitizeModelProviderError(error, secrets) {
+    const message = error instanceof Error && error.message.length > 0 ? error.message : 'Provider validation failed.';
+    const secretForms = secrets.flatMap((secret)=>secretWireForms(secret));
+    const redacted = redactSecrets(message, secretForms);
+    return redacted.slice(0, MAX_SANITIZED_ERROR_LENGTH);
+}
+export function egressPolicy() {
+    return {
+        allowPrivateNetworks: config.AGENT_CUSTOM_PROVIDER_ALLOW_PRIVATE_NETWORKS,
+        hostDenylist: parseEgressHostDenylist(config.AGENT_CUSTOM_PROVIDER_HOST_DENYLIST)
+    };
+}
+function customProbeUrl(params) {
+    switch(params.api){
+        case 'anthropic-messages':
+            return appendCustomProviderPath(params.baseUrl, 'messages').toString();
+        case 'google-generative-ai':
+            return appendCustomProviderPath(params.baseUrl, `models/${encodeURIComponent(params.model.id)}:generateContent`).toString();
+        case 'openai-completions':
+            return appendCustomProviderPath(params.baseUrl, 'chat/completions').toString();
+        case 'openai-responses':
+            return appendCustomProviderPath(params.baseUrl, 'responses').toString();
+        default:
+            return assertNever(params.api);
+    }
+}
+function customProbeHeaders(params) {
+    const headers = new Headers(params.headers);
+    headers.set('content-type', 'application/json');
+    if (!params.apiKey) return headers;
+    switch(params.api){
+        case 'anthropic-messages':
+            headers.set('x-api-key', params.apiKey);
+            headers.set('anthropic-version', '2023-06-01');
+            break;
+        case 'google-generative-ai':
+            headers.set('x-goog-api-key', params.apiKey);
+            break;
+        case 'openai-completions':
+        case 'openai-responses':
+            headers.set('authorization', `Bearer ${params.apiKey}`);
+            break;
+        default:
+            assertNever(params.api);
+    }
+    return headers;
+}
+function customProbeBody(params) {
+    switch(params.api){
+        case 'anthropic-messages':
+            return {
+                model: params.model.id,
+                max_tokens: PROBE_MAX_TOKENS,
+                messages: [
+                    {
+                        role: 'user',
+                        content: CUSTOM_PROBE_PROMPT
+                    }
+                ]
+            };
+        case 'google-generative-ai':
+            return {
+                contents: [
+                    {
+                        role: 'user',
+                        parts: [
+                            {
+                                text: CUSTOM_PROBE_PROMPT
+                            }
+                        ]
+                    }
+                ],
+                generationConfig: {
+                    maxOutputTokens: PROBE_MAX_TOKENS
+                }
+            };
+        case 'openai-completions':
+            return {
+                model: params.model.id,
+                messages: [
+                    {
+                        role: 'user',
+                        content: CUSTOM_PROBE_PROMPT
+                    }
+                ],
+                max_tokens: PROBE_MAX_TOKENS,
+                stream: false
+            };
+        case 'openai-responses':
+            return {
+                model: params.model.id,
+                input: CUSTOM_PROBE_PROMPT,
+                max_output_tokens: PROBE_MAX_TOKENS,
+                stream: false,
+                store: false
+            };
+        default:
+            return assertNever(params.api);
+    }
+}
+function assertNever(value) {
+    throw new Error(`Unsupported custom model provider API: ${value}`);
+}
+function timeoutSignal(signal, timeoutMs) {
+    return signal === undefined ? AbortSignal.timeout(timeoutMs) : AbortSignal.any([
+        signal,
+        AbortSignal.timeout(timeoutMs)
+    ]);
+}
+function modelProviderCredentialOptions(params) {
+    switch(params.providerId){
+        case 'azure-openai-responses':
+            return {
+                azureBaseUrl: credentialValue(params, 'endpoint')
+            };
+        case 'cloudflare-ai-gateway':
+            return {
+                env: {
+                    CLOUDFLARE_ACCOUNT_ID: credentialValue(params, 'account_id'),
+                    CLOUDFLARE_GATEWAY_ID: credentialValue(params, 'gateway_id')
+                }
+            };
+        case 'cloudflare-workers-ai':
+            return {
+                env: {
+                    CLOUDFLARE_ACCOUNT_ID: credentialValue(params, 'account_id')
+                }
+            };
+        default:
+            return {};
+    }
+}
+function credentialValue(params, key) {
+    const value = params.credentials[key];
+    if (value === undefined) throw new InvalidCredentialFieldsError(params.providerId);
+    return value;
+}
+function rejectModelProviderErrorResult(result) {
+    if (result.stopReason !== 'error' && result.stopReason !== 'aborted') return;
+    throw new Error(result.errorMessage ?? 'Provider validation failed.');
+}
+
+//# sourceMappingURL=model-provider-validation.js.map

package/dist/core/model-provider-validation.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/model-provider-validation.ts"],"sourcesContent":["import {\n  type AssistantMessage,\n  type Context,\n  complete,\n  getModels,\n  type ProviderStreamOptions,\n} from '@earendil-works/pi-ai';\nimport {\n  type CustomAgentModelDto,\n  getModelProviderEntry,\n  type ModelProviderApi,\n  type ModelProviderRef,\n  type SupportedModelProviderId,\n} from '@shipfox/api-agent-dto';\nimport {type EgressPolicy, parseEgressHostDenylist} from '@shipfox/node-egress-guard';\nimport {redactSecrets, secretWireForms} from '@shipfox/redact';\nimport {config} from '#config.js';\nimport {modelProviderValidationCount} from '#metrics/index.js';\nimport {appendCustomProviderPath} from './custom-provider-url.js';\nimport {\n  InvalidAgentModelError,\n  InvalidCredentialFieldsError,\n  ModelProviderValidationError,\n  ModelProviderValidationUnavailableError,\n  UnsupportedModelProviderError,\n} from './errors.js';\n\nconst PROBE_MAX_TOKENS = 64;\nconst MAX_SANITIZED_ERROR_LENGTH = 500;\nconst CUSTOM_PROBE_PROMPT = 'Reply with OK.';\n\nexport interface ProbeModelProviderCredentialsParams {\n  providerId: SupportedModelProviderId;\n  model: string;\n  credentials: Record<string, string>;\n  signal?: AbortSignal | undefined;\n}\n\nexport interface ProbeCustomModelProviderCredentialsParams {\n  providerId: ModelProviderRef;\n  api: ModelProviderApi;\n  baseUrl: string;\n  model: CustomAgentModelDto;\n  apiKey?: string | undefined;\n  headers?: Record<string, string> | undefined;\n  signal?: AbortSignal | undefined;\n}\n\nexport interface RunProviderProbeParams<TArgs> {\n  probe: (args: TArgs) => Promise<void>;\n  args: TArgs;\n  metricLabel: SupportedModelProviderId | 'custom';\n  providerId: ModelProviderRef;\n  secrets: string[];\n  signal?: AbortSignal | undefined;\n}\n\nexport async function runProviderProbe<TArgs>(\n  params: RunProviderProbeParams<TArgs>,\n): Promise<void> {\n  try {\n    await params.probe(params.args);\n  } catch (error) {\n    if (params.signal?.aborted) throw error;\n    modelProviderValidationCount.add(1, {\n      model_provider: params.metricLabel,\n      outcome: 'failed',\n    });\n    if (error instanceof InvalidAgentModelError) throw error;\n\n    const sanitizedMessage = sanitizeModelProviderError(error, params.secrets);\n    throw new ModelProviderValidationError(params.providerId, sanitizedMessage);\n  }\n\n  modelProviderValidationCount.add(1, {\n    model_provider: params.metricLabel,\n    outcome: 'succeeded',\n  });\n}\n\nexport async function probeModelProviderCredentials(\n  params: ProbeModelProviderCredentialsParams,\n): Promise<void> {\n  const entry = getModelProviderEntry(params.providerId);\n  if (entry === undefined || entry.support_status !== 'supported') {\n    throw new UnsupportedModelProviderError(params.providerId);\n  }\n\n  const model = getModels(params.providerId).find((candidate) => candidate.id === params.model);\n  if (!model) throw new InvalidAgentModelError('pi', params.providerId, params.model);\n\n  const secretField = entry.credential_fields.find((field) => field.secret);\n  if (!secretField) throw new ModelProviderValidationUnavailableError(params.providerId);\n  const apiKey = credentialValue(params, secretField.key);\n\n  const context: Context = {\n    messages: [\n      {\n        role: 'user',\n        content: 'Reply with OK.',\n        timestamp: Date.now(),\n      },\n    ],\n  };\n  const options: ProviderStreamOptions = {\n    apiKey,\n    maxTokens: PROBE_MAX_TOKENS,\n    maxRetries: 0,\n    timeoutMs: config.AGENT_PROVIDER_VALIDATION_TIMEOUT_MS,\n    ...modelProviderCredentialOptions(params),\n    ...(params.signal ? {signal: params.signal} : {}),\n  };\n\n  const result = await complete(model, context, options);\n  rejectModelProviderErrorResult(result);\n}\n\nexport async function probeCustomModelProviderCredentials(\n  params: ProbeCustomModelProviderCredentialsParams,\n): Promise<void> {\n  const response = await fetch(customProbeUrl(params), {\n    method: 'POST',\n    headers: customProbeHeaders(params),\n    body: JSON.stringify(customProbeBody(params)),\n    redirect: 'error',\n    signal: timeoutSignal(params.signal, config.AGENT_PROVIDER_VALIDATION_TIMEOUT_MS),\n  });\n\n  try {\n    if (!response.ok) {\n      throw new Error(`Provider returned HTTP ${response.status}.`);\n    }\n  } finally {\n    await response.body?.cancel();\n  }\n}\n\nexport function sanitizeModelProviderError(error: unknown, secrets: string[]): string {\n  const message =\n    error instanceof Error && error.message.length > 0\n      ? error.message\n      : 'Provider validation failed.';\n  const secretForms = secrets.flatMap((secret) => secretWireForms(secret));\n  const redacted = redactSecrets(message, secretForms);\n  return redacted.slice(0, MAX_SANITIZED_ERROR_LENGTH);\n}\n\nexport function egressPolicy(): EgressPolicy {\n  return {\n    allowPrivateNetworks: config.AGENT_CUSTOM_PROVIDER_ALLOW_PRIVATE_NETWORKS,\n    hostDenylist: parseEgressHostDenylist(config.AGENT_CUSTOM_PROVIDER_HOST_DENYLIST),\n  };\n}\n\nfunction customProbeUrl(params: ProbeCustomModelProviderCredentialsParams): string {\n  switch (params.api) {\n    case 'anthropic-messages':\n      return appendCustomProviderPath(params.baseUrl, 'messages').toString();\n    case 'google-generative-ai':\n      return appendCustomProviderPath(\n        params.baseUrl,\n        `models/${encodeURIComponent(params.model.id)}:generateContent`,\n      ).toString();\n    case 'openai-completions':\n      return appendCustomProviderPath(params.baseUrl, 'chat/completions').toString();\n    case 'openai-responses':\n      return appendCustomProviderPath(params.baseUrl, 'responses').toString();\n    default:\n      return assertNever(params.api);\n  }\n}\n\nfunction customProbeHeaders(params: ProbeCustomModelProviderCredentialsParams): Headers {\n  const headers = new Headers(params.headers);\n  headers.set('content-type', 'application/json');\n  if (!params.apiKey) return headers;\n\n  switch (params.api) {\n    case 'anthropic-messages':\n      headers.set('x-api-key', params.apiKey);\n      headers.set('anthropic-version', '2023-06-01');\n      break;\n    case 'google-generative-ai':\n      headers.set('x-goog-api-key', params.apiKey);\n      break;\n    case 'openai-completions':\n    case 'openai-responses':\n      headers.set('authorization', `Bearer ${params.apiKey}`);\n      break;\n    default:\n      assertNever(params.api);\n  }\n\n  return headers;\n}\n\nfunction customProbeBody(params: ProbeCustomModelProviderCredentialsParams): unknown {\n  switch (params.api) {\n    case 'anthropic-messages':\n      return {\n        model: params.model.id,\n        max_tokens: PROBE_MAX_TOKENS,\n        messages: [{role: 'user', content: CUSTOM_PROBE_PROMPT}],\n      };\n    case 'google-generative-ai':\n      return {\n        contents: [{role: 'user', parts: [{text: CUSTOM_PROBE_PROMPT}]}],\n        generationConfig: {maxOutputTokens: PROBE_MAX_TOKENS},\n      };\n    case 'openai-completions':\n      return {\n        model: params.model.id,\n        messages: [{role: 'user', content: CUSTOM_PROBE_PROMPT}],\n        max_tokens: PROBE_MAX_TOKENS,\n        stream: false,\n      };\n    case 'openai-responses':\n      return {\n        model: params.model.id,\n        input: CUSTOM_PROBE_PROMPT,\n        max_output_tokens: PROBE_MAX_TOKENS,\n        stream: false,\n        store: false,\n      };\n    default:\n      return assertNever(params.api);\n  }\n}\n\nfunction assertNever(value: never): never {\n  throw new Error(`Unsupported custom model provider API: ${value}`);\n}\n\nfunction timeoutSignal(signal: AbortSignal | undefined, timeoutMs: number): AbortSignal {\n  return signal === undefined\n    ? AbortSignal.timeout(timeoutMs)\n    : AbortSignal.any([signal, AbortSignal.timeout(timeoutMs)]);\n}\n\nfunction modelProviderCredentialOptions(\n  params: Pick<ProbeModelProviderCredentialsParams, 'providerId' | 'credentials'>,\n): ProviderStreamOptions {\n  switch (params.providerId) {\n    case 'azure-openai-responses':\n      return {azureBaseUrl: credentialValue(params, 'endpoint')};\n    case 'cloudflare-ai-gateway':\n      return {\n        env: {\n          CLOUDFLARE_ACCOUNT_ID: credentialValue(params, 'account_id'),\n          CLOUDFLARE_GATEWAY_ID: credentialValue(params, 'gateway_id'),\n        },\n      };\n    case 'cloudflare-workers-ai':\n      return {\n        env: {\n          CLOUDFLARE_ACCOUNT_ID: credentialValue(params, 'account_id'),\n        },\n      };\n    default:\n      return {};\n  }\n}\n\nfunction credentialValue(\n  params: Pick<ProbeModelProviderCredentialsParams, 'providerId' | 'credentials'>,\n  key: string,\n): string {\n  const value = params.credentials[key];\n  if (value === undefined) throw new InvalidCredentialFieldsError(params.providerId);\n  return value;\n}\n\nfunction rejectModelProviderErrorResult(result: AssistantMessage): void {\n  if (result.stopReason !== 'error' && result.stopReason !== 'aborted') return;\n  throw new Error(result.errorMessage ?? 'Provider validation failed.');\n}\n"],"names":["complete","getModels","getModelProviderEntry","parseEgressHostDenylist","redactSecrets","secretWireForms","config","modelProviderValidationCount","appendCustomProviderPath","InvalidAgentModelError","InvalidCredentialFieldsError","ModelProviderValidationError","ModelProviderValidationUnavailableError","UnsupportedModelProviderError","PROBE_MAX_TOKENS","MAX_SANITIZED_ERROR_LENGTH","CUSTOM_PROBE_PROMPT","runProviderProbe","params","probe","args","error","signal","aborted","add","model_provider","metricLabel","outcome","sanitizedMessage","sanitizeModelProviderError","secrets","providerId","probeModelProviderCredentials","entry","undefined","support_status","model","find","candidate","id","secretField","credential_fields","field","secret","apiKey","credentialValue","key","context","messages","role","content","timestamp","Date","now","options","maxTokens","maxRetries","timeoutMs","AGENT_PROVIDER_VALIDATION_TIMEOUT_MS","modelProviderCredentialOptions","result","rejectModelProviderErrorResult","probeCustomModelProviderCredentials","response","fetch","customProbeUrl","method","headers","customProbeHeaders","body","JSON","stringify","customProbeBody","redirect","timeoutSignal","ok","Error","status","cancel","message","length","secretForms","flatMap","redacted","slice","egressPolicy","allowPrivateNetworks","AGENT_CUSTOM_PROVIDER_ALLOW_PRIVATE_NETWORKS","hostDenylist","AGENT_CUSTOM_PROVIDER_HOST_DENYLIST","api","baseUrl","toString","encodeURIComponent","assertNever","Headers","set","max_tokens","contents","parts","text","generationConfig","maxOutputTokens","stream","input","max_output_tokens","store","value","AbortSignal","timeout","any","azureBaseUrl","env","CLOUDFLARE_ACCOUNT_ID","CLOUDFLARE_GATEWAY_ID","credentials","stopReason","errorMessage"],"mappings":"AAAA,SAGEA,QAAQ,EACRC,SAAS,QAEJ,wBAAwB;AAC/B,SAEEC,qBAAqB,QAIhB,yBAAyB;AAChC,SAA2BC,uBAAuB,QAAO,6BAA6B;AACtF,SAAQC,aAAa,EAAEC,eAAe,QAAO,kBAAkB;AAC/D,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,4BAA4B,QAAO,oBAAoB;AAC/D,SAAQC,wBAAwB,QAAO,2BAA2B;AAClE,SACEC,sBAAsB,EACtBC,4BAA4B,EAC5BC,4BAA4B,EAC5BC,uCAAuC,EACvCC,6BAA6B,QACxB,cAAc;AAErB,MAAMC,mBAAmB;AACzB,MAAMC,6BAA6B;AACnC,MAAMC,sBAAsB;AA4B5B,OAAO,eAAeC,iBACpBC,MAAqC;IAErC,IAAI;QACF,MAAMA,OAAOC,KAAK,CAACD,OAAOE,IAAI;IAChC,EAAE,OAAOC,OAAO;QACd,IAAIH,OAAOI,MAAM,EAAEC,SAAS,MAAMF;QAClCd,6BAA6BiB,GAAG,CAAC,GAAG;YAClCC,gBAAgBP,OAAOQ,WAAW;YAClCC,SAAS;QACX;QACA,IAAIN,iBAAiBZ,wBAAwB,MAAMY;QAEnD,MAAMO,mBAAmBC,2BAA2BR,OAAOH,OAAOY,OAAO;QACzE,MAAM,IAAInB,6BAA6BO,OAAOa,UAAU,EAAEH;IAC5D;IAEArB,6BAA6BiB,GAAG,CAAC,GAAG;QAClCC,gBAAgBP,OAAOQ,WAAW;QAClCC,SAAS;IACX;AACF;AAEA,OAAO,eAAeK,8BACpBd,MAA2C;IAE3C,MAAMe,QAAQ/B,sBAAsBgB,OAAOa,UAAU;IACrD,IAAIE,UAAUC,aAAaD,MAAME,cAAc,KAAK,aAAa;QAC/D,MAAM,IAAItB,8BAA8BK,OAAOa,UAAU;IAC3D;IAEA,MAAMK,QAAQnC,UAAUiB,OAAOa,UAAU,EAAEM,IAAI,CAAC,CAACC,YAAcA,UAAUC,EAAE,KAAKrB,OAAOkB,KAAK;IAC5F,IAAI,CAACA,OAAO,MAAM,IAAI3B,uBAAuB,MAAMS,OAAOa,UAAU,EAAEb,OAAOkB,KAAK;IAElF,MAAMI,cAAcP,MAAMQ,iBAAiB,CAACJ,IAAI,CAAC,CAACK,QAAUA,MAAMC,MAAM;IACxE,IAAI,CAACH,aAAa,MAAM,IAAI5B,wCAAwCM,OAAOa,UAAU;IACrF,MAAMa,SAASC,gBAAgB3B,QAAQsB,YAAYM,GAAG;IAEtD,MAAMC,UAAmB;QACvBC,UAAU;YACR;gBACEC,MAAM;gBACNC,SAAS;gBACTC,WAAWC,KAAKC,GAAG;YACrB;SACD;IACH;IACA,MAAMC,UAAiC;QACrCV;QACAW,WAAWzC;QACX0C,YAAY;QACZC,WAAWnD,OAAOoD,oCAAoC;QACtD,GAAGC,+BAA+BzC,OAAO;QACzC,GAAIA,OAAOI,MAAM,GAAG;YAACA,QAAQJ,OAAOI,MAAM;QAAA,IAAI,CAAC,CAAC;IAClD;IAEA,MAAMsC,SAAS,MAAM5D,SAASoC,OAAOW,SAASO;IAC9CO,+BAA+BD;AACjC;AAEA,OAAO,eAAeE,oCACpB5C,MAAiD;IAEjD,MAAM6C,WAAW,MAAMC,MAAMC,eAAe/C,SAAS;QACnDgD,QAAQ;QACRC,SAASC,mBAAmBlD;QAC5BmD,MAAMC,KAAKC,SAAS,CAACC,gBAAgBtD;QACrCuD,UAAU;QACVnD,QAAQoD,cAAcxD,OAAOI,MAAM,EAAEhB,OAAOoD,oCAAoC;IAClF;IAEA,IAAI;QACF,IAAI,CAACK,SAASY,EAAE,EAAE;YAChB,MAAM,IAAIC,MAAM,CAAC,uBAAuB,EAAEb,SAASc,MAAM,CAAC,CAAC,CAAC;QAC9D;IACF,SAAU;QACR,MAAMd,SAASM,IAAI,EAAES;IACvB;AACF;AAEA,OAAO,SAASjD,2BAA2BR,KAAc,EAAES,OAAiB;IAC1E,MAAMiD,UACJ1D,iBAAiBuD,SAASvD,MAAM0D,OAAO,CAACC,MAAM,GAAG,IAC7C3D,MAAM0D,OAAO,GACb;IACN,MAAME,cAAcnD,QAAQoD,OAAO,CAAC,CAACvC,SAAWtC,gBAAgBsC;IAChE,MAAMwC,WAAW/E,cAAc2E,SAASE;IACxC,OAAOE,SAASC,KAAK,CAAC,GAAGrE;AAC3B;AAEA,OAAO,SAASsE;IACd,OAAO;QACLC,sBAAsBhF,OAAOiF,4CAA4C;QACzEC,cAAcrF,wBAAwBG,OAAOmF,mCAAmC;IAClF;AACF;AAEA,SAASxB,eAAe/C,MAAiD;IACvE,OAAQA,OAAOwE,GAAG;QAChB,KAAK;YACH,OAAOlF,yBAAyBU,OAAOyE,OAAO,EAAE,YAAYC,QAAQ;QACtE,KAAK;YACH,OAAOpF,yBACLU,OAAOyE,OAAO,EACd,CAAC,OAAO,EAAEE,mBAAmB3E,OAAOkB,KAAK,CAACG,EAAE,EAAE,gBAAgB,CAAC,EAC/DqD,QAAQ;QACZ,KAAK;YACH,OAAOpF,yBAAyBU,OAAOyE,OAAO,EAAE,oBAAoBC,QAAQ;QAC9E,KAAK;YACH,OAAOpF,yBAAyBU,OAAOyE,OAAO,EAAE,aAAaC,QAAQ;QACvE;YACE,OAAOE,YAAY5E,OAAOwE,GAAG;IACjC;AACF;AAEA,SAAStB,mBAAmBlD,MAAiD;IAC3E,MAAMiD,UAAU,IAAI4B,QAAQ7E,OAAOiD,OAAO;IAC1CA,QAAQ6B,GAAG,CAAC,gBAAgB;IAC5B,IAAI,CAAC9E,OAAO0B,MAAM,EAAE,OAAOuB;IAE3B,OAAQjD,OAAOwE,GAAG;QAChB,KAAK;YACHvB,QAAQ6B,GAAG,CAAC,aAAa9E,OAAO0B,MAAM;YACtCuB,QAAQ6B,GAAG,CAAC,qBAAqB;YACjC;QACF,KAAK;YACH7B,QAAQ6B,GAAG,CAAC,kBAAkB9E,OAAO0B,MAAM;YAC3C;QACF,KAAK;QACL,KAAK;YACHuB,QAAQ6B,GAAG,CAAC,iBAAiB,CAAC,OAAO,EAAE9E,OAAO0B,MAAM,EAAE;YACtD;QACF;YACEkD,YAAY5E,OAAOwE,GAAG;IAC1B;IAEA,OAAOvB;AACT;AAEA,SAASK,gBAAgBtD,MAAiD;IACxE,OAAQA,OAAOwE,GAAG;QAChB,KAAK;YACH,OAAO;gBACLtD,OAAOlB,OAAOkB,KAAK,CAACG,EAAE;gBACtB0D,YAAYnF;gBACZkC,UAAU;oBAAC;wBAACC,MAAM;wBAAQC,SAASlC;oBAAmB;iBAAE;YAC1D;QACF,KAAK;YACH,OAAO;gBACLkF,UAAU;oBAAC;wBAACjD,MAAM;wBAAQkD,OAAO;4BAAC;gCAACC,MAAMpF;4BAAmB;yBAAE;oBAAA;iBAAE;gBAChEqF,kBAAkB;oBAACC,iBAAiBxF;gBAAgB;YACtD;QACF,KAAK;YACH,OAAO;gBACLsB,OAAOlB,OAAOkB,KAAK,CAACG,EAAE;gBACtBS,UAAU;oBAAC;wBAACC,MAAM;wBAAQC,SAASlC;oBAAmB;iBAAE;gBACxDiF,YAAYnF;gBACZyF,QAAQ;YACV;QACF,KAAK;YACH,OAAO;gBACLnE,OAAOlB,OAAOkB,KAAK,CAACG,EAAE;gBACtBiE,OAAOxF;gBACPyF,mBAAmB3F;gBACnByF,QAAQ;gBACRG,OAAO;YACT;QACF;YACE,OAAOZ,YAAY5E,OAAOwE,GAAG;IACjC;AACF;AAEA,SAASI,YAAYa,KAAY;IAC/B,MAAM,IAAI/B,MAAM,CAAC,uCAAuC,EAAE+B,OAAO;AACnE;AAEA,SAASjC,cAAcpD,MAA+B,EAAEmC,SAAiB;IACvE,OAAOnC,WAAWY,YACd0E,YAAYC,OAAO,CAACpD,aACpBmD,YAAYE,GAAG,CAAC;QAACxF;QAAQsF,YAAYC,OAAO,CAACpD;KAAW;AAC9D;AAEA,SAASE,+BACPzC,MAA+E;IAE/E,OAAQA,OAAOa,UAAU;QACvB,KAAK;YACH,OAAO;gBAACgF,cAAclE,gBAAgB3B,QAAQ;YAAW;QAC3D,KAAK;YACH,OAAO;gBACL8F,KAAK;oBACHC,uBAAuBpE,gBAAgB3B,QAAQ;oBAC/CgG,uBAAuBrE,gBAAgB3B,QAAQ;gBACjD;YACF;QACF,KAAK;YACH,OAAO;gBACL8F,KAAK;oBACHC,uBAAuBpE,gBAAgB3B,QAAQ;gBACjD;YACF;QACF;YACE,OAAO,CAAC;IACZ;AACF;AAEA,SAAS2B,gBACP3B,MAA+E,EAC/E4B,GAAW;IAEX,MAAM6D,QAAQzF,OAAOiG,WAAW,CAACrE,IAAI;IACrC,IAAI6D,UAAUzE,WAAW,MAAM,IAAIxB,6BAA6BQ,OAAOa,UAAU;IACjF,OAAO4E;AACT;AAEA,SAAS9C,+BAA+BD,MAAwB;IAC9D,IAAIA,OAAOwD,UAAU,KAAK,WAAWxD,OAAOwD,UAAU,KAAK,WAAW;IACtE,MAAM,IAAIxC,MAAMhB,OAAOyD,YAAY,IAAI;AACzC"}

package/dist/core/resolve-agent-config.d.ts

@@ -0,0 +1,32 @@
+import { type AgentThinking, type CustomAgentModelDto, type Harness, type ModelProviderRef, type SupportedModelProviderId } from '@shipfox/api-agent-dto';
+export interface ContextualAgentConfig {
+    readonly harness?: Harness | undefined;
+    readonly provider?: string | undefined;
+    readonly model?: string | undefined;
+    readonly thinking?: AgentThinking | undefined;
+}
+export interface ResolvedAgentConfig {
+    readonly harness: Harness;
+    readonly provider: ModelProviderRef;
+    readonly model: string;
+    readonly thinking: AgentThinking;
+}
+export type AgentDefaultsResolver = (step: ContextualAgentConfig) => ResolvedAgentConfig;
+export interface AgentConfigResolutionContext {
+    readonly workspaceDefaultHarnessId?: Harness | null | undefined;
+    readonly workspaceDefaultProviderId?: ModelProviderRef | null | undefined;
+    readonly workspaceProviderConfigs?: ReadonlyMap<ModelProviderRef, WorkspaceProviderDefaults>;
+    readonly instanceDefaultProvider?: SupportedModelProviderId | undefined;
+    readonly instanceDefaultModel?: string | undefined;
+    readonly instanceDefaultThinking?: AgentThinking | undefined;
+}
+interface WorkspaceProviderDefaults {
+    readonly kind?: 'builtin' | 'custom' | undefined;
+    readonly defaultModel: string | null;
+    readonly defaultThinking: AgentThinking;
+    readonly models?: readonly CustomAgentModelDto[] | null | undefined;
+}
+export declare function resolveAgentConfig(step: ContextualAgentConfig, ctx?: AgentConfigResolutionContext): ResolvedAgentConfig;
+export declare const catalogDefaultAgentResolver: AgentDefaultsResolver;
+export {};
+//# sourceMappingURL=resolve-agent-config.d.ts.map

package/dist/core/resolve-agent-config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"resolve-agent-config.d.ts","sourceRoot":"","sources":["../../src/core/resolve-agent-config.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,aAAa,EAElB,KAAK,mBAAmB,EAIxB,KAAK,OAAO,EACZ,KAAK,gBAAgB,EACrB,KAAK,wBAAwB,EAC9B,MAAM,wBAAwB,CAAC;AAShC,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACvC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACpC,QAAQ,CAAC,QAAQ,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAC/C;AAED,MAAM,WAAW,mBAAmB;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;IACpC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,QAAQ,EAAE,aAAa,CAAC;CAClC;AAED,MAAM,MAAM,qBAAqB,GAAG,CAAC,IAAI,EAAE,qBAAqB,KAAK,mBAAmB,CAAC;AAEzF,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,CAAC;IAChE,QAAQ,CAAC,0BAA0B,CAAC,EAAE,gBAAgB,GAAG,IAAI,GAAG,SAAS,CAAC;IAC1E,QAAQ,CAAC,wBAAwB,CAAC,EAAE,WAAW,CAAC,gBAAgB,EAAE,yBAAyB,CAAC,CAAC;IAC7F,QAAQ,CAAC,uBAAuB,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACxE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACnD,QAAQ,CAAC,uBAAuB,CAAC,EAAE,aAAa,GAAG,SAAS,CAAC;CAC9D;AAED,UAAU,yBAAyB;IACjC,QAAQ,CAAC,IAAI,CAAC,EAAE,SAAS,GAAG,QAAQ,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAC;IACrC,QAAQ,CAAC,eAAe,EAAE,aAAa,CAAC;IACxC,QAAQ,CAAC,MAAM,CAAC,EAAE,SAAS,mBAAmB,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC;CACrE;AAID,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,qBAAqB,EAC3B,GAAG,GAAE,4BAAiC,GACrC,mBAAmB,CAcrB;AAED,eAAO,MAAM,2BAA2B,EAAE,qBAChB,CAAC"}