@shipfox/api-agent 5.0.0 → 7.1.0

package/dist/core/resolve-runtime-credentials.js

@@ -1,23 +1,28 @@
 import { getModelProviderEntry, modelProviderCredentialKeysMatch } from '@shipfox/api-agent-dto';
-import { getSecretsByNamespace, SecretDecryptionError } from '@shipfox/api-secrets';
+import { secretsInterModuleContract } from '@shipfox/api-secrets-dto/inter-module';
+import { isInterModuleKnownError } from '@shipfox/inter-module';
 import { config } from '#config.js';
 import { getModelProviderConfig } from '#db/index.js';
 import { agentRuntimeConfigResolvedCount } from '#metrics/index.js';
 import { agentSystemNamespace, storeValuesToCustomRuntimeCredentials, storeValuesToRuntimeCredentials } from './credential-fingerprints.js';
 import { ModelProviderConfigNotFoundError } from './errors.js';
+import { requireAgentSecretsClient } from './secrets-client.js';
 export async function resolveRuntimeCredentials(params, options) {
     const runtimeConfig = options?.runtimeConfig ?? config;
-    const getCredentialBag = options?.getCredentialBag ?? getSecretsByNamespace;
+    const secrets = options?.secrets;
     const providerConfig = await getModelProviderConfig({
         workspaceId: params.workspaceId,
         providerId: params.provider
     });
     if (providerConfig) {
         try {
-            const values = await getCredentialBag({
+            const values = options?.getCredentialBag ? await options.getCredentialBag({
                 workspaceId: params.workspaceId,
                 namespace: agentSystemNamespace(params.provider)
-            });
+            }) : (await requireAgentSecretsClient(secrets).getSecretsByNamespace({
+                workspaceId: params.workspaceId,
+                namespace: agentSystemNamespace(params.provider)
+            })).values;
             if (providerConfig.kind === 'custom') {
                 const credentials = storeValuesToCustomRuntimeCredentials(values);
                 agentRuntimeConfigResolvedCount.add(1, {
@@ -37,7 +42,7 @@ export async function resolveRuntimeCredentials(params, options) {
             });
             return toResponse(params, credentials, providerConfig);
         } catch (error) {
-            if (error instanceof SecretDecryptionError) {
+            if (isInterModuleKnownError(secretsInterModuleContract.methods.getSecretsByNamespace, error)) {
                 agentRuntimeConfigResolvedCount.add(1, {
                     source: 'workspace',
                     outcome: 'decryption_failed'

package/dist/core/resolve-runtime-credentials.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/core/resolve-runtime-credentials.ts"],"sourcesContent":["import {\n  type AgentRuntimeCredentialsResponseDto,\n  type AgentThinking,\n  getModelProviderEntry,\n  type Harness,\n  type ModelProviderRef,\n  modelProviderCredentialKeysMatch,\n  type SupportedModelProviderId,\n} from '@shipfox/api-agent-dto';\nimport {getSecretsByNamespace, SecretDecryptionError} from '@shipfox/api-secrets';\nimport {config} from '#config.js';\nimport {getModelProviderConfig} from '#db/index.js';\nimport {agentRuntimeConfigResolvedCount} from '#metrics/index.js';\nimport {\n  agentSystemNamespace,\n  storeValuesToCustomRuntimeCredentials,\n  storeValuesToRuntimeCredentials,\n} from './credential-fingerprints.js';\nimport type {ModelProviderConfig} from './entities/model-provider-config.js';\nimport {ModelProviderConfigNotFoundError} from './errors.js';\n\nexport interface ResolveRuntimeCredentialsParams {\n  workspaceId: string;\n  harness: Harness;\n  provider: ModelProviderRef;\n  model: string;\n  thinking: AgentThinking;\n}\n\ninterface RuntimeCredentialsConfig {\n  AGENT_DEFAULT_PROVIDER?: SupportedModelProviderId | undefined;\n  AGENT_DEFAULT_PROVIDER_API_KEY?: string | undefined;\n}\n\ninterface ResolveRuntimeCredentialsOptions {\n  runtimeConfig?: RuntimeCredentialsConfig | undefined;\n  getCredentialBag?: typeof getSecretsByNamespace | undefined;\n}\n\nexport async function resolveRuntimeCredentials(\n  params: ResolveRuntimeCredentialsParams,\n  options?: ResolveRuntimeCredentialsOptions,\n): Promise<AgentRuntimeCredentialsResponseDto> {\n  const runtimeConfig = options?.runtimeConfig ?? config;\n  const getCredentialBag = options?.getCredentialBag ?? getSecretsByNamespace;\n  const providerConfig = await getModelProviderConfig({\n    workspaceId: params.workspaceId,\n    providerId: params.provider,\n  });\n\n  if (providerConfig) {\n    try {\n      const values = await getCredentialBag({\n        workspaceId: params.workspaceId,\n        namespace: agentSystemNamespace(params.provider),\n      });\n      if (providerConfig.kind === 'custom') {\n        const credentials = storeValuesToCustomRuntimeCredentials(values);\n        agentRuntimeConfigResolvedCount.add(1, {source: 'workspace', outcome: 'resolved'});\n        return toResponse(params, credentials, providerConfig);\n      }\n\n      const providerId = params.provider as SupportedModelProviderId;\n      const credentials = storeValuesToRuntimeCredentials(providerId, values);\n      if (!modelProviderCredentialKeysMatch(providerId, credentials)) {\n        throw new ModelProviderConfigNotFoundError(params.workspaceId, params.provider);\n      }\n      agentRuntimeConfigResolvedCount.add(1, {source: 'workspace', outcome: 'resolved'});\n      return toResponse(params, credentials, providerConfig);\n    } catch (error) {\n      if (error instanceof SecretDecryptionError) {\n        agentRuntimeConfigResolvedCount.add(1, {\n          source: 'workspace',\n          outcome: 'decryption_failed',\n        });\n      }\n      throw error;\n    }\n  }\n\n  const instanceCredentials = instanceFallbackCredentials(params.provider, runtimeConfig);\n  if (instanceCredentials) {\n    agentRuntimeConfigResolvedCount.add(1, {source: 'instance', outcome: 'resolved'});\n    return toResponse(params, instanceCredentials);\n  }\n\n  agentRuntimeConfigResolvedCount.add(1, {\n    source: params.provider === runtimeConfig.AGENT_DEFAULT_PROVIDER ? 'instance' : 'workspace',\n    outcome: 'unavailable',\n  });\n  throw new ModelProviderConfigNotFoundError(params.workspaceId, params.provider);\n}\n\nexport function getInstanceDefaultModelProviderApiKeyField(\n  providerId: ModelProviderRef,\n): 'api_key' | undefined {\n  const credentialFields =\n    getModelProviderEntry(providerId as SupportedModelProviderId)?.credential_fields ?? [];\n  const field = credentialFields[0];\n  if (credentialFields.length !== 1 || field?.key !== 'api_key' || !field.secret) {\n    return undefined;\n  }\n  return 'api_key';\n}\n\nfunction instanceFallbackCredentials(\n  providerId: ModelProviderRef,\n  runtimeConfig: RuntimeCredentialsConfig,\n): Record<string, string> | undefined {\n  const instanceApiKey = runtimeConfig.AGENT_DEFAULT_PROVIDER_API_KEY;\n  if (providerId !== runtimeConfig.AGENT_DEFAULT_PROVIDER || !instanceApiKey) return undefined;\n\n  const fieldKey = getInstanceDefaultModelProviderApiKeyField(providerId);\n  if (!fieldKey) return undefined;\n\n  return {[fieldKey]: instanceApiKey};\n}\n\nfunction toResponse(\n  params: ResolveRuntimeCredentialsParams,\n  credentials: Record<string, string>,\n  providerConfig?: ModelProviderConfig | undefined,\n): AgentRuntimeCredentialsResponseDto {\n  const response: AgentRuntimeCredentialsResponseDto = {\n    harness: params.harness,\n    provider_id: params.provider,\n    model: params.model,\n    thinking: params.thinking,\n    credentials,\n  };\n\n  if (providerConfig?.kind === 'custom') {\n    response.custom_provider = {\n      api: providerConfig.api ?? 'openai-responses',\n      base_url: providerConfig.baseUrl ?? '',\n      headers: providerConfig.headers ?? [],\n      secret_header_names: Object.keys(credentials)\n        .filter((key) => key.startsWith('header:'))\n        .map((key) => key.slice('header:'.length))\n        .sort(),\n      models: providerConfig.models ?? [],\n      requires_api_key: providerConfig.requiresApiKey,\n    };\n  }\n\n  return response;\n}\n"],"names":["getModelProviderEntry","modelProviderCredentialKeysMatch","getSecretsByNamespace","SecretDecryptionError","config","getModelProviderConfig","agentRuntimeConfigResolvedCount","agentSystemNamespace","storeValuesToCustomRuntimeCredentials","storeValuesToRuntimeCredentials","ModelProviderConfigNotFoundError","resolveRuntimeCredentials","params","options","runtimeConfig","getCredentialBag","providerConfig","workspaceId","providerId","provider","values","namespace","kind","credentials","add","source","outcome","toResponse","error","instanceCredentials","instanceFallbackCredentials","AGENT_DEFAULT_PROVIDER","getInstanceDefaultModelProviderApiKeyField","credentialFields","credential_fields","field","length","key","secret","undefined","instanceApiKey","AGENT_DEFAULT_PROVIDER_API_KEY","fieldKey","response","harness","provider_id","model","thinking","custom_provider","api","base_url","baseUrl","headers","secret_header_names","Object","keys","filter","startsWith","map","slice","sort","models","requires_api_key","requiresApiKey"],"mappings":"AAAA,SAGEA,qBAAqB,EAGrBC,gCAAgC,QAE3B,yBAAyB;AAChC,SAAQC,qBAAqB,EAAEC,qBAAqB,QAAO,uBAAuB;AAClF,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,sBAAsB,QAAO,eAAe;AACpD,SAAQC,+BAA+B,QAAO,oBAAoB;AAClE,SACEC,oBAAoB,EACpBC,qCAAqC,EACrCC,+BAA+B,QAC1B,+BAA+B;AAEtC,SAAQC,gCAAgC,QAAO,cAAc;AAoB7D,OAAO,eAAeC,0BACpBC,MAAuC,EACvCC,OAA0C;IAE1C,MAAMC,gBAAgBD,SAASC,iBAAiBV;IAChD,MAAMW,mBAAmBF,SAASE,oBAAoBb;IACtD,MAAMc,iBAAiB,MAAMX,uBAAuB;QAClDY,aAAaL,OAAOK,WAAW;QAC/BC,YAAYN,OAAOO,QAAQ;IAC7B;IAEA,IAAIH,gBAAgB;QAClB,IAAI;YACF,MAAMI,SAAS,MAAML,iBAAiB;gBACpCE,aAAaL,OAAOK,WAAW;gBAC/BI,WAAWd,qBAAqBK,OAAOO,QAAQ;YACjD;YACA,IAAIH,eAAeM,IAAI,KAAK,UAAU;gBACpC,MAAMC,cAAcf,sCAAsCY;gBAC1Dd,gCAAgCkB,GAAG,CAAC,GAAG;oBAACC,QAAQ;oBAAaC,SAAS;gBAAU;gBAChF,OAAOC,WAAWf,QAAQW,aAAaP;YACzC;YAEA,MAAME,aAAaN,OAAOO,QAAQ;YAClC,MAAMI,cAAcd,gCAAgCS,YAAYE;YAChE,IAAI,CAACnB,iCAAiCiB,YAAYK,cAAc;gBAC9D,MAAM,IAAIb,iCAAiCE,OAAOK,WAAW,EAAEL,OAAOO,QAAQ;YAChF;YACAb,gCAAgCkB,GAAG,CAAC,GAAG;gBAACC,QAAQ;gBAAaC,SAAS;YAAU;YAChF,OAAOC,WAAWf,QAAQW,aAAaP;QACzC,EAAE,OAAOY,OAAO;YACd,IAAIA,iBAAiBzB,uBAAuB;gBAC1CG,gCAAgCkB,GAAG,CAAC,GAAG;oBACrCC,QAAQ;oBACRC,SAAS;gBACX;YACF;YACA,MAAME;QACR;IACF;IAEA,MAAMC,sBAAsBC,4BAA4BlB,OAAOO,QAAQ,EAAEL;IACzE,IAAIe,qBAAqB;QACvBvB,gCAAgCkB,GAAG,CAAC,GAAG;YAACC,QAAQ;YAAYC,SAAS;QAAU;QAC/E,OAAOC,WAAWf,QAAQiB;IAC5B;IAEAvB,gCAAgCkB,GAAG,CAAC,GAAG;QACrCC,QAAQb,OAAOO,QAAQ,KAAKL,cAAciB,sBAAsB,GAAG,aAAa;QAChFL,SAAS;IACX;IACA,MAAM,IAAIhB,iCAAiCE,OAAOK,WAAW,EAAEL,OAAOO,QAAQ;AAChF;AAEA,OAAO,SAASa,2CACdd,UAA4B;IAE5B,MAAMe,mBACJjC,sBAAsBkB,aAAyCgB,qBAAqB,EAAE;IACxF,MAAMC,QAAQF,gBAAgB,CAAC,EAAE;IACjC,IAAIA,iBAAiBG,MAAM,KAAK,KAAKD,OAAOE,QAAQ,aAAa,CAACF,MAAMG,MAAM,EAAE;QAC9E,OAAOC;IACT;IACA,OAAO;AACT;AAEA,SAAST,4BACPZ,UAA4B,EAC5BJ,aAAuC;IAEvC,MAAM0B,iBAAiB1B,cAAc2B,8BAA8B;IACnE,IAAIvB,eAAeJ,cAAciB,sBAAsB,IAAI,CAACS,gBAAgB,OAAOD;IAEnF,MAAMG,WAAWV,2CAA2Cd;IAC5D,IAAI,CAACwB,UAAU,OAAOH;IAEtB,OAAO;QAAC,CAACG,SAAS,EAAEF;IAAc;AACpC;AAEA,SAASb,WACPf,MAAuC,EACvCW,WAAmC,EACnCP,cAAgD;IAEhD,MAAM2B,WAA+C;QACnDC,SAAShC,OAAOgC,OAAO;QACvBC,aAAajC,OAAOO,QAAQ;QAC5B2B,OAAOlC,OAAOkC,KAAK;QACnBC,UAAUnC,OAAOmC,QAAQ;QACzBxB;IACF;IAEA,IAAIP,gBAAgBM,SAAS,UAAU;QACrCqB,SAASK,eAAe,GAAG;YACzBC,KAAKjC,eAAeiC,GAAG,IAAI;YAC3BC,UAAUlC,eAAemC,OAAO,IAAI;YACpCC,SAASpC,eAAeoC,OAAO,IAAI,EAAE;YACrCC,qBAAqBC,OAAOC,IAAI,CAAChC,aAC9BiC,MAAM,CAAC,CAACnB,MAAQA,IAAIoB,UAAU,CAAC,YAC/BC,GAAG,CAAC,CAACrB,MAAQA,IAAIsB,KAAK,CAAC,UAAUvB,MAAM,GACvCwB,IAAI;YACPC,QAAQ7C,eAAe6C,MAAM,IAAI,EAAE;YACnCC,kBAAkB9C,eAAe+C,cAAc;QACjD;IACF;IAEA,OAAOpB;AACT"}
+{"version":3,"sources":["../../src/core/resolve-runtime-credentials.ts"],"sourcesContent":["import {\n  type AgentRuntimeCredentialsResponseDto,\n  type AgentThinking,\n  getModelProviderEntry,\n  type Harness,\n  type ModelProviderRef,\n  modelProviderCredentialKeysMatch,\n  type SupportedModelProviderId,\n} from '@shipfox/api-agent-dto';\nimport {secretsInterModuleContract} from '@shipfox/api-secrets-dto/inter-module';\nimport {isInterModuleKnownError} from '@shipfox/inter-module';\nimport {config} from '#config.js';\nimport {getModelProviderConfig} from '#db/index.js';\nimport {agentRuntimeConfigResolvedCount} from '#metrics/index.js';\nimport {\n  agentSystemNamespace,\n  storeValuesToCustomRuntimeCredentials,\n  storeValuesToRuntimeCredentials,\n} from './credential-fingerprints.js';\nimport type {ModelProviderConfig} from './entities/model-provider-config.js';\nimport {ModelProviderConfigNotFoundError} from './errors.js';\nimport {type AgentSecretsClient, requireAgentSecretsClient} from './secrets-client.js';\n\nexport interface ResolveRuntimeCredentialsParams {\n  workspaceId: string;\n  harness: Harness;\n  provider: ModelProviderRef;\n  model: string;\n  thinking: AgentThinking;\n}\n\ninterface RuntimeCredentialsConfig {\n  AGENT_DEFAULT_PROVIDER?: SupportedModelProviderId | undefined;\n  AGENT_DEFAULT_PROVIDER_API_KEY?: string | undefined;\n}\n\ninterface ResolveRuntimeCredentialsOptions {\n  runtimeConfig?: RuntimeCredentialsConfig | undefined;\n  secrets?: AgentSecretsClient | undefined;\n  getCredentialBag?:\n    | ((params: {workspaceId: string; namespace: string}) => Promise<Record<string, string>>)\n    | undefined;\n}\n\nexport async function resolveRuntimeCredentials(\n  params: ResolveRuntimeCredentialsParams,\n  options?: ResolveRuntimeCredentialsOptions,\n): Promise<AgentRuntimeCredentialsResponseDto> {\n  const runtimeConfig = options?.runtimeConfig ?? config;\n  const secrets = options?.secrets;\n  const providerConfig = await getModelProviderConfig({\n    workspaceId: params.workspaceId,\n    providerId: params.provider,\n  });\n\n  if (providerConfig) {\n    try {\n      const values = options?.getCredentialBag\n        ? await options.getCredentialBag({\n            workspaceId: params.workspaceId,\n            namespace: agentSystemNamespace(params.provider),\n          })\n        : (\n            await requireAgentSecretsClient(secrets).getSecretsByNamespace({\n              workspaceId: params.workspaceId,\n              namespace: agentSystemNamespace(params.provider),\n            })\n          ).values;\n      if (providerConfig.kind === 'custom') {\n        const credentials = storeValuesToCustomRuntimeCredentials(values);\n        agentRuntimeConfigResolvedCount.add(1, {source: 'workspace', outcome: 'resolved'});\n        return toResponse(params, credentials, providerConfig);\n      }\n\n      const providerId = params.provider as SupportedModelProviderId;\n      const credentials = storeValuesToRuntimeCredentials(providerId, values);\n      if (!modelProviderCredentialKeysMatch(providerId, credentials)) {\n        throw new ModelProviderConfigNotFoundError(params.workspaceId, params.provider);\n      }\n      agentRuntimeConfigResolvedCount.add(1, {source: 'workspace', outcome: 'resolved'});\n      return toResponse(params, credentials, providerConfig);\n    } catch (error) {\n      if (\n        isInterModuleKnownError(secretsInterModuleContract.methods.getSecretsByNamespace, error)\n      ) {\n        agentRuntimeConfigResolvedCount.add(1, {\n          source: 'workspace',\n          outcome: 'decryption_failed',\n        });\n      }\n      throw error;\n    }\n  }\n\n  const instanceCredentials = instanceFallbackCredentials(params.provider, runtimeConfig);\n  if (instanceCredentials) {\n    agentRuntimeConfigResolvedCount.add(1, {source: 'instance', outcome: 'resolved'});\n    return toResponse(params, instanceCredentials);\n  }\n\n  agentRuntimeConfigResolvedCount.add(1, {\n    source: params.provider === runtimeConfig.AGENT_DEFAULT_PROVIDER ? 'instance' : 'workspace',\n    outcome: 'unavailable',\n  });\n  throw new ModelProviderConfigNotFoundError(params.workspaceId, params.provider);\n}\n\nexport function getInstanceDefaultModelProviderApiKeyField(\n  providerId: ModelProviderRef,\n): 'api_key' | undefined {\n  const credentialFields =\n    getModelProviderEntry(providerId as SupportedModelProviderId)?.credential_fields ?? [];\n  const field = credentialFields[0];\n  if (credentialFields.length !== 1 || field?.key !== 'api_key' || !field.secret) {\n    return undefined;\n  }\n  return 'api_key';\n}\n\nfunction instanceFallbackCredentials(\n  providerId: ModelProviderRef,\n  runtimeConfig: RuntimeCredentialsConfig,\n): Record<string, string> | undefined {\n  const instanceApiKey = runtimeConfig.AGENT_DEFAULT_PROVIDER_API_KEY;\n  if (providerId !== runtimeConfig.AGENT_DEFAULT_PROVIDER || !instanceApiKey) return undefined;\n\n  const fieldKey = getInstanceDefaultModelProviderApiKeyField(providerId);\n  if (!fieldKey) return undefined;\n\n  return {[fieldKey]: instanceApiKey};\n}\n\nfunction toResponse(\n  params: ResolveRuntimeCredentialsParams,\n  credentials: Record<string, string>,\n  providerConfig?: ModelProviderConfig | undefined,\n): AgentRuntimeCredentialsResponseDto {\n  const response: AgentRuntimeCredentialsResponseDto = {\n    harness: params.harness,\n    provider_id: params.provider,\n    model: params.model,\n    thinking: params.thinking,\n    credentials,\n  };\n\n  if (providerConfig?.kind === 'custom') {\n    response.custom_provider = {\n      api: providerConfig.api ?? 'openai-responses',\n      base_url: providerConfig.baseUrl ?? '',\n      headers: providerConfig.headers ?? [],\n      secret_header_names: Object.keys(credentials)\n        .filter((key) => key.startsWith('header:'))\n        .map((key) => key.slice('header:'.length))\n        .sort(),\n      models: providerConfig.models ?? [],\n      requires_api_key: providerConfig.requiresApiKey,\n    };\n  }\n\n  return response;\n}\n"],"names":["getModelProviderEntry","modelProviderCredentialKeysMatch","secretsInterModuleContract","isInterModuleKnownError","config","getModelProviderConfig","agentRuntimeConfigResolvedCount","agentSystemNamespace","storeValuesToCustomRuntimeCredentials","storeValuesToRuntimeCredentials","ModelProviderConfigNotFoundError","requireAgentSecretsClient","resolveRuntimeCredentials","params","options","runtimeConfig","secrets","providerConfig","workspaceId","providerId","provider","values","getCredentialBag","namespace","getSecretsByNamespace","kind","credentials","add","source","outcome","toResponse","error","methods","instanceCredentials","instanceFallbackCredentials","AGENT_DEFAULT_PROVIDER","getInstanceDefaultModelProviderApiKeyField","credentialFields","credential_fields","field","length","key","secret","undefined","instanceApiKey","AGENT_DEFAULT_PROVIDER_API_KEY","fieldKey","response","harness","provider_id","model","thinking","custom_provider","api","base_url","baseUrl","headers","secret_header_names","Object","keys","filter","startsWith","map","slice","sort","models","requires_api_key","requiresApiKey"],"mappings":"AAAA,SAGEA,qBAAqB,EAGrBC,gCAAgC,QAE3B,yBAAyB;AAChC,SAAQC,0BAA0B,QAAO,wCAAwC;AACjF,SAAQC,uBAAuB,QAAO,wBAAwB;AAC9D,SAAQC,MAAM,QAAO,aAAa;AAClC,SAAQC,sBAAsB,QAAO,eAAe;AACpD,SAAQC,+BAA+B,QAAO,oBAAoB;AAClE,SACEC,oBAAoB,EACpBC,qCAAqC,EACrCC,+BAA+B,QAC1B,+BAA+B;AAEtC,SAAQC,gCAAgC,QAAO,cAAc;AAC7D,SAAiCC,yBAAyB,QAAO,sBAAsB;AAuBvF,OAAO,eAAeC,0BACpBC,MAAuC,EACvCC,OAA0C;IAE1C,MAAMC,gBAAgBD,SAASC,iBAAiBX;IAChD,MAAMY,UAAUF,SAASE;IACzB,MAAMC,iBAAiB,MAAMZ,uBAAuB;QAClDa,aAAaL,OAAOK,WAAW;QAC/BC,YAAYN,OAAOO,QAAQ;IAC7B;IAEA,IAAIH,gBAAgB;QAClB,IAAI;YACF,MAAMI,SAASP,SAASQ,mBACpB,MAAMR,QAAQQ,gBAAgB,CAAC;gBAC7BJ,aAAaL,OAAOK,WAAW;gBAC/BK,WAAWhB,qBAAqBM,OAAOO,QAAQ;YACjD,KACA,AACE,CAAA,MAAMT,0BAA0BK,SAASQ,qBAAqB,CAAC;gBAC7DN,aAAaL,OAAOK,WAAW;gBAC/BK,WAAWhB,qBAAqBM,OAAOO,QAAQ;YACjD,EAAC,EACDC,MAAM;YACZ,IAAIJ,eAAeQ,IAAI,KAAK,UAAU;gBACpC,MAAMC,cAAclB,sCAAsCa;gBAC1Df,gCAAgCqB,GAAG,CAAC,GAAG;oBAACC,QAAQ;oBAAaC,SAAS;gBAAU;gBAChF,OAAOC,WAAWjB,QAAQa,aAAaT;YACzC;YAEA,MAAME,aAAaN,OAAOO,QAAQ;YAClC,MAAMM,cAAcjB,gCAAgCU,YAAYE;YAChE,IAAI,CAACpB,iCAAiCkB,YAAYO,cAAc;gBAC9D,MAAM,IAAIhB,iCAAiCG,OAAOK,WAAW,EAAEL,OAAOO,QAAQ;YAChF;YACAd,gCAAgCqB,GAAG,CAAC,GAAG;gBAACC,QAAQ;gBAAaC,SAAS;YAAU;YAChF,OAAOC,WAAWjB,QAAQa,aAAaT;QACzC,EAAE,OAAOc,OAAO;YACd,IACE5B,wBAAwBD,2BAA2B8B,OAAO,CAACR,qBAAqB,EAAEO,QAClF;gBACAzB,gCAAgCqB,GAAG,CAAC,GAAG;oBACrCC,QAAQ;oBACRC,SAAS;gBACX;YACF;YACA,MAAME;QACR;IACF;IAEA,MAAME,sBAAsBC,4BAA4BrB,OAAOO,QAAQ,EAAEL;IACzE,IAAIkB,qBAAqB;QACvB3B,gCAAgCqB,GAAG,CAAC,GAAG;YAACC,QAAQ;YAAYC,SAAS;QAAU;QAC/E,OAAOC,WAAWjB,QAAQoB;IAC5B;IAEA3B,gCAAgCqB,GAAG,CAAC,GAAG;QACrCC,QAAQf,OAAOO,QAAQ,KAAKL,cAAcoB,sBAAsB,GAAG,aAAa;QAChFN,SAAS;IACX;IACA,MAAM,IAAInB,iCAAiCG,OAAOK,WAAW,EAAEL,OAAOO,QAAQ;AAChF;AAEA,OAAO,SAASgB,2CACdjB,UAA4B;IAE5B,MAAMkB,mBACJrC,sBAAsBmB,aAAyCmB,qBAAqB,EAAE;IACxF,MAAMC,QAAQF,gBAAgB,CAAC,EAAE;IACjC,IAAIA,iBAAiBG,MAAM,KAAK,KAAKD,OAAOE,QAAQ,aAAa,CAACF,MAAMG,MAAM,EAAE;QAC9E,OAAOC;IACT;IACA,OAAO;AACT;AAEA,SAAST,4BACPf,UAA4B,EAC5BJ,aAAuC;IAEvC,MAAM6B,iBAAiB7B,cAAc8B,8BAA8B;IACnE,IAAI1B,eAAeJ,cAAcoB,sBAAsB,IAAI,CAACS,gBAAgB,OAAOD;IAEnF,MAAMG,WAAWV,2CAA2CjB;IAC5D,IAAI,CAAC2B,UAAU,OAAOH;IAEtB,OAAO;QAAC,CAACG,SAAS,EAAEF;IAAc;AACpC;AAEA,SAASd,WACPjB,MAAuC,EACvCa,WAAmC,EACnCT,cAAgD;IAEhD,MAAM8B,WAA+C;QACnDC,SAASnC,OAAOmC,OAAO;QACvBC,aAAapC,OAAOO,QAAQ;QAC5B8B,OAAOrC,OAAOqC,KAAK;QACnBC,UAAUtC,OAAOsC,QAAQ;QACzBzB;IACF;IAEA,IAAIT,gBAAgBQ,SAAS,UAAU;QACrCsB,SAASK,eAAe,GAAG;YACzBC,KAAKpC,eAAeoC,GAAG,IAAI;YAC3BC,UAAUrC,eAAesC,OAAO,IAAI;YACpCC,SAASvC,eAAeuC,OAAO,IAAI,EAAE;YACrCC,qBAAqBC,OAAOC,IAAI,CAACjC,aAC9BkC,MAAM,CAAC,CAACnB,MAAQA,IAAIoB,UAAU,CAAC,YAC/BC,GAAG,CAAC,CAACrB,MAAQA,IAAIsB,KAAK,CAAC,UAAUvB,MAAM,GACvCwB,IAAI;YACPC,QAAQhD,eAAegD,MAAM,IAAI,EAAE;YACnCC,kBAAkBjD,eAAekD,cAAc;QACjD;IACF;IAEA,OAAOpB;AACT"}

package/dist/core/secrets-client.d.ts

@@ -0,0 +1,4 @@
+import type { SecretsInterModuleClient } from '@shipfox/api-secrets-dto/inter-module';
+export type AgentSecretsClient = Pick<SecretsInterModuleClient, 'deleteSecrets' | 'getSecretsByNamespace' | 'setSecrets'>;
+export declare function requireAgentSecretsClient(secrets: AgentSecretsClient | undefined): AgentSecretsClient;
+//# sourceMappingURL=secrets-client.d.ts.map

package/dist/core/secrets-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"secrets-client.d.ts","sourceRoot":"","sources":["../../src/core/secrets-client.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,wBAAwB,EAAC,MAAM,uCAAuC,CAAC;AAEpF,MAAM,MAAM,kBAAkB,GAAG,IAAI,CACnC,wBAAwB,EACxB,eAAe,GAAG,uBAAuB,GAAG,YAAY,CACzD,CAAC;AAEF,wBAAgB,yBAAyB,CACvC,OAAO,EAAE,kBAAkB,GAAG,SAAS,GACtC,kBAAkB,CAGpB"}

package/dist/core/secrets-client.js

@@ -0,0 +1,6 @@
+export function requireAgentSecretsClient(secrets) {
+    if (secrets) return secrets;
+    throw new Error('Agent Secrets client is not configured.');
+}
+
+//# sourceMappingURL=secrets-client.js.map

package/dist/core/secrets-client.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/core/secrets-client.ts"],"sourcesContent":["import type {SecretsInterModuleClient} from '@shipfox/api-secrets-dto/inter-module';\n\nexport type AgentSecretsClient = Pick<\n  SecretsInterModuleClient,\n  'deleteSecrets' | 'getSecretsByNamespace' | 'setSecrets'\n>;\n\nexport function requireAgentSecretsClient(\n  secrets: AgentSecretsClient | undefined,\n): AgentSecretsClient {\n  if (secrets) return secrets;\n  throw new Error('Agent Secrets client is not configured.');\n}\n"],"names":["requireAgentSecretsClient","secrets","Error"],"mappings":"AAOA,OAAO,SAASA,0BACdC,OAAuC;IAEvC,IAAIA,SAAS,OAAOA;IACpB,MAAM,IAAIC,MAAM;AAClB"}

package/dist/index.d.ts

@@ -1,5 +1,8 @@
 import type { ShipfoxModule } from '@shipfox/node-module';
+import type { AgentSecretsClient } from '#core/secrets-client.js';
 export { type AgentConfigResolutionContext, type AgentDefaultsResolver, type AgentWorkspaceSettings, buildModelProviderCatalog, type ContextualAgentConfig, catalogDefaultAgentResolver, createCustomModelProviderConfig, createWorkspaceAgentDefaultsResolver, deleteModelProviderConfig, InvalidAgentModelError, InvalidCredentialFieldsError, type ModelProviderConfig, ModelProviderConfigNotFoundError, ModelProviderValidationError, ModelProviderValidationUnavailableError, type ResolvedAgentConfig, type ResolveRuntimeCredentialsParams, resolveAgentConfig, resolveRuntimeCredentials, testAndSaveModelProviderConfig, UnsupportedModelProviderError, updateCustomModelProviderConfig, } from '#core/index.js';
 export { getAgentWorkspaceSettings, getModelProviderConfig, listModelProviderConfigs, setDefaultModelProvider, upsertModelProviderConfig, } from '#db/index.js';
-export declare const agentModule: ShipfoxModule;
+export declare function createAgentModule(params: {
+    secrets: AgentSecretsClient;
+}): ShipfoxModule;
 //# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAKxD,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,2BAA2B,EAC3B,+BAA+B,EAC/B,oCAAoC,EACpC,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,gCAAgC,EAChC,4BAA4B,EAC5B,uCAAuC,EACvC,KAAK,mBAAmB,EACxB,KAAK,+BAA+B,EACpC,kBAAkB,EAClB,yBAAyB,EACzB,8BAA8B,EAC9B,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAEtB,eAAO,MAAM,WAAW,EAAE,aAKzB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,aAAa,EAAC,MAAM,sBAAsB,CAAC;AACxD,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,yBAAyB,CAAC;AAMhE,OAAO,EACL,KAAK,4BAA4B,EACjC,KAAK,qBAAqB,EAC1B,KAAK,sBAAsB,EAC3B,yBAAyB,EACzB,KAAK,qBAAqB,EAC1B,2BAA2B,EAC3B,+BAA+B,EAC/B,oCAAoC,EACpC,yBAAyB,EACzB,sBAAsB,EACtB,4BAA4B,EAC5B,KAAK,mBAAmB,EACxB,gCAAgC,EAChC,4BAA4B,EAC5B,uCAAuC,EACvC,KAAK,mBAAmB,EACxB,KAAK,+BAA+B,EACpC,kBAAkB,EAClB,yBAAyB,EACzB,8BAA8B,EAC9B,6BAA6B,EAC7B,+BAA+B,GAChC,MAAM,gBAAgB,CAAC;AACxB,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,wBAAwB,EACxB,uBAAuB,EACvB,yBAAyB,GAC1B,MAAM,cAAc,CAAC;AAEtB,wBAAgB,iBAAiB,CAAC,MAAM,EAAE;IAAC,OAAO,EAAE,kBAAkB,CAAA;CAAC,GAAG,aAAa,CAQtF"}

package/dist/index.js

@@ -1,18 +1,24 @@
 import { db, migrationsPath } from '#db/index.js';
-import { agentE2eRoutes } from '#presentation/e2eRoutes/index.js';
-import { routes } from '#presentation/index.js';
+import { createAgentE2eRoutes } from '#presentation/e2eRoutes/index.js';
+import { createAgentInterModulePresentation } from '#presentation/inter-module.js';
+import { createAgentRoutes } from '#presentation/routes/index.js';
 export { buildModelProviderCatalog, catalogDefaultAgentResolver, createCustomModelProviderConfig, createWorkspaceAgentDefaultsResolver, deleteModelProviderConfig, InvalidAgentModelError, InvalidCredentialFieldsError, ModelProviderConfigNotFoundError, ModelProviderValidationError, ModelProviderValidationUnavailableError, resolveAgentConfig, resolveRuntimeCredentials, testAndSaveModelProviderConfig, UnsupportedModelProviderError, updateCustomModelProviderConfig } from '#core/index.js';
 export { getAgentWorkspaceSettings, getModelProviderConfig, listModelProviderConfigs, setDefaultModelProvider, upsertModelProviderConfig } from '#db/index.js';
-export const agentModule = {
-    name: 'agent',
-    database: {
-        db,
-        migrationsPath
-    },
-    routes,
-    e2eRoutes: [
-        agentE2eRoutes
-    ]
-};
+export function createAgentModule(params) {
+    return {
+        name: 'agent',
+        database: {
+            db,
+            migrationsPath
+        },
+        routes: createAgentRoutes(params.secrets),
+        e2eRoutes: [
+            createAgentE2eRoutes(params.secrets)
+        ],
+        interModulePresentations: [
+            createAgentInterModulePresentation(params)
+        ]
+    };
+}
 
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {ShipfoxModule} from '@shipfox/node-module';\nimport {db, migrationsPath} from '#db/index.js';\nimport {agentE2eRoutes} from '#presentation/e2eRoutes/index.js';\nimport {routes} from '#presentation/index.js';\n\nexport {\n  type AgentConfigResolutionContext,\n  type AgentDefaultsResolver,\n  type AgentWorkspaceSettings,\n  buildModelProviderCatalog,\n  type ContextualAgentConfig,\n  catalogDefaultAgentResolver,\n  createCustomModelProviderConfig,\n  createWorkspaceAgentDefaultsResolver,\n  deleteModelProviderConfig,\n  InvalidAgentModelError,\n  InvalidCredentialFieldsError,\n  type ModelProviderConfig,\n  ModelProviderConfigNotFoundError,\n  ModelProviderValidationError,\n  ModelProviderValidationUnavailableError,\n  type ResolvedAgentConfig,\n  type ResolveRuntimeCredentialsParams,\n  resolveAgentConfig,\n  resolveRuntimeCredentials,\n  testAndSaveModelProviderConfig,\n  UnsupportedModelProviderError,\n  updateCustomModelProviderConfig,\n} from '#core/index.js';\nexport {\n  getAgentWorkspaceSettings,\n  getModelProviderConfig,\n  listModelProviderConfigs,\n  setDefaultModelProvider,\n  upsertModelProviderConfig,\n} from '#db/index.js';\n\nexport const agentModule: ShipfoxModule = {\n  name: 'agent',\n  database: {db, migrationsPath},\n  routes,\n  e2eRoutes: [agentE2eRoutes],\n};\n"],"names":["db","migrationsPath","agentE2eRoutes","routes","buildModelProviderCatalog","catalogDefaultAgentResolver","createCustomModelProviderConfig","createWorkspaceAgentDefaultsResolver","deleteModelProviderConfig","InvalidAgentModelError","InvalidCredentialFieldsError","ModelProviderConfigNotFoundError","ModelProviderValidationError","ModelProviderValidationUnavailableError","resolveAgentConfig","resolveRuntimeCredentials","testAndSaveModelProviderConfig","UnsupportedModelProviderError","updateCustomModelProviderConfig","getAgentWorkspaceSettings","getModelProviderConfig","listModelProviderConfigs","setDefaultModelProvider","upsertModelProviderConfig","agentModule","name","database","e2eRoutes"],"mappings":"AACA,SAAQA,EAAE,EAAEC,cAAc,QAAO,eAAe;AAChD,SAAQC,cAAc,QAAO,mCAAmC;AAChE,SAAQC,MAAM,QAAO,yBAAyB;AAE9C,SAIEC,yBAAyB,EAEzBC,2BAA2B,EAC3BC,+BAA+B,EAC/BC,oCAAoC,EACpCC,yBAAyB,EACzBC,sBAAsB,EACtBC,4BAA4B,EAE5BC,gCAAgC,EAChCC,4BAA4B,EAC5BC,uCAAuC,EAGvCC,kBAAkB,EAClBC,yBAAyB,EACzBC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,+BAA+B,QAC1B,iBAAiB;AACxB,SACEC,yBAAyB,EACzBC,sBAAsB,EACtBC,wBAAwB,EACxBC,uBAAuB,EACvBC,yBAAyB,QACpB,eAAe;AAEtB,OAAO,MAAMC,cAA6B;IACxCC,MAAM;IACNC,UAAU;QAAC1B;QAAIC;IAAc;IAC7BE;IACAwB,WAAW;QAACzB;KAAe;AAC7B,EAAE"}
+{"version":3,"sources":["../src/index.ts"],"sourcesContent":["import type {ShipfoxModule} from '@shipfox/node-module';\nimport type {AgentSecretsClient} from '#core/secrets-client.js';\nimport {db, migrationsPath} from '#db/index.js';\nimport {createAgentE2eRoutes} from '#presentation/e2eRoutes/index.js';\nimport {createAgentInterModulePresentation} from '#presentation/inter-module.js';\nimport {createAgentRoutes} from '#presentation/routes/index.js';\n\nexport {\n  type AgentConfigResolutionContext,\n  type AgentDefaultsResolver,\n  type AgentWorkspaceSettings,\n  buildModelProviderCatalog,\n  type ContextualAgentConfig,\n  catalogDefaultAgentResolver,\n  createCustomModelProviderConfig,\n  createWorkspaceAgentDefaultsResolver,\n  deleteModelProviderConfig,\n  InvalidAgentModelError,\n  InvalidCredentialFieldsError,\n  type ModelProviderConfig,\n  ModelProviderConfigNotFoundError,\n  ModelProviderValidationError,\n  ModelProviderValidationUnavailableError,\n  type ResolvedAgentConfig,\n  type ResolveRuntimeCredentialsParams,\n  resolveAgentConfig,\n  resolveRuntimeCredentials,\n  testAndSaveModelProviderConfig,\n  UnsupportedModelProviderError,\n  updateCustomModelProviderConfig,\n} from '#core/index.js';\nexport {\n  getAgentWorkspaceSettings,\n  getModelProviderConfig,\n  listModelProviderConfigs,\n  setDefaultModelProvider,\n  upsertModelProviderConfig,\n} from '#db/index.js';\n\nexport function createAgentModule(params: {secrets: AgentSecretsClient}): ShipfoxModule {\n  return {\n    name: 'agent',\n    database: {db, migrationsPath},\n    routes: createAgentRoutes(params.secrets),\n    e2eRoutes: [createAgentE2eRoutes(params.secrets)],\n    interModulePresentations: [createAgentInterModulePresentation(params)],\n  };\n}\n"],"names":["db","migrationsPath","createAgentE2eRoutes","createAgentInterModulePresentation","createAgentRoutes","buildModelProviderCatalog","catalogDefaultAgentResolver","createCustomModelProviderConfig","createWorkspaceAgentDefaultsResolver","deleteModelProviderConfig","InvalidAgentModelError","InvalidCredentialFieldsError","ModelProviderConfigNotFoundError","ModelProviderValidationError","ModelProviderValidationUnavailableError","resolveAgentConfig","resolveRuntimeCredentials","testAndSaveModelProviderConfig","UnsupportedModelProviderError","updateCustomModelProviderConfig","getAgentWorkspaceSettings","getModelProviderConfig","listModelProviderConfigs","setDefaultModelProvider","upsertModelProviderConfig","createAgentModule","params","name","database","routes","secrets","e2eRoutes","interModulePresentations"],"mappings":"AAEA,SAAQA,EAAE,EAAEC,cAAc,QAAO,eAAe;AAChD,SAAQC,oBAAoB,QAAO,mCAAmC;AACtE,SAAQC,kCAAkC,QAAO,gCAAgC;AACjF,SAAQC,iBAAiB,QAAO,gCAAgC;AAEhE,SAIEC,yBAAyB,EAEzBC,2BAA2B,EAC3BC,+BAA+B,EAC/BC,oCAAoC,EACpCC,yBAAyB,EACzBC,sBAAsB,EACtBC,4BAA4B,EAE5BC,gCAAgC,EAChCC,4BAA4B,EAC5BC,uCAAuC,EAGvCC,kBAAkB,EAClBC,yBAAyB,EACzBC,8BAA8B,EAC9BC,6BAA6B,EAC7BC,+BAA+B,QAC1B,iBAAiB;AACxB,SACEC,yBAAyB,EACzBC,sBAAsB,EACtBC,wBAAwB,EACxBC,uBAAuB,EACvBC,yBAAyB,QACpB,eAAe;AAEtB,OAAO,SAASC,kBAAkBC,MAAqC;IACrE,OAAO;QACLC,MAAM;QACNC,UAAU;YAAC5B;YAAIC;QAAc;QAC7B4B,QAAQzB,kBAAkBsB,OAAOI,OAAO;QACxCC,WAAW;YAAC7B,qBAAqBwB,OAAOI,OAAO;SAAE;QACjDE,0BAA0B;YAAC7B,mCAAmCuB;SAAQ;IACxE;AACF"}

package/dist/presentation/e2eRoutes/create-model-provider.d.ts

@@ -1,2 +1,3 @@
-export declare const createE2eModelProviderRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { AgentSecretsClient } from '#core/secrets-client.js';
+export declare function createE2eModelProviderRoute(secrets: AgentSecretsClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=create-model-provider.d.ts.map

package/dist/presentation/e2eRoutes/create-model-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-model-provider.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/create-model-provider.ts"],"names":[],"mappings":"AAoBA,eAAO,MAAM,2BAA2B,iDAwCtC,CAAC"}
+{"version":3,"file":"create-model-provider.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/create-model-provider.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,yBAAyB,CAAC;AAehE,wBAAgB,2BAA2B,CAAC,OAAO,EAAE,kBAAkB,mDA0CtE"}

package/dist/presentation/e2eRoutes/create-model-provider.js

@@ -1,5 +1,4 @@
 import { DEFAULT_AGENT_THINKING, getModelProviderEntry } from '@shipfox/api-agent-dto';
-import { setSecrets } from '@shipfox/api-secrets';
 import { ClientError, defineRoute } from '@shipfox/node-fastify';
 import { z } from 'zod';
 import { agentSystemNamespace } from '#core/credential-fingerprints.js';
@@ -15,52 +14,54 @@ const createE2eModelProviderBodySchema = z.object({
 const createE2eModelProviderResponseSchema = z.object({
     provider_id: z.literal('anthropic')
 });
-export const createE2eModelProviderRoute = defineRoute({
-    method: 'POST',
-    path: '/model-provider',
-    description: 'Create an Anthropic model provider config for E2E tests.',
-    schema: {
-        body: createE2eModelProviderBodySchema,
-        response: {
-            201: createE2eModelProviderResponseSchema
-        }
-    },
-    handler: async (request, reply)=>{
-        const entry = getModelProviderEntry(request.body.provider_id);
-        if (entry === undefined || entry.default_model === null) {
-            throw new ClientError('Unsupported E2E model provider', 'unsupported-model-provider', {
-                status: 400
-            });
-        }
-        const defaultModel = request.body.default_model ?? entry.default_model;
-        const supportedModels = listHarnessProviderModels('claude', request.body.provider_id);
-        if (!supportedModels.some((model)=>model.id === defaultModel)) {
-            throw new ClientError('Unsupported Anthropic default model', 'unsupported-model', {
-                status: 400,
-                details: {
-                    default_model: defaultModel
+export function createE2eModelProviderRoute(secrets) {
+    return defineRoute({
+        method: 'POST',
+        path: '/model-provider',
+        description: 'Create an Anthropic model provider config for E2E tests.',
+        schema: {
+            body: createE2eModelProviderBodySchema,
+            response: {
+                201: createE2eModelProviderResponseSchema
+            }
+        },
+        handler: async (request, reply)=>{
+            const entry = getModelProviderEntry(request.body.provider_id);
+            if (entry === undefined || entry.default_model === null) {
+                throw new ClientError('Unsupported E2E model provider', 'unsupported-model-provider', {
+                    status: 400
+                });
+            }
+            const defaultModel = request.body.default_model ?? entry.default_model;
+            const supportedModels = listHarnessProviderModels('claude', request.body.provider_id);
+            if (!supportedModels.some((model)=>model.id === defaultModel)) {
+                throw new ClientError('Unsupported Anthropic default model', 'unsupported-model', {
+                    status: 400,
+                    details: {
+                        default_model: defaultModel
+                    }
+                });
+            }
+            await secrets.setSecrets({
+                workspaceId: request.body.workspace_id,
+                namespace: agentSystemNamespace(request.body.provider_id),
+                values: {
+                    API_KEY: request.body.api_key
                 }
             });
+            await upsertModelProviderConfig({
+                workspaceId: request.body.workspace_id,
+                providerId: request.body.provider_id,
+                defaultModel,
+                defaultThinking: DEFAULT_AGENT_THINKING,
+                setAsDefault: request.body.set_as_default
+            });
+            reply.code(201);
+            return {
+                provider_id: request.body.provider_id
+            };
         }
-        await setSecrets({
-            workspaceId: request.body.workspace_id,
-            namespace: agentSystemNamespace(request.body.provider_id),
-            values: {
-                API_KEY: request.body.api_key
-            }
-        });
-        await upsertModelProviderConfig({
-            workspaceId: request.body.workspace_id,
-            providerId: request.body.provider_id,
-            defaultModel,
-            defaultThinking: DEFAULT_AGENT_THINKING,
-            setAsDefault: request.body.set_as_default
-        });
-        reply.code(201);
-        return {
-            provider_id: request.body.provider_id
-        };
-    }
-});
+    });
+}
 
 //# sourceMappingURL=create-model-provider.js.map

package/dist/presentation/e2eRoutes/create-model-provider.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/e2eRoutes/create-model-provider.ts"],"sourcesContent":["import {DEFAULT_AGENT_THINKING, getModelProviderEntry} from '@shipfox/api-agent-dto';\nimport {setSecrets} from '@shipfox/api-secrets';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {agentSystemNamespace} from '#core/credential-fingerprints.js';\nimport {listHarnessProviderModels} from '#core/harness/registry.js';\nimport {upsertModelProviderConfig} from '#db/index.js';\n\nconst createE2eModelProviderBodySchema = z.object({\n  workspace_id: z.string().uuid(),\n  provider_id: z.literal('anthropic'),\n  api_key: z.string().min(1),\n  default_model: z.string().min(1).optional(),\n  set_as_default: z.boolean().optional(),\n});\n\nconst createE2eModelProviderResponseSchema = z.object({\n  provider_id: z.literal('anthropic'),\n});\n\nexport const createE2eModelProviderRoute = defineRoute({\n  method: 'POST',\n  path: '/model-provider',\n  description: 'Create an Anthropic model provider config for E2E tests.',\n  schema: {\n    body: createE2eModelProviderBodySchema,\n    response: {201: createE2eModelProviderResponseSchema},\n  },\n  handler: async (request, reply) => {\n    const entry = getModelProviderEntry(request.body.provider_id);\n    if (entry === undefined || entry.default_model === null) {\n      throw new ClientError('Unsupported E2E model provider', 'unsupported-model-provider', {\n        status: 400,\n      });\n    }\n    const defaultModel = request.body.default_model ?? entry.default_model;\n    const supportedModels = listHarnessProviderModels('claude', request.body.provider_id);\n    if (!supportedModels.some((model) => model.id === defaultModel)) {\n      throw new ClientError('Unsupported Anthropic default model', 'unsupported-model', {\n        status: 400,\n        details: {default_model: defaultModel},\n      });\n    }\n\n    await setSecrets({\n      workspaceId: request.body.workspace_id,\n      namespace: agentSystemNamespace(request.body.provider_id),\n      values: {API_KEY: request.body.api_key},\n    });\n    await upsertModelProviderConfig({\n      workspaceId: request.body.workspace_id,\n      providerId: request.body.provider_id,\n      defaultModel,\n      defaultThinking: DEFAULT_AGENT_THINKING,\n      setAsDefault: request.body.set_as_default,\n    });\n\n    reply.code(201);\n    return {provider_id: request.body.provider_id};\n  },\n});\n"],"names":["DEFAULT_AGENT_THINKING","getModelProviderEntry","setSecrets","ClientError","defineRoute","z","agentSystemNamespace","listHarnessProviderModels","upsertModelProviderConfig","createE2eModelProviderBodySchema","object","workspace_id","string","uuid","provider_id","literal","api_key","min","default_model","optional","set_as_default","boolean","createE2eModelProviderResponseSchema","createE2eModelProviderRoute","method","path","description","schema","body","response","handler","request","reply","entry","undefined","status","defaultModel","supportedModels","some","model","id","details","workspaceId","namespace","values","API_KEY","providerId","defaultThinking","setAsDefault","code"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,qBAAqB,QAAO,yBAAyB;AACrF,SAAQC,UAAU,QAAO,uBAAuB;AAChD,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,oBAAoB,QAAO,mCAAmC;AACtE,SAAQC,yBAAyB,QAAO,4BAA4B;AACpE,SAAQC,yBAAyB,QAAO,eAAe;AAEvD,MAAMC,mCAAmCJ,EAAEK,MAAM,CAAC;IAChDC,cAAcN,EAAEO,MAAM,GAAGC,IAAI;IAC7BC,aAAaT,EAAEU,OAAO,CAAC;IACvBC,SAASX,EAAEO,MAAM,GAAGK,GAAG,CAAC;IACxBC,eAAeb,EAAEO,MAAM,GAAGK,GAAG,CAAC,GAAGE,QAAQ;IACzCC,gBAAgBf,EAAEgB,OAAO,GAAGF,QAAQ;AACtC;AAEA,MAAMG,uCAAuCjB,EAAEK,MAAM,CAAC;IACpDI,aAAaT,EAAEU,OAAO,CAAC;AACzB;AAEA,OAAO,MAAMQ,8BAA8BnB,YAAY;IACrDoB,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,MAAMnB;QACNoB,UAAU;YAAC,KAAKP;QAAoC;IACtD;IACAQ,SAAS,OAAOC,SAASC;QACvB,MAAMC,QAAQhC,sBAAsB8B,QAAQH,IAAI,CAACd,WAAW;QAC5D,IAAImB,UAAUC,aAAaD,MAAMf,aAAa,KAAK,MAAM;YACvD,MAAM,IAAIf,YAAY,kCAAkC,8BAA8B;gBACpFgC,QAAQ;YACV;QACF;QACA,MAAMC,eAAeL,QAAQH,IAAI,CAACV,aAAa,IAAIe,MAAMf,aAAa;QACtE,MAAMmB,kBAAkB9B,0BAA0B,UAAUwB,QAAQH,IAAI,CAACd,WAAW;QACpF,IAAI,CAACuB,gBAAgBC,IAAI,CAAC,CAACC,QAAUA,MAAMC,EAAE,KAAKJ,eAAe;YAC/D,MAAM,IAAIjC,YAAY,uCAAuC,qBAAqB;gBAChFgC,QAAQ;gBACRM,SAAS;oBAACvB,eAAekB;gBAAY;YACvC;QACF;QAEA,MAAMlC,WAAW;YACfwC,aAAaX,QAAQH,IAAI,CAACjB,YAAY;YACtCgC,WAAWrC,qBAAqByB,QAAQH,IAAI,CAACd,WAAW;YACxD8B,QAAQ;gBAACC,SAASd,QAAQH,IAAI,CAACZ,OAAO;YAAA;QACxC;QACA,MAAMR,0BAA0B;YAC9BkC,aAAaX,QAAQH,IAAI,CAACjB,YAAY;YACtCmC,YAAYf,QAAQH,IAAI,CAACd,WAAW;YACpCsB;YACAW,iBAAiB/C;YACjBgD,cAAcjB,QAAQH,IAAI,CAACR,cAAc;QAC3C;QAEAY,MAAMiB,IAAI,CAAC;QACX,OAAO;YAACnC,aAAaiB,QAAQH,IAAI,CAACd,WAAW;QAAA;IAC/C;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/e2eRoutes/create-model-provider.ts"],"sourcesContent":["import {DEFAULT_AGENT_THINKING, getModelProviderEntry} from '@shipfox/api-agent-dto';\nimport {ClientError, defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {agentSystemNamespace} from '#core/credential-fingerprints.js';\nimport {listHarnessProviderModels} from '#core/harness/registry.js';\nimport type {AgentSecretsClient} from '#core/secrets-client.js';\nimport {upsertModelProviderConfig} from '#db/index.js';\n\nconst createE2eModelProviderBodySchema = z.object({\n  workspace_id: z.string().uuid(),\n  provider_id: z.literal('anthropic'),\n  api_key: z.string().min(1),\n  default_model: z.string().min(1).optional(),\n  set_as_default: z.boolean().optional(),\n});\n\nconst createE2eModelProviderResponseSchema = z.object({\n  provider_id: z.literal('anthropic'),\n});\n\nexport function createE2eModelProviderRoute(secrets: AgentSecretsClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/model-provider',\n    description: 'Create an Anthropic model provider config for E2E tests.',\n    schema: {\n      body: createE2eModelProviderBodySchema,\n      response: {201: createE2eModelProviderResponseSchema},\n    },\n    handler: async (request, reply) => {\n      const entry = getModelProviderEntry(request.body.provider_id);\n      if (entry === undefined || entry.default_model === null) {\n        throw new ClientError('Unsupported E2E model provider', 'unsupported-model-provider', {\n          status: 400,\n        });\n      }\n      const defaultModel = request.body.default_model ?? entry.default_model;\n      const supportedModels = listHarnessProviderModels('claude', request.body.provider_id);\n      if (!supportedModels.some((model) => model.id === defaultModel)) {\n        throw new ClientError('Unsupported Anthropic default model', 'unsupported-model', {\n          status: 400,\n          details: {default_model: defaultModel},\n        });\n      }\n\n      await secrets.setSecrets({\n        workspaceId: request.body.workspace_id,\n        namespace: agentSystemNamespace(request.body.provider_id),\n        values: {API_KEY: request.body.api_key},\n      });\n      await upsertModelProviderConfig({\n        workspaceId: request.body.workspace_id,\n        providerId: request.body.provider_id,\n        defaultModel,\n        defaultThinking: DEFAULT_AGENT_THINKING,\n        setAsDefault: request.body.set_as_default,\n      });\n\n      reply.code(201);\n      return {provider_id: request.body.provider_id};\n    },\n  });\n}\n"],"names":["DEFAULT_AGENT_THINKING","getModelProviderEntry","ClientError","defineRoute","z","agentSystemNamespace","listHarnessProviderModels","upsertModelProviderConfig","createE2eModelProviderBodySchema","object","workspace_id","string","uuid","provider_id","literal","api_key","min","default_model","optional","set_as_default","boolean","createE2eModelProviderResponseSchema","createE2eModelProviderRoute","secrets","method","path","description","schema","body","response","handler","request","reply","entry","undefined","status","defaultModel","supportedModels","some","model","id","details","setSecrets","workspaceId","namespace","values","API_KEY","providerId","defaultThinking","setAsDefault","code"],"mappings":"AAAA,SAAQA,sBAAsB,EAAEC,qBAAqB,QAAO,yBAAyB;AACrF,SAAQC,WAAW,EAAEC,WAAW,QAAO,wBAAwB;AAC/D,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,oBAAoB,QAAO,mCAAmC;AACtE,SAAQC,yBAAyB,QAAO,4BAA4B;AAEpE,SAAQC,yBAAyB,QAAO,eAAe;AAEvD,MAAMC,mCAAmCJ,EAAEK,MAAM,CAAC;IAChDC,cAAcN,EAAEO,MAAM,GAAGC,IAAI;IAC7BC,aAAaT,EAAEU,OAAO,CAAC;IACvBC,SAASX,EAAEO,MAAM,GAAGK,GAAG,CAAC;IACxBC,eAAeb,EAAEO,MAAM,GAAGK,GAAG,CAAC,GAAGE,QAAQ;IACzCC,gBAAgBf,EAAEgB,OAAO,GAAGF,QAAQ;AACtC;AAEA,MAAMG,uCAAuCjB,EAAEK,MAAM,CAAC;IACpDI,aAAaT,EAAEU,OAAO,CAAC;AACzB;AAEA,OAAO,SAASQ,4BAA4BC,OAA2B;IACrE,OAAOpB,YAAY;QACjBqB,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,MAAMpB;YACNqB,UAAU;gBAAC,KAAKR;YAAoC;QACtD;QACAS,SAAS,OAAOC,SAASC;YACvB,MAAMC,QAAQhC,sBAAsB8B,QAAQH,IAAI,CAACf,WAAW;YAC5D,IAAIoB,UAAUC,aAAaD,MAAMhB,aAAa,KAAK,MAAM;gBACvD,MAAM,IAAIf,YAAY,kCAAkC,8BAA8B;oBACpFiC,QAAQ;gBACV;YACF;YACA,MAAMC,eAAeL,QAAQH,IAAI,CAACX,aAAa,IAAIgB,MAAMhB,aAAa;YACtE,MAAMoB,kBAAkB/B,0BAA0B,UAAUyB,QAAQH,IAAI,CAACf,WAAW;YACpF,IAAI,CAACwB,gBAAgBC,IAAI,CAAC,CAACC,QAAUA,MAAMC,EAAE,KAAKJ,eAAe;gBAC/D,MAAM,IAAIlC,YAAY,uCAAuC,qBAAqB;oBAChFiC,QAAQ;oBACRM,SAAS;wBAACxB,eAAemB;oBAAY;gBACvC;YACF;YAEA,MAAMb,QAAQmB,UAAU,CAAC;gBACvBC,aAAaZ,QAAQH,IAAI,CAAClB,YAAY;gBACtCkC,WAAWvC,qBAAqB0B,QAAQH,IAAI,CAACf,WAAW;gBACxDgC,QAAQ;oBAACC,SAASf,QAAQH,IAAI,CAACb,OAAO;gBAAA;YACxC;YACA,MAAMR,0BAA0B;gBAC9BoC,aAAaZ,QAAQH,IAAI,CAAClB,YAAY;gBACtCqC,YAAYhB,QAAQH,IAAI,CAACf,WAAW;gBACpCuB;gBACAY,iBAAiBhD;gBACjBiD,cAAclB,QAAQH,IAAI,CAACT,cAAc;YAC3C;YAEAa,MAAMkB,IAAI,CAAC;YACX,OAAO;gBAACrC,aAAakB,QAAQH,IAAI,CAACf,WAAW;YAAA;QAC/C;IACF;AACF"}

package/dist/presentation/e2eRoutes/index.d.ts

@@ -1,3 +1,5 @@
 import type { RouteGroup } from '@shipfox/node-fastify';
+import type { AgentSecretsClient } from '#core/secrets-client.js';
+export declare function createAgentE2eRoutes(secrets: AgentSecretsClient): RouteGroup;
 export declare const agentE2eRoutes: RouteGroup;
 //# sourceMappingURL=index.d.ts.map

package/dist/presentation/e2eRoutes/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AAGtD,eAAO,MAAM,cAAc,EAAE,UAG5B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/presentation/e2eRoutes/index.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,uBAAuB,CAAC;AACtD,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,yBAAyB,CAAC;AAGhE,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,kBAAkB,GAAG,UAAU,CAE5E;AAED,eAAO,MAAM,cAAc,YAAmE,CAAC"}

package/dist/presentation/e2eRoutes/index.js

@@ -1,9 +1,12 @@
 import { createE2eModelProviderRoute } from './create-model-provider.js';
-export const agentE2eRoutes = {
-    prefix: '/agent',
-    routes: [
-        createE2eModelProviderRoute
-    ]
-};
+export function createAgentE2eRoutes(secrets) {
+    return {
+        prefix: '/agent',
+        routes: [
+            createE2eModelProviderRoute(secrets)
+        ]
+    };
+}
+export const agentE2eRoutes = createAgentE2eRoutes(undefined);
 
 //# sourceMappingURL=index.js.map

package/dist/presentation/e2eRoutes/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/e2eRoutes/index.ts"],"sourcesContent":["import type {RouteGroup} from '@shipfox/node-fastify';\nimport {createE2eModelProviderRoute} from './create-model-provider.js';\n\nexport const agentE2eRoutes: RouteGroup = {\n  prefix: '/agent',\n  routes: [createE2eModelProviderRoute],\n};\n"],"names":["createE2eModelProviderRoute","agentE2eRoutes","prefix","routes"],"mappings":"AACA,SAAQA,2BAA2B,QAAO,6BAA6B;AAEvE,OAAO,MAAMC,iBAA6B;IACxCC,QAAQ;IACRC,QAAQ;QAACH;KAA4B;AACvC,EAAE"}
+{"version":3,"sources":["../../../src/presentation/e2eRoutes/index.ts"],"sourcesContent":["import type {RouteGroup} from '@shipfox/node-fastify';\nimport type {AgentSecretsClient} from '#core/secrets-client.js';\nimport {createE2eModelProviderRoute} from './create-model-provider.js';\n\nexport function createAgentE2eRoutes(secrets: AgentSecretsClient): RouteGroup {\n  return {prefix: '/agent', routes: [createE2eModelProviderRoute(secrets)]};\n}\n\nexport const agentE2eRoutes = createAgentE2eRoutes(undefined as unknown as AgentSecretsClient);\n"],"names":["createE2eModelProviderRoute","createAgentE2eRoutes","secrets","prefix","routes","agentE2eRoutes","undefined"],"mappings":"AAEA,SAAQA,2BAA2B,QAAO,6BAA6B;AAEvE,OAAO,SAASC,qBAAqBC,OAA2B;IAC9D,OAAO;QAACC,QAAQ;QAAUC,QAAQ;YAACJ,4BAA4BE;SAAS;IAAA;AAC1E;AAEA,OAAO,MAAMG,iBAAiBJ,qBAAqBK,WAA4C"}

package/dist/presentation/index.d.ts

@@ -1,2 +1,2 @@
-export { agentRoutes as routes } from './routes/index.js';
+export { agentRoutes as routes, createAgentRoutes } from './routes/index.js';
 //# sourceMappingURL=index.d.ts.map

package/dist/presentation/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/presentation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,IAAI,MAAM,EAAC,MAAM,mBAAmB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/presentation/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,IAAI,MAAM,EAAE,iBAAiB,EAAC,MAAM,mBAAmB,CAAC"}

package/dist/presentation/index.js

@@ -1,3 +1,3 @@
-export { agentRoutes as routes } from './routes/index.js';
+export { agentRoutes as routes, createAgentRoutes } from './routes/index.js';
 
 //# sourceMappingURL=index.js.map

package/dist/presentation/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/presentation/index.ts"],"sourcesContent":["export {agentRoutes as routes} from './routes/index.js';\n"],"names":["agentRoutes","routes"],"mappings":"AAAA,SAAQA,eAAeC,MAAM,QAAO,oBAAoB"}
+{"version":3,"sources":["../../src/presentation/index.ts"],"sourcesContent":["export {agentRoutes as routes, createAgentRoutes} from './routes/index.js';\n"],"names":["agentRoutes","routes","createAgentRoutes"],"mappings":"AAAA,SAAQA,eAAeC,MAAM,EAAEC,iBAAiB,QAAO,oBAAoB"}

package/dist/presentation/inter-module.d.ts

@@ -0,0 +1,7 @@
+import { agentInterModuleContract } from '@shipfox/api-agent-dto/inter-module';
+import { type InterModulePresentation } from '@shipfox/inter-module';
+import type { AgentSecretsClient } from '#core/secrets-client.js';
+export declare function createAgentInterModulePresentation(params: {
+    secrets: AgentSecretsClient;
+}): InterModulePresentation<typeof agentInterModuleContract>;
+//# sourceMappingURL=inter-module.d.ts.map

package/dist/presentation/inter-module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"inter-module.d.ts","sourceRoot":"","sources":["../../src/presentation/inter-module.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,wBAAwB,EAAC,MAAM,qCAAqC,CAAC;AAE7E,OAAO,EAGL,KAAK,uBAAuB,EAE7B,MAAM,uBAAuB,CAAC;AAU/B,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,yBAAyB,CAAC;AAGhE,wBAAgB,kCAAkC,CAAC,MAAM,EAAE;IACzD,OAAO,EAAE,kBAAkB,CAAC;CAC7B,GAAG,uBAAuB,CAAC,OAAO,wBAAwB,CAAC,CAqB3D"}

package/dist/presentation/inter-module.js

@@ -0,0 +1,45 @@
+import { agentInterModuleContract } from '@shipfox/api-agent-dto/inter-module';
+import { secretsInterModuleContract } from '@shipfox/api-secrets-dto/inter-module';
+import { createInterModuleKnownError, defineInterModulePresentation, isInterModuleKnownError } from '@shipfox/inter-module';
+import { InvalidAgentModelError, ModelProviderConfigNotFoundError, UnsupportedHarnessProviderError, UnsupportedHarnessThinkingError, UnsupportedModelProviderError } from '#core/errors.js';
+import { resolveAgentConfig } from '#core/resolve-agent-config.js';
+import { resolveRuntimeCredentials } from '#core/resolve-runtime-credentials.js';
+import { createWorkspaceAgentDefaultsResolver } from '#core/workspace-agent-defaults-resolver.js';
+export function createAgentInterModulePresentation(params) {
+    return defineInterModulePresentation(agentInterModuleContract, {
+        resolveAgentConfig: async ({ workspaceId, config })=>{
+            try {
+                const resolve = workspaceId === null ? resolveAgentConfig : await createWorkspaceAgentDefaultsResolver(workspaceId);
+                return await resolve(config);
+            } catch (error) {
+                throw toResolveAgentConfigKnownError(error);
+            }
+        },
+        resolveRuntimeCredentials: async (input)=>{
+            try {
+                return await resolveRuntimeCredentials(input, {
+                    secrets: params.secrets
+                });
+            } catch (error) {
+                throw toResolveRuntimeCredentialsKnownError(error);
+            }
+        }
+    });
+}
+function toResolveAgentConfigKnownError(error) {
+    if (error instanceof InvalidAgentModelError || error instanceof UnsupportedHarnessProviderError || error instanceof UnsupportedHarnessThinkingError || error instanceof UnsupportedModelProviderError) {
+        return createInterModuleKnownError(agentInterModuleContract.methods.resolveAgentConfig, 'agent-config-invalid', {});
+    }
+    return error;
+}
+function toResolveRuntimeCredentialsKnownError(error) {
+    if (error instanceof ModelProviderConfigNotFoundError) {
+        return createInterModuleKnownError(agentInterModuleContract.methods.resolveRuntimeCredentials, 'model-provider-not-configured', {});
+    }
+    if (isInterModuleKnownError(secretsInterModuleContract.methods.getSecretsByNamespace, error)) {
+        return createInterModuleKnownError(agentInterModuleContract.methods.resolveRuntimeCredentials, 'model-provider-credentials-invalid', {});
+    }
+    return error;
+}
+
+//# sourceMappingURL=inter-module.js.map

package/dist/presentation/inter-module.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../src/presentation/inter-module.ts"],"sourcesContent":["import {agentInterModuleContract} from '@shipfox/api-agent-dto/inter-module';\nimport {secretsInterModuleContract} from '@shipfox/api-secrets-dto/inter-module';\nimport {\n  createInterModuleKnownError,\n  defineInterModulePresentation,\n  type InterModulePresentation,\n  isInterModuleKnownError,\n} from '@shipfox/inter-module';\nimport {\n  InvalidAgentModelError,\n  ModelProviderConfigNotFoundError,\n  UnsupportedHarnessProviderError,\n  UnsupportedHarnessThinkingError,\n  UnsupportedModelProviderError,\n} from '#core/errors.js';\nimport {resolveAgentConfig} from '#core/resolve-agent-config.js';\nimport {resolveRuntimeCredentials} from '#core/resolve-runtime-credentials.js';\nimport type {AgentSecretsClient} from '#core/secrets-client.js';\nimport {createWorkspaceAgentDefaultsResolver} from '#core/workspace-agent-defaults-resolver.js';\n\nexport function createAgentInterModulePresentation(params: {\n  secrets: AgentSecretsClient;\n}): InterModulePresentation<typeof agentInterModuleContract> {\n  return defineInterModulePresentation(agentInterModuleContract, {\n    resolveAgentConfig: async ({workspaceId, config}) => {\n      try {\n        const resolve =\n          workspaceId === null\n            ? resolveAgentConfig\n            : await createWorkspaceAgentDefaultsResolver(workspaceId);\n        return await resolve(config);\n      } catch (error) {\n        throw toResolveAgentConfigKnownError(error);\n      }\n    },\n    resolveRuntimeCredentials: async (input) => {\n      try {\n        return await resolveRuntimeCredentials(input, {secrets: params.secrets});\n      } catch (error) {\n        throw toResolveRuntimeCredentialsKnownError(error);\n      }\n    },\n  });\n}\n\nfunction toResolveAgentConfigKnownError(error: unknown): unknown {\n  if (\n    error instanceof InvalidAgentModelError ||\n    error instanceof UnsupportedHarnessProviderError ||\n    error instanceof UnsupportedHarnessThinkingError ||\n    error instanceof UnsupportedModelProviderError\n  ) {\n    return createInterModuleKnownError(\n      agentInterModuleContract.methods.resolveAgentConfig,\n      'agent-config-invalid',\n      {},\n    );\n  }\n  return error;\n}\n\nfunction toResolveRuntimeCredentialsKnownError(error: unknown): unknown {\n  if (error instanceof ModelProviderConfigNotFoundError) {\n    return createInterModuleKnownError(\n      agentInterModuleContract.methods.resolveRuntimeCredentials,\n      'model-provider-not-configured',\n      {},\n    );\n  }\n  if (isInterModuleKnownError(secretsInterModuleContract.methods.getSecretsByNamespace, error)) {\n    return createInterModuleKnownError(\n      agentInterModuleContract.methods.resolveRuntimeCredentials,\n      'model-provider-credentials-invalid',\n      {},\n    );\n  }\n  return error;\n}\n"],"names":["agentInterModuleContract","secretsInterModuleContract","createInterModuleKnownError","defineInterModulePresentation","isInterModuleKnownError","InvalidAgentModelError","ModelProviderConfigNotFoundError","UnsupportedHarnessProviderError","UnsupportedHarnessThinkingError","UnsupportedModelProviderError","resolveAgentConfig","resolveRuntimeCredentials","createWorkspaceAgentDefaultsResolver","createAgentInterModulePresentation","params","workspaceId","config","resolve","error","toResolveAgentConfigKnownError","input","secrets","toResolveRuntimeCredentialsKnownError","methods","getSecretsByNamespace"],"mappings":"AAAA,SAAQA,wBAAwB,QAAO,sCAAsC;AAC7E,SAAQC,0BAA0B,QAAO,wCAAwC;AACjF,SACEC,2BAA2B,EAC3BC,6BAA6B,EAE7BC,uBAAuB,QAClB,wBAAwB;AAC/B,SACEC,sBAAsB,EACtBC,gCAAgC,EAChCC,+BAA+B,EAC/BC,+BAA+B,EAC/BC,6BAA6B,QACxB,kBAAkB;AACzB,SAAQC,kBAAkB,QAAO,gCAAgC;AACjE,SAAQC,yBAAyB,QAAO,uCAAuC;AAE/E,SAAQC,oCAAoC,QAAO,6CAA6C;AAEhG,OAAO,SAASC,mCAAmCC,MAElD;IACC,OAAOX,8BAA8BH,0BAA0B;QAC7DU,oBAAoB,OAAO,EAACK,WAAW,EAAEC,MAAM,EAAC;YAC9C,IAAI;gBACF,MAAMC,UACJF,gBAAgB,OACZL,qBACA,MAAME,qCAAqCG;gBACjD,OAAO,MAAME,QAAQD;YACvB,EAAE,OAAOE,OAAO;gBACd,MAAMC,+BAA+BD;YACvC;QACF;QACAP,2BAA2B,OAAOS;YAChC,IAAI;gBACF,OAAO,MAAMT,0BAA0BS,OAAO;oBAACC,SAASP,OAAOO,OAAO;gBAAA;YACxE,EAAE,OAAOH,OAAO;gBACd,MAAMI,sCAAsCJ;YAC9C;QACF;IACF;AACF;AAEA,SAASC,+BAA+BD,KAAc;IACpD,IACEA,iBAAiBb,0BACjBa,iBAAiBX,mCACjBW,iBAAiBV,mCACjBU,iBAAiBT,+BACjB;QACA,OAAOP,4BACLF,yBAAyBuB,OAAO,CAACb,kBAAkB,EACnD,wBACA,CAAC;IAEL;IACA,OAAOQ;AACT;AAEA,SAASI,sCAAsCJ,KAAc;IAC3D,IAAIA,iBAAiBZ,kCAAkC;QACrD,OAAOJ,4BACLF,yBAAyBuB,OAAO,CAACZ,yBAAyB,EAC1D,iCACA,CAAC;IAEL;IACA,IAAIP,wBAAwBH,2BAA2BsB,OAAO,CAACC,qBAAqB,EAAEN,QAAQ;QAC5F,OAAOhB,4BACLF,yBAAyBuB,OAAO,CAACZ,yBAAyB,EAC1D,sCACA,CAAC;IAEL;IACA,OAAOO;AACT"}

package/dist/presentation/routes/create-custom-model-provider.d.ts

@@ -1,2 +1,3 @@
-export declare const createCustomModelProviderRoute: import("@shipfox/node-fastify").RouteDefinition;
+import type { AgentSecretsClient } from '#core/secrets-client.js';
+export declare function createCustomModelProviderRoute(secrets: AgentSecretsClient): import("@shipfox/node-fastify").RouteDefinition;
 //# sourceMappingURL=create-custom-model-provider.d.ts.map

package/dist/presentation/routes/create-custom-model-provider.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"create-custom-model-provider.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/create-custom-model-provider.ts"],"names":[],"mappings":"AAWA,eAAO,MAAM,8BAA8B,iDAiCzC,CAAC"}
+{"version":3,"file":"create-custom-model-provider.d.ts","sourceRoot":"","sources":["../../../src/presentation/routes/create-custom-model-provider.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAC,kBAAkB,EAAC,MAAM,yBAAyB,CAAC;AAIhE,wBAAgB,8BAA8B,CAAC,OAAO,EAAE,kBAAkB,mDAsCzE"}

package/dist/presentation/routes/create-custom-model-provider.js

@@ -5,41 +5,45 @@ import { z } from 'zod';
 import { createCustomModelProviderConfig } from '#core/index.js';
 import { toCustomModelProviderConfigDto } from '#presentation/dto/index.js';
 import { translateModelProviderRouteError } from './errors.js';
-export const createCustomModelProviderRoute = defineRoute({
-    method: 'POST',
-    path: '/custom-model-providers',
-    description: 'Create a custom model provider configuration for a workspace',
-    schema: {
-        params: z.object({
-            workspaceId: z.string().uuid()
-        }),
-        body: createCustomModelProviderBodySchema,
-        response: {
-            200: customModelProviderConfigDtoSchema
+export function createCustomModelProviderRoute(secrets) {
+    return defineRoute({
+        method: 'POST',
+        path: '/custom-model-providers',
+        description: 'Create a custom model provider configuration for a workspace',
+        schema: {
+            params: z.object({
+                workspaceId: z.string().uuid()
+            }),
+            body: createCustomModelProviderBodySchema,
+            response: {
+                200: customModelProviderConfigDtoSchema
+            }
+        },
+        errorHandler: translateModelProviderRouteError,
+        handler: async (request, reply)=>{
+            const { workspaceId } = request.params;
+            const abortController = new AbortController();
+            let responseFinished = false;
+            reply.raw.on('finish', ()=>{
+                responseFinished = true;
+            });
+            reply.raw.on('close', ()=>{
+                if (!responseFinished) abortController.abort();
+            });
+            requireWorkspaceAccess({
+                request,
+                workspaceId
+            });
+            const config = await createCustomModelProviderConfig({
+                workspaceId,
+                body: request.body,
+                signal: abortController.signal
+            }, {
+                secrets
+            });
+            return toCustomModelProviderConfigDto(config);
         }
-    },
-    errorHandler: translateModelProviderRouteError,
-    handler: async (request, reply)=>{
-        const { workspaceId } = request.params;
-        const abortController = new AbortController();
-        let responseFinished = false;
-        reply.raw.on('finish', ()=>{
-            responseFinished = true;
-        });
-        reply.raw.on('close', ()=>{
-            if (!responseFinished) abortController.abort();
-        });
-        requireWorkspaceAccess({
-            request,
-            workspaceId
-        });
-        const config = await createCustomModelProviderConfig({
-            workspaceId,
-            body: request.body,
-            signal: abortController.signal
-        });
-        return toCustomModelProviderConfigDto(config);
-    }
-});
+    });
+}
 
 //# sourceMappingURL=create-custom-model-provider.js.map

package/dist/presentation/routes/create-custom-model-provider.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../../src/presentation/routes/create-custom-model-provider.ts"],"sourcesContent":["import {\n  createCustomModelProviderBodySchema,\n  customModelProviderConfigDtoSchema,\n} from '@shipfox/api-agent-dto';\nimport {requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {createCustomModelProviderConfig} from '#core/index.js';\nimport {toCustomModelProviderConfigDto} from '#presentation/dto/index.js';\nimport {translateModelProviderRouteError} from './errors.js';\n\nexport const createCustomModelProviderRoute = defineRoute({\n  method: 'POST',\n  path: '/custom-model-providers',\n  description: 'Create a custom model provider configuration for a workspace',\n  schema: {\n    params: z.object({workspaceId: z.string().uuid()}),\n    body: createCustomModelProviderBodySchema,\n    response: {\n      200: customModelProviderConfigDtoSchema,\n    },\n  },\n  errorHandler: translateModelProviderRouteError,\n  handler: async (request, reply) => {\n    const {workspaceId} = request.params;\n    const abortController = new AbortController();\n    let responseFinished = false;\n    reply.raw.on('finish', () => {\n      responseFinished = true;\n    });\n    reply.raw.on('close', () => {\n      if (!responseFinished) abortController.abort();\n    });\n\n    requireWorkspaceAccess({request, workspaceId});\n\n    const config = await createCustomModelProviderConfig({\n      workspaceId,\n      body: request.body,\n      signal: abortController.signal,\n    });\n\n    return toCustomModelProviderConfigDto(config);\n  },\n});\n"],"names":["createCustomModelProviderBodySchema","customModelProviderConfigDtoSchema","requireWorkspaceAccess","defineRoute","z","createCustomModelProviderConfig","toCustomModelProviderConfigDto","translateModelProviderRouteError","createCustomModelProviderRoute","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","reply","abortController","AbortController","responseFinished","raw","on","abort","config","signal"],"mappings":"AAAA,SACEA,mCAAmC,EACnCC,kCAAkC,QAC7B,yBAAyB;AAChC,SAAQC,sBAAsB,QAAO,4BAA4B;AACjE,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,+BAA+B,QAAO,iBAAiB;AAC/D,SAAQC,8BAA8B,QAAO,6BAA6B;AAC1E,SAAQC,gCAAgC,QAAO,cAAc;AAE7D,OAAO,MAAMC,iCAAiCL,YAAY;IACxDM,QAAQ;IACRC,MAAM;IACNC,aAAa;IACbC,QAAQ;QACNC,QAAQT,EAAEU,MAAM,CAAC;YAACC,aAAaX,EAAEY,MAAM,GAAGC,IAAI;QAAE;QAChDC,MAAMlB;QACNmB,UAAU;YACR,KAAKlB;QACP;IACF;IACAmB,cAAcb;IACdc,SAAS,OAAOC,SAASC;QACvB,MAAM,EAACR,WAAW,EAAC,GAAGO,QAAQT,MAAM;QACpC,MAAMW,kBAAkB,IAAIC;QAC5B,IAAIC,mBAAmB;QACvBH,MAAMI,GAAG,CAACC,EAAE,CAAC,UAAU;YACrBF,mBAAmB;QACrB;QACAH,MAAMI,GAAG,CAACC,EAAE,CAAC,SAAS;YACpB,IAAI,CAACF,kBAAkBF,gBAAgBK,KAAK;QAC9C;QAEA3B,uBAAuB;YAACoB;YAASP;QAAW;QAE5C,MAAMe,SAAS,MAAMzB,gCAAgC;YACnDU;YACAG,MAAMI,QAAQJ,IAAI;YAClBa,QAAQP,gBAAgBO,MAAM;QAChC;QAEA,OAAOzB,+BAA+BwB;IACxC;AACF,GAAG"}
+{"version":3,"sources":["../../../src/presentation/routes/create-custom-model-provider.ts"],"sourcesContent":["import {\n  createCustomModelProviderBodySchema,\n  customModelProviderConfigDtoSchema,\n} from '@shipfox/api-agent-dto';\nimport {requireWorkspaceAccess} from '@shipfox/api-auth-context';\nimport {defineRoute} from '@shipfox/node-fastify';\nimport {z} from 'zod';\nimport {createCustomModelProviderConfig} from '#core/index.js';\nimport type {AgentSecretsClient} from '#core/secrets-client.js';\nimport {toCustomModelProviderConfigDto} from '#presentation/dto/index.js';\nimport {translateModelProviderRouteError} from './errors.js';\n\nexport function createCustomModelProviderRoute(secrets: AgentSecretsClient) {\n  return defineRoute({\n    method: 'POST',\n    path: '/custom-model-providers',\n    description: 'Create a custom model provider configuration for a workspace',\n    schema: {\n      params: z.object({workspaceId: z.string().uuid()}),\n      body: createCustomModelProviderBodySchema,\n      response: {\n        200: customModelProviderConfigDtoSchema,\n      },\n    },\n    errorHandler: translateModelProviderRouteError,\n    handler: async (request, reply) => {\n      const {workspaceId} = request.params;\n      const abortController = new AbortController();\n      let responseFinished = false;\n      reply.raw.on('finish', () => {\n        responseFinished = true;\n      });\n      reply.raw.on('close', () => {\n        if (!responseFinished) abortController.abort();\n      });\n\n      requireWorkspaceAccess({request, workspaceId});\n\n      const config = await createCustomModelProviderConfig(\n        {\n          workspaceId,\n          body: request.body,\n          signal: abortController.signal,\n        },\n        {secrets},\n      );\n\n      return toCustomModelProviderConfigDto(config);\n    },\n  });\n}\n"],"names":["createCustomModelProviderBodySchema","customModelProviderConfigDtoSchema","requireWorkspaceAccess","defineRoute","z","createCustomModelProviderConfig","toCustomModelProviderConfigDto","translateModelProviderRouteError","createCustomModelProviderRoute","secrets","method","path","description","schema","params","object","workspaceId","string","uuid","body","response","errorHandler","handler","request","reply","abortController","AbortController","responseFinished","raw","on","abort","config","signal"],"mappings":"AAAA,SACEA,mCAAmC,EACnCC,kCAAkC,QAC7B,yBAAyB;AAChC,SAAQC,sBAAsB,QAAO,4BAA4B;AACjE,SAAQC,WAAW,QAAO,wBAAwB;AAClD,SAAQC,CAAC,QAAO,MAAM;AACtB,SAAQC,+BAA+B,QAAO,iBAAiB;AAE/D,SAAQC,8BAA8B,QAAO,6BAA6B;AAC1E,SAAQC,gCAAgC,QAAO,cAAc;AAE7D,OAAO,SAASC,+BAA+BC,OAA2B;IACxE,OAAON,YAAY;QACjBO,QAAQ;QACRC,MAAM;QACNC,aAAa;QACbC,QAAQ;YACNC,QAAQV,EAAEW,MAAM,CAAC;gBAACC,aAAaZ,EAAEa,MAAM,GAAGC,IAAI;YAAE;YAChDC,MAAMnB;YACNoB,UAAU;gBACR,KAAKnB;YACP;QACF;QACAoB,cAAcd;QACde,SAAS,OAAOC,SAASC;YACvB,MAAM,EAACR,WAAW,EAAC,GAAGO,QAAQT,MAAM;YACpC,MAAMW,kBAAkB,IAAIC;YAC5B,IAAIC,mBAAmB;YACvBH,MAAMI,GAAG,CAACC,EAAE,CAAC,UAAU;gBACrBF,mBAAmB;YACrB;YACAH,MAAMI,GAAG,CAACC,EAAE,CAAC,SAAS;gBACpB,IAAI,CAACF,kBAAkBF,gBAAgBK,KAAK;YAC9C;YAEA5B,uBAAuB;gBAACqB;gBAASP;YAAW;YAE5C,MAAMe,SAAS,MAAM1B,gCACnB;gBACEW;gBACAG,MAAMI,QAAQJ,IAAI;gBAClBa,QAAQP,gBAAgBO,MAAM;YAChC,GACA;gBAACvB;YAAO;YAGV,OAAOH,+BAA+ByB;QACxC;IACF;AACF"}