@skaile/forge-settings 0.0.0-stage → 1.0.1

package/dist/runtime/components/ForgeProvidersPanel.vue

@@ -0,0 +1,435 @@
+<template>
+  <div data-testid="providers-panel" class="space-y-4">
+    <!-- Detected in environment -->
+    <div
+      v-if="detected.length"
+      data-testid="providers-detected"
+      class="p-3 bg-primary-500/10 border border-primary-500/20 rounded-lg space-y-2"
+    >
+      <div class="flex items-center gap-2">
+        <Icon name="lucide:key-round" class="text-primary-500 shrink-0" />
+        <p class="text-xs font-medium text-foreground">Detected in environment</p>
+      </div>
+      <div v-for="preset in detected" :key="preset.id" class="flex items-center gap-2 flex-wrap text-xs">
+        <span class="font-medium text-foreground">{{ preset.label }}</span>
+        <code class="font-mono text-foreground-muted">{{ preset.credential.env }}</code>
+        <UButton
+          v-if="!props.readOnly"
+          size="xs"
+          variant="ghost"
+          class="ml-auto"
+          :loading="detectedBusy === preset.id"
+          :disabled="detectedBusy !== null"
+          :data-testid="`provider-detected-add-${preset.id}`"
+          @click="addDetected(preset)"
+        >
+          <Icon name="lucide:plus" class="mr-1.5" />Add
+        </UButton>
+      </div>
+      <p v-if="detectedError" class="text-xs text-error-500">{{ detectedError }}</p>
+    </div>
+
+    <div class="flex items-center gap-2">
+      <p class="text-xs text-foreground-muted leading-relaxed flex-1">
+        {{ props.layer === "workspace" ? "Entries of this workspace's providers.yml can be changed here; instance entries are inherited." : "The instance registry, $FORGE_HOME/.skaile/providers.yml." }}
+        Keys stay in the environment; an entry only references them.
+      </p>
+      <UButton
+        v-if="!props.readOnly"
+        size="sm"
+        color="primary"
+        data-testid="provider-add"
+        @click="openAdd()"
+      >
+        <Icon name="lucide:plus" class="mr-2" />Add provider
+      </UButton>
+    </div>
+
+    <p v-if="loadError" class="text-sm text-error-500">{{ loadError }}</p>
+    <div v-else-if="loading && rows.length === 0" class="text-xs text-foreground-subtle py-2 text-center">
+      Loading providers…
+    </div>
+    <div v-else-if="rows.length === 0" class="text-xs text-foreground-subtle py-2 text-center">
+      This registry has no providers yet.
+    </div>
+
+    <div v-else class="overflow-x-auto rounded-lg border border-surface-border">
+      <table class="w-full text-xs">
+        <thead class="bg-surface-ground/50 text-foreground-muted">
+          <tr class="text-left">
+            <th class="px-3 py-2 font-medium">Provider</th>
+            <th class="px-3 py-2 font-medium">Preset / surface</th>
+            <th class="px-3 py-2 font-medium">Base URL</th>
+            <th class="px-3 py-2 font-medium">Credential</th>
+            <th class="px-3 py-2 font-medium">Enabled</th>
+            <th class="px-3 py-2" />
+          </tr>
+        </thead>
+        <tbody>
+          <tr
+            v-for="row in rows"
+            :key="row.id"
+            :data-testid="`provider-row-${row.id}`"
+            class="border-t border-surface-border align-top"
+            :class="row.enabled ? '' : 'opacity-60'"
+          >
+            <td class="px-3 py-2">
+              <div class="flex items-center gap-1.5 flex-wrap">
+                <span class="font-medium text-foreground">{{ row.name }}</span>
+                <UBadge
+                  :data-testid="`provider-badge-${row.id}`"
+                  size="sm"
+                  variant="subtle"
+                  color="neutral"
+                >{{ row.badge }}</UBadge>
+                <Icon v-if="row.locked" name="lucide:lock" class="text-foreground-subtle shrink-0" />
+              </div>
+              <code v-if="row.name !== row.id" class="font-mono text-foreground-subtle">{{ row.id }}</code>
+              <p v-if="row.inheritedNote" class="text-foreground-subtle italic">{{ row.inheritedNote }}</p>
+            </td>
+            <td class="px-3 py-2 font-mono text-foreground-muted">{{ row.origin }}</td>
+            <td class="px-3 py-2 font-mono text-foreground-muted break-all">{{ row.baseUrl ?? "\u2014" }}</td>
+            <td class="px-3 py-2 min-w-[15rem] space-y-1">
+              <USelect
+                v-if="row.needsCredential"
+                :model-value="row.credentialValue"
+                :items="row.credentialOptions"
+                placeholder="Choose a credential"
+                :disabled="!row.canEditCredential || rowBusy === row.id"
+                :data-testid="`provider-credential-${row.id}`"
+                class="w-full bg-surface-ground border-surface-border text-foreground text-xs font-mono"
+                @update:model-value="onCredentialSelect(row, String($event ?? ''))"
+              />
+              <p :class="row.configured ? 'text-foreground-subtle' : 'text-amber-600 dark:text-amber-400'" class="italic">
+                {{ row.status }}
+              </p>
+
+              <!-- Inline key editor -->
+              <div
+                v-if="keyEditing === row.id"
+                :data-testid="`provider-credential-enter-key-${row.id}`"
+                class="space-y-1.5 p-2 rounded-lg border border-surface-border bg-surface-ground/50"
+              >
+                <UInput
+                  v-model="keyForm.name"
+                  placeholder="PROVIDER_API_KEY"
+                  :data-testid="`provider-key-name-${row.id}`"
+                  class="w-full bg-surface-ground border-surface-border text-foreground text-xs font-mono"
+                />
+                <UInput
+                  v-model="keyForm.value"
+                  type="password"
+                  autocomplete="off"
+                  placeholder="Key"
+                  :data-testid="`provider-key-value-${row.id}`"
+                  class="w-full bg-surface-ground border-surface-border text-foreground text-xs font-mono"
+                />
+                <p v-if="keyError" class="text-error-500">{{ keyError }}</p>
+                <div class="flex justify-end gap-1">
+                  <UButton size="xs" variant="ghost" :data-testid="`provider-key-cancel-${row.id}`" @click="cancelKeyEditor()">Cancel</UButton>
+                  <UButton
+                    size="xs"
+                    color="primary"
+                    :loading="rowBusy === row.id"
+                    :data-testid="`provider-key-save-${row.id}`"
+                    @click="saveKeyEditor()"
+                  >Save</UButton>
+                </div>
+              </div>
+
+              <!-- Inline reference editor -->
+              <div
+                v-if="refEditing === row.id"
+                :data-testid="`provider-credential-ref-${row.id}`"
+                class="space-y-1.5 p-2 rounded-lg border border-surface-border bg-surface-ground/50"
+              >
+                <UInput
+                  v-model="refForm.ref"
+                  placeholder="keyring:forge/name · cmd:… · platform:…"
+                  :data-testid="`provider-ref-input-${row.id}`"
+                  class="w-full bg-surface-ground border-surface-border text-foreground text-xs font-mono"
+                />
+                <p v-if="refError" class="text-error-500">{{ refError }}</p>
+                <div class="flex justify-end gap-1">
+                  <UButton size="xs" variant="ghost" :data-testid="`provider-ref-cancel-${row.id}`" @click="cancelRefEditor()">Cancel</UButton>
+                  <UButton
+                    size="xs"
+                    color="primary"
+                    :loading="rowBusy === row.id"
+                    :data-testid="`provider-ref-save-${row.id}`"
+                    @click="saveRefEditor()"
+                  >Save</UButton>
+                </div>
+              </div>
+
+              <p
+                v-for="notice in row.overrideNotices"
+                :key="notice"
+                :data-testid="`provider-override-notice-${row.id}`"
+                class="text-foreground-subtle"
+              >{{ notice }}</p>
+              <p
+                v-if="rowError?.id === row.id"
+                :data-testid="`provider-row-error-${row.id}`"
+                class="text-error-500"
+              >{{ rowError.message }}</p>
+            </td>
+            <td class="px-3 py-2">
+              <USwitch
+                :model-value="row.enabled"
+                :disabled="!row.canToggle || rowBusy === row.id"
+                :aria-label="`Enable ${row.id}`"
+                :data-testid="`provider-enabled-${row.id}`"
+                @update:model-value="setEnabled(row, Boolean($event))"
+              />
+            </td>
+            <td class="px-3 py-2">
+              <div class="flex items-center justify-end gap-1">
+                <UButton
+                  v-if="row.canReset"
+                  size="sm"
+                  variant="ghost"
+                  :loading="rowBusy === row.id"
+                  :data-testid="`provider-reset-${row.id}`"
+                  @click="resetPatch(row)"
+                >
+                  <Icon name="lucide:undo-2" class="mr-1.5 w-3.5 h-3.5" />Reset
+                </UButton>
+                <template v-if="row.editable">
+                  <UButton
+                    size="sm"
+                    variant="ghost"
+                    :aria-label="`Edit ${row.id}`"
+                    :data-testid="`provider-edit-${row.id}`"
+                    @click="openEdit(row)"
+                  >
+                    <Icon name="lucide:pencil" class="w-3.5 h-3.5" />
+                  </UButton>
+                  <UButton
+                    size="sm"
+                    variant="ghost"
+                    color="error"
+                    :aria-label="`Delete ${row.id}`"
+                    :data-testid="`provider-delete-${row.id}`"
+                    @click="requestDelete(row)"
+                  >
+                    <Icon name="lucide:trash-2" class="w-3.5 h-3.5" />
+                  </UButton>
+                </template>
+              </div>
+            </td>
+          </tr>
+        </tbody>
+      </table>
+    </div>
+
+    <!-- Add / edit dialog -->
+    <UModal
+      :open="dialogVisible"
+      :title="dialogTitle"
+      :ui="{
+  content: 'bg-surface-card border border-surface-border sm:max-w-[460px]',
+  header: 'bg-surface-card border-b border-surface-border text-foreground',
+  body: 'bg-surface-card p-5',
+  footer: 'bg-surface-ground/50 border-t border-surface-border p-3 justify-end'
+}"
+      @update:open="dialogVisible = $event"
+    >
+      <template #body>
+        <div data-testid="provider-dialog" class="space-y-4">
+          <div class="flex flex-col gap-1">
+            <label class="text-xs text-foreground-muted font-medium">
+              Preset <span class="text-error-500">*</span>
+            </label>
+            <USelect
+              :model-value="form.preset"
+              :items="presetOptions"
+              placeholder="Choose a preset"
+              data-testid="provider-preset"
+              class="w-full bg-surface-ground border-surface-border text-foreground text-sm"
+              @update:model-value="selectPreset(String($event ?? ''))"
+            />
+          </div>
+
+          <div v-if="showSurface" class="flex flex-col gap-1">
+            <label class="text-xs text-foreground-muted font-medium">
+              Surface <span class="text-error-500">*</span>
+            </label>
+            <USelect
+              v-model="form.surface"
+              :items="surfaceOptions"
+              placeholder="Wire protocol"
+              data-testid="provider-surface"
+              class="w-full bg-surface-ground border-surface-border text-foreground text-sm"
+            />
+          </div>
+
+          <div class="flex flex-col gap-1">
+            <label class="text-xs text-foreground-muted font-medium">
+              ID <span class="text-error-500">*</span>
+            </label>
+            <UInput
+              v-model="form.id"
+              :disabled="editing !== null"
+              placeholder="openrouter"
+              data-testid="provider-id"
+              class="w-full bg-surface-ground border-surface-border text-foreground text-sm font-mono"
+              :class="editing !== null ? 'opacity-60 cursor-not-allowed' : ''"
+            />
+            <p v-if="idError" class="text-xs text-error-500">{{ idError }}</p>
+            <p v-else class="text-[10px] text-foreground-subtle">The left half of a model selector: <code class="font-mono">&lt;id&gt;/&lt;model&gt;</code>.</p>
+          </div>
+
+          <div class="flex flex-col gap-1">
+            <label class="text-xs text-foreground-muted font-medium">
+              Base URL <span v-if="isCustom" class="text-error-500">*</span>
+            </label>
+            <UInput
+              v-model="form.baseUrl"
+              :placeholder="baseUrlPlaceholder"
+              data-testid="provider-base-url"
+              class="w-full bg-surface-ground border-surface-border text-foreground text-sm font-mono"
+            />
+          </div>
+
+          <template v-if="showCredentialFields">
+            <div class="flex flex-col gap-1">
+              <label class="text-xs text-foreground-muted font-medium">Credential environment variable</label>
+              <UInput
+                v-model="form.envName"
+                placeholder="PROVIDER_API_KEY"
+                data-testid="provider-credential-env"
+                class="w-full bg-surface-ground border-surface-border text-foreground text-sm font-mono"
+              />
+              <p class="text-[10px] text-foreground-subtle">
+                Stored as <code class="font-mono">env:{{ form.envName.trim() || "NAME" }}</code> — the key itself stays in the environment.
+              </p>
+            </div>
+
+            <div v-if="canSetValue" class="flex flex-col gap-1">
+              <label class="text-xs text-foreground-muted font-medium">Set value now</label>
+              <UInput
+                v-model="form.secret"
+                type="password"
+                autocomplete="off"
+                placeholder="Optional — written to this scope's .env"
+                data-testid="provider-set-value"
+                class="w-full bg-surface-ground border-surface-border text-foreground text-sm font-mono"
+              />
+            </div>
+          </template>
+
+          <p v-if="dialogError" data-testid="provider-dialog-error" class="text-sm text-error-500">{{ dialogError }}</p>
+        </div>
+      </template>
+
+      <template #footer>
+        <div class="flex gap-2 justify-end w-full">
+          <UButton size="sm" variant="ghost" @click="dialogVisible = false">Cancel</UButton>
+          <UButton
+            size="sm"
+            color="primary"
+            data-testid="provider-save"
+            :loading="saving"
+            @click="saveProvider"
+          >
+            <Icon name="lucide:check" class="mr-1.5" />{{ editing ? "Save" : "Add" }}
+          </UButton>
+        </div>
+      </template>
+    </UModal>
+
+    <!-- Delete confirmation -->
+    <UModal
+      :open="deleteOpen"
+      title="Delete provider"
+      :ui="{
+  content: 'bg-surface-card border border-surface-border sm:max-w-[22rem]',
+  header: 'bg-surface-card border-b border-surface-border text-foreground',
+  body: 'bg-surface-card p-5'
+}"
+      @update:open="deleteOpen = $event"
+    >
+      <template #body>
+        <p class="text-sm text-foreground-muted">
+          Delete <span class="font-medium font-mono">{{ deleteTarget?.id }}</span> from the {{ props.layer }} registry?
+          <template v-if="props.layer === 'workspace'"> An instance entry with the same id shows again.</template>
+        </p>
+        <p v-if="deleteError" class="text-sm text-error-500 mt-2">{{ deleteError }}</p>
+        <div class="flex justify-end gap-2 mt-4">
+          <UButton size="sm" variant="ghost" @click="deleteOpen = false">Cancel</UButton>
+          <UButton
+            size="sm"
+            color="error"
+            data-testid="provider-delete-confirm"
+            :loading="deleting"
+            @click="confirmDelete"
+          >
+            Delete
+          </UButton>
+        </div>
+      </template>
+    </UModal>
+  </div>
+</template>
+
+<script setup>
+import { useProvidersPanel } from "../vue/useProvidersPanel";
+const props = defineProps({
+  providersUrl: { type: String, required: true },
+  providersWriteUrl: { type: String, required: true },
+  presetsUrl: { type: String, required: false },
+  environmentUrl: { type: String, required: false },
+  layer: { type: String, required: true },
+  readOnly: { type: Boolean, required: false }
+});
+const emit = defineEmits(["changed"]);
+const {
+  rows,
+  loading,
+  loadError,
+  dialogVisible,
+  dialogTitle,
+  editing,
+  form,
+  dialogError,
+  saving,
+  presetOptions,
+  surfaceOptions,
+  isCustom,
+  showSurface,
+  baseUrlPlaceholder,
+  canSetValue,
+  showCredentialFields,
+  rowBusy,
+  rowError,
+  onCredentialSelect,
+  setEnabled,
+  resetPatch,
+  keyEditing,
+  keyForm,
+  keyError,
+  cancelKeyEditor,
+  saveKeyEditor,
+  refEditing,
+  refForm,
+  refError,
+  cancelRefEditor,
+  saveRefEditor,
+  idError,
+  openAdd,
+  openEdit,
+  selectPreset,
+  saveProvider,
+  deleteTarget,
+  deleteOpen,
+  deleteError,
+  deleting,
+  requestDelete,
+  confirmDelete,
+  detected,
+  detectedBusy,
+  detectedError,
+  addDetected
+} = useProvidersPanel(props, emit);
+</script>

package/dist/runtime/components/ForgeProvidersPanel.vue.d.ts

@@ -0,0 +1,21 @@
+import { type ProvidersPanelLayer } from "../vue/useProvidersPanel.js";
+type __VLS_Props = {
+    /** `GET` merged view for this scope (`/api/providers` | `/api/workspaces/:id/providers`). */
+    providersUrl: string;
+    /** `PUT|DELETE ${providersWriteUrl}/:id`; `GET ${providersWriteUrl}/detected`. */
+    providersWriteUrl: string;
+    /** Catalog preset summaries. Default `/api/providers/presets`. */
+    presetsUrl?: string;
+    /** The scope's `.env` route: hand-entered keys. Omitted, key entry is hidden. */
+    environmentUrl?: string;
+    /** Edit/Delete are offered only for entries this layer defines. */
+    layer: ProvidersPanelLayer;
+    /** Disables add, edit and delete. */
+    readOnly?: boolean;
+};
+declare const _default: import("vue").DefineComponent<__VLS_Props, {}, {}, {}, {}, import("vue").ComponentOptionsMixin, import("vue").ComponentOptionsMixin, {} & {
+    changed: () => any;
+}, string, import("vue").PublicProps, Readonly<__VLS_Props> & Readonly<{
+    onChanged?: (() => any) | undefined;
+}>, {}, {}, {}, {}, string, import("vue").ComponentProvideOptions, false, {}, any>;
+export default _default;

package/dist/runtime/editor/index.d.ts

@@ -0,0 +1,58 @@
+/**
+ * `@skaile/forge-settings/editor` — the editor's `models` port over a provider
+ * registry.
+ *
+ * `@skaile/forge-editor`'s AI routes ask the host's `ModelProvider`
+ * (`listModels` / `languageModel`) before their own runtime-config presets.
+ * This adapter answers from the host's registry: only `llm` entries on the
+ * `openai-completions` surface are offered, because the editor's transport is a
+ * chat-completions client (`@ai-sdk/openai-compatible`). A profile's id is the
+ * registry selector `<providerId>/<modelId>`, which `languageModel` receives
+ * back as `{ preset: id }`.
+ *
+ * The registry and the credential environment are supplied by the host on every
+ * call, so provider edits apply without a restart and nothing reads the ambient
+ * process. Failures are typed ({@link ModelResolutionError}); the host maps
+ * them to HTTP in `onFailure`.
+ *
+ * `@skaile/forge-editor` is an optional peer of this entry only, for its
+ * `ModelProvider` contract (types). `@ai-sdk/openai-compatible` builds the model.
+ */
+import type { ModelProfile, ModelRef } from "@skaile/forge-editor/ai";
+import type { ModelProvider } from "@skaile/forge-editor/server";
+import { ModelResolutionError } from "../model/errors.js";
+import { type CredentialPolicy } from "../server/credential-policy.js";
+import { type AIProviderRegistryView } from "../shared/provider-registry.js";
+export { ModelResolutionError } from "../model/errors.js";
+export type { ModelResolutionCode } from "../model/errors.js";
+/** Policy for an editor model call; see `CredentialPolicy`. */
+export interface EditorModelPolicyOptions {
+    /** Which credential references may be resolved; refused entries are not offered. */
+    policy?: CredentialPolicy;
+}
+/**
+ * The registry's chat-completions models as editor model profiles, in registry
+ * order. With a policy, entries it refuses are left out.
+ */
+export declare function editorModelProfiles(registry: AIProviderRegistryView, options?: EditorModelPolicyOptions): ModelProfile[];
+/**
+ * The language model of selector `ref.preset`, or `null` when the registry does
+ * not serve it (a browser-defined `{ endpoint, model, apiKey }` reference is the
+ * editor's own to resolve).
+ *
+ * @throws {ModelResolutionError} `policy_refused` when the policy refuses the
+ *   entry (checked before its credential is read); `unresolved` when its
+ *   credential reference does not resolve. Neither message carries a secret.
+ */
+export declare function editorLanguageModel(registry: AIProviderRegistryView, env: Record<string, string | undefined>, ref: ModelRef, options?: EditorModelPolicyOptions): import("@ai-sdk/provider").LanguageModelV4 | null;
+/** Options for {@link createEditorModelProvider}. */
+export interface EditorModelProviderOptions extends EditorModelPolicyOptions {
+    /** The registry to serve, read on every call. */
+    registry: () => AIProviderRegistryView | Promise<AIProviderRegistryView>;
+    /** The environment `env:` references resolve against, read on every call. */
+    env: () => Record<string, string | undefined> | Promise<Record<string, string | undefined>>;
+    /** Turn a typed failure into the host's own error (e.g. its HTTP error). Default: rethrow as is. */
+    onFailure?: (error: ModelResolutionError) => Error;
+}
+/** The editor's `models` port over the host's registry. */
+export declare function createEditorModelProvider(options: EditorModelProviderOptions): ModelProvider;

package/dist/runtime/editor/index.js

@@ -0,0 +1,72 @@
+import { createOpenAICompatible } from "@ai-sdk/openai-compatible";
+import { ModelResolutionError, assertEntryAllowed } from "../model/errors.js";
+import { entryPolicyRefusal } from "../server/credential-policy.js";
+import { resolveEntryCredential } from "../server/credential-store.js";
+import { listAIProviderModels } from "../server/provider-service.js";
+import {
+  entriesOfKind
+} from "../shared/provider-registry.js";
+export { ModelResolutionError } from "../model/errors.js";
+const EDITOR_SURFACE = "openai-completions";
+function editorEntries(registry) {
+  const entries = /* @__PURE__ */ new Map();
+  for (const [id, entry] of entriesOfKind(registry, "llm")) {
+    if (entry.surface === EDITOR_SURFACE && entry.base_url) entries.set(id, entry);
+  }
+  return entries;
+}
+export function editorModelProfiles(registry, options = {}) {
+  const entries = editorEntries(registry);
+  const allowed = (providerId) => {
+    const entry = entries.get(providerId);
+    return entry !== void 0 && !entryPolicyRefusal(entry, options.policy);
+  };
+  return listAIProviderModels(registry).filter((model) => allowed(model.providerId)).map((model) => ({
+    id: model.id,
+    label: `${model.providerId} \xB7 ${model.modelId}`,
+    endpoint: entries.get(model.providerId).base_url,
+    model: model.providerModelId,
+    source: "preset"
+  }));
+}
+export function editorLanguageModel(registry, env, ref, options = {}) {
+  if (!("preset" in ref)) return null;
+  const model = listAIProviderModels(registry).find((candidate) => candidate.id === ref.preset);
+  const entry = model && editorEntries(registry).get(model.providerId);
+  if (!model || !entry) return null;
+  assertEntryAllowed(entry, model.providerId, options.policy);
+  const credential = resolveEntryCredential(entry, {
+    env,
+    ...options.policy ? { policy: options.policy } : {}
+  });
+  if (credential.error && !credential.value) {
+    throw new ModelResolutionError(
+      "unresolved",
+      `provider '${model.providerId}': ${credential.error}`,
+      { providerId: model.providerId }
+    );
+  }
+  return createOpenAICompatible({
+    name: model.providerId,
+    baseURL: entry.base_url,
+    ...credential.value ? { apiKey: credential.value } : {},
+    ...entry.headers ? { headers: entry.headers } : {}
+  }).chatModel(model.providerModelId);
+}
+export function createEditorModelProvider(options) {
+  return {
+    async languageModel(ref) {
+      try {
+        return editorLanguageModel(await options.registry(), await options.env(), ref, options);
+      } catch (error) {
+        if (error instanceof ModelResolutionError && options.onFailure)
+          throw options.onFailure(error);
+        throw error;
+      }
+    },
+    async listModels() {
+      const profiles = editorModelProfiles(await options.registry(), options);
+      return profiles.length > 0 ? profiles : null;
+    }
+  };
+}

package/dist/runtime/model/errors.d.ts

@@ -0,0 +1,32 @@
+import { type CredentialPolicy } from "../server/credential-policy.js";
+import type { AIProviderEntry } from "../shared/provider-registry.js";
+/**
+ * A model could not be resolved. Framework-free: the host decides which HTTP
+ * status (or tool error) each `code` becomes.
+ *
+ * `message` never carries a secret. `providerId` names the registry entry the
+ * selector routed to, when it got that far.
+ */
+export type ModelResolutionCode = 
+/** The registry has error diagnostics, so no selector can be trusted. */
+"registry_invalid"
+/** No registry entry serves the selector. */
+ | "unknown_selector"
+/** The host's credential policy refuses the entry; nothing was resolved. */
+ | "policy_refused"
+/** The entry's credential, endpoint or provider SDK could not be resolved. */
+ | "unresolved";
+export declare class ModelResolutionError extends Error {
+    readonly code: ModelResolutionCode;
+    readonly providerId?: string;
+    constructor(code: ModelResolutionCode, message: string, options?: {
+        providerId?: string;
+        cause?: unknown;
+    });
+}
+/**
+ * Throw `policy_refused` when `policy` refuses `entry`; no policy refuses
+ * nothing. The one place a model adapter turns a policy refusal into an error,
+ * so every adapter words it the same way. Nothing is resolved.
+ */
+export declare function assertEntryAllowed(entry: AIProviderEntry, providerId: string, policy?: CredentialPolicy): void;

package/dist/runtime/model/errors.js

@@ -0,0 +1,19 @@
+import { entryPolicyRefusal } from "../server/credential-policy.js";
+export class ModelResolutionError extends Error {
+  code;
+  providerId;
+  constructor(code, message, options = {}) {
+    super(message, options.cause === void 0 ? void 0 : { cause: options.cause });
+    this.name = "ModelResolutionError";
+    this.code = code;
+    if (options.providerId !== void 0) this.providerId = options.providerId;
+  }
+}
+export function assertEntryAllowed(entry, providerId, policy) {
+  const refusal = entryPolicyRefusal(entry, policy);
+  if (refusal) {
+    throw new ModelResolutionError("policy_refused", `provider '${providerId}': ${refusal}`, {
+      providerId
+    });
+  }
+}