@warmdrift/kgauto-compiler 2.0.0-alpha.12 → 2.0.0-alpha.14

package/dist/index.d.mts

@@ -1,5 +1,5 @@
-import { M as ModelProfile, C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, R as RecordInput, O as OracleScore, e as CompileResult, B as BestPracticeAdvisory, f as Provider } from './profiles-B5MCp_0L.mjs';
-export { g as ALIASES, h as CacheStrategy, i as CallAttempt, j as CallError, k as CliffRule, l as Constraints, F as FallbackReason, H as HistoryCachePolicy, I as IntentDeclaration, L as LoweringSpec, m as Message, n as MutationApplied, o as NormalizedTokens, p as PromptSection, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, T as ToolCall, s as ToolDefinition, t as allProfiles, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-B5MCp_0L.mjs';
+import { M as ModelProfile, C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, R as RecordInput, O as OracleScore, e as CompileResult, B as BestPracticeAdvisory, f as Provider } from './profiles-DTnIzGsA.mjs';
+export { g as ALIASES, h as CacheStrategy, i as CallAttempt, j as CallError, k as CliffRule, l as Constraints, F as FallbackReason, H as HistoryCachePolicy, I as IntentDeclaration, L as LoweringSpec, m as Message, n as MutationApplied, o as NormalizedTokens, p as PromptSection, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, T as ToolCall, s as ToolDefinition, t as allProfiles, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-DTnIzGsA.mjs';
 import { IntentArchetypeName } from './dialect.mjs';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, OutputMode, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.mjs';
 

package/dist/index.d.ts

@@ -1,5 +1,5 @@
-import { M as ModelProfile, C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, R as RecordInput, O as OracleScore, e as CompileResult, B as BestPracticeAdvisory, f as Provider } from './profiles-B_sMA2eU.js';
-export { g as ALIASES, h as CacheStrategy, i as CallAttempt, j as CallError, k as CliffRule, l as Constraints, F as FallbackReason, H as HistoryCachePolicy, I as IntentDeclaration, L as LoweringSpec, m as Message, n as MutationApplied, o as NormalizedTokens, p as PromptSection, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, T as ToolCall, s as ToolDefinition, t as allProfiles, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-B_sMA2eU.js';
+import { M as ModelProfile, C as CompilePolicy, N as NormalizedResponse, A as ApiKeys, P as ProviderOverrides, a as CompiledRequest, b as PromptIR, c as CallOptions, d as CallResult, R as RecordInput, O as OracleScore, e as CompileResult, B as BestPracticeAdvisory, f as Provider } from './profiles-D0y6aLk0.js';
+export { g as ALIASES, h as CacheStrategy, i as CallAttempt, j as CallError, k as CliffRule, l as Constraints, F as FallbackReason, H as HistoryCachePolicy, I as IntentDeclaration, L as LoweringSpec, m as Message, n as MutationApplied, o as NormalizedTokens, p as PromptSection, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, T as ToolCall, s as ToolDefinition, t as allProfiles, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-D0y6aLk0.js';
 import { IntentArchetypeName } from './dialect.js';
 export { ALL_ARCHETYPES, ContextBucket, DIALECT_VERSION, HistoryDepth, INTENT_ARCHETYPES, OutputMode, ShapeSignature, ToolCountBucket, bucketContext, bucketHistory, bucketToolCount, hashShape, isArchetype, learningKey } from './dialect.js';
 

package/dist/index.js

@@ -2032,13 +2032,18 @@ var PROVIDER_ENV_KEYS = Object.freeze({
 function defaultEnv() {
   return typeof process !== "undefined" && process.env ? process.env : {};
 }
+function readKeyValue(raw) {
+  if (raw === void 0) return void 0;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
 function resolveProviderKey(provider, opts = {}) {
   if (!isSupportedProvider(provider)) return void 0;
-  const explicit = opts.apiKeys?.[provider];
+  const explicit = readKeyValue(opts.apiKeys?.[provider]);
   if (explicit) return explicit;
   const env = opts.envSource ?? defaultEnv();
   for (const name of PROVIDER_ENV_KEYS[provider]) {
-    const v = env[name];
+    const v = readKeyValue(env[name]);
     if (v) return v;
   }
   return void 0;
@@ -2055,11 +2060,11 @@ function getReachabilityDiagnostic(opts = {}) {
   const env = opts.envSource ?? defaultEnv();
   const out = {};
   for (const provider of SUPPORTED_PROVIDERS) {
-    if (opts.apiKeys?.[provider]) {
+    if (readKeyValue(opts.apiKeys?.[provider])) {
       out[provider] = { reachable: true, via: "apiKeys" };
       continue;
     }
-    const envKeyFound = PROVIDER_ENV_KEYS[provider].find((name) => env[name]);
+    const envKeyFound = PROVIDER_ENV_KEYS[provider].find((name) => readKeyValue(env[name]));
     out[provider] = envKeyFound ? { reachable: true, via: "env", envKeyFound } : { reachable: false, via: null };
   }
   return out;
@@ -2331,8 +2336,19 @@ async function call(ir, opts = {}) {
   }
   let activeCompile = initial;
   let lastErr;
+  const failedProviders = /* @__PURE__ */ new Set();
   for (let i = 0; i < targetsToTry.length; i++) {
     const targetModel = targetsToTry[i];
+    const targetProfile = tryGetProfile(targetModel);
+    if (targetProfile && failedProviders.has(targetProfile.provider) && !opts.noFallback) {
+      attempts.push({
+        model: targetModel,
+        status: "terminal",
+        errorCode: "auth_inferred",
+        message: `Skipped \u2014 provider ${targetProfile.provider} returned 401/403 earlier in this call; same key inferred to fail`
+      });
+      continue;
+    }
     if (targetModel !== initial.target) {
       try {
         activeCompile = compileAndRegister(
@@ -2401,6 +2417,10 @@ async function call(ir, opts = {}) {
     });
     lastErr = validated;
     if (validated.errorType === "terminal" || opts.noFallback) {
+      if (validated.errorCode === "auth" && !opts.noFallback && activeCompile.provider) {
+        failedProviders.add(activeCompile.provider);
+        continue;
+      }
       break;
     }
   }
@@ -2479,6 +2499,7 @@ function normalizeFallbackReason(attempts) {
     return "cliff";
   }
   if (code === "cost_cap_exceeded") return "cost_cap";
+  if (code === "auth" || code === "auth_inferred") return "provider_auth_failed";
   return "provider_error";
 }
 

package/dist/index.mjs

@@ -1242,13 +1242,18 @@ var PROVIDER_ENV_KEYS = Object.freeze({
 function defaultEnv() {
   return typeof process !== "undefined" && process.env ? process.env : {};
 }
+function readKeyValue(raw) {
+  if (raw === void 0) return void 0;
+  const trimmed = raw.trim();
+  return trimmed.length > 0 ? trimmed : void 0;
+}
 function resolveProviderKey(provider, opts = {}) {
   if (!isSupportedProvider(provider)) return void 0;
-  const explicit = opts.apiKeys?.[provider];
+  const explicit = readKeyValue(opts.apiKeys?.[provider]);
   if (explicit) return explicit;
   const env = opts.envSource ?? defaultEnv();
   for (const name of PROVIDER_ENV_KEYS[provider]) {
-    const v = env[name];
+    const v = readKeyValue(env[name]);
     if (v) return v;
   }
   return void 0;
@@ -1265,11 +1270,11 @@ function getReachabilityDiagnostic(opts = {}) {
   const env = opts.envSource ?? defaultEnv();
   const out = {};
   for (const provider of SUPPORTED_PROVIDERS) {
-    if (opts.apiKeys?.[provider]) {
+    if (readKeyValue(opts.apiKeys?.[provider])) {
       out[provider] = { reachable: true, via: "apiKeys" };
       continue;
     }
-    const envKeyFound = PROVIDER_ENV_KEYS[provider].find((name) => env[name]);
+    const envKeyFound = PROVIDER_ENV_KEYS[provider].find((name) => readKeyValue(env[name]));
     out[provider] = envKeyFound ? { reachable: true, via: "env", envKeyFound } : { reachable: false, via: null };
   }
   return out;
@@ -1541,8 +1546,19 @@ async function call(ir, opts = {}) {
   }
   let activeCompile = initial;
   let lastErr;
+  const failedProviders = /* @__PURE__ */ new Set();
   for (let i = 0; i < targetsToTry.length; i++) {
     const targetModel = targetsToTry[i];
+    const targetProfile = tryGetProfile(targetModel);
+    if (targetProfile && failedProviders.has(targetProfile.provider) && !opts.noFallback) {
+      attempts.push({
+        model: targetModel,
+        status: "terminal",
+        errorCode: "auth_inferred",
+        message: `Skipped \u2014 provider ${targetProfile.provider} returned 401/403 earlier in this call; same key inferred to fail`
+      });
+      continue;
+    }
     if (targetModel !== initial.target) {
       try {
         activeCompile = compileAndRegister(
@@ -1611,6 +1627,10 @@ async function call(ir, opts = {}) {
     });
     lastErr = validated;
     if (validated.errorType === "terminal" || opts.noFallback) {
+      if (validated.errorCode === "auth" && !opts.noFallback && activeCompile.provider) {
+        failedProviders.add(activeCompile.provider);
+        continue;
+      }
       break;
     }
   }
@@ -1689,6 +1709,7 @@ function normalizeFallbackReason(attempts) {
     return "cliff";
   }
   if (code === "cost_cap_exceeded") return "cost_cap";
+  if (code === "auth" || code === "auth_inferred") return "provider_auth_failed";
   return "provider_error";
 }
 

package/dist/{profiles-B_sMA2eU.d.ts → profiles-D0y6aLk0.d.ts}

@@ -458,15 +458,21 @@ interface CallAttempt {
 /**
  * Why fallback fired. Normalized for `CallResult.fallbackReason` (alpha.9).
  *
- *   - `rate_limit`         provider returned 429
- *   - `provider_error`     5xx, network, or other retryable upstream issue
- *   - `cost_cap`           preflight policy.maxCostPerCallUsd rejected target
- *   - `cliff`              alpha.8 contract violation (MAX_TOKENS on
- *                          structured output, parse-failed JSON)
- *   - `contract_violation` other compile-time-contract failures (reserved
- *                          for alpha.10+ — e.g. mid-stream policy rejects)
+ *   - `rate_limit`           provider returned 429
+ *   - `provider_error`       5xx, network, or other retryable upstream issue
+ *   - `cost_cap`             preflight policy.maxCostPerCallUsd rejected target
+ *   - `cliff`                alpha.8 contract violation (MAX_TOKENS on
+ *                            structured output, parse-failed JSON)
+ *   - `contract_violation`   other compile-time-contract failures (reserved
+ *                            for alpha.10+ — e.g. mid-stream policy rejects)
+ *   - `provider_auth_failed` alpha.14 — initial provider returned 401/403
+ *                            (upstream key revocation, malformed-but-truthy
+ *                            key, billing lapse). The chain walks to the
+ *                            next non-same-provider target instead of
+ *                            short-circuiting; same-provider remaining
+ *                            entries skip with errorCode='auth_inferred'.
  */
-type FallbackReason = 'rate_limit' | 'provider_error' | 'cost_cap' | 'cliff' | 'contract_violation';
+type FallbackReason = 'rate_limit' | 'provider_error' | 'cost_cap' | 'cliff' | 'contract_violation' | 'provider_auth_failed';
 interface CallResult {
     /** Compile handle (still valid for record() if consumer wants to add oracle scores later). */
     handle: string;

package/dist/{profiles-B5MCp_0L.d.mts → profiles-DTnIzGsA.d.mts}

@@ -458,15 +458,21 @@ interface CallAttempt {
 /**
  * Why fallback fired. Normalized for `CallResult.fallbackReason` (alpha.9).
  *
- *   - `rate_limit`         provider returned 429
- *   - `provider_error`     5xx, network, or other retryable upstream issue
- *   - `cost_cap`           preflight policy.maxCostPerCallUsd rejected target
- *   - `cliff`              alpha.8 contract violation (MAX_TOKENS on
- *                          structured output, parse-failed JSON)
- *   - `contract_violation` other compile-time-contract failures (reserved
- *                          for alpha.10+ — e.g. mid-stream policy rejects)
+ *   - `rate_limit`           provider returned 429
+ *   - `provider_error`       5xx, network, or other retryable upstream issue
+ *   - `cost_cap`             preflight policy.maxCostPerCallUsd rejected target
+ *   - `cliff`                alpha.8 contract violation (MAX_TOKENS on
+ *                            structured output, parse-failed JSON)
+ *   - `contract_violation`   other compile-time-contract failures (reserved
+ *                            for alpha.10+ — e.g. mid-stream policy rejects)
+ *   - `provider_auth_failed` alpha.14 — initial provider returned 401/403
+ *                            (upstream key revocation, malformed-but-truthy
+ *                            key, billing lapse). The chain walks to the
+ *                            next non-same-provider target instead of
+ *                            short-circuiting; same-provider remaining
+ *                            entries skip with errorCode='auth_inferred'.
  */
-type FallbackReason = 'rate_limit' | 'provider_error' | 'cost_cap' | 'cliff' | 'contract_violation';
+type FallbackReason = 'rate_limit' | 'provider_error' | 'cost_cap' | 'cliff' | 'contract_violation' | 'provider_auth_failed';
 interface CallResult {
     /** Compile handle (still valid for record() if consumer wants to add oracle scores later). */
     handle: string;

package/dist/profiles.d.mts

@@ -1,2 +1,2 @@
-export { g as ALIASES, h as CacheStrategy, k as CliffRule, L as LoweringSpec, M as ModelProfile, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, _ as _setProfileBrainHook, t as allProfiles, x as allProfilesRaw, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-B5MCp_0L.mjs';
+export { g as ALIASES, h as CacheStrategy, k as CliffRule, L as LoweringSpec, M as ModelProfile, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, _ as _setProfileBrainHook, t as allProfiles, x as allProfilesRaw, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-DTnIzGsA.mjs';
 import './dialect.mjs';

package/dist/profiles.d.ts

@@ -1,2 +1,2 @@
-export { g as ALIASES, h as CacheStrategy, k as CliffRule, L as LoweringSpec, M as ModelProfile, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, _ as _setProfileBrainHook, t as allProfiles, x as allProfilesRaw, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-B_sMA2eU.js';
+export { g as ALIASES, h as CacheStrategy, k as CliffRule, L as LoweringSpec, M as ModelProfile, q as RecoveryRule, S as StructuredOutputCapability, r as SystemPromptMode, _ as _setProfileBrainHook, t as allProfiles, x as allProfilesRaw, u as getProfile, v as profilesByProvider, w as tryGetProfile } from './profiles-D0y6aLk0.js';
 import './dialect.js';

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@warmdrift/kgauto-compiler",
-  "version": "2.0.0-alpha.12",
+  "version": "2.0.0-alpha.14",
   "description": "Prompt compiler + central learning brain for multi-model AI apps. Swap models without rewriting prompts.",
   "main": "./dist/index.js",
   "module": "./dist/index.mjs",