anantham-v2 2.0.0-alpha.1

package/dist/domain/artifact.js

@@ -0,0 +1,55 @@
+import { z } from "zod";
+/**
+ * Artifact type categorization.
+ * PRD Part 1 Section 96 & 97.
+ */
+export const ArtifactTypeSchema = z.enum([
+    "plan",
+    "task-list",
+    "diff",
+    "patch",
+    "screenshot",
+    "image",
+    "pdf",
+    "research-report",
+    "test-report",
+    "build-report",
+    "review-report",
+    "security-report",
+    "browser-trace",
+    "recording",
+    "log",
+    "generated-file",
+    "diagram",
+    "verification-result",
+    "custom",
+]);
+/**
+ * Artifact verification details.
+ */
+export const ArtifactVerificationSchema = z.object({
+    status: z.enum(["unverified", "verified", "failed"]),
+    checks: z.array(z.string()),
+    verifiedAt: z.string().optional(),
+    verifierId: z.string().optional(),
+});
+/**
+ * Durable Artifact contract.
+ * PRD Part 1 Section 97.
+ */
+export const ArtifactSchema = z.object({
+    id: z.string().min(1),
+    type: ArtifactTypeSchema.or(z.string()),
+    projectId: z.string().optional(),
+    sessionId: z.string().optional(),
+    taskId: z.string().optional(),
+    agentId: z.string().optional(),
+    contentUri: z.string().min(1),
+    previewUri: z.string().optional(),
+    sha256: z.string().length(64),
+    sourceEventIds: z.array(z.string()),
+    verification: ArtifactVerificationSchema.optional(),
+    createdAt: z.string().min(1),
+    metadata: z.record(z.unknown()).optional(),
+});
+//# sourceMappingURL=artifact.js.map

package/dist/domain/artifact.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"artifact.js","sourceRoot":"","sources":["../../src/domain/artifact.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC;IACvC,MAAM;IACN,WAAW;IACX,MAAM;IACN,OAAO;IACP,YAAY;IACZ,OAAO;IACP,KAAK;IACL,iBAAiB;IACjB,aAAa;IACb,cAAc;IACd,eAAe;IACf,iBAAiB;IACjB,eAAe;IACf,WAAW;IACX,KAAK;IACL,gBAAgB;IAChB,SAAS;IACT,qBAAqB;IACrB,QAAQ;CACT,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,UAAU,EAAE,QAAQ,CAAC,CAAC;IACpD,MAAM,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,kBAAkB,CAAC,EAAE,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACvC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC9B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7B,cAAc,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC;IACnC,YAAY,EAAE,0BAA0B,CAAC,QAAQ,EAAE;IACnD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC"}

package/dist/domain/attachment.d.ts

@@ -0,0 +1,53 @@
+import { z } from "zod";
+/**
+ * Origin source for attachments.
+ * PRD Part 1 Section 14.
+ */
+export declare const AttachmentSourceSchema: z.ZodEnum<["user-upload", "filesystem", "clipboard", "browser", "tool", "mcp", "generated"]>;
+export type AttachmentSource = z.infer<typeof AttachmentSourceSchema>;
+/**
+ * Attachment registry entry contract.
+ * PRD Part 1 Section 14.
+ */
+export declare const AttachmentSchema: z.ZodObject<{
+    id: z.ZodString;
+    name: z.ZodString;
+    mimeType: z.ZodString;
+    sizeBytes: z.ZodNumber;
+    sha256: z.ZodString;
+    source: z.ZodEnum<["user-upload", "filesystem", "clipboard", "browser", "tool", "mcp", "generated"]>;
+    projectId: z.ZodOptional<z.ZodString>;
+    sessionId: z.ZodOptional<z.ZodString>;
+    taskId: z.ZodOptional<z.ZodString>;
+    sensitivity: z.ZodEnum<["public", "normal", "sensitive", "secret"]>;
+    createdAt: z.ZodString;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+}, "strip", z.ZodTypeAny, {
+    sensitivity: "public" | "normal" | "sensitive" | "secret";
+    name: string;
+    id: string;
+    mimeType: string;
+    sizeBytes: number;
+    sha256: string;
+    source: "filesystem" | "tool" | "mcp" | "browser" | "generated" | "clipboard" | "user-upload";
+    createdAt: string;
+    metadata?: Record<string, unknown> | undefined;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+}, {
+    sensitivity: "public" | "normal" | "sensitive" | "secret";
+    name: string;
+    id: string;
+    mimeType: string;
+    sizeBytes: number;
+    sha256: string;
+    source: "filesystem" | "tool" | "mcp" | "browser" | "generated" | "clipboard" | "user-upload";
+    createdAt: string;
+    metadata?: Record<string, unknown> | undefined;
+    projectId?: string | undefined;
+    sessionId?: string | undefined;
+    taskId?: string | undefined;
+}>;
+export type Attachment = z.infer<typeof AttachmentSchema>;
+//# sourceMappingURL=attachment.d.ts.map

package/dist/domain/attachment.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.d.ts","sourceRoot":"","sources":["../../src/domain/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAGxB;;;GAGG;AACH,eAAO,MAAM,sBAAsB,8FAQjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;GAGG;AACH,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAa3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC"}

package/dist/domain/attachment.js

@@ -0,0 +1,34 @@
+import { z } from "zod";
+import { SensitivityLevelSchema } from "./security.js";
+/**
+ * Origin source for attachments.
+ * PRD Part 1 Section 14.
+ */
+export const AttachmentSourceSchema = z.enum([
+    "user-upload",
+    "filesystem",
+    "clipboard",
+    "browser",
+    "tool",
+    "mcp",
+    "generated",
+]);
+/**
+ * Attachment registry entry contract.
+ * PRD Part 1 Section 14.
+ */
+export const AttachmentSchema = z.object({
+    id: z.string().min(1),
+    name: z.string().min(1),
+    mimeType: z.string().min(1),
+    sizeBytes: z.number().int().nonnegative(),
+    sha256: z.string().length(64),
+    source: AttachmentSourceSchema,
+    projectId: z.string().optional(),
+    sessionId: z.string().optional(),
+    taskId: z.string().optional(),
+    sensitivity: SensitivityLevelSchema,
+    createdAt: z.string().min(1),
+    metadata: z.record(z.unknown()).optional(),
+});
+//# sourceMappingURL=attachment.js.map

package/dist/domain/attachment.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment.js","sourceRoot":"","sources":["../../src/domain/attachment.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AACxB,OAAO,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAC;AAEvD;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3C,aAAa;IACb,YAAY;IACZ,WAAW;IACX,SAAS;IACT,MAAM;IACN,KAAK;IACL,WAAW;CACZ,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,gBAAgB,GAAG,CAAC,CAAC,MAAM,CAAC;IACvC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC3B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE;IACzC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,MAAM,CAAC,EAAE,CAAC;IAC7B,MAAM,EAAE,sBAAsB;IAC9B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAC7B,WAAW,EAAE,sBAAsB;IACnC,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;CAC3C,CAAC,CAAC"}

package/dist/domain/auth.d.ts

@@ -0,0 +1,264 @@
+import { z } from "zod";
+/**
+ * Credential lifecycle states.
+ * PRD Part 3 Section 141-145.
+ */
+export declare const CredentialStatusSchema: z.ZodEnum<["configured", "available", "cooldown", "rate_limited", "unhealthy", "disabled", "expired", "revoked", "invalid"]>;
+export type CredentialStatus = z.infer<typeof CredentialStatusSchema>;
+/**
+ * Safe metadata for a provider credential (without the raw secret).
+ * Critical Invariant: Raw secrets must never enter this contract.
+ */
+export declare const CredentialReferenceSchema: z.ZodObject<{
+    credentialId: z.ZodString;
+    providerId: z.ZodString;
+    authProfileId: z.ZodString;
+    name: z.ZodString;
+    maskedFingerprint: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<["configured", "available", "cooldown", "rate_limited", "unhealthy", "disabled", "expired", "revoked", "invalid"]>>;
+    maxConcurrent: z.ZodDefault<z.ZodNumber>;
+    concurrencyCount: z.ZodDefault<z.ZodNumber>;
+    rateLimitRpm: z.ZodOptional<z.ZodNumber>;
+    cooldownUntil: z.ZodOptional<z.ZodString>;
+    failureCount: z.ZodDefault<z.ZodNumber>;
+    createdAt: z.ZodString;
+    lastUsedAt: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: "available" | "invalid" | "configured" | "cooldown" | "rate_limited" | "unhealthy" | "disabled" | "expired" | "revoked";
+    name: string;
+    createdAt: string;
+    providerId: string;
+    credentialId: string;
+    authProfileId: string;
+    maskedFingerprint: string;
+    maxConcurrent: number;
+    concurrencyCount: number;
+    failureCount: number;
+    rateLimitRpm?: number | undefined;
+    cooldownUntil?: string | undefined;
+    lastUsedAt?: string | undefined;
+}, {
+    name: string;
+    createdAt: string;
+    providerId: string;
+    credentialId: string;
+    authProfileId: string;
+    maskedFingerprint: string;
+    status?: "available" | "invalid" | "configured" | "cooldown" | "rate_limited" | "unhealthy" | "disabled" | "expired" | "revoked" | undefined;
+    maxConcurrent?: number | undefined;
+    concurrencyCount?: number | undefined;
+    rateLimitRpm?: number | undefined;
+    cooldownUntil?: string | undefined;
+    failureCount?: number | undefined;
+    lastUsedAt?: string | undefined;
+}>;
+export type CredentialReference = z.infer<typeof CredentialReferenceSchema>;
+/**
+ * AuthProfile grouping credentials for a specific provider.
+ */
+export declare const AuthProfileSchema: z.ZodObject<{
+    id: z.ZodString;
+    providerId: z.ZodString;
+    name: z.ZodString;
+    authType: z.ZodDefault<z.ZodEnum<["api_key", "bearer_token", "oauth", "custom"]>>;
+    credentialIds: z.ZodDefault<z.ZodArray<z.ZodString, "many">>;
+    status: z.ZodDefault<z.ZodEnum<["active", "disabled", "deprecated"]>>;
+    metadata: z.ZodOptional<z.ZodRecord<z.ZodString, z.ZodUnknown>>;
+    createdAt: z.ZodString;
+    updatedAt: z.ZodString;
+}, "strip", z.ZodTypeAny, {
+    status: "active" | "disabled" | "deprecated";
+    name: string;
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    providerId: string;
+    authType: "custom" | "api_key" | "bearer_token" | "oauth";
+    credentialIds: string[];
+    metadata?: Record<string, unknown> | undefined;
+}, {
+    name: string;
+    id: string;
+    createdAt: string;
+    updatedAt: string;
+    providerId: string;
+    status?: "active" | "disabled" | "deprecated" | undefined;
+    metadata?: Record<string, unknown> | undefined;
+    authType?: "custom" | "api_key" | "bearer_token" | "oauth" | undefined;
+    credentialIds?: string[] | undefined;
+}>;
+export type AuthProfile = z.infer<typeof AuthProfileSchema>;
+/**
+ * Active lease representing safe concurrent key usage.
+ */
+export declare const KeyLeaseSchema: z.ZodObject<{
+    leaseId: z.ZodString;
+    credentialId: z.ZodString;
+    providerId: z.ZodString;
+    ownerTaskId: z.ZodOptional<z.ZodString>;
+    acquiredAt: z.ZodString;
+    releasedAt: z.ZodOptional<z.ZodString>;
+    status: z.ZodDefault<z.ZodEnum<["active", "released", "expired"]>>;
+}, "strip", z.ZodTypeAny, {
+    status: "active" | "expired" | "released";
+    providerId: string;
+    credentialId: string;
+    leaseId: string;
+    acquiredAt: string;
+    ownerTaskId?: string | undefined;
+    releasedAt?: string | undefined;
+}, {
+    providerId: string;
+    credentialId: string;
+    leaseId: string;
+    acquiredAt: string;
+    status?: "active" | "expired" | "released" | undefined;
+    ownerTaskId?: string | undefined;
+    releasedAt?: string | undefined;
+}>;
+export type KeyLease = z.infer<typeof KeyLeaseSchema>;
+/**
+ * Key Pool managing multiple credential members for a provider.
+ */
+export declare const KeyPoolSchema: z.ZodObject<{
+    id: z.ZodString;
+    providerId: z.ZodString;
+    name: z.ZodString;
+    members: z.ZodDefault<z.ZodArray<z.ZodObject<{
+        credentialId: z.ZodString;
+        providerId: z.ZodString;
+        authProfileId: z.ZodString;
+        name: z.ZodString;
+        maskedFingerprint: z.ZodString;
+        status: z.ZodDefault<z.ZodEnum<["configured", "available", "cooldown", "rate_limited", "unhealthy", "disabled", "expired", "revoked", "invalid"]>>;
+        maxConcurrent: z.ZodDefault<z.ZodNumber>;
+        concurrencyCount: z.ZodDefault<z.ZodNumber>;
+        rateLimitRpm: z.ZodOptional<z.ZodNumber>;
+        cooldownUntil: z.ZodOptional<z.ZodString>;
+        failureCount: z.ZodDefault<z.ZodNumber>;
+        createdAt: z.ZodString;
+        lastUsedAt: z.ZodOptional<z.ZodString>;
+    }, "strip", z.ZodTypeAny, {
+        status: "available" | "invalid" | "configured" | "cooldown" | "rate_limited" | "unhealthy" | "disabled" | "expired" | "revoked";
+        name: string;
+        createdAt: string;
+        providerId: string;
+        credentialId: string;
+        authProfileId: string;
+        maskedFingerprint: string;
+        maxConcurrent: number;
+        concurrencyCount: number;
+        failureCount: number;
+        rateLimitRpm?: number | undefined;
+        cooldownUntil?: string | undefined;
+        lastUsedAt?: string | undefined;
+    }, {
+        name: string;
+        createdAt: string;
+        providerId: string;
+        credentialId: string;
+        authProfileId: string;
+        maskedFingerprint: string;
+        status?: "available" | "invalid" | "configured" | "cooldown" | "rate_limited" | "unhealthy" | "disabled" | "expired" | "revoked" | undefined;
+        maxConcurrent?: number | undefined;
+        concurrencyCount?: number | undefined;
+        rateLimitRpm?: number | undefined;
+        cooldownUntil?: string | undefined;
+        failureCount?: number | undefined;
+        lastUsedAt?: string | undefined;
+    }>, "many">>;
+    maxTotalConcurrent: z.ZodDefault<z.ZodNumber>;
+    selectionStrategy: z.ZodDefault<z.ZodEnum<["least_busy", "round_robin", "priority"]>>;
+}, "strip", z.ZodTypeAny, {
+    name: string;
+    id: string;
+    providerId: string;
+    members: {
+        status: "available" | "invalid" | "configured" | "cooldown" | "rate_limited" | "unhealthy" | "disabled" | "expired" | "revoked";
+        name: string;
+        createdAt: string;
+        providerId: string;
+        credentialId: string;
+        authProfileId: string;
+        maskedFingerprint: string;
+        maxConcurrent: number;
+        concurrencyCount: number;
+        failureCount: number;
+        rateLimitRpm?: number | undefined;
+        cooldownUntil?: string | undefined;
+        lastUsedAt?: string | undefined;
+    }[];
+    maxTotalConcurrent: number;
+    selectionStrategy: "priority" | "least_busy" | "round_robin";
+}, {
+    name: string;
+    id: string;
+    providerId: string;
+    members?: {
+        name: string;
+        createdAt: string;
+        providerId: string;
+        credentialId: string;
+        authProfileId: string;
+        maskedFingerprint: string;
+        status?: "available" | "invalid" | "configured" | "cooldown" | "rate_limited" | "unhealthy" | "disabled" | "expired" | "revoked" | undefined;
+        maxConcurrent?: number | undefined;
+        concurrencyCount?: number | undefined;
+        rateLimitRpm?: number | undefined;
+        cooldownUntil?: string | undefined;
+        failureCount?: number | undefined;
+        lastUsedAt?: string | undefined;
+    }[] | undefined;
+    maxTotalConcurrent?: number | undefined;
+    selectionStrategy?: "priority" | "least_busy" | "round_robin" | undefined;
+}>;
+export type KeyPool = z.infer<typeof KeyPoolSchema>;
+/**
+ * Independent Health Status for Providers and Models.
+ */
+export declare const HealthStatusSchema: z.ZodEnum<["healthy", "degraded", "unavailable", "unknown"]>;
+export type HealthStatus = z.infer<typeof HealthStatusSchema>;
+export declare const ProviderHealthStatusSchema: z.ZodObject<{
+    providerId: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<["healthy", "degraded", "unavailable", "unknown"]>>;
+    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+    lastCheckedAt: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: "unknown" | "healthy" | "degraded" | "unavailable";
+    providerId: string;
+    consecutiveFailures: number;
+    lastCheckedAt: string;
+    reason?: string | undefined;
+}, {
+    providerId: string;
+    lastCheckedAt: string;
+    status?: "unknown" | "healthy" | "degraded" | "unavailable" | undefined;
+    reason?: string | undefined;
+    consecutiveFailures?: number | undefined;
+}>;
+export type ProviderHealthStatus = z.infer<typeof ProviderHealthStatusSchema>;
+export declare const ModelHealthStatusSchema: z.ZodObject<{
+    providerId: z.ZodString;
+    modelId: z.ZodString;
+    status: z.ZodDefault<z.ZodEnum<["healthy", "degraded", "unavailable", "unknown"]>>;
+    consecutiveFailures: z.ZodDefault<z.ZodNumber>;
+    lastCheckedAt: z.ZodString;
+    reason: z.ZodOptional<z.ZodString>;
+}, "strip", z.ZodTypeAny, {
+    status: "unknown" | "healthy" | "degraded" | "unavailable";
+    modelId: string;
+    providerId: string;
+    consecutiveFailures: number;
+    lastCheckedAt: string;
+    reason?: string | undefined;
+}, {
+    modelId: string;
+    providerId: string;
+    lastCheckedAt: string;
+    status?: "unknown" | "healthy" | "degraded" | "unavailable" | undefined;
+    reason?: string | undefined;
+    consecutiveFailures?: number | undefined;
+}>;
+export type ModelHealthStatus = z.infer<typeof ModelHealthStatusSchema>;
+//# sourceMappingURL=auth.d.ts.map

package/dist/domain/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../../src/domain/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,eAAO,MAAM,sBAAsB,8HAUjC,CAAC;AACH,MAAM,MAAM,gBAAgB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,sBAAsB,CAAC,CAAC;AAEtE;;;GAGG;AACH,eAAO,MAAM,yBAAyB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAcpC,CAAC;AACH,MAAM,MAAM,mBAAmB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,yBAAyB,CAAC,CAAC;AAE5E;;GAEG;AACH,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAU5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;GAEG;AACH,eAAO,MAAM,cAAc;;;;;;;;;;;;;;;;;;;;;;;;EAQzB,CAAC;AACH,MAAM,MAAM,QAAQ,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,cAAc,CAAC,CAAC;AAEtD;;GAEG;AACH,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAOxB,CAAC;AACH,MAAM,MAAM,OAAO,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,aAAa,CAAC,CAAC;AAEpD;;GAEG;AACH,eAAO,MAAM,kBAAkB,8DAA4D,CAAC;AAC5F,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,0BAA0B;;;;;;;;;;;;;;;;;;EAMrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,uBAAuB;;;;;;;;;;;;;;;;;;;;;EAOlC,CAAC;AACH,MAAM,MAAM,iBAAiB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,uBAAuB,CAAC,CAAC"}

package/dist/domain/auth.js

@@ -0,0 +1,92 @@
+import { z } from "zod";
+/**
+ * Credential lifecycle states.
+ * PRD Part 3 Section 141-145.
+ */
+export const CredentialStatusSchema = z.enum([
+    "configured",
+    "available",
+    "cooldown",
+    "rate_limited",
+    "unhealthy",
+    "disabled",
+    "expired",
+    "revoked",
+    "invalid",
+]);
+/**
+ * Safe metadata for a provider credential (without the raw secret).
+ * Critical Invariant: Raw secrets must never enter this contract.
+ */
+export const CredentialReferenceSchema = z.object({
+    credentialId: z.string().min(1),
+    providerId: z.string().min(1),
+    authProfileId: z.string().min(1),
+    name: z.string().min(1),
+    maskedFingerprint: z.string().min(1), // e.g. "sk-...1234"
+    status: CredentialStatusSchema.default("available"),
+    maxConcurrent: z.number().int().positive().default(1),
+    concurrencyCount: z.number().int().nonnegative().default(0),
+    rateLimitRpm: z.number().int().positive().optional(),
+    cooldownUntil: z.string().optional(),
+    failureCount: z.number().int().nonnegative().default(0),
+    createdAt: z.string().min(1),
+    lastUsedAt: z.string().optional(),
+});
+/**
+ * AuthProfile grouping credentials for a specific provider.
+ */
+export const AuthProfileSchema = z.object({
+    id: z.string().min(1),
+    providerId: z.string().min(1),
+    name: z.string().min(1),
+    authType: z.enum(["api_key", "bearer_token", "oauth", "custom"]).default("api_key"),
+    credentialIds: z.array(z.string()).default([]),
+    status: z.enum(["active", "disabled", "deprecated"]).default("active"),
+    metadata: z.record(z.unknown()).optional(),
+    createdAt: z.string().min(1),
+    updatedAt: z.string().min(1),
+});
+/**
+ * Active lease representing safe concurrent key usage.
+ */
+export const KeyLeaseSchema = z.object({
+    leaseId: z.string().min(1),
+    credentialId: z.string().min(1),
+    providerId: z.string().min(1),
+    ownerTaskId: z.string().optional(),
+    acquiredAt: z.string().min(1),
+    releasedAt: z.string().optional(),
+    status: z.enum(["active", "released", "expired"]).default("active"),
+});
+/**
+ * Key Pool managing multiple credential members for a provider.
+ */
+export const KeyPoolSchema = z.object({
+    id: z.string().min(1),
+    providerId: z.string().min(1),
+    name: z.string().min(1),
+    members: z.array(CredentialReferenceSchema).default([]),
+    maxTotalConcurrent: z.number().int().positive().default(5),
+    selectionStrategy: z.enum(["least_busy", "round_robin", "priority"]).default("least_busy"),
+});
+/**
+ * Independent Health Status for Providers and Models.
+ */
+export const HealthStatusSchema = z.enum(["healthy", "degraded", "unavailable", "unknown"]);
+export const ProviderHealthStatusSchema = z.object({
+    providerId: z.string().min(1),
+    status: HealthStatusSchema.default("healthy"),
+    consecutiveFailures: z.number().int().nonnegative().default(0),
+    lastCheckedAt: z.string().min(1),
+    reason: z.string().optional(),
+});
+export const ModelHealthStatusSchema = z.object({
+    providerId: z.string().min(1),
+    modelId: z.string().min(1),
+    status: HealthStatusSchema.default("healthy"),
+    consecutiveFailures: z.number().int().nonnegative().default(0),
+    lastCheckedAt: z.string().min(1),
+    reason: z.string().optional(),
+});
+//# sourceMappingURL=auth.js.map

package/dist/domain/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../../src/domain/auth.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAExB;;;GAGG;AACH,MAAM,CAAC,MAAM,sBAAsB,GAAG,CAAC,CAAC,IAAI,CAAC;IAC3C,YAAY;IACZ,WAAW;IACX,UAAU;IACV,cAAc;IACd,WAAW;IACX,UAAU;IACV,SAAS;IACT,SAAS;IACT,SAAS;CACV,CAAC,CAAC;AAGH;;;GAGG;AACH,MAAM,CAAC,MAAM,yBAAyB,GAAG,CAAC,CAAC,MAAM,CAAC;IAChD,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,iBAAiB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,oBAAoB;IAC1D,MAAM,EAAE,sBAAsB,CAAC,OAAO,CAAC,WAAW,CAAC;IACnD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACrD,gBAAgB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC3D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE;IACpD,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACpC,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACvD,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAClC,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,CAAC,CAAC,MAAM,CAAC;IACxC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,cAAc,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC;IACnF,aAAa,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IAC9C,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;IACtE,QAAQ,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,QAAQ,EAAE;IAC1C,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC5B,SAAS,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;CAC7B,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,cAAc,GAAG,CAAC,CAAC,MAAM,CAAC;IACrC,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC/B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,WAAW,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IAClC,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;IACjC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC;CACpE,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG,CAAC,CAAC,MAAM,CAAC;IACpC,EAAE,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACrB,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IACvB,OAAO,EAAE,CAAC,CAAC,KAAK,CAAC,yBAAyB,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC;IACvD,kBAAkB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,QAAQ,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC1D,iBAAiB,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,YAAY,EAAE,aAAa,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC;CAC3F,CAAC,CAAC;AAGH;;GAEG;AACH,MAAM,CAAC,MAAM,kBAAkB,GAAG,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,UAAU,EAAE,aAAa,EAAE,SAAS,CAAC,CAAC,CAAC;AAG5F,MAAM,CAAC,MAAM,0BAA0B,GAAG,CAAC,CAAC,MAAM,CAAC;IACjD,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC;AAGH,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC,MAAM,CAAC;IAC9C,UAAU,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC7B,OAAO,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAC1B,MAAM,EAAE,kBAAkB,CAAC,OAAO,CAAC,SAAS,CAAC;IAC7C,mBAAmB,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,EAAE,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9D,aAAa,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC;IAChC,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;CAC9B,CAAC,CAAC"}