koneck 2.73.1 → 2.75.0

package/dist/engine.d.ts

@@ -71,6 +71,37 @@ export declare function isRetryableProviderError(err: unknown): boolean;
  * Jitter matters as much as the delay. Parallel agents fail together, so without it they retry in
  * lockstep and collide again on exactly the request that rate-limited them.
  */
+/**
+ * Whether a refusal is about what the account may use rather than about the key.
+ *
+ * A 401 and a 403 look the same from outside and mean quite different things underneath: a key that
+ * is wrong, and a key that is right for an account which has not paid for this model. Only the
+ * first is fixed by looking at the key, and telling somebody to check a working key while their
+ * balance is the problem costs them the afternoon.
+ *
+ * Read from the provider's own words, in the languages providers answer in. 充值 is top up, 余额 is
+ * balance, 权限 is permission.
+ */
+export declare function looksLikeEntitlement(err: unknown): boolean;
+/** The provider's own sentence about it, for saying what it said rather than paraphrasing. */
+export declare function entitlementReason(err: unknown): string;
+/**
+ * Whether nothing could be reached at all, as opposed to something answering unhappily.
+ *
+ * The distinction decides how long to keep trying. A 429 or a 500 is a provider that is up and
+ * telling you something; a connection that cannot be made is usually the link, and the link usually
+ * comes back. Carries no status by definition — an HTTP status means an HTTP response happened.
+ */
+/**
+ * Waits, unless the turn is stopped first.
+ *
+ * A plain setTimeout is fine for a second and wrong for thirty: while waiting out an outage the
+ * stop button and ctrl-c have to work, and a timer that cannot be interrupted turns "stop" into
+ * "stop in half a minute". The listener is removed either way, so a long run does not accumulate
+ * one per attempt.
+ */
+export declare function sleepUnlessAborted(ms: number, signal?: AbortSignal): Promise<void>;
+export declare function isConnectivityFailure(err: unknown): boolean;
 export declare function retryDelayMs(err: unknown, attempt: number, random?: () => number): number;
 /**
  * Whether a provider is saying the model cannot do tool calling.

package/dist/engine.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAc5B,OAAO,EACE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAoBtC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAMvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWtC,OAAO,EAA2B,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAWlB,OAAO,EAAE,kBAAkB,EAAuD,MAAM,iBAAiB,CAAC;AAI1G,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EACV,OAAO,EACP,WAAW,EAEX,UAAU,EAKX,MAAM,YAAY,CAAC;AAIpB;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;AAC7C;;;;GAIG;AACH,KAAK,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,MAAM,CAmFR;AAED,qGAAqG;AACrG,MAAM,WAAW,aAAa;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEpF;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACxG,IAAI,CAQN;AAsBD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAyC9D;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAc,GAAG,MAAM,CAuBxF;AAED;;;;;;;GAOG;AACH;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI5D;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAG/D;AAsED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAkB7D;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,GAAG,OAAO,CAExF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAcvD;AAID,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAQvD;AAID;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CAOrE;AAiDD,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAM,GAAG,MAAM,CAG/D;AAED,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AAEtC,6FAA6F;AAC7F,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,GAAG,MAAM,CAStF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAmB,GAAG,MAAM,CAK/E;AA2ID;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,GAAG,EAAE,OAAO,CAAC;IACb,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,SAAS,EAAE,gBAAgB,GAC1B,MAAM,EAAE,CAMV;AAED,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE7E;AA+DD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG7E;AAQD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,CAAC,EACrC,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACzC,OAAO,CAAC,CAAC,EAAE,CAAC,CAad;AAkJD;;;;;GAKG;AACH;;;;;;;GAOG;AACH,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAM1E;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAGlE;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAevD;AAGD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASpE;AAGD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,OAAO,EACpB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAiDR;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,OAAO,EAAE,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,UAAU,EACjB,UAAU,EAAE,cAAc,EAAE,EAC5B,OAAO,EAAE,WAAW,EAAE,EAEtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAC7C,UAAU,SAAI,EACd,WAAW,CAAC,EAAE,WAAW,EACzB,UAAU,CAAC,EAAE,kBAAkB;AAC/B;;;;;;GAMG;AACH,OAAO,GAAE;IAAE,OAAO,EAAE,IAAI,CAAA;CAA4B;AACpD,2FAA2F;AAC3F,UAAU,CAAC,EAAE,UAAU;AACvB,4FAA4F;AAC5F,eAAe,GAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAmB,GACpD,OAAO,CAAC,OAAO,CAAC,CAupDlB;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,EAAE,CAAC;IAC3G,6FAA6F;IAC7F,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;CAC3B;AAGD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAarE;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,WAAW,EACnB,eAAe,CAAC,EAAE,OAAO,EAAE;AAC3B;;;;;;;GAOG;AACH,YAAY,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;AAClC,iGAAiG;AACjG,WAAW,CAAC,EAAE,IAAI,GACjB,OAAO,CAAC,YAAY,CAAC,CAwRvB;AAwBD;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAGD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,EACnB,eAAe,CAAC,EAAE,OAAO,EAAE,EAC3B,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,YAAY,CAAC,CAwKvB"}
+{"version":3,"file":"engine.d.ts","sourceRoot":"","sources":["../src/engine.ts"],"names":[],"mappings":"AAAA,OAAO,MAAM,MAAM,QAAQ,CAAC;AAc5B,OAAO,EACE,KAAK,IAAI,EAAE,MAAM,WAAW,CAAC;AAoBtC,OAAO,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAC;AAC7C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAMvD,OAAO,KAAK,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAWtC,OAAO,EAA2B,KAAK,WAAW,EAAE,MAAM,cAAc,CAAC;AACzE,OAAO,EAIL,KAAK,cAAc,EACpB,MAAM,UAAU,CAAC;AAWlB,OAAO,EAAE,kBAAkB,EAAuD,MAAM,iBAAiB,CAAC;AAI1G,OAAO,EAAE,eAAe,EAAE,MAAM,iBAAiB,CAAC;AAClD,OAAO,KAAK,EACV,OAAO,EACP,WAAW,EAEX,UAAU,EAKX,MAAM,YAAY,CAAC;AAIpB;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM;AAC7C;;;;GAIG;AACH,KAAK,GAAE;IAAE,QAAQ,CAAC,EAAE,OAAO,CAAC;IAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAAO,GACtD,MAAM,CAmGR;AAED,qGAAqG;AACrG,MAAM,WAAW,aAAa;IAAG,MAAM,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE;AAEpF;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAC7B,KAAK,EAAE,UAAU,EACjB,QAAQ,EAAE,aAAa,EACvB,KAAK,EAAE;IAAE,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GACxG,IAAI,CAQN;AAyCD;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAkD9D;AAED;;;;;;;;;;GAUG;AACH;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAe1D;AAED,8FAA8F;AAC9F,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,OAAO,GAAG,MAAM,CAQtD;AAED;;;;;;GAMG;AACH;;;;;;;GAOG;AACH,wBAAgB,kBAAkB,CAAC,EAAE,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAWlF;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAO3D;AAED,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,eAAc,GAAG,MAAM,CAuBxF;AAED;;;;;;;GAOG;AACH;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAGzD;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAI5D;AAED,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,OAAO,CAG/D;AAsED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAkB7D;AAMD;;;;;GAKG;AACH,wBAAgB,uBAAuB,CAAC,IAAI,EAAE,MAAM,EAAE,gBAAgB,EAAE,OAAO,GAAG,OAAO,CAExF;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAcvD;AAID,wBAAgB,WAAW,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,CAQvD;AAID;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,SAAK,GAAG,MAAM,CAOrE;AAiDD,kEAAkE;AAClE,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAM,GAAG,MAAM,CAG/D;AAED,uEAAuE;AACvE,eAAO,MAAM,gBAAgB,OAAQ,CAAC;AAEtC,6FAA6F;AAC7F,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,WAAW,CAAC,aAAa,CAAC,GAAG,MAAM,CAStF;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,MAAM,EAAE,MAAM,EAAE,KAAK,SAAmB,GAAG,MAAM,CAK/E;AA2ID;;;;;;;GAOG;AACH,MAAM,WAAW,gBAAgB;IAC/B,yDAAyD;IACzD,GAAG,EAAE,OAAO,CAAC;IACb,gDAAgD;IAChD,SAAS,EAAE,OAAO,CAAC;CACpB;AAED,wBAAgB,kBAAkB,CAChC,KAAK,EAAE,SAAS,MAAM,EAAE,EACxB,SAAS,EAAE,gBAAgB,GAC1B,MAAM,EAAE,CAMV;AAED,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAE7E;AA+DD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,SAAS,EAAE,MAAM,GAAG,SAAS,GAAG,MAAM,CAG7E;AAQD;;;;GAIG;AACH,wBAAsB,YAAY,CAAC,CAAC,EAAE,CAAC,EACrC,KAAK,EAAE,SAAS,CAAC,EAAE,EACnB,KAAK,EAAE,MAAM,EACb,EAAE,EAAE,CAAC,IAAI,EAAE,CAAC,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,GACzC,OAAO,CAAC,CAAC,EAAE,CAAC,CAad;AAkJD;;;;;GAKG;AACH;;;;;;;GAOG;AACH,0FAA0F;AAC1F,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,WAAW,GAAG,MAAM,GAAG,SAAS,CAM1E;AAED,wBAAgB,YAAY,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,OAAO,CAGlE;AAED,wBAAgB,WAAW,CAAC,QAAQ,EAAE,OAAO,EAAE,GAAG,MAAM,CAevD;AAGD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CASpE;AAGD;;;;;;;;;;;;;GAaG;AACH,wBAAgB,mBAAmB,CACjC,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,WAAW,EAAE,OAAO,EACpB,QAAQ,CAAC,EAAE,MAAM,GAChB,MAAM,CAiDR;AAED,wBAAsB,YAAY,CAChC,QAAQ,EAAE,OAAO,EAAE,EACnB,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,WAAW,EACnB,YAAY,EAAE,MAAM,EACpB,KAAK,EAAE,UAAU,EACjB,UAAU,EAAE,cAAc,EAAE,EAC5B,OAAO,EAAE,WAAW,EAAE,EAEtB,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAC7C,UAAU,SAAI,EACd,WAAW,CAAC,EAAE,WAAW,EACzB,UAAU,CAAC,EAAE,kBAAkB;AAC/B;;;;;;GAMG;AACH,OAAO,GAAE;IAAE,OAAO,EAAE,IAAI,CAAA;CAA4B;AACpD,2FAA2F;AAC3F,UAAU,CAAC,EAAE,UAAU;AACvB,4FAA4F;AAC5F,eAAe,GAAE;IAAE,OAAO,EAAE,MAAM,CAAA;CAAmB,GACpD,OAAO,CAAC,OAAO,CAAC,CAgvDlB;AAID,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,QAAQ,EAAE,OAAO,EAAE,CAAC;IAC7B,QAAQ,CAAC,KAAK,EAAE,UAAU,CAAC;IAC3B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,0DAA0D;IAC1D,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC;IACpB,kEAAkE;IAClE,QAAQ,CAAC,UAAU,EAAE,SAAS,eAAe,EAAE,CAAC;IAChD,8FAA8F;IAC9F,QAAQ,CAAC,UAAU,EAAE,SAAS;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,SAAS;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,CAAC,EAAE,MAAM,CAAA;SAAE,EAAE,CAAA;KAAE,EAAE,CAAC;IAC3G,6FAA6F;IAC7F,IAAI,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,EAAE,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC/F;;;;;;OAMG;IACH,OAAO,CAAC,IAAI,EAAE,IAAI,GAAG,IAAI,CAAC;CAC3B;AAGD;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,EAAE,CAarE;AAED,wBAAsB,kBAAkB,CACtC,MAAM,EAAE,WAAW,EACnB,eAAe,CAAC,EAAE,OAAO,EAAE;AAC3B;;;;;;;GAOG;AACH,YAAY,CAAC,EAAE,OAAO,CAAC,UAAU,CAAC;AAClC,iGAAiG;AACjG,WAAW,CAAC,EAAE,IAAI,GACjB,OAAO,CAAC,YAAY,CAAC,CAwRvB;AAwBD;;;;;;GAMG;AACH,MAAM,WAAW,YAAY;IAC3B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,uFAAuF;IACvF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,sFAAsF;IACtF,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AAGD;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAExD;AAED,wBAAsB,QAAQ,CAC5B,IAAI,EAAE,MAAM,EACZ,MAAM,EAAE,WAAW,EACnB,eAAe,CAAC,EAAE,OAAO,EAAE,EAC3B,MAAM,CAAC,EAAE,YAAY,GACpB,OAAO,CAAC,YAAY,CAAC,CAwKvB"}

package/dist/engine.js

@@ -7,7 +7,7 @@ import { execa } from 'execa';
 import { TOOL_DEFINITIONS, dispatchTool, describeShell, unknownToolError, resolveToolAlias, aliasNotice, isToolFailure, } from './tools.js';
 import { tui } from './tui.js';
 import { hasWorkspaceOwnedGitRepo, gitScope, createWorktree, mergeWorktree, preservedWorktreeNotice } from './worktree.js';
-import { resolveProvider, getApiKey, keyProvenance, servesLocally, servesOwnWeights, isPrivateHost } from './providers.js';
+import { resolveProvider, getApiKey, keyProvenance, servesLocally, servesOwnWeights, needsNoCredential, isPrivateHost } from './providers.js';
 import { wireEffort, looksLikeEffortUnsupported, acceptedEfforts, nearestAccepted } from './pace.js';
 import { triggerFor, pickNext, describeSwitch, askSwitch, keyOf as failoverKey } from './failover.js';
 import { findChurn, describeChurn, WINDOW as CHURN_WINDOW } from './cycle.js';
@@ -92,9 +92,25 @@ about = {}) {
     const hint = status === 429
         ? `Rate limited or out of quota on ${provider}. Check the plan and billing for that account.`
         : status === 401 || status === 403
-            ? `${provider} rejected the credential. Check the API key, and that it is enabled for this `
-                + `endpoint.`
-                + (about.credential ? `\nThe key used: ${about.credential}` : '')
+            /*
+             * A 403 is not always about the key, and saying it is sends somebody to check a key that is
+             * fine.
+             *
+             * Verbatim from a provider: "Access restricted. Deposit required to unlock premium models.
+             * (access_denied)". KONECK answered that with "rejected the credential. Check the API key,
+             * and that it is enabled for this endpoint" — advice about the one thing that was not the
+             * matter. The key was accepted; the account is not entitled to that model.
+             */
+            ? looksLikeEntitlement(err)
+                ? `${provider} accepted the key but will not serve "${model}" on this account`
+                    + `${entitlementReason(err) ? ' — ' + entitlementReason(err) : '.'}`
+                    + `\nThis is the account rather than the key: nothing about the key needs changing. `
+                    + `Either add credit or a plan for that model, or use /models to pick one the account `
+                    + `already covers.`
+                    + (about.credential ? `\nThe key used: ${about.credential}` : '')
+                : `${provider} rejected the credential. Check the API key, and that it is enabled for this `
+                    + `endpoint.`
+                    + (about.credential ? `\nThe key used: ${about.credential}` : '')
             : status === 404
                 ? `${provider} does not recognise model "${model}". Use /models to pick one it offers.`
                 : status === 400
@@ -176,6 +192,23 @@ const MAX_CONTINUATION_NUDGES = 4;
 const STREAM_IDLE_MS = 120_000;
 /** How many times a turn is retried after a transient provider failure. */
 const MAX_TURN_RETRIES = 3;
+/**
+ * How long to keep trying when the network is simply not there.
+ *
+ * A provider that answers with a 500 or a 429 is up and saying something, and three attempts is a
+ * fair test of whether it will settle. A connection that cannot be made at all is a different
+ * situation: the wifi dropped, the tunnel restarted, the laptop moved between networks. Those last
+ * minutes rather than seconds, and ending an hour of work because of two is the wrong answer —
+ * "keep trying and carry on when it comes back" is what a person would do, and what was asked for.
+ *
+ * Bounded rather than infinite, because a run nobody is watching should not hold a machine open for
+ * ever. An hour is long enough to cover a reboot of anything on the path and short enough to be a
+ * limit rather than a leak. Stopping sooner is always available: the turn's abort signal is honoured
+ * between attempts, so ctrl-c and the stop button both work throughout.
+ */
+const OFFLINE_RETRY_WINDOW_MS = 60 * 60 * 1000;
+/** The longest wait between attempts while offline. Long enough to be patient, short enough to notice recovery. */
+const OFFLINE_MAX_BACKOFF_MS = 30_000;
 /** Consecutive empty responses before the provider is declared unresponsive. */
 const MAX_EMPTY_TURNS = 3;
 /**
@@ -207,6 +240,16 @@ export function isRetryableProviderError(err) {
         return true; // rate limited: back off and retry
     if (status !== undefined && status >= 500)
         return true; // server-side, usually transient
+    /*
+     * An account that may not use this model will not be able to use it on the third attempt either.
+     *
+     * "Access restricted. Deposit required to unlock premium models" contains the word "model", so
+     * the router rule below read it as a routing problem and retried three times over several
+     * seconds to arrive at the same refusal. It is a durable state of the account, and the way out is
+     * a different model or a payment, not another request.
+     */
+    if ((status === 401 || status === 403) && looksLikeEntitlement(err))
+        return false;
     // A 401/403/404 naming a model or route is the router, not the key.
     if (status === 401 || status === 403 || status === 404) {
         return /model|route|not supported|unavailable|no such/.test(text);
@@ -241,6 +284,82 @@ export function isRetryableProviderError(err) {
  * Jitter matters as much as the delay. Parallel agents fail together, so without it they retry in
  * lockstep and collide again on exactly the request that rate-limited them.
  */
+/**
+ * Whether a refusal is about what the account may use rather than about the key.
+ *
+ * A 401 and a 403 look the same from outside and mean quite different things underneath: a key that
+ * is wrong, and a key that is right for an account which has not paid for this model. Only the
+ * first is fixed by looking at the key, and telling somebody to check a working key while their
+ * balance is the problem costs them the afternoon.
+ *
+ * Read from the provider's own words, in the languages providers answer in. 充值 is top up, 余额 is
+ * balance, 权限 is permission.
+ */
+export function looksLikeEntitlement(err) {
+    const holder = err;
+    const text = [
+        typeof holder?.message === 'string' ? holder.message : '',
+        typeof holder?.error?.message === 'string' ? holder.error.message : '',
+        typeof holder?.error?.code === 'string' ? holder.error.code : '',
+    ].join(' ').toLowerCase();
+    if (!text)
+        return false;
+    // An explicit "the key is wrong" wins, however much billing language surrounds it: a provider
+    // that names the key is not talking about the balance.
+    if (/invalid api key|incorrect api key|api key not valid|no api key|missing api key|invalid[_ ]api[_ ]key|authentication_error/.test(text)) {
+        return false;
+    }
+    return /deposit|top ?up|insufficient|balance|credit|quota|subscription|not entitled|no access to|upgrade your|billing|payment required|premium model|plan does not|充值|余额|权限不足/
+        .test(text);
+}
+/** The provider's own sentence about it, for saying what it said rather than paraphrasing. */
+export function entitlementReason(err) {
+    const holder = err;
+    const raw = [
+        typeof holder?.error?.message === 'string' ? holder.error.message : '',
+        typeof holder?.message === 'string' ? holder.message : '',
+    ].find(t => t && t.trim() !== '') ?? '';
+    // The request id is for a support ticket, not for a person reading an error, and it is long.
+    return raw.replace(/\(request id:[^)]*\)/i, '').replace(/\s+/g, ' ').trim().slice(0, 200);
+}
+/**
+ * Whether nothing could be reached at all, as opposed to something answering unhappily.
+ *
+ * The distinction decides how long to keep trying. A 429 or a 500 is a provider that is up and
+ * telling you something; a connection that cannot be made is usually the link, and the link usually
+ * comes back. Carries no status by definition — an HTTP status means an HTTP response happened.
+ */
+/**
+ * Waits, unless the turn is stopped first.
+ *
+ * A plain setTimeout is fine for a second and wrong for thirty: while waiting out an outage the
+ * stop button and ctrl-c have to work, and a timer that cannot be interrupted turns "stop" into
+ * "stop in half a minute". The listener is removed either way, so a long run does not accumulate
+ * one per attempt.
+ */
+export function sleepUnlessAborted(ms, signal) {
+    if (signal?.aborted)
+        return Promise.resolve();
+    return new Promise(resolve => {
+        const done = () => {
+            clearTimeout(timer);
+            signal?.removeEventListener('abort', done);
+            resolve();
+        };
+        const timer = setTimeout(done, ms);
+        signal?.addEventListener('abort', done, { once: true });
+    });
+}
+export function isConnectivityFailure(err) {
+    const e = err;
+    if (typeof e?.status === 'number')
+        return false;
+    const text = `${e?.message ?? ''} ${e?.code ?? ''}`.toLowerCase();
+    if (!text.trim())
+        return false;
+    return /connection error|econnrefused|econnreset|econnaborted|etimedout|enotfound|eai_again|ehostunreach|enetunreach|enetdown|epipe|socket hang up|fetch failed|network|dns|tunnel|offline/
+        .test(text);
+}
 export function retryDelayMs(err, attempt, random = Math.random) {
     const text = String(err?.message ?? '');
     const headers = err?.headers;
@@ -1053,6 +1172,14 @@ detectedContext = { current: 0 }) {
     let duplicateCalls = 0;
     let usedMutatingTool = false;
     let turnRetries = 0;
+    /**
+     * When the connection first went away, or 0 while it is up.
+     *
+     * Kept so the offline budget is measured in wall-clock time rather than in attempts: with a
+     * backoff, "thirty attempts" is a different amount of patience early in an outage than late in
+     * one, and what somebody means by "wait for the network" is an amount of time.
+     */
+    let offlineSince = 0;
     let emptyTurns = 0;
     /** Retries spent on an empty turn from a model already known to use tools. */
     let emptyRetries = 0;
@@ -1138,6 +1265,31 @@ detectedContext = { current: 0 }) {
         const file = filePathFrom(args);
         return file ? { kind: 'file', target: file } : null;
     }
+    /**
+     * Whether KONECK could actually authenticate as this candidate.
+     *
+     * Asked before failing over, because moving to a provider with no key is not a recovery — it is
+     * the same failure again with an extra step, and everything the run spawns afterwards inherits
+     * it. A run that failed over twice and then lost two sub-agents to "a provider credential error"
+     * is what this is for.
+     *
+     * A provider serving locally needs nothing, and is usable by definition. Anything that throws
+     * while being resolved — an unknown name, an endpoint that cannot be worked out — is not usable,
+     * which is the right answer for a candidate KONECK cannot even describe.
+     */
+    function canAuthenticate(candidate) {
+        const name = candidate.provider ?? config.provider;
+        try {
+            const resolved = resolveProvider(name);
+            if (needsNoCredential(resolved))
+                return true;
+            getApiKey(resolved);
+            return true;
+        }
+        catch {
+            return false;
+        }
+    }
     async function tryFailover(err) {
         if (!failoverPolicy?.enabled)
             return false;
@@ -1160,7 +1312,7 @@ detectedContext = { current: 0 }) {
             }
         }
         const from = { provider: config.provider, model: config.model };
-        const to = pickNext(failoverPolicy, from, switchedTo, discovered);
+        const to = pickNext(failoverPolicy, from, switchedTo, discovered, Math.random, canAuthenticate);
         if (!to)
             return false;
         if (failoverPolicy.decide === 'ask') {
@@ -1500,6 +1652,21 @@ detectedContext = { current: 0 }) {
                 // keeps its streaming return type; dropped for the run if this model refuses it.
                 ...paceField,
             }, { signal: combinedSignal });
+            /*
+             * The request went through, so the trouble is over.
+             *
+             * These used to be set once for the life of the run and never cleared, which made the retry
+             * budget a lifetime allowance: a run that survived three hiccups in its first ten minutes had
+             * nothing left for hour two, and the fourth blip on turn ninety ended it. Reset here, where
+             * the provider has demonstrably answered, so the counts mean "trouble now".
+             */
+            if (offlineSince !== 0) {
+                offlineSince = 0;
+                config.onOffline?.(null);
+                if (!silent)
+                    tui.printWarning(`Reconnected to ${config.provider} — carrying on.`);
+            }
+            turnRetries = 0;
             // A per-turn AbortSignal guards the request, but once the SDK has the response and is
             // reading the body an abort is not reliably observed, so a silent connection can hang the
             // whole run — a turn sat idle for eight minutes under a five minute timeout. This watchdog
@@ -1869,18 +2036,60 @@ detectedContext = { current: 0 }) {
                 turn--; // do this turn again
                 continue;
             }
-            // A transient provider failure retries the same turn rather than ending the run. Partial
-            // output from the failed attempt is discarded, so the retry starts from clean state.
-            if (isRetryableProviderError(err) && turnRetries < MAX_TURN_RETRIES) {
-                turnRetries++;
-                if (spinner)
-                    spinner.fail(`Provider error on turn ${stats.turns}, retry ${turnRetries}/${MAX_TURN_RETRIES}`);
-                if (!silent) {
-                    tui.printWarning(`${describeProviderError(err, config.provider, config.model, { hadImage: carriesImage(messages) }).split('\n')[0]} — retrying (${turnRetries}/${MAX_TURN_RETRIES}).`);
+            /*
+             * The network being gone is waited out; a provider being unhappy is retried a few times.
+             *
+             * These were the same path with the same budget of three, which meant a wifi drop or a
+             * tunnel restart — minutes, ordinarily — ended a run that had been going for an hour. What is
+             * wanted there is what a person would do: keep trying, and carry on when it comes back.
+             *
+             * The budget also used to be spent for the life of the run rather than per turn. A run that
+             * survived three hiccups in its first ten minutes had nothing left for hour two, and the
+             * fourth blip on turn ninety ended it. It is reset on every turn that gets through, so the
+             * count means "trouble now" rather than "trouble ever".
+             */
+            if (isRetryableProviderError(err)) {
+                const offline = isConnectivityFailure(err);
+                if (offline && offlineSince === 0)
+                    offlineSince = Date.now();
+                const waitedFor = offline ? Date.now() - offlineSince : 0;
+                const mayRetry = offline
+                    ? waitedFor < OFFLINE_RETRY_WINDOW_MS
+                    : turnRetries < MAX_TURN_RETRIES;
+                if (mayRetry) {
+                    turnRetries++;
+                    const delay = offline
+                        ? Math.min(retryDelayMs(err, Math.min(turnRetries, 6)), OFFLINE_MAX_BACKOFF_MS)
+                        : retryDelayMs(err, turnRetries);
+                    if (spinner) {
+                        spinner.fail(offline
+                            ? `No connection to ${config.provider} — waiting for it to come back (attempt ${turnRetries})`
+                            : `Provider error on turn ${stats.turns}, retry ${turnRetries}/${MAX_TURN_RETRIES}`);
+                    }
+                    if (!silent) {
+                        tui.printWarning(offline
+                            // Said in terms of what is happening and what will happen, since this is the message
+                            // somebody reads while wondering whether to give up and start again.
+                            ? `Cannot reach ${config.provider} — the connection looks down. Attempt `
+                                + `${turnRetries}, trying again in ${Math.round(delay / 1000)}s. The run picks up `
+                                + `where it left off once the network is back; stop it if you would rather not wait.`
+                            : `${describeProviderError(err, config.provider, config.model, { hadImage: carriesImage(messages) }).split('\n')[0]} — retrying (${turnRetries}/${MAX_TURN_RETRIES}).`);
+                    }
+                    config.onOffline?.(offline
+                        ? { provider: config.provider, attempt: turnRetries, nextInMs: delay, downForMs: waitedFor }
+                        : null);
+                    // Interruptible: a wait measured in minutes must not swallow a stop.
+                    await sleepUnlessAborted(delay, combinedSignal);
+                    if (combinedSignal.aborted)
+                        break;
+                    turn--; // do this turn again
+                    continue;
+                }
+                if (offline && !silent) {
+                    tui.printWarning(`Still cannot reach ${config.provider} after ${Math.round(waitedFor / 60000)} minutes `
+                        + `and ${turnRetries} attempts. Giving up on this turn — the conversation is kept, so `
+                        + `saying "continue" once the network is back carries on from here.`);
                 }
-                await new Promise(r => setTimeout(r, retryDelayMs(err, turnRetries)));
-                turn--; // do this turn again
-                continue;
             }
             if (spinner)
                 spinner.fail('API error on turn ' + stats.turns);