markAuthProfileFailure,

resolveProfilesUnavailableReason,

resolveProfileUnusableUntilForDisplay,

setAuthProfileFailureHook,

} from "./auth-profiles/usage.js";

updateAuthProfileStoreWithLock,

};

// Invoked once per recorded auth-profile failure. Gateway startup wires this

// to clearCurrentProviderAuthState so the next model-listing call recomputes

// against the real auth state.

let onAuthProfileFailureHook: (() => void) | undefined;

export function setAuthProfileFailureHook(hook: (() => void) | undefined): void {

onAuthProfileFailureHook = hook;

}

export const testing = {

setDepsForTest(

overrides: Partial<{

now: updateTime,

});

}

try {

onAuthProfileFailureHook?.();

} catch {

// hook errors must not break failure recording

}

return;

}

if (!store.profiles[profileId]) {

next: nextStats,

now,

});

try {

onAuthProfileFailureHook?.();

} catch {

// hook errors must not break failure recording

}

}

export async function markAuthProfileBlockedUntil(params: {

if (params.minimalTestGateway) {

return;

}

const { warmCurrentProviderAuthState } = await import("../agents/model-provider-auth.js");

const { clearCurrentProviderAuthState, warmCurrentProviderAuthState } =

await import("../agents/model-provider-auth.js");

const { setAuthProfileFailureHook } = await import("../agents/auth-profiles.js");

setAuthProfileFailureHook(() => clearCurrentProviderAuthState());

const startMs = Date.now();

await warmCurrentProviderAuthState(params.cfgAtStart);

params.log.info(`provider auth state pre-warmed in ${Date.now() - startMs}ms`);