/** Auth probe planning and execution helpers for model diagnostics. */

import crypto from "node:crypto";

import fs from "node:fs/promises";

import { normalizeUniqueStringEntries } from "@openclaw/normalization-core/string-normalization";

return embeddedRunnerModuleLoader.load();

}

/** Normalized probe status bucket for auth/model diagnostics. */

export type AuthProbeStatus =

| "ok"

| "auth"

| "unknown"

| "no_model";

/** Reason code for probes that never reached a model call. */

export type AuthProbeReasonCode =

| "excluded_by_auth_order"

| "missing_credential"

| "ineligible_profile"

| "no_model";

/** Result for one profile/env/models.json auth probe target. */

export type AuthProbeResult = {

provider: string;

model?: string;

mode?: string;

};

/** Summary for a full auth probe run. */

export type AuthProbeSummary = {

startedAt: number;

finishedAt: number;

results: AuthProbeResult[];

};

/** Runtime options controlling provider/profile filtering and probe cost. */

export type AuthProbeOptions = {

provider?: string;

profileIds?: string[];

maxTokens: number;

};

/** Maps runtime failover reasons into stable auth probe status buckets. */

export function mapFailoverReasonToProbeStatus(reason?: string | null): AuthProbeStatus {

if (!reason) {

return "unknown";

}

}

/** Builds probe targets plus preflight failures for missing/invalid credentials. */

export async function buildProbeTargets(params: {

cfg: OpenClawConfig;

agentDir?: string;

explicitOrder && explicitOrder.length > 0

? new Set(resolveAuthProfileOrder({ cfg, store, provider: providerKey }))

: null;

// Explicit auth.order both selects and documents profile eligibility; report

// excluded profiles instead of silently skipping them.

const filteredProfiles = profileFilter.size

? profileIds.filter((id) => profileFilter.has(id))

: profileIds;

return results.filter((entry): entry is AuthProbeResult => Boolean(entry));

}

/** Runs all auth probes with bounded concurrency and returns a summary. */

export async function runAuthProbes(params: {

cfg: OpenClawConfig;

agentId?: string;

};

}

/** Formats probe latency for table output. */

export function formatProbeLatency(latencyMs?: number | null) {

if (!latencyMs && latencyMs !== 0) {

return "-";

}

return formatMs(latencyMs);

}

/** Groups probe results by provider. */

export function groupProbeResults(results: AuthProbeResult[]): Map<string, AuthProbeResult[]> {

const map = new Map<string, AuthProbeResult[]>();

for (const result of results) {

return map;

}

/** Sorts probe results by provider and display label. */

export function sortProbeResults(results: AuthProbeResult[]): AuthProbeResult[] {

return results.slice().toSorted((a, b) => {

const provider = a.provider.localeCompare(b.provider);

});

}

/** Produces the terse completion line for auth probe output. */

export function describeProbeSummary(summary: AuthProbeSummary): string {

if (summary.totalTargets === 0) {

return "No probe targets.";