feat(providers): share authentication and resilience

Author: danielkov

Cargo.lock

@@ -1,6 +1,6 @@
 [package]
 name = "kit"
-version = "0.1.108"
+version = "0.1.109"
 edition = "2024"
 rust-version = "1.94.0"
 publish = false
@@ -21,6 +21,7 @@ agentkit-loop = { version = "=0.10.10", features = ["otel"] }
 agentkit-mcp = "=0.10.6"
 agentkit-http = "=0.10.5"
 agentkit-plugins = "=0.10.7"
+agentkit-provider-openai = "=0.10.5"
 agentkit-provider-openrouter = "=0.10.7"
 agentkit-task-manager = "=0.10.7"
 agentkit-tool-compose = { version = "=0.10.9", default-features = false, features = ["runlet"] }
@@ -37,8 +38,6 @@ crossterm = { version = "=0.29.0", features = ["event-stream"] }
 flate2 = "=1.1.10"
 futures-util = "=0.3.34"
 getrandom = "=0.4.3"
-h2 = "=0.4.19"
-httpdate = "=1.0.3"
 hyper = "=1.11.1"
 hyper-util = { version = "=0.1.20", features = ["server", "http1", "http2", "tokio"] }
 image = { version = "=0.25.10", default-features = false, features = ["gif", "jpeg", "png", "webp"] }
@@ -88,18 +87,19 @@ tempfile = "=3.27.0"
 tokio = { version = "=1.53.1", features = ["test-util"] }
 
 [patch.crates-io]
-agentkit-acp = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-adapter-completions = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-core = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-context = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-compaction = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-loop = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-mcp = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-http = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-plugins = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-provider-openrouter = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-task-manager = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-tool-compose = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
-agentkit-tools-core = { git = "https://github.com/danielkov/agentkit.git", rev = "1204e2b31d77ca820c9302fab2769e0b5c0c1c10" }
+agentkit-acp = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-adapter-completions = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-core = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-context = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-compaction = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-loop = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-mcp = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-http = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-plugins = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-provider-openai = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-provider-openrouter = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-task-manager = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-tool-compose = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
+agentkit-tools-core = { git = "https://github.com/danielkov/agentkit.git", rev = "eba802525e718223aa011788559e291267a96473" }
 agent-client-protocol = { git = "https://github.com/danielkov/rust-sdk.git", rev = "2f039993d1d6ed8da35b38c31f54a7cbb7338c70" }
 agent-client-protocol-http = { git = "https://github.com/danielkov/rust-sdk.git", rev = "2f039993d1d6ed8da35b38c31f54a7cbb7338c70" }

Cargo.toml

@@ -254,6 +254,15 @@ credential_dir = "~/.kit/credentials"
 mcp_config = "~/.kit/mcp.json"
 otel_endpoint = "http://localhost:4317"
 
+# Optional: explicit retry/time-out policy for the selected provider.
+[resilience]
+max_retries = 5
+retry_budget_ms = 60000
+attempt_timeout_ms = 30000
+stream_idle_timeout_ms = 30000
+initial_backoff_ms = 200
+max_backoff_ms = 10000
+
 [acp.claude]
 command = "npx"
 args = ["-y", "@agentclientprotocol/claude-agent-acp@0.69.0"]

README.md

@@ -191,7 +191,22 @@ url = "https://example.com/plugin.tar.gz"
 sha256 = "0123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef"
 ```
 
-`root`, `provider`, `model`, and credential settings apply to all four runtime commands. Subagent model aliases and explicit-override allowlists are scoped by fully qualified harness under `[subagent.harnesses."acp.name"]`. Omitting `allow_model_overrides` permits all explicit model selections accepted by that harness; an empty list disables explicit model overrides. This policy does not restrict the harness's inherited or default model.
+`root`, `provider`, `model`, and credential settings apply to all four runtime commands.
+The optional `[resilience]` table applies one AgentKit retry and timeout policy to whichever provider is selected, including providers selected later with `/model` and built-in `acp.kit` children. Duration names include their units. The two timeout fields can be omitted to disable those timeouts; the other fields are required:
+
+```toml
+[resilience]
+max_retries = 5
+retry_budget_ms = 60000
+attempt_timeout_ms = 30000       # omit to disable the per-attempt timeout
+stream_idle_timeout_ms = 30000   # omit to disable the stream-idle timeout
+initial_backoff_ms = 200
+max_backoff_ms = 10000
+```
+
+Without this table, OpenRouter and Speakeasy remain single-attempt. OpenAI subscription retains Kit's built-in long-running policy: a 24-hour request budget, 10-minute attempt timeout, 5-minute stream-idle timeout, 60-second maximum exponential backoff, and 10-minute maximum server-directed retry delay. Invalid zero budgets/timeouts, unknown fields, and a maximum backoff smaller than the initial backoff fail configuration loading without rewriting the file.
+
+ Subagent model aliases and explicit-override allowlists are scoped by fully qualified harness under `[subagent.harnesses."acp.name"]`. Omitting `allow_model_overrides` permits all explicit model selections accepted by that harness; an empty list disables explicit model overrides. This policy does not restrict the harness's inherited or default model.
 
 `a2a` applies to `serve` and `tui`. Configured plugins can provide MCP servers without `mcp_config`; supported `stdio` and `streamable-http` declarations are registered, while `sse` declarations are skipped with a stderr diagnostic. If `mcp_config` is also set, its same-named entries override plugin servers, and live removal of an override restores the plugin server. Plugin data is stored under `<config-directory>/plugin-data/<plugin-manifest-name>`. See [Agent Plugins](agent-plugins.md) for placeholders, collision rules, and ACP child behavior. `otel_endpoint` enables OTLP/gRPC export of AgentKit's GenAI trace spans. Use a collector endpoint such as `http://localhost:4317` without a `/v1/traces` suffix. `credential_store` selects one backend for OpenAI, Speakeasy, and MCP and defaults to `memory`; selecting `file` requires `credential_dir`, while a credential directory is invalid with `memory` or `keychain`. Memory credentials are process-local and are not shared with the TUI server process or nested Kit children. Standalone OpenAI and Speakeasy login requires persistent `keychain` or `file` storage. ACP profiles are direct executable-and-argument configurations, not shell command strings. `[subagent].harness` must name an available fully qualified profile such as `acp.review`; otherwise startup reports `unknown subagent ACP harness`. When no subagent harness is selected, the built-in `acp.kit` profile is used.