@amir83nasr/10router 0.1.0

package/open-sse/providers/registry/openrouter.js

@@ -0,0 +1,128 @@
+export default {
+  id: "openrouter",
+  priority: 10,
+  hasFree: true,
+  alias: "openrouter",
+  display: {
+    name: "OpenRouter",
+    icon: "router",
+    color: "#F97316",
+    textIcon: "OR",
+    website: "https://openrouter.ai",
+    notice: {
+      text: "Free tier: 27+ free models, no credit card needed, 200 req/day. After  0 credit: 1,000 req/day.",
+      apiKeyUrl: "https://openrouter.ai/settings/keys",
+    },
+  },
+  category: "freeTier",
+  authType: "apikey",
+  authModes: ["apikey"],
+  transport: {
+    baseUrl: "https://openrouter.ai/api/v1/chat/completions",
+    thinkingFormat: "openai",
+    headers: {
+      "HTTP-Referer": "https://endpoint-proxy.local",
+      "X-Title": "Endpoint Proxy",
+    },
+  },
+  models: [
+    {
+      id: "openai/text-embedding-3-large",
+      name: "OpenAI Text Embedding 3 Large",
+      kind: "embedding",
+    },
+    {
+      id: "openai/text-embedding-3-small",
+      name: "OpenAI Text Embedding 3 Small",
+      kind: "embedding",
+    },
+    {
+      id: "openai/text-embedding-ada-002",
+      name: "OpenAI Text Embedding Ada 002",
+      kind: "embedding",
+    },
+    { id: "qwen/qwen3-embedding-8b", name: "Qwen3 Embedding 8B", kind: "embedding" },
+    { id: "perplexity/pplx-embed-v1-4b", name: "Perplexity Embed V1 4B", kind: "embedding" },
+    { id: "perplexity/pplx-embed-v1-0.6b", name: "Perplexity Embed V1 0.6B", kind: "embedding" },
+    {
+      id: "nvidia/llama-nemotron-embed-vl-1b-v2:free",
+      name: "NVIDIA Nemotron Embed VL 1B V2 (Free)",
+      kind: "embedding",
+    },
+    { id: "openai/gpt-4o-mini-tts", name: "GPT-4o Mini TTS", kind: "tts" },
+    { id: "openai/tts-1-hd", name: "TTS-1 HD", kind: "tts" },
+    { id: "openai/tts-1", name: "TTS-1", kind: "tts" },
+    {
+      id: "openai/dall-e-3",
+      name: "DALL-E 3 (via OpenRouter)",
+      params: ["size", "quality", "style", "response_format"],
+      kind: "image",
+    },
+    {
+      id: "openai/gpt-image-1",
+      name: "GPT Image 1 (via OpenRouter)",
+      params: ["n", "size", "quality", "response_format"],
+      kind: "image",
+    },
+    {
+      id: "google/imagen-3.0-generate-002",
+      name: "Imagen 3 (via OpenRouter)",
+      params: ["n", "size"],
+      kind: "image",
+    },
+    {
+      id: "black-forest-labs/FLUX.1-schnell",
+      name: "FLUX.1 Schnell (via OpenRouter)",
+      params: ["n", "size"],
+      kind: "image",
+    },
+    {
+      id: "google/veo-3.1",
+      name: "Veo 3.1 (via OpenRouter)",
+      params: ["duration", "aspect_ratio", "resolution"],
+      kind: "video",
+    },
+    {
+      id: "openai/sora-2-pro",
+      name: "Sora 2 Pro (via OpenRouter)",
+      params: ["duration", "aspect_ratio", "resolution"],
+      kind: "video",
+    },
+    {
+      id: "bytedance/seedance-2.0",
+      name: "Seedance 2.0 (via OpenRouter)",
+      params: ["duration", "aspect_ratio", "resolution"],
+      kind: "video",
+    },
+    { id: "typesafe/jev-1.13", name: "Jev 1.13", kind: "systemone" },
+  ],
+  serviceKinds: ["llm", "embedding", "tts", "imageToText", "video", "systemone"],
+  // System One decision API (TypeSafe-compatible): https://openrouter.ai/docs/guides/community/typesafe-sdk
+  systemoneConfig: {
+    baseUrl: "https://openrouter.ai/api/v1/systemone",
+    headers: { "HTTP-Referer": "https://endpoint-proxy.local", "X-Title": "Endpoint Proxy" },
+  },
+  ttsConfig: {
+    baseUrl: "https://openrouter.ai/api/v1/chat/completions",
+    defaultModel: "openai/gpt-4o-mini-tts",
+    headers: { "HTTP-Referer": "https://endpoint-proxy.local", "X-Title": "Endpoint Proxy" },
+  },
+  embeddingConfig: {
+    baseUrl: "https://openrouter.ai/api/v1/embeddings",
+    authType: "apikey",
+    authHeader: "bearer",
+    headers: { "HTTP-Referer": "https://endpoint-proxy.local", "X-Title": "Endpoint Proxy" },
+  },
+  imageConfig: {
+    baseUrl: "https://openrouter.ai/api/v1/images/generations",
+    headers: { "HTTP-Referer": "https://endpoint-proxy.local", "X-Title": "Endpoint Proxy" },
+  },
+  // Async video jobs (POST /videos → { id, status }, GET /videos/{id} polls).
+  // Docs: https://openrouter.ai/docs/api/api-reference/videos
+  videoConfig: {
+    baseUrl: "https://openrouter.ai/api/v1/videos",
+    headers: { "HTTP-Referer": "https://endpoint-proxy.local", "X-Title": "Endpoint Proxy" },
+  },
+  modelsFetcher: { url: "https://openrouter.ai/api/v1/models", type: "openrouter-free" },
+  passthroughModels: true,
+};

package/open-sse/providers/registry/qoder.js

@@ -0,0 +1,61 @@
+export default {
+  id: "qoder",
+  priority: 30,
+  alias: "qd",
+  uiAlias: "qd",
+  display: {
+    name: "Qoder",
+    icon: "water_drop",
+    color: "#EC4899",
+    website: "https://qoder.com",
+    notice: {
+      signupUrl: "https://qoder.com",
+    },
+  },
+  category: "oauth",
+  authModes: ["oauth", "apikey"],
+  hasOAuth: true,
+  authHint: "Personal Access Token (pt-...) from https://qoder.com/account/integrations",
+  transport: {
+    baseUrl: "https://api3.qoder.sh/algo/api/v2/service/pro/sse/agent_chat_generation",
+    headers: {},
+    timeoutMs: 120000,
+    stallTimeoutMs: 120000,
+    usage: {
+      url: "https://openapi.qoder.sh/api/v2/quota/usage",
+    },
+  },
+  models: [
+    { id: "ultimate", name: "Ultimate" },
+    { id: "auto", name: "Auto" },
+    { id: "performance", name: "Performance" },
+    { id: "efficient", name: "Efficient" },
+    { id: "lite", name: "Lite" },
+    { id: "qmodel_38max", name: "Qwen3.8-Max" },
+    { id: "qmodel_latest", name: "Qwen3.7-Max" },
+    { id: "qmodel", name: "Qwen3.7-Plus" },
+    { id: "qfmodel", name: "Qwen3.8-Flash" },
+    { id: "kmodel_latest", name: "Kimi-K3" },
+    { id: "kmodel", name: "Kimi-K2.7-Code" },
+    { id: "gmodel", name: "GLM-5.3" },
+    { id: "gfmodel", name: "GLM-5.3-Flash" },
+    { id: "dmodel", name: "DeepSeek-V4-Pro" },
+    { id: "dfmodel", name: "DeepSeek-V4-Flash" },
+    { id: "mmodel", name: "MiniMax-M3" },
+  ],
+  oauth: {
+    openApiBaseUrl: "https://openapi.qoder.sh",
+    centerBaseUrl: "https://center.qoder.sh",
+    chatBaseUrl: "https://api3.qoder.sh",
+    deviceTokenUrl: "https://openapi.qoder.sh/api/v1/deviceToken/poll",
+    refreshUrl: "https://center.qoder.sh/algo/api/v3/user/refresh_token",
+    userInfoUrl: "https://openapi.qoder.sh/api/v1/userinfo",
+    quotaUsageUrl: "https://openapi.qoder.sh/api/v2/quota/usage",
+    loginUrl: "https://qoder.com/device/selectAccounts",
+  },
+  features: {
+    usage: true,
+    // PAT (apikey) connections also carry quota usage (via job-token exchange).
+    usageApikey: true,
+  },
+};

package/open-sse/providers/registry/siliconflow.js

@@ -0,0 +1,39 @@
+export default {
+  id: "siliconflow",
+  priority: 250,
+  alias: "siliconflow",
+  display: {
+    name: "SiliconFlow",
+    icon: "cloud_queue",
+    color: "#5B6EF5",
+    textIcon: "SF",
+    website: "https://cloud.siliconflow.com",
+    notice: {
+      apiKeyUrl: "https://cloud.siliconflow.com/account/ak",
+    },
+  },
+  category: "apikey",
+  transport: {
+    baseUrl: "https://api.siliconflow.com/v1/chat/completions",
+    validateUrl: "https://api.siliconflow.com/v1/models",
+    thinkingFormat: "openai",
+  },
+  models: [
+    { id: "deepseek-ai/DeepSeek-V4-Pro", name: "DeepSeek V4 Pro" },
+    { id: "deepseek-ai/DeepSeek-V4-Flash", name: "DeepSeek V4 Flash" },
+    { id: "deepseek-ai/DeepSeek-V3.2", name: "DeepSeek V3.2" },
+    { id: "deepseek-ai/DeepSeek-V3.2-Exp", name: "DeepSeek V3.2 Exp" },
+    { id: "deepseek-ai/DeepSeek-V3.1", name: "DeepSeek V3.1" },
+    { id: "deepseek-ai/DeepSeek-V3.1-Terminus", name: "DeepSeek V3.1 Terminus" },
+    { id: "deepseek-ai/DeepSeek-R1", name: "DeepSeek R1" },
+    { id: "Qwen/Qwen3.5-397B-A17B", name: "Qwen 3.5 397B A17B" },
+    { id: "Qwen/Qwen3.5-122B-A10B", name: "Qwen 3.5 122B A10B" },
+    { id: "zai-org/GLM-5.1", name: "GLM 5.1" },
+    { id: "zai-org/GLM-5", name: "GLM 5" },
+    { id: "moonshotai/Kimi-K2.6", name: "Kimi K2.6" },
+    { id: "moonshotai/Kimi-K2.5", name: "Kimi K2.5" },
+    { id: "openai/gpt-oss-120b", name: "GPT OSS 120B" },
+    { id: "MiniMaxAI/MiniMax-M2.5", name: "MiniMax M2.5" },
+    { id: "inclusionAI/Ling-flash-2.0", name: "Ling Flash 2.0" },
+  ],
+};

package/open-sse/providers/registry/vercel-ai-gateway.js

@@ -0,0 +1,42 @@
+export default {
+  id: "vercel-ai-gateway",
+  priority: 160,
+  alias: "vercel-ai-gateway",
+  aliases: ["vercel"],
+  uiAlias: "vercel",
+  display: {
+    name: "Vercel AI Gateway",
+    icon: "deployed_code",
+    color: "#111827",
+    textIcon: "VG",
+    website: "https://vercel.com/ai-gateway",
+    notice: {
+      text: "Unified OpenAI-compatible endpoint from Vercel. Use your AI Gateway API key, then pick models with provider/model IDs like anthropic/claude-sonnet-4.6 or openai/gpt-5.4.",
+      apiKeyUrl: "https://vercel.com/dashboard/~/ai-gateway",
+    },
+  },
+  category: "apikey",
+  transport: {
+    baseUrl: "https://ai-gateway.vercel.sh/v1/chat/completions",
+    thinkingFormat: "openai",
+    retry: {
+      429: 2,
+    },
+    usage: {
+      url: "https://ai-gateway.vercel.sh/v1/credits",
+    },
+  },
+  serviceKinds: ["llm", "embedding", "image", "imageToText", "webSearch"],
+  embeddingConfig: { baseUrl: "https://ai-gateway.vercel.sh/v1/embeddings" },
+  imageConfig: { baseUrl: "https://ai-gateway.vercel.sh/v1/images/generations" },
+  searchViaChat: {
+    defaultModel: "openai/gpt-4o-mini",
+    pricingUrl: "https://vercel.com/docs/ai-gateway/pricing",
+  },
+  modelsFetcher: { url: "https://ai-gateway.vercel.sh/v1/models", type: "openai" },
+  passthroughModels: true,
+  features: {
+    usage: true,
+    usageApikey: true,
+  },
+};

package/open-sse/providers/registry/xai.js

@@ -0,0 +1,59 @@
+export default {
+  id: "xai",
+  priority: 280,
+  alias: "xai",
+  display: {
+    name: "xAI (Grok)",
+    icon: "auto_awesome",
+    color: "#1DA1F2",
+    textIcon: "XA",
+    website: "https://x.ai",
+    notice: {
+      apiKeyUrl: "https://console.x.ai",
+    },
+  },
+  category: "oauth",
+  authModes: ["oauth", "apikey"],
+  hasOAuth: true,
+  transport: {
+    baseUrl: "https://api.x.ai/v1/chat/completions",
+    validateUrl: "https://api.x.ai/v1/models",
+    responsesUrl: "https://api.x.ai/v1/responses",
+    clientId: "b1a00492-073a-47ea-816f-4c329264a828",
+    tokenUrl: "https://auth.x.ai/oauth2/token",
+    refreshUrl: "https://auth.x.ai/oauth2/token",
+  },
+  models: [
+    { id: "grok-4.6", name: "Grok 4.6" },
+    { id: "grok-4.5", name: "Grok 4.5" },
+    { id: "grok-4", name: "Grok 4" },
+    { id: "grok-4-fast-reasoning", name: "Grok 4 Fast Reasoning" },
+    { id: "grok-code-fast-1", name: "Grok Code Fast" },
+    { id: "grok-3", name: "Grok 3" },
+    {
+      id: "grok-2-image-1212",
+      name: "Grok 2 Image",
+      params: ["n", "response_format"],
+      kind: "image",
+    },
+    {
+      id: "grok-imagine-video",
+      name: "Grok Imagine Video",
+      params: ["duration", "aspect_ratio", "resolution"],
+      kind: "video",
+    },
+  ],
+  serviceKinds: ["llm", "imageToText", "webSearch", "image", "video"],
+  imageConfig: {
+    baseUrl: "https://api.x.ai/v1/images/generations",
+    bodyFields: ["model", "prompt", "n", "response_format"],
+  },
+  // Async video jobs (POST returns { request_id }, GET polls until done/failed).
+  // Docs: https://docs.x.ai/developers/rest-api-reference/inference/videos
+  videoConfig: { baseUrl: "https://api.x.ai/v1/videos" },
+  searchViaChat: {
+    defaultModel: "grok-4.20-reasoning",
+    endpoint: "https://api.x.ai/v1/responses",
+    pricingUrl: "https://x.ai/api#pricing",
+  },
+};

package/open-sse/providers/registry/xiaomi-mimo.js

@@ -0,0 +1,90 @@
+import { CLAUDE_API_HEADERS } from "../shared.js";
+
+// Dual auth (same pattern as kimi):
+//   - API key (sk-...)      → cloud API on api.xiaomimimo.com
+//   - Desktop account/OAuth → same cloud host, plus the Desktop-exclusive Preview
+//     models served by the account-service route on mimo-server-cn.xiaomimimo.com
+//     (authorized by a Xiaomi account session cookie, not the key).
+// Endpoint is picked per model in the executor, same as opencode-go's /responses split.
+export default {
+  id: "xiaomi-mimo",
+  priority: 290,
+  alias: "xiaomi-mimo",
+  aliases: ["mimo", "mimo-desktop", "xmd"],
+  uiAlias: "mimo",
+  display: {
+    name: "Xiaomi MiMo",
+    icon: "smart_toy",
+    color: "#FF6900",
+    textIcon: "XM",
+    website: "https://xiaomimimo.com",
+    notice: {
+      apiKeyUrl: "https://platform.xiaomimimo.com/console/api-keys",
+      signupUrl: "https://mimo.xiaomimimo.com/desktop/invite/",
+    },
+  },
+  category: "oauth",
+  authModes: ["oauth", "apikey"],
+  hasOAuth: true,
+  serviceKinds: ["llm", "tts"],
+  transport: {
+    baseUrl: "https://api.xiaomimimo.com/v1/chat/completions",
+    validateUrl: "https://api.xiaomimimo.com/v1/models",
+  },
+  // Multi-endpoint: pick the transport matching client sourceFormat to skip translation.
+  transports: [
+    {
+      format: "openai",
+      baseUrl: "https://api.xiaomimimo.com/v1/chat/completions",
+      auth: { combined: true, header: "Authorization", scheme: "bearer" },
+    },
+    {
+      format: "claude",
+      baseUrl: "https://api.xiaomimimo.com/anthropic/v1/messages",
+      headers: { ...CLAUDE_API_HEADERS },
+      auth: { combined: true, header: "x-api-key", scheme: "raw" },
+    },
+  ],
+  models: [
+    // Desktop-exclusive — served by the account-service route, which only accepts
+    // OpenAI format, so supportedFormats pins them to the openai transport.
+    {
+      id: "mimo-x-pro-preview",
+      name: "MiMo-X-Pro-Preview",
+      upstreamModelId: "xiaomi/mimo-x-pro-preview",
+      supportedFormats: ["openai"],
+    },
+    {
+      id: "mimo-x-flash-preview",
+      name: "MiMo-X-Flash-Preview",
+      upstreamModelId: "xiaomi/mimo-x-flash-preview",
+      supportedFormats: ["openai"],
+    },
+    // Cloud API models (api.xiaomimimo.com/v1)
+    { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
+    { id: "mimo-v2.5", name: "MiMo V2.5" },
+    { id: "mimo-v2-omni", name: "MiMo V2 Omni" },
+    { id: "mimo-v2-flash", name: "MiMo V2 Flash" },
+    { id: "mimo-v2.5-tts", name: "MiMo V2.5 TTS", kind: "tts" },
+  ],
+  ttsConfig: {
+    baseUrl: "https://api.xiaomimimo.com/v1/chat/completions",
+    authType: "apikey",
+    authHeader: "bearer",
+    format: "xiaomi-mimo-tts",
+  },
+  features: {
+    usage: true,
+    usageApikey: true,
+  },
+  // Custom OAuth — non-standard ECDH encrypted-callback flow.
+  // Handled by the Xiaomi MiMo OAuth service, not the generic PKCE pipeline.
+  oauth: {
+    custom: true,
+    authorizeUrl: "https://platform.xiaomimimo.com/authorize",
+    // The callback carries ?u=<ECDH-encrypted payload> instead of ?code=.
+    // Decryption yields { uid, sk, url }.
+    callbackParam: "u",
+    kn: "mimocode",
+  },
+};

package/open-sse/providers/registry/xiaomi-tokenplan.js

@@ -0,0 +1,66 @@
+import { CLAUDE_API_HEADERS } from "../shared.js";
+
+export default {
+  id: "xiaomi-tokenplan",
+  priority: 300,
+  alias: "xiaomi-tokenplan",
+  aliases: ["xmtp"],
+  uiAlias: "xmtp",
+  display: {
+    name: "Xiaomi MiMo (Token Plan)",
+    icon: "smart_toy",
+    color: "#FF6700",
+    textIcon: "XT",
+    website: "https://mimo.xiaomi.com",
+    notice: {
+      text: "Xiaomi MiMo Token Plan subscription (API key starts with tp-). Token Plan keys are cluster-specific — select the region matching your subscription.",
+      apiKeyUrl: "https://mimo.xiaomi.com",
+    },
+  },
+  category: "apikey",
+  hasProviderSpecificData: true,
+  regions: [
+    { id: "sgp", label: "Singapore (新加坡)" },
+    { id: "cn", label: "China (中国大陆)" },
+    { id: "ams", label: "Amsterdam (阿姆斯特丹)" },
+  ],
+  defaultRegion: "sgp",
+  transport: {
+    baseUrl: "https://token-plan-sgp.xiaomimimo.com/v1/chat/completions",
+    regions: {
+      sgp: "https://token-plan-sgp.xiaomimimo.com/v1",
+      cn: "https://token-plan-cn.xiaomimimo.com/v1",
+      ams: "https://token-plan-ams.xiaomimimo.com/v1",
+    },
+    defaultRegion: "sgp",
+  },
+  // Multi-endpoint: pick the transport matching client sourceFormat to skip translation.
+  // baseUrl omitted — region-dynamic, resolved in the executor's buildUrl.
+  transports: [
+    {
+      format: "openai",
+      auth: { combined: true, header: "Authorization", scheme: "bearer" },
+    },
+    {
+      format: "claude",
+      headers: { ...CLAUDE_API_HEADERS },
+      auth: { combined: true, header: "x-api-key", scheme: "raw" },
+    },
+  ],
+  models: [
+    { id: "mimo-v2.5-pro", name: "MiMo V2.5 Pro" },
+    {
+      id: "mimo-v2.5-pro-claude",
+      name: "MiMo V2.5 Pro (Claude Native)",
+      targetFormat: "claude",
+      upstreamModelId: "mimo-v2.5-pro",
+    },
+    { id: "mimo-v2.5", name: "MiMo V2.5" },
+    { id: "mimo-v2-pro", name: "MiMo V2 Pro" },
+    { id: "mimo-v2-omni", name: "MiMo V2 Omni" },
+    { id: "mimo-v2-tts", name: "MiMo V2 TTS" },
+    { id: "mimo-v2.5-tts", name: "MiMo V2.5 TTS" },
+    { id: "mimo-v2.5-tts-voiceclone", name: "MiMo V2.5 TTS Voice Clone" },
+    { id: "mimo-v2.5-tts-voicedesign", name: "MiMo V2.5 TTS Voice Design" },
+  ],
+};

package/open-sse/providers/registry/xquik.js

@@ -0,0 +1,31 @@
+export default {
+  id: "xquik",
+  alias: "xquik",
+  display: {
+    name: "Xquik",
+    icon: "tag",
+    color: "#5C3327",
+    textIcon: "XQ",
+    website: "https://docs.xquik.com/api-reference/x/search-tweets",
+    notice: {
+      apiKeyUrl: "https://xquik.com",
+      text: "Searches public X posts. Billing uses 1 Xquik credit per returned post.",
+    },
+  },
+  category: "apikey",
+  authType: "apikey",
+  serviceKinds: ["webSearch"],
+  searchConfig: {
+    baseUrl: "https://xquik.com/api/v1/x/tweets/search",
+    validateUrl: "https://xquik.com/api/v1/credits",
+    method: "GET",
+    authType: "apikey",
+    authHeader: "x-api-key",
+    searchTypes: ["x"],
+    defaultMaxResults: 5,
+    maxMaxResults: 100,
+    timeoutMs: 10000,
+    cacheTTLMs: 60000,
+    creditsPerResult: 1,
+  },
+};

package/open-sse/providers/registry/zed.js

@@ -0,0 +1,70 @@
+// Zed provider — RSA keypair callback auth (NOT standard OAuth).
+export default {
+  id: "zed",
+  priority: 999,
+  alias: "zd",
+  uiAlias: "zd",
+  display: {
+    name: "Zed",
+    icon: "code",
+    color: "#A855F7",
+    website: "https://zed.dev",
+    notice: {
+      signupUrl: "https://zed.dev/native_app_signin",
+    },
+  },
+  category: "oauth",
+  authType: "oauth",
+  hasOAuth: true,
+
+  transport: {
+    // Zed hosted LLM aggregator: cloud.zed.dev/completions is a
+    // multi-format proxy fronting Anthropic/OpenAI/Google/xAI depending on the model.
+    // Wire protocol = NDJSON/SSE-ish stream authenticated with a short-lived LLM bearer
+    // token exchanged from the RSA-decrypted access_token (see open-sse/shared/zedAuth).
+    baseUrl: "https://cloud.zed.dev/completions",
+    format: "openai",
+    forceStream: true,
+    headers: {
+      "content-type": "application/json",
+    },
+    // Auth scheme is non-standard: "Authorization: <user_id> <access_token>" plus a duplicate
+    // x-zed-cloud-token header (verified in zed_account.rs build_authorization_header +
+    // cloud fetch). Executor builds both; scheme here is a marker for config-driven tooling.
+    auth: {
+      combined: true,
+      header: "Authorization",
+      scheme: "<user_id> <access_token>", // placeholder — real value built in executor
+    },
+    usage: {
+      url: "https://cloud.zed.dev/client/users/me", // verified in zed_account.rs
+    },
+    // Live catalog discovery — Zed's hosted model list changes frequently and is fetched
+    // per-connection rather than hardcoded.
+    modelsUrl: "https://cloud.zed.dev/models",
+  },
+
+  // Empty static catalog + passthrough: Zed fronts a rotating set of upstream models
+  // (Claude/GPT/Gemini/Grok). Resolved live via modelsUrl; any client-sent model id is
+  // forwarded as-is rather than validated against a frozen list.
+  models: [],
+  passthroughModels: true,
+
+  oauth: {
+    // Zed auth flow is RSA-based, NOT OAuth2/PKCE:
+    //   1. App generates RSA-2048 keypair locally (PKCS#1 DER, URL-safe base64).
+    //   2. Bind random TCP port on 127.0.0.1.
+    //   3. Open https://zed.dev/native_app_signin?native_app_port={port}&native_app_public_key={pub}.
+    //   4. After login, browser redirects http://127.0.0.1:{port}/?user_id=...&access_token=...
+    //      where access_token = base64(RSA-encrypted plaintext token).
+    //   5. Decrypt with private key (OAEP-SHA256, fallback PKCS1v15). Store user_id + plaintext token.
+    // No clientId/clientSecret/tokenUrl/refreshUrl — long-lived access_token, no refresh.
+    authorizeUrl: "https://zed.dev/native_app_signin",
+    platform: "zed",
+    rsaKeyExchange: true, // new flag: signals frontend/router this flow needs local RSA + TCP listener.
+  },
+
+  features: {
+    usage: true,
+  },
+};

package/open-sse/providers/schema.js

@@ -0,0 +1,76 @@
+// Provider transport schema: shared defaults + endpoint defaults + resolver (skeleton, not wired)
+import { DEFAULT_RETRY_CONFIG, FETCH_CONNECT_TIMEOUT_MS } from "../config/runtimeConfig.js";
+
+/**
+ * RegistryEntry shape — full contract for registry/{id}.js. See REGISTRY_TEMPLATE.js for a worked example.
+ * Only `id` + `category` are strictly required; everything else is optional/derived.
+ *
+ * @typedef {Object} RegistryEntry
+ * @property {string}   id            Unique provider id (kebab-case). REQUIRED.
+ * @property {string}  [alias]        Short key for PROVIDER_MODELS (defaults to id).
+ * @property {string[]}[aliases]      Extra lookup tokens resolving to this provider.
+ * @property {string}  [uiAlias]      Token shown in UI badges.
+ * @property {string}   category      "apikey"|"oauth"|"freeTier"|... drives UI grouping. REQUIRED.
+ * @property {string}  [authType]     "apikey"|"oauth" auth hint.
+ * @property {string[]}[authModes]    Allowed auth modes when provider supports both.
+ * @property {boolean} [hasOAuth]     Provider exposes an OAuth flow.
+ * @property {boolean} [noAuth]       Provider needs no credentials (local/free).
+ * @property {Object}  [display]      UI: {name,icon,color,textIcon,website,notice,deprecated,deprecationNotice,kindNotice,mediaPriority}.
+ * @property {Object}  [transport]    Runtime HTTP config (see TransportConfig below). Builds PROVIDERS[id].
+ * @property {Object}  [oauth]        OAuth flow config (see OAuthConfig). Builds PROVIDER_OAUTH[id].
+ * @property {Object}  [media]        Non-LLM services (see MediaConfig). Builds PROVIDER_MEDIA[id].
+ * @property {Array}   [models]       Model list; omit = no model key, [] = explicit empty.
+ * @property {Object}  [features]     Feature flags, e.g. {usage:true}.
+ * @property {Object}  [thinkingConfig] Reasoning UI: {options:[...],defaultMode}.
+ * @property {boolean} [passthroughModels] Forward client model id untouched.
+ *
+ * TransportConfig: { baseUrl, format, headers, auth, forceStream, urlSuffix, quirks, retry, timeoutMs,
+ *   executor, clientId, clientSecret, tokenUrl, refreshUrl, usage, cliVersion, apiClient, regions,
+ *   defaultRegion, modelsFetcher, validateUrl, responsesUrl } — clientId/clientSecret/tokenUrl are
+ *   injected from `oauth` automatically (single source); declare them in `oauth`, not here.
+ *
+ * OAuthConfig: { clientId, authorizeUrl, tokenUrl, deviceCodeUrl, refreshUrl, scope|scopes, redirectUri,
+ *   callbackPath, fixedPort, codeChallengeMethod, extraParams, refresh:{encoding,scope}, refreshLeadMs,
+ *   userInfoUrl }.
+ *
+ * MediaConfig: { serviceKinds:[...], ttsConfig, sttConfig, embeddingConfig, imageConfig,
+ *   searchViaChat:{defaultModel,pricingUrl}, hiddenKinds } — each *Config: {baseUrl,authType,authHeader,
+ *   format,defaultModel,models:[{id,name,dimensions?}]}.
+ */
+
+// Shared transport defaults — provider only overrides fields that differ.
+// NOTE: runtime (index.js buildTransport) only re-applies `format`; the rest documents the contract
+// and feeds the (currently unwired) resolveProvider(). Adding keys here does NOT change PROVIDERS.
+export const PROVIDER_DEFAULTS = {
+  baseUrl: "",
+  format: "openai",
+  headers: {},
+  auth: { header: "Authorization", scheme: "bearer", source: ["accessToken", "apiKey"] },
+  forceStream: false,
+  urlSuffix: "",
+  quirks: {},
+  passthroughModels: false,
+  retry: DEFAULT_RETRY_CONFIG,
+  timeoutMs: FETCH_CONNECT_TIMEOUT_MS,
+  executor: "default",
+};
+
+// Default endpoints per format (provider only overrides what differs)
+export const ENDPOINT_DEFAULTS = {
+  openai: { chat: "/chat/completions", test: "/models", models: "/models" },
+  claude: { chat: "/messages", test: "/models", countTokens: "/messages/count_tokens" },
+  gemini: { chat: "/{model}:streamGenerateContent", models: "/models", test: "/models" },
+};
+
+// Deep-merge a provider entry over PROVIDER_DEFAULTS (defensive for missing transport)
+export function resolveProvider(entry) {
+  const transport = (entry && entry.transport) || {};
+  return {
+    ...PROVIDER_DEFAULTS,
+    ...transport,
+    headers: { ...PROVIDER_DEFAULTS.headers, ...transport.headers },
+    auth: { ...PROVIDER_DEFAULTS.auth, ...transport.auth },
+    quirks: { ...PROVIDER_DEFAULTS.quirks, ...transport.quirks },
+    retry: { ...PROVIDER_DEFAULTS.retry, ...transport.retry },
+  };
+}