@astralyn/pi 1.0.5 → 1.1.0

package/dist/extensions/search/command.d.ts

@@ -0,0 +1,5 @@
+import type { ExtensionAPI } from "../../core/extensions/types.ts";
+/** Deactivate both tools when no credential exists; `activate` re-enables them after a sign-in. */
+export declare function syncTools(pi: ExtensionAPI, activate?: boolean): void;
+export declare function registerSearchCommand(pi: ExtensionAPI): void;
+//# sourceMappingURL=command.d.ts.map

package/dist/extensions/search/command.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/command.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAwBnE,mGAAmG;AACnG,wBAAgB,SAAS,CAAC,EAAE,EAAE,YAAY,EAAE,QAAQ,UAAQ,GAAG,IAAI,CASlE;AA+BD,wBAAgB,qBAAqB,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CAoB5D"}

package/dist/extensions/search/command.js

@@ -0,0 +1,69 @@
+/** `/search` and the tool activation that follows the account state. */
+import { homedir } from "node:os";
+import { openBrowser } from "../../utils/open-browser.js";
+import { createSignIn, credentialPath, deleteCredential, ENV_KEY, exchangeCode, getCredential, looksLikeToken, saveCredential, toApiKey, } from "./credential.js";
+import { webSearch } from "./devin.js";
+import { SearchPanel } from "./panel.js";
+/** `~/.pi/agent/search-auth.json` rather than the full home path, so panel rows stay short. */
+function displayPath(path) {
+    const home = homedir();
+    return path.startsWith(home) ? `~${path.slice(home.length).replace(/\\/g, "/")}` : path;
+}
+const TOOL_NAMES = ["code_search", "web_search"];
+/** Deactivate both tools when no credential exists; `activate` re-enables them after a sign-in. */
+export function syncTools(pi, activate = false) {
+    const active = pi.getActiveTools();
+    if (!getCredential()) {
+        const next = active.filter((name) => !TOOL_NAMES.includes(name));
+        if (next.length !== active.length)
+            pi.setActiveTools(next);
+    }
+    else if (activate) {
+        const missing = TOOL_NAMES.filter((name) => !active.includes(name));
+        if (missing.length)
+            pi.setActiveTools([...active, ...missing]);
+    }
+}
+function accountActions(pi) {
+    /** One cheap authenticated call, so a bad token fails here rather than at the model's first search. */
+    const verifyAndSave = async (token) => {
+        await webSearch(toApiKey(token), "Devin", 1);
+        saveCredential(token);
+        syncTools(pi, true);
+    };
+    return {
+        state() {
+            const source = getCredential()?.source;
+            return { source, location: source === "env" ? ENV_KEY : displayPath(credentialPath()) };
+        },
+        startSignIn() {
+            const attempt = createSignIn();
+            openBrowser(attempt.url);
+            return {
+                url: attempt.url,
+                complete: async (input) => verifyAndSave(looksLikeToken(input) ? input : await exchangeCode(attempt, input)),
+            };
+        },
+        saveToken: verifyAndSave,
+        signOut() {
+            deleteCredential();
+            syncTools(pi);
+        },
+    };
+}
+export function registerSearchCommand(pi) {
+    pi.registerCommand("search", {
+        description: "Sign in to Devin for code_search and web_search",
+        handler: async (_args, ctx) => {
+            if (!ctx.hasUI) {
+                const credential = getCredential();
+                ctx.ui.notify(credential
+                    ? `Devin Search: signed in ($credential.source === "env" ? ENV_KEY : credentialPath()).`
+                    : `Devin Search: not signed in. Run /search interactively, or set $ENV_KEY.`, credential ? "info" : "warning");
+                return;
+            }
+            await ctx.ui.custom((tui, theme, keybindings, done) => new SearchPanel(tui, theme, keybindings, accountActions(pi), () => done()));
+        },
+    });
+}
+//# sourceMappingURL=command.js.map

package/dist/extensions/search/command.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"command.js","sourceRoot":"","sources":["../../../src/extensions/search/command.ts"],"names":[],"mappings":"AAAA,wEAAwE;AACxE,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAElC,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAC1D,OAAO,EACN,YAAY,EACZ,cAAc,EACd,gBAAgB,EAChB,OAAO,EACP,YAAY,EACZ,aAAa,EACb,cAAc,EACd,cAAc,EACd,QAAQ,GACR,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAAE,SAAS,EAAE,MAAM,YAAY,CAAC;AACvC,OAAO,EAAqB,WAAW,EAAE,MAAM,YAAY,CAAC;AAE5D,+FAA+F;AAC/F,SAAS,WAAW,CAAC,IAAY;IAChC,MAAM,IAAI,GAAG,OAAO,EAAE,CAAC;IACvB,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,GAAG,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;AAEjD,mGAAmG;AACnG,MAAM,UAAU,SAAS,CAAC,EAAgB,EAAE,QAAQ,GAAG,KAAK;IAC3D,MAAM,MAAM,GAAG,EAAE,CAAC,cAAc,EAAE,CAAC;IACnC,IAAI,CAAC,aAAa,EAAE,EAAE,CAAC;QACtB,MAAM,IAAI,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,UAAU,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACjE,IAAI,IAAI,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM;YAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC;IAC5D,CAAC;SAAM,IAAI,QAAQ,EAAE,CAAC;QACrB,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;QACpE,IAAI,OAAO,CAAC,MAAM;YAAE,EAAE,CAAC,cAAc,CAAC,CAAC,GAAG,MAAM,EAAE,GAAG,OAAO,CAAC,CAAC,CAAC;IAChE,CAAC;AACF,CAAC;AAED,SAAS,cAAc,CAAC,EAAgB;IACvC,uGAAuG;IACvG,MAAM,aAAa,GAAG,KAAK,EAAE,KAAa,EAAE,EAAE;QAC7C,MAAM,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC;QAC7C,cAAc,CAAC,KAAK,CAAC,CAAC;QACtB,SAAS,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACrB,CAAC,CAAC;IACF,OAAO;QACN,KAAK;YACJ,MAAM,MAAM,GAAG,aAAa,EAAE,EAAE,MAAM,CAAC;YACvC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,cAAc,EAAE,CAAC,EAAE,CAAC;QACzF,CAAC;QACD,WAAW;YACV,MAAM,OAAO,GAAG,YAAY,EAAE,CAAC;YAC/B,WAAW,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;YACzB,OAAO;gBACN,GAAG,EAAE,OAAO,CAAC,GAAG;gBAChB,QAAQ,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CACzB,aAAa,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,YAAY,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC;aAClF,CAAC;QACH,CAAC;QACD,SAAS,EAAE,aAAa;QACxB,OAAO;YACN,gBAAgB,EAAE,CAAC;YACnB,SAAS,CAAC,EAAE,CAAC,CAAC;QACf,CAAC;KACD,CAAC;AACH,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,EAAgB;IACrD,EAAE,CAAC,eAAe,CAAC,QAAQ,EAAE;QAC5B,WAAW,EAAE,iDAAiD;QAC9D,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;YAC7B,IAAI,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC;gBAChB,MAAM,UAAU,GAAG,aAAa,EAAE,CAAC;gBACnC,GAAG,CAAC,EAAE,CAAC,MAAM,CACZ,UAAU;oBACT,CAAC,CAAC,sFAAsF;oBACxF,CAAC,CAAC,0EAA0E,EAC7E,UAAU,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAC/B,CAAC;gBACF,OAAO;YACR,CAAC;YACD,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAClB,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,IAAI,EAAE,EAAE,CACjC,IAAI,WAAW,CAAC,GAAG,EAAE,KAAK,EAAE,WAAW,EAAE,cAAc,CAAC,EAAE,CAAC,EAAE,GAAG,EAAE,CAAC,IAAI,EAAE,CAAC,CAC3E,CAAC;QACH,CAAC;KACD,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/** `/search` and the tool activation that follows the account state. */\nimport { homedir } from \"node:os\";\nimport type { ExtensionAPI } from \"../../core/extensions/types.ts\";\nimport { openBrowser } from \"../../utils/open-browser.ts\";\nimport {\n\tcreateSignIn,\n\tcredentialPath,\n\tdeleteCredential,\n\tENV_KEY,\n\texchangeCode,\n\tgetCredential,\n\tlooksLikeToken,\n\tsaveCredential,\n\ttoApiKey,\n} from \"./credential.ts\";\nimport { webSearch } from \"./devin.ts\";\nimport { type PanelActions, SearchPanel } from \"./panel.ts\";\n\n/** `~/.pi/agent/search-auth.json` rather than the full home path, so panel rows stay short. */\nfunction displayPath(path: string): string {\n\tconst home = homedir();\n\treturn path.startsWith(home) ? `~${path.slice(home.length).replace(/\\\\/g, \"/\")}` : path;\n}\n\nconst TOOL_NAMES = [\"code_search\", \"web_search\"];\n\n/** Deactivate both tools when no credential exists; `activate` re-enables them after a sign-in. */\nexport function syncTools(pi: ExtensionAPI, activate = false): void {\n\tconst active = pi.getActiveTools();\n\tif (!getCredential()) {\n\t\tconst next = active.filter((name) => !TOOL_NAMES.includes(name));\n\t\tif (next.length !== active.length) pi.setActiveTools(next);\n\t} else if (activate) {\n\t\tconst missing = TOOL_NAMES.filter((name) => !active.includes(name));\n\t\tif (missing.length) pi.setActiveTools([...active, ...missing]);\n\t}\n}\n\nfunction accountActions(pi: ExtensionAPI): PanelActions {\n\t/** One cheap authenticated call, so a bad token fails here rather than at the model's first search. */\n\tconst verifyAndSave = async (token: string) => {\n\t\tawait webSearch(toApiKey(token), \"Devin\", 1);\n\t\tsaveCredential(token);\n\t\tsyncTools(pi, true);\n\t};\n\treturn {\n\t\tstate() {\n\t\t\tconst source = getCredential()?.source;\n\t\t\treturn { source, location: source === \"env\" ? ENV_KEY : displayPath(credentialPath()) };\n\t\t},\n\t\tstartSignIn() {\n\t\t\tconst attempt = createSignIn();\n\t\t\topenBrowser(attempt.url);\n\t\t\treturn {\n\t\t\t\turl: attempt.url,\n\t\t\t\tcomplete: async (input) =>\n\t\t\t\t\tverifyAndSave(looksLikeToken(input) ? input : await exchangeCode(attempt, input)),\n\t\t\t};\n\t\t},\n\t\tsaveToken: verifyAndSave,\n\t\tsignOut() {\n\t\t\tdeleteCredential();\n\t\t\tsyncTools(pi);\n\t\t},\n\t};\n}\n\nexport function registerSearchCommand(pi: ExtensionAPI): void {\n\tpi.registerCommand(\"search\", {\n\t\tdescription: \"Sign in to Devin for code_search and web_search\",\n\t\thandler: async (_args, ctx) => {\n\t\t\tif (!ctx.hasUI) {\n\t\t\t\tconst credential = getCredential();\n\t\t\t\tctx.ui.notify(\n\t\t\t\t\tcredential\n\t\t\t\t\t\t? `Devin Search: signed in ($credential.source === \"env\" ? ENV_KEY : credentialPath()).`\n\t\t\t\t\t\t: `Devin Search: not signed in. Run /search interactively, or set $ENV_KEY.`,\n\t\t\t\t\tcredential ? \"info\" : \"warning\",\n\t\t\t\t);\n\t\t\t\treturn;\n\t\t\t}\n\t\t\tawait ctx.ui.custom<void>(\n\t\t\t\t(tui, theme, keybindings, done) =>\n\t\t\t\t\tnew SearchPanel(tui, theme, keybindings, accountActions(pi), () => done()),\n\t\t\t);\n\t\t},\n\t});\n}\n"]}

package/dist/extensions/search/credential.d.ts

@@ -0,0 +1,25 @@
+export declare const ENV_KEY = "SEARCH_KEY";
+/** `{ "devin": { "token": "<as Devin issued it>" } }`, beside auth.json and mcp-auth.json. */
+export declare function credentialPath(): string;
+/** A Devin session JWT gains its prefix; anything else (an already prefixed key) passes through. */
+export declare function toApiKey(token: string): string;
+export type CredentialSource = "saved" | "env";
+/** Read on every call, so a sign-in elsewhere or an edited file applies without a restart. */
+export declare function getCredential(): {
+    apiKey: string;
+    source: CredentialSource;
+} | undefined;
+/** Saves the token exactly as Devin issued it; the request prefix is added at use. */
+export declare function saveCredential(token: string): void;
+export declare function deleteCredential(): void;
+/** Whether pasted text is a token rather than a one-time authorization code. */
+export declare function looksLikeToken(value: string): boolean;
+export interface SignInAttempt {
+    url: string;
+    /** Never leaves this process. */
+    verifier: string;
+}
+/** PKCE S256 without a redirect: Devin shows the code in the browser and the user pastes it back. */
+export declare function createSignIn(): SignInAttempt;
+export declare function exchangeCode(attempt: SignInAttempt, input: string, fetcher?: typeof fetch): Promise<string>;
+//# sourceMappingURL=credential.d.ts.map

package/dist/extensions/search/credential.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/credential.ts"],"names":[],"mappings":"AAYA,eAAO,MAAM,OAAO,eAAe,CAAC;AAOpC,8FAA8F;AAC9F,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAID,oGAAoG;AACpG,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,MAAM,CAG9C;AA+BD,MAAM,MAAM,gBAAgB,GAAG,OAAO,GAAG,KAAK,CAAC;AAE/C,8FAA8F;AAC9F,wBAAgB,aAAa,IAAI;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,GAAG,SAAS,CAKxF;AAED,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAIlD;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED,gFAAgF;AAChF,wBAAgB,cAAc,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAErD;AAED,MAAM,WAAW,aAAa;IAC7B,GAAG,EAAE,MAAM,CAAC;IACZ,iCAAiC;IACjC,QAAQ,EAAE,MAAM,CAAC;CACjB;AAED,qGAAqG;AACrG,wBAAgB,YAAY,IAAI,aAAa,CAU5C;AAED,wBAAsB,YAAY,CACjC,OAAO,EAAE,aAAa,EACtB,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAO,KAAa,GAC3B,OAAO,CAAC,MAAM,CAAC,CAyBjB"}

package/dist/extensions/search/credential.js

@@ -0,0 +1,117 @@
+/**
+ * The one Devin credential both tools share, and the browser sign-in that obtains it.
+ *
+ * Devin's CLI sign-in returns a bare session JWT; the Windsurf backends accept it only as
+ * `devin-session-token$<JWT>`. `toApiKey` is the single place that rule lives.
+ */
+import { createHash, randomBytes } from "node:crypto";
+import { existsSync } from "node:fs";
+import { join } from "node:path";
+import { getAgentDir } from "../../config.js";
+import { FileAuthStorageBackend } from "../../core/auth-storage.js";
+export const ENV_KEY = "SEARCH_KEY";
+const SESSION_PREFIX = "devin-session-token$";
+const AUTHORIZE_URL = "https://app.devin.ai/auth/cli/continue";
+const TOKEN_URL = "https://api.devin.ai/auth/cli/token";
+const MAX_INPUT_CHARS = 16_384;
+/** `{ "devin": { "token": "<as Devin issued it>" } }`, beside auth.json and mcp-auth.json. */
+export function credentialPath() {
+    return join(getAgentDir(), "search-auth.json");
+}
+const PROVIDER = "devin";
+/** A Devin session JWT gains its prefix; anything else (an already prefixed key) passes through. */
+export function toApiKey(token) {
+    const value = token.trim();
+    return /^eyJ[\w-]*\.[\w-]*\.[\w-]*$/.test(value) ? `${SESSION_PREFIX}${value}` : value;
+}
+function parseStored(current) {
+    try {
+        const data = JSON.parse(current ?? "{}");
+        return data && typeof data === "object" && !Array.isArray(data) ? data : {};
+    }
+    catch {
+        return {};
+    }
+}
+/** Read-modify-write under the file lock that auth.json and mcp-auth.json also use. */
+function updateStored(change) {
+    new FileAuthStorageBackend(credentialPath()).withLock((current) => {
+        const stored = parseStored(current);
+        change(stored);
+        return { result: undefined, next: `${JSON.stringify(stored, null, 2)}\n` };
+    });
+}
+function readSaved() {
+    // Checked first so a session that never signs in does not create the file.
+    if (!existsSync(credentialPath()))
+        return undefined;
+    const token = new FileAuthStorageBackend(credentialPath()).withLock((current) => ({
+        result: parseStored(current)[PROVIDER]?.token,
+    }));
+    return typeof token === "string" && token.trim() ? token.trim() : undefined;
+}
+/** Read on every call, so a sign-in elsewhere or an edited file applies without a restart. */
+export function getCredential() {
+    const saved = readSaved();
+    if (saved)
+        return { apiKey: toApiKey(saved), source: "saved" };
+    const env = process.env[ENV_KEY]?.trim();
+    return env ? { apiKey: toApiKey(env), source: "env" } : undefined;
+}
+/** Saves the token exactly as Devin issued it; the request prefix is added at use. */
+export function saveCredential(token) {
+    updateStored((stored) => {
+        stored[PROVIDER] = { token: token.trim() };
+    });
+}
+export function deleteCredential() {
+    if (!existsSync(credentialPath()))
+        return;
+    updateStored((stored) => {
+        delete stored[PROVIDER];
+    });
+}
+/** Whether pasted text is a token rather than a one-time authorization code. */
+export function looksLikeToken(value) {
+    return value.startsWith(SESSION_PREFIX) || toApiKey(value) !== value;
+}
+/** PKCE S256 without a redirect: Devin shows the code in the browser and the user pastes it back. */
+export function createSignIn() {
+    const verifier = randomBytes(64).toString("base64url");
+    const url = new URL(AUTHORIZE_URL);
+    url.search = new URLSearchParams({
+        state: randomBytes(32).toString("base64url"),
+        prompt: "select_account",
+        code_challenge: createHash("sha256").update(verifier).digest("base64url"),
+        code_challenge_method: "S256",
+    }).toString();
+    return { url: url.toString(), verifier };
+}
+export async function exchangeCode(attempt, input, fetcher = fetch) {
+    const code = input.trim();
+    if (!code || code.length > MAX_INPUT_CHARS || /\s|[\x00-\x1f\x7f]/.test(code)) {
+        throw new Error("That does not look like a Devin authorization code.");
+    }
+    let response;
+    try {
+        response = await fetcher(TOKEN_URL, {
+            method: "POST",
+            headers: { "content-type": "application/json", accept: "application/json" },
+            body: JSON.stringify({ code, code_verifier: attempt.verifier }),
+            redirect: "error",
+            signal: AbortSignal.timeout(60_000),
+        });
+    }
+    catch {
+        throw new Error("Could not reach Devin. Check your network and run /search again.");
+    }
+    if (!response.ok) {
+        throw new Error(`Devin rejected the code (HTTP ${response.status}). Codes are one-time; run /search again.`);
+    }
+    const token = (await response.json().catch(() => undefined))?.token;
+    if (typeof token !== "string" || !token || token.length > MAX_INPUT_CHARS) {
+        throw new Error("Devin returned no usable session token.");
+    }
+    return token;
+}
+//# sourceMappingURL=credential.js.map

package/dist/extensions/search/credential.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"credential.js","sourceRoot":"","sources":["../../../src/extensions/search/credential.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACtD,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,sBAAsB,EAAE,MAAM,4BAA4B,CAAC;AAEpE,MAAM,CAAC,MAAM,OAAO,GAAG,YAAY,CAAC;AAEpC,MAAM,cAAc,GAAG,sBAAsB,CAAC;AAC9C,MAAM,aAAa,GAAG,wCAAwC,CAAC;AAC/D,MAAM,SAAS,GAAG,qCAAqC,CAAC;AACxD,MAAM,eAAe,GAAG,MAAM,CAAC;AAE/B,8FAA8F;AAC9F,MAAM,UAAU,cAAc;IAC7B,OAAO,IAAI,CAAC,WAAW,EAAE,EAAE,kBAAkB,CAAC,CAAC;AAChD,CAAC;AAED,MAAM,QAAQ,GAAG,OAAO,CAAC;AAEzB,oGAAoG;AACpG,MAAM,UAAU,QAAQ,CAAC,KAAa;IACrC,MAAM,KAAK,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC3B,OAAO,6BAA6B,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,cAAc,GAAG,KAAK,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;AACxF,CAAC;AAID,SAAS,WAAW,CAAC,OAA2B;IAC/C,IAAI,CAAC;QACJ,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAY,CAAC;QACpD,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAE,IAAqB,CAAC,CAAC,CAAC,EAAE,CAAC;IAC/F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC;IACX,CAAC;AACF,CAAC;AAED,uFAAuF;AACvF,SAAS,YAAY,CAAC,MAAsC;IAC3D,IAAI,sBAAsB,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE;QACjE,MAAM,MAAM,GAAG,WAAW,CAAC,OAAO,CAAC,CAAC;QACpC,MAAM,CAAC,MAAM,CAAC,CAAC;QACf,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,IAAI,EAAE,GAAG,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC5E,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,SAAS;IACjB,2EAA2E;IAC3E,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAAE,OAAO,SAAS,CAAC;IACpD,MAAM,KAAK,GAAG,IAAI,sBAAsB,CAAC,cAAc,EAAE,CAAC,CAAC,QAAQ,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;QACjF,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,CAAC,QAAQ,CAAC,EAAE,KAAK;KAC7C,CAAC,CAAC,CAAC;IACJ,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC7E,CAAC;AAID,8FAA8F;AAC9F,MAAM,UAAU,aAAa;IAC5B,MAAM,KAAK,GAAG,SAAS,EAAE,CAAC;IAC1B,IAAI,KAAK;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IAC/D,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,IAAI,EAAE,CAAC;IACzC,OAAO,GAAG,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACvB,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC;IAC5C,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC/B,IAAI,CAAC,UAAU,CAAC,cAAc,EAAE,CAAC;QAAE,OAAO;IAC1C,YAAY,CAAC,CAAC,MAAM,EAAE,EAAE;QACvB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,cAAc,CAAC,KAAa;IAC3C,OAAO,KAAK,CAAC,UAAU,CAAC,cAAc,CAAC,IAAI,QAAQ,CAAC,KAAK,CAAC,KAAK,KAAK,CAAC;AACtE,CAAC;AAQD,qGAAqG;AACrG,MAAM,UAAU,YAAY;IAC3B,MAAM,QAAQ,GAAG,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;IACvD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,aAAa,CAAC,CAAC;IACnC,GAAG,CAAC,MAAM,GAAG,IAAI,eAAe,CAAC;QAChC,KAAK,EAAE,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC;QAC5C,MAAM,EAAE,gBAAgB;QACxB,cAAc,EAAE,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC;QACzE,qBAAqB,EAAE,MAAM;KAC7B,CAAC,CAAC,QAAQ,EAAE,CAAC;IACd,OAAO,EAAE,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,EAAE,QAAQ,EAAE,CAAC;AAC1C,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CACjC,OAAsB,EACtB,KAAa,EACb,UAAwB,KAAK;IAE7B,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;IAC1B,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,eAAe,IAAI,oBAAoB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC/E,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IACxE,CAAC;IACD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,EAAE;YACnC,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,EAAE,kBAAkB,EAAE;YAC3E,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,OAAO,CAAC,QAAQ,EAAE,CAAC;YAC/D,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC;SACnC,CAAC,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,kEAAkE,CAAC,CAAC;IACrF,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,KAAK,CAAC,iCAAiC,QAAQ,CAAC,MAAM,2CAA2C,CAAC,CAAC;IAC9G,CAAC;IACD,MAAM,KAAK,GAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAqC,EAAE,KAAK,CAAC;IACzG,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,eAAe,EAAE,CAAC;QAC3E,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC","sourcesContent":["/**\n * The one Devin credential both tools share, and the browser sign-in that obtains it.\n *\n * Devin's CLI sign-in returns a bare session JWT; the Windsurf backends accept it only as\n * `devin-session-token$<JWT>`. `toApiKey` is the single place that rule lives.\n */\nimport { createHash, randomBytes } from \"node:crypto\";\nimport { existsSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport { getAgentDir } from \"../../config.ts\";\nimport { FileAuthStorageBackend } from \"../../core/auth-storage.ts\";\n\nexport const ENV_KEY = \"SEARCH_KEY\";\n\nconst SESSION_PREFIX = \"devin-session-token$\";\nconst AUTHORIZE_URL = \"https://app.devin.ai/auth/cli/continue\";\nconst TOKEN_URL = \"https://api.devin.ai/auth/cli/token\";\nconst MAX_INPUT_CHARS = 16_384;\n\n/** `{ \"devin\": { \"token\": \"<as Devin issued it>\" } }`, beside auth.json and mcp-auth.json. */\nexport function credentialPath(): string {\n\treturn join(getAgentDir(), \"search-auth.json\");\n}\n\nconst PROVIDER = \"devin\";\n\n/** A Devin session JWT gains its prefix; anything else (an already prefixed key) passes through. */\nexport function toApiKey(token: string): string {\n\tconst value = token.trim();\n\treturn /^eyJ[\\w-]*\\.[\\w-]*\\.[\\w-]*$/.test(value) ? `${SESSION_PREFIX}${value}` : value;\n}\n\ntype StoredTokens = Record<string, { token?: unknown } | undefined>;\n\nfunction parseStored(current: string | undefined): StoredTokens {\n\ttry {\n\t\tconst data = JSON.parse(current ?? \"{}\") as unknown;\n\t\treturn data && typeof data === \"object\" && !Array.isArray(data) ? (data as StoredTokens) : {};\n\t} catch {\n\t\treturn {};\n\t}\n}\n\n/** Read-modify-write under the file lock that auth.json and mcp-auth.json also use. */\nfunction updateStored(change: (stored: StoredTokens) => void): void {\n\tnew FileAuthStorageBackend(credentialPath()).withLock((current) => {\n\t\tconst stored = parseStored(current);\n\t\tchange(stored);\n\t\treturn { result: undefined, next: `${JSON.stringify(stored, null, 2)}\\n` };\n\t});\n}\n\nfunction readSaved(): string | undefined {\n\t// Checked first so a session that never signs in does not create the file.\n\tif (!existsSync(credentialPath())) return undefined;\n\tconst token = new FileAuthStorageBackend(credentialPath()).withLock((current) => ({\n\t\tresult: parseStored(current)[PROVIDER]?.token,\n\t}));\n\treturn typeof token === \"string\" && token.trim() ? token.trim() : undefined;\n}\n\nexport type CredentialSource = \"saved\" | \"env\";\n\n/** Read on every call, so a sign-in elsewhere or an edited file applies without a restart. */\nexport function getCredential(): { apiKey: string; source: CredentialSource } | undefined {\n\tconst saved = readSaved();\n\tif (saved) return { apiKey: toApiKey(saved), source: \"saved\" };\n\tconst env = process.env[ENV_KEY]?.trim();\n\treturn env ? { apiKey: toApiKey(env), source: \"env\" } : undefined;\n}\n\n/** Saves the token exactly as Devin issued it; the request prefix is added at use. */\nexport function saveCredential(token: string): void {\n\tupdateStored((stored) => {\n\t\tstored[PROVIDER] = { token: token.trim() };\n\t});\n}\n\nexport function deleteCredential(): void {\n\tif (!existsSync(credentialPath())) return;\n\tupdateStored((stored) => {\n\t\tdelete stored[PROVIDER];\n\t});\n}\n\n/** Whether pasted text is a token rather than a one-time authorization code. */\nexport function looksLikeToken(value: string): boolean {\n\treturn value.startsWith(SESSION_PREFIX) || toApiKey(value) !== value;\n}\n\nexport interface SignInAttempt {\n\turl: string;\n\t/** Never leaves this process. */\n\tverifier: string;\n}\n\n/** PKCE S256 without a redirect: Devin shows the code in the browser and the user pastes it back. */\nexport function createSignIn(): SignInAttempt {\n\tconst verifier = randomBytes(64).toString(\"base64url\");\n\tconst url = new URL(AUTHORIZE_URL);\n\turl.search = new URLSearchParams({\n\t\tstate: randomBytes(32).toString(\"base64url\"),\n\t\tprompt: \"select_account\",\n\t\tcode_challenge: createHash(\"sha256\").update(verifier).digest(\"base64url\"),\n\t\tcode_challenge_method: \"S256\",\n\t}).toString();\n\treturn { url: url.toString(), verifier };\n}\n\nexport async function exchangeCode(\n\tattempt: SignInAttempt,\n\tinput: string,\n\tfetcher: typeof fetch = fetch,\n): Promise<string> {\n\tconst code = input.trim();\n\tif (!code || code.length > MAX_INPUT_CHARS || /\\s|[\\x00-\\x1f\\x7f]/.test(code)) {\n\t\tthrow new Error(\"That does not look like a Devin authorization code.\");\n\t}\n\tlet response: Response;\n\ttry {\n\t\tresponse = await fetcher(TOKEN_URL, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { \"content-type\": \"application/json\", accept: \"application/json\" },\n\t\t\tbody: JSON.stringify({ code, code_verifier: attempt.verifier }),\n\t\t\tredirect: \"error\",\n\t\t\tsignal: AbortSignal.timeout(60_000),\n\t\t});\n\t} catch {\n\t\tthrow new Error(\"Could not reach Devin. Check your network and run /search again.\");\n\t}\n\tif (!response.ok) {\n\t\tthrow new Error(`Devin rejected the code (HTTP ${response.status}). Codes are one-time; run /search again.`);\n\t}\n\tconst token = ((await response.json().catch(() => undefined)) as { token?: unknown } | undefined)?.token;\n\tif (typeof token !== \"string\" || !token || token.length > MAX_INPUT_CHARS) {\n\t\tthrow new Error(\"Devin returned no usable session token.\");\n\t}\n\treturn token;\n}\n"]}

package/dist/extensions/search/devin.d.ts

@@ -0,0 +1,34 @@
+export declare class DevinError extends Error {
+    name: string;
+}
+/** The credential is missing, revoked, or malformed; only signing in again fixes it. */
+export declare class DevinAuthError extends DevinError {
+    name: string;
+}
+export interface ChatMessage {
+    role: "system" | "user" | "assistant" | "tool";
+    content: string;
+    /** On an assistant message: the tool call it made. */
+    call?: {
+        id: string;
+        name: string;
+        arguments: string;
+    };
+    /** On a tool message: the id of the call it answers. */
+    callId?: string;
+}
+export declare function encodeChatRequest(apiKey: string, messages: ChatMessage[], tools: string): Buffer;
+/**
+ * Connect streaming envelopes: a flags byte (bit 0 gzip, bit 1 end-of-stream) and a length. Data
+ * frames carry text chunks in field 2; the end frame is JSON that names an error, if any.
+ */
+export declare function decodeChatResponse(body: Buffer): string;
+export declare function chat(apiKey: string, messages: ChatMessage[], tools: string, signal?: AbortSignal): Promise<string>;
+export interface WebResult {
+    url: string;
+    title?: string;
+    /** Query-relevant excerpts of the page, joined by `...`; up to about 4,000 characters. */
+    summary?: string;
+}
+export declare function webSearch(apiKey: string, query: string, limit: number, signal?: AbortSignal): Promise<WebResult[]>;
+//# sourceMappingURL=devin.d.ts.map

package/dist/extensions/search/devin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"devin.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/devin.ts"],"names":[],"mappings":"AAoBA,qBAAa,UAAW,SAAQ,KAAK;IAC3B,IAAI,SAAgB;CAC7B;AAED,wFAAwF;AACxF,qBAAa,cAAe,SAAQ,UAAU;IACpC,IAAI,SAAoB;CACjC;AAiFD,MAAM,WAAW,WAAW;IAC3B,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAC;IAC/C,OAAO,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,IAAI,CAAC,EAAE;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAC;IACvD,wDAAwD;IACxD,MAAM,CAAC,EAAE,MAAM,CAAC;CAChB;AAID,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,WAAW,EAAE,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAkBhG;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiBvD;AAED,wBAAsB,IAAI,CACzB,MAAM,EAAE,MAAM,EACd,QAAQ,EAAE,WAAW,EAAE,EACvB,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,MAAM,CAAC,CAoBjB;AAID,MAAM,WAAW,SAAS;IACzB,GAAG,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,0FAA0F;IAC1F,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAED,wBAAsB,SAAS,CAC9B,MAAM,EAAE,MAAM,EACd,KAAK,EAAE,MAAM,EACb,KAAK,EAAE,MAAM,EACb,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,SAAS,EAAE,CAAC,CA0BtB"}

package/dist/extensions/search/devin.js

@@ -0,0 +1,210 @@
+/**
+ * The two Devin (Windsurf) endpoints the search tools call. Both authenticate with the API key
+ * inside the request body; neither needs a JWT exchange, a rate-limit preflight, or host details.
+ *
+ * - `GetDevstralStream` is one turn of the SWE-grep planner: a Connect-streaming protobuf request
+ *   carrying a chat transcript and tool schemas, answered by one text completion.
+ * - `GetWebSearchResults` is a Connect-unary JSON request answered by `{ results: [...] }`.
+ *
+ * There is no published schema. The field numbers and the client identity below are the minimum
+ * the backend accepts; dropping any of them makes it answer `invalid_argument`.
+ */
+import { gunzipSync, gzipSync } from "node:zlib";
+const SERVICE = "https://server.self-serve.windsurf.com/exa.api_server_pb.ApiServerService";
+const APP = "windsurf";
+const APP_VERSION = "1.48.2";
+const LANGUAGE_SERVER_VERSION = "1.9544.35";
+const WEB_CLIENT_VERSION = "1.9600.41";
+const TIMEOUT_MS = 30_000;
+export class DevinError extends Error {
+    constructor() {
+        super(...arguments);
+        this.name = "DevinError";
+    }
+}
+/** The credential is missing, revoked, or malformed; only signing in again fixes it. */
+export class DevinAuthError extends DevinError {
+    constructor() {
+        super(...arguments);
+        this.name = "DevinAuthError";
+    }
+}
+function errorFor(code, message = "") {
+    if (code === 401 || code === 403 || code === "unauthenticated" || code === "permission_denied") {
+        return new DevinAuthError("Devin rejected the credential.");
+    }
+    if (code === 429 || code === "resource_exhausted") {
+        return new DevinError("Devin rate-limited the request. Wait a moment and retry.");
+    }
+    return new DevinError(`Devin request failed (${code}${message ? `: ${message}` : ""}).`);
+}
+async function post(url, init, signal) {
+    const timeout = AbortSignal.timeout(TIMEOUT_MS);
+    let response;
+    try {
+        response = await fetch(url, {
+            ...init,
+            method: "POST",
+            redirect: "error",
+            signal: signal ? AbortSignal.any([signal, timeout]) : timeout,
+        });
+    }
+    catch (e) {
+        if (signal?.aborted)
+            throw e;
+        throw new DevinError(timeout.aborted ? "Devin did not answer in time." : `Could not reach Devin: ${String(e)}`);
+    }
+    if (!response.ok) {
+        const body = (await response.json().catch(() => undefined));
+        throw errorFor(body?.code ?? response.status, body?.message);
+    }
+    return response;
+}
+// --- Protobuf, just enough for these messages ---
+function varint(value) {
+    const bytes = [];
+    while (value > 0x7f) {
+        bytes.push((value & 0x7f) | 0x80);
+        value >>>= 7;
+    }
+    bytes.push(value);
+    return bytes;
+}
+function field(no, value) {
+    if (typeof value === "number")
+        return Buffer.from([...varint(no << 3), ...varint(value)]);
+    const data = typeof value === "string" ? Buffer.from(value, "utf-8") : value;
+    return Buffer.concat([Buffer.from([...varint((no << 3) | 2), ...varint(data.length)]), data]);
+}
+/** The length-delimited values of field `no` at the top level of `data`. */
+function readField(data, no) {
+    const out = [];
+    let i = 0;
+    const readVarint = () => {
+        let value = 0;
+        for (let shift = 0; i < data.length; shift += 7) {
+            const b = data[i++];
+            value += (b & 0x7f) * 2 ** shift;
+            if (!(b & 0x80))
+                break;
+        }
+        return value;
+    };
+    while (i < data.length) {
+        const tag = readVarint();
+        const wire = tag & 7;
+        if (wire === 0)
+            readVarint();
+        else if (wire === 1)
+            i += 8;
+        else if (wire === 5)
+            i += 4;
+        else if (wire === 2) {
+            const length = readVarint();
+            if (tag >>> 3 === no)
+                out.push(data.subarray(i, i + length));
+            i += length;
+        }
+        else
+            break;
+    }
+    return out;
+}
+const ROLE = { user: 1, assistant: 2, tool: 4, system: 5 };
+export function encodeChatRequest(apiKey, messages, tools) {
+    const metadata = Buffer.concat([
+        field(1, APP),
+        field(2, APP_VERSION),
+        field(3, apiKey),
+        field(7, LANGUAGE_SERVER_VERSION),
+    ]);
+    const parts = [field(1, metadata)];
+    for (const m of messages) {
+        const msg = [field(2, ROLE[m.role]), field(3, m.content)];
+        if (m.call) {
+            msg.push(field(6, Buffer.concat([field(1, m.call.id), field(2, m.call.name), field(3, m.call.arguments)])));
+        }
+        if (m.callId)
+            msg.push(field(7, m.callId));
+        parts.push(field(2, Buffer.concat(msg)));
+    }
+    parts.push(field(3, tools));
+    return Buffer.concat(parts);
+}
+/**
+ * Connect streaming envelopes: a flags byte (bit 0 gzip, bit 1 end-of-stream) and a length. Data
+ * frames carry text chunks in field 2; the end frame is JSON that names an error, if any.
+ */
+export function decodeChatResponse(body) {
+    let text = "";
+    let i = 0;
+    while (i + 5 <= body.length) {
+        const flags = body[i];
+        const length = body.readUInt32BE(i + 1);
+        let payload = body.subarray(i + 5, i + 5 + length);
+        i += 5 + length;
+        if (flags & 1)
+            payload = gunzipSync(payload);
+        if (flags & 2) {
+            const end = JSON.parse(payload.toString("utf-8") || "{}");
+            if (end.error)
+                throw errorFor(end.error.code ?? "unknown", end.error.message);
+            continue;
+        }
+        for (const chunk of readField(payload, 2))
+            text += chunk.toString("utf-8");
+    }
+    return text;
+}
+export async function chat(apiKey, messages, tools, signal) {
+    const message = gzipSync(encodeChatRequest(apiKey, messages, tools));
+    const envelope = Buffer.alloc(5);
+    envelope[0] = 1;
+    envelope.writeUInt32BE(message.length, 1);
+    const response = await post(`${SERVICE}/GetDevstralStream`, {
+        headers: {
+            "Content-Type": "application/connect+proto",
+            "Connect-Protocol-Version": "1",
+            "Connect-Content-Encoding": "gzip",
+            "Connect-Accept-Encoding": "gzip",
+            "Connect-Timeout-Ms": String(TIMEOUT_MS),
+        },
+        body: new Uint8Array(Buffer.concat([envelope, message])),
+    }, signal);
+    return decodeChatResponse(Buffer.from(await response.arrayBuffer()));
+}
+export async function webSearch(apiKey, query, limit, signal) {
+    const response = await post(`${SERVICE}/GetWebSearchResults`, {
+        headers: { "Content-Type": "application/json", "Connect-Protocol-Version": "1" },
+        body: JSON.stringify({
+            metadata: { apiKey, ideName: APP, ideVersion: WEB_CLIENT_VERSION, extensionVersion: WEB_CLIENT_VERSION },
+            query,
+            limit,
+        }),
+    }, signal);
+    const results = (await response.json().catch(() => undefined))?.results;
+    if (!Array.isArray(results))
+        throw new DevinError("Devin returned a malformed web search response.");
+    return results.flatMap((row) => {
+        const { url, title, summary } = (row ?? {});
+        if (typeof url !== "string" || !isWebUrl(url))
+            return [];
+        return [
+            {
+                url,
+                ...(typeof title === "string" && title.trim() ? { title: title.trim() } : {}),
+                ...(typeof summary === "string" && summary.trim() ? { summary: summary.trim() } : {}),
+            },
+        ];
+    });
+}
+function isWebUrl(value) {
+    try {
+        const url = new URL(value);
+        return (url.protocol === "https:" || url.protocol === "http:") && !url.username && !url.password;
+    }
+    catch {
+        return false;
+    }
+}
+//# sourceMappingURL=devin.js.map

package/dist/extensions/search/devin.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"devin.js","sourceRoot":"","sources":["../../../src/extensions/search/devin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AACH,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAEjD,MAAM,OAAO,GAAG,2EAA2E,CAAC;AAC5F,MAAM,GAAG,GAAG,UAAU,CAAC;AACvB,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B,MAAM,uBAAuB,GAAG,WAAW,CAAC;AAC5C,MAAM,kBAAkB,GAAG,WAAW,CAAC;AACvC,MAAM,UAAU,GAAG,MAAM,CAAC;AAE1B,MAAM,OAAO,UAAW,SAAQ,KAAK;IAArC;;QACU,SAAI,GAAG,YAAY,CAAC;IAC9B,CAAC;CAAA;AAED,wFAAwF;AACxF,MAAM,OAAO,cAAe,SAAQ,UAAU;IAA9C;;QACU,SAAI,GAAG,gBAAgB,CAAC;IAClC,CAAC;CAAA;AAED,SAAS,QAAQ,CAAC,IAAqB,EAAE,OAAO,GAAG,EAAE;IACpD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,iBAAiB,IAAI,IAAI,KAAK,mBAAmB,EAAE,CAAC;QAChG,OAAO,IAAI,cAAc,CAAC,gCAAgC,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,IAAI,KAAK,GAAG,IAAI,IAAI,KAAK,oBAAoB,EAAE,CAAC;QACnD,OAAO,IAAI,UAAU,CAAC,0DAA0D,CAAC,CAAC;IACnF,CAAC;IACD,OAAO,IAAI,UAAU,CAAC,yBAAyB,IAAI,GAAG,OAAO,CAAC,CAAC,CAAC,KAAK,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC;AAC1F,CAAC;AAED,KAAK,UAAU,IAAI,CAAC,GAAW,EAAE,IAAiB,EAAE,MAAoB;IACvE,MAAM,OAAO,GAAG,WAAW,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC;IAChD,IAAI,QAAkB,CAAC;IACvB,IAAI,CAAC;QACJ,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;YAC3B,GAAG,IAAI;YACP,MAAM,EAAE,MAAM;YACd,QAAQ,EAAE,OAAO;YACjB,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO;SAC7D,CAAC,CAAC;IACJ,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACZ,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,CAAC,CAAC;QAC7B,MAAM,IAAI,UAAU,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,+BAA+B,CAAC,CAAC,CAAC,0BAA0B,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IACjH,CAAC;IACD,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QAClB,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAoD,CAAC;QAC/G,MAAM,QAAQ,CAAC,IAAI,EAAE,IAAI,IAAI,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC;AACjB,CAAC;AAED,mDAAmD;AAEnD,SAAS,MAAM,CAAC,KAAa;IAC5B,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,OAAO,KAAK,GAAG,IAAI,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,CAAC,KAAK,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC;QAClC,KAAK,MAAM,CAAC,CAAC;IACd,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAClB,OAAO,KAAK,CAAC;AACd,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,KAA+B;IACzD,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IAC1F,MAAM,IAAI,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC;IAC7E,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,GAAG,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;AAC/F,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS,CAAC,IAAY,EAAE,EAAU;IAC1C,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,MAAM,UAAU,GAAG,GAAW,EAAE;QAC/B,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,KAAK,IAAI,CAAC,EAAE,CAAC;YACjD,MAAM,CAAC,GAAG,IAAI,CAAC,CAAC,EAAE,CAAE,CAAC;YACrB,KAAK,IAAI,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,IAAI,KAAK,CAAC;YACjC,IAAI,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC;gBAAE,MAAM;QACxB,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC,CAAC;IACF,OAAO,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,MAAM,GAAG,GAAG,UAAU,EAAE,CAAC;QACzB,MAAM,IAAI,GAAG,GAAG,GAAG,CAAC,CAAC;QACrB,IAAI,IAAI,KAAK,CAAC;YAAE,UAAU,EAAE,CAAC;aACxB,IAAI,IAAI,KAAK,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;aACvB,IAAI,IAAI,KAAK,CAAC;YAAE,CAAC,IAAI,CAAC,CAAC;aACvB,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;YACrB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;YAC5B,IAAI,GAAG,KAAK,CAAC,KAAK,EAAE;gBAAE,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC;YAC7D,CAAC,IAAI,MAAM,CAAC;QACb,CAAC;;YAAM,MAAM;IACd,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAaD,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAW,CAAC;AAEpE,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,QAAuB,EAAE,KAAa;IACvF,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,CAAC;QAC9B,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC;QACb,KAAK,CAAC,CAAC,EAAE,WAAW,CAAC;QACrB,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC;QAChB,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC;KACjC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC,CAAC;IACnC,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;QAC1D,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC;YACZ,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;QAC7G,CAAC;QACD,IAAI,CAAC,CAAC,MAAM;YAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;QAC3C,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IAC1C,CAAC;IACD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,CAAC;IAC5B,OAAO,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AAC7B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAAY;IAC9C,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,CAAC,GAAG,CAAC,CAAC;IACV,OAAO,CAAC,GAAG,CAAC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,CAAE,CAAC;QACvB,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC;QACxC,IAAI,OAAO,GAAG,IAAI,CAAC,QAAQ,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC;QACnD,CAAC,IAAI,CAAC,GAAG,MAAM,CAAC;QAChB,IAAI,KAAK,GAAG,CAAC;YAAE,OAAO,GAAG,UAAU,CAAC,OAAO,CAAC,CAAC;QAC7C,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;YACf,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,IAAI,CAAoD,CAAC;YAC7G,IAAI,GAAG,CAAC,KAAK;gBAAE,MAAM,QAAQ,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,IAAI,SAAS,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAC9E,SAAS;QACV,CAAC;QACD,KAAK,MAAM,KAAK,IAAI,SAAS,CAAC,OAAO,EAAE,CAAC,CAAC;YAAE,IAAI,IAAI,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,IAAI,CACzB,MAAc,EACd,QAAuB,EACvB,KAAa,EACb,MAAoB;IAEpB,MAAM,OAAO,GAAG,QAAQ,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC;IACrE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;IACjC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAChB,QAAQ,CAAC,aAAa,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAC1C,MAAM,QAAQ,GAAG,MAAM,IAAI,CAC1B,GAAG,OAAO,oBAAoB,EAC9B;QACC,OAAO,EAAE;YACR,cAAc,EAAE,2BAA2B;YAC3C,0BAA0B,EAAE,GAAG;YAC/B,0BAA0B,EAAE,MAAM;YAClC,yBAAyB,EAAE,MAAM;YACjC,oBAAoB,EAAE,MAAM,CAAC,UAAU,CAAC;SACxC;QACD,IAAI,EAAE,IAAI,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;KACxD,EACD,MAAM,CACN,CAAC;IACF,OAAO,kBAAkB,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC;AACtE,CAAC;AAWD,MAAM,CAAC,KAAK,UAAU,SAAS,CAC9B,MAAc,EACd,KAAa,EACb,KAAa,EACb,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,IAAI,CAC1B,GAAG,OAAO,sBAAsB,EAChC;QACC,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,0BAA0B,EAAE,GAAG,EAAE;QAChF,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;YACpB,QAAQ,EAAE,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,kBAAkB,EAAE,gBAAgB,EAAE,kBAAkB,EAAE;YACxG,KAAK;YACL,KAAK;SACL,CAAC;KACF,EACD,MAAM,CACN,CAAC;IACF,MAAM,OAAO,GAAI,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAuC,EAAE,OAAO,CAAC;IAC/G,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC;QAAE,MAAM,IAAI,UAAU,CAAC,iDAAiD,CAAC,CAAC;IACrG,OAAO,OAAO,CAAC,OAAO,CAAC,CAAC,GAAG,EAAe,EAAE;QAC3C,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,CAAC,GAAG,IAAI,EAAE,CAA4B,CAAC;QACvE,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;YAAE,OAAO,EAAE,CAAC;QACzD,OAAO;YACN;gBACC,GAAG;gBACH,GAAG,CAAC,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC7E,GAAG,CAAC,OAAO,OAAO,KAAK,QAAQ,IAAI,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aACrF;SACD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,SAAS,QAAQ,CAAC,KAAa;IAC9B,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC;QAC3B,OAAO,CAAC,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;IAClG,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;AACF,CAAC","sourcesContent":["/**\n * The two Devin (Windsurf) endpoints the search tools call. Both authenticate with the API key\n * inside the request body; neither needs a JWT exchange, a rate-limit preflight, or host details.\n *\n * - `GetDevstralStream` is one turn of the SWE-grep planner: a Connect-streaming protobuf request\n *   carrying a chat transcript and tool schemas, answered by one text completion.\n * - `GetWebSearchResults` is a Connect-unary JSON request answered by `{ results: [...] }`.\n *\n * There is no published schema. The field numbers and the client identity below are the minimum\n * the backend accepts; dropping any of them makes it answer `invalid_argument`.\n */\nimport { gunzipSync, gzipSync } from \"node:zlib\";\n\nconst SERVICE = \"https://server.self-serve.windsurf.com/exa.api_server_pb.ApiServerService\";\nconst APP = \"windsurf\";\nconst APP_VERSION = \"1.48.2\";\nconst LANGUAGE_SERVER_VERSION = \"1.9544.35\";\nconst WEB_CLIENT_VERSION = \"1.9600.41\";\nconst TIMEOUT_MS = 30_000;\n\nexport class DevinError extends Error {\n\toverride name = \"DevinError\";\n}\n\n/** The credential is missing, revoked, or malformed; only signing in again fixes it. */\nexport class DevinAuthError extends DevinError {\n\toverride name = \"DevinAuthError\";\n}\n\nfunction errorFor(code: string | number, message = \"\"): DevinError {\n\tif (code === 401 || code === 403 || code === \"unauthenticated\" || code === \"permission_denied\") {\n\t\treturn new DevinAuthError(\"Devin rejected the credential.\");\n\t}\n\tif (code === 429 || code === \"resource_exhausted\") {\n\t\treturn new DevinError(\"Devin rate-limited the request. Wait a moment and retry.\");\n\t}\n\treturn new DevinError(`Devin request failed (${code}${message ? `: ${message}` : \"\"}).`);\n}\n\nasync function post(url: string, init: RequestInit, signal?: AbortSignal): Promise<Response> {\n\tconst timeout = AbortSignal.timeout(TIMEOUT_MS);\n\tlet response: Response;\n\ttry {\n\t\tresponse = await fetch(url, {\n\t\t\t...init,\n\t\t\tmethod: \"POST\",\n\t\t\tredirect: \"error\",\n\t\t\tsignal: signal ? AbortSignal.any([signal, timeout]) : timeout,\n\t\t});\n\t} catch (e) {\n\t\tif (signal?.aborted) throw e;\n\t\tthrow new DevinError(timeout.aborted ? \"Devin did not answer in time.\" : `Could not reach Devin: ${String(e)}`);\n\t}\n\tif (!response.ok) {\n\t\tconst body = (await response.json().catch(() => undefined)) as { code?: string; message?: string } | undefined;\n\t\tthrow errorFor(body?.code ?? response.status, body?.message);\n\t}\n\treturn response;\n}\n\n// --- Protobuf, just enough for these messages ---\n\nfunction varint(value: number): number[] {\n\tconst bytes: number[] = [];\n\twhile (value > 0x7f) {\n\t\tbytes.push((value & 0x7f) | 0x80);\n\t\tvalue >>>= 7;\n\t}\n\tbytes.push(value);\n\treturn bytes;\n}\n\nfunction field(no: number, value: string | number | Buffer): Buffer {\n\tif (typeof value === \"number\") return Buffer.from([...varint(no << 3), ...varint(value)]);\n\tconst data = typeof value === \"string\" ? Buffer.from(value, \"utf-8\") : value;\n\treturn Buffer.concat([Buffer.from([...varint((no << 3) | 2), ...varint(data.length)]), data]);\n}\n\n/** The length-delimited values of field `no` at the top level of `data`. */\nfunction readField(data: Buffer, no: number): Buffer[] {\n\tconst out: Buffer[] = [];\n\tlet i = 0;\n\tconst readVarint = (): number => {\n\t\tlet value = 0;\n\t\tfor (let shift = 0; i < data.length; shift += 7) {\n\t\t\tconst b = data[i++]!;\n\t\t\tvalue += (b & 0x7f) * 2 ** shift;\n\t\t\tif (!(b & 0x80)) break;\n\t\t}\n\t\treturn value;\n\t};\n\twhile (i < data.length) {\n\t\tconst tag = readVarint();\n\t\tconst wire = tag & 7;\n\t\tif (wire === 0) readVarint();\n\t\telse if (wire === 1) i += 8;\n\t\telse if (wire === 5) i += 4;\n\t\telse if (wire === 2) {\n\t\t\tconst length = readVarint();\n\t\t\tif (tag >>> 3 === no) out.push(data.subarray(i, i + length));\n\t\t\ti += length;\n\t\t} else break;\n\t}\n\treturn out;\n}\n\n// --- Planner turn ---\n\nexport interface ChatMessage {\n\trole: \"system\" | \"user\" | \"assistant\" | \"tool\";\n\tcontent: string;\n\t/** On an assistant message: the tool call it made. */\n\tcall?: { id: string; name: string; arguments: string };\n\t/** On a tool message: the id of the call it answers. */\n\tcallId?: string;\n}\n\nconst ROLE = { user: 1, assistant: 2, tool: 4, system: 5 } as const;\n\nexport function encodeChatRequest(apiKey: string, messages: ChatMessage[], tools: string): Buffer {\n\tconst metadata = Buffer.concat([\n\t\tfield(1, APP),\n\t\tfield(2, APP_VERSION),\n\t\tfield(3, apiKey),\n\t\tfield(7, LANGUAGE_SERVER_VERSION),\n\t]);\n\tconst parts = [field(1, metadata)];\n\tfor (const m of messages) {\n\t\tconst msg = [field(2, ROLE[m.role]), field(3, m.content)];\n\t\tif (m.call) {\n\t\t\tmsg.push(field(6, Buffer.concat([field(1, m.call.id), field(2, m.call.name), field(3, m.call.arguments)])));\n\t\t}\n\t\tif (m.callId) msg.push(field(7, m.callId));\n\t\tparts.push(field(2, Buffer.concat(msg)));\n\t}\n\tparts.push(field(3, tools));\n\treturn Buffer.concat(parts);\n}\n\n/**\n * Connect streaming envelopes: a flags byte (bit 0 gzip, bit 1 end-of-stream) and a length. Data\n * frames carry text chunks in field 2; the end frame is JSON that names an error, if any.\n */\nexport function decodeChatResponse(body: Buffer): string {\n\tlet text = \"\";\n\tlet i = 0;\n\twhile (i + 5 <= body.length) {\n\t\tconst flags = body[i]!;\n\t\tconst length = body.readUInt32BE(i + 1);\n\t\tlet payload = body.subarray(i + 5, i + 5 + length);\n\t\ti += 5 + length;\n\t\tif (flags & 1) payload = gunzipSync(payload);\n\t\tif (flags & 2) {\n\t\t\tconst end = JSON.parse(payload.toString(\"utf-8\") || \"{}\") as { error?: { code?: string; message?: string } };\n\t\t\tif (end.error) throw errorFor(end.error.code ?? \"unknown\", end.error.message);\n\t\t\tcontinue;\n\t\t}\n\t\tfor (const chunk of readField(payload, 2)) text += chunk.toString(\"utf-8\");\n\t}\n\treturn text;\n}\n\nexport async function chat(\n\tapiKey: string,\n\tmessages: ChatMessage[],\n\ttools: string,\n\tsignal?: AbortSignal,\n): Promise<string> {\n\tconst message = gzipSync(encodeChatRequest(apiKey, messages, tools));\n\tconst envelope = Buffer.alloc(5);\n\tenvelope[0] = 1;\n\tenvelope.writeUInt32BE(message.length, 1);\n\tconst response = await post(\n\t\t`${SERVICE}/GetDevstralStream`,\n\t\t{\n\t\t\theaders: {\n\t\t\t\t\"Content-Type\": \"application/connect+proto\",\n\t\t\t\t\"Connect-Protocol-Version\": \"1\",\n\t\t\t\t\"Connect-Content-Encoding\": \"gzip\",\n\t\t\t\t\"Connect-Accept-Encoding\": \"gzip\",\n\t\t\t\t\"Connect-Timeout-Ms\": String(TIMEOUT_MS),\n\t\t\t},\n\t\t\tbody: new Uint8Array(Buffer.concat([envelope, message])),\n\t\t},\n\t\tsignal,\n\t);\n\treturn decodeChatResponse(Buffer.from(await response.arrayBuffer()));\n}\n\n// --- Web search ---\n\nexport interface WebResult {\n\turl: string;\n\ttitle?: string;\n\t/** Query-relevant excerpts of the page, joined by `...`; up to about 4,000 characters. */\n\tsummary?: string;\n}\n\nexport async function webSearch(\n\tapiKey: string,\n\tquery: string,\n\tlimit: number,\n\tsignal?: AbortSignal,\n): Promise<WebResult[]> {\n\tconst response = await post(\n\t\t`${SERVICE}/GetWebSearchResults`,\n\t\t{\n\t\t\theaders: { \"Content-Type\": \"application/json\", \"Connect-Protocol-Version\": \"1\" },\n\t\t\tbody: JSON.stringify({\n\t\t\t\tmetadata: { apiKey, ideName: APP, ideVersion: WEB_CLIENT_VERSION, extensionVersion: WEB_CLIENT_VERSION },\n\t\t\t\tquery,\n\t\t\t\tlimit,\n\t\t\t}),\n\t\t},\n\t\tsignal,\n\t);\n\tconst results = ((await response.json().catch(() => undefined)) as { results?: unknown } | undefined)?.results;\n\tif (!Array.isArray(results)) throw new DevinError(\"Devin returned a malformed web search response.\");\n\treturn results.flatMap((row): WebResult[] => {\n\t\tconst { url, title, summary } = (row ?? {}) as Record<string, unknown>;\n\t\tif (typeof url !== \"string\" || !isWebUrl(url)) return [];\n\t\treturn [\n\t\t\t{\n\t\t\t\turl,\n\t\t\t\t...(typeof title === \"string\" && title.trim() ? { title: title.trim() } : {}),\n\t\t\t\t...(typeof summary === \"string\" && summary.trim() ? { summary: summary.trim() } : {}),\n\t\t\t},\n\t\t];\n\t});\n}\n\nfunction isWebUrl(value: string): boolean {\n\ttry {\n\t\tconst url = new URL(value);\n\t\treturn (url.protocol === \"https:\" || url.protocol === \"http:\") && !url.username && !url.password;\n\t} catch {\n\t\treturn false;\n\t}\n}\n"]}

package/dist/extensions/search/index.d.ts

@@ -0,0 +1,5 @@
+import type { ExtensionAPI } from "../../core/extensions/types.ts";
+import { type WebResult } from "./devin.ts";
+export declare function formatWebResults(query: string, results: WebResult[]): string;
+export default function search(pi: ExtensionAPI): void;
+//# sourceMappingURL=index.d.ts.map

package/dist/extensions/search/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/extensions/search/index.ts"],"names":[],"mappings":"AAQA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,gCAAgC,CAAC;AAKnE,OAAO,EAAkB,KAAK,SAAS,EAAa,MAAM,YAAY,CAAC;AA8CvE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,CAW5E;AAED,MAAM,CAAC,OAAO,UAAU,MAAM,CAAC,EAAE,EAAE,YAAY,GAAG,IAAI,CA2DrD"}