@bytesbrains/opencode-cruise 0.1.0

package/LICENSE

@@ -0,0 +1,15 @@
+BytesBrains Cruise for OpenCode
+© 2026 BYTESBRAINS PTE. LTD. All rights reserved.
+
+This material is provided for use with the BytesBrains Cruise service and OpenCode.
+
+You may use the recipes and examples on any machine you control to point OpenCode at Cruise.
+
+You may not present a copy of this work as your own, or redistribute a modified copy under the
+BytesBrains or Cruise name. Nothing here grants any right to the Cruise service itself, whose
+use is governed by the terms of service of BytesBrains Pte. Ltd.
+
+THE MATERIAL IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING
+BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
+NON-INFRINGEMENT. IN NO EVENT SHALL BYTESBRAINS PTE. LTD. BE LIABLE FOR ANY CLAIM, DAMAGES OR
+OTHER LIABILITY ARISING FROM OR IN CONNECTION WITH THIS MATERIAL OR ITS USE.

package/README.md

@@ -0,0 +1,189 @@
+<p align="center">
+  <img src="https://bytesbrains.com/brand/cruise-logo-480.png" alt="BytesBrains Cruise" width="280" />
+</p>
+
+<h1 align="center">BytesBrains Cruise for OpenCode</h1>
+
+<p align="center">
+  Every model your Cruise key can reach — as an OpenCode provider / plugin —<br />
+  with budgets, per-project keys, and one cost ledger that stay on the gateway.
+</p>
+
+<p align="center">
+  <a href="https://bytesbrains.com/cruise"><img src="https://img.shields.io/badge/Product-bytesbrains.com%2Fcruise-111111" alt="Product" /></a>
+  <a href="https://www.npmjs.com/package/@bytesbrains/opencode-cruise"><img src="https://img.shields.io/npm/v/@bytesbrains/opencode-cruise?label=npm" alt="npm" /></a>
+  <a href="https://opencode.ai/docs/providers/"><img src="https://img.shields.io/badge/Host-OpenCode-555" alt="OpenCode docs" /></a>
+  <a href="https://github.com/bytesbrains/cruise-opencode"><img src="https://img.shields.io/badge/Source-bytesbrains%2Fcruise--opencode-111111" alt="Source" /></a>
+</p>
+
+---
+
+## What this is
+
+[BytesBrains Cruise](https://bytesbrains.com/cruise) is one OpenAI-compatible endpoint in front of
+every model provider. This repository is the **[OpenCode](https://opencode.ai)** client: a
+published plugin (and the verified recipe behind it) so sessions route through the gateway.
+
+Your keys, budgets and ledger stay on the gateway. OpenCode only holds a `cru_` key and talks to
+the base URL you configure.
+
+| | |
+| --- | --- |
+| **Product** | [bytesbrains.com/cruise](https://bytesbrains.com/cruise) |
+| **Source** | [bytesbrains/cruise-opencode](https://github.com/bytesbrains/cruise-opencode) |
+| **Host** | [OpenCode](https://opencode.ai) — [providers](https://opencode.ai/docs/providers/), [plugins](https://opencode.ai/docs/plugins/) |
+| **Production API** | `https://cruise.bytesbrains.net/v1` |
+| **Demo API** | `https://cruise-demo.bytesbrains.net/v1` |
+
+**Status:** demo-verified; npm package `@bytesbrains/opencode-cruise` `0.1.0` — publish by
+tagging `v0.1.0` after Trusted Publisher is configured (see
+[CONTRIBUTING.md](./CONTRIBUTING.md)). Track work in
+[GitHub issues](https://github.com/bytesbrains/cruise-opencode/issues). Sister clients that
+already ship: [cruise-vscode](https://github.com/bytesbrains/cruise-vscode),
+[cruise-hermes](https://github.com/bytesbrains/cruise-hermes),
+[openclaw-cruise](https://github.com/bytesbrains/openclaw-cruise),
+[cruise-cursor-plugin](https://github.com/bytesbrains/cruise-cursor-plugin),
+[cruise-claude-plugin](https://github.com/bytesbrains/cruise-claude-plugin).
+
+---
+
+## Install
+
+Add the plugin and set a Cruise key. Once `v0.1.0` is tagged, OpenCode installs from npm via
+the `plugin` array. The plugin registers provider `cruise`
+(`npm: @ai-sdk/openai-compatible`, base URL with `/v1`) and fills models from live
+`GET /v1/models` for that key — never a frozen catalogue.
+
+```jsonc
+// opencode.json
+{
+  "$schema": "https://opencode.ai/config.json",
+  "plugin": ["@bytesbrains/opencode-cruise"],
+  // optional — prefer a lane once models are discovered:
+  // "model": "cruise/bb/agentic-coding"
+}
+```
+
+```sh
+export CRUISE_API_KEY=cru_demo_…   # or cru_live_…
+# optional — defaults to production:
+# export CRUISE_BASE_URL=https://cruise.bytesbrains.net/v1
+```
+
+Or copy [`.env.example`](./.env.example) to `.env` for local rehearsal. You can also run
+`/connect` in OpenCode and choose **Cruise API Key** (same provider id: `cruise`).
+
+Manual custom provider (no plugin) if you only need two strings + pasted model ids:
+
+```jsonc
+// manual fallback (bucket A — two strings + models you paste from GET /v1/models)
+{
+  "$schema": "https://opencode.ai/config.json",
+  "provider": {
+    "cruise": {
+      "npm": "@ai-sdk/openai-compatible",
+      "name": "BytesBrains Cruise",
+      "env": ["CRUISE_API_KEY"],
+      "options": {
+        "baseURL": "https://cruise-demo.bytesbrains.net/v1",
+        "apiKey": "{env:CRUISE_API_KEY}"
+      },
+      "models": {
+        "bb/agentic-coding": { "name": "Agentic Coding (lane)" }
+      }
+    }
+  }
+}
+```
+
+Prefer rehearsing on the demo host first.
+
+### Budget tools (Cruise MCP)
+
+The plugin registers read-only tools that call Cruise’s remote MCP with the same `cru_` key:
+
+| Tool | Answers |
+| --- | --- |
+| `cruise_list_models` | models/lanes this key can reach (optional `kind`, `modality`) |
+| `cruise_get_budget` | project budget period, caps, `action`, and wallet |
+| `cruise_get_spend` | month’s charges by model or lane |
+| `cruise_setup` | check key + probe `get_budget`; with consent, merge `mcp.cruise` into `opencode.json` |
+
+Production MCP: `https://cruise.bytesbrains.net/mcp` · Demo:
+`https://cruise-demo.bytesbrains.net/mcp`. The key stays in `CRUISE_API_KEY` (or `/connect`) —
+never in config. Optional host-managed MCP (same server) after `cruise_setup` with
+`write_config=true`:
+
+```jsonc
+"mcp": {
+  "cruise": {
+    "type": "remote",
+    "url": "https://cruise.bytesbrains.net/mcp",
+    "oauth": false,
+    "headers": { "Authorization": "Bearer {env:CRUISE_API_KEY}" }
+  }
+}
+```
+
+### Develop from this repo
+
+```sh
+npm install
+npm run typecheck
+npm run build
+npm test
+```
+
+### Demo rehearsal
+
+```sh
+cp .env.example .env   # set CRUISE_API_KEY=cru_demo_… — never commit .env
+npm run build
+npm run rehearse:demo
+```
+
+See [CONTRIBUTING.md](./CONTRIBUTING.md) for what the script checks.
+
+### Verified against demo
+
+**2026-09-19 UTC** — `@bytesbrains/opencode-cruise` `0.1.0` (built locally), env:
+
+```text
+CRUISE_API_KEY=cru_demo_…          # never committed
+CRUISE_BASE_URL=https://cruise-demo.bytesbrains.net/v1
+```
+
+| Check | Result |
+| --- | --- |
+| `npm run rehearse:demo` | passed |
+| Live catalogue | plugin projection **63** ids from `GET /v1/models`, incl. `bb/agentic-coding` |
+| Streamed chat | `POST /v1/chat/completions` SSE completed (`bb/agentic-coding` → `x-cruise-model: anthropic/claude-fable-5-1`, budget ok) |
+| Tools | tool-bearing chat request accepted (demo fabricates the body) |
+| Cruise MCP | `get_budget` + `list_models` over `/mcp` (see latest `rehearse:demo` run) |
+
+Demo holds no provider credential — answers may be fabricated; the point is the wire.
+
+### Refusals
+
+Cruise declines with `error.code` (`budget_exhausted`, `wallet_exhausted`,
+`measurement_stale`, …). Branch on that code — not HTTP status alone. The plugin logs
+known refusal codes on `session.error` when the body is present.
+---
+
+## Conventions
+
+- **Key in the environment** (`CRUISE_API_KEY`), never in a committed `opencode.json`.
+- **Model ids are Cruise ids** from `GET /v1/models` for the presented key — lanes (`bb/…`)
+  preferred over pinned upstream ids.
+- **No traffic anywhere but the configured Cruise base URL.** No telemetry, no second host.
+- **Branch refusals on `error.code`**, not HTTP status alone (`budget_exhausted`,
+  `wallet_exhausted`, `measurement_stale`, …).
+- **Rehearse on the demo** (`cruise-demo.bytesbrains.net` + `cru_demo_` key) before production.
+
+See [AGENT.md](./AGENT.md) for agent working notes and [SECURITY.md](./SECURITY.md) for disclosure.
+
+---
+
+## License
+
+© 2026 BYTESBRAINS PTE. LTD. See [LICENSE](./LICENSE).

package/dist/auth.d.ts

@@ -0,0 +1,7 @@
+import type { AuthHook } from "@opencode-ai/plugin";
+/**
+ * `/connect` entry for Cruise — stores a `cru_` key in OpenCode's auth store.
+ * Recipes should still prefer `CRUISE_API_KEY` in the environment.
+ */
+export declare const cruiseAuthHook: AuthHook;
+//# sourceMappingURL=auth.d.ts.map

package/dist/auth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.d.ts","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,qBAAqB,CAAC;AAGpD;;;GAGG;AACH,eAAO,MAAM,cAAc,EAAE,QAqC5B,CAAC"}

package/dist/auth.js

@@ -0,0 +1,44 @@
+import { PROVIDER_ID } from "./constants.js";
+/**
+ * `/connect` entry for Cruise — stores a `cru_` key in OpenCode's auth store.
+ * Recipes should still prefer `CRUISE_API_KEY` in the environment.
+ */
+export const cruiseAuthHook = {
+    provider: PROVIDER_ID,
+    methods: [
+        {
+            type: "api",
+            label: "Cruise API Key",
+            prompts: [
+                {
+                    type: "text",
+                    key: "apiKey",
+                    message: "Enter your BytesBrains Cruise API key",
+                    placeholder: "cru_demo_… or cru_live_…",
+                    validate: (value) => {
+                        const trimmed = value.trim();
+                        if (!trimmed.startsWith("cru_")) {
+                            return "Expected a Cruise key starting with cru_";
+                        }
+                        return undefined;
+                    },
+                },
+            ],
+            async authorize(inputs) {
+                const key = inputs?.apiKey?.trim();
+                if (!key?.startsWith("cru_")) {
+                    return { type: "failed" };
+                }
+                return { type: "success", key, provider: PROVIDER_ID };
+            },
+        },
+    ],
+    async loader(getAuth) {
+        const auth = await getAuth();
+        if (auth.type === "api" && typeof auth.key === "string" && auth.key) {
+            return { apiKey: auth.key };
+        }
+        return {};
+    },
+};
+//# sourceMappingURL=auth.js.map

package/dist/auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"auth.js","sourceRoot":"","sources":["../src/auth.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;GAGG;AACH,MAAM,CAAC,MAAM,cAAc,GAAa;IACtC,QAAQ,EAAE,WAAW;IACrB,OAAO,EAAE;QACP;YACE,IAAI,EAAE,KAAK;YACX,KAAK,EAAE,gBAAgB;YACvB,OAAO,EAAE;gBACP;oBACE,IAAI,EAAE,MAAM;oBACZ,GAAG,EAAE,QAAQ;oBACb,OAAO,EAAE,uCAAuC;oBAChD,WAAW,EAAE,0BAA0B;oBACvC,QAAQ,EAAE,CAAC,KAAK,EAAE,EAAE;wBAClB,MAAM,OAAO,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;wBAC7B,IAAI,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;4BAChC,OAAO,0CAA0C,CAAC;wBACpD,CAAC;wBACD,OAAO,SAAS,CAAC;oBACnB,CAAC;iBACF;aACF;YACD,KAAK,CAAC,SAAS,CAAC,MAAM;gBACpB,MAAM,GAAG,GAAG,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;gBACnC,IAAI,CAAC,GAAG,EAAE,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;oBAC7B,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;gBAC5B,CAAC;gBACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,CAAC;YACzD,CAAC;SACF;KACF;IACD,KAAK,CAAC,MAAM,CAAC,OAAO;QAClB,MAAM,IAAI,GAAG,MAAM,OAAO,EAAE,CAAC;QAC7B,IAAI,IAAI,CAAC,IAAI,KAAK,KAAK,IAAI,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,IAAI,IAAI,CAAC,GAAG,EAAE,CAAC;YACpE,OAAO,EAAE,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9B,CAAC;QACD,OAAO,EAAE,CAAC;IACZ,CAAC;CACF,CAAC"}

package/dist/base-url.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Only the documented production and demo Cruise HTTPS hosts.
+ * Rejects other hosts (including other `*.bytesbrains.net` names) so a
+ * tampered config cannot SSRF with the presented key.
+ * Invalid or disallowed values fall back to production.
+ */
+export declare function resolveAllowedCruiseBaseUrl(baseUrl?: string): string;
+//# sourceMappingURL=base-url.d.ts.map

package/dist/base-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-url.d.ts","sourceRoot":"","sources":["../src/base-url.ts"],"names":[],"mappings":"AAQA;;;;;GAKG;AACH,wBAAgB,2BAA2B,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAepE"}

package/dist/base-url.js

@@ -0,0 +1,30 @@
+import { CRUISE_BASE_URL, CRUISE_DEMO_BASE_URL } from "./constants.js";
+/** Hosts the plugin will send traffic to (SSRF-safe explicit allowlist). */
+const ALLOWED_HOSTS = new Set([
+    new URL(CRUISE_BASE_URL).hostname,
+    new URL(CRUISE_DEMO_BASE_URL).hostname,
+]);
+/**
+ * Only the documented production and demo Cruise HTTPS hosts.
+ * Rejects other hosts (including other `*.bytesbrains.net` names) so a
+ * tampered config cannot SSRF with the presented key.
+ * Invalid or disallowed values fall back to production.
+ */
+export function resolveAllowedCruiseBaseUrl(baseUrl) {
+    const candidate = (baseUrl ?? "").trim() || CRUISE_BASE_URL;
+    try {
+        const url = new URL(candidate);
+        if (url.protocol !== "https:") {
+            return CRUISE_BASE_URL;
+        }
+        const host = url.hostname.toLowerCase();
+        if (!ALLOWED_HOSTS.has(host)) {
+            return CRUISE_BASE_URL;
+        }
+        return candidate.replace(/\/+$/, "");
+    }
+    catch {
+        return CRUISE_BASE_URL;
+    }
+}
+//# sourceMappingURL=base-url.js.map

package/dist/base-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"base-url.js","sourceRoot":"","sources":["../src/base-url.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,oBAAoB,EAAE,MAAM,gBAAgB,CAAC;AAEvE,4EAA4E;AAC5E,MAAM,aAAa,GAAG,IAAI,GAAG,CAAC;IAC5B,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC,QAAQ;IACjC,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,QAAQ;CACvC,CAAC,CAAC;AAEH;;;;;GAKG;AACH,MAAM,UAAU,2BAA2B,CAAC,OAAgB;IAC1D,MAAM,SAAS,GAAG,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,eAAe,CAAC;IAC5D,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,SAAS,CAAC,CAAC;QAC/B,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;YAC9B,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,MAAM,IAAI,GAAG,GAAG,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;YAC7B,OAAO,eAAe,CAAC;QACzB,CAAC;QACD,OAAO,SAAS,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;IACvC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,eAAe,CAAC;IACzB,CAAC;AACH,CAAC"}

package/dist/constants.d.ts

@@ -0,0 +1,20 @@
+/** Public Cruise endpoints, env names, and OpenCode provider id. */
+/** OpenCode provider id (`opencode.json` / `/connect`). */
+export declare const PROVIDER_ID = "cruise";
+/** Stable plugin id for diagnostics. */
+export declare const PLUGIN_ID = "bytesbrains-cruise";
+/** Production Cruise OpenAI-compatible base URL (includes `/v1`). */
+export declare const CRUISE_BASE_URL = "https://cruise.bytesbrains.net/v1";
+/** Demo Cruise base URL for rehearsal with `cru_demo_` keys. */
+export declare const CRUISE_DEMO_BASE_URL = "https://cruise-demo.bytesbrains.net/v1";
+/** Environment variable for the Cruise API key. */
+export declare const CRUISE_API_KEY_ENV = "CRUISE_API_KEY";
+/** Optional override for the Cruise base URL. */
+export declare const CRUISE_BASE_URL_ENV = "CRUISE_BASE_URL";
+/** Default model id recommended in docs (a lane, not a pinned upstream id). */
+export declare const CRUISE_DEFAULT_MODEL_ID = "bb/agentic-coding";
+/** npm package OpenCode uses for `/v1/chat/completions`. */
+export declare const OPENAI_COMPATIBLE_NPM = "@ai-sdk/openai-compatible";
+/** How long to wait for `GET /v1/models` during plugin config. */
+export declare const MODELS_FETCH_TIMEOUT_MS = 10000;
+//# sourceMappingURL=constants.d.ts.map

package/dist/constants.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.d.ts","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,2DAA2D;AAC3D,eAAO,MAAM,WAAW,WAAW,CAAC;AAEpC,wCAAwC;AACxC,eAAO,MAAM,SAAS,uBAAuB,CAAC;AAE9C,qEAAqE;AACrE,eAAO,MAAM,eAAe,sCAAsC,CAAC;AAEnE,gEAAgE;AAChE,eAAO,MAAM,oBAAoB,2CAA2C,CAAC;AAE7E,mDAAmD;AACnD,eAAO,MAAM,kBAAkB,mBAAmB,CAAC;AAEnD,iDAAiD;AACjD,eAAO,MAAM,mBAAmB,oBAAoB,CAAC;AAErD,+EAA+E;AAC/E,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAE3D,4DAA4D;AAC5D,eAAO,MAAM,qBAAqB,8BAA8B,CAAC;AAEjE,kEAAkE;AAClE,eAAO,MAAM,uBAAuB,QAAS,CAAC"}

package/dist/constants.js

@@ -0,0 +1,20 @@
+/** Public Cruise endpoints, env names, and OpenCode provider id. */
+/** OpenCode provider id (`opencode.json` / `/connect`). */
+export const PROVIDER_ID = "cruise";
+/** Stable plugin id for diagnostics. */
+export const PLUGIN_ID = "bytesbrains-cruise";
+/** Production Cruise OpenAI-compatible base URL (includes `/v1`). */
+export const CRUISE_BASE_URL = "https://cruise.bytesbrains.net/v1";
+/** Demo Cruise base URL for rehearsal with `cru_demo_` keys. */
+export const CRUISE_DEMO_BASE_URL = "https://cruise-demo.bytesbrains.net/v1";
+/** Environment variable for the Cruise API key. */
+export const CRUISE_API_KEY_ENV = "CRUISE_API_KEY";
+/** Optional override for the Cruise base URL. */
+export const CRUISE_BASE_URL_ENV = "CRUISE_BASE_URL";
+/** Default model id recommended in docs (a lane, not a pinned upstream id). */
+export const CRUISE_DEFAULT_MODEL_ID = "bb/agentic-coding";
+/** npm package OpenCode uses for `/v1/chat/completions`. */
+export const OPENAI_COMPATIBLE_NPM = "@ai-sdk/openai-compatible";
+/** How long to wait for `GET /v1/models` during plugin config. */
+export const MODELS_FETCH_TIMEOUT_MS = 10_000;
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA,oEAAoE;AAEpE,2DAA2D;AAC3D,MAAM,CAAC,MAAM,WAAW,GAAG,QAAQ,CAAC;AAEpC,wCAAwC;AACxC,MAAM,CAAC,MAAM,SAAS,GAAG,oBAAoB,CAAC;AAE9C,qEAAqE;AACrE,MAAM,CAAC,MAAM,eAAe,GAAG,mCAAmC,CAAC;AAEnE,gEAAgE;AAChE,MAAM,CAAC,MAAM,oBAAoB,GAAG,wCAAwC,CAAC;AAE7E,mDAAmD;AACnD,MAAM,CAAC,MAAM,kBAAkB,GAAG,gBAAgB,CAAC;AAEnD,iDAAiD;AACjD,MAAM,CAAC,MAAM,mBAAmB,GAAG,iBAAiB,CAAC;AAErD,+EAA+E;AAC/E,MAAM,CAAC,MAAM,uBAAuB,GAAG,mBAAmB,CAAC;AAE3D,4DAA4D;AAC5D,MAAM,CAAC,MAAM,qBAAqB,GAAG,2BAA2B,CAAC;AAEjE,kEAAkE;AAClE,MAAM,CAAC,MAAM,uBAAuB,GAAG,MAAM,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Cruise refusal helpers — branch on `error.code`, not HTTP status alone.
+ */
+/** Known Cruise gateway refusal codes (public product behaviour). */
+export declare const CRUISE_REFUSAL_CODES: readonly ["budget_exhausted", "wallet_exhausted", "measurement_stale", "model_not_found", "permission_error"];
+export type CruiseRefusalCode = (typeof CRUISE_REFUSAL_CODES)[number];
+/**
+ * Reads `error.code` from a Cruise-shaped error payload (nested under `error`
+ * or at the top level). Returns undefined when absent or not a string.
+ */
+export declare function readCruiseErrorCode(payload: unknown): string | undefined;
+/** True when the payload carries a known Cruise refusal `error.code`. */
+export declare function isCruiseRefusal(payload: unknown): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,qEAAqE;AACrE,eAAO,MAAM,oBAAoB,+GAMvB,CAAC;AAEX,MAAM,MAAM,iBAAiB,GAAG,CAAC,OAAO,oBAAoB,CAAC,CAAC,MAAM,CAAC,CAAC;AAItE;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAWxE;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAGzD"}

package/dist/errors.js

@@ -0,0 +1,33 @@
+/**
+ * Cruise refusal helpers — branch on `error.code`, not HTTP status alone.
+ */
+/** Known Cruise gateway refusal codes (public product behaviour). */
+export const CRUISE_REFUSAL_CODES = [
+    "budget_exhausted",
+    "wallet_exhausted",
+    "measurement_stale",
+    "model_not_found",
+    "permission_error",
+];
+const REFUSAL_SET = new Set(CRUISE_REFUSAL_CODES);
+/**
+ * Reads `error.code` from a Cruise-shaped error payload (nested under `error`
+ * or at the top level). Returns undefined when absent or not a string.
+ */
+export function readCruiseErrorCode(payload) {
+    if (!payload || typeof payload !== "object" || Array.isArray(payload)) {
+        return undefined;
+    }
+    const root = payload;
+    const nested = root.error && typeof root.error === "object" && !Array.isArray(root.error)
+        ? root.error
+        : undefined;
+    const code = nested?.code ?? root.code;
+    return typeof code === "string" && code.trim() ? code.trim() : undefined;
+}
+/** True when the payload carries a known Cruise refusal `error.code`. */
+export function isCruiseRefusal(payload) {
+    const code = readCruiseErrorCode(payload);
+    return code !== undefined && REFUSAL_SET.has(code);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,qEAAqE;AACrE,MAAM,CAAC,MAAM,oBAAoB,GAAG;IAClC,kBAAkB;IAClB,kBAAkB;IAClB,mBAAmB;IACnB,iBAAiB;IACjB,kBAAkB;CACV,CAAC;AAIX,MAAM,WAAW,GAAG,IAAI,GAAG,CAAS,oBAAoB,CAAC,CAAC;AAE1D;;;GAGG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAgB;IAClD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC;QACtE,OAAO,SAAS,CAAC;IACnB,CAAC;IACD,MAAM,IAAI,GAAG,OAAkC,CAAC;IAChD,MAAM,MAAM,GACV,IAAI,CAAC,KAAK,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC;QACxE,CAAC,CAAE,IAAI,CAAC,KAAiC;QACzC,CAAC,CAAC,SAAS,CAAC;IAChB,MAAM,IAAI,GAAG,MAAM,EAAE,IAAI,IAAI,IAAI,CAAC,IAAI,CAAC;IACvC,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,yEAAyE;AACzE,MAAM,UAAU,eAAe,CAAC,OAAgB;IAC9C,MAAM,IAAI,GAAG,mBAAmB,CAAC,OAAO,CAAC,CAAC;IAC1C,OAAO,IAAI,KAAK,SAAS,IAAI,WAAW,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACrD,CAAC"}

package/dist/fetch-models.d.ts

@@ -0,0 +1,23 @@
+import { type OpenCodeModelConfig } from "./models.js";
+export type FetchCruiseModelsOptions = {
+    baseUrl: string;
+    apiKey: string;
+    /** Injectable for tests. Defaults to global `fetch`. */
+    fetchImpl?: typeof fetch;
+    timeoutMs?: number;
+};
+export type FetchCruiseModelsResult = {
+    ok: true;
+    models: Record<string, OpenCodeModelConfig>;
+} | {
+    ok: false;
+    reason: string;
+    code?: string;
+    status?: number;
+};
+/**
+ * `GET {baseUrl}/models` with the presented Cruise key.
+ * `baseUrl` must already include `/v1` (production/demo defaults do).
+ */
+export declare function fetchCruiseModels(options: FetchCruiseModelsOptions): Promise<FetchCruiseModelsResult>;
+//# sourceMappingURL=fetch-models.d.ts.map

package/dist/fetch-models.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-models.d.ts","sourceRoot":"","sources":["../src/fetch-models.ts"],"names":[],"mappings":"AACA,OAAO,EAA2B,KAAK,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAGhF,MAAM,MAAM,wBAAwB,GAAG;IACrC,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,CAAC;IACf,wDAAwD;IACxD,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,CAAC;AAEF,MAAM,MAAM,uBAAuB,GAC/B;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;CAAE,GACzD;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC;AAElE;;;GAGG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAAC,uBAAuB,CAAC,CAwDlC"}

package/dist/fetch-models.js

@@ -0,0 +1,61 @@
+import { MODELS_FETCH_TIMEOUT_MS } from "./constants.js";
+import { projectCruiseLiveModels } from "./models.js";
+import { readCruiseErrorCode } from "./errors.js";
+/**
+ * `GET {baseUrl}/models` with the presented Cruise key.
+ * `baseUrl` must already include `/v1` (production/demo defaults do).
+ */
+export async function fetchCruiseModels(options) {
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const timeoutMs = options.timeoutMs ?? MODELS_FETCH_TIMEOUT_MS;
+    const url = `${options.baseUrl.replace(/\/+$/, "")}/models`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetchImpl(url, {
+            method: "GET",
+            headers: {
+                Authorization: `Bearer ${options.apiKey}`,
+                Accept: "application/json",
+            },
+            signal: controller.signal,
+        });
+        let body;
+        try {
+            body = await response.json();
+        }
+        catch {
+            body = undefined;
+        }
+        if (!response.ok) {
+            const code = readCruiseErrorCode(body);
+            return {
+                ok: false,
+                reason: code
+                    ? `Cruise refused models list (${code})`
+                    : `Cruise models list failed with HTTP ${response.status}`,
+                code,
+                status: response.status,
+            };
+        }
+        const data = body && typeof body === "object" && !Array.isArray(body)
+            ? body.data
+            : undefined;
+        if (!Array.isArray(data)) {
+            return { ok: false, reason: "Cruise models response missing data array", status: response.status };
+        }
+        return { ok: true, models: projectCruiseLiveModels(data) };
+    }
+    catch (error) {
+        const message = error instanceof Error
+            ? error.name === "AbortError"
+                ? `Cruise models list timed out after ${timeoutMs}ms`
+                : error.message
+            : String(error);
+        return { ok: false, reason: message };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=fetch-models.js.map

package/dist/fetch-models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"fetch-models.js","sourceRoot":"","sources":["../src/fetch-models.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,uBAAuB,EAAE,MAAM,gBAAgB,CAAC;AACzD,OAAO,EAAE,uBAAuB,EAA4B,MAAM,aAAa,CAAC;AAChF,OAAO,EAAE,mBAAmB,EAAE,MAAM,aAAa,CAAC;AAclD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CACrC,OAAiC;IAEjC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,uBAAuB,CAAC;IAC/D,MAAM,GAAG,GAAG,GAAG,OAAO,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC;IAE5D,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE;YACpC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,OAAO,CAAC,MAAM,EAAE;gBACzC,MAAM,EAAE,kBAAkB;aAC3B;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QAEH,IAAI,IAAa,CAAC;QAClB,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;QAC/B,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,GAAG,SAAS,CAAC;QACnB,CAAC;QAED,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;YACjB,MAAM,IAAI,GAAG,mBAAmB,CAAC,IAAI,CAAC,CAAC;YACvC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,MAAM,EAAE,IAAI;oBACV,CAAC,CAAC,+BAA+B,IAAI,GAAG;oBACxC,CAAC,CAAC,uCAAuC,QAAQ,CAAC,MAAM,EAAE;gBAC5D,IAAI;gBACJ,MAAM,EAAE,QAAQ,CAAC,MAAM;aACxB,CAAC;QACJ,CAAC;QAED,MAAM,IAAI,GACR,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YACtD,CAAC,CAAE,IAA2B,CAAC,IAAI;YACnC,CAAC,CAAC,SAAS,CAAC;QAChB,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YACzB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2CAA2C,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QACrG,CAAC;QAED,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,uBAAuB,CAAC,IAAI,CAAC,EAAE,CAAC;IAC7D,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,MAAM,OAAO,GACX,KAAK,YAAY,KAAK;YACpB,CAAC,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY;gBAC3B,CAAC,CAAC,sCAAsC,SAAS,IAAI;gBACrD,CAAC,CAAC,KAAK,CAAC,OAAO;YACjB,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACpB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC;IACxC,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,22 @@
+/**
+ * BytesBrains Cruise — OpenCode plugin entry.
+ *
+ * Registers Cruise as an OpenAI-compatible provider (`@ai-sdk/openai-compatible`)
+ * and fills models from live `GET /v1/models` when a Cruise key is available
+ * (env or OpenCode `/connect` auth store).
+ */
+import type { Plugin } from "@opencode-ai/plugin";
+export { PLUGIN_ID, PROVIDER_ID, CRUISE_BASE_URL, CRUISE_DEMO_BASE_URL, CRUISE_API_KEY_ENV, CRUISE_BASE_URL_ENV, CRUISE_DEFAULT_MODEL_ID, OPENAI_COMPATIBLE_NPM, } from "./constants.js";
+export { resolveAllowedCruiseBaseUrl } from "./base-url.js";
+export { microsToDollarsPerMtok, projectCruiseLiveModels, type OpenCodeModelConfig, } from "./models.js";
+export { fetchCruiseModels } from "./fetch-models.js";
+export { applyCruiseProvider } from "./provider.js";
+export { resolveCruiseApiKey } from "./resolve-api-key.js";
+export { CRUISE_REFUSAL_CODES, isCruiseRefusal, readCruiseErrorCode, type CruiseRefusalCode, } from "./errors.js";
+export { cruiseAuthHook } from "./auth.js";
+export { resolveCruiseMcpUrl } from "./mcp-url.js";
+export { callCruiseMcpTool } from "./mcp-client.js";
+export { applyCruiseMcp, cruiseTools, createCruiseTools } from "./tools.js";
+export declare const CruisePlugin: Plugin;
+export default CruisePlugin;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,OAAO,KAAK,EAAU,MAAM,EAAe,MAAM,qBAAqB,CAAC;AAQvE,OAAO,EACL,SAAS,EACT,WAAW,EACX,eAAe,EACf,oBAAoB,EACpB,kBAAkB,EAClB,mBAAmB,EACnB,uBAAuB,EACvB,qBAAqB,GACtB,MAAM,gBAAgB,CAAC;AACxB,OAAO,EAAE,2BAA2B,EAAE,MAAM,eAAe,CAAC;AAC5D,OAAO,EACL,sBAAsB,EACtB,uBAAuB,EACvB,KAAK,mBAAmB,GACzB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,iBAAiB,EAAE,MAAM,mBAAmB,CAAC;AACtD,OAAO,EAAE,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,mBAAmB,EAAE,MAAM,sBAAsB,CAAC;AAC3D,OAAO,EACL,oBAAoB,EACpB,eAAe,EACf,mBAAmB,EACnB,KAAK,iBAAiB,GACvB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AAC3C,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACnD,OAAO,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAmF5E,eAAO,MAAM,YAAY,EAAE,MAW1B,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/index.js

@@ -0,0 +1,103 @@
+import { cruiseAuthHook } from "./auth.js";
+import { applyCruiseProvider } from "./provider.js";
+import { isCruiseRefusal, readCruiseErrorCode } from "./errors.js";
+import { resolveCruiseApiKey } from "./resolve-api-key.js";
+import { PROVIDER_ID } from "./constants.js";
+import { cruiseTools } from "./tools.js";
+export { PLUGIN_ID, PROVIDER_ID, CRUISE_BASE_URL, CRUISE_DEMO_BASE_URL, CRUISE_API_KEY_ENV, CRUISE_BASE_URL_ENV, CRUISE_DEFAULT_MODEL_ID, OPENAI_COMPATIBLE_NPM, } from "./constants.js";
+export { resolveAllowedCruiseBaseUrl } from "./base-url.js";
+export { microsToDollarsPerMtok, projectCruiseLiveModels, } from "./models.js";
+export { fetchCruiseModels } from "./fetch-models.js";
+export { applyCruiseProvider } from "./provider.js";
+export { resolveCruiseApiKey } from "./resolve-api-key.js";
+export { CRUISE_REFUSAL_CODES, isCruiseRefusal, readCruiseErrorCode, } from "./errors.js";
+export { cruiseAuthHook } from "./auth.js";
+export { resolveCruiseMcpUrl } from "./mcp-url.js";
+export { callCruiseMcpTool } from "./mcp-client.js";
+export { applyCruiseMcp, cruiseTools, createCruiseTools } from "./tools.js";
+async function resolveStateDir(client) {
+    try {
+        const result = await client.path.get();
+        const data = "data" in result ? result.data : undefined;
+        if (data && typeof data === "object" && "state" in data) {
+            const state = data.state;
+            return typeof state === "string" && state.trim() ? state.trim() : undefined;
+        }
+    }
+    catch {
+        return undefined;
+    }
+    return undefined;
+}
+async function logWarn(client, message) {
+    await client.app
+        .log({
+        body: {
+            service: PROVIDER_ID,
+            level: "warn",
+            message,
+        },
+    })
+        .catch(() => {
+        /* logging is best-effort during config */
+    });
+}
+function cruisePayloadFromSessionError(raw) {
+    if (!raw || typeof raw !== "object" || !("data" in raw)) {
+        return raw;
+    }
+    const data = raw.data;
+    if (typeof data?.responseBody !== "string") {
+        return raw;
+    }
+    try {
+        return JSON.parse(data.responseBody);
+    }
+    catch {
+        return data.responseBody;
+    }
+}
+async function handleConfigHook(client, config) {
+    const stateDir = await resolveStateDir(client);
+    const apiKey = await resolveCruiseApiKey({ stateDir });
+    const result = await applyCruiseProvider(config, { apiKey });
+    if (result.fetchError) {
+        await logWarn(client, result.fetchError);
+    }
+}
+async function handleSessionError(client, event) {
+    if (event.type !== "session.error") {
+        return;
+    }
+    const payload = cruisePayloadFromSessionError(event.properties?.error);
+    if (!isCruiseRefusal(payload)) {
+        return;
+    }
+    const code = readCruiseErrorCode(payload);
+    await client.app
+        .log({
+        body: {
+            service: PROVIDER_ID,
+            level: "error",
+            message: `Cruise refused the request (${code}) — branch on error.code, not HTTP status alone`,
+            extra: { code },
+        },
+    })
+        .catch(() => {
+        /* best-effort */
+    });
+}
+export const CruisePlugin = async ({ client }) => {
+    return {
+        auth: cruiseAuthHook,
+        tool: cruiseTools,
+        config: async (config) => {
+            await handleConfigHook(client, config);
+        },
+        event: async ({ event }) => {
+            await handleSessionError(client, event);
+        },
+    };
+};
+export default CruisePlugin;
+//# sourceMappingURL=index.js.map