@fudrouter/fsrouter 0.6.77 → 0.6.79

package/bin/rewriteSseImports.js

@@ -19,23 +19,23 @@ function rewrite(file) {
   const prefix = "../".repeat(depth) + "dist/";
 
   content = content
-    .replace(/from\s+['\"]@\/lib\/([^'"]+)['"]/g, (m, imp) => {
+    .replace(/from\s+['"]@\/lib\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
       return `from '${prefix}lib/${resolved}'`;
     })
-    .replace(/from\s+['\"]@\/shared\/([^'"]+)['"]/g, (m, imp) => {
+    .replace(/from\s+['"]@\/shared\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
       return `from '${prefix}shared/${resolved}'`;
     })
-    .replace(/from\s+['\"]@\/store\/([^'"]+)['"]/g, (m, imp) => {
+    .replace(/from\s+['"]@\/store\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
       return `from '${prefix}store/${resolved}'`;
     })
-    .replace(/from\s+['\"]@\/utils\/([^'"]+)['"]/g, (m, imp) => {
+    .replace(/from\s+['"]@\/utils\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
       return `from '${prefix}utils/${resolved}'`;
     })
-    .replace(/from\s+['\"]@\/services\/([^'"]+)['"]/g, (m, imp) => {
+    .replace(/from\s+['"]@\/services\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
       return `from '${prefix}services/${resolved}'`;
     })
@@ -47,25 +47,23 @@ function rewrite(file) {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
       return `import('${prefix}lib/${resolved}')`;
     })
-    // Fix relative imports pointing to ../../../src/lib → ../../dist/lib
-    // For open-sse/services/*.js (depth=2): ../../../src/lib/ = open-sse/src/lib/ (wrong)
-    //   correct: ../../dist/lib/
+    // Fix relative imports pointing to ../../../src/lib → dist/lib (depth-aware)
     .replace(/['"]\.\.\/\.\.\/\.\.\/src\/lib\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
-      return `'../../dist/lib/${resolved}'`;
+      return `'${prefix}lib/${resolved}'`;
     })
     .replace(/import\(\s*['"]\.\.\/\.\.\/\.\.\/src\/lib\/([^'"]+)['"]\s*\)/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
-      return `import('../../dist/lib/${resolved}')`;
+      return `import('${prefix}lib/${resolved}')`;
     })
-    // Also catch any existing ../../../dist/lib (wrong, should be ../../dist/lib for depth=2)
-    .replace(/['"]\.\.\/\.\.\/\.\.\/dist\/lib\/([^'"]+)['"]/g, (m, imp) => {
+    // Normalize any ../-chain pointing at dist/lib to the depth-correct prefix
+    .replace(/['"](?:\.\.\/)+dist\/lib\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
-      return `'../../dist/lib/${resolved}'`;
+      return `'${prefix}lib/${resolved}'`;
     })
-    .replace(/import\(\s*['"]\.\.\/\.\.\/\.\.\/dist\/lib\/([^'"]+)['"]\s*\)/g, (m, imp) => {
+    .replace(/import\(\s*['"](?:\.\.\/)+dist\/lib\/([^'"]+)['"]\s*\)/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";
-      return `import('../../dist/lib/${resolved}')`;
+      return `import('${prefix}lib/${resolved}')`;
     })
     .replace(/['"]\.\.\/\.\.\/src\/shared\/([^'"]+)['"]/g, (m, imp) => {
       const resolved = imp.endsWith(".js") ? imp : imp + ".js";

package/dist/lib/oauth/constants/oauth.js

@@ -118,6 +118,8 @@ export const KIMCHI_CONFIG = { ...PROVIDER_OAUTH["kimchi"] };
 // Endpoint: cli-chat-proxy.grok.com — same client_id as xai, different flow + scopes
 export const GROK_CLI_CONFIG = { ...PROVIDER_OAUTH["grok-cli"] };
 
+export const NOUS_CONFIG = { ...PROVIDER_OAUTH["nous-research"] };
+
 // OAuth timeout (5 minutes)
 export const OAUTH_TIMEOUT = 300000;
 

package/dist/lib/oauth/providers.js

@@ -28,6 +28,7 @@ import {
   CODEBUDDY_CONFIG,
   KIMCHI_CONFIG,
   GROK_CLI_CONFIG,
+  NOUS_CONFIG,
   getOAuthClientMetadata,
 } from "./constants/oauth.js";
 import { XAI_CONFIG, XAI_PKCE_VERIFIER_BYTES } from "./constants/xai.js";
@@ -372,6 +373,77 @@ const PROVIDERS = {
     },
   },
 
+  // Nous Research (Nous Portal) — OAuth device code flow.
+  // Portal has no manual API-key page; auth is device-code only (client_id hermes-cli).
+  "nous-research": {
+    config: NOUS_CONFIG,
+    flowType: "device_code",
+    requestDeviceCode: async (config) => {
+      const body = new URLSearchParams({ client_id: config.clientId });
+      if (config.scope) body.set("scope", config.scope);
+      const response = await fetch(config.deviceCodeUrl, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded",
+          Accept: "application/json",
+        },
+        body,
+      });
+      if (!response.ok) {
+        const error = await response.text();
+        throw new Error(`Nous device code request failed: ${error}`);
+      }
+      return await response.json();
+    },
+    pollToken: async (config, deviceCode) => {
+      const response = await fetch(config.tokenUrl, {
+        method: "POST",
+        headers: {
+          "Content-Type": "application/x-www-form-urlencoded",
+          Accept: "application/json",
+        },
+        body: new URLSearchParams({
+          grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+          device_code: deviceCode,
+          client_id: config.clientId,
+        }),
+      });
+      let data;
+      try {
+        data = await response.json();
+      } catch {
+        const text = await response.text();
+        data = { error: "invalid_response", error_description: text };
+      }
+      const pending =
+        data?.error === "authorization_pending" || data?.error === "slow_down";
+      return { ok: response.ok || pending, data };
+    },
+    mapTokens: (tokens) => {
+      let email = null;
+      try {
+        const parts = String(tokens.access_token || "").split(".");
+        if (parts.length >= 2) {
+          const b64 = parts[1].replace(/-/g, "+").replace(/_/g, "/");
+          const padded = b64 + "=".repeat((4 - (b64.length % 4)) % 4);
+          const claims = JSON.parse(Buffer.from(padded, "base64").toString("utf8"));
+          email = claims.email || claims.sub || null;
+        }
+      } catch { /* ignore */ }
+      return {
+        accessToken: tokens.access_token,
+        refreshToken: tokens.refresh_token || null,
+        expiresIn: tokens.expires_in,
+        scope: tokens.scope,
+        email: email || undefined,
+        providerSpecificData: {
+          authMethod: "device_code",
+          email: email || null,
+        },
+      };
+    },
+  },
+
   "gemini-cli": {
     config: GEMINI_CONFIG,
     flowType: "authorization_code",

package/dist/open-sse/handlers/chatCore/nonStreamingHandler.js

@@ -7,7 +7,7 @@ import { createErrorResult } from "../../utils/error.js";
 import { HTTP_STATUS } from "../../config/runtimeConfig.js";
 import { parseSSEToOpenAIResponse } from "./sseToJsonHandler.js";
 import { buildRequestDetail, extractRequestConfig, extractUsageFromResponse, saveUsageStats, formatDoneLine } from "./requestDetail.js";
-import { appendRequestLog, saveRequestDetail } from '../../../dist/lib/usageDb.js';
+import { appendRequestLog, saveRequestDetail } from '../../../../dist/lib/usageDb.js';
 import { decloakToolNames } from "../../utils/claudeCloaking.js";
 
 function parseToolArguments(value) {

package/dist/open-sse/handlers/chatCore/requestDetail.js

@@ -1,4 +1,4 @@
-import { saveRequestUsage, appendRequestLog, saveRequestDetail } from '../../../dist/lib/usageDb.js';
+import { saveRequestUsage, appendRequestLog, saveRequestDetail } from '../../../../dist/lib/usageDb.js';
 import { COLORS } from "../../utils/stream.js";
 import { canonicalizeUsage } from "../../utils/usageTracking.js";
 

package/dist/open-sse/handlers/chatCore/sseToJsonHandler.js

@@ -7,7 +7,7 @@ import { buildRequestDetail, extractRequestConfig, saveUsageStats, formatDoneLin
 
 // Responses-API providers (e.g. codex) may emit SSE without content-type + use Responses output shape
 const isResponsesProvider = (p) => PROVIDERS[p]?.format === FORMATS.OPENAI_RESPONSES;
-import { saveRequestDetail, appendRequestLog } from '../../../dist/lib/usageDb.js';
+import { saveRequestDetail, appendRequestLog } from '../../../../dist/lib/usageDb.js';
 
 function textFromResponsesMessageItem(item) {
   if (!item?.content || !Array.isArray(item.content)) return "";

package/dist/open-sse/handlers/chatCore/streamingHandler.js

@@ -6,7 +6,7 @@ import { PROVIDERS } from "../../config/providers.js";
 import { STREAM_STALL_TIMEOUT_MS } from "../../config/runtimeConfig.js";
 import { buildAbortedResponsesTerminalBytes } from "../../utils/responsesStreamHelpers.js";
 import { buildRequestDetail, extractRequestConfig, saveUsageStats, formatDoneLine } from "./requestDetail.js";
-import { saveRequestDetail } from '../../../dist/lib/usageDb.js';
+import { saveRequestDetail } from '../../../../dist/lib/usageDb.js';
 import { SSE_HEADERS_CORS as SSE_HEADERS } from "../../utils/sseConstants.js";
 
 // Codex returns Responses API SSE → which client format to translate INTO, by request sourceFormat.

package/dist/open-sse/handlers/imageProviders/leonardo.js

@@ -34,7 +34,7 @@ import { randomBytes } from "crypto";
 // Falls back to empty object if DB not available (e.g., first boot).
 async function getLeonardoAdminConfig() {
   try {
-    const { getAdapter } = await import('../../../dist/lib/db/driver.js');
+    const { getAdapter } = await import('../../../../dist/lib/db/driver.js');
     const db = await getAdapter();
     const row = db.get(`SELECT value FROM kv WHERE scope = 'leonardo' AND key = 'admin_config'`);
     if (!row?.value) return null;

package/dist/open-sse/handlers/imageProviders/weavy.js

@@ -39,7 +39,7 @@ import path from "path";
 import { execFile } from "child_process";
 import { promisify } from "util";
 import { PROVIDER_MODELS } from "../../config/providerModels.js";
-import { updateProviderConnection } from '../../../dist/lib/localDb.js';
+import { updateProviderConnection } from '../../../../dist/lib/localDb.js';
 
 const TEMPLATE_ID = "SZXXYN7L9PN2SCTVYAlt";
 

package/dist/open-sse/handlers/videoProviders/weavy.js

@@ -1,7 +1,7 @@
 import path from "path";
 import { execFile } from "child_process";
 import { promisify } from "util";
-import { updateProviderConnection } from '../../../dist/lib/localDb.js';
+import { updateProviderConnection } from '../../../../dist/lib/localDb.js';
 
 // 10 MB buffer — video polling can produce large stderr logs
 const MAX_BUFFER = 10 * 1024 * 1024;

package/dist/open-sse/mcp-server/tools/advancedTools.js

@@ -6,7 +6,7 @@ import {
   getComboModelProvider,
   getComboModelString,
   getComboStepTarget
-} from '../../../dist/lib/combos/steps.ts.js';
+} from '../../../../dist/lib/combos/steps.ts.js';
 import { normalizeRoutingStrategy } from "../../../shared/constants/routingStrategies.ts";
 const OMNIROUTE_BASE_URL = resolveOmniRouteBaseUrl();
 const OMNIROUTE_API_KEY = process.env.OMNIROUTE_API_KEY || "";
@@ -684,7 +684,7 @@ async function handleDbHealthCheck(args) {
   const start = Date.now();
   const autoRepair = args.autoRepair === true;
   try {
-    const { runManagedDbHealthCheck } = await import('../../../dist/lib/db/core.ts.js');
+    const { runManagedDbHealthCheck } = await import('../../../../dist/lib/db/core.ts.js');
     const result = runManagedDbHealthCheck({ autoRepair });
     await logToolCall(
       "omniroute_db_health_check",

package/dist/open-sse/mcp-server/tools/agentSkillTools.js

@@ -1,5 +1,5 @@
 import { z } from "zod";
-import { getCatalog, getSkillById, filterCatalog, computeCoverage, fetchSkillMarkdown } from '../../../dist/lib/agentSkills/catalog.js';
+import { getCatalog, getSkillById, filterCatalog, computeCoverage, fetchSkillMarkdown } from '../../../../dist/lib/agentSkills/catalog.js';
 const AgentSkillsListSchema = z.object({
   category: z.enum(["api", "cli"]).optional().describe("Filter by category: 'api' or 'cli'"),
   area: z.string().optional().describe("Filter by area (e.g. 'providers', 'models', 'cli-serve')")

package/dist/open-sse/mcp-server/tools/compressionTools.js

@@ -2,10 +2,10 @@ import { logToolCall } from "../audit.ts";
 import {
   getCompressionSettings,
   updateCompressionSettings
-} from '../../../dist/lib/db/compression.ts.js';
-import { getCompressionAnalyticsSummary } from '../../../dist/lib/db/compressionAnalytics.ts.js';
-import { getCacheStatsSummary } from '../../../dist/lib/db/compressionCacheStats.ts.js';
-import { listCompressionCombos } from '../../../dist/lib/db/compressionCombos.ts.js';
+} from '../../../../dist/lib/db/compression.ts.js';
+import { getCompressionAnalyticsSummary } from '../../../../dist/lib/db/compressionAnalytics.ts.js';
+import { getCacheStatsSummary } from '../../../../dist/lib/db/compressionCacheStats.ts.js';
+import { listCompressionCombos } from '../../../../dist/lib/db/compressionCombos.ts.js';
 import {
   getMcpDescriptionCompressionStats,
   snapshotMcpDescriptionCompressionStats

package/dist/open-sse/mcp-server/tools/gamificationTools.js

@@ -9,7 +9,7 @@ const gamificationTools = [
       limit: z.number().min(1).max(100).default(50)
     }),
     handler: async (args) => {
-      const { getTopN } = await import('../../../dist/lib/gamification/leaderboard.js');
+      const { getTopN } = await import('../../../../dist/lib/gamification/leaderboard.js');
       const entries = await getTopN(args.scope, args.limit);
       return { entries };
     }
@@ -23,7 +23,7 @@ const gamificationTools = [
       scope: z.enum(["global", "weekly", "monthly", "tokens_shared"]).default("global")
     }),
     handler: async (args) => {
-      const { getRank } = await import('../../../dist/lib/gamification/leaderboard.js');
+      const { getRank } = await import('../../../../dist/lib/gamification/leaderboard.js');
       const rank = await getRank(args.apiKeyId, args.scope);
       return { rank };
     }
@@ -36,9 +36,9 @@ const gamificationTools = [
       apiKeyId: z.string()
     }),
     handler: async (args) => {
-      const { getXp, getBadges } = await import('../../../dist/lib/db/gamification.js');
-      const { calculateLevel, getLevelTitle, getLevelTier } = await import('../../../dist/lib/gamification/xp.js');
-      const { getStreak } = await import('../../../dist/lib/gamification/streaks.js');
+      const { getXp, getBadges } = await import('../../../../dist/lib/db/gamification.js');
+      const { calculateLevel, getLevelTitle, getLevelTier } = await import('../../../../dist/lib/gamification/xp.js');
+      const { getStreak } = await import('../../../../dist/lib/gamification/streaks.js');
       const xp = getXp(args.apiKeyId);
       const badges = getBadges(args.apiKeyId);
       const streak = await getStreak(args.apiKeyId);
@@ -63,7 +63,7 @@ const gamificationTools = [
       category: z.string().optional()
     }),
     handler: async (args) => {
-      const { getBadgeDefinitions, getBadges } = await import('../../../dist/lib/db/gamification.js');
+      const { getBadgeDefinitions, getBadges } = await import('../../../../dist/lib/db/gamification.js');
       if (args.apiKeyId) {
         const badges = getBadges(args.apiKeyId);
         return { earned: badges };
@@ -83,7 +83,7 @@ const gamificationTools = [
       reason: z.string().optional()
     }),
     handler: async (args) => {
-      const { transferTokens } = await import('../../../dist/lib/gamification/sharing.js');
+      const { transferTokens } = await import('../../../../dist/lib/gamification/sharing.js');
       const result = await transferTokens(
         args.fromApiKeyId,
         args.toApiKeyId,
@@ -103,7 +103,7 @@ const gamificationTools = [
       maxUses: z.number().positive().default(1)
     }),
     handler: async (args) => {
-      const { createInvite } = await import('../../../dist/lib/gamification/invites.js');
+      const { createInvite } = await import('../../../../dist/lib/gamification/invites.js');
       const result = await createInvite(args.apiKeyId, args.serverUrl, args.maxUses);
       return result;
     }
@@ -114,7 +114,7 @@ const gamificationTools = [
     scopes: ["read:gamification"],
     inputSchema: z.object({}),
     handler: async () => {
-      const { listServers } = await import('../../../dist/lib/gamification/servers.js');
+      const { listServers } = await import('../../../../dist/lib/gamification/servers.js');
       return { servers: await listServers() };
     }
   },
@@ -124,7 +124,7 @@ const gamificationTools = [
     scopes: ["read:gamification"],
     inputSchema: z.object({}),
     handler: async () => {
-      const { getAnomalies } = await import('../../../dist/lib/gamification/antiCheat.js');
+      const { getAnomalies } = await import('../../../../dist/lib/gamification/antiCheat.js');
       return { anomalies: await getAnomalies() };
     }
   }

package/dist/open-sse/mcp-server/tools/githubSkillTools.js

@@ -6,7 +6,7 @@ import {
   GitHubSkillsSearchSchema,
   GitHubSkillsScanSchema,
   GitHubSkillsInstallSchema
-} from '../../../dist/lib/skills/githubCollector.js';
+} from '../../../../dist/lib/skills/githubCollector.js';
 async function handleSearch(args) {
   const { repos, errors } = await searchGitHubSkills({
     minStars: args.minStars,

package/dist/open-sse/mcp-server/tools/memoryTools.js

@@ -1,11 +1,11 @@
 import { z } from "zod";
-import { retrieveMemories } from '../../../dist/lib/memory/retrieval.js';
-import { createMemory, deleteMemory, listMemories } from '../../../dist/lib/memory/store.js';
+import { retrieveMemories } from '../../../../dist/lib/memory/retrieval.js';
+import { createMemory, deleteMemory, listMemories } from '../../../../dist/lib/memory/store.js';
 import {
   getMemorySettings,
   toMemoryRetrievalConfig,
   DEFAULT_MEMORY_SETTINGS
-} from '../../../dist/lib/memory/settings.js';
+} from '../../../../dist/lib/memory/settings.js';
 const MemorySearchSchema = z.object({
   apiKeyId: z.string(),
   query: z.string().optional(),

package/dist/open-sse/mcp-server/tools/notionTools.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
-import { createNotionClient } from '../../../dist/lib/notion/api.ts.js';
-import { getNotionToken } from '../../../dist/lib/db/notion.ts.js';
+import { createNotionClient } from '../../../../dist/lib/notion/api.ts.js';
+import { getNotionToken } from '../../../../dist/lib/db/notion.ts.js';
 function requireToken() {
   const token = getNotionToken();
   if (!token) throw new Error("Notion integration token not configured. Set it in Settings > Context Sources.");

package/dist/open-sse/mcp-server/tools/obsidianTools.js

@@ -1,8 +1,8 @@
 import { z } from "zod";
-import { createObsidianClient, createSyncServerClient, getSyncToken } from '../../../dist/lib/obsidian/api.ts.js';
+import { createObsidianClient, createSyncServerClient, getSyncToken } from '../../../../dist/lib/obsidian/api.ts.js';
 import {
   getObsidianConfigForApiKey
-} from '../../../dist/lib/db/obsidian.ts.js';
+} from '../../../../dist/lib/db/obsidian.ts.js';
 function extractApiKeyId(extra) {
   const id = extra?.authInfo?.clientId;
   return typeof id === "string" && id.length > 0 && id !== "anonymous" && id !== "env-key" ? id : void 0;

package/dist/open-sse/mcp-server/tools/pickFastestModel.js

@@ -6,7 +6,7 @@ import {
   getComboModelProvider,
   getComboModelString,
   getComboStepTarget
-} from '../../../dist/lib/combos/steps.ts.js';
+} from '../../../../dist/lib/combos/steps.ts.js';
 import { rankBySpeed, DEFAULT_SPEED_WEIGHTS } from "../../services/autoCombo/speedRanking.ts";
 const OMNIROUTE_BASE_URL = resolveOmniRouteBaseUrl();
 const OMNIROUTE_API_KEY = process.env.OMNIROUTE_API_KEY || "";

package/dist/open-sse/mcp-server/tools/pluginTools.js

@@ -1,8 +1,8 @@
 import { z } from "zod";
 import { resolve, normalize, isAbsolute } from "path";
-import { listPlugins, getPluginByName, updatePluginConfig } from '../../../dist/lib/db/plugins.js';
-import { pluginManager } from '../../../dist/lib/plugins/manager.js';
-import { validatePluginConfig } from '../../../dist/lib/plugins/manifest.js';
+import { listPlugins, getPluginByName, updatePluginConfig } from '../../../../dist/lib/db/plugins.js';
+import { pluginManager } from '../../../../dist/lib/plugins/manager.js';
+import { validatePluginConfig } from '../../../../dist/lib/plugins/manifest.js';
 function validatePluginPath(path) {
   if (path.includes("\0")) {
     throw new Error("Invalid path: contains null bytes");
@@ -151,7 +151,7 @@ const pluginTools = [
       limit: z.number().min(1).max(100).default(20).describe("Max results to return")
     }),
     handler: async (args) => {
-      const { getPluginAnalytics, getPluginAnalyticsSummary } = await import('../../../dist/lib/db/plugins.js');
+      const { getPluginAnalytics, getPluginAnalyticsSummary } = await import('../../../../dist/lib/db/plugins.js');
       const limit = args.limit || 20;
       if (args.name) {
         const rows = getPluginAnalytics(args.name).slice(0, limit);

package/dist/open-sse/mcp-server/tools/skillTools.js

@@ -1,6 +1,6 @@
 import { z } from "zod";
-import { skillRegistry } from '../../../dist/lib/skills/registry.js';
-import { skillExecutor } from '../../../dist/lib/skills/executor.js';
+import { skillRegistry } from '../../../../dist/lib/skills/registry.js';
+import { skillExecutor } from '../../../../dist/lib/skills/executor.js';
 const SkillListSchema = z.object({
   apiKeyId: z.string().optional(),
   name: z.string().optional(),

package/dist/open-sse/providers/index.js

@@ -6,7 +6,7 @@ import { buildTtsProviderModels } from "../config/ttsModels.js";
 
 // oauth block is canonical for these fields; inject into transport so executors reading
 // this.config.{clientId,clientSecret,tokenUrl} keep working without duplicating in transport
-const OAUTH_INJECT_FIELDS = ["clientId", "clientSecret", "tokenUrl"];
+const OAUTH_INJECT_FIELDS = ["clientId", "clientSecret", "tokenUrl", "refreshUrl"];
 
 // transport: re-apply shared default (format:"openai") + inject oauth-canonical fields
 function buildTransport(transport, oauth) {

package/dist/open-sse/providers/registry/nous-research.js

@@ -14,8 +14,16 @@ export default {
       apiKeyUrl: "https://portal.nousresearch.com",
     },
   },
-  category: "apikey",
-  authModes: ["apikey"],
+  category: "oauth",
+  authModes: ["oauth"],
+  oauth: {
+    clientId: "hermes-cli",
+    deviceCodeUrl: "https://portal.nousresearch.com/api/oauth/device/code",
+    tokenUrl: "https://portal.nousresearch.com/api/oauth/token",
+    refreshUrl: "https://portal.nousresearch.com/api/oauth/token",
+    scope: "inference:invoke",
+    refreshLeadMs: 5 * 60 * 1000,
+  },
   transport: {
     baseUrl: "https://inference-api.nousresearch.com/v1/chat/completions",
     format: "openai",

package/dist/open-sse/services/combo/quotaExhaustionCutoff.js

@@ -2,10 +2,10 @@ import {
   evaluateQuotaCutoff,
   getQuotaFetcher
 } from "../quotaPreflight.ts";
-import { getProviderConnectionById } from '../../../dist/lib/db/providers.js';
+import { getProviderConnectionById } from '../../../../dist/lib/db/providers.js';
 import {
   resolveResilienceSettings
-} from '../../../dist/lib/resilience/settings.js';
+} from '../../../../dist/lib/resilience/settings.js';
 import { fetchResetAwareQuotaWithCache } from "./quotaStrategies.ts";
 function asThresholdMap(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return {};

package/dist/open-sse/services/combo/quotaShareStrategy.js

@@ -1,4 +1,4 @@
-import { isBucketSaturated } from '../../../dist/lib/quota/accountBuckets.ts.js';
+import { isBucketSaturated } from '../../../../dist/lib/quota/accountBuckets.ts.js';
 import { incrementInflight, decrementInflight, getInflight } from "./quotaShareInflight.ts";
 const MAX_DRR_COMBOS = 200;
 const _drrState = /* @__PURE__ */ new Map();

package/dist/open-sse/services/combo/resolveAutoStrategy.js

@@ -100,7 +100,7 @@ async function resolveAutoStrategyOrder(deps) {
   }
   let lastKnownGoodProvider;
   try {
-    const { getLKGP } = await import('../../../dist/lib/localDb.js');
+    const { getLKGP } = await import('../../../../dist/lib/localDb.js');
     const lkgp = await getLKGP(combo.name, combo.id || combo.name);
     if (lkgp) lastKnownGoodProvider = lkgp.provider;
   } catch (err) {

package/dist/open-sse/services/combo/sessionStickiness.js

@@ -10,7 +10,7 @@ function __setStickinessHeadroomFetcherForTests(fetcher) {
 async function resolveSaturation(connectionId, provider) {
   if (_fetcherOverride) return _fetcherOverride(connectionId);
   try {
-    const mod = await import('../../../dist/lib/quota/saturationSignals.js');
+    const mod = await import('../../../../dist/lib/quota/saturationSignals.js');
     const getSaturation = mod.getSaturation;
     const [util5h, util7d] = await Promise.all([
       getSaturation(connectionId, provider, { unit: "percent", window: "5h" }),

package/dist/open-sse/services/combo/targetSorters.js

@@ -1,6 +1,6 @@
 import { getCircuitBreaker } from "../../../shared/utils/circuitBreaker";
 import { secureRandomFloat, secureRandomInt } from "../../../shared/utils/secureRandom";
-import { getComboStepTarget, getComboStepWeight } from '../../../dist/lib/combos/steps.ts.js';
+import { getComboStepTarget, getComboStepWeight } from '../../../../dist/lib/combos/steps.ts.js';
 import { getComboMetrics } from "../comboMetrics.ts";
 import { parseModel } from "../model.ts";
 function normalizeModelEntry(entry) {
@@ -32,7 +32,7 @@ function orderTargetsForWeightedFallback(targets, selectedExecutionKey, preserve
 }
 async function sortModelsByCost(models) {
   try {
-    const { getPricingForModel } = await import('../../../dist/lib/localDb.js');
+    const { getPricingForModel } = await import('../../../../dist/lib/localDb.js');
     const withCost = await Promise.all(
       models.map(async (modelStr) => {
         const parsed = parseModel(modelStr);

package/dist/open-sse/services/combo/validateQuality.js

@@ -3,7 +3,7 @@ import {
   isKnownNonClaudeStreamPayload
 } from "../../utils/streamHelpers.ts";
 import { evaluateResponseValidation } from "./responseValidation.ts";
-import { getReasoningTokens } from '../../../dist/lib/usage/tokenAccounting.ts.js';
+import { getReasoningTokens } from '../../../../dist/lib/usage/tokenAccounting.ts.js';
 function toRetryAfterDisplayValue(value) {
   if (typeof value !== "number") return value;
   if (value > 0 && value < 1e9) {

package/dist/open-sse/services/tokenRefresh/providers.js

@@ -2,7 +2,7 @@ import { PROVIDERS, PROVIDER_OAUTH } from "../../config/providers.js";
 import { OAUTH_ENDPOINTS, GITHUB_COPILOT } from "../../config/appConstants.js";
 import { proxyAwareFetch } from "../../utils/proxyFetch.js";
 import { dedupRefresh } from "./dedup.js";
-import { buildExternalIdpRefreshParams } from '../../../dist/lib/oauth/kiroExternalIdp.js';
+import { buildExternalIdpRefreshParams } from '../../../../dist/lib/oauth/kiroExternalIdp.js';
 
 let _xaiServiceSingleton = null;
 export async function refreshXaiToken(refreshToken, log) {
@@ -10,7 +10,7 @@ export async function refreshXaiToken(refreshToken, log) {
   return dedupRefresh("xai", refreshToken, async () => {
     try {
       if (!_xaiServiceSingleton) {
-        const mod = await import('../../../dist/lib/oauth/services/xai.js');
+        const mod = await import('../../../../dist/lib/oauth/services/xai.js');
         _xaiServiceSingleton = new mod.XaiService();
       }
       const tokens = await _xaiServiceSingleton.refreshAccessToken(refreshToken);
@@ -296,7 +296,7 @@ async function resolveKiroProfileArnPatch(providerSpecificData, accessToken, ref
   if (providerSpecificData?.profileArn) return {};
   let profileArn = refreshedArn?.trim?.() || null;
   if (!profileArn) {
-    const { fetchKiroProfileArn } = await import('../../../dist/lib/oauth/providers.js');
+    const { fetchKiroProfileArn } = await import('../../../../dist/lib/oauth/providers.js');
     profileArn = await fetchKiroProfileArn(accessToken);
   }
   return profileArn ? { providerSpecificData: { profileArn } } : {};

package/dist/routes/headroom/extras/route.js

@@ -16,7 +16,7 @@ export async function GET(req, res) {
 }
 export async function POST(req, res) {
     try {
-        const body = await req.json().catch(() => ({}));
+        const body = req.body || {};
         const extras = Array.isArray(body.extras) ? body.extras : [];
         if (extras.length === 0) {
             return res.status(400).json({ error: "No extras requested" });
@@ -37,7 +37,7 @@ export async function POST(req, res) {
 }
 export async function DELETE(req, res) {
     try {
-        const body = await req.json().catch(() => ({}));
+        const body = req.body || {};
         const extras = Array.isArray(body.extras) ? body.extras : [];
         if (extras.length === 0) {
             return res.status(400).json({ error: "No extras requested" });

package/dist/shared/constants/providers.js

@@ -147,7 +147,7 @@ export const APIKEY_PROVIDERS = {
   // nscale: { id: "nscale", alias: "nscale", name: "nScale", icon: "token", color: "#0891B2", textIcon: "NS", website: "https://nscale.com", notice: { text: "$5 free credits on signup.", apiKeyUrl: "https://console.nscale.com/api-keys" }, serviceKinds: ["llm"] },
   // baseten: { id: "baseten", alias: "baseten", name: "Baseten", icon: "deployed_code", color: "#111827", textIcon: "BT", website: "https://baseten.co", notice: { text: "$30 free trial credits for GPU inference.", apiKeyUrl: "https://app.baseten.co/settings/api_keys" }, serviceKinds: ["llm"] },
   // publicai: { id: "publicai", alias: "publicai", name: "PublicAI", icon: "public", color: "#059669", textIcon: "PA", website: "https://publicai.co", notice: { text: "Free community inference tier.", apiKeyUrl: "https://publicai.co" }, serviceKinds: ["llm"] },
-  "nous-research": { id: "nous-research", alias: "nous", name: "Nous Research", icon: "hub", color: "#2563EB", textIcon: "NO", website: "https://portal.nousresearch.com", notice: { text: "Free tier: 50 RPM, 500K TPM — no credit card.", apiKeyUrl: "https://portal.nousresearch.com" }, serviceKinds: ["llm"] },
+  "nous-research": { id: "nous-research", alias: "nous", name: "Nous Research", icon: "hub", color: "#2563EB", textIcon: "NO", website: "https://portal.nousresearch.com", notice: { text: "Free tier: 50 RPM, 500K TPM — no credit card. Sign in with your Nous Portal account (device login, no API key needed).", signupUrl: "https://portal.nousresearch.com" }, serviceKinds: ["llm"], authModes: ["oauth"], hasOAuth: true },
   // glhf: { id: "glhf", alias: "glhf", name: "GLHF Chat", icon: "hub", color: "#10B981", textIcon: "GH", website: "https://glhf.chat", notice: { text: "Free tier for open-source model inference.", apiKeyUrl: "https://glhf.chat/users/settings/api" }, passthroughModels: true, serviceKinds: ["llm"] },
   "ollama-local": { id: "ollama-local", alias: "ollama-local", name: "Ollama Local", icon: "cloud", color: "#ffffffff", textIcon: "OL", website: "https://ollama.com" },
   "vertex-partner": { id: "vertex-partner", alias: "vxp", name: "Vertex Partner", icon: "cloud", color: "#34A853", textIcon: "VP", website: "https://cloud.google.com/vertex-ai/generative-ai/docs/partner-models/use-partner-models", notice: { apiKeyUrl: "https://console.cloud.google.com/iam-admin/serviceaccounts" } },

package/open-sse/handlers/chatCore/nonStreamingHandler.js

@@ -7,7 +7,7 @@ import { createErrorResult } from "../../utils/error.js";
 import { HTTP_STATUS } from "../../config/runtimeConfig.js";
 import { parseSSEToOpenAIResponse } from "./sseToJsonHandler.js";
 import { buildRequestDetail, extractRequestConfig, extractUsageFromResponse, saveUsageStats, formatDoneLine } from "./requestDetail.js";
-import { appendRequestLog, saveRequestDetail } from '../../dist/lib/usageDb.js';
+import { appendRequestLog, saveRequestDetail } from '../../../dist/lib/usageDb.js';
 import { decloakToolNames } from "../../utils/claudeCloaking.js";
 
 function parseToolArguments(value) {

package/open-sse/handlers/chatCore/requestDetail.js

@@ -1,4 +1,4 @@
-import { saveRequestUsage, appendRequestLog, saveRequestDetail } from '../../dist/lib/usageDb.js';
+import { saveRequestUsage, appendRequestLog, saveRequestDetail } from '../../../dist/lib/usageDb.js';
 import { COLORS } from "../../utils/stream.js";
 import { canonicalizeUsage } from "../../utils/usageTracking.js";