@goodandready/dsh-model-sync 0.1.0 → 0.2.0

package/README.md

@@ -12,7 +12,7 @@ OAuth, subscription, and tool-only routes are intentionally outside the scope.
 
 ## Status
 
-Runtime, scheduler, HTTP API, reconciliation, and Settings UI are implemented. Release and staging verification remain before publication.
+Runtime, scheduler, HTTP API, reconciliation, model allowlists, and Settings UI are implemented. The release workflow includes staging and production verification before publication.
 
 ## Development
 
@@ -33,3 +33,13 @@ Apply is explicit:
 ```json
 { "provider": "openai", "dryRun": false, "removeMissing": false }
 ```
+
+Omit `provider` to discover all enabled API-key providers in one run. The Settings UI exposes this as **Refresh all**.
+
+`POST /dsh-model-sync/selection` stores and applies a per-provider model allowlist:
+
+```json
+{ "provider": "openai", "models": ["gpt-5", "gpt-5-mini"] }
+```
+
+An empty `models` array means all models in the latest available catalog. The selected catalog is written to DSH's `llm-pi-ai` settings, so the standard DSH model picker refreshes from the resulting list.

package/lib/client.js

@@ -5,10 +5,10 @@ window.__ModuleLoader__.load({
     var exports = module.exports
     const React = require('react')
     const en = {
-      title: 'Model synchronization', desc: 'Refresh model catalogs for API-key providers. A dry-run is the default; applying changes is explicit.', loading: 'Loading…', refresh: 'Refresh status', run: 'Discover', apply: 'Apply changes', dryRun: 'Preview only (dry-run)', all: 'All API-key providers', ok: 'ready', dormant: 'not configured', running: 'running…', noProviders: 'No API-key providers found.', lastRun: 'Last run',
+      title: 'Model synchronization', desc: 'Refresh model catalogs for API-key providers. A dry-run is the default; applying changes is explicit.', loading: 'Loading…', refresh: 'Refresh status', refreshAll: 'Refresh all', run: 'Discover', apply: 'Apply changes', dryRun: 'Preview only (dry-run)', all: 'All API-key providers', ok: 'ready', dormant: 'not configured', running: 'running…', noProviders: 'No API-key providers found.', lastRun: 'Last run', selectModels: 'Choose models', saveSelection: 'Save and apply selection', cancel: 'Cancel', selected: 'selected', allModels: 'All models', noModels: 'No models in the current catalog.', pickerNote: 'The selection is applied to the DSH model picker immediately.',
     }
     const ru = {
-      title: 'Синхронизация моделей', desc: 'Обновляет каталоги моделей у провайдеров с API-ключом. По умолчанию только dry-run; применение запускается явно.', loading: 'Загрузка…', refresh: 'Обновить статус', run: 'Проверить', apply: 'Применить изменения', dryRun: 'Только просмотр (dry-run)', all: 'Все API-key провайдеры', ok: 'готов', dormant: 'не настроен', running: 'выполняется…', noProviders: 'API-key провайдеры не найдены.', lastRun: 'Последний запуск',
+      title: 'Синхронизация моделей', desc: 'Обновляет каталоги моделей у провайдеров с API-ключом. По умолчанию только dry-run; применение запускается явно.', loading: 'Загрузка…', refresh: 'Обновить статус', refreshAll: 'Обновить все', run: 'Проверить', apply: 'Применить изменения', dryRun: 'Только просмотр (dry-run)', all: 'Все API-key провайдеры', ok: 'готов', dormant: 'не настроен', running: 'выполняется…', noProviders: 'API-key провайдеры не найдены.', lastRun: 'Последний запуск', selectModels: 'Выбрать модели', saveSelection: 'Сохранить и применить выбор', cancel: 'Отмена', selected: 'выбрано', allModels: 'Все модели', noModels: 'В текущем каталоге нет моделей.', pickerNote: 'Выбор сразу применяется к пикеру моделей DSH.',
     }
     const API = '/dsh-model-sync'
     function useLocale(ctx) {
@@ -17,16 +17,21 @@ window.__ModuleLoader__.load({
     function ModelSyncSection({ ctx }) {
       const locale = useLocale(ctx); const t = locale === 'ru' ? ru : en
       const [status, setStatus] = React.useState(null); const [provider, setProvider] = React.useState(''); const [dryRun, setDryRun] = React.useState(true); const [busy, setBusy] = React.useState(false); const [error, setError] = React.useState('')
+      const [selectionProvider, setSelectionProvider] = React.useState(''); const [selectionDraft, setSelectionDraft] = React.useState([])
       const load = React.useCallback(() => { setError(''); return fetch(`${API}/status`).then((r) => r.json()).then(setStatus).catch((e) => setError(String(e?.message ?? e))) }, [])
       React.useEffect(() => { load(); const timer = setInterval(load, 15000); return () => clearInterval(timer) }, [load])
-      const run = () => { setBusy(true); setError(''); fetch(`${API}/run`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ provider: provider || undefined, dryRun }) }).then(async (r) => { const body = await r.json(); if (!r.ok) throw new Error(body?.error?.message ?? `HTTP ${r.status}`); return body }).then(setStatus).catch((e) => setError(String(e?.message ?? e))).finally(() => setBusy(false)) }
-      const rows = status?.providers ?? []; const button = (label, onClick) => React.createElement('button', { type: 'button', disabled: busy, onClick, style: { marginRight: 8 } }, label)
+      const execute = (targetProvider) => { setBusy(true); setError(''); fetch(`${API}/run`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ provider: targetProvider || undefined, dryRun }) }).then(async (r) => { const body = await r.json(); if (!r.ok) throw new Error(body?.error?.message ?? `HTTP ${r.status}`); return body }).then(setStatus).catch((e) => setError(String(e?.message ?? e))).finally(() => setBusy(false)) }
+      const openSelection = (row) => { const available = row.availableModels ?? row.models ?? []; setSelectionProvider(row.provider); setSelectionDraft(row.selectedModels?.length ? row.selectedModels : available.map((model) => model.id)) }
+      const closeSelection = () => { setSelectionProvider(''); setSelectionDraft([]) }
+      const saveSelection = () => { const row = rows.find((item) => item.provider === selectionProvider); const available = row?.availableModels ?? row?.models ?? []; const models = selectionDraft.length === available.length ? [] : selectionDraft; setBusy(true); setError(''); fetch(`${API}/selection`, { method: 'POST', headers: { 'content-type': 'application/json' }, body: JSON.stringify({ provider: selectionProvider, models }) }).then(async (r) => { const body = await r.json(); if (!r.ok) throw new Error(body?.error?.message ?? `HTTP ${r.status}`); return body }).then((body) => { setStatus(body); closeSelection() }).catch((e) => setError(String(e?.message ?? e))).finally(() => setBusy(false)) }
+      const rows = (status?.providers ?? []).filter((row) => row.configured); const selectedRow = rows.find((row) => row.provider === selectionProvider); const choices = selectedRow?.availableModels ?? selectedRow?.models ?? []; const button = (label, onClick) => React.createElement('button', { type: 'button', disabled: busy, onClick, style: { marginRight: 8 } }, label)
       return React.createElement('div', { style: { display: 'flex', flexDirection: 'column', gap: 10, maxWidth: 680 } },
         React.createElement('p', null, t.desc),
         React.createElement('div', null, React.createElement('select', { value: provider, onChange: (e) => setProvider(e.target.value) }, React.createElement('option', { value: '' }, t.all), rows.map((row) => React.createElement('option', { key: row.provider, value: row.provider }, row.provider))), React.createElement('label', { style: { marginLeft: 12 } }, React.createElement('input', { type: 'checkbox', checked: dryRun, onChange: (e) => setDryRun(e.target.checked) }), ` ${t.dryRun}`)),
-        React.createElement('div', null, button(t.refresh, load), button(dryRun ? t.run : t.apply, run)),
+        React.createElement('div', null, button(t.refresh, load), button(t.refreshAll, () => execute(undefined)), button(dryRun ? t.run : t.apply, () => execute(provider || undefined))),
         status?.lastRun ? React.createElement('small', null, `${t.lastRun}: ${new Date(status.lastRun.finishedAt).toLocaleString()}`) : null, status?.running || busy ? React.createElement('small', null, t.running) : null, error ? React.createElement('small', { style: { color: 'var(--dsw-alias-state-error-primary)' } }, error) : null, status === null ? React.createElement('small', null, t.loading) : null, rows.length === 0 && status ? React.createElement('small', null, t.noProviders) : null,
-        rows.map((row) => React.createElement('div', { key: row.provider }, `${row.provider}: ${row.configured ? t.ok : t.dormant} · ${row.models?.length ?? 0} models`)),
+        rows.map((row) => React.createElement('div', { key: row.provider, style: { display: 'flex', alignItems: 'center', gap: 8 } }, React.createElement('span', null, `${row.provider}: ${row.configured ? t.ok : t.dormant} · ${row.models?.length ?? 0} models`), button(t.selectModels, () => openSelection(row)))),
+        selectionProvider ? React.createElement('div', { style: { border: '1px solid var(--dsw-alias-border-primary)', padding: 12, borderRadius: 6 } }, React.createElement('strong', null, `${t.selectModels}: ${selectionProvider}`), React.createElement('div', { style: { margin: '8px 0' } }, choices.length === 0 ? React.createElement('small', null, t.noModels) : choices.map((model) => React.createElement('label', { key: model.id, style: { display: 'block', margin: '4px 0' } }, React.createElement('input', { type: 'checkbox', checked: selectionDraft.includes(model.id), onChange: (e) => setSelectionDraft((current) => e.target.checked ? [...current, model.id] : current.filter((id) => id !== model.id)) }), ` ${model.name ?? model.id} (${model.id})`))), React.createElement('small', null, t.pickerNote), React.createElement('div', { style: { marginTop: 8 } }, button(t.saveSelection, saveSelection), button(t.cancel, closeSelection))) : null,
       )
     }
     function apply(ctx) { ctx.slots.inject('settings.section', () => ctx.slots.register({ name: 'settings.section', id: 'dsh-model-sync', order: 25, label: () => 'Model Sync' }, (props) => React.createElement(ModelSyncSection, { ...props, ctx }))) }

package/lib/http.js

@@ -40,6 +40,23 @@ export function normalizeRunRequest(body) {
   }
 }
 
+export function normalizeSelectionRequest(body) {
+  if (body === null || typeof body !== 'object' || Array.isArray(body)) throw new Error('request body must be an object')
+  if (typeof body.provider !== 'string' || !body.provider || body.provider.length > 128) throw new Error('provider must be a short string')
+  if (!Array.isArray(body.models) || body.models.length > 5000) throw new Error('models must be an array')
+  const models = []
+  const seen = new Set()
+  for (const model of body.models) {
+    if (typeof model !== 'string' || model.length > 512) throw new Error('model ids must be short strings')
+    const id = model.trim()
+    if (id && !seen.has(id)) {
+      seen.add(id)
+      models.push(id)
+    }
+  }
+  return { provider: body.provider, models }
+}
+
 export function registerHttpApi(ctx, synchronizer) {
   const makeHandler = (route) => async (req, res) => {
     if (!trusted(req)) return json(res, 403, { error: { code: 'forbidden', message: 'dsh-model-sync: cross-origin request rejected' } })
@@ -49,16 +66,22 @@ export function registerHttpApi(ctx, synchronizer) {
     }
     if (req.method !== 'POST') return json(res, 405, { error: { code: 'method', message: 'POST only' } })
     let options
-    try { options = normalizeRunRequest(await readJson(req)) }
+    try { options = route === 'selection' ? normalizeSelectionRequest(await readJson(req)) : normalizeRunRequest(await readJson(req)) }
     catch (error) { return json(res, 400, { error: { code: 'bad-request', message: error instanceof Error ? error.message : String(error) } }) }
-    try { const result = await synchronizer.run(options); return json(res, 200, { ...result, providers: synchronizer.listProviders() }) }
+    try {
+      const result = route === 'selection'
+        ? await synchronizer.setModelSelection(options.provider, options.models)
+        : await synchronizer.run(options)
+      return json(res, 200, { ...result, providers: synchronizer.listProviders() })
+    }
     catch (error) {
-      const code = error?.code === 'SETTINGS_CONFLICT' ? 409 : error?.code === 'SETTINGS_UNAVAILABLE' ? 503 : 500
+      const code = error?.code === 'SETTINGS_CONFLICT' ? 409 : error?.code === 'SETTINGS_UNAVAILABLE' || error?.code === 'CONFIG_UNAVAILABLE' ? 503 : error?.code === 'PROVIDER_NOT_CONFIGURED' || error?.code === 'UNKNOWN_MODEL' ? 400 : 500
       return json(res, code, { error: { code: error?.code ?? 'run-failed', message: error instanceof Error ? error.message : String(error) } })
     }
   }
   return [
     ctx.webServer.register({ kind: 'exact', path: `${BASE}/status`, handler: makeHandler('status') }),
     ctx.webServer.register({ kind: 'exact', path: `${BASE}/run`, handler: makeHandler('run') }),
+    ctx.webServer.register({ kind: 'exact', path: `${BASE}/selection`, handler: makeHandler('selection') }),
   ]
 }

package/lib/index.js

@@ -17,23 +17,34 @@ export const Config = Schema.object({
     provider: Schema.string().required(),
     enabled: Schema.boolean().default(true),
   })).default([]),
+  modelSelections: Schema.dict(Schema.array(Schema.string())).default({}),
 })
 
 export function apply(ctx, config) {
   let liveConfig = Config(structuredClone(config || {}))
   let reconfigure = () => {}
+  let saveConfig = async () => {
+    throw Object.assign(new Error('dsh-model-sync settings are not writable'), { code: 'CONFIG_UNAVAILABLE' })
+  }
   const settings = ctx.get('settings')
   if (settings?.settings?.register) {
     const scope = settings.settings.register(NS, Config, { base: config })
     liveConfig = Config(scope.get() || config)
-    ctx.effect(() => scope.onChange((next) => {
+    const watch = scope.watch ?? scope.onChange
+    ctx.effect(() => watch?.call(scope, (next) => {
       liveConfig = Config(next || config)
       reconfigure()
     }), 'dsh-model-sync: settings')
+    saveConfig = async (patch) => {
+      if (typeof scope.update === 'function') return scope.update(patch)
+      const next = { ...scope.get(), ...patch }
+      if (typeof scope.replace === 'function') return scope.replace(next)
+      throw Object.assign(new Error('dsh-model-sync settings are not writable'), { code: 'CONFIG_UNAVAILABLE' })
+    }
   }
 
   const service = createProviderService(ctx)
-  const synchronizer = createModelSynchronizer(ctx, { getConfig: () => liveConfig })
+  const synchronizer = createModelSynchronizer(ctx, { getConfig: () => liveConfig, saveConfig })
   const scheduler = createSyncScheduler(synchronizer, { getConfig: () => liveConfig })
   reconfigure = () => scheduler.reconfigure()
   scheduler.start()

package/lib/synchronizer.js

@@ -2,6 +2,7 @@ import { listApiKeyProviders } from './inventory.js'
 import { createProviderAdapterRegistry } from './adapter-registry.js'
 import { createCredentialResolver } from './credentials.js'
 import { reconcileModels, catalogPatch } from './reconcile.js'
+import { normalizeModels } from './models.js'
 
 const PIAI_NS = 'llm-pi-ai'
 
@@ -23,14 +24,31 @@ function errorMessage(error) {
   return error instanceof Error ? error.message : String(error)
 }
 
-export function createModelSynchronizer(ctx, { getConfig = () => ({}), fetchImpl = fetch } = {}) {
+export function createModelSynchronizer(ctx, { getConfig = () => ({}), saveConfig = async () => {}, fetchImpl = fetch } = {}) {
   const resolveCredential = createCredentialResolver(ctx)
   const registry = createProviderAdapterRegistry({ resolveCredential, fetchImpl })
   let running = null
   let lastRun = null
 
   function providers() {
-    return listApiKeyProviders(ctx.llm, settingsOf(ctx))
+    const config = getConfig() ?? {}
+    const lastResults = new Map((lastRun?.results ?? []).map((row) => [row.provider, row]))
+    return listApiKeyProviders(ctx.llm, settingsOf(ctx)).map((row) => {
+      const selection = Array.isArray(config.modelSelections?.[row.provider])
+        ? [...new Set(config.modelSelections[row.provider].filter((id) => typeof id === 'string' && id))]
+        : []
+      const latest = lastResults.get(row.provider)
+      return {
+        ...row,
+        selectedModels: selection,
+        availableModels: latest?.status === 'ok' ? latest.availableModels ?? latest.models ?? row.models : row.models,
+      }
+    })
+  }
+
+  function selectionFor(config, provider) {
+    const selection = config?.modelSelections?.[provider]
+    return Array.isArray(selection) ? [...new Set(selection.filter((id) => typeof id === 'string' && id))] : []
   }
 
   async function discover(row, { signal } = {}) {
@@ -68,8 +86,21 @@ export function createModelSynchronizer(ctx, { getConfig = () => ({}), fetchImpl
         }
         const settings = settingsOf(ctx)
         const current = profileOf(settings, row.provider).models ?? row.models
-        const reconciliation = reconcileModels(row.provider, current, discovered.models, { removeMissing })
-        results.push({ ...discovered, ...reconciliation, changed: reconciliation.changed })
+        const selectedModels = selectionFor(config, row.provider)
+        const advertised = selectedModels.length
+          ? discovered.models.filter((model) => selectedModels.includes(model.id))
+          : discovered.models
+        const effectiveRemoveMissing = removeMissing || selectedModels.length > 0
+        const reconciliation = reconcileModels(row.provider, current, advertised, { removeMissing: effectiveRemoveMissing })
+        results.push({
+          ...discovered,
+          availableModels: discovered.models,
+          selectedModels,
+          advertised,
+          ...reconciliation,
+          removeMissing: effectiveRemoveMissing,
+          changed: reconciliation.changed,
+        })
       }
       const result = { startedAt, finishedAt: Date.now(), dryRun, removeMissing, results, applied: false }
       if (!dryRun && results.some((row) => row.status === 'ok' && row.changed)) {
@@ -93,11 +124,43 @@ export function createModelSynchronizer(ctx, { getConfig = () => ({}), fetchImpl
     return running
   }
 
+  async function setModelSelection(provider, models) {
+    if (typeof provider !== 'string' || !provider) throw new Error('provider is required')
+    if (!Array.isArray(models)) throw new Error('models must be an array')
+    const selectedModels = [...new Set(models.filter((id) => typeof id === 'string' && id.trim()).map((id) => id.trim()))]
+    const config = getConfig() ?? {}
+    const row = providers().find((item) => item.provider === provider)
+    if (!row) throw Object.assign(new Error(`provider is not configured: ${provider}`), { code: 'PROVIDER_NOT_CONFIGURED' })
+    const latest = lastRun?.results?.find((item) => item.provider === provider && item.status === 'ok')
+    const available = normalizeModels(provider, latest?.availableModels ?? latest?.models ?? row.availableModels ?? row.models)
+    const availableById = new Map(available.map((model) => [model.id, model]))
+    const unknown = selectedModels.filter((id) => !availableById.has(id))
+    if (unknown.length > 0) throw Object.assign(new Error(`unknown models for ${provider}: ${unknown.join(', ')}`), { code: 'UNKNOWN_MODEL' })
+    if (typeof saveConfig !== 'function') throw Object.assign(new Error('dsh-model-sync settings are not writable'), { code: 'CONFIG_UNAVAILABLE' })
+
+    const settings = settingsOf(ctx)
+    const section = settings?.get?.(PIAI_NS)
+    const descriptor = descriptorOf(settings, PIAI_NS)
+    if (!section || !descriptor || typeof settings.replace !== 'function') {
+      throw Object.assign(new Error('llm-pi-ai settings are not writable'), { code: 'SETTINGS_UNAVAILABLE' })
+    }
+    const current = normalizeModels(provider, profileOf(settings, provider).models ?? row.models)
+    const nextModels = selectedModels.length
+      ? selectedModels.map((id) => availableById.get(id))
+      : (available.length > 0 ? available : current)
+    const next = catalogPatch(section, provider, nextModels)
+    await settings.replace(PIAI_NS, next, descriptor.revision)
+    const modelSelections = { ...(config.modelSelections ?? {}), [provider]: selectedModels }
+    await saveConfig({ modelSelections })
+    return { provider, selectedModels, models: nextModels, availableModels: available, applied: true }
+  }
+
   return Object.freeze({
     listProviders: providers,
     getProvider: (provider) => providers().find((row) => row.provider === provider) ?? null,
     discover,
     run,
+    setModelSelection,
     status: () => ({ running: Boolean(running), lastRun }),
   })
 }

package/package.json

@@ -1,8 +1,15 @@
 {
   "name": "@goodandready/dsh-model-sync",
-  "version": "0.1.0",
+  "version": "0.2.0",
   "description": "Automatic model catalog synchronization for API-key DeepSeek Harness providers.",
-  "keywords": ["deepseek-harness", "dsh", "dsh-plugin", "models", "api-key", "catalog"],
+  "keywords": [
+    "deepseek-harness",
+    "dsh",
+    "dsh-plugin",
+    "models",
+    "api-key",
+    "catalog"
+  ],
   "repository": {
     "type": "git",
     "url": "https://github.com/GooDAnDReaDY/dsh-model-sync.git"
@@ -19,7 +26,12 @@
     "./package.json": "./package.json",
     "./cordis.patch.yml": "./cordis.patch.yml"
   },
-  "files": ["lib", "cordis.patch.yml", "README.md", "LICENSE"],
+  "files": [
+    "lib",
+    "cordis.patch.yml",
+    "README.md",
+    "LICENSE"
+  ],
   "dsh": {
     "bundle": {
       "patch": "./cordis.patch.yml"