@kal-elsam/kairo-runtime 0.4.2 → 0.5.0

package/src/global/intelligence/router.js

@@ -1,5 +1,7 @@
 import {
   BACKEND_IDS,
+  OPENCODE_GO_DEFAULT_MODEL,
+  OPENCODE_ZEN_DEFAULT_FREE_MODEL,
   OPENROUTER_FREE_MODEL,
   PRIVACY_CLASSES,
   ROUTING_MODES,
@@ -7,36 +9,42 @@ import {
 } from "./types.js";
 import { estimateTokens } from "./context-compiler.js";
 
-const TASK_WEIGHTS = {
-  architecture: "heavy",
-  security: "heavy",
-  review: "heavy",
-  diagnose: "light",
-  explain: "light",
-  scaffold: "light",
-  test: "light",
-  default: "light"
-};
-
 export function classifyTaskWeight(task = "") {
   const text = String(task).toLowerCase();
   if (/architect|adr|design system|security|threat/.test(text)) return "heavy";
   if (/review|refactor complex|debug complex/.test(text)) return "heavy";
   if (/test|scaffold|explain|status|diagnose|lint|format/.test(text)) return "light";
-  return TASK_WEIGHTS.default;
+  return "light";
+}
+
+/** Direct Go/Zen HTTP is eligible only with key + proven auth + available. */
+export function isDirectProviderEligible(backend) {
+  return Boolean(backend?.hasApiKey && backend?.authenticated && backend?.available);
+}
+
+function diagnosticsDecision(reason, estimatedTokens) {
+  return createRoutingDecision({
+    backendId: null,
+    model: null,
+    reason,
+    estimatedTokens,
+    privacyImpact: PRIVACY_CLASSES.UNKNOWN,
+    mode: ROUTING_MODES.DIAGNOSTICS,
+    requiresCloudConsent: false,
+    canInvoke: false,
+    fallback: null
+  });
 }
 
-/**
- * Resolve which backend/model to use.
- * Precedence: user override > Ollama local > OpenRouter free (consent) > diagnostics.
- */
+/** Precedence: CLI → profile → Ollama → Go → Zen → OpenRouter → diagnostics. Go has no Zen invoke fallback. */
 export function resolveRoutingDecision({
   backends = [],
   profile = {},
   contextPack = null,
   task = null,
   cloudConsent = false,
-  tokenBudget = null
+  tokenBudget = null,
+  sessionOverride = null
 } = {}) {
   const estimatedTokens = contextPack?.estimatedTokens
     ?? estimateTokens(contextPack?.systemPrompt ?? "")
@@ -44,24 +52,24 @@ export function resolveRoutingDecision({
 
   const budget = tokenBudget ?? profile.tokenBudget ?? null;
   if (budget != null && estimatedTokens > budget) {
-    return createRoutingDecision({
-      backendId: null,
-      model: null,
-      reason: `Estimated tokens (${estimatedTokens}) exceed budget (${budget}). Compact context or raise tokenBudget.`,
-      estimatedTokens,
-      privacyImpact: PRIVACY_CLASSES.UNKNOWN,
-      mode: ROUTING_MODES.DIAGNOSTICS,
-      requiresCloudConsent: false,
-      canInvoke: false
-    });
+    return diagnosticsDecision(
+      `Estimated tokens (${estimatedTokens}) exceed budget (${budget}). Compact context or raise tokenBudget.`,
+      estimatedTokens
+    );
   }
 
-  const override = resolveUserOverride(profile, backends);
+  const effectiveProfile = applySessionOverride(profile, sessionOverride);
+  const override = resolveUserOverride(effectiveProfile, backends, sessionOverride);
+  if (override?.ineligible) {
+    return diagnosticsDecision(override.reason, estimatedTokens);
+  }
   if (override) {
     return createRoutingDecision({
       backendId: override.backend.id,
       model: override.model,
-      reason: `User override: ${override.backend.id}/${override.model.modelId}`,
+      reason: override.source === "cli"
+        ? `CLI override: ${override.backend.id}/${override.model.modelId}`
+        : `User override: ${override.backend.id}/${override.model.modelId}`,
       estimatedTokens,
       privacyImpact: override.model.privacyClass,
       mode: ROUTING_MODES.USER_OVERRIDE,
@@ -87,18 +95,60 @@ export function resolveRoutingDecision({
     });
   }
 
+  const go = backends.find((entry) => entry.id === BACKEND_IDS.OPENCODE_GO);
+  if (isDirectProviderEligible(go)) {
+    const model = selectOpencodeModel(go.models, OPENCODE_GO_DEFAULT_MODEL, BACKEND_IDS.OPENCODE_GO);
+    return createRoutingDecision({
+      backendId: BACKEND_IDS.OPENCODE_GO,
+      model,
+      reason: cloudConsent
+        ? `OpenCode Go approved: ${model.modelId}`
+        : `OpenCode Go available (${model.modelId}) but cloud consent required before invoke`,
+      estimatedTokens,
+      privacyImpact: PRIVACY_CLASSES.CLOUD,
+      mode: ROUTING_MODES.CLOUD_CONSENT,
+      requiresCloudConsent: true,
+      canInvoke: cloudConsent,
+      fallback: null
+    });
+  }
+  // CLI-configured or broken-key Go must not silently spend Zen/OpenRouter.
+  if (go?.configured || go?.hasApiKey) {
+    return diagnosticsDecision(
+      describeIneligibleCloudStop(go, "OpenCode Go", "Zen/OpenRouter"),
+      estimatedTokens
+    );
+  }
+
+  const zen = backends.find((entry) => entry.id === BACKEND_IDS.OPENCODE_ZEN);
+  if (isDirectProviderEligible(zen)) {
+    const model = selectOpencodeModel(zen.models, OPENCODE_ZEN_DEFAULT_FREE_MODEL, BACKEND_IDS.OPENCODE_ZEN);
+    return createRoutingDecision({
+      backendId: BACKEND_IDS.OPENCODE_ZEN,
+      model,
+      reason: cloudConsent
+        ? `OpenCode Zen approved: ${model.modelId}`
+        : `OpenCode Zen available (${model.modelId}) but cloud consent required before invoke`,
+      estimatedTokens,
+      privacyImpact: PRIVACY_CLASSES.CLOUD,
+      mode: ROUTING_MODES.CLOUD_CONSENT,
+      requiresCloudConsent: true,
+      canInvoke: cloudConsent,
+      fallback: buildOpenRouterFallback(backends, cloudConsent)
+    });
+  }
+  if (zen?.configured || zen?.hasApiKey) {
+    return diagnosticsDecision(
+      describeIneligibleCloudStop(zen, "OpenCode Zen", "OpenRouter"),
+      estimatedTokens
+    );
+  }
+
   const openrouter = backends.find((entry) => entry.id === BACKEND_IDS.OPENROUTER);
   if (openrouter?.hasApiKey) {
     const model = openrouter.models?.find((entry) => entry.modelId === OPENROUTER_FREE_MODEL)
       ?? openrouter.models?.[0]
-      ?? {
-        provider: BACKEND_IDS.OPENROUTER,
-        modelId: OPENROUTER_FREE_MODEL,
-        local: false,
-        privacyClass: PRIVACY_CLASSES.CLOUD,
-        costClass: "free",
-        opaque: true
-      };
+      ?? opaqueCloudModel(BACKEND_IDS.OPENROUTER, OPENROUTER_FREE_MODEL, "free");
 
     return createRoutingDecision({
       backendId: BACKEND_IDS.OPENROUTER,
@@ -115,52 +165,95 @@ export function resolveRoutingDecision({
     });
   }
 
-  return createRoutingDecision({
-    backendId: null,
-    model: null,
-    reason: "No intelligence backend available. Remaining in diagnostics/configuration mode.",
-    estimatedTokens,
-    privacyImpact: PRIVACY_CLASSES.UNKNOWN,
-    mode: ROUTING_MODES.DIAGNOSTICS,
-    requiresCloudConsent: false,
-    canInvoke: false
-  });
+  return diagnosticsDecision(
+    "No intelligence backend available. Remaining in diagnostics/configuration mode.",
+    estimatedTokens
+  );
+}
+
+function applySessionOverride(profile, sessionOverride) {
+  if (!sessionOverride) return profile;
+  return {
+    ...profile,
+    preferredBackend: sessionOverride.preferredBackend ?? profile.preferredBackend,
+    preferredModel: sessionOverride.preferredModel ?? profile.preferredModel
+  };
 }
 
-function resolveUserOverride(profile, backends) {
+function resolveUserOverride(profile, backends, sessionOverride) {
   const preferredBackend = profile.preferredBackend ?? null;
   const preferredModel = profile.preferredModel ?? null;
   if (!preferredBackend && !preferredModel) return null;
 
+  const source = sessionOverride?.preferredBackend || sessionOverride?.preferredModel
+    ? "cli"
+    : "profile";
+  const label = source === "cli" ? "CLI" : "User";
+  const reject = (reason) => ({
+    ineligible: true,
+    reason: `${reason} Remaining in diagnostics; automatic routing was not applied.`
+  });
+
   if (preferredBackend) {
-    const backend = backends.find((entry) => entry.id === preferredBackend);
-    if (!backend || (!backend.available && !backend.hasApiKey && !backend.detected)) {
-      return null;
+    const backend = backends.find((entry) => entry.id === preferredBackend) ?? null;
+    if (!isOverrideEligible(backend)) {
+      return reject(`${label} override ${preferredBackend} is not eligible for invoke.`);
     }
-    const model = (backend.models ?? []).find((entry) => entry.modelId === preferredModel)
-      ?? backend.models?.[0]
-      ?? (preferredModel
-        ? {
-          provider: preferredBackend,
-          modelId: preferredModel,
-          local: backend.id === BACKEND_IDS.OLLAMA,
-          privacyClass: backend.id === BACKEND_IDS.OLLAMA ? PRIVACY_CLASSES.LOCAL : PRIVACY_CLASSES.CLOUD,
-          costClass: "unknown",
-          opaque: true
-        }
-        : null);
-    if (!model) return null;
-    return { backend, model };
+    if (preferredModel) {
+      const exact = (backend.models ?? []).find((entry) => entry.modelId === preferredModel);
+      if (!exact) {
+        return reject(
+          `${label} override model ${preferredModel} was not found on ${preferredBackend}.`
+        );
+      }
+      return { backend, model: exact, source };
+    }
+    const model = backend.models?.[0] ?? null;
+    if (!model) return reject(`${label} override ${preferredBackend} has no usable model.`);
+    return { backend, model, source };
   }
 
-  if (preferredModel) {
-    for (const backend of backends) {
-      const model = (backend.models ?? []).find((entry) => entry.modelId === preferredModel);
-      if (model) return { backend, model };
+  for (const backend of backends) {
+    const model = (backend.models ?? []).find((entry) => entry.modelId === preferredModel);
+    if (!model) continue;
+    if (!isOverrideEligible(backend)) {
+      return reject(
+        `${label} override model ${preferredModel} resolved to ineligible backend ${backend.id}.`
+      );
     }
+    return { backend, model, source };
   }
+  return reject(`${label} override model ${preferredModel} was not found.`);
+}
+
+/** Runtime is exempt from /models auth; Go/Zen require proven authentication. */
+function isOverrideEligible(backend) {
+  if (!backend) return false;
+  if (backend.id === BACKEND_IDS.OPENCODE) return Boolean(backend.available || backend.detected);
+  if (backend.id === BACKEND_IDS.OLLAMA) return Boolean(backend.available);
+  if (backend.id === BACKEND_IDS.OPENCODE_GO || backend.id === BACKEND_IDS.OPENCODE_ZEN) {
+    return isDirectProviderEligible(backend);
+  }
+  if (backend.id === BACKEND_IDS.OPENROUTER) return Boolean(backend.hasApiKey);
+  return Boolean(backend.available || backend.hasApiKey || backend.detected);
+}
+
+function describeIneligibleCloudStop(backend, label, blockedFallback) {
+  const detail = backend?.error
+    ?? backend?.recommendation
+    ?? "configured but not authenticated/available";
+  return `${label} ${detail}. Invoke blocked (canInvoke=false); ${blockedFallback} fallback suppressed.`;
+}
 
-  return null;
+function opaqueCloudModel(provider, modelId, costClass) {
+  return {
+    provider,
+    modelId,
+    local: false,
+    privacyClass: PRIVACY_CLASSES.CLOUD,
+    costClass,
+    opaque: true
+  };
 }
 
 function selectLocalModel(models, task) {
@@ -171,6 +264,14 @@ function selectLocalModel(models, task) {
   return models[0];
 }
 
+function selectOpencodeModel(models, preferredId, provider) {
+  const list = Array.isArray(models) ? models : [];
+  return list.find((entry) => entry.modelId === preferredId)
+    ?? list.find((entry) => entry.costClass === "free")
+    ?? list[0]
+    ?? opaqueCloudModel(provider, preferredId, provider === BACKEND_IDS.OPENCODE_GO ? "paid" : "unknown");
+}
+
 function buildLocalFallback(backends) {
   const ollama = backends.find((entry) => entry.id === BACKEND_IDS.OLLAMA && entry.available);
   if (!ollama?.models?.length) return null;
@@ -181,6 +282,23 @@ function buildLocalFallback(backends) {
 }
 
 function buildCloudFallback(backends, cloudConsent) {
+  const go = backends.find((entry) => entry.id === BACKEND_IDS.OPENCODE_GO);
+  if (isDirectProviderEligible(go)) {
+    return {
+      backendId: BACKEND_IDS.OPENCODE_GO,
+      modelId: go.models?.[0]?.modelId ?? OPENCODE_GO_DEFAULT_MODEL,
+      requiresConsent: !cloudConsent
+    };
+  }
+  if (go?.configured || go?.hasApiKey) return null;
+  const zen = backends.find((entry) => entry.id === BACKEND_IDS.OPENCODE_ZEN);
+  if (zen?.configured || zen?.hasApiKey) {
+    if (!isDirectProviderEligible(zen)) return null;
+  }
+  return buildOpenRouterFallback(backends, cloudConsent);
+}
+
+function buildOpenRouterFallback(backends, cloudConsent) {
   const openrouter = backends.find((entry) => entry.id === BACKEND_IDS.OPENROUTER && entry.hasApiKey);
   if (!openrouter) return null;
   return {

package/src/global/intelligence/transport-registry.js

@@ -0,0 +1,147 @@
+import { TRANSPORT_KINDS } from "./types.js";
+
+/**
+ * Explicit transport compatibility for OpenCode Go / Zen.
+ * Never infer protocol from model name — only this registry decides.
+ */
+
+const GO_DIRECT = {
+  "glm-5.2": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "glm-5.1": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "kimi-k2.7-code": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "kimi-k2.6": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "deepseek-v4-pro": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "deepseek-v4-flash": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "mimo-v2.5": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "mimo-v2.5-pro": TRANSPORT_KINDS.CHAT_COMPLETIONS
+};
+
+const GO_RUNTIME = {
+  "minimax-m3": TRANSPORT_KINDS.RUNTIME,
+  "minimax-m2.7": TRANSPORT_KINDS.RUNTIME,
+  "minimax-m2.5": TRANSPORT_KINDS.RUNTIME,
+  "qwen3.7-max": TRANSPORT_KINDS.RUNTIME,
+  "qwen3.7-plus": TRANSPORT_KINDS.RUNTIME,
+  "qwen3.6-plus": TRANSPORT_KINDS.RUNTIME
+};
+
+const ZEN_RESPONSES = {
+  "gpt-5.6-sol": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.6-terra": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.6-luna": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.5": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.5-pro": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.4": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.4-pro": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.4-mini": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.4-nano": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.3-codex": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.3-codex-spark": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.2": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.2-codex": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.1": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.1-codex": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.1-codex-max": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5.1-codex-mini": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5-codex": TRANSPORT_KINDS.RESPONSES,
+  "gpt-5-nano": TRANSPORT_KINDS.RESPONSES
+};
+
+const ZEN_CHAT = {
+  "deepseek-v4-pro": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "deepseek-v4-flash": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "minimax-m3": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "minimax-m2.7": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "minimax-m2.5": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "glm-5.2": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "glm-5.1": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "glm-5": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "kimi-k2.5": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "kimi-k2.6": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "kimi-k2.7-code": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "grok-4.5": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "grok-build-0.1": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "big-pickle": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "mimo-v2.5-free": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "north-mini-code-free": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "nemotron-3-ultra-free": TRANSPORT_KINDS.CHAT_COMPLETIONS,
+  "deepseek-v4-flash-free": TRANSPORT_KINDS.CHAT_COMPLETIONS
+};
+
+const ZEN_RUNTIME = {
+  "claude-fable-5": TRANSPORT_KINDS.RUNTIME,
+  "claude-opus-4-8": TRANSPORT_KINDS.RUNTIME,
+  "claude-opus-4-7": TRANSPORT_KINDS.RUNTIME,
+  "claude-opus-4-6": TRANSPORT_KINDS.RUNTIME,
+  "claude-opus-4-5": TRANSPORT_KINDS.RUNTIME,
+  "claude-sonnet-5": TRANSPORT_KINDS.RUNTIME,
+  "claude-sonnet-4-6": TRANSPORT_KINDS.RUNTIME,
+  "claude-sonnet-4-5": TRANSPORT_KINDS.RUNTIME,
+  "claude-haiku-4-5": TRANSPORT_KINDS.RUNTIME,
+  "gemini-3.5-flash": TRANSPORT_KINDS.RUNTIME,
+  "gemini-3.1-pro": TRANSPORT_KINDS.RUNTIME,
+  "gemini-3-flash": TRANSPORT_KINDS.RUNTIME,
+  "qwen3.7-max": TRANSPORT_KINDS.RUNTIME,
+  "qwen3.7-plus": TRANSPORT_KINDS.RUNTIME,
+  "qwen3.6-plus": TRANSPORT_KINDS.RUNTIME,
+  "qwen3.5-plus": TRANSPORT_KINDS.RUNTIME
+};
+
+export const OPENCODE_GO_TRANSPORTS = Object.freeze({ ...GO_DIRECT, ...GO_RUNTIME });
+export const OPENCODE_ZEN_TRANSPORTS = Object.freeze({
+  ...ZEN_RESPONSES,
+  ...ZEN_CHAT,
+  ...ZEN_RUNTIME
+});
+
+export function resolveOpencodeTransport(product, modelId) {
+  const id = normalizeModelId(modelId);
+  if (!id) return null;
+  if (product === "go") return OPENCODE_GO_TRANSPORTS[id] ?? null;
+  if (product === "zen") return OPENCODE_ZEN_TRANSPORTS[id] ?? null;
+  return null;
+}
+
+export function isDirectTransport(transport) {
+  return transport === TRANSPORT_KINDS.CHAT_COMPLETIONS
+    || transport === TRANSPORT_KINDS.RESPONSES;
+}
+
+export function listRegisteredModelIds(product, { directOnly = false, runtimeOnly = false } = {}) {
+  const table = product === "go" ? OPENCODE_GO_TRANSPORTS : OPENCODE_ZEN_TRANSPORTS;
+  return Object.entries(table)
+    .filter(([, transport]) => {
+      if (directOnly) return isDirectTransport(transport);
+      if (runtimeOnly) return transport === TRANSPORT_KINDS.RUNTIME;
+      return true;
+    })
+    .map(([modelId]) => modelId);
+}
+
+export function normalizeModelId(modelId) {
+  if (!modelId) return null;
+  const raw = String(modelId).trim();
+  if (!raw) return null;
+  const slash = raw.lastIndexOf("/");
+  return slash >= 0 ? raw.slice(slash + 1) : raw;
+}
+
+export function toRuntimeModelRef(product, modelId) {
+  const id = normalizeModelId(modelId);
+  if (!id) return null;
+  return product === "go" ? `opencode-go/${id}` : `opencode/${id}`;
+}
+
+export function resolveRuntimeProduct(modelId) {
+  const raw = String(modelId ?? "");
+  if (raw.startsWith("opencode-go/")) return "go";
+  if (raw.startsWith("opencode/")) return "zen";
+  if (OPENCODE_GO_TRANSPORTS[normalizeModelId(raw)] === TRANSPORT_KINDS.RUNTIME) {
+    return OPENCODE_ZEN_TRANSPORTS[normalizeModelId(raw)] === TRANSPORT_KINDS.RUNTIME
+      ? "zen"
+      : "go";
+  }
+  if (OPENCODE_ZEN_TRANSPORTS[normalizeModelId(raw)] === TRANSPORT_KINDS.RUNTIME) return "zen";
+  return null;
+}

package/src/global/intelligence/types.js

@@ -1,9 +1,26 @@
 export const BACKEND_IDS = {
   OLLAMA: "ollama",
   OPENROUTER: "openrouter",
+  OPENCODE_GO: "opencode-go",
+  OPENCODE_ZEN: "opencode-zen",
+  OPENCODE: "opencode",
   CUSTOM: "custom"
 };
 
+export const TRANSPORT_KINDS = {
+  CHAT_COMPLETIONS: "chat_completions",
+  RESPONSES: "responses",
+  RUNTIME: "runtime"
+};
+
+export const OPENCODE_API_KEY_ENV = "OPENCODE_API_KEY";
+
+export const OPENCODE_GO_BASE_URL = "https://opencode.ai/zen/go/v1";
+export const OPENCODE_ZEN_BASE_URL = "https://opencode.ai/zen/v1";
+
+export const OPENCODE_GO_DEFAULT_MODEL = "kimi-k2.7-code";
+export const OPENCODE_ZEN_DEFAULT_FREE_MODEL = "big-pickle";
+
 export const COST_CLASSES = {
   FREE: "free",
   LOCAL: "local",
@@ -38,7 +55,8 @@ export function createModelDescriptor({
   tools = false,
   reasoning = false,
   rateLimits = null,
-  opaque = false
+  opaque = false,
+  transport = null
 }) {
   return {
     provider,
@@ -50,7 +68,8 @@ export function createModelDescriptor({
     tools,
     reasoning,
     rateLimits,
-    opaque
+    opaque,
+    transport
   };
 }