@link-assistant/agent 0.26.14 → 0.27.0

package/README.md

@@ -24,7 +24,7 @@ This is an MVP implementation of an OpenCode-compatible CLI agent, focused on ma
 
 - ✅ **JSON Input/Output**: Compatible with `opencode run --format json`
 - ✅ **Plain Text Input**: Also accepts plain text messages (auto-converted to JSON format)
-- ✅ **Flexible Model Selection**: Defaults to free Kilo Nemotron 3 Super (Kilo authentication recommended), supports [OpenCode Zen](https://opencode.ai/docs/zen/), [Formal AI](../docs/formal-ai.md), [Claude OAuth](../docs/claude-oauth.md), [Groq](../docs/groq.md), and [OpenRouter](../docs/openrouter.md) providers
+- ✅ **Flexible Model Selection**: Defaults to free Kilo Nemotron 3 Super (Kilo authentication recommended), supports every [models.dev](https://models.dev) provider OpenCode supports ([full list](../docs/providers.md)), OpenCode's subscription logins, [gpt4free](../docs/gpt4free.md), Pollinations, local servers, [Formal AI](../docs/formal-ai.md) and [Claude OAuth](../docs/claude-oauth.md), with [live model discovery](../docs/model-discovery.md)
 - ✅ **No Restrictions**: Fully unrestricted file system and command execution access (no sandbox)
 - ✅ **Minimal Footprint**: Built with Bun.sh for maximum efficiency
 - ✅ **Full Tool Support**: 13 tools including websearch, codesearch, batch - all enabled by default
@@ -735,7 +735,7 @@ This agent is **exclusively built for Bun** for the following reasons:
 4. **Minimalism**: Single runtime target keeps the codebase simple
 5. **Bun Ecosystem**: Leverages Bun-specific features and optimizations
 
-**Not supporting Node.js or Deno is intentional** to keep the project focused and minimal. If you need Node.js/Deno compatibility, consider using [OpenCode](https://github.com/sst/opencode) instead.
+**Not supporting Node.js or Deno is intentional** to keep the project focused and minimal. If you need Node.js/Deno compatibility, consider using [OpenCode](https://github.com/anomalyco/opencode) instead.
 
 ## Project Structure
 
@@ -753,7 +753,7 @@ js/
 
 ## Architecture
 
-This agent-cli reproduces the core architecture of [OpenCode](https://github.com/sst/opencode)'s `run --format json` command:
+This agent-cli reproduces the core architecture of [OpenCode](https://github.com/anomalyco/opencode)'s `run --format json` command:
 
 - **Streaming JSON Events**: Instead of single responses, outputs real-time event stream
 - **Event Types**: `tool_use`, `text`, `step_start`, `step_finish`, `error`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@link-assistant/agent",
-  "version": "0.26.14",
+  "version": "0.27.0",
   "description": "A minimal, public domain AI CLI agent compatible with OpenCode's JSON interface. Bun-only runtime.",
   "main": "src/index.js",
   "type": "module",
@@ -51,19 +51,28 @@
     "LICENSE"
   ],
   "dependencies": {
-    "@agentclientprotocol/sdk": "^1.8.0",
-    "@ai-sdk/amazon-bedrock": "^5.0.113",
-    "@ai-sdk/anthropic": "^4.0.78",
-    "@ai-sdk/azure": "^4.0.99",
-    "@ai-sdk/google": "^4.0.93",
-    "@ai-sdk/google-vertex": "^5.0.109",
-    "@ai-sdk/groq": "^4.0.59",
-    "@ai-sdk/mcp": "^2.0.73",
-    "@ai-sdk/mistral": "^4.0.62",
-    "@ai-sdk/openai": "^4.0.91",
-    "@ai-sdk/openai-compatible": "^3.0.67",
-    "@ai-sdk/provider": "^4.0.26",
-    "@ai-sdk/xai": "^5.0.20",
+    "@agentclientprotocol/sdk": "^2.0.1",
+    "@ai-sdk/alibaba": "^2.0.74",
+    "@ai-sdk/amazon-bedrock": "^5.0.122",
+    "@ai-sdk/anthropic": "^4.0.86",
+    "@ai-sdk/azure": "^4.0.108",
+    "@ai-sdk/cerebras": "^3.0.76",
+    "@ai-sdk/cohere": "^4.0.67",
+    "@ai-sdk/deepinfra": "^3.0.76",
+    "@ai-sdk/deepseek": "^3.0.71",
+    "@ai-sdk/fireworks": "^3.0.79",
+    "@ai-sdk/gateway": "^4.0.122",
+    "@ai-sdk/google": "^4.0.103",
+    "@ai-sdk/google-vertex": "^5.0.120",
+    "@ai-sdk/groq": "^4.0.68",
+    "@ai-sdk/mcp": "^2.0.82",
+    "@ai-sdk/mistral": "^4.0.70",
+    "@ai-sdk/openai": "^4.0.100",
+    "@ai-sdk/openai-compatible": "^3.0.76",
+    "@ai-sdk/perplexity": "^5.0.18",
+    "@ai-sdk/provider": "^4.0.32",
+    "@ai-sdk/togetherai": "^3.0.77",
+    "@ai-sdk/xai": "^5.0.28",
     "@clack/prompts": "^1.8.1",
     "@hono/standard-validator": "^0.4.0",
     "@hono/zod-validator": "^0.9.1",
@@ -71,53 +80,54 @@
     "@octokit/graphql": "^9.0.5",
     "@octokit/rest": "^22.0.1",
     "@openauthjs/openauth": "^0.4.3",
-    "@opencode-ai/sdk": "^1.19.0",
+    "@opencode-ai/sdk": "^1.19.4",
     "@openrouter/ai-sdk-provider": "^3.1.0",
-    "@opentui/core": "0.6.1",
-    "@opentui/solid": "0.6.1",
+    "@opentui/core": "^0.6.6",
+    "@opentui/solid": "^0.6.6",
     "@parcel/watcher": "^2.6.0",
     "@solid-primitives/event-bus": "^1.1.4",
-    "@standard-community/standard-json": "^0.3.6",
-    "@standard-community/standard-openapi": "^0.2.10",
-    "@zip.js/zip.js": "^2.23.0",
-    "ai": "^7.0.137",
-    "chokidar": "^5.0.0",
+    "@standard-community/standard-json": "^0.3.7",
+    "@standard-community/standard-openapi": "^0.2.11",
+    "@zip.js/zip.js": "^2.24.0",
+    "ai": "^7.0.149",
+    "chokidar": "^6.0.0",
     "clipboardy": "^5.3.2",
-    "command-stream": "^2.3.0",
+    "command-stream": "^2.4.0",
     "decimal.js": "^10.6.0",
     "diff": "^9.0.0",
     "fuzzysort": "^4.0.2",
     "glob": "^13.0.6",
-    "gpt-tokenizer": "^4.0.0",
+    "google-auth-library": "^11.3.1",
+    "gpt-tokenizer": "^4.1.0",
     "gray-matter": "^4.0.3",
     "hono": "^4.13.13",
-    "hono-openapi": "^1.3.5",
-    "ignore": "^7.0.12",
+    "hono-openapi": "^1.5.0",
+    "ignore": "^7.0.13",
     "jsonc-parser": "^3.3.1",
     "lino-arguments": "^0.3.0",
     "lino-objects-codec": "^0.9.2",
     "log-lazy": "^1.0.4",
     "minimatch": "^10.2.6",
-    "remeda": "^2.51.0",
+    "remeda": "^2.53.0",
     "solid-js": "1.9.12",
     "strip-ansi": "^7.2.0",
     "test-anywhere": "^0.9.1",
     "tree-sitter-bash": "^0.25.1",
     "turndown": "^7.2.4",
     "ulid": "^3.0.2",
-    "vscode-jsonrpc": "^9.0.3",
-    "vscode-languageserver-types": "^3.18.4",
+    "vscode-jsonrpc": "^10.0.0",
+    "vscode-languageserver-types": "^3.18.5",
     "web-tree-sitter": "0.25.10",
     "xdg-basedir": "^5.1.0",
     "yargs": "^18.2.0",
-    "zod": "^4.6.6"
+    "zod": "^4.6.7"
   },
   "devDependencies": {
     "@changesets/cli": "^3.0.3",
     "@eslint/js": "^10.0.1",
-    "eslint": "^10.12.0",
+    "eslint": "^10.13.0",
     "eslint-config-prettier": "^10.1.8",
-    "eslint-plugin-prettier": "^5.5.6",
+    "eslint-plugin-prettier": "^5.5.7",
     "eslint-plugin-promise": "^7.3.0",
     "husky": "^9.1.7",
     "lint-staged": "^17.6.0",
@@ -138,7 +148,7 @@
   "allowScripts": {
     "@parcel/watcher@2.6.0": true,
     "tree-sitter-bash@0.25.1": true,
-    "node-pty@1.2.0-beta.15": true
+    "node-pty@1.1.0": true
   },
   "overrides": {
     "seroval": "^1.6.9",

package/src/agent/agent.ts

@@ -1,7 +1,7 @@
 import { Config } from '../config/file-config';
 import z from 'zod';
 import { Provider } from '../provider/provider';
-import { generateObject } from 'ai';
+import { generateText, Output } from 'ai';
 import PROMPT_GENERATE from './generate.txt';
 import { SystemPrompt } from '../session/system';
 import { Instance } from '../project/instance';
@@ -136,7 +136,10 @@ export namespace Agent {
     const system = SystemPrompt.header(defaultModel.providerID);
     system.push(PROMPT_GENERATE);
     const existing = await list();
-    const result = await generateObject({
+    // generateObject is deprecated in AI SDK 7 and printed a
+    // DeprecationWarning on every call (#337); structured output now goes
+    // through generateText's `output` setting.
+    const result = await generateText({
       temperature: 0.3,
       // The system prompt belongs in `instructions`, not in `prompt`: the AI SDK
       // warns that a system message inside the prompt enables prompt
@@ -152,13 +155,15 @@ export namespace Agent {
         },
       ],
       model: model.language,
-      schema: z.object({
-        identifier: z.string(),
-        whenToUse: z.string(),
-        systemPrompt: z.string(),
+      output: Output.object({
+        schema: z.object({
+          identifier: z.string(),
+          whenToUse: z.string(),
+          systemPrompt: z.string(),
+        }),
       }),
     });
-    return result.object;
+    return result.output;
   }
 }
 

package/src/auth/azure-login.ts

@@ -0,0 +1,241 @@
+import { Auth } from './index';
+import type { AuthPlugin } from './plugins';
+import { Log } from '../util/log';
+
+/**
+ * Microsoft Entra ID login for Azure OpenAI / AI Services through the Azure
+ * CLI session, ported from OpenCode's Azure plugin
+ * (https://github.com/anomalyco/opencode,
+ * packages/core/src/plugin/provider/azure.ts) (#334).
+ *
+ * Like OpenCode, no token is stored: `agent auth login` remembers the
+ * resource name, and every request mints (and caches) a bearer token with
+ * `az account get-access-token` for the scope of the target URL.
+ */
+export namespace AzureLogin {
+  const log = Log.create({ service: 'azure-login' });
+
+  export const COGNITIVE_SCOPE = 'https://cognitiveservices.azure.com/.default';
+  export const FOUNDRY_SCOPE = 'https://ai.azure.com/.default';
+  /** Stored in `refresh` to mark an Azure CLI login. */
+  export const CLI_MARKER = 'azure-cli';
+  /**
+   * `@ai-sdk/azure` insists on an API key; requests replace the resulting
+   * `api-key` header with the Entra bearer token.
+   */
+  export const PLACEHOLDER_KEY = 'azure-entra-id';
+  // A resource name becomes a hostname label, so nothing else is accepted.
+  export const RESOURCE_PATTERN = /^[a-zA-Z0-9][a-zA-Z0-9-]*$/;
+  const REFRESH_MARGIN_MS = 5 * 60_000;
+  const TIMEOUT_MS = 10_000;
+
+  export type Run = (args: string[]) => Promise<string>;
+
+  /** Run the Azure CLI and return stdout; fails with its stderr. */
+  export const runAz: Run = async (args) => {
+    const proc = Bun.spawn(['az', ...args], {
+      stdin: 'ignore',
+      stdout: 'pipe',
+      stderr: 'pipe',
+      env: process.env,
+    });
+    const timer = setTimeout(() => proc.kill(), TIMEOUT_MS);
+    try {
+      const [stdout, stderr, code] = await Promise.all([
+        new Response(proc.stdout).text(),
+        new Response(proc.stderr).text(),
+        proc.exited,
+      ]);
+      if (code !== 0) {
+        throw new Error(
+          `az ${args.slice(0, 2).join(' ')} failed: ${stderr.trim() || `exit ${code}`}`
+        );
+      }
+      return stdout;
+    } finally {
+      clearTimeout(timer);
+    }
+  };
+
+  export function parseToken(stdout: string): {
+    access: string;
+    expires: number;
+  } {
+    const data = JSON.parse(stdout);
+    if (typeof data?.accessToken !== 'string' || !data.accessToken) {
+      throw new Error('Azure CLI returned no access token');
+    }
+    const expires =
+      typeof data.expires_on === 'number'
+        ? data.expires_on * 1000
+        : Date.parse(data.expiresOn ?? '');
+    if (!Number.isFinite(expires)) {
+      throw new Error('Azure CLI returned an invalid token expiration');
+    }
+    return { access: data.accessToken, expires };
+  }
+
+  /** Token getter with a per-scope cache refreshed 5 minutes early. */
+  export function tokenSource(
+    run: Run = runAz,
+    now: () => number = Date.now
+  ): (scope: string) => Promise<string> {
+    const cache = new Map<string, { access: string; expires: number }>();
+    const pending = new Map<string, Promise<string>>();
+    return (scope) => {
+      const cached = cache.get(scope);
+      if (cached && cached.expires - now() > REFRESH_MARGIN_MS) {
+        return Promise.resolve(cached.access);
+      }
+      const inflight = pending.get(scope);
+      if (inflight) return inflight;
+      const request = run([
+        'account',
+        'get-access-token',
+        '--scope',
+        scope,
+        '--output',
+        'json',
+      ])
+        .then((stdout) => {
+          const token = parseToken(stdout);
+          cache.set(scope, token);
+          return token.access;
+        })
+        .finally(() => pending.delete(scope));
+      pending.set(scope, request);
+      return request;
+    };
+  }
+
+  /** Foundry project endpoints use their own audience, like OpenCode. */
+  export function scopeFor(url: string): string {
+    const target = new URL(url);
+    return target.hostname.endsWith('.services.ai.azure.com') &&
+      !target.pathname.startsWith('/models')
+      ? FOUNDRY_SCOPE
+      : COGNITIVE_SCOPE;
+  }
+
+  /** Swap the `api-key` header for an Entra bearer token. */
+  export function entraFetch(
+    token: (scope: string) => Promise<string>,
+    base: typeof fetch = fetch
+  ): typeof fetch {
+    return (async (input: any, init?: RequestInit) => {
+      const url =
+        typeof input === 'string'
+          ? input
+          : input instanceof URL
+            ? input.href
+            : input.url;
+      const headers = new Headers(
+        init?.headers ?? (input instanceof Request ? input.headers : undefined)
+      );
+      headers.delete('api-key');
+      headers.delete('x-api-key');
+      headers.set('authorization', `Bearer ${await token(scopeFor(url))}`);
+      return base(input, { ...init, headers });
+    }) as typeof fetch;
+  }
+
+  export function isCliLogin(info: Auth.Info | undefined): boolean {
+    return info?.type === 'oauth' && info.refresh === CLI_MARKER;
+  }
+
+  /**
+   * SDK options for a stored Azure CLI login, or undefined if there is none.
+   * Used by the `azure` custom loader in provider.ts.
+   */
+  export async function options(
+    info?: Auth.Info,
+    token: (scope: string) => Promise<string> = defaultToken()
+  ): Promise<Record<string, any> | undefined> {
+    if (!isCliLogin(info) || info?.type !== 'oauth') return undefined;
+    const resourceName =
+      info.enterpriseUrl || process.env['AZURE_RESOURCE_NAME'];
+    if (!resourceName || !RESOURCE_PATTERN.test(resourceName)) {
+      log.warn(() => ({
+        message: 'Azure CLI login has no valid resource name, ignoring it',
+      }));
+      return undefined;
+    }
+    return {
+      resourceName,
+      apiKey: PLACEHOLDER_KEY,
+      fetch: entraFetch(token),
+    };
+  }
+
+  let shared: ((scope: string) => Promise<string>) | undefined;
+  function defaultToken() {
+    return (shared ??= tokenSource());
+  }
+
+  export function makePlugin(run: Run = runAz): AuthPlugin {
+    return {
+      provider: 'azure',
+      methods: [
+        {
+          label: 'Microsoft Entra ID (Azure CLI)',
+          type: 'oauth',
+          prompts: [
+            {
+              type: 'text',
+              key: 'resourceName',
+              message: 'Azure OpenAI or AI Services resource name',
+              placeholder: process.env['AZURE_RESOURCE_NAME'] || 'my-models',
+              validate: (value) =>
+                !value && process.env['AZURE_RESOURCE_NAME']
+                  ? undefined
+                  : RESOURCE_PATTERN.test(value)
+                    ? undefined
+                    : 'Use letters, digits and hyphens only',
+            },
+          ],
+          async authorize(inputs = {}) {
+            const resourceName =
+              inputs['resourceName']?.trim() ||
+              process.env['AZURE_RESOURCE_NAME']?.trim() ||
+              '';
+            if (!RESOURCE_PATTERN.test(resourceName)) {
+              log.error(() => ({ message: 'invalid Azure resource name' }));
+              return { type: 'failed' as const };
+            }
+            return {
+              url: '',
+              instructions:
+                'Using your Azure CLI session (`az login`) for Microsoft Entra ID.',
+              method: 'auto' as const,
+              async callback() {
+                try {
+                  // Prove the CLI session works before saving the login.
+                  await tokenSource(run)(COGNITIVE_SCOPE);
+                } catch (error) {
+                  log.error(() => ({
+                    message:
+                      'Azure CLI token request failed; install the Azure CLI and run `az login`',
+                    error:
+                      error instanceof Error ? error.message : String(error),
+                  }));
+                  return { type: 'failed' as const };
+                }
+                return {
+                  type: 'success' as const,
+                  provider: 'azure',
+                  refresh: CLI_MARKER,
+                  access: '',
+                  expires: 0,
+                  enterpriseUrl: resourceName,
+                };
+              },
+            };
+          },
+        },
+        { label: 'Manually enter API Key', type: 'api' },
+      ],
+    };
+  }
+
+  export const Plugin = makePlugin();
+}

package/src/auth/plugins.ts

@@ -4,6 +4,8 @@ import * as net from 'node:net';
 import { Auth } from './index';
 import { Log } from '../util/log';
 import { createVerboseFetch } from '../util/verbose-fetch';
+import { ProviderLogins } from './provider-logins';
+import { AzureLogin } from './azure-login';
 
 /**
  * Auth Plugins Module
@@ -78,6 +80,8 @@ export interface AuthPlugin {
     apiKey?: string;
     baseURL?: string;
     fetch?: typeof fetch;
+    /** Extra SDK options, e.g. GitLab's `instanceUrl`. */
+    options?: Record<string, any>;
   }>;
 }
 
@@ -2819,6 +2823,11 @@ const plugins: Record<string, AuthPlugin> = {
   'qwen-coder': QwenPlugin,
   alibaba: AlibabaPlugin,
   kilo: KiloPlugin,
+  xai: ProviderLogins.XAIPlugin,
+  poe: ProviderLogins.PoePlugin,
+  digitalocean: ProviderLogins.DigitalOceanPlugin,
+  gitlab: ProviderLogins.GitLabPlugin,
+  azure: AzureLogin.Plugin,
 };
 
 /**