@mars_ai/marscli 2.0.12 → 2.0.14

package/dist/extensions/marsai/index.js

@@ -0,0 +1,179 @@
+/**
+ * The MarsAI provider as an extension: the only provider MARS CLI registers.
+ *
+ * Device-flow OAuth (machine-bound), env/stored API key, a live model catalog
+ * from `GET /v1/models`, and the `/mars` account command.
+ */
+import { readFileSync } from "node:fs";
+import { getAuthPath } from "../../config.js";
+import { resolveConfigValue } from "../../core/resolve-config-value.js";
+import { marsAccountInfo, marsApiKey, marsDeviceLogin, marsFetchModels, marsRefreshToken, marsServer, } from "./oauth.js";
+import { createWebFetchToolDefinition, createWebSearchToolDefinition } from "./web-tools.js";
+const PROVIDER_ID = "marsai";
+/** Static list shown before the first successful catalog fetch. The id must be a real
+ * gateway id — the wire sends it verbatim and `marsai-auto` does not exist upstream. */
+const FALLBACK_MODEL_ID = "marsai/auto-free";
+const ZERO_COST = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };
+const DEFAULT_CONTEXT_WINDOW = 128_000;
+const MAX_OUTPUT_TOKENS = 8192;
+/** Map one gateway catalog row; the server bills, so all cost rates are zero. */
+function marsModel(row) {
+    // Prefer the gateway label; fall back to the id without the `marsai/` prefix.
+    // "(free)" marks access unless the name already carries it.
+    const name = row.label ?? row.id.replace(/^marsai\//, "");
+    const markedFree = row.access === "free" && !/free$/i.test(name);
+    return {
+        id: row.id,
+        name: markedFree ? `${name} (free)` : name,
+        input: ["text", "image"],
+        cost: ZERO_COST,
+        // ponytail: reasoning stays false until the gateway reports capabilities;
+        // upgrade path: map a capability field from `GET /v1/models` when it exists.
+        reasoning: false,
+        contextWindow: row.context_tokens ?? DEFAULT_CONTEXT_WINDOW,
+        maxTokens: MAX_OUTPUT_TOKENS,
+    };
+}
+const FALLBACK_MODEL = marsModel({ id: FALLBACK_MODEL_ID, label: "MarsAI Auto" });
+/**
+ * Fetch the live gateway catalog. Every empty result keeps the fallback: whatever is
+ * returned is published as the provider's whole model list, so an empty list would
+ * leave MARS with no model at all.
+ */
+async function refreshMarsModels(context) {
+    if (!context.allowNetwork || !context.credential)
+        return [FALLBACK_MODEL];
+    const token = context.credential.type === "oauth" ? marsApiKey(context.credential) : context.credential.key;
+    if (!token)
+        return [FALLBACK_MODEL];
+    const rows = await marsFetchModels(`${marsServer()}/v1`, token, context.signal);
+    return rows.length === 0 ? [FALLBACK_MODEL] : rows.map(marsModel);
+}
+/** Read the local `auth.json` entry for MarsAI; the file is a trusted-but-mutable local store. */
+function readStoredCredential() {
+    try {
+        const parsed = JSON.parse(readFileSync(getAuthPath(), "utf8"));
+        if (typeof parsed !== "object" || parsed === null)
+            return undefined;
+        const credential = parsed[PROVIDER_ID];
+        return typeof credential === "object" && credential !== null
+            ? credential
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+const FREE_MODEL_CACHE_MS = 5 * 60 * 1000;
+let freeModelCache;
+/** The stored credential entry must carry a usable key or OAuth grant; anything else is treated as absent. */
+function storedToken(stored) {
+    if (!stored || (stored.type !== "oauth" && stored.type !== "api_key" && stored.type !== "api-key"))
+        return undefined;
+    if (stored.type === "oauth") {
+        const token = marsApiKey(stored);
+        return token || undefined;
+    }
+    if (typeof stored.apiKey !== "string" || stored.apiKey === "")
+        return undefined;
+    return resolveConfigValue(stored.apiKey);
+}
+/**
+ * Best free-tier catalog id for cheap delegated work (subagents). `auto-free` is the
+ * gateway's own router and wins when present; otherwise the least-loaded free row, then
+ * the plain fallback. `MARSAI_SUBAGENT_MODEL` pins an explicit id. Cached briefly per
+ * credential: this runs on every subagent dispatch and the catalog barely moves.
+ */
+export async function marsFreeModel(signal) {
+    const override = process.env.MARSAI_SUBAGENT_MODEL;
+    if (override)
+        return override.includes("/") ? override : `marsai/${override}`;
+    let token = "";
+    try {
+        const stored = readStoredCredential();
+        token = storedToken(stored) ?? process.env.MARSAI_API_KEY ?? "";
+    }
+    catch {
+        token = process.env.MARSAI_API_KEY ?? "";
+    }
+    if (freeModelCache && freeModelCache.token === token && Date.now() < freeModelCache.expires) {
+        return freeModelCache.id;
+    }
+    let id = FALLBACK_MODEL_ID;
+    try {
+        if (token) {
+            const rows = await marsFetchModels(`${marsServer()}/v1`, token, signal);
+            const free = rows.filter((row) => row.access === "free");
+            if (free.length > 0) {
+                const auto = free.find((row) => row.id === FALLBACK_MODEL_ID);
+                const leastLoaded = [...free].sort((a, b) => (a.usage_ratio ?? Number.MAX_SAFE_INTEGER) - (b.usage_ratio ?? Number.MAX_SAFE_INTEGER))[0];
+                id = auto?.id ?? leastLoaded?.id ?? FALLBACK_MODEL_ID;
+            }
+        }
+    }
+    catch {
+        // Any failure keeps the fallback; a subagent model must never block the dispatch.
+    }
+    freeModelCache = { id, token, expires: Date.now() + FREE_MODEL_CACHE_MS };
+    return id;
+}
+function accountLines(stored, account) {
+    const lines = [];
+    if (account)
+        lines.push(`email: ${account.email}`);
+    else if (typeof stored.email === "string")
+        lines.push(`email: ${stored.email} (cached)`);
+    else
+        lines.push("email: unknown");
+    lines.push(`method: ${stored.type === "oauth" ? "OAuth device" : "API key"}`);
+    lines.push(`server: ${marsServer()}`);
+    if (account) {
+        lines.push(`balance: ${account.balance}`);
+        lines.push(`free credits: ${account.free_credits}`);
+        lines.push(`tokens used: ${account.tokens_used}`);
+        lines.push(`rpm: ${account.rpm}`);
+        if (account.expires_at > 0)
+            lines.push(`grant expires: ${new Date(account.expires_at * 1000).toISOString()}`);
+    }
+    else if (stored.type === "oauth") {
+        lines.push("account unreachable: expired token refreshes on the next request");
+    }
+    return lines;
+}
+export function createMarsaiExtension() {
+    return (pi) => {
+        pi.registerProvider(PROVIDER_ID, {
+            name: "MarsAI",
+            baseUrl: `${marsServer()}/v1`,
+            apiKey: "$MARSAI_API_KEY",
+            api: "openai-completions",
+            models: [FALLBACK_MODEL],
+            refreshModels: refreshMarsModels,
+            oauth: {
+                name: "MarsAI",
+                login: marsDeviceLogin,
+                refreshToken: marsRefreshToken,
+                getApiKey: marsApiKey,
+            },
+        });
+        pi.registerTool(createWebFetchToolDefinition());
+        pi.registerTool(createWebSearchToolDefinition());
+        pi.registerCommand("mars", {
+            description: "Show MarsAI account and auth status",
+            handler: async (_args, ctx) => {
+                const stored = readStoredCredential();
+                if (!stored) {
+                    const env = process.env.MARSAI_API_KEY;
+                    ctx.ui.notify(env
+                        ? `Using MARSAI_API_KEY from environment (${env.slice(0, 10)}...)`
+                        : "Not signed in to MarsAI. Run /login marsai.", "info");
+                    return;
+                }
+                const account = stored.type === "oauth" ? await marsAccountInfo(stored) : undefined;
+                await ctx.ui.select("MarsAI account", accountLines(stored, account));
+            },
+        });
+    };
+}
+export default createMarsaiExtension();
+//# sourceMappingURL=index.js.map

package/dist/extensions/marsai/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/extensions/marsai/index.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AAEvC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAO9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,oCAAoC,CAAC;AACxE,OAAO,EAEN,eAAe,EACf,UAAU,EACV,eAAe,EACf,eAAe,EACf,gBAAgB,EAChB,UAAU,GACV,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,4BAA4B,EAAE,6BAA6B,EAAE,MAAM,gBAAgB,CAAC;AAE7F,MAAM,WAAW,GAAG,QAAQ,CAAC;AAC7B;wFACwF;AACxF,MAAM,iBAAiB,GAAG,kBAAkB,CAAC;AAC7C,MAAM,SAAS,GAAG,EAAE,KAAK,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,SAAS,EAAE,CAAC,EAAE,UAAU,EAAE,CAAC,EAAE,CAAC;AACvE,MAAM,sBAAsB,GAAG,OAAO,CAAC;AACvC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAE/B,iFAAiF;AACjF,SAAS,SAAS,CAAC,GAKlB;IACA,8EAA8E;IAC9E,4DAA4D;IAC5D,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC1D,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACjE,OAAO;QACN,EAAE,EAAE,GAAG,CAAC,EAAE;QACV,IAAI,EAAE,UAAU,CAAC,CAAC,CAAC,GAAG,IAAI,SAAS,CAAC,CAAC,CAAC,IAAI;QAC1C,KAAK,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;QACxB,IAAI,EAAE,SAAS;QACf,0EAA0E;QAC1E,6EAA6E;QAC7E,SAAS,EAAE,KAAK;QAChB,aAAa,EAAE,GAAG,CAAC,cAAc,IAAI,sBAAsB;QAC3D,SAAS,EAAE,iBAAiB;KAC5B,CAAC;AACH,CAAC;AAED,MAAM,cAAc,GAA4B,SAAS,CAAC,EAAE,EAAE,EAAE,iBAAiB,EAAE,KAAK,EAAE,aAAa,EAAE,CAAC,CAAC;AAE3G;;;;GAIG;AACH,KAAK,UAAU,iBAAiB,CAAC,OAA6B;IAC7D,IAAI,CAAC,OAAO,CAAC,YAAY,IAAI,CAAC,OAAO,CAAC,UAAU;QAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IAC1E,MAAM,KAAK,GAAG,OAAO,CAAC,UAAU,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,OAAO,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,UAAU,CAAC,GAAG,CAAC;IAC5G,IAAI,CAAC,KAAK;QAAE,OAAO,CAAC,cAAc,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,CAAC;IAChF,OAAO,IAAI,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;AACnE,CAAC;AAED,kGAAkG;AAClG,SAAS,oBAAoB;IAC5B,IAAI,CAAC;QACJ,MAAM,MAAM,GAAY,IAAI,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;QACxE,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,MAAM,KAAK,IAAI;YAAE,OAAO,SAAS,CAAC;QACpE,MAAM,UAAU,GAAI,MAAkC,CAAC,WAAW,CAAC,CAAC;QACpE,OAAO,OAAO,UAAU,KAAK,QAAQ,IAAI,UAAU,KAAK,IAAI;YAC3D,CAAC,CAAE,UAAsC;YACzC,CAAC,CAAC,SAAS,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED,MAAM,mBAAmB,GAAG,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;AAC1C,IAAI,cAA0E,CAAC;AAE/E,8GAA8G;AAC9G,SAAS,WAAW,CAAC,MAA2C;IAC/D,IAAI,CAAC,MAAM,IAAI,CAAC,MAAM,CAAC,IAAI,KAAK,OAAO,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,IAAI,MAAM,CAAC,IAAI,KAAK,SAAS,CAAC;QAAE,OAAO,SAAS,CAAC;IACrH,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QAC7B,MAAM,KAAK,GAAG,UAAU,CAAC,MAA0B,CAAC,CAAC;QACrD,OAAO,KAAK,IAAI,SAAS,CAAC;IAC3B,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,MAAM,CAAC,MAAM,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IAChF,OAAO,kBAAkB,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,MAAoB;IACvD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC;IACnD,IAAI,QAAQ;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,UAAU,QAAQ,EAAE,CAAC;IAC9E,IAAI,KAAK,GAAG,EAAE,CAAC;IACf,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;QACtC,KAAK,GAAG,WAAW,CAAC,MAAM,CAAC,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACR,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,cAAc,IAAI,cAAc,CAAC,KAAK,KAAK,KAAK,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,cAAc,CAAC,OAAO,EAAE,CAAC;QAC7F,OAAO,cAAc,CAAC,EAAE,CAAC;IAC1B,CAAC;IACD,IAAI,EAAE,GAAG,iBAAiB,CAAC;IAC3B,IAAI,CAAC;QACJ,IAAI,KAAK,EAAE,CAAC;YACX,MAAM,IAAI,GAAG,MAAM,eAAe,CAAC,GAAG,UAAU,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;YACxE,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACrB,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,KAAK,iBAAiB,CAAC,CAAC;gBAC9D,MAAM,WAAW,GAAG,CAAC,GAAG,IAAI,CAAC,CAAC,IAAI,CACjC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,WAAW,IAAI,MAAM,CAAC,gBAAgB,CAAC,CACjG,CAAC,CAAC,CAAC,CAAC;gBACL,EAAE,GAAG,IAAI,EAAE,EAAE,IAAI,WAAW,EAAE,EAAE,IAAI,iBAAiB,CAAC;YACvD,CAAC;QACF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,kFAAkF;IACnF,CAAC;IACD,cAAc,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,mBAAmB,EAAE,CAAC;IAC1E,OAAO,EAAE,CAAC;AACX,CAAC;AAED,SAAS,YAAY,CAAC,MAA+B,EAAE,OAAoC;IAC1F,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,IAAI,OAAO;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,OAAO,CAAC,KAAK,EAAE,CAAC,CAAC;SAC9C,IAAI,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,MAAM,CAAC,KAAK,WAAW,CAAC,CAAC;;QACpF,KAAK,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;IAClC,KAAK,CAAC,IAAI,CAAC,WAAW,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC;IAC9E,KAAK,CAAC,IAAI,CAAC,WAAW,UAAU,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,OAAO,EAAE,CAAC;QACb,KAAK,CAAC,IAAI,CAAC,YAAY,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;QAC1C,KAAK,CAAC,IAAI,CAAC,iBAAiB,OAAO,CAAC,YAAY,EAAE,CAAC,CAAC;QACpD,KAAK,CAAC,IAAI,CAAC,gBAAgB,OAAO,CAAC,WAAW,EAAE,CAAC,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,QAAQ,OAAO,CAAC,GAAG,EAAE,CAAC,CAAC;QAClC,IAAI,OAAO,CAAC,UAAU,GAAG,CAAC;YAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,IAAI,IAAI,CAAC,OAAO,CAAC,UAAU,GAAG,IAAI,CAAC,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC/G,CAAC;SAAM,IAAI,MAAM,CAAC,IAAI,KAAK,OAAO,EAAE,CAAC;QACpC,KAAK,CAAC,IAAI,CAAC,kEAAkE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED,MAAM,UAAU,qBAAqB;IACpC,OAAO,CAAC,EAAgB,EAAE,EAAE;QAC3B,EAAE,CAAC,gBAAgB,CAAC,WAAW,EAAE;YAChC,IAAI,EAAE,QAAQ;YACd,OAAO,EAAE,GAAG,UAAU,EAAE,KAAK;YAC7B,MAAM,EAAE,iBAAiB;YACzB,GAAG,EAAE,oBAAoB;YACzB,MAAM,EAAE,CAAC,cAAc,CAAC;YACxB,aAAa,EAAE,iBAAiB;YAChC,KAAK,EAAE;gBACN,IAAI,EAAE,QAAQ;gBACd,KAAK,EAAE,eAAe;gBACtB,YAAY,EAAE,gBAAgB;gBAC9B,SAAS,EAAE,UAAU;aACrB;SACD,CAAC,CAAC;QAEH,EAAE,CAAC,YAAY,CAAC,4BAA4B,EAAE,CAAC,CAAC;QAChD,EAAE,CAAC,YAAY,CAAC,6BAA6B,EAAE,CAAC,CAAC;QAEjD,EAAE,CAAC,eAAe,CAAC,MAAM,EAAE;YAC1B,WAAW,EAAE,qCAAqC;YAClD,OAAO,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE;gBAC7B,MAAM,MAAM,GAAG,oBAAoB,EAAE,CAAC;gBACtC,IAAI,CAAC,MAAM,EAAE,CAAC;oBACb,MAAM,GAAG,GAAG,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;oBACvC,GAAG,CAAC,EAAE,CAAC,MAAM,CACZ,GAAG;wBACF,CAAC,CAAC,0CAA0C,GAAG,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM;wBAClE,CAAC,CAAC,6CAA6C,EAChD,MAAM,CACN,CAAC;oBACF,OAAO;gBACR,CAAC;gBACD,MAAM,OAAO,GAAG,MAAM,CAAC,IAAI,KAAK,OAAO,CAAC,CAAC,CAAC,MAAM,eAAe,CAAC,MAA0B,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;gBACxG,MAAM,GAAG,CAAC,EAAE,CAAC,MAAM,CAAC,gBAAgB,EAAE,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;YACtE,CAAC;SACD,CAAC,CAAC;IACJ,CAAC,CAAC;AACH,CAAC;AAED,eAAe,qBAAqB,EAAE,CAAC","sourcesContent":["/**\n * The MarsAI provider as an extension: the only provider MARS CLI registers.\n *\n * Device-flow OAuth (machine-bound), env/stored API key, a live model catalog\n * from `GET /v1/models`, and the `/mars` account command.\n */\n\nimport { readFileSync } from \"node:fs\";\nimport type { OAuthCredentials, RefreshModelsContext } from \"@earendil-works/pi-ai\";\nimport { getAuthPath } from \"../../config.ts\";\nimport type {\n\tExtensionAPI,\n\tExtensionFactory,\n\tProviderChatModelConfig,\n\tProviderModelConfig,\n} from \"../../core/extensions/types.ts\";\nimport { resolveConfigValue } from \"../../core/resolve-config-value.ts\";\nimport {\n\ttype MarsAccountInfo,\n\tmarsAccountInfo,\n\tmarsApiKey,\n\tmarsDeviceLogin,\n\tmarsFetchModels,\n\tmarsRefreshToken,\n\tmarsServer,\n} from \"./oauth.ts\";\nimport { createWebFetchToolDefinition, createWebSearchToolDefinition } from \"./web-tools.ts\";\n\nconst PROVIDER_ID = \"marsai\";\n/** Static list shown before the first successful catalog fetch. The id must be a real\n * gateway id — the wire sends it verbatim and `marsai-auto` does not exist upstream. */\nconst FALLBACK_MODEL_ID = \"marsai/auto-free\";\nconst ZERO_COST = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 };\nconst DEFAULT_CONTEXT_WINDOW = 128_000;\nconst MAX_OUTPUT_TOKENS = 8192;\n\n/** Map one gateway catalog row; the server bills, so all cost rates are zero. */\nfunction marsModel(row: {\n\tid: string;\n\tlabel?: string;\n\taccess?: string;\n\tcontext_tokens?: number;\n}): ProviderChatModelConfig {\n\t// Prefer the gateway label; fall back to the id without the `marsai/` prefix.\n\t// \"(free)\" marks access unless the name already carries it.\n\tconst name = row.label ?? row.id.replace(/^marsai\\//, \"\");\n\tconst markedFree = row.access === \"free\" && !/free$/i.test(name);\n\treturn {\n\t\tid: row.id,\n\t\tname: markedFree ? `${name} (free)` : name,\n\t\tinput: [\"text\", \"image\"],\n\t\tcost: ZERO_COST,\n\t\t// ponytail: reasoning stays false until the gateway reports capabilities;\n\t\t// upgrade path: map a capability field from `GET /v1/models` when it exists.\n\t\treasoning: false,\n\t\tcontextWindow: row.context_tokens ?? DEFAULT_CONTEXT_WINDOW,\n\t\tmaxTokens: MAX_OUTPUT_TOKENS,\n\t};\n}\n\nconst FALLBACK_MODEL: ProviderChatModelConfig = marsModel({ id: FALLBACK_MODEL_ID, label: \"MarsAI Auto\" });\n\n/**\n * Fetch the live gateway catalog. Every empty result keeps the fallback: whatever is\n * returned is published as the provider's whole model list, so an empty list would\n * leave MARS with no model at all.\n */\nasync function refreshMarsModels(context: RefreshModelsContext): Promise<ProviderModelConfig[]> {\n\tif (!context.allowNetwork || !context.credential) return [FALLBACK_MODEL];\n\tconst token = context.credential.type === \"oauth\" ? marsApiKey(context.credential) : context.credential.key;\n\tif (!token) return [FALLBACK_MODEL];\n\tconst rows = await marsFetchModels(`${marsServer()}/v1`, token, context.signal);\n\treturn rows.length === 0 ? [FALLBACK_MODEL] : rows.map(marsModel);\n}\n\n/** Read the local `auth.json` entry for MarsAI; the file is a trusted-but-mutable local store. */\nfunction readStoredCredential(): Record<string, unknown> | undefined {\n\ttry {\n\t\tconst parsed: unknown = JSON.parse(readFileSync(getAuthPath(), \"utf8\"));\n\t\tif (typeof parsed !== \"object\" || parsed === null) return undefined;\n\t\tconst credential = (parsed as Record<string, unknown>)[PROVIDER_ID];\n\t\treturn typeof credential === \"object\" && credential !== null\n\t\t\t? (credential as Record<string, unknown>)\n\t\t\t: undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\nconst FREE_MODEL_CACHE_MS = 5 * 60 * 1000;\nlet freeModelCache: { id: string; token: string; expires: number } | undefined;\n\n/** The stored credential entry must carry a usable key or OAuth grant; anything else is treated as absent. */\nfunction storedToken(stored: Record<string, unknown> | undefined): string | undefined {\n\tif (!stored || (stored.type !== \"oauth\" && stored.type !== \"api_key\" && stored.type !== \"api-key\")) return undefined;\n\tif (stored.type === \"oauth\") {\n\t\tconst token = marsApiKey(stored as OAuthCredentials);\n\t\treturn token || undefined;\n\t}\n\tif (typeof stored.apiKey !== \"string\" || stored.apiKey === \"\") return undefined;\n\treturn resolveConfigValue(stored.apiKey);\n}\n\n/**\n * Best free-tier catalog id for cheap delegated work (subagents). `auto-free` is the\n * gateway's own router and wins when present; otherwise the least-loaded free row, then\n * the plain fallback. `MARSAI_SUBAGENT_MODEL` pins an explicit id. Cached briefly per\n * credential: this runs on every subagent dispatch and the catalog barely moves.\n */\nexport async function marsFreeModel(signal?: AbortSignal): Promise<string> {\n\tconst override = process.env.MARSAI_SUBAGENT_MODEL;\n\tif (override) return override.includes(\"/\") ? override : `marsai/${override}`;\n\tlet token = \"\";\n\ttry {\n\t\tconst stored = readStoredCredential();\n\t\ttoken = storedToken(stored) ?? process.env.MARSAI_API_KEY ?? \"\";\n\t} catch {\n\t\ttoken = process.env.MARSAI_API_KEY ?? \"\";\n\t}\n\tif (freeModelCache && freeModelCache.token === token && Date.now() < freeModelCache.expires) {\n\t\treturn freeModelCache.id;\n\t}\n\tlet id = FALLBACK_MODEL_ID;\n\ttry {\n\t\tif (token) {\n\t\t\tconst rows = await marsFetchModels(`${marsServer()}/v1`, token, signal);\n\t\t\tconst free = rows.filter((row) => row.access === \"free\");\n\t\t\tif (free.length > 0) {\n\t\t\t\tconst auto = free.find((row) => row.id === FALLBACK_MODEL_ID);\n\t\t\t\tconst leastLoaded = [...free].sort(\n\t\t\t\t\t(a, b) => (a.usage_ratio ?? Number.MAX_SAFE_INTEGER) - (b.usage_ratio ?? Number.MAX_SAFE_INTEGER),\n\t\t\t\t)[0];\n\t\t\t\tid = auto?.id ?? leastLoaded?.id ?? FALLBACK_MODEL_ID;\n\t\t\t}\n\t\t}\n\t} catch {\n\t\t// Any failure keeps the fallback; a subagent model must never block the dispatch.\n\t}\n\tfreeModelCache = { id, token, expires: Date.now() + FREE_MODEL_CACHE_MS };\n\treturn id;\n}\n\nfunction accountLines(stored: Record<string, unknown>, account: MarsAccountInfo | undefined): string[] {\n\tconst lines: string[] = [];\n\tif (account) lines.push(`email: ${account.email}`);\n\telse if (typeof stored.email === \"string\") lines.push(`email: ${stored.email} (cached)`);\n\telse lines.push(\"email: unknown\");\n\tlines.push(`method: ${stored.type === \"oauth\" ? \"OAuth device\" : \"API key\"}`);\n\tlines.push(`server: ${marsServer()}`);\n\tif (account) {\n\t\tlines.push(`balance: ${account.balance}`);\n\t\tlines.push(`free credits: ${account.free_credits}`);\n\t\tlines.push(`tokens used: ${account.tokens_used}`);\n\t\tlines.push(`rpm: ${account.rpm}`);\n\t\tif (account.expires_at > 0) lines.push(`grant expires: ${new Date(account.expires_at * 1000).toISOString()}`);\n\t} else if (stored.type === \"oauth\") {\n\t\tlines.push(\"account unreachable: expired token refreshes on the next request\");\n\t}\n\treturn lines;\n}\n\nexport function createMarsaiExtension(): ExtensionFactory {\n\treturn (pi: ExtensionAPI) => {\n\t\tpi.registerProvider(PROVIDER_ID, {\n\t\t\tname: \"MarsAI\",\n\t\t\tbaseUrl: `${marsServer()}/v1`,\n\t\t\tapiKey: \"$MARSAI_API_KEY\",\n\t\t\tapi: \"openai-completions\",\n\t\t\tmodels: [FALLBACK_MODEL],\n\t\t\trefreshModels: refreshMarsModels,\n\t\t\toauth: {\n\t\t\t\tname: \"MarsAI\",\n\t\t\t\tlogin: marsDeviceLogin,\n\t\t\t\trefreshToken: marsRefreshToken,\n\t\t\t\tgetApiKey: marsApiKey,\n\t\t\t},\n\t\t});\n\n\t\tpi.registerTool(createWebFetchToolDefinition());\n\t\tpi.registerTool(createWebSearchToolDefinition());\n\n\t\tpi.registerCommand(\"mars\", {\n\t\t\tdescription: \"Show MarsAI account and auth status\",\n\t\t\thandler: async (_args, ctx) => {\n\t\t\t\tconst stored = readStoredCredential();\n\t\t\t\tif (!stored) {\n\t\t\t\t\tconst env = process.env.MARSAI_API_KEY;\n\t\t\t\t\tctx.ui.notify(\n\t\t\t\t\t\tenv\n\t\t\t\t\t\t\t? `Using MARSAI_API_KEY from environment (${env.slice(0, 10)}...)`\n\t\t\t\t\t\t\t: \"Not signed in to MarsAI. Run /login marsai.\",\n\t\t\t\t\t\t\"info\",\n\t\t\t\t\t);\n\t\t\t\t\treturn;\n\t\t\t\t}\n\t\t\t\tconst account = stored.type === \"oauth\" ? await marsAccountInfo(stored as OAuthCredentials) : undefined;\n\t\t\t\tawait ctx.ui.select(\"MarsAI account\", accountLines(stored, account));\n\t\t\t},\n\t\t});\n\t};\n}\n\nexport default createMarsaiExtension();\n"]}

package/dist/extensions/marsai/oauth.d.ts

@@ -0,0 +1,49 @@
+/** MarsAI OAuth: machine-bound device-code login, rotating refresh, and account/model queries. */
+import type { OAuthCredentials, OAuthLoginCallbacks } from "@earendil-works/pi-ai";
+/** MarsAI API origin: `MARSAI_URL` or the public site; a trailing `/v1` belongs to the API path. */
+export declare function marsServer(): string;
+/**
+ * Stable per-install fingerprint sent with every OAuth request. The server stores only its
+ * hash and uses it to keep one machine on one account, so a stolen refresh token dies on
+ * another machine instead of taking the account with it.
+ */
+export declare function marsMachineId(): string;
+/** Account summary behind the `mars:account` scope, used by `/mars`. */
+export interface MarsAccountInfo {
+    email: string;
+    name: string;
+    balance: number;
+    token_balance: number;
+    free_credits: number;
+    tokens_used: number;
+    rpm: number;
+    grant_id: string;
+    expires_at: number;
+}
+/**
+ * Account summary behind the `mars:account` scope, used by `/mars`. Takes the stored access
+ * token as-is: refresh must be persisted by the auth runtime, because refresh tokens rotate
+ * and an unpersisted rotation would look like a replay and revoke the grant.
+ */
+export declare function marsAccountInfo(credentials: OAuthCredentials, signal?: AbortSignal): Promise<MarsAccountInfo | undefined>;
+/**
+ * Device-code login: show the code, poll until approved, then store tokens plus the minted key.
+ * The verification URI carries the user code, so the browser opens on its own as soon as the
+ * code arrives; the dialog's confirm action is a no-op fallback for when the launch fails.
+ */
+export declare function marsDeviceLogin(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
+/** Exchange the rotating refresh token; a replay or a foreign machine fails here and forces a new login. */
+export declare function marsRefreshToken(credentials: OAuthCredentials, signal: AbortSignal): Promise<OAuthCredentials>;
+/** Request credential: the minted gateway key when present, else the short-lived access token. */
+export declare function marsApiKey(credentials: OAuthCredentials): string;
+/** One row of `GET /v1/models`: the gateway's published combos, not a vendor catalog. */
+export interface MarsModelRow {
+    id: string;
+    label?: string;
+    access?: string;
+    usage_ratio?: number;
+    context_tokens?: number;
+}
+/** Fetch the published model list with the gateway credential; empty means "keep what you have". */
+export declare function marsFetchModels(baseUrl: string, token: string, signal?: AbortSignal): Promise<MarsModelRow[]>;
+//# sourceMappingURL=oauth.d.ts.map

package/dist/extensions/marsai/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../src/extensions/marsai/oauth.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAKlG,OAAO,KAAK,EAAE,gBAAgB,EAAE,mBAAmB,EAAE,MAAM,uBAAuB,CAAC;AAcnF,oGAAoG;AACpG,wBAAgB,UAAU,IAAI,MAAM,CAEnC;AAqBD;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,MAAM,CAYtC;AAqGD,wEAAwE;AACxE,MAAM,WAAW,eAAe;IAC/B,KAAK,EAAE,MAAM,CAAC;IACd,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,aAAa,EAAE,MAAM,CAAC;IACtB,YAAY,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,MAAM,CAAC;IACpB,GAAG,EAAE,MAAM,CAAC;IACZ,QAAQ,EAAE,MAAM,CAAC;IACjB,UAAU,EAAE,MAAM,CAAC;CACnB;AA4BD;;;;GAIG;AACH,wBAAsB,eAAe,CACpC,WAAW,EAAE,gBAAgB,EAC7B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC,eAAe,GAAG,SAAS,CAAC,CAGtC;AAkDD;;;;GAIG;AACH,wBAAsB,eAAe,CAAC,SAAS,EAAE,mBAAmB,GAAG,OAAO,CAAC,gBAAgB,CAAC,CAuB/F;AAED,4GAA4G;AAC5G,wBAAsB,gBAAgB,CAAC,WAAW,EAAE,gBAAgB,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,gBAAgB,CAAC,CA0BpH;AAED,kGAAkG;AAClG,wBAAgB,UAAU,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,CAEhE;AAED,yFAAyF;AACzF,MAAM,WAAW,YAAY;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,cAAc,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,oGAAoG;AACpG,wBAAsB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,CAAC,CAoBnH"}

package/dist/extensions/marsai/oauth.js

@@ -0,0 +1,291 @@
+/** MarsAI OAuth: machine-bound device-code login, rotating refresh, and account/model queries. */
+import { randomBytes } from "node:crypto";
+import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { join } from "node:path";
+import { getAgentDir } from "../../config.js";
+import { openBrowser } from "../../utils/open-browser.js";
+const CLIENT_ID = "marscli";
+const SCOPE = "mars:inference mars:models mars:account";
+const MACHINE_ID_FILE = "machine-id";
+const MACHINE_ID_PATTERN = /^m1_[a-f0-9]{32}$/;
+const MIN_POLL_INTERVAL_MS = 1000;
+const SLOW_DOWN_INCREMENT_MS = 5000;
+/** Refresh just before the 15-minute access token expires, not when it is already dead. */
+const ACCESS_MARGIN_MS = 60_000;
+const CANCELLED = "Login cancelled";
+/** MarsAI API origin: `MARSAI_URL` or the public site; a trailing `/v1` belongs to the API path. */
+export function marsServer() {
+    return (process.env.MARSAI_URL ?? "https://marsai.click").replace(/\/+$/, "").replace(/\/v1$/i, "");
+}
+/**
+ * Stable per-install fingerprint sent with every OAuth request. The server stores only its
+ * hash and uses it to keep one machine on one account, so a stolen refresh token dies on
+ * another machine instead of taking the account with it.
+ */
+export function marsMachineId() {
+    const file = join(getAgentDir(), MACHINE_ID_FILE);
+    try {
+        const stored = readFileSync(file, "utf8").trim();
+        if (MACHINE_ID_PATTERN.test(stored))
+            return stored;
+    }
+    catch (error) {
+        if (error.code !== "ENOENT")
+            throw error;
+    }
+    const id = `m1_${randomBytes(16).toString("hex")}`;
+    mkdirSync(getAgentDir(), { recursive: true });
+    writeFileSync(file, `${id}\n`, { encoding: "utf8", mode: 0o600 });
+    return id;
+}
+function sleep(ms, signal) {
+    return new Promise((resolve, reject) => {
+        if (signal?.aborted) {
+            reject(new Error(CANCELLED));
+            return;
+        }
+        const onAbort = () => {
+            clearTimeout(timer);
+            reject(new Error(CANCELLED));
+        };
+        const timer = setTimeout(() => {
+            signal?.removeEventListener("abort", onAbort);
+            resolve();
+        }, ms);
+        signal?.addEventListener("abort", onAbort, { once: true });
+    });
+}
+/** POST form-encoded to a MarsAI OAuth endpoint; the caller interprets non-2xx bodies (device polling). */
+async function postForm(url, body, signal) {
+    const response = await fetch(url, {
+        method: "POST",
+        headers: { "Content-Type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams(body),
+        signal,
+    });
+    const text = await response.text();
+    let parsed;
+    try {
+        parsed = text === "" ? {} : JSON.parse(text);
+    }
+    catch {
+        throw new Error(`MarsAI returned a non-JSON response (HTTP ${response.status})`);
+    }
+    return { status: response.status, body: parsed };
+}
+/** Wire response shape check: the OAuth server is an untrusted input source. */
+function readToken(body) {
+    if (typeof body !== "object" || body === null)
+        return undefined;
+    const value = body;
+    if (typeof value.access_token !== "string" || typeof value.refresh_token !== "string")
+        return undefined;
+    if (typeof value.expires_in !== "number" || !Number.isFinite(value.expires_in))
+        return undefined;
+    return {
+        access_token: value.access_token,
+        refresh_token: value.refresh_token,
+        expires_in: value.expires_in,
+    };
+}
+function readError(body) {
+    if (typeof body !== "object" || body === null)
+        return "unexpected response";
+    const value = body;
+    return value.error_description ?? value.error ?? "unexpected response";
+}
+async function postFormOrThrow(url, body, signal) {
+    const result = await postForm(url, body, signal);
+    if (result.status < 200 || result.status >= 300) {
+        throw new Error(`MarsAI request failed: ${readError(result.body)}`);
+    }
+    return result.body;
+}
+async function getJson(url, token, signal) {
+    const response = await fetch(url, { headers: { Authorization: `Bearer ${token}` }, signal });
+    const text = await response.text();
+    let parsed;
+    try {
+        parsed = text === "" ? {} : JSON.parse(text);
+    }
+    catch {
+        throw new Error(`MarsAI returned a non-JSON response (HTTP ${response.status})`);
+    }
+    return { status: response.status, body: parsed };
+}
+/**
+ * Mint the long-lived per-grant gateway key. The access token expires every 15 minutes, so
+ * inference uses this key; it dies with the grant, which is what disconnecting a device means.
+ * Best effort: a failed mint leaves `access` as the request credential.
+ */
+async function mintApiKey(server, accessToken, signal) {
+    try {
+        const response = await fetch(`${server}/oauth/apikey`, {
+            method: "POST",
+            headers: { Authorization: `Bearer ${accessToken}` },
+            signal,
+        });
+        if (!response.ok)
+            return undefined;
+        const body = (await response.json());
+        return typeof body.api_key === "string" && body.api_key !== "" ? body.api_key : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+async function fetchAccount(server, accessToken, signal) {
+    try {
+        const result = await getJson(`${server}/oauth/userinfo`, accessToken, signal);
+        if (result.status < 200 || result.status >= 300)
+            return undefined;
+        const body = result.body;
+        if (typeof body.email !== "string")
+            return undefined;
+        return {
+            email: body.email,
+            name: typeof body.name === "string" ? body.name : "",
+            balance: typeof body.balance === "number" ? body.balance : 0,
+            token_balance: typeof body.token_balance === "number" ? body.token_balance : 0,
+            free_credits: typeof body.free_credits === "number" ? body.free_credits : 0,
+            tokens_used: typeof body.tokens_used === "number" ? body.tokens_used : 0,
+            rpm: typeof body.rpm === "number" ? body.rpm : 0,
+            grant_id: typeof body.grant_id === "string" ? body.grant_id : "",
+            expires_at: typeof body.expires_at === "number" ? body.expires_at : 0,
+        };
+    }
+    catch {
+        return undefined;
+    }
+}
+/**
+ * Account summary behind the `mars:account` scope, used by `/mars`. Takes the stored access
+ * token as-is: refresh must be persisted by the auth runtime, because refresh tokens rotate
+ * and an unpersisted rotation would look like a replay and revoke the grant.
+ */
+export async function marsAccountInfo(credentials, signal) {
+    const server = typeof credentials.server === "string" ? credentials.server : marsServer();
+    return fetchAccount(server, credentials.access, signal);
+}
+async function marsCredentials(server, token) {
+    const [apiKey, account] = await Promise.all([
+        mintApiKey(server, token.access_token),
+        fetchAccount(server, token.access_token),
+    ]);
+    return {
+        access: token.access_token,
+        refresh: token.refresh_token,
+        expires: Date.now() + token.expires_in * 1000 - ACCESS_MARGIN_MS,
+        apiKey,
+        server,
+        email: account?.email,
+    };
+}
+async function pollForToken(server, device, signal) {
+    const deadline = Date.now() + device.expires_in * 1000;
+    let intervalMs = Math.max(MIN_POLL_INTERVAL_MS, Math.floor(device.interval * 1000));
+    while (Date.now() < deadline) {
+        await sleep(intervalMs, signal);
+        const result = await postForm(`${server}/oauth/token`, {
+            grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+            device_code: device.device_code,
+            client_id: CLIENT_ID,
+            machine: marsMachineId(),
+        }, signal);
+        const token = readToken(result.body);
+        if (token)
+            return token;
+        const code = result.body?.error;
+        if (code === "authorization_pending")
+            continue;
+        // RFC 8628: slow_down raises the wait by five seconds; the server enforces its own count too.
+        if (code === "slow_down") {
+            intervalMs += SLOW_DOWN_INCREMENT_MS;
+            continue;
+        }
+        throw new Error(`MarsAI device sign-in failed: ${readError(result.body)}`);
+    }
+    throw new Error("MarsAI device sign-in timed out");
+}
+/**
+ * Device-code login: show the code, poll until approved, then store tokens plus the minted key.
+ * The verification URI carries the user code, so the browser opens on its own as soon as the
+ * code arrives; the dialog's confirm action is a no-op fallback for when the launch fails.
+ */
+export async function marsDeviceLogin(callbacks) {
+    const server = marsServer();
+    const created = (await postFormOrThrow(`${server}/oauth/device/code`, { client_id: CLIENT_ID, scope: SCOPE, machine: marsMachineId() }, callbacks.signal));
+    try {
+        openBrowser(created.verification_uri_complete);
+    }
+    catch {
+        // Launcher failures must not interrupt login; the dialog still shows the URL.
+    }
+    callbacks.onDeviceCode({
+        userCode: created.user_code,
+        verificationUri: created.verification_uri_complete,
+        intervalSeconds: created.interval,
+        expiresInSeconds: created.expires_in,
+        // The browser already opened; a confirm-to-open hint would be noise.
+        openBrowserOnConfirm: false,
+        copyCodeOnConfirm: false,
+    });
+    const token = await pollForToken(server, created, callbacks.signal);
+    return marsCredentials(server, token);
+}
+/** Exchange the rotating refresh token; a replay or a foreign machine fails here and forces a new login. */
+export async function marsRefreshToken(credentials, signal) {
+    const server = typeof credentials.server === "string" ? credentials.server : marsServer();
+    const body = await postFormOrThrow(`${server}/oauth/token`, {
+        grant_type: "refresh_token",
+        refresh_token: String(credentials.refresh),
+        client_id: CLIENT_ID,
+        machine: marsMachineId(),
+    }, signal);
+    const token = readToken(body);
+    if (!token)
+        throw new Error("MarsAI token refresh returned an unexpected response");
+    const minted = typeof credentials.apiKey === "string" && credentials.apiKey !== ""
+        ? credentials.apiKey
+        : await mintApiKey(server, token.access_token, signal);
+    return {
+        ...credentials,
+        access: token.access_token,
+        refresh: token.refresh_token,
+        expires: Date.now() + token.expires_in * 1000 - ACCESS_MARGIN_MS,
+        apiKey: minted,
+        server,
+    };
+}
+/** Request credential: the minted gateway key when present, else the short-lived access token. */
+export function marsApiKey(credentials) {
+    return typeof credentials.apiKey === "string" && credentials.apiKey !== "" ? credentials.apiKey : credentials.access;
+}
+/** Fetch the published model list with the gateway credential; empty means "keep what you have". */
+export async function marsFetchModels(baseUrl, token, signal) {
+    const result = await getJson(`${baseUrl.replace(/\/+$/, "")}/models`, token, signal);
+    if (result.status < 200 || result.status >= 300)
+        return [];
+    if (typeof result.body !== "object" || result.body === null)
+        return [];
+    const data = result.body.data;
+    if (!Array.isArray(data))
+        return [];
+    return data.flatMap((row) => {
+        if (typeof row !== "object" || row === null)
+            return [];
+        const value = row;
+        if (typeof value.id !== "string" || value.id === "")
+            return [];
+        return [
+            {
+                id: value.id,
+                label: typeof value.label === "string" ? value.label : undefined,
+                access: typeof value.access === "string" ? value.access : undefined,
+                usage_ratio: typeof value.usage_ratio === "number" ? value.usage_ratio : undefined,
+                context_tokens: typeof value.context_tokens === "number" ? value.context_tokens : undefined,
+            },
+        ];
+    });
+}
+//# sourceMappingURL=oauth.js.map

package/dist/extensions/marsai/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["../../../src/extensions/marsai/oauth.ts"],"names":[],"mappings":"AAAA,kGAAkG;AAElG,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACjE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAEjC,OAAO,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAC;AAC9C,OAAO,EAAE,WAAW,EAAE,MAAM,6BAA6B,CAAC;AAE1D,MAAM,SAAS,GAAG,SAAS,CAAC;AAC5B,MAAM,KAAK,GAAG,yCAAyC,CAAC;AACxD,MAAM,eAAe,GAAG,YAAY,CAAC;AACrC,MAAM,kBAAkB,GAAG,mBAAmB,CAAC;AAC/C,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,sBAAsB,GAAG,IAAI,CAAC;AACpC,2FAA2F;AAC3F,MAAM,gBAAgB,GAAG,MAAM,CAAC;AAChC,MAAM,SAAS,GAAG,iBAAiB,CAAC;AAEpC,oGAAoG;AACpG,MAAM,UAAU,UAAU;IACzB,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,IAAI,sBAAsB,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;AACrG,CAAC;AAqBD;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,WAAW,EAAE,EAAE,eAAe,CAAC,CAAC;IAClD,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC;QACjD,IAAI,kBAAkB,CAAC,IAAI,CAAC,MAAM,CAAC;YAAE,OAAO,MAAM,CAAC;IACpD,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QAChB,IAAK,KAA+B,CAAC,IAAI,KAAK,QAAQ;YAAE,MAAM,KAAK,CAAC;IACrE,CAAC;IACD,MAAM,EAAE,GAAG,MAAM,WAAW,CAAC,EAAE,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;IACnD,SAAS,CAAC,WAAW,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9C,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAClE,OAAO,EAAE,CAAC;AACX,CAAC;AAED,SAAS,KAAK,CAAC,EAAU,EAAE,MAAoB;IAC9C,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACtC,IAAI,MAAM,EAAE,OAAO,EAAE,CAAC;YACrB,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;YAC7B,OAAO;QACR,CAAC;QACD,MAAM,OAAO,GAAG,GAAG,EAAE;YACpB,YAAY,CAAC,KAAK,CAAC,CAAC;YACpB,MAAM,CAAC,IAAI,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC;QAC9B,CAAC,CAAC;QACF,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE;YAC7B,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YAC9C,OAAO,EAAE,CAAC;QACX,CAAC,EAAE,EAAE,CAAC,CAAC;QACP,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;AACJ,CAAC;AAED,2GAA2G;AAC3G,KAAK,UAAU,QAAQ,CACtB,GAAW,EACX,IAA4B,EAC5B,MAAoB;IAEpB,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE;QACjC,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,IAAI,CAAC;QAC/B,MAAM;KACN,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC;AAED,gFAAgF;AAChF,SAAS,SAAS,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,SAAS,CAAC;IAChE,MAAM,KAAK,GAAG,IAA+B,CAAC;IAC9C,IAAI,OAAO,KAAK,CAAC,YAAY,KAAK,QAAQ,IAAI,OAAO,KAAK,CAAC,aAAa,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IACxG,IAAI,OAAO,KAAK,CAAC,UAAU,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,UAAU,CAAC;QAAE,OAAO,SAAS,CAAC;IACjG,OAAO;QACN,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,aAAa,EAAE,KAAK,CAAC,aAAa;QAClC,UAAU,EAAE,KAAK,CAAC,UAAU;KAC5B,CAAC;AACH,CAAC;AAED,SAAS,SAAS,CAAC,IAAa;IAC/B,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI;QAAE,OAAO,qBAAqB,CAAC;IAC5E,MAAM,KAAK,GAAG,IAAqB,CAAC;IACpC,OAAO,KAAK,CAAC,iBAAiB,IAAI,KAAK,CAAC,KAAK,IAAI,qBAAqB,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,GAAW,EAAE,IAA4B,EAAE,MAAoB;IAC7F,MAAM,MAAM,GAAG,MAAM,QAAQ,CAAC,GAAG,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC;IACjD,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG,EAAE,CAAC;QACjD,MAAM,IAAI,KAAK,CAAC,0BAA0B,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC;AACpB,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,GAAW,EAAE,KAAa,EAAE,MAAoB;IACtE,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,KAAK,EAAE,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;IAC7F,MAAM,IAAI,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAE,CAAC;IACnC,IAAI,MAAe,CAAC;IACpB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC9C,CAAC;IAAC,MAAM,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,6CAA6C,QAAQ,CAAC,MAAM,GAAG,CAAC,CAAC;IAClF,CAAC;IACD,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,KAAK,UAAU,UAAU,CAAC,MAAc,EAAE,WAAmB,EAAE,MAAoB;IAClF,IAAI,CAAC;QACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,GAAG,MAAM,eAAe,EAAE;YACtD,MAAM,EAAE,MAAM;YACd,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,WAAW,EAAE,EAAE;YACnD,MAAM;SACN,CAAC,CAAC;QACH,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,SAAS,CAAC;QACnC,MAAM,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,EAAE,CAA0B,CAAC;QAC9D,OAAO,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAeD,KAAK,UAAU,YAAY,CAC1B,MAAc,EACd,WAAmB,EACnB,MAAoB;IAEpB,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,MAAM,iBAAiB,EAAE,WAAW,EAAE,MAAM,CAAC,CAAC;QAC9E,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;YAAE,OAAO,SAAS,CAAC;QAClE,MAAM,IAAI,GAAG,MAAM,CAAC,IAAgC,CAAC;QACrD,IAAI,OAAO,IAAI,CAAC,KAAK,KAAK,QAAQ;YAAE,OAAO,SAAS,CAAC;QACrD,OAAO;YACN,KAAK,EAAE,IAAI,CAAC,KAAK;YACjB,IAAI,EAAE,OAAO,IAAI,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACpD,OAAO,EAAE,OAAO,IAAI,CAAC,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;YAC5D,aAAa,EAAE,OAAO,IAAI,CAAC,aAAa,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC;YAC9E,YAAY,EAAE,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;YAC3E,WAAW,EAAE,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC;YACxE,GAAG,EAAE,OAAO,IAAI,CAAC,GAAG,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YAChD,QAAQ,EAAE,OAAO,IAAI,CAAC,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE;YAChE,UAAU,EAAE,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;SACrE,CAAC;IACH,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,SAAS,CAAC;IAClB,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACpC,WAA6B,EAC7B,MAAoB;IAEpB,MAAM,MAAM,GAAG,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAC1F,OAAO,YAAY,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;AACzD,CAAC;AAED,KAAK,UAAU,eAAe,CAAC,MAAc,EAAE,KAAwB;IACtE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC;QAC3C,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC;QACtC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,CAAC;KACxC,CAAC,CAAC;IACH,OAAO;QACN,MAAM,EAAE,KAAK,CAAC,YAAY;QAC1B,OAAO,EAAE,KAAK,CAAC,aAAa;QAC5B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,GAAG,gBAAgB;QAChE,MAAM;QACN,MAAM;QACN,KAAK,EAAE,OAAO,EAAE,KAAK;KACrB,CAAC;AACH,CAAC;AAED,KAAK,UAAU,YAAY,CAC1B,MAAc,EACd,MAA0B,EAC1B,MAAoB;IAEpB,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC;IACvD,IAAI,UAAU,GAAG,IAAI,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAC,CAAC;IACpF,OAAO,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,EAAE,CAAC;QAC9B,MAAM,KAAK,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC;QAChC,MAAM,MAAM,GAAG,MAAM,QAAQ,CAC5B,GAAG,MAAM,cAAc,EACvB;YACC,UAAU,EAAE,8CAA8C;YAC1D,WAAW,EAAE,MAAM,CAAC,WAAW;YAC/B,SAAS,EAAE,SAAS;YACpB,OAAO,EAAE,aAAa,EAAE;SACxB,EACD,MAAM,CACN,CAAC;QACF,MAAM,KAAK,GAAG,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QACrC,IAAI,KAAK;YAAE,OAAO,KAAK,CAAC;QACxB,MAAM,IAAI,GAAI,MAAM,CAAC,IAAkC,EAAE,KAAK,CAAC;QAC/D,IAAI,IAAI,KAAK,uBAAuB;YAAE,SAAS;QAC/C,8FAA8F;QAC9F,IAAI,IAAI,KAAK,WAAW,EAAE,CAAC;YAC1B,UAAU,IAAI,sBAAsB,CAAC;YACrC,SAAS;QACV,CAAC;QACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,KAAK,CAAC,iCAAiC,CAAC,CAAC;AACpD,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,SAA8B;IACnE,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,MAAM,OAAO,GAAG,CAAC,MAAM,eAAe,CACrC,GAAG,MAAM,oBAAoB,EAC7B,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO,EAAE,aAAa,EAAE,EAAE,EAChE,SAAS,CAAC,MAAM,CAChB,CAAuB,CAAC;IACzB,IAAI,CAAC;QACJ,WAAW,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;IAChD,CAAC;IAAC,MAAM,CAAC;QACR,8EAA8E;IAC/E,CAAC;IACD,SAAS,CAAC,YAAY,CAAC;QACtB,QAAQ,EAAE,OAAO,CAAC,SAAS;QAC3B,eAAe,EAAE,OAAO,CAAC,yBAAyB;QAClD,eAAe,EAAE,OAAO,CAAC,QAAQ;QACjC,gBAAgB,EAAE,OAAO,CAAC,UAAU;QACpC,qEAAqE;QACrE,oBAAoB,EAAE,KAAK;QAC3B,iBAAiB,EAAE,KAAK;KACxB,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,MAAM,YAAY,CAAC,MAAM,EAAE,OAAO,EAAE,SAAS,CAAC,MAAM,CAAC,CAAC;IACpE,OAAO,eAAe,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;AACvC,CAAC;AAED,4GAA4G;AAC5G,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,WAA6B,EAAE,MAAmB;IACxF,MAAM,MAAM,GAAG,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC;IAC1F,MAAM,IAAI,GAAG,MAAM,eAAe,CACjC,GAAG,MAAM,cAAc,EACvB;QACC,UAAU,EAAE,eAAe;QAC3B,aAAa,EAAE,MAAM,CAAC,WAAW,CAAC,OAAO,CAAC;QAC1C,SAAS,EAAE,SAAS;QACpB,OAAO,EAAE,aAAa,EAAE;KACxB,EACD,MAAM,CACN,CAAC;IACF,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;IAC9B,IAAI,CAAC,KAAK;QAAE,MAAM,IAAI,KAAK,CAAC,sDAAsD,CAAC,CAAC;IACpF,MAAM,MAAM,GACX,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE;QAClE,CAAC,CAAC,WAAW,CAAC,MAAM;QACpB,CAAC,CAAC,MAAM,UAAU,CAAC,MAAM,EAAE,KAAK,CAAC,YAAY,EAAE,MAAM,CAAC,CAAC;IACzD,OAAO;QACN,GAAG,WAAW;QACd,MAAM,EAAE,KAAK,CAAC,YAAY;QAC1B,OAAO,EAAE,KAAK,CAAC,aAAa;QAC5B,OAAO,EAAE,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,UAAU,GAAG,IAAI,GAAG,gBAAgB;QAChE,MAAM,EAAE,MAAM;QACd,MAAM;KACN,CAAC;AACH,CAAC;AAED,kGAAkG;AAClG,MAAM,UAAU,UAAU,CAAC,WAA6B;IACvD,OAAO,OAAO,WAAW,CAAC,MAAM,KAAK,QAAQ,IAAI,WAAW,CAAC,MAAM,KAAK,EAAE,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,MAAM,CAAC;AACtH,CAAC;AAWD,oGAAoG;AACpG,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAe,EAAE,KAAa,EAAE,MAAoB;IACzF,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;IACrF,IAAI,MAAM,CAAC,MAAM,GAAG,GAAG,IAAI,MAAM,CAAC,MAAM,IAAI,GAAG;QAAE,OAAO,EAAE,CAAC;IAC3D,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,IAAI;QAAE,OAAO,EAAE,CAAC;IACvE,MAAM,IAAI,GAAI,MAAM,CAAC,IAA2B,CAAC,IAAI,CAAC;IACtD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACpC,OAAO,IAAI,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,EAAE;QAC3B,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,IAAI;YAAE,OAAO,EAAE,CAAC;QACvD,MAAM,KAAK,GAAG,GAA8B,CAAC;QAC7C,IAAI,OAAO,KAAK,CAAC,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,KAAK,EAAE;YAAE,OAAO,EAAE,CAAC;QAC/D,OAAO;YACN;gBACC,EAAE,EAAE,KAAK,CAAC,EAAE;gBACZ,KAAK,EAAE,OAAO,KAAK,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS;gBAChE,MAAM,EAAE,OAAO,KAAK,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS;gBACnE,WAAW,EAAE,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS;gBAClF,cAAc,EAAE,OAAO,KAAK,CAAC,cAAc,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;aAC3F;SACD,CAAC;IACH,CAAC,CAAC,CAAC;AACJ,CAAC","sourcesContent":["/** MarsAI OAuth: machine-bound device-code login, rotating refresh, and account/model queries. */\n\nimport { randomBytes } from \"node:crypto\";\nimport { mkdirSync, readFileSync, writeFileSync } from \"node:fs\";\nimport { join } from \"node:path\";\nimport type { OAuthCredentials, OAuthLoginCallbacks } from \"@earendil-works/pi-ai\";\nimport { getAgentDir } from \"../../config.ts\";\nimport { openBrowser } from \"../../utils/open-browser.ts\";\n\nconst CLIENT_ID = \"marscli\";\nconst SCOPE = \"mars:inference mars:models mars:account\";\nconst MACHINE_ID_FILE = \"machine-id\";\nconst MACHINE_ID_PATTERN = /^m1_[a-f0-9]{32}$/;\nconst MIN_POLL_INTERVAL_MS = 1000;\nconst SLOW_DOWN_INCREMENT_MS = 5000;\n/** Refresh just before the 15-minute access token expires, not when it is already dead. */\nconst ACCESS_MARGIN_MS = 60_000;\nconst CANCELLED = \"Login cancelled\";\n\n/** MarsAI API origin: `MARSAI_URL` or the public site; a trailing `/v1` belongs to the API path. */\nexport function marsServer(): string {\n\treturn (process.env.MARSAI_URL ?? \"https://marsai.click\").replace(/\\/+$/, \"\").replace(/\\/v1$/i, \"\");\n}\n\ninterface MarsTokenResponse {\n\taccess_token: string;\n\trefresh_token: string;\n\texpires_in: number;\n}\n\ninterface MarsDeviceResponse {\n\tdevice_code: string;\n\tuser_code: string;\n\tverification_uri_complete: string;\n\texpires_in: number;\n\tinterval: number;\n}\n\ninterface MarsFormError {\n\terror?: string;\n\terror_description?: string;\n}\n\n/**\n * Stable per-install fingerprint sent with every OAuth request. The server stores only its\n * hash and uses it to keep one machine on one account, so a stolen refresh token dies on\n * another machine instead of taking the account with it.\n */\nexport function marsMachineId(): string {\n\tconst file = join(getAgentDir(), MACHINE_ID_FILE);\n\ttry {\n\t\tconst stored = readFileSync(file, \"utf8\").trim();\n\t\tif (MACHINE_ID_PATTERN.test(stored)) return stored;\n\t} catch (error) {\n\t\tif ((error as NodeJS.ErrnoException).code !== \"ENOENT\") throw error;\n\t}\n\tconst id = `m1_${randomBytes(16).toString(\"hex\")}`;\n\tmkdirSync(getAgentDir(), { recursive: true });\n\twriteFileSync(file, `${id}\\n`, { encoding: \"utf8\", mode: 0o600 });\n\treturn id;\n}\n\nfunction sleep(ms: number, signal?: AbortSignal): Promise<void> {\n\treturn new Promise((resolve, reject) => {\n\t\tif (signal?.aborted) {\n\t\t\treject(new Error(CANCELLED));\n\t\t\treturn;\n\t\t}\n\t\tconst onAbort = () => {\n\t\t\tclearTimeout(timer);\n\t\t\treject(new Error(CANCELLED));\n\t\t};\n\t\tconst timer = setTimeout(() => {\n\t\t\tsignal?.removeEventListener(\"abort\", onAbort);\n\t\t\tresolve();\n\t\t}, ms);\n\t\tsignal?.addEventListener(\"abort\", onAbort, { once: true });\n\t});\n}\n\n/** POST form-encoded to a MarsAI OAuth endpoint; the caller interprets non-2xx bodies (device polling). */\nasync function postForm(\n\turl: string,\n\tbody: Record<string, string>,\n\tsignal?: AbortSignal,\n): Promise<{ status: number; body: unknown }> {\n\tconst response = await fetch(url, {\n\t\tmethod: \"POST\",\n\t\theaders: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n\t\tbody: new URLSearchParams(body),\n\t\tsignal,\n\t});\n\tconst text = await response.text();\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = text === \"\" ? {} : JSON.parse(text);\n\t} catch {\n\t\tthrow new Error(`MarsAI returned a non-JSON response (HTTP ${response.status})`);\n\t}\n\treturn { status: response.status, body: parsed };\n}\n\n/** Wire response shape check: the OAuth server is an untrusted input source. */\nfunction readToken(body: unknown): MarsTokenResponse | undefined {\n\tif (typeof body !== \"object\" || body === null) return undefined;\n\tconst value = body as Record<string, unknown>;\n\tif (typeof value.access_token !== \"string\" || typeof value.refresh_token !== \"string\") return undefined;\n\tif (typeof value.expires_in !== \"number\" || !Number.isFinite(value.expires_in)) return undefined;\n\treturn {\n\t\taccess_token: value.access_token,\n\t\trefresh_token: value.refresh_token,\n\t\texpires_in: value.expires_in,\n\t};\n}\n\nfunction readError(body: unknown): string {\n\tif (typeof body !== \"object\" || body === null) return \"unexpected response\";\n\tconst value = body as MarsFormError;\n\treturn value.error_description ?? value.error ?? \"unexpected response\";\n}\n\nasync function postFormOrThrow(url: string, body: Record<string, string>, signal?: AbortSignal): Promise<unknown> {\n\tconst result = await postForm(url, body, signal);\n\tif (result.status < 200 || result.status >= 300) {\n\t\tthrow new Error(`MarsAI request failed: ${readError(result.body)}`);\n\t}\n\treturn result.body;\n}\n\nasync function getJson(url: string, token: string, signal?: AbortSignal): Promise<{ status: number; body: unknown }> {\n\tconst response = await fetch(url, { headers: { Authorization: `Bearer ${token}` }, signal });\n\tconst text = await response.text();\n\tlet parsed: unknown;\n\ttry {\n\t\tparsed = text === \"\" ? {} : JSON.parse(text);\n\t} catch {\n\t\tthrow new Error(`MarsAI returned a non-JSON response (HTTP ${response.status})`);\n\t}\n\treturn { status: response.status, body: parsed };\n}\n\n/**\n * Mint the long-lived per-grant gateway key. The access token expires every 15 minutes, so\n * inference uses this key; it dies with the grant, which is what disconnecting a device means.\n * Best effort: a failed mint leaves `access` as the request credential.\n */\nasync function mintApiKey(server: string, accessToken: string, signal?: AbortSignal): Promise<string | undefined> {\n\ttry {\n\t\tconst response = await fetch(`${server}/oauth/apikey`, {\n\t\t\tmethod: \"POST\",\n\t\t\theaders: { Authorization: `Bearer ${accessToken}` },\n\t\t\tsignal,\n\t\t});\n\t\tif (!response.ok) return undefined;\n\t\tconst body = (await response.json()) as { api_key?: unknown };\n\t\treturn typeof body.api_key === \"string\" && body.api_key !== \"\" ? body.api_key : undefined;\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/** Account summary behind the `mars:account` scope, used by `/mars`. */\nexport interface MarsAccountInfo {\n\temail: string;\n\tname: string;\n\tbalance: number;\n\ttoken_balance: number;\n\tfree_credits: number;\n\ttokens_used: number;\n\trpm: number;\n\tgrant_id: string;\n\texpires_at: number;\n}\n\nasync function fetchAccount(\n\tserver: string,\n\taccessToken: string,\n\tsignal?: AbortSignal,\n): Promise<MarsAccountInfo | undefined> {\n\ttry {\n\t\tconst result = await getJson(`${server}/oauth/userinfo`, accessToken, signal);\n\t\tif (result.status < 200 || result.status >= 300) return undefined;\n\t\tconst body = result.body as Partial<MarsAccountInfo>;\n\t\tif (typeof body.email !== \"string\") return undefined;\n\t\treturn {\n\t\t\temail: body.email,\n\t\t\tname: typeof body.name === \"string\" ? body.name : \"\",\n\t\t\tbalance: typeof body.balance === \"number\" ? body.balance : 0,\n\t\t\ttoken_balance: typeof body.token_balance === \"number\" ? body.token_balance : 0,\n\t\t\tfree_credits: typeof body.free_credits === \"number\" ? body.free_credits : 0,\n\t\t\ttokens_used: typeof body.tokens_used === \"number\" ? body.tokens_used : 0,\n\t\t\trpm: typeof body.rpm === \"number\" ? body.rpm : 0,\n\t\t\tgrant_id: typeof body.grant_id === \"string\" ? body.grant_id : \"\",\n\t\t\texpires_at: typeof body.expires_at === \"number\" ? body.expires_at : 0,\n\t\t};\n\t} catch {\n\t\treturn undefined;\n\t}\n}\n\n/**\n * Account summary behind the `mars:account` scope, used by `/mars`. Takes the stored access\n * token as-is: refresh must be persisted by the auth runtime, because refresh tokens rotate\n * and an unpersisted rotation would look like a replay and revoke the grant.\n */\nexport async function marsAccountInfo(\n\tcredentials: OAuthCredentials,\n\tsignal?: AbortSignal,\n): Promise<MarsAccountInfo | undefined> {\n\tconst server = typeof credentials.server === \"string\" ? credentials.server : marsServer();\n\treturn fetchAccount(server, credentials.access, signal);\n}\n\nasync function marsCredentials(server: string, token: MarsTokenResponse): Promise<OAuthCredentials> {\n\tconst [apiKey, account] = await Promise.all([\n\t\tmintApiKey(server, token.access_token),\n\t\tfetchAccount(server, token.access_token),\n\t]);\n\treturn {\n\t\taccess: token.access_token,\n\t\trefresh: token.refresh_token,\n\t\texpires: Date.now() + token.expires_in * 1000 - ACCESS_MARGIN_MS,\n\t\tapiKey,\n\t\tserver,\n\t\temail: account?.email,\n\t};\n}\n\nasync function pollForToken(\n\tserver: string,\n\tdevice: MarsDeviceResponse,\n\tsignal?: AbortSignal,\n): Promise<MarsTokenResponse> {\n\tconst deadline = Date.now() + device.expires_in * 1000;\n\tlet intervalMs = Math.max(MIN_POLL_INTERVAL_MS, Math.floor(device.interval * 1000));\n\twhile (Date.now() < deadline) {\n\t\tawait sleep(intervalMs, signal);\n\t\tconst result = await postForm(\n\t\t\t`${server}/oauth/token`,\n\t\t\t{\n\t\t\t\tgrant_type: \"urn:ietf:params:oauth:grant-type:device_code\",\n\t\t\t\tdevice_code: device.device_code,\n\t\t\t\tclient_id: CLIENT_ID,\n\t\t\t\tmachine: marsMachineId(),\n\t\t\t},\n\t\t\tsignal,\n\t\t);\n\t\tconst token = readToken(result.body);\n\t\tif (token) return token;\n\t\tconst code = (result.body as MarsFormError | undefined)?.error;\n\t\tif (code === \"authorization_pending\") continue;\n\t\t// RFC 8628: slow_down raises the wait by five seconds; the server enforces its own count too.\n\t\tif (code === \"slow_down\") {\n\t\t\tintervalMs += SLOW_DOWN_INCREMENT_MS;\n\t\t\tcontinue;\n\t\t}\n\t\tthrow new Error(`MarsAI device sign-in failed: ${readError(result.body)}`);\n\t}\n\tthrow new Error(\"MarsAI device sign-in timed out\");\n}\n\n/**\n * Device-code login: show the code, poll until approved, then store tokens plus the minted key.\n * The verification URI carries the user code, so the browser opens on its own as soon as the\n * code arrives; the dialog's confirm action is a no-op fallback for when the launch fails.\n */\nexport async function marsDeviceLogin(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials> {\n\tconst server = marsServer();\n\tconst created = (await postFormOrThrow(\n\t\t`${server}/oauth/device/code`,\n\t\t{ client_id: CLIENT_ID, scope: SCOPE, machine: marsMachineId() },\n\t\tcallbacks.signal,\n\t)) as MarsDeviceResponse;\n\ttry {\n\t\topenBrowser(created.verification_uri_complete);\n\t} catch {\n\t\t// Launcher failures must not interrupt login; the dialog still shows the URL.\n\t}\n\tcallbacks.onDeviceCode({\n\t\tuserCode: created.user_code,\n\t\tverificationUri: created.verification_uri_complete,\n\t\tintervalSeconds: created.interval,\n\t\texpiresInSeconds: created.expires_in,\n\t\t// The browser already opened; a confirm-to-open hint would be noise.\n\t\topenBrowserOnConfirm: false,\n\t\tcopyCodeOnConfirm: false,\n\t});\n\tconst token = await pollForToken(server, created, callbacks.signal);\n\treturn marsCredentials(server, token);\n}\n\n/** Exchange the rotating refresh token; a replay or a foreign machine fails here and forces a new login. */\nexport async function marsRefreshToken(credentials: OAuthCredentials, signal: AbortSignal): Promise<OAuthCredentials> {\n\tconst server = typeof credentials.server === \"string\" ? credentials.server : marsServer();\n\tconst body = await postFormOrThrow(\n\t\t`${server}/oauth/token`,\n\t\t{\n\t\t\tgrant_type: \"refresh_token\",\n\t\t\trefresh_token: String(credentials.refresh),\n\t\t\tclient_id: CLIENT_ID,\n\t\t\tmachine: marsMachineId(),\n\t\t},\n\t\tsignal,\n\t);\n\tconst token = readToken(body);\n\tif (!token) throw new Error(\"MarsAI token refresh returned an unexpected response\");\n\tconst minted =\n\t\ttypeof credentials.apiKey === \"string\" && credentials.apiKey !== \"\"\n\t\t\t? credentials.apiKey\n\t\t\t: await mintApiKey(server, token.access_token, signal);\n\treturn {\n\t\t...credentials,\n\t\taccess: token.access_token,\n\t\trefresh: token.refresh_token,\n\t\texpires: Date.now() + token.expires_in * 1000 - ACCESS_MARGIN_MS,\n\t\tapiKey: minted,\n\t\tserver,\n\t};\n}\n\n/** Request credential: the minted gateway key when present, else the short-lived access token. */\nexport function marsApiKey(credentials: OAuthCredentials): string {\n\treturn typeof credentials.apiKey === \"string\" && credentials.apiKey !== \"\" ? credentials.apiKey : credentials.access;\n}\n\n/** One row of `GET /v1/models`: the gateway's published combos, not a vendor catalog. */\nexport interface MarsModelRow {\n\tid: string;\n\tlabel?: string;\n\taccess?: string;\n\tusage_ratio?: number;\n\tcontext_tokens?: number;\n}\n\n/** Fetch the published model list with the gateway credential; empty means \"keep what you have\". */\nexport async function marsFetchModels(baseUrl: string, token: string, signal?: AbortSignal): Promise<MarsModelRow[]> {\n\tconst result = await getJson(`${baseUrl.replace(/\\/+$/, \"\")}/models`, token, signal);\n\tif (result.status < 200 || result.status >= 300) return [];\n\tif (typeof result.body !== \"object\" || result.body === null) return [];\n\tconst data = (result.body as { data?: unknown }).data;\n\tif (!Array.isArray(data)) return [];\n\treturn data.flatMap((row) => {\n\t\tif (typeof row !== \"object\" || row === null) return [];\n\t\tconst value = row as Record<string, unknown>;\n\t\tif (typeof value.id !== \"string\" || value.id === \"\") return [];\n\t\treturn [\n\t\t\t{\n\t\t\t\tid: value.id,\n\t\t\t\tlabel: typeof value.label === \"string\" ? value.label : undefined,\n\t\t\t\taccess: typeof value.access === \"string\" ? value.access : undefined,\n\t\t\t\tusage_ratio: typeof value.usage_ratio === \"number\" ? value.usage_ratio : undefined,\n\t\t\t\tcontext_tokens: typeof value.context_tokens === \"number\" ? value.context_tokens : undefined,\n\t\t\t},\n\t\t];\n\t});\n}\n"]}

package/dist/extensions/marsai/web-tools.d.ts

@@ -0,0 +1,31 @@
+/**
+ * Absolute web access for the agent: `web_fetch` reads a page as text,
+ * `web_search` runs a query through DuckDuckGo's lite HTML endpoint (no API key).
+ *
+ * ponytail: DDG lite markup is screen-scraped — brittle by design.
+ * Upgrade path: point `web_search` at a MarsAI gateway search endpoint (or a
+ * keyed API like Brave) when one exists, and swap the regex HTML stripper in
+ * `web_fetch` for a real readability parse if pages get messier.
+ */
+import { Type } from "typebox";
+import type { ToolDefinition } from "../../core/extensions/types.ts";
+/**
+ * Loopback, private-range and link-local targets are refused: the agent must not
+ * reach intranet services or the cloud metadata endpoint through web_fetch.
+ * ponytail: checked per redirect hop, but DNS rebinding (public name resolving
+ * to a private address) is not — that needs a custom resolver.
+ */
+export declare function isBlockedFetchUrl(url: URL): string | undefined;
+declare const webFetchParams: Type.TObject<{
+    url: Type.TString;
+}>;
+declare const webSearchParams: Type.TObject<{
+    query: Type.TString;
+    limit: Type.TOptional<Type.TNumber>;
+}>;
+/** Drop scripts/styles and decode the entities a text-only model ever sees. */
+export declare function htmlToText(html: string): string;
+export declare function createWebFetchToolDefinition(): ToolDefinition<typeof webFetchParams, unknown, unknown>;
+export declare function createWebSearchToolDefinition(): ToolDefinition<typeof webSearchParams, unknown, unknown>;
+export {};
+//# sourceMappingURL=web-tools.d.ts.map

package/dist/extensions/marsai/web-tools.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"web-tools.d.ts","sourceRoot":"","sources":["../../../src/extensions/marsai/web-tools.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,OAAO,EAAe,IAAI,EAAE,MAAM,SAAS,CAAC;AAC5C,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,gCAAgC,CAAC;AAWrE;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,GAAG,EAAE,GAAG,GAAG,MAAM,GAAG,SAAS,CA6B9D;AAED,QAAA,MAAM,cAAc;;EAElB,CAAC;AAEH,QAAA,MAAM,eAAe;;;EAGnB,CAAC;AAKH,+EAA+E;AAC/E,wBAAgB,UAAU,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAiB/C;AA8DD,wBAAgB,4BAA4B,IAAI,cAAc,CAAC,OAAO,cAAc,EAAE,OAAO,EAAE,OAAO,CAAC,CAiGtG;AAED,wBAAgB,6BAA6B,IAAI,cAAc,CAAC,OAAO,eAAe,EAAE,OAAO,EAAE,OAAO,CAAC,CAoDxG"}