@mseep/clawdcursor 1.5.5

package/dist/llm/external-creds.js

@@ -0,0 +1,169 @@
+"use strict";
+/**
+ * External-credential reader.
+ *
+ * Loads provider API keys from cohabitating agent frameworks (OpenClaw,
+ * future hosts) so users who configure credentials there don't have to
+ * re-enter them as environment variables.
+ *
+ * Single source of truth — both `scanProviders()` (doctor's all-providers
+ * scan) and `resolveApiConfig({ provider })` (start's per-provider lookup)
+ * consult this module so they can never disagree about which key belongs
+ * to which provider. v0.8.8 had a real bug where doctor read the right
+ * Kimi key but start fell back to the wrong (Anthropic) key on the same
+ * machine because only doctor was wired to the OpenClaw profile reader.
+ *
+ * Read once, cache forever (per-process). Tests can call
+ * `clearExternalProviderKeysCache()` to invalidate.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.loadExternalProviderKeys = loadExternalProviderKeys;
+exports.getExternalProviderKey = getExternalProviderKey;
+exports.getExternalProviderBaseUrl = getExternalProviderBaseUrl;
+exports.clearExternalProviderKeysCache = clearExternalProviderKeysCache;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+let cache = null;
+/**
+ * External profile-name → clawdcursor provider key.
+ * Mirrors the map inside `scanProviders` so the two code paths agree.
+ * If you add a new provider, update both — or better, refactor scanner
+ * to import this map directly.
+ */
+const EXTERNAL_PROVIDER_MAP = {
+    'anthropic': 'anthropic',
+    'openai': 'openai',
+    'moonshot': 'kimi',
+    'kimi': 'kimi',
+    'groq': 'groq',
+    'together': 'together',
+    'deepseek': 'deepseek',
+    'gemini': 'gemini',
+    'google': 'gemini',
+    'mistral': 'mistral',
+    'xai': 'xai',
+    'grok': 'xai',
+    'alibaba': 'alibaba',
+    'qwen': 'alibaba',
+    'dashscope': 'alibaba',
+    'fireworks': 'fireworks',
+    'cohere': 'cohere',
+    'perplexity': 'perplexity',
+    'pplx': 'perplexity',
+};
+/**
+ * Locate auth-profile JSON files from known external hosts.
+ * Returns absolute paths, including only files that actually exist.
+ */
+function discoverAuthProfilePaths() {
+    const home = os.homedir();
+    const candidates = [
+        path.join(home, '.openclaw', 'agents', 'main', 'agent', 'auth-profiles.json'),
+        path.join(home, '.openclaw', 'agents', 'main', 'auth-profiles.json'),
+        path.join(home, '.openclaw-dev', 'agents', 'main', 'agent', 'auth-profiles.json'),
+        path.join(home, '.openclaw-dev', 'agents', 'main', 'auth-profiles.json'),
+    ];
+    return candidates.filter(p => {
+        try {
+            return fs.existsSync(p);
+        }
+        catch {
+            return false;
+        }
+    });
+}
+/**
+ * Read all external provider keys, merged across known hosts.
+ * First-write-wins per provider (so `.openclaw` beats `.openclaw-dev`
+ * if both define the same provider).
+ */
+function loadExternalProviderKeys() {
+    if (cache !== null)
+        return cache;
+    const keys = {};
+    for (const authPath of discoverAuthProfilePaths()) {
+        try {
+            const raw = JSON.parse(fs.readFileSync(authPath, 'utf-8'));
+            // Two shapes seen in the wild: `{ profiles: { ... } }` and `{ <profileKey>: { ... } }`.
+            const profiles = raw?.profiles ?? raw;
+            if (!profiles || typeof profiles !== 'object')
+                continue;
+            for (const [profileKey, profileValue] of Object.entries(profiles)) {
+                // Profile keys look like "anthropic" or "anthropic:default" — take the
+                // segment before the colon as the provider name.
+                const providerName = profileKey.split(':')[0].toLowerCase();
+                const val = profileValue;
+                const apiKey = val?.key || val?.apiKey || val?.api_key || '';
+                if (!apiKey)
+                    continue;
+                const clawdKey = EXTERNAL_PROVIDER_MAP[providerName];
+                if (clawdKey && !keys[clawdKey]) {
+                    keys[clawdKey] = { apiKey, baseUrl: val.baseUrl, sourceFile: authPath };
+                }
+            }
+        }
+        catch {
+            // Non-fatal: a malformed external file should never block clawdcursor.
+        }
+    }
+    cache = keys;
+    return keys;
+}
+/**
+ * Get a specific provider's external key, or undefined if not found.
+ * Use this in credential-resolution paths that want to consult external
+ * hosts as one of several fallbacks.
+ */
+function getExternalProviderKey(providerKey) {
+    if (!providerKey)
+        return undefined;
+    return loadExternalProviderKeys()[providerKey.toLowerCase()]?.apiKey;
+}
+/**
+ * Get a specific provider's external base URL override (rare — only set
+ * when an external host explicitly overrides the provider's default URL).
+ */
+function getExternalProviderBaseUrl(providerKey) {
+    if (!providerKey)
+        return undefined;
+    return loadExternalProviderKeys()[providerKey.toLowerCase()]?.baseUrl;
+}
+/** Clear the in-process cache. Tests use this; runtime never should. */
+function clearExternalProviderKeysCache() {
+    cache = null;
+}
+//# sourceMappingURL=external-creds.js.map

package/dist/llm/external-creds.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"external-creds.js","sourceRoot":"","sources":["../../src/llm/external-creds.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;GAgBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAiEH,4DAgCC;AAOD,wDAGC;AAMD,gEAGC;AAGD,wEAEC;AAvHD,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AASzB,IAAI,KAAK,GAAiD,IAAI,CAAC;AAE/D;;;;;GAKG;AACH,MAAM,qBAAqB,GAA2B;IACpD,WAAW,EAAE,WAAW;IACxB,QAAQ,EAAE,QAAQ;IAClB,UAAU,EAAE,MAAM;IAClB,MAAM,EAAE,MAAM;IACd,MAAM,EAAE,MAAM;IACd,UAAU,EAAE,UAAU;IACtB,UAAU,EAAE,UAAU;IACtB,QAAQ,EAAE,QAAQ;IAClB,QAAQ,EAAE,QAAQ;IAClB,SAAS,EAAE,SAAS;IACpB,KAAK,EAAE,KAAK;IACZ,MAAM,EAAE,KAAK;IACb,SAAS,EAAE,SAAS;IACpB,MAAM,EAAE,SAAS;IACjB,WAAW,EAAE,SAAS;IACtB,WAAW,EAAE,WAAW;IACxB,QAAQ,EAAE,QAAQ;IAClB,YAAY,EAAE,YAAY;IAC1B,MAAM,EAAE,YAAY;CACrB,CAAC;AAEF;;;GAGG;AACH,SAAS,wBAAwB;IAC/B,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,EAAE,CAAC;IAC1B,MAAM,UAAU,GAAG;QACjB,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,CAAC;QAC7E,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC;QACpE,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,oBAAoB,CAAC;QACjF,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,oBAAoB,CAAC;KACzE,CAAC;IACF,OAAO,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC3B,IAAI,CAAC;YAAC,OAAO,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;QAAC,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,KAAK,CAAC;QAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC;AAED;;;;GAIG;AACH,SAAgB,wBAAwB;IACtC,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC;IAEjC,MAAM,IAAI,GAA0C,EAAE,CAAC;IAEvD,KAAK,MAAM,QAAQ,IAAI,wBAAwB,EAAE,EAAE,CAAC;QAClD,IAAI,CAAC;YACH,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC,CAAC;YAC3D,wFAAwF;YACxF,MAAM,QAAQ,GAAG,GAAG,EAAE,QAAQ,IAAI,GAAG,CAAC;YACtC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YAExD,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAClE,uEAAuE;gBACvE,iDAAiD;gBACjD,MAAM,YAAY,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC;gBAC5D,MAAM,GAAG,GAAG,YAAqF,CAAC;gBAClG,MAAM,MAAM,GAAG,GAAG,EAAE,GAAG,IAAI,GAAG,EAAE,MAAM,IAAI,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC;gBAC7D,IAAI,CAAC,MAAM;oBAAE,SAAS;gBAEtB,MAAM,QAAQ,GAAG,qBAAqB,CAAC,YAAY,CAAC,CAAC;gBACrD,IAAI,QAAQ,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;oBAChC,IAAI,CAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,CAAC;gBAC1E,CAAC;YACH,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YACP,uEAAuE;QACzE,CAAC;IACH,CAAC;IAED,KAAK,GAAG,IAAI,CAAC;IACb,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,SAAgB,sBAAsB,CAAC,WAAmB;IACxD,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,wBAAwB,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,EAAE,MAAM,CAAC;AACvE,CAAC;AAED;;;GAGG;AACH,SAAgB,0BAA0B,CAAC,WAAmB;IAC5D,IAAI,CAAC,WAAW;QAAE,OAAO,SAAS,CAAC;IACnC,OAAO,wBAAwB,EAAE,CAAC,WAAW,CAAC,WAAW,EAAE,CAAC,EAAE,OAAO,CAAC;AACxE,CAAC;AAED,wEAAwE;AACxE,SAAgB,8BAA8B;IAC5C,KAAK,GAAG,IAAI,CAAC;AACf,CAAC"}

package/dist/llm/providers.d.ts

@@ -0,0 +1,123 @@
+/**
+ * Provider Model Map — auto-selects cheap/expensive models per provider.
+ * Used by the doctor and the agent pipeline to route tasks optimally.
+ */
+export interface ProviderProfile {
+    name: string;
+    /** Base URL for API calls */
+    baseUrl: string;
+    /** Auth header format */
+    authHeader: (key: string) => Record<string, string>;
+    /** Cheap text-only model (Layer 2: accessibility reasoner) */
+    textModel: string;
+    /** Vision-capable model (Layer 3: screenshot fallback) */
+    visionModel: string;
+    /** Approximate context window of the text model in tokens.
+     *  Used for dynamic element truncation in OCR Reasoner.
+     *  Minimum recommended: 16000 (16K). Models below this will show a warning. */
+    textContextWindow?: number;
+    /** Whether the API is OpenAI-compatible */
+    openaiCompat: boolean;
+    /** Extra headers needed */
+    extraHeaders?: Record<string, string>;
+    /** Whether this provider supports Computer Use tool */
+    computerUse: boolean;
+    /** Whether capabilities (openaiCompat, supportsJsonMode, etc.) were verified
+     *  via a live probe, or merely assumed based on defaults. Unset / false means assumed. */
+    probed?: boolean;
+    /** Whether OpenAI-style JSON response_format is known to work reliably */
+    supportsJsonMode?: boolean;
+    /** Whether OpenAI-style tool calls are known to work reliably */
+    supportsToolCalls?: boolean;
+    /** Whether the vision model is a reasoning/thinking model (omit temperature, accept reasoning_content).
+     *  Examples: kimi-k2.5, deepseek-reasoner. These models reject temperature=0. */
+    reasoningVisionModel?: boolean;
+}
+/** Minimum context window in tokens for reliable desktop automation.
+ *  Models below this cannot handle web pages (200+ elements). */
+export declare const MIN_RECOMMENDED_CONTEXT = 16000;
+export declare const PROVIDERS: Record<string, ProviderProfile>;
+/**
+ * Auto-detect provider from API key format or explicit provider name.
+ */
+export declare function detectProvider(apiKey: string, explicitProvider?: string): string;
+export interface PipelineConfig {
+    /** Provider profile */
+    provider: ProviderProfile;
+    /** Provider key name */
+    providerKey: string;
+    /** API key */
+    apiKey: string;
+    /** Layer 1: Action router (always on) */
+    layer1: true;
+    /** Layer 2: Accessibility reasoner with text model */
+    layer2: {
+        enabled: boolean;
+        model: string;
+        baseUrl: string;
+        /** Per-layer API key (for mixed-provider pipelines where text and vision use different providers) */
+        apiKey?: string;
+    };
+    /** Layer 3: Screenshot + vision model */
+    layer3: {
+        enabled: boolean;
+        model: string;
+        baseUrl: string;
+        computerUse: boolean;
+        apiKey?: string;
+    };
+    /** OCR-first pipeline — enabled when OS OCR is available */
+    ocrEnabled?: boolean;
+    /** Skill cache — learns from successful task completions */
+    skillCacheEnabled?: boolean;
+}
+/**
+ * Build the optimal pipeline config from test results.
+ */
+export declare function buildPipeline(providerKey: string, apiKey: string, textModelWorks: boolean, visionModelWorks: boolean, textModelOverride?: string, visionModelOverride?: string): PipelineConfig;
+export declare function supportsOpenAiJsonMode(provider: ProviderProfile | undefined): boolean;
+export declare function supportsOpenAiToolCalls(provider: ProviderProfile | undefined): boolean;
+/** Result of scanning a single provider */
+export interface ProviderScanResult {
+    key: string;
+    name: string;
+    available: boolean;
+    /** For key-based providers: masked key.  For Ollama: 'reachable' or 'unreachable' */
+    detail: string;
+    /** API key to use (empty string for Ollama) */
+    apiKey: string;
+    /** Ollama-specific: list of discovered model ids */
+    ollamaModels?: string[];
+    /** Ollama-specific: which discovered models are vision-capable */
+    ollamaVisionModels?: string[];
+}
+/** Result of testing a specific model */
+export interface ModelTestResult {
+    providerKey: string;
+    model: string;
+    role: 'text' | 'vision';
+    ok: boolean;
+    latencyMs?: number;
+    error?: string;
+}
+/** Complete scan result */
+export interface ScanResult {
+    providers: ProviderScanResult[];
+    modelTests: ModelTestResult[];
+}
+/**
+ * Env var names we check per provider key.
+ * AI_API_KEY is a generic fallback; external config provider hints are preferred.
+ */
+export declare const PROVIDER_ENV_VARS: Record<string, string[]>;
+/**
+ * Scan ALL available AI providers in parallel.
+ *
+ * Returns which providers are available (have keys / are reachable),
+ * discovered Ollama models, etc.
+ */
+export declare function scanProviders(): Promise<ProviderScanResult[]>;
+/**
+ * Given scan results and model test results, build the optimal mixed pipeline.
+ */
+export declare function buildMixedPipeline(scanResults: ProviderScanResult[], modelTests: ModelTestResult[]): PipelineConfig;