@openchambery/web 2.0.0-beta.1 → 2.0.0-beta.4

package/server/lib/small-model/call.test.js

@@ -1,382 +0,0 @@
-import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest';
-
-// readConfig reads merged opencode config layers from disk; mock it so each
-// test controls the provider config without touching the filesystem. call.js
-// imports only readConfig from shared.js, so the rest of that module is left
-// untouched for this file.
-vi.mock('../opencode/shared.js', () => ({
-  readConfig: vi.fn(),
-}));
-
-const { callSmallModel } = await import('./call.js');
-const { readConfig } = await import('../opencode/shared.js');
-
-// Minimal catalog fragment used by the catalog-based base URL resolution case.
-// Base URL comes from model.api.url (OpenCode SDK shape), not provider.api.
-const CATALOG = {
-  mistral: {
-    id: 'mistral',
-    name: 'Mistral',
-    models: {
-      'mistral-small-latest': {
-        id: 'mistral-small-latest',
-        api: { url: 'https://api.mistral.ai/v1' },
-      },
-    },
-  },
-};
-
-const ok = (content) => ({
-  ok: true,
-  status: 200,
-  json: async () => ({
-    choices: [{ message: { content }, finish_reason: 'stop' }],
-  }),
-  text: async () => JSON.stringify({
-    choices: [{ message: { content }, finish_reason: 'stop' }],
-  }),
-});
-
-const lastCall = (mock) => {
-  const [url, init] = mock.mock.calls.at(-1);
-  return { url: String(url), init };
-};
-
-// Regression coverage for the small-model dispatch to custom OpenAI-compatible
-// providers — credential and endpoint resolution, precedence, and non-leakage.
-describe('callSmallModel — custom provider config', () => {
-  let fetchMock;
-  let originalFetch;
-
-  beforeEach(() => {
-    fetchMock = vi.fn();
-    originalFetch = globalThis.fetch;
-    globalThis.fetch = fetchMock;
-    readConfig.mockReset();
-  });
-
-  afterEach(() => {
-    globalThis.fetch = originalFetch;
-  });
-
-  describe('config-supplied credentials (no auth.json entry)', () => {
-    it('calls a custom summary API without an OpenCode provider login', async () => {
-      fetchMock.mockResolvedValue(ok('summary'));
-
-      const text = await callSmallModel({
-        auth: {},
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'summary-model',
-        prompt: 'Summarize this diff.',
-        custom: {
-          baseURL: 'https://summary.example.test/v1',
-          apiToken: 'summary-token',
-        },
-      });
-
-      expect(text).toBe('summary');
-      const { url, init } = lastCall(fetchMock);
-      expect(url).toBe('https://summary.example.test/v1/chat/completions');
-      expect(init.headers.Authorization).toBe('Bearer summary-token');
-      expect(JSON.stringify(init.body)).not.toContain('summary-token');
-    });
-
-    it('uses apiKey and baseURL from provider config when no auth.json entry exists', async () => {
-      readConfig.mockReturnValue({
-        provider: {
-          custom: {
-            options: { apiKey: 'test-key', baseURL: 'https://proxy.example.test/v1' },
-          },
-        },
-      });
-      fetchMock.mockResolvedValue(ok('hello'));
-
-      const text = await callSmallModel({
-        auth: {},
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      expect(text).toBe('hello');
-      expect(fetchMock).toHaveBeenCalledTimes(1);
-
-      const { url, init } = lastCall(fetchMock);
-      // Config baseURL is used, never the hardcoded OpenAI endpoint.
-      expect(url).toBe('https://proxy.example.test/v1/chat/completions');
-      expect(url).not.toContain('api.openai.com');
-      // Config apiKey becomes the bearer credential.
-      expect(init.headers.Authorization).toBe('Bearer test-key');
-    });
-
-    it('trims a trailing slash from the configured baseURL', async () => {
-      readConfig.mockReturnValue({
-        provider: {
-          custom: { options: { apiKey: 'k', baseURL: 'https://proxy.example.test/v1/' } },
-        },
-      });
-      fetchMock.mockResolvedValue(ok('ok'));
-
-      await callSmallModel({
-        auth: {},
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      expect(lastCall(fetchMock).url).toBe('https://proxy.example.test/v1/chat/completions');
-    });
-
-    it('throws "No OpenCode login found for provider" when neither auth.json nor config apiKey exists', async () => {
-      readConfig.mockReturnValue({
-        provider: { custom: { options: { baseURL: 'https://proxy.example.test/v1' } } },
-      });
-
-      await expect(callSmallModel({
-        auth: {},
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      })).rejects.toThrow('No OpenCode login found for provider "custom"');
-
-      // The credential gate fires before any network call.
-      expect(fetchMock).not.toHaveBeenCalled();
-    });
-
-    it('treats a blank/whitespace apiKey in config as absent', async () => {
-      readConfig.mockReturnValue({
-        provider: {
-          custom: { options: { apiKey: '   ', baseURL: 'https://proxy.example.test/v1' } },
-        },
-      });
-
-      await expect(callSmallModel({
-        auth: {},
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      })).rejects.toThrow('No OpenCode login found for provider "custom"');
-    });
-  });
-
-  describe('resolution order when auth.json is also present', () => {
-    it('uses the auth.json credential with the config baseURL', async () => {
-      readConfig.mockReturnValue({
-        provider: { custom: { options: { baseURL: 'https://proxy.example.test/v1' } } },
-      });
-      fetchMock.mockResolvedValue(ok('done'));
-
-      const text = await callSmallModel({
-        auth: { custom: { type: 'api', key: 'authjson-key' } },
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      expect(text).toBe('done');
-      const { url, init } = lastCall(fetchMock);
-      expect(url).toBe('https://proxy.example.test/v1/chat/completions');
-      expect(init.headers.Authorization).toBe('Bearer authjson-key');
-    });
-
-    it('prefers the config apiKey over an auth.json credential when both are present (matches OpenCode)', async () => {
-      readConfig.mockReturnValue({
-        provider: {
-          custom: { options: { apiKey: 'config-key', baseURL: 'https://proxy.example.test/v1' } },
-        },
-      });
-      fetchMock.mockResolvedValue(ok('done'));
-
-      await callSmallModel({
-        auth: { custom: { type: 'api', key: 'authjson-key' } },
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      // OpenCode's resolveSDK reads options.apiKey first and only falls back to
-      // auth.json's key when config has none — so the config key wins and the
-      // auth.json credential must never be sent.
-      expect(lastCall(fetchMock).init.headers.Authorization).toBe('Bearer config-key');
-      expect(JSON.stringify(fetchMock.mock.calls[0][1])).not.toContain('authjson-key');
-    });
-  });
-
-  describe('openai provider custom baseURL override', () => {
-    it('respects provider.openai.options.baseURL over the hardcoded OpenAI endpoint', async () => {
-      readConfig.mockReturnValue({
-        provider: { openai: { options: { baseURL: 'https://gateway.example.test/v1' } } },
-      });
-      fetchMock.mockResolvedValue(ok('ok'));
-
-      await callSmallModel({
-        auth: { openai: { type: 'api', key: 'sk-openai' } },
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'openai',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      const { url, init } = lastCall(fetchMock);
-      expect(url).toBe('https://gateway.example.test/v1/chat/completions');
-      expect(url).not.toContain('api.openai.com');
-      expect(init.headers.Authorization).toBe('Bearer sk-openai');
-    });
-
-    it('falls back to https://api.openai.com/v1 when no openai baseURL override is configured', async () => {
-      readConfig.mockReturnValue({});
-      fetchMock.mockResolvedValue(ok('ok'));
-
-      await callSmallModel({
-        auth: { openai: { type: 'api', key: 'sk-openai' } },
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'openai',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      expect(lastCall(fetchMock).url).toBe('https://api.openai.com/v1/chat/completions');
-    });
-
-    it('still requires a credential: a baseURL alone does not authenticate openai', async () => {
-      readConfig.mockReturnValue({
-        provider: { openai: { options: { baseURL: 'https://gateway.example.test/v1' } } },
-      });
-
-      await expect(callSmallModel({
-        auth: {},
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'openai',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      })).rejects.toThrow('No OpenCode login found for provider "openai"');
-    });
-  });
-
-  describe('catalog-based base URL (no config override)', () => {
-    it('uses the model api.url from the catalog when no config baseURL is set', async () => {
-      readConfig.mockReturnValue({});
-      fetchMock.mockResolvedValue(ok('ok'));
-
-      await callSmallModel({
-        auth: { mistral: { type: 'api', key: 'mistral-key' } },
-        catalog: CATALOG,
-        workingDirectory: '/proj',
-        providerID: 'mistral',
-        modelID: 'mistral-small-latest',
-        prompt: 'hi',
-      });
-
-      const { url, init } = lastCall(fetchMock);
-      expect(url).toBe('https://api.mistral.ai/v1/chat/completions');
-      expect(init.headers.Authorization).toBe('Bearer mistral-key');
-    });
-
-    it('prefers config baseURL over model api.url', async () => {
-      readConfig.mockReturnValue({
-        provider: { mistral: { options: { baseURL: 'https://gateway.example.test/v1' } } },
-      });
-      fetchMock.mockResolvedValue(ok('ok'));
-
-      await callSmallModel({
-        auth: { mistral: { type: 'api', key: 'mistral-key' } },
-        catalog: CATALOG,
-        workingDirectory: '/proj',
-        providerID: 'mistral',
-        modelID: 'mistral-small-latest',
-        prompt: 'hi',
-      });
-
-      expect(lastCall(fetchMock).url).toBe('https://gateway.example.test/v1/chat/completions');
-    });
-
-    it('throws when a non-openai provider has no model api.url and no config baseURL', async () => {
-      readConfig.mockReturnValue({});
-
-      await expect(callSmallModel({
-        auth: { custom: { type: 'api', key: 'k' } },
-        catalog: {},
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      })).rejects.toThrow('Provider "custom" has no known API base URL');
-    });
-  });
-
-  describe('config-supplied key does not leak', () => {
-    // The config-supplied key must stay in-memory: never copied into catalog
-    // metadata, the response, or the request body.
-    it('does not mutate the catalog or echo the key in the request/response', async () => {
-      const catalog = { custom: { id: 'custom', models: {} } };
-      const catalogBefore = JSON.parse(JSON.stringify(catalog));
-      readConfig.mockReturnValue({
-        provider: {
-          custom: { options: { apiKey: 'test-key', baseURL: 'https://proxy.example.test/v1' } },
-        },
-      });
-      fetchMock.mockResolvedValue(ok('the answer'));
-
-      const text = await callSmallModel({
-        auth: {},
-        catalog,
-        workingDirectory: '/proj',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      // Response text is exactly the model output — no credential echoed back.
-      expect(text).toBe('the answer');
-      // Catalog object left untouched (key stays in-memory only).
-      expect(catalog).toEqual(catalogBefore);
-
-      const { url, init } = lastCall(fetchMock);
-      // The key rides only in the Authorization header.
-      expect(url).not.toContain('test-key');
-      const body = JSON.parse(init.body);
-      expect(JSON.stringify(body)).not.toContain('test-key');
-    });
-  });
-
-  describe('merged config layers', () => {
-    it('reads the provider config for the supplied working directory', async () => {
-      readConfig.mockReturnValue({
-        provider: {
-          custom: { options: { apiKey: 'test-key', baseURL: 'https://proxy.example.test/v1' } },
-        },
-      });
-      fetchMock.mockResolvedValue(ok('ok'));
-
-      await callSmallModel({
-        auth: {},
-        catalog: {},
-        workingDirectory: '/path/to/project',
-        providerID: 'custom',
-        modelID: 'gpt-4o-mini',
-        prompt: 'hi',
-      });
-
-      // readConfig merges global + project-scoped layers for this directory;
-      // confirm callSmallModel passes the working directory straight through.
-      expect(readConfig).toHaveBeenCalledWith('/path/to/project');
-    });
-  });
-});

package/server/lib/small-model/opencode-session.js

@@ -1,183 +0,0 @@
-import fs from 'fs';
-import fsPromises from 'fs/promises';
-import os from 'os';
-import path from 'path';
-import { OpenCode } from '@opencode/client';
-
-// Temporary OpenCode path for providers that lack a dedicated small-model
-// adapter (plugin providers, region/credential-chain, …).
-// Auth, endpoint rewrite, and token refresh stay inside the OpenCode runtime.
-//
-// Prefer official `generate.text` (no session). The deny-all agent markdown in
-// the lazy temp directory remains available if a future caller needs a session
-// workspace, but pure-text small-model calls must not open coding sessions.
-
-export const SMALL_MODEL_AGENT_NAME = 'openchamber-smallmodel';
-export const SESSION_SETTLE_TIMEOUT_MS = 60_000;
-
-const AGENT_MARKDOWN = `---
-mode: primary
-hidden: true
-permissions:
-  - action: "*"
-    resource: "*"
-    effect: deny
----
-
-You are a utility text generator. Reply with only the requested text. Do not use tools.
-`;
-
-/** @type {string | null} */
-let tempDirectory = null;
-/** @type {Promise<string> | null} */
-let tempDirectoryInflight = null;
-
-const clientErrorMessage = (error, fallback) => {
-  if (typeof error?.message === 'string' && error.message.trim()) return error.message;
-  return fallback;
-};
-
-const ensureTempDirectory = async () => {
-  if (tempDirectory) return tempDirectory;
-  if (!tempDirectoryInflight) {
-    tempDirectoryInflight = (async () => {
-      const root = await fsPromises.mkdtemp(path.join(os.tmpdir(), 'openchamber-smallmodel-'));
-      const agentDir = path.join(root, '.opencode', 'agent');
-      await fsPromises.mkdir(agentDir, { recursive: true });
-      await fsPromises.writeFile(
-        path.join(agentDir, `${SMALL_MODEL_AGENT_NAME}.md`),
-        AGENT_MARKDOWN,
-        'utf8',
-      );
-      tempDirectory = root;
-      return root;
-    })().finally(() => {
-      tempDirectoryInflight = null;
-    });
-  }
-  return tempDirectoryInflight;
-};
-
-const createClient = ({ buildOpenCodeUrl, getOpenCodeAuthHeaders }) => {
-  const baseUrl = buildOpenCodeUrl('/', '').replace(/\/$/, '');
-  return OpenCode.make({
-    baseUrl,
-    headers: getOpenCodeAuthHeaders(),
-  });
-};
-
-/**
- * Generate text via official OpenCode `generate.text`.
- * Errors are never masked as empty success.
- *
- * @param {{
- *   buildOpenCodeUrl: (pathname: string, search?: string) => string,
- *   getOpenCodeAuthHeaders: () => Record<string, string>,
- *   providerID: string,
- *   modelID: string,
- *   prompt: string,
- *   system?: string,
- *   purpose?: string,
- *   directory?: string,
- *   settleTimeoutMs?: number,
- * }} options
- */
-export async function generateViaOpenCodeSession({
-  buildOpenCodeUrl,
-  getOpenCodeAuthHeaders,
-  providerID,
-  modelID,
-  prompt,
-  system,
-  purpose: _purpose,
-  directory,
-  settleTimeoutMs = SESSION_SETTLE_TIMEOUT_MS,
-}) {
-  if (typeof prompt !== 'string' || !prompt.trim()) {
-    throw new Error('OpenCode small-model session requires a prompt');
-  }
-  if (typeof providerID !== 'string' || !providerID.trim() || typeof modelID !== 'string' || !modelID.trim()) {
-    throw new Error('OpenCode small-model session requires providerID and modelID');
-  }
-
-  const budgetMs = Number(settleTimeoutMs) > 0 ? Number(settleTimeoutMs) : SESSION_SETTLE_TIMEOUT_MS;
-  // Keep the deny-all agent workspace warm for isolation invariants / future
-  // session needs, but pure text uses generate.text (no coding session).
-  await ensureTempDirectory();
-
-  const client = createClient({
-    buildOpenCodeUrl,
-    getOpenCodeAuthHeaders,
-  });
-
-  const locationDirectory = typeof directory === 'string' && directory.trim()
-    ? directory.trim()
-    : null;
-  const location = locationDirectory ? { directory: locationDirectory } : undefined;
-
-  const fullPrompt = [
-    typeof system === 'string' && system.trim() ? system.trim() : '',
-    prompt.trim(),
-  ].filter(Boolean).join('\n\n');
-
-  const controller = new AbortController();
-  const timeout = setTimeout(() => {
-    controller.abort(new Error(`OpenCode small-model generate timed out after ${budgetMs}ms`));
-  }, budgetMs);
-
-  try {
-    let result;
-    try {
-      result = await client.generate.text({
-        ...(location ? { location } : {}),
-        prompt: fullPrompt,
-        model: { id: modelID, providerID },
-      }, { signal: controller.signal });
-    } catch (error) {
-      if (controller.signal.aborted) {
-        throw controller.signal.reason instanceof Error
-          ? controller.signal.reason
-          : new Error(`OpenCode small-model generate timed out after ${budgetMs}ms`);
-      }
-      throw new Error(
-        `OpenCode small-model generate.text failed: ${clientErrorMessage(error, 'generate.text failed')}`,
-      );
-    }
-
-    const text = typeof result?.text === 'string' ? result.text : '';
-    if (!text.trim()) {
-      throw new Error('OpenCode small-model generate.text returned no assistant text');
-    }
-    return text;
-  } finally {
-    clearTimeout(timeout);
-  }
-}
-
-/** Best-effort cleanup of the lazy temp directory (agent markdown + empty root). */
-export async function stop() {
-  const dir = tempDirectory;
-  tempDirectory = null;
-  tempDirectoryInflight = null;
-  if (!dir) return;
-  try {
-    await fsPromises.rm(dir, { recursive: true, force: true });
-  } catch (error) {
-    // Sync fallback if async rm races a partially-created tree.
-    try {
-      fs.rmSync(dir, { recursive: true, force: true });
-    } catch {
-      console.warn('[small-model] failed to remove temp directory:', error?.message || error);
-    }
-  }
-}
-
-/** @internal test helpers */
-export const _test = {
-  getTempDirectory: () => tempDirectory,
-  resetTempDirectory: () => {
-    tempDirectory = null;
-    tempDirectoryInflight = null;
-  },
-  AGENT_MARKDOWN,
-};