@openclaw/chutes-provider 2026.10.10 → 2026.11.5-beta.1

package/dist/.setup/{models-nQwXxLyn.mjs → models-DnSR_ZQn.mjs}

@@ -155,34 +155,6 @@ const CHUTES_MODEL_CATALOG = buildManifestModelProviderConfig({
 	catalog: CHUTES_MANIFEST_CATALOG
 }).models.map(decorateChutesModelDefinition);
 const CACHE_TTL = 3e5;
-function projectChutesModels(rows) {
-	const seen = /* @__PURE__ */ new Set();
-	const models = [];
-	for (const row of rows) {
-		if (!row || typeof row !== "object" || Array.isArray(row)) continue;
-		const entry = row;
-		const id = normalizeOptionalString(entry.id) ?? "";
-		if (!id || seen.has(id)) continue;
-		seen.add(id);
-		const lowerId = normalizeLowercaseStringOrEmpty(id);
-		models.push({
-			id,
-			name: id,
-			reasoning: entry.supported_features?.includes("reasoning") || lowerId.includes("r1") || lowerId.includes("thinking") || lowerId.includes("reason") || lowerId.includes("tee"),
-			input: (entry.input_modalities || ["text"]).filter((item) => item === "text" || item === "image"),
-			cost: normalizeChutesModelPricing(entry.pricing) ?? {
-				input: 0,
-				output: 0,
-				cacheRead: 0,
-				cacheWrite: 0
-			},
-			contextWindow: asPositiveSafeInteger(entry.context_length) ?? asPositiveSafeInteger(entry.max_model_len) ?? CHUTES_DEFAULT_CONTEXT_WINDOW,
-			maxTokens: asPositiveSafeInteger(entry.max_output_length) ?? CHUTES_DEFAULT_MAX_TOKENS,
-			compat: { supportsUsageInStreaming: false }
-		});
-	}
-	return models;
-}
 async function discoverChutesModels(accessToken, options = {}) {
 	return (await buildLiveModelProviderConfig({
 		...options,
@@ -192,7 +164,7 @@ async function discoverChutesModels(accessToken, options = {}) {
 			baseUrl: CHUTES_BASE_URL,
 			api: "openai-completions"
 		},
-		models: structuredClone(CHUTES_MODEL_CATALOG),
+		models: CHUTES_MODEL_CATALOG,
 		discoveryApiKey: normalizeOptionalString(accessToken),
 		timeoutMs: 1e4,
 		ttlMs: CACHE_TTL,
@@ -200,7 +172,34 @@ async function discoverChutesModels(accessToken, options = {}) {
 		auditContext: "chutes-model-discovery",
 		fetchGuard: (params) => fetchWithSsrFGuard(withTrustedEnvProxyGuardedFetchMode(params)),
 		fallbackToAnonymousOnUnauthorized: true,
-		projectRows: projectChutesModels
+		projectRows: (rows) => {
+			const seen = /* @__PURE__ */ new Set();
+			const models = [];
+			for (const row of rows) {
+				if (!row || typeof row !== "object" || Array.isArray(row)) continue;
+				const entry = row;
+				const id = normalizeOptionalString(entry.id) ?? "";
+				if (!id || seen.has(id)) continue;
+				seen.add(id);
+				const lowerId = normalizeLowercaseStringOrEmpty(id);
+				models.push({
+					id,
+					name: id,
+					reasoning: entry.supported_features?.includes("reasoning") || lowerId.includes("r1") || lowerId.includes("thinking") || lowerId.includes("reason") || lowerId.includes("tee"),
+					input: (entry.input_modalities || ["text"]).filter((item) => item === "text" || item === "image"),
+					cost: normalizeChutesModelPricing(entry.pricing) ?? {
+						input: 0,
+						output: 0,
+						cacheRead: 0,
+						cacheWrite: 0
+					},
+					contextWindow: asPositiveSafeInteger(entry.context_length) ?? asPositiveSafeInteger(entry.max_model_len) ?? CHUTES_DEFAULT_CONTEXT_WINDOW,
+					maxTokens: asPositiveSafeInteger(entry.max_output_length) ?? CHUTES_DEFAULT_MAX_TOKENS,
+					compat: { supportsUsageInStreaming: false }
+				});
+			}
+			return models;
+		}
 	})).models;
 }
 export { openclaw_plugin_default as i, CHUTES_MODEL_CATALOG as n, discoverChutesModels as r, CHUTES_BASE_URL as t };

package/dist/.source-module-urls/57a22cf71076c0f146ec663e0217b8dccda90f034c03a80a80ea8703fc31fe6a.json

@@ -1 +1 @@
-{"version":3,"entries":[{"output":"api.js","source":"extensions/chutes/api.ts"},{"output":"index.js","source":"extensions/chutes/index.ts"},{"output":"models.js","source":"extensions/chutes/models.ts"},{"output":"oauth.js","source":"extensions/chutes/oauth.ts"},{"output":"onboard.js","source":"extensions/chutes/onboard.ts"},{"output":"pricing-api.js","source":"extensions/chutes/pricing-api.ts"},{"output":"provider-catalog.js","source":"extensions/chutes/provider-catalog.ts"}],"chunks":[{"output":".setup/models-nQwXxLyn.mjs","sha256":"bb3b6a1b000022f832f06f12d3745858f1b4860701cbf6e45aaecf6f5c73fa9e","facadeSource":null,"sources":["extensions/chutes/models.ts","extensions/chutes/openclaw.plugin.json"]},{"output":"api.js","sha256":"d3ba47ced8ab6b76f255dc46cbf71da57108084043ae7510f08a9ccf394a0d95","facadeSource":"extensions/chutes/api.ts","sources":[]},{"output":"index.js","sha256":"5a04ca7dbbfcd1cd87363a7ba1e8c4533891f53a37e199d06a8ee50dd016b8f9","facadeSource":"extensions/chutes/index.ts","sources":["extensions/chutes/index.ts"]},{"output":"models.js","sha256":"34757e4f6d66ec8f06dd75b72fb2a9fcf7d3199f569530d7f65508a630e68514","facadeSource":"extensions/chutes/models.ts","sources":[]},{"output":"oauth.js","sha256":"d6f366f26dcac8e808e75acc2d034429bb546088f032373043524f14d5945f8f","facadeSource":"extensions/chutes/oauth.ts","sources":["extensions/chutes/oauth.ts"]},{"output":"onboard.js","sha256":"8f66327e4f02efe620c1ac0f3e679606b3eda9339124d0092b012bc9ed6ca2a0","facadeSource":"extensions/chutes/onboard.ts","sources":["extensions/chutes/onboard.ts"]},{"output":"pricing-api.js","sha256":"9372d586e4032b5b2518810b16a4aaa092560d12e781c4ef19f87e7fd62467e2","facadeSource":"extensions/chutes/pricing-api.ts","sources":["extensions/chutes/pricing-api.ts"]},{"output":"provider-catalog.js","sha256":"b6c26d6dbbf1f4ad3a4c9cb2c95ad86a66466d78ccb919edc769f3bd6688e255","facadeSource":"extensions/chutes/provider-catalog.ts","sources":["extensions/chutes/provider-catalog.ts"]}],"unrenderedSources":["extensions/chutes/api.ts"]}
+{"version":3,"entries":[{"output":"api.js","source":"extensions/chutes/api.ts"},{"output":"index.js","source":"extensions/chutes/index.ts"},{"output":"models.js","source":"extensions/chutes/models.ts"},{"output":"oauth.js","source":"extensions/chutes/oauth.ts"},{"output":"onboard.js","source":"extensions/chutes/onboard.ts"},{"output":"pricing-api.js","source":"extensions/chutes/pricing-api.ts"},{"output":"provider-catalog.js","source":"extensions/chutes/provider-catalog.ts"}],"chunks":[{"output":".setup/models-DnSR_ZQn.mjs","sha256":"c0eb3e452b5d452fe49b2669f500f77897a8a3156e5f5ce37b55d70a512f12d8","facadeSource":null,"sources":["extensions/chutes/models.ts","extensions/chutes/openclaw.plugin.json"]},{"output":"api.js","sha256":"fc74dd0090fb98d4c2963448b261db8899434cdca1cedd7f9833ab67d5e4d82e","facadeSource":"extensions/chutes/api.ts","sources":[]},{"output":"index.js","sha256":"5a04ca7dbbfcd1cd87363a7ba1e8c4533891f53a37e199d06a8ee50dd016b8f9","facadeSource":"extensions/chutes/index.ts","sources":["extensions/chutes/index.ts"]},{"output":"models.js","sha256":"76684ea5f997548a06bf7608fcf0e408d75ba8f8526df15fab090acf868e6c6a","facadeSource":"extensions/chutes/models.ts","sources":[]},{"output":"oauth.js","sha256":"f4df57cdbb47a76e098f70bd6f6f46b49af31df5acf24471bcdbe03367c1d351","facadeSource":"extensions/chutes/oauth.ts","sources":["extensions/chutes/oauth.ts"]},{"output":"onboard.js","sha256":"52c9409ef178eaa0fb29e6dae3ca4cfe9fa13c09e2343612158f5400e1bdd236","facadeSource":"extensions/chutes/onboard.ts","sources":["extensions/chutes/onboard.ts"]},{"output":"pricing-api.js","sha256":"9372d586e4032b5b2518810b16a4aaa092560d12e781c4ef19f87e7fd62467e2","facadeSource":"extensions/chutes/pricing-api.ts","sources":["extensions/chutes/pricing-api.ts"]},{"output":"provider-catalog.js","sha256":"8b076d0d9df8bc7a8bbfe982b384cc17b9a5a3442a30ea5d0deb97ffe9db72f0","facadeSource":"extensions/chutes/provider-catalog.ts","sources":["extensions/chutes/provider-catalog.ts"]}],"unrenderedSources":["extensions/chutes/api.ts"]}

package/dist/api.js

@@ -1,4 +1,4 @@
-import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-nQwXxLyn.mjs";
+import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-DnSR_ZQn.mjs";
 import { CHUTES_DEFAULT_MODEL_ID, CHUTES_DEFAULT_MODEL_REF, applyChutesApiKeyConfig, applyChutesConfig, applyChutesProviderConfig } from "./onboard.js";
 import { buildChutesProvider } from "./provider-catalog.js";
 export { CHUTES_BASE_URL, CHUTES_DEFAULT_MODEL_ID, CHUTES_DEFAULT_MODEL_REF, CHUTES_MODEL_CATALOG, applyChutesApiKeyConfig, applyChutesConfig, applyChutesProviderConfig, buildChutesProvider, discoverChutesModels };

package/dist/models.js

@@ -1 +1 @@
-export { t as CHUTES_BASE_URL, n as CHUTES_MODEL_CATALOG, r as discoverChutesModels } from "./.setup/models-nQwXxLyn.mjs";
+export { t as CHUTES_BASE_URL, n as CHUTES_MODEL_CATALOG, r as discoverChutesModels } from "./.setup/models-DnSR_ZQn.mjs";

package/dist/oauth.js

@@ -5,40 +5,13 @@ import { withTrustedEnvProxyGuardedFetchMode } from "openclaw/plugin-sdk/fetch-r
 import { resolveExpiresAtMsFromDurationSeconds } from "openclaw/plugin-sdk/number-runtime";
 import { parseOAuthCallbackInput, waitForLocalOAuthCallback } from "openclaw/plugin-sdk/provider-auth-runtime";
 import { assertOkOrThrowProviderError, readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
-import { buildOAuthRequestSignal } from "openclaw/plugin-sdk/provider-oauth-runtime";
+import { buildOAuthRequestSignal, createOAuthRefreshError, createOAuthRefreshResponseError } from "openclaw/plugin-sdk/provider-oauth-runtime";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 // extensions/chutes/oauth.ts
 const CHUTES_AUTHORIZE_ENDPOINT = "https://api.chutes.ai/idp/authorize";
 const CHUTES_TOKEN_ENDPOINT = "https://api.chutes.ai/idp/token";
 const CHUTES_USERINFO_ENDPOINT = "https://api.chutes.ai/idp/userinfo";
 const CHUTES_OAUTH_REQUEST_TIMEOUT_MS = 3e4;
-function parseRedirectUri(redirectUri) {
-	const url = new URL(redirectUri);
-	if (url.protocol !== "http:") throw new Error(`Chutes OAuth redirect URI must be http:// (got ${redirectUri})`);
-	const hostname = url.hostname === "[::1]" ? "::1" : url.hostname || "127.0.0.1";
-	if (hostname !== "localhost" && hostname !== "127.0.0.1" && hostname !== "::1") throw new Error(`Chutes OAuth redirect hostname must be loopback (got ${hostname}). Use http://127.0.0.1:<port>/...`);
-	return {
-		hostname,
-		port: url.port ? Number.parseInt(url.port, 10) : 80,
-		pathname: url.pathname || "/"
-	};
-}
-function parseManualOAuthInput(input, expectedState) {
-	const parsed = parseOAuthCallbackInput(input, {
-		invalidInput: "Paste the full redirect URL (must include code + state).",
-		missingState: "Missing 'state' parameter. Paste the full redirect URL."
-	});
-	if ("error" in parsed) throw new Error(parsed.error);
-	if (parsed.state !== expectedState) throw new Error("OAuth state mismatch - possible CSRF attack. Please retry login.");
-	return parsed;
-}
-function resolveChutesExpiresAt(value, now) {
-	return resolveExpiresAtMsFromDurationSeconds(value, {
-		nowMs: now,
-		bufferMs: 3e5,
-		minRemainingMs: 3e4
-	});
-}
 async function requestChutesTokenGrant(params) {
 	const { response, release } = await fetchWithSsrFGuard(withTrustedEnvProxyGuardedFetchMode({
 		url: CHUTES_TOKEN_ENDPOINT,
@@ -53,15 +26,37 @@ async function requestChutesTokenGrant(params) {
 		})
 	}));
 	try {
-		await assertOkOrThrowProviderError(response, `${params.responseLabel} failed`);
+		if (params.responseLabel === "Chutes token exchange") await assertOkOrThrowProviderError(response, `${params.responseLabel} failed`);
 		const data = await readProviderJsonResponse(response, params.responseLabel);
+		if (!response.ok || data.error !== void 0) throw createOAuthRefreshResponseError(params.responseLabel, response.status, data);
 		const access = normalizeOptionalString(data.access_token);
-		const expires = resolveChutesExpiresAt(data.expires_in, params.now ?? Date.now());
-		if (!access) throw new Error(`${params.responseLabel} returned no access_token`);
-		if (expires === void 0) throw new Error(`${params.responseLabel} returned invalid expires_in`);
+		const expires = resolveExpiresAtMsFromDurationSeconds(data.expires_in, {
+			nowMs: params.now ?? Date.now(),
+			bufferMs: 3e5,
+			minRemainingMs: 3e4
+		});
+		if (!access) throw createOAuthRefreshError(`${params.responseLabel} returned no access_token`, {
+			version: 1,
+			phase: "after-token-response",
+			outcome: "unknown",
+			status: response.status
+		});
+		if (expires === void 0) throw createOAuthRefreshError(`${params.responseLabel} returned invalid expires_in`, {
+			version: 1,
+			phase: "after-token-response",
+			outcome: "unknown",
+			status: response.status
+		});
+		const refresh = normalizeOptionalString(data.refresh_token);
+		if (data.refresh_token !== void 0 && !refresh) throw createOAuthRefreshError(`${params.responseLabel} returned invalid refresh_token`, {
+			version: 1,
+			phase: "after-token-response",
+			outcome: "unknown",
+			status: response.status
+		});
 		return {
 			access,
-			refresh: normalizeOptionalString(data.refresh_token),
+			refresh,
 			expires
 		};
 	} finally {
@@ -85,41 +80,6 @@ async function fetchChutesUserInfo(params) {
 		await release();
 	}
 }
-async function exchangeChutesCodeForTokens(params) {
-	const now = Date.now();
-	const body = new URLSearchParams({
-		grant_type: "authorization_code",
-		client_id: params.app.clientId,
-		code: params.code,
-		redirect_uri: params.app.redirectUri,
-		code_verifier: params.codeVerifier
-	});
-	if (params.app.clientSecret) body.set("client_secret", params.app.clientSecret);
-	const token = await requestChutesTokenGrant({
-		body,
-		responseLabel: "Chutes token exchange",
-		now,
-		...params.signal ? { signal: params.signal } : {}
-	});
-	if (!token.refresh) throw new Error("Chutes token exchange returned no refresh_token");
-	let info = null;
-	try {
-		info = await fetchChutesUserInfo({
-			accessToken: token.access,
-			...params.signal ? { signal: params.signal } : {}
-		});
-	} catch (error) {
-		if (params.signal?.aborted) throw error;
-	}
-	return {
-		access: token.access,
-		refresh: token.refresh,
-		expires: token.expires,
-		email: info?.username,
-		accountId: info?.sub,
-		clientId: params.app.clientId
-	};
-}
 /** Refreshes a stored Chutes OAuth credential through the provider token endpoint. */
 async function refreshChutesOAuthCredential(credential) {
 	const refreshToken = normalizeOptionalString(credential.refresh);
@@ -159,25 +119,39 @@ async function loginChutes(params) {
 		code_challenge_method: "S256"
 	});
 	const url = `${CHUTES_AUTHORIZE_ENDPOINT}?${query}`;
-	const promptForCode = async () => parseManualOAuthInput(await params.onPrompt({
-		message: "Paste the redirect URL",
-		placeholder: `${params.app.redirectUri}?code=...&state=...`
-	}), state);
+	const promptForCode = async () => {
+		const parsed = parseOAuthCallbackInput(await params.onPrompt({
+			message: "Paste the redirect URL",
+			placeholder: `${params.app.redirectUri}?code=...&state=...`
+		}), {
+			invalidInput: "Paste the full redirect URL (must include code + state).",
+			missingState: "Missing 'state' parameter. Paste the full redirect URL."
+		});
+		if ("error" in parsed) throw new Error(parsed.error);
+		if (parsed.state !== state) throw new Error("OAuth state mismatch - possible CSRF attack. Please retry login.");
+		return parsed;
+	};
 	let codeAndState;
 	if (params.manual) {
 		await params.onAuth({ url });
 		params.onProgress?.("Waiting for redirect URL...");
 		codeAndState = await promptForCode();
 	} else {
-		const redirect = parseRedirectUri(params.app.redirectUri);
+		const redirectUri = params.app.redirectUri;
+		const redirect = new URL(redirectUri);
+		if (redirect.protocol !== "http:") throw new Error(`Chutes OAuth redirect URI must be http:// (got ${redirectUri})`);
+		const hostname = redirect.hostname === "[::1]" ? "::1" : redirect.hostname || "127.0.0.1";
+		if (hostname !== "localhost" && hostname !== "127.0.0.1" && hostname !== "::1") throw new Error(`Chutes OAuth redirect hostname must be loopback (got ${hostname}). Use http://127.0.0.1:<port>/...`);
+		const port = redirect.port ? Number.parseInt(redirect.port, 10) : 80;
+		const pathname = redirect.pathname || "/";
 		const callback = waitForLocalOAuthCallback({
 			expectedState: state,
 			timeoutMs: 18e4,
-			port: redirect.port,
-			callbackPath: redirect.pathname,
+			port,
+			callbackPath: pathname,
 			redirectUri: params.app.redirectUri,
 			successTitle: "Chutes OAuth complete",
-			hostname: redirect.hostname,
+			hostname,
 			onProgress: params.onProgress,
 			...params.signal ? { signal: params.signal } : {}
 		}).catch(async (error) => {
@@ -189,11 +163,40 @@ async function loginChutes(params) {
 		codeAndState = await callback;
 	}
 	params.onProgress?.("Exchanging code for tokens...");
-	return await exchangeChutesCodeForTokens({
-		app: params.app,
+	const app = params.app;
+	const signal = params.signal;
+	const now = Date.now();
+	const body = new URLSearchParams({
+		grant_type: "authorization_code",
+		client_id: app.clientId,
 		code: codeAndState.code,
-		codeVerifier: verifier,
-		...params.signal ? { signal: params.signal } : {}
+		redirect_uri: app.redirectUri,
+		code_verifier: verifier
+	});
+	if (app.clientSecret) body.set("client_secret", app.clientSecret);
+	const token = await requestChutesTokenGrant({
+		body,
+		responseLabel: "Chutes token exchange",
+		now,
+		...signal ? { signal } : {}
 	});
+	if (!token.refresh) throw new Error("Chutes token exchange returned no refresh_token");
+	let info = null;
+	try {
+		info = await fetchChutesUserInfo({
+			accessToken: token.access,
+			...signal ? { signal } : {}
+		});
+	} catch (error) {
+		if (signal?.aborted) throw error;
+	}
+	return {
+		access: token.access,
+		refresh: token.refresh,
+		expires: token.expires,
+		email: info?.username,
+		accountId: info?.sub,
+		clientId: app.clientId
+	};
 }
 export { loginChutes, refreshChutesOAuthCredential };

package/dist/onboard.js

@@ -1,4 +1,4 @@
-import { i as openclaw_plugin_default, n as CHUTES_MODEL_CATALOG, t as CHUTES_BASE_URL } from "./.setup/models-nQwXxLyn.mjs";
+import { i as openclaw_plugin_default, n as CHUTES_MODEL_CATALOG, t as CHUTES_BASE_URL } from "./.setup/models-DnSR_ZQn.mjs";
 import { readManifestProviderDefaultModelRef } from "openclaw/plugin-sdk/provider-catalog-shared";
 import { applyAgentDefaultModelPrimary, createModelCatalogPresetAppliers } from "openclaw/plugin-sdk/provider-onboard";
 // extensions/chutes/onboard.ts
@@ -10,7 +10,7 @@ const { applyProviderConfig: applyChutesProviderConfig } = createModelCatalogPre
 		providerId: "chutes",
 		api: "openai-completions",
 		baseUrl: CHUTES_BASE_URL,
-		catalogModels: cfg.models?.mode === "replace" ? structuredClone(CHUTES_MODEL_CATALOG) : [],
+		catalogModels: cfg.models?.mode === "replace" ? CHUTES_MODEL_CATALOG : [],
 		aliases: [
 			...CHUTES_MODEL_CATALOG.map((model) => `chutes/${model.id}`),
 			{

package/dist/provider-catalog.js

@@ -1,10 +1,10 @@
-import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-nQwXxLyn.mjs";
+import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-DnSR_ZQn.mjs";
 // extensions/chutes/provider-catalog.ts
 function buildStaticChutesProvider() {
 	return {
 		baseUrl: CHUTES_BASE_URL,
 		api: "openai-completions",
-		models: structuredClone(CHUTES_MODEL_CATALOG)
+		models: CHUTES_MODEL_CATALOG
 	};
 }
 async function buildChutesProvider(accessToken, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/chutes-provider",
-  "version": "2026.10.10",
+  "version": "2026.11.5-beta.1",
   "description": "OpenClaw Chutes.ai provider plugin.",
   "repository": {
     "type": "git",
@@ -18,10 +18,10 @@
       "minHostVersion": ">=2026.6.8"
     },
     "compat": {
-      "pluginApi": ">=2026.10.10"
+      "pluginApi": ">=2026.11.5-beta.1"
     },
     "build": {
-      "openclawVersion": "2026.10.10",
+      "openclawVersion": "2026.11.5-beta.1",
       "bundledDist": false
     },
     "release": {
@@ -40,7 +40,7 @@
     "assets/activity.svg"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.10.10"
+    "openclaw": ">=2026.11.5-beta.1"
   },
   "peerDependenciesMeta": {
     "openclaw": {