@openclaw/chutes-provider 2026.11.3 → 2026.11.5-beta.2

package/dist/.setup/{models-mN33VNCv.mjs → models-cgatbipe.mjs}

@@ -156,34 +156,6 @@ const CHUTES_MODEL_CATALOG = buildManifestModelProviderConfig({
 	catalog: CHUTES_MANIFEST_CATALOG
 }).models.map(decorateChutesModelDefinition);
 const CACHE_TTL = 3e5;
-function projectChutesModels(rows) {
-	const seen = /* @__PURE__ */ new Set();
-	const models = [];
-	for (const row of rows) {
-		if (!row || typeof row !== "object" || Array.isArray(row)) continue;
-		const entry = row;
-		const id = normalizeOptionalString(entry.id) ?? "";
-		if (!id || seen.has(id)) continue;
-		seen.add(id);
-		const lowerId = normalizeLowercaseStringOrEmpty(id);
-		models.push({
-			id,
-			name: id,
-			reasoning: entry.supported_features?.includes("reasoning") || lowerId.includes("r1") || lowerId.includes("thinking") || lowerId.includes("reason") || lowerId.includes("tee"),
-			input: (entry.input_modalities || ["text"]).filter((item) => item === "text" || item === "image"),
-			cost: normalizeChutesModelPricing(entry.pricing) ?? {
-				input: 0,
-				output: 0,
-				cacheRead: 0,
-				cacheWrite: 0
-			},
-			contextWindow: asPositiveSafeInteger(entry.context_length) ?? asPositiveSafeInteger(entry.max_model_len) ?? CHUTES_DEFAULT_CONTEXT_WINDOW,
-			maxTokens: asPositiveSafeInteger(entry.max_output_length) ?? CHUTES_DEFAULT_MAX_TOKENS,
-			compat: { supportsUsageInStreaming: false }
-		});
-	}
-	return models;
-}
 async function discoverChutesModels(accessToken, options = {}) {
 	return (await buildLiveModelProviderConfig({
 		...options,
@@ -193,7 +165,7 @@ async function discoverChutesModels(accessToken, options = {}) {
 			baseUrl: CHUTES_BASE_URL,
 			api: "openai-completions"
 		},
-		models: structuredClone(CHUTES_MODEL_CATALOG),
+		models: CHUTES_MODEL_CATALOG,
 		discoveryApiKey: normalizeOptionalString(accessToken),
 		timeoutMs: 1e4,
 		ttlMs: CACHE_TTL,
@@ -201,7 +173,34 @@ async function discoverChutesModels(accessToken, options = {}) {
 		auditContext: "chutes-model-discovery",
 		fetchGuard: (params) => fetchWithSsrFGuard(withTrustedEnvProxyGuardedFetchMode(params)),
 		fallbackToAnonymousOnUnauthorized: true,
-		projectRows: projectChutesModels
+		projectRows: (rows) => {
+			const seen = /* @__PURE__ */ new Set();
+			const models = [];
+			for (const row of rows) {
+				if (!row || typeof row !== "object" || Array.isArray(row)) continue;
+				const entry = row;
+				const id = normalizeOptionalString(entry.id) ?? "";
+				if (!id || seen.has(id)) continue;
+				seen.add(id);
+				const lowerId = normalizeLowercaseStringOrEmpty(id);
+				models.push({
+					id,
+					name: id,
+					reasoning: entry.supported_features?.includes("reasoning") || lowerId.includes("r1") || lowerId.includes("thinking") || lowerId.includes("reason") || lowerId.includes("tee"),
+					input: (entry.input_modalities || ["text"]).filter((item) => item === "text" || item === "image"),
+					cost: normalizeChutesModelPricing(entry.pricing) ?? {
+						input: 0,
+						output: 0,
+						cacheRead: 0,
+						cacheWrite: 0
+					},
+					contextWindow: asPositiveSafeInteger(entry.context_length) ?? asPositiveSafeInteger(entry.max_model_len) ?? CHUTES_DEFAULT_CONTEXT_WINDOW,
+					maxTokens: asPositiveSafeInteger(entry.max_output_length) ?? CHUTES_DEFAULT_MAX_TOKENS,
+					compat: { supportsUsageInStreaming: false }
+				});
+			}
+			return models;
+		}
 	})).models;
 }
 //#endregion

package/dist/.source-module-urls/57a22cf71076c0f146ec663e0217b8dccda90f034c03a80a80ea8703fc31fe6a.json

@@ -0,0 +1 @@
+{"version":3,"entries":[{"output":"api.js","source":"extensions/chutes/api.ts"},{"output":"index.js","source":"extensions/chutes/index.ts"},{"output":"models.js","source":"extensions/chutes/models.ts"},{"output":"oauth.js","source":"extensions/chutes/oauth.ts"},{"output":"onboard.js","source":"extensions/chutes/onboard.ts"},{"output":"pricing-api.js","source":"extensions/chutes/pricing-api.ts"},{"output":"provider-catalog.js","source":"extensions/chutes/provider-catalog.ts"}],"chunks":[{"output":".setup/models-cgatbipe.mjs","sha256":"b43608d1bf56b96b93dd3e8811ee0f26cacd66b40ef804042f3645359a05cfc0","facadeSource":null,"sources":["extensions/chutes/models.ts","extensions/chutes/openclaw.plugin.json"]},{"output":"api.js","sha256":"166defab109881ce3dbf5336e043ee3d14e50f0a7facd29111a28218caff2669","facadeSource":"extensions/chutes/api.ts","sources":[]},{"output":"index.js","sha256":"40d05af769443f48e5cf27502d6ca7541f43faa7a6d06a99c67ff9c462954435","facadeSource":"extensions/chutes/index.ts","sources":["extensions/chutes/index.ts"]},{"output":"models.js","sha256":"51de8d81c4ff05171493c261176e69cff32fd5b9871cab13f51e486c60d07971","facadeSource":"extensions/chutes/models.ts","sources":[]},{"output":"oauth.js","sha256":"53e807454220263e30cc5c99b403ef4ed50cca57de7743807813a1c4f6d40fe0","facadeSource":"extensions/chutes/oauth.ts","sources":["extensions/chutes/oauth.ts"]},{"output":"onboard.js","sha256":"a3fad4bd4228797b689df28f40e8a0a709072e11fee540058e6599c8b08b961c","facadeSource":"extensions/chutes/onboard.ts","sources":["extensions/chutes/onboard.ts"]},{"output":"pricing-api.js","sha256":"f0a4c76f38ad437f67aa37cb0a7789019a494c6b2fc7ac99998b1cbcc45054d6","facadeSource":"extensions/chutes/pricing-api.ts","sources":["extensions/chutes/pricing-api.ts"]},{"output":"provider-catalog.js","sha256":"42d8ee11f007d7fadcf12de83cd617a9258ae9bfa9fd8d7ec8a955132f962b38","facadeSource":"extensions/chutes/provider-catalog.ts","sources":["extensions/chutes/provider-catalog.ts"]}],"unrenderedSources":["extensions/chutes/api.ts"]}

package/dist/api.js

@@ -1,4 +1,4 @@
-import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-mN33VNCv.mjs";
+import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-cgatbipe.mjs";
 import { CHUTES_DEFAULT_MODEL_ID, CHUTES_DEFAULT_MODEL_REF, applyChutesApiKeyConfig, applyChutesConfig, applyChutesProviderConfig } from "./onboard.js";
 import { buildChutesProvider } from "./provider-catalog.js";
 export { CHUTES_BASE_URL, CHUTES_DEFAULT_MODEL_ID, CHUTES_DEFAULT_MODEL_REF, CHUTES_MODEL_CATALOG, applyChutesApiKeyConfig, applyChutesConfig, applyChutesProviderConfig, buildChutesProvider, discoverChutesModels };

package/dist/models.js

@@ -1,2 +1 @@
-import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-mN33VNCv.mjs";
-export { CHUTES_BASE_URL, CHUTES_MODEL_CATALOG, discoverChutesModels };
+export { t as CHUTES_BASE_URL, n as CHUTES_MODEL_CATALOG, r as discoverChutesModels } from "./.setup/models-cgatbipe.mjs";

package/dist/oauth.js

@@ -5,40 +5,13 @@ import { withTrustedEnvProxyGuardedFetchMode } from "openclaw/plugin-sdk/fetch-r
 import { resolveExpiresAtMsFromDurationSeconds } from "openclaw/plugin-sdk/number-runtime";
 import { parseOAuthCallbackInput, waitForLocalOAuthCallback } from "openclaw/plugin-sdk/provider-auth-runtime";
 import { assertOkOrThrowProviderError, readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
-import { buildOAuthRequestSignal } from "openclaw/plugin-sdk/provider-oauth-runtime";
+import { buildOAuthRequestSignal, createOAuthRefreshError, createOAuthRefreshResponseError } from "openclaw/plugin-sdk/provider-oauth-runtime";
 import { fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 //#region extensions/chutes/oauth.ts
 const CHUTES_AUTHORIZE_ENDPOINT = "https://api.chutes.ai/idp/authorize";
 const CHUTES_TOKEN_ENDPOINT = "https://api.chutes.ai/idp/token";
 const CHUTES_USERINFO_ENDPOINT = "https://api.chutes.ai/idp/userinfo";
 const CHUTES_OAUTH_REQUEST_TIMEOUT_MS = 3e4;
-function parseRedirectUri(redirectUri) {
-	const url = new URL(redirectUri);
-	if (url.protocol !== "http:") throw new Error(`Chutes OAuth redirect URI must be http:// (got ${redirectUri})`);
-	const hostname = url.hostname === "[::1]" ? "::1" : url.hostname || "127.0.0.1";
-	if (hostname !== "localhost" && hostname !== "127.0.0.1" && hostname !== "::1") throw new Error(`Chutes OAuth redirect hostname must be loopback (got ${hostname}). Use http://127.0.0.1:<port>/...`);
-	return {
-		hostname,
-		port: url.port ? Number.parseInt(url.port, 10) : 80,
-		pathname: url.pathname || "/"
-	};
-}
-function parseManualOAuthInput(input, expectedState) {
-	const parsed = parseOAuthCallbackInput(input, {
-		invalidInput: "Paste the full redirect URL (must include code + state).",
-		missingState: "Missing 'state' parameter. Paste the full redirect URL."
-	});
-	if ("error" in parsed) throw new Error(parsed.error);
-	if (parsed.state !== expectedState) throw new Error("OAuth state mismatch - possible CSRF attack. Please retry login.");
-	return parsed;
-}
-function resolveChutesExpiresAt(value, now) {
-	return resolveExpiresAtMsFromDurationSeconds(value, {
-		nowMs: now,
-		bufferMs: 3e5,
-		minRemainingMs: 3e4
-	});
-}
 async function requestChutesTokenGrant(params) {
 	const { response, release } = await fetchWithSsrFGuard(withTrustedEnvProxyGuardedFetchMode({
 		url: CHUTES_TOKEN_ENDPOINT,
@@ -53,15 +26,37 @@ async function requestChutesTokenGrant(params) {
 		})
 	}));
 	try {
-		await assertOkOrThrowProviderError(response, `${params.responseLabel} failed`);
+		if (params.responseLabel === "Chutes token exchange") await assertOkOrThrowProviderError(response, `${params.responseLabel} failed`);
 		const data = await readProviderJsonResponse(response, params.responseLabel);
+		if (!response.ok || data.error !== void 0) throw createOAuthRefreshResponseError(params.responseLabel, response.status, data);
 		const access = normalizeOptionalString(data.access_token);
-		const expires = resolveChutesExpiresAt(data.expires_in, params.now ?? Date.now());
-		if (!access) throw new Error(`${params.responseLabel} returned no access_token`);
-		if (expires === void 0) throw new Error(`${params.responseLabel} returned invalid expires_in`);
+		const expires = resolveExpiresAtMsFromDurationSeconds(data.expires_in, {
+			nowMs: params.now ?? Date.now(),
+			bufferMs: 3e5,
+			minRemainingMs: 3e4
+		});
+		if (!access) throw createOAuthRefreshError(`${params.responseLabel} returned no access_token`, {
+			version: 1,
+			phase: "after-token-response",
+			outcome: "unknown",
+			status: response.status
+		});
+		if (expires === void 0) throw createOAuthRefreshError(`${params.responseLabel} returned invalid expires_in`, {
+			version: 1,
+			phase: "after-token-response",
+			outcome: "unknown",
+			status: response.status
+		});
+		const refresh = normalizeOptionalString(data.refresh_token);
+		if (data.refresh_token !== void 0 && !refresh) throw createOAuthRefreshError(`${params.responseLabel} returned invalid refresh_token`, {
+			version: 1,
+			phase: "after-token-response",
+			outcome: "unknown",
+			status: response.status
+		});
 		return {
 			access,
-			refresh: normalizeOptionalString(data.refresh_token),
+			refresh,
 			expires
 		};
 	} finally {
@@ -85,41 +80,6 @@ async function fetchChutesUserInfo(params) {
 		await release();
 	}
 }
-async function exchangeChutesCodeForTokens(params) {
-	const now = Date.now();
-	const body = new URLSearchParams({
-		grant_type: "authorization_code",
-		client_id: params.app.clientId,
-		code: params.code,
-		redirect_uri: params.app.redirectUri,
-		code_verifier: params.codeVerifier
-	});
-	if (params.app.clientSecret) body.set("client_secret", params.app.clientSecret);
-	const token = await requestChutesTokenGrant({
-		body,
-		responseLabel: "Chutes token exchange",
-		now,
-		...params.signal ? { signal: params.signal } : {}
-	});
-	if (!token.refresh) throw new Error("Chutes token exchange returned no refresh_token");
-	let info = null;
-	try {
-		info = await fetchChutesUserInfo({
-			accessToken: token.access,
-			...params.signal ? { signal: params.signal } : {}
-		});
-	} catch (error) {
-		if (params.signal?.aborted) throw error;
-	}
-	return {
-		access: token.access,
-		refresh: token.refresh,
-		expires: token.expires,
-		email: info?.username,
-		accountId: info?.sub,
-		clientId: params.app.clientId
-	};
-}
 /** Refreshes a stored Chutes OAuth credential through the provider token endpoint. */
 async function refreshChutesOAuthCredential(credential) {
 	const refreshToken = normalizeOptionalString(credential.refresh);
@@ -159,25 +119,39 @@ async function loginChutes(params) {
 		code_challenge_method: "S256"
 	});
 	const url = `${CHUTES_AUTHORIZE_ENDPOINT}?${query}`;
-	const promptForCode = async () => parseManualOAuthInput(await params.onPrompt({
-		message: "Paste the redirect URL",
-		placeholder: `${params.app.redirectUri}?code=...&state=...`
-	}), state);
+	const promptForCode = async () => {
+		const parsed = parseOAuthCallbackInput(await params.onPrompt({
+			message: "Paste the redirect URL",
+			placeholder: `${params.app.redirectUri}?code=...&state=...`
+		}), {
+			invalidInput: "Paste the full redirect URL (must include code + state).",
+			missingState: "Missing 'state' parameter. Paste the full redirect URL."
+		});
+		if ("error" in parsed) throw new Error(parsed.error);
+		if (parsed.state !== state) throw new Error("OAuth state mismatch - possible CSRF attack. Please retry login.");
+		return parsed;
+	};
 	let codeAndState;
 	if (params.manual) {
 		await params.onAuth({ url });
 		params.onProgress?.("Waiting for redirect URL...");
 		codeAndState = await promptForCode();
 	} else {
-		const redirect = parseRedirectUri(params.app.redirectUri);
+		const redirectUri = params.app.redirectUri;
+		const redirect = new URL(redirectUri);
+		if (redirect.protocol !== "http:") throw new Error(`Chutes OAuth redirect URI must be http:// (got ${redirectUri})`);
+		const hostname = redirect.hostname === "[::1]" ? "::1" : redirect.hostname || "127.0.0.1";
+		if (hostname !== "localhost" && hostname !== "127.0.0.1" && hostname !== "::1") throw new Error(`Chutes OAuth redirect hostname must be loopback (got ${hostname}). Use http://127.0.0.1:<port>/...`);
+		const port = redirect.port ? Number.parseInt(redirect.port, 10) : 80;
+		const pathname = redirect.pathname || "/";
 		const callback = waitForLocalOAuthCallback({
 			expectedState: state,
 			timeoutMs: 18e4,
-			port: redirect.port,
-			callbackPath: redirect.pathname,
+			port,
+			callbackPath: pathname,
 			redirectUri: params.app.redirectUri,
 			successTitle: "Chutes OAuth complete",
-			hostname: redirect.hostname,
+			hostname,
 			onProgress: params.onProgress,
 			...params.signal ? { signal: params.signal } : {}
 		}).catch(async (error) => {
@@ -189,12 +163,41 @@ async function loginChutes(params) {
 		codeAndState = await callback;
 	}
 	params.onProgress?.("Exchanging code for tokens...");
-	return await exchangeChutesCodeForTokens({
-		app: params.app,
+	const app = params.app;
+	const signal = params.signal;
+	const now = Date.now();
+	const body = new URLSearchParams({
+		grant_type: "authorization_code",
+		client_id: app.clientId,
 		code: codeAndState.code,
-		codeVerifier: verifier,
-		...params.signal ? { signal: params.signal } : {}
+		redirect_uri: app.redirectUri,
+		code_verifier: verifier
+	});
+	if (app.clientSecret) body.set("client_secret", app.clientSecret);
+	const token = await requestChutesTokenGrant({
+		body,
+		responseLabel: "Chutes token exchange",
+		now,
+		...signal ? { signal } : {}
 	});
+	if (!token.refresh) throw new Error("Chutes token exchange returned no refresh_token");
+	let info = null;
+	try {
+		info = await fetchChutesUserInfo({
+			accessToken: token.access,
+			...signal ? { signal } : {}
+		});
+	} catch (error) {
+		if (signal?.aborted) throw error;
+	}
+	return {
+		access: token.access,
+		refresh: token.refresh,
+		expires: token.expires,
+		email: info?.username,
+		accountId: info?.sub,
+		clientId: app.clientId
+	};
 }
 //#endregion
 export { loginChutes, refreshChutesOAuthCredential };

package/dist/onboard.js

@@ -1,4 +1,4 @@
-import { i as openclaw_plugin_default, n as CHUTES_MODEL_CATALOG, t as CHUTES_BASE_URL } from "./.setup/models-mN33VNCv.mjs";
+import { i as openclaw_plugin_default, n as CHUTES_MODEL_CATALOG, t as CHUTES_BASE_URL } from "./.setup/models-cgatbipe.mjs";
 import { readManifestProviderDefaultModelRef } from "openclaw/plugin-sdk/provider-catalog-shared";
 import { applyAgentDefaultModelPrimary, createModelCatalogPresetAppliers } from "openclaw/plugin-sdk/provider-onboard";
 //#region extensions/chutes/onboard.ts
@@ -10,7 +10,7 @@ const { applyProviderConfig: applyChutesProviderConfig } = createModelCatalogPre
 		providerId: "chutes",
 		api: "openai-completions",
 		baseUrl: CHUTES_BASE_URL,
-		catalogModels: cfg.models?.mode === "replace" ? structuredClone(CHUTES_MODEL_CATALOG) : [],
+		catalogModels: cfg.models?.mode === "replace" ? CHUTES_MODEL_CATALOG : [],
 		aliases: [
 			...CHUTES_MODEL_CATALOG.map((model) => `chutes/${model.id}`),
 			{

package/dist/provider-catalog.js

@@ -1,10 +1,10 @@
-import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-mN33VNCv.mjs";
+import { n as CHUTES_MODEL_CATALOG, r as discoverChutesModels, t as CHUTES_BASE_URL } from "./.setup/models-cgatbipe.mjs";
 //#region extensions/chutes/provider-catalog.ts
 function buildStaticChutesProvider() {
 	return {
 		baseUrl: CHUTES_BASE_URL,
 		api: "openai-completions",
-		models: structuredClone(CHUTES_MODEL_CATALOG)
+		models: CHUTES_MODEL_CATALOG
 	};
 }
 async function buildChutesProvider(accessToken, options = {}) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/chutes-provider",
-  "version": "2026.11.3",
+  "version": "2026.11.5-beta.2",
   "description": "OpenClaw Chutes.ai provider plugin.",
   "repository": {
     "type": "git",
@@ -18,10 +18,10 @@
       "minHostVersion": ">=2026.6.8"
     },
     "compat": {
-      "pluginApi": ">=2026.11.3"
+      "pluginApi": ">=2026.11.5-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.11.3",
+      "openclawVersion": "2026.11.5-beta.2",
       "bundledDist": false
     },
     "release": {
@@ -40,7 +40,7 @@
     "assets/activity.svg"
   ],
   "peerDependencies": {
-    "openclaw": ">=2026.11.3"
+    "openclaw": ">=2026.11.5-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {