@prestyj/core 5.6.0 → 5.8.0

package/dist/chunk-WCIV25KV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/paths.ts"],"sourcesContent":["import path from \"node:path\";\nimport os from \"node:os\";\n\nexport interface AppPaths {\n  agentDir: string;\n  sessionsDir: string;\n  subagentSessionsDir: string;\n  subagentsDir: string;\n  settingsFile: string;\n  authFile: string;\n  telegramFile: string;\n  agentHomeFile: string;\n  mcpFile: string;\n  mcpAuthFile: string;\n  logFile: string;\n  skillsDir: string;\n  extensionsDir: string;\n  agentsDir: string;\n  progressFile: string;\n  progressBackupFile: string;\n}\n\nexport function getAppPaths(): AppPaths {\n  const agentDir = path.join(os.homedir(), \".ezcoder\");\n  return {\n    agentDir,\n    sessionsDir: path.join(agentDir, \"sessions\"),\n    subagentSessionsDir: path.join(agentDir, \"subagent-sessions\"),\n    subagentsDir: path.join(agentDir, \"subagents\"),\n    settingsFile: path.join(agentDir, \"settings.json\"),\n    authFile: path.join(agentDir, \"auth.json\"),\n    telegramFile: path.join(agentDir, \"telegram.json\"),\n    agentHomeFile: path.join(agentDir, \"agent-home.json\"),\n    mcpFile: path.join(agentDir, \"mcp.json\"),\n    mcpAuthFile: path.join(agentDir, \"mcp-auth.json\"),\n    logFile: path.join(agentDir, \"debug.log\"),\n    skillsDir: path.join(agentDir, \"skills\"),\n    extensionsDir: path.join(agentDir, \"extensions\"),\n    agentsDir: path.join(agentDir, \"agents\"),\n    progressFile: path.join(agentDir, \"progress.json\"),\n    progressBackupFile: path.join(agentDir, \"progress.backup.json\"),\n  };\n}\n"],"mappings":";AAAA,OAAO,UAAU;AACjB,OAAO,QAAQ;AAqBR,SAAS,cAAwB;AACtC,QAAM,WAAW,KAAK,KAAK,GAAG,QAAQ,GAAG,UAAU;AACnD,SAAO;AAAA,IACL;AAAA,IACA,aAAa,KAAK,KAAK,UAAU,UAAU;AAAA,IAC3C,qBAAqB,KAAK,KAAK,UAAU,mBAAmB;AAAA,IAC5D,cAAc,KAAK,KAAK,UAAU,WAAW;AAAA,IAC7C,cAAc,KAAK,KAAK,UAAU,eAAe;AAAA,IACjD,UAAU,KAAK,KAAK,UAAU,WAAW;AAAA,IACzC,cAAc,KAAK,KAAK,UAAU,eAAe;AAAA,IACjD,eAAe,KAAK,KAAK,UAAU,iBAAiB;AAAA,IACpD,SAAS,KAAK,KAAK,UAAU,UAAU;AAAA,IACvC,aAAa,KAAK,KAAK,UAAU,eAAe;AAAA,IAChD,SAAS,KAAK,KAAK,UAAU,WAAW;AAAA,IACxC,WAAW,KAAK,KAAK,UAAU,QAAQ;AAAA,IACvC,eAAe,KAAK,KAAK,UAAU,YAAY;AAAA,IAC/C,WAAW,KAAK,KAAK,UAAU,QAAQ;AAAA,IACvC,cAAc,KAAK,KAAK,UAAU,eAAe;AAAA,IACjD,oBAAoB,KAAK,KAAK,UAAU,sBAAsB;AAAA,EAChE;AACF;","names":[]}

package/dist/index.cjs

@@ -59,6 +59,7 @@ __export(index_exports, {
   getSessionId: () => getSessionId,
   getSummaryModel: () => getSummaryModel,
   getSupportedThinkingLevels: () => getSupportedThinkingLevels,
+  getToolResultCharLimit: () => getToolResultCharLimit,
   getVideoByteLimit: () => getVideoByteLimit,
   isKimiCodingEndpoint: () => isKimiCodingEndpoint,
   isLoggerOpen: () => isLoggerOpen,
@@ -97,6 +98,8 @@ function getAppPaths() {
   return {
     agentDir,
     sessionsDir: import_node_path.default.join(agentDir, "sessions"),
+    subagentSessionsDir: import_node_path.default.join(agentDir, "subagent-sessions"),
+    subagentsDir: import_node_path.default.join(agentDir, "subagents"),
     settingsFile: import_node_path.default.join(agentDir, "settings.json"),
     authFile: import_node_path.default.join(agentDir, "auth.json"),
     telegramFile: import_node_path.default.join(agentDir, "telegram.json"),
@@ -141,11 +144,13 @@ var import_node_path3 = __toESM(require("path"), 1);
 var import_node_fs = __toESM(require("fs"), 1);
 var import_node_path2 = __toESM(require("path"), 1);
 var import_node_crypto = require("crypto");
+var import_ai = require("@prestyj/ai");
 var MAX_BYTES = 10 * 1024 * 1024;
 var fd = null;
 var sessionId = "";
 var appName = "app";
 var cleanups = [];
+var exactSecrets = [];
 function rotateIfNeeded(filePath) {
   try {
     const st = import_node_fs.default.statSync(filePath);
@@ -162,6 +167,7 @@ function rotateIfNeeded(filePath) {
 function openLog(filePath, name) {
   if (fd !== null) return false;
   appName = name;
+  exactSecrets = (0, import_ai.environmentSecrets)(process.env);
   try {
     import_node_fs.default.mkdirSync(import_node_path2.default.dirname(filePath), { recursive: true, mode: 448 });
   } catch {
@@ -188,9 +194,15 @@ function isLoggerOpen() {
 function log(level, category, message, data) {
   if (fd === null) return;
   const ts = (/* @__PURE__ */ new Date()).toISOString();
-  let line = `[${ts}] [sid=${sessionId}] [${level}] [${category}] ${message}`;
+  const safeMessage = (0, import_ai.redactText)(message, { secrets: exactSecrets });
+  let line = `[${ts}] [sid=${sessionId}] [${level}] [${category}] ${safeMessage}`;
   if (data) {
-    const pairs = Object.entries(data).map(([k, v]) => `${k}=${typeof v === "string" ? v : JSON.stringify(v)}`).join(" ");
+    const safeData = (0, import_ai.redactValue)(data, { secrets: exactSecrets });
+    const pairs = Object.entries(safeData).map(([k, v]) => {
+      if (typeof v === "string") return `${k}=${v}`;
+      if (typeof v === "bigint") return `${k}=${String(v)}`;
+      return `${k}=${JSON.stringify(v)}`;
+    }).join(" ");
     if (pairs) line += ` ${pairs}`;
   }
   line += "\n";
@@ -210,6 +222,7 @@ function closeLogger(opts) {
   } catch {
   }
   fd = null;
+  exactSecrets = [];
   for (const unsub of cleanups) unsub();
   cleanups = [];
 }
@@ -1219,6 +1232,7 @@ function isAlive(pid) {
 var MOONSHOT_OAUTH_KEY = "moonshot-oauth";
 var XIAOMI_CREDITS_KEY = "xiaomi-credits";
 var REFRESH_SKEW_MS = 6e4;
+var USAGE_EXHAUSTED_DEFAULT_MS = 15 * 60 * 1e3;
 var STATIC_API_KEY_PROVIDERS = /* @__PURE__ */ new Set([
   "glm",
   "moonshot",
@@ -1226,7 +1240,8 @@ var STATIC_API_KEY_PROVIDERS = /* @__PURE__ */ new Set([
   "minimax",
   "deepseek",
   "openrouter",
-  "sakana"
+  "sakana",
+  "xai"
 ]);
 var AuthStorage = class {
   data = {};
@@ -1285,7 +1300,9 @@ var AuthStorage = class {
   async isStaticApiKey(provider) {
     await this.ensureLoaded();
     if (provider === "moonshot" && this.data[MOONSHOT_OAUTH_KEY]) {
-      return false;
+      const exhaustedUntil = this.data[MOONSHOT_OAUTH_KEY].usageExhaustedUntil ?? 0;
+      const apiKeyActive = Date.now() < exhaustedUntil && Boolean(this.data["moonshot"]);
+      if (!apiKeyActive) return false;
     }
     return STATIC_API_KEY_PROVIDERS.has(provider);
   }
@@ -1342,6 +1359,30 @@ var AuthStorage = class {
     delete this.data[provider];
     await this.save();
   }
+  /**
+   * Mark the credential stored under `storageKey` as usage-exhausted until
+   * `resetsAt` (unix SECONDS, from the provider's rate-limit response) or a
+   * 15-minute default when no reset time is known. While the mark is in the
+   * future, `resolveCredentials("moonshot")` serves the Moonshot API key
+   * instead of the Kimi OAuth credential (when both are configured) — OAuth
+   * stays the preferred credential and is retried automatically once the mark
+   * lapses. Persisted to auth.json so a restart (or another ezcoder-app window)
+   * doesn't burn a request rediscovering the same exhausted window. No-op if
+   * nothing is stored under `storageKey`.
+   */
+  async markUsageExhausted(storageKey, resetsAt) {
+    await this.ensureLoaded();
+    const creds = this.data[storageKey];
+    if (!creds) return;
+    const until = resetsAt !== void 0 && resetsAt * 1e3 > Date.now() ? resetsAt * 1e3 : Date.now() + USAGE_EXHAUSTED_DEFAULT_MS;
+    creds.usageExhaustedUntil = until;
+    await this.save();
+    log(
+      "WARN",
+      "auth",
+      `Marked ${storageKey} usage-exhausted until ${new Date(until).toISOString()}`
+    );
+  }
   async clearAll() {
     this.data = {};
     await this.save();
@@ -1362,8 +1403,19 @@ var AuthStorage = class {
       throw new NotLoggedInError(provider);
     }
     if (provider === "moonshot" && this.data[MOONSHOT_OAUTH_KEY]) {
+      const exhaustedUntil = this.data[MOONSHOT_OAUTH_KEY].usageExhaustedUntil ?? 0;
+      if (Date.now() < exhaustedUntil && this.data["moonshot"]) {
+        log(
+          "WARN",
+          "auth",
+          `Kimi OAuth usage window is exhausted \u2014 using the Moonshot API key until ${new Date(exhaustedUntil).toISOString()} (OAuth resumes automatically).`
+        );
+        return this.data["moonshot"];
+      }
       try {
-        return await this.resolveCredentials(MOONSHOT_OAUTH_KEY, opts);
+        return await this.resolveCredentials(MOONSHOT_OAUTH_KEY, {
+          ...opts?.forceRefresh ? { forceRefresh: true } : {}
+        });
       } catch (err) {
         if (err instanceof NotLoggedInError && this.data["moonshot"]) {
           log(
@@ -1537,13 +1589,11 @@ var MODELS = [
     maxThinkingLevel: "high"
   },
   // ── OpenAI (Codex) ─────────────────────────────────────
-  // GPT-5.6 family — three agentic coding tiers launched July 2026. All share a
-  // 372K context window: the Codex repo's models.json lists both `context_window`
-  // AND `max_context_window` as 372000 for every 5.6 variant, so (unlike 5.4/5.5,
-  // whose public-API 1M window exceeds the Codex-product cap) there's no split
-  // between the API and Codex-transport windows — a single `contextWindow` is
-  // correct in both code paths. All three take text+image input, freeform
-  // apply_patch, text+image web search, and parallel tool calls.
+  // GPT-5.6 family — three agentic coding tiers launched July 2026. The public
+  // Responses API advertises a 1.05M context window; OpenAI's Codex product
+  // catalog advertises 372K on the ChatGPT OAuth route. All three take
+  // text+image input, freeform apply_patch, text+image web search, and parallel
+  // tool calls.
   {
     // Sol — "Latest frontier agentic coding model." (priority 1, default low).
     // Reasoning ladder: low → medium → high → xhigh → max → ultra. Ultra is a
@@ -1552,7 +1602,8 @@ var MODELS = [
     id: "gpt-5.6-sol",
     name: "GPT-5.6 Sol",
     provider: "openai",
-    contextWindow: 372e3,
+    contextWindow: 105e4,
+    codexContextWindow: 372e3,
     maxOutputTokens: 128e3,
     supportsThinking: true,
     supportsImages: true,
@@ -1562,11 +1613,12 @@ var MODELS = [
   },
   {
     // Terra — "Balanced agentic coding model for everyday work." (priority 2,
-    // default medium). Same 372K context + ultra reasoning ladder as Sol.
+    // default medium).
     id: "gpt-5.6-terra",
     name: "GPT-5.6 Terra",
     provider: "openai",
-    contextWindow: 372e3,
+    contextWindow: 105e4,
+    codexContextWindow: 372e3,
     maxOutputTokens: 128e3,
     supportsThinking: true,
     supportsImages: true,
@@ -1576,11 +1628,12 @@ var MODELS = [
   },
   {
     // Luna — "Fast and affordable agentic coding model." (priority 3, default
-    // medium). Same 372K context; reasoning tops out at `max` (no `ultra` rung).
+    // medium). Reasoning tops out at `max`.
     id: "gpt-5.6-luna",
     name: "GPT-5.6 Luna",
     provider: "openai",
-    contextWindow: 372e3,
+    contextWindow: 105e4,
+    codexContextWindow: 372e3,
     maxOutputTokens: 128e3,
     supportsThinking: true,
     supportsImages: true,
@@ -1631,6 +1684,26 @@ var MODELS = [
     costTier: "high",
     maxThinkingLevel: "xhigh"
   },
+  // ── xAI (Grok) ─────────────────────────────────────────
+  // Grok 4.5 (released 2026-07-08) is xAI's flagship for coding, agentic
+  // tasks, and knowledge work — 500K context, text+image input, configurable
+  // `reasoning_effort` (low/medium/high, server default high; reasoning can't
+  // be fully disabled). Served over the OpenAI-compatible API at
+  // https://api.x.ai/v1 (API key from console.x.ai). xAI hasn't published an
+  // official max-output cap for 4.5; 131K matches the Grok Responses ceiling
+  // third-party integrations use.
+  {
+    id: "grok-4.5",
+    name: "Grok 4.5",
+    provider: "xai",
+    contextWindow: 5e5,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "high"
+  },
   // ── Gemini ─────────────────────────────────────────────
   {
     id: "gemini-3.1-flash-lite",
@@ -1678,9 +1751,28 @@ var MODELS = [
     maxThinkingLevel: "high"
   },
   // ── Moonshot (Kimi) ────────────────────────────────────
+  // K3 is Kimi's 2.8T-parameter flagship for long-horizon coding, knowledge
+  // work, and deep reasoning. It always reasons at the `max` effort; the public
+  // API uses `reasoning_effort`, while Kimi Code OAuth keeps its managed wire shape.
+  {
+    id: "kimi-k3",
+    name: "Kimi K3",
+    provider: "moonshot",
+    contextWindow: 1048576,
+    // The API can be raised as high as the full context window, but 131K is the
+    // documented default and keeps room for input in AgentSession's fixed cap.
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: true,
+    maxVideoBytes: 100 * 1024 * 1024,
+    costTier: "high",
+    maxThinkingLevel: "max"
+  },
+  // Retain the cheaper dedicated coding model as an explicit alternative.
   {
     id: "kimi-k2.7-code",
-    name: "Kimi K2.7",
+    name: "Kimi K2.7 Code",
     provider: "moonshot",
     contextWindow: 262144,
     maxOutputTokens: 262144,
@@ -1870,16 +1962,20 @@ function getDefaultModel(provider) {
   if (provider === "openai") return MODELS.find((m) => m.id === "gpt-5.6-sol");
   if (provider === "gemini") return MODELS.find((m) => m.id === "gemini-3.1-flash-lite");
   if (provider === "glm") return MODELS.find((m) => m.id === "glm-5.2");
-  if (provider === "moonshot") return MODELS.find((m) => m.id === "kimi-k2.7-code");
+  if (provider === "moonshot") return MODELS.find((m) => m.id === "kimi-k3");
   if (provider === "minimax") return MODELS.find((m) => m.id === "MiniMax-M3");
   if (provider === "deepseek") return MODELS.find((m) => m.id === "deepseek-v4-pro");
   if (provider === "openrouter") return MODELS.find((m) => m.id === "qwen/qwen3.6-plus");
   if (provider === "sakana") return MODELS.find((m) => m.id === "fugu");
+  if (provider === "xai") return MODELS.find((m) => m.id === "grok-4.5");
   return MODELS.find((m) => m.id === "claude-sonnet-5");
 }
 function usesOpenAICodexTransport(options) {
   return options?.provider === "openai" && Boolean(options.accountId);
 }
+function getToolResultCharLimit(_modelId, options) {
+  return usesOpenAICodexTransport(options) ? 1e4 * 4 : void 0;
+}
 function getContextWindow(modelId, options) {
   const model = getModel(modelId);
   if (!model) return 2e5;
@@ -1917,6 +2013,7 @@ var OPENAI_GPT_56_THINKING_LEVELS = [
   "ultra"
 ];
 var SAKANA_THINKING_LEVELS = ["high", "xhigh"];
+var XAI_THINKING_LEVELS = ["low", "medium", "high"];
 var ANTHROPIC_OPUS_48_47_THINKING_LEVELS = [
   "low",
   "medium",
@@ -1936,6 +2033,9 @@ function isOpenAIGptModel(provider, model) {
 function isSakanaModel(provider) {
   return provider === "sakana";
 }
+function isXaiModel(provider) {
+  return provider === "xai";
+}
 function isAnthropicOpus48Or47Model(provider, model) {
   return provider === "anthropic" && /opus-4-8|opus-4-7/.test(model);
 }
@@ -1955,6 +2055,11 @@ function getSupportedThinkingLevels(provider, model) {
     if (maxIndex2 === -1) return SAKANA_THINKING_LEVELS;
     return SAKANA_THINKING_LEVELS.slice(0, maxIndex2 + 1);
   }
+  if (isXaiModel(provider)) {
+    const maxIndex2 = XAI_THINKING_LEVELS.indexOf(maxLevel);
+    if (maxIndex2 === -1) return XAI_THINKING_LEVELS;
+    return XAI_THINKING_LEVELS.slice(0, maxIndex2 + 1);
+  }
   if (!isOpenAIGptModel(provider, model)) return [maxLevel];
   const levels = model.startsWith("gpt-5.6-") ? OPENAI_GPT_56_THINKING_LEVELS : OPENAI_GPT_THINKING_LEVELS;
   const maxIndex = levels.indexOf(maxLevel);
@@ -1966,7 +2071,7 @@ function isThinkingLevelSupported(provider, model, level) {
 }
 function getNextThinkingLevel(provider, model, current) {
   const supportedLevels = getSupportedThinkingLevels(provider, model);
-  const shouldCycleLevels = isOpenAIGptModel(provider, model) || isAnthropicAdaptiveModel(provider, model) || isSakanaModel(provider);
+  const shouldCycleLevels = isOpenAIGptModel(provider, model) || isAnthropicAdaptiveModel(provider, model) || isSakanaModel(provider) || isXaiModel(provider);
   if (!shouldCycleLevels) {
     return current ? void 0 : supportedLevels[0];
   }
@@ -2627,6 +2732,7 @@ function createAutoUpdater(config) {
   getSessionId,
   getSummaryModel,
   getSupportedThinkingLevels,
+  getToolResultCharLimit,
   getVideoByteLimit,
   isKimiCodingEndpoint,
   isLoggerOpen,