@sayknow-cli/ai 0.4.2 → 0.4.3

package/dist/types/utils/oauth/index.d.ts

@@ -0,0 +1,39 @@
+import type { OAuthCredentials, OAuthProvider, OAuthProviderId, OAuthProviderInfo, OAuthProviderInterface } from "./types";
+/**
+ * Register a custom OAuth provider.
+ */
+export declare function registerOAuthProvider(provider: OAuthProviderInterface): void;
+/**
+ * Get a custom OAuth provider by ID.
+ */
+export declare function getOAuthProvider(id: OAuthProviderId): OAuthProviderInterface | undefined;
+/**
+ * Remove all custom OAuth providers registered by a source.
+ */
+export declare function unregisterOAuthProviders(sourceId: string): void;
+/**
+ * Refresh token for any OAuth provider.
+ * Saves the new credentials and returns the new access token.
+ */
+export declare function refreshOAuthToken(provider: OAuthProvider, credentials: OAuthCredentials): Promise<OAuthCredentials>;
+/**
+ * Build API-key bytes for a provider from an already-fresh OAuth credential.
+ *
+ * Refresh is owned by AuthStorage. This helper deliberately refuses expired
+ * credentials so it cannot POST broker redaction sentinels to upstream token
+ * endpoints as a side channel.
+ *
+ * For providers that need credential metadata at request time, returns
+ * JSON-encoded credentials plus expiry metadata for diagnostics/edge guards.
+ * @returns API key string, or null if no credentials
+ * @throws Error if the credential is expired and must be refreshed upstream
+ */
+export declare function getOAuthApiKey(provider: OAuthProvider, credentials: Record<string, OAuthCredentials>): Promise<{
+    newCredentials: OAuthCredentials;
+    apiKey: string;
+} | null>;
+export declare function resolveOAuthStorageProvider(provider: OAuthProviderId): OAuthProviderId;
+/**
+ * Get list of OAuth providers.
+ */
+export declare function getOAuthProviders(): OAuthProviderInfo[];

package/dist/types/utils/oauth/kagi.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Kagi login flow.
+ *
+ * Kagi web search uses an API key from the account settings page.
+ * This is an API key flow:
+ * 1. Open browser to Kagi API settings
+ * 2. User copies API key
+ * 3. User pastes key into CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Kagi.
+ *
+ * Opens browser to API settings and prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginKagi(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/kilo.d.ts

@@ -0,0 +1,5 @@
+import type { OAuthController, OAuthCredentials } from "./types";
+/**
+ * Login with Kilo Gateway OAuth (device code flow).
+ */
+export declare function loginKilo(callbacks: OAuthController): Promise<OAuthCredentials>;

package/dist/types/utils/oauth/kimi.d.ts

@@ -0,0 +1,21 @@
+/**
+ * Kimi Code OAuth flow (device authorization grant)
+ */
+import type { OAuthController, OAuthCredentials } from "./types";
+export declare let getKimiCommonHeaders: () => Readonly<{
+    "User-Agent": `KimiCLI/${string}`;
+    "X-Msh-Platform": "kimi_cli";
+    "X-Msh-Version": string;
+    "X-Msh-Device-Name": string;
+    "X-Msh-Device-Model": string;
+    "X-Msh-Os-Version": string;
+    "X-Msh-Device-Id": string;
+}>;
+/**
+ * Login with Kimi Code OAuth (device code flow).
+ */
+export declare function loginKimi(options: OAuthController): Promise<OAuthCredentials>;
+/**
+ * Refresh Kimi OAuth token.
+ */
+export declare function refreshKimiToken(refreshToken: string): Promise<OAuthCredentials>;

package/dist/types/utils/oauth/litellm.d.ts

@@ -0,0 +1,18 @@
+/**
+ * LiteLLM login flow.
+ *
+ * LiteLLM is an OpenAI-compatible proxy that routes requests to many upstream providers.
+ *
+ * This is not OAuth - it's a simple API key flow:
+ * 1. Open browser to LiteLLM docs/dashboard
+ * 2. User copies their LiteLLM API key
+ * 3. User pastes the API key into the CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to LiteLLM.
+ *
+ * Opens browser to LiteLLM setup docs, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginLiteLLM(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/lm-studio.d.ts

@@ -0,0 +1,17 @@
+/**
+ * LM Studio login flow.
+ *
+ * LM Studio provides an OpenAI-compatible API at a local base URL.
+ * It usually runs unauthenticated but can be configured to require a bearer token.
+ *
+ * This flow stores an API-key-style credential used by `/login` and auth storage.
+ */
+import type { OAuthController } from "./types";
+export declare const DEFAULT_LOCAL_TOKEN = "lm-studio-local";
+/**
+ * Login to LM Studio.
+ *
+ * Opens LM Studio API docs, prompts for an optional token,
+ * and returns a stored key value.
+ */
+export declare function loginLmStudio(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/minimax-code.d.ts

@@ -0,0 +1,28 @@
+/**
+ * MiniMax Coding Plan login flow.
+ *
+ * MiniMax Coding Plan is a subscription service that provides access to
+ * MiniMax models (M2, M2.1) through an OpenAI-compatible API.
+ *
+ * This is not OAuth - it's a simple API key flow:
+ * 1. Open browser to https://platform.minimax.io/subscribe/coding-plan
+ * 2. User subscribes and copies their API key
+ * 3. User pastes the API key back into the CLI
+ *
+ * International: https://api.minimax.io/v1
+ * China: https://api.minimaxi.com/v1
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to MiniMax Coding Plan (international).
+ *
+ * Opens browser to subscription page, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginMiniMaxCode(options: OAuthController): Promise<string>;
+/**
+ * Login to MiniMax Coding Plan (China).
+ *
+ * Same flow as international but uses China endpoint.
+ */
+export declare function loginMiniMaxCodeCn(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/moonshot.d.ts

@@ -0,0 +1 @@
+export declare const loginMoonshot: (options: import("./types").OAuthController) => Promise<string>;

package/dist/types/utils/oauth/nanogpt.d.ts

@@ -0,0 +1 @@
+export declare const loginNanoGPT: (options: import("./types").OAuthController) => Promise<string>;

package/dist/types/utils/oauth/nvidia.d.ts

@@ -0,0 +1,18 @@
+/**
+ * NVIDIA login flow.
+ *
+ * NVIDIA provides OpenAI-compatible models via https://integrate.api.nvidia.com/v1.
+ *
+ * This is not OAuth - it's a simple API key flow:
+ * 1. Open browser to NVIDIA NGC catalog
+ * 2. User copies their API key
+ * 3. User pastes the API key into the CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to NVIDIA.
+ *
+ * Opens browser to NVIDIA dashboard, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginNvidia(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/ollama-cloud.d.ts

@@ -0,0 +1,2 @@
+import type { OAuthController } from "./types";
+export declare function loginOllamaCloud(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/ollama.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Ollama login flow.
+ *
+ * Ollama is typically used locally without authentication, but some hosted
+ * deployments require a bearer token/API key.
+ *
+ * This flow is API-key based (not OAuth):
+ * 1. Optionally open Ollama docs
+ * 2. Prompt user for API key/token (optional)
+ * 3. Persist key only when provided
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Ollama.
+ *
+ * Returns a trimmed API key/token string. Empty string means local no-auth mode.
+ */
+export declare function loginOllama(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/openai-codex.d.ts

@@ -0,0 +1,21 @@
+import type { OAuthController, OAuthCredentials } from "./types";
+export declare function decodeJwt<T = Record<string, unknown>>(token: string): T | null;
+/**
+ * Login with OpenAI code provider OAuth
+ */
+export type OpenAICodexLoginOptions = OAuthController & {
+    /** Optional originator value for OpenAI code provider OAuth. Default: "opencode". */
+    originator?: string;
+};
+export declare function loginOpenAICodex(options: OpenAICodexLoginOptions): Promise<OAuthCredentials>;
+/**
+ * Login with OpenAI code provider using the device-code (headless) flow.
+ *
+ * Avoids a local callback server entirely — useful when port 1455 is unavailable
+ * or when the browser callback flow fails with 403 (e.g. network/proxy issues).
+ */
+export declare function loginOpenAICodexDevice(ctrl: OAuthController): Promise<OAuthCredentials>;
+/**
+ * Refresh OpenAI code provider OAuth token
+ */
+export declare function refreshOpenAICodexToken(refreshToken: string): Promise<OAuthCredentials>;

package/dist/types/utils/oauth/opencode.d.ts

@@ -0,0 +1,18 @@
+/**
+ * OpenCode Zen login flow.
+ *
+ * OpenCode Zen is a subscription service that provides access to various AI models
+ * (GPT-5.x, Anthropic model 4.x, Gemini 3, etc.) through a unified API at opencode.ai/zen.
+ * This is not OAuth - it's a simple API key flow:
+ * 1. Open browser to https://opencode.ai/auth
+ * 2. User logs in and copies their API key
+ * 3. User pastes the API key back into the CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to OpenCode Zen.
+ *
+ * Opens browser to auth page, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginOpenCode(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/parallel.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Parallel login flow.
+ *
+ * Parallel uses an API key from the account settings page.
+ * This is an API key flow:
+ * 1. Open browser to Parallel API key settings
+ * 2. User copies API key
+ * 3. User pastes key into the CLI/TUI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Parallel.
+ *
+ * Opens browser to the API keys page, prompts the user to paste their API key,
+ * and returns the API key directly.
+ */
+export declare function loginParallel(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/perplexity.d.ts

@@ -0,0 +1,9 @@
+import type { OAuthController, OAuthCredentials } from "./types";
+/**
+ * Login to Perplexity.
+ *
+ * Tries auto-extraction from the desktop app, then runs HTTP email OTP login.
+ *
+ * No browser/manual token paste fallback is used.
+ */
+export declare function loginPerplexity(ctrl: OAuthController): Promise<OAuthCredentials>;

package/dist/types/utils/oauth/pkce.d.ts

@@ -0,0 +1,8 @@
+/**
+ * Generate PKCE code verifier and challenge.
+ * Uses Web Crypto API for cross-platform compatibility.
+ */
+export declare function generatePKCE(): Promise<{
+    verifier: string;
+    challenge: string;
+}>;

package/dist/types/utils/oauth/qianfan.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Qianfan login flow.
+ *
+ * Qianfan provides an OpenAI-compatible API endpoint.
+ * Login is API-key based:
+ * 1. Open browser to Qianfan API key console
+ * 2. User copies API key
+ * 3. User pastes key into CLI prompt
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Qianfan.
+ *
+ * Opens browser to API key page, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginQianfan(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/qwen-portal.d.ts

@@ -0,0 +1,19 @@
+/**
+ * Qwen Portal login flow.
+ *
+ * Qwen Portal exposes an OpenAI-compatible endpoint at https://portal.qwen.ai/v1
+ * and accepts OAuth bearer tokens or API keys.
+ *
+ * This is a token/API-key flow:
+ * 1. Open Qwen Portal
+ * 2. Copy either your OAuth token or API key
+ * 3. Paste it into the CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Qwen Portal.
+ *
+ * Prompts for either `QWEN_OAUTH_TOKEN` or `QWEN_PORTAL_API_KEY` value.
+ * Returns the value directly (stored as api_key credential in auth storage).
+ */
+export declare function loginQwenPortal(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/synthetic.d.ts

@@ -0,0 +1 @@
+export declare const loginSynthetic: (options: import("./types").OAuthController) => Promise<string>;

package/dist/types/utils/oauth/tavily.d.ts

@@ -0,0 +1,17 @@
+/**
+ * Tavily login flow.
+ *
+ * Tavily web search uses an API key from the account settings page.
+ * This is an API key flow:
+ * 1. Open browser to Tavily settings
+ * 2. User copies API key
+ * 3. User pastes key into CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Tavily.
+ *
+ * Opens browser to API keys page and prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginTavily(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/together.d.ts

@@ -0,0 +1 @@
+export declare const loginTogether: (options: import("./types").OAuthController) => Promise<string>;

package/dist/types/utils/oauth/types.d.ts

@@ -0,0 +1,45 @@
+export type OAuthCredentials = {
+    refresh: string;
+    access: string;
+    expires: number;
+    enterpriseUrl?: string;
+    projectId?: string;
+    email?: string;
+    accountId?: string;
+};
+export type OAuthProvider = "alibaba-coding-plan" | "anthropic" | "cerebras" | "cloudflare-ai-gateway" | "cursor" | "deepseek" | "deepinfra" | "fireworks" | "firepass" | "fugu" | "github-copilot" | "google-gemini-cli" | "google-antigravity" | "gitlab-duo" | "huggingface" | "kimi-code" | "kilo" | "kagi" | "litellm" | "lm-studio" | "minimax-code" | "minimax-code-cn" | "moonshot" | "nvidia" | "nanogpt" | "ollama" | "ollama-cloud" | "openai-codex" | "openai-codex-device" | "opencode-go" | "opencode-zen" | "parallel" | "perplexity" | "qianfan" | "qwen-portal" | "synthetic" | "tavily" | "together" | "venice" | "vercel-ai-gateway" | "vllm" | "xai" | "glm-zcode" | "xiaomi" | "xiaomi-token-plan-sgp" | "xiaomi-token-plan-ams" | "xiaomi-token-plan-cn" | "zenmux" | "zai";
+export type OAuthProviderId = OAuthProvider | (string & {});
+export type OAuthPrompt = {
+    message: string;
+    placeholder?: string;
+    allowEmpty?: boolean;
+};
+export type OAuthAuthInfo = {
+    url: string;
+    instructions?: string;
+};
+export interface OAuthProviderInfo {
+    id: OAuthProviderId;
+    name: string;
+    available: boolean;
+}
+export interface OAuthController {
+    onAuth?(info: OAuthAuthInfo): void;
+    onProgress?(message: string): void;
+    onManualCodeInput?(): Promise<string>;
+    onPrompt?(prompt: OAuthPrompt): Promise<string>;
+    signal?: AbortSignal;
+    fetch?: typeof globalThis.fetch;
+}
+export interface OAuthLoginCallbacks extends OAuthController {
+    onAuth: (info: OAuthAuthInfo) => void;
+    onPrompt: (prompt: OAuthPrompt) => Promise<string>;
+}
+export interface OAuthProviderInterface {
+    readonly id: OAuthProviderId;
+    readonly name: string;
+    readonly sourceId?: string;
+    login(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials | string>;
+    refreshToken?(credentials: OAuthCredentials): Promise<OAuthCredentials>;
+    getApiKey?(credentials: OAuthCredentials): string;
+}

package/dist/types/utils/oauth/venice.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Venice login flow.
+ *
+ * Venice provides OpenAI-compatible models via https://api.venice.ai/api/v1.
+ *
+ * This is not OAuth - it's a simple API key flow:
+ * 1. Open browser to Venice API key settings
+ * 2. User copies their API key
+ * 3. User pastes the API key into the CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Venice.
+ *
+ * Opens browser to API keys page, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginVenice(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/vercel-ai-gateway.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Vercel AI Gateway login flow.
+ *
+ * Vercel AI Gateway proxies upstream model providers through a unified endpoint.
+ *
+ * This is not OAuth - it's a simple API key flow:
+ * 1. Open Vercel AI Gateway docs
+ * 2. User copies their API key
+ * 3. User pastes the API key into the CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Vercel AI Gateway.
+ *
+ * Opens browser to Vercel AI Gateway docs and prompts for an API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginVercelAiGateway(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/vllm.d.ts

@@ -0,0 +1,16 @@
+/**
+ * vLLM login flow.
+ *
+ * vLLM is commonly self-hosted with an OpenAI-compatible API at a local base URL.
+ * Some deployments require a bearer token, others allow unauthenticated access.
+ *
+ * This flow stores an API-key-style credential used by `/login` and auth storage.
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to vLLM.
+ *
+ * Opens vLLM OpenAI-compatible auth docs, prompts for an optional token,
+ * and returns a stored key value.
+ */
+export declare function loginVllm(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/xai.d.ts

@@ -0,0 +1,30 @@
+/** xAI OAuth flow (Grok account login). */
+import { OAuthCallbackFlow } from "./callback-server";
+import type { OAuthController, OAuthCredentials } from "./types";
+export declare const XAI_OAUTH_DISCOVERY_URL = "https://auth.x.ai/.well-known/openid-configuration";
+export declare const XAI_OAUTH_CLIENT_ID = "b1a00492-073a-47ea-816f-4c329264a828";
+export declare const XAI_OAUTH_SCOPE = "openid profile email offline_access grok-cli:access api:access";
+interface XaiDiscovery {
+    authorizationEndpoint: string;
+    tokenEndpoint: string;
+}
+export interface XaiOAuthFlowOptions {
+    extraAuthorizeParams?: Readonly<Record<string, string>>;
+}
+export interface XaiOAuthRefreshOptions {
+    signal?: AbortSignal;
+    extraTokenParams?: Readonly<Record<string, string>>;
+}
+export declare function discoverXaiOAuthEndpoints(signal?: AbortSignal): Promise<XaiDiscovery>;
+export declare class XaiOAuthFlow extends OAuthCallbackFlow {
+    #private;
+    constructor(ctrl: OAuthController, options?: XaiOAuthFlowOptions);
+    generateAuthUrl(state: string, redirectUri: string): Promise<{
+        url: string;
+        instructions?: string;
+    }>;
+    exchangeToken(code: string, _state: string, redirectUri: string): Promise<OAuthCredentials>;
+}
+export declare function loginXai(ctrl: OAuthController, options?: XaiOAuthFlowOptions): Promise<OAuthCredentials>;
+export declare function refreshXaiToken(refreshToken: string, options?: AbortSignal | XaiOAuthRefreshOptions): Promise<OAuthCredentials>;
+export {};

package/dist/types/utils/oauth/xiaomi.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Xiaomi MiMo login flow.
+ *
+ * Xiaomi MiMo provides OpenAI-compatible models via
+ * https://api.xiaomimimo.com/v1.
+ *
+ * Standard Xiaomi login opens the pay-as-you-go API key console. Token Plan
+ * login opens plan management so users copy the regional `tp-...` key.
+ */
+import type { OAuthController } from "./types";
+/** Region codes accepted by the Xiaomi Token Plan login flow. */
+export type XiaomiTokenPlanRegion = "sgp" | "ams" | "cn";
+/**
+ * Login to Xiaomi MiMo.
+ *
+ * Opens browser to API keys page, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginXiaomi(options: OAuthController): Promise<string>;
+/**
+ * Login to a regional Xiaomi Token Plan endpoint.
+ *
+ * Prompts for a token-plan API key and validates it against the selected region.
+ */
+export declare function loginXiaomiTokenPlan(options: OAuthController, region: XiaomiTokenPlanRegion): Promise<string>;

package/dist/types/utils/oauth/zai.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Z.AI login flow.
+ *
+ * Z.AI is a platform that provides access to GLM models through an OpenAI-compatible API.
+ * API docs: https://docs.z.ai/guides/overview/quick-start
+ *
+ * This is not OAuth - it's a simple API key flow:
+ * 1. User gets their API key from https://z.ai/settings/api-keys
+ * 2. User pastes the API key into the CLI
+ */
+import type { OAuthController } from "./types";
+/**
+ * Login to Z.AI.
+ *
+ * Opens browser to API keys page, prompts user to paste their API key.
+ * Returns the API key directly (not OAuthCredentials - this isn't OAuth).
+ */
+export declare function loginZai(options: OAuthController): Promise<string>;

package/dist/types/utils/oauth/zenmux.d.ts

@@ -0,0 +1 @@
+export declare const loginZenMux: (options: import("./types").OAuthController) => Promise<string>;

package/dist/types/utils/overflow.d.ts

@@ -0,0 +1,14 @@
+import type { AssistantMessage } from "../types";
+import type { TransportFailureFacts } from "./fallback-transport";
+export declare function classifyContextOverflow(message: AssistantMessage, transportFailure?: TransportFailureFacts, contextWindow?: number): boolean;
+/**
+ * Check if an assistant message represents a context overflow error.
+ *
+ * Callers with normalized transport facts should use {@link classifyContextOverflow}
+ * so typed provider codes take precedence over error prose.
+ */
+export declare function isContextOverflow(message: AssistantMessage, contextWindow?: number): boolean;
+/**
+ * Get the overflow patterns for testing purposes.
+ */
+export declare function getOverflowPatterns(): RegExp[];

package/dist/types/utils/parse-bind.d.ts

@@ -0,0 +1,23 @@
+/**
+ * Shared `host:port` parser used by the auth-broker and auth-gateway boot
+ * paths. Centralized so the two servers can't drift on what they accept (the
+ * gateway used to silently allow empty hostnames; this fixes it).
+ */
+export interface ParsedBind {
+    hostname: string;
+    port: number;
+}
+/**
+ * Parse a `host:port` (or bare `port`, which assumes loopback) string.
+ *
+ * Accepts:
+ *   - `"4000"`            → `127.0.0.1:4000`
+ *   - `"0.0.0.0:4000"`    → as written
+ *   - `"[::1]:4000"`      → as written (brackets retained, Bun handles them)
+ *
+ * Rejects:
+ *   - empty input
+ *   - empty hostname (`":4000"`)
+ *   - non-integer / out-of-range port
+ */
+export declare function parseBind(raw: string): ParsedBind;

package/dist/types/utils/provider-response.d.ts

@@ -0,0 +1,3 @@
+import type { Api, Model, ProviderResponseMetadata, StreamOptions } from "../types";
+export declare function normalizeProviderResponse(response: Response, requestId?: string | null, metadata?: Record<string, unknown>): ProviderResponseMetadata;
+export declare function notifyProviderResponse(options: Pick<StreamOptions, "onResponse"> | undefined, response: Response, model?: Model<Api>, requestId?: string | null, metadata?: Record<string, unknown>): Promise<void>;

package/dist/types/utils/retry-after.d.ts

@@ -0,0 +1,3 @@
+export type HeadersLike = Headers | Record<string, string | undefined> | undefined | null;
+export declare function formatErrorMessageWithRetryAfter(error: unknown, headers?: HeadersLike): string;
+export declare function getRetryAfterMsFromHeaders(headers: HeadersLike): number | undefined;

package/dist/types/utils/retry-budget.d.ts

@@ -0,0 +1 @@
+export declare function resolveRetryBudget(value: number | undefined, fallback: number): number;

package/dist/types/utils/retry.d.ts

@@ -0,0 +1,27 @@
+/**
+ * GitHub Copilot intermittently rejects preview models (gpt-5.3-OpenAI code backend,
+ * gpt-5.4, gpt-5.4-mini, ...) with HTTP 400 `model_not_supported`, even
+ * though the model is listed as enabled on the user's account via `/models`.
+ *
+ * Root cause: Copilot's request-routing backend is rolled out per OAuth
+ * client. Our OAuth client id is shared with opencode; VS Code uses its own
+ * client and sees full availability, so the same account may succeed in VS
+ * Code and flap between 200/400 here. See opencode#13313 and copilot-cli#2597.
+ *
+ * Retrying the identical request 2-3 times almost always lands on a backend
+ * that has the model, so we wrap the initial request with a short retry loop.
+ */
+export declare function isCopilotTransientModelError(error: unknown): boolean;
+/**
+ * Wrap an initial Copilot request so transient `model_not_supported` 400s are
+ * retried a small number of times. No-op for non-Copilot providers.
+ *
+ * The callback **MUST** create a fresh in-flight request each invocation — a
+ * once-consumed AsyncIterable cannot be re-iterated.
+ */
+export declare function callWithCopilotModelRetry<T>(fn: () => Promise<T>, options: {
+    provider: string;
+    signal?: AbortSignal;
+    retryBaseDelayMs?: number;
+    fallbackManaged?: boolean;
+}): Promise<T>;

package/dist/types/utils/schema/adapt.d.ts

@@ -0,0 +1,24 @@
+/**
+ * Set when callers want to globally bypass OpenAI strict-mode enforcement
+ * (e.g. for debugging a provider that misreports strict support, or when
+ * comparing strict vs non-strict outputs).
+ *
+ * Honored by every provider that emits `strict: true` on its function tools —
+ * see `openai-completions`, `openai-responses`, `OpenAI code provider-responses`, and
+ * the strict candidate selection in `anthropic`.
+ */
+export declare const NO_STRICT: boolean;
+/**
+ * Consolidated helper for OpenAI-style strict schema enforcement.
+ *
+ * Each provider computes its own `strict` boolean (logic differs), then calls
+ * this to handle the tryEnforceStrictSchema dance uniformly:
+ * - Draft-07-shaped inputs are upgraded to draft 2020-12 first.
+ * - If `strict` is false, passes the upgraded schema through unchanged.
+ * - If `strict` is true, attempts to enforce strict mode; falls back to
+ *   non-strict if the schema isn't representable.
+ */
+export declare function adaptSchemaForStrict(schema: Record<string, unknown>, strict: boolean): {
+    schema: Record<string, unknown>;
+    strict: boolean;
+};