@xiaoso/dsh-tool-plus 0.1.0-beta.2 → 0.1.0-beta.4

package/lib/device-code-DBo3B5nh.mjs

@@ -0,0 +1,51 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError, h as LoginCancelledError } from "./error-Dd8DIqs-.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/device-code.ts
+const DEVICE_FLOW_CANCEL_MESSAGE = "Login cancelled";
+const DEVICE_FLOW_TIMEOUT_MESSAGE = "Device flow timed out";
+const DEVICE_FLOW_SLOW_DOWN_TIMEOUT_MESSAGE = "Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again.";
+const MINIMUM_DEVICE_FLOW_INTERVAL_MS = 1e3;
+const DEFAULT_DEVICE_FLOW_INTERVAL_SECONDS = 5;
+const SLOW_DOWN_INTERVAL_INCREMENT_MS = 5e3;
+async function abortableDeviceFlowSleep(ms, signal) {
+	if (!signal) {
+		await Bun.sleep(ms);
+		return;
+	}
+	if (signal.aborted) throw new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE);
+	const { promise, resolve, reject } = Promise.withResolvers();
+	let timer;
+	const onAbort = () => {
+		clearTimeout(timer);
+		reject(new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE));
+	};
+	timer = setTimeout(() => {
+		signal.removeEventListener("abort", onAbort);
+		resolve();
+	}, ms);
+	signal.addEventListener("abort", onAbort, { once: true });
+	await promise;
+}
+/** Poll an OAuth device-code flow until completion, provider failure, timeout, or cancellation. */
+async function pollOAuthDeviceCodeFlow(options) {
+	const deadline = typeof options.expiresInSeconds === "number" ? Date.now() + options.expiresInSeconds * 1e3 : Number.POSITIVE_INFINITY;
+	let intervalMs = Math.max(MINIMUM_DEVICE_FLOW_INTERVAL_MS, Math.floor((options.intervalSeconds ?? DEFAULT_DEVICE_FLOW_INTERVAL_SECONDS) * 1e3));
+	let slowDownResponses = 0;
+	while (Date.now() < deadline) {
+		if (options.signal?.aborted) throw new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE);
+		const result = await options.poll();
+		if (result.status === "complete") return result.value;
+		if (result.status === "failed") throw new OAuthError(result.message, { kind: "polling" });
+		if (result.status === "slow_down") {
+			slowDownResponses += 1;
+			intervalMs = Math.max(MINIMUM_DEVICE_FLOW_INTERVAL_MS, intervalMs + SLOW_DOWN_INTERVAL_INCREMENT_MS);
+		}
+		const remainingMs = deadline - Date.now();
+		if (remainingMs <= 0) break;
+		await abortableDeviceFlowSleep(Math.min(intervalMs, remainingMs), options.signal);
+	}
+	throw new OAuthError(slowDownResponses > 0 ? DEVICE_FLOW_SLOW_DOWN_TIMEOUT_MESSAGE : DEVICE_FLOW_TIMEOUT_MESSAGE, { kind: "timeout" });
+}
+//#endregion
+export { pollOAuthDeviceCodeFlow as t };

package/lib/device-code-DIb0FU-H.mjs

@@ -0,0 +1,51 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError, h as LoginCancelledError } from "./error-yCSG0mGC.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/device-code.ts
+const DEVICE_FLOW_CANCEL_MESSAGE = "Login cancelled";
+const DEVICE_FLOW_TIMEOUT_MESSAGE = "Device flow timed out";
+const DEVICE_FLOW_SLOW_DOWN_TIMEOUT_MESSAGE = "Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again.";
+const MINIMUM_DEVICE_FLOW_INTERVAL_MS = 1e3;
+const DEFAULT_DEVICE_FLOW_INTERVAL_SECONDS = 5;
+const SLOW_DOWN_INTERVAL_INCREMENT_MS = 5e3;
+async function abortableDeviceFlowSleep(ms, signal) {
+	if (!signal) {
+		await Bun.sleep(ms);
+		return;
+	}
+	if (signal.aborted) throw new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE);
+	const { promise, resolve, reject } = Promise.withResolvers();
+	let timer;
+	const onAbort = () => {
+		clearTimeout(timer);
+		reject(new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE));
+	};
+	timer = setTimeout(() => {
+		signal.removeEventListener("abort", onAbort);
+		resolve();
+	}, ms);
+	signal.addEventListener("abort", onAbort, { once: true });
+	await promise;
+}
+/** Poll an OAuth device-code flow until completion, provider failure, timeout, or cancellation. */
+async function pollOAuthDeviceCodeFlow(options) {
+	const deadline = typeof options.expiresInSeconds === "number" ? Date.now() + options.expiresInSeconds * 1e3 : Number.POSITIVE_INFINITY;
+	let intervalMs = Math.max(MINIMUM_DEVICE_FLOW_INTERVAL_MS, Math.floor((options.intervalSeconds ?? DEFAULT_DEVICE_FLOW_INTERVAL_SECONDS) * 1e3));
+	let slowDownResponses = 0;
+	while (Date.now() < deadline) {
+		if (options.signal?.aborted) throw new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE);
+		const result = await options.poll();
+		if (result.status === "complete") return result.value;
+		if (result.status === "failed") throw new OAuthError(result.message, { kind: "polling" });
+		if (result.status === "slow_down") {
+			slowDownResponses += 1;
+			intervalMs = Math.max(MINIMUM_DEVICE_FLOW_INTERVAL_MS, intervalMs + SLOW_DOWN_INTERVAL_INCREMENT_MS);
+		}
+		const remainingMs = deadline - Date.now();
+		if (remainingMs <= 0) break;
+		await abortableDeviceFlowSleep(Math.min(intervalMs, remainingMs), options.signal);
+	}
+	throw new OAuthError(slowDownResponses > 0 ? DEVICE_FLOW_SLOW_DOWN_TIMEOUT_MESSAGE : DEVICE_FLOW_TIMEOUT_MESSAGE, { kind: "timeout" });
+}
+//#endregion
+export { pollOAuthDeviceCodeFlow as t };

package/lib/device-code-OI_tQcmc.mjs

@@ -0,0 +1,51 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError, h as LoginCancelledError } from "./error-B3bevhrs.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/device-code.ts
+const DEVICE_FLOW_CANCEL_MESSAGE = "Login cancelled";
+const DEVICE_FLOW_TIMEOUT_MESSAGE = "Device flow timed out";
+const DEVICE_FLOW_SLOW_DOWN_TIMEOUT_MESSAGE = "Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again.";
+const MINIMUM_DEVICE_FLOW_INTERVAL_MS = 1e3;
+const DEFAULT_DEVICE_FLOW_INTERVAL_SECONDS = 5;
+const SLOW_DOWN_INTERVAL_INCREMENT_MS = 5e3;
+async function abortableDeviceFlowSleep(ms, signal) {
+	if (!signal) {
+		await Bun.sleep(ms);
+		return;
+	}
+	if (signal.aborted) throw new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE);
+	const { promise, resolve, reject } = Promise.withResolvers();
+	let timer;
+	const onAbort = () => {
+		clearTimeout(timer);
+		reject(new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE));
+	};
+	timer = setTimeout(() => {
+		signal.removeEventListener("abort", onAbort);
+		resolve();
+	}, ms);
+	signal.addEventListener("abort", onAbort, { once: true });
+	await promise;
+}
+/** Poll an OAuth device-code flow until completion, provider failure, timeout, or cancellation. */
+async function pollOAuthDeviceCodeFlow(options) {
+	const deadline = typeof options.expiresInSeconds === "number" ? Date.now() + options.expiresInSeconds * 1e3 : Number.POSITIVE_INFINITY;
+	let intervalMs = Math.max(MINIMUM_DEVICE_FLOW_INTERVAL_MS, Math.floor((options.intervalSeconds ?? DEFAULT_DEVICE_FLOW_INTERVAL_SECONDS) * 1e3));
+	let slowDownResponses = 0;
+	while (Date.now() < deadline) {
+		if (options.signal?.aborted) throw new LoginCancelledError(DEVICE_FLOW_CANCEL_MESSAGE);
+		const result = await options.poll();
+		if (result.status === "complete") return result.value;
+		if (result.status === "failed") throw new OAuthError(result.message, { kind: "polling" });
+		if (result.status === "slow_down") {
+			slowDownResponses += 1;
+			intervalMs = Math.max(MINIMUM_DEVICE_FLOW_INTERVAL_MS, intervalMs + SLOW_DOWN_INTERVAL_INCREMENT_MS);
+		}
+		const remainingMs = deadline - Date.now();
+		if (remainingMs <= 0) break;
+		await abortableDeviceFlowSleep(Math.min(intervalMs, remainingMs), options.signal);
+	}
+	throw new OAuthError(slowDownResponses > 0 ? DEVICE_FLOW_SLOW_DOWN_TIMEOUT_MESSAGE : DEVICE_FLOW_TIMEOUT_MESSAGE, { kind: "timeout" });
+}
+//#endregion
+export { pollOAuthDeviceCodeFlow as t };

package/lib/devin-BHZZyMhO.mjs

@@ -0,0 +1,95 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError } from "./error-Dd8DIqs-.mjs";
+import { t as OAuthCallbackFlow } from "./callback-server-CQ5Jo8F-.mjs";
+import { t as generatePKCE } from "./pkce-BlQikGPu.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/devin.ts
+const DEVIN_WEBAPP_URL = "https://app.devin.ai";
+const DEVIN_API_URL = "https://api.devin.ai";
+const CALLBACK_PORT = 59653;
+const CALLBACK_PATH = "/callback";
+const TOKEN_PATH = "/auth/cli/token";
+const FALLBACK_EXPIRES_MS = 31536e6;
+async function loginDevin(ctrl) {
+	return new DevinOAuthFlow(ctrl).login();
+}
+var DevinOAuthFlow = class extends OAuthCallbackFlow {
+	#pkce;
+	constructor(ctrl) {
+		super(ctrl, {
+			preferredPort: CALLBACK_PORT,
+			callbackPath: CALLBACK_PATH,
+			callbackHostname: "127.0.0.1"
+		});
+	}
+	generateState() {
+		return crypto.randomUUID();
+	}
+	async generateAuthUrl(state, redirectUri) {
+		this.#pkce = await generatePKCE();
+		const params = new URLSearchParams({
+			redirect_uri: redirectUri,
+			state,
+			prompt: "select_account",
+			code_challenge: this.#pkce.challenge,
+			code_challenge_method: "S256"
+		});
+		return {
+			url: `${DEVIN_WEBAPP_URL}/auth/cli/continue?${params.toString()}`,
+			instructions: "Sign in to Devin in your browser."
+		};
+	}
+	async exchangeToken(code) {
+		if (!this.#pkce) throw new OAuthError("Devin PKCE verifier was not initialized", {
+			kind: "configuration",
+			provider: "devin"
+		});
+		const token = await exchangeDevinCliToken(code, this.#pkce.verifier, this.ctrl.fetch);
+		return {
+			access: token,
+			refresh: token,
+			expires: getTokenExpiry(token),
+			apiEndpoint: DEVIN_API_URL,
+			enterpriseUrl: DEVIN_WEBAPP_URL
+		};
+	}
+};
+async function exchangeDevinCliToken(authorizationCode, codeVerifier, fetchImpl = fetch) {
+	const response = await fetchImpl(`${DEVIN_API_URL}${TOKEN_PATH}`, {
+		method: "POST",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			code: authorizationCode,
+			code_verifier: codeVerifier
+		})
+	});
+	if (!response.ok) {
+		const error = await response.text();
+		throw new OAuthError(`Devin CLI token exchange failed: ${response.status} ${error}`.trim(), {
+			kind: "token-exchange",
+			provider: "devin",
+			status: response.status
+		});
+	}
+	const data = await response.json();
+	if (typeof data.token !== "string" || data.token.length === 0) throw new OAuthError("Devin CLI token exchange returned an empty token", {
+		kind: "validation",
+		provider: "devin"
+	});
+	return data.token;
+}
+function getTokenExpiry(token) {
+	try {
+		const [, payload] = token.split(".");
+		if (payload) {
+			const decoded = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+			if (typeof decoded.exp === "number" && Number.isFinite(decoded.exp)) return decoded.exp * 1e3 - 3e5;
+		}
+	} catch {}
+	return Date.now() + FALLBACK_EXPIRES_MS;
+}
+//#endregion
+export { loginDevin };

package/lib/devin-BK7DHeca.mjs

@@ -0,0 +1,114 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { n as discoveryFetch } from "./utils-D2YknRk4.mjs";
+import { E as create, i as fromBinary, t as toBinary } from "./to-binary-B1BEBIPC.mjs";
+import { f as MetadataSchema, i as GetCliModelConfigsResponseSchema, r as GetCliModelConfigsRequestSchema } from "./api_server_pb-CDZgLMta.mjs";
+import { gunzipSync } from "node:zlib";
+//#region node_modules/.pnpm/@oh-my-pi+pi-catalog@17.3.5/node_modules/@oh-my-pi/pi-catalog/src/discovery/devin.ts
+const DEVIN_DEFAULT_BASE_URL = "https://server.codeium.com";
+const DEVIN_GET_CLI_MODEL_CONFIGS_PATH = "/exa.api_server_pb.ApiServerService/GetCliModelConfigs";
+const DEVIN_IDE_VERSION = "3.2.23";
+const DEVIN_EXTENSION_VERSION = "1.48.2";
+const DEVIN_SESSION_TOKEN_PREFIX = "devin-session-token$";
+const DEFAULT_CONTEXT_WINDOW = 2e5;
+const DEFAULT_MAX_TOKENS = 64e3;
+/** Best-effort match for labels whose wording implies a thinking / reasoning-effort variant. */
+const REASONING_LABEL_PATTERN = /think|thinking|minimal|high|medium|low|xhigh|max|reasoning/i;
+const NO_REASONING_LABEL_PATTERN = /\bno thinking\b/i;
+function supportsDevinThinking(config) {
+	if (NO_REASONING_LABEL_PATTERN.test(config.label)) return false;
+	return config.modelInfo?.modelFeatures?.supportsThinking === true || REASONING_LABEL_PATTERN.test(config.label);
+}
+/**
+* Fetches Devin models through the `GetCliModelConfigs` unary Connect RPC and
+* normalizes them into canonical model entries.
+*
+* Returns `null` on request/decode failures.
+* Returns `[]` only when the endpoint responds successfully with no usable models.
+*/
+async function fetchDevinModels(options) {
+	const timeoutMs = options.timeoutMs ?? 5e3;
+	const requestUrl = `${(options.baseUrl ?? DEVIN_DEFAULT_BASE_URL).replace(/\/+$/, "")}${DEVIN_GET_CLI_MODEL_CONFIGS_PATH}`;
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), timeoutMs);
+	const signal = options.signal ? AbortSignal.any([controller.signal, options.signal]) : controller.signal;
+	try {
+		const request = create(GetCliModelConfigsRequestSchema, { metadata: create(MetadataSchema, {
+			apiKey: normalizeDevinSessionToken(options.apiKey),
+			ideName: "windsurf",
+			ideVersion: DEVIN_IDE_VERSION,
+			extensionName: "windsurf",
+			extensionVersion: DEVIN_EXTENSION_VERSION
+		}) });
+		const body = toBinary(GetCliModelConfigsRequestSchema, request);
+		const response = await discoveryFetch(options.fetch)(requestUrl, {
+			method: "POST",
+			headers: {
+				"content-type": "application/proto",
+				"connect-protocol-version": "1",
+				accept: "*/*"
+			},
+			body,
+			signal
+		});
+		if (!response.ok) return null;
+		const decoded = decodeCliModelConfigsResponse(new Uint8Array(await response.arrayBuffer()));
+		if (!decoded) return null;
+		return normalizeDevinModels(decoded.clientModelConfigs, options.baseUrl);
+	} catch {
+		return null;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+function normalizeDevinSessionToken(apiKey) {
+	if (!apiKey) return "";
+	return apiKey.startsWith(DEVIN_SESSION_TOKEN_PREFIX) ? apiKey : `${DEVIN_SESSION_TOKEN_PREFIX}${apiKey}`;
+}
+/**
+* Decodes a raw (unframed) `GetCliModelConfigsResponse`. Bun's `fetch` usually
+* auto-decompresses gzip, so the direct decode is attempted first; a
+* `gunzipSync` fallback covers runtimes that hand back the still-compressed body.
+*/
+function decodeCliModelConfigsResponse(payload) {
+	try {
+		return fromBinary(GetCliModelConfigsResponseSchema, payload);
+	} catch {
+		try {
+			return fromBinary(GetCliModelConfigsResponseSchema, gunzipSync(payload));
+		} catch {
+			return null;
+		}
+	}
+}
+function normalizeDevinModels(configs, baseUrlOverride) {
+	const byId = /* @__PURE__ */ new Map();
+	for (const config of configs) {
+		if (config.disabled) continue;
+		const id = config.modelUid.trim();
+		if (!id) continue;
+		const input = config.supportsImages ? ["text", "image"] : ["text"];
+		const contextWindow = config.maxTokens > 0 ? config.maxTokens : DEFAULT_CONTEXT_WINDOW;
+		byId.set(id, {
+			id,
+			name: config.label.trim() || id,
+			api: "devin-agent",
+			provider: "devin",
+			baseUrl: baseUrlOverride ?? DEVIN_DEFAULT_BASE_URL,
+			reasoning: supportsDevinThinking(config),
+			input,
+			supportsTools: true,
+			cost: {
+				input: 0,
+				output: 0,
+				cacheRead: 0,
+				cacheWrite: 0
+			},
+			contextWindow,
+			maxTokens: Math.min(config.maxTokens > 0 ? config.maxTokens : DEFAULT_MAX_TOKENS, DEFAULT_MAX_TOKENS)
+		});
+	}
+	return [...byId.values()].sort((a, b) => a.id.localeCompare(b.id));
+}
+//#endregion
+export { fetchDevinModels };

package/lib/devin-CfMp3cXS.mjs

@@ -0,0 +1,95 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError } from "./error-yCSG0mGC.mjs";
+import { t as OAuthCallbackFlow } from "./callback-server-DDSrZ6l_.mjs";
+import { t as generatePKCE } from "./pkce-BlQikGPu.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/devin.ts
+const DEVIN_WEBAPP_URL = "https://app.devin.ai";
+const DEVIN_API_URL = "https://api.devin.ai";
+const CALLBACK_PORT = 59653;
+const CALLBACK_PATH = "/callback";
+const TOKEN_PATH = "/auth/cli/token";
+const FALLBACK_EXPIRES_MS = 31536e6;
+async function loginDevin(ctrl) {
+	return new DevinOAuthFlow(ctrl).login();
+}
+var DevinOAuthFlow = class extends OAuthCallbackFlow {
+	#pkce;
+	constructor(ctrl) {
+		super(ctrl, {
+			preferredPort: CALLBACK_PORT,
+			callbackPath: CALLBACK_PATH,
+			callbackHostname: "127.0.0.1"
+		});
+	}
+	generateState() {
+		return crypto.randomUUID();
+	}
+	async generateAuthUrl(state, redirectUri) {
+		this.#pkce = await generatePKCE();
+		const params = new URLSearchParams({
+			redirect_uri: redirectUri,
+			state,
+			prompt: "select_account",
+			code_challenge: this.#pkce.challenge,
+			code_challenge_method: "S256"
+		});
+		return {
+			url: `${DEVIN_WEBAPP_URL}/auth/cli/continue?${params.toString()}`,
+			instructions: "Sign in to Devin in your browser."
+		};
+	}
+	async exchangeToken(code) {
+		if (!this.#pkce) throw new OAuthError("Devin PKCE verifier was not initialized", {
+			kind: "configuration",
+			provider: "devin"
+		});
+		const token = await exchangeDevinCliToken(code, this.#pkce.verifier, this.ctrl.fetch);
+		return {
+			access: token,
+			refresh: token,
+			expires: getTokenExpiry(token),
+			apiEndpoint: DEVIN_API_URL,
+			enterpriseUrl: DEVIN_WEBAPP_URL
+		};
+	}
+};
+async function exchangeDevinCliToken(authorizationCode, codeVerifier, fetchImpl = fetch) {
+	const response = await fetchImpl(`${DEVIN_API_URL}${TOKEN_PATH}`, {
+		method: "POST",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			code: authorizationCode,
+			code_verifier: codeVerifier
+		})
+	});
+	if (!response.ok) {
+		const error = await response.text();
+		throw new OAuthError(`Devin CLI token exchange failed: ${response.status} ${error}`.trim(), {
+			kind: "token-exchange",
+			provider: "devin",
+			status: response.status
+		});
+	}
+	const data = await response.json();
+	if (typeof data.token !== "string" || data.token.length === 0) throw new OAuthError("Devin CLI token exchange returned an empty token", {
+		kind: "validation",
+		provider: "devin"
+	});
+	return data.token;
+}
+function getTokenExpiry(token) {
+	try {
+		const [, payload] = token.split(".");
+		if (payload) {
+			const decoded = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+			if (typeof decoded.exp === "number" && Number.isFinite(decoded.exp)) return decoded.exp * 1e3 - 3e5;
+		}
+	} catch {}
+	return Date.now() + FALLBACK_EXPIRES_MS;
+}
+//#endregion
+export { loginDevin };

package/lib/devin-CldyPD8K.mjs

@@ -0,0 +1,95 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { c as OAuthError } from "./error-B3bevhrs.mjs";
+import { t as OAuthCallbackFlow } from "./callback-server-BEFNf-jf.mjs";
+import { t as generatePKCE } from "./pkce-BlQikGPu.mjs";
+//#region node_modules/.pnpm/@oh-my-pi+pi-ai@17.3.5/node_modules/@oh-my-pi/pi-ai/src/registry/oauth/devin.ts
+const DEVIN_WEBAPP_URL = "https://app.devin.ai";
+const DEVIN_API_URL = "https://api.devin.ai";
+const CALLBACK_PORT = 59653;
+const CALLBACK_PATH = "/callback";
+const TOKEN_PATH = "/auth/cli/token";
+const FALLBACK_EXPIRES_MS = 31536e6;
+async function loginDevin(ctrl) {
+	return new DevinOAuthFlow(ctrl).login();
+}
+var DevinOAuthFlow = class extends OAuthCallbackFlow {
+	#pkce;
+	constructor(ctrl) {
+		super(ctrl, {
+			preferredPort: CALLBACK_PORT,
+			callbackPath: CALLBACK_PATH,
+			callbackHostname: "127.0.0.1"
+		});
+	}
+	generateState() {
+		return crypto.randomUUID();
+	}
+	async generateAuthUrl(state, redirectUri) {
+		this.#pkce = await generatePKCE();
+		const params = new URLSearchParams({
+			redirect_uri: redirectUri,
+			state,
+			prompt: "select_account",
+			code_challenge: this.#pkce.challenge,
+			code_challenge_method: "S256"
+		});
+		return {
+			url: `${DEVIN_WEBAPP_URL}/auth/cli/continue?${params.toString()}`,
+			instructions: "Sign in to Devin in your browser."
+		};
+	}
+	async exchangeToken(code) {
+		if (!this.#pkce) throw new OAuthError("Devin PKCE verifier was not initialized", {
+			kind: "configuration",
+			provider: "devin"
+		});
+		const token = await exchangeDevinCliToken(code, this.#pkce.verifier, this.ctrl.fetch);
+		return {
+			access: token,
+			refresh: token,
+			expires: getTokenExpiry(token),
+			apiEndpoint: DEVIN_API_URL,
+			enterpriseUrl: DEVIN_WEBAPP_URL
+		};
+	}
+};
+async function exchangeDevinCliToken(authorizationCode, codeVerifier, fetchImpl = fetch) {
+	const response = await fetchImpl(`${DEVIN_API_URL}${TOKEN_PATH}`, {
+		method: "POST",
+		headers: {
+			Accept: "application/json",
+			"Content-Type": "application/json"
+		},
+		body: JSON.stringify({
+			code: authorizationCode,
+			code_verifier: codeVerifier
+		})
+	});
+	if (!response.ok) {
+		const error = await response.text();
+		throw new OAuthError(`Devin CLI token exchange failed: ${response.status} ${error}`.trim(), {
+			kind: "token-exchange",
+			provider: "devin",
+			status: response.status
+		});
+	}
+	const data = await response.json();
+	if (typeof data.token !== "string" || data.token.length === 0) throw new OAuthError("Devin CLI token exchange returned an empty token", {
+		kind: "validation",
+		provider: "devin"
+	});
+	return data.token;
+}
+function getTokenExpiry(token) {
+	try {
+		const [, payload] = token.split(".");
+		if (payload) {
+			const decoded = JSON.parse(Buffer.from(payload, "base64url").toString("utf8"));
+			if (typeof decoded.exp === "number" && Number.isFinite(decoded.exp)) return decoded.exp * 1e3 - 3e5;
+		}
+	} catch {}
+	return Date.now() + FALLBACK_EXPIRES_MS;
+}
+//#endregion
+export { loginDevin };

package/lib/devin-CzRpTUOA.mjs

@@ -0,0 +1,114 @@
+import { installBunShim as __installBunShim } from "./bun-shim.mjs";
+__installBunShim();
+import { n as discoveryFetch } from "./utils-DppGHXQB.mjs";
+import { E as create, i as fromBinary, t as toBinary } from "./to-binary-B1BEBIPC.mjs";
+import { f as MetadataSchema, i as GetCliModelConfigsResponseSchema, r as GetCliModelConfigsRequestSchema } from "./api_server_pb-CDZgLMta.mjs";
+import { gunzipSync } from "node:zlib";
+//#region node_modules/.pnpm/@oh-my-pi+pi-catalog@17.3.5/node_modules/@oh-my-pi/pi-catalog/src/discovery/devin.ts
+const DEVIN_DEFAULT_BASE_URL = "https://server.codeium.com";
+const DEVIN_GET_CLI_MODEL_CONFIGS_PATH = "/exa.api_server_pb.ApiServerService/GetCliModelConfigs";
+const DEVIN_IDE_VERSION = "3.2.23";
+const DEVIN_EXTENSION_VERSION = "1.48.2";
+const DEVIN_SESSION_TOKEN_PREFIX = "devin-session-token$";
+const DEFAULT_CONTEXT_WINDOW = 2e5;
+const DEFAULT_MAX_TOKENS = 64e3;
+/** Best-effort match for labels whose wording implies a thinking / reasoning-effort variant. */
+const REASONING_LABEL_PATTERN = /think|thinking|minimal|high|medium|low|xhigh|max|reasoning/i;
+const NO_REASONING_LABEL_PATTERN = /\bno thinking\b/i;
+function supportsDevinThinking(config) {
+	if (NO_REASONING_LABEL_PATTERN.test(config.label)) return false;
+	return config.modelInfo?.modelFeatures?.supportsThinking === true || REASONING_LABEL_PATTERN.test(config.label);
+}
+/**
+* Fetches Devin models through the `GetCliModelConfigs` unary Connect RPC and
+* normalizes them into canonical model entries.
+*
+* Returns `null` on request/decode failures.
+* Returns `[]` only when the endpoint responds successfully with no usable models.
+*/
+async function fetchDevinModels(options) {
+	const timeoutMs = options.timeoutMs ?? 5e3;
+	const requestUrl = `${(options.baseUrl ?? DEVIN_DEFAULT_BASE_URL).replace(/\/+$/, "")}${DEVIN_GET_CLI_MODEL_CONFIGS_PATH}`;
+	const controller = new AbortController();
+	const timer = setTimeout(() => controller.abort(), timeoutMs);
+	const signal = options.signal ? AbortSignal.any([controller.signal, options.signal]) : controller.signal;
+	try {
+		const request = create(GetCliModelConfigsRequestSchema, { metadata: create(MetadataSchema, {
+			apiKey: normalizeDevinSessionToken(options.apiKey),
+			ideName: "windsurf",
+			ideVersion: DEVIN_IDE_VERSION,
+			extensionName: "windsurf",
+			extensionVersion: DEVIN_EXTENSION_VERSION
+		}) });
+		const body = toBinary(GetCliModelConfigsRequestSchema, request);
+		const response = await discoveryFetch(options.fetch)(requestUrl, {
+			method: "POST",
+			headers: {
+				"content-type": "application/proto",
+				"connect-protocol-version": "1",
+				accept: "*/*"
+			},
+			body,
+			signal
+		});
+		if (!response.ok) return null;
+		const decoded = decodeCliModelConfigsResponse(new Uint8Array(await response.arrayBuffer()));
+		if (!decoded) return null;
+		return normalizeDevinModels(decoded.clientModelConfigs, options.baseUrl);
+	} catch {
+		return null;
+	} finally {
+		clearTimeout(timer);
+	}
+}
+function normalizeDevinSessionToken(apiKey) {
+	if (!apiKey) return "";
+	return apiKey.startsWith(DEVIN_SESSION_TOKEN_PREFIX) ? apiKey : `${DEVIN_SESSION_TOKEN_PREFIX}${apiKey}`;
+}
+/**
+* Decodes a raw (unframed) `GetCliModelConfigsResponse`. Bun's `fetch` usually
+* auto-decompresses gzip, so the direct decode is attempted first; a
+* `gunzipSync` fallback covers runtimes that hand back the still-compressed body.
+*/
+function decodeCliModelConfigsResponse(payload) {
+	try {
+		return fromBinary(GetCliModelConfigsResponseSchema, payload);
+	} catch {
+		try {
+			return fromBinary(GetCliModelConfigsResponseSchema, gunzipSync(payload));
+		} catch {
+			return null;
+		}
+	}
+}
+function normalizeDevinModels(configs, baseUrlOverride) {
+	const byId = /* @__PURE__ */ new Map();
+	for (const config of configs) {
+		if (config.disabled) continue;
+		const id = config.modelUid.trim();
+		if (!id) continue;
+		const input = config.supportsImages ? ["text", "image"] : ["text"];
+		const contextWindow = config.maxTokens > 0 ? config.maxTokens : DEFAULT_CONTEXT_WINDOW;
+		byId.set(id, {
+			id,
+			name: config.label.trim() || id,
+			api: "devin-agent",
+			provider: "devin",
+			baseUrl: baseUrlOverride ?? DEVIN_DEFAULT_BASE_URL,
+			reasoning: supportsDevinThinking(config),
+			input,
+			supportsTools: true,
+			cost: {
+				input: 0,
+				output: 0,
+				cacheRead: 0,
+				cacheWrite: 0
+			},
+			contextWindow,
+			maxTokens: Math.min(config.maxTokens > 0 ? config.maxTokens : DEFAULT_MAX_TOKENS, DEFAULT_MAX_TOKENS)
+		});
+	}
+	return [...byId.values()].sort((a, b) => a.id.localeCompare(b.id));
+}
+//#endregion
+export { fetchDevinModels };