@xopcai/xopc 0.0.163 → 0.0.164

package/dist/src/auth/oauth/registry.js

@@ -0,0 +1,65 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { anthropicOAuthProvider, init_anthropic } from "./anthropic.js";
+import { githubCopilotOAuthProvider, init_github_copilot } from "./github-copilot.js";
+import { antigravityOAuthProvider } from "./google-oauth/google-antigravity.js";
+import { init_google_antigravity } from "./google-antigravity.js";
+import { geminiCliOAuthProvider } from "./google-oauth/google-gemini-cli.js";
+import { init_google_gemini_cli } from "./google-gemini-cli.js";
+import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
+import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
+import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
+import { init_openai_codex, openaiCodexOAuthProvider } from "./openai-codex.js";
+import { init_xopc_cloud, xopcCloudOAuthProvider } from "./xopc-cloud.js";
+//#region src/auth/oauth/registry.ts
+function definition(provider, displayName = provider.name) {
+	return {
+		displayName,
+		provider,
+		profileId: `${provider.id}:default`,
+		urlPrompt: "🌐 Please open this URL in your browser:\n"
+	};
+}
+function getOAuthProviderDefinition(provider) {
+	return OAUTH_PROVIDER_DEFINITIONS[provider];
+}
+function getOAuthProviderInterfaces() {
+	return Object.fromEntries(Object.entries(OAUTH_PROVIDER_DEFINITIONS).map(([id, value]) => [id, value.provider]));
+}
+function getOAuthProviderIds() {
+	return Object.keys(OAUTH_PROVIDER_DEFINITIONS);
+}
+function isOAuthOnlyProvider(provider) {
+	return OAUTH_PROVIDER_DEFINITIONS[provider]?.oauthOnly === true;
+}
+var OAUTH_PROVIDER_DEFINITIONS;
+var init_registry = __esmMin((() => {
+	init_anthropic();
+	init_github_copilot();
+	init_google_antigravity();
+	init_google_gemini_cli();
+	init_kimi_coding();
+	init_minimax_cn();
+	init_minimax();
+	init_openai_codex();
+	init_xopc_cloud();
+	OAUTH_PROVIDER_DEFINITIONS = {
+		"xopc-cloud": {
+			...definition(xopcCloudOAuthProvider),
+			oauthOnly: true
+		},
+		anthropic: definition(anthropicOAuthProvider, "Anthropic (Claude)"),
+		minimax: definition(minimaxOAuthProvider, "MiniMax (幂维智能)"),
+		"minimax-cn": {
+			...definition(minimaxCnOAuthProvider, "MiniMax CN"),
+			urlPrompt: "🌐 请在浏览器中打开以下 URL:\n"
+		},
+		"kimi-coding": definition(kimiCodingOAuthProvider, "Kimi For Coding (月之暗面)"),
+		"github-copilot": definition(githubCopilotOAuthProvider),
+		"google-gemini-cli": definition(geminiCliOAuthProvider),
+		"google-antigravity": definition(antigravityOAuthProvider),
+		"openai-codex": definition(openaiCodexOAuthProvider)
+	};
+}));
+//#endregion
+init_registry();
+export { OAUTH_PROVIDER_DEFINITIONS, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, init_registry, isOAuthOnlyProvider };

package/dist/src/auth/oauth/xopc-cloud.d.ts

@@ -0,0 +1,2 @@
+import type { OAuthProviderInterface } from './types.js';
+export declare const xopcCloudOAuthProvider: OAuthProviderInterface;

package/dist/src/auth/oauth/xopc-cloud.js

@@ -0,0 +1,101 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { hostname } from "node:os";
+import { setTimeout } from "node:timers/promises";
+//#region src/auth/oauth/xopc-cloud.ts
+function consoleUrl() {
+	return (process.env.XOPC_CONSOLE_URL ?? DEFAULT_CONSOLE_URL).replace(/\/+$/, "");
+}
+async function readJson(response) {
+	const body = await response.json().catch(() => null);
+	return body && typeof body === "object" ? body : {};
+}
+function credentials(body) {
+	if (typeof body.access_token !== "string" || body.access_token.length === 0 || typeof body.refresh_token !== "string" || body.refresh_token.length === 0 || typeof body.expires_in !== "number" || !Number.isFinite(body.expires_in) || body.expires_in <= 0) throw new Error("XOPC OAuth token response is incomplete");
+	return {
+		access: body.access_token,
+		refresh: body.refresh_token,
+		expires: Date.now() + body.expires_in * 1e3,
+		scope: typeof body.scope === "string" ? body.scope.split(" ").filter(Boolean) : []
+	};
+}
+async function tokenRequest(body, signal) {
+	return fetch(`${consoleUrl()}/oauth/token`, {
+		method: "POST",
+		headers: {
+			"content-type": "application/x-www-form-urlencoded",
+			accept: "application/json"
+		},
+		body,
+		signal: signal ?? AbortSignal.timeout(3e4)
+	});
+}
+async function login(callbacks) {
+	const response = await fetch(`${consoleUrl()}/oauth/device_authorization`, {
+		method: "POST",
+		headers: {
+			"content-type": "application/x-www-form-urlencoded",
+			accept: "application/json"
+		},
+		body: new URLSearchParams({
+			client_id: CLIENT_ID,
+			scope: DEFAULT_SCOPE,
+			device_name: hostname() || "XOPC client",
+			client_type: "cli"
+		}),
+		signal: callbacks.signal ?? AbortSignal.timeout(3e4)
+	});
+	const body = await readJson(response);
+	if (!response.ok) throw new Error(body.error_description ?? body.error ?? "XOPC OAuth authorization failed");
+	const deviceCode = typeof body.device_code === "string" ? body.device_code : "";
+	const userCode = typeof body.user_code === "string" ? body.user_code : "";
+	const verificationUri = typeof body.verification_uri_complete === "string" ? body.verification_uri_complete : typeof body.verification_uri === "string" ? body.verification_uri : "";
+	if (!deviceCode || !userCode || !verificationUri) throw new Error("XOPC OAuth response is incomplete");
+	const intervalMs = Math.max(1, Number(body.interval) || 5) * 1e3;
+	const expiresAt = Date.now() + Math.max(1, Number(body.expires_in) || 600) * 1e3;
+	callbacks.onDeviceCode({
+		userCode,
+		verificationUri,
+		intervalSeconds: intervalMs / 1e3,
+		expiresInSeconds: Math.floor((expiresAt - Date.now()) / 1e3)
+	});
+	while (Date.now() < expiresAt) {
+		if (callbacks.signal?.aborted) throw callbacks.signal.reason ?? /* @__PURE__ */ new Error("OAuth login cancelled");
+		await setTimeout(intervalMs, void 0, callbacks.signal ? { signal: callbacks.signal } : void 0);
+		const token = await tokenRequest(new URLSearchParams({
+			grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+			client_id: CLIENT_ID,
+			device_code: deviceCode
+		}), callbacks.signal);
+		const tokenBody = await readJson(token);
+		if (token.ok) return credentials(tokenBody);
+		if (tokenBody.error === "authorization_pending" || tokenBody.error === "slow_down") continue;
+		throw new Error(tokenBody.error_description ?? tokenBody.error ?? "XOPC OAuth token exchange failed");
+	}
+	throw new Error("XOPC OAuth authorization expired");
+}
+async function refreshToken(current) {
+	const response = await tokenRequest(new URLSearchParams({
+		grant_type: "refresh_token",
+		client_id: CLIENT_ID,
+		refresh_token: current.refresh
+	}));
+	const body = await readJson(response);
+	if (!response.ok) throw new Error(body.error_description ?? body.error ?? "XOPC OAuth refresh failed");
+	return credentials(body);
+}
+var CLIENT_ID, DEFAULT_CONSOLE_URL, DEFAULT_SCOPE, xopcCloudOAuthProvider;
+var init_xopc_cloud = __esmMin((() => {
+	CLIENT_ID = "xopc-native";
+	DEFAULT_CONSOLE_URL = "https://console.xopc.ai";
+	DEFAULT_SCOPE = "models:read models:invoke account:usage offline_access";
+	xopcCloudOAuthProvider = {
+		id: "xopc-cloud",
+		name: "XOPC Model Service",
+		login,
+		refreshToken,
+		getApiKey: (value) => value.access
+	};
+}));
+//#endregion
+init_xopc_cloud();
+export { init_xopc_cloud, xopcCloudOAuthProvider };

package/dist/src/auth/sync-provider-auth.js

@@ -2,6 +2,7 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
 import { init_loader, loadConfig } from "../config/loader.js";
+import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**
@@ -81,6 +82,7 @@ function readOAuthAccessTokenSync(provider) {
 */
 function resolveProviderApiKeySync(provider) {
 	const normalized = provider.toLowerCase();
+	if (isOAuthOnlyProvider(normalized)) return readOAuthAccessTokenSync(normalized);
 	const cfg = loadConfig();
 	const fromAgent = readApiKeyFromProfilesFile(resolveAgentAuthProfilesPath(cfg, getDefaultAgentId(cfg)), normalized);
 	if (fromAgent) return fromAgent;
@@ -91,6 +93,7 @@ function resolveProviderApiKeySync(provider) {
 /** Resolve one agent's private credential, then the shared credential and OAuth token. */
 function resolveProviderApiKeyForAgentSync(provider, agentId, config) {
 	const normalized = provider.toLowerCase();
+	if (isOAuthOnlyProvider(normalized)) return readOAuthAccessTokenSync(normalized);
 	if (agentId?.trim()) {
 		const fromAgent = readApiKeyFromProfilesFile(resolveAgentAuthProfilesPath(config ?? loadConfig(), agentId.trim()), normalized);
 		if (fromAgent) return fromAgent;
@@ -104,6 +107,7 @@ function resolveProviderApiKeyForAgentSync(provider, agentId, config) {
 * matching async CredentialResolver resolution (excluding env — callers check env separately).
 */
 function hasProviderAuthOnDiskSync(provider) {
+	if (isOAuthOnlyProvider(provider.toLowerCase())) return hasOAuthTokenSync(provider);
 	const cfg = loadConfig();
 	if (hasApiKeyInProfilesFile(resolveAgentAuthProfilesPath(cfg, getDefaultAgentId(cfg)), provider)) return true;
 	if (hasApiKeyInProfilesFile(resolveAuthProfilesPath(), provider)) return true;
@@ -114,6 +118,7 @@ var init_sync_provider_auth = __esmMin((() => {
 	init_paths();
 	init_loader();
 	init_resolve_route();
+	init_registry();
 }));
 //#endregion
 init_sync_provider_auth();

package/dist/src/cli/utils/oauth-providers.d.ts

@@ -1,29 +1,6 @@
-/**
- * OAuth Provider Configuration
- *
- * Centralized OAuth provider definitions for CLI commands.
- * Used by both auth.ts and onboard.ts to avoid duplication.
- */
-import type { OAuthProviderInterface } from '../../auth/oauth/types.js';
-export interface OAuthProviderConfig {
-    displayName: string;
-    provider: OAuthProviderInterface;
-    profileId: string;
-    urlPrompt: string;
-}
-/**
- * Map of provider IDs to their OAuth configuration.
- */
-export declare const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig>;
-/**
- * Get supported OAuth provider IDs.
- */
+import { type OAuthProviderDefinition } from '../../auth/oauth/registry.js';
+export type OAuthProviderConfig = OAuthProviderDefinition;
+export declare const OAUTH_PROVIDERS: Readonly<Record<string, OAuthProviderDefinition>>;
 export declare function getSupportedOAuthProviders(): string[];
-/**
- * Check if a provider supports OAuth.
- */
 export declare function supportsOAuth(provider: string): boolean;
-/**
- * Get OAuth provider config by ID.
- */
 export declare function getOAuthProvider(provider: string): OAuthProviderConfig | undefined;

package/dist/src/cli/utils/oauth-providers.js

@@ -1,89 +1,15 @@
-import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
-import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
-import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
-import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";
-import { githubCopilotOAuthProvider } from "../../auth/oauth/github-copilot.js";
-import { geminiCliOAuthProvider } from "../../auth/oauth/google-oauth/google-gemini-cli.js";
-import { antigravityOAuthProvider } from "../../auth/oauth/google-oauth/google-antigravity.js";
-import { openaiCodexOAuthProvider } from "../../auth/oauth/openai-codex.js";
-import "../../auth/oauth/index.js";
+import { OAUTH_PROVIDER_DEFINITIONS, getOAuthProviderDefinition, init_registry } from "../../auth/oauth/registry.js";
 //#region src/cli/utils/oauth-providers.ts
-/**
-* OAuth Provider Configuration
-*
-* Centralized OAuth provider definitions for CLI commands.
-* Used by both auth.ts and onboard.ts to avoid duplication.
-*/
-/**
-* Map of provider IDs to their OAuth configuration.
-*/
-const OAUTH_PROVIDERS = {
-	anthropic: {
-		displayName: "Anthropic (Claude)",
-		provider: anthropicOAuthProvider,
-		profileId: "anthropic:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	minimax: {
-		displayName: "MiniMax (幂维智能)",
-		provider: minimaxOAuthProvider,
-		profileId: "minimax:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"minimax-cn": {
-		displayName: "MiniMax CN",
-		provider: minimaxCnOAuthProvider,
-		profileId: "minimax-cn:default",
-		urlPrompt: "🌐 请在浏览器中打开以下 URL:\n"
-	},
-	"kimi-coding": {
-		displayName: "Kimi For Coding (月之暗面)",
-		provider: kimiCodingOAuthProvider,
-		profileId: "kimi-coding:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"github-copilot": {
-		displayName: "GitHub Copilot",
-		provider: githubCopilotOAuthProvider,
-		profileId: "github-copilot:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"google-gemini-cli": {
-		displayName: "Google Gemini CLI",
-		provider: geminiCliOAuthProvider,
-		profileId: "google-gemini-cli:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"google-antigravity": {
-		displayName: "Google Antigravity",
-		provider: antigravityOAuthProvider,
-		profileId: "google-antigravity:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"openai-codex": {
-		displayName: "OpenAI Codex",
-		provider: openaiCodexOAuthProvider,
-		profileId: "openai-codex:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	}
-};
-/**
-* Get supported OAuth provider IDs.
-*/
+init_registry();
+const OAUTH_PROVIDERS = OAUTH_PROVIDER_DEFINITIONS;
 function getSupportedOAuthProviders() {
-	return Object.keys(OAUTH_PROVIDERS);
+	return Object.keys(OAUTH_PROVIDER_DEFINITIONS);
 }
-/**
-* Check if a provider supports OAuth.
-*/
 function supportsOAuth(provider) {
-	return provider in OAUTH_PROVIDERS;
+	return Boolean(getOAuthProviderDefinition(provider));
 }
-/**
-* Get OAuth provider config by ID.
-*/
 function getOAuthProvider(provider) {
-	return OAUTH_PROVIDERS[provider];
+	return getOAuthProviderDefinition(provider);
 }
 //#endregion
 export { OAUTH_PROVIDERS, getOAuthProvider, getSupportedOAuthProviders, supportsOAuth };

package/dist/src/config/models-json.js

@@ -27,6 +27,14 @@ function validateModelsConfig(config) {
 	}
 	const data = result.data;
 	for (const [providerName, providerConfig] of Object.entries(data.providers)) {
+		if (providerName === "xopc-cloud") {
+			errors.push({
+				path: "providers.xopc-cloud",
+				message: "xopc-cloud is managed by OAuth and the runtime model catalog; it cannot be configured in models.json",
+				severity: "error"
+			});
+			continue;
+		}
 		if (!PROVIDER_ID_REGEX.test(providerName)) errors.push({
 			path: `providers.${providerName}`,
 			message: "Provider ID must start/end with alphanumeric, contain only lowercase letters, numbers, hyphens, and underscores",

package/dist/src/gateway/heartbeat/service.js

@@ -1,9 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { shouldSilence, stripHeartbeatToken } from "../../heartbeat/tokens.js";
-import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { isWithinActiveHours } from "../../heartbeat/active-hours.js";
 import { isHeartbeatContentEmpty } from "../../heartbeat/content-check.js";
+import { appendCronEventLines } from "../../heartbeat/event-prompt.js";
 import { createHeartbeatWake } from "../../heartbeat/wake.js";
 import { resolveHeartbeatMdPath } from "../workspace-heartbeat-path.js";
 import { readFile } from "fs/promises";

package/dist/src/gateway/hono/oauth-async.js

@@ -1,17 +1,9 @@
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
+import { getOAuthProviderInterfaces, init_registry } from "../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { isLoopbackHost } from "../host.js";
 import { resolveReverseProxyPublicUrl } from "../public-url.js";
-import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
-import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
-import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
-import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";
-import { githubCopilotOAuthProvider } from "../../auth/oauth/github-copilot.js";
-import { geminiCliOAuthProvider } from "../../auth/oauth/google-oauth/google-gemini-cli.js";
-import { antigravityOAuthProvider } from "../../auth/oauth/google-oauth/google-antigravity.js";
-import { openaiCodexOAuthProvider } from "../../auth/oauth/openai-codex.js";
-import "../../auth/oauth/index.js";
 import { Hono } from "hono";
 //#region src/gateway/hono/oauth-async.ts
 /**
@@ -21,6 +13,7 @@ import { Hono } from "hono";
 * This allows OAuth flows that require user interaction (browser login) 
 * without blocking the HTTP request.
 */
+init_registry();
 init_credentials();
 init_logger();
 const log = createLogger("OAuthAsync");
@@ -32,16 +25,7 @@ function formatOAuthAsyncError(err) {
 	if (/^fetch failed$/i.test(base) || base.includes("fetch failed")) return `Network request failed${detail}. If the browser opened on another device, the redirect goes to that device's localhost — copy the full URL from the browser address bar after sign-in (starts with http://127.0.0.1 or http://localhost) and paste it below. Otherwise check VPN/proxy/DNS/firewall access to Google OAuth.`;
 	return base;
 }
-const OAUTH_PROVIDERS = {
-	"kimi-coding": kimiCodingOAuthProvider,
-	"minimax": minimaxOAuthProvider,
-	"minimax-cn": minimaxCnOAuthProvider,
-	"anthropic": anthropicOAuthProvider,
-	"github-copilot": githubCopilotOAuthProvider,
-	"google-gemini-cli": geminiCliOAuthProvider,
-	"google-antigravity": antigravityOAuthProvider,
-	"openai-codex": openaiCodexOAuthProvider
-};
+const OAUTH_PROVIDERS = getOAuthProviderInterfaces();
 const oauthSessions = /* @__PURE__ */ new Map();
 const SESSION_TTL_MS = 600 * 1e3;
 setInterval(() => {

package/dist/src/gateway/hono/oauth.js

@@ -1,14 +1,6 @@
+import { getOAuthProviderInterfaces, init_registry } from "../../auth/oauth/registry.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
 import { getProviderAuthState, init_providers, isProviderConfigured } from "../../providers/index.js";
-import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
-import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
-import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
-import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";
-import { githubCopilotOAuthProvider } from "../../auth/oauth/github-copilot.js";
-import { geminiCliOAuthProvider } from "../../auth/oauth/google-oauth/google-gemini-cli.js";
-import { antigravityOAuthProvider } from "../../auth/oauth/google-oauth/google-antigravity.js";
-import { openaiCodexOAuthProvider } from "../../auth/oauth/openai-codex.js";
-import "../../auth/oauth/index.js";
 import { Hono } from "hono";
 //#region src/gateway/hono/oauth.ts
 /**
@@ -16,18 +8,10 @@ import { Hono } from "hono";
 * 
 * Provides HTTP endpoints for OAuth login flow.
 */
+init_registry();
 init_credentials();
 init_providers();
-const OAUTH_PROVIDERS = {
-	"kimi-coding": kimiCodingOAuthProvider,
-	"minimax": minimaxOAuthProvider,
-	"minimax-cn": minimaxCnOAuthProvider,
-	"anthropic": anthropicOAuthProvider,
-	"github-copilot": githubCopilotOAuthProvider,
-	"google-gemini-cli": geminiCliOAuthProvider,
-	"google-antigravity": antigravityOAuthProvider,
-	"openai-codex": openaiCodexOAuthProvider
-};
+const OAUTH_PROVIDERS = getOAuthProviderInterfaces();
 const oauthCredentialsCache = /* @__PURE__ */ new Map();
 function getOAuthCredentialsFromCache(provider) {
 	return oauthCredentialsCache.get(provider);

package/dist/src/gateway/hono/routes/models.js

@@ -12,7 +12,6 @@ import { getDomesticProviderPreset, getDomesticProviderPresetIds } from "../../.
 import { getOnboardingFeaturedProviders, getProviderHint, getRecommendedModelsForProvider, isRecommendedModel, sortModelsForPicker, sortProvidersForPicker } from "../../../providers/presentation.js";
 import { getAgentImageGenerationConfig, getImageGenerationCatalog, prepareImageGenerationSetup, verifyImageGenerationCredential } from "../../image-generation-setup.js";
 import { discoverProviderModels, isProviderApiDiscoverable } from "../../../providers/model-discovery.js";
-import { XopcCloudHttpError } from "../../../providers/xopc-cloud-connection.js";
 import { respondStartupUnavailable } from "../lib/startup-unavailable.js";
 import { auditModelReferences } from "../../../providers/model-reference-auditor.js";
 //#region src/gateway/hono/routes/models.ts
@@ -63,61 +62,8 @@ function mapPluginModel(providerId, model, available) {
 	};
 }
 function registerModelsRoutes(authenticated, deps) {
-	const { service, strictRateLimitMiddleware, xopcCloudPollRateLimitMiddleware } = deps;
+	const { service, strictRateLimitMiddleware } = deps;
 	const catalogSync = service.getModelCatalogSync();
-	const xopcCloud = catalogSync.getXopcCloudConnection();
-	authenticated.post("/api/models/xopc-cloud/connect", strictRateLimitMiddleware, async (c) => {
-		const body = await c.req.json().catch(() => ({}));
-		const clientType = body.clientType === "electron" || body.clientType === "cli" ? body.clientType : "web";
-		try {
-			return c.json({
-				ok: true,
-				payload: await xopcCloud.start(clientType)
-			}, 201);
-		} catch (error) {
-			return c.json({
-				ok: false,
-				error: { message: error instanceof Error ? error.message : "Connection failed" }
-			}, 502);
-		}
-	});
-	authenticated.post("/api/models/xopc-cloud/connect/:requestId/poll", xopcCloudPollRateLimitMiddleware, async (c) => {
-		try {
-			const result = await xopcCloud.poll(c.req.param("requestId"));
-			if (result.status === "pending") return c.json({
-				ok: true,
-				payload: result
-			}, 202);
-			service.emit("model-catalog.updated", { modelCount: getModelRegistry().getAll().length });
-			return c.json({
-				ok: true,
-				payload: result
-			});
-		} catch (error) {
-			return c.json({
-				ok: false,
-				error: { message: error instanceof Error ? error.message : "Connection failed" }
-			}, 400);
-		}
-	});
-	authenticated.post("/api/models/xopc-cloud/refresh", strictRateLimitMiddleware, async (c) => {
-		try {
-			const result = await catalogSync.refreshNow();
-			return c.json({
-				ok: true,
-				payload: result
-			});
-		} catch (error) {
-			const status = error instanceof XopcCloudHttpError && error.status === 401 ? 401 : error instanceof XopcCloudHttpError && error.status === 403 ? 403 : 502;
-			return c.json({
-				ok: false,
-				error: {
-					message: error instanceof Error ? error.message : "Refresh failed",
-					...error instanceof XopcCloudHttpError && error.code ? { code: error.code } : {}
-				}
-			}, status);
-		}
-	});
 	authenticated.get("/api/models/catalog/status", (c) => c.json({
 		ok: true,
 		payload: catalogSync.getStatus()

package/dist/src/heartbeat/index.js

@@ -1,6 +1,6 @@
 import { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, shouldSilence, stripHeartbeatToken } from "./tokens.js";
-import { appendCronEventLines } from "./event-prompt.js";
 import { isWithinActiveHours } from "./active-hours.js";
 import { isHeartbeatContentEmpty } from "./content-check.js";
+import { appendCronEventLines } from "./event-prompt.js";
 import { createHeartbeatWake } from "./wake.js";
 export { DEFAULT_ACK_MAX_CHARS, HEARTBEAT_OK, NO_REPLY, appendCronEventLines, createHeartbeatWake, isHeartbeatContentEmpty, isWithinActiveHours, shouldSilence, stripHeartbeatToken };

package/dist/src/providers/domestic-presets.d.ts

@@ -34,26 +34,6 @@ export interface DomesticProviderPreset {
     requiresModelDiscovery?: boolean;
 }
 export declare const DOMESTIC_PROVIDER_PRESETS: readonly [{
-    readonly id: "xopc-cloud";
-    readonly displayName: "XOPC Model Service";
-    readonly description: "Official XOPC OpenAI-compatible model service. Available models are loaded from your account.";
-    readonly docsUrl: "https://console.xopc.ai/models";
-    readonly apiKeyUrl: "https://console.xopc.ai/models";
-    readonly envVars: ["XOPC_MODEL_API_KEY"];
-    readonly api: "openai-completions";
-    readonly baseUrlPresets: [{
-        readonly id: "official";
-        readonly label: "XOPC Official";
-        readonly baseUrl: "https://router.xopc.ai/v1";
-    }];
-    readonly defaultBaseUrlPreset: "official";
-    readonly defaultModel: "";
-    readonly models: [];
-    readonly aliases: ["xopc", "xopc cloud", "xopc models"];
-    readonly onboardingIcon: "☁️";
-    readonly requiresModelDiscovery: true;
-    readonly quirks: ["Connect through XOPC Console; credentials and available models are configured automatically."];
-}, {
     readonly id: "dashscope-cn";
     readonly displayName: "Alibaba Bailian / DashScope China";
     readonly description: "Alibaba Bailian Qwen models through the China DashScope OpenAI-compatible endpoint.";

package/dist/src/providers/domestic-presets.js

@@ -87,31 +87,6 @@ const MINIMAX_MODELS = [
 	}
 ];
 const DOMESTIC_PROVIDER_PRESETS = [
-	{
-		id: "xopc-cloud",
-		displayName: "XOPC Model Service",
-		description: "Official XOPC OpenAI-compatible model service. Available models are loaded from your account.",
-		docsUrl: "https://console.xopc.ai/models",
-		apiKeyUrl: "https://console.xopc.ai/models",
-		envVars: ["XOPC_MODEL_API_KEY"],
-		api: "openai-completions",
-		baseUrlPresets: [{
-			id: "official",
-			label: "XOPC Official",
-			baseUrl: "https://router.xopc.ai/v1"
-		}],
-		defaultBaseUrlPreset: "official",
-		defaultModel: "",
-		models: [],
-		aliases: [
-			"xopc",
-			"xopc cloud",
-			"xopc models"
-		],
-		onboardingIcon: "☁️",
-		requiresModelDiscovery: true,
-		quirks: ["Connect through XOPC Console; credentials and available models are configured automatically."]
-	},
 	{
 		id: "dashscope-cn",
 		displayName: "Alibaba Bailian / DashScope China",

package/dist/src/providers/index.js

@@ -1,5 +1,6 @@
 import { __esmMin, __exportAll } from "../../_virtual/_rolldown/runtime.js";
 import { getAgentDefaultModelRef, init_schema } from "../config/schema.js";
+import { getOAuthProviderIds, init_registry } from "../auth/oauth/registry.js";
 import { hasProviderAuthOnDiskSync, init_sync_provider_auth } from "../auth/sync-provider-auth.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "./env-keys.js";
 import { ModelRegistry, getModelRegistry, init_model_registry, prewarmModelRegistry, resetModelRegistry } from "./model-registry.js";
@@ -136,6 +137,7 @@ function getAllProviders() {
 	for (const p of getProviders()) providers.add(p);
 	for (const m of registry.getAll()) providers.add(m.provider);
 	for (const plugin of getProviderRegistry().listAll()) providers.add(plugin.id);
+	for (const provider of getOAuthProviderIds()) providers.add(provider);
 	return Array.from(providers);
 }
 async function getApiKey(provider, credentialOptions) {
@@ -310,12 +312,19 @@ var init_providers = __esmMin((() => {
 	init_model_registry();
 	init_credentials();
 	init_sync_provider_auth();
+	init_registry();
 	init_env_keys();
 	init_constants();
 	init_model_supplements();
 	init_plugin_registry();
 	OPENAI_CODEX_CANONICAL_BASE_URL = "https://chatgpt.com/backend-api/codex";
 	PROVIDER_META = {
+		"xopc-cloud": {
+			name: "XOPC Model Service",
+			category: "oauth",
+			supportsOAuth: true,
+			supportsApiKey: false
+		},
 		"openai": {
 			name: "OpenAI",
 			category: "common",