@xopcai/xopc 0.0.163 → 0.0.165

package/dist/src/auth/oauth/openai-codex.js

@@ -1,4 +1,5 @@
-import { generatePKCE } from "./pkce.js";
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { generatePKCE, init_pkce } from "./pkce.js";
 import { randomBytes } from "node:crypto";
 import http from "node:http";
 //#region src/auth/oauth/openai-codex.ts
@@ -7,15 +8,6 @@ import http from "node:http";
 *
 * Owns callback validation, manual prompt handling, and success/error pages.
 */
-const CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
-const AUTHORIZE_URL = "https://auth.openai.com/oauth/authorize";
-const TOKEN_URL = "https://auth.openai.com/oauth/token";
-const CALLBACK_PORT = 1455;
-const CALLBACK_PATH = "/auth/callback";
-const REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
-const SCOPE = "openid profile email offline_access";
-const MANUAL_PROMPT_DELAY_MS = 15e3;
-const TOKEN_REQUEST_TIMEOUT_MS = 3e4;
 function xopcOAuthHtml(params) {
 	const color = params.tone === "success" ? "#2563eb" : "#dc2626";
 	const escapedTitle = escapeHtml(params.title);
@@ -299,19 +291,33 @@ async function loginOpenAICodex(callbacks) {
 async function refreshOpenAICodexToken(refreshToken) {
 	return refreshAccessToken(refreshToken);
 }
-const openaiCodexOAuthProvider = {
-	id: "openai-codex",
-	name: "OpenAI Codex",
-	usesCallbackServer: true,
-	async login(callbacks) {
-		return loginOpenAICodex(callbacks);
-	},
-	async refreshToken(credentials) {
-		return refreshOpenAICodexToken(credentials.refresh);
-	},
-	getApiKey(credentials) {
-		return credentials.access;
-	}
-};
+var CLIENT_ID, AUTHORIZE_URL, TOKEN_URL, CALLBACK_PORT, CALLBACK_PATH, REDIRECT_URI, SCOPE, MANUAL_PROMPT_DELAY_MS, TOKEN_REQUEST_TIMEOUT_MS, openaiCodexOAuthProvider;
+var init_openai_codex = __esmMin((() => {
+	init_pkce();
+	CLIENT_ID = "app_EMoamEEZ73f0CkXaXp7hrann";
+	AUTHORIZE_URL = "https://auth.openai.com/oauth/authorize";
+	TOKEN_URL = "https://auth.openai.com/oauth/token";
+	CALLBACK_PORT = 1455;
+	CALLBACK_PATH = "/auth/callback";
+	REDIRECT_URI = `http://localhost:${CALLBACK_PORT}${CALLBACK_PATH}`;
+	SCOPE = "openid profile email offline_access";
+	MANUAL_PROMPT_DELAY_MS = 15e3;
+	TOKEN_REQUEST_TIMEOUT_MS = 3e4;
+	openaiCodexOAuthProvider = {
+		id: "openai-codex",
+		name: "OpenAI Codex",
+		usesCallbackServer: true,
+		async login(callbacks) {
+			return loginOpenAICodex(callbacks);
+		},
+		async refreshToken(credentials) {
+			return refreshOpenAICodexToken(credentials.refresh);
+		},
+		getApiKey(credentials) {
+			return credentials.access;
+		}
+	};
+}));
 //#endregion
-export { loginOpenAICodex, openaiCodexOAuthProvider, refreshOpenAICodexToken };
+init_openai_codex();
+export { init_openai_codex, loginOpenAICodex, openaiCodexOAuthProvider, refreshOpenAICodexToken };

package/dist/src/auth/oauth/pkce.js

@@ -1,3 +1,4 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
 //#region src/auth/oauth/pkce.ts
 /**
 * PKCE utilities using Web Crypto API.
@@ -19,5 +20,7 @@ async function generatePKCE() {
 		challenge: base64urlEncode(new Uint8Array(hashBuffer))
 	};
 }
+var init_pkce = __esmMin((() => {}));
 //#endregion
-export { generatePKCE };
+init_pkce();
+export { generatePKCE, init_pkce };

package/dist/src/auth/oauth/registry.d.ts

@@ -0,0 +1,13 @@
+import type { OAuthProviderInterface } from './types.js';
+export interface OAuthProviderDefinition {
+    displayName: string;
+    oauthOnly?: boolean;
+    provider: OAuthProviderInterface;
+    profileId: string;
+    urlPrompt: string;
+}
+export declare const OAUTH_PROVIDER_DEFINITIONS: Readonly<Record<string, OAuthProviderDefinition>>;
+export declare function getOAuthProviderDefinition(provider: string): OAuthProviderDefinition | undefined;
+export declare function getOAuthProviderInterfaces(): Record<string, OAuthProviderInterface>;
+export declare function getOAuthProviderIds(): string[];
+export declare function isOAuthOnlyProvider(provider: string): boolean;

package/dist/src/auth/oauth/registry.js

@@ -0,0 +1,65 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { anthropicOAuthProvider, init_anthropic } from "./anthropic.js";
+import { githubCopilotOAuthProvider, init_github_copilot } from "./github-copilot.js";
+import { antigravityOAuthProvider } from "./google-oauth/google-antigravity.js";
+import { init_google_antigravity } from "./google-antigravity.js";
+import { geminiCliOAuthProvider } from "./google-oauth/google-gemini-cli.js";
+import { init_google_gemini_cli } from "./google-gemini-cli.js";
+import { init_kimi_coding, kimiCodingOAuthProvider } from "./kimi-coding.js";
+import { init_minimax_cn, minimaxCnOAuthProvider } from "./minimax-cn.js";
+import { init_minimax, minimaxOAuthProvider } from "./minimax.js";
+import { init_openai_codex, openaiCodexOAuthProvider } from "./openai-codex.js";
+import { init_xopc_cloud, xopcCloudOAuthProvider } from "./xopc-cloud.js";
+//#region src/auth/oauth/registry.ts
+function definition(provider, displayName = provider.name) {
+	return {
+		displayName,
+		provider,
+		profileId: `${provider.id}:default`,
+		urlPrompt: "🌐 Please open this URL in your browser:\n"
+	};
+}
+function getOAuthProviderDefinition(provider) {
+	return OAUTH_PROVIDER_DEFINITIONS[provider];
+}
+function getOAuthProviderInterfaces() {
+	return Object.fromEntries(Object.entries(OAUTH_PROVIDER_DEFINITIONS).map(([id, value]) => [id, value.provider]));
+}
+function getOAuthProviderIds() {
+	return Object.keys(OAUTH_PROVIDER_DEFINITIONS);
+}
+function isOAuthOnlyProvider(provider) {
+	return OAUTH_PROVIDER_DEFINITIONS[provider]?.oauthOnly === true;
+}
+var OAUTH_PROVIDER_DEFINITIONS;
+var init_registry = __esmMin((() => {
+	init_anthropic();
+	init_github_copilot();
+	init_google_antigravity();
+	init_google_gemini_cli();
+	init_kimi_coding();
+	init_minimax_cn();
+	init_minimax();
+	init_openai_codex();
+	init_xopc_cloud();
+	OAUTH_PROVIDER_DEFINITIONS = {
+		"xopc-cloud": {
+			...definition(xopcCloudOAuthProvider),
+			oauthOnly: true
+		},
+		anthropic: definition(anthropicOAuthProvider, "Anthropic (Claude)"),
+		minimax: definition(minimaxOAuthProvider, "MiniMax (幂维智能)"),
+		"minimax-cn": {
+			...definition(minimaxCnOAuthProvider, "MiniMax CN"),
+			urlPrompt: "🌐 请在浏览器中打开以下 URL:\n"
+		},
+		"kimi-coding": definition(kimiCodingOAuthProvider, "Kimi For Coding (月之暗面)"),
+		"github-copilot": definition(githubCopilotOAuthProvider),
+		"google-gemini-cli": definition(geminiCliOAuthProvider),
+		"google-antigravity": definition(antigravityOAuthProvider),
+		"openai-codex": definition(openaiCodexOAuthProvider)
+	};
+}));
+//#endregion
+init_registry();
+export { OAUTH_PROVIDER_DEFINITIONS, getOAuthProviderDefinition, getOAuthProviderIds, getOAuthProviderInterfaces, init_registry, isOAuthOnlyProvider };

package/dist/src/auth/oauth/xopc-cloud.d.ts

@@ -0,0 +1,2 @@
+import type { OAuthProviderInterface } from './types.js';
+export declare const xopcCloudOAuthProvider: OAuthProviderInterface;

package/dist/src/auth/oauth/xopc-cloud.js

@@ -0,0 +1,101 @@
+import { __esmMin } from "../../../_virtual/_rolldown/runtime.js";
+import { hostname } from "node:os";
+import { setTimeout } from "node:timers/promises";
+//#region src/auth/oauth/xopc-cloud.ts
+function consoleUrl() {
+	return (process.env.XOPC_CONSOLE_URL ?? DEFAULT_CONSOLE_URL).replace(/\/+$/, "");
+}
+async function readJson(response) {
+	const body = await response.json().catch(() => null);
+	return body && typeof body === "object" ? body : {};
+}
+function credentials(body) {
+	if (typeof body.access_token !== "string" || body.access_token.length === 0 || typeof body.refresh_token !== "string" || body.refresh_token.length === 0 || typeof body.expires_in !== "number" || !Number.isFinite(body.expires_in) || body.expires_in <= 0) throw new Error("XOPC OAuth token response is incomplete");
+	return {
+		access: body.access_token,
+		refresh: body.refresh_token,
+		expires: Date.now() + body.expires_in * 1e3,
+		scope: typeof body.scope === "string" ? body.scope.split(" ").filter(Boolean) : []
+	};
+}
+async function tokenRequest(body, signal) {
+	return fetch(`${consoleUrl()}/oauth/token`, {
+		method: "POST",
+		headers: {
+			"content-type": "application/x-www-form-urlencoded",
+			accept: "application/json"
+		},
+		body,
+		signal: signal ?? AbortSignal.timeout(3e4)
+	});
+}
+async function login(callbacks) {
+	const response = await fetch(`${consoleUrl()}/oauth/device_authorization`, {
+		method: "POST",
+		headers: {
+			"content-type": "application/x-www-form-urlencoded",
+			accept: "application/json"
+		},
+		body: new URLSearchParams({
+			client_id: CLIENT_ID,
+			scope: DEFAULT_SCOPE,
+			device_name: hostname() || "XOPC client",
+			client_type: "cli"
+		}),
+		signal: callbacks.signal ?? AbortSignal.timeout(3e4)
+	});
+	const body = await readJson(response);
+	if (!response.ok) throw new Error(body.error_description ?? body.error ?? "XOPC OAuth authorization failed");
+	const deviceCode = typeof body.device_code === "string" ? body.device_code : "";
+	const userCode = typeof body.user_code === "string" ? body.user_code : "";
+	const verificationUri = typeof body.verification_uri_complete === "string" ? body.verification_uri_complete : typeof body.verification_uri === "string" ? body.verification_uri : "";
+	if (!deviceCode || !userCode || !verificationUri) throw new Error("XOPC OAuth response is incomplete");
+	const intervalMs = Math.max(1, Number(body.interval) || 5) * 1e3;
+	const expiresAt = Date.now() + Math.max(1, Number(body.expires_in) || 600) * 1e3;
+	callbacks.onDeviceCode({
+		userCode,
+		verificationUri,
+		intervalSeconds: intervalMs / 1e3,
+		expiresInSeconds: Math.floor((expiresAt - Date.now()) / 1e3)
+	});
+	while (Date.now() < expiresAt) {
+		if (callbacks.signal?.aborted) throw callbacks.signal.reason ?? /* @__PURE__ */ new Error("OAuth login cancelled");
+		await setTimeout(intervalMs, void 0, callbacks.signal ? { signal: callbacks.signal } : void 0);
+		const token = await tokenRequest(new URLSearchParams({
+			grant_type: "urn:ietf:params:oauth:grant-type:device_code",
+			client_id: CLIENT_ID,
+			device_code: deviceCode
+		}), callbacks.signal);
+		const tokenBody = await readJson(token);
+		if (token.ok) return credentials(tokenBody);
+		if (tokenBody.error === "authorization_pending" || tokenBody.error === "slow_down") continue;
+		throw new Error(tokenBody.error_description ?? tokenBody.error ?? "XOPC OAuth token exchange failed");
+	}
+	throw new Error("XOPC OAuth authorization expired");
+}
+async function refreshToken(current) {
+	const response = await tokenRequest(new URLSearchParams({
+		grant_type: "refresh_token",
+		client_id: CLIENT_ID,
+		refresh_token: current.refresh
+	}));
+	const body = await readJson(response);
+	if (!response.ok) throw new Error(body.error_description ?? body.error ?? "XOPC OAuth refresh failed");
+	return credentials(body);
+}
+var CLIENT_ID, DEFAULT_CONSOLE_URL, DEFAULT_SCOPE, xopcCloudOAuthProvider;
+var init_xopc_cloud = __esmMin((() => {
+	CLIENT_ID = "xopc-native";
+	DEFAULT_CONSOLE_URL = "https://console.xopc.ai";
+	DEFAULT_SCOPE = "models:read models:invoke account:usage offline_access";
+	xopcCloudOAuthProvider = {
+		id: "xopc-cloud",
+		name: "XOPC Model Service",
+		login,
+		refreshToken,
+		getApiKey: (value) => value.access
+	};
+}));
+//#endregion
+init_xopc_cloud();
+export { init_xopc_cloud, xopcCloudOAuthProvider };

package/dist/src/auth/profiles/store.js

@@ -1,5 +1,5 @@
-import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveCredentialsDir } from "../../config/paths.js";
 import path from "node:path";
 import { chmodSync, existsSync, mkdirSync, readFileSync } from "node:fs";
 //#region src/auth/profiles/store.ts

package/dist/src/auth/sync-provider-auth.js

@@ -1,7 +1,8 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { init_paths, resolveAgentAuthProfilesPath, resolveAuthProfilesPath, resolveOAuthPath } from "../config/paths.js";
+import { init_registry, isOAuthOnlyProvider } from "./oauth/registry.js";
 import { init_loader, loadConfig } from "../config/loader.js";
+import { getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 import { existsSync, readFileSync } from "node:fs";
 //#region src/auth/sync-provider-auth.ts
 /**
@@ -81,6 +82,7 @@ function readOAuthAccessTokenSync(provider) {
 */
 function resolveProviderApiKeySync(provider) {
 	const normalized = provider.toLowerCase();
+	if (isOAuthOnlyProvider(normalized)) return readOAuthAccessTokenSync(normalized);
 	const cfg = loadConfig();
 	const fromAgent = readApiKeyFromProfilesFile(resolveAgentAuthProfilesPath(cfg, getDefaultAgentId(cfg)), normalized);
 	if (fromAgent) return fromAgent;
@@ -91,6 +93,7 @@ function resolveProviderApiKeySync(provider) {
 /** Resolve one agent's private credential, then the shared credential and OAuth token. */
 function resolveProviderApiKeyForAgentSync(provider, agentId, config) {
 	const normalized = provider.toLowerCase();
+	if (isOAuthOnlyProvider(normalized)) return readOAuthAccessTokenSync(normalized);
 	if (agentId?.trim()) {
 		const fromAgent = readApiKeyFromProfilesFile(resolveAgentAuthProfilesPath(config ?? loadConfig(), agentId.trim()), normalized);
 		if (fromAgent) return fromAgent;
@@ -104,6 +107,7 @@ function resolveProviderApiKeyForAgentSync(provider, agentId, config) {
 * matching async CredentialResolver resolution (excluding env — callers check env separately).
 */
 function hasProviderAuthOnDiskSync(provider) {
+	if (isOAuthOnlyProvider(provider.toLowerCase())) return hasOAuthTokenSync(provider);
 	const cfg = loadConfig();
 	if (hasApiKeyInProfilesFile(resolveAgentAuthProfilesPath(cfg, getDefaultAgentId(cfg)), provider)) return true;
 	if (hasApiKeyInProfilesFile(resolveAuthProfilesPath(), provider)) return true;
@@ -114,6 +118,7 @@ var init_sync_provider_auth = __esmMin((() => {
 	init_paths();
 	init_loader();
 	init_resolve_route();
+	init_registry();
 }));
 //#endregion
 init_sync_provider_auth();

package/dist/src/browser/providers/browser-ext-install.js

@@ -2,8 +2,8 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { createLogger } from "../../utils/logger/index.js";
 import { init_logger } from "../../utils/logger.js";
 import { assertCacheDir, init_cache_dir_policy } from "../cache-dir-policy.js";
-import { init_paths, resolveBinDir } from "../../config/paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../../infra/write-file-atomic.js";
+import { init_paths, resolveBinDir } from "../../config/paths.js";
 import { resolvePackageRoot } from "../../infra/update-check.js";
 import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, readdirSync, renameSync, rmSync, statSync, writeFileSync } from "node:fs";

package/dist/src/cli/commands/channels.js

@@ -1,8 +1,8 @@
 import { buildChannelCatalogForConfig, init_channel_catalog_service } from "../../channels/catalog/channel-catalog-service.js";
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
+import { formatExamples, register } from "../registry.js";
 import { listChannelPairingState } from "../../channels/pairing/pairing-service.js";
 import { approveChannelPairingFromCli } from "../../channels/pairing/approve-cli.js";
-import { formatExamples, register } from "../registry.js";
 import { colors } from "../utils/colors.js";
 import { Command } from "commander";
 //#region src/cli/commands/channels.ts

package/dist/src/cli/commands/connectors.js

@@ -1,8 +1,8 @@
 import { init_loader, loadConfig, saveConfig } from "../../config/loader.js";
-import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { register } from "../registry.js";
-import { confirm } from "@inquirer/prompts";
+import { getStoreConnectorInstallPlan, installStoreConnector, listStoreConnectors } from "../../capabilities/store-connector.js";
 import { Command } from "commander";
+import { confirm } from "@inquirer/prompts";
 //#region src/cli/commands/connectors.ts
 init_loader();
 function parsePairs(values, option) {

package/dist/src/cli/commands/doctor/checks/provider-auth.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema, parseModelRef } from "../../../../config/schema.js";
-import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { PROVIDER_ENV_MAP, getApiKeyFromEnv, init_env_keys } from "../../../../providers/env-keys.js";
+import { init_loader, loadConfig } from "../../../../config/loader.js";
 import { existsSync } from "node:fs";
 //#region src/cli/commands/doctor/checks/provider-auth.ts
 init_loader();

package/dist/src/cli/commands/extension-marketplace.js

@@ -1,7 +1,7 @@
 import { init_paths, resolveExtensionsDir } from "../../config/paths.js";
 import { init_loader, loadConfig } from "../../config/loader.js";
-import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getContextWithOpts } from "../context.js";
+import { downloadExtensionStoreZipBuffer, resolveExtensionZipDownloadUrl, resolveExtensionsStoreBaseUrl, verifyStoreArtifactSha256 } from "../../agent/skills/marketplace/adapters/store/store-api-client.js";
 import { getExtensionLockfileManager } from "../../extensions/lockfile.js";
 import { installFromLocal, installFromNpm, peekExtensionManifestFromStoreZip } from "../../extensions/install.js";
 import { commitStagedExtensionInstall, finalizeStagedExtensionInstall, rollbackStagedExtensionInstall, stageExtensionStoreZip } from "../../extensions/install-transaction.js";
@@ -12,8 +12,8 @@ import { join, resolve } from "node:path";
 import { existsSync, readFileSync, rmSync, statSync } from "node:fs";
 import { execSync } from "node:child_process";
 import { createHash } from "node:crypto";
-import { confirm } from "@inquirer/prompts";
 import { Command } from "commander";
+import { confirm } from "@inquirer/prompts";
 import semver from "semver";
 //#region src/cli/commands/extension-marketplace.ts
 init_loader();

package/dist/src/cli/commands/gateway/lifecycle.js

@@ -3,8 +3,8 @@ import { loadConfig } from "../../../config/loader.js";
 import "../../../config/index.js";
 import { isRestartEnabled } from "../../../config/commands.flags.js";
 import { resolveGatewayService } from "../../../daemon/service.js";
-import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { findVerifiedGatewayListenerPidsOnPortSync, formatGatewayPidList, signalVerifiedGatewayPidSync } from "../../../infra/gateway-processes.js";
+import { authorizeGatewaySigusr1Restart, writeGatewayRestartIntentSync } from "../../../infra/restart.js";
 import { runServiceRestart, runServiceStop } from "./lifecycle-core.js";
 import { DEFAULT_RESTART_HEALTH_ATTEMPTS, renderGatewayPortHealthDiagnostics, waitForGatewayHealthyListener } from "./restart-health.js";
 import { parsePortFromArgs, renderGatewayServiceStartHints, resolveGatewayPortFromConfig } from "./shared.js";

package/dist/src/cli/commands/models.js

@@ -1,6 +1,6 @@
 import { getAgentDefaultModelRef, init_schema } from "../../config/schema.js";
-import { loadConfig, saveConfig } from "../../config/loader.js";
 import { CredentialResolver, init_credentials } from "../../auth/credentials.js";
+import { loadConfig, saveConfig } from "../../config/loader.js";
 import { getAllModels, getAvailableModels, getConfiguredProviders, getProviderAuthState, getProviderDisplayName, init_providers, isProviderConfigured, providerSupportsApiKey, providerSupportsOAuth, resolveModel } from "../../providers/index.js";
 import { formatExamples, register } from "../registry.js";
 import { getContextWithOpts } from "../context.js";
@@ -8,8 +8,8 @@ import "../../config/index.js";
 import { prepareUpdateGlobalDefaults } from "../../gateway/global-defaults-admin.js";
 import { colors } from "../utils/colors.js";
 import { runCliOAuthLogin } from "../utils/oauth-login.js";
-import { input } from "@inquirer/prompts";
 import { Command } from "commander";
+import { input } from "@inquirer/prompts";
 //#region src/cli/commands/models.ts
 init_credentials();
 init_schema();

package/dist/src/cli/commands/onboard.js

@@ -8,8 +8,8 @@ import { initWorkspace } from "../utils/init-workspace.js";
 import { setupModel } from "./onboard/model.js";
 import { getChannelConfigurators } from "./onboard/channels/registry.js";
 import { setupChannels } from "./onboard/channels/index.js";
-import { select } from "@inquirer/prompts";
 import { Command } from "commander";
+import { select } from "@inquirer/prompts";
 //#region src/cli/commands/onboard.ts
 init_schema();
 function isInteractive() {

package/dist/src/cli/commands/update.js

@@ -2,9 +2,9 @@ import { PACKAGE_VERSION, init_package_version } from "../../package-version.js"
 import { loadConfig } from "../../config/loader.js";
 import { formatExamples, register } from "../registry.js";
 import "../../config/index.js";
-import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { normalizeUpdateChannel } from "../../infra/update-channels.js";
 import { compareSemver, resolveNpmChannelTag } from "../../infra/update-check.js";
+import { acquireUpdateLock } from "../../infra/update-lock.js";
 import { formatUpdateApiResult, resolveUpdateInstallSurface, runGatewayUpdateWithPostSteps } from "../../infra/update-runner.js";
 import { Command } from "commander";
 //#region src/cli/commands/update.ts

package/dist/src/cli/utils/oauth-providers.d.ts

@@ -1,29 +1,6 @@
-/**
- * OAuth Provider Configuration
- *
- * Centralized OAuth provider definitions for CLI commands.
- * Used by both auth.ts and onboard.ts to avoid duplication.
- */
-import type { OAuthProviderInterface } from '../../auth/oauth/types.js';
-export interface OAuthProviderConfig {
-    displayName: string;
-    provider: OAuthProviderInterface;
-    profileId: string;
-    urlPrompt: string;
-}
-/**
- * Map of provider IDs to their OAuth configuration.
- */
-export declare const OAUTH_PROVIDERS: Record<string, OAuthProviderConfig>;
-/**
- * Get supported OAuth provider IDs.
- */
+import { type OAuthProviderDefinition } from '../../auth/oauth/registry.js';
+export type OAuthProviderConfig = OAuthProviderDefinition;
+export declare const OAUTH_PROVIDERS: Readonly<Record<string, OAuthProviderDefinition>>;
 export declare function getSupportedOAuthProviders(): string[];
-/**
- * Check if a provider supports OAuth.
- */
 export declare function supportsOAuth(provider: string): boolean;
-/**
- * Get OAuth provider config by ID.
- */
 export declare function getOAuthProvider(provider: string): OAuthProviderConfig | undefined;

package/dist/src/cli/utils/oauth-providers.js

@@ -1,89 +1,15 @@
-import { anthropicOAuthProvider } from "../../auth/oauth/anthropic.js";
-import { minimaxOAuthProvider } from "../../auth/oauth/minimax.js";
-import { minimaxCnOAuthProvider } from "../../auth/oauth/minimax-cn.js";
-import { kimiCodingOAuthProvider } from "../../auth/oauth/kimi-coding.js";
-import { githubCopilotOAuthProvider } from "../../auth/oauth/github-copilot.js";
-import { geminiCliOAuthProvider } from "../../auth/oauth/google-oauth/google-gemini-cli.js";
-import { antigravityOAuthProvider } from "../../auth/oauth/google-oauth/google-antigravity.js";
-import { openaiCodexOAuthProvider } from "../../auth/oauth/openai-codex.js";
-import "../../auth/oauth/index.js";
+import { OAUTH_PROVIDER_DEFINITIONS, getOAuthProviderDefinition, init_registry } from "../../auth/oauth/registry.js";
 //#region src/cli/utils/oauth-providers.ts
-/**
-* OAuth Provider Configuration
-*
-* Centralized OAuth provider definitions for CLI commands.
-* Used by both auth.ts and onboard.ts to avoid duplication.
-*/
-/**
-* Map of provider IDs to their OAuth configuration.
-*/
-const OAUTH_PROVIDERS = {
-	anthropic: {
-		displayName: "Anthropic (Claude)",
-		provider: anthropicOAuthProvider,
-		profileId: "anthropic:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	minimax: {
-		displayName: "MiniMax (幂维智能)",
-		provider: minimaxOAuthProvider,
-		profileId: "minimax:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"minimax-cn": {
-		displayName: "MiniMax CN",
-		provider: minimaxCnOAuthProvider,
-		profileId: "minimax-cn:default",
-		urlPrompt: "🌐 请在浏览器中打开以下 URL:\n"
-	},
-	"kimi-coding": {
-		displayName: "Kimi For Coding (月之暗面)",
-		provider: kimiCodingOAuthProvider,
-		profileId: "kimi-coding:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"github-copilot": {
-		displayName: "GitHub Copilot",
-		provider: githubCopilotOAuthProvider,
-		profileId: "github-copilot:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"google-gemini-cli": {
-		displayName: "Google Gemini CLI",
-		provider: geminiCliOAuthProvider,
-		profileId: "google-gemini-cli:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"google-antigravity": {
-		displayName: "Google Antigravity",
-		provider: antigravityOAuthProvider,
-		profileId: "google-antigravity:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	},
-	"openai-codex": {
-		displayName: "OpenAI Codex",
-		provider: openaiCodexOAuthProvider,
-		profileId: "openai-codex:default",
-		urlPrompt: "🌐 Please open this URL in your browser:\n"
-	}
-};
-/**
-* Get supported OAuth provider IDs.
-*/
+init_registry();
+const OAUTH_PROVIDERS = OAUTH_PROVIDER_DEFINITIONS;
 function getSupportedOAuthProviders() {
-	return Object.keys(OAUTH_PROVIDERS);
+	return Object.keys(OAUTH_PROVIDER_DEFINITIONS);
 }
-/**
-* Check if a provider supports OAuth.
-*/
 function supportsOAuth(provider) {
-	return provider in OAUTH_PROVIDERS;
+	return Boolean(getOAuthProviderDefinition(provider));
 }
-/**
-* Get OAuth provider config by ID.
-*/
 function getOAuthProvider(provider) {
-	return OAUTH_PROVIDERS[provider];
+	return getOAuthProviderDefinition(provider);
 }
 //#endregion
 export { OAUTH_PROVIDERS, getOAuthProvider, getSupportedOAuthProviders, supportsOAuth };

package/dist/src/config/agent-profile.js

@@ -1,6 +1,6 @@
-import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { resolveEffectiveAgentManifest } from "../agent-manifest/resolver.js";
 import "../agent-manifest/index.js";
+import { init_agent_scope, normalizeAgentId, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
 import { init_session_key, parseSessionKey } from "../routing/session-key.js";
 import { agentExists, getDefaultAgentId, init_resolve_route } from "../routing/resolve-route.js";
 //#region src/config/agent-profile.ts

package/dist/src/config/index.js

@@ -2,15 +2,15 @@ import { ENV_VARS, XOPC_DB_FILENAME, resolveHomeDir, resolveStateDir, resolveXop
 import { TelegramAccountConfigSchema, TelegramConfigSchema, TelegramGroupConfigSchema, TelegramTopicConfigSchema } from "../../extensions/telegram/src/config-schema.js";
 import { WeixinAccountConfigSchema, WeixinConfigSchema } from "../../extensions/weixin/src/config-schema.js";
 import { AgentImageGenerationModelSchema, AgentModelRefSchema, AgentModelsSchema, AgentTypedModelRoleSchema, AgentsConfigSchema, BindingMatchSchema, BindingRuleSchema, BindingsConfigSchema, BrowserConfigSchema, ChannelsConfigSchema, CodeIntelligenceConfigSchema, CommandsConfigSchema, ConfigSchema, ConnectorsConfigSchema, ExperimentalConfigSchema, ExtensionSecurityConfigSchema, ExtensionSlotsConfigSchema, ExtensionsConfigSchema, GatewayAuthRateLimitSchema, GatewayAuthSchema, GatewayBindModeSchema, GatewayChannelConnectDeferModeSchema, GatewayConfigSchema, GatewayModeSchema, GatewayRemoteSchema, GatewaySecuritySchema, GatewayTailscaleConsentSchema, GatewayTailscaleSchema, GatewayTlsSchema, GatewayTrustedProxySchema, GoalNotificationEventSchema, GoalNotificationTargetSchema, GoalNotificationsConfigSchema, GoalsConfigSchema, HeartbeatConfigSchema, McpConfigSchema, McpServerSchema, MediaUnderstandingCapabilitiesSchema, MediaUnderstandingModelSchema, MessagesConfigSchema, ModelCatalogConfigSchema, ModelsDevConfigSchema, ProviderAuthConfigSchema, ProviderAzureConfigSchema, ProviderRequestOverridesSchema, ProvidersConfigSchema, STTConfigSchema, STTFallbackConfigSchema, STTProviderConfigSchema, SearchProviderEntrySchema, SessionConfigSchema, SessionDmScopeSchema, SessionResetByTypeSchema, SessionResetConfigSchema, SessionResetModeSchema, SessionScopeSchema, SessionStorageConfigSchema, TTSConfigSchema, TTSEdgeConfigSchema, TTSFallbackConfigSchema, TTSModelOverridesConfigSchema, TTSProviderConfigSchema, TTSSummarizationConfigSchema, ToolsConfigSchema, ToolsMediaAudioConfigSchema, ToolsMediaConfigSchema, TuiConfigSchema, TunnelConfigSchema, TunnelConsentSchema, UpdateAutoConfigSchema, UpdateConfigSchema, VoiceConfigSchema, VoiceRefinementConfigSchema, WebSearchConfigSchema, WebToolsConfigSchema, WebsiteBlocklistSchema, WorkspaceConfigSchema, WorkspaceImportConfigSchema, getAgentDefaultImageGenerationModelConfig, getAgentDefaultImageModelConfig, getAgentDefaultModelRef, init_schema, parseModelRef } from "./schema.js";
-import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { expandWorkspacePathString, init_workspace_path, normalizeWorkspaceDir, resolveWorkspaceRoot } from "./workspace-path.js";
 import { resolveDefaultAgentWorkspaceDir } from "./workspace-defaults.js";
 import { resolveAgentDir as resolveAgentDir$1, resolveAgentHomeDir as resolveAgentHomeDir$1, resolveAgentWorkspaceDir } from "../agent/agent-scope.js";
-import { extractProfileAgentId, resolveEffectiveAgentManifestForAgent, resolveEffectiveAgentManifestForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { FILENAMES, USER_MEMORY_FILENAME, USER_PROFILE_FILENAME, WORKSPACE_FILES, existsSync, hasBundledExtensionManifest, init_paths, resolveAgentAuthProfilesPath, resolveAgentDir, resolveAgentHomeDir, resolveAgentProfileDir, resolveAgentProfileMarkdownPath, resolveAuthProfilesPath, resolveBinDir, resolveBundledExtensionsDir, resolveBundledSkillsDir, resolveConfigPath, resolveCredentialsDir, resolveExtensionSdkPath, resolveExtensionsDir, resolveExtensionsLockPath, resolveInboxDir, resolveInboxMessagePath, resolveInboxPendingDir, resolveInboxProcessedDir, resolveLogPath, resolveLogsDir, resolveModelsJsonPath, resolveNodeBinDir, resolveNodeBinPath, resolveNodeToolsDir, resolveNpmBinPath, resolveOAuthPath, resolvePidPath, resolveSkillPath, resolveSkillsCachePath, resolveSkillsDir, resolveSkillsLockPath, resolveSocketPath, resolveStatusPath, resolveToolsDir, resolveUserDir, resolveUserMemoryPath, resolveUserProfilePath, resolveWorkspaceExtensionsDir, resolveWorkspaceFile, resolveWorkspaceStateDir, resolveWorkspaceStatePath, resolveXopcBinPath } from "./paths.js";
-import { init_loader, loadConfig, saveConfig } from "./loader.js";
-import { clearConfigValueCache, getAllowedCommands, getCacheStats, init_resolve_config_value, resolveConfigValue, resolveHeaders, testApiKeyResolution } from "./resolve-config-value.js";
 import { CustomModelSchema, ModelOverrideSchema, ModelsJsonSchema, OpenAICompatSchema, OpenAICompletionsCompatSchema, OpenAIResponsesCompatSchema, OpenRouterRoutingSchema, ProviderConfigSchema, VercelGatewayRoutingSchema, getDefaultModelValues, init_models_json, loadModelsJson, modelsJsonExists, saveModelsJson, validateModelsConfig } from "./models-json.js";
+import { init_loader, loadConfig, saveConfig } from "./loader.js";
+import { applyConfigOverrides, getConfigOverrides, resetConfigOverrides, setConfigOverride, unsetConfigOverride } from "./runtime-overrides.js";
+import { extractProfileAgentId, resolveEffectiveAgentManifestForAgent, resolveEffectiveAgentManifestForSession, resolveEffectiveAgentProfile, resolveEffectiveAgentProfileForSession } from "./agent-profile.js";
 import { canonicalizeConfiguredMcpServer, isKnownCliMcpTypeAlias, normalizeConfiguredMcpServers, resolveXopcMcpTransportAlias } from "./mcp-config-normalize.js";
 import { formatThinkingLevels, listThinkingLevels, normalizeElevatedMode, normalizeReasoningLevel, normalizeThinkLevel, normalizeVerboseLevel, thinkLevelToNumber } from "../agent/transcript/thinking-types.js";
 import { getWorkspacePath } from "./workspace-path-helpers.js";

package/dist/src/config/loader.js

@@ -2,8 +2,8 @@ import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
 import { createLogger } from "../utils/logger/index.js";
 import { init_logger } from "../utils/logger.js";
 import { ConfigSchema, init_schema } from "./schema.js";
-import { init_paths, resolveConfigPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomic } from "../infra/write-file-atomic.js";
+import { init_paths, resolveConfigPath } from "./paths.js";
 import { assertChannelPluginConfigs, init_validate_channel_configs } from "./validate-channel-configs.js";
 import { dirname } from "path";
 import { existsSync, mkdirSync, promises, readFileSync } from "fs";

package/dist/src/config/models-json.js

@@ -1,6 +1,6 @@
 import { __esmMin } from "../../_virtual/_rolldown/runtime.js";
-import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { init_write_file_atomic, writeTextAtomicSync } from "../infra/write-file-atomic.js";
+import { init_paths, resolveModelsJsonPath } from "./paths.js";
 import { existsSync, readFileSync } from "fs";
 import { z } from "zod";
 //#region src/config/models-json.ts
@@ -27,6 +27,14 @@ function validateModelsConfig(config) {
 	}
 	const data = result.data;
 	for (const [providerName, providerConfig] of Object.entries(data.providers)) {
+		if (providerName === "xopc-cloud") {
+			errors.push({
+				path: "providers.xopc-cloud",
+				message: "xopc-cloud is managed by OAuth and the runtime model catalog; it cannot be configured in models.json",
+				severity: "error"
+			});
+			continue;
+		}
 		if (!PROVIDER_ID_REGEX.test(providerName)) errors.push({
 			path: `providers.${providerName}`,
 			message: "Provider ID must start/end with alphanumeric, contain only lowercase letters, numbers, hyphens, and underscores",