@yalehwang/cloudpit 2.0.0 → 3.0.0

package/dist-server/server/modules/settings/codex-model-providers.schema.js

@@ -0,0 +1,349 @@
+/**
+ * The schema of the project-owned Codex provider registry: one provider entry as the settings
+ * file states it, its field aliases, and the two readings of it — a tolerant one for a file an
+ * operator may have hand-edited, and a strict one for a write that must be refused rather than
+ * silently repaired.
+ *
+ * WHAT IS REFUSED, AND WHY. Codex 0.166 refuses to load a provider that asks for Chat
+ * Completions (`wire_api = "chat"`), and the ids `openai`/`ollama`/`lmstudio` are its built-ins:
+ * writing one would shadow a provider this project does not own, so both are write-time errors.
+ * An empty `baseUrl` is not a provider at all. A field this schema does not know (for example
+ * Codex's own `api`) is not a reason to drop the whole provider — it is reported as a warning so
+ * the operator sees that the field had no effect.
+ *
+ * TWO SPELLINGS. The project file uses camelCase, but Codex's own config spells the same fields
+ * `base_url` / `env_key` / `token_file` / `wire_api`. Both are accepted, and naming both with
+ * different values is refused, so a hand-copied Codex block cannot silently mean something
+ * different from what it says.
+ *
+ * Consumers: `codex-model-providers.settings.ts` (read, resolve, write) and its criterion.
+ */
+import { AppError, isRecord } from '../../shared/utils.js';
+/** Ids Codex reserves for its built-in providers; a project file may not replace them. */
+export const RESERVED_CODEX_PROVIDER_IDS = ['openai', 'ollama', 'lmstudio'];
+/** The one wire dialect this project accepts; Chat Completions is a Codex 0.166 load error. */
+export const CODEX_PROVIDER_WIRE_API = 'responses';
+const PROVIDER_ID_PATTERN = /^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$/;
+const ENV_KEY_PATTERN = /^[A-Za-z_][A-Za-z0-9_]*$/;
+// A plain array (not a module-scope Set) keeps this file free of the architecture ratchet's
+// module-level mutable-state reading; the list is immutable configuration.
+const KNOWN_FIELDS = [
+    'id',
+    'name',
+    'baseUrl',
+    'base_url',
+    'envKey',
+    'env_key',
+    'tokenFile',
+    'token_file',
+    'wireApi',
+    'wire_api',
+    'token',
+    // Advanced connection settings; Codex's snake_case spelling is the canonical
+    // one on the wire, the camelCase one is the project file's spelling.
+    'httpHeaders',
+    'http_headers',
+    'envHttpHeaders',
+    'env_http_headers',
+    'queryParams',
+    'query_params',
+    'requestMaxRetries',
+    'request_max_retries',
+    'streamMaxRetries',
+    'stream_max_retries',
+    'streamIdleTimeoutMs',
+    'stream_idle_timeout_ms',
+    'modelCatalogUrl',
+    'model_catalog_url',
+    'modelContextWindow',
+    'model_context_window',
+    'modelAutoCompactTokenLimit',
+    'model_auto_compact_token_limit',
+];
+/** Reads a field that may be spelled camelCase or snake_case, refusing a disagreeing pair. */
+function readAlias(record, camel, snake) {
+    const camelValue = record[camel];
+    const snakeValue = record[snake];
+    if (camelValue !== undefined && snakeValue !== undefined && camelValue !== snakeValue) {
+        throw new AppError(`provider fields \`${camel}\` and \`${snake}\` disagree`, {
+            code: 'CODEX_PROVIDER_ALIAS_CONFLICT',
+            statusCode: 400,
+        });
+    }
+    return camelValue !== undefined ? camelValue : snakeValue;
+}
+function readStringField(value, fieldName) {
+    if (value === undefined)
+        return null;
+    if (typeof value !== 'string') {
+        throw new AppError(`${fieldName} must be a string`, {
+            code: 'CODEX_PROVIDER_INVALID_FIELD',
+            statusCode: 400,
+        });
+    }
+    return value.trim();
+}
+/** A default env var name so a provider never launches without a place to put its secret. */
+function defaultEnvKey(providerId) {
+    return `CODEX_${providerId.replace(/[^A-Za-z0-9]/g, '_').toUpperCase()}_API_KEY`;
+}
+/** Reads an alias pair whose values may be objects: a disagreement is still refused. */
+function readAliasDeep(record, camel, snake) {
+    const camelValue = record[camel];
+    const snakeValue = record[snake];
+    if (camelValue !== undefined
+        && snakeValue !== undefined
+        && JSON.stringify(camelValue) !== JSON.stringify(snakeValue)) {
+        throw new AppError(`provider fields \`${camel}\` and \`${snake}\` disagree`, {
+            code: 'CODEX_PROVIDER_ALIAS_CONFLICT',
+            statusCode: 400,
+        });
+    }
+    return camelValue !== undefined ? camelValue : snakeValue;
+}
+/**
+ * Reads an optional string→string map (`http_headers`, `query_params`, ...).
+ *
+ * Every key must be non-empty and every value a string: Codex deserialises
+ * these as `HashMap<String, …>`, so a non-string value would fail the whole
+ * provider load rather than that one header. `envNames` additionally requires
+ * each VALUE to be a usable environment-variable name, because
+ * `env_http_headers` maps a header to the variable that carries its value.
+ */
+function readStringMap(value, fieldName, options = {}) {
+    if (value === undefined)
+        return undefined;
+    if (!isRecord(value)) {
+        throw new AppError(`${fieldName} must be a JSON object of string values`, {
+            code: 'CODEX_PROVIDER_INVALID_FIELD',
+            statusCode: 400,
+        });
+    }
+    const entries = {};
+    for (const [key, raw] of Object.entries(value)) {
+        if (key.trim() === '') {
+            throw new AppError(`${fieldName} must not carry an empty key`, {
+                code: 'CODEX_PROVIDER_INVALID_FIELD',
+                statusCode: 400,
+            });
+        }
+        if (typeof raw !== 'string') {
+            throw new AppError(`${fieldName}.${key} must be a string`, {
+                code: 'CODEX_PROVIDER_INVALID_FIELD',
+                statusCode: 400,
+            });
+        }
+        if (options.envNames === true) {
+            if (!ENV_KEY_PATTERN.test(raw.trim())) {
+                throw new AppError(`${fieldName}.${key} must name an environment variable`, {
+                    code: 'CODEX_PROVIDER_INVALID_FIELD',
+                    statusCode: 400,
+                });
+            }
+            entries[key] = raw.trim();
+            continue;
+        }
+        entries[key] = raw;
+    }
+    return entries;
+}
+/** Reads an optional integer with a lower bound (retries may be 0, windows may not). */
+function readInteger(value, fieldName, minimum) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'number' || !Number.isInteger(value) || value < minimum) {
+        throw new AppError(`${fieldName} must be an integer >= ${minimum}`, {
+            code: 'CODEX_PROVIDER_INVALID_FIELD',
+            statusCode: 400,
+        });
+    }
+    return value;
+}
+/** Reads an optional absolute http(s) URL (`model_catalog_url`). */
+function readHttpUrl(value, fieldName) {
+    if (value === undefined)
+        return undefined;
+    if (typeof value !== 'string') {
+        throw new AppError(`${fieldName} must be a string`, {
+            code: 'CODEX_PROVIDER_INVALID_FIELD',
+            statusCode: 400,
+        });
+    }
+    let parsed;
+    try {
+        parsed = new URL(value.trim());
+    }
+    catch {
+        throw new AppError(`${fieldName} "${value}" is not an absolute URL`, {
+            code: 'CODEX_PROVIDER_INVALID_FIELD',
+            statusCode: 400,
+        });
+    }
+    if (parsed.protocol !== 'http:' && parsed.protocol !== 'https:') {
+        throw new AppError(`${fieldName} must use http or https; got "${parsed.protocol}"`, {
+            code: 'CODEX_PROVIDER_INVALID_FIELD',
+            statusCode: 400,
+        });
+    }
+    return value.trim();
+}
+/**
+ * Parses one registry entry. In strict mode every defect is an `AppError`; in tolerant mode a
+ * defect is a warning and `null`, so one hand-edited provider cannot hide the rest.
+ *
+ * `fallbackId` is the registry key (file shape) or null (the write path carries `id`).
+ *
+ * Consumers: `codex-model-providers.settings.ts`.
+ */
+export function parseCodexProviderEntry(raw, fallbackId, context) {
+    const warnings = [];
+    const reject = (code, message) => {
+        if (context.strict) {
+            throw new AppError(message, { code, statusCode: 400 });
+        }
+        warnings.push(message);
+        return { entry: null, warnings };
+    };
+    if (!isRecord(raw)) {
+        return reject('CODEX_PROVIDER_INVALID_ENTRY', 'a provider entry must be a JSON object');
+    }
+    let id;
+    try {
+        const rawId = readStringField(raw.id, 'id') ?? '';
+        if (fallbackId !== null && rawId !== '' && rawId !== fallbackId) {
+            return reject('CODEX_PROVIDER_ID_MISMATCH', `provider key "${fallbackId}" and its \`id\` "${rawId}" disagree`);
+        }
+        id = fallbackId ?? rawId;
+    }
+    catch (failure) {
+        if (context.strict)
+            throw failure;
+        warnings.push(failure.message);
+        return { entry: null, warnings };
+    }
+    if (!PROVIDER_ID_PATTERN.test(id)) {
+        return reject('CODEX_PROVIDER_ID_INVALID', `provider id ${id === '' ? '(empty)' : `"${id}"`} must match ^[A-Za-z0-9][A-Za-z0-9_-]{0,63}$`);
+    }
+    if (RESERVED_CODEX_PROVIDER_IDS.includes(id.toLowerCase())) {
+        return reject('CODEX_PROVIDER_ID_RESERVED', `provider id "${id}" is reserved by Codex (${RESERVED_CODEX_PROVIDER_IDS.join(', ')}); choose another id`);
+    }
+    for (const field of Object.keys(raw)) {
+        if (!KNOWN_FIELDS.includes(field)) {
+            warnings.push(`provider "${id}" has unknown field \`${field}\`; it is ignored`);
+        }
+    }
+    if (context.strict && raw.token !== undefined && typeof raw.token !== 'string') {
+        return reject('CODEX_PROVIDER_TOKEN_INVALID', `provider "${id}" token must be a string`);
+    }
+    if (!context.strict && raw.token !== undefined) {
+        // A secret written into the project document would defeat the tokenFile contract; the value
+        // is never read from here, and the warning keeps the leak visible.
+        warnings.push(`provider "${id}" stores a \`token\` field; secrets belong in its tokenFile, so this value is ignored`);
+    }
+    let baseUrl;
+    let envKey;
+    let tokenFile;
+    let wireApi;
+    let name;
+    try {
+        baseUrl = readStringField(readAlias(raw, 'baseUrl', 'base_url'), 'baseUrl') ?? '';
+        envKey = readStringField(readAlias(raw, 'envKey', 'env_key'), 'envKey') ?? defaultEnvKey(id);
+        tokenFile = readStringField(readAlias(raw, 'tokenFile', 'token_file'), 'tokenFile') ?? '';
+        wireApi = readAlias(raw, 'wireApi', 'wire_api');
+        name = readStringField(raw.name, 'name') ?? id;
+    }
+    catch (failure) {
+        if (context.strict)
+            throw failure;
+        warnings.push(failure.message);
+        return { entry: null, warnings };
+    }
+    if (baseUrl === '') {
+        return reject('CODEX_PROVIDER_BASE_URL_REQUIRED', `provider "${id}" baseUrl is required`);
+    }
+    let parsedUrl;
+    try {
+        parsedUrl = new URL(baseUrl);
+    }
+    catch {
+        return reject('CODEX_PROVIDER_BASE_URL_INVALID', `provider "${id}" baseUrl "${baseUrl}" is not an absolute URL`);
+    }
+    if (parsedUrl.protocol !== 'http:' && parsedUrl.protocol !== 'https:') {
+        return reject('CODEX_PROVIDER_BASE_URL_INVALID', `provider "${id}" baseUrl must use http or https; got "${parsedUrl.protocol}"`);
+    }
+    if (!ENV_KEY_PATTERN.test(envKey)) {
+        return reject('CODEX_PROVIDER_ENV_KEY_INVALID', `provider "${id}" envKey "${envKey}" is not a valid environment variable name`);
+    }
+    if (wireApi !== undefined && wireApi !== CODEX_PROVIDER_WIRE_API) {
+        return reject('CODEX_PROVIDER_WIRE_API_UNSUPPORTED', `provider "${id}" wire_api must be "${CODEX_PROVIDER_WIRE_API}" (Chat Completions is not supported); got ${JSON.stringify(wireApi)}`);
+    }
+    // Advanced settings are optional and independent of the core fields, so in
+    // tolerant mode one bad optional value is a warning that drops that field
+    // instead of hiding a provider whose endpoint is perfectly usable.
+    const advanced = {};
+    const readAdvanced = (name, read) => {
+        try {
+            read();
+        }
+        catch (failure) {
+            if (context.strict)
+                throw failure;
+            warnings.push(failure.message);
+        }
+    };
+    readAdvanced('http_headers', () => {
+        const parsed = readStringMap(readAliasDeep(raw, 'httpHeaders', 'http_headers'), `provider "${id}" httpHeaders`);
+        if (parsed !== undefined)
+            advanced.httpHeaders = parsed;
+    });
+    readAdvanced('env_http_headers', () => {
+        const parsed = readStringMap(readAliasDeep(raw, 'envHttpHeaders', 'env_http_headers'), `provider "${id}" envHttpHeaders`, { envNames: true });
+        if (parsed !== undefined)
+            advanced.envHttpHeaders = parsed;
+    });
+    readAdvanced('query_params', () => {
+        const parsed = readStringMap(readAliasDeep(raw, 'queryParams', 'query_params'), `provider "${id}" queryParams`);
+        if (parsed !== undefined)
+            advanced.queryParams = parsed;
+    });
+    readAdvanced('request_max_retries', () => {
+        const parsed = readInteger(readAliasDeep(raw, 'requestMaxRetries', 'request_max_retries'), `provider "${id}" requestMaxRetries`, 0);
+        if (parsed !== undefined)
+            advanced.requestMaxRetries = parsed;
+    });
+    readAdvanced('stream_max_retries', () => {
+        const parsed = readInteger(readAliasDeep(raw, 'streamMaxRetries', 'stream_max_retries'), `provider "${id}" streamMaxRetries`, 0);
+        if (parsed !== undefined)
+            advanced.streamMaxRetries = parsed;
+    });
+    readAdvanced('stream_idle_timeout_ms', () => {
+        const parsed = readInteger(readAliasDeep(raw, 'streamIdleTimeoutMs', 'stream_idle_timeout_ms'), `provider "${id}" streamIdleTimeoutMs`, 1);
+        if (parsed !== undefined)
+            advanced.streamIdleTimeoutMs = parsed;
+    });
+    readAdvanced('model_catalog_url', () => {
+        const parsed = readHttpUrl(readAliasDeep(raw, 'modelCatalogUrl', 'model_catalog_url'), `provider "${id}" modelCatalogUrl`);
+        if (parsed !== undefined)
+            advanced.modelCatalogUrl = parsed;
+    });
+    readAdvanced('model_context_window', () => {
+        const parsed = readInteger(readAliasDeep(raw, 'modelContextWindow', 'model_context_window'), `provider "${id}" modelContextWindow`, 1);
+        if (parsed !== undefined)
+            advanced.modelContextWindow = parsed;
+    });
+    readAdvanced('model_auto_compact_token_limit', () => {
+        const parsed = readInteger(readAliasDeep(raw, 'modelAutoCompactTokenLimit', 'model_auto_compact_token_limit'), `provider "${id}" modelAutoCompactTokenLimit`, 1);
+        if (parsed !== undefined)
+            advanced.modelAutoCompactTokenLimit = parsed;
+    });
+    if (context.strict && raw.token !== undefined && raw.token === '') {
+        warnings.push(`provider "${id}" sent an empty token; the existing secret is left unchanged`);
+    }
+    const token = typeof raw.token === 'string' && raw.token !== '' ? raw.token : undefined;
+    return {
+        entry: { id, name, baseUrl, envKey, tokenFile, wireApi: CODEX_PROVIDER_WIRE_API, ...advanced },
+        warnings,
+        ...(token === undefined ? {} : { token }),
+    };
+}
+//# sourceMappingURL=codex-model-providers.schema.js.map

package/dist-server/server/modules/settings/codex-model-providers.schema.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-model-providers.schema.js","sourceRoot":"","sources":["../../../../server/modules/settings/codex-model-providers.schema.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAEvD,0FAA0F;AAC1F,MAAM,CAAC,MAAM,2BAA2B,GAAsB,CAAC,QAAQ,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;AAE/F,+FAA+F;AAC/F,MAAM,CAAC,MAAM,uBAAuB,GAAG,WAAoB,CAAC;AAuD5D,MAAM,mBAAmB,GAAG,kCAAkC,CAAC;AAC/D,MAAM,eAAe,GAAG,0BAA0B,CAAC;AACnD,4FAA4F;AAC5F,2EAA2E;AAC3E,MAAM,YAAY,GAAsB;IACtC,IAAI;IACJ,MAAM;IACN,SAAS;IACT,UAAU;IACV,QAAQ;IACR,SAAS;IACT,WAAW;IACX,YAAY;IACZ,SAAS;IACT,UAAU;IACV,OAAO;IACP,6EAA6E;IAC7E,qEAAqE;IACrE,aAAa;IACb,cAAc;IACd,gBAAgB;IAChB,kBAAkB;IAClB,aAAa;IACb,cAAc;IACd,mBAAmB;IACnB,qBAAqB;IACrB,kBAAkB;IAClB,oBAAoB;IACpB,qBAAqB;IACrB,wBAAwB;IACxB,iBAAiB;IACjB,mBAAmB;IACnB,oBAAoB;IACpB,sBAAsB;IACtB,4BAA4B;IAC5B,gCAAgC;CACjC,CAAC;AAEF,8FAA8F;AAC9F,SAAS,SAAS,CAAC,MAA+B,EAAE,KAAa,EAAE,KAAa;IAC9E,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,SAAS,IAAI,UAAU,KAAK,UAAU,EAAE,CAAC;QACtF,MAAM,IAAI,QAAQ,CAAC,qBAAqB,KAAK,YAAY,KAAK,aAAa,EAAE;YAC3E,IAAI,EAAE,+BAA+B;YACrC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AAC5D,CAAC;AAED,SAAS,eAAe,CAAC,KAAc,EAAE,SAAiB;IACxD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,mBAAmB,EAAE;YAClD,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED,6FAA6F;AAC7F,SAAS,aAAa,CAAC,UAAkB;IACvC,OAAO,SAAS,UAAU,CAAC,OAAO,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,UAAU,CAAC;AACnF,CAAC;AAED,wFAAwF;AACxF,SAAS,aAAa,CAAC,MAA+B,EAAE,KAAa,EAAE,KAAa;IAClF,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,MAAM,UAAU,GAAG,MAAM,CAAC,KAAK,CAAC,CAAC;IACjC,IACE,UAAU,KAAK,SAAS;WACrB,UAAU,KAAK,SAAS;WACxB,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,KAAK,IAAI,CAAC,SAAS,CAAC,UAAU,CAAC,EAC5D,CAAC;QACD,MAAM,IAAI,QAAQ,CAAC,qBAAqB,KAAK,YAAY,KAAK,aAAa,EAAE;YAC3E,IAAI,EAAE,+BAA+B;YACrC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AAC5D,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,aAAa,CACpB,KAAc,EACd,SAAiB,EACjB,UAAkC,EAAE;IAEpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,yCAAyC,EAAE;YACxE,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,OAAO,GAA2B,EAAE,CAAC;IAC3C,KAAK,MAAM,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;QAC/C,IAAI,GAAG,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACtB,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,8BAA8B,EAAE;gBAC7D,IAAI,EAAE,8BAA8B;gBACpC,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;YAC5B,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,IAAI,GAAG,mBAAmB,EAAE;gBACzD,IAAI,EAAE,8BAA8B;gBACpC,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,IAAI,OAAO,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC9B,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EAAE,CAAC;gBACtC,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,IAAI,GAAG,oCAAoC,EAAE;oBAC1E,IAAI,EAAE,8BAA8B;oBACpC,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;YAC1B,SAAS;QACX,CAAC;QACD,OAAO,CAAC,GAAG,CAAC,GAAG,GAAG,CAAC;IACrB,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED,wFAAwF;AACxF,SAAS,WAAW,CAAC,KAAc,EAAE,SAAiB,EAAE,OAAe;IACrE,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,OAAO,EAAE,CAAC;QAC7E,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,0BAA0B,OAAO,EAAE,EAAE;YAClE,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,oEAAoE;AACpE,SAAS,WAAW,CAAC,KAAc,EAAE,SAAiB;IACpD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,mBAAmB,EAAE;YAClD,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC;IACjC,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,KAAK,KAAK,0BAA0B,EAAE;YACnE,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QAChE,MAAM,IAAI,QAAQ,CAAC,GAAG,SAAS,iCAAiC,MAAM,CAAC,QAAQ,GAAG,EAAE;YAClF,IAAI,EAAE,8BAA8B;YACpC,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC;AACtB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,GAAY,EACZ,UAAyB,EACzB,OAAkC;IAElC,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,MAAM,MAAM,GAAG,CAAC,IAAY,EAAE,OAAe,EAAuB,EAAE;QACpE,IAAI,OAAO,CAAC,MAAM,EAAE,CAAC;YACnB,MAAM,IAAI,QAAQ,CAAC,OAAO,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,GAAG,EAAE,CAAC,CAAC;QACzD,CAAC;QACD,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACvB,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC,CAAC;IAEF,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,8BAA8B,EAAE,wCAAwC,CAAC,CAAC;IAC1F,CAAC;IAED,IAAI,EAAU,CAAC;IACf,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,eAAe,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAClD,IAAI,UAAU,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE,IAAI,KAAK,KAAK,UAAU,EAAE,CAAC;YAChE,OAAO,MAAM,CACX,4BAA4B,EAC5B,iBAAiB,UAAU,qBAAqB,KAAK,YAAY,CAClE,CAAC;QACJ,CAAC;QACD,EAAE,GAAG,UAAU,IAAI,KAAK,CAAC;IAC3B,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,OAAO,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAE,OAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,CAAC,mBAAmB,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CACX,2BAA2B,EAC3B,eAAe,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,8CAA8C,CAC/F,CAAC;IACJ,CAAC;IACD,IAAI,2BAA2B,CAAC,QAAQ,CAAC,EAAE,CAAC,WAAW,EAAE,CAAC,EAAE,CAAC;QAC3D,OAAO,MAAM,CACX,4BAA4B,EAC5B,gBAAgB,EAAE,2BAA2B,2BAA2B,CAAC,IAAI,CAAC,IAAI,CAAC,sBAAsB,CAC1G,CAAC;IACJ,CAAC;IAED,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,yBAAyB,KAAK,mBAAmB,CAAC,CAAC;QAClF,CAAC;IACH,CAAC;IACD,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC/E,OAAO,MAAM,CAAC,8BAA8B,EAAE,aAAa,EAAE,0BAA0B,CAAC,CAAC;IAC3F,CAAC;IACD,IAAI,CAAC,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,EAAE,CAAC;QAC/C,4FAA4F;QAC5F,mEAAmE;QACnE,QAAQ,CAAC,IAAI,CACX,aAAa,EAAE,uFAAuF,CACvG,CAAC;IACJ,CAAC;IAED,IAAI,OAAe,CAAC;IACpB,IAAI,MAAc,CAAC;IACnB,IAAI,SAAiB,CAAC;IACtB,IAAI,OAAgB,CAAC;IACrB,IAAI,IAAY,CAAC;IACjB,IAAI,CAAC;QACH,OAAO,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,EAAE,SAAS,CAAC,IAAI,EAAE,CAAC;QAClF,MAAM,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,QAAQ,EAAE,SAAS,CAAC,EAAE,QAAQ,CAAC,IAAI,aAAa,CAAC,EAAE,CAAC,CAAC;QAC7F,SAAS,GAAG,eAAe,CAAC,SAAS,CAAC,GAAG,EAAE,WAAW,EAAE,YAAY,CAAC,EAAE,WAAW,CAAC,IAAI,EAAE,CAAC;QAC1F,OAAO,GAAG,SAAS,CAAC,GAAG,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;QAChD,IAAI,GAAG,eAAe,CAAC,GAAG,CAAC,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,CAAC;IACjD,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,IAAI,OAAO,CAAC,MAAM;YAAE,MAAM,OAAO,CAAC;QAClC,QAAQ,CAAC,IAAI,CAAE,OAAiB,CAAC,OAAO,CAAC,CAAC;QAC1C,OAAO,EAAE,KAAK,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACnC,CAAC;IAED,IAAI,OAAO,KAAK,EAAE,EAAE,CAAC;QACnB,OAAO,MAAM,CAAC,kCAAkC,EAAE,aAAa,EAAE,uBAAuB,CAAC,CAAC;IAC5F,CAAC;IACD,IAAI,SAAc,CAAC;IACnB,IAAI,CAAC;QACH,SAAS,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,MAAM,CACX,iCAAiC,EACjC,aAAa,EAAE,cAAc,OAAO,0BAA0B,CAC/D,CAAC;IACJ,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,KAAK,OAAO,IAAI,SAAS,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;QACtE,OAAO,MAAM,CACX,iCAAiC,EACjC,aAAa,EAAE,0CAA0C,SAAS,CAAC,QAAQ,GAAG,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QAClC,OAAO,MAAM,CACX,gCAAgC,EAChC,aAAa,EAAE,aAAa,MAAM,4CAA4C,CAC/E,CAAC;IACJ,CAAC;IACD,IAAI,OAAO,KAAK,SAAS,IAAI,OAAO,KAAK,uBAAuB,EAAE,CAAC;QACjE,OAAO,MAAM,CACX,qCAAqC,EACrC,aAAa,EAAE,uBAAuB,uBAAuB,8CAA8C,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE,CACrI,CAAC;IACJ,CAAC;IAED,2EAA2E;IAC3E,0EAA0E;IAC1E,mEAAmE;IACnE,MAAM,QAAQ,GAAkC,EAAE,CAAC;IACnD,MAAM,YAAY,GAAG,CAAC,IAAY,EAAE,IAAgB,EAAQ,EAAE;QAC5D,IAAI,CAAC;YACH,IAAI,EAAE,CAAC;QACT,CAAC;QAAC,OAAO,OAAO,EAAE,CAAC;YACjB,IAAI,OAAO,CAAC,MAAM;gBAAE,MAAM,OAAO,CAAC;YAClC,QAAQ,CAAC,IAAI,CAAE,OAAiB,CAAC,OAAO,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC,CAAC;IACF,YAAY,CAAC,cAAc,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QAChH,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,kBAAkB,EAAE,GAAG,EAAE;QACpC,MAAM,MAAM,GAAG,aAAa,CAC1B,aAAa,CAAC,GAAG,EAAE,gBAAgB,EAAE,kBAAkB,CAAC,EACxD,aAAa,EAAE,kBAAkB,EACjC,EAAE,QAAQ,EAAE,IAAI,EAAE,CACnB,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,cAAc,GAAG,MAAM,CAAC;IAC7D,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,cAAc,EAAE,GAAG,EAAE;QAChC,MAAM,MAAM,GAAG,aAAa,CAAC,aAAa,CAAC,GAAG,EAAE,aAAa,EAAE,cAAc,CAAC,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;QAChH,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,WAAW,GAAG,MAAM,CAAC;IAC1D,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,qBAAqB,EAAE,GAAG,EAAE;QACvC,MAAM,MAAM,GAAG,WAAW,CACxB,aAAa,CAAC,GAAG,EAAE,mBAAmB,EAAE,qBAAqB,CAAC,EAC9D,aAAa,EAAE,qBAAqB,EACpC,CAAC,CACF,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,iBAAiB,GAAG,MAAM,CAAC;IAChE,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,oBAAoB,EAAE,GAAG,EAAE;QACtC,MAAM,MAAM,GAAG,WAAW,CACxB,aAAa,CAAC,GAAG,EAAE,kBAAkB,EAAE,oBAAoB,CAAC,EAC5D,aAAa,EAAE,oBAAoB,EACnC,CAAC,CACF,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,gBAAgB,GAAG,MAAM,CAAC;IAC/D,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAC1C,MAAM,MAAM,GAAG,WAAW,CACxB,aAAa,CAAC,GAAG,EAAE,qBAAqB,EAAE,wBAAwB,CAAC,EACnE,aAAa,EAAE,uBAAuB,EACtC,CAAC,CACF,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,mBAAmB,GAAG,MAAM,CAAC;IAClE,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,mBAAmB,EAAE,GAAG,EAAE;QACrC,MAAM,MAAM,GAAG,WAAW,CACxB,aAAa,CAAC,GAAG,EAAE,iBAAiB,EAAE,mBAAmB,CAAC,EAC1D,aAAa,EAAE,mBAAmB,CACnC,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,eAAe,GAAG,MAAM,CAAC;IAC9D,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,sBAAsB,EAAE,GAAG,EAAE;QACxC,MAAM,MAAM,GAAG,WAAW,CACxB,aAAa,CAAC,GAAG,EAAE,oBAAoB,EAAE,sBAAsB,CAAC,EAChE,aAAa,EAAE,sBAAsB,EACrC,CAAC,CACF,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,kBAAkB,GAAG,MAAM,CAAC;IACjE,CAAC,CAAC,CAAC;IACH,YAAY,CAAC,gCAAgC,EAAE,GAAG,EAAE;QAClD,MAAM,MAAM,GAAG,WAAW,CACxB,aAAa,CAAC,GAAG,EAAE,4BAA4B,EAAE,gCAAgC,CAAC,EAClF,aAAa,EAAE,8BAA8B,EAC7C,CAAC,CACF,CAAC;QACF,IAAI,MAAM,KAAK,SAAS;YAAE,QAAQ,CAAC,0BAA0B,GAAG,MAAM,CAAC;IACzE,CAAC,CAAC,CAAC;IAEH,IAAI,OAAO,CAAC,MAAM,IAAI,GAAG,CAAC,KAAK,KAAK,SAAS,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,EAAE,CAAC;QAClE,QAAQ,CAAC,IAAI,CAAC,aAAa,EAAE,8DAA8D,CAAC,CAAC;IAC/F,CAAC;IAED,MAAM,KAAK,GAAG,OAAO,GAAG,CAAC,KAAK,KAAK,QAAQ,IAAI,GAAG,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACxF,OAAO;QACL,KAAK,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,uBAAuB,EAAE,GAAG,QAAQ,EAAE;QAC9F,QAAQ;QACR,GAAG,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC;KAC1C,CAAC;AACJ,CAAC"}

package/dist-server/server/modules/settings/codex-model-providers.service.js

@@ -0,0 +1,199 @@
+/**
+ * The Settings → Agents → Codex provider registry endpoints, as service operations.
+ *
+ * WHY A SIBLING FILE. `settings.service.ts` is the assembled application service and already
+ * carries every Settings workflow; this registry's transport contract (a full replacement, a
+ * version proof, a write-only secret) is a distinct concern with its own criterion, so it lives
+ * here and is composed into the assembled service. The file port stays behind
+ * {@link CodexModelProvidersPort}, so the service never imports the filesystem itself.
+ *
+ * WHAT THE SERVICE OWNS. Transport validation only: the body must be an object, `providers`
+ * must be an array, and the version the editor based its save on must be present (body or
+ * `If-Match`). Provider-entry validation is the file schema's job, because the same rules must
+ * hold when the file is read at spawn time.
+ */
+import { readExpectedVersion } from '../../shared/settings-file.js';
+import { AppError, isRecord } from '../../shared/utils.js';
+/** The body keys a save may carry; everything else is refused rather than ignored. */
+const WRITE_FIELDS = ['expectedVersion', 'providers'];
+/** The body keys an import may carry; everything else is refused rather than ignored. */
+const IMPORT_FIELDS = ['expectedVersion', 'ids'];
+/**
+ * Reads the import request's `ids`: a non-empty array of non-empty strings, de-duplicated in
+ * request order. A malformed list is refused before any profile row is looked up, so a bad
+ * request can never look like a partial import.
+ */
+function readImportIds(raw) {
+    if (!Array.isArray(raw)) {
+        throw new AppError('ids must be an array of provider ids', {
+            code: 'IMPORT_IDS_INVALID',
+            statusCode: 400,
+        });
+    }
+    const ids = [];
+    for (const value of raw) {
+        if (typeof value !== 'string' || value.trim() === '') {
+            throw new AppError('ids must contain non-empty provider id strings', {
+                code: 'IMPORT_IDS_INVALID',
+                statusCode: 400,
+            });
+        }
+        const id = value.trim();
+        if (!ids.includes(id))
+            ids.push(id);
+    }
+    if (ids.length === 0) {
+        throw new AppError('ids must name at least one provider to import', {
+            code: 'IMPORT_IDS_REQUIRED',
+            statusCode: 400,
+        });
+    }
+    return ids;
+}
+/**
+ * Creates the registry operations over one port. A missing port is a visible 500, never an
+ * empty registry: an unconfigured settings module must not look like "no providers".
+ *
+ * Consumers: `settings.service.ts`, which spreads these methods into the assembled service.
+ */
+export function createCodexModelProvidersOperations(port) {
+    const requirePort = () => {
+        if (!port) {
+            throw new AppError('Codex model provider settings are not configured', {
+                code: 'CODEX_MODEL_PROVIDERS_UNAVAILABLE',
+                statusCode: 500,
+            });
+        }
+        return port;
+    };
+    /** The user-profile reader, or a visible 500 — never an empty import view. */
+    const requireUserImports = () => {
+        const registry = requirePort();
+        const reader = registry.readUserImports;
+        if (reader === undefined) {
+            throw new AppError('Codex user-profile import is not configured', {
+                code: 'CODEX_MODEL_PROVIDER_IMPORT_UNAVAILABLE',
+                statusCode: 500,
+            });
+        }
+        return () => reader.call(registry);
+    };
+    return {
+        /** The saved registry plus every provider's `tokenSet` and warnings; never a secret. */
+        getCodexModelProviders() {
+            return requirePort().read();
+        },
+        /**
+         * Replaces the registry. `expectedVersion` (or `If-Match`) proves the editor read the file
+         * it is replacing; a stale value is the port's readable 409, not an overwrite.
+         */
+        async updateCodexModelProviders(input) {
+            const registry = requirePort();
+            if (!isRecord(input.body)) {
+                throw new AppError('body must be a JSON object', {
+                    code: 'INVALID_BODY',
+                    statusCode: 400,
+                });
+            }
+            const unknownFields = Object.keys(input.body).filter((field) => !WRITE_FIELDS.includes(field));
+            if (unknownFields.length > 0) {
+                throw new AppError(`unknown field(s): ${unknownFields.join(', ')}`, {
+                    code: 'UNKNOWN_FIELD',
+                    statusCode: 400,
+                    details: { fields: unknownFields },
+                });
+            }
+            const expectedVersion = readExpectedVersion(input.body, input.headerVersion);
+            if (input.body.providers === undefined) {
+                throw new AppError('providers is required', {
+                    code: 'PROVIDERS_REQUIRED',
+                    statusCode: 400,
+                });
+            }
+            if (!Array.isArray(input.body.providers)) {
+                throw new AppError('providers must be an array', {
+                    code: 'PROVIDERS_INVALID',
+                    statusCode: 400,
+                });
+            }
+            return registry.write({ providers: input.body.providers, expectedVersion });
+        },
+        /** The operator's own Codex providers, read-only; secret VALUES are never part of it. */
+        getCodexUserProviderImports() {
+            return requireUserImports()();
+        },
+        /**
+         * Binds named user-profile providers into the PROJECT registry.
+         *
+         * EVERY row is validated before anything is written: an unknown id or a row the import view
+         * marked `bindable=false` (a Codex built-in, a non-`responses` dialect) refuses the whole
+         * request with a 400 that names the id and the reason, so a mixed request never half-lands.
+         *
+         * The merge starts from the current project reading — existing rows (and their `tokenFile`)
+         * are preserved — then appends the imported rows; a same-id existing row is replaced. Only
+         * the import's declared fields are copied: no secret is read, `tokenFile` stays empty (the
+         * store resolves the default path), and the user's `~/.codex` is never a write target.
+         *
+         * Consumers: `settings.routes.ts`'s `POST .../import` and the AC-466 criterion.
+         */
+        async importCodexUserProviders(input) {
+            const registry = requirePort();
+            if (!isRecord(input.body)) {
+                throw new AppError('body must be a JSON object', {
+                    code: 'INVALID_BODY',
+                    statusCode: 400,
+                });
+            }
+            const unknownFields = Object.keys(input.body).filter((field) => !IMPORT_FIELDS.includes(field));
+            if (unknownFields.length > 0) {
+                throw new AppError(`unknown field(s): ${unknownFields.join(', ')}`, {
+                    code: 'UNKNOWN_FIELD',
+                    statusCode: 400,
+                    details: { fields: unknownFields },
+                });
+            }
+            const expectedVersion = readExpectedVersion(input.body, input.headerVersion);
+            const ids = readImportIds(input.body.ids);
+            const imports = requireUserImports()();
+            const selected = ids.map((id) => {
+                const row = imports.providers.find((candidate) => candidate.id === id);
+                if (row === undefined) {
+                    throw new AppError(`No Codex provider "${id}" was found in ${imports.directory}; nothing was imported`, { code: 'CODEX_IMPORT_PROVIDER_UNKNOWN', statusCode: 400, details: { id } });
+                }
+                if (!row.bindable) {
+                    throw new AppError(`Codex provider "${id}" cannot be imported: ${row.warnings.join('; ') || 'it is not bindable'}`, {
+                        code: 'CODEX_IMPORT_PROVIDER_NOT_BINDABLE',
+                        statusCode: 400,
+                        details: { id, warnings: row.warnings },
+                    });
+                }
+                return row;
+            });
+            const importedIds = new Set(selected.map((row) => row.id));
+            const current = registry.read();
+            const merged = [
+                ...current.providers
+                    .filter((provider) => !importedIds.has(provider.id))
+                    .map((provider) => ({
+                    id: provider.id,
+                    name: provider.name,
+                    baseUrl: provider.baseUrl,
+                    envKey: provider.envKey,
+                    tokenFile: provider.tokenFile,
+                    wireApi: provider.wireApi,
+                })),
+                ...selected.map((row) => ({
+                    id: row.id,
+                    name: row.name,
+                    baseUrl: row.baseUrl,
+                    envKey: row.envKey,
+                    // Empty means "the store's default path"; an import never names a secret file.
+                    tokenFile: '',
+                    wireApi: row.wireApi,
+                })),
+            ];
+            return registry.write({ providers: merged, expectedVersion });
+        },
+    };
+}
+//# sourceMappingURL=codex-model-providers.service.js.map

package/dist-server/server/modules/settings/codex-model-providers.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-model-providers.service.js","sourceRoot":"","sources":["../../../../server/modules/settings/codex-model-providers.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,OAAO,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAmBvD,sFAAsF;AACtF,MAAM,YAAY,GAAsB,CAAC,iBAAiB,EAAE,WAAW,CAAC,CAAC;AAEzE,yFAAyF;AACzF,MAAM,aAAa,GAAsB,CAAC,iBAAiB,EAAE,KAAK,CAAC,CAAC;AAEpE;;;;GAIG;AACH,SAAS,aAAa,CAAC,GAAY;IACjC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACxB,MAAM,IAAI,QAAQ,CAAC,sCAAsC,EAAE;YACzD,IAAI,EAAE,oBAAoB;YAC1B,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,GAAa,EAAE,CAAC;IACzB,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACrD,MAAM,IAAI,QAAQ,CAAC,gDAAgD,EAAE;gBACnE,IAAI,EAAE,oBAAoB;gBAC1B,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,MAAM,EAAE,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC;QACxB,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;YAAE,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtC,CAAC;IACD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,MAAM,IAAI,QAAQ,CAAC,+CAA+C,EAAE;YAClE,IAAI,EAAE,qBAAqB;YAC3B,UAAU,EAAE,GAAG;SAChB,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mCAAmC,CAAC,IAAyC;IAC3F,MAAM,WAAW,GAAG,GAA4B,EAAE;QAChD,IAAI,CAAC,IAAI,EAAE,CAAC;YACV,MAAM,IAAI,QAAQ,CAAC,kDAAkD,EAAE;gBACrE,IAAI,EAAE,mCAAmC;gBACzC,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,IAAI,CAAC;IACd,CAAC,CAAC;IAEF,8EAA8E;IAC9E,MAAM,kBAAkB,GAAG,GAA2C,EAAE;QACtE,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,QAAQ,CAAC,eAAe,CAAC;QACxC,IAAI,MAAM,KAAK,SAAS,EAAE,CAAC;YACzB,MAAM,IAAI,QAAQ,CAAC,6CAA6C,EAAE;gBAChE,IAAI,EAAE,yCAAyC;gBAC/C,UAAU,EAAE,GAAG;aAChB,CAAC,CAAC;QACL,CAAC;QACD,OAAO,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACrC,CAAC,CAAC;IAEF,OAAO;QACL,wFAAwF;QACxF,sBAAsB;YACpB,OAAO,WAAW,EAAE,CAAC,IAAI,EAAE,CAAC;QAC9B,CAAC;QACD;;;WAGG;QACH,KAAK,CAAC,yBAAyB,CAAC,KAG/B;YACC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,QAAQ,CAAC,4BAA4B,EAAE;oBAC/C,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,YAAY,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAC/F,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAAC,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;oBAClE,IAAI,EAAE,eAAe;oBACrB,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7E,IAAI,KAAK,CAAC,IAAI,CAAC,SAAS,KAAK,SAAS,EAAE,CAAC;gBACvC,MAAM,IAAI,QAAQ,CAAC,uBAAuB,EAAE;oBAC1C,IAAI,EAAE,oBAAoB;oBAC1B,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,EAAE,CAAC;gBACzC,MAAM,IAAI,QAAQ,CAAC,4BAA4B,EAAE;oBAC/C,IAAI,EAAE,mBAAmB;oBACzB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,IAAI,CAAC,SAAS,EAAE,eAAe,EAAE,CAAC,CAAC;QAC9E,CAAC;QACD,yFAAyF;QACzF,2BAA2B;YACzB,OAAO,kBAAkB,EAAE,EAAE,CAAC;QAChC,CAAC;QACD;;;;;;;;;;;;;WAaG;QACH,KAAK,CAAC,wBAAwB,CAAC,KAG9B;YACC,MAAM,QAAQ,GAAG,WAAW,EAAE,CAAC;YAC/B,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;gBAC1B,MAAM,IAAI,QAAQ,CAAC,4BAA4B,EAAE;oBAC/C,IAAI,EAAE,cAAc;oBACpB,UAAU,EAAE,GAAG;iBAChB,CAAC,CAAC;YACL,CAAC;YACD,MAAM,aAAa,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC,aAAa,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC;YAChG,IAAI,aAAa,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBAC7B,MAAM,IAAI,QAAQ,CAAC,qBAAqB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE;oBAClE,IAAI,EAAE,eAAe;oBACrB,UAAU,EAAE,GAAG;oBACf,OAAO,EAAE,EAAE,MAAM,EAAE,aAAa,EAAE;iBACnC,CAAC,CAAC;YACL,CAAC;YACD,MAAM,eAAe,GAAG,mBAAmB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,aAAa,CAAC,CAAC;YAC7E,MAAM,GAAG,GAAG,aAAa,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC1C,MAAM,OAAO,GAAG,kBAAkB,EAAE,EAAE,CAAC;YAEvC,MAAM,QAAQ,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE;gBAC9B,MAAM,GAAG,GAAG,OAAO,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;gBACvE,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBACtB,MAAM,IAAI,QAAQ,CAChB,sBAAsB,EAAE,kBAAkB,OAAO,CAAC,SAAS,wBAAwB,EACnF,EAAE,IAAI,EAAE,+BAA+B,EAAE,UAAU,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,EAAE,CAC5E,CAAC;gBACJ,CAAC;gBACD,IAAI,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC;oBAClB,MAAM,IAAI,QAAQ,CAChB,mBAAmB,EAAE,yBAAyB,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,oBAAoB,EAAE,EAC/F;wBACE,IAAI,EAAE,oCAAoC;wBAC1C,UAAU,EAAE,GAAG;wBACf,OAAO,EAAE,EAAE,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,QAAQ,EAAE;qBACxC,CACF,CAAC;gBACJ,CAAC;gBACD,OAAO,GAAG,CAAC;YACb,CAAC,CAAC,CAAC;YAEH,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC;YAC3D,MAAM,OAAO,GAAG,QAAQ,CAAC,IAAI,EAAE,CAAC;YAChC,MAAM,MAAM,GAAG;gBACb,GAAG,OAAO,CAAC,SAAS;qBACjB,MAAM,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;qBACnD,GAAG,CAAC,CAAC,QAAQ,EAAE,EAAE,CAAC,CAAC;oBAClB,EAAE,EAAE,QAAQ,CAAC,EAAE;oBACf,IAAI,EAAE,QAAQ,CAAC,IAAI;oBACnB,OAAO,EAAE,QAAQ,CAAC,OAAO;oBACzB,MAAM,EAAE,QAAQ,CAAC,MAAM;oBACvB,SAAS,EAAE,QAAQ,CAAC,SAAS;oBAC7B,OAAO,EAAE,QAAQ,CAAC,OAAO;iBAC1B,CAAC,CAAC;gBACL,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;oBACxB,EAAE,EAAE,GAAG,CAAC,EAAE;oBACV,IAAI,EAAE,GAAG,CAAC,IAAI;oBACd,OAAO,EAAE,GAAG,CAAC,OAAO;oBACpB,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,+EAA+E;oBAC/E,SAAS,EAAE,EAAE;oBACb,OAAO,EAAE,GAAG,CAAC,OAAO;iBACrB,CAAC,CAAC;aACJ,CAAC;YACF,OAAO,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,EAAE,MAAM,EAAE,eAAe,EAAE,CAAC,CAAC;QAChE,CAAC;KACF,CAAC;AACJ,CAAC"}