@zhihaohong52/sonata 0.4.0

package/dist/native/hosts.js

@@ -0,0 +1,60 @@
+import { execSync } from 'node:child_process';
+import { readFileSync } from 'node:fs';
+import { resolve4 } from 'node:dns/promises';
+const HOSTS_PATH = '/etc/hosts';
+const MARKER = '# sonata transparent proxy';
+const ENTRY = `127.0.0.1 api.anthropic.com ${MARKER}`;
+/**
+ * Resolves api.anthropic.com's real IP BEFORE /etc/hosts is modified.
+ * Cached for the session so the router can forward to it directly.
+ */
+export async function resolveAnthropicIp() {
+    const ips = await resolve4('api.anthropic.com');
+    if (ips.length === 0)
+        throw new Error('sonata: could not resolve api.anthropic.com');
+    return ips[0];
+}
+export function hostsHasEntry() {
+    try {
+        return readFileSync(HOSTS_PATH, 'utf8').includes(MARKER);
+    }
+    catch {
+        return false;
+    }
+}
+/**
+ * Adds the localhost redirect to /etc/hosts. Requires sudo.
+ *
+ * The marker comment makes the entry identifiable so removeHostsEntry
+ * removes exactly what addHostsEntry wrote, nothing else.
+ */
+export function addHostsEntry() {
+    if (hostsHasEntry())
+        return;
+    execSync(`echo '${ENTRY}' | sudo -n tee -a ${HOSTS_PATH} > /dev/null 2>&1 || ` +
+        `echo '${ENTRY}' | sudo tee -a ${HOSTS_PATH} > /dev/null`, { stdio: 'inherit' });
+}
+export function removeHostsEntry() {
+    if (!hostsHasEntry())
+        return;
+    // sed -i on macOS requires '' as the backup extension
+    try {
+        execSync(`sudo -n sed -i '' '/${MARKER.replace(/[/\\]/g, '\\$&')}/d' ${HOSTS_PATH} 2>/dev/null || ` +
+            `sudo sed -i '' '/${MARKER.replace(/[/\\]/g, '\\$&')}/d' ${HOSTS_PATH}`, { stdio: 'inherit' });
+    }
+    catch {
+        // Best-effort: if sudo fails, doctor will report the stale entry.
+    }
+}
+/** Flush DNS cache so the hosts change takes effect immediately. */
+export function flushDns() {
+    try {
+        execSync('sudo -n dscacheutil -flushcache 2>/dev/null; sudo -n killall -HUP mDNSResponder 2>/dev/null', {
+            stdio: 'pipe',
+        });
+    }
+    catch {
+        // Non-fatal: most operations will pick up the change without flushing.
+    }
+}
+//# sourceMappingURL=hosts.js.map

package/dist/native/hosts.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hosts.js","sourceRoot":"","sources":["../../src/native/hosts.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,QAAQ,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACvC,OAAO,EAAE,QAAQ,EAAE,MAAM,mBAAmB,CAAC;AAE7C,MAAM,UAAU,GAAG,YAAY,CAAC;AAChC,MAAM,MAAM,GAAG,4BAA4B,CAAC;AAC5C,MAAM,KAAK,GAAG,+BAA+B,MAAM,EAAE,CAAC;AAEtD;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB;IACtC,MAAM,GAAG,GAAG,MAAM,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAChD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,6CAA6C,CAAC,CAAC;IACrF,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED,MAAM,UAAU,aAAa;IAC3B,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,UAAU,EAAE,MAAM,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3D,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa;IAC3B,IAAI,aAAa,EAAE;QAAE,OAAO;IAC5B,QAAQ,CACN,SAAS,KAAK,sBAAsB,UAAU,uBAAuB;QACrE,SAAS,KAAK,mBAAmB,UAAU,cAAc,EACzD,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC,aAAa,EAAE;QAAE,OAAO;IAC7B,sDAAsD;IACtD,IAAI,CAAC;QACH,QAAQ,CACN,uBAAuB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,UAAU,kBAAkB;YAC1F,oBAAoB,MAAM,CAAC,OAAO,CAAC,QAAQ,EAAE,MAAM,CAAC,OAAO,UAAU,EAAE,EACvE,EAAE,KAAK,EAAE,SAAS,EAAE,CACrB,CAAC;IACJ,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,QAAQ;IACtB,IAAI,CAAC;QACH,QAAQ,CAAC,6FAA6F,EAAE;YACtG,KAAK,EAAE,MAAM;SACd,CAAC,CAAC;IACL,CAAC;IAAC,MAAM,CAAC;QACP,uEAAuE;IACzE,CAAC;AACH,CAAC"}

package/dist/native/litellm.js

@@ -0,0 +1,103 @@
+import { execFileSync } from 'node:child_process';
+export function envVarForGateway(gateway) {
+    return `SONATA_KEY_${gateway.toUpperCase().replace(/-/g, '_')}`;
+}
+function litellmModelEntry(modelName, gateway, id, gateways) {
+    // An OAuth gateway is served by one of LiteLLM's own providers, which
+    // supplies the base URL, the bearer and any refresh or token exchange.
+    // Passing api_base or api_key here would override that and break it.
+    const auth = gateways[gateway].auth;
+    if (auth === 'codex-oauth') {
+        return {
+            model_name: modelName,
+            litellm_params: { model: `chatgpt/${id}` },
+            model_info: {
+                // Without this LiteLLM uses chat-completions and POSTs to the bare
+                // backend-api/codex/ URL, which serves the ChatGPT web app.
+                mode: 'responses',
+                // The Codex backend answers any `role: system` message with
+                // `{"detail":"System messages are not allowed"}` — a 400 naming
+                // neither the field nor the shape. LiteLLM's chatgpt provider does not
+                // normalize that itself: BerriAI/litellm#22968 reports it and its fix,
+                // PR #22967, was closed without merging, so 1.98.0 still emits the
+                // rejected role. Declaring the model as not supporting system messages
+                // routes the prompt through `map_system_message_pt`, which folds it in
+                // at LiteLLM's own layer rather than sonata rewriting the body.
+                //
+                // `flattenSystemBlocks` (src/native/router.ts) remains load-bearing:
+                // that helper concatenates onto message content and raises
+                // `can only concatenate list (not "str") to list` on Claude Code's
+                // block arrays (BerriAI/litellm#32904). Flattening to a string first
+                // is what keeps this off that crash path — the two fixes are a pair,
+                // and neither is sufficient alone.
+                supports_system_message: false,
+            },
+        };
+    }
+    if (auth === 'copilot-oauth') {
+        // Copilot speaks chat-completions, so it needs no mode override; the
+        // provider exchanges the GitHub token for a Copilot key itself.
+        return {
+            model_name: modelName,
+            litellm_params: { model: `github_copilot/${id}` },
+        };
+    }
+    if (gateways[gateway].wireFormat === 'anthropic') {
+        return {
+            model_name: modelName,
+            litellm_params: {
+                model: `anthropic/${id}`,
+                api_base: gateways[gateway].baseUrl,
+                api_key: `os.environ/${envVarForGateway(gateway)}`,
+            },
+        };
+    }
+    return {
+        model_name: modelName,
+        litellm_params: {
+            model: `openai/${id}`,
+            api_base: gateways[gateway].baseUrl,
+            api_key: `os.environ/${envVarForGateway(gateway)}`,
+        },
+    };
+}
+export function litellmConfig(native, masterKey, unifiedModels = {}) {
+    const modelList = Object.entries(native.models).map(([modelName, model]) => litellmModelEntry(modelName, model.gateway, model.id, native.gateways));
+    // Legacy native.models entries stay authoritative during migration: a
+    // unified [models] entry sharing a key with one is skipped rather than
+    // emitting a duplicate model_name LiteLLM would then pick between.
+    for (const [modelName, model] of Object.entries(unifiedModels)) {
+        if (modelName in native.models)
+            continue;
+        if (model.gateway === undefined || model.id === undefined)
+            continue;
+        modelList.push(litellmModelEntry(modelName, model.gateway, model.id, native.gateways));
+    }
+    return {
+        model_list: modelList,
+        // LiteLLM 1.82+ silently routes any `openai/<id>` model hit through its
+        // Anthropic /v1/messages passthrough to the OpenAI Responses API rather
+        // than chat/completions (see _should_route_to_responses_api in
+        // llms/anthropic/experimental_pass_through/messages/handler.py). Every
+        // api-key gateway sonata generates uses `openai/<id>`, and not every
+        // OpenAI-compatible backend implements the Responses API — acme's own
+        // proxy rejects the `output_text` content-block type Responses mode uses
+        // to replay a prior assistant turn, breaking any multi-turn conversation.
+        // This flag is LiteLLM's own documented opt-out.
+        litellm_settings: { drop_params: true, use_chat_completions_url_for_anthropic_messages: true },
+        general_settings: { master_key: masterKey },
+    };
+}
+/** LiteLLM accepts JSON config files, so keep serialization dependency-free and stable. */
+export function litellmConfigYaml(native, masterKey, unifiedModels = {}) {
+    return `${JSON.stringify(litellmConfig(native, masterKey, unifiedModels), null, 2)}\n`;
+}
+export function findLitellm() {
+    try {
+        return execFileSync('which', ['litellm'], { encoding: 'utf8' }).trim() || null;
+    }
+    catch {
+        return null;
+    }
+}
+//# sourceMappingURL=litellm.js.map

package/dist/native/litellm.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"litellm.js","sourceRoot":"","sources":["../../src/native/litellm.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAyBlD,MAAM,UAAU,gBAAgB,CAAC,OAAe;IAC9C,OAAO,cAAc,OAAO,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;AAClE,CAAC;AAED,SAAS,iBAAiB,CACxB,SAAiB,EACjB,OAAe,EACf,EAAU,EACV,QAAkC;IAElC,sEAAsE;IACtE,uEAAuE;IACvE,qEAAqE;IACrE,MAAM,IAAI,GAAG,QAAQ,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC;IACpC,IAAI,IAAI,KAAK,aAAa,EAAE,CAAC;QAC3B,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE;YAC1C,UAAU,EAAE;gBACV,mEAAmE;gBACnE,4DAA4D;gBAC5D,IAAI,EAAE,WAAW;gBACjB,4DAA4D;gBAC5D,gEAAgE;gBAChE,uEAAuE;gBACvE,uEAAuE;gBACvE,mEAAmE;gBACnE,uEAAuE;gBACvE,uEAAuE;gBACvE,gEAAgE;gBAChE,EAAE;gBACF,qEAAqE;gBACrE,2DAA2D;gBAC3D,mEAAmE;gBACnE,qEAAqE;gBACrE,qEAAqE;gBACrE,mCAAmC;gBACnC,uBAAuB,EAAE,KAAK;aAC/B;SACF,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;QAC7B,qEAAqE;QACrE,gEAAgE;QAChE,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE,EAAE,KAAK,EAAE,kBAAkB,EAAE,EAAE,EAAE;SAClD,CAAC;IACJ,CAAC;IACD,IAAI,QAAQ,CAAC,OAAO,CAAC,CAAC,UAAU,KAAK,WAAW,EAAE,CAAC;QACjD,OAAO;YACL,UAAU,EAAE,SAAS;YACrB,cAAc,EAAE;gBACd,KAAK,EAAE,aAAa,EAAE,EAAE;gBACxB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO;gBACnC,OAAO,EAAE,cAAc,gBAAgB,CAAC,OAAO,CAAC,EAAE;aACnD;SACF,CAAC;IACJ,CAAC;IACD,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,cAAc,EAAE;YACd,KAAK,EAAE,UAAU,EAAE,EAAE;YACrB,QAAQ,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,OAAO;YACnC,OAAO,EAAE,cAAc,gBAAgB,CAAC,OAAO,CAAC,EAAE;SACnD;KACF,CAAC;AACJ,CAAC;AAED,MAAM,UAAU,aAAa,CAC3B,MAAoB,EACpB,SAAiB,EACjB,gBAAoD,EAAE;IAEtD,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CACjD,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAC/F,CAAC;IAEF,sEAAsE;IACtE,uEAAuE;IACvE,mEAAmE;IACnE,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,aAAa,CAAC,EAAE,CAAC;QAC/D,IAAI,SAAS,IAAI,MAAM,CAAC,MAAM;YAAE,SAAS;QACzC,IAAI,KAAK,CAAC,OAAO,KAAK,SAAS,IAAI,KAAK,CAAC,EAAE,KAAK,SAAS;YAAE,SAAS;QACpE,SAAS,CAAC,IAAI,CAAC,iBAAiB,CAAC,SAAS,EAAE,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,EAAE,EAAE,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;IACzF,CAAC;IAED,OAAO;QACL,UAAU,EAAE,SAAS;QACrB,wEAAwE;QACxE,wEAAwE;QACxE,+DAA+D;QAC/D,uEAAuE;QACvE,qEAAqE;QACrE,sEAAsE;QACtE,yEAAyE;QACzE,0EAA0E;QAC1E,iDAAiD;QACjD,gBAAgB,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,+CAA+C,EAAE,IAAI,EAAE;QAC9F,gBAAgB,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE;KAC5C,CAAC;AACJ,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,iBAAiB,CAC/B,MAAoB,EACpB,SAAiB,EACjB,gBAAoD,EAAE;IAEtD,OAAO,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,MAAM,EAAE,SAAS,EAAE,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,OAAO,YAAY,CAAC,OAAO,EAAE,CAAC,SAAS,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,IAAI,CAAC;IACjF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC"}

package/dist/native/models.js

@@ -0,0 +1,96 @@
+/**
+ * Model discovery for BYOK — bringing a provider and a key, with no harness.
+ *
+ * Every harness path learns its models from a catalogue sonata can read locally
+ * (`opencode models`, `pi --list-models`, `reasonix doctor --json`). A provider
+ * the user names directly has no such catalogue, so the only place to ask is the
+ * provider itself: `GET <base>/models`, the OpenAI-compatible convention that
+ * every gateway in `WELL_KNOWN_PROVIDER_URLS` follows.
+ *
+ * It is a convention, not a guarantee. A provider may not implement it, may
+ * shape the payload differently, or may simply be unreachable — so `fetchModels`
+ * **never throws and never distinguishes those cases**: they all return `[]`, and
+ * the caller falls back to letting the user type ids. Reporting them separately
+ * would imply a difference the caller cannot act on.
+ */
+import { WELL_KNOWN_PROVIDER_URLS } from '../detect.js';
+/** Where a provider's model list lives, given its base url. */
+function modelsUrl(baseUrl) {
+    return `${baseUrl.replace(/\/+$/, '')}/models`;
+}
+/**
+ * The models a provider reports, or why it would not say.
+ *
+ * Timeout-bounded and non-throwing, matching `copilotTokenCanExchange`: an
+ * offline machine gets an answer rather than a hang.
+ */
+export async function fetchModels(baseUrl, apiKey, opts = {}) {
+    const doFetch = opts.fetch ?? fetch;
+    try {
+        const response = await doFetch(modelsUrl(baseUrl), {
+            headers: { Authorization: `Bearer ${apiKey}` },
+            signal: AbortSignal.timeout(opts.timeoutMs ?? 10_000),
+        });
+        if (response.status === 401 || response.status === 403) {
+            return { outcome: 'unauthorized', status: response.status };
+        }
+        if (!response.ok)
+            return { outcome: 'unreadable' };
+        const payload = await response.json();
+        const data = payload?.data;
+        if (!Array.isArray(data))
+            return { outcome: 'unreadable' };
+        const seen = new Set();
+        const models = [];
+        for (const entry of data) {
+            if (entry === null || typeof entry !== 'object')
+                continue;
+            const { id, name } = entry;
+            if (typeof id !== 'string' || id.trim() === '' || seen.has(id))
+                continue;
+            seen.add(id);
+            models.push(typeof name === 'string' && name.trim() !== '' ? { id, name } : { id });
+        }
+        return { outcome: 'ok', models };
+    }
+    catch {
+        // Refused, timed out, DNS failure, or a body that would not parse.
+        return { outcome: 'unreachable' };
+    }
+}
+/**
+ * Providers a user can name without having any harness installed.
+ *
+ * Deduplicated **by url, keeping the first name**: the underlying map lists
+ * `openai` before its `openai-codex` and `codex` aliases, so keep-first is what
+ * makes the picker say `openai`.
+ *
+ * `anthropic` is excluded. Every model it serves is `claude-*`, a prefix the
+ * router reserves for Anthropic and `parseConfig` refuses, so its catalogue
+ * filters to nothing — offering a provider that can yield no usable model is
+ * worse than not offering it.
+ */
+export function wellKnownProviders() {
+    const byUrl = new Map();
+    for (const [name, url] of Object.entries(WELL_KNOWN_PROVIDER_URLS)) {
+        if (name === 'anthropic')
+            continue;
+        if (!byUrl.has(url))
+            byUrl.set(url, name);
+    }
+    return [...byUrl.entries()]
+        .map(([url, name]) => ({ name, url }))
+        .sort((a, b) => a.name.localeCompare(b.name));
+}
+/**
+ * The config key for a BYOK model.
+ *
+ * Shared by the wizard and `cmdInit` on purpose: the wizard puts this key into
+ * `nativeKeys` and `cmdInit` looks the candidate up by it, so computing the
+ * formula twice is how the two silently stop agreeing. Slashes are flattened to
+ * dashes exactly as harness-discovered keys are.
+ */
+export function byokCandidateKey(gateway, id) {
+    return `${gateway}-${id}`.replace(/\//g, '-');
+}
+//# sourceMappingURL=models.js.map

package/dist/native/models.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"models.js","sourceRoot":"","sources":["../../src/native/models.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,wBAAwB,EAAE,MAAM,cAAc,CAAC;AA2BxD,+DAA+D;AAC/D,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,GAAG,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC;AACjD,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAe,EACf,MAAc,EACd,OAAqD,EAAE;IAEvD,MAAM,OAAO,GAAG,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC;IACpC,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,OAAO,CAAC,SAAS,CAAC,OAAO,CAAC,EAAE;YACjD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,MAAM,EAAE,EAAE;YAC9C,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,IAAI,CAAC,SAAS,IAAI,MAAM,CAAC;SACtD,CAAC,CAAC;QACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,EAAE,CAAC;YACvD,OAAO,EAAE,OAAO,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC;QAC9D,CAAC;QACD,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAEnD,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,EAAa,CAAC;QACjD,MAAM,IAAI,GAAI,OAA8B,EAAE,IAAI,CAAC;QACnD,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,CAAC;QAE3D,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;QAC/B,MAAM,MAAM,GAAmB,EAAE,CAAC;QAClC,KAAK,MAAM,KAAK,IAAI,IAAI,EAAE,CAAC;YACzB,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ;gBAAE,SAAS;YAC1D,MAAM,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,KAAyC,CAAC;YAC/D,IAAI,OAAO,EAAE,KAAK,QAAQ,IAAI,EAAE,CAAC,IAAI,EAAE,KAAK,EAAE,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBAAE,SAAS;YACzE,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;YACb,MAAM,CAAC,IAAI,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QACtF,CAAC;QACD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,mEAAmE;QACnE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACpC,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,KAAK,GAAG,IAAI,GAAG,EAAkB,CAAC;IACxC,KAAK,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,wBAAwB,CAAC,EAAE,CAAC;QACnE,IAAI,IAAI,KAAK,WAAW;YAAE,SAAS;QACnC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,GAAG,CAAC;YAAE,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAC5C,CAAC;IACD,OAAO,CAAC,GAAG,KAAK,CAAC,OAAO,EAAE,CAAC;SACxB,GAAG,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;SACrC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC;AAClD,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,OAAe,EAAE,EAAU;IAC1D,OAAO,GAAG,OAAO,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;AAChD,CAAC"}

package/dist/native/oauth-login.js

@@ -0,0 +1,112 @@
+import { execFileSync } from 'node:child_process';
+import { spawn } from 'node:child_process';
+import { createInterface } from 'node:readline';
+import { chmodSync, existsSync, mkdirSync, readFileSync } from 'node:fs';
+import { join } from 'node:path';
+/**
+ * Where a sonata-minted credential lives. Persistent, unlike serve's temp
+ * directory: LiteLLM refreshes tokens into these files, and Copilot's
+ * api-key.json is short-lived and re-exchanged in place. A temp directory
+ * throws every refresh away.
+ */
+export function credentialDir(home, gateway) {
+    return join(home, '.config/sonata/credentials', gateway);
+}
+export function tokenDirEnvVar(auth) {
+    return auth === 'copilot-oauth' ? 'GITHUB_COPILOT_TOKEN_DIR' : 'CHATGPT_TOKEN_DIR';
+}
+/**
+ * The file whose existence proves the login worked.
+ *
+ * For Copilot that is `api-key.json`, not `access-token`: only `get_api_key()`
+ * writes it, and only that call proves the GitHub token can actually exchange
+ * for a Copilot key. Probed 2026-08-22 - a `ghu_` token authenticates fine and
+ * still tells you nothing about entitlement.
+ */
+export function credentialFileFor(auth) {
+    return auth === 'copilot-oauth' ? 'api-key.json' : 'auth.json';
+}
+/**
+ * Never `_login()`: it returns a token and persists nothing, so the next call
+ * starts a second device flow against an empty directory. Copilot needs the
+ * `get_api_key()` follow-up because the device login and the Copilot exchange
+ * are separate calls.
+ */
+function scriptFor(auth) {
+    return auth === 'copilot-oauth'
+        ? 'from litellm.llms.github_copilot.authenticator import Authenticator\n' +
+            'a = Authenticator()\na.get_access_token()\na.get_api_key()\n'
+        : 'from litellm.llms.chatgpt.authenticator import Authenticator\n' +
+            'Authenticator().get_access_token()\n';
+}
+/**
+ * The interpreter that owns `litellm` is the one named in its shebang - a bare
+ * `python3` may be a different install with no litellm on its path.
+ */
+export function resolveInterpreter() {
+    const path = execFileSync('sh', ['-c', 'command -v litellm'], { encoding: 'utf8' }).trim();
+    if (path === '')
+        throw new Error('litellm is not installed');
+    const first = readFileSync(path, 'utf8').split('\n', 1)[0] ?? '';
+    if (!first.startsWith('#!'))
+        throw new Error(`litellm at ${path} has no interpreter line`);
+    return first.slice(2).trim();
+}
+export async function loginGateway(opts) {
+    let interpreter;
+    try {
+        interpreter = opts.interpreter ?? resolveInterpreter();
+    }
+    catch (err) {
+        return { ok: false, problem: `${err.message}. Install it: pip install 'litellm[proxy]'` };
+    }
+    const dir = credentialDir(opts.home, opts.gateway);
+    mkdirSync(dir, { recursive: true, mode: 0o700 });
+    // PATH plus the one token-directory variable. No other parent value is
+    // forwarded, matching how serve builds childEnv. FAKE_MODE only crosses over
+    // when a test-injected interpreter is in play, so production can never leak
+    // it through an ambient env var.
+    const env = process.env.PATH ? { PATH: process.env.PATH } : {};
+    env[tokenDirEnvVar(opts.auth)] = dir;
+    if (opts.interpreter && process.env.FAKE_MODE)
+        env.FAKE_MODE = process.env.FAKE_MODE;
+    if (opts.signal?.aborted)
+        return { ok: false, problem: 'login cancelled' };
+    return await new Promise((resolve) => {
+        let child;
+        try {
+            child = spawn(interpreter, ['-c', scriptFor(opts.auth)], { env, stdio: ['ignore', 'pipe', 'pipe'] });
+        }
+        catch {
+            return resolve({ ok: false, problem: `could not run litellm's interpreter ${interpreter}` });
+        }
+        let cancelled = false;
+        const onAbort = () => { cancelled = true; child.kill('SIGTERM'); };
+        opts.signal?.addEventListener('abort', onAbort, { once: true });
+        child.on('error', () => {
+            resolve({ ok: false, problem: `could not run litellm's interpreter ${interpreter}` });
+        });
+        // Line by line, so the device code reaches the user the instant it is
+        // printed - Copilot only polls for 60 seconds.
+        for (const stream of [child.stdout, child.stderr]) {
+            createInterface({ input: stream }).on('line', (text) => opts.progress.line(text));
+        }
+        child.on('close', (code) => {
+            opts.signal?.removeEventListener('abort', onAbort);
+            if (cancelled)
+                return resolve({ ok: false, problem: 'login cancelled' });
+            if (code !== 0)
+                return resolve({ ok: false, problem: `litellm's authenticator exited ${code}` });
+            // An exit code alone is not evidence.
+            const credentialPath = join(dir, credentialFileFor(opts.auth));
+            if (!existsSync(credentialPath)) {
+                return resolve({ ok: false, problem: 'the login reported success but wrote no credential' });
+            }
+            // LiteLLM writes with the process umask, commonly 0644 - fix it up rather
+            // than trust an interpreter we don't control to have written 0600.
+            chmodSync(credentialPath, 0o600);
+            resolve({ ok: true });
+        });
+    });
+}
+//# sourceMappingURL=oauth-login.js.map

package/dist/native/oauth-login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth-login.js","sourceRoot":"","sources":["../../src/native/oauth-login.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAC;AAClD,OAAO,EAAE,KAAK,EAAE,MAAM,oBAAoB,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,eAAe,CAAC;AAChD,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAC;AACzE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAejC;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY,EAAE,OAAe;IACzD,OAAO,IAAI,CAAC,IAAI,EAAE,4BAA4B,EAAE,OAAO,CAAC,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,IAAuB;IACpD,OAAO,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,0BAA0B,CAAC,CAAC,CAAC,mBAAmB,CAAC;AACrF,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAAuB;IACvD,OAAO,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,WAAW,CAAC;AACjE,CAAC;AAED;;;;;GAKG;AACH,SAAS,SAAS,CAAC,IAAuB;IACxC,OAAO,IAAI,KAAK,eAAe;QAC7B,CAAC,CAAC,uEAAuE;YACvE,8DAA8D;QAChE,CAAC,CAAC,gEAAgE;YAChE,sCAAsC,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,oBAAoB,CAAC,EAAE,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC3F,IAAI,IAAI,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,IAAI,CAAC,KAAK,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,cAAc,IAAI,0BAA0B,CAAC,CAAC;IAC3F,OAAO,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;AAC/B,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,IAQlC;IACC,IAAI,WAAmB,CAAC;IACxB,IAAI,CAAC;QACH,WAAW,GAAG,IAAI,CAAC,WAAW,IAAI,kBAAkB,EAAE,CAAC;IACzD,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,GAAI,GAAa,CAAC,OAAO,4CAA4C,EAAE,CAAC;IACvG,CAAC;IAED,MAAM,GAAG,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,CAAC;IACnD,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAEjD,uEAAuE;IACvE,6EAA6E;IAC7E,4EAA4E;IAC5E,iCAAiC;IACjC,MAAM,GAAG,GAAsB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;IAClF,GAAG,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC;IACrC,IAAI,IAAI,CAAC,WAAW,IAAI,OAAO,CAAC,GAAG,CAAC,SAAS;QAAE,GAAG,CAAC,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC;IAErF,IAAI,IAAI,CAAC,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC;IAE3E,OAAO,MAAM,IAAI,OAAO,CAAc,CAAC,OAAO,EAAE,EAAE;QAChD,IAAI,KAAK,CAAC;QACV,IAAI,CAAC;YACH,KAAK,GAAG,KAAK,CAAC,WAAW,EAAE,CAAC,IAAI,EAAE,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,EAAE,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,CAAC,CAAC;QACvG,CAAC;QAAC,MAAM,CAAC;YACP,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,WAAW,EAAE,EAAE,CAAC,CAAC;QAC/F,CAAC;QAED,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,MAAM,OAAO,GAAG,GAAG,EAAE,GAAG,SAAS,GAAG,IAAI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC;QACnE,IAAI,CAAC,MAAM,EAAE,gBAAgB,CAAC,OAAO,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;QAEhE,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,GAAG,EAAE;YACrB,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,uCAAuC,WAAW,EAAE,EAAE,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;QAEH,sEAAsE;QACtE,+CAA+C;QAC/C,KAAK,MAAM,MAAM,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;YAClD,eAAe,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,CAAC,MAAM,EAAE,CAAC,IAAY,EAAE,EAAE,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;QAC5F,CAAC;QAED,KAAK,CAAC,EAAE,CAAC,OAAO,EAAE,CAAC,IAAmB,EAAE,EAAE;YACxC,IAAI,CAAC,MAAM,EAAE,mBAAmB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;YACnD,IAAI,SAAS;gBAAE,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,iBAAiB,EAAE,CAAC,CAAC;YACzE,IAAI,IAAI,KAAK,CAAC;gBAAE,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,kCAAkC,IAAI,EAAE,EAAE,CAAC,CAAC;YACjG,sCAAsC;YACtC,MAAM,cAAc,GAAG,IAAI,CAAC,GAAG,EAAE,iBAAiB,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC;YAC/D,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,EAAE,CAAC;gBAChC,OAAO,OAAO,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC,CAAC;YAC/F,CAAC;YACD,0EAA0E;YAC1E,mEAAmE;YACnE,SAAS,CAAC,cAAc,EAAE,KAAK,CAAC,CAAC;YACjC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC;QACxB,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC"}