aegis-desktop 1.0.0 → 1.0.2

package/vendor/attest.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/authorship-key.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/auto-provision.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/brain-catalog.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/byok-catalog.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/credentials.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/device-fingerprint.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/env-file.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/fingerprint.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/foreign-memory.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/hooks.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/model-discovery.js

@@ -0,0 +1,332 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
+'use strict';
+
+/**
+ * Ask the VENDOR what it serves, so declaring a model stops depending on the
+ * user remembering an id.
+ *
+ * `client/user-models.js` is how a model the AEGIS catalog does not name
+ * becomes a pickable row, and `/model-add` is how a host writes one — but a
+ * path whose only input is "type the vendor's model id" moves the release-lag
+ * problem onto the user's memory instead of removing it. The cost is visible
+ * in this repo: `client/byok-catalog.js` carries a hand-copied, hand-verified
+ * list of Anthropic's ids ("Verified live 2026-10-11 against `GET
+ * https://api.anthropic.com/v1/models`") plus a paragraph on which id is
+ * retired — a chore the list endpoint answers in one request, and which goes
+ * stale the day the vendor ships.
+ *
+ * So this module asks. It is pure in the parts that matter:
+ *   - no filesystem and no key store: the caller resolves the key and passes
+ *     it in, exactly as the callers of `env-file.js` already do;
+ *   - no network at load time and no module-scope `process` read;
+ *   - `fetchImpl` is injectable, so every test runs against a stub;
+ *   - it NEVER throws. A wrong key, a blocked network or a vendor changing
+ *     its response shape returns `{ ok: false, error }` for the caller to
+ *     report. Discovery sits on top of a path that already works by typing
+ *     the id, so a failure here must not be able to take that path down.
+ *
+ * Only ids `client/user-models.js` would accept come back, because the store
+ * that is about to be written is the one with the rule — a discovery list that
+ * offered an id `/model-add` then refused would be worse than no list.
+ */
+
+const { sanitizeModel } = require('./user-models.js');
+
+/** How long a vendor gets to answer before discovery stands down. */
+const DISCOVERY_TIMEOUT_MS = 8000;
+
+/** `Authorization: Bearer <key>` — what most OpenAI-compatible vendors take. */
+function bearer(key) {
+  return { authorization: `Bearer ${key}` };
+}
+
+/**
+ * The providers whose OWN list endpoint this module knows, by the id the BYOK
+ * relay uses. A provider that is not here is not an error: it is a provider
+ * whose list is either undocumented or has no stable endpoint, and the caller
+ * falls back to asking the user to type the id.
+ *
+ * Keys are lowercase provider ids; `aliases` maps the other spellings a user
+ * might type (`/model-discover xai` and `/model-discover grok` must hit the
+ * same vendor).
+ */
+const ENDPOINTS = Object.freeze({
+  anthropic: Object.freeze({
+    url: 'https://api.anthropic.com/v1/models',
+    headers: (key) => ({ 'x-api-key': key, 'anthropic-version': '2023-06-01' }),
+    note: 'the vendor requires anthropic-version; the console key is sent as x-api-key',
+  }),
+  openai: Object.freeze({
+    url: 'https://api.openai.com/v1/models',
+    headers: bearer,
+    note: 'OpenAI-compatible: { data: [ { id } ] }',
+  }),
+  deepseek: Object.freeze({
+    url: 'https://api.deepseek.com/models',
+    headers: bearer,
+    note: 'OpenAI-compatible; /v1/models answers the same list',
+  }),
+  grok: Object.freeze({
+    url: 'https://api.x.ai/v1/models',
+    headers: bearer,
+    note: 'xAI answers on /v1/models under the vendor id grok',
+  }),
+  gemini: Object.freeze({
+    url: 'https://generativelanguage.googleapis.com/v1beta/models',
+    headers: () => ({}),
+    query: (key) => ({ key }),
+    note: 'the key travels in the query string; ids come back as "models/<id>"',
+  }),
+  groq: Object.freeze({
+    url: 'https://api.groq.com/openai/v1/models',
+    headers: bearer,
+    note: 'OpenAI-compatible under /openai/v1',
+  }),
+  mistral: Object.freeze({
+    url: 'https://api.mistral.ai/v1/models',
+    headers: bearer,
+    note: 'OpenAI-compatible',
+  }),
+  openrouter: Object.freeze({
+    url: 'https://openrouter.ai/api/v1/models',
+    headers: bearer,
+    note: 'OpenAI-compatible; ids are prefixed "vendor/model"',
+  }),
+  together: Object.freeze({
+    url: 'https://api.together.xyz/v1/models',
+    headers: bearer,
+    note: 'OpenAI-compatible',
+  }),
+});
+
+/** Other spellings a user types for a provider this module knows. */
+const ALIASES = Object.freeze({
+  'x.ai': 'grok',
+  xai: 'grok',
+  'google': 'gemini',
+  'google-ai': 'gemini',
+  'googleai': 'gemini',
+  'open-ai': 'openai',
+  'deep-seek': 'deepseek',
+});
+
+/**
+ * The families that are NOT chat models, so a picker is not 400 lines of
+ * embedding rows. These are not dropped — they come back in `others`, because
+ * "the vendor lists 60 ids and the picker showed 12" is a fact the user is
+ * owed, not a silent filter.
+ */
+const NON_CHAT_RE = /embed|whisper|\btts\b|dall-e|moderation|rerank|imagen|\bveo\b|\baqa\b|transcribe|audio|speech|synthia|guard-content/i;
+
+/** The frozen endpoint for a provider id (or `null` when unknown). */
+function endpointFor(provider) {
+  const raw = String(provider == null ? '' : provider).trim().toLowerCase();
+  if (!raw) return null;
+  const id = ALIASES[raw] || raw;
+  const entry = ENDPOINTS[id];
+  return entry ? Object.freeze({ id, ...entry }) : null;
+}
+
+/** True when discovery knows how to ask this provider at all. */
+function canDiscover(provider) {
+  return Boolean(endpointFor(provider));
+}
+
+/** Every provider id discovery can ask, sorted — for a hint line. */
+function discoverableProviders() {
+  return Object.keys(ENDPOINTS).sort();
+}
+
+/** True when a vendor id names something other than a chat model. */
+function looksNonChat(id) {
+  return NON_CHAT_RE.test(String(id));
+}
+
+/**
+ * Pull candidate ids out of whatever shape the vendor answered with.
+ *
+ * Handled: `{ data: [ { id } ] }` (OpenAI, DeepSeek, xAI, Groq, Mistral,
+ * OpenRouter, Together), Anthropic's identical `{ data: [ { id } ] }`, Gemini's
+ * `{ models: [ { name: "models/<id>" } ] }`, and a bare array of strings or
+ * objects — vendors that answer unversioned occasionally answer either.
+ *
+ * Returns `null` when the payload has no list at all, which the caller reports
+ * as "the vendor answered in a shape this client does not know" rather than as
+ * an empty catalog (an empty list is a real, and very different, answer).
+ */
+function idsFromPayload(payload) {
+  const rows = Array.isArray(payload)
+    ? payload
+    : Array.isArray(payload && payload.data)
+      ? payload.data
+      : Array.isArray(payload && payload.models)
+        ? payload.models
+        : null;
+  if (!rows) return null;
+  const ids = [];
+  const others = [];
+  for (const row of rows) {
+    if (row == null) continue;
+    const raw = typeof row === 'string' ? row : row.id || row.name || row.model;
+    if (typeof raw !== 'string' || !raw.trim()) continue;
+    // Gemini names rows "models/<id>"; the vendor id is the part after it.
+    const candidate = raw.trim().replace(/^models\//, '');
+    // A row that declares the methods it supports and does NOT list
+    // generateContent is not a chat model (Imagen says "predict"). That is a
+    // stronger signal than the name, so it is used before the name is.
+    const methods = row && Array.isArray(row.supportedGenerationMethods)
+      ? row.supportedGenerationMethods
+      : row && Array.isArray(row.supported_actions)
+        ? row.supported_actions
+        : null;
+    const chatty = methods ? methods.includes('generateContent') || methods.includes('generate') : null;
+    let id;
+    try {
+      id = sanitizeModel(candidate);
+    } catch {
+      continue; // not a string the declaration store would accept either
+    }
+    if (chatty === false || (chatty === null && looksNonChat(id))) others.push(id);
+    else ids.push(id);
+  }
+  const uniq = (list) => [...new Set(list)];
+  return { ids: uniq(ids), others: uniq(others).filter((id) => !ids.includes(id)) };
+}
+
+/**
+ * Ask a provider what it serves.
+ *
+ * `opts.key` is the user's own vendor key — required, and never read or logged
+ * here. `opts.fetchImpl` defaults to the global fetch. `opts.timeoutMs` bounds
+ * the request; the timer is always cleared, and the caller's `opts.signal` is
+ * honoured so a cancelled turn cancels the request.
+ *
+ * Resolves — never rejects — with one of:
+ *   { ok: true,  provider, endpoint, ids, others, count }
+ *   { ok: false, provider, supported, error }
+ * `supported: false` means this module has no endpoint for that vendor, which
+ * is a different thing from a vendor that refused the key.
+ */
+async function discoverModels(provider, opts = {}) {
+  const entry = endpointFor(provider);
+  const asked = String(provider == null ? '' : provider).trim().toLowerCase();
+  const key = String(opts.key == null ? '' : opts.key).trim();
+  if (!entry) {
+    return {
+      ok: false,
+      provider: asked,
+      supported: false,
+      error: `${asked || 'that provider'} has no model-list endpoint this client knows`,
+    };
+  }
+  if (!key) {
+    return { ok: false, provider: entry.id, supported: true, error: `no ${entry.id} key on this machine` };
+  }
+  const fetchImpl = opts.fetchImpl || (typeof fetch === 'function' ? fetch : null);
+  if (!fetchImpl) {
+    return { ok: false, provider: entry.id, supported: true, error: 'no fetch implementation available' };
+  }
+  const timeoutMs = Number.isFinite(opts.timeoutMs) ? opts.timeoutMs : DISCOVERY_TIMEOUT_MS;
+  const controller = typeof AbortController === 'function' ? new AbortController() : null;
+  const timer = controller ? setTimeout(() => controller.abort(), timeoutMs) : null;
+  // Deliberately NOT unref'd: the timer is the thing that must fire when a
+  // vendor goes quiet. An unref'd timer in a process whose only other pending
+  // work is the await would be collected before it fired, and the hang this
+  // timeout exists to prevent is exactly what that produces. It is cleared in
+  // the `finally` below, so it never outlives the request either way.
+  const onAbort = () => controller && controller.abort();
+  if (controller && opts.signal) {
+    if (opts.signal.aborted) onAbort();
+    else if (typeof opts.signal.addEventListener === 'function') opts.signal.addEventListener('abort', onAbort, { once: true });
+  }
+  try {
+    const url = new URL(entry.url);
+    if (typeof entry.query === 'function') {
+      for (const [k, v] of Object.entries(entry.query(key) || {})) url.searchParams.set(k, v);
+    }
+    const headers = { accept: 'application/json' };
+    for (const [k, v] of Object.entries(entry.headers(key) || {})) {
+      // Vendors that want the header spelled a particular way get it; the
+      // table stores the canonical lowercase name.
+      headers[k === 'authorization' ? 'Authorization' : k] = v;
+    }
+    const res = await fetchImpl(url.toString(), {
+      method: 'GET',
+      headers,
+      signal: controller ? controller.signal : undefined,
+    });
+    const status = res && typeof res.status === 'number' ? res.status : 0;
+    if (!res || (typeof res.ok === 'boolean' && !res.ok)) {
+      // 401/403 is the common case and deserves its own sentence: the fix is
+      // a different key, not a different provider.
+      const why = status === 401 || status === 403
+        ? `the vendor refused the key (HTTP ${status})`
+        : status === 404
+          ? `the vendor has no model list at ${url.pathname} (HTTP 404)`
+          : `the vendor answered HTTP ${status || 'nothing'}`;
+      return { ok: false, provider: entry.id, supported: true, status, error: why };
+    }
+    let payload;
+    try {
+      payload = await res.json();
+    } catch (err) {
+      return {
+        ok: false,
+        provider: entry.id,
+        supported: true,
+        status,
+        error: `the vendor's reply was not JSON (${(err && err.message) || err})`,
+      };
+    }
+    const parsed = idsFromPayload(payload);
+    if (!parsed) {
+      return {
+        ok: false,
+        provider: entry.id,
+        supported: true,
+        status,
+        error: `the vendor answered in a shape this client does not know (no "data" or "models" list)`,
+      };
+    }
+    return {
+      ok: true,
+      provider: entry.id,
+      endpoint: entry.url,
+      ids: parsed.ids,
+      others: parsed.others,
+      count: parsed.ids.length,
+    };
+  } catch (err) {
+    const aborted = (err && (err.name === 'AbortError' || err.code === 'ABORT_ERR')) || (controller && controller.signal.aborted);
+    return {
+      ok: false,
+      provider: entry.id,
+      supported: true,
+      error: aborted
+        ? `the vendor did not answer within ${timeoutMs} ms`
+        : `could not reach the vendor (${(err && err.message) || err})`,
+    };
+  } finally {
+    if (timer) clearTimeout(timer);
+    if (controller && opts.signal && typeof opts.signal.removeEventListener === 'function') {
+      opts.signal.removeEventListener('abort', onAbort);
+    }
+  }
+}
+
+module.exports = {
+  DISCOVERY_TIMEOUT_MS,
+  ENDPOINTS,
+  ALIASES,
+  NON_CHAT_RE,
+  endpointFor,
+  canDiscover,
+  discoverableProviders,
+  looksNonChat,
+  idsFromPayload,
+  discoverModels,
+};

package/vendor/platform.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/prefs.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/presence-constants.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/presence.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/record-vault.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/session-store.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/topup.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/touch.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**

package/vendor/update.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 /**
  * "There is a newer version" — the notice this CLI never had.
  *

package/vendor/user-models.js

@@ -1,3 +1,8 @@
+// SPDX-License-Identifier: AGPL-3.0-or-later
+// Copyright (C) 2026 Niklas Borneklint — AEGIS Code (aegiscode) / Aegiscloud.
+// AEGIS Code (aegiscode) — source: https://github.com/aegisinfo/aegiscode-plugin
+// Conveying a modified copy, or running one as a network service, owes the
+// corresponding source under this licence (§5/§13) — see LICENSING.md.
 'use strict';
 
 /**