cartethyia 2.4.6 → 2.5.0

package/src/console/providers/catalog/contracts.ts

@@ -87,6 +87,9 @@ const VALID_SERVICE_KINDS: Record<ServiceKind, true> = {
   websearch: true,
   imageGeneration: true,
   videoGeneration: true,
+  embedding: true,
+  audioTranscription: true,
+  audioSpeech: true,
 };
 
 export function isServiceKind(value: unknown): value is ServiceKind {
@@ -337,6 +340,24 @@ export interface ModelCatalogEntry {
    * so an operator can tell a measured window from a stand-in.
    */
   limitsEstimated?: boolean;
+  /**
+   * True when the provider refuses this model on a free plan, so the surface
+   * can mark it rather than letting an operator discover it from a dispatch
+   * failure.
+   *
+   * Absence is "tier unknown", not "served on a free plan" — most providers
+   * publish nothing about plan access, and a pill that renders unknown as free
+   * would mislabel every one of them.
+   */
+  proOnly?: boolean;
+  /**
+   * True when the provider publishes this row as free, so the surface can show
+   * the tier instead of an operator discovering it from the pricing.
+   *
+   * Absence is "tier unknown", not "not free": the flag is only set where the
+   * provider's own model directory states it.
+   */
+  freeTier?: boolean;
 }
 export interface FlatModelCatalogEntry {
   readonly providerId: string;
@@ -633,6 +654,16 @@ export interface ProviderResponse {
      * console offers an import path alongside the redirect and device flows.
      */
     readonly import: boolean;
+    /**
+     * The imported credential is a refreshable token pair rather than a static
+     * key: the client can both import and refresh.
+     *
+     * Import-only clients otherwise look identical to API-key providers — no
+     * redirect, no device code — and were grouped with them, which filed a
+     * refreshable OAuth account under "API Key Providers" where nothing
+     * explains that it expires and renews.
+     */
+    readonly refreshable: boolean;
     /** Fields the browser flow must collect before it starts. */
     readonly browserLoginFields: readonly ProviderLoginField[];
     /** Fields the device flow must collect before it starts. */

package/src/console/providers/catalog/provider-operations.ts

@@ -191,6 +191,14 @@ async function attachProviderCapabilities(
       // one, so the dashboard never renders a form whose submit the server
       // would refuse.
       import: typeof client.importCredential === "function",
+      // Both halves are required: an import-only client that cannot refresh
+      // (Alibaba Coding Plan, Cloudflare AI) stores a durable static key, while
+      // one that can (Trae) stores a token pair that expires and renews. The
+      // refresher comes from the registry rather than the login client because
+      // that is where `loadAuthentication` registers it.
+      refreshable:
+        typeof client.importCredential === "function" &&
+        (await registry.resolveRefresher(response.providerId)) !== undefined,
       browserLoginFields: (client.browserLoginFields ?? []).map(toProviderLoginField),
       deviceLoginFields: (client.deviceLoginFields ?? []).map(toProviderLoginField),
       importFields: (client.importFields ?? []).map(toProviderLoginField),