cartethyia 2.5.10 → 2.6.0

package/src/providers/integrations/kilo/kilo.ts

@@ -1,152 +1,152 @@
-/**
- * Kilo Code adapter.
- *
- * Kilo Code resells the OpenRouter catalog behind a bearer device token on an
- * OpenAI-compatible chat surface, so this adapter reuses the shared factory for
- * payload translation, transport, and SSE decoding.
- *
- * One thing sits outside the declarative `ApiKeyProviderSpec`: the stored
- * credential is a JSON envelope (`{ accessToken, orgId }`) because the gateway
- * scopes every request to the account's organization and the console stores one
- * opaque string per account. The factory forwards that string as the bearer
- * verbatim, so the envelope is decoded at the auth boundary here — the same
- * arrangement `kimi/kimi.ts` uses for its own envelope credential.
- *
- * The base URL is the completions path itself, because that is the path Kilo
- * Code publishes (`/api/openrouter/chat/completions`) and it is not derivable
- * from an origin plus a wire-family suffix.
- */
-import { defineModel } from "../../provider-model-definition";
-import { openrouterFreeRoster } from "../../discovery/openrouter-free-roster";
-import type { ModelDefinition } from "../../provider-model-definition";
-import type { ProviderAdapter, ProviderDispatchContext, ProviderDispatchTarget } from "../../provider-contracts";
-import type { CanonicalRequest } from "../../../protocol/canonical-model";
-import { OpenAICompatibleAdapter, withBearerAuthentication } from "../../adapters/compatible-adapter";
-import { providerBaseUrl } from "../../provider-metadata";
-import { decodeKiloCredential } from "../../../security/credential-codec";
-
-export const KILO_PROVIDER_ID = "kilo" as const;
-export const KILO_BASE_URL = providerBaseUrl("kilo");
-
-/**
- * Endpoint path recorded on this provider's model rows and used by the adapter.
- *
- * The base URL carries Kilo Code's API prefix (`/api/openrouter`), so this is
- * the wire suffix that completes it — the same split Cline uses for
- * `/api/v1` + `/chat/completions`.
- */
-export const KILO_ENDPOINT_PATH = "/chat/completions" as const;
-
-interface KiloModelOptions {
-  readonly vision?: boolean;
-  readonly document?: boolean;
-  readonly audio?: boolean;
-  readonly reasoning?: boolean;
-  readonly toolCall?: boolean;
-}
-
-function kiloModel(
-  modelId: string,
-  contextLimit: number,
-  outputLimit: number,
-  options: KiloModelOptions = {},
-): ModelDefinition {
-  return defineModel({
-    id: modelId,
-    providerId: KILO_PROVIDER_ID,
-    wireFamily: "chat",
-    endpoint: KILO_ENDPOINT_PATH,
-    ctx: contextLimit,
-    out: outputLimit,
-    vision: options.vision ?? false,
-    document: options.document ?? false,
-    audio: options.audio ?? false,
-    reasoning: options.reasoning ?? false,
-    toolCall: options.toolCall ?? true,
-  });
-}
-
-/**
- * Static fallback catalog, read from the live `/api/gateway/models` directory.
- *
- * Live discovery replaces this list whenever an account is available, so these
- * rows are the offline floor: the gateway's own routing aliases plus one
- * current model per family it resells. Limits and capability come from the
- * directory entry's own `top_provider` / `architecture` /
- * `supported_parameters` fields rather than from the base catalog, which prices
- * the underlying model and not this reseller's serving.
- */
-export const KILO_MODELS: readonly ModelDefinition[] = [
-  // Three routers, and nothing else. A committed catalog of specific ids was a
-  // snapshot of one afternoon: this provider resells the OpenRouter catalog,
-  // which adds and pulls models within days, so discovery is the authority and
-  // every hand-kept row outside these drifts out of truth.
-  //
-  // `kilo-auto/free` bills zero and `kilo-auto/small` bills a fraction of a
-  // cent; both route on the provider's own side, so their limits are the
-  // window the router may select into rather than one model's.
-  kiloModel("kilo-auto/free", 256_000, 32_768, { reasoning: true }),
-  kiloModel("kilo-auto/small", 262_144, 32_768, { vision: true, reasoning: true }),
-];
-
-/**
- * The shared free roster, spelled for this provider's endpoint.
- *
- * The same 17 `:free` ids Cline and OpenRouter serve, because this is the same
- * catalog behind a different origin. Kept separate from `KILO_MODELS` so the
- * free tier is its own statement: those three rows are routers, these are the
- * zero-cost models, and the model list groups them differently.
- */
-export const KILO_FREE_MODELS: readonly ModelDefinition[] = openrouterFreeRoster({
-  providerId: KILO_PROVIDER_ID,
-  endpoint: KILO_ENDPOINT_PATH,
-});
-
-/**
- * Adapter that decodes the credential envelope before the shared pipeline
- * authenticates the request.
- *
- * `prepareHeaders` is corrected rather than rebuilt: every other header the
- * factory contributes (content type, gateway identity, operator custom headers,
- * route user-agent) stays exactly as every other provider gets it.
- */
-class KiloAdapter extends OpenAICompatibleAdapter {
-  constructor(fetchImpl?: typeof fetch) {
-    super(
-      withBearerAuthentication({
-        provider_id: KILO_PROVIDER_ID,
-        base_url: KILO_BASE_URL,
-        endpoint_paths_by_wire_family: { chat: KILO_ENDPOINT_PATH },
-        ...(fetchImpl ? { fetchImpl } : {}),
-      }),
-    );
-  }
-
-  protected override async prepareHeaders(
-    context: ProviderDispatchContext,
-    request: CanonicalRequest,
-    candidate: ProviderDispatchTarget,
-  ): Promise<Record<string, string>> {
-    const headers = await super.prepareHeaders(context, request, candidate);
-    const secret = context.credential.secret;
-    if (secret === undefined || secret.length === 0) return headers;
-    // A credential that does not decode is left as the factory sent it: the
-    // request then fails closed at the upstream auth boundary, and the parse
-    // error belongs to the credential boundary rather than to this hook.
-    let credential: ReturnType<typeof decodeKiloCredential>;
-    try {
-      credential = decodeKiloCredential(secret);
-    } catch {
-      return headers;
-    }
-    headers.authorization = `Bearer ${credential.accessToken}`;
-    // The upstream's own header name, not ours: renaming the Cartethyia
-    // provider id does not rename a field the upstream reads.
-    if (credential.orgId !== undefined) headers["X-Kilocode-OrganizationID"] = credential.orgId;
-    return headers;
-  }
-}
-
-/** Kilo Code provider adapter. */
-export const kiloAdapter: ProviderAdapter = new KiloAdapter();
-
+/**
+ * Kilo Code adapter.
+ *
+ * Kilo Code resells the OpenRouter catalog behind a bearer device token on an
+ * OpenAI-compatible chat surface, so this adapter reuses the shared factory for
+ * payload translation, transport, and SSE decoding.
+ *
+ * One thing sits outside the declarative `ApiKeyProviderSpec`: the stored
+ * credential is a JSON envelope (`{ accessToken, orgId }`) because the gateway
+ * scopes every request to the account's organization and the console stores one
+ * opaque string per account. The factory forwards that string as the bearer
+ * verbatim, so the envelope is decoded at the auth boundary here — the same
+ * arrangement `kimi/kimi.ts` uses for its own envelope credential.
+ *
+ * The base URL is the completions path itself, because that is the path Kilo
+ * Code publishes (`/api/openrouter/chat/completions`) and it is not derivable
+ * from an origin plus a wire-family suffix.
+ */
+import { defineModel } from "../../provider-model-definition";
+import { openrouterFreeRoster } from "../../discovery/openrouter-free-roster";
+import type { ModelDefinition } from "../../provider-model-definition";
+import type { ProviderAdapter, ProviderDispatchContext, ProviderDispatchTarget } from "../../provider-contracts";
+import type { CanonicalRequest } from "../../../protocol/canonical-model";
+import { OpenAICompatibleAdapter, withBearerAuthentication } from "../../adapters/compatible-adapter";
+import { providerBaseUrl } from "../../provider-metadata";
+import { decodeKiloCredential } from "../../../security/credential-codec";
+
+export const KILO_PROVIDER_ID = "kilo" as const;
+export const KILO_BASE_URL = providerBaseUrl("kilo");
+
+/**
+ * Endpoint path recorded on this provider's model rows and used by the adapter.
+ *
+ * The base URL carries Kilo Code's API prefix (`/api/openrouter`), so this is
+ * the wire suffix that completes it — the same split Cline uses for
+ * `/api/v1` + `/chat/completions`.
+ */
+export const KILO_ENDPOINT_PATH = "/chat/completions" as const;
+
+interface KiloModelOptions {
+  readonly vision?: boolean;
+  readonly document?: boolean;
+  readonly audio?: boolean;
+  readonly reasoning?: boolean;
+  readonly toolCall?: boolean;
+}
+
+function kiloModel(
+  modelId: string,
+  contextLimit: number,
+  outputLimit: number,
+  options: KiloModelOptions = {},
+): ModelDefinition {
+  return defineModel({
+    id: modelId,
+    providerId: KILO_PROVIDER_ID,
+    wireFamily: "chat",
+    endpoint: KILO_ENDPOINT_PATH,
+    ctx: contextLimit,
+    out: outputLimit,
+    vision: options.vision ?? false,
+    document: options.document ?? false,
+    audio: options.audio ?? false,
+    reasoning: options.reasoning ?? false,
+    toolCall: options.toolCall ?? true,
+  });
+}
+
+/**
+ * Static fallback catalog, read from the live `/api/gateway/models` directory.
+ *
+ * Live discovery replaces this list whenever an account is available, so these
+ * rows are the offline floor: the gateway's own routing aliases plus one
+ * current model per family it resells. Limits and capability come from the
+ * directory entry's own `top_provider` / `architecture` /
+ * `supported_parameters` fields rather than from the base catalog, which prices
+ * the underlying model and not this reseller's serving.
+ */
+export const KILO_MODELS: readonly ModelDefinition[] = [
+  // Three routers, and nothing else. A committed catalog of specific ids was a
+  // snapshot of one afternoon: this provider resells the OpenRouter catalog,
+  // which adds and pulls models within days, so discovery is the authority and
+  // every hand-kept row outside these drifts out of truth.
+  //
+  // `kilo-auto/free` bills zero and `kilo-auto/small` bills a fraction of a
+  // cent; both route on the provider's own side, so their limits are the
+  // window the router may select into rather than one model's.
+  kiloModel("kilo-auto/free", 256_000, 32_768, { reasoning: true }),
+  kiloModel("kilo-auto/small", 262_144, 32_768, { vision: true, reasoning: true }),
+];
+
+/**
+ * The shared free roster, spelled for this provider's endpoint.
+ *
+ * The same 17 `:free` ids Cline and OpenRouter serve, because this is the same
+ * catalog behind a different origin. Kept separate from `KILO_MODELS` so the
+ * free tier is its own statement: those three rows are routers, these are the
+ * zero-cost models, and the model list groups them differently.
+ */
+export const KILO_FREE_MODELS: readonly ModelDefinition[] = openrouterFreeRoster({
+  providerId: KILO_PROVIDER_ID,
+  endpoint: KILO_ENDPOINT_PATH,
+});
+
+/**
+ * Adapter that decodes the credential envelope before the shared pipeline
+ * authenticates the request.
+ *
+ * `prepareHeaders` is corrected rather than rebuilt: every other header the
+ * factory contributes (content type, gateway identity, operator custom headers,
+ * route user-agent) stays exactly as every other provider gets it.
+ */
+class KiloAdapter extends OpenAICompatibleAdapter {
+  constructor(fetchImpl?: typeof fetch) {
+    super(
+      withBearerAuthentication({
+        provider_id: KILO_PROVIDER_ID,
+        base_url: KILO_BASE_URL,
+        endpoint_paths_by_wire_family: { chat: KILO_ENDPOINT_PATH },
+        ...(fetchImpl ? { fetchImpl } : {}),
+      }),
+    );
+  }
+
+  protected override async prepareHeaders(
+    context: ProviderDispatchContext,
+    request: CanonicalRequest,
+    candidate: ProviderDispatchTarget,
+  ): Promise<Record<string, string>> {
+    const headers = await super.prepareHeaders(context, request, candidate);
+    const secret = context.credential.secret;
+    if (secret === undefined || secret.length === 0) return headers;
+    // A credential that does not decode is left as the factory sent it: the
+    // request then fails closed at the upstream auth boundary, and the parse
+    // error belongs to the credential boundary rather than to this hook.
+    let credential: ReturnType<typeof decodeKiloCredential>;
+    try {
+      credential = decodeKiloCredential(secret);
+    } catch {
+      return headers;
+    }
+    headers.authorization = `Bearer ${credential.accessToken}`;
+    // The upstream's own header name, not ours: renaming the Cartethyia
+    // provider id does not rename a field the upstream reads.
+    if (credential.orgId !== undefined) headers["X-Kilocode-OrganizationID"] = credential.orgId;
+    return headers;
+  }
+}
+
+/** Kilo Code provider adapter. */
+export const kiloAdapter: ProviderAdapter = new KiloAdapter();
+

package/src/providers/integrations/kiro/kiro-machine-id.ts

@@ -1,3 +1,4 @@
+import { sha256Hex } from "../../../shared/hash";
 /**
  * Kiro machine identity.
  *
@@ -21,7 +22,6 @@
  * They are deliberately different per credential family, because an API key and
  * a refresh token for the same account must not derive the same device id.
  */
-import { createHash } from "node:crypto";
 
 /** Prefix the observed client hashes for an OAuth (refresh-token) credential. */
 const OAUTH_SALT = "KotlinNativeAPI/";
@@ -33,9 +33,7 @@ const FALLBACK_SALT = "KiroFallback/";
 /** Length of a machine id, in hex characters. */
 const MACHINE_ID_LENGTH = 64;
 
-function sha256Hex(input: string): string {
-  return createHash("sha256").update(input).digest("hex");
-}
+
 
 /**
  * Normalizes a machine id supplied from outside the derivation.

package/src/providers/integrations/openrouter/provider.ts

@@ -1,129 +1,129 @@
-import type { ApiKeyProviderSpec } from "../../configured-provider";
-import type { ModelDefinition } from "../../provider-model-definition";
-import { fetchOpenAICompatibleModels } from "../../discovery/openai-model-discovery";
-import { providerBaseUrl } from "../../provider-metadata";
-import type { DiscoveryInput } from "../../discovery/discovery-types";
-import { defineModel } from "../../provider-model-definition";
-import { openrouterFreeRoster } from "../../discovery/openrouter-free-roster";
-
-const OPENROUTER_PROVIDER_ID = "openrouter" as const;
-
-/** OpenRouter requires these on every request for ranking/attribution. */
-const OPENROUTER_REQUIRED_HEADERS: Readonly<Record<string, string>> = {
-  "HTTP-Referer": "https://endpoint-proxy.local",
-  "X-Title": "Endpoint Proxy",
-};
-
-/**
- * OpenRouter's non-chat service models.
- *
- * OpenRouter fronts the System One decision API (`/api/v1/systemone`) as
- * `typesafe/jev-1.13`, which is not a chat model: it answers `{answers}` to a
- * `{state, questions}` body. `/api/v1/models` does not list it under a wire the
- * generic fetcher can classify, so it is declared here — a `serviceKind` row
- * served by the native System One route, never by the chat surface.
- */
-export const OPENROUTER_MODELS: readonly ModelDefinition[] = [
-  // No committed chat rows. OpenRouter adds and pulls models within days, so a
-  // hand-kept list of ids drifts out of truth and discovery is the authority;
-  // the free roster below stays as the offline floor. `openrouter/auto` was the
-  // last committed chat row and went with the rest of the static catalog — it
-  // publishes no limits of its own anyway, since a router's pricing is -1.
-  // Not a chat row: it answers `{answers}` to a `{state, questions}` body, and
-  // is served by the native System One route. Kept because deleting it removes
-  // that route, which is a capability, not a stale catalog entry.
-  defineModel({
-    id: "typesafe/jev-1.13",
-    providerId: "openrouter",
-    serviceKind: "systemone",
-    wireFamily: "chat",
-    endpoint: "/systemone",
-    ctx: 200_000,
-    out: 8_192,
-    toolCall: false,
-  }),
-];
-
-
-/**
- * OpenRouter's `:free` tier, as a default catalog.
- *
- * OpenRouter runs live `/api/v1/models` discovery, so this is a floor rather
- * than the only source — but without it the provider lists nothing at all
- * until a discovery run happens to fetch it, and the free tier is the one part
- * of OpenRouter an operator can use with no spend.
- *
- * Fetched 2026-10-12 from `https://openrouter.ai/api/v1/models`, which served
- * 15 `:free` rows; the 14 that the base catalog also files under `openrouter`
- * are listed here. `apodex/apodex-1.1-mini:free` is absent because the base
- * catalog has no row for it under any provider, so its limits and price would
- * have to be guessed — and a published guess reads as a measurement. Discovery
- * still picks it up, which is the correct path for a row with no catalog data.
- *
- * Every row is marked `freeTier` as well as `free`, because the two answer
- * different questions: `free` says this bills zero per token, and `freeTier` is
- * what the model list groups on so the free roster is labelled as such rather
- * than mixed in with the billed catalog.
- */
-export const OPENROUTER_FREE_MODELS: readonly ModelDefinition[] = openrouterFreeRoster({
-  providerId: OPENROUTER_PROVIDER_ID,
-  endpoint: "/chat/completions",
-});
-
-
-/**
- * OpenRouter's `:free` rows, discovered live.
- *
- * OpenRouter rotates its free tier constantly — models are added and pulled
- * within days — so a committed list is only ever a snapshot of one afternoon.
- * This is the same shape as the OpenCode Zen free fetch: filter the provider's
- * own live listing down to the free rows and mark each one `freeTier`, which is
- * what the model list groups under "Free models (auto)".
- *
- * The rows are the fetcher's own definitions, spread rather than rebuilt: it
- * has already resolved limits, pricing, and the wire family from the id, and
- * re-deriving that here would discard the resolution and let the two drift.
- */
-export async function discoverOpenrouterFreeModels(
-  input: DiscoveryInput,
-): Promise<readonly ModelDefinition[] | null> {
-  const listed = await discoverOpenrouterModels(input);
-  if (listed === null) return null;
-  return (
-    listed
-      // OpenRouter's free-tier spelling is a `:free` id suffix, matched exactly
-      // rather than as a substring so a model whose own name contains "free" is
-      // not swept in by accident.
-      .filter((model) => model.modelId.endsWith(":free"))
-      .map((model) => ({
-        ...model,
-        // `free` is a billing statement and `freeTier` a catalog one. The
-        // `:free` suffix answers both, so both are set; the cost is left as the
-        // fetcher resolved it because OpenRouter publishes a real zero price.
-        free: true,
-        freeTier: true,
-      }))
-  );
-}
-
-
-/** OpenRouter adapter spec; the registry builds it via `createApiKeyAdapter`. */
-export const OPENROUTER_SPEC: ApiKeyProviderSpec = {
-  provider_id: OPENROUTER_PROVIDER_ID,
-  endpoint_paths_by_wire_family: {},
-  extra_headers: OPENROUTER_REQUIRED_HEADERS,
-};
-
-export async function discoverOpenrouterModels(
-  input: DiscoveryInput,
-): Promise<readonly ModelDefinition[] | null> {
-  return fetchOpenAICompatibleModels({
-    baseUrl: providerBaseUrl("openrouter"),
-    headers: {
-      authorization: `Bearer ${input.credential}`,
-      ...OPENROUTER_REQUIRED_HEADERS,
-    },
-    ...(input.signal ? { signal: input.signal } : {}),
-    ...(input.fetcher ? { fetcher: input.fetcher } : {}),
-  });
-}
+import type { ApiKeyProviderSpec } from "../../configured-provider";
+import type { ModelDefinition } from "../../provider-model-definition";
+import { fetchOpenAICompatibleModels } from "../../discovery/openai-model-discovery";
+import { providerBaseUrl } from "../../provider-metadata";
+import type { DiscoveryInput } from "../../discovery/discovery-types";
+import { defineModel } from "../../provider-model-definition";
+import { openrouterFreeRoster } from "../../discovery/openrouter-free-roster";
+
+const OPENROUTER_PROVIDER_ID = "openrouter" as const;
+
+/** OpenRouter requires these on every request for ranking/attribution. */
+const OPENROUTER_REQUIRED_HEADERS: Readonly<Record<string, string>> = {
+  "HTTP-Referer": "https://endpoint-proxy.local",
+  "X-Title": "Endpoint Proxy",
+};
+
+/**
+ * OpenRouter's non-chat service models.
+ *
+ * OpenRouter fronts the System One decision API (`/api/v1/systemone`) as
+ * `typesafe/jev-1.13`, which is not a chat model: it answers `{answers}` to a
+ * `{state, questions}` body. `/api/v1/models` does not list it under a wire the
+ * generic fetcher can classify, so it is declared here — a `serviceKind` row
+ * served by the native System One route, never by the chat surface.
+ */
+export const OPENROUTER_MODELS: readonly ModelDefinition[] = [
+  // No committed chat rows. OpenRouter adds and pulls models within days, so a
+  // hand-kept list of ids drifts out of truth and discovery is the authority;
+  // the free roster below stays as the offline floor. `openrouter/auto` was the
+  // last committed chat row and went with the rest of the static catalog — it
+  // publishes no limits of its own anyway, since a router's pricing is -1.
+  // Not a chat row: it answers `{answers}` to a `{state, questions}` body, and
+  // is served by the native System One route. Kept because deleting it removes
+  // that route, which is a capability, not a stale catalog entry.
+  defineModel({
+    id: "typesafe/jev-1.13",
+    providerId: "openrouter",
+    serviceKind: "systemone",
+    wireFamily: "chat",
+    endpoint: "/systemone",
+    ctx: 200_000,
+    out: 8_192,
+    toolCall: false,
+  }),
+];
+
+
+/**
+ * OpenRouter's `:free` tier, as a default catalog.
+ *
+ * OpenRouter runs live `/api/v1/models` discovery, so this is a floor rather
+ * than the only source — but without it the provider lists nothing at all
+ * until a discovery run happens to fetch it, and the free tier is the one part
+ * of OpenRouter an operator can use with no spend.
+ *
+ * Fetched 2026-10-12 from `https://openrouter.ai/api/v1/models`, which served
+ * 15 `:free` rows; the 14 that the base catalog also files under `openrouter`
+ * are listed here. `apodex/apodex-1.1-mini:free` is absent because the base
+ * catalog has no row for it under any provider, so its limits and price would
+ * have to be guessed — and a published guess reads as a measurement. Discovery
+ * still picks it up, which is the correct path for a row with no catalog data.
+ *
+ * Every row is marked `freeTier` as well as `free`, because the two answer
+ * different questions: `free` says this bills zero per token, and `freeTier` is
+ * what the model list groups on so the free roster is labelled as such rather
+ * than mixed in with the billed catalog.
+ */
+export const OPENROUTER_FREE_MODELS: readonly ModelDefinition[] = openrouterFreeRoster({
+  providerId: OPENROUTER_PROVIDER_ID,
+  endpoint: "/chat/completions",
+});
+
+
+/**
+ * OpenRouter's `:free` rows, discovered live.
+ *
+ * OpenRouter rotates its free tier constantly — models are added and pulled
+ * within days — so a committed list is only ever a snapshot of one afternoon.
+ * This is the same shape as the OpenCode Zen free fetch: filter the provider's
+ * own live listing down to the free rows and mark each one `freeTier`, which is
+ * what the model list groups under "Free models (auto)".
+ *
+ * The rows are the fetcher's own definitions, spread rather than rebuilt: it
+ * has already resolved limits, pricing, and the wire family from the id, and
+ * re-deriving that here would discard the resolution and let the two drift.
+ */
+export async function discoverOpenrouterFreeModels(
+  input: DiscoveryInput,
+): Promise<readonly ModelDefinition[] | null> {
+  const listed = await discoverOpenrouterModels(input);
+  if (listed === null) return null;
+  return (
+    listed
+      // OpenRouter's free-tier spelling is a `:free` id suffix, matched exactly
+      // rather than as a substring so a model whose own name contains "free" is
+      // not swept in by accident.
+      .filter((model) => model.modelId.endsWith(":free"))
+      .map((model) => ({
+        ...model,
+        // `free` is a billing statement and `freeTier` a catalog one. The
+        // `:free` suffix answers both, so both are set; the cost is left as the
+        // fetcher resolved it because OpenRouter publishes a real zero price.
+        free: true,
+        freeTier: true,
+      }))
+  );
+}
+
+
+/** OpenRouter adapter spec; the registry builds it via `createApiKeyAdapter`. */
+export const OPENROUTER_SPEC: ApiKeyProviderSpec = {
+  provider_id: OPENROUTER_PROVIDER_ID,
+  endpoint_paths_by_wire_family: {},
+  extra_headers: OPENROUTER_REQUIRED_HEADERS,
+};
+
+export async function discoverOpenrouterModels(
+  input: DiscoveryInput,
+): Promise<readonly ModelDefinition[] | null> {
+  return fetchOpenAICompatibleModels({
+    baseUrl: providerBaseUrl("openrouter"),
+    headers: {
+      authorization: `Bearer ${input.credential}`,
+      ...OPENROUTER_REQUIRED_HEADERS,
+    },
+    ...(input.signal ? { signal: input.signal } : {}),
+    ...(input.fetcher ? { fetcher: input.fetcher } : {}),
+  });
+}