cartethyia 2.7.7 → 2.7.9

package/src/providers/integrations/buddy/buddy-identity.ts

@@ -1,5 +1,6 @@
 import type { ProviderDispatchContext } from "../../provider-contracts";
 import { createHash } from "node:crypto";
+import { readFileSync } from "node:fs";
 import { decodeJwtPayload } from "../../authentication/oauth-flow-store";
 import { buddyAccountUid } from "./buddy-oauth-shared";
 import type { CanonicalRequest } from "../../../protocol/canonical-model";
@@ -228,3 +229,72 @@ export function buddyAgentPurpose(
   if (typeof fromRequest === "string" && fromRequest.trim().length > 0) return fromRequest.trim();
   return undefined;
 }
+
+/**
+ * Desktop risk token, sent only when the account actually has one.
+ *
+ * The account's own `auth_state` wins. When it carries none, a file the
+ * desktop client writes (`CARTETHYIA_DEVICE_TOKEN_FILE`, default
+ * `/app/data/device_token`) is read instead — cached for five minutes, and
+ * ignored when it is larger than 1 KB, because a token file that size is not
+ * a token. A missing file is the normal case and reads as "no token".
+ */
+const DEVICE_TOKEN_FILE_MAX_BYTES = 1024;
+const DEVICE_TOKEN_FILE_TTL_MS = 5 * 60_000;
+let deviceTokenFileCache: { readonly value: string | undefined; readonly readAt: number } | undefined;
+
+export function readBuddyDeviceToken(context?: ProviderDispatchContext): string | undefined {
+  const state = context?.credential.auth_state;
+  const value = state?.["deviceToken"] ?? state?.["device_token"];
+  if (typeof value === "string" && value.trim().length > 0) return value.trim();
+  return readDeviceTokenFile();
+}
+
+/**
+ * The reference `X-Device-Token` pair, per the official desktop app.
+ *
+ * The desktop client always presents one of the
+ * two on chat traffic — a real token from the TuringShield SDK, or an
+ * `X-Device-Token-Error` when the SDK cannot produce one. It never omits both,
+ * and it sends the header on every realm (Intl and CN alike).
+ *
+ * The TuringShield SDK was a proprietary native addon shipped under
+ * `vendor/turing-sdk/`; it has been removed. The fallback path below is the
+ * captured token (auth_state / `CARTETHYIA_DEVICE_TOKEN_FILE`) and then the
+ * official failure state.
+ *
+ * - Legacy token (auth_state/file) → used when no SDK is available.
+ * - CLI identity never carries a device token (the CLI has no device).
+ */
+export async function buddyDeviceTokenHeaders(args: {
+  realm: "intl" | "cn";
+  context: ProviderDispatchContext | undefined;
+  cliIdentity: boolean | undefined;
+}): Promise<Record<string, string>> {
+  const { context, cliIdentity } = args;
+  void args.realm; // the desktop client sends the token on both realms
+  if (resolveBuddyIdentity(context, cliIdentity) === "cli") return {};
+  const token = readBuddyDeviceToken(context);
+  if (token !== undefined) return { "x-device-token": token };
+  return { "x-device-token-error": "sdk_not_initialized" };
+}
+
+function readDeviceTokenFile(): string | undefined {
+  const now = Date.now();
+  if (deviceTokenFileCache !== undefined && now - deviceTokenFileCache.readAt < DEVICE_TOKEN_FILE_TTL_MS) {
+    return deviceTokenFileCache.value;
+  }
+  const path = process.env["CARTETHYIA_DEVICE_TOKEN_FILE"] ?? "/app/data/device_token";
+  let value: string | undefined;
+  try {
+    const raw = readFileSync(path);
+    if (raw.byteLength > 0 && raw.byteLength <= DEVICE_TOKEN_FILE_MAX_BYTES) {
+      const text = raw.toString("utf8").trim();
+      if (text.length > 0) value = text;
+    }
+  } catch {
+    value = undefined;
+  }
+  deviceTokenFileCache = { value, readAt: now };
+  return value;
+}

package/src/providers/integrations/buddy/buddy-media.ts

@@ -1,13 +1,12 @@
 /**
  * Buddy-family media generation: image and video.
  *
- * CodeBuddy (intl) and WorkBuddy serve media through the same facade, so shared
- * request shaping lives here. Their image endpoint can differ by provider;
+ * CodeBuddy (intl + CN) serves media through the same facade, so shared
+ * request shaping lives here. Their image endpoint can differ by realm;
  * identity headers come from {@link codebuddyHeaders} keyed on the variant.
  *
- * Two image paths are supported: CodeBuddy can use its native
- * `/images/generations` API, while WorkBuddy keeps its chat-completion image
- * path. The configured provider path selects the wire format.
+ * The image path is CodeBuddy's native `/images/generations` API. The
+ * configured provider path selects the wire format.
  *
  * - **Video** (`seedance-2.5`) is implemented as an async task: submission
  *   expects a task ID, then the adapter polls a sibling task URL until a clip

package/src/providers/integrations/buddy/buddy-oauth-shared.ts

@@ -1,5 +1,5 @@
 /**
- * The buddy-family device-login mechanism (`cb`, `cbcn`, `workbuddy`).
+ * The buddy-family device-login mechanism (`cb`, `cbcn`).
  *
  * All three complete device login against the same plugin auth endpoints: a
  * state POST, a token poll that answers the pending code `11217` until the user
@@ -64,7 +64,7 @@ export function strictResponseCode(payload: unknown): number | undefined {
 }
 
 /**
- * Reads the envelope `code` through `Number()`, which is how the WorkBuddy
+ * Reads the envelope `code` through `Number()`, which is how the buddy
  * gateway is read. Looser than `strictResponseCode` on a malformed payload: a
  * `null` code coerces to `0`, i.e. success, and `true` to `1`. Kept verbatim
  * rather than tightened because nothing here shows what that gateway sends for

package/src/providers/integrations/buddy/buddy-quota-shared.ts

@@ -2,7 +2,7 @@ import { asNumber as sharedAsNumber } from "../../../shared/coerce";
 
 /**
  * Shared Tencent billing-meter parsing for the CodeBuddy family
- * (`cb`, `cbcn`, `workbuddy`).
+ * (`cb`, `cbcn`).
  *
  * All three read the same endpoint shape — POST
  * `{base}/v2/billing/meter/get-user-resource` answering

package/src/providers/integrations/buddy/buddy-usage-shared.ts

@@ -1,7 +1,5 @@
 /**
- * Real credit deductions for the Tencent "buddy" family (`cb`, `cbcn`,
- * `workbuddy`, `workbuddycn`).
- *
+ * Real credit deductions for the Tencent "buddy" family (`cb`, `cbcn`). *
  * Every provider in the family reads the same usage-detail endpoint —
  * `POST {billingHost}/billing/meter/get-user-request-usage` — which answers the
  * actual per-request deductions the billing meter recorded: when the request

package/src/providers/integrations/buddy/capabilities.ts

@@ -1,14 +1,13 @@
 // dynamic-import-ok: lazy per-realm capability map. Each buddy regional
-// product (cb/cbcn/workbuddy/workbuddycn) imports its adapter + oauth +
-// discovery on first use so a deployment that only serves one realm never
-// drags the others into memory.
+// product (cb/cbcn) imports its adapter + oauth + discovery on first use so a
+// deployment that only serves one realm never drags the others into memory.
 import type { ProviderModuleCapabilities } from "../../provider-capabilities";
 import { oauthCapability, quotaCapability } from "../../provider-capabilities";
 
-type BuddyProviderId = "cb" | "cbcn" | "workbuddy" | "workbuddycn";
+type BuddyProviderId = "cb" | "cbcn";
 
 /**
- * Lazy capability declarations for Buddy's four independently identified
+ * Lazy capability declarations for Buddy's two independently identified
  * regional products.
  */
 export const BUDDY_PROVIDER_CAPABILITIES = {
@@ -48,40 +47,4 @@ export const BUDDY_PROVIDER_CAPABILITIES = {
       "fetchCodeBuddyCnQuota",
     ),
   },
-  workbuddy: {
-    loadAdapter: async () => (await import("./workbuddy/provider")).createWorkBuddyAdapter(),
-    loadModels: async () => (await import("./workbuddy/provider")).WORKBUDDY_MODELS,
-    loadModelDiscovery: async () => async ({ credential, fetcher }) =>
-      (await import("./workbuddy/provider")).discoverWorkBuddyModels({
-        credential,
-        ...(fetcher === undefined ? {} : { fetcher }),
-      }),
-    loadAuthentication: oauthCapability(
-      () => import("./workbuddy/oauth"),
-      "workBuddyOAuthClient",
-      { withRefresher: true },
-    ),
-    loadQuotaCollector: quotaCapability(
-      () => import("./workbuddy/quota"),
-      "fetchWorkBuddyQuota",
-    ),
-  },
-  workbuddycn: {
-    loadAdapter: async () => (await import("./workbuddy/cn-provider")).createWorkBuddyCnAdapter(),
-    loadModels: async () => (await import("./workbuddy/cn-provider")).WORKBUDDY_CN_MODELS,
-    loadModelDiscovery: async () => async ({ credential, fetcher }) =>
-      (await import("./workbuddy/cn-provider")).discoverWorkBuddyCnModels({
-        credential,
-        ...(fetcher === undefined ? {} : { fetcher }),
-      }),
-    loadAuthentication: oauthCapability(
-      () => import("./workbuddy/cn-oauth"),
-      "workBuddyCnOAuthClient",
-      { withRefresher: true },
-    ),
-    loadQuotaCollector: quotaCapability(
-      () => import("./workbuddy/quota"),
-      "fetchWorkBuddyCnQuota",
-    ),
-  },
 } satisfies Readonly<Record<BuddyProviderId, ProviderModuleCapabilities>>;

package/src/providers/integrations/buddy/codebuddy/cn-catalog.ts

@@ -24,7 +24,8 @@ export const CODEBUDDY_CN_RAW: readonly BuddyRawEntry[] = [
   ["kimi-k2.8-preview", "Kimi K2.8 Preview", true, true, 1_000_000, 64_000],
   ["kimi-k3.1-pro", "Kimi K3.1 Pro", true, true, 1_000_000, 32_000],
   ["hy3", "Hy3", true, true, 192_000, 64_000],
-  ["hy4-preview", "Hy4 Preview", true, true, 960_000, 64_000],
+  ["hy4", "Hy4", true, true, 960_000, 64_000],
+  ["hy4free", "Hy4 Free", true, true, 960_000, 64_000],
   ["space-bunny", "Space Bunny", true, true, 1_000_000, 128_000],
   ["step-5-preview", "Step 5 Preview", true, true, 1_000_000, 64_000],
   ["deepseek-v4-pro", "DeepSeek V4 Pro", true, true, 1_000_000, 128_000],

package/src/providers/integrations/buddy/codebuddy/cn-provider.ts

@@ -20,7 +20,9 @@ import { CODEBUDDY_CN_RAW } from "./cn-catalog";
 import { CODEBUDDY_SYSTEM_PROMPT } from "./provider";
 import {
   BUDDY_CN_IMAGE_MODEL_ID_SET,
+  BUDDY_CN_VIDEO_MODEL_ID_SET,
   makeBuddyCnImageModels,
+  makeBuddyCnVideoModels,
   makeBuddyModel,
 } from "../buddy-catalog-shared";
 import { BUDDY_CN_MODELS_PATH, fetchBuddyDirectoryModels } from "../buddy-discovery-shared";
@@ -115,11 +117,28 @@ export const CODEBUDDY_CN_IMAGE_MODELS: readonly ModelDefinition[] = makeBuddyCn
   "/images/generations",
 );
 
+/**
+ * CN's video-generation rows (`kling-video-v3`, `minimax-video-h3`).
+ *
+ * Reached through the native video route like the intl rows. The video ids
+ * are filtered out of the chat pass so one id never appears under two service
+ * kinds.
+ */
+export const CODEBUDDY_CN_VIDEO_MODELS: readonly ModelDefinition[] = makeBuddyCnVideoModels(
+  CODEBUDDY_CN_PROVIDER_ID,
+  "/videos/generations",
+);
+
 export const CODEBUDDY_CN_MODELS: readonly ModelDefinition[] = [
-  ...CODEBUDDY_CN_RAW.filter((entry) => !BUDDY_CN_IMAGE_MODEL_ID_SET.has(entry[0])).map((entry) =>
+  ...CODEBUDDY_CN_RAW.filter(
+    (entry) =>
+      !BUDDY_CN_IMAGE_MODEL_ID_SET.has(entry[0]) &&
+      !BUDDY_CN_VIDEO_MODEL_ID_SET.has(entry[0]),
+  ).map((entry) =>
     makeBuddyModel(entry, CODEBUDDY_CN_PROVIDER_ID, undefined, "cn"),
   ),
   ...CODEBUDDY_CN_IMAGE_MODELS,
+  ...CODEBUDDY_CN_VIDEO_MODELS,
 ];
 
 /** Reads the CodeBuddy CN console directory (same envelope as the intl site). */

package/src/providers/integrations/buddy/codebuddy/provider.ts

@@ -84,7 +84,7 @@ function codeBuddyIntlPrePayload(
   void request;
 }
 
-// Model catalog — shared CodeBuddy / WorkBuddy international roster
+// Model catalog — shared CodeBuddy international roster
 
 const CODEBUDDY_INTL_RAW: readonly BuddyRawEntry[] = BUDDY_SHARED_RAW;
 
@@ -95,7 +95,7 @@ const CODEBUDDY_INTL_RAW: readonly BuddyRawEntry[] = BUDDY_SHARED_RAW;
  * why they were unreachable as image models: nothing downstream could tell a
  * chat model from one that returns an image, so `mediaGeneration` was false for
  * every catalog row. The roster and the declared capabilities come from
- * {@link makeBuddyImageModels} so cb and WorkBuddy cannot drift.
+ * {@link makeBuddyImageModels} so cb and cbcn cannot drift.
  */
 export const CODEBUDDY_IMAGE_MODELS: readonly ModelDefinition[] = makeBuddyImageModels(
   "cb",

package/src/providers/integrations/buddy/codebuddy/shared.ts

@@ -13,8 +13,7 @@ import {
   resolveBuddyIdentity,
 } from "../buddy-identity";
 import { buildCodeBuddyUserAgent, getCodeBuddyCnVersion, getCodeBuddyVersion } from "../../../operations/client-versions";
-import { buddyDeviceTokenHeaders } from "../workbuddy/shared";
-import { CODEBUDDY_TURING_CONFIG } from "../turing-device-token";
+import { buddyDeviceTokenHeaders } from "../buddy-identity";
 import { buddyCliHeaders, buddyCliTraceHeaders } from "../buddy-cli-headers";
 
 /** Client identity variant behind the per-request CodeBuddy headers. */
@@ -105,25 +104,22 @@ export async function codebuddyHeaders(
     // The reference does not invent `conversation`; it sends the purpose only
     // when one exists.
     ...(purpose === undefined ? {} : { "X-Agent-Purpose": purpose }),
-    // Same family WorkBuddy sends: the upstream's channel check reads the
-    // turn-level aggregation key, and a chat request without it is refused for a
-    // missing conversation id.
+    // The upstream's channel check reads the turn-level aggregation key, and a
+    // chat request without it is refused for a missing conversation id.
     ...conversation,
     // Per-account device binding (qimei36) — distinct device per account.
     ...(() => {
       const binding = resolveBuddyDeviceBinding(context);
       return binding === undefined ? {} : { "X-Device-Id-List": JSON.stringify({ qimei36: binding }) };
     })(),
-    // The desktop client sends the device-token pair on both realms. SDK
-    // token when configured, captured token otherwise, or the official failure
-    // placeholder. CodeBuddy uses its own SDK payload profile (same SDK,
-    // distinct product identity). (CLI branch above already returned without
+    // The desktop client sends the device-token pair on both realms. Captured
+    // token (auth_state / device-token file) when present, otherwise the
+    // official failure placeholder. (CLI branch above already returned without
     // device headers.)
     ...(await buddyDeviceTokenHeaders({
       realm: identity === "IDE" ? "intl" : "cn",
       context,
       cliIdentity,
-      turingConfig: CODEBUDDY_TURING_CONFIG,
     })),
   };
 }

package/src/providers/integrations/cursor/cursor-catalog.ts

@@ -19,6 +19,7 @@ import {
   FALLBACK_CLIENT_VERSION,
   SERVER_CONFIG_PATH,
   normalizeAgentRunOrigin,
+  resolveCursorTimezone,
 } from "./cursor-shared";
 import { createCursorChecksumHeader, resolveCursorDeviceIds } from "./cursor-identity";
 
@@ -66,6 +67,7 @@ async function unaryHeaders(
     "x-cursor-checksum": createCursorChecksumHeader(machineId, macMachineId),
     "x-ghost-mode": "true",
     "x-request-id": crypto.randomUUID(),
+    ...(resolveCursorTimezone() === "" ? {} : { "x-cursor-timezone": resolveCursorTimezone() }),
   };
 }