cartethyia 2.7.8 → 2.8.0

package/src/providers/integrations/buddy/capabilities.ts

@@ -1,14 +1,13 @@
 // dynamic-import-ok: lazy per-realm capability map. Each buddy regional
-// product (cb/cbcn/workbuddy/workbuddycn) imports its adapter + oauth +
-// discovery on first use so a deployment that only serves one realm never
-// drags the others into memory.
-import type { ProviderModuleCapabilities } from "../../provider-capabilities";
-import { oauthCapability, quotaCapability } from "../../provider-capabilities";
+// product (cb/cbcn) imports its adapter + oauth + discovery on first use so a
+// deployment that only serves one realm never drags the others into memory.
+import type { ProviderModuleCapabilities } from "../../provider-registry";
+import { oauthCapability, quotaCapability } from "../../provider-registry";
 
-type BuddyProviderId = "cb" | "cbcn" | "workbuddy" | "workbuddycn";
+type BuddyProviderId = "cb" | "cbcn";
 
 /**
- * Lazy capability declarations for Buddy's four independently identified
+ * Lazy capability declarations for Buddy's two independently identified
  * regional products.
  */
 export const BUDDY_PROVIDER_CAPABILITIES = {
@@ -48,40 +47,4 @@ export const BUDDY_PROVIDER_CAPABILITIES = {
       "fetchCodeBuddyCnQuota",
     ),
   },
-  workbuddy: {
-    loadAdapter: async () => (await import("./workbuddy/provider")).createWorkBuddyAdapter(),
-    loadModels: async () => (await import("./workbuddy/provider")).WORKBUDDY_MODELS,
-    loadModelDiscovery: async () => async ({ credential, fetcher }) =>
-      (await import("./workbuddy/provider")).discoverWorkBuddyModels({
-        credential,
-        ...(fetcher === undefined ? {} : { fetcher }),
-      }),
-    loadAuthentication: oauthCapability(
-      () => import("./workbuddy/oauth"),
-      "workBuddyOAuthClient",
-      { withRefresher: true },
-    ),
-    loadQuotaCollector: quotaCapability(
-      () => import("./workbuddy/quota"),
-      "fetchWorkBuddyQuota",
-    ),
-  },
-  workbuddycn: {
-    loadAdapter: async () => (await import("./workbuddy/cn-provider")).createWorkBuddyCnAdapter(),
-    loadModels: async () => (await import("./workbuddy/cn-provider")).WORKBUDDY_CN_MODELS,
-    loadModelDiscovery: async () => async ({ credential, fetcher }) =>
-      (await import("./workbuddy/cn-provider")).discoverWorkBuddyCnModels({
-        credential,
-        ...(fetcher === undefined ? {} : { fetcher }),
-      }),
-    loadAuthentication: oauthCapability(
-      () => import("./workbuddy/cn-oauth"),
-      "workBuddyCnOAuthClient",
-      { withRefresher: true },
-    ),
-    loadQuotaCollector: quotaCapability(
-      () => import("./workbuddy/quota"),
-      "fetchWorkBuddyCnQuota",
-    ),
-  },
 } satisfies Readonly<Record<BuddyProviderId, ProviderModuleCapabilities>>;

package/src/providers/integrations/buddy/codebuddy/cn-catalog.ts

@@ -24,7 +24,8 @@ export const CODEBUDDY_CN_RAW: readonly BuddyRawEntry[] = [
   ["kimi-k2.8-preview", "Kimi K2.8 Preview", true, true, 1_000_000, 64_000],
   ["kimi-k3.1-pro", "Kimi K3.1 Pro", true, true, 1_000_000, 32_000],
   ["hy3", "Hy3", true, true, 192_000, 64_000],
-  ["hy4-preview", "Hy4 Preview", true, true, 960_000, 64_000],
+  ["hy4", "Hy4", true, true, 960_000, 64_000],
+  ["hy4free", "Hy4 Free", true, true, 960_000, 64_000],
   ["space-bunny", "Space Bunny", true, true, 1_000_000, 128_000],
   ["step-5-preview", "Step 5 Preview", true, true, 1_000_000, 64_000],
   ["deepseek-v4-pro", "DeepSeek V4 Pro", true, true, 1_000_000, 128_000],

package/src/providers/integrations/buddy/codebuddy/cn-provider.ts

@@ -20,7 +20,9 @@ import { CODEBUDDY_CN_RAW } from "./cn-catalog";
 import { CODEBUDDY_SYSTEM_PROMPT } from "./provider";
 import {
   BUDDY_CN_IMAGE_MODEL_ID_SET,
+  BUDDY_CN_VIDEO_MODEL_ID_SET,
   makeBuddyCnImageModels,
+  makeBuddyCnVideoModels,
   makeBuddyModel,
 } from "../buddy-catalog-shared";
 import { BUDDY_CN_MODELS_PATH, fetchBuddyDirectoryModels } from "../buddy-discovery-shared";
@@ -115,11 +117,28 @@ export const CODEBUDDY_CN_IMAGE_MODELS: readonly ModelDefinition[] = makeBuddyCn
   "/images/generations",
 );
 
+/**
+ * CN's video-generation rows (`kling-video-v3`, `minimax-video-h3`).
+ *
+ * Reached through the native video route like the intl rows. The video ids
+ * are filtered out of the chat pass so one id never appears under two service
+ * kinds.
+ */
+export const CODEBUDDY_CN_VIDEO_MODELS: readonly ModelDefinition[] = makeBuddyCnVideoModels(
+  CODEBUDDY_CN_PROVIDER_ID,
+  "/videos/generations",
+);
+
 export const CODEBUDDY_CN_MODELS: readonly ModelDefinition[] = [
-  ...CODEBUDDY_CN_RAW.filter((entry) => !BUDDY_CN_IMAGE_MODEL_ID_SET.has(entry[0])).map((entry) =>
+  ...CODEBUDDY_CN_RAW.filter(
+    (entry) =>
+      !BUDDY_CN_IMAGE_MODEL_ID_SET.has(entry[0]) &&
+      !BUDDY_CN_VIDEO_MODEL_ID_SET.has(entry[0]),
+  ).map((entry) =>
     makeBuddyModel(entry, CODEBUDDY_CN_PROVIDER_ID, undefined, "cn"),
   ),
   ...CODEBUDDY_CN_IMAGE_MODELS,
+  ...CODEBUDDY_CN_VIDEO_MODELS,
 ];
 
 /** Reads the CodeBuddy CN console directory (same envelope as the intl site). */
@@ -149,6 +168,9 @@ export function createCodeBuddyCnAdapter(fetchImpl?: typeof fetch): ProviderAdap
       baseUrl: CODEBUDDY_CN_BASE_URL,
       variant: "CLI",
       prePayload: codeBuddyCnPrePayload,
+      // The CN CLI profile gzips the chat body (donor behavior). The console
+      // channel fallback is an intl-only recovery; CN has no second endpoint.
+      requestCompression: "gzip",
       ...(fetchImpl ? { fetchImpl } : {}),
     }),
     {

package/src/providers/integrations/buddy/codebuddy/provider.ts

@@ -84,7 +84,7 @@ function codeBuddyIntlPrePayload(
   void request;
 }
 
-// Model catalog — shared CodeBuddy / WorkBuddy international roster
+// Model catalog — shared CodeBuddy international roster
 
 const CODEBUDDY_INTL_RAW: readonly BuddyRawEntry[] = BUDDY_SHARED_RAW;
 
@@ -95,7 +95,7 @@ const CODEBUDDY_INTL_RAW: readonly BuddyRawEntry[] = BUDDY_SHARED_RAW;
  * why they were unreachable as image models: nothing downstream could tell a
  * chat model from one that returns an image, so `mediaGeneration` was false for
  * every catalog row. The roster and the declared capabilities come from
- * {@link makeBuddyImageModels} so cb and WorkBuddy cannot drift.
+ * {@link makeBuddyImageModels} so cb and cbcn cannot drift.
  */
 export const CODEBUDDY_IMAGE_MODELS: readonly ModelDefinition[] = makeBuddyImageModels(
   "cb",
@@ -160,6 +160,10 @@ export function createCodeBuddyAdapter(fetchImpl?: typeof fetch): ProviderAdapte
       variant: "IDE",
       cliIdentity: true,
       prePayload: codeBuddyIntlPrePayload,
+      // The intl CLI profile gzips the chat body and recovers a channel-check
+      // 400 by retrying once on the console chat endpoint (donor behavior).
+      requestCompression: "gzip",
+      channelFallbackPath: "/console/chat/completions",
       ...(fetchImpl ? { fetchImpl } : {}),
     }),
     {

package/src/providers/integrations/buddy/codebuddy/shared.ts

@@ -13,8 +13,7 @@ import {
   resolveBuddyIdentity,
 } from "../buddy-identity";
 import { buildCodeBuddyUserAgent, getCodeBuddyCnVersion, getCodeBuddyVersion } from "../../../operations/client-versions";
-import { buddyDeviceTokenHeaders } from "../workbuddy/shared";
-import { CODEBUDDY_TURING_CONFIG } from "../turing-device-token";
+import { buddyDeviceTokenHeaders } from "../buddy-identity";
 import { buddyCliHeaders, buddyCliTraceHeaders } from "../buddy-cli-headers";
 
 /** Client identity variant behind the per-request CodeBuddy headers. */
@@ -88,7 +87,7 @@ export async function codebuddyHeaders(
     };
   }
   const purpose = buddyAgentPurpose(context, request);
-  return {
+  const headers: Record<string, string> = {
     accept: "text/event-stream",
     "User-Agent": ua,
     "X-Product": "SaaS",
@@ -101,31 +100,29 @@ export async function codebuddyHeaders(
     "X-Domain": codebuddyDomain(variant),
     "x-requested-with": "XMLHttpRequest",
     "x-codebuddy-request": "1",
-    // The effective agent purpose, matching the reference's dynamic value.
-    // The reference does not invent `conversation`; it sends the purpose only
-    // when one exists.
-    ...(purpose === undefined ? {} : { "X-Agent-Purpose": purpose }),
-    // Same family WorkBuddy sends: the upstream's channel check reads the
-    // turn-level aggregation key, and a chat request without it is refused for a
-    // missing conversation id.
-    ...conversation,
-    // Per-account device binding (qimei36) — distinct device per account.
-    ...(() => {
-      const binding = resolveBuddyDeviceBinding(context);
-      return binding === undefined ? {} : { "X-Device-Id-List": JSON.stringify({ qimei36: binding }) };
-    })(),
-    // The desktop client sends the device-token pair on both realms. SDK
-    // token when configured, captured token otherwise, or the official failure
-    // placeholder. CodeBuddy uses its own SDK payload profile (same SDK,
-    // distinct product identity). (CLI branch above already returned without
-    // device headers.)
-    ...(await buddyDeviceTokenHeaders({
-      realm: identity === "IDE" ? "intl" : "cn",
-      context,
-      cliIdentity,
-      turingConfig: CODEBUDDY_TURING_CONFIG,
-    })),
   };
+  // The effective agent purpose, matching the reference's dynamic value.
+  // The reference does not invent `conversation`; it sends the purpose only
+  // when one exists.
+  if (purpose !== undefined) headers["X-Agent-Purpose"] = purpose;
+  // The upstream's channel check reads the turn-level aggregation key, and a
+  // chat request without it is refused for a missing conversation id.
+  Object.assign(headers, conversation);
+  // Per-account device binding (qimei36) — distinct device per account.
+  const binding = resolveBuddyDeviceBinding(context);
+  if (binding !== undefined) {
+    headers["X-Device-Id-List"] = JSON.stringify({ qimei36: binding });
+  }
+  // The desktop client sends the device-token pair on both realms. Captured
+  // token (auth_state / device-token file) when present, otherwise the
+  // official failure placeholder. (CLI branch above already returned without
+  // device headers.)
+  Object.assign(headers, await buddyDeviceTokenHeaders({
+    realm: identity === "IDE" ? "intl" : "cn",
+    context,
+    cliIdentity,
+  }));
+  return headers;
 }
 
 /**
@@ -144,6 +141,14 @@ export function codebuddyAdapterConfig(args: {
   ) => void;
   fetchImpl?: typeof fetch;
   cliIdentity?: boolean;
+  /**
+   * Body compression for chat dispatches. The CodeBuddy CLI contract (donor
+   * `codebuddy2api`) gzips the JSON body for the CLI profiles and sends
+   * `Accept-Encoding: identity`. `"json"` (default) keeps plain JSON.
+   */
+  requestCompression?: "json" | "gzip";
+  /** When set, retry a channel-check 400 against this path (console fallback). */
+  channelFallbackPath?: string;
 }): OpenAICompatibleAdapterConfig {
   return withBearerAuthentication({
     provider_id: args.providerId,
@@ -151,6 +156,12 @@ export function codebuddyAdapterConfig(args: {
     buildExtraHeaders: (context, request) =>
       codebuddyHeaders(args.variant, context, request, args.cliIdentity),
     prePayload: args.prePayload,
+    ...(args.requestCompression === undefined
+      ? {}
+      : { request_compression: args.requestCompression }),
+    ...(args.channelFallbackPath === undefined
+      ? {}
+      : { channel_fallback_path: args.channelFallbackPath }),
     ...(args.fetchImpl ? { fetchImpl: args.fetchImpl } : {}),
   });
 }

package/src/providers/integrations/claude/claude-quota.ts

@@ -102,9 +102,13 @@ export async function fetchClaudeQuota(
   credential: string,
   fetcher: FetchLike,
 ): Promise<ProviderQuotaResult> {
+  // No module-local quota cache: the shared two-tier quota cache owns
+  // cross-call dedup, and a local tier keyed by credential only is never
+  // invalidated by `debitCachedQuota`, so a sweep within its TTL could
+  // resurrect a spent balance over the shared cache. Every call here is a
+  // fresh upstream read; the shared cache's in-flight dedup prevents
+  // duplicate traffic.
   const key = sha256Hex(credential);
-  const cached = quotaCache.get(key);
-  if (cached !== undefined) return cached;
   if (quotaCooldown.get(key) !== undefined) {
     throw new Error("Quota endpoint rejected request: rate limited (cooled down)");
   }
@@ -131,9 +135,7 @@ export async function fetchClaudeQuota(
       },
       observing,
     );
-    const result = parseClaudeQuota(body);
-    quotaCache.set(key, result);
-    return result;
+    return parseClaudeQuota(body);
   } catch (error: unknown) {
     // Hammering the usage endpoint on every call is its own rate-limit
     // risk: back off briefly after a 429 instead of retrying into it.
@@ -143,21 +145,16 @@ export async function fetchClaudeQuota(
 }
 
 /**
- * Bounded per-credential quota cache (5 min) plus a short 429 cooldown
- * (3 min). Keys are credential hashes, never raw secrets; both caches are
+ * Short 429 cooldown (3 min). Keys are credential hashes, never raw secrets;
  * capped so credential fan-out cannot pin memory.
+ *
+ * The cooldown is an absolute window (`until = now + QUOTA_COOLDOWN_MS`), not a
+ * TTL from read time, so it is a sentinel whose own TTL *is* that window: the
+ * entry lives for exactly the cooldown and is gone the moment it closes.
  */
-const QUOTA_CACHE_TTL_MS = 5 * 60_000;
 const QUOTA_COOLDOWN_MS = 3 * 60_000;
-const QUOTA_CACHE_MAX_ENTRIES = 256;
-const quotaCache = new TtlCache<ProviderQuotaResult>({
-  ttlMs: QUOTA_CACHE_TTL_MS,
-  maxEntries: QUOTA_CACHE_MAX_ENTRIES,
-});
-// The cooldown is an absolute window (`until = now + QUOTA_COOLDOWN_MS`), not a
-// TTL from read time, so it is a sentinel whose own TTL *is* that window: the
-// entry lives for exactly the cooldown and is gone the moment it closes.
+const QUOTA_COOLDOWN_MAX_ENTRIES = 256;
 const quotaCooldown = new TtlCache<true>({
   ttlMs: QUOTA_COOLDOWN_MS,
-  maxEntries: QUOTA_CACHE_MAX_ENTRIES,
+  maxEntries: QUOTA_COOLDOWN_MAX_ENTRIES,
 });

package/src/providers/integrations/cline/cline.ts

@@ -1,12 +1,12 @@
 import { createApiKeyAdapter } from "../../configured-provider";
 import type { ProviderDispatchTarget, ProviderAdapter, ProviderDispatchContext } from "../../provider-contracts";
 import type { ModelDefinition } from "../../provider-model-definition";
-import { unwrapProviderToken } from "../../provider-credential-envelope";
+import { unwrapProviderToken } from "../../provider-credentials";
 import { GatewayError } from "../../../protocol/gateway-error";
 import type { CanonicalRequest } from "../../../protocol/canonical-model";
 import { completeRequiredSchema, isRecord } from "../../../protocol/codecs";
 import { providerBaseUrl } from "../../provider-metadata";
-import { getCachedModelDiscovery } from "../../operations/model-discovery-cache";
+import { getCachedModelDiscovery } from "../../operations/provider-caches";
 import { defineModel } from "../../provider-model-definition";
 import { clineReasoningReplayPrepares } from "../buddy/buddy-chat-shared";
 import { clinePlatform, clinePlatformVersion } from "../../operations/cli-platform";

package/src/providers/integrations/commandcode/quota.ts

@@ -15,6 +15,8 @@
  * independent: retain the balance or subscription when the other is unavailable.
  */
 import type { FetchLike, ProviderQuotaResult, ProviderQuotaWindow } from "../../quota/quota-contracts";
+import { isoDate } from "../../quota/quota-contracts";
+import { asCoercedNumber, asRecord } from "../../../shared/coerce";
 
 const COMMANDCODE_API_BASE = "https://api.commandcode.ai" as const;
 const REQUEST_TIMEOUT_MS = 15_000;
@@ -73,29 +75,21 @@ async function readJson(
   }
 }
 
-function recordValue(value: unknown): Record<string, unknown> | undefined {
-  return typeof value === "object" && value !== null && !Array.isArray(value)
-    ? (value as Record<string, unknown>)
-    : undefined;
-}
-
+/** Numeric value coerced via the shared helper, or `null` (shared sentinel). */
 function numberOrNull(value: unknown): number | null {
-  if (typeof value === "number" && Number.isFinite(value)) return value;
-  if (typeof value === "string" && value.trim() && Number.isFinite(Number(value))) {
-    return Number(value);
-  }
-  return null;
+  return asCoercedNumber(value) ?? null;
 }
 
+/**
+ * ISO timestamp from a numeric epoch (seconds vs ms via the 1e12 boundary) or
+ * a parseable date string, else `null` — the shared `isoDate` semantics. The
+ * one local delta kept: a non-positive numeric is `null` (no deadline) rather
+ * than an epoch 0/negative instant.
+ */
 function isoTimestamp(value: unknown): string | null {
   const numeric = numberOrNull(value);
-  if (numeric !== null) {
-    if (numeric <= 0) return null;
-    const date = new Date(numeric > 1_000_000_000_000 ? numeric : numeric * 1000);
-    return Number.isFinite(date.getTime()) ? date.toISOString() : null;
-  }
-  if (typeof value !== "string" || !Number.isFinite(Date.parse(value))) return null;
-  return new Date(value).toISOString();
+  if (numeric !== null && numeric <= 0) return null;
+  return isoDate(value);
 }
 
 function withQuery(path: string, params: Readonly<Record<string, string | null>>): string {
@@ -149,8 +143,8 @@ function windowLimits(
   limits: Record<string, unknown>,
 ): readonly ProviderQuotaWindow[] {
   const out: ProviderQuotaWindow[] = [];
-  const fiveHour = recordValue(limits["fiveHour"]);
-  const weekly = recordValue(limits["weekly"]);
+  const fiveHour = asRecord(limits["fiveHour"]);
+  const weekly = asRecord(limits["weekly"]);
   const push = (source: Record<string, unknown> | undefined, kind: string, label: string) => {
     if (source === undefined) return;
     const used = numberOrNull(source["used"]) ?? 0;
@@ -191,9 +185,9 @@ export async function fetchCommandCodeQuota(
     };
   }
 
-  const whoamiBody = whoami.ok ? recordValue(whoami.value) : undefined;
-  const user = recordValue(whoamiBody?.["user"]);
-  const organization = recordValue(whoamiBody?.["org"]);
+  const whoamiBody = whoami.ok ? asRecord(whoami.value) : undefined;
+  const user = asRecord(whoamiBody?.["user"]);
+  const organization = asRecord(whoamiBody?.["org"]);
   const orgId = typeof organization?.["id"] === "string" ? organization["id"] : null;
   const accountLabel =
     (typeof user?.["email"] === "string" && user["email"]) ||
@@ -215,8 +209,8 @@ export async function fetchCommandCodeQuota(
     };
   }
 
-  const subscriptionBody = subscriptionRaw.ok ? recordValue(subscriptionRaw.value) : undefined;
-  const planRecord = recordValue(subscriptionBody?.["data"]);
+  const subscriptionBody = subscriptionRaw.ok ? asRecord(subscriptionRaw.value) : undefined;
+  const planRecord = asRecord(subscriptionBody?.["data"]);
   const planId = typeof planRecord?.["planId"] === "string" ? planRecord["planId"] : null;
   const parsedPlan = planId === null ? null : commandCodePlan(planId);
   const plan =
@@ -225,12 +219,12 @@ export async function fetchCommandCodeQuota(
     (creditsRaw.ok ? "Credits" : null);
   const periodEnd = isoTimestamp(planRecord?.["currentPeriodEnd"]);
 
-  const creditsBody = creditsRaw.ok ? recordValue(creditsRaw.value) : undefined;
+  const creditsBody = creditsRaw.ok ? asRecord(creditsRaw.value) : undefined;
   const windows: ProviderQuotaWindow[] = [];
   if (creditsBody !== undefined) {
-    const credits = recordValue(creditsBody["credits"]);
+    const credits = asRecord(creditsBody["credits"]);
     if (credits !== undefined) windows.push(...creditWindows(credits, parsedPlan?.cap ?? null, periodEnd));
-    const limits = recordValue(creditsBody["windowLimits"]);
+    const limits = asRecord(creditsBody["windowLimits"]);
     if (limits !== undefined) windows.push(...windowLimits(limits));
   }
 

package/src/providers/integrations/cursor/cursor-auth.ts

@@ -41,7 +41,6 @@ import {
   CURSOR_WEBSITE_URL,
   SESSION_REFRESH_TIMEOUT_MS,
   SIGN_IN_POLICY_VIOLATION,
-  TOKEN_EXPIRY_THRESHOLD_S,
   isExchangeableApiKey,
 } from "./cursor-shared";
 
@@ -92,13 +91,6 @@ export function decodeJwtExpiryMs(token: string): number | undefined {
   return exp * 1000;
 }
 
-/** True when a JWT expires within the refresh threshold. */
-export function isExpiringSoon(token: string, thresholdSeconds = TOKEN_EXPIRY_THRESHOLD_S): boolean {
-  const expiry = decodeJwtExpiryMs(token);
-  if (expiry === undefined) return false;
-  return expiry - Date.now() < thresholdSeconds * 1000;
-}
-
 /**
  * The account identity Cursor itself asserts, from the access token's `sub`.
  *

package/src/providers/integrations/cursor/cursor-catalog.ts

@@ -19,6 +19,7 @@ import {
   FALLBACK_CLIENT_VERSION,
   SERVER_CONFIG_PATH,
   normalizeAgentRunOrigin,
+  resolveCursorTimezone,
 } from "./cursor-shared";
 import { createCursorChecksumHeader, resolveCursorDeviceIds } from "./cursor-identity";
 
@@ -66,6 +67,7 @@ async function unaryHeaders(
     "x-cursor-checksum": createCursorChecksumHeader(machineId, macMachineId),
     "x-ghost-mode": "true",
     "x-request-id": crypto.randomUUID(),
+    ...(resolveCursorTimezone() === "" ? {} : { "x-cursor-timezone": resolveCursorTimezone() }),
   };
 }