cartethyia 2.7.8 → 2.8.0

package/src/providers/integrations/buddy/workbuddy/provider.ts

@@ -1,209 +0,0 @@
-// WorkBuddy international adapter — exact provider contract.
-// Canonical provider ID: workbuddy
-// Base (manifest-owned) → Chat: base + /v2/chat/completions
-// Auth: Authorization Bearer for both api_key and oauth
-// Stream: force stream=true upstream, factory reaggregates for non-stream callers
-// Headers: official desktop-client identity (WorkBuddy AI brand) with fresh
-//          correlation IDs + account-stable device headers per dispatch
-// Payload: leading WorkBuddy system prompt + typed user content, reasoning_summary
-//          auto only when reasoning_effort requested
-
-import { BuddyMediaAdapter } from "../buddy-media";
-import { providerBaseUrl } from "../../../provider-metadata";
-import { GatewayError } from "../../../../protocol/gateway-error";
-import type { CanonicalRequest } from "../../../../protocol/canonical-model";
-import type { ProviderAdapter, ProviderDispatchContext, ProviderDispatchTarget } from "../../../provider-contracts";
-import type { ModelDefinition } from "../../../provider-model-definition";
-import type { DiscoveryInput } from "../../../discovery/discovery-types";
-import {
-  WORKBUDDY_CHAT_PATH,
-  WORKBUDDY_DOMAIN,
-  workbuddyAdapterConfig,
-  workbuddyHeaders,
-} from "./shared";
-import {
-  BUDDY_SHARED_RAW,
-  BUDDY_IMAGE_MODEL_ID_SET,
-  BUDDY_VIDEO_MODEL_ID_SET,
-  makeBuddyModel,
-  makeBuddyImageModels,
-  makeBuddyVideoModels,
-  type BuddyRawEntry,
-} from "../buddy-catalog-shared";
-import { BUDDY_INTL_MODELS_PATH, fetchBuddyDirectoryModels } from "../buddy-discovery-shared";
-import {
-  applyBuddySystemPrompt,
-  buddyPrePayloadCommon,
-  injectBuddyParallelToolCalls,
-  normalizeBuddyToolNames,
-} from "../buddy-chat-shared";
-
-// Constants — public contract
-export const WORKBUDDY_PROVIDER_ID = "workbuddy" as const;
-export const WORKBUDDY_BASE_URL = providerBaseUrl("workbuddy");
-
-// Payload hook — provider semantics
-// - force stream=true
-// - reasoning_summary auto only when reasoning_effort requested
-// - leading WorkBuddy system prompt + typed user content normalization
-
-/**
- * Leading system turn for this variant.
- *
- * The upstream validates that the wire opens with a `system` turn and treats
- * that prompt as the calling channel's identity: forwarding caller text in its
- * place answers `400 · 11128 "Illegal API invocation from an unapproved
- * channel"`. So this prompt is a wire contract, not merely a product choice —
- * see the sibling in `codebuddy.ts`.
- *
- * The text is deliberately neutral: a simple helpful-assistant persona with no
- * client/CLI branding, kept minimal so it reads naturally to any model and
- * does not advertise a channel identity upstream.
- */
-export const WORKBUDDY_SYSTEM_PROMPT = "You are a helpful assistant.";
-
-/**
- * Reconstructs generic function declarations when a later tool-history turn
- * arrives without the client's current `tools` array. WorkBuddy validates the
- * Chat Completions envelope against every historical tool call, so forwarding
- * `tool_calls`/`tool` messages without declarations yields model_param_invalid.
- */
-function restoreHistoricalToolDefinitions(
-  payload: Record<string, unknown>,
-  messages: readonly Record<string, unknown>[],
-): void {
-  const historicalNames = new Set<string>();
-  for (const message of messages) {
-    if (message["role"] !== "assistant" || !Array.isArray(message["tool_calls"])) continue;
-    for (const rawCall of message["tool_calls"]) {
-      if (!rawCall || typeof rawCall !== "object") continue;
-      const call = rawCall as Record<string, unknown>;
-      const functionValue =
-        call["function"] && typeof call["function"] === "object"
-          ? (call["function"] as Record<string, unknown>)
-          : undefined;
-      const name = functionValue?.["name"];
-      if (typeof name === "string" && name.trim().length > 0) historicalNames.add(name);
-    }
-  }
-  if (historicalNames.size === 0) return;
-
-  const existing = Array.isArray(payload["tools"])
-    ? (payload["tools"] as Array<Record<string, unknown>>)
-    : [];
-  const definedNames = new Set<string>();
-  for (const rawTool of existing) {
-    if (!rawTool || typeof rawTool !== "object") continue;
-    const tool = rawTool as Record<string, unknown>;
-    const functionValue =
-      tool["function"] && typeof tool["function"] === "object"
-        ? (tool["function"] as Record<string, unknown>)
-        : tool;
-    if (typeof functionValue["name"] === "string") definedNames.add(functionValue["name"]);
-  }
-  const recovered = [...historicalNames]
-    .filter((name) => !definedNames.has(name))
-    .map((name) => ({
-      type: "function",
-      function: {
-        name,
-        description: "Recovered from historical tool calls.",
-        parameters: { type: "object", additionalProperties: true },
-      },
-    }));
-  if (recovered.length > 0) payload["tools"] = [...existing, ...recovered];
-}
-
-
-export function workbuddyPrePayload(
-  payload: Record<string, unknown>,
-  request: CanonicalRequest,
-  candidate: ProviderDispatchTarget,
-  context?: ProviderDispatchContext,
-): void {
-  // International ladder. This hook is shared by `workbuddy` and `workbuddycn`
-  // (see workbuddy/cn-provider.ts): the CN effort ladders in the reference
-  // gateways are a CodeBuddy-CN concern, so `workbuddycn` deliberately stays on
-  // the intl table. Switch to `"cn"` only if a live CN WorkBuddy account proves
-  // it serves levels the intl table clamps.
-  buddyPrePayloadCommon(payload, request, "intl", context);
-  const rawModel = payload["model"];
-  const source =
-    typeof rawModel === "string" && rawModel.length > 0 ? rawModel : candidate.model_id;
-  if (!source) throw new GatewayError("invalid_request", 400, "WorkBuddy model is required (request {requestId}). Check the shape of what you sent — then resend 🪞");
-  const messages = payload["messages"];
-  if (Array.isArray(messages)) {
-    const normalizedMessages = messages as Array<Record<string, unknown>>;
-    applyBuddySystemPrompt(
-      normalizedMessages,
-      WORKBUDDY_SYSTEM_PROMPT,
-      context?.tenant_system_prompt,
-    );
-    restoreHistoricalToolDefinitions(payload, normalizedMessages);
-  }
-  normalizeBuddyToolNames(payload);
-  injectBuddyParallelToolCalls(payload, request);
-  void request;
-}
-
-// Model catalog — WorkBuddy international catalog.
-// Static seed derived from the reference gateway's model.json (context/output
-// limits) plus its global effort table; `reasoning` marks models with a
-// declared reasoning-effort scale.
-const WORKBUDDY_RAW: readonly BuddyRawEntry[] = BUDDY_SHARED_RAW;
-
-function makeWorkBuddyModels(providerId: "workbuddy" | "workbuddycn"): readonly ModelDefinition[] {
-  return [
-    ...WORKBUDDY_RAW.filter(
-      (entry) => !BUDDY_IMAGE_MODEL_ID_SET.has(entry[0]) && !BUDDY_VIDEO_MODEL_ID_SET.has(entry[0]),
-    ).map((entry) => makeBuddyModel(entry, providerId, WORKBUDDY_CHAT_PATH)),
-    // WorkBuddy's base URL carries no version segment, so the image rows need the
-    // same explicit path the chat rows use — the generic default would produce a
-    // URL this upstream answers with a 405.
-    ...makeBuddyImageModels(providerId, WORKBUDDY_CHAT_PATH),
-    ...makeBuddyVideoModels(providerId, "/v2/videos/generations"),
-  ];
-}
-
-export const WORKBUDDY_MODELS: readonly ModelDefinition[] = makeWorkBuddyModels("workbuddy");
-
-/**
- * Reads WorkBuddy's live console directory.
- *
- * The static `WORKBUDDY_MODELS` above is the fallback: this is what the "Fetch
- * models" action persists, and it carries the upstream's own limits and
- * capability flags rather than the seed's snapshot of them.
- */
-export async function discoverWorkBuddyModels(
-  input: DiscoveryInput,
-): Promise<readonly ModelDefinition[] | null> {
-  return fetchBuddyDirectoryModels({
-    siteUrl: WORKBUDDY_BASE_URL,
-    providerId: WORKBUDDY_PROVIDER_ID,
-    credential: input.credential,
-    modelsPath: BUDDY_INTL_MODELS_PATH,
-    endpoint: WORKBUDDY_CHAT_PATH,
-    ...(input.signal ? { signal: input.signal } : {}),
-    ...(input.fetcher ? { fetcher: input.fetcher } : {}),
-  });
-}
-
-// Public factory — uses the OpenAI-compatible factory but forces provider semantics.
-// Supports both api_key and oauth via Authorization Bearer (factory handles both).
-export function createWorkBuddyAdapter(fetchImpl?: typeof fetch): ProviderAdapter {
-  return new BuddyMediaAdapter(
-    workbuddyAdapterConfig({
-      providerId: WORKBUDDY_PROVIDER_ID,
-      baseUrl: WORKBUDDY_BASE_URL,
-      prePayload: workbuddyPrePayload,
-      ...(fetchImpl ? { fetchImpl } : {}),
-    }),
-    {
-      variant: "IDE",
-      systemPrompt: WORKBUDDY_SYSTEM_PROMPT,
-      baseUrl: WORKBUDDY_BASE_URL,
-      buildHeaders: (context, request) =>
-        workbuddyHeaders(context, request, WORKBUDDY_DOMAIN, undefined, true),
-    },
-  );
-}

package/src/providers/integrations/buddy/workbuddy/quota.ts

@@ -1,161 +0,0 @@
-import type { FetchLike, ProviderQuotaResult } from "../../../quota/quota-contracts";
-import type { QuotaCollectionContext } from "../../../quota/quota-support";
-import { providerBaseUrl } from "../../../provider-metadata";
-import {
-  buildWorkBuddyUserAgent,
-  getWorkBuddyClientVersion,
-  getWorkBuddyCnClientVersion,
-  getWorkBuddyCliVersion,
-} from "../../../operations/client-versions";
-import { WORKBUDDY_DOMAIN } from "./shared";
-import { fetchTencentBillingQuota } from "../buddy-quota-shared";
-import { fetchBuddyRequestUsage, type BuddyUsageResult } from "../buddy-usage-shared";
-import { buddyAccountUid } from "../buddy-oauth-shared";
-
-/**
- * WorkBuddy international billing quota.
- *
- * Endpoint: POST https://www.workbuddy.ai/v2/billing/meter/get-user-resource
- * Request:  Authorization: Bearer <accessToken||apiKey>, desktop-client headers,
- *           X-User-Id for the account UID, and the reference filter envelope
- *           (ProductCode p_tcaca, statuses [0, 3], 101-year package window).
- * Response: { code: 0, data: { Response: { Data: { Accounts: [...] } } } }
- *
- * Same Tencent billing envelope as CodeBuddy CN, so the parsing is the shared
- * one in `buddy-quota-shared.ts`; only the endpoint and identity headers are
- * WorkBuddy-specific.
- */
-
-/**
- * The CN billing realm's host.
- *
- * The reference bills the CN realm here rather than on the CN chat host
- * (`www.workbuddy.cn`): billing is a separate service, and the chat host does
- * not serve the meter path.
- */
-const WORKBUDDY_CN_BILLING_BASE_URL = "https://www.codebuddy.cn";
-
-export const WORKBUDDY_USAGE_URL =
-  `${providerBaseUrl("workbuddy")}/v2/billing/meter/get-user-resource`;
-
-async function billingHeaders(
-  domain: string,
-  clientVersion: string,
-  enterpriseId?: string,
-): Promise<Record<string, string>> {
-  return {
-    "User-Agent": buildWorkBuddyUserAgent(clientVersion, getWorkBuddyCliVersion()),
-    "X-Product": "SaaS",
-    "X-Domain": domain,
-    "X-Requested-With": "XMLHttpRequest",
-    "X-CodeBuddy-Request": "1",
-    "Accept-Language": "en-US",
-    ...(enterpriseId === undefined || enterpriseId.length === 0
-      ? {}
-      : { "X-Tenant-Id": enterpriseId, "X-Enterprise-Id": enterpriseId }),
-  };
-}
-
-/**
- * Fetches WorkBuddy quota via the Tencent billing endpoint.
- *
- * Auth: `Authorization: Bearer <credential>` (api_key and oauth both use
- * Bearer; the caller passes the resolved secret).
- */
-export async function fetchWorkBuddyQuota(
-  credential: string,
-  fetcher: FetchLike,
-  context?: QuotaCollectionContext,
-): Promise<ProviderQuotaResult> {
-  return fetchWorkBuddyQuotaFor({
-    providerId: "workbuddy",
-    display: "WorkBuddy",
-    domain: WORKBUDDY_DOMAIN,
-    credential,
-    fetcher,
-    ...(context === undefined ? {} : { context }),
-  });
-}
-
-export async function fetchWorkBuddyCnQuota(
-  credential: string,
-  fetcher: FetchLike,
-  context?: QuotaCollectionContext,
-): Promise<ProviderQuotaResult> {
-  return fetchWorkBuddyQuotaFor({
-    providerId: "workbuddycn",
-    display: "WorkBuddy CN",
-    domain: "www.workbuddy.cn",
-    credential,
-    fetcher,
-    ...(context === undefined ? {} : { context }),
-  });
-}
-
-async function fetchWorkBuddyQuotaFor(args: {
-  readonly providerId: "workbuddy" | "workbuddycn";
-  readonly display: string;
-  readonly domain: string;
-  readonly credential: string;
-  readonly fetcher: FetchLike;
-  readonly context?: QuotaCollectionContext;
-}): Promise<ProviderQuotaResult> {
-  const { providerId, display, domain, credential, fetcher, context } = args;
-  const authState = typeof context?.auth_state === "object" && context?.auth_state !== null
-    ? (context.auth_state as Record<string, unknown>)
-    : undefined;
-  const enterpriseId = typeof authState?.enterpriseId === "string" ? authState.enterpriseId : undefined;
-  const clientVersion = providerId === "workbuddycn"
-    ? getWorkBuddyCnClientVersion()
-    : getWorkBuddyClientVersion();
-  // The reference bills the CN realm on `www.codebuddy.cn`, not the chat host:
-  // the billing realm is a different service from the one that serves chat,
-  // and the CN chat host answers the meter path with an HTML error page.
-  const billingBase = providerId === "workbuddycn" ? WORKBUDDY_CN_BILLING_BASE_URL : providerBaseUrl(providerId);
-  return fetchTencentBillingQuota({
-    source: providerId,
-    display,
-    url: `${billingBase}/v2/billing/meter/get-user-resource`,
-    headers: await billingHeaders(domain, clientVersion, enterpriseId),
-    credential,
-    fetcher,
-    defaultPlan: display,
-    uid: buddyAccountUid(credential),
-  });
-}
-
-/**
- * Real credit deductions for one WorkBuddy account.
- *
- * Mirrors {@link fetchWorkBuddyQuotaFor} in every respect but the endpoint —
- * same billing host, same client-version identity headers, same account UID —
- * because the usage-detail surface is the billing meter's other read.
- */
-export async function fetchWorkBuddyRequestUsage(
-  credential: string,
-  fetcher: FetchLike,
-  args: {
-    readonly providerId?: "workbuddy" | "workbuddycn";
-    readonly days?: number;
-    readonly context?: QuotaCollectionContext;
-  } = {},
-): Promise<BuddyUsageResult> {
-  const providerId = args.providerId ?? "workbuddy";
-  const domain = providerId === "workbuddycn" ? "www.workbuddy.cn" : WORKBUDDY_DOMAIN;
-  const authState = typeof args.context?.auth_state === "object" && args.context?.auth_state !== null
-    ? (args.context.auth_state as Record<string, unknown>)
-    : undefined;
-  const enterpriseId = typeof authState?.enterpriseId === "string" ? authState.enterpriseId : undefined;
-  const clientVersion = providerId === "workbuddycn"
-    ? getWorkBuddyCnClientVersion()
-    : getWorkBuddyClientVersion();
-  return fetchBuddyRequestUsage({
-    url: `${providerBaseUrl(providerId)}/billing/meter/get-user-request-usage`,
-    headers: await billingHeaders(domain, clientVersion, enterpriseId),
-    credential,
-    fetcher,
-    days: args.days ?? 30,
-    uid: buddyAccountUid(credential),
-  });
-}
-

package/src/providers/integrations/buddy/workbuddy/shared.ts

@@ -1,285 +0,0 @@
-import { createHash } from "node:crypto";
-import { readFileSync } from "node:fs";
-
-import type { OpenAICompatibleAdapterConfig } from "../../../adapters/compatible-adapter";
-import { withBearerAuthentication } from "../../../adapters/compatible-adapter";
-import type { CanonicalRequest } from "../../../../protocol/canonical-model";
-import type { ProviderDispatchContext, ProviderDispatchTarget, ProviderId } from "../../../provider-contracts";
-import { resolveInboundSessionId } from "../../../operations/session-resolution";
-import { buddyConversationHeaders } from "../buddy-conversation-headers";
-import { buddyCliHeaders, buddyCliTraceHeaders } from "../buddy-cli-headers";
-import {
-  buddyAgentPurpose,
-  buddyEnterprise,
-  buddyOAuthIdentityHeaders,
-  buddyPrivateData,
-  buddyUserId,
-  resolveBuddyDeviceBinding,
-  resolveBuddyIdentity,
-} from "../buddy-identity";
-import {
-  buildWorkBuddyUserAgent,
-  getWorkBuddyClientVersion,
-  getWorkBuddyCliVersion,
-} from "../../../operations/client-versions";
-import {
-  getTuringDeviceTokenService,
-  resolveTuringSdkRoot,
-  type TuringSdkConfig,
-  WORKBUDDY_TURING_CONFIG,
-} from "../turing-device-token";
-
-/**
- * WorkBuddy serves chat from a versioned path on a base URL that carries no
- * version segment (billing uses the unversioned `/billing/…` path), so both the
- * adapter config and the static catalog rows must state it. The generic
- * `/chat/completions` default would join into
- * `https://www.workbuddy.ai/chat/completions`, which that upstream answers with
- * a 405 HTML error page.
- */
-export const WORKBUDDY_CHAT_PATH = "/v2/chat/completions" as const;
-
-export {
-  buildWorkBuddyUserAgent,
-  getWorkBuddyClientVersion,
-  getWorkBuddyCliVersion,
-};
-
-/** WorkBuddy international gateway domain (Origin/Referer/X-Domain). */
-export const WORKBUDDY_DOMAIN = "www.workbuddy.ai";
-
-/**
- * Stable per-account device identifiers.
- *
- * WorkBuddy's desktop client presents one fixed virtual device per account.
- * Deriving `X-Machine-ID` / `X-Session-ID` from the account id (sha256, 36 hex)
- * keeps them constant across restarts while staying distinct per account, so
- * multiple pooled accounts are not correlated by a missing or drifting device
- * fingerprint. Mirrors the reference gateway's `wb2a:<purpose>:<uid>` scheme.
- */
-function deriveAccountStableId(accountId: string, purpose: string): string {
-  const sum = createHash("sha256").update(`wb2a:${purpose}:${accountId}`).digest("hex");
-  return sum.slice(0, 36);
-}
-
-/**
- * Per-request WorkBuddy chat headers — the exact desktop-client contract.
- *
- * The international gateway gates chat on the desktop `User-Agent` (platform
- * brand `WorkBuddy AI`, carried on the wire as the token `workbuddy-ai`;
- * the wrong token trips 403 code 11140), plus the `X-CodeBuddy-Request` risk
- * gate and the account-scoped device headers.
- * The background client-version monitor keeps this value fresh; dispatch only
- * reads the cached value and never waits on a version endpoint.
- *
- * `cliIdentity` selects the reference CLI contract instead. The two are not
- * variations of one set: the CLI drops every browser header and the device
- * token, and adds the agent envelope. Left unset, nothing changes.
- */
-export async function workbuddyHeaders(
-  context?: ProviderDispatchContext,
-  request?: CanonicalRequest,
-  domain = WORKBUDDY_DOMAIN,
-  clientVersion = getWorkBuddyClientVersion(),
-  cliIdentity?: boolean,
-): Promise<Record<string, string>> {
-  const identity = resolveBuddyIdentity(context, cliIdentity);
-  const conversation = buddyConversationHeaders({
-    ...(resolveInboundSessionId(context, request) === undefined
-      ? {}
-      : { conversationId: resolveInboundSessionId(context, request) }),
-    // The reference emits dashed-UUID message/request ids on the WorkBuddy
-    // desktop product and 32-hex on CLI traffic (build_attempt_headers converts
-    // only the message/request ids, and only for the WorkBuddy profiles).
-    messageIdStyle: identity === "desktop" ? "uuid" : "hex",
-  });
-  const accountId = context?.credential.account_id;
-  const purpose = buddyAgentPurpose(context, request);
-  if (identity === "cli") {
-    const inbound = context?.request_headers;
-    const rootRequestId = inbound?.["x-root-request-id"]?.trim();
-    const parentConversationId = inbound?.["x-parent-conversation-id"]?.trim();
-    // The reference CLI: issued by the OpenAI Node SDK, so no browser
-    // *transport* header (origin/referer/accept-language) and no device token,
-    // and the machine/session device pair does not exist — only `X-User-Id`,
-    // which is `anonymous` without a uid. It keeps the request-shape markers
-    // (`x-requested-with`, `x-codebuddy-request`) the reference sends on every
-    // call regardless of transport.
-    return {
-      accept: "application/json",
-      "user-agent": `CLI/${getWorkBuddyCliVersion()} CodeBuddy/${getWorkBuddyCliVersion()}`,
-      "x-requested-with": "XMLHttpRequest",
-      "x-codebuddy-request": "1",
-      "x-domain": domain,
-      ...(purpose === undefined ? {} : { "x-agent-purpose": purpose }),
-      "x-ide-name": "CLI",
-      "x-ide-type": "CLI",
-      "x-ide-version": getWorkBuddyCliVersion(),
-      "x-product": "SaaS",
-      "x-no-enterprise-id": "1",
-      ...conversation,
-      ...(rootRequestId === undefined ? {} : { "x-root-request-id": rootRequestId }),
-      ...(parentConversationId === undefined
-        ? {}
-        : { "x-parent-conversation-id": parentConversationId }),
-      ...buddyCliTraceHeaders(conversation),
-      ...buddyOAuthIdentityHeaders(context),
-      ...buddyCliHeaders({
-        userId: buddyUserId(context),
-        enterpriseId: buddyEnterprise(context),
-        privateData: buddyPrivateData(context),
-      }),
-    };
-  }
-  const headers: Record<string, string> = {
-    accept: "application/json, text/event-stream",
-    "user-agent": buildWorkBuddyUserAgent(clientVersion, getWorkBuddyCliVersion()),
-    origin: `https://${domain}`,
-    referer: `https://${domain}/`,
-    "accept-language": "en-US",
-    "x-requested-with": "XMLHttpRequest",
-    "x-codebuddy-request": "1",
-    "x-domain": domain,
-    ...(purpose === undefined ? {} : { "x-agent-purpose": purpose }),
-    "x-ide-name": "WorkBuddy",
-    "x-ide-type": "WorkBuddy",
-    "x-ide-version": clientVersion,
-    // Both references send the literal `SaaS` here. `WorkBuddy` was a value
-    // this repo invented; the desktop product name belongs in `x-ide-name`,
-    // and the CN test below compares the two realms against each other rather
-    // than to a hard-coded string.
-    "x-product": "SaaS",
-    // Personal international accounts carry no enterprise id: declare it
-    // explicitly so upstream risk control does not treat the omission as
-    // suspicious.
-    "x-no-enterprise-id": "1",
-  };
-  // The conversation/tracing family the upstream's channel check looks for. A
-  // live request carrying only `x-session-id` was refused for a missing
-  // conversation id; the aggregation key below is the one the reference marks
-  // mandatory.
-  Object.assign(headers, conversation);
-  if (accountId) {
-    headers["x-user-id"] = accountId;
-    headers["x-machine-id"] = deriveAccountStableId(accountId, "machine");
-    headers["x-session-id"] = deriveAccountStableId(accountId, "session");
-  }
-  // Per-account device binding: distinct device identity per account (see
-  // resolveBuddyDeviceBinding). Sent as the desktop's X-Device-Id-List.
-  const binding = resolveBuddyDeviceBinding(context);
-  if (binding !== undefined) {
-    headers["x-device-id-list"] = JSON.stringify({ qimei36: binding });
-  }
-  Object.assign(headers, await buddyDeviceTokenHeaders({
-    realm: domain.endsWith(".cn") ? "cn" : "intl",
-    context,
-    cliIdentity,
-  }));
-  return headers;
-}
-
-/**
- * Desktop risk token, sent only when the account actually has one.
- *
- * The account's own `auth_state` wins. When it carries none, a file the
- * desktop client writes (`CARTETHYIA_DEVICE_TOKEN_FILE`, default
- * `/app/data/device_token`) is read instead — cached for five minutes, and
- * ignored when it is larger than 1 KB, because a token file that size is not
- * a token. A missing file is the normal case and reads as "no token".
- */
-const DEVICE_TOKEN_FILE_MAX_BYTES = 1024;
-const DEVICE_TOKEN_FILE_TTL_MS = 5 * 60_000;
-let deviceTokenFileCache: { readonly value: string | undefined; readonly readAt: number } | undefined;
-
-export function readBuddyDeviceToken(context?: ProviderDispatchContext): string | undefined {
-  const state = context?.credential.auth_state;
-  const value = state?.["deviceToken"] ?? state?.["device_token"];
-  if (typeof value === "string" && value.trim().length > 0) return value.trim();
-  return readDeviceTokenFile();
-}
-
-/**
- * The reference `X-Device-Token` pair, per the official desktop app.
- *
- * The desktop client (WorkBuddyAI, channel 400111) always presents one of the
- * two on chat traffic — a real token from the TuringShield SDK, or an
- * `X-Device-Token-Error` when the SDK cannot produce one. It never omits both,
- * and it sends the header on every realm (Intl and CN alike). The SDK is a
- * proprietary native addon; when it is not configured we fall back to a
- * captured token (auth_state / `CARTETHYIA_DEVICE_TOKEN_FILE`) and only then
- * to the official failure state.
- *
- * - `CARTETHYIA_TURING_SDK_PATH` → real token via `TuringDeviceTokenService`.
- * - Legacy token (auth_state/file) → used when the SDK is unavailable.
- * - CLI identity never carries a device token (the CLI has no device).
- */
-export async function buddyDeviceTokenHeaders(args: {
-  realm: "intl" | "cn";
-  context: ProviderDispatchContext | undefined;
-  cliIdentity: boolean | undefined;
-  turingConfig?: TuringSdkConfig;
-}): Promise<Record<string, string>> {
-  const { context, cliIdentity, turingConfig } = args;
-  void args.realm; // the desktop client sends the token on both realms
-  if (resolveBuddyIdentity(context, cliIdentity) === "cli") return {};
-  // Native SDK first (real token), when configured.
-  if (resolveTuringSdkRoot() !== null) {
-    const sdkHeaders = await getTuringDeviceTokenService(turingConfig ?? WORKBUDDY_TURING_CONFIG).headersForRequest(false);
-    if (sdkHeaders["x-device-token"] !== undefined) return sdkHeaders;
-    // SDK configured but could not produce a token: mirror its failure state,
-    // like the desktop client does — do not fall back to a stale file token.
-    return sdkHeaders;
-  }
-  // No SDK on this deployment: a captured token is better than nothing.
-  const token = readBuddyDeviceToken(context);
-  if (token !== undefined) return { "x-device-token": token };
-  return { "x-device-token-error": "sdk_not_initialized" };
-}
-
-function readDeviceTokenFile(): string | undefined {
-  const now = Date.now();
-  if (deviceTokenFileCache !== undefined && now - deviceTokenFileCache.readAt < DEVICE_TOKEN_FILE_TTL_MS) {
-    return deviceTokenFileCache.value;
-  }
-  const path = process.env["CARTETHYIA_DEVICE_TOKEN_FILE"] ?? "/app/data/device_token";
-  let value: string | undefined;
-  try {
-    const raw = readFileSync(path);
-    if (raw.byteLength > 0 && raw.byteLength <= DEVICE_TOKEN_FILE_MAX_BYTES) {
-      const text = raw.toString("utf8").trim();
-      if (text.length > 0) value = text;
-    }
-  } catch {
-    value = undefined;
-  }
-  deviceTokenFileCache = { value, readAt: now };
-  return value;
-}
-
-/**
- * Shared OpenAI-compatible chat-adapter config for WorkBuddy: bearer auth
- * (api_key and oauth both use `Authorization: Bearer`), `/v2/chat/completions`
- * endpoint, per-request desktop-client headers, and the payload hook.
- */
-export function workbuddyAdapterConfig(args: {
-  providerId: ProviderId;
-  baseUrl: string;
-  domain?: string;
-  prePayload: (
-    payload: Record<string, unknown>,
-    request: CanonicalRequest,
-    candidate: ProviderDispatchTarget,
-  ) => void;
-  fetchImpl?: typeof fetch;
-  cliIdentity?: boolean;
-}): OpenAICompatibleAdapterConfig {
-  return withBearerAuthentication({
-    provider_id: args.providerId,
-    base_url: args.baseUrl,
-    endpoint_paths_by_wire_family: { chat: WORKBUDDY_CHAT_PATH },
-    buildExtraHeaders: (context, request) =>
-      workbuddyHeaders(context, request, args.domain ?? WORKBUDDY_DOMAIN, undefined, args.cliIdentity),
-    prePayload: args.prePayload,
-    ...(args.fetchImpl ? { fetchImpl: args.fetchImpl } : {}),
-  });
-}

package/src/providers/operations/model-discovery-cache.ts

@@ -1,34 +0,0 @@
-/**
- * TTL cache for credential-free model discovery.
- *
- * Only non-null, non-empty results are cached, so failed discovery stays
- * retryable. Concurrent misses for one key share one load through TtlCache.
- */
-import { TtlCacheFamily } from "../../persistence/ttl-cache";
-import type { ModelDefinition } from "../provider-model-definition";
-
-const MODEL_DISCOVERY_CACHE_TTL_MS = 10 * 60 * 1000;
-const discoveryCaches = new TtlCacheFamily<readonly ModelDefinition[]>({
-  defaultTtlMs: MODEL_DISCOVERY_CACHE_TTL_MS,
-});
-
-export interface CachedModelDiscoveryOptions {
-  readonly ttlMs?: number;
-}
-
-/** Returns cached models, retrying null/empty loads on the next call. */
-export async function getCachedModelDiscovery(
-  key: string,
-  loader: () => Promise<readonly ModelDefinition[] | null>,
-  options: CachedModelDiscoveryOptions = {},
-): Promise<readonly ModelDefinition[] | null> {
-  return discoveryCaches.for(options.ttlMs).load(key, loader, {
-    namespace: "model-discovery",
-    shouldCache: (models) => models.length > 0,
-  });
-}
-
-/** Drops all cached discoveries. Test-only. */
-export function resetModelDiscoveryCacheForTesting(): void {
-  discoveryCaches.clear();
-}