dsh-coding-subscription-oauth 0.5.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (178) hide show
  1. package/CHANGELOG.md +136 -0
  2. package/CONTRIBUTING.md +109 -0
  3. package/INSTALL.md +220 -0
  4. package/LICENSE +19 -0
  5. package/NOTICE +11 -0
  6. package/README.de.md +254 -0
  7. package/README.es.md +254 -0
  8. package/README.fr.md +254 -0
  9. package/README.ja.md +254 -0
  10. package/README.ko.md +254 -0
  11. package/README.md +286 -0
  12. package/README.pt-BR.md +254 -0
  13. package/README.ru.md +254 -0
  14. package/README.zh-CN.md +271 -0
  15. package/cordis.patch.yml +13 -0
  16. package/docs/00-project-rules.md +195 -0
  17. package/docs/02-architecture.md +132 -0
  18. package/docs/02-architecture.zh-CN.md +128 -0
  19. package/lib/adapter.d.ts +24 -0
  20. package/lib/adapter.d.ts.map +1 -0
  21. package/lib/alias-adapter.d.ts +43 -0
  22. package/lib/alias-adapter.d.ts.map +1 -0
  23. package/lib/auth-routes.d.ts +155 -0
  24. package/lib/auth-routes.d.ts.map +1 -0
  25. package/lib/auth.d.ts +29 -0
  26. package/lib/auth.d.ts.map +1 -0
  27. package/lib/bin.d.ts +6 -0
  28. package/lib/bin.d.ts.map +1 -0
  29. package/lib/bin.js +27591 -0
  30. package/lib/bin.js.map +7 -0
  31. package/lib/capability-routes.d.ts +43 -0
  32. package/lib/capability-routes.d.ts.map +1 -0
  33. package/lib/capability-runtime.d.ts +56 -0
  34. package/lib/capability-runtime.d.ts.map +1 -0
  35. package/lib/capability-settings.d.ts +263 -0
  36. package/lib/capability-settings.d.ts.map +1 -0
  37. package/lib/capability-tools.d.ts +50 -0
  38. package/lib/capability-tools.d.ts.map +1 -0
  39. package/lib/catalog.d.ts +53 -0
  40. package/lib/catalog.d.ts.map +1 -0
  41. package/lib/client.js +3 -0
  42. package/lib/client.js.map +7 -0
  43. package/lib/codex-http.d.ts +77 -0
  44. package/lib/codex-http.d.ts.map +1 -0
  45. package/lib/codex-images.d.ts +109 -0
  46. package/lib/codex-images.d.ts.map +1 -0
  47. package/lib/codex-model-capabilities.d.ts +112 -0
  48. package/lib/codex-model-capabilities.d.ts.map +1 -0
  49. package/lib/codex-search.d.ts +96 -0
  50. package/lib/codex-search.d.ts.map +1 -0
  51. package/lib/codex-usage.d.ts +79 -0
  52. package/lib/codex-usage.d.ts.map +1 -0
  53. package/lib/gateway-anthropic-messages.d.ts +8 -0
  54. package/lib/gateway-anthropic-messages.d.ts.map +1 -0
  55. package/lib/gateway-auth.d.ts +22 -0
  56. package/lib/gateway-auth.d.ts.map +1 -0
  57. package/lib/gateway-backend.d.ts +62 -0
  58. package/lib/gateway-backend.d.ts.map +1 -0
  59. package/lib/gateway-body.d.ts +9 -0
  60. package/lib/gateway-body.d.ts.map +1 -0
  61. package/lib/gateway-config.d.ts +24 -0
  62. package/lib/gateway-config.d.ts.map +1 -0
  63. package/lib/gateway-http.d.ts +16 -0
  64. package/lib/gateway-http.d.ts.map +1 -0
  65. package/lib/gateway-openai-chat.d.ts +8 -0
  66. package/lib/gateway-openai-chat.d.ts.map +1 -0
  67. package/lib/gateway-openai-responses.d.ts +8 -0
  68. package/lib/gateway-openai-responses.d.ts.map +1 -0
  69. package/lib/gateway-parse.d.ts +10 -0
  70. package/lib/gateway-parse.d.ts.map +1 -0
  71. package/lib/gateway-protocol.d.ts +47 -0
  72. package/lib/gateway-protocol.d.ts.map +1 -0
  73. package/lib/gateway-routes.d.ts +21 -0
  74. package/lib/gateway-routes.d.ts.map +1 -0
  75. package/lib/gateway.d.ts +48 -0
  76. package/lib/gateway.d.ts.map +1 -0
  77. package/lib/grok-imagine.d.ts +271 -0
  78. package/lib/grok-imagine.d.ts.map +1 -0
  79. package/lib/grok-import.d.ts +21 -0
  80. package/lib/grok-import.d.ts.map +1 -0
  81. package/lib/http-json.d.ts +10 -0
  82. package/lib/http-json.d.ts.map +1 -0
  83. package/lib/ids.d.ts +33 -0
  84. package/lib/ids.d.ts.map +1 -0
  85. package/lib/imagine-routes.d.ts +59 -0
  86. package/lib/imagine-routes.d.ts.map +1 -0
  87. package/lib/index.d.ts +69 -0
  88. package/lib/index.d.ts.map +1 -0
  89. package/lib/index.js +35355 -0
  90. package/lib/index.js.map +7 -0
  91. package/lib/invariant.d.ts +9 -0
  92. package/lib/invariant.d.ts.map +1 -0
  93. package/lib/invariant.js +14 -0
  94. package/lib/invariant.js.map +7 -0
  95. package/lib/kimi-errors.d.ts +13 -0
  96. package/lib/kimi-errors.d.ts.map +1 -0
  97. package/lib/media-store.d.ts +130 -0
  98. package/lib/media-store.d.ts.map +1 -0
  99. package/lib/oauth-import-routes.d.ts +52 -0
  100. package/lib/oauth-import-routes.d.ts.map +1 -0
  101. package/lib/oauth-providers.d.ts +26 -0
  102. package/lib/oauth-providers.d.ts.map +1 -0
  103. package/lib/oauth-session.d.ts +40 -0
  104. package/lib/oauth-session.d.ts.map +1 -0
  105. package/lib/oauth-sources.d.ts +205 -0
  106. package/lib/oauth-sources.d.ts.map +1 -0
  107. package/lib/oauth.d.ts +79 -0
  108. package/lib/oauth.d.ts.map +1 -0
  109. package/lib/provider.d.ts +38 -0
  110. package/lib/provider.d.ts.map +1 -0
  111. package/lib/proxy.d.ts +17 -0
  112. package/lib/proxy.d.ts.map +1 -0
  113. package/lib/redact.d.ts +5 -0
  114. package/lib/redact.d.ts.map +1 -0
  115. package/lib/session.d.ts +40 -0
  116. package/lib/session.d.ts.map +1 -0
  117. package/lib/store.d.ts +46 -0
  118. package/lib/store.d.ts.map +1 -0
  119. package/lib/web-origin.d.ts +10 -0
  120. package/lib/web-origin.d.ts.map +1 -0
  121. package/lib/web-routes.d.ts +20 -0
  122. package/lib/web-routes.d.ts.map +1 -0
  123. package/package.json +185 -0
  124. package/patches/dsh-agy@0.1.2.patch +25 -0
  125. package/scripts/release.mjs +166 -0
  126. package/scripts/smoke-deployed-routes.mjs +146 -0
  127. package/scripts/verify-deployed-catalog.mjs +87 -0
  128. package/src/adapter.ts +282 -0
  129. package/src/alias-adapter.ts +152 -0
  130. package/src/auth-routes.ts +871 -0
  131. package/src/auth.ts +67 -0
  132. package/src/bin.ts +350 -0
  133. package/src/capability-routes.ts +275 -0
  134. package/src/capability-runtime.ts +313 -0
  135. package/src/capability-settings.ts +657 -0
  136. package/src/capability-tools.ts +666 -0
  137. package/src/catalog.ts +271 -0
  138. package/src/client/GrokBuildSettings.tsx +2221 -0
  139. package/src/client/index.tsx +37 -0
  140. package/src/client/locales.ts +421 -0
  141. package/src/codex-http.ts +447 -0
  142. package/src/codex-images.ts +485 -0
  143. package/src/codex-model-capabilities.ts +320 -0
  144. package/src/codex-search.ts +245 -0
  145. package/src/codex-usage.ts +263 -0
  146. package/src/gateway-anthropic-messages.ts +84 -0
  147. package/src/gateway-auth.ts +100 -0
  148. package/src/gateway-backend.ts +274 -0
  149. package/src/gateway-body.ts +49 -0
  150. package/src/gateway-config.ts +76 -0
  151. package/src/gateway-http.ts +104 -0
  152. package/src/gateway-openai-chat.ts +124 -0
  153. package/src/gateway-openai-responses.ts +53 -0
  154. package/src/gateway-parse.ts +224 -0
  155. package/src/gateway-protocol.ts +52 -0
  156. package/src/gateway-routes.ts +152 -0
  157. package/src/gateway.ts +242 -0
  158. package/src/grok-imagine.ts +1627 -0
  159. package/src/grok-import.ts +151 -0
  160. package/src/http-json.ts +82 -0
  161. package/src/ids.ts +45 -0
  162. package/src/imagine-routes.ts +461 -0
  163. package/src/index.ts +598 -0
  164. package/src/invariant.ts +17 -0
  165. package/src/kimi-errors.ts +26 -0
  166. package/src/media-store.ts +927 -0
  167. package/src/oauth-import-routes.ts +314 -0
  168. package/src/oauth-providers.ts +152 -0
  169. package/src/oauth-session.ts +183 -0
  170. package/src/oauth-sources.ts +1104 -0
  171. package/src/oauth.ts +620 -0
  172. package/src/provider.ts +128 -0
  173. package/src/proxy.ts +99 -0
  174. package/src/redact.ts +72 -0
  175. package/src/session.ts +218 -0
  176. package/src/store.ts +217 -0
  177. package/src/web-origin.ts +60 -0
  178. package/src/web-routes.ts +75 -0
package/src/catalog.ts ADDED
@@ -0,0 +1,271 @@
1
+ /**
2
+ * Account-specific Grok Build catalog: live GET /v1/models-v2 merged onto the
3
+ * static baseline descriptors. Failures keep the last good list, then the
4
+ * static baseline.
5
+ * @module dsh-coding-subscription-oauth/catalog
6
+ */
7
+
8
+ import type { Api, Model, ThinkingLevelMap } from "@earendil-works/pi-ai";
9
+ import { DEFAULT_GROK_BUILD_MODEL, GROK_BUILD_ROUTE } from "./ids.ts";
10
+ import { GROK_BUILD_MODELS_URL, grokBuildBaselineModels, grokBuildFingerprintHeaders } from "./provider.ts";
11
+ import { codingOAuthProxyUnreachableHint } from "./proxy.ts";
12
+
13
+ const BODY_LIMIT_BYTES = 4 * 1024 * 1024;
14
+ const BODY_LIMIT_ERROR = "Grok Build model listing exceeded the 4 MiB read ceiling";
15
+ const PI_THINKING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh", "max"] as const;
16
+
17
+ export type CatalogSource = "live" | "cache" | "fallback";
18
+
19
+ /** Vendor listing fields we keep after a live `/models-v2` fetch. */
20
+ export interface LiveModelDescriptor {
21
+ id: string;
22
+ name?: string;
23
+ contextWindow?: number;
24
+ reasoning?: boolean;
25
+ thinkingLevelMap?: ThinkingLevelMap;
26
+ }
27
+
28
+ function isRecord(value: unknown): value is Record<string, unknown> {
29
+ return typeof value === "object" && value !== null && !Array.isArray(value);
30
+ }
31
+
32
+ function listingRows(body: unknown): unknown[] {
33
+ return Array.isArray(body)
34
+ ? body
35
+ : isRecord(body) && Array.isArray(body["data"])
36
+ ? body["data"]
37
+ : isRecord(body) && Array.isArray(body["models"])
38
+ ? body["models"]
39
+ : [];
40
+ }
41
+
42
+ function isPiThinkingLevel(value: string): value is (typeof PI_THINKING_LEVELS)[number] {
43
+ return (PI_THINKING_LEVELS as readonly string[]).includes(value);
44
+ }
45
+
46
+ /**
47
+ * Translate Grok Build `reasoning_efforts` into a pi-ai map. Undeclared
48
+ * extended levels (especially `xhigh`) must be pinned to null — pi-ai treats
49
+ * an absent xhigh/max key as unsupported, and an absent low/medium/high key
50
+ * as supported.
51
+ */
52
+ export function thinkingLevelMapFromLiveEfforts(efforts: unknown): ThinkingLevelMap | undefined {
53
+ if (!Array.isArray(efforts)) return undefined;
54
+ const offered: ThinkingLevelMap = { off: null };
55
+ let sawOffered = false;
56
+ for (const row of efforts) {
57
+ if (!isRecord(row)) continue;
58
+ const id = typeof row["id"] === "string" ? row["id"] : typeof row["value"] === "string" ? row["value"] : "";
59
+ const value = typeof row["value"] === "string" && row["value"].length > 0 ? row["value"] : id;
60
+ if (!isPiThinkingLevel(id) || id === "off" || value.length === 0) continue;
61
+ offered[id] = value;
62
+ sawOffered = true;
63
+ }
64
+ if (!sawOffered) return undefined;
65
+ const map: ThinkingLevelMap = { off: null };
66
+ for (const level of PI_THINKING_LEVELS) {
67
+ if (level === "off") continue;
68
+ map[level] = offered[level] ?? null;
69
+ }
70
+ return map;
71
+ }
72
+
73
+ function parseLiveRow(row: unknown): LiveModelDescriptor | undefined {
74
+ if (typeof row === "string" && row.length > 0) return { id: row };
75
+ if (!isRecord(row) || typeof row["id"] !== "string" || row["id"].length === 0) return undefined;
76
+ const descriptor: LiveModelDescriptor = { id: row["id"] };
77
+ if (typeof row["name"] === "string" && row["name"].length > 0) descriptor.name = row["name"];
78
+ const contextWindow = row["context_window"] ?? row["contextWindow"];
79
+ if (typeof contextWindow === "number" && Number.isFinite(contextWindow) && contextWindow > 0) {
80
+ descriptor.contextWindow = contextWindow;
81
+ }
82
+ if (row["supports_reasoning_effort"] === false) {
83
+ descriptor.reasoning = false;
84
+ } else {
85
+ const thinkingLevelMap = thinkingLevelMapFromLiveEfforts(row["reasoning_efforts"]);
86
+ if (thinkingLevelMap !== undefined) {
87
+ descriptor.reasoning = true;
88
+ descriptor.thinkingLevelMap = thinkingLevelMap;
89
+ } else if (row["supports_reasoning_effort"] === true) {
90
+ descriptor.reasoning = true;
91
+ }
92
+ }
93
+ return descriptor;
94
+ }
95
+
96
+ /** Pull the live listing, including per-model reasoning levels when present. */
97
+ export function extractLiveModels(body: unknown): LiveModelDescriptor[] {
98
+ const seen = new Set<string>();
99
+ const models: LiveModelDescriptor[] = [];
100
+ for (const row of listingRows(body)) {
101
+ const parsed = parseLiveRow(row);
102
+ if (parsed === undefined || seen.has(parsed.id)) continue;
103
+ seen.add(parsed.id);
104
+ models.push(parsed);
105
+ }
106
+ return models;
107
+ }
108
+
109
+ /**
110
+ * Pull model ids from a listing body. The `/v1/models-v2` response shape is
111
+ * not a published contract, so accept the common envelopes: a bare array, an
112
+ * OpenAI-style `{ data: [...] }`, or `{ models: [...] }`; rows may be plain
113
+ * ids or objects with an `id` field.
114
+ */
115
+ export function extractModelIds(body: unknown): string[] {
116
+ return extractLiveModels(body).map((model) => model.id);
117
+ }
118
+
119
+ function titleCaseId(id: string): string {
120
+ return id
121
+ .split(/[-_]/g)
122
+ .map((part) => (part.length === 0 ? part : (part[0] ?? "").toUpperCase() + part.slice(1)))
123
+ .join(" ");
124
+ }
125
+
126
+ function catalogModels(baseline: readonly Model<Api>[] = grokBuildBaselineModels()): readonly Model<Api>[] {
127
+ return baseline;
128
+ }
129
+
130
+ function templateFor(id: string, catalog: readonly Model<Api>[]): Model<Api> {
131
+ const exact = catalog.find((model) => model.id === id);
132
+ if (exact !== undefined) return exact;
133
+ const lower = id.toLowerCase();
134
+ const fallback = catalog.find((model) => model.id === DEFAULT_GROK_BUILD_MODEL) ?? catalog[0];
135
+ if (fallback === undefined) throw new Error("grok-build: baseline catalog is empty");
136
+ if (lower.includes("composer") || lower.includes("fast")) {
137
+ return catalog.find((model) => model.id === "grok-composer-2.5-fast") ?? fallback;
138
+ }
139
+ // grok-4.5 is the last generation without xhigh; later ids inherit 4.6.
140
+ if (/(^|[-_])4\.5($|[-_])/u.test(lower)) {
141
+ return catalog.find((model) => model.id === "grok-4.5") ?? fallback;
142
+ }
143
+ return catalog.find((model) => model.id === "grok-4.6") ?? fallback;
144
+ }
145
+
146
+ function applyLiveOverlay(model: Model<Api>, overlay: LiveModelDescriptor | undefined): Model<Api> {
147
+ if (overlay === undefined) return model;
148
+ return {
149
+ ...model,
150
+ id: overlay.id,
151
+ ...(overlay.name === undefined ? {} : { name: overlay.name }),
152
+ ...(overlay.contextWindow === undefined ? {} : { contextWindow: overlay.contextWindow }),
153
+ ...(overlay.reasoning === undefined ? {} : { reasoning: overlay.reasoning }),
154
+ ...(overlay.thinkingLevelMap === undefined ? {} : { thinkingLevelMap: overlay.thinkingLevelMap }),
155
+ };
156
+ }
157
+
158
+ /** Turn a live id into a pi-ai model, inheriting baseline metadata when possible. */
159
+ export function materializeLiveModel(
160
+ id: string,
161
+ catalog: readonly Model<Api>[] = catalogModels(),
162
+ overlay?: LiveModelDescriptor,
163
+ ): Model<Api> {
164
+ const template = templateFor(id, catalog);
165
+ const base = template.id === id ? template : { ...template, id, name: titleCaseId(id) };
166
+ return applyLiveOverlay(base, overlay);
167
+ }
168
+
169
+ /**
170
+ * If `liveIds` is missing or empty, serve the baseline catalog.
171
+ * Otherwise serve only the live ids, each materialized against the baseline
172
+ * and optionally overlaid with live `/models-v2` reasoning metadata.
173
+ */
174
+ export function mergeLiveCatalog(
175
+ catalog: readonly Model<Api>[],
176
+ liveIds: readonly string[] | undefined,
177
+ liveModels: readonly LiveModelDescriptor[] = [],
178
+ ): Model<Api>[] {
179
+ if (liveIds === undefined || liveIds.length === 0) return [...catalog];
180
+ const overlays = new Map(liveModels.map((model) => [model.id, model]));
181
+ return liveIds.map((id) => materializeLiveModel(id, catalog, overlays.get(id)));
182
+ }
183
+
184
+ export function preferredGrokBuildModelFrom(models: readonly { id: string }[]): string {
185
+ const ids = new Set(models.map((model) => model.id));
186
+ if (ids.has(DEFAULT_GROK_BUILD_MODEL)) return DEFAULT_GROK_BUILD_MODEL;
187
+ return models[0]?.id ?? DEFAULT_GROK_BUILD_MODEL;
188
+ }
189
+
190
+ async function readBoundedResponse(response: Response): Promise<Buffer> {
191
+ const declared = response.headers.get("content-length");
192
+ if (declared !== null && /^\d+$/u.test(declared) && Number(declared) > BODY_LIMIT_BYTES) {
193
+ await response.body?.cancel().catch(() => undefined);
194
+ throw new Error(BODY_LIMIT_ERROR);
195
+ }
196
+ if (response.body === null) return Buffer.alloc(0);
197
+ const reader = response.body.getReader();
198
+ const chunks: Buffer[] = [];
199
+ let size = 0;
200
+ try {
201
+ while (true) {
202
+ const { done, value } = await reader.read();
203
+ if (done) break;
204
+ size += value.byteLength;
205
+ if (size > BODY_LIMIT_BYTES) {
206
+ await reader.cancel().catch(() => undefined);
207
+ throw new Error(BODY_LIMIT_ERROR);
208
+ }
209
+ chunks.push(Buffer.from(value));
210
+ }
211
+ } finally {
212
+ reader.releaseLock();
213
+ }
214
+ return Buffer.concat(chunks, size);
215
+ }
216
+
217
+ /**
218
+ * Fetch the account-visible models from `/v1/models-v2` with the CLI
219
+ * fingerprint headers. Throws a secret-free error on failure.
220
+ */
221
+ export async function fetchLiveModels(accessToken: string, signal?: AbortSignal): Promise<LiveModelDescriptor[]> {
222
+ let response: Response;
223
+ try {
224
+ response = await fetch(GROK_BUILD_MODELS_URL, {
225
+ headers: {
226
+ accept: "application/json",
227
+ authorization: `Bearer ${accessToken}`,
228
+ ...grokBuildFingerprintHeaders(),
229
+ },
230
+ ...(signal !== undefined ? { signal } : {}),
231
+ });
232
+ } catch {
233
+ if (signal?.aborted) throw new Error("Live model listing was cancelled");
234
+ throw new Error(
235
+ `Grok Build model listing is unreachable (proxy required on some networks)${codingOAuthProxyUnreachableHint()}`,
236
+ );
237
+ }
238
+ let raw: Buffer;
239
+ try {
240
+ raw = await readBoundedResponse(response);
241
+ } catch (error) {
242
+ if (signal?.aborted) throw new Error("Live model listing was cancelled");
243
+ if (error instanceof Error && error.message === BODY_LIMIT_ERROR) throw error;
244
+ throw new Error("Grok Build model listing response could not be read");
245
+ }
246
+ let body: unknown;
247
+ try {
248
+ body = JSON.parse(raw.toString("utf8"));
249
+ } catch {
250
+ throw new Error(`Grok Build model listing returned invalid JSON (HTTP ${response.status})`);
251
+ }
252
+ if (!response.ok) {
253
+ const code = isRecord(body) && typeof body["error"] === "string" ? body["error"] : undefined;
254
+ throw new Error(
255
+ `Grok Build model listing failed (HTTP ${response.status})${code === undefined ? "" : `: ${code}`}`,
256
+ );
257
+ }
258
+ const models = extractLiveModels(body);
259
+ if (models.length === 0) throw new Error("Grok Build model listing contained no model ids");
260
+ return models;
261
+ }
262
+
263
+ /** Fetch only the account-visible model ids from `/v1/models-v2`. */
264
+ export async function fetchLiveModelIds(accessToken: string, signal?: AbortSignal): Promise<string[]> {
265
+ return (await fetchLiveModels(accessToken, signal)).map((model) => model.id);
266
+ }
267
+
268
+ /** Re-exported so callers can normalise cached descriptors onto the route. */
269
+ export function asRouteModel(model: Model<Api>): Model<Api> {
270
+ return model.provider === GROK_BUILD_ROUTE ? model : { ...model, provider: GROK_BUILD_ROUTE };
271
+ }