dsh-coding-subscription-oauth 0.5.8 → 0.6.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (148) hide show
  1. package/CHANGELOG.md +217 -188
  2. package/CONTRIBUTING.md +120 -120
  3. package/INSTALL.md +241 -209
  4. package/LICENSE +19 -19
  5. package/NOTICE +11 -11
  6. package/README.de.md +298 -294
  7. package/README.es.md +299 -295
  8. package/README.fr.md +299 -295
  9. package/README.ja.md +299 -295
  10. package/README.ko.md +299 -295
  11. package/README.md +313 -307
  12. package/README.pt-BR.md +299 -295
  13. package/README.ru.md +299 -295
  14. package/README.zh-CN.md +311 -305
  15. package/compatibility/dsh-bom.json +30 -0
  16. package/cordis.patch.yml +13 -13
  17. package/docs/00-project-rules.md +195 -195
  18. package/docs/02-architecture.md +134 -129
  19. package/docs/02-architecture.zh-CN.md +134 -129
  20. package/lib/adapter.d.ts.map +1 -1
  21. package/lib/alias-adapter.d.ts +3 -1
  22. package/lib/alias-adapter.d.ts.map +1 -1
  23. package/lib/auth-routes.d.ts +8 -15
  24. package/lib/auth-routes.d.ts.map +1 -1
  25. package/lib/bin.js +746 -1402
  26. package/lib/bin.js.map +4 -4
  27. package/lib/capability-routes.d.ts +3 -3
  28. package/lib/capability-routes.d.ts.map +1 -1
  29. package/lib/capability-settings.d.ts +5 -4
  30. package/lib/capability-settings.d.ts.map +1 -1
  31. package/lib/client.js +27 -8
  32. package/lib/client.js.map +4 -4
  33. package/lib/compatibility.d.ts +46 -0
  34. package/lib/compatibility.d.ts.map +1 -0
  35. package/lib/dsh-host-adapter.d.ts +18 -0
  36. package/lib/dsh-host-adapter.d.ts.map +1 -0
  37. package/lib/gateway-auth.d.ts +1 -2
  38. package/lib/gateway-auth.d.ts.map +1 -1
  39. package/lib/gateway-routes.d.ts +3 -4
  40. package/lib/gateway-routes.d.ts.map +1 -1
  41. package/lib/gateway.d.ts +4 -0
  42. package/lib/gateway.d.ts.map +1 -1
  43. package/lib/ids.d.ts +3 -32
  44. package/lib/ids.d.ts.map +1 -1
  45. package/lib/imagine-routes.d.ts +2 -0
  46. package/lib/imagine-routes.d.ts.map +1 -1
  47. package/lib/index.d.ts +19 -4
  48. package/lib/index.d.ts.map +1 -1
  49. package/lib/index.js +26627 -1047
  50. package/lib/index.js.map +4 -4
  51. package/lib/invariant.js.map +1 -1
  52. package/lib/oauth-import-routes.d.ts +3 -4
  53. package/lib/oauth-import-routes.d.ts.map +1 -1
  54. package/lib/proxy.d.ts +3 -16
  55. package/lib/proxy.d.ts.map +1 -1
  56. package/lib/web-origin.d.ts +28 -4
  57. package/lib/web-origin.d.ts.map +1 -1
  58. package/lib/web-routes.d.ts.map +1 -1
  59. package/media/en/settings_accounts.png +0 -0
  60. package/media/en/settings_capabilities.png +0 -0
  61. package/media/en/settings_gateway.png +0 -0
  62. package/media/settings_accounts.png +0 -0
  63. package/media/settings_capabilities.png +0 -0
  64. package/media/settings_gateway.png +0 -0
  65. package/media/settings_overview.png +0 -0
  66. package/media/zh-CN/settings_accounts.png +0 -0
  67. package/media/zh-CN/settings_capabilities.png +0 -0
  68. package/media/zh-CN/settings_gateway.png +0 -0
  69. package/package.json +211 -174
  70. package/patches/dsh-agy@0.1.2.patch +25 -25
  71. package/scripts/release.mjs +186 -170
  72. package/scripts/smoke-deployed-routes.mjs +146 -146
  73. package/scripts/verify-deployed-catalog.mjs +87 -87
  74. package/src/adapter.ts +329 -268
  75. package/src/alias-adapter.ts +141 -147
  76. package/src/auth-routes.ts +921 -871
  77. package/src/auth.ts +67 -67
  78. package/src/bin.ts +350 -350
  79. package/src/capability-routes.ts +279 -275
  80. package/src/capability-runtime.ts +313 -313
  81. package/src/capability-settings.ts +658 -657
  82. package/src/capability-tools.ts +666 -666
  83. package/src/catalog.ts +271 -271
  84. package/src/client/GrokBuildSettings.tsx +770 -718
  85. package/src/client/api.ts +88 -88
  86. package/src/client/components/AboutTab.tsx +30 -30
  87. package/src/client/components/AccountsTab.tsx +241 -224
  88. package/src/client/components/Badge.tsx +33 -33
  89. package/src/client/components/CapabilitiesTab.tsx +265 -227
  90. package/src/client/components/CliPullPreview.tsx +116 -107
  91. package/src/client/components/CopyButton.tsx +57 -57
  92. package/src/client/components/GatewayTab.tsx +469 -409
  93. package/src/client/components/NoticeBanner.tsx +46 -46
  94. package/src/client/components/ProgressBar.tsx +53 -53
  95. package/src/client/components/ProviderCard.tsx +606 -502
  96. package/src/client/components/SettingsTabs.tsx +75 -75
  97. package/src/client/components/ToggleSwitch.tsx +71 -62
  98. package/src/client/constants.ts +224 -206
  99. package/src/client/display.ts +61 -61
  100. package/src/client/dshClientAdapter.ts +127 -0
  101. package/src/client/gatewaySnippets.ts +37 -36
  102. package/src/client/index.tsx +156 -37
  103. package/src/client/locales.ts +535 -491
  104. package/src/client/microStyles.ts +52 -33
  105. package/src/client/parsers.ts +396 -386
  106. package/src/client/styles.ts +325 -307
  107. package/src/client/types.ts +197 -185
  108. package/src/codex-http.ts +447 -447
  109. package/src/codex-images.ts +485 -485
  110. package/src/codex-model-capabilities.ts +320 -320
  111. package/src/codex-search.ts +245 -245
  112. package/src/codex-usage.ts +263 -263
  113. package/src/compatibility.ts +55 -0
  114. package/src/dsh-host-adapter.ts +173 -0
  115. package/src/gateway-anthropic-messages.ts +84 -84
  116. package/src/gateway-auth.ts +102 -100
  117. package/src/gateway-backend.ts +274 -274
  118. package/src/gateway-body.ts +49 -49
  119. package/src/gateway-config.ts +76 -76
  120. package/src/gateway-http.ts +104 -104
  121. package/src/gateway-openai-chat.ts +124 -124
  122. package/src/gateway-openai-responses.ts +53 -53
  123. package/src/gateway-parse.ts +224 -224
  124. package/src/gateway-protocol.ts +52 -52
  125. package/src/gateway-routes.ts +158 -152
  126. package/src/gateway.ts +258 -242
  127. package/src/grok-errors.ts +24 -24
  128. package/src/grok-imagine.ts +1627 -1627
  129. package/src/grok-import.ts +151 -151
  130. package/src/http-json.ts +82 -82
  131. package/src/ids.ts +59 -45
  132. package/src/imagine-routes.ts +463 -461
  133. package/src/index.ts +729 -592
  134. package/src/invariant.ts +17 -17
  135. package/src/kimi-errors.ts +26 -26
  136. package/src/media-store.ts +927 -927
  137. package/src/oauth-import-routes.ts +324 -314
  138. package/src/oauth-providers.ts +152 -152
  139. package/src/oauth-session.ts +183 -183
  140. package/src/oauth-sources.ts +1104 -1104
  141. package/src/oauth.ts +620 -620
  142. package/src/provider.ts +128 -128
  143. package/src/proxy.ts +11 -99
  144. package/src/redact.ts +72 -72
  145. package/src/session.ts +218 -218
  146. package/src/store.ts +217 -217
  147. package/src/web-origin.ts +296 -60
  148. package/src/web-routes.ts +38 -75
@@ -1,313 +1,313 @@
1
- /**
2
- * Side-effect coordination for default-off optional capabilities.
3
- *
4
- * This module contains no Cordis service lookup. The parent supplies structural
5
- * registries, which keeps live flag transitions deterministic and unit-testable.
6
- * @module dsh-coding-subscription-oauth/capability-runtime
7
- */
8
-
9
- import { LlmError } from "@deepseek-ai/dsh-llm";
10
- import type { ToolDefinition } from "@deepseek-ai/dsh-tools";
11
- import {
12
- type CapabilitySettings,
13
- DEFAULT_CAPABILITY_SETTINGS,
14
- normalizeCapabilitySettings,
15
- } from "./capability-settings.ts";
16
- import { CODEX_IMAGE_EDIT_TOOL, CODEX_IMAGE_GENERATE_TOOL } from "./capability-tools.ts";
17
- import type { CodexModelCapabilities } from "./codex-model-capabilities.ts";
18
- import type { CodexSearchProvider, CodexSearchRequest, CodexSearchResult } from "./codex-search.ts";
19
- import { GROK_IMAGINE_IMAGE_TOOL, GROK_IMAGINE_VIDEO_STATUS_TOOL, GROK_IMAGINE_VIDEO_TOOL } from "./grok-imagine.ts";
20
- import { CODEX_OAUTH_FAST_ROUTE, CODING_OAUTH_ROUTES } from "./ids.ts";
21
-
22
- export type CapabilityRuntimeListener = (settings: CapabilitySettings) => void | Promise<void>;
23
-
24
- /** Process-local live projection shared by optional service fibers. */
25
- export class CapabilityRuntimeState {
26
- private value: CapabilitySettings;
27
- private readonly listeners = new Set<CapabilityRuntimeListener>();
28
- private readonly onListenerError: (error: unknown) => void;
29
-
30
- constructor(
31
- initial: CapabilitySettings = DEFAULT_CAPABILITY_SETTINGS,
32
- onListenerError: (error: unknown) => void = () => undefined,
33
- ) {
34
- this.value = normalizeCapabilitySettings(initial);
35
- this.onListenerError = onListenerError;
36
- }
37
-
38
- current(): CapabilitySettings {
39
- return this.value;
40
- }
41
-
42
- set(next: unknown): CapabilitySettings {
43
- const normalized = normalizeCapabilitySettings(next);
44
- if (sameSettings(this.value, normalized)) return this.value;
45
- this.value = normalized;
46
- this.refresh();
47
- return this.value;
48
- }
49
-
50
- /** Re-run live bindings after an external dependency (for example OAuth) changed. */
51
- refresh(): void {
52
- for (const listener of [...this.listeners]) {
53
- try {
54
- const result = listener(this.value);
55
- if (result !== undefined) void Promise.resolve(result).catch(this.onListenerError);
56
- } catch (error: unknown) {
57
- this.onListenerError(error);
58
- }
59
- }
60
- }
61
-
62
- reset(): CapabilitySettings {
63
- return this.set(DEFAULT_CAPABILITY_SETTINGS);
64
- }
65
-
66
- subscribe(listener: CapabilityRuntimeListener, emitCurrent = true): () => void {
67
- this.listeners.add(listener);
68
- if (emitCurrent) {
69
- try {
70
- const result = listener(this.value);
71
- if (result !== undefined) {
72
- void Promise.resolve(result).catch((error: unknown) => {
73
- this.listeners.delete(listener);
74
- this.onListenerError(error);
75
- });
76
- }
77
- } catch (error: unknown) {
78
- this.listeners.delete(listener);
79
- throw error;
80
- }
81
- }
82
- return () => {
83
- this.listeners.delete(listener);
84
- };
85
- }
86
- }
87
-
88
- export interface CapabilitySearchRegistry {
89
- registerSearchProvider(provider: CodexSearchProvider): () => void;
90
- }
91
-
92
- /** Dynamically expose search and clamp every request to the live result limit. */
93
- export function bindCapabilitySearch(
94
- state: CapabilityRuntimeState,
95
- registry: CapabilitySearchRegistry,
96
- provider: CodexSearchProvider,
97
- ): () => void {
98
- let release: (() => void) | undefined;
99
- let disposed = false;
100
- const gated: CodexSearchProvider = {
101
- id: provider.id,
102
- available: () => state.current().codexSearch && provider.available(),
103
- async search(request: CodexSearchRequest, signal?: AbortSignal): Promise<CodexSearchResult> {
104
- const settings = state.current();
105
- if (!settings.codexSearch) {
106
- throw new LlmError("Codex search is disabled", "INVALID_ARGS");
107
- }
108
- const requested = request.maxResults ?? settings.searchResults;
109
- const maxResults = Math.min(requested, settings.searchResults);
110
- return provider.search({ ...request, maxResults }, signal);
111
- },
112
- };
113
- const reconcile = (settings: CapabilitySettings): void => {
114
- if (disposed) return;
115
- if (settings.codexSearch && release === undefined) {
116
- release = registry.registerSearchProvider(gated);
117
- return;
118
- }
119
- if (!settings.codexSearch && release !== undefined) {
120
- release();
121
- release = undefined;
122
- }
123
- };
124
- const unsubscribe = state.subscribe(reconcile);
125
- return () => {
126
- if (disposed) return;
127
- disposed = true;
128
- unsubscribe();
129
- release?.();
130
- release = undefined;
131
- };
132
- }
133
-
134
- export interface CapabilityToolRegistry {
135
- register(definition: ToolDefinition): () => void;
136
- }
137
-
138
- /** Return whether one optional tool should currently be advertised. */
139
- export function capabilityToolEnabled(name: string, settings: CapabilitySettings): boolean {
140
- switch (name) {
141
- case CODEX_IMAGE_GENERATE_TOOL:
142
- return settings.codexImages;
143
- case CODEX_IMAGE_EDIT_TOOL:
144
- return settings.codexImages && settings.codexImageEdits;
145
- case GROK_IMAGINE_IMAGE_TOOL:
146
- return settings.grokImagineImage;
147
- case GROK_IMAGINE_VIDEO_TOOL:
148
- case GROK_IMAGINE_VIDEO_STATUS_TOOL:
149
- return settings.grokImagineVideo;
150
- default:
151
- return false;
152
- }
153
- }
154
-
155
- /** Dynamically advertise only enabled tools; execute-time guards remain in each definition. */
156
- export function bindCapabilityTools(
157
- state: CapabilityRuntimeState,
158
- registry: CapabilityToolRegistry,
159
- definitions: readonly ToolDefinition[],
160
- ): () => void {
161
- const byName = new Map(definitions.map((definition) => [definition.name, definition]));
162
- const releases = new Map<string, () => void>();
163
- let disposed = false;
164
- const reconcile = (settings: CapabilitySettings): void => {
165
- if (disposed) return;
166
- for (const [name, definition] of byName) {
167
- const enabled = capabilityToolEnabled(name, settings);
168
- const release = releases.get(name);
169
- if (enabled && release === undefined) {
170
- releases.set(name, registry.register(definition));
171
- } else if (!enabled && release !== undefined) {
172
- release();
173
- releases.delete(name);
174
- }
175
- }
176
- };
177
- const unsubscribe = state.subscribe(reconcile);
178
- return () => {
179
- if (disposed) return;
180
- disposed = true;
181
- unsubscribe();
182
- for (const release of releases.values()) release();
183
- releases.clear();
184
- };
185
- }
186
-
187
- export interface ReplaceableAdapterRegistration {
188
- replace(routes: string[]): void;
189
- }
190
-
191
- export interface CapabilityTimer {
192
- setInterval(callback: () => void, ms: number): unknown;
193
- clearInterval(handle: unknown): void;
194
- }
195
-
196
- export interface CodexFastBindingOptions {
197
- readonly refreshIntervalMs?: number;
198
- readonly timer?: CapabilityTimer;
199
- readonly onError?: (error: unknown) => void;
200
- }
201
-
202
- const DEFAULT_FAST_REFRESH_INTERVAL_MS = 60_000;
203
-
204
- /**
205
- * Publish the Fast route only after a fresh live catalog explicitly lists at
206
- * least one priority-eligible model. Disabling is synchronous; stale or failed
207
- * refreshes atomically withdraw the optional route.
208
- */
209
- export function bindCodexFastRoute(
210
- state: CapabilityRuntimeState,
211
- capabilities: CodexModelCapabilities,
212
- registration: ReplaceableAdapterRegistration,
213
- options: CodexFastBindingOptions = {},
214
- ): () => void {
215
- const timer: CapabilityTimer = options.timer ?? {
216
- setInterval: (callback, ms) => setInterval(callback, ms),
217
- clearInterval: (handle) => clearInterval(handle as ReturnType<typeof setInterval>),
218
- };
219
- const intervalMs = options.refreshIntervalMs ?? DEFAULT_FAST_REFRESH_INTERVAL_MS;
220
- const reportError = options.onError ?? (() => undefined);
221
- let interval: unknown;
222
- let generation = 0;
223
- let disposed = false;
224
- let fastPublished = false;
225
-
226
- const replace = (enabled: boolean): void => {
227
- if (enabled === fastPublished) return;
228
- registration.replace(enabled ? [...CODING_OAUTH_ROUTES, CODEX_OAUTH_FAST_ROUTE] : [...CODING_OAUTH_ROUTES]);
229
- fastPublished = enabled;
230
- };
231
- const stopTimer = (): void => {
232
- if (interval === undefined) return;
233
- timer.clearInterval(interval);
234
- interval = undefined;
235
- };
236
- const ensureTimer = (): void => {
237
- if (disposed || interval !== undefined || intervalMs <= 0) return;
238
- interval = timer.setInterval(() => {
239
- void reconcile().catch(reportError);
240
- }, intervalMs);
241
- };
242
- const withdraw = (): boolean => {
243
- try {
244
- replace(false);
245
- return true;
246
- } catch (error: unknown) {
247
- reportError(error);
248
- return false;
249
- }
250
- };
251
- const reconcile = async (): Promise<void> => {
252
- const run = ++generation;
253
- if (disposed || !state.current().codexFast) {
254
- if (withdraw()) stopTimer();
255
- else ensureTimer();
256
- return;
257
- }
258
- ensureTimer();
259
- const cached = capabilities.getCached();
260
- if (cached === undefined) {
261
- // Logout, import, and TTL expiry withdraw the route synchronously before
262
- // a private catalog refresh is allowed to publish it again.
263
- replace(false);
264
- } else {
265
- replace(cached.some((model) => capabilities.isPriorityEligible(model.id)));
266
- }
267
- try {
268
- const models = await capabilities.refresh();
269
- if (disposed || run !== generation || !state.current().codexFast) return;
270
- replace(models.some((model) => capabilities.isPriorityEligible(model.id)));
271
- } catch (error: unknown) {
272
- if (!disposed && run === generation) withdraw();
273
- reportError(error);
274
- }
275
- };
276
- const unsubscribe = state.subscribe((settings) => {
277
- if (!settings.codexFast) {
278
- generation += 1;
279
- if (withdraw()) stopTimer();
280
- else ensureTimer();
281
- return;
282
- }
283
- void reconcile().catch(reportError);
284
- });
285
-
286
- return () => {
287
- if (disposed) return;
288
- disposed = true;
289
- generation += 1;
290
- unsubscribe();
291
- stopTimer();
292
- try {
293
- replace(false);
294
- } catch (error: unknown) {
295
- reportError(error);
296
- }
297
- };
298
- }
299
-
300
- function sameSettings(left: CapabilitySettings, right: CapabilitySettings): boolean {
301
- return (
302
- left.codexSearch === right.codexSearch &&
303
- left.codexImages === right.codexImages &&
304
- left.codexImageEdits === right.codexImageEdits &&
305
- left.codexUsage === right.codexUsage &&
306
- left.codexFast === right.codexFast &&
307
- left.grokImagineImage === right.grokImagineImage &&
308
- left.grokImagineVideo === right.grokImagineVideo &&
309
- left.searchResults === right.searchResults &&
310
- left.imageCount === right.imageCount &&
311
- left.videoArtifactTtlMs === right.videoArtifactTtlMs
312
- );
313
- }
1
+ /**
2
+ * Side-effect coordination for default-off optional capabilities.
3
+ *
4
+ * This module contains no Cordis service lookup. The parent supplies structural
5
+ * registries, which keeps live flag transitions deterministic and unit-testable.
6
+ * @module dsh-coding-subscription-oauth/capability-runtime
7
+ */
8
+
9
+ import { LlmError } from "@deepseek-ai/dsh-llm";
10
+ import type { ToolDefinition } from "@deepseek-ai/dsh-tools";
11
+ import {
12
+ type CapabilitySettings,
13
+ DEFAULT_CAPABILITY_SETTINGS,
14
+ normalizeCapabilitySettings,
15
+ } from "./capability-settings.ts";
16
+ import { CODEX_IMAGE_EDIT_TOOL, CODEX_IMAGE_GENERATE_TOOL } from "./capability-tools.ts";
17
+ import type { CodexModelCapabilities } from "./codex-model-capabilities.ts";
18
+ import type { CodexSearchProvider, CodexSearchRequest, CodexSearchResult } from "./codex-search.ts";
19
+ import { GROK_IMAGINE_IMAGE_TOOL, GROK_IMAGINE_VIDEO_STATUS_TOOL, GROK_IMAGINE_VIDEO_TOOL } from "./grok-imagine.ts";
20
+ import { CODEX_OAUTH_FAST_ROUTE, CODING_OAUTH_ROUTES } from "./ids.ts";
21
+
22
+ export type CapabilityRuntimeListener = (settings: CapabilitySettings) => void | Promise<void>;
23
+
24
+ /** Process-local live projection shared by optional service fibers. */
25
+ export class CapabilityRuntimeState {
26
+ private value: CapabilitySettings;
27
+ private readonly listeners = new Set<CapabilityRuntimeListener>();
28
+ private readonly onListenerError: (error: unknown) => void;
29
+
30
+ constructor(
31
+ initial: CapabilitySettings = DEFAULT_CAPABILITY_SETTINGS,
32
+ onListenerError: (error: unknown) => void = () => undefined,
33
+ ) {
34
+ this.value = normalizeCapabilitySettings(initial);
35
+ this.onListenerError = onListenerError;
36
+ }
37
+
38
+ current(): CapabilitySettings {
39
+ return this.value;
40
+ }
41
+
42
+ set(next: unknown): CapabilitySettings {
43
+ const normalized = normalizeCapabilitySettings(next);
44
+ if (sameSettings(this.value, normalized)) return this.value;
45
+ this.value = normalized;
46
+ this.refresh();
47
+ return this.value;
48
+ }
49
+
50
+ /** Re-run live bindings after an external dependency (for example OAuth) changed. */
51
+ refresh(): void {
52
+ for (const listener of [...this.listeners]) {
53
+ try {
54
+ const result = listener(this.value);
55
+ if (result !== undefined) void Promise.resolve(result).catch(this.onListenerError);
56
+ } catch (error: unknown) {
57
+ this.onListenerError(error);
58
+ }
59
+ }
60
+ }
61
+
62
+ reset(): CapabilitySettings {
63
+ return this.set(DEFAULT_CAPABILITY_SETTINGS);
64
+ }
65
+
66
+ subscribe(listener: CapabilityRuntimeListener, emitCurrent = true): () => void {
67
+ this.listeners.add(listener);
68
+ if (emitCurrent) {
69
+ try {
70
+ const result = listener(this.value);
71
+ if (result !== undefined) {
72
+ void Promise.resolve(result).catch((error: unknown) => {
73
+ this.listeners.delete(listener);
74
+ this.onListenerError(error);
75
+ });
76
+ }
77
+ } catch (error: unknown) {
78
+ this.listeners.delete(listener);
79
+ throw error;
80
+ }
81
+ }
82
+ return () => {
83
+ this.listeners.delete(listener);
84
+ };
85
+ }
86
+ }
87
+
88
+ export interface CapabilitySearchRegistry {
89
+ registerSearchProvider(provider: CodexSearchProvider): () => void;
90
+ }
91
+
92
+ /** Dynamically expose search and clamp every request to the live result limit. */
93
+ export function bindCapabilitySearch(
94
+ state: CapabilityRuntimeState,
95
+ registry: CapabilitySearchRegistry,
96
+ provider: CodexSearchProvider,
97
+ ): () => void {
98
+ let release: (() => void) | undefined;
99
+ let disposed = false;
100
+ const gated: CodexSearchProvider = {
101
+ id: provider.id,
102
+ available: () => state.current().codexSearch && provider.available(),
103
+ async search(request: CodexSearchRequest, signal?: AbortSignal): Promise<CodexSearchResult> {
104
+ const settings = state.current();
105
+ if (!settings.codexSearch) {
106
+ throw new LlmError("Codex search is disabled", "INVALID_ARGS");
107
+ }
108
+ const requested = request.maxResults ?? settings.searchResults;
109
+ const maxResults = Math.min(requested, settings.searchResults);
110
+ return provider.search({ ...request, maxResults }, signal);
111
+ },
112
+ };
113
+ const reconcile = (settings: CapabilitySettings): void => {
114
+ if (disposed) return;
115
+ if (settings.codexSearch && release === undefined) {
116
+ release = registry.registerSearchProvider(gated);
117
+ return;
118
+ }
119
+ if (!settings.codexSearch && release !== undefined) {
120
+ release();
121
+ release = undefined;
122
+ }
123
+ };
124
+ const unsubscribe = state.subscribe(reconcile);
125
+ return () => {
126
+ if (disposed) return;
127
+ disposed = true;
128
+ unsubscribe();
129
+ release?.();
130
+ release = undefined;
131
+ };
132
+ }
133
+
134
+ export interface CapabilityToolRegistry {
135
+ register(definition: ToolDefinition): () => void;
136
+ }
137
+
138
+ /** Return whether one optional tool should currently be advertised. */
139
+ export function capabilityToolEnabled(name: string, settings: CapabilitySettings): boolean {
140
+ switch (name) {
141
+ case CODEX_IMAGE_GENERATE_TOOL:
142
+ return settings.codexImages;
143
+ case CODEX_IMAGE_EDIT_TOOL:
144
+ return settings.codexImages && settings.codexImageEdits;
145
+ case GROK_IMAGINE_IMAGE_TOOL:
146
+ return settings.grokImagineImage;
147
+ case GROK_IMAGINE_VIDEO_TOOL:
148
+ case GROK_IMAGINE_VIDEO_STATUS_TOOL:
149
+ return settings.grokImagineVideo;
150
+ default:
151
+ return false;
152
+ }
153
+ }
154
+
155
+ /** Dynamically advertise only enabled tools; execute-time guards remain in each definition. */
156
+ export function bindCapabilityTools(
157
+ state: CapabilityRuntimeState,
158
+ registry: CapabilityToolRegistry,
159
+ definitions: readonly ToolDefinition[],
160
+ ): () => void {
161
+ const byName = new Map(definitions.map((definition) => [definition.name, definition]));
162
+ const releases = new Map<string, () => void>();
163
+ let disposed = false;
164
+ const reconcile = (settings: CapabilitySettings): void => {
165
+ if (disposed) return;
166
+ for (const [name, definition] of byName) {
167
+ const enabled = capabilityToolEnabled(name, settings);
168
+ const release = releases.get(name);
169
+ if (enabled && release === undefined) {
170
+ releases.set(name, registry.register(definition));
171
+ } else if (!enabled && release !== undefined) {
172
+ release();
173
+ releases.delete(name);
174
+ }
175
+ }
176
+ };
177
+ const unsubscribe = state.subscribe(reconcile);
178
+ return () => {
179
+ if (disposed) return;
180
+ disposed = true;
181
+ unsubscribe();
182
+ for (const release of releases.values()) release();
183
+ releases.clear();
184
+ };
185
+ }
186
+
187
+ export interface ReplaceableAdapterRegistration {
188
+ replace(routes: string[]): void;
189
+ }
190
+
191
+ export interface CapabilityTimer {
192
+ setInterval(callback: () => void, ms: number): unknown;
193
+ clearInterval(handle: unknown): void;
194
+ }
195
+
196
+ export interface CodexFastBindingOptions {
197
+ readonly refreshIntervalMs?: number;
198
+ readonly timer?: CapabilityTimer;
199
+ readonly onError?: (error: unknown) => void;
200
+ }
201
+
202
+ const DEFAULT_FAST_REFRESH_INTERVAL_MS = 60_000;
203
+
204
+ /**
205
+ * Publish the Fast route only after a fresh live catalog explicitly lists at
206
+ * least one priority-eligible model. Disabling is synchronous; stale or failed
207
+ * refreshes atomically withdraw the optional route.
208
+ */
209
+ export function bindCodexFastRoute(
210
+ state: CapabilityRuntimeState,
211
+ capabilities: CodexModelCapabilities,
212
+ registration: ReplaceableAdapterRegistration,
213
+ options: CodexFastBindingOptions = {},
214
+ ): () => void {
215
+ const timer: CapabilityTimer = options.timer ?? {
216
+ setInterval: (callback, ms) => setInterval(callback, ms),
217
+ clearInterval: (handle) => clearInterval(handle as ReturnType<typeof setInterval>),
218
+ };
219
+ const intervalMs = options.refreshIntervalMs ?? DEFAULT_FAST_REFRESH_INTERVAL_MS;
220
+ const reportError = options.onError ?? (() => undefined);
221
+ let interval: unknown;
222
+ let generation = 0;
223
+ let disposed = false;
224
+ let fastPublished = false;
225
+
226
+ const replace = (enabled: boolean): void => {
227
+ if (enabled === fastPublished) return;
228
+ registration.replace(enabled ? [...CODING_OAUTH_ROUTES, CODEX_OAUTH_FAST_ROUTE] : [...CODING_OAUTH_ROUTES]);
229
+ fastPublished = enabled;
230
+ };
231
+ const stopTimer = (): void => {
232
+ if (interval === undefined) return;
233
+ timer.clearInterval(interval);
234
+ interval = undefined;
235
+ };
236
+ const ensureTimer = (): void => {
237
+ if (disposed || interval !== undefined || intervalMs <= 0) return;
238
+ interval = timer.setInterval(() => {
239
+ void reconcile().catch(reportError);
240
+ }, intervalMs);
241
+ };
242
+ const withdraw = (): boolean => {
243
+ try {
244
+ replace(false);
245
+ return true;
246
+ } catch (error: unknown) {
247
+ reportError(error);
248
+ return false;
249
+ }
250
+ };
251
+ const reconcile = async (): Promise<void> => {
252
+ const run = ++generation;
253
+ if (disposed || !state.current().codexFast) {
254
+ if (withdraw()) stopTimer();
255
+ else ensureTimer();
256
+ return;
257
+ }
258
+ ensureTimer();
259
+ const cached = capabilities.getCached();
260
+ if (cached === undefined) {
261
+ // Logout, import, and TTL expiry withdraw the route synchronously before
262
+ // a private catalog refresh is allowed to publish it again.
263
+ replace(false);
264
+ } else {
265
+ replace(cached.some((model) => capabilities.isPriorityEligible(model.id)));
266
+ }
267
+ try {
268
+ const models = await capabilities.refresh();
269
+ if (disposed || run !== generation || !state.current().codexFast) return;
270
+ replace(models.some((model) => capabilities.isPriorityEligible(model.id)));
271
+ } catch (error: unknown) {
272
+ if (!disposed && run === generation) withdraw();
273
+ reportError(error);
274
+ }
275
+ };
276
+ const unsubscribe = state.subscribe((settings) => {
277
+ if (!settings.codexFast) {
278
+ generation += 1;
279
+ if (withdraw()) stopTimer();
280
+ else ensureTimer();
281
+ return;
282
+ }
283
+ void reconcile().catch(reportError);
284
+ });
285
+
286
+ return () => {
287
+ if (disposed) return;
288
+ disposed = true;
289
+ generation += 1;
290
+ unsubscribe();
291
+ stopTimer();
292
+ try {
293
+ replace(false);
294
+ } catch (error: unknown) {
295
+ reportError(error);
296
+ }
297
+ };
298
+ }
299
+
300
+ function sameSettings(left: CapabilitySettings, right: CapabilitySettings): boolean {
301
+ return (
302
+ left.codexSearch === right.codexSearch &&
303
+ left.codexImages === right.codexImages &&
304
+ left.codexImageEdits === right.codexImageEdits &&
305
+ left.codexUsage === right.codexUsage &&
306
+ left.codexFast === right.codexFast &&
307
+ left.grokImagineImage === right.grokImagineImage &&
308
+ left.grokImagineVideo === right.grokImagineVideo &&
309
+ left.searchResults === right.searchResults &&
310
+ left.imageCount === right.imageCount &&
311
+ left.videoArtifactTtlMs === right.videoArtifactTtlMs
312
+ );
313
+ }