jeopi-ai 16.2.23 → 16.2.25

package/CHANGELOG.md

@@ -2,6 +2,19 @@
 
 ## [Unreleased]
 
+## [16.2.25] - 2026-07-05
+
+### Added
+
+- Added the `tencent` provider registry def (`registry/tencent.ts`): API-key login validated against Tencent Cloud MaaS's Anthropic Messages endpoint (`tokenhub-intl.tencentcloudmaas.com/v1/messages`), registered in the `ALL` provider list. Env fallback: `TENCENT_API_KEY`. Verified live: full inference round-trip (GLM-5.2, Hunyuan MT2 Plus) succeeds end-to-end through `streamAnthropic`; DeepSeek/Kimi ids on the same test key correctly surfaced a clean `402` (quota exhausted) rather than an error.
+- `createApiKeyLogin`'s `anthropic-messages` validation now accepts an optional `acceptableErrorStatuses` list: HTTP statuses that still prove the key is valid (e.g. a billing/quota gate only a real, authenticated key would reach) and should pass validation instead of being treated as an invalid key. Discovered live while validating the `tencent` login: a real, correctly-authenticated key with no active billing got HTTP 402, which the login flow was previously rejecting as "invalid key" — `tencent`'s validation now sets `acceptableErrorStatuses: [402]`; other providers are unaffected (opt-in, defaults to none).
+
+## [16.2.24] - 2026-07-03
+
+### Added
+
+- `ToolCallLoopGuard.recordTurn` now also detects an alternating A,B,A,B,… tool-call cycle (exactly two distinct calls filling a 6-turn window), returning a `cyclical_tool_calls` detection alongside the existing `repeated_tool_call` one. `recordTurn`'s return type is now `ToolCallLoopDetection = RepeatedToolCallDetection | CyclicalToolCallDetection`.
+
 ## [16.2.21] - 2026-07-02
 
 ### Fixed

package/dist/types/registry/api-key-login.d.ts

@@ -17,6 +17,10 @@ type AnthropicMessagesValidation = {
     provider: string;
     baseUrl: string;
     model: string;
+    /** HTTP error statuses that still prove the key is valid (e.g. a billing/quota
+     *  gate that only a real, recognized key would reach) and should be treated as
+     *  successful validation rather than an invalid-key failure. */
+    acceptableErrorStatuses?: readonly number[];
 };
 type ModelsEndpointValidation = {
     kind: "models-endpoint";

package/dist/types/registry/api-key-validation.d.ts

@@ -14,6 +14,10 @@ type AnthropicCompatibleValidationOptions = {
     model: string;
     signal?: AbortSignal;
     fetch?: FetchImpl;
+    /** HTTP error statuses that still prove the key is valid (e.g. a billing/quota
+     *  gate that only a real, recognized key would reach) and should be treated as
+     *  successful validation rather than an invalid-key failure. */
+    acceptableErrorStatuses?: readonly number[];
 };
 type ModelListValidationOptions = {
     provider: string;

package/dist/types/registry/registry.d.ts

@@ -232,6 +232,10 @@ declare const ALL: ({
     readonly name: "Tavily";
     readonly envKeys: "TAVILY_API_KEY";
     readonly login: (cb: import("./oauth").OAuthLoginCallbacks) => Promise<string>;
+} | {
+    readonly id: "tencent";
+    readonly name: "Tencent Cloud MaaS";
+    readonly login: (cb: import("./oauth").OAuthLoginCallbacks) => Promise<string>;
 } | {
     readonly id: "together";
     readonly name: "Together";

package/dist/types/registry/tencent.d.ts

@@ -0,0 +1,7 @@
+import type { OAuthLoginCallbacks } from "./oauth/types";
+export declare const loginTencent: (options: import("./oauth").OAuthController) => Promise<string>;
+export declare const tencentProvider: {
+    readonly id: "tencent";
+    readonly name: "Tencent Cloud MaaS";
+    readonly login: (cb: OAuthLoginCallbacks) => Promise<string>;
+};

package/dist/types/utils/tool-call-loop-guard.d.ts

@@ -3,6 +3,8 @@ import type { AssistantMessage, ToolResultMessage } from "../types";
 export interface ToolCallLoopGuardOptions {
     readonly threshold: number;
     readonly exemptTools: readonly string[];
+    /** Window size for alternating-pattern (A,B,A,B,…) cycle detection; defaults to 6. */
+    readonly cycleWindowSize?: number;
 }
 /** A completed assistant turn plus the tool results it produced. */
 export interface ToolCallLoopTurn {
@@ -17,10 +19,18 @@ export interface RepeatedToolCallDetection {
     readonly resultSummary: string;
     readonly argumentsSummary: string;
 }
+/** Details needed to steer the model away from an alternating tool-call cycle (A,B,A,B,…). */
+export interface CyclicalToolCallDetection {
+    readonly kind: "cyclical_tool_calls";
+    /** Distinct tool names seen in the detection window, in first-seen order. */
+    readonly toolNames: readonly string[];
+    readonly windowSize: number;
+}
+export type ToolCallLoopDetection = RepeatedToolCallDetection | CyclicalToolCallDetection;
 /** Detects consecutive identical assistant tool calls across model turns. */
 export declare class ToolCallLoopGuard {
     #private;
     constructor(options: ToolCallLoopGuardOptions);
-    /** Records one completed turn and returns the threshold hit, if any. */
-    recordTurn(turn: ToolCallLoopTurn): RepeatedToolCallDetection | null;
+    /** Records one completed turn and returns the threshold/cycle hit, if any. */
+    recordTurn(turn: ToolCallLoopTurn): ToolCallLoopDetection | null;
 }

package/package.json

@@ -1,7 +1,7 @@
 {
 	"type": "module",
 	"name": "jeopi-ai",
-	"version": "16.2.23",
+	"version": "16.2.25",
 	"description": "Unified LLM API with automatic model discovery and provider configuration",
 	"homepage": "https://github.com/akillness/jeopi",
 	"author": "Can Boluk",
@@ -38,9 +38,9 @@
 	},
 	"dependencies": {
 		"@bufbuild/protobuf": "^2.12.0",
-		"jeopi-catalog": "16.2.23",
-		"jeopi-utils": "16.2.23",
-		"jeopi-wire": "16.2.23",
+		"jeopi-catalog": "16.2.25",
+		"jeopi-utils": "16.2.25",
+		"jeopi-wire": "16.2.25",
 		"arktype": "^2.2.0",
 		"zod": "^4"
 	},

package/src/registry/api-key-login.ts

@@ -26,6 +26,10 @@ type AnthropicMessagesValidation = {
 	provider: string;
 	baseUrl: string;
 	model: string;
+	/** HTTP error statuses that still prove the key is valid (e.g. a billing/quota
+	 *  gate that only a real, recognized key would reach) and should be treated as
+	 *  successful validation rather than an invalid-key failure. */
+	acceptableErrorStatuses?: readonly number[];
 };
 
 type ModelsEndpointValidation = {
@@ -92,6 +96,7 @@ export function createApiKeyLogin(config: ApiKeyLoginConfig): (options: OAuthCon
 					apiKey: trimmed,
 					baseUrl: config.validation.baseUrl,
 					model: config.validation.model,
+					acceptableErrorStatuses: config.validation.acceptableErrorStatuses,
 					signal: options.signal,
 					fetch: options.fetch,
 				});

package/src/registry/api-key-validation.ts

@@ -16,6 +16,10 @@ type AnthropicCompatibleValidationOptions = {
 	model: string;
 	signal?: AbortSignal;
 	fetch?: FetchImpl;
+	/** HTTP error statuses that still prove the key is valid (e.g. a billing/quota
+	 *  gate that only a real, recognized key would reach) and should be treated as
+	 *  successful validation rather than an invalid-key failure. */
+	acceptableErrorStatuses?: readonly number[];
 };
 
 type ModelListValidationOptions = {
@@ -106,7 +110,7 @@ export async function validateAnthropicCompatibleApiKey(options: AnthropicCompat
 		signal,
 	});
 
-	if (response.ok) {
+	if (response.ok || options.acceptableErrorStatuses?.includes(response.status)) {
 		return;
 	}
 

package/src/registry/registry.ts

@@ -49,6 +49,7 @@ import { qwenPortalProvider } from "./qwen-portal";
 import { sakanaProvider } from "./sakana";
 import { syntheticProvider } from "./synthetic";
 import { tavilyProvider } from "./tavily";
+import { tencentProvider } from "./tencent";
 import { togetherProvider } from "./together";
 import type { ProviderDefinition } from "./types";
 import { umansProvider } from "./umans";
@@ -139,6 +140,7 @@ const ALL = [
 	mistralProvider,
 	minimaxProvider,
 	amazonBedrockProvider,
+	tencentProvider,
 ];
 
 export type RegistryDef = (typeof ALL)[number];

package/src/registry/tencent.ts

@@ -0,0 +1,33 @@
+import { createApiKeyLogin } from "./api-key-login";
+import type { OAuthLoginCallbacks } from "./oauth/types";
+import type { ProviderDefinition } from "./types";
+
+const AUTH_URL = "https://cloud.tencent.com/product/lke";
+const API_BASE_URL = "https://tokenhub-intl.tencentcloudmaas.com";
+const VALIDATION_MODEL = "deepseek-v4-pro";
+
+export const loginTencent = createApiKeyLogin({
+	providerLabel: "Tencent Cloud MaaS",
+	authUrl: AUTH_URL,
+	instructions: "Create or copy your Tencent Cloud MaaS API key from the console.",
+	promptMessage: "Paste your Tencent Cloud MaaS API key",
+	placeholder: "sk-...",
+	validation: {
+		kind: "anthropic-messages",
+		provider: "Tencent Cloud MaaS",
+		baseUrl: API_BASE_URL,
+		model: VALIDATION_MODEL,
+		// Verified live (2026-07): a recognized-but-unbilled key gets HTTP 402
+		// ("free trial quota exhausted ... postpaid billing not enabled"), not a
+		// 401/403 — the gateway only returns 402 after successfully authenticating
+		// the key. Treat it as a valid credential so a real key isn't rejected as
+		// "invalid" just because the account has no active billing yet.
+		acceptableErrorStatuses: [402],
+	},
+});
+
+export const tencentProvider = {
+	id: "tencent",
+	name: "Tencent Cloud MaaS",
+	login: (cb: OAuthLoginCallbacks) => loginTencent(cb),
+} as const satisfies ProviderDefinition;

package/src/utils/tool-call-loop-guard.ts

@@ -9,6 +9,8 @@ const ARGUMENT_SUMMARY_LIMIT = 400;
 export interface ToolCallLoopGuardOptions {
 	readonly threshold: number;
 	readonly exemptTools: readonly string[];
+	/** Window size for alternating-pattern (A,B,A,B,…) cycle detection; defaults to 6. */
+	readonly cycleWindowSize?: number;
 }
 
 /** A completed assistant turn plus the tool results it produced. */
@@ -26,6 +28,16 @@ export interface RepeatedToolCallDetection {
 	readonly argumentsSummary: string;
 }
 
+/** Details needed to steer the model away from an alternating tool-call cycle (A,B,A,B,…). */
+export interface CyclicalToolCallDetection {
+	readonly kind: "cyclical_tool_calls";
+	/** Distinct tool names seen in the detection window, in first-seen order. */
+	readonly toolNames: readonly string[];
+	readonly windowSize: number;
+}
+
+export type ToolCallLoopDetection = RepeatedToolCallDetection | CyclicalToolCallDetection;
+
 function canonicalizeToolCallValue(value: unknown): unknown {
 	if (Array.isArray(value)) {
 		return value.map(item => canonicalizeToolCallValue(item));
@@ -70,18 +82,24 @@ export class ToolCallLoopGuard {
 	#exemptTools: ReadonlySet<string>;
 	#lastHash: string | undefined;
 	#count = 0;
+	#cycleWindowSize: number;
+	#recentCalls: Array<{ hash: string; toolName: string }> = [];
+	#lastCycleSignature: string | undefined;
 
 	constructor(options: ToolCallLoopGuardOptions) {
 		this.#threshold = Math.max(1, Math.trunc(options.threshold));
 		this.#exemptTools = new Set(options.exemptTools);
+		this.#cycleWindowSize = Math.max(3, Math.trunc(options.cycleWindowSize ?? 6));
 	}
 
-	/** Records one completed turn and returns the threshold hit, if any. */
-	recordTurn(turn: ToolCallLoopTurn): RepeatedToolCallDetection | null {
+	/** Records one completed turn and returns the threshold/cycle hit, if any. */
+	recordTurn(turn: ToolCallLoopTurn): ToolCallLoopDetection | null {
 		const toolCalls = turn.message.content.filter((part): part is ToolCall => part.type === "toolCall");
 		if (toolCalls.length !== 1 || this.#exemptTools.has(toolCalls[0]!.name)) {
 			this.#lastHash = undefined;
 			this.#count = 0;
+			this.#recentCalls = [];
+			this.#lastCycleSignature = undefined;
 			return null;
 		}
 
@@ -95,13 +113,36 @@ export class ToolCallLoopGuard {
 			this.#count = 1;
 		}
 
-		if (this.#count !== this.#threshold) return null;
-		return {
-			kind: "repeated_tool_call",
-			toolName: toolCall.name,
-			count: this.#count,
-			resultSummary: summarizeToolResult(turn.toolResults, toolCall.id),
-			argumentsSummary: summarizeText(canonicalArgs, ARGUMENT_SUMMARY_LIMIT),
-		};
+		if (this.#count === this.#threshold) {
+			return {
+				kind: "repeated_tool_call",
+				toolName: toolCall.name,
+				count: this.#count,
+				resultSummary: summarizeToolResult(turn.toolResults, toolCall.id),
+				argumentsSummary: summarizeText(canonicalArgs, ARGUMENT_SUMMARY_LIMIT),
+			};
+		}
+
+		// Alternating A,B,A,B,… pattern: exact-repeat detection above never fires
+		// (the hash changes every turn), but the model is still spinning between
+		// exactly two distinct calls without making progress.
+		this.#recentCalls.push({ hash, toolName: toolCall.name });
+		if (this.#recentCalls.length > this.#cycleWindowSize) this.#recentCalls.shift();
+		if (this.#recentCalls.length < this.#cycleWindowSize) return null;
+
+		const distinctHashes = new Set(this.#recentCalls.map(call => call.hash));
+		if (distinctHashes.size !== 2) {
+			this.#lastCycleSignature = undefined;
+			return null;
+		}
+		const signature = [...distinctHashes].sort().join("|");
+		if (signature === this.#lastCycleSignature) return null;
+		this.#lastCycleSignature = signature;
+
+		const toolNames: string[] = [];
+		for (const call of this.#recentCalls) {
+			if (!toolNames.includes(call.toolName)) toolNames.push(call.toolName);
+		}
+		return { kind: "cyclical_tool_calls", toolNames, windowSize: this.#cycleWindowSize };
 	}
 }