kimiflare 0.36.0 → 0.36.2

package/dist/index.js

@@ -483,6 +483,9 @@ function isRetryable(err, attempt) {
   return false;
 }
 async function* runKimi(opts2) {
+  if (opts2.cloudMode && !opts2.cloudToken) {
+    throw new KimiApiError("kimiflare: cloud mode requires a cloud token. Run `kimiflare auth cloud` to authenticate.", void 0, 401);
+  }
   const { url, headers: gatewayHeaders } = buildKimiRequestTarget(opts2);
   const body = {
     messages: sanitizeMessagesForApi(opts2.messages),
@@ -556,9 +559,11 @@ function validateModelId(model) {
 function buildKimiRequestTarget(opts2) {
   validateModelId(opts2.model);
   if (opts2.cloudMode) {
+    const headers2 = opts2.cloudToken ? { Authorization: `Bearer ${opts2.cloudToken}` } : {};
+    if (opts2.cloudDeviceId) headers2["X-Device-ID"] = opts2.cloudDeviceId;
     return {
       url: "https://api.kimiflare.com/v1/chat",
-      headers: opts2.cloudToken ? { Authorization: `Bearer ${opts2.cloudToken}` } : {}
+      headers: headers2
     };
   }
   if (!opts2.gateway?.id) {
@@ -1757,7 +1762,8 @@ Use console.log() to return results. Only console.log output will be sent back t
       sessionId: opts2.sessionId,
       gateway: opts2.gateway,
       cloudMode: opts2.cloudMode,
-      cloudToken: opts2.cloudToken
+      cloudToken: opts2.cloudToken,
+      cloudDeviceId: opts2.cloudDeviceId
     });
     for await (const ev of events) {
       switch (ev.type) {
@@ -4661,24 +4667,30 @@ function generateCode() {
   }
   return out;
 }
+function generateDeviceId() {
+  const arr = new Uint8Array(16);
+  crypto.getRandomValues(arr);
+  return Array.from(arr, (b) => b.toString(16).padStart(2, "0")).join("");
+}
 function generateDeviceCodes() {
   const deviceCode = `device-${generateCode()}-${Date.now()}`;
   const userCode = `${generateCode()}-${generateCode()}`;
   const authUrl = `${CLOUD_API_URL}/auth/github?code=${encodeURIComponent(userCode)}`;
-  return { deviceCode, userCode, authUrl };
+  const deviceId = generateDeviceId();
+  return { deviceCode, userCode, authUrl, deviceId };
 }
 async function registerDevice(codes) {
   const registerRes = await fetch(`${CLOUD_API_URL}/auth/device`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
-    body: JSON.stringify({ device_code: codes.deviceCode, user_code: codes.userCode })
+    body: JSON.stringify({ device_code: codes.deviceCode, user_code: codes.userCode, device_id: codes.deviceId })
   });
   if (!registerRes.ok) {
     const err = await registerRes.json().catch(() => ({}));
     throw new Error(`Failed to register device: ${err.error || registerRes.statusText}`);
   }
 }
-async function pollForToken(deviceCode) {
+async function pollForToken(deviceCode, deviceId) {
   const pollRes = await fetch(`${CLOUD_API_URL}/auth/poll`, {
     method: "POST",
     headers: { "Content-Type": "application/json" },
@@ -4689,26 +4701,36 @@ async function pollForToken(deviceCode) {
   if (pollData.status === "approved" && pollData.access_token) {
     const creds = {
       accessToken: pollData.access_token,
-      expiresAt: Math.floor(Date.now() / 1e3) + 7 * 24 * 60 * 60
+      expiresAt: Math.floor(Date.now() / 1e3) + 7 * 24 * 60 * 60,
       // 7 days
+      deviceId
     };
     await saveCloudCredentials(creds);
     return creds;
   }
   return null;
 }
-async function fetchCloudUsage(token) {
-  const res = await fetch(`${CLOUD_API_URL}/v1/usage`, {
-    headers: { Authorization: `Bearer ${token}` }
-  });
+async function fetchCloudUsage(token, deviceId) {
+  const headers = { Authorization: `Bearer ${token}` };
+  if (deviceId) headers["X-Device-ID"] = deviceId;
+  const res = await fetch(`${CLOUD_API_URL}/v1/usage`, { headers });
   if (!res.ok) return null;
-  return await res.json();
+  const data = await res.json();
+  if (typeof data.remaining !== "number" || typeof data.input_token_limit !== "number" || typeof data.input_tokens_used !== "number" || typeof data.expires_at !== "string") {
+    return null;
+  }
+  return {
+    input_token_limit: data.input_token_limit,
+    input_tokens_used: data.input_tokens_used,
+    remaining: data.remaining,
+    expires_at: data.expires_at
+  };
 }
 async function loadCloudCredentials() {
   try {
     const raw = await readFile11(cloudCredPath(), "utf8");
     const parsed = JSON.parse(raw);
-    if (parsed.expiresAt && parsed.expiresAt > Date.now() / 1e3) {
+    if (parsed.expiresAt && parsed.expiresAt > Date.now() / 1e3 && parsed.accessToken) {
       return parsed;
     }
   } catch {
@@ -4734,7 +4756,7 @@ async function authenticateDevice(onStatus) {
   while (Date.now() - startTime < POLL_TIMEOUT_MS) {
     await new Promise((r) => setTimeout(r, POLL_INTERVAL_MS));
     onStatus({ url: codes.authUrl, userCode: codes.userCode, polling: true });
-    const creds = await pollForToken(codes.deviceCode);
+    const creds = await pollForToken(codes.deviceCode, codes.deviceId);
     if (creds) return creds;
   }
   throw new Error("Authentication timed out. Please try again.");
@@ -7966,9 +7988,9 @@ function Onboarding({ onDone, onCancel }) {
           return;
         }
         try {
-          const creds = await pollForToken(cloudAuth.codes.deviceCode);
+          const creds = await pollForToken(cloudAuth.codes.deviceCode, cloudAuth.codes.deviceId);
           if (creds && !cancelled) {
-            const usage = await fetchCloudUsage(creds.accessToken);
+            const usage = await fetchCloudUsage(creds.accessToken, creds.deviceId);
             if (usage && !cancelled) {
               setCloudAuth({
                 phase: "success",
@@ -12971,12 +12993,15 @@ function App({
   initialUpdateResult,
   initialLspScope,
   initialLspProjectPath,
-  initialCloudToken
+  initialCloudToken,
+  initialCloudDeviceId
 }) {
   const { exit } = useApp();
   const [cfg, setCfg] = useState10(initialCfg);
   const [lspScope, setLspScope] = useState10(initialLspScope);
   const [lspProjectPath, setLspProjectPath] = useState10(initialLspProjectPath);
+  const [cloudToken, setCloudToken] = useState10(initialCloudToken);
+  const [cloudDeviceId, setCloudDeviceId] = useState10(initialCloudDeviceId);
   const [events, setRawEvents] = useState10([]);
   const setEvents = useCallback2(
     (updater) => {
@@ -13030,7 +13055,7 @@ function App({
     let cancelled = false;
     const fetchBudget = async () => {
       const { fetchCloudUsage: fetchCloudUsage2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
-      const usage2 = await fetchCloudUsage2(initialCloudToken);
+      const usage2 = await fetchCloudUsage2(initialCloudToken, cloudDeviceId ?? initialCloudDeviceId);
       if (usage2 && !cancelled) {
         setCloudBudget({ remaining: usage2.remaining, limit: usage2.input_token_limit });
       }
@@ -13953,7 +13978,8 @@ function App({
         memoryManager: memoryManagerRef.current,
         codeMode: effectiveCodeMode,
         cloudMode: cfg.cloudMode,
-        cloudToken: initialCloudToken,
+        cloudToken: cloudToken ?? initialCloudToken,
+        cloudDeviceId: cloudDeviceId ?? initialCloudDeviceId,
         onIterationEnd,
         onFileChange: (path, content) => {
           if (content) {
@@ -15163,7 +15189,8 @@ ${lines.join("\n")}` }]);
           keepLastImageTurns: cfg.imageHistoryTurns ?? 2,
           codeMode: effectiveCodeMode,
           cloudMode: cfg.cloudMode,
-          cloudToken: initialCloudToken,
+          cloudToken: cloudToken ?? initialCloudToken,
+          cloudDeviceId: cloudDeviceId ?? initialCloudDeviceId,
           onIterationEnd,
           intentClassification: classification,
           onFileChange: (path, content2) => {
@@ -15362,6 +15389,7 @@ ${lines.join("\n")}` }]);
             const { loadCloudCredentials: loadCloudCredentials2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
             const creds = await loadCloudCredentials2();
             if (creds) {
+              setCloudToken(creds.accessToken);
               setEvents((e) => [
                 ...e,
                 { kind: "info", key: mkKey(), text: "configuration saved \u2014 welcome to kimiflare! (cloud mode)" }
@@ -15664,7 +15692,7 @@ ${lines.join("\n")}` }]);
     ] })
   ] }) });
 }
-async function renderApp(cfg, updateResult, lspScope = "global", lspProjectPath = null, cloudToken) {
+async function renderApp(cfg, updateResult, lspScope = "global", lspProjectPath = null, cloudToken, cloudDeviceId) {
   const instance = render(
     /* @__PURE__ */ jsx23(
       App,
@@ -15673,7 +15701,8 @@ async function renderApp(cfg, updateResult, lspScope = "global", lspProjectPath
         initialUpdateResult: updateResult,
         initialLspScope: lspScope,
         initialLspProjectPath: lspProjectPath,
-        initialCloudToken: cloudToken
+        initialCloudToken: cloudToken,
+        initialCloudDeviceId: cloudDeviceId
       }
     ),
     {
@@ -15886,14 +15915,12 @@ program.command("usage").description("Show Kimiflare Cloud token usage (requires
     console.error("Not authenticated with Kimiflare Cloud. Run: kimiflare auth cloud");
     process.exit(1);
   }
-  const res = await fetch("https://api.kimiflare.com/v1/usage", {
-    headers: { Authorization: `Bearer ${creds.accessToken}` }
-  });
-  if (!res.ok) {
-    console.error(`Failed to fetch usage: ${res.status} ${res.statusText}`);
+  const { fetchCloudUsage: fetchCloudUsage2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+  const usage = await fetchCloudUsage2(creds.accessToken, creds.deviceId);
+  if (!usage) {
+    console.error("Failed to fetch usage: invalid response from server");
     process.exit(1);
   }
-  const usage = await res.json();
   console.log(`Token budget: ${usage.remaining.toLocaleString()} / ${usage.input_token_limit.toLocaleString()} remaining`);
   console.log(`Used: ${usage.input_tokens_used.toLocaleString()}`);
   console.log(`Grant expires: ${usage.expires_at}`);
@@ -15931,11 +15958,9 @@ Kimiflare Cloud Authentication`);
         }
       });
       console.log(`Authenticated! Token expires at ${new Date(creds.expiresAt * 1e3).toISOString()}`);
-      const usageRes = await fetch("https://api.kimiflare.com/v1/usage", {
-        headers: { Authorization: `Bearer ${creds.accessToken}` }
-      });
-      if (usageRes.ok) {
-        const usage = await usageRes.json();
+      const { fetchCloudUsage: fetchCloudUsage2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
+      const usage = await fetchCloudUsage2(creds.accessToken, creds.deviceId);
+      if (usage) {
         console.log(`
 Token budget: ${usage.remaining.toLocaleString()} / ${usage.input_token_limit.toLocaleString()} remaining`);
         console.log(`Grant expires: ${usage.expires_at}`);
@@ -15969,6 +15994,7 @@ async function main() {
   }
   const cloudMode = opts.cloud ?? cfg?.cloudMode ?? false;
   let cloudToken;
+  let cloudDeviceId;
   if (cloudMode) {
     const { loadCloudCredentials: loadCloudCredentials2, authenticateDevice: authenticateDevice2 } = await Promise.resolve().then(() => (init_auth(), auth_exports));
     let cloudCreds = await loadCloudCredentials2();
@@ -15977,6 +16003,7 @@ async function main() {
       process.exit(2);
     }
     cloudToken = cloudCreds.accessToken;
+    cloudDeviceId = cloudCreds.deviceId;
     cfg = {
       ...cfg ?? { accountId: "", apiToken: "", model: DEFAULT_MODEL },
       cloudMode: true
@@ -15998,6 +16025,7 @@ async function main() {
       showReasoning: !!opts.reasoning,
       codeMode: cfg.codeMode,
       cloudToken,
+      cloudDeviceId,
       continueOnLimit: !!opts.continueOnLimit,
       maxInputTokens: opts.maxInputTokens,
       updateResult
@@ -16013,9 +16041,9 @@ async function main() {
   const { renderApp: renderApp2 } = await Promise.resolve().then(() => (init_app(), app_exports));
   if (cfg) {
     const model = opts.model ?? cfg.model ?? DEFAULT_MODEL;
-    await renderApp2({ ...cfg, model }, updateResult, lspScope, lspProjectPath, cloudToken);
+    await renderApp2({ ...cfg, model }, updateResult, lspScope, lspProjectPath, cloudToken, cloudDeviceId);
   } else {
-    await renderApp2(null, updateResult, lspScope, lspProjectPath, cloudToken);
+    await renderApp2(null, updateResult, lspScope, lspProjectPath, cloudToken, cloudDeviceId);
   }
 }
 function gatewayFromPrintOpts(opts2) {
@@ -16067,6 +16095,7 @@ async function runPrintMode(opts2) {
       maxInputTokens: opts2.maxInputTokens,
       cloudMode: opts2.cloudMode,
       cloudToken: opts2.cloudToken,
+      cloudDeviceId: opts2.cloudDeviceId,
       coauthor: opts2.coauthor !== false ? { name: opts2.coauthorName || "kimiflare", email: opts2.coauthorEmail || "kimiflare@proton.me" } : void 0,
       callbacks: {
         onReasoningDelta: opts2.showReasoning ? (delta) => {