mixdog 0.9.172 → 0.9.174

package/src/standalone/memory-runtime-proxy.mjs

@@ -88,6 +88,7 @@ function createStandaloneMemoryRuntime({ entry, dataDir, cwd = process.cwd() } =
     status,
     handleToolCall: calls.handleToolCall,
     buildSessionCoreMemoryPayload: calls.buildSessionCoreMemoryPayload,
+    warmupEmbedding: calls.warmupEmbedding,
     appendEntry: calls.appendEntry,
     ingestTranscript: calls.ingestTranscript,
     recordTraceEvents: calls.recordTraceEvents,

package/src/standalone/provider-admin.mjs

@@ -12,21 +12,26 @@ import {
   forgetAnthropicOAuthCredentials,
   hasAnthropicOAuthCredentials,
   loginOAuth as loginAnthropicOAuth,
-} from '../runtime/agent/orchestrator/providers/anthropic-oauth.mjs';
+} from '../runtime/agent/orchestrator/providers/anthropic-oauth-credentials.mjs';
+// Credential/login helpers come from their defining modules, not the provider
+// facades: the facades pull every provider's transport stack (~180 modules)
+// into runtime boot, while the registry already loads providers on demand.
 import {
   beginOAuthLogin as beginOpenAIOAuthLogin,
   describeOpenAIOAuthCredentials,
   forgetOpenAIOAuthCredentials,
   hasOpenAIOAuthCredentials,
   loginOAuth as loginOpenAIOAuth,
-} from '../runtime/agent/orchestrator/providers/openai-oauth.mjs';
+} from '../runtime/agent/orchestrator/providers/openai-oauth-tokens.mjs';
 import {
   describeGrokOAuthCredentials,
   forgetGrokOAuthCredentials,
   hasGrokOAuthCredentials,
+} from '../runtime/agent/orchestrator/providers/grok-oauth-tokens.mjs';
+import {
   beginOAuthLogin as beginGrokOAuthLogin,
   loginOAuth as loginGrokOAuth,
-} from '../runtime/agent/orchestrator/providers/grok-oauth.mjs';
+} from '../runtime/agent/orchestrator/providers/grok-oauth-login.mjs';
 import {
   beginCursorOAuthLogin,
   describeCursorOAuthCredentials,
@@ -35,12 +40,14 @@ import {
   loginCursorOAuth,
 } from '../runtime/agent/orchestrator/providers/cursor-auth.mjs';
 import {
-  beginOAuthLogin as beginAntigravityOAuthLogin,
   describeAntigravityOAuthCredentials,
   forgetAntigravityOAuthCredentials,
   hasAntigravityOAuthCredentials,
+} from '../runtime/agent/orchestrator/providers/antigravity-oauth-tokens.mjs';
+import {
+  beginOAuthLogin as beginAntigravityOAuthLogin,
   loginOAuth as loginAntigravityOAuth,
-} from '../runtime/agent/orchestrator/providers/antigravity-oauth.mjs';
+} from '../runtime/agent/orchestrator/providers/antigravity-oauth-login.mjs';
 import { localProviderStatus } from '../runtime/local-provider/managed-runtime.mjs';
 import { isOAuthProviderAvailable } from '../runtime/agent/orchestrator/providers/oauth-credential-probes.mjs';
 import {
@@ -79,79 +86,79 @@ const API_PROVIDERS = Object.freeze([
   Object.freeze({ id: 'xai', name: 'xAI API', env: 'XAI_API_KEY', url: 'https://console.x.ai' }),
 ]);
 
-const OAUTH_PROVIDERS = Object.freeze(
-  [
-    Object.freeze({
-      id: 'openai-oauth',
-      name: 'OpenAI OAuth',
-      desc: 'Mixdog OAuth credentials',
-      has: hasOpenAIOAuthCredentials,
-      describe: describeOpenAIOAuthCredentials,
-      forget: forgetOpenAIOAuthCredentials,
-      begin: beginOpenAIOAuthLogin,
-      login: loginOpenAIOAuth,
-    }),
-    Object.freeze({
-      id: 'anthropic-oauth',
-      name: 'Anthropic OAuth',
-      desc: 'Mixdog OAuth credentials',
-      has: hasAnthropicOAuthCredentials,
-      describe: describeAnthropicOAuthCredentials,
-      forget: forgetAnthropicOAuthCredentials,
-      begin: beginAnthropicOAuthLogin,
-      login: loginAnthropicOAuth,
-    }),
-    Object.freeze({
-      id: 'grok-oauth',
-      name: 'Grok OAuth',
-      desc: 'Mixdog OAuth credentials (Grok Build)',
-      has: hasGrokOAuthCredentials,
-      describe: describeGrokOAuthCredentials,
-      forget: forgetGrokOAuthCredentials,
-      begin: beginGrokOAuthLogin,
-      login: loginGrokOAuth,
-    }),
-    Object.freeze({
-      id: 'cursor-oauth',
-      name: 'Cursor OAuth',
-      desc: 'Sign in with your Cursor account',
-      has: hasCursorOAuthCredentials,
-      describe: describeCursorOAuthCredentials,
-      forget: forgetCursorOAuthCredentials,
-      begin: beginCursorOAuthLogin,
-      login: loginCursorOAuth,
-    }),
-    Object.freeze({
-      id: 'antigravity-oauth',
-      name: 'Antigravity OAuth',
-      desc: 'Sign in with Google (Gemini + Claude)',
-      has: hasAntigravityOAuthCredentials,
-      describe: describeAntigravityOAuthCredentials,
-      forget: forgetAntigravityOAuthCredentials,
-      begin: beginAntigravityOAuthLogin,
-      login: loginAntigravityOAuth,
-    }),
-    // Dev-only entries (cursor-oauth, antigravity-oauth) are dropped unless
-    // MIXDOG_DEV_PROVIDERS is set, so they are unknown to settings/login by default.
-  ].filter((p) => isOAuthProviderAvailable(p.id))
-);
+const OAUTH_PROVIDERS = Object.freeze([
+  Object.freeze({
+    id: 'openai-oauth',
+    name: 'OpenAI OAuth',
+    desc: 'Mixdog OAuth credentials',
+    has: hasOpenAIOAuthCredentials,
+    describe: describeOpenAIOAuthCredentials,
+    forget: forgetOpenAIOAuthCredentials,
+    begin: beginOpenAIOAuthLogin,
+    login: loginOpenAIOAuth,
+  }),
+  Object.freeze({
+    id: 'anthropic-oauth',
+    name: 'Anthropic OAuth',
+    desc: 'Mixdog OAuth credentials',
+    has: hasAnthropicOAuthCredentials,
+    describe: describeAnthropicOAuthCredentials,
+    forget: forgetAnthropicOAuthCredentials,
+    begin: beginAnthropicOAuthLogin,
+    login: loginAnthropicOAuth,
+  }),
+  Object.freeze({
+    id: 'grok-oauth',
+    name: 'Grok OAuth',
+    desc: 'Mixdog OAuth credentials (Grok Build)',
+    has: hasGrokOAuthCredentials,
+    describe: describeGrokOAuthCredentials,
+    forget: forgetGrokOAuthCredentials,
+    begin: beginGrokOAuthLogin,
+    login: loginGrokOAuth,
+  }),
+  Object.freeze({
+    id: 'cursor-oauth',
+    name: 'Cursor OAuth',
+    desc: 'Sign in with your Cursor account',
+    has: hasCursorOAuthCredentials,
+    describe: describeCursorOAuthCredentials,
+    forget: forgetCursorOAuthCredentials,
+    begin: beginCursorOAuthLogin,
+    login: loginCursorOAuth,
+  }),
+  Object.freeze({
+    id: 'antigravity-oauth',
+    name: 'Antigravity OAuth',
+    desc: 'Sign in with Google (Gemini + Claude)',
+    has: hasAntigravityOAuthCredentials,
+    describe: describeAntigravityOAuthCredentials,
+    forget: forgetAntigravityOAuthCredentials,
+    begin: beginAntigravityOAuthLogin,
+    login: loginAntigravityOAuth,
+  }),
+]);
 
-export const LOCAL_PROVIDERS = Object.freeze([]);
 const BUILTIN_PROVIDER_IDS = new Set(['mixdog-local']);
 
 const API_PROVIDER_IDS = new Set(API_PROVIDERS.map((p) => p.id));
 const OAUTH_BY_ID = new Map(OAUTH_PROVIDERS.map((p) => [p.id, p]));
 
-const ALL_PROVIDER_IDS = new Set([
-  ...API_PROVIDERS.map((p) => p.id),
-  ...OAUTH_PROVIDERS.map((p) => p.id),
-  ...LOCAL_PROVIDERS.map((p) => p.id),
-  ...BUILTIN_PROVIDER_IDS,
-]);
+// Dev-only entries (cursor-oauth, antigravity-oauth) are unknown to
+// settings/login while the Developer → Providers option is off. Filtered per
+// call, so toggling the option takes effect without a restart.
+function availableOAuthProviders() {
+  return OAUTH_PROVIDERS.filter((p) => isOAuthProviderAvailable(p.id));
+}
+
+function availableOAuthProvider(id) {
+  const oauth = OAUTH_BY_ID.get(id);
+  return oauth && isOAuthProviderAvailable(id) ? oauth : null;
+}
 
 export function isKnownProvider(provider) {
   const id = String(provider || '').trim();
-  return id !== '' && ALL_PROVIDER_IDS.has(id);
+  return id !== '' && (API_PROVIDER_IDS.has(id) || BUILTIN_PROVIDER_IDS.has(id) || !!availableOAuthProvider(id));
 }
 
 function updateConfigProvider(cfgMod, providerId, patch) {
@@ -273,7 +280,7 @@ export async function providerSetup(config = {}, options = {}) {
   const checkSecrets = options?.checkSecrets !== false;
   return {
     api: API_PROVIDERS.map((p) => apiProviderSetup(p, providers, checkSecrets)),
-    oauth: OAUTH_PROVIDERS.map((p) => oauthProviderSetup(p, providers, checkSecrets)),
+    oauth: availableOAuthProviders().map((p) => oauthProviderSetup(p, providers, checkSecrets)),
     local: [builtInLocalProviderSetup(config, options)],
   };
 }
@@ -315,17 +322,7 @@ function oauthProviderStatusRow(p, config) {
 export function providerStatus(config = {}) {
   return [
     ...API_PROVIDERS.map((p) => apiProviderStatusRow(p, config)),
-    ...OAUTH_PROVIDERS.map((p) => oauthProviderStatusRow(p, config)),
-    ...LOCAL_PROVIDERS.map((p) => ({
-      id: p.id,
-      type: 'local',
-      enabled: config.providers?.[p.id]?.enabled === true,
-      authenticated: false,
-      stored: false,
-      env: false,
-      envName: null,
-      label: p.name,
-    })),
+    ...availableOAuthProviders().map((p) => oauthProviderStatusRow(p, config)),
   ];
 }
 
@@ -350,7 +347,7 @@ export async function authenticateProvider(provider, secret) {
   const id = String(provider || '').trim();
   if (!id) throw new Error('provider id is required');
 
-  const oauth = OAUTH_BY_ID.get(id);
+  const oauth = availableOAuthProvider(id);
   if (oauth) {
     const result = await oauth.login();
     if (!result) throw new Error(`${id} login did not complete`);
@@ -368,7 +365,7 @@ export async function authenticateProvider(provider, secret) {
 
 export async function loginOAuthProvider(cfgMod, provider) {
   const id = String(provider || '').trim();
-  const oauth = OAUTH_BY_ID.get(id);
+  const oauth = availableOAuthProvider(id);
   if (!oauth) throw new Error(`unknown OAuth provider "${id}"`);
   const result = await oauth.login();
   if (!result) throw new Error(`${id} login did not complete`);
@@ -428,7 +425,7 @@ function settleOAuthLogin({ cfgMod, id, accountId, includeDefault, label, inAcco
 
 export async function beginOAuthProviderLogin(cfgMod, provider, options = {}) {
   const id = String(provider || '').trim();
-  const oauth = OAUTH_BY_ID.get(id);
+  const oauth = availableOAuthProvider(id);
   if (!oauth) throw new Error(`unknown OAuth provider "${id}"`);
   if (typeof oauth.begin !== 'function') throw new Error(`${id} does not support interactive code login`);
   assertOAuthLoginOptions(options);
@@ -470,7 +467,7 @@ export async function beginOAuthProviderLogin(cfgMod, provider, options = {}) {
 }
 
 export function listProviderAccounts(provider) {
-  const oauth = OAUTH_BY_ID.get(provider);
+  const oauth = availableOAuthProvider(provider);
   if (!oauth) throw new TypeError('Unknown OAuth provider.');
   const pool = readProviderAccountPool(provider);
   const accounts = pool.accounts.length ? pool.accounts : defaultAccountRows(provider, oauth);
@@ -536,35 +533,26 @@ export function saveOpenAIUsageSessionKey(cfgMod, secret) {
   return { provider: 'openai', type: 'usage-auth', authenticated: true };
 }
 
-export function saveOpenCodeGoUsageAuth(cfgMod, { workspaceId, authCookie } = {}) {
-  const workspace = String(workspaceId || '').trim();
-  if (workspace && !/^wrk_[a-zA-Z0-9]+$/.test(workspace))
-    throw new Error('OpenCode Go workspaceId must look like wrk_...');
-  const cookie = String(authCookie || '').trim();
-  if (!cookie) throw new Error('OpenCode auth cookie is required for usage lookup');
-  const authMatch = /(?:^|;\s*)auth=([^;]+)/.exec(cookie);
-  saveSecret(SECRET_ACCOUNTS.opencodeGoAuthCookie, authMatch ? authMatch[1] : cookie);
-  // Usage auth is a console cookie, not a model API key. Only flip the model
-  // provider on when a key actually exists; otherwise cookie-only setups get
-  // routed to the provider with apiKey 'no-key' and fail with 401s.
-  const hasApiKey = Boolean(getAgentApiKey('opencode-go'));
-  updateConfigProvider(cfgMod, 'opencode-go', {
-    ...(hasApiKey ? { enabled: true } : {}),
-    ...(workspace ? { workspaceId: workspace } : {}),
-  });
-  return { provider: 'opencode-go', type: 'usage-auth', authenticated: true, workspaceId: workspace || null };
-}
-
-export async function loginOpenCodeGoUsage(cfgMod) {
-  const { loginOpenCodeGoConsoleWithBrowser } = await import('./opencode-go-login.mjs');
-  const { workspaceId, authCookie } = await loginOpenCodeGoConsoleWithBrowser();
-  return saveOpenCodeGoUsageAuth(cfgMod, { workspaceId, authCookie });
+export function saveOpenCodeGoUsageAuth(cfgMod, { apiKey } = {}) {
+  const secret = String(apiKey || '').trim();
+  if (!secret) throw new Error('OpenCode console API key is required for usage lookup');
+  // Subscription meters are read with a console service-account key holding the
+  // `all` permission. The console accepts no other credential for them, so
+  // rejecting anything else here keeps unusable auth out of the keychain.
+  if (!/^(?:oc_sk_|sk-)/.test(secret))
+    throw new Error('OpenCode usage auth must be a console API key (oc_sk_… or sk-…) with all permissions');
+  saveSecret(SECRET_ACCOUNTS.opencodeGoConsoleKey, secret);
+  // Usage auth may be a different key from the inference key. Only flip the
+  // model provider on when a model key actually exists; otherwise usage-only
+  // setups get routed to the provider with apiKey 'no-key' and fail with 401s.
+  if (getAgentApiKey('opencode-go')) updateConfigProvider(cfgMod, 'opencode-go', { enabled: true });
+  return { provider: 'opencode-go', type: 'usage-auth', authenticated: true };
 }
 
 export function forgetProviderAuth(cfgModOrProvider, maybeProvider, requestedAccountId) {
   const cfgMod = maybeProvider === undefined ? null : cfgModOrProvider;
   const id = String(maybeProvider === undefined ? cfgModOrProvider : maybeProvider || '').trim();
-  const oauth = OAUTH_BY_ID.get(id);
+  const oauth = availableOAuthProvider(id);
   if (oauth) {
     if (typeof oauth.forget !== 'function') throw new Error(`forget is not supported for OAuth provider ${id}`);
     const accountId = requestedAccountId ?? currentProviderAccountId(id);

package/src/standalone/seeds.mjs

@@ -76,12 +76,7 @@ export function retireSeededSkillCopies({ rootDir, dataDir }) {
       const copy = join(targetRoot, entry.name);
       if (!existsSync(copy)) continue;
       if (!sameTree(join(bundledDir, entry.name), copy)) continue;
-      try {
-        rmSync(copy, { recursive: true, force: true });
-        retired.push(entry.name);
-      } catch {
-        // best-effort; a stuck copy simply keeps shadowing until removed by hand
-      }
+      if (removeEntry(copy)) retired.push(entry.name);
     }
   }
   return retired;

package/src/standalone/session-client/attachment-calls.mjs

@@ -0,0 +1,67 @@
+// session-client/attachment-calls.mjs
+// The request half of one session attachment: dispatching session calls over
+// /call — where a transport death and a session error are deliberately
+// different outcomes — and the deregistration that ends the attachment. The
+// frame-stream half lives in ./stream-link.mjs. The HTTP `request` is injected
+// so this module stays a wire-shape concern only.
+const URGENT_CALLS = new Set([
+  'session.submit',
+  'session.abort',
+  'session.approve',
+  'session.unsubscribe',
+  'desktop.control',
+  'desktop.unsubscribe',
+]);
+
+export function createAttachmentCalls({ request, port, serverToken, clientToken, stopStream, log }) {
+  let closed = false;
+
+  async function call(name, args = {}, { timeoutMs = 300_000, callId = null } = {}) {
+    let out;
+    try {
+      out = await request({
+        port,
+        token: serverToken,
+        method: 'POST',
+        path: '/call',
+        body: { token: clientToken, name, args: args || {}, ...(callId ? { callId } : {}) },
+        timeoutMs,
+        urgent: URGENT_CALLS.has(name),
+      });
+    } catch (err) {
+      // Transport death (daemon restarted/unreachable) is recoverable by
+      // re-attaching; a session error comes back as a 200 {error} envelope.
+      err.daemonTransportError = true;
+      throw err;
+    }
+    if (out?.error) {
+      // Preserve the daemon's machine-readable classification across the wire.
+      const err = new Error(out.error);
+      if (out.code) err.code = String(out.code);
+      throw err;
+    }
+    return out?.result;
+  }
+
+  async function close(reason = 'client close') {
+    if (closed) return;
+    closed = true;
+    stopStream();
+    try {
+      await request({
+        port,
+        token: serverToken,
+        method: 'POST',
+        path: '/client/deregister',
+        body: { token: clientToken },
+        timeoutMs: 1500,
+        control: true,
+      });
+    } catch {
+      /* the daemon sweep reaps us anyway */
+    }
+    log(`detached (${reason})`);
+  }
+
+  return { call, close };
+}

package/src/standalone/session-client/stream-link.mjs

@@ -0,0 +1,85 @@
+// session-client/stream-link.mjs
+// The live half of one session attachment: the /events frame stream, the
+// reconnect policy that keeps it alive, and the one-shot fatal signal that
+// tears both down exactly once. attachSession owns registration and calls; the
+// stream's lifetime is owned here.
+import { createFrameStream } from './frame-stream.mjs';
+import { createStreamReconnect } from './stream-reconnect.mjs';
+
+export const EVENT_STREAM_RECONNECT_BASE_MS = 1_000;
+export const EVENT_STREAM_RECONNECT_MAX_MS = 30_000;
+// Keepalive silence is detected independently
+// from TCP close, and a continuously failing reconnect storm is bounded.
+export const EVENT_STREAM_LIVENESS_TIMEOUT_MS = 45_000;
+export const EVENT_STREAM_RECONNECT_BUDGET_MS = 10 * 60_000;
+
+export function createStreamLink({
+  discovery,
+  port,
+  serverToken,
+  clientToken,
+  onFrame,
+  onFatal,
+  onDisconnect,
+  onReconnect,
+  reconnectBaseMs,
+  reconnectMaxMs,
+  reconnectBudgetMs,
+  livenessTimeoutMs,
+  readDiscovery,
+  probeHealth,
+  pidAlive,
+  log,
+}) {
+  let stopped = false;
+  let fatalSignalled = false;
+  const baseMs = Math.max(1, Number(reconnectBaseMs) || EVENT_STREAM_RECONNECT_BASE_MS);
+
+  function teardown() {
+    reconnect.stop();
+    stream.destroy();
+  }
+
+  function signalFatal(reason) {
+    if (stopped || fatalSignalled) return;
+    fatalSignalled = true;
+    teardown();
+    try {
+      onFatal(reason);
+    } catch {}
+  }
+
+  const stream = createFrameStream({
+    port,
+    serverToken,
+    clientToken,
+    livenessMs: Math.max(1, Number(livenessTimeoutMs) || EVENT_STREAM_LIVENESS_TIMEOUT_MS),
+    onFrame,
+    log,
+    onHealthy: () => reconnect.markHealthy(),
+    onLoss: (reason) => reconnect.schedule(reason),
+    onFatal: signalFatal,
+  });
+  const reconnect = createStreamReconnect({
+    discovery,
+    baseMs,
+    maxMs: Math.max(baseMs, Number(reconnectMaxMs) || EVENT_STREAM_RECONNECT_MAX_MS),
+    budgetMs: Math.max(baseMs, Number(reconnectBudgetMs) || EVENT_STREAM_RECONNECT_BUDGET_MS),
+    log,
+    readDiscovery,
+    probeHealth,
+    pidAlive,
+    onDisconnect,
+    onReconnect,
+    onFatal: signalFatal,
+    reopen: () => stream.open(),
+  });
+
+  return {
+    open: () => stream.open(),
+    stop: () => {
+      stopped = true;
+      teardown();
+    },
+  };
+}