npm - neoagent - Versions diffs - 2.3.1-beta.101 → 2.3.1-beta.103 - Mend

neoagent 2.3.1-beta.101 → 2.3.1-beta.103

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (9) hide show

package/lib/manager.js +148 -2
package/package.json +1 -1
package/server/public/.last_build_id +1 -1
package/server/public/flutter_bootstrap.js +1 -1
package/server/public/main.dart.js +4 -4
package/server/services/ai/models.js +21 -0
package/server/services/ai/providers/claudeCode.js +49 -0
package/server/services/ai/providers/openaiCodex.js +62 -35
package/server/services/ai/settings.js +10 -0

package/lib/manager.js CHANGED Viewed

@@ -786,10 +786,153 @@ async function pollDeviceCode({ pollUrl, pollBody, pollHeaders = {}, intervalMs,
   throw new Error('Authentication timed out after 15 minutes.');
 }
+async function cmdLoginClaudeCode() {
+  heading('Claude Code Login');
+  // Check for Claude CLI credential file first (set by `claude login`)
+  const cliCredsPath = path.join(os.homedir(), '.claude', '.credentials.json');
+  if (fs.existsSync(cliCredsPath)) {
+    try {
+      const raw = fs.readFileSync(cliCredsPath, 'utf8');
+      const data = JSON.parse(raw);
+      const token = data?.claudeAiOauthTokens?.accessToken;
+      if (token) {
+        upsertEnvValue('CLAUDE_CODE_ACCESS_TOKEN', token);
+        logOk('Imported access token from Claude CLI credentials store');
+        logInfo('Restarting NeoAgent to apply credentials...');
+        cmdRestart();
+        return;
+      }
+    } catch { }
+  }
+  // Fall back to browser-based PKCE OAuth flow
+  const http = require('http');
+  const { URL: NodeURL } = require('url');
+  const clientId = '9d1c250a-e61b-48f7-87a4-b8a14c8a8f5e';
+  const redirectPort = 54321;
+  const redirectUri = `http://localhost:${redirectPort}/callback`;
+  // Generate PKCE verifier and challenge
+  const codeVerifier = crypto.randomBytes(48).toString('base64url');
+  const codeChallenge = crypto
+    .createHash('sha256')
+    .update(codeVerifier)
+    .digest('base64url');
+  const state = crypto.randomBytes(16).toString('hex');
+  const authUrl = new URL('https://claude.ai/oauth/authorize');
+  authUrl.searchParams.set('response_type', 'code');
+  authUrl.searchParams.set('client_id', clientId);
+  authUrl.searchParams.set('redirect_uri', redirectUri);
+  authUrl.searchParams.set('scope', 'openid profile email offline_access');
+  authUrl.searchParams.set('code_challenge', codeChallenge);
+  authUrl.searchParams.set('code_challenge_method', 'S256');
+  authUrl.searchParams.set('state', state);
+  console.log(`\n  ${COLORS.cyan}Opening browser for Claude Code authorization...${COLORS.reset}`);
+  console.log(`  ${COLORS.dim}If the browser doesn't open, visit:${COLORS.reset}`);
+  console.log(`  ${authUrl.toString()}\n`);
+  // Open browser
+  const openCmd = process.platform === 'darwin' ? 'open'
+    : process.platform === 'win32' ? 'start'
+    : 'xdg-open';
+  spawnSync(openCmd, [authUrl.toString()], { stdio: 'ignore' });
+  // Start local redirect server to capture authorization code
+  const authCode = await new Promise((resolve, reject) => {
+    const timeout = setTimeout(() => {
+      server.close();
+      reject(new Error('Claude Code authorization timed out after 5 minutes.'));
+    }, 5 * 60 * 1000);
+    const server = http.createServer((req, res) => {
+      try {
+        const reqUrl = new NodeURL(req.url, `http://localhost:${redirectPort}`);
+        const code = reqUrl.searchParams.get('code');
+        const returnedState = reqUrl.searchParams.get('state');
+        const error = reqUrl.searchParams.get('error');
+        if (error) {
+          res.writeHead(200, { 'Content-Type': 'text/html' });
+          res.end('<html><body><h2>Authorization failed.</h2><p>You can close this tab.</p></body></html>');
+          clearTimeout(timeout);
+          server.close();
+          reject(new Error(`OAuth error: ${error}`));
+          return;
+        }
+        if (returnedState && returnedState !== state) {
+          res.writeHead(200, { 'Content-Type': 'text/html' });
+          res.end('<html><body><h2>Authorization failed.</h2><p>State mismatch. You can close this tab.</p></body></html>');
+          clearTimeout(timeout);
+          server.close();
+          reject(new Error('OAuth state mismatch — possible CSRF attempt.'));
+          return;
+        }
+        if (code) {
+          res.writeHead(200, { 'Content-Type': 'text/html' });
+          res.end('<html><body><h2>Authorization successful!</h2><p>You can close this tab and return to the terminal.</p></body></html>');
+          clearTimeout(timeout);
+          server.close();
+          resolve(code);
+        }
+      } catch (err) {
+        res.writeHead(500);
+        res.end('Internal error');
+      }
+    });
+    server.listen(redirectPort, '127.0.0.1', () => {
+      logInfo(`Waiting for authorization callback on port ${redirectPort}...`);
+    });
+    server.on('error', (err) => {
+      clearTimeout(timeout);
+      reject(new Error(`Could not start local redirect server: ${err.message}`));
+    });
+  });
+  logInfo('Exchanging authorization code for access token...');
+  const tokenRes = await fetch('https://claude.ai/api/oauth/token', {
+    method: 'POST',
+    headers: { 'Content-Type': 'application/json', 'Accept': 'application/json' },
+    body: JSON.stringify({
+      grant_type: 'authorization_code',
+      code: authCode,
+      redirect_uri: redirectUri,
+      client_id: clientId,
+      code_verifier: codeVerifier,
+    }),
+  });
+  if (!tokenRes.ok) {
+    const text = await tokenRes.text().catch(() => 'Unknown error');
+    throw new Error(`Token exchange failed: HTTP ${tokenRes.status} — ${text}`);
+  }
+  const tokenData = await tokenRes.json();
+  const accessToken = tokenData.access_token;
+  if (!accessToken) {
+    throw new Error('Token exchange succeeded but no access_token was returned.');
+  }
+  upsertEnvValue('CLAUDE_CODE_ACCESS_TOKEN', accessToken);
+  if (tokenData.refresh_token) {
+    upsertEnvValue('CLAUDE_CODE_REFRESH_TOKEN', tokenData.refresh_token);
+  }
+  logOk('Saved Claude Code access token to .env');
+  logInfo('Restarting NeoAgent to apply credentials...');
+  cmdRestart();
+}
 async function cmdLogin(args = []) {
   const provider = args[0];
-  if (provider !== 'github-copilot' && provider !== 'openai-codex') {
-    throw new Error(`Unsupported login provider: ${provider || 'none'}. Available: github-copilot, openai-codex`);
+  if (provider !== 'github-copilot' && provider !== 'openai-codex' && provider !== 'claude-code') {
+    throw new Error(`Unsupported login provider: ${provider || 'none'}. Available: github-copilot, openai-codex, claude-code`);
   }
   if (provider === 'github-copilot') {
@@ -893,6 +1036,8 @@ async function cmdLogin(args = []) {
     logOk('Saved OpenAI Codex tokens to .env');
     logInfo('Restarting NeoAgent to apply credentials...');
     cmdRestart();
+  } else if (provider === 'claude-code') {
+    await cmdLoginClaudeCode();
   }
 }
@@ -1471,6 +1616,7 @@ function printHelp() {
   row('update stable|beta',  'Update and switch channel');
   row('login github-copilot','Authenticate GitHub Copilot');
   row('login openai-codex',  'Authenticate OpenAI Codex');
+  row('login claude-code',   'Authenticate Claude Code');
   console.log('');
   console.log(`${c.bold}Maintenance${c.reset}`);

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "neoagent",
-  "version": "2.3.1-beta.101",
+  "version": "2.3.1-beta.103",
   "description": "Proactive personal AI agent with no limits",
   "license": "MIT",
   "main": "server/index.js",

package/server/public/.last_build_id CHANGED Viewed

	@@ -1 +1 @@
1	- ~~8b0dc1b848bc67887f399a80a15258e6~~
1	+ 11c4133ebb724b223b80ad380661a4c1

package/server/public/flutter_bootstrap.js CHANGED Viewed

@@ -37,6 +37,6 @@ _flutter.buildConfig = {"engineRevision":"42d3d75a56efe1a2e9902f52dc8006099c45d9
 _flutter.loader.load({
   serviceWorkerSettings: {
-    serviceWorkerVersion: "3696925671" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
+    serviceWorkerVersion: "1865794536" /* Flutter's service worker is deprecated and will be removed in a future Flutter release. */
   }
 });

package/server/public/main.dart.js CHANGED Viewed

@@ -129338,7 +129338,7 @@ r===$&&A.b()
 o.push(A.ii(p,A.iY(!1,new A.a3(B.tM,A.dT(new A.cI(B.he,new A.a5V(r,p),p),p,p),p),!1,B.I,!0),p,p,0,0,0,p))}r=!1
 if(!s.ay)if(!s.ch){r=s.e
 r===$&&A.b()
-r=B.b.t("mpa5woez-bed15cd").length!==0&&r.b}if(r){r=s.d
+r=B.b.t("mpacm3gu-abb7f02").length!==0&&r.b}if(r){r=s.d
 r===$&&A.b()
 r=r.ag&&!r.V?84:0
 q=s.e
@@ -134146,7 +134146,7 @@ $S:236}
 A.Ys.prototype={}
 A.Rr.prototype={
 mT(a){var s=this
-if(B.b.t("mpa5woez-bed15cd").length===0||s.a!=null)return
+if(B.b.t("mpacm3gu-abb7f02").length===0||s.a!=null)return
 s.A5()
 s.a=A.q1(B.PP,new A.b58(s))},
 A5(){var s=0,r=A.l(t.H),q,p=2,o=[],n=this,m,l,k,j,i,h,g,f
@@ -134164,7 +134164,7 @@ if(!t.f.b(k)){s=1
 break}i=J.Z(k,"buildId")
 h=i==null?null:B.b.t(J.r(i))
 j=h==null?"":h
-if(J.bm(j)===0||J.d(j,"mpa5woez-bed15cd")){s=1
+if(J.bm(j)===0||J.d(j,"mpacm3gu-abb7f02")){s=1
 break}n.b=!0
 n.D()
 p=2
@@ -134181,7 +134181,7 @@ case 2:return A.i(o.at(-1),r)}})
 return A.k($async$A5,r)},
 vb(){var s=0,r=A.l(t.H),q,p=2,o=[],n=this,m,l,k,j,i,h,g,f,e,d,c,b,a,a0,a1
 var $async$vb=A.h(function(a2,a3){if(a2===1){o.push(a3)
-s=p}for(;;)switch(s){case 0:if(B.b.t("mpa5woez-bed15cd").length===0||n.c){s=1
+s=p}for(;;)switch(s){case 0:if(B.b.t("mpacm3gu-abb7f02").length===0||n.c){s=1
 break}n.c=!0
 n.D()
 p=4

package/server/services/ai/models.js CHANGED Viewed

@@ -5,6 +5,7 @@ const { OllamaProvider } = require('./providers/ollama');
 const { OpenAIProvider } = require('./providers/openai');
 const { GithubCopilotProvider } = require('./providers/githubCopilot');
 const { OpenAICodexProvider } = require('./providers/openaiCodex');
+const { ClaudeCodeProvider } = require('./providers/claudeCode');
 const {
     AI_PROVIDER_DEFINITIONS,
     getProviderConfigs,
@@ -72,6 +73,24 @@ const STATIC_MODELS = [
         provider: 'anthropic',
         purpose: 'fast'
     },
+    {
+        id: 'claude-opus-4-7',
+        label: 'Claude Opus 4.7 (Claude Code / Default)',
+        provider: 'claude-code',
+        purpose: 'general'
+    },
+    {
+        id: 'claude-sonnet-4-6',
+        label: 'Claude Sonnet 4.6 (Claude Code / Fast)',
+        provider: 'claude-code',
+        purpose: 'coding'
+    },
+    {
+        id: 'claude-haiku-4-5-20251001',
+        label: 'Claude Haiku 4.5 (Claude Code / Subagents)',
+        provider: 'claude-code',
+        purpose: 'fast'
+    },
     {
         id: 'gemini-3.1-flash-lite-preview',
         label: 'Gemini 3.1 Flash Lite (Preview)',
@@ -338,6 +357,8 @@ function createProviderInstance(providerStr, userId = null, configOverrides = {}
         return new GithubCopilotProvider({ apiKey: runtime.apiKey, ...providerOverrides });
     } else if (providerStr === 'openai-codex') {
         return new OpenAICodexProvider({ apiKey: runtime.apiKey, ...providerOverrides });
+    } else if (providerStr === 'claude-code') {
+        return new ClaudeCodeProvider({ apiKey: runtime.apiKey, ...providerOverrides });
     }
     throw new Error(`Unknown provider: ${providerStr}`);
 }

package/server/services/ai/providers/claudeCode.js ADDED Viewed

@@ -0,0 +1,49 @@
+const os = require('os');
+const fs = require('fs');
+const path = require('path');
+const Anthropic = require('@anthropic-ai/sdk');
+const { AnthropicProvider } = require('./anthropic');
+const CLAUDE_CLI_CREDS_PATH = path.join(os.homedir(), '.claude', '.credentials.json');
+const CLAUDE_CODE_BASE_URL = 'https://api.claude.ai/api';
+function readClaudeCliToken() {
+  try {
+    const raw = fs.readFileSync(CLAUDE_CLI_CREDS_PATH, 'utf8');
+    const data = JSON.parse(raw);
+    const token = data?.claudeAiOauthTokens?.accessToken;
+    return typeof token === 'string' && token ? token : null;
+  } catch {
+    return null;
+  }
+}
+class ClaudeCodeProvider extends AnthropicProvider {
+  constructor(config = {}) {
+    super(config);
+    this.name = 'claude-code';
+    this.models = [
+      'claude-opus-4-7',
+      'claude-sonnet-4-6',
+      'claude-haiku-4-5-20251001',
+    ];
+    this.contextWindows = {
+      'claude-opus-4-7': 200000,
+      'claude-sonnet-4-6': 200000,
+      'claude-haiku-4-5-20251001': 200000,
+    };
+    const authToken = config.apiKey || process.env.CLAUDE_CODE_ACCESS_TOKEN || readClaudeCliToken();
+    if (!authToken) {
+      console.warn('[ClaudeCode] No access token. Run `neoagent login claude-code` to authenticate.');
+    }
+    // OAuth tokens use Authorization: Bearer — authToken option sends that header
+    this.client = new Anthropic({
+      authToken: authToken || undefined,
+      baseURL: config.baseUrl || CLAUDE_CODE_BASE_URL,
+    });
+  }
+}
+module.exports = { ClaudeCodeProvider, readClaudeCliToken };

package/server/services/ai/providers/openaiCodex.js CHANGED Viewed

@@ -1,6 +1,12 @@
+const crypto = require('crypto');
 const OpenAI = require('openai');
 const { BaseProvider } = require('./base');
+const DEFAULT_BASE_URL = 'https://chatgpt.com/backend-api/codex';
+// Stable per-process installation ID — Codex backend uses it for request tracking.
+const INSTALLATION_ID = crypto.randomUUID();
 function decodeJwtPayload(token) {
   try {
     const parts = String(token || '').split('.');
@@ -12,8 +18,6 @@ function decodeJwtPayload(token) {
   }
 }
-const DEFAULT_BASE_URL = 'https://chatgpt.com/backend-api/codex';
 function isCodexBackendBaseUrl(baseURL) {
   const trimmed = String(baseURL || '').trim();
   if (!trimmed) return false;
@@ -194,20 +198,27 @@ class OpenAICodexProvider extends BaseProvider {
       'gpt-5.4',
       'gpt-5.4-mini',
     ]);
     let accountId = process.env.OPENAI_CODEX_ACCOUNT_ID || '';
     if (!accountId && this.usesCodexBackend) {
       const accessToken = config.apiKey || process.env.OPENAI_CODEX_ACCESS_TOKEN || '';
       const payload = decodeJwtPayload(accessToken);
-      accountId = payload?.chatgpt_account_id || payload?.['https://api.openai.com/auth']?.chatgpt_account_id || '';
+      // account_id lives in access_token directly, or nested under the OIDC namespace in id_token
+      accountId = payload?.chatgpt_account_id
+        || payload?.['https://api.openai.com/auth']?.chatgpt_account_id
+        || '';
     }
     const defaultHeaders = this.usesCodexBackend
       ? {
-          'Editor-Version': process.env.OPENAI_CODEX_EDITOR_VERSION || 'vscode/1.99.0',
-          'Editor-Plugin-Version': process.env.OPENAI_CODEX_EDITOR_PLUGIN_VERSION || 'neoagent/1.0.0',
-          'User-Agent': process.env.OPENAI_CODEX_USER_AGENT || 'NeoAgent/1.0.0',
-          'OpenAI-Beta': 'responses=experimental',
-          ...(accountId ? { 'chatgpt-account-id': accountId } : {}),
+          // Required by Cloudflare bot detection on chatgpt.com
+          'originator': 'Codex Desktop',
+          'User-Agent': 'Codex Desktop/1.0.0 (darwin; arm64)',
+          // Required by the Codex responses endpoint
+          'OpenAI-Beta': 'responses_websockets=2026-02-06',
+          'x-codex-installation-id': INSTALLATION_ID,
+          'x-openai-internal-codex-residency': process.env.OPENAI_CODEX_RESIDENCY || 'us',
+          ...(accountId ? { 'ChatGPT-Account-Id': accountId } : {}),
         }
       : undefined;
@@ -286,43 +297,60 @@ class OpenAICodexProvider extends BaseProvider {
     };
     if (this.usesCodexBackend) {
+      // instructions must always be present (even empty) — backend returns 400 if omitted
       request.instructions = instructions.join('\n\n');
-    } else if (instructions.length > 0) {
-      request.instructions = instructions.join('\n\n');
-    }
-    if (tools && tools.length > 0) {
-      request.tools = this.formatTools(tools);
-      request.tool_choice = options.toolChoice || 'auto';
-    }
-    if (!this.usesCodexBackend) {
+      request.store = false;
+      // tools fields must always be explicit
+      if (tools && tools.length > 0) {
+        request.tools = this.formatTools(tools);
+        request.tool_choice = options.toolChoice || 'auto';
+      } else {
+        request.tools = [];
+        request.tool_choice = 'auto';
+      }
+      request.parallel_tool_calls = false;
+      // reasoning: both effort and summary required for Codex reasoning models
+      if (this._isReasoningModel(model)) {
+        const effort = options.reasoningEffort || options.reasoning_effort || 'medium';
+        request.reasoning = { effort, summary: 'auto' };
+        request.include = ['reasoning.encrypted_content'];
+      }
+    } else {
+      if (instructions.length > 0) {
+        request.instructions = instructions.join('\n\n');
+      }
+      if (tools && tools.length > 0) {
+        request.tools = this.formatTools(tools);
+        request.tool_choice = options.toolChoice || 'auto';
+      }
       request.max_output_tokens = options.maxTokens || 16384;
       if (options.temperature !== undefined && options.temperature !== null) {
         request.temperature = options.temperature;
       }
-    }
-    const reasoningEffort = options.reasoningEffort || options.reasoning_effort;
-    if (reasoningEffort || this._isReasoningModel(model)) {
-      request.reasoning = {
-        effort: reasoningEffort || 'medium',
-      };
+      const reasoningEffort = options.reasoningEffort || options.reasoning_effort;
+      if (reasoningEffort || this._isReasoningModel(model)) {
+        request.reasoning = { effort: reasoningEffort || 'medium' };
+      }
     }
     return request;
   }
+  _requestHeaders() {
+    return this.usesCodexBackend
+      ? { 'x-client-request-id': crypto.randomUUID() }
+      : undefined;
+  }
   async chat(messages, tools = [], options = {}) {
     const model = options.model || this.config.model || this.getDefaultModel();
     const request = this._buildRequest(messages, tools, options, model);
     let response;
     try {
-      response = await this.client.responses.create({
-        model,
-        ...request,
-      });
+      response = await this.client.responses.create(
+        { model, ...request },
+        { headers: this._requestHeaders() },
+      );
     } catch (err) {
       throw new Error(`OpenAI Codex request failed: ${formatOpenAIError(err)}`);
     }
@@ -347,11 +375,10 @@ class OpenAICodexProvider extends BaseProvider {
     const request = this._buildRequest(messages, tools, options, model);
     let stream;
     try {
-      stream = await this.client.responses.create({
-        model,
-        ...request,
-        stream: true,
-      });
+      stream = await this.client.responses.create(
+        { model, ...request, stream: true },
+        { headers: this._requestHeaders() },
+      );
     } catch (err) {
       throw new Error(`OpenAI Codex request failed: ${formatOpenAIError(err)}`);
     }

package/server/services/ai/settings.js CHANGED Viewed

@@ -79,6 +79,16 @@ const AI_PROVIDER_DEFINITIONS = Object.freeze({
     defaultEnabled: false,
     defaultBaseUrl: 'https://chatgpt.com/backend-api/codex'
   },
+  'claude-code': {
+    id: 'claude-code',
+    label: 'Claude Code',
+    description: 'Claude models via Claude Code subscription. Login with `neoagent login claude-code`.',
+    envKey: 'CLAUDE_CODE_ACCESS_TOKEN',
+    supportsApiKey: true,
+    supportsBaseUrl: false,
+    defaultEnabled: false,
+    defaultBaseUrl: ''
+  },
   ollama: {
     id: 'ollama',
     label: 'Ollama',