panoma 0.1.7 → 0.1.9

package/app/node_modules/@panoma/ai/dist/index.d.ts

@@ -1,3 +1,102 @@
+/**
+ * What went wrong, said once and readable by both audiences.
+ *
+ * This package threw sentences in fixed Spanish, and both of its readers were wrong ones. The
+ * terminal prints `error.message` raw and is a machine surface, where the house rule is English.
+ * The browser is bilingual and got Spanish whichever language it was showing. `model-errors.ts`
+ * had already patched the two worst cases, and its own comment admits how: one by a typed error,
+ * the other by matching a Spanish substring — a sentence used as a key, which stops working the
+ * day somebody rewords it and says nothing.
+ *
+ * So the failure travels as data. `message` is English, because that is what a machine reads and
+ * what the CLI prints; `failure` carries the code and its parts, so the web can say the same thing
+ * in the language in front of it without parsing prose.
+ *
+ * What is NOT here: anything a provider said. A 429, a refusal, the text of somebody else's API —
+ * those are quotes, and translating a quote is inventing one. They travel inside `detail`, whole.
+ */
+type AiFailure = {
+    code: "noCommand";
+    provider: string;
+} | {
+    code: "launchFailed";
+    command: string;
+    reason: string;
+} | {
+    code: "exited";
+    provider: string;
+    status: number;
+    output: string;
+} | {
+    code: "emptyBody";
+    provider: string;
+} | {
+    code: "providerRefused";
+    provider: string;
+    status: number;
+    detail: string;
+} | {
+    code: "tokenRefused";
+    provider: string;
+    status: number;
+    detail: string;
+} | {
+    code: "neverAnswered";
+    provider: string;
+    last: string;
+    attempts: number;
+} | {
+    code: "configShape";
+} | {
+    code: "configLocked";
+    lock: string;
+    holder: string | undefined;
+} | {
+    code: "noProvider";
+} | {
+    code: "unknownProvider";
+    id: string;
+} | {
+    code: "oauthTimeout";
+} | {
+    code: "noOauth";
+    provider: string;
+} | {
+    code: "badUrl";
+    provider: string;
+    value: string;
+    where: string;
+} | {
+    code: "notHttp";
+    provider: string;
+} | {
+    code: "urlHasCredentials";
+    provider: string;
+} | {
+    code: "insecureHost";
+    provider: string;
+    host: string;
+};
+/**
+ * The English sentence for a failure, written in one place.
+ *
+ * One place because two would drift: the whole point of carrying the code is that the message and
+ * the translation cannot disagree about what happened.
+ */
+declare function failureMessage(failure: AiFailure): string;
+/**
+ * An error this package raised about itself.
+ *
+ * `instanceof` rather than a string check, so that whoever translates it is reading a type and not
+ * guessing at prose. The two typed errors that already existed —`NoCredentialError` and
+ * `ConfigCorruptError`— keep their own classes: they carry more than a code and were already
+ * being read that way.
+ */
+declare class AiError extends Error {
+    readonly failure: AiFailure;
+    constructor(failure: AiFailure);
+}
+
 /**
  * AI suppliers catalog.
  *
@@ -487,4 +586,4 @@ interface CompleteResult {
 }
 declare function complete(request: CompleteRequest): Promise<CompleteResult>;
 
-export { ATTEMPTS, type AgentAvailability, type AiConfig, type ApiFamily, type AuthType, type CallOptions, type Challenge, type CompleteImage, type CompleteRequest, type CompleteResult, ConfigCorruptError, NoCredentialError, type OauthConfig, type OauthToken, PROVIDERS, type Provider, REDACTED, type ResolvedCredential, VisionUnsupportedError, accountFrom, authorizeUrl, awaitCallback, callProvider, checkBaseUrl, complete, completeWithCliAgent, configPath, createChallenge, detectCliAgents, exchangeCode, expired, findProvider, forgetCredential, listModels, maskKey, pointsElsewhere, providersByAuth, readConfig, redact, redirectUri, refresh, resolveCredential, saveKey, saveToken, transportFailure, updateConfig, writeConfig };
+export { ATTEMPTS, type AgentAvailability, type AiConfig, AiError, type AiFailure, type ApiFamily, type AuthType, type CallOptions, type Challenge, type CompleteImage, type CompleteRequest, type CompleteResult, ConfigCorruptError, NoCredentialError, type OauthConfig, type OauthToken, PROVIDERS, type Provider, REDACTED, type ResolvedCredential, VisionUnsupportedError, accountFrom, authorizeUrl, awaitCallback, callProvider, checkBaseUrl, complete, completeWithCliAgent, configPath, createChallenge, detectCliAgents, exchangeCode, expired, failureMessage, findProvider, forgetCredential, listModels, maskKey, pointsElsewhere, providersByAuth, readConfig, redact, redirectUri, refresh, resolveCredential, saveKey, saveToken, transportFailure, updateConfig, writeConfig };

package/app/node_modules/@panoma/ai/dist/index.js

@@ -1,3 +1,53 @@
+// src/failures.ts
+function failureMessage(failure) {
+  switch (failure.code) {
+    case "noCommand":
+      return `${failure.provider} declares no command to run.`;
+    case "launchFailed":
+      return `Could not launch ${failure.command}: ${failure.reason}`;
+    case "exited":
+      return `${failure.provider} exited with code ${failure.status}. ${failure.output}`.trim();
+    case "emptyBody":
+      return `${failure.provider} answered with no body.`;
+    case "providerRefused":
+      return `${failure.provider} answered ${failure.status}: ${failure.detail}`;
+    case "tokenRefused":
+      return `${failure.provider} refused the token request (${failure.status}): ${failure.detail}`;
+    case "neverAnswered":
+      return `${failure.provider} never answered: ${failure.last}. Attempts: ${failure.attempts}. The model did not say no \u2014 the request never left this machine.`;
+    case "configShape":
+      return "the contents are not shaped like a panoma configuration";
+    case "configLocked":
+      return `Another panoma process is writing the configuration${failure.holder ? ` (${failure.holder})` : ""}.
+If none is running, the lock was left behind by an earlier run:
+  rm ${failure.lock}`;
+    case "noProvider":
+      return "No AI provider is configured. Run 'panoma ai' to see the options.";
+    case "unknownProvider":
+      return `Unknown provider: ${failure.id}`;
+    case "oauthTimeout":
+      return "Timed out waiting for you to come back from the browser.";
+    case "noOauth":
+      return `${failure.provider} does not use sign-in.`;
+    case "badUrl":
+      return `${failure.provider}'s address is not a valid URL: \xAB${failure.value}\xBB. Check ${failure.where}.`;
+    case "notHttp":
+      return `${failure.provider}'s address has to be http or https.`;
+    case "urlHasCredentials":
+      return `${failure.provider}'s address carries a user or a password inside. Take them out and use the key.`;
+    case "insecureHost":
+      return `panoma will not send ${failure.provider}'s credential unencrypted to ${failure.host}. Use https, or a server on your own machine.`;
+  }
+}
+var AiError = class extends Error {
+  failure;
+  constructor(failure) {
+    super(failureMessage(failure));
+    this.name = "AiError";
+    this.failure = failure;
+  }
+};
+
 // src/providers.ts
 import { homedir } from "os";
 import { join } from "path";
@@ -246,8 +296,8 @@ var PROVIDERS = [
     id: "openai-codex",
     name: "ChatGPT (Codex)",
     auth: "oauth",
-    description: "Tu suscripci\xF3n de ChatGPT Plus o Pro, sin clave. Uso personal: se apoya en el inicio de sesi\xF3n del CLI de Codex y en un endpoint privado de OpenAI, as\xED que puede dejar de funcionar el d\xEDa que ellos lo cambien.",
-    descriptionEn: "Your ChatGPT Plus or Pro subscription, no key. Personal use: it leans on the Codex CLI sign-in and a private OpenAI endpoint, so it can stop working the day they change it.",
+    description: "Tu suscripci\xF3n de ChatGPT Plus o Pro, sin clave y sin binario local. Uso personal: se apoya en el inicio de sesi\xF3n del CLI de Codex y en un endpoint privado de OpenAI, as\xED que puede dejar de funcionar el d\xEDa que ellos lo cambien.",
+    descriptionEn: "Your ChatGPT Plus or Pro subscription, no key and no local binary. Personal use: it leans on the Codex CLI sign-in and a private OpenAI endpoint, so it can stop working the day they change it.",
     api: "codex",
     // The backup of ChatGPT, not `api.openai.com`: the subscription token is the only thing from
     // OpenAI that is charged from the plan, and it is only valid against this gate.
@@ -298,11 +348,23 @@ var PROVIDERS = [
     ]
   },
   {
+    /*
+          «Codex CLI» and not «Codex», which is what it said.
+    
+          Two entries away sits `openai-codex`, called «ChatGPT (Codex)», and a list showing both
+          offered the reader the same word twice with no way to tell them apart. They are not variants:
+          this one runs the `codex` binary on this machine as a subprocess, and that one talks to
+          OpenAI over your ChatGPT sign-in without any local binary at all. Whoever picked wrong was
+          not being careless — the screen gave them nothing to pick with.
+    
+          The descriptions say the mechanism now, for the same reason: «uses your signed-in session,
+          no keys» was true of both.
+         */
     id: "codex-cli",
-    name: "Codex",
+    name: "Codex CLI",
     auth: "cli",
-    description: "Usa tu sesi\xF3n de Codex ya iniciada. Sin claves.",
-    descriptionEn: "Uses your signed-in Codex session. No keys.",
+    description: "Ejecuta el binario `codex` de esta m\xE1quina. Usa su sesi\xF3n ya iniciada, sin claves.",
+    descriptionEn: "Runs the `codex` binary on this machine, using its signed-in session. No keys.",
     command: "codex",
     args: ["exec"],
     bundles: ["/Applications/ChatGPT.app/Contents/Resources/codex"]
@@ -431,7 +493,7 @@ function awaitCallback(provider, challenge) {
     const close = () => server?.close();
     const deadline = setTimeout(() => {
       close();
-      reject(new Error("Se agot\xF3 el plazo esperando a que volvieras del navegador."));
+      reject(new AiError({ code: "oauthTimeout" }));
     }, DEADLINE_MS);
     const finish = (error, code) => {
       clearTimeout(deadline);
@@ -510,9 +572,13 @@ async function requestToken(provider, fields) {
   });
   const body = await response.json().catch(() => ({}));
   if (!response.ok || !body.access_token) {
-    throw new Error(
-      `${provider.name} rechaz\xF3 la petici\xF3n de token (${response.status}): ${body.error_description ?? body.error ?? response.statusText}`
-    );
+    throw new AiError({
+      code: "tokenRefused",
+      provider: provider.name,
+      status: response.status,
+      /* The provider's own words, whole: translating somebody else's refusal invents one. */
+      detail: body.error_description ?? body.error ?? response.statusText
+    });
   }
   return {
     access: body.access_token,
@@ -539,7 +605,7 @@ function expired(token) {
   return token.expiresAt !== void 0 && Date.now() > token.expiresAt - MARGIN_MS;
 }
 function requireOauth(provider) {
-  if (!provider.oauth) throw new Error(`${provider.name} no usa inicio de sesi\xF3n.`);
+  if (!provider.oauth) throw new AiError({ code: "noOauth", provider: provider.name });
   return provider.oauth;
 }
 
@@ -549,22 +615,25 @@ function checkBaseUrl(provider, value) {
   try {
     url = new URL(value);
   } catch {
-    throw new Error(
-      `La direcci\xF3n de ${provider.name} no es una URL v\xE1lida: \xAB${value}\xBB. Revisa ${provider.baseUrlEnvVar ?? "la configuraci\xF3n"}.`
-    );
+    throw new AiError({
+      code: "badUrl",
+      provider: provider.name,
+      value,
+      where: provider.baseUrlEnvVar ?? "the configuration"
+    });
   }
   if (url.protocol !== "http:" && url.protocol !== "https:") {
-    throw new Error(`La direcci\xF3n de ${provider.name} tiene que ser http o https.`);
+    throw new AiError({ code: "notHttp", provider: provider.name });
   }
   if (url.username || url.password) {
-    throw new Error(
-      `La direcci\xF3n de ${provider.name} lleva usuario o contrase\xF1a dentro. Qu\xEDtalos y usa la clave.`
-    );
+    throw new AiError({ code: "urlHasCredentials", provider: provider.name });
   }
   if (url.protocol === "http:" && !isLocal(url.hostname)) {
-    throw new Error(
-      `Panoma no manda la credencial de ${provider.name} sin cifrar a ${url.hostname}. Usa https, o un servidor en tu propia m\xE1quina.`
-    );
+    throw new AiError({
+      code: "insecureHost",
+      provider: provider.name,
+      host: url.hostname
+    });
   }
   return value;
 }
@@ -612,17 +681,21 @@ function backupPath() {
 }
 var ConfigCorruptError = class extends Error {
   constructor(path, problem, recovery) {
-    const lines = [`No se pudo leer la configuraci\xF3n de IA en ${path}: ${problem.message}`];
+    const lines = [`Could not read the AI configuration at ${path}: ${problem.message}`];
     if (recovery) {
       lines.push(
-        `Hay una copia anterior en ${recovery.path} con ${recovery.keys} clave${recovery.keys === 1 ? "" : "s"} dentro. Recup\xE9rala con:`,
+        /*
+          Both forms written whole rather than an `s` glued to the figure. The house rule: never
+          attach an inflected word to a digit, and this line only ever reads wrong at one.
+         */
+        recovery.keys === 1 ? `There is an earlier copy at ${recovery.path} holding one key. Recover it with:` : `There is an earlier copy at ${recovery.path} holding ${recovery.keys} keys. Recover it with:`,
         `  mv ${recovery.path} ${path}`,
-        "No ejecutes 'panoma ai key' antes: sobrescribir\xEDa el fichero y con \xE9l lo que quede."
+        "Do not run 'panoma ai key' first: it would overwrite the file and whatever is left in it."
       );
     } else {
       lines.push(
-        "No hay copia anterior. \xC1brelo y arr\xE9glalo a mano, o b\xF3rralo si prefieres empezar",
-        "de cero \u2014 perder\xE1s las claves que hubiera guardadas dentro."
+        "There is no earlier copy. Open it and fix it by hand, or delete it to start over \u2014",
+        "you will lose whatever keys were saved inside."
       );
     }
     super(lines.join("\n"), { cause: problem });
@@ -664,7 +737,7 @@ async function readFileConfig(path) {
   }
   const parsed = JSON.parse(raw);
   if (!isConfig(parsed)) {
-    throw new Error("el contenido no tiene la forma de una configuraci\xF3n de Panoma");
+    throw new AiError({ code: "configShape" });
   }
   return parsed;
 }
@@ -752,12 +825,11 @@ async function withLock(action) {
       if (error.code !== "EEXIST") throw error;
       if (Date.now() > deadline) {
         const owner = await readFile(lock, "utf8").catch(() => "");
-        throw new Error(
-          `Otro proceso de Panoma est\xE1 escribiendo la configuraci\xF3n${owner.trim() ? ` (pid ${owner.trim()})` : ""}.
-Si no hay ninguno corriendo, el cerrojo se qued\xF3 de una ejecuci\xF3n anterior:
-  rm ${lock}`,
-          { cause: error }
-        );
+        throw new AiError({
+          code: "configLocked",
+          lock,
+          holder: owner.trim() ? `pid ${owner.trim()}` : void 0
+        });
       }
       await new Promise((resolve) => setTimeout(resolve, 50));
     }
@@ -771,8 +843,8 @@ Si no hay ninguno corriendo, el cerrojo se qued\xF3 de una ejecuci\xF3n anterior
 }
 var NoCredentialError = class extends Error {
   constructor(provider) {
-    const how = provider.auth === "cli" ? `Instala ${provider.name} e inicia sesi\xF3n; Panoma llamar\xE1 a '${provider.command}'.` : provider.auth === "oauth" ? `Inicia sesi\xF3n en ${provider.name} desde la p\xE1gina del modelo en Panoma.` : `Ejecuta 'panoma ai key ${provider.id}' o exporta ${provider.apiKeyEnvVars?.[0]}. La clave se saca en ${provider.signupUrl}.`;
-    super(`Sin credencial para ${provider.name}. ${how}`);
+    const how = provider.auth === "cli" ? `Install ${provider.name} and sign in; panoma will call '${provider.command}'.` : provider.auth === "oauth" ? `Sign in to ${provider.name} from the model page in panoma.` : `Run 'panoma ai key ${provider.id}' or export ${provider.apiKeyEnvVars?.[0]}. The key comes from ${provider.signupUrl}.`;
+    super(`No credential for ${provider.name}. ${how}`);
     this.provider = provider;
     this.name = "NoCredentialError";
   }
@@ -782,12 +854,10 @@ async function resolveCredential(providerId, config) {
   const settings = config ?? await readConfig();
   const id = providerId ?? settings.provider;
   if (!id) {
-    throw new Error(
-      "No hay proveedor de IA configurado. Ejecuta 'panoma ai' para ver las opciones."
-    );
+    throw new AiError({ code: "noProvider" });
   }
   const provider = findProvider(id);
-  if (!provider) throw new Error(`Proveedor desconocido: ${id}`);
+  if (!provider) throw new AiError({ code: "unknownProvider", id });
   if (provider.auth === "cli") {
     return { provider, model: settings.model ?? "", source: "agent-session" };
   }
@@ -914,7 +984,7 @@ async function detectCliAgents(providers) {
 var MAX_OUTPUT = 2e5;
 async function completeWithCliAgent(provider, prompt, options = {}) {
   const command = options.command ?? provider.command;
-  if (!command) throw new Error(`${provider.name} no declara ning\xFAn comando.`);
+  if (!command) throw new AiError({ code: "noCommand", provider: provider.name });
   return new Promise((resolve, reject) => {
     const launch = resolveExecutable(command, provider.args ?? []);
     const child = spawn(launch.file, launch.args, {
@@ -934,7 +1004,7 @@ async function completeWithCliAgent(provider, prompt, options = {}) {
     const timer = setTimeout(() => child.kill("SIGKILL"), options.timeoutMs ?? 18e4);
     child.on("error", (error) => {
       clearTimeout(timer);
-      reject(new Error(`No se pudo lanzar ${command}: ${error.message}`));
+      reject(new AiError({ code: "launchFailed", command, reason: error.message }));
     });
     child.on("close", (code) => {
       clearTimeout(timer);
@@ -942,7 +1012,12 @@ async function completeWithCliAgent(provider, prompt, options = {}) {
       reject(
         new Error(
           redact(
-            `${provider.name} termin\xF3 con c\xF3digo ${code}. ${stderr.trim().slice(0, 600)}`.trim()
+            failureMessage({
+              code: "exited",
+              provider: provider.name,
+              status: code ?? -1,
+              output: stderr.trim().slice(0, 600)
+            })
           )
         )
       );
@@ -1025,9 +1100,7 @@ async function callProvider(name, url, init, options = {}) {
       if (attempt < attempts) await wait(WAITS[Math.min(attempt - 1, WAITS.length - 1)] ?? 0);
     }
   }
-  throw new Error(
-    `${name} no lleg\xF3 a contestar: ${last}. Intentos: ${attempts}. No es que el modelo dijera que no: la petici\xF3n no sali\xF3 de esta m\xE1quina.`
-  );
+  throw new AiError({ code: "neverAnswered", provider: name, last: String(last), attempts });
 }
 function sleep(ms) {
   return new Promise((resolve) => setTimeout(resolve, ms));
@@ -1037,7 +1110,7 @@ function sleep(ms) {
 var VisionUnsupportedError = class extends Error {
   constructor(provider) {
     super(
-      `${provider} no sabe recibir im\xE1genes. Configura un proveedor con clave \u2014'panoma ai key'\u2014 o p\xE1sale uno con --provider.`
+      `${provider} cannot take images. Configure a provider with a key \u2014'panoma ai key'\u2014 or pass one with --provider.`
     );
     this.provider = provider;
     this.name = "VisionUnsupportedError";
@@ -1054,7 +1127,7 @@ async function complete(request) {
 
 ${request.prompt}` : request.prompt;
     const text = await completeWithCliAgent(credential.provider, prompt);
-    return { text, provider: credential.provider.id, model: credential.model || "sesi\xF3n" };
+    return { text, provider: credential.provider.id, model: credential.model || "session" };
   }
   if (credential.provider.api === "anthropic") return completeAnthropic(credential, request);
   if (credential.provider.api === "codex") return completeCodex(credential, request);
@@ -1135,14 +1208,17 @@ async function completeCodex(credential, request) {
   });
   if (!response.ok) {
     const failure = await response.json().catch(() => ({}));
-    throw new Error(
-      redact(
-        `${credential.provider.name} respondi\xF3 ${response.status}: ${failure.error?.message ?? failure.detail ?? response.statusText}`,
+    throw new AiError({
+      code: "providerRefused",
+      provider: credential.provider.name,
+      status: response.status,
+      detail: redact(
+        String(failure.error?.message ?? failure.detail ?? response.statusText),
         [credential.apiKey]
       )
-    );
+    });
   }
-  if (!response.body) throw new Error(`${credential.provider.name} contest\xF3 sin cuerpo.`);
+  if (!response.body) throw new AiError({ code: "emptyBody", provider: credential.provider.name });
   const { text, final } = await readCodexStream(response.body);
   const outputText = (final?.output ?? []).flatMap((block) => block.content ?? []).flatMap((chunk) => chunk.text ? [chunk.text] : []).join("\n");
   const shortcut = Array.isArray(final?.output_text) ? final.output_text.join("\n") : final?.output_text;
@@ -1231,12 +1307,12 @@ async function completeOpenAi(credential, request) {
   );
   const body = await response.json().catch(() => ({}));
   if (!response.ok) {
-    throw new Error(
-      redact(
-        `${credential.provider.name} respondi\xF3 ${response.status}: ${body.error?.message ?? response.statusText}`,
-        [credential.apiKey]
-      )
-    );
+    throw new AiError({
+      code: "providerRefused",
+      provider: credential.provider.name,
+      status: response.status,
+      detail: redact(String(body.error?.message ?? response.statusText), [credential.apiKey])
+    });
   }
   return {
     text: (body.choices?.[0]?.message?.content ?? "").trim(),
@@ -1250,6 +1326,7 @@ function dataUrl(image) {
 }
 export {
   ATTEMPTS,
+  AiError,
   ConfigCorruptError,
   NoCredentialError,
   PROVIDERS,
@@ -1267,6 +1344,7 @@ export {
   detectCliAgents,
   exchangeCode,
   expired,
+  failureMessage,
   findProvider,
   forgetCredential,
   listModels,

package/dist/{ai-command-ICITNELE.js → ai-command-W6FV3QW5.js}

@@ -10,7 +10,7 @@ import {
   readConfig,
   resolveCredential,
   updateConfig
-} from "./chunk-N7EEJ4U6.js";
+} from "./chunk-ROPR3LUO.js";
 import {
   say
 } from "./chunk-FN63LYZH.js";
@@ -154,7 +154,7 @@ ${say("ai.keyEmpty")}
 `));
     return 1;
   }
-  const { saveKey } = await import("./dist-C7GE6UXH.js");
+  const { saveKey } = await import("./dist-XTIHMRQM.js");
   await saveKey(provider.id, key);
   process.stdout.write(
     `