pi-meta-oauth 0.4.4 → 0.6.0

package/README.md

@@ -4,24 +4,24 @@
 
 <!-- markdownlint-disable-next-line MD013 -->
 ![X (formerly Twitter) Follow](https://img.shields.io/twitter/follow/blockedpaths?style=flat&link=https%3A%2F%2Fx.com%2FBlockedPaths)
-[![npm version](https://img.shields.io/npm/v/pi-meta-oauth)](https://www.npmjs.com/package/pi-meta-oauth) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![GitHub stars](https://img.shields.io/github/stars/BlockedPath/pi-meta-oauth?style=social)](https://github.com/BlockedPath/pi-meta-oauth/stargazers) [![Last Commit](https://img.shields.io/github/last-commit/BlockedPath/pi-meta-oauth)](https://github.com/BlockedPath/pi-meta-oauth/commits/main) [![Issues](https://img.shields.io/github/issues/BlockedPath/pi-meta-oauth)](https://github.com/BlockedPath/pi-meta-oauth/issues) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](https://github.com/BlockedPath/pi-meta-oauth/pulls) [![Conventional Commits](https://img.shields.io/badge/Conventional%20Commits-1.0.0-yellow.svg)](https://www.conventionalcommits.org/en/v1.0.0/) [![TypeScript](https://img.shields.io/badge/TypeScript-Ready-blue)](https://www.typescriptlang.org/) [![CI](https://github.com/BlockedPath/pi-meta-oauth/actions/workflows/ci.yml/badge.svg)](https://github.com/BlockedPath/pi-meta-oauth/actions/workflows/ci.yml) [![Pi compatible](https://img.shields.io/badge/pi-Compatible-blueviolet)](https://pi.dev)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![GitHub stars](https://img.shields.io/github/stars/BlockedPath/pi-meta-oauth?style=social)](https://github.com/BlockedPath/pi-meta-oauth/stargazers) [![Last Commit](https://img.shields.io/github/last-commit/BlockedPath/pi-meta-oauth)](https://github.com/BlockedPath/pi-meta-oauth/commits/main) [![Issues](https://img.shields.io/github/issues/BlockedPath/pi-meta-oauth)](https://github.com/BlockedPath/pi-meta-oauth/issues) [![PRs Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg)](https://github.com/BlockedPath/pi-meta-oauth/pulls) [![Conventional Commits](https://img.shields.io/badge/Conventional%20Commits-1.0.0-yellow.svg)](https://www.conventionalcommits.org/en/v1.0.0/) [![TypeScript](https://img.shields.io/badge/TypeScript-Ready-blue)](https://www.typescriptlang.org/) [![CI](https://github.com/BlockedPath/pi-meta-oauth/actions/workflows/ci.yml/badge.svg)](https://github.com/BlockedPath/pi-meta-oauth/actions/workflows/ci.yml) [![Pi compatible](https://img.shields.io/badge/pi-Compatible-blueviolet)](https://pi.dev)
 
-Meta Model API OAuth and Muse-style voice input for [pi](https://pi.dev).
+Meta Model API OAuth for [pi](https://pi.dev).
 
-- Use Muse Spark models through Pi's `openai-responses` provider
+- Use Muse Spark models through Pi's `openai-responses` provider (not `/chat/completions` — Muse prompt cache is ~0% there)
+- Send `prompt_cache_retention: "24h"` on Meta Responses requests unless the payload already set a retention
 - Device authorization against `https://auth.meta.com`
 - Model API-key minting through `POST https://api.meta.ai/muse-code/key`
 - Dynamic Muse model catalog from `GET https://api.meta.ai/v1/models`
-- Toggle-based Meta voice dictation on macOS and Windows with a live green input meter
 
 ## Install
 
 ```bash
-# Local checkout
-pi install /absolute/path/to/pi-meta-oauth
+# OAuth-only branch
+pi install git:github.com/BlockedPath/pi-meta-oauth@meta-oauth-only
 
-# npm
-pi install npm:pi-meta-oauth
+# Or from a local checkout
+pi install /absolute/path/to/pi-meta-oauth
 
 pi --list-models meta
 ```
@@ -40,58 +40,19 @@ Pi displays a device code, opens the Meta authorization flow, and mints a Model
 
 The access key is re-minted daily.
 
-## Voice input
-
-Voice mode runs on **macOS and Windows** (Linux is not yet supported). It uses the same Meta credential managed by this provider; a separate Muse login is not required.
-
-1. Press **Alt+V** once to start recording.
-2. Speak while the green microphone meter is visible in Pi's status bar.
-3. Press **Alt+V** again to stop.
-4. The transcript is inserted into Pi's editor for review before submission.
-
-Commands:
-
-- `/voice` — show voice status and privacy behavior
-- `/voice-on` — enable the Alt+V shortcut
-- `/voice-off` — disable voice input
-
-Audio is captured only between the two Alt+V presses and streamed as 16 kHz mono PCM to Muse Code's internal Meta ASR endpoint. No local speech-recognition model is downloaded. The endpoint is undocumented and may change in a future Muse release.
-
-**macOS:** uses `AVFoundation` via a Swift helper compiled with `xcrun swiftc` (first recording triggers the system microphone permission prompt).
-
-**Windows:** uses `winmm.dll` `waveIn*` via a C# helper. On first run pi tries to compile `extensions/voice/windows-audio.cs` with `csc.exe` (in-box .NET Framework) to `~/.pi/agent/bin/pi-meta-oauth-voice-v1.exe` for best performance. If no compiler is found it falls back to `extensions/voice/windows-audio.ps1` executed with `powershell.exe -ExecutionPolicy Bypass` (PowerShell 5.1 inbox, or `pwsh` 7 if present) which compiles the same capture code at runtime via `Add-Type`. No extra install is required. If recording fails, check **Settings → Privacy & security → Microphone** that access is allowed for desktop apps.
-
-Optional overrides (the `PI_META_*` name takes precedence):
-
-- `PI_META_VOICE_ASR_ENDPOINT` (legacy alias: `MUSE_VOICE_ASR_ENDPOINT`)
-- `PI_META_VOICE_ASR_MODEL` (legacy alias: `MUSE_VOICE_ASR_MODEL`)
-
-## Media tools
-
-Text-only Pi models can delegate media inspection to Muse Spark without switching models:
-
-- `meta_analyze_file` inspects one or more images, PDFs, audio files, or videos. Use ordered `sources` with optional labels for comparisons such as before and after screenshots.
-- `meta_describe_video` analyzes MP4 visuals and embedded audio.
-- `meta_transcribe_audio` transcribes MP3 or WAV speech.
-- `meta_upload_file` uploads a large or reusable file and returns a Meta `file_id`.
-
-Give each analysis tool a task-specific prompt that asks for the evidence the calling model needs next. Analysis tools default to an 8,000-token Muse generation budget and accept `max_output_tokens` from 4,000 to 32,000. Inline tool output defaults to 20,000 characters and accepts `max_chars` up to 50,000. If a result is truncated, the complete text is saved to a temporary file so the agent can continue with Pi's `read` tool using `offset` and `limit`.
-
-Automatic uploads made during analysis expire after 24 hours. Explicit `meta_upload_file` uploads expire after seven days by default; set `expires_after_seconds` to choose another supported duration or `retain: true` to keep a file without expiry.
-
-Media tool failures are reported as failed Pi tool calls, allowing the calling model to retry or report the blocker. Media analysis is model-generated observation, so verify consequential details when another source is available.
-
 ## Models
 
 Fallback models use a 1,048,576-token context window, up to 256K output tokens, image input, and reasoning levels `minimal`, `low`, `medium`, `high`, and `xhigh`.
 
 | id | pricing (input/output/cached) $/M |
 | --- | --- |
+| `muse-spark-1.3` | 1.25 / 4.25 / 0.15 |
+| `muse-spark-1.3-contributor` | 0.10 / 0.20 / 0.002 |
 | `muse-spark-1.2` | 1.25 / 4.25 / 0.15 |
 | `muse-spark-1.2-contributor` | 0.10 / 0.20 / 0.002 |
 | `muse-spark-1.1` | 1.25 / 4.25 / 0.15 |
 
-> **Contributor-model privacy:** the discounted contributor model allows Meta to use prompts and completions for product improvement, including training future Meta models. Use the standard `muse-spark-1.2` model if you do not want the contributor terms. See [Meta's model documentation](https://dev.meta.ai/docs/models).
+> **Contributor-model privacy:** discounted contributor models allow Meta to use prompts and completions for product improvement, including training future Meta models. Use a standard model such as `muse-spark-1.3` if you do not want the contributor terms. See [Meta's model documentation](https://dev.meta.ai/docs/models).
 
 To scope Pi's model picker to Meta models:
 
@@ -122,29 +83,15 @@ catalog.
 
 ```bash
 pi --list-models meta
-pi -p --provider meta --model muse-spark-1.2 "Reply exactly: META_OK"
+pi -p --provider meta --model muse-spark-1.3 "Reply exactly: META_OK"
 bun run typecheck
 bun test
 ```
 
-## Publish to npm and pi.dev
-
-The `pi-package` keyword makes the package discoverable at <https://pi.dev/packages>. Publishing is handled by `.github/workflows/publish.yml` when a `v*` tag is pushed. Each release publishes the canonical `pi-meta-oauth` package to npm and a scoped `@blockedpath/pi-meta-oauth` mirror to GitHub Packages.
-
-Before the first automated release, configure npm trusted publishing for `pi-meta-oauth` with:
-
-- GitHub owner: `BlockedPath`
-- Repository: `pi-meta-oauth`
-- Workflow filename: `publish.yml`
-- Environment: leave blank
-- Allowed action: `npm publish`
-
-GitHub Packages uses the workflow's short-lived `GITHUB_TOKEN`. Its npm registry defaults new packages to private visibility; after the first publish, open the package settings on GitHub and change its visibility to **Public** if desired.
-
-Bump `package.json`, commit the change, create a `v<version>` tag, and push the commit and tag. The workflow verifies that the tag matches the package version, runs typechecking and tests, publishes to both registries, and creates the GitHub Release. Re-running a partially completed workflow is safe when either registry reports that the same commit was already published.
-
-Users can then update with:
+`bun test` is hermetic unless a Meta credential is already available. The live cache-hit probe makes real billable API calls when a credential resolves: two identical `/v1/responses` calls (asserting `cached_tokens` on the second), plus one 2s retry if that second call misses cache. The credential is resolved, in order, from `PI_META_LIVE_API_KEY`, `META_API_KEY`, `MODEL_API_KEY`, or the minted key from `~/.pi/agent/auth.json` after `/login meta` (skipped if expired). OAuth is enough — you do not need a separate key. Skipped when no valid credential exists (CI):
 
 ```bash
-pi update npm:pi-meta-oauth
+bun test tests/meta-cache.test.ts
+# or, if you are not logged in:
+PI_META_LIVE_API_KEY='LLM|...' bun test tests/meta-cache.test.ts
 ```

package/extensions/meta.ts

@@ -16,7 +16,6 @@ export const META_API_BASE_URL = "https://api.meta.ai/v1";
 export const META_MODEL_CATALOG_URL = "https://api.meta.ai/v1/models";
 export const META_AUTH_BASE_URL = "https://auth.meta.com";
 export const META_CLIENT_ID = "1031625952748946";
-export const META_FILES_URL = `${META_API_BASE_URL}/files`;
 const META_ENV_VAR = "META_API_KEY";
 
 const DEVICE_AUTHORIZATION_URL = `${META_AUTH_BASE_URL}/oidc/device/authorization/`;
@@ -77,11 +76,45 @@ interface MetaCatalogModel {
 	};
 }
 
-// Media capabilities kept as "text"+"image" for pi-ai type compat (pi-ai 0.83/0.84 only allows those),
-// with "video"/"audio" advertised via cast so future pi-ai that expands the union picks them up.
-// See media.ts for the before_provider_request rewrite that makes @video/@audio work today
-// despite UserMessage.content being string | (TextContent | ImageContent)[] .
 const FALLBACK_MODELS: MetaProviderModel[] = [
+	{
+		id: "muse-spark-1.3",
+		name: "Muse Spark 1.3",
+		reasoning: true,
+		thinkingLevelMap: {
+			off: null,
+			minimal: "minimal",
+			low: "low",
+			medium: "medium",
+			high: "high",
+			xhigh: "xhigh",
+			max: null,
+		},
+		input: ["text", "image"],
+		cost: { input: 1.25, output: 4.25, cacheRead: 0.15, cacheWrite: 0 },
+		contextWindow: 1_048_576,
+		maxTokens: 256_000,
+		compat: { supportsReasoningEffort: true, supportsToolSearch: true },
+	},
+	{
+		id: "muse-spark-1.3-contributor",
+		name: "Muse Spark 1.3 Contributor",
+		reasoning: true,
+		thinkingLevelMap: {
+			off: null,
+			minimal: "minimal",
+			low: "low",
+			medium: "medium",
+			high: "high",
+			xhigh: "xhigh",
+			max: null,
+		},
+		input: ["text", "image"],
+		cost: { input: 0.1, output: 0.2, cacheRead: 0.002, cacheWrite: 0 },
+		contextWindow: 1_048_576,
+		maxTokens: 256_000,
+		compat: { supportsReasoningEffort: true, supportsToolSearch: true },
+	},
 	{
 		id: "muse-spark-1.2",
 		name: "Muse Spark 1.2",
@@ -95,12 +128,7 @@ const FALLBACK_MODELS: MetaProviderModel[] = [
 			xhigh: "xhigh",
 			max: null,
 		},
-		input: [
-			"text",
-			"image",
-			"video",
-			"audio",
-		] as unknown as MetaProviderModel["input"],
+		input: ["text", "image"],
 		cost: { input: 1.25, output: 4.25, cacheRead: 0.15, cacheWrite: 0 },
 		contextWindow: 1_048_576,
 		maxTokens: 256_000,
@@ -119,12 +147,7 @@ const FALLBACK_MODELS: MetaProviderModel[] = [
 			xhigh: "xhigh",
 			max: null,
 		},
-		input: [
-			"text",
-			"image",
-			"video",
-			"audio",
-		] as unknown as MetaProviderModel["input"],
+		input: ["text", "image"],
 		cost: { input: 0.1, output: 0.2, cacheRead: 0.002, cacheWrite: 0 },
 		contextWindow: 1_048_576,
 		maxTokens: 256_000,
@@ -143,12 +166,7 @@ const FALLBACK_MODELS: MetaProviderModel[] = [
 			xhigh: "xhigh",
 			max: null,
 		},
-		input: [
-			"text",
-			"image",
-			"video",
-			"audio",
-		] as unknown as MetaProviderModel["input"],
+		input: ["text", "image"],
 		cost: { input: 1.25, output: 4.25, cacheRead: 0.15, cacheWrite: 0 },
 		contextWindow: 1_048_576,
 		maxTokens: 256_000,
@@ -336,8 +354,7 @@ export async function refreshMetaToken(
 		);
 	// Pi 0.83 calls refreshToken(credentials). Pi 0.84 passes AbortSignal as
 	// the second argument. Tests inject a fetch mock in that slot.
-	const fetchImpl =
-		typeof fetchOrSignal === "function" ? fetchOrSignal : fetch;
+	const fetchImpl = typeof fetchOrSignal === "function" ? fetchOrSignal : fetch;
 	const signal = isAbortSignal(fetchOrSignal) ? fetchOrSignal : undefined;
 	if (signal?.aborted) {
 		throw new Error("Meta token refresh was cancelled");
@@ -376,19 +393,10 @@ function modalitiesToInput(
 	modalities: string[] | undefined,
 	fallback: MetaProviderModel["input"] | undefined,
 ): MetaProviderModel["input"] {
-	if (!modalities)
-		return fallback ?? (["text"] as unknown as MetaProviderModel["input"]);
-	const input: string[] = ["text"];
+	if (!modalities) return fallback ?? ["text"];
+	const input: MetaProviderModel["input"] = ["text"];
 	if (modalities.includes("image")) input.push("image");
-	// Advertised via cast until pi-ai expands Model.input union beyond text|image.
-	// The before_provider_request hook in media.ts rewrites these to typed media blocks at request time.
-	if (modalities.includes("video")) input.push("video");
-	if (modalities.includes("audio")) input.push("audio");
-	// Some catalogs expose "document"/"pdf" as a modality for PDF handling.
-	if (modalities.includes("document") || modalities.includes("pdf")) {
-		if (!input.includes("image")) input.push("image"); // PDFs count toward image budget
-	}
-	return input as unknown as MetaProviderModel["input"];
+	return input;
 }
 
 export function toProviderModels(
@@ -521,6 +529,8 @@ export async function refreshMetaModels(
 	context: RefreshModelsContext,
 	fetchImpl: Fetch = fetch,
 ): Promise<MetaProviderModel[]> {
+	// SAFETY: CompatibleRefreshContext is the union of the Pi 0.83 and 0.84
+	// refresh-context fields that this adapter probes defensively at runtime.
 	const compatibleContext = context as unknown as CompatibleRefreshContext;
 	if (!context.allowNetwork || context.signal?.aborted) {
 		const cached = await cachedMetaModels(compatibleContext);
@@ -582,6 +592,40 @@ export function metaFallbackCost(
 	return FALLBACK_MODELS.find((model) => model.id === modelId)?.cost;
 }
 
+/** Meta prompt-cache opt-in. Measured 0% hits on /chat/completions vs 93–99% on /responses with 24h. */
+export const META_PROMPT_CACHE_RETENTION = "24h";
+
+function asRecord(value: unknown): Record<string, unknown> | undefined {
+	return value !== null && typeof value === "object" && !Array.isArray(value)
+		? (value as Record<string, unknown>)
+		: undefined;
+}
+
+/**
+ * Hermes-equivalent Responses hints for api.meta.ai:
+ * setdefault `prompt_cache_retention: 24h`, and drop `reasoning.effort: none`
+ * because Meta 400s on it.
+ */
+export function applyMetaResponsesCacheHints(
+	payload: unknown,
+): Record<string, unknown> | undefined {
+	const body = asRecord(payload);
+	if (!body) return undefined;
+	if (body.prompt_cache_retention === undefined) {
+		body.prompt_cache_retention = META_PROMPT_CACHE_RETENTION;
+	}
+	const reasoning = asRecord(body.reasoning);
+	if (
+		reasoning &&
+		(reasoning.effort === "none" ||
+			reasoning.effort === undefined ||
+			reasoning.effort === null)
+	) {
+		delete body.reasoning;
+	}
+	return body;
+}
+
 export function createMetaProviderConfig(): ProviderConfig {
 	return {
 		name: "Meta Model API",
@@ -614,4 +658,8 @@ export default function metaOAuthProvider(pi: ExtensionAPI): void {
 		process.env["MODEL_API_KEY"] = process.env[META_ENV_VAR];
 	}
 	pi.registerProvider(META_PROVIDER_ID, createMetaProviderConfig());
+	pi.on("before_provider_request", (event, ctx) => {
+		if (ctx.model?.provider !== META_PROVIDER_ID) return undefined;
+		return applyMetaResponsesCacheHints(event.payload);
+	});
 }

package/package.json

@@ -1,15 +1,13 @@
 {
   "name": "pi-meta-oauth",
-  "version": "0.4.4",
-  "description": "Meta Model API OAuth provider and Muse-style voice dictation for pi",
+  "version": "0.6.0",
+  "description": "Meta Model API OAuth provider for pi",
   "keywords": [
     "pi-package",
     "meta",
     "muse-spark",
     "oauth",
-    "provider",
-    "voice",
-    "dictation"
+    "provider"
   ],
   "license": "MIT",
   "type": "module",
@@ -28,22 +26,17 @@
   },
   "pi": {
     "extensions": [
-      "./extensions/meta.ts",
-      "./extensions/media.ts",
-      "./extensions/voice.ts"
+      "./extensions/meta.ts"
     ],
     "image": "https://raw.githubusercontent.com/BlockedPath/pi-meta-oauth/main/preview.png"
   },
   "peerDependencies": {
     "@earendil-works/pi-ai": ">=0.83.0 <0.85.0",
-    "@earendil-works/pi-coding-agent": ">=0.83.0 <0.85.0",
-    "@earendil-works/pi-tui": ">=0.83.0 <0.85.0",
-    "typebox": "*"
+    "@earendil-works/pi-coding-agent": ">=0.83.0 <0.85.0"
   },
   "devDependencies": {
     "@earendil-works/pi-ai": "0.83.0",
     "@earendil-works/pi-coding-agent": "0.83.0",
-    "@earendil-works/pi-tui": "0.83.0",
     "bun-types": "latest",
     "typescript": "^5.9.0"
   },

package/extensions/media/files.ts

@@ -1,131 +0,0 @@
-import { basename } from "node:path";
-import { readFile } from "node:fs/promises";
-import { statSync } from "node:fs";
-import { META_FILES_URL } from "../meta.ts";
-import {
-	AUTOMATIC_UPLOAD_EXPIRY_SECONDS,
-	FILES_API_LIMIT_BYTES,
-} from "./limits.ts";
-import { filenameForMime, mimeForPath } from "./mime.ts";
-
-export interface UploadResult {
-	id: string;
-	filename: string;
-	bytes: number;
-	purpose: string;
-	status: string;
-	expires_at?: number;
-}
-
-function uploadErrorDetail(body: Record<string, unknown>, bodyText: string): string {
-	if (typeof body.error === "string") return body.error;
-	if (typeof body.message === "string") return body.message;
-	if (typeof body.error_description === "string") return body.error_description;
-	return bodyText.slice(0, 500);
-}
-
-export async function uploadMetaFile(
-	apiKey: string,
-	filePath: string,
-	expiresAfter?: { anchor: "created_at"; seconds: number },
-	signal?: AbortSignal,
-): Promise<UploadResult> {
-	const size = statSync(filePath).size;
-	if (size > FILES_API_LIMIT_BYTES) {
-		throw new Error(
-			`File too large for Files API (${size} bytes > 1 GiB)`,
-		);
-	}
-	const data = await readFile(filePath, { signal });
-	const mime = mimeForPath(filePath) ?? "application/octet-stream";
-	const blob = new Blob([data], { type: mime });
-	const form = new FormData();
-	form.append("file", blob, basename(filePath));
-	form.append("purpose", "user_data");
-	if (expiresAfter) {
-		form.append("expires_after[anchor]", expiresAfter.anchor);
-		form.append("expires_after[seconds]", String(expiresAfter.seconds));
-	}
-	const res = await fetch(META_FILES_URL, {
-		method: "POST",
-		headers: { Authorization: `Bearer ${apiKey}` },
-		body: form,
-		signal,
-	});
-	const bodyText = await res.text();
-	let body: Record<string, unknown> = {};
-	try {
-		body = bodyText ? (JSON.parse(bodyText) as Record<string, unknown>) : {};
-	} catch {
-		// Non-JSON body — keep empty and use raw text for error detail
-	}
-	if (!res.ok) {
-		const detail = uploadErrorDetail(body, bodyText);
-		if (res.status === 400 && detail.includes("storage")) {
-			throw new Error(
-				`Meta Files storage limit reached (100 GiB/team). Delete old files via DELETE /v1/files/{id}. Detail: ${detail}`,
-			);
-		}
-		throw new Error(
-			`Meta Files upload failed (HTTP ${res.status}): ${detail || res.statusText}`,
-		);
-	}
-	const id =
-		typeof body.id === "string"
-			? body.id
-			: typeof body.file_id === "string"
-				? body.file_id
-				: undefined;
-	if (!id) {
-		throw new Error(
-			`Meta Files upload returned no id: ${bodyText.slice(0, 500)}`,
-		);
-	}
-	return {
-		id,
-		filename:
-			typeof body.filename === "string" ? body.filename : basename(filePath),
-		bytes: typeof body.bytes === "number" ? body.bytes : data.byteLength,
-		purpose: typeof body.purpose === "string" ? body.purpose : "user_data",
-		status: typeof body.status === "string" ? body.status : "uploaded",
-		expires_at:
-			typeof body.expires_at === "number" ? body.expires_at : undefined,
-	};
-}
-
-export async function uploadInlineMedia(
-	apiKey: string,
-	base64: string,
-	mime: string,
-	filename: string,
-	signal?: AbortSignal,
-): Promise<string> {
-	const blob = new Blob([Buffer.from(base64, "base64")], { type: mime });
-	const form = new FormData();
-	form.append("file", blob, filename || filenameForMime(mime));
-	form.append("purpose", "user_data");
-	form.append("expires_after[anchor]", "created_at");
-	form.append("expires_after[seconds]", String(AUTOMATIC_UPLOAD_EXPIRY_SECONDS));
-	const res = await fetch(META_FILES_URL, {
-		method: "POST",
-		headers: { Authorization: `Bearer ${apiKey}` },
-		body: form,
-		signal,
-	});
-	const text = await res.text();
-	if (!res.ok) {
-		throw new Error(
-			`Files upload for large inline media failed: ${text.slice(0, 500)}`,
-		);
-	}
-	let json: Record<string, unknown>;
-	try {
-		json = JSON.parse(text) as Record<string, unknown>;
-	} catch (error) {
-		throw new Error(`Files upload returned invalid JSON: ${String(error)}`);
-	}
-	if (typeof json.id !== "string" || !json.id) {
-		throw new Error(`Files upload returned no id: ${text.slice(0, 500)}`);
-	}
-	return json.id;
-}

package/extensions/media/limits.ts

@@ -1,12 +0,0 @@
-export const INLINE_LIMIT_BYTES = 50_000_000;
-export const FILES_API_LIMIT_BYTES = 1_073_741_824;
-// Meta Responses `store=true` (default) has ~20 MB persistence limit even when
-// inline limit is 50 MB — a 24 MB base64 payload triggers HTTP 413
-// "payload_too_large … with `store=true`". Keep inline only for small files
-// and force Files API or `store:false` above this threshold.
-export const STORE_SAFE_INLINE_BYTES = 15_000_000;
-export const AUTOMATIC_UPLOAD_EXPIRY_SECONDS = 24 * 60 * 60;
-export const EXPLICIT_UPLOAD_EXPIRY_SECONDS = 7 * 24 * 60 * 60;
-export const MIN_UPLOAD_EXPIRY_SECONDS = 3_600;
-export const MAX_UPLOAD_EXPIRY_SECONDS = 2_592_000;
-export const MAX_ANALYSIS_SOURCES = 50;