pi-plus 0.1.8 → 0.1.10

package/radius.js

@@ -0,0 +1,82 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+{
+	const __noEnvIndex = process.argv.indexOf("--no-env");
+	if (__noEnvIndex !== -1) {
+		process.argv.splice(__noEnvIndex, 1);
+		for (const __key of ["ANTHROPIC_API_KEY", "ANTHROPIC_OAUTH_TOKEN", "OPENAI_API_KEY", "GEMINI_API_KEY", "GROQ_API_KEY", "CEREBRAS_API_KEY", "XAI_API_KEY", "OPENROUTER_API_KEY", "ZAI_API_KEY", "MISTRAL_API_KEY", "MINIMAX_API_KEY", "MINIMAX_CN_API_KEY", "AI_GATEWAY_API_KEY", "OPENCODE_API_KEY", "COPILOT_GITHUB_TOKEN", "GH_TOKEN", "GITHUB_TOKEN", "HF_TOKEN", "GOOGLE_APPLICATION_CREDENTIALS", "GOOGLE_CLOUD_PROJECT", "GCLOUD_PROJECT", "GOOGLE_CLOUD_LOCATION", "AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_REGION", "AWS_DEFAULT_REGION", "AWS_BEARER_TOKEN_BEDROCK", "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", "AWS_CONTAINER_CREDENTIALS_FULL_URI", "AWS_WEB_IDENTITY_TOKEN_FILE", "AZURE_OPENAI_API_KEY", "AZURE_OPENAI_BASE_URL", "AZURE_OPENAI_RESOURCE_NAME"]) delete process.env[__key];
+	}
+}
+function normalizeRadiusGatewayUrl(value){return(/^https?:\/\//iu.test(value)?value:`https://${value}`).replace(/\/+$/u,"")}var CANCEL_MESSAGE="Login cancelled",TIMEOUT_MESSAGE="Device flow timed out",SLOW_DOWN_TIMEOUT_MESSAGE="Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again.";function abortableSleep(ms,signal,cancelMessage){return new Promise((resolve,reject)=>{if(signal.aborted){reject(new Error(cancelMessage));return}let onAbort=()=>{clearTimeout(timeout),reject(new Error(cancelMessage))},timeout=setTimeout(()=>{signal.removeEventListener("abort",onAbort),resolve()},ms);signal.addEventListener("abort",onAbort,{once:!0})})}async function pollOAuthDeviceCodeFlow(options){let deadline=typeof options.expiresInSeconds=="number"?Date.now()+options.expiresInSeconds*1e3:Number.POSITIVE_INFINITY,intervalMs=Math.max(1e3,Math.floor((options.intervalSeconds??5)*1e3)),slowDownResponses=0;if(options.waitBeforeFirstPoll){let remainingMs=deadline-Date.now();remainingMs>0&&await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}for(;Date.now()<deadline;){if(options.signal.aborted)throw new Error(CANCEL_MESSAGE);let result=await options.poll();if(result.status==="complete")return result.value;if(result.status==="failed")throw new Error(result.message);result.status==="slow_down"&&(slowDownResponses+=1,intervalMs=typeof result.intervalSeconds=="number"&&Number.isFinite(result.intervalSeconds)&&result.intervalSeconds>0?Math.max(1e3,Math.floor(result.intervalSeconds*1e3)):Math.max(1e3,intervalMs+5e3));let remainingMs=deadline-Date.now();if(remainingMs<=0)break;await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}throw new Error(slowDownResponses>0?SLOW_DOWN_TIMEOUT_MESSAGE:TIMEOUT_MESSAGE)}var LOGO_SVG='<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 800 800" aria-hidden="true"><path fill="#fff" fill-rule="evenodd" d="M165.29 165.29 H517.36 V400 H400 V517.36 H282.65 V634.72 H165.29 Z M282.65 282.65 V400 H400 V282.65 Z"/><path fill="#fff" d="M517.36 400 H634.72 V634.72 H517.36 Z"/></svg>';function escapeHtml(value){return value.replaceAll("&","&amp;").replaceAll("<","&lt;").replaceAll(">","&gt;").replaceAll('"',"&quot;").replaceAll("'","&#39;")}function renderPage(options){let title=escapeHtml(options.title),heading=escapeHtml(options.heading),message=escapeHtml(options.message),details=options.details?escapeHtml(options.details):void 0;return`<!doctype html>
+<html lang="en">
+<head>
+  <meta charset="utf-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1" />
+  <title>${title}</title>
+  <style>
+    :root {
+      --text: #fafafa;
+      --text-dim: #a1a1aa;
+      --page-bg: #09090b;
+      --font-sans: ui-sans-serif, system-ui, -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, "Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol", "Noto Color Emoji";
+      --font-mono: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, "Liberation Mono", "Courier New", monospace;
+    }
+    * { box-sizing: border-box; }
+    html { color-scheme: dark; }
+    body {
+      margin: 0;
+      min-height: 100vh;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      padding: 24px;
+      background: var(--page-bg);
+      color: var(--text);
+      font-family: var(--font-sans);
+      text-align: center;
+    }
+    main {
+      width: 100%;
+      max-width: 560px;
+      display: flex;
+      flex-direction: column;
+      align-items: center;
+      justify-content: center;
+    }
+    .logo {
+      width: 72px;
+      height: 72px;
+      display: block;
+      margin-bottom: 24px;
+    }
+    h1 {
+      margin: 0 0 10px;
+      font-size: 28px;
+      line-height: 1.15;
+      font-weight: 650;
+      color: var(--text);
+    }
+    p {
+      margin: 0;
+      line-height: 1.7;
+      color: var(--text-dim);
+      font-size: 15px;
+    }
+    .details {
+      margin-top: 16px;
+      font-family: var(--font-mono);
+      font-size: 13px;
+      color: var(--text-dim);
+      white-space: pre-wrap;
+      word-break: break-word;
+    }
+  </style>
+</head>
+<body>
+  <main>
+    <div class="logo">${LOGO_SVG}</div>
+    <h1>${heading}</h1>
+    <p>${message}</p>
+    ${details?`<div class="details">${details}</div>`:""}
+  </main>
+</body>
+</html>`}function oauthSuccessHtml(message){return renderPage({title:"Authentication successful",heading:"Authentication successful",message})}function oauthErrorHtml(message,details){return renderPage({title:"Authentication failed",heading:"Authentication failed",message,details})}function base64urlEncode(bytes){let binary="";for(let byte of bytes)binary+=String.fromCharCode(byte);return btoa(binary).replace(/\+/g,"-").replace(/\//g,"_").replace(/=/g,"")}async function generatePKCE(){let verifierBytes=new Uint8Array(32);crypto.getRandomValues(verifierBytes);let verifier=base64urlEncode(verifierBytes),data=new TextEncoder().encode(verifier),hashBuffer=await crypto.subtle.digest("SHA-256",data),challenge=base64urlEncode(new Uint8Array(hashBuffer));return{verifier,challenge}}var _http=null;typeof process<"u"&&(process.versions?.node||process.versions?.bun)&&import("node:http").then(m=>{_http=m});var CALLBACK_HOST="127.0.0.1",CALLBACK_PORT=1456,CALLBACK_PATH="/oauth/callback",REDIRECT_URI=`http://${CALLBACK_HOST}:${CALLBACK_PORT}${CALLBACK_PATH}`,TOKEN_EXPIRY_SKEW_MS=6e4,LOGIN_METHOD_BROWSER="browser",LOGIN_METHOD_DEVICE_CODE="device-code",OAUTH_CLIENT_ID="pi-gateway",OAUTH_SCOPE="gateway offline_access",OAUTH_DEVICE_CODE_GRANT_TYPE="urn:ietf:params:oauth:grant-type:device_code";async function loadRadiusOAuthDiscovery(gateway,signal){let response=await fetch(new URL("/v1/oauth",gateway),{headers:{accept:"application/json"},signal});if(!response.ok)throw new Error(`Could not load Radius OAuth config from ${gateway}: ${response.status} ${await response.text()}`);let discovery=await response.json();if(typeof discovery.authorizationEndpoint!="string")throw new Error(`Invalid Radius OAuth config from ${gateway}`);return{authorizationEndpoint:discovery.authorizationEndpoint}}var OAuthResponseError=class extends Error{status;oauthError;constructor(status,oauthError,description,message){let detail=oauthError?description?`${oauthError}: ${description}`:oauthError:description||String(status);super(`${message}: ${detail}`),this.status=status,this.oauthError=oauthError}};async function readOAuthResponseError(response,message){let text=await response.text().catch(()=>""),oauthError,description;if(text)try{let data=JSON.parse(text);oauthError=typeof data.error=="string"?data.error:void 0,description=typeof data.error_description=="string"?data.error_description:void 0}catch{description=text}return new OAuthResponseError(response.status,oauthError,description,message)}async function requestOAuthToken(gateway,body,signal){let response;try{response=await fetch(new URL("/v1/oauth/token",gateway),{method:"POST",headers:{accept:"application/json","content-type":"application/x-www-form-urlencoded"},body,signal})}catch(error){throw signal.aborted?new Error("Login cancelled"):error}if(!response.ok)throw await readOAuthResponseError(response,"Radius OAuth token request failed");let data=await response.json();return{type:"oauth",access:data.access_token,refresh:data.refresh_token,expires:Date.now()+data.expires_in*1e3-TOKEN_EXPIRY_SKEW_MS,scope:data.scope}}function startOAuthCallbackServer(expectedState,signal){if(!_http)throw new Error("Radius OAuth is only available in Node.js environments");let settle=()=>{},settled=!1,wait=new Promise(resolve=>{settle=resolve}),finish=code=>{settled||(settled=!0,signal.removeEventListener("abort",onAbort),settle(code))},onAbort=()=>finish(null);signal.addEventListener("abort",onAbort,{once:!0});let sendPage=(response,status,html)=>{response.statusCode=status,response.setHeader("content-type","text/html; charset=utf-8"),response.end(html)},server=_http.createServer((request,response)=>{let url=new URL(request.url??"/",REDIRECT_URI);if(url.pathname!==CALLBACK_PATH){sendPage(response,404,oauthErrorHtml("Callback route not found."));return}if(url.searchParams.get("state")!==expectedState){sendPage(response,400,oauthErrorHtml("OAuth state mismatch."));return}let error=url.searchParams.get("error");if(error){sendPage(response,400,oauthErrorHtml(url.searchParams.get("error_description")??error)),finish(null);return}let code=url.searchParams.get("code");if(!code){sendPage(response,400,oauthErrorHtml("Missing authorization code."));return}sendPage(response,200,oauthSuccessHtml("Signed in to Radius. You may now close this page.")),finish(code)});return new Promise(resolve=>{server.listen(CALLBACK_PORT,CALLBACK_HOST,()=>{resolve({waitForCode:()=>wait,close:()=>{finish(null),server.close()}})}).once("error",()=>{finish(null),resolve({waitForCode:async()=>null,close:()=>{}})})})}async function loginWithBrowser(gateway,authorizationEndpoint,interaction){let{verifier,challenge}=await generatePKCE(),state=crypto.randomUUID(),authorizeUrl=new URL(authorizationEndpoint);authorizeUrl.search=new URLSearchParams({response_type:"code",client_id:OAUTH_CLIENT_ID,redirect_uri:REDIRECT_URI,scope:OAUTH_SCOPE,code_challenge:challenge,code_challenge_method:"S256",handoff:"url",state}).toString();let callbackServer=await startOAuthCallbackServer(state,interaction.signal);interaction.notify({type:"progress",message:`Listening for OAuth callback on ${REDIRECT_URI}`}),interaction.notify({type:"auth_url",url:authorizeUrl.toString(),instructions:"Continue in your browser."});try{let code=await callbackServer.waitForCode();if(!code)throw interaction.signal.aborted?new Error("Login cancelled"):new Error("OAuth callback did not complete.");return await requestOAuthToken(gateway,new URLSearchParams({grant_type:"authorization_code",client_id:OAUTH_CLIENT_ID,redirect_uri:REDIRECT_URI,code,code_verifier:verifier}),interaction.signal)}finally{callbackServer.close()}}async function requestDeviceAuthorization(gateway,signal){let response;try{response=await fetch(new URL("/v1/oauth/device",gateway),{method:"POST",headers:{accept:"application/json","content-type":"application/x-www-form-urlencoded"},body:new URLSearchParams({client_id:OAUTH_CLIENT_ID,scope:OAUTH_SCOPE}),signal})}catch(error){throw signal.aborted?new Error("Login cancelled"):error}if(!response.ok)throw await readOAuthResponseError(response,"Radius OAuth device authorization failed");let data=await response.json();if(!data.device_code||!data.user_code||!data.verification_uri||!data.expires_in)throw new Error("Radius OAuth device authorization response is missing required fields");return{device_code:data.device_code,user_code:data.user_code,verification_uri:data.verification_uri,expires_in:data.expires_in,interval:data.interval}}async function loginWithDeviceCode(gateway,interaction){let device=await requestDeviceAuthorization(gateway,interaction.signal);return interaction.notify({type:"device_code",userCode:device.user_code,verificationUri:device.verification_uri,intervalSeconds:device.interval,expiresInSeconds:device.expires_in}),pollOAuthDeviceCodeFlow({intervalSeconds:device.interval,expiresInSeconds:device.expires_in,signal:interaction.signal,poll:async()=>{try{return{status:"complete",value:await requestOAuthToken(gateway,new URLSearchParams({grant_type:OAUTH_DEVICE_CODE_GRANT_TYPE,client_id:OAUTH_CLIENT_ID,device_code:device.device_code}),interaction.signal)}}catch(error){if(!(error instanceof OAuthResponseError))throw error;switch(error.oauthError){case"authorization_pending":return{status:"pending"};case"slow_down":return{status:"slow_down"};case"expired_token":return{status:"failed",message:"Device authorization expired."};case"access_denied":return{status:"failed",message:"Device authorization was denied."};default:throw error}}}})}function createRadiusOAuth(options){let gateway=normalizeRadiusGatewayUrl(options.gateway);return{name:options.name,async login(interaction){let loginMethod=await interaction.prompt({type:"select",message:`Sign in to ${options.name}:`,options:[{id:LOGIN_METHOD_BROWSER,label:"Sign in with browser (recommended)"},{id:LOGIN_METHOD_DEVICE_CODE,label:"Sign in with device code (when signing in from another device)"}]});if(loginMethod===LOGIN_METHOD_DEVICE_CODE)return loginWithDeviceCode(gateway,interaction);if(loginMethod===LOGIN_METHOD_BROWSER){let discovery=await loadRadiusOAuthDiscovery(gateway,interaction.signal);return loginWithBrowser(gateway,discovery.authorizationEndpoint,interaction)}throw new Error(`Unknown ${options.name} sign-in method: ${loginMethod}`)},async refresh(credential,signal){return await requestOAuthToken(gateway,new URLSearchParams({grant_type:"refresh_token",client_id:OAUTH_CLIENT_ID,refresh_token:credential.refresh}),signal)},async toAuth(credential){return{apiKey:credential.access}}}}export{createRadiusOAuth};

package/xai.js

@@ -0,0 +1,9 @@
+import { createRequire as __piCreateRequire } from "node:module"; const require = __piCreateRequire(import.meta.url);
+{
+	const __noEnvIndex = process.argv.indexOf("--no-env");
+	if (__noEnvIndex !== -1) {
+		process.argv.splice(__noEnvIndex, 1);
+		for (const __key of ["ANTHROPIC_API_KEY", "ANTHROPIC_OAUTH_TOKEN", "OPENAI_API_KEY", "GEMINI_API_KEY", "GROQ_API_KEY", "CEREBRAS_API_KEY", "XAI_API_KEY", "OPENROUTER_API_KEY", "ZAI_API_KEY", "MISTRAL_API_KEY", "MINIMAX_API_KEY", "MINIMAX_CN_API_KEY", "AI_GATEWAY_API_KEY", "OPENCODE_API_KEY", "COPILOT_GITHUB_TOKEN", "GH_TOKEN", "GITHUB_TOKEN", "HF_TOKEN", "GOOGLE_APPLICATION_CREDENTIALS", "GOOGLE_CLOUD_PROJECT", "GCLOUD_PROJECT", "GOOGLE_CLOUD_LOCATION", "AWS_PROFILE", "AWS_ACCESS_KEY_ID", "AWS_SECRET_ACCESS_KEY", "AWS_SESSION_TOKEN", "AWS_REGION", "AWS_DEFAULT_REGION", "AWS_BEARER_TOKEN_BEDROCK", "AWS_CONTAINER_CREDENTIALS_RELATIVE_URI", "AWS_CONTAINER_CREDENTIALS_FULL_URI", "AWS_WEB_IDENTITY_TOKEN_FILE", "AZURE_OPENAI_API_KEY", "AZURE_OPENAI_BASE_URL", "AZURE_OPENAI_RESOURCE_NAME"]) delete process.env[__key];
+	}
+}
+var CANCEL_MESSAGE="Login cancelled",TIMEOUT_MESSAGE="Device flow timed out",SLOW_DOWN_TIMEOUT_MESSAGE="Device flow timed out after one or more slow_down responses. This is often caused by clock drift in WSL or VM environments. Please sync or restart the VM clock and try again.";function abortableSleep(ms,signal,cancelMessage){return new Promise((resolve,reject)=>{if(signal.aborted){reject(new Error(cancelMessage));return}let onAbort=()=>{clearTimeout(timeout),reject(new Error(cancelMessage))},timeout=setTimeout(()=>{signal.removeEventListener("abort",onAbort),resolve()},ms);signal.addEventListener("abort",onAbort,{once:!0})})}async function pollOAuthDeviceCodeFlow(options){let deadline=typeof options.expiresInSeconds=="number"?Date.now()+options.expiresInSeconds*1e3:Number.POSITIVE_INFINITY,intervalMs=Math.max(1e3,Math.floor((options.intervalSeconds??5)*1e3)),slowDownResponses=0;if(options.waitBeforeFirstPoll){let remainingMs=deadline-Date.now();remainingMs>0&&await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}for(;Date.now()<deadline;){if(options.signal.aborted)throw new Error(CANCEL_MESSAGE);let result=await options.poll();if(result.status==="complete")return result.value;if(result.status==="failed")throw new Error(result.message);result.status==="slow_down"&&(slowDownResponses+=1,intervalMs=typeof result.intervalSeconds=="number"&&Number.isFinite(result.intervalSeconds)&&result.intervalSeconds>0?Math.max(1e3,Math.floor(result.intervalSeconds*1e3)):Math.max(1e3,intervalMs+5e3));let remainingMs=deadline-Date.now();if(remainingMs<=0)break;await abortableSleep(Math.min(intervalMs,remainingMs),options.signal,CANCEL_MESSAGE)}throw new Error(slowDownResponses>0?SLOW_DOWN_TIMEOUT_MESSAGE:TIMEOUT_MESSAGE)}var XAI_CLIENT_ID="b1a00492-073a-47ea-816f-4c329264a828",XAI_SCOPE="openid profile email offline_access grok-cli:access api:access",XAI_DEVICE_CODE_URL="https://auth.x.ai/oauth2/device/code",XAI_TOKEN_URL="https://auth.x.ai/oauth2/token",REFRESH_SKEW_MS=300*1e3,DEFAULT_TOKEN_LIFETIME_SECONDS=3600;function requiredString(body,field){let value=body[field];if(typeof value!="string"||value.length===0)throw new Error(`Invalid xAI OAuth response field: ${field}`);return value}function positiveNumber(body,field){let value=body[field];if(typeof value!="number"||!Number.isFinite(value)||value<=0)throw new Error(`Invalid xAI OAuth response field: ${field}`);return value}function validateVerificationUri(raw){let url;try{url=new URL(raw)}catch{throw new Error("Untrusted verification URI in xAI OAuth response")}if(url.protocol!=="https:")throw new Error("Untrusted verification URI in xAI OAuth response");return url.href}async function postForm(url,fields,signal){let response;try{response=await fetch(url,{method:"POST",headers:{Accept:"application/json","Content-Type":"application/x-www-form-urlencoded"},body:new URLSearchParams(fields),signal})}catch(error){throw signal.aborted?new Error("Login cancelled"):error}let body;try{let parsed=await response.json();body=parsed&&typeof parsed=="object"&&!Array.isArray(parsed)?parsed:{}}catch{throw signal.aborted?new Error("Login cancelled"):new Error(`xAI OAuth returned invalid JSON (HTTP ${response.status})`)}return{ok:response.ok,status:response.status,body}}function requestFailure(action,response){let error=typeof response.body.error=="string"?response.body.error:void 0,description=typeof response.body.error_description=="string"?response.body.error_description:void 0,detail=[error,description].filter(Boolean).join(": ");return new Error(`xAI OAuth ${action} failed (HTTP ${response.status})${detail?`: ${detail}`:""}`)}function parseDeviceCode(body){let interval=body.interval,intervalSeconds=typeof interval=="number"&&Number.isFinite(interval)&&interval>0?interval:void 0,verificationUriComplete=typeof body.verification_uri_complete=="string"&&body.verification_uri_complete.length>0?validateVerificationUri(body.verification_uri_complete):void 0;return{deviceCode:requiredString(body,"device_code"),userCode:requiredString(body,"user_code"),verificationUri:validateVerificationUri(requiredString(body,"verification_uri")),verificationUriComplete,intervalSeconds,expiresInSeconds:positiveNumber(body,"expires_in")}}function credentialsFromTokenResponse(body,previousRefreshToken){let access=requiredString(body,"access_token"),refresh=body.refresh_token===void 0&&previousRefreshToken?previousRefreshToken:requiredString(body,"refresh_token"),expiresInSeconds=body.expires_in===void 0?DEFAULT_TOKEN_LIFETIME_SECONDS:positiveNumber(body,"expires_in");return{type:"oauth",access,refresh,expires:Date.now()+expiresInSeconds*1e3-REFRESH_SKEW_MS}}async function requestDeviceCode(signal){let response=await postForm(XAI_DEVICE_CODE_URL,{client_id:XAI_CLIENT_ID,scope:XAI_SCOPE,referrer:"pi"},signal);if(!response.ok)throw requestFailure("device authorization",response);return parseDeviceCode(response.body)}async function pollForTokens(device,signal){return pollOAuthDeviceCodeFlow({intervalSeconds:device.intervalSeconds,expiresInSeconds:device.expiresInSeconds,waitBeforeFirstPoll:!0,signal,poll:async()=>{let response=await postForm(XAI_TOKEN_URL,{grant_type:"urn:ietf:params:oauth:grant-type:device_code",client_id:XAI_CLIENT_ID,device_code:device.deviceCode},signal);if(response.ok)return{status:"complete",value:credentialsFromTokenResponse(response.body)};let error=response.body.error;if(error==="authorization_pending")return{status:"pending"};if(error==="slow_down"){let interval=response.body.interval;return{status:"slow_down",intervalSeconds:typeof interval=="number"?interval:void 0}}return error==="access_denied"||error==="authorization_denied"?{status:"failed",message:"xAI device authorization was denied"}:error==="expired_token"?{status:"failed",message:"xAI device code expired"}:{status:"failed",message:requestFailure("device token polling",response).message}}})}async function loginXai(interaction){let device=await requestDeviceCode(interaction.signal);return interaction.notify({type:"device_code",userCode:device.userCode,verificationUri:device.verificationUriComplete??device.verificationUri,intervalSeconds:device.intervalSeconds,expiresInSeconds:device.expiresInSeconds}),pollForTokens(device,interaction.signal)}async function refreshXaiToken(refreshToken,signal){let response=await postForm(XAI_TOKEN_URL,{grant_type:"refresh_token",client_id:XAI_CLIENT_ID,refresh_token:refreshToken},signal);if(!response.ok)throw requestFailure("token refresh",response);return credentialsFromTokenResponse(response.body,refreshToken)}var xaiOAuth={name:"xAI (Grok/X subscription)",isSubscription:!0,loginLabel:"Sign in with SuperGrok or X Premium",login:loginXai,refresh:(credential,signal)=>refreshXaiToken(credential.refresh,signal),async toAuth(credential){return{apiKey:credential.access}}};export{xaiOAuth};

package/LICENSE

@@ -1,21 +0,0 @@
-MIT License
-
-Copyright (c) 2026 Bing Tong
-
-Permission is hereby granted, free of charge, to any person obtaining a copy
-of this software and associated documentation files (the "Software"), to deal
-in the Software without restriction, including without limitation the rights
-to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
-copies of the Software, and to permit persons to whom the Software is
-furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
-AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
-OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-SOFTWARE.

package/src/auto-compact.ts

@@ -1,43 +0,0 @@
-/**
- * Edge-triggered auto-compact firing.
- *
- * pi's built-in auto-compaction uses its own threshold (contextWindow −
- * reserveTokens, default reserve 16384). To make Claude Code's threshold
- * (effective window − 13000) govern, disable pi's built-in trigger in
- * settings.json (`"compaction": { "enabled": false }`) and let this plugin
- * call ctx.compact() at the CC threshold instead.
- *
- * Trigger policy: the overflow check runs on every tool task finish
- * (tool_execution_end). When the CC threshold is crossed, ctx.compact() fires
- * immediately — pi inserts the compaction between agent steps and continues
- * the turn with the compacted context (the same window pi's own auto-compact
- * and CC's autocompact use), so no work is deferred until idle.
- *
- * Edge-triggered: fires once per threshold crossing, re-arms after the
- * post-compaction count drops below the threshold.
- */
-
-export interface AutoCompactTriggerState {
-	/** True while usage is below the threshold (re-armed after compaction). */
-	below: boolean;
-}
-
-export function initialTriggerState(): AutoCompactTriggerState {
-	return { below: true };
-}
-
-/**
- * Edge trigger: fires exactly once per threshold crossing. After firing, stays
- * disarmed until the token count drops below the threshold again (the
- * post-compaction count is small, so this re-arms naturally).
- */
-export function shouldFireAutoCompact(
-	state: AutoCompactTriggerState,
-	tokenCount: number,
-	threshold: number,
-): boolean {
-	const below = tokenCount < threshold;
-	const fire = !below && state.below;
-	state.below = below;
-	return fire;
-}

package/src/context-usage.ts

@@ -1,91 +0,0 @@
-/**
- * Shared CC-exact context usage computation for pi-plus.
- *
- * Single source of truth for both display surfaces — the footer status line
- * (setStatus) and the custom footer's context field — so the two can never
- * diverge. Extracted from index.ts when the custom footer landed.
- *
- * The "known" flag ports pi's own getContextUsage boundary logic
- * (core/agent-session.ts): after a compaction entry, the pre-compaction usage
- * no longer describes the context, so the count is unknown until a valid
- * assistant response arrives.
- */
-
-import type { ExtensionContext } from "@earendil-works/pi-coding-agent";
-import { getAutoCompactThreshold, getEffectiveContextWindowSize } from "./model-config.ts";
-import { calculateTokenWarningState, isAutoCompactEnabled, type TokenWarningState } from "./percentages.ts";
-import type { PiPlusSettings } from "./settings.ts";
-import { getTokenCountFromUsage, tokenCountWithEstimation, type RoughMessage } from "./usage.ts";
-
-export interface PluginContextUsage {
-	/** false right after compaction, before the next valid assistant response
-	 *  (mirrors pi's "?/window" convention). */
-	known: boolean;
-	/** CC-exact token count (meaningful only when known). */
-	tokens: number;
-	/** The threshold percentUsed is measured against: the auto-compact
-	 *  threshold when auto-compact is on, else the effective window. */
-	threshold: number;
-	autoCompactEnabled: boolean;
-	state: TokenWarningState;
-}
-
-export function branchMessages(ctx: ExtensionContext): RoughMessage[] {
-	return ctx.sessionManager
-		.getBranch()
-		.filter((entry) => entry.type === "message")
-		.map((entry) => entry.message as unknown as RoughMessage);
-}
-
-/**
- * Port of agent-session.ts getContextUsage's boundary rule: the count is
- * unknown ONLY when a `compaction` entry exists with no valid assistant usage
- * after it (the pre-compaction usage no longer describes the context).
- * `branch_summary` is NOT a boundary — matching getLatestCompactionEntry.
- * With no compaction, even a usage-less session is "known": both pi and the
- * plugin's tokenCountWithEstimation fall back to estimating every message.
- */
-export function hasPostCompactionUsage(ctx: ExtensionContext): boolean {
-	const entries = ctx.sessionManager.getBranch();
-	let compactionIndex = -1;
-	for (let i = entries.length - 1; i >= 0; i--) {
-		if (entries[i].type === "compaction") {
-			compactionIndex = i;
-			break;
-		}
-	}
-	if (compactionIndex === -1) return true;
-	for (let i = entries.length - 1; i > compactionIndex; i--) {
-		const entry = entries[i];
-		if (entry.type !== "message" || entry.message.role !== "assistant") continue;
-		const assistant = entry.message;
-		if (assistant.stopReason === "aborted" || assistant.stopReason === "error") continue;
-		const usage = assistant.usage;
-		if (usage && getTokenCountFromUsage(usage) > 0) return true;
-	}
-	return false;
-}
-
-/**
- * Compute the plugin's context usage snapshot for the current session state.
- * Returns undefined when no model is selected.
- */
-export function computePluginContextUsage(
-	ctx: ExtensionContext,
-	settings: PiPlusSettings,
-): PluginContextUsage | undefined {
-	const model = ctx.model;
-	if (!model) return undefined;
-
-	const tokens = tokenCountWithEstimation(branchMessages(ctx));
-	const known = hasPostCompactionUsage(ctx);
-	const autoCompactEnabled = isAutoCompactEnabled(settings);
-	// Mirror calculateTokenWarningState's denominator: the auto-compact
-	// threshold when auto-compact is on, else the effective window.
-	const threshold = autoCompactEnabled
-		? getAutoCompactThreshold(model.id, model.contextWindow, model.maxTokens, settings)
-		: getEffectiveContextWindowSize(model.id, model.contextWindow, model.maxTokens, settings);
-	const state = calculateTokenWarningState(tokens, model.id, model.contextWindow, model.maxTokens, settings);
-
-	return { known, tokens, threshold, autoCompactEnabled, state };
-}

package/src/footer-render.ts

@@ -1,248 +0,0 @@
-/**
- * Pure line builders for pi-plus's custom footer — exact ports of pi's
- * built-in footer rendering (coding-agent src/modes/interactive/components/footer.ts),
- * minus the pieces extensions cannot access (the `xp` experimental marker and
- * `modelRuntime.isUsingSubscription`), with the context-usage field replaced
- * by pi-plus's CC-exact "% used of threshold".
- *
- * Everything here is pure and free of runtime pi dependencies: truncation and
- * width measurement are injected via `Measure` so the module stays testable
- * without pi-tui, and the theme is the structural `ThemeLike` subset.
- */
-
-import { isAbsolute, relative, resolve, sep } from "node:path";
-import type { SessionEntry } from "@earendil-works/pi-coding-agent";
-import type { PluginContextUsage } from "./context-usage.ts";
-
-export interface ThemeLike {
-	fg(color: string, text: string): string;
-}
-
-/** Width primitives supplied by the caller (pi-tui at runtime, test stubs in vitest). */
-export interface Measure {
-	truncate(text: string, width: number, ellipsis: string): string;
-	visibleWidth(text: string): number;
-}
-
-/** Sanitize text for display in a single-line status (footer.ts:13). */
-export function sanitizeStatusText(text: string): string {
-	return text
-		.replace(/[\r\n\t]/g, " ")
-		.replace(/ +/g, " ")
-		.trim();
-}
-
-/** Format token counts for compact footer display (footer.ts:24). */
-export function formatTokens(count: number): string {
-	if (count < 1000) return count.toString();
-	if (count < 10000) return `${(count / 1000).toFixed(1)}k`;
-	if (count < 1000000) return `${Math.round(count / 1000)}k`;
-	if (count < 10000000) return `${(count / 1000000).toFixed(1)}M`;
-	return `${Math.round(count / 1000000)}M`;
-}
-
-/** Replace the home directory with ~ (footer.ts:33). */
-export function formatCwdForFooter(cwd: string, home: string | undefined): string {
-	if (!home) return cwd;
-
-	const resolvedCwd = resolve(cwd);
-	const resolvedHome = resolve(home);
-	const relativeToHome = relative(resolvedHome, resolvedCwd);
-	const isInsideHome =
-		relativeToHome === "" ||
-		(relativeToHome !== ".." && !relativeToHome.startsWith(`..${sep}`) && !isAbsolute(relativeToHome));
-
-	if (!isInsideHome) return cwd;
-	return relativeToHome === "" ? "~" : `~${sep}${relativeToHome}`;
-}
-
-export interface UsageTotals {
-	input: number;
-	output: number;
-	cacheRead: number;
-	cacheWrite: number;
-	cost: number;
-}
-
-/**
- * Cumulative usage over ALL session entries plus the latest assistant cache
- * hit rate — a port of footer.ts:88-104. The entry scan: assistant messages,
- * toolResult messages with usage, and branch_summary/compaction entries with
- * usage. The CH rate comes from the latest assistant message regardless of
- * stopReason, matching the built-in footer.
- */
-export function computeUsageTotals(entries: readonly SessionEntry[]): {
-	totals: UsageTotals;
-	latestCacheHitRate: number | undefined;
-} {
-	const totals: UsageTotals = { input: 0, output: 0, cacheRead: 0, cacheWrite: 0, cost: 0 };
-	let latestCacheHitRate: number | undefined;
-
-	for (const entry of entries) {
-		if (entry.type === "message" && entry.message.role === "assistant") {
-			const usage = entry.message.usage;
-			totals.input += usage.input;
-			totals.output += usage.output;
-			totals.cacheRead += usage.cacheRead;
-			totals.cacheWrite += usage.cacheWrite;
-			totals.cost += usage.cost.total;
-
-			const latestPromptTokens = usage.input + usage.cacheRead + usage.cacheWrite;
-			latestCacheHitRate = latestPromptTokens > 0 ? (usage.cacheRead / latestPromptTokens) * 100 : undefined;
-		} else if (entry.type === "message" && entry.message.role === "toolResult" && entry.message.usage) {
-			const usage = entry.message.usage;
-			totals.input += usage.input;
-			totals.output += usage.output;
-			totals.cacheRead += usage.cacheRead;
-			totals.cacheWrite += usage.cacheWrite;
-			totals.cost += usage.cost.total;
-		} else if ((entry.type === "branch_summary" || entry.type === "compaction") && entry.usage) {
-			const usage = entry.usage;
-			totals.input += usage.input;
-			totals.output += usage.output;
-			totals.cacheRead += usage.cacheRead;
-			totals.cacheWrite += usage.cacheWrite;
-			totals.cost += usage.cost.total;
-		}
-	}
-
-	return { totals, latestCacheHitRate };
-}
-
-/**
- * The substituted context field: `{percentUsed}%/{threshold}` + ` (auto)`.
- * percentUsed is the complement of the plugin's percentLeft (CC's
- * calculateTokenWarningState), measured against the auto-compact threshold —
- * so the number rises as context fills, like pi's native field, but the
- * denominator is the threshold (effective window − 13k), not the raw window.
- * Colors follow the plugin's warning state; `?/{threshold}` when unknown.
- */
-export function buildContextField(usage: PluginContextUsage | undefined, theme: ThemeLike): string {
-	const autoIndicator = usage?.autoCompactEnabled ? " (auto)" : "";
-	if (!usage || !usage.known) {
-		return `?/${formatTokens(usage?.threshold ?? 0)}${autoIndicator}`;
-	}
-	const percentUsed = 100 - usage.state.percentLeft;
-	const display = `${percentUsed}%/${formatTokens(usage.threshold)}${autoIndicator}`;
-	if (usage.state.isAboveErrorThreshold || usage.state.isAtBlockingLimit) return theme.fg("error", display);
-	if (usage.state.isAboveWarningThreshold) return theme.fg("warning", display);
-	return display;
-}
-
-export interface StatsLineInput {
-	totals: UsageTotals;
-	latestCacheHitRate: number | undefined;
-	/** Pre-colored context field from buildContextField. */
-	contextField: string;
-	/** model.provider === "kimi-coding" (the only subscription check extensions can port). */
-	usingKimiCoding: boolean;
-	modelName: string;
-	modelReasoning: boolean;
-	thinkingLevel: string | undefined;
-	provider: string | undefined;
-	availableProviderCount: number;
-}
-
-/**
- * Port of footer.ts:128-227: stats parts, right-aligned model + thinking
- * level, provider prefix when multiple providers are available, min-2-space
- * gap, truncation fallbacks, and the dim-left/dim-remainder split around the
- * colored context segment. Omits only the `xp` marker (internal API).
- */
-export function buildStatsLine(input: StatsLineInput, width: number, measure: Measure, theme: ThemeLike): string {
-	const { totals, latestCacheHitRate, contextField } = input;
-	const statsParts: string[] = [];
-	if (totals.input) statsParts.push(`↑${formatTokens(totals.input)}`);
-	if (totals.output) statsParts.push(`↓${formatTokens(totals.output)}`);
-	if (totals.cacheRead) statsParts.push(`R${formatTokens(totals.cacheRead)}`);
-	if (totals.cacheWrite) statsParts.push(`W${formatTokens(totals.cacheWrite)}`);
-	if ((totals.cacheRead > 0 || totals.cacheWrite > 0) && latestCacheHitRate !== undefined) {
-		statsParts.push(`CH${latestCacheHitRate.toFixed(1)}%`);
-	}
-
-	if (totals.cost || input.usingKimiCoding) {
-		statsParts.push(`$${totals.cost.toFixed(3)}${input.usingKimiCoding ? " (sub)" : ""}`);
-	}
-
-	statsParts.push(contextField);
-
-	let statsLeft = statsParts.join(" ");
-
-	let statsLeftWidth = measure.visibleWidth(statsLeft);
-	if (statsLeftWidth > width) {
-		statsLeft = measure.truncate(statsLeft, width, "...");
-		statsLeftWidth = measure.visibleWidth(statsLeft);
-	}
-
-	const minPadding = 2;
-
-	let rightSideWithoutProvider = input.modelName;
-	if (input.modelReasoning) {
-		const thinkingLevel = input.thinkingLevel || "off";
-		rightSideWithoutProvider =
-			thinkingLevel === "off" ? `${input.modelName} • thinking off` : `${input.modelName} • ${thinkingLevel}`;
-	}
-
-	let rightSide = rightSideWithoutProvider;
-	if (input.availableProviderCount > 1 && input.provider) {
-		rightSide = `(${input.provider}) ${rightSideWithoutProvider}`;
-		if (statsLeftWidth + minPadding + measure.visibleWidth(rightSide) > width) {
-			rightSide = rightSideWithoutProvider;
-		}
-	}
-
-	const rightSideWidth = measure.visibleWidth(rightSide);
-	const totalNeeded = statsLeftWidth + minPadding + rightSideWidth;
-
-	let statsLine: string;
-	if (totalNeeded <= width) {
-		const padding = " ".repeat(width - statsLeftWidth - rightSideWidth);
-		statsLine = statsLeft + padding + rightSide;
-	} else {
-		const availableForRight = width - statsLeftWidth - minPadding;
-		if (availableForRight > 0) {
-			const truncatedRight = measure.truncate(rightSide, availableForRight, "");
-			const truncatedRightWidth = measure.visibleWidth(truncatedRight);
-			const padding = " ".repeat(Math.max(0, width - statsLeftWidth - truncatedRightWidth));
-			statsLine = statsLeft + padding + truncatedRight;
-		} else {
-			statsLine = statsLeft;
-		}
-	}
-
-	// statsLeft may contain color codes (the context field) that reset an outer
-	// dim wrapper, so dim the parts before and after it independently.
-	const dimStatsLeft = theme.fg("dim", statsLeft);
-	const remainder = statsLine.slice(statsLeft.length);
-	return dimStatsLeft + theme.fg("dim", remainder);
-}
-
-/** Line 1: dim cwd (home collapsed), git branch in parens, session name. */
-export function buildPwdLine(
-	cwd: string,
-	home: string | undefined,
-	branch: string | null,
-	sessionName: string | undefined,
-	width: number,
-	measure: Measure,
-	theme: ThemeLike,
-): string {
-	let pwd = formatCwdForFooter(cwd, home);
-	if (branch) pwd = `${pwd} (${branch})`;
-	if (sessionName) pwd = `${pwd} • ${sessionName}`;
-	return measure.truncate(theme.fg("dim", pwd), width, theme.fg("dim", "..."));
-}
-
-/** Line 3: extension statuses sorted by key, sanitized, space-joined. */
-export function buildStatusLine(
-	statuses: ReadonlyMap<string, string>,
-	width: number,
-	measure: Measure,
-	theme: ThemeLike,
-): string | undefined {
-	if (statuses.size === 0) return undefined;
-	const sortedStatuses = Array.from(statuses.entries())
-		.sort(([a], [b]) => a.localeCompare(b))
-		.map(([, text]) => sanitizeStatusText(text));
-	return measure.truncate(sortedStatuses.join(" "), width, theme.fg("dim", "..."));
-}

package/src/footer.ts

@@ -1,139 +0,0 @@
-/**
- * Custom footer installer: pi-plus takes over pi's footer via
- * ctx.ui.setFooter() and replicates the built-in rendering (see
- * footer-render.ts) with the CC-exact "% used of threshold" in the context
- * field.
- *
- * Contract with pi: the setFooter factory receives (tui, theme, footerData);
- * pi disposes the previous custom footer before installing ours, and
- * setFooter(undefined) restores the built-in footer. pi-plus must therefore
- * be the ONLY extension calling setFooter — another caller silently replaces
- * this footer (that is how better-claude-code-ui hid the status line).
- *
- * The usage snapshot is memoized: tokenCountWithEstimation is O(content) and
- * renders fire on every keystroke, so we recompute only when the session leaf
- * or the model changes.
- */
-
-import {
-	type Component,
-	type TUI,
-	truncateToWidth,
-	visibleWidth,
-} from "@earendil-works/pi-tui";
-import type { ExtensionContext, ReadonlyFooterDataProvider, Theme } from "@earendil-works/pi-coding-agent";
-import { computePluginContextUsage, type PluginContextUsage } from "./context-usage.ts";
-import {
-	buildContextField,
-	buildPwdLine,
-	buildStatsLine,
-	buildStatusLine,
-	computeUsageTotals,
-	type Measure,
-} from "./footer-render.ts";
-import { loadPiPlusSettings } from "./settings.ts";
-
-const measure: Measure = {
-	truncate: truncateToWidth,
-	visibleWidth,
-};
-
-interface FooterDeps {
-	ctx: ExtensionContext;
-	theme: Theme;
-	footerData: ReadonlyFooterDataProvider;
-}
-
-export class PiPlusFooterComponent implements Component {
-	private deps: FooterDeps;
-	private snapshot: {
-		leafId: string | null | undefined;
-		modelId: string | undefined;
-		usage: PluginContextUsage | undefined;
-	} = {
-		leafId: undefined,
-		modelId: undefined,
-		usage: undefined,
-	};
-	private disposeHook: (() => void) | undefined;
-
-	constructor(deps: FooterDeps) {
-		this.deps = deps;
-	}
-
-	/** pi calls dispose() before replacing the footer — release our subscriptions. */
-	onDispose(hook: () => void): void {
-		this.disposeHook = hook;
-	}
-
-	invalidate(): void {
-		// No-op: all data is pulled fresh per render (same as pi's built-in footer).
-	}
-
-	dispose(): void {
-		this.disposeHook?.();
-	}
-
-	private getUsage(): PluginContextUsage | undefined {
-		const { ctx } = this.deps;
-		const leafId = ctx.sessionManager.getLeafId();
-		const modelId = ctx.model?.id;
-		if (this.snapshot.leafId !== leafId || this.snapshot.modelId !== modelId) {
-			this.snapshot = { leafId, modelId, usage: computePluginContextUsage(ctx, loadPiPlusSettings()) };
-		}
-		return this.snapshot.usage;
-	}
-
-	render(width: number): string[] {
-		const { ctx, theme, footerData } = this.deps;
-
-		const lines = [
-			buildPwdLine(ctx.cwd, process.env.HOME || process.env.USERPROFILE, footerData.getGitBranch(), ctx.sessionManager.getSessionName(), width, measure, theme),
-		];
-
-		const { totals, latestCacheHitRate } = computeUsageTotals(ctx.sessionManager.getEntries());
-		const model = ctx.model;
-		lines.push(
-			buildStatsLine(
-				{
-					totals,
-					latestCacheHitRate,
-					contextField: buildContextField(this.getUsage(), theme),
-					usingKimiCoding: model?.provider === "kimi-coding",
-					modelName: model?.id || "no-model",
-					modelReasoning: model?.reasoning ?? false,
-					thinkingLevel: ctx.thinkingLevel,
-					provider: model?.provider,
-					availableProviderCount: footerData.getAvailableProviderCount(),
-				},
-				width,
-				measure,
-				theme,
-			),
-		);
-
-		const statusLine = buildStatusLine(footerData.getExtensionStatuses(), width, measure, theme);
-		if (statusLine !== undefined) lines.push(statusLine);
-
-		return lines;
-	}
-}
-
-/**
- * Install (or, when the `customFooter` setting is false, explicitly restore)
- * pi's footer. Called on session_start — pi's resetExtensionUI() drops custom
- * footers on session switch and /reload, so this re-asserts each session.
- */
-export function installFooter(ctx: ExtensionContext): void {
-	if (ctx.mode !== "tui") return;
-	if (loadPiPlusSettings().customFooter === false) {
-		ctx.ui.setFooter(undefined);
-		return;
-	}
-	ctx.ui.setFooter((tui: TUI, theme: Theme, footerData: ReadonlyFooterDataProvider) => {
-		const component = new PiPlusFooterComponent({ ctx, theme, footerData });
-		const unsubscribe = footerData.onBranchChange(() => tui.requestRender());
-		component.onDispose(unsubscribe);
-		return component;
-	});
-}