thaipass 0.1.5 → 0.1.7

package/README.md

@@ -13,7 +13,7 @@ import { createAipass } from "thaipass";
 const aipass = createAipass({ cookie: process.env.AIPASS_COOKIE ?? "" });
 
 const result = streamText({
-  model: aipass("claude-sonnet-5@default"),
+  model: aipass("claude-sonnet-5@azure"),
   prompt: "hi",
 });
 ```

package/dist/index.d.ts

@@ -8,7 +8,7 @@ import { z } from "zod";
  * drift warning. A media id needs per-model knowledge the catalog does not
  * carry, so the media lists below stay the gate for their routes.
  */
-declare const CHAT_MODELS: readonly ["gpt-5.6-terra", "gpt-5.6-sol", "claude-opus-5@azure", "claude-sonnet-5@default", "gemini-3.1-pro-preview", "gemini-3.7-flash", "gemini-3.1-flash-lite", "glm-5.2", "grok-4.3", "DeepSeek-V3.2", "minimax-m2-maas", "qwen3-next-80b-a3b-instruct-maas", "Kimi-K2.7-Code", "Mistral-Large-3", "Mistral-Medium-3", "Llama-4-Scout-17B-16E-Instruct-1", "Llama-4-Maverick-17B-128E-Instruct-FP8-1", "pathumma-thaillm-8b", "openai-deep-research", "openthai2.0-legal@jts", "sonar", "sonar-reasoning-pro", "sonar-deep-research"];
+declare const CHAT_MODELS: readonly ["gpt-5.6-terra", "gpt-5.6-sol", "claude-opus-5@azure", "claude-sonnet-5@azure", "gemini-3.1-pro-preview", "gemini-3.8-flash", "gemini-3.5-flash-lite", "glm-5.3", "grok-4.3", "DeepSeek-V3.2", "minimax-m2-maas", "qwen3-next-80b-a3b-instruct-maas", "Kimi-K2.7-Code", "Mistral-Large-3", "Mistral-Medium-3", "Llama-4-Scout-17B-16E-Instruct-1", "Llama-4-Maverick-17B-128E-Instruct-FP8-1", "pathumma-thaillm-8b", "openai-deep-research", "openthai2.0-legal", "openthai2.0-legal@jts", "sonar", "sonar-reasoning-pro", "sonar-deep-research"];
 type KnownChatModel = (typeof CHAT_MODELS)[number];
 //#endregion
 //#region ../core/src/lib/config.d.ts
@@ -24,7 +24,10 @@ interface UpstreamLogger {
 /** The known ids complete in an editor; any other string is left to the catalog. */
 export type AipassModelId = KnownChatModel | (string & Record<never, never>);
 export interface AipassProviderSettings {
-  /** The Cookie header of a browser signed in to AI Pass. */
+  /**
+   * The Cookie header of a browser signed in to AI Pass, or a thaipass token
+   * when this process holds the `THAIPASS_TOKEN_KEY` that sealed it.
+   */
   readonly cookie: string;
   /** Process-wide; defaults to https://de.aipass.net. */
   readonly origin?: string;

package/dist/index.js

@@ -1,6 +1,6 @@
 import { APICallError, NoSuchModelError } from "@ai-sdk/provider";
 import { z } from "zod";
-import { createHash } from "node:crypto";
+import { createDecipheriv, createHash } from "node:crypto";
 import { parseJsonEventStream } from "@ai-sdk/provider-utils";
 //#region ../core/src/aipass/models.ts
 /**
@@ -14,11 +14,11 @@ const CHAT_MODELS = [
 	"gpt-5.6-terra",
 	"gpt-5.6-sol",
 	"claude-opus-5@azure",
-	"claude-sonnet-5@default",
+	"claude-sonnet-5@azure",
 	"gemini-3.1-pro-preview",
-	"gemini-3.7-flash",
-	"gemini-3.1-flash-lite",
-	"glm-5.2",
+	"gemini-3.8-flash",
+	"gemini-3.5-flash-lite",
+	"glm-5.3",
 	"grok-4.3",
 	"DeepSeek-V3.2",
 	"minimax-m2-maas",
@@ -30,6 +30,7 @@ const CHAT_MODELS = [
 	"Llama-4-Maverick-17B-128E-Instruct-FP8-1",
 	"pathumma-thaillm-8b",
 	"openai-deep-research",
+	"openthai2.0-legal",
 	"openthai2.0-legal@jts",
 	"sonar",
 	"sonar-reasoning-pro",
@@ -43,6 +44,7 @@ const CHAT_MODELS = [
 const IMAGE_MODELS = [
 	"gpt-image-2",
 	"gemini-3-pro-image",
+	"gemini-3.1-flash-image",
 	"gemini-2.5-flash-image",
 	"seedream-4.0",
 	"seedream-5.0-lite"
@@ -72,7 +74,7 @@ z.string().min(1, { error: "model must not be empty, see GET /v1/models" }).meta
 	description: "A chat model id from GET /v1/models. Ids are case-sensitive and Claude carries a @provider suffix.",
 	examples: [...CHAT_MODELS]
 });
-const DEFAULT_MODEL = "gemini-3.1-flash-lite";
+const DEFAULT_MODEL = "gemini-3.5-flash-lite";
 const ANY_MODELS = [...CHAT_MODELS, ...MEDIA_MODELS];
 z.enum(ANY_MODELS, { error: "unknown model, see GET /v1/models" });
 const current = {
@@ -86,6 +88,185 @@ const configure = (changes) => {
 	Object.assign(current, changes);
 };
 //#endregion
+//#region ../core/src/auth/seal.ts
+/**
+* Login with thaipass, without a database.
+*
+* An app that wants to talk to this gateway has to prove it may drive someone's
+* AI Pass account. The obvious way is to hand it the session cookie, which is
+* what every client does today: the key in a Codex config or a Claude Code
+* environment variable is the whole account, it cannot be revoked, and it has
+* to be copied again by hand each time AI Pass rotates it.
+*
+* A thaipass token is that cookie sealed under a key only the gateway holds.
+* The app carries the sealed bytes and can read nothing in them; the gateway
+* unseals per request and forwards the cookie upstream as before. Nothing is
+* stored anywhere, so a deployment stays as stateless as it is now, and the
+* promise the README makes — that the gateway keeps no credential — still
+* holds: what it keeps is the key that opens one, not the credential.
+*
+* The same envelope carries the authorization code in the middle of a login,
+* with the PKCE challenge and the app's redirect inside it, so a code cannot be
+* replayed as an access token or spent by another app.
+*/
+const ALGORITHM = "aes-256-gcm";
+const IV_BYTES = 12;
+const TAG_BYTES = 16;
+const KEY_BYTES = 32;
+const TOKEN_PREFIX = "tp_v1_";
+const CODE_PREFIX = "tp_c1_";
+/** The wire shape, with short names because the envelope travels in a header. */
+const payloadSchema = z.object({
+	a: z.string().optional(),
+	c: z.string(),
+	h: z.string().optional(),
+	r: z.string().optional(),
+	s: z.string().optional(),
+	sc: z.string().optional(),
+	x: z.number()
+});
+const SECOND_MS = 1e3;
+/** Bytes that authenticated under our own key are still parsed, not trusted. */
+const openPayload = (plain) => {
+	try {
+		return payloadSchema.parse(JSON.parse(plain));
+	} catch {
+		return null;
+	}
+};
+const NO_KEY$1 = "this deployment issues no thaipass tokens: set THAIPASS_TOKEN_KEY to a 32 byte base64 key";
+const MALFORMED = "the token is not a thaipass token";
+const TAMPERED = "the token does not open: it is for another deployment, or it was altered";
+const EXPIRED = "the token has expired, sign in again";
+const prefixFor = (purpose) => purpose === "code" ? CODE_PREFIX : TOKEN_PREFIX;
+/**
+* The key as bytes, or null when this deployment was never given one. A
+* missing key is not an error: a personal gateway that only ever sees raw
+* cookies needs none, and every path here falls back to that.
+*/
+const tokenKey = () => {
+	const raw = process.env.THAIPASS_TOKEN_KEY?.trim();
+	if (!raw) return null;
+	const key = Buffer.from(raw, "base64");
+	return key.length === KEY_BYTES ? key : null;
+};
+const issuesTokens = () => tokenKey() !== null;
+const isSealed = (value, purpose = "access") => value.startsWith(prefixFor(purpose));
+const unseal = (value, purpose = "access") => {
+	const prefix = prefixFor(purpose);
+	if (!value.startsWith(prefix)) return {
+		ok: false,
+		reason: MALFORMED
+	};
+	const key = tokenKey();
+	if (!key) return {
+		ok: false,
+		reason: NO_KEY$1
+	};
+	const sealed = Buffer.from(value.slice(prefix.length), "base64url");
+	if (sealed.length <= 28) return {
+		ok: false,
+		reason: MALFORMED
+	};
+	const iv = sealed.subarray(0, IV_BYTES);
+	const body = sealed.subarray(IV_BYTES, sealed.length - TAG_BYTES);
+	const tag = sealed.subarray(sealed.length - TAG_BYTES);
+	let plain;
+	try {
+		const decipher = createDecipheriv(ALGORITHM, key, iv);
+		decipher.setAAD(Buffer.from(purpose, "utf-8"));
+		decipher.setAuthTag(tag);
+		plain = decipher.update(body, void 0, "utf-8") + decipher.final("utf-8");
+	} catch {
+		return {
+			ok: false,
+			reason: TAMPERED
+		};
+	}
+	const payload = openPayload(plain);
+	if (payload === null) return {
+		ok: false,
+		reason: TAMPERED
+	};
+	if (payload.x * SECOND_MS <= Date.now()) return {
+		ok: false,
+		reason: EXPIRED
+	};
+	return {
+		claims: {
+			clientId: payload.a,
+			codeChallenge: payload.h,
+			cookie: payload.c,
+			expiresAt: payload.x,
+			redirectUri: payload.r,
+			scope: payload.sc,
+			subject: payload.s
+		},
+		ok: true
+	};
+};
+//#endregion
+//#region ../core/src/aipass/session.ts
+const SESSION_TOKEN = "__Secure-ai_passport_auth.session_token";
+const NO_TOKEN = `the credential carries no ${SESSION_TOKEN}, send the whole Cookie header from a logged-in browser session rather than the token on its own`;
+const withToken = (cookie, grant) => {
+	if (!cookie.includes(SESSION_TOKEN)) return {
+		ok: false,
+		reason: NO_TOKEN
+	};
+	return grant ? {
+		cookie,
+		grant,
+		ok: true
+	} : {
+		cookie,
+		ok: true
+	};
+};
+/**
+* Two credentials reach the same account. A thaipass token is the cookie
+* sealed under this deployment's key, which is what `thaipass login` hands an
+* app; a raw Cookie header is what a personal setup has always sent. Unsealing
+* happens here, once, so every route accepts either without knowing about it.
+*/
+const resolve = (value) => {
+	const credential = value.trim();
+	if (!isSealed(credential)) return withToken(credential);
+	const opened = unseal(credential);
+	if (!opened.ok) return {
+		ok: false,
+		reason: opened.reason
+	};
+	const { claims } = opened;
+	return withToken(claims.cookie, {
+		clientId: claims.clientId,
+		expiresAt: claims.expiresAt,
+		scope: claims.scope,
+		subject: claims.subject
+	});
+};
+/** A credential handed over directly, as the CLI reads it from the environment or a file. */
+const cookieFromValue = (value) => resolve(value);
+const CLIENT_ID_LENGTH = 16;
+const clientIdFromCookie = (cookie) => createHash("sha256").update(cookie).digest("hex").slice(0, CLIENT_ID_LENGTH);
+//#endregion
+//#region src/credential.ts
+/**
+* What `createAipass` will actually send upstream.
+*
+* `thaipass login` hands people a `tp_…` token now, so one will be pasted in
+* here sooner or later. The provider is not a gateway — it talks to AI Pass
+* directly — so a token is only usable in a process that also holds the key
+* that sealed it. When it does, the token opens; when it does not, saying so
+* beats letting AI Pass refuse the request for reasons of its own.
+*/
+const NO_KEY = "that is a thaipass token, and this provider talks to AI Pass directly. Give it the Cookie header, or set THAIPASS_TOKEN_KEY to the key that sealed the token.";
+const resolveCredential = (value) => {
+	const lookup = cookieFromValue(value);
+	if (lookup.ok) return lookup.cookie;
+	throw new Error(isSealed(value) && !issuesTokens() ? NO_KEY : lookup.reason);
+};
+//#endregion
 //#region ../core/src/lib/cache.ts
 const ttlCache = (ttlMs) => {
 	const entries = /* @__PURE__ */ new Map();
@@ -122,7 +303,13 @@ const browserPostHeaders = (cookie, referer, contentType) => ({
 });
 /** Headers for a JSON action made from inside one conversation's page. */
 const conversationJsonHeaders = (cookie, conversationId) => browserPostHeaders(cookie, `${config.origin}/chat/${conversationId}`, "application/json");
-const loadJson = async (path, schema, cookie, signal) => {
+/**
+* The same GET as {@link loadJson}, keeping why it failed. A caller that
+* answers an HTTP request needs the reason: "no catalog" reads identically
+* whether the cookie is dead, the network blinked, or upstream renamed a
+* field, and those want three different fixes.
+*/
+const loadJsonResult = async (path, schema, cookie, signal) => {
 	let payload;
 	try {
 		const response = await fetch(`${config.origin}${path}`, {
@@ -130,13 +317,29 @@ const loadJson = async (path, schema, cookie, signal) => {
 			redirect: "manual",
 			signal
 		});
-		if (!response.ok) return null;
+		if (!response.ok) return {
+			data: null,
+			failure: `upstream ${response.status}`
+		};
 		payload = await response.json();
 	} catch {
-		return null;
+		return {
+			data: null,
+			failure: "network"
+		};
 	}
 	const decoded = schema.safeParse(payload);
-	return decoded.success ? decoded.data : null;
+	return decoded.success ? {
+		data: decoded.data,
+		failure: null
+	} : {
+		data: null,
+		failure: "schema"
+	};
+};
+/** The body alone, for a loader whose caller has nowhere to put the reason. */
+const loadJson = async (path, schema, cookie, signal) => {
+	return (await loadJsonResult(path, schema, cookie, signal)).data;
 };
 //#endregion
 //#region ../core/src/aipass/catalog.ts
@@ -176,22 +379,36 @@ const reportDrift = (catalog) => {
 	});
 };
 const load = async (cookie, signal) => {
-	const listed = await loadJson(CATALOG_PATH, catalogSchema, cookie, signal);
-	if (!listed) return null;
-	return new Map(listed.data.map((entry) => [entry.id, {
-		free: entry.isFreeCredit ?? false,
-		ready: entry.ready ?? true,
-		thinking: entry.thinkingConfig?.supportedLevels ?? null
-	}]));
+	const { data: listed, failure } = await loadJsonResult(CATALOG_PATH, catalogSchema, cookie, signal);
+	if (!listed) return {
+		catalog: null,
+		failure
+	};
+	return {
+		catalog: new Map(listed.data.map((entry) => [entry.id, {
+			free: entry.isFreeCredit ?? false,
+			ready: entry.ready ?? true,
+			thinking: entry.thinkingConfig?.supportedLevels ?? null
+		}])),
+		failure: null
+	};
 };
-const fetchCatalog = async (clientId, cookie, signal) => {
+/** The catalog with the reason it is missing, for a caller that reports it. */
+const fetchCatalogResult = async (clientId, cookie, signal) => {
 	const cached = cache.get(clientId);
-	if (cached) return cached;
-	const catalog = await load(cookie, signal);
-	if (!catalog) return null;
-	cache.set(clientId, catalog);
-	reportDrift(catalog);
-	return catalog;
+	if (cached) return {
+		catalog: cached,
+		failure: null
+	};
+	const loaded = await load(cookie, signal);
+	if (!loaded.catalog) return loaded;
+	cache.set(clientId, loaded.catalog);
+	reportDrift(loaded.catalog);
+	return loaded;
+};
+/** The catalog alone, for a caller with nowhere to put the reason. */
+const fetchCatalog = async (clientId, cookie, signal) => {
+	return (await fetchCatalogResult(clientId, cookie, signal)).catalog;
 };
 //#endregion
 //#region ../core/src/aipass/refusal.ts
@@ -541,8 +758,6 @@ const settleCredits = async (cookie, before) => {
 		usage: toCreditUsage(start, after)
 	};
 };
-const CLIENT_ID_LENGTH = 16;
-const clientIdFromCookie = (cookie) => createHash("sha256").update(cookie).digest("hex").slice(0, CLIENT_ID_LENGTH);
 const thinkingLevelSchema = z.enum([
 	"low",
 	"medium",
@@ -983,12 +1198,29 @@ const roleLabel = (turn, names) => {
 const turnText = (turn) => {
 	return [turn.content.trim(), ...(turn.calls ?? []).map(renderCall)].filter((part) => part.length > 0).join("\n\n");
 };
+/**
+* Stands in for a caller who sent no system message, so the tool guide below
+* it reads as instruction rather than as a description of tools that live
+* somewhere else.
+*
+* Measured 2026-09-19 against ten models, one request at a time with the
+* conditions interleaved, five rounds each: with a single tool attached and
+* no system message, `gpt-5.6-sol` and `gpt-5.6-terra` never called it,
+* `gemini-3.1-pro-preview` and `glm-5.3` managed 2/5, `Kimi-K2.7-Code` 3/5
+* and `grok-4.3` 4/5. `gpt-5.6-sol` said why: "I can't access the
+* select_choice tool here". It could see the name, so the guide had arrived.
+* With one line of system ahead of it, all ten called the tool on every
+* round. Graders in the autoevals shape send one user message and no system
+* message, which is how this surfaced.
+*/
+const IMPLIED_SYSTEM = "You are an assistant with the tools described below. Call them when they apply.";
 const flattenPrompt = ({ tools, turns }) => {
 	const system = turns.filter((turn) => turn.role === "system").map((turn) => turn.content).filter((text) => text.length > 0).join("\n\n");
 	const convo = turns.filter((turn) => turn.role !== "system");
 	if (system.length === 0 && tools.length === 0 && convo.length === 1 && convo[0]?.role === "user" && convo[0].calls === void 0) return convo[0].content;
 	const blocks = [];
 	if (system.length > 0) blocks.push(system.trim());
+	else if (tools.length > 0) blocks.push(IMPLIED_SYSTEM);
 	if (tools.length > 0) blocks.push(renderToolGuide(tools));
 	const names = toolNames(convo);
 	const lines = [];
@@ -1473,6 +1705,7 @@ const aipassModel = (cookie, modelId) => ({
 //#endregion
 //#region src/index.ts
 const createAipass = (settings) => {
+	const cookie = resolveCredential(settings.cookie);
 	if (settings.origin !== void 0) configure({ origin: settings.origin });
 	if (settings.logger !== void 0) configure({ logger: settings.logger });
 	const languageModel = (modelId = DEFAULT_MODEL) => {
@@ -1480,7 +1713,7 @@ const createAipass = (settings) => {
 			modelId,
 			modelType: "languageModel"
 		});
-		return aipassModel(settings.cookie, modelId);
+		return aipassModel(cookie, modelId);
 	};
 	return Object.assign(languageModel, { languageModel });
 };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "thaipass",
-  "version": "0.1.5",
+  "version": "0.1.7",
   "description": "AI SDK provider for AI Pass, using your own session cookie.",
   "keywords": [
     "ai-sdk",