zelari-code 0.1.0

package/dist/cli/keyValidator.js

@@ -0,0 +1,83 @@
+/**
+ * keyValidator — minimal OpenAI-compatible key liveness probe (v3-F).
+ *
+ * Strategy: ping the provider's `/v1/models` endpoint with the resolved key.
+ * This is the standard "is my API key alive?" probe for OpenAI-compatible
+ * providers (MiniMax, GLM, Grok, openai-compatible, custom). All five
+ * providers in `PROVIDERS` ship a `/v1/models` endpoint that:
+ *   - 200 with a model list → key is valid
+ *   - 401 → unauthorized (key revoked/expired)
+ *   - 403 → forbidden (key lacks scope)
+ *   - 5xx → upstream problem (we can't tell if the key is good)
+ *   - network error / timeout → caller should retry
+ *
+ * Why a separate module: F.2 scope says key validation lives in its own file
+ * so it can be invoked from:
+ *   - `/provider <id> status` (manual user-driven check)
+ *   - resolveApiKeyWithMeta (background check after a 401 — future, deferred)
+ *   - tests (mock fetch)
+ *
+ * @see docs/plans/2026-06-29-anathema-coder-v3-F.md (F.2)
+ * @see electron/cli/keyStore.ts (ProviderSpec.baseUrl)
+ */
+import { getProviderSpec } from './keyStore.js';
+/**
+ * Validate an API key by pinging the provider's models endpoint.
+ *
+ * Returns `{ ok: true, skipped: true }` for providers without a baseUrl
+ * (openai-compatible / custom when no customEndpoint is set — handled by the
+ * caller via `getCustomEndpoint`). For now, those providers are skipped.
+ *
+ * @throws Never — every failure is encoded in the returned `ValidateResult`.
+ */
+export async function validateApiKey(providerId, apiKey, options = {}) {
+    const start = (options.now ?? Date.now)();
+    const spec = getProviderSpec(providerId);
+    if (!spec || !spec.baseUrl) {
+        return { ok: true, skipped: true, reason: 'no_base_url' };
+    }
+    const probeUrl = options.probeUrl ?? `${spec.baseUrl.replace(/\/+$/, '')}/models`;
+    const timeoutMs = options.timeoutMs ?? 5_000;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    // AbortController for timeout — AbortSignal.timeout is not available on all
+    // Node 18 builds, so use the explicit controller form.
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    try {
+        const response = await fetchImpl(probeUrl, {
+            method: 'GET',
+            headers: {
+                Authorization: `Bearer ${apiKey}`,
+                Accept: 'application/json',
+            },
+            signal: controller.signal,
+        });
+        const durationMs = (options.now ?? Date.now)() - start;
+        const status = response.status;
+        if (status >= 200 && status < 300) {
+            return { ok: true, status, durationMs };
+        }
+        if (status === 401) {
+            return { ok: false, reason: 'unauthorized', status, detail: `HTTP 401`, durationMs };
+        }
+        if (status === 403) {
+            return { ok: false, reason: 'forbidden', status, detail: `HTTP 403`, durationMs };
+        }
+        return { ok: false, reason: 'unknown', status, detail: `HTTP ${status}`, durationMs };
+    }
+    catch (err) {
+        const durationMs = (options.now ?? Date.now)() - start;
+        const msg = err instanceof Error ? err.message : String(err);
+        const isAbort = controller.signal.aborted;
+        return {
+            ok: false,
+            reason: isAbort ? 'network' : 'network',
+            detail: isAbort ? `timeout after ${timeoutMs}ms` : msg,
+            durationMs,
+        };
+    }
+    finally {
+        clearTimeout(timer);
+    }
+}
+//# sourceMappingURL=keyValidator.js.map

package/dist/cli/keyValidator.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"keyValidator.js","sourceRoot":"","sources":["../../src/cli/keyValidator.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,eAAe,EAAqB,MAAM,eAAe,CAAC;AAmCnE;;;;;;;;GAQG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,UAAwB,EACxB,MAAc,EACd,UAA2B,EAAE;IAE7B,MAAM,KAAK,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IAC1C,MAAM,IAAI,GAAG,eAAe,CAAC,UAAU,CAAC,CAAC;IACzC,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,aAAa,EAAE,CAAC;IAC5D,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,SAAS,CAAC;IAClF,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAE7C,4EAA4E;IAC5E,uDAAuD;IACvD,MAAM,UAAU,GAAG,IAAI,eAAe,EAAE,CAAC;IACzC,MAAM,KAAK,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,UAAU,CAAC,KAAK,EAAE,EAAE,SAAS,CAAC,CAAC;IAC9D,IAAI,CAAC;QACH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,QAAQ,EAAE;YACzC,MAAM,EAAE,KAAK;YACb,OAAO,EAAE;gBACP,aAAa,EAAE,UAAU,MAAM,EAAE;gBACjC,MAAM,EAAE,kBAAkB;aAC3B;YACD,MAAM,EAAE,UAAU,CAAC,MAAM;SAC1B,CAAC,CAAC;QACH,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;QACvD,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAClC,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC;QAC1C,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACvF,CAAC;QACD,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;YACnB,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,MAAM,EAAE,UAAU,EAAE,UAAU,EAAE,CAAC;QACpF,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,MAAM,EAAE,EAAE,UAAU,EAAE,CAAC;IACxF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,UAAU,GAAG,CAAC,OAAO,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,GAAG,KAAK,CAAC;QACvD,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,MAAM,OAAO,GAAG,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;QAC1C,OAAO;YACL,EAAE,EAAE,KAAK;YACT,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS;YACvC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC,iBAAiB,SAAS,IAAI,CAAC,CAAC,CAAC,GAAG;YACtD,UAAU;SACX,CAAC;IACJ,CAAC;YAAS,CAAC;QACT,YAAY,CAAC,KAAK,CAAC,CAAC;IACtB,CAAC;AACH,CAAC"}