feat(ai): complete models runtime migration

2026-06-23 15:29:17 +02:00
parent 470a4736a3
commit 129eb460cd
47 changed files with 1502 additions and 576 deletions
@@ -0,0 +1,108 @@
+import type { ApiKeyAuth, ApiKeyCredential, AuthContext } from "../auth/types.ts";
+import type { Api, ImagesApi, ImagesModel, Model, ProviderEnv } from "../types.ts";
+
+const CLOUDFLARE_API_KEY = "CLOUDFLARE_API_KEY";
+const CLOUDFLARE_ACCOUNT_ID = "CLOUDFLARE_ACCOUNT_ID";
+const CLOUDFLARE_GATEWAY_ID = "CLOUDFLARE_GATEWAY_ID";
+
+type CloudflareAuthKind = "workers-ai" | "ai-gateway";
+
+async function resolveValue(input: {
+	name: string;
+	ctx: AuthContext;
+	credential: ApiKeyCredential | undefined;
+}): Promise<string | undefined> {
+	if (input.credential) {
+		if (input.name === CLOUDFLARE_API_KEY) return input.credential.key;
+		return input.credential.metadata?.[input.name];
+	}
+	return input.ctx.env(input.name);
+}
+
+function resolveCloudflareBaseUrl(
+	model: Model<Api> | ImagesModel<ImagesApi>,
+	accountId: string,
+	gatewayId: string | undefined,
+): string {
+	return model.baseUrl
+		.replaceAll(`{${CLOUDFLARE_ACCOUNT_ID}}`, accountId)
+		.replaceAll(`{${CLOUDFLARE_GATEWAY_ID}}`, gatewayId ?? "");
+}
+
+async function resolveCloudflareEnv(input: {
+	kind: CloudflareAuthKind;
+	model: Model<Api> | ImagesModel<ImagesApi>;
+	ctx: AuthContext;
+	credential: ApiKeyCredential | undefined;
+}): Promise<{ apiKey: string; env: ProviderEnv; baseUrl: string; source: string } | undefined> {
+	const apiKey = await resolveValue({ name: CLOUDFLARE_API_KEY, ctx: input.ctx, credential: input.credential });
+	const accountId = await resolveValue({ name: CLOUDFLARE_ACCOUNT_ID, ctx: input.ctx, credential: input.credential });
+	const gatewayId =
+		input.kind === "ai-gateway"
+			? await resolveValue({ name: CLOUDFLARE_GATEWAY_ID, ctx: input.ctx, credential: input.credential })
+			: undefined;
+
+	if (!apiKey || !accountId || (input.kind === "ai-gateway" && !gatewayId)) return undefined;
+
+	return {
+		apiKey,
+		env: {
+			CLOUDFLARE_ACCOUNT_ID: accountId,
+			...(gatewayId ? { CLOUDFLARE_GATEWAY_ID: gatewayId } : {}),
+		},
+		baseUrl: resolveCloudflareBaseUrl(input.model, accountId, gatewayId),
+		source: input.credential ? "stored credential" : CLOUDFLARE_API_KEY,
+	};
+}
+
+export function cloudflareWorkersAIAuth(): ApiKeyAuth {
+	return {
+		name: "Cloudflare API key",
+		login: async (callbacks) => {
+			const key = await callbacks.prompt({ type: "secret", message: "Enter Cloudflare API key" });
+			const accountId = await callbacks.prompt({ type: "text", message: "Enter Cloudflare account ID" });
+			return { type: "api-key", key, metadata: { CLOUDFLARE_ACCOUNT_ID: accountId } };
+		},
+		resolve: async ({ model, ctx, credential }) => {
+			const resolved = await resolveCloudflareEnv({ kind: "workers-ai", model, ctx, credential });
+			if (!resolved) return undefined;
+			return {
+				auth: { apiKey: resolved.apiKey, baseUrl: resolved.baseUrl },
+				env: resolved.env,
+				source: resolved.source,
+			};
+		},
+	};
+}
+
+export function cloudflareAIGatewayAuth(): ApiKeyAuth {
+	return {
+		name: "Cloudflare API key",
+		login: async (callbacks) => {
+			const key = await callbacks.prompt({ type: "secret", message: "Enter Cloudflare API key" });
+			const accountId = await callbacks.prompt({ type: "text", message: "Enter Cloudflare account ID" });
+			const gatewayId = await callbacks.prompt({ type: "text", message: "Enter Cloudflare AI Gateway ID" });
+			return {
+				type: "api-key",
+				key,
+				metadata: { CLOUDFLARE_ACCOUNT_ID: accountId, CLOUDFLARE_GATEWAY_ID: gatewayId },
+			};
+		},
+		resolve: async ({ model, ctx, credential }) => {
+			const resolved = await resolveCloudflareEnv({ kind: "ai-gateway", model, ctx, credential });
+			if (!resolved) return undefined;
+			return {
+				auth: {
+					headers: {
+						"cf-aig-authorization": `Bearer ${resolved.apiKey}`,
+						Authorization: null,
+						"x-api-key": null,
+					},
+					baseUrl: resolved.baseUrl,
+				},
+				env: resolved.env,
+				source: resolved.source,
+			};
+		},
+	};
+}