feat(coding-agent): merge origin/main into model runtime facade

2026-07-15 12:25:36 +02:00
parent 9993c96907 f4e9ca7466
commit cd7cad4ee2
119 changed files with 4275 additions and 631 deletions
@@ -0,0 +1,151 @@
+import { existsSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { InMemoryModelsStore } from "@earendil-works/pi-ai";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { AuthStorage } from "../src/core/auth-storage.ts";
+import { ModelRuntime } from "../src/core/model-runtime.ts";
+import { RADIUS_PROVIDER_ID } from "../src/core/radius.ts";
+
+function radiusOAuthCredential(gatewayBaseUrl: string) {
+	return {
+		type: "oauth" as const,
+		access: "access-token",
+		refresh: "refresh-token",
+		expires: Date.now() + 60 * 60 * 1000,
+		gatewayConfig: radiusConfig(gatewayBaseUrl),
+	};
+}
+
+function radiusConfig(baseUrl: string) {
+	return {
+		baseUrl,
+		models: [
+			{
+				id: "auto",
+				name: "Radius Auto",
+				reasoning: false,
+				input: ["text" as const],
+				cost: { input: 1, output: 2, cacheRead: 0.1, cacheWrite: 0.2 },
+				contextWindow: 128000,
+				maxTokens: 16384,
+			},
+		],
+	};
+}
+
+let tempDir: string;
+
+beforeEach(() => {
+	tempDir = join(tmpdir(), `pi-test-radius-${Date.now()}-${Math.random().toString(36).slice(2)}`);
+	mkdirSync(tempDir, { recursive: true });
+});
+
+afterEach(() => {
+	vi.restoreAllMocks();
+	if (tempDir && existsSync(tempDir)) rmSync(tempDir, { recursive: true });
+});
+
+describe("Radius provider", () => {
+	it("restores the legacy credential catalog without network access", async () => {
+		const runtime = await ModelRuntime.create({
+			credentials: AuthStorage.inMemory({
+				[RADIUS_PROVIDER_ID]: radiusOAuthCredential("https://radius.example.com/v1"),
+			}),
+			modelsStore: new InMemoryModelsStore(),
+			modelsPath: null,
+			allowModelNetwork: false,
+		});
+
+		const model = runtime.getModel(RADIUS_PROVIDER_ID, "auto");
+		expect(model).toMatchObject({ api: "pi-messages", baseUrl: "https://radius.example.com/v1" });
+		expect(runtime.getProvider(RADIUS_PROVIDER_ID)?.name).toBe("Radius");
+		expect(runtime.hasConfiguredAuth(RADIUS_PROVIDER_ID)).toBe(true);
+	});
+
+	it("fetches and stores the catalog for configured Radius auth", async () => {
+		vi.spyOn(globalThis, "fetch").mockResolvedValue(
+			new Response(JSON.stringify(radiusConfig("https://radius.example.com/v1")), {
+				status: 200,
+				headers: { "content-type": "application/json" },
+			}),
+		);
+		const modelsStore = new InMemoryModelsStore();
+		const credentials = AuthStorage.inMemory({
+			[RADIUS_PROVIDER_ID]: {
+				type: "oauth",
+				access: "access-token",
+				refresh: "refresh-token",
+				expires: Date.now() + 60 * 60 * 1000,
+			},
+		});
+		const runtime = await ModelRuntime.create({
+			credentials,
+			modelsStore,
+			modelsPath: null,
+			allowModelNetwork: true,
+		});
+
+		expect(runtime.getModel(RADIUS_PROVIDER_ID, "auto")).toBeDefined();
+		expect(await modelsStore.read(RADIUS_PROVIDER_ID)).toHaveLength(1);
+		expect(vi.mocked(fetch).mock.calls[0]?.[1]?.headers).toMatchObject({ authorization: "Bearer access-token" });
+	});
+
+	it("does not fetch or expose Radius models without configured auth", async () => {
+		const fetchSpy = vi.spyOn(globalThis, "fetch");
+		const runtime = await ModelRuntime.create({
+			credentials: AuthStorage.inMemory(),
+			modelsStore: new InMemoryModelsStore(),
+			modelsPath: null,
+			allowModelNetwork: true,
+		});
+
+		expect(runtime.getModels(RADIUS_PROVIDER_ID)).toEqual([]);
+		expect(fetchSpy.mock.calls.some(([url]) => String(url).includes("radius.pi.dev/v1/config"))).toBe(false);
+	});
+
+	it("supports custom Radius gateways from models.json", async () => {
+		vi.spyOn(globalThis, "fetch").mockResolvedValue(
+			new Response(JSON.stringify(radiusConfig("http://localhost:8788/v1")), { status: 200 }),
+		);
+		const modelsPath = join(tempDir, "models.json");
+		writeFileSync(
+			modelsPath,
+			JSON.stringify({
+				providers: { "radius-dev": { name: "Radius (dev)", baseUrl: "http://localhost:8788", oauth: "radius" } },
+			}),
+		);
+		const runtime = await ModelRuntime.create({
+			credentials: AuthStorage.inMemory({
+				"radius-dev": {
+					type: "oauth",
+					access: "access-token",
+					refresh: "refresh-token",
+					expires: Date.now() + 60 * 60 * 1000,
+				},
+			}),
+			modelsStore: new InMemoryModelsStore(),
+			modelsPath,
+			allowModelNetwork: true,
+		});
+
+		expect(runtime.getModel("radius-dev", "auto")).toMatchObject({
+			api: "pi-messages",
+			baseUrl: "http://localhost:8788/v1",
+		});
+		expect(runtime.getProvider("radius-dev")?.name).toBe("Radius (dev)");
+	});
+
+	it("requires baseUrl for custom Radius gateways", async () => {
+		const modelsPath = join(tempDir, "models.json");
+		writeFileSync(modelsPath, JSON.stringify({ providers: { "radius-dev": { oauth: "radius" } } }));
+		const runtime = await ModelRuntime.create({
+			credentials: AuthStorage.inMemory(),
+			modelsStore: new InMemoryModelsStore(),
+			modelsPath,
+			allowModelNetwork: false,
+		});
+
+		expect(runtime.getError()).toContain('"baseUrl" is required when "oauth" is set');
+	});
+});