refactor(open-sse): registry consolidation + DRY media/oauth/adhoc cleanup

- Single-source registry: oauth clientId/tokenUrl, usage URLs, image/embed configs, search defaultModel, codex fixedPort, google token url derive. - Remove 29 unused OmniRoute providers (registry 100→71); media intact. - De-adhoc: codex literals → registry format/oauth flags; reasoningInject, image/embed openrouter headers + xai bodyFields config-driven. - Add REGISTRY_TEMPLATE.js + expand PROVIDER_DEFAULTS/schema JSDoc. - Baselines updated; PROVIDERS 62 + alias 90 byte-for-byte, golden snapshots. Co-authored-by: Cursor <cursoragent@cursor.com>
2026-06-14 13:15:48 +07:00
1 parent 9105dd0e25
commit bb9e9aa91f
@@ -1,8 +1,9 @@
 /**
- * OAuth Configuration Constants
+ * OAuth Configuration Constants — static data lives in registry, re-exported here for consumers.
 */
 import { platform, arch } from "os";
 import { ANTIGRAVITY_OAUTH_CLIENT, GOOGLE_OAUTH_CLIENT } from "open-sse/providers/shared.js";
+import { PROVIDER_OAUTH, PROVIDERS as REGISTRY_PROVIDERS } from "open-sse/providers/index.js";

 /**
 * Get the platform enum value based on the current OS.
@@ -18,101 +19,34 @@ function getOAuthPlatformEnum() {
 }

 // Claude OAuth Configuration (Authorization Code Flow with PKCE)
-export const CLAUDE_CONFIG = {
-  clientId: "9d1c250a-e61b-44d9-88ed-5944d1962f5e",
-  authorizeUrl: "https://claude.ai/oauth/authorize",
-  tokenUrl: "https://api.anthropic.com/v1/oauth/token",
-  scopes: ["org:create_api_key", "user:profile", "user:inference"],
-  codeChallengeMethod: "S256",
-};
+export const CLAUDE_CONFIG = { ...PROVIDER_OAUTH["claude"] };

 // Codex (OpenAI) OAuth Configuration (Authorization Code Flow with PKCE)
-export const CODEX_CONFIG = {
-  clientId: "app_EMoamEEZ73f0CkXaXp7hrann",
-  authorizeUrl: "https://auth.openai.com/oauth/authorize",
-  tokenUrl: "https://auth.openai.com/oauth/token",
-  scope: "openid profile email offline_access",
-  codeChallengeMethod: "S256",
-  // Additional OpenAI-specific params
-  extraParams: {
-    id_token_add_organizations: "true",
-    codex_cli_simplified_flow: "true",
-    originator: "codex_cli_rs",
-  },
-};
+export const CODEX_CONFIG = { ...PROVIDER_OAUTH["codex"] };

 // Gemini (Google) OAuth Configuration (Standard OAuth2)
-export const GEMINI_CONFIG = {
-  ...GOOGLE_OAUTH_CLIENT,
-  authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
-  tokenUrl: "https://oauth2.googleapis.com/token",
-  userInfoUrl: "https://www.googleapis.com/oauth2/v1/userinfo",
-  scopes: [
-    "https://www.googleapis.com/auth/cloud-platform",
-    "https://www.googleapis.com/auth/userinfo.email",
-    "https://www.googleapis.com/auth/userinfo.profile",
-  ],
-};
+// clientId/clientSecret from GOOGLE_OAUTH_CLIENT (shared.js) — not stored in registry
+export const GEMINI_CONFIG = { ...GOOGLE_OAUTH_CLIENT, ...PROVIDER_OAUTH["gemini-cli"] };

 // Qwen OAuth Configuration (Device Code Flow with PKCE)
-export const QWEN_CONFIG = {
-  clientId: "f0304373b74a44d2b584a3fb70ca9e56",
-  deviceCodeUrl: "https://chat.qwen.ai/api/v1/oauth2/device/code",
-  tokenUrl: "https://chat.qwen.ai/api/v1/oauth2/token",
-  scope: "openid profile email model.completion",
-  codeChallengeMethod: "S256",
-};
+export const QWEN_CONFIG = { ...PROVIDER_OAUTH["qwen"] };

 // Qoder OAuth Configuration (Device Token Flow with PKCE).
 // Device tokens are long-lived (~30 days for access, ~360 for refresh).
 // The upstream refresh endpoint at center.qoder.sh returns 403 for our
 // flow — we accept that and surface it to the user as "re-login" instead
 // of attempting to silently rotate.
-export const QODER_CONFIG = {
-  openApiBaseUrl: "https://openapi.qoder.sh",
-  centerBaseUrl: "https://center.qoder.sh",
-  chatBaseUrl: "https://api3.qoder.sh",
-  deviceTokenUrl: "https://openapi.qoder.sh/api/v1/deviceToken/poll",
-  refreshUrl: "https://center.qoder.sh/algo/api/v3/user/refresh_token",
-  userInfoUrl: "https://openapi.qoder.sh/api/v1/userinfo",
-  quotaUsageUrl: "https://openapi.qoder.sh/api/v2/quota/usage",
-  loginUrl: "https://qoder.com/device/selectAccounts",
-};
+export const QODER_CONFIG = { ...PROVIDER_OAUTH["qoder"] };

 // iFlow OAuth Configuration (Authorization Code)
-export const IFLOW_CONFIG = {
-  clientId: "10009311001",
-  clientSecret: "4Z3YjXycVsQvyGF1etiNlIBB4RsqSDtW",
-  authorizeUrl: "https://iflow.cn/oauth",
-  tokenUrl: "https://iflow.cn/oauth/token",
-  userInfoUrl: "https://iflow.cn/api/oauth/getUserInfo",
-  extraParams: {
-    loginMethod: "phone",
-    type: "phone",
-  },
-};
+export const IFLOW_CONFIG = { ...PROVIDER_OAUTH["iflow"] };

 // Antigravity OAuth Configuration (Standard OAuth2 with Google)
+// clientId/clientSecret from ANTIGRAVITY_OAUTH_CLIENT (shared.js) — not stored in registry
+// loadCodeAssistClientMetadata is dynamic (runtime platform detection)
 export const ANTIGRAVITY_CONFIG = {
  ...ANTIGRAVITY_OAUTH_CLIENT,
-  authorizeUrl: "https://accounts.google.com/o/oauth2/v2/auth",
-  tokenUrl: "https://oauth2.googleapis.com/token",
-  userInfoUrl: "https://www.googleapis.com/oauth2/v1/userinfo",
-  scopes: [
-    "https://www.googleapis.com/auth/cloud-platform",
-    "https://www.googleapis.com/auth/userinfo.email",
-    "https://www.googleapis.com/auth/userinfo.profile",
-    "https://www.googleapis.com/auth/cclog",
-    "https://www.googleapis.com/auth/experimentsandconfigs",
-  ],
-  // Antigravity specific
-  apiEndpoint: "https://cloudcode-pa.googleapis.com",
-  apiVersion: "v1internal",
-  loadCodeAssistEndpoint: "https://cloudcode-pa.googleapis.com/v1internal:loadCodeAssist",
-  onboardUserEndpoint: "https://cloudcode-pa.googleapis.com/v1internal:onboardUser",
-  loadCodeAssistUserAgent: "google-api-nodejs-client/9.15.1",
-  loadCodeAssistApiClient: "google-cloud-sdk vscode_cloudshelleditor/0.1",
-  // Numeric enums matching Antigravity binary ClientMetadata (see getOAuthClientMetadata below)
+  ...PROVIDER_OAUTH["antigravity"],
  loadCodeAssistClientMetadata: JSON.stringify({ ideType: 9, platform: getOAuthPlatformEnum(), pluginType: 2 }),
 };

@@ -125,136 +59,43 @@ export function getOAuthClientMetadata() {
 }

 // OpenAI OAuth Configuration (Authorization Code Flow with PKCE)
-export const OPENAI_CONFIG = {
-  clientId: "app_EMoamEEZ73f0CkXaXp7hrann",
-  authorizeUrl: "https://auth.openai.com/oauth/authorize",
-  tokenUrl: "https://auth.openai.com/oauth/token",
-  scope: "openid profile email offline_access",
-  codeChallengeMethod: "S256",
-  extraParams: {
-    id_token_add_organizations: "true",
-    originator: "openai_native",
-  },
-};
+export const OPENAI_CONFIG = { ...PROVIDER_OAUTH["openai"] };

 // GitHub Copilot OAuth Configuration (Device Code Flow)
-export const GITHUB_CONFIG = {
-  clientId: "Iv1.b507a08c87ecfe98",
-  deviceCodeUrl: "https://github.com/login/device/code",
-  tokenUrl: "https://github.com/login/oauth/access_token",
-  userInfoUrl: "https://api.github.com/user",
-  scopes: "read:user",
-  apiVersion: "2022-11-28", // Updated to supported version
-  copilotTokenUrl: "https://api.github.com/copilot_internal/v2/token",
-  userAgent: "GitHubCopilotChat/0.26.7",
-  editorVersion: "vscode/1.85.0",
-  editorPluginVersion: "copilot-chat/0.26.7",
-};
+export const GITHUB_CONFIG = { ...PROVIDER_OAUTH["github"] };

-// Kiro OAuth Configuration
-// Supports multiple auth methods:
-// 1. AWS Builder ID (Device Code Flow)
-// 2. AWS IAM Identity Center/IDC (Device Code Flow with custom startUrl/region)
-// 3. Google/GitHub Social Login (Authorization Code Flow - manual callback)
-// 4. Import Token (paste refresh token from Kiro IDE)
-export const KIRO_CONFIG = {
-  // AWS SSO OIDC endpoints for Builder ID/IDC (Device Code Flow)
-  ssoOidcEndpoint: "https://oidc.us-east-1.amazonaws.com",
-  registerClientUrl: "https://oidc.us-east-1.amazonaws.com/client/register",
-  deviceAuthUrl: "https://oidc.us-east-1.amazonaws.com/device_authorization",
-  tokenUrl: "https://oidc.us-east-1.amazonaws.com/token",
-  // AWS Builder ID default start URL
-  startUrl: "https://view.awsapps.com/start",
-  // Client registration params
-  clientName: "kiro-oauth-client",
-  clientType: "public",
-  scopes: ["codewhisperer:completions", "codewhisperer:analysis", "codewhisperer:conversations"],
-  grantTypes: ["urn:ietf:params:oauth:grant-type:device_code", "refresh_token"],
-  issuerUrl: "https://identitycenter.amazonaws.com/ssoins-722374e8c3c8e6c6",
-  // Social auth endpoints (Google/GitHub via AWS Cognito)
-  socialAuthEndpoint: "https://prod.us-east-1.auth.desktop.kiro.dev",
-  socialLoginUrl: "https://prod.us-east-1.auth.desktop.kiro.dev/login",
-  socialTokenUrl: "https://prod.us-east-1.auth.desktop.kiro.dev/oauth/token",
-  socialRefreshUrl: "https://prod.us-east-1.auth.desktop.kiro.dev/refreshToken",
-  // Auth methods
-  authMethods: ["builder-id", "idc", "google", "github", "import"],
-};
+// Kiro OAuth Configuration (multi-method: AWS Builder ID / IDC / Social / Import Token)
+export const KIRO_CONFIG = { ...PROVIDER_OAUTH["kiro"] };

 // Cursor OAuth Configuration (Import Token from Cursor IDE)
-// Cursor stores credentials in SQLite database: state.vscdb
-// Keys: cursorAuth/accessToken, storage.serviceMachineId
+// tokenStoragePaths: user-reference only, not stored in registry
 export const CURSOR_CONFIG = {
-  // API endpoints
-  apiEndpoint: "https://api2.cursor.sh",
-  chatEndpoint: "/aiserver.v1.ChatService/StreamUnifiedChatWithTools",
-  modelsEndpoint: "/aiserver.v1.AiService/GetDefaultModelNudgeData",
-  // Additional endpoints
-  api3Endpoint: "https://api3.cursor.sh", // Telemetry
-  agentEndpoint: "https://agent.api5.cursor.sh", // Privacy mode
-  agentNonPrivacyEndpoint: "https://agentn.api5.cursor.sh", // Non-privacy mode
-  // Client metadata
-  clientVersion: "3.1.0",
-  clientType: "ide",
-  // Token storage locations (for user reference)
+  ...PROVIDER_OAUTH["cursor"],
  tokenStoragePaths: {
    linux: "~/.config/Cursor/User/globalStorage/state.vscdb",
    macos: "/Users/<user>/Library/Application Support/Cursor/User/globalStorage/state.vscdb",
    windows: "%APPDATA%\\Cursor\\User\\globalStorage\\state.vscdb",
  },
-  // Database keys
-  dbKeys: {
-    accessToken: "cursorAuth/accessToken",
-    machineId: "storage.serviceMachineId",
-  },
 };

 // Kimi Coding OAuth Configuration (Device Code Flow)
+// clientId uses env override — dynamic, not stored in registry
 export const KIMI_CODING_CONFIG = {
-  clientId: process.env.KIMI_CODING_OAUTH_CLIENT_ID || "17e5f671-d194-4dfb-9706-5516cb48c098",
-  deviceCodeUrl: "https://auth.kimi.com/api/oauth/device_authorization",
-  tokenUrl: "https://auth.kimi.com/api/oauth/token",
+  ...PROVIDER_OAUTH["kimi-coding"],
+  clientId: process.env.KIMI_CODING_OAUTH_CLIENT_ID || REGISTRY_PROVIDERS["kimi-coding"]?.clientId,
 };

 // KiloCode OAuth Configuration (Custom Device Auth Flow)
-export const KILOCODE_CONFIG = {
-  apiBaseUrl: "https://api.kilo.ai",
-  initiateUrl: "https://api.kilo.ai/api/device-auth/codes",
-  pollUrlBase: "https://api.kilo.ai/api/device-auth/codes",
-};
+export const KILOCODE_CONFIG = { ...PROVIDER_OAUTH["kilocode"] };

 // Cline OAuth Configuration (Local Callback Flow via app.cline.bot)
-export const CLINE_CONFIG = {
-  appBaseUrl: "https://app.cline.bot",
-  apiBaseUrl: "https://api.cline.bot",
-  authorizeUrl: "https://api.cline.bot/api/v1/auth/authorize",
-  tokenExchangeUrl: "https://api.cline.bot/api/v1/auth/token",
-  refreshUrl: "https://api.cline.bot/api/v1/auth/refresh",
-};
+export const CLINE_CONFIG = { ...PROVIDER_OAUTH["cline"] };

 // GitLab Duo OAuth Configuration (Authorization Code Flow with PKCE)
-// Supports both OAuth (PKCE) and Personal Access Token (PAT) modes
-export const GITLAB_CONFIG = {
-  defaultBaseUrl: "https://gitlab.com",
-  authorizeUrlPath: "/oauth/authorize",
-  tokenUrlPath: "/oauth/token",
-  userInfoUrlPath: "/api/v4/user",
-  scope: "api read_user",
-  codeChallengeMethod: "S256",
-};
+export const GITLAB_CONFIG = { ...PROVIDER_OAUTH["gitlab"] };

 // CodeBuddy (Tencent) OAuth Configuration (Browser OAuth Polling Flow)
-// Step 1: POST /v2/plugin/auth/state?platform=CLI → get { state, authUrl }
-// Step 2: Open authUrl in browser
-// Step 3: Poll POST /v2/plugin/auth/token with state until success
-export const CODEBUDDY_CONFIG = {
-  baseUrl: "https://copilot.tencent.com",
-  stateUrl: "https://copilot.tencent.com/v2/plugin/auth/state",
-  tokenUrl: "https://copilot.tencent.com/v2/plugin/auth/token",
-  refreshUrl: "https://copilot.tencent.com/v2/plugin/auth/token/refresh",
-  userAgent: "CLI/2.63.2 CodeBuddy/2.63.2",
-  platform: "CLI",
-  pollInterval: 5000,
-};
+export const CODEBUDDY_CONFIG = { ...PROVIDER_OAUTH["codebuddy"] };

 // OAuth timeout (5 minutes)
 export const OAUTH_TIMEOUT = 300000;