2 Commits

Include renames

Author	SHA1	Message	Date
ZacharyZhang-NY	ea0ce9d15f	F3: Kimi inference pipeline + full grok cloud-surface excision ... Sampler / inference (PRD F3): - kimi_compat.rs: single adaptation point for the Kimi chat/completions dialect (thinking-field mapping, model_id stripping, empty-content tool-call message fix, stream_options.include_usage), with kimi-cli source citations - Rate-limit handling reworked for Kimi/Moonshot semantics; UA kigi/{version} - /models replaces the xAI models-v2 endpoint everywhere; idle model refresh carries X-Msh-* device headers only (X-XAI-Token-Auth and x-grok-client-mode/CLIENT_MODE_HEADER machinery deleted) Cloud-surface excision (PRD §5, zero-egress): - remote/ conversations lane, cli-chat-proxy-types crate, prod/ dir, share command, credit bar: deleted (single local session lane; paginate() replaces merge_and_paginate) - Subscription/tier gate stack deleted end-to-end: AppView gate/tier/team/ZDR fields, app/subscription.rs watch loop, dispatch/billing.rs paywall + SuperGrok upsell, free-usage-exhausted chain, tier-restricted commands, GateInfo, RemoteSettings gate fields, SettingsUpdateNotification gate fields - /privacy + coding-data-sharing setting deleted (backed by a dead xAI RPC; Kigi is zero-egress — nothing to share or retain remotely) Auth UX correctness (user-reported): - Device-flow fixtures now mirror the live Kimi payload shape (https://www.kimi.com/code/authorize_device?user_code=..., verified against auth.kimi.com); the fabricated auth.kimi.com/device?code=... URLs are gone - open_browser_detached is a no-op under cfg(test): unit tests drove wiremock fixture URLs into the real browser (root cause of the "garbage mock link" ABCD-1234 tabs) - Welcome/pager-minimal rebrand: Grok Build -> Kigi, grok.com -> kimi.com, "Sign in to Grok" -> "Sign in to Kimi"	2026-07-17 16:05:51 -04:00
ZacharyZhang-NY	021b82443d	M1/F1: Kimi Code OAuth device-code flow ... Replace the xAI OAuth stack with the Kimi device authorization grant: - kimi_oauth.rs wire layer (device_authorization + token poll + refresh against kigi_env::oauth_host(); client_id per PRD; retryable statuses 429/5xx with backoff; expired_token restarts authorization) - X-Msh-Device-{Name,Model,Id} headers; device_id minted uuid4-hex at ~/.kigi/device_id (0600) - Storage: system keyring service `kigi`, entry `oauth/kimi-code` (macOS/Windows native backends), atomic-file fallback under ~/.kigi; official client's keyring/~/.kimi never touched - Refresh manager: 60s tick, threshold max(300, expires_in*0.5), 401-tombstone keyed by rejected refresh token with 300s cooldown and rotation auto-clear, cross-process lock with sibling-adoption triple-check, sleep/wake forced refresh - Deleted xAI machinery: enterprise OIDC (PKCE/JWKS/teams), devbox login, external auth provider, JWT tier gating + subscription paywall stack, X-XAI-Token-Auth marker headers, ZDR gates, /user enrichment - kigi login / TUI /login both drive the device flow; login-host display now derives from kigi_env::oauth_host() - 264 auth unit/wiremock tests; live contract probe of auth.kimi.com/api/oauth/device_authorization matches the wire shapes Gates: check/clippy --all-targets clean, fmt, deny ok, kigi-shell lib 5131 tests green.	2026-07-17 07:37:29 -04:00