Repository navigation
feat(mimo): fetch MiMo model catalog dynamically and add V2.6 series #1748
+3,954
−199
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,55 @@ | ||
| import { | ||
| SECRET_STATE_KEYS, | ||
| getMimoModelInfo, | ||
| isSecretStateKey, | ||
| mimoDefaultModelInfo, | ||
| mimoModels, | ||
| providerIdentifiers, | ||
| providerSettingsSchema, | ||
| } from "../index.js" | ||
|
|
||
| describe("MiMo provider secret classification", () => { | ||
| it("classifies mimoApiKey as a secret state key alongside its sibling provider keys", () => { | ||
| expect(SECRET_STATE_KEYS).toContain("mimoApiKey") | ||
| expect(isSecretStateKey("mimoApiKey")).toBe(true) | ||
| }) | ||
|
|
||
| it("keeps the non-secret MiMo settings out of the secret set", () => { | ||
| expect(isSecretStateKey("mimoBaseUrl")).toBe(false) | ||
| expect(SECRET_STATE_KEYS).not.toContain("mimoBaseUrl") | ||
| }) | ||
|
|
||
| it("still parses and exposes mimoApiKey through the provider settings schema", () => { | ||
| const parsed = providerSettingsSchema.parse({ | ||
| apiProvider: providerIdentifiers.mimo, | ||
| mimoApiKey: "mimo-key", | ||
| mimoBaseUrl: "https://token-plan-sgp.xiaomimimo.com/v1", | ||
| }) | ||
| expect(parsed.mimoApiKey).toBe("mimo-key") | ||
| expect(parsed.mimoBaseUrl).toBe("https://token-plan-sgp.xiaomimimo.com/v1") | ||
| }) | ||
| }) | ||
|
|
||
| describe("getMimoModelInfo", () => { | ||
| it("returns the curated spec for a known model ID", () => { | ||
| expect(getMimoModelInfo("mimo-v2.6-pro")).toBe(mimoModels["mimo-v2.6-pro"]) | ||
| }) | ||
|
|
||
| it("returns undefined for an unknown model ID", () => { | ||
| expect(getMimoModelInfo("mimo-v99-not-real")).toBeUndefined() | ||
| }) | ||
|
|
||
| // Regression: model IDs reach this lookup from the provider's /models response, | ||
| // so a plain `mimoModels[id]` read resolved Object.prototype members and handed | ||
| // callers a function (or `{}` after spreading) instead of the family default. | ||
| it.each(["constructor", "toString", "valueOf", "hasOwnProperty", "__proto__"])( | ||
| "returns undefined for the inherited Object.prototype key %s", | ||
| (key) => { | ||
| expect(getMimoModelInfo(key)).toBeUndefined() | ||
| }, | ||
| ) | ||
|
|
||
| it("keeps the default model resolvable so the fallback path has a spec", () => { | ||
| expect(getMimoModelInfo("mimo-v2.6-pro")).toBe(mimoDefaultModelInfo) | ||
| }) | ||
| }) |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,106 @@ | ||
| // npx vitest run api/providers/__tests__/mimo-redirect.spec.ts | ||
|
|
||
| // Deliberately does NOT mock "openai": this suite proves the redirect policy the | ||
| // real SDK client actually sends, which a mocked constructor cannot show. | ||
| import type { Anthropic } from "@anthropic-ai/sdk" | ||
|
|
||
| import type { ApiHandlerOptions } from "../../../shared/api" | ||
| import { MimoHandler } from "../mimo" | ||
| import { collectStream } from "../../../test-utils/stream" | ||
|
|
||
| const ALLOWED_BASE_URL = "https://token-plan-sgp.xiaomimimo.com/v1" | ||
| const REDIRECT_TARGET = "https://attacker.example/collect" | ||
|
|
||
| const options = (): ApiHandlerOptions => ({ | ||
| mimoApiKey: "test-api-key", | ||
| apiModelId: "mimo-v2.6-pro", | ||
| mimoBaseUrl: ALLOWED_BASE_URL, | ||
| }) | ||
|
|
||
| const messages: Anthropic.Messages.MessageParam[] = [{ role: "user", content: "Hello" }] | ||
|
|
||
| /** | ||
| * Stands in for the transport, emulating the fetch redirect contract rather than | ||
| * just recording the init: a 3xx is refused when the init says redirect:"error", | ||
| * and otherwise replayed against the Location target with the same method, | ||
| * headers, and body -- exactly what undici's default redirect:"follow" does. That | ||
| * is what makes this a behavioral test: the assertion below fails on the old | ||
| * code because the request really does reach the attacker URL. | ||
| */ | ||
| const redirectingFetch = () => { | ||
| const calls: { url: string; init: RequestInit }[] = [] | ||
|
|
||
| const redirect = (status: number, location: string) => | ||
| new Response(null, { status, statusText: "Redirect", headers: { location } }) | ||
|
|
||
| const fetchDouble = async (input: string | URL | Request, init?: RequestInit): Promise<Response> => { | ||
| const url = typeof input === "string" ? input : input instanceof URL ? input.toString() : input.url | ||
| calls.push({ url, init: init ?? {} }) | ||
|
|
||
| const response = url.startsWith(ALLOWED_BASE_URL) | ||
| ? redirect(307, REDIRECT_TARGET) | ||
| : new Response('data: {"choices":[{"delta":{"content":"leaked"},"index":0}]}\n\ndata: [DONE]\n\n', { | ||
| status: 200, | ||
| headers: { "content-type": "text/event-stream" }, | ||
| }) | ||
|
|
||
| const location = response.headers.get("location") | ||
| if (!location) { | ||
| return response | ||
| } | ||
|
|
||
| if (init?.redirect === "error") { | ||
| throw new TypeError("fetch failed: unexpected redirect") | ||
| } | ||
|
|
||
| if (init?.redirect === "manual") { | ||
| return response | ||
| } | ||
|
|
||
| // Default policy: follow. Re-issue the same request against the target. | ||
| return fetchDouble(new URL(location, url).toString(), init) | ||
| } | ||
|
|
||
| return { fetchDouble, calls } | ||
| } | ||
|
|
||
| describe("MimoHandler inference client redirect policy", () => { | ||
| const originalFetch = globalThis.fetch | ||
|
|
||
| afterEach(() => { | ||
| globalThis.fetch = originalFetch | ||
| vi.restoreAllMocks() | ||
| }) | ||
|
|
||
| it("pins redirect:'error' on the SDK client it builds", () => { | ||
| const handler = new MimoHandler(options()) | ||
|
|
||
| // The SDK spreads client.fetchOptions into every request init, so this is | ||
| // the value the transport receives. Asserted directly as well as through | ||
| // the request below, so a change to the SDK's plumbing fails here first. | ||
| expect(handler["client"].fetchOptions).toEqual({ redirect: "error" }) | ||
| }) | ||
|
|
||
| // Regression: the SDK's default fetch follows 3xx, so an allowlisted Xiaomi | ||
| // origin answering with a redirect replayed the POST body (system prompt, | ||
| // conversation, tool output) to an origin the allowlist never vetted. Before | ||
| // the fix the 307 was followed and the request resolved against the attacker | ||
| // URL; with the policy pinned, the request must reject instead. | ||
| it("rejects a 307 from an allowlisted origin instead of replaying the request cross-origin", async () => { | ||
| const { fetchDouble, calls } = redirectingFetch() | ||
| globalThis.fetch = fetchDouble as unknown as typeof fetch | ||
|
|
||
| const handler = new MimoHandler(options()) | ||
|
|
||
| await expect(collectStream(handler.createMessage("System prompt", messages))).rejects.toThrow() | ||
|
|
||
| // The transport was told not to follow, and nothing was ever sent to the | ||
| // redirect target. | ||
| expect(calls.length).toBeGreaterThan(0) | ||
| for (const call of calls) { | ||
| expect(call.init.redirect).toBe("error") | ||
| expect(call.url.startsWith(ALLOWED_BASE_URL)).toBe(true) | ||
| } | ||
| expect(calls.some((call) => call.url.startsWith(REDIRECT_TARGET))).toBe(false) | ||
| }) | ||
| }) |
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Uh oh!
There was an error while loading. Please reload this page.