Skip to content

BYOK: pluggable model providers (Gemini, Anthropic, OpenAI, xAI) - #29

Open
edwardsb wants to merge 1 commit into
pgrundev:mainfrom
cavenine:feat/byok-model-providers
Open

BYOK: pluggable model providers (Gemini, Anthropic, OpenAI, xAI)#29
edwardsb wants to merge 1 commit into
pgrundev:mainfrom
cavenine:feat/byok-model-providers

Conversation

@edwardsb

@edwardsb edwardsb commented Sep 2, 2026

Copy link
Copy Markdown

Summary

Expand the existing OpenAI and Gemini integration to support Anthropic, xAI, and OpenAI-compatible services. The implementation uses net/http and adds no dependencies.

Providers

Provider Default model API
Gemini gemini-flash-latest generateContent
Anthropic claude-opus-5 /v1/messages
OpenAI gpt-5.6-terra /chat/completions
xAI grok-4.6 /responses

The OpenAI-compatible provider also supports OpenRouter, Groq, Together, DeepSeek, Mistral, Ollama, vLLM, and LM Studio.

Configuration

PGBOT_AI_PROVIDER selects a provider. If unset, pgbot detects one from the available API keys. OpenAI remains first in the detection order to preserve current behavior.

General overrides:

  • PGBOT_AI_MODEL
  • PGBOT_AI_BASE_URL
  • PGBOT_AI_API_KEY
  • PGBOT_AI_REASONING_EFFORT

Existing PGBOT_OPENAI_MODEL, PGBOT_OPENAI_URL, PGBOT_GEMINI_MODEL, and PGBOT_GEMINI_URL settings remain supported. Keys are read only from environment variables.

Behavior

  • Consent prompts identify the provider, host, and model receiving the findings.
  • Local endpoints do not require confirmation.
  • Model requests have a separate three-minute timeout from database collection.
  • AI failures do not suppress the deterministic report.
  • The Responses API sends store: false.
  • Anthropic requests omit temperature, which current models reject.
  • OpenAI reasoning models use max_completion_tokens and reasoning_effort.
  • OpenAI-compatible services continue to use /chat/completions.

The provider interface follows the Provider and LanguageModel structure from charmbracelet/fantasy, implemented directly over net/http.

Verification

Live end-to-end tests against PostgreSQL passed after rebasing onto current upstream main:

  • Gemini: gemini-flash-latest
  • Anthropic: claude-opus-5
  • OpenAI: gpt-5.6-terra
  • xAI: grok-4.6 via /responses

Ollama was also verified through /chat/completions, including local-endpoint consent behavior.

The repository gate passes: build, vet, golangci-lint, all Go tests, and Linux/macOS builds for amd64 and arm64.

The AI layer only spoke Gemini: NewFromEnv demanded GEMINI_API_KEY, Generate
wrote the generateContent wire format inline, and both `explain` and `ask`
hardcoded "this sends data to Google" in their consent prompts. Anyone holding
an Anthropic, OpenAI, OpenRouter or xAI key — or running a model locally —
couldn't use it at all.

internal/ai now has a provider seam modelled on charmbracelet/fantasy's
Provider/LanguageModel pair, implemented over net/http rather than depending on
fantasy: it wraps the real vendor SDKs (anthropic-sdk-go, openai-go, genai,
aws-sdk-go-v2) and measured at 23 MB → ~65 MB of binary and 61 → ~170 modules,
for one non-streaming POST in an optional feature. Four providers, two wire
formats, zero new dependencies:

- gemini      generateContent — unchanged behavior, default gemini-flash-latest
              (a moving alias, so it tracks 3.7 Flash without a re-pin)
- anthropic   /v1/messages, default claude-opus-5
- openai      /chat/completions, default gpt-5.6-terra — also the compatibility
              path for OpenRouter, Groq, Together, DeepSeek, xAI, Mistral and
              every local runtime (Ollama, vLLM, LM Studio)
- xai         /responses, default grok-4.6

Provider comes from PGBOT_AI_PROVIDER, else auto-detects from whichever key is
present (Gemini first, so existing setups are untouched). PGBOT_AI_MODEL,
PGBOT_AI_BASE_URL, PGBOT_AI_API_KEY and PGBOT_AI_REASONING_EFFORT override;
PGBOT_GEMINI_MODEL/URL still work. Keys are still read only from the
environment, never a flag — now enforced in one place for every provider.

Wire-format details that are load-bearing, each found by probing the live APIs:

- Anthropic rejects `temperature` on current models (400), so the provider never
  sends it — Call.Temperature is a hint, not a contract. A refusal is an HTTP 200
  with empty content, so stop_reason is checked before reading blocks.
- OpenAI reasoning models reject `max_tokens` ("use max_completion_tokens") and
  take reasoning_effort; their cap covers hidden reasoning as well as the answer,
  so it is floored at 32k — 8192 returns empty text with finish_reason "length".
  Dispatch is by model id, so local runtimes keep the plain shape.
- The Responses API defaults `store` to true, retaining the findings server-side
  after the call. pgbot always sends store:false — that retention isn't the
  disclosure the user consented to.
- xAI returns errors as {"code":…,"error":"<string>"} where OpenAI nests an
  object. Both providers now decode either shape, or the real message is lost.

`explain` and `ask` name the actual destination before sending ("…to xai at
api.x.ai (model grok-4.6)"), and with a local endpoint say nothing leaves the
machine and skip the prompt entirely. The model call also gets its own deadline
instead of the leftovers of the 45s collection budget, which a CPU-bound local
model always blew.

Verified end-to-end against live endpoints: Grok 4.6 via /responses and a local
Ollama via /chat/completions both produced real explanations for `explain` and
`ask`; Anthropic reached auth and surfaced its error; bad-key paths degrade to
the deterministic report with the vendor's message intact. Unit tests cover each
provider's request shape, error handling and env precedence. Binary unchanged at
16 MB, still 61 modules.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant