From 9fbee38a21f1a1f5566682306d3366e994146354 Mon Sep 17 00:00:00 2001
From: nturumel <nihar.turumella@oracle.com>
Date: Wed, 30 Jul 2025 14:03:30 -0500
Subject: [PATCH 1/5] wip: working vscode

---
 .idea/checkstyle-idea.xml                     |  15 +
 .idea/gradle.xml                              |   2 +-
 .npmrc                                        |   2 +
 binary/package-lock.json                      |   9 +-
 core/autocomplete/CompletionProvider.ts       |   2 +-
 core/llm/llms/index.ts                        |   2 +
 core/llm/llms/oca/Oca.ts                      | 202 ++++++++++++++
 core/llm/llms/oca/util/constants.ts           |  18 ++
 core/llm/llms/oca/util/ocaTokenManager.ts     | 262 ++++++++++++++++++
 core/llm/llms/oca/util/utils.ts               |  71 +++++
 core/package-lock.json                        | 191 ++++++++++++-
 core/package.json                             |   8 +-
 extensions/vscode/.npmrc                      |   3 -
 extensions/vscode/package-lock.json           |  13 +-
 gui/package-lock.json                         |   9 +-
 gui/public/logos/oca.png                      | Bin 0 -> 5882 bytes
 .../pages/AddNewModel/configs/providers.ts    |  21 ++
 package-lock.json                             |   2 +-
 packages/llm-info/src/index.ts                |   2 +
 packages/llm-info/src/providers/oca.ts        |   7 +
 scripts/install-dependencies.sh               |   3 +
 21 files changed, 830 insertions(+), 14 deletions(-)
 create mode 100644 .idea/checkstyle-idea.xml
 create mode 100644 .npmrc
 create mode 100644 core/llm/llms/oca/Oca.ts
 create mode 100644 core/llm/llms/oca/util/constants.ts
 create mode 100644 core/llm/llms/oca/util/ocaTokenManager.ts
 create mode 100644 core/llm/llms/oca/util/utils.ts
 delete mode 100644 extensions/vscode/.npmrc
 create mode 100644 gui/public/logos/oca.png
 create mode 100644 packages/llm-info/src/providers/oca.ts

diff --git a/.idea/checkstyle-idea.xml b/.idea/checkstyle-idea.xml
new file mode 100644
index 00000000000..75470a03192
--- /dev/null
+++ b/.idea/checkstyle-idea.xml
@@ -0,0 +1,15 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<project version="4">
+  <component name="CheckStyle-IDEA" serialisationVersion="2">
+    <checkstyleVersion>10.17.0</checkstyleVersion>
+    <scanScope>JavaOnly</scanScope>
+    <option name="thirdPartyClasspath" />
+    <option name="activeLocationIds" />
+    <option name="locations">
+      <list>
+        <ConfigurationLocation id="bundled-sun-checks" type="BUNDLED" scope="All" description="Sun Checks">(bundled)</ConfigurationLocation>
+        <ConfigurationLocation id="bundled-google-checks" type="BUNDLED" scope="All" description="Google Checks">(bundled)</ConfigurationLocation>
+      </list>
+    </option>
+  </component>
+</project>
\ No newline at end of file
diff --git a/.idea/gradle.xml b/.idea/gradle.xml
index c277e816e3b..f6c679e0e08 100644
--- a/.idea/gradle.xml
+++ b/.idea/gradle.xml
@@ -5,7 +5,7 @@
     <option name="linkedExternalProjectsSettings">
       <GradleProjectSettings>
         <option name="externalProjectPath" value="$PROJECT_DIR$/extensions/intellij" />
-        <option name="gradleJvm" value="homebrew-17" />
+        <option name="gradleJvm" value="17" />
         <option name="modules">
           <set>
             <option value="$PROJECT_DIR$/extensions/intellij" />
diff --git a/.npmrc b/.npmrc
new file mode 100644
index 00000000000..4fd9d8b8988
--- /dev/null
+++ b/.npmrc
@@ -0,0 +1,2 @@
+@types:registry=https://registry.npmjs.org/
+registry=https://registry.npmjs.org/
\ No newline at end of file
diff --git a/binary/package-lock.json b/binary/package-lock.json
index 11dd6505b87..e740ac359ae 100644
--- a/binary/package-lock.json
+++ b/binary/package-lock.json
@@ -67,9 +67,11 @@
         "cheerio": "^1.0.0-rc.12",
         "commander": "^12.0.0",
         "comment-json": "^4.2.3",
+        "crypto-js": "^4.2.0",
         "dbinfoz": "^0.14.0",
         "diff": "^7.0.0",
         "dotenv": "^16.4.5",
+        "express": "^5.1.0",
         "fastest-levenshtein": "^1.0.16",
         "filtrex": "^3.1.0",
         "follow-redirects": "^1.15.5",
@@ -77,11 +79,13 @@
         "handlebars": "^4.7.8",
         "http-proxy-agent": "^7.0.1",
         "https-proxy-agent": "^7.0.3",
+        "iconv-lite": "^0.6.3",
         "ignore": "^5.3.1",
         "is-localhost-ip": "^2.0.0",
         "jinja-js": "0.1.8",
         "js-tiktoken": "^1.0.8",
         "jsdom": "^24.0.0",
+        "jwt-decode": "4.0.0",
         "launchdarkly-node-client-sdk": "^3.2.0",
         "llm-code-highlighter": "^0.0.14",
         "lru-cache": "^11.0.2",
@@ -90,7 +94,8 @@
         "node-html-markdown": "^1.3.0",
         "ollama": "^0.4.6",
         "onnxruntime-node": "1.14.0",
-        "openai": "^4.76.0",
+        "openai": "^4.104.0",
+        "openid-client": "^5.7.1",
         "p-limit": "^6.1.0",
         "partial-json": "^0.1.7",
         "pg": "^8.11.3",
@@ -123,7 +128,9 @@
         "@google/generative-ai": "^0.11.4",
         "@shikijs/colorized-brackets": "^3.7.0",
         "@shikijs/transformers": "^3.7.0",
+        "@types/crypto-js": "^4.2.2",
         "@types/diff": "^7.0.1",
+        "@types/express": "^5.0.3",
         "@types/follow-redirects": "^1.14.4",
         "@types/jest": "^29.5.12",
         "@types/jquery": "^3.5.29",
diff --git a/core/autocomplete/CompletionProvider.ts b/core/autocomplete/CompletionProvider.ts
index 0d974e31721..fab623d37ad 100644
--- a/core/autocomplete/CompletionProvider.ts
+++ b/core/autocomplete/CompletionProvider.ts
@@ -63,7 +63,7 @@ export class CompletionProvider {
 
     // Ignore empty API keys for Mistral since we currently write
     // a template provider without one during onboarding
-    if (llm.providerName === "mistral" && llm.apiKey === "") {
+    if ((llm.providerName === "mistral" || llm.providerName === "oca") && llm.apiKey === "") {
       return undefined;
     }
 
diff --git a/core/llm/llms/index.ts b/core/llm/llms/index.ts
index 0522bbda65e..c918150d506 100644
--- a/core/llm/llms/index.ts
+++ b/core/llm/llms/index.ts
@@ -62,6 +62,7 @@ import Vllm from "./Vllm";
 import Voyage from "./Voyage";
 import WatsonX from "./WatsonX";
 import xAI from "./xAI";
+import Oca from "./oca/Oca";
 export const LLMClasses = [
   Anthropic,
   Cohere,
@@ -116,6 +117,7 @@ export const LLMClasses = [
   Inception,
   Voyage,
   LlamaStack,
+  Oca
 ];
 
 export async function llmFromDescription(
diff --git a/core/llm/llms/oca/Oca.ts b/core/llm/llms/oca/Oca.ts
new file mode 100644
index 00000000000..6303a8e42af
--- /dev/null
+++ b/core/llm/llms/oca/Oca.ts
@@ -0,0 +1,202 @@
+import {
+  ChatCompletionCreateParams,
+} from "openai/resources/index";
+
+import { streamSse } from "@continuedev/fetch";
+import {
+  ChatMessage,
+  CompletionOptions,
+  LLMOptions,
+  Tool,
+} from "../../../index.js";
+import { renderChatMessage } from "../../../util/messageContent.js";
+import { BaseLLM } from "../../index.js";
+import {
+  fromChatCompletionChunk,
+  LlmApiRequestType,
+  toChatBody,
+} from "../../openaiTypeConverters.js";
+import { OcaTokenManager } from "./util/ocaTokenManager.js";
+import { createOcaHeaders, generateOpcRequestId } from "./util/utils.js";
+import { DEFAULT_OCA_BASE_URL, DEFAULT_OCA_VERSION } from "./util/constants.js";
+
+class Oca extends BaseLLM {
+  constructor(options: LLMOptions) {
+    super({
+      ...options,
+      capabilities: {
+        uploadImage: false,
+        tools: true
+      }
+    });
+    this.uniqueId = options.uniqueId || "no-unique-id";
+    this.apiVersion = options.apiVersion ?? DEFAULT_OCA_VERSION;
+  }
+
+  static providerName = "oca";
+  static defaultOptions: Partial<LLMOptions> | undefined = {
+    apiBase: DEFAULT_OCA_BASE_URL,
+  };
+
+  protected useOpenAIAdapterFor: (LlmApiRequestType | "*")[] = [
+    "list",
+    "streamChat",
+  ];
+
+  protected _convertModelName(model: string): string {
+    return model;
+  }
+
+  private convertTool(tool: Tool): any {
+    return {
+      type: tool.type,
+      function: {
+        name: tool.function.name,
+        description: tool.function.description,
+        parameters: tool.function.parameters,
+        strict: tool.function.strict,
+      },
+    };
+  }
+
+  protected extraBodyProperties(): Record<string, any> {
+    return {};
+  }
+
+  protected getMaxStopWords(): number {
+    return 4;
+  }
+
+  protected _convertArgs(
+    options: CompletionOptions,
+    messages: ChatMessage[],
+  ): ChatCompletionCreateParams {
+    const finalOptions = toChatBody(messages, options);
+
+    finalOptions.stop = options.stop?.slice(0, this.getMaxStopWords());
+    return finalOptions;
+  }
+
+  protected async _getHeaders() {
+    const token = (await OcaTokenManager.getToken()).access_token;
+    if (!token) {
+      throw new Error(
+        "Oracle Code Assist Access Token not found or expired. Please log in again",
+      );
+    }
+    const ocaHeaders = await createOcaHeaders(token, this.uniqueId);
+    return ocaHeaders;
+  }
+
+  protected async _complete(
+    prompt: string,
+    signal: AbortSignal,
+    options: CompletionOptions,
+  ): Promise<string> {
+    let completion = "";
+    for await (const chunk of this._streamChat(
+      [{ role: "user", content: prompt }],
+      signal,
+      options,
+    )) {
+      completion += chunk.content;
+    }
+
+    return completion;
+  }
+
+  protected _getEndpoint(
+    endpoint: "chat/completions" | "models",
+  ) {
+    if (!this.apiBase) {
+      throw new Error(
+        "No API base URL provided. Please set the 'apiBase' option in config.json",
+      );
+    }
+    // Remove trailing slashes from base and leading/trailing slashes from endpoint
+    const base = this.apiBase.replace(/\/+$/, "");
+    const ep = endpoint.replace(/^\/+|\/+$/g, "");
+    const version = this.apiVersion
+      ? this.apiVersion.replace(/^\/+|\/+$/g, "")
+      : "";
+
+    // Build the path
+    let urlStr = base;
+    if (version) urlStr += `/${version}`;
+    if (ep) urlStr += `/${ep}`;
+
+    return new URL(urlStr);
+  }
+
+  protected async *_streamComplete(
+    prompt: string,
+    signal: AbortSignal,
+    options: CompletionOptions,
+  ): AsyncGenerator<string> {
+    for await (const chunk of this._streamChat(
+      [{ role: "user", content: prompt }],
+      signal,
+      options,
+    )) {
+      yield renderChatMessage(chunk);
+    }
+  }
+
+  protected modifyChatBody(
+    body: ChatCompletionCreateParams,
+  ): ChatCompletionCreateParams {
+    body.stop = body.stop?.slice(0, this.getMaxStopWords());
+    return body;
+  }
+
+  protected async *_streamChat(
+    messages: ChatMessage[],
+    signal: AbortSignal,
+    options: CompletionOptions,
+  ): AsyncGenerator<ChatMessage> {    
+    const body = this._convertArgs(options, messages);
+    const headers = await this._getHeaders()
+
+    const response = await this.fetch(this._getEndpoint("chat/completions"), {
+      method: "POST",
+      headers: headers,
+      body: JSON.stringify({
+        ...body,
+        ...this.extraBodyProperties(),
+      }),
+      signal,
+    });
+
+    // Handle non-streaming response
+    if (body.stream === false) {
+      if (response.status === 499) {
+        return; // Aborted by user
+      }
+      const data = await response.json();
+      yield data.choices[0].message;
+      return;
+    }
+
+    for await (const value of streamSse(response)) {
+      const chunk = fromChatCompletionChunk(value);
+      if (chunk) {
+        yield chunk;
+      }
+    }
+  }
+
+
+  async listModels(): Promise<string[]> {
+    const headers = await this._getHeaders()
+    const response = await this.fetch(this._getEndpoint("models"), {
+      method: "GET",
+      headers: headers,
+    });
+
+    const data = await response.json();
+    return data.data.map((m: any) => m.id);
+  }
+
+}
+
+export default Oca;
diff --git a/core/llm/llms/oca/util/constants.ts b/core/llm/llms/oca/util/constants.ts
new file mode 100644
index 00000000000..e20c02fb01a
--- /dev/null
+++ b/core/llm/llms/oca/util/constants.ts
@@ -0,0 +1,18 @@
+import path from "path"
+import os from "os"
+
+// OAUTH
+export const DEFAULT_IDCS_CLIENT_ID = "a8331954c0cf48ba99b5dd223a14c6ea"
+export const DEFAULT_IDCS_URL = "https://idcs-9dc693e80d9b469480d7afe00e743931.identity.oraclecloud.com"
+export const DEFAULT_IDSC_SCOPES = "openid offline_access"
+export const DEFAULT_IDCS_PORT_CANDIDATES = [8669, 8668, 8667]
+export const DEFAULT_USE_PKCE = true
+export const OCA_CONFIG_PATH = path.join(os.homedir(), ".oca", "config.json")
+export const OCA_RENEW_TOKEN_BUFFER_SEC = 180 // 3 minutes
+
+// OCA LITELLM
+export const DEFAULT_OCA_BASE_URL = "https://code-internal.aiservice.us-chicago-1.oci.oraclecloud.com"
+export const DEFAULT_OCA_VERSION = "20250206/app/litellm"
+
+// OCA SURVEY
+export const DEFAULT_SURVEY_PORT = 3000
diff --git a/core/llm/llms/oca/util/ocaTokenManager.ts b/core/llm/llms/oca/util/ocaTokenManager.ts
new file mode 100644
index 00000000000..1744a790caa
--- /dev/null
+++ b/core/llm/llms/oca/util/ocaTokenManager.ts
@@ -0,0 +1,262 @@
+import express, { Request, Response } from "express";
+import http from "http";
+import fs from "fs/promises";
+import path from "path";
+import os from "os";
+import { Issuer, generators, TokenSet, Client } from "openid-client";
+import {
+  DEFAULT_IDCS_CLIENT_ID,
+  DEFAULT_IDCS_URL,
+  DEFAULT_IDSC_SCOPES,
+  DEFAULT_IDCS_PORT_CANDIDATES,
+  DEFAULT_USE_PKCE,
+} from "./constants";
+import { parseJwtPayload } from "./utils";
+import open from "open";
+export interface OcaStoredToken extends TokenSet {
+  created_at: number;
+  expires_at: number;
+  sub?: string;
+}
+export class OcaTokenManager {
+  private static cachedToken: OcaStoredToken | null = null;
+  private static client: Client | null = null;
+  private static codeVerifier: string | undefined;
+  private static _config: null | {
+    client_id: string;
+    idcs_url: string;
+    client_secret?: string;
+    scopes: string;
+    port_candidates: number[];
+    use_pkce: boolean;
+  } = null;
+  private static readonly TOKEN_CACHE_PATH = path.join(
+    os.homedir(),
+    ".oca",
+    "token_cache.json",
+  );
+  private static readonly RENEW_TOKEN_BUFFER_SEC = 180; // 3 minutes
+  private static readonly OCA_CONFIG_PATH = path.join(
+    os.homedir(),
+    ".oca",
+    "config.json",
+  );
+  private static async getConfig() {
+    if (this._config) {
+      return this._config;
+    }
+    let cfg: any = {};
+    try {
+      const raw = await fs.readFile(this.OCA_CONFIG_PATH, "utf-8");
+      cfg = JSON.parse(raw);
+    } catch {
+      /* ignore - use defaults */
+    }
+    this._config = {
+      client_id: cfg.client_id ?? DEFAULT_IDCS_CLIENT_ID,
+      idcs_url: cfg.idcs_url ?? DEFAULT_IDCS_URL,
+      client_secret: cfg.client_secret, // allow undefined
+      scopes: cfg.scopes ?? DEFAULT_IDSC_SCOPES,
+      port_candidates: cfg.port_candidates ?? DEFAULT_IDCS_PORT_CANDIDATES,
+      use_pkce:
+        typeof cfg.use_pkce === "boolean" ? cfg.use_pkce : DEFAULT_USE_PKCE,
+    };
+    return this._config;
+  }
+  private static async saveToken(token: TokenSet) {
+    const dir = path.dirname(this.TOKEN_CACHE_PATH);
+    await fs.mkdir(dir, { recursive: true });
+    const now = Math.floor(Date.now() / 1000);
+    let expires_at: number | undefined = undefined;
+    let sub: string | undefined = undefined;
+    if (token.access_token) {
+      const payload = parseJwtPayload(token.access_token);
+      if (payload) {
+        expires_at = typeof payload.exp === "number" ? payload.exp : undefined;
+        sub = typeof payload.sub === "string" ? payload.sub : undefined;
+      }
+    }
+    if (!expires_at && typeof token.expires_in === "number") {
+      expires_at = now + token.expires_in;
+    }
+    const toStore: OcaStoredToken = {
+      ...(token as any),
+      created_at: now,
+      expires_at: expires_at!,
+      sub,
+    };
+    await fs.writeFile(this.TOKEN_CACHE_PATH, JSON.stringify(toStore), {
+      encoding: "utf-8",
+    });
+    // On Windows, fs.chmod is a no-op. On POSIX, set 600.
+    /**
+		 * Windows permissions are managed via Access Control Lists (ACLs), which are more complex and flexible than UNIX-style permission bits.
+		 * Windows user profile directories are generally protected from access by other users on the same system.
+		   Sensitivity is typically managed by overall profile folder access (e.g., C:\Users\username is not world-readable by default).
+		   Further restrictions (such as preventing SYSTEM or Administrators from reading files) are neither common nor practical on a typical domain-joined workstation.
+		 */
+    if (os.platform() !== "win32") {
+      await fs.chmod(this.TOKEN_CACHE_PATH, 0o600);
+    }
+    return toStore;
+  }
+
+  private static async loadToken(): Promise<OcaStoredToken | null> {
+    try {
+      const stats = await fs.stat(this.TOKEN_CACHE_PATH);
+      if (os.platform() !== "win32") {
+        const mode = stats.mode & 0o777;
+        if (mode !== 0o600) {
+          await fs.rm(this.TOKEN_CACHE_PATH);
+          throw new Error(
+            "Token file permissions should be owner read and write",
+          );
+        }
+      }
+      const data = await fs.readFile(this.TOKEN_CACHE_PATH, "utf-8");
+      return JSON.parse(data) as OcaStoredToken;
+    } catch {
+      return null;
+    }
+  }
+
+  // Use this method instead of findAvailablePort
+  private static async findAndBindAvailablePort(): Promise<{
+    port: number;
+    server: http.Server;
+  }> {
+    const config = await this.getConfig();
+    for (const port of config.port_candidates) {
+      try {
+        const server = http.createServer();
+        await new Promise((resolve, reject) => {
+          server.once("error", reject);
+          server.listen(port, "127.0.0.1", () => resolve(true));
+        });
+        return { port, server };
+      } catch {
+        continue;
+      }
+    }
+    throw new Error("No available port found.");
+  }
+
+  private static isAccessTokenValid(token: OcaStoredToken): boolean {
+    const now = Math.floor(Date.now() / 1000);
+    return (
+      typeof token.expires_at === "number" &&
+      now < token.expires_at - this.RENEW_TOKEN_BUFFER_SEC
+    );
+  }
+  private static async getClient(): Promise<Client> {
+    if (this.client) {
+      return this.client;
+    }
+    const config = await this.getConfig();
+    const issuer = await Issuer.discover(config.idcs_url);
+    this.client = new issuer.Client({
+      client_id: config.client_id,
+      client_secret: config.client_secret,
+      redirect_uris: [],
+      response_types: ["code"],
+      token_endpoint_auth_method: config.client_secret
+        ? "client_secret_basic"
+        : "none",
+    });
+    return this.client;
+  }
+  public static async refreshToken(): Promise<OcaStoredToken | null> {
+    if (!this.cachedToken) {
+      this.cachedToken = await this.loadToken();
+    }
+    if (!this.cachedToken?.refresh_token) {
+      return null;
+    }
+    const client = await this.getClient();
+    try {
+      const refreshed: TokenSet = await client.refresh(
+        this.cachedToken.refresh_token,
+      );
+      const stored = await this.saveToken(refreshed);
+      this.cachedToken = stored;
+      return stored;
+    } catch (err) {
+      console.warn("⚠️ Refresh failed:", err);
+      return null;
+    }
+  }
+  private static async checkAndRefreshTokenIfNeeded(): Promise<OcaStoredToken | null> {
+    if (this.cachedToken && this.isAccessTokenValid(this.cachedToken)) {
+      return this.cachedToken;
+    }
+    return await this.refreshToken();
+  }
+  public static async getToken(): Promise<OcaStoredToken> {
+    const config = await this.getConfig();
+    const client = await this.getClient();
+    this.cachedToken = await this.loadToken();
+    const refreshed = await this.checkAndRefreshTokenIfNeeded();
+    if (refreshed) {
+      return refreshed;
+    }
+
+    // Change: Find and BIND immediately, and use the returned server instance
+    const { port, server } = await this.findAndBindAvailablePort();
+    const redirect_uri = `http://localhost:${port}/callback`;
+    const app = express();
+
+    const tokenPromise = new Promise<OcaStoredToken>((resolve, reject) => {
+      // Attach Express app to the already opened server
+      server.on("request", app);
+
+      // Initiate OAuth flow after the server is listening
+      (async () => {
+        let authUrl: string;
+        if (config.use_pkce) {
+          this.codeVerifier = generators.codeVerifier();
+          const codeChallenge = generators.codeChallenge(this.codeVerifier);
+          authUrl = client.authorizationUrl({
+            scope: config.scopes,
+            redirect_uri,
+            code_challenge: codeChallenge,
+            code_challenge_method: "S256",
+          });
+        } else {
+          authUrl = client.authorizationUrl({
+            scope: config.scopes,
+            redirect_uri,
+          });
+        }
+        await open(authUrl);
+      })().catch((err) => {
+        // Handle or log the error
+        console.error("Error launching browser:", err);
+        reject(err); // Optionally reject the outer promise
+      });
+
+      app.get("/callback", async (req: Request, res: Response) => {
+        try {
+          const params = client.callbackParams(req);
+          let tokenSet: TokenSet;
+          if (config.use_pkce) {
+            tokenSet = await client.callback(redirect_uri, params, {
+              code_verifier: this.codeVerifier,
+            });
+          } else {
+            tokenSet = await client.callback(redirect_uri, params);
+          }
+          const stored = await this.saveToken(tokenSet);
+          this.cachedToken = stored;
+          res.send("✅ Token obtained. You may close this tab.");
+          resolve(stored);
+        } catch (err) {
+          res.status(400).send(`❌ OAuth failed. {error: ${err}}`);
+          reject(err);
+        } finally {
+          server.close();
+        }
+      });
+    });
+    return await tokenPromise;
+  }
+}
diff --git a/core/llm/llms/oca/util/utils.ts b/core/llm/llms/oca/util/utils.ts
new file mode 100644
index 00000000000..39316e27db1
--- /dev/null
+++ b/core/llm/llms/oca/util/utils.ts
@@ -0,0 +1,71 @@
+import { name, version } from "../../../../package.json"
+import { jwtDecode, type JwtPayload } from "jwt-decode"
+import SHA256 from "crypto-js/sha256"
+import { enc } from "crypto-js"
+
+/**
+ * Generates a compliant customer opc-request-id segment.
+ *
+ * Format (32 hex):
+ *   [token hash (8)] [taskId hash (8)] [timestamp (8)] [random (8)]
+ * - token hash:    first 4 bytes of SHA-256(token)
+ * - taskId hash:   first 4 bytes of SHA-256(taskId)
+ * - timestamp:     Unix seconds since epoch, 8 hex digits
+ * - random:        strong random, 8 hex digits
+ *
+ * Use: Send this single value as the opc-request-id header.
+ */
+function hash8(str: string): string {
+  const hash = SHA256(str)
+  // Get first 4 bytes as hex (8 characters)
+  return hash.toString(enc.Hex).substring(0, 8)
+}
+
+function randomHex8(): string {
+  // Generate a random 32-bit (4-byte) number and return as 8 hex digits
+  const arr = new Uint32Array(1)
+  // Use built-in Math.random for cross-platform, or
+  // Use node's crypto if available, but sticking to Math.random for cross-environment
+  arr[0] =
+    Math.floor(Math.random() * 0x100000000) // generate 32-bits
+  return arr[0].toString(16).padStart(8, "0")
+}
+
+export function generateOpcRequestId(taskId: string, token: string): string {
+  const tokenHex = hash8(token)
+  const taskHex = hash8(taskId)
+  const timestampHex = Math.floor(Date.now() / 1000)
+    .toString(16)
+    .padStart(8, "0")
+  return tokenHex + taskHex + timestampHex + randomHex8()
+}
+
+/**
+ * Create headers for OCA requests
+ */
+export function createOcaHeaders(accessToken: string, taskId: string): Record<string, string> {
+  const opcRequestId = generateOpcRequestId(taskId, accessToken)
+  return {
+    Authorization: `Bearer ${accessToken}`,
+    "Content-Type": "application/json",
+    client: "Continue",
+    "client-version": `${name}-${version}`,
+    "client-ide": name,
+    "client-ide-version": version,
+    "opc-request-id": opcRequestId,
+  }
+}
+
+/**
+ * Decodes a JWT payload without validation and returns the 'sub' claim.
+ * Use only for non-security, informational, or display purposes.
+ * @param token JWT string
+ */
+export function parseJwtPayload(token: string): JwtPayload | null {
+  try {
+    const payload = jwtDecode(token)
+    return payload
+  } catch {
+    return null
+  }
+}
\ No newline at end of file
diff --git a/core/package-lock.json b/core/package-lock.json
index d2afa4b76a6..c1154f0d821 100644
--- a/core/package-lock.json
+++ b/core/package-lock.json
@@ -28,9 +28,11 @@
         "cheerio": "^1.0.0-rc.12",
         "commander": "^12.0.0",
         "comment-json": "^4.2.3",
+        "crypto-js": "^4.2.0",
         "dbinfoz": "^0.14.0",
         "diff": "^7.0.0",
         "dotenv": "^16.4.5",
+        "express": "^5.1.0",
         "fastest-levenshtein": "^1.0.16",
         "filtrex": "^3.1.0",
         "follow-redirects": "^1.15.5",
@@ -38,11 +40,13 @@
         "handlebars": "^4.7.8",
         "http-proxy-agent": "^7.0.1",
         "https-proxy-agent": "^7.0.3",
+        "iconv-lite": "^0.6.3",
         "ignore": "^5.3.1",
         "is-localhost-ip": "^2.0.0",
         "jinja-js": "0.1.8",
         "js-tiktoken": "^1.0.8",
         "jsdom": "^24.0.0",
+        "jwt-decode": "4.0.0",
         "launchdarkly-node-client-sdk": "^3.2.0",
         "llm-code-highlighter": "^0.0.14",
         "lru-cache": "^11.0.2",
@@ -52,6 +56,7 @@
         "ollama": "^0.4.6",
         "onnxruntime-node": "1.14.0",
         "openai": "^4.104.0",
+        "openid-client": "^5.7.1",
         "p-limit": "^6.1.0",
         "partial-json": "^0.1.7",
         "pg": "^8.11.3",
@@ -84,7 +89,9 @@
         "@google/generative-ai": "^0.11.4",
         "@shikijs/colorized-brackets": "^3.7.0",
         "@shikijs/transformers": "^3.7.0",
+        "@types/crypto-js": "^4.2.2",
         "@types/diff": "^7.0.1",
+        "@types/express": "^5.0.3",
         "@types/follow-redirects": "^1.14.4",
         "@types/jest": "^29.5.12",
         "@types/jquery": "^3.5.29",
@@ -169,7 +176,7 @@
     },
     "../packages/openai-adapters": {
       "name": "@continuedev/openai-adapters",
-      "version": "1.0.45",
+      "version": "1.0.46",
       "license": "Apache-2.0",
       "dependencies": {
         "@aws-sdk/client-bedrock-runtime": "^3.842.0",
@@ -185,13 +192,20 @@
         "zod": "^3.24.2"
       },
       "devDependencies": {
+        "@semantic-release/changelog": "^6.0.3",
+        "@semantic-release/commit-analyzer": "^13.0.1",
+        "@semantic-release/git": "^10.0.1",
+        "@semantic-release/github": "^11.0.3",
+        "@semantic-release/npm": "^12.0.2",
+        "@semantic-release/release-notes-generator": "^14.0.3",
         "@types/follow-redirects": "^1.14.4",
         "@types/jest": "^29.5.14",
         "@types/json-schema": "^7.0.15",
         "cross-env": "^7.0.3",
+        "semantic-release": "^24.2.7",
         "ts-jest": "^29.2.3",
         "ts-node": "^10.9.2",
-        "vitest": "^1.6.1"
+        "vitest": "^3.2.4"
       }
     },
     "node_modules/@75lb/deep-merge": {
@@ -5532,6 +5546,17 @@
         "@babel/types": "^7.20.7"
       }
     },
+    "node_modules/@types/body-parser": {
+      "version": "1.19.6",
+      "resolved": "https://registry.npmjs.org/@types/body-parser/-/body-parser-1.19.6.tgz",
+      "integrity": "sha512-HLFeCYgz89uk22N5Qg3dvGvsv46B8GLvKKo1zKG4NybA8U2DiEO3w9lqGg29t/tfLRJpJ6iQxnVw4OnB7MoM9g==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/connect": "*",
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/caseless": {
       "version": "0.12.5",
       "resolved": "https://registry.npmjs.org/@types/caseless/-/caseless-0.12.5.tgz",
@@ -5550,6 +5575,23 @@
       "integrity": "sha512-n7RlEEJ+4x4TS7ZQddTmNSxP+zziEG0TNsMfiRIxcIVXt71ENJ9ojeXmGO3wPoTdn7pJcU2xc3CJYMktNT6DPg==",
       "peer": true
     },
+    "node_modules/@types/connect": {
+      "version": "3.4.38",
+      "resolved": "https://registry.npmjs.org/@types/connect/-/connect-3.4.38.tgz",
+      "integrity": "sha512-K6uROf1LD88uDQqJCktA4yzL1YYAK6NgfsI0v/mTgyPKWsX1CnJ0XPSDhViejru1GcRkLWb8RlzFYJRqGUbaug==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/crypto-js": {
+      "version": "4.2.2",
+      "resolved": "https://registry.npmjs.org/@types/crypto-js/-/crypto-js-4.2.2.tgz",
+      "integrity": "sha512-sDOLlVbHhXpAUAL0YHDUUwDZf3iN4Bwi4W6a0W0b+QcAezUbRtH4FVb+9J4h+XFPW7l/gQ9F8qC7P+Ec4k8QVQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/diff": {
       "version": "7.0.1",
       "resolved": "https://registry.npmjs.org/@types/diff/-/diff-7.0.1.tgz",
@@ -5564,6 +5606,31 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@types/express": {
+      "version": "5.0.3",
+      "resolved": "https://registry.npmjs.org/@types/express/-/express-5.0.3.tgz",
+      "integrity": "sha512-wGA0NX93b19/dZC1J18tKWVIYWyyF2ZjT9vin/NRu0qzzvfVzWjs04iq2rQ3H65vCTQYlRqs3YHfY7zjdV+9Kw==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/body-parser": "*",
+        "@types/express-serve-static-core": "^5.0.0",
+        "@types/serve-static": "*"
+      }
+    },
+    "node_modules/@types/express-serve-static-core": {
+      "version": "5.0.7",
+      "resolved": "https://registry.npmjs.org/@types/express-serve-static-core/-/express-serve-static-core-5.0.7.tgz",
+      "integrity": "sha512-R+33OsgWw7rOhD1emjU7dzCDHucJrgJXMA5PYCzJxVil0dsyx5iBEPHqpPfiKNJQb7lZ1vxwoLR4Z87bBUpeGQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*",
+        "@types/qs": "*",
+        "@types/range-parser": "*",
+        "@types/send": "*"
+      }
+    },
     "node_modules/@types/follow-redirects": {
       "version": "1.14.4",
       "resolved": "https://registry.npmjs.org/@types/follow-redirects/-/follow-redirects-1.14.4.tgz",
@@ -5592,6 +5659,13 @@
         "@types/unist": "*"
       }
     },
+    "node_modules/@types/http-errors": {
+      "version": "2.0.5",
+      "resolved": "https://registry.npmjs.org/@types/http-errors/-/http-errors-2.0.5.tgz",
+      "integrity": "sha512-r8Tayk8HJnX0FztbZN7oVqGccWgw98T/0neJphO91KkmOzug1KkofZURD4UaD5uH8AqcFLfdPErnBod0u71/qg==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/istanbul-lib-coverage": {
       "version": "2.0.6",
       "resolved": "https://registry.npmjs.org/@types/istanbul-lib-coverage/-/istanbul-lib-coverage-2.0.6.tgz",
@@ -5673,6 +5747,13 @@
         "@types/unist": "*"
       }
     },
+    "node_modules/@types/mime": {
+      "version": "1.3.5",
+      "resolved": "https://registry.npmjs.org/@types/mime/-/mime-1.3.5.tgz",
+      "integrity": "sha512-/pyBZWSLD2n0dcHE3hq8s8ZvcETHtEuF+3E7XVt0Ig2nvsVQXdghHVcEkIWjy9A0wKfTn97a/PSDYohKIlnP/w==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/mozilla-readability": {
       "version": "0.2.1",
       "resolved": "https://registry.npmjs.org/@types/mozilla-readability/-/mozilla-readability-0.2.1.tgz",
@@ -5735,6 +5816,20 @@
         "xmlbuilder": ">=11.0.1"
       }
     },
+    "node_modules/@types/qs": {
+      "version": "6.14.0",
+      "resolved": "https://registry.npmjs.org/@types/qs/-/qs-6.14.0.tgz",
+      "integrity": "sha512-eOunJqu0K1923aExK6y8p6fsihYEn/BYuQ4g0CxAAgFc4b/ZLN4CrsRZ55srTdqoiLzU2B2evC+apEIxprEzkQ==",
+      "dev": true,
+      "license": "MIT"
+    },
+    "node_modules/@types/range-parser": {
+      "version": "1.2.7",
+      "resolved": "https://registry.npmjs.org/@types/range-parser/-/range-parser-1.2.7.tgz",
+      "integrity": "sha512-hKormJbkJqzQGhziax5PItDUTMAM9uE2XXQmM37dyd4hVM+5aVl7oVxMVUiVQn2oCQFN/LKCZdvSM0pFRqbSmQ==",
+      "dev": true,
+      "license": "MIT"
+    },
     "node_modules/@types/readable-stream": {
       "version": "4.0.18",
       "resolved": "https://registry.npmjs.org/@types/readable-stream/-/readable-stream-4.0.18.tgz",
@@ -5776,6 +5871,29 @@
         "node": ">= 0.12"
       }
     },
+    "node_modules/@types/send": {
+      "version": "0.17.5",
+      "resolved": "https://registry.npmjs.org/@types/send/-/send-0.17.5.tgz",
+      "integrity": "sha512-z6F2D3cOStZvuk2SaP6YrwkNO65iTZcwA2ZkSABegdkAh/lf+Aa/YQndZVfmEXT5vgAp6zv06VQ3ejSVjAny4w==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/mime": "^1",
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@types/serve-static": {
+      "version": "1.15.8",
+      "resolved": "https://registry.npmjs.org/@types/serve-static/-/serve-static-1.15.8.tgz",
+      "integrity": "sha512-roei0UY3LhpOJvjbIP6ZZFngyLKl5dskOtDhxY5THRSpO+ZI+nzJ+m5yUMzGrp89YRa7lvknKkMYjqQFGwA7Sg==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/http-errors": "*",
+        "@types/node": "*",
+        "@types/send": "*"
+      }
+    },
     "node_modules/@types/sizzle": {
       "version": "2.3.9",
       "resolved": "https://registry.npmjs.org/@types/sizzle/-/sizzle-2.3.9.tgz",
@@ -7892,6 +8010,12 @@
         "node": ">= 8"
       }
     },
+    "node_modules/crypto-js": {
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/crypto-js/-/crypto-js-4.2.0.tgz",
+      "integrity": "sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==",
+      "license": "MIT"
+    },
     "node_modules/css-select": {
       "version": "5.1.0",
       "resolved": "https://registry.npmjs.org/css-select/-/css-select-5.1.0.tgz",
@@ -12593,6 +12717,15 @@
         "jinjajs": "cli.js"
       }
     },
+    "node_modules/jose": {
+      "version": "4.15.9",
+      "resolved": "https://registry.npmjs.org/jose/-/jose-4.15.9.tgz",
+      "integrity": "sha512-1vUQX+IdDMVPj4k8kOxgUqlcK518yluMuGZwqlr44FS1ppZB/5GWh4rZG89erpOBOJjU/OBsnCVFfapsRz6nEA==",
+      "license": "MIT",
+      "funding": {
+        "url": "https://github.com/sponsors/panva"
+      }
+    },
     "node_modules/js-md4": {
       "version": "0.3.2",
       "resolved": "https://registry.npmjs.org/js-md4/-/js-md4-0.3.2.tgz",
@@ -12821,6 +12954,15 @@
         "safe-buffer": "^5.0.1"
       }
     },
+    "node_modules/jwt-decode": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/jwt-decode/-/jwt-decode-4.0.0.tgz",
+      "integrity": "sha512-+KJGIyHgkGuIq3IEBNftfhW/LfWhXUIY6OmyVWjliu5KH1y0fw7VQ8YndE2O4qZdMSd9SqbnC8GOcZEy0Om7sA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      }
+    },
     "node_modules/keyv": {
       "version": "4.5.4",
       "resolved": "https://registry.npmjs.org/keyv/-/keyv-4.5.4.tgz",
@@ -14086,6 +14228,15 @@
         "node": ">=0.10.0"
       }
     },
+    "node_modules/object-hash": {
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/object-hash/-/object-hash-2.2.0.tgz",
+      "integrity": "sha512-gScRMn0bS5fH+IuwyIFgnh9zBdo4DV+6GhygmWM9HyNJSgS0hScp1f5vjtm7oIIOiT9trXrShAkLFSc2IqKNgw==",
+      "license": "MIT",
+      "engines": {
+        "node": ">= 6"
+      }
+    },
     "node_modules/object-inspect": {
       "version": "1.13.3",
       "resolved": "https://registry.npmjs.org/object-inspect/-/object-inspect-1.13.3.tgz",
@@ -14195,6 +14346,15 @@
       "integrity": "sha512-PX1wu0AmAdPqOL1mWhqmlOd8kOIZQwGZw6rh7uby9fTc5lhaOWFLX3I6R1hrF9k3zUY40e6igsLGkDXK92LJNg==",
       "dev": true
     },
+    "node_modules/oidc-token-hash": {
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/oidc-token-hash/-/oidc-token-hash-5.1.0.tgz",
+      "integrity": "sha512-y0W+X7Ppo7oZX6eovsRkuzcSM40Bicg2JEJkDJ4irIt1wsYAP5MLSNv+QAogO8xivMffw/9OvV3um1pxXgt1uA==",
+      "license": "MIT",
+      "engines": {
+        "node": "^10.13.0 || >=12.0.0"
+      }
+    },
     "node_modules/ollama": {
       "version": "0.4.9",
       "resolved": "https://registry.npmjs.org/ollama/-/ollama-0.4.9.tgz",
@@ -14404,6 +14564,33 @@
         "webidl-conversions": "^3.0.0"
       }
     },
+    "node_modules/openid-client": {
+      "version": "5.7.1",
+      "resolved": "https://registry.npmjs.org/openid-client/-/openid-client-5.7.1.tgz",
+      "integrity": "sha512-jDBPgSVfTnkIh71Hg9pRvtJc6wTwqjRkN88+gCFtYWrlP4Yx2Dsrow8uPi3qLr/aeymPF3o2+dS+wOpglK04ew==",
+      "license": "MIT",
+      "dependencies": {
+        "jose": "^4.15.9",
+        "lru-cache": "^6.0.0",
+        "object-hash": "^2.2.0",
+        "oidc-token-hash": "^5.0.3"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/panva"
+      }
+    },
+    "node_modules/openid-client/node_modules/lru-cache": {
+      "version": "6.0.0",
+      "resolved": "https://registry.npmjs.org/lru-cache/-/lru-cache-6.0.0.tgz",
+      "integrity": "sha512-Jo6dJ04CmSjuznwJSS3pUeWmd/H0ffTlkXXgwZi+eq1UCmqQwCh+eLsYOYCwY991i2Fah4h1BEMCx4qThGbsiA==",
+      "license": "ISC",
+      "dependencies": {
+        "yallist": "^4.0.0"
+      },
+      "engines": {
+        "node": ">=10"
+      }
+    },
     "node_modules/optionator": {
       "version": "0.9.4",
       "resolved": "https://registry.npmjs.org/optionator/-/optionator-0.9.4.tgz",
diff --git a/core/package.json b/core/package.json
index 13830d83b42..44a368cfe80 100644
--- a/core/package.json
+++ b/core/package.json
@@ -35,6 +35,8 @@
     "@types/tar": "^6.1.13",
     "@types/uuid": "^9.0.7",
     "@types/win-ca": "^3.5.4",
+    "@types/express": "^5.0.3",
+    "@types/crypto-js": "^4.2.2",
     "cross-env": "^7.0.3",
     "esbuild": "0.17.19",
     "eslint": "^8",
@@ -117,7 +119,11 @@
     "winston": "^3.17.0",
     "workerpool": "^9.1.3",
     "yaml": "^2.4.2",
-    "zod": "^3.24.2"
+    "zod": "^3.24.2",
+    "jwt-decode": "4.0.0",
+    "openid-client": "^5.7.1",
+    "express": "^5.1.0",
+    "crypto-js": "^4.2.0" 
   },
   "engine-strict": true,
   "engines": {
diff --git a/extensions/vscode/.npmrc b/extensions/vscode/.npmrc
deleted file mode 100644
index aa026a602a1..00000000000
--- a/extensions/vscode/.npmrc
+++ /dev/null
@@ -1,3 +0,0 @@
-# Used by prepackage.js to copy from node_modules into out/node_modules
-public-hoist-pattern[]=@lancedb/*
-public-hoist-pattern[]=@esbuild/*
\ No newline at end of file
diff --git a/extensions/vscode/package-lock.json b/extensions/vscode/package-lock.json
index 8780ab1e28d..dd34fd56571 100644
--- a/extensions/vscode/package-lock.json
+++ b/extensions/vscode/package-lock.json
@@ -1,12 +1,12 @@
 {
   "name": "continue",
-  "version": "1.1.63",
+  "version": "1.1.67",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
     "": {
       "name": "continue",
-      "version": "1.1.63",
+      "version": "1.1.67",
       "license": "Apache-2.0",
       "dependencies": {
         "@continuedev/config-types": "^1.0.14",
@@ -119,9 +119,11 @@
         "cheerio": "^1.0.0-rc.12",
         "commander": "^12.0.0",
         "comment-json": "^4.2.3",
+        "crypto-js": "^4.2.0",
         "dbinfoz": "^0.14.0",
         "diff": "^7.0.0",
         "dotenv": "^16.4.5",
+        "express": "^5.1.0",
         "fastest-levenshtein": "^1.0.16",
         "filtrex": "^3.1.0",
         "follow-redirects": "^1.15.5",
@@ -129,11 +131,13 @@
         "handlebars": "^4.7.8",
         "http-proxy-agent": "^7.0.1",
         "https-proxy-agent": "^7.0.3",
+        "iconv-lite": "^0.6.3",
         "ignore": "^5.3.1",
         "is-localhost-ip": "^2.0.0",
         "jinja-js": "0.1.8",
         "js-tiktoken": "^1.0.8",
         "jsdom": "^24.0.0",
+        "jwt-decode": "4.0.0",
         "launchdarkly-node-client-sdk": "^3.2.0",
         "llm-code-highlighter": "^0.0.14",
         "lru-cache": "^11.0.2",
@@ -142,7 +146,8 @@
         "node-html-markdown": "^1.3.0",
         "ollama": "^0.4.6",
         "onnxruntime-node": "1.14.0",
-        "openai": "^4.76.0",
+        "openai": "^4.104.0",
+        "openid-client": "^5.7.1",
         "p-limit": "^6.1.0",
         "partial-json": "^0.1.7",
         "pg": "^8.11.3",
@@ -175,7 +180,9 @@
         "@google/generative-ai": "^0.11.4",
         "@shikijs/colorized-brackets": "^3.7.0",
         "@shikijs/transformers": "^3.7.0",
+        "@types/crypto-js": "^4.2.2",
         "@types/diff": "^7.0.1",
+        "@types/express": "^5.0.3",
         "@types/follow-redirects": "^1.14.4",
         "@types/jest": "^29.5.12",
         "@types/jquery": "^3.5.29",
diff --git a/gui/package-lock.json b/gui/package-lock.json
index d611543e27b..da85d3ec5a7 100644
--- a/gui/package-lock.json
+++ b/gui/package-lock.json
@@ -130,9 +130,11 @@
         "cheerio": "^1.0.0-rc.12",
         "commander": "^12.0.0",
         "comment-json": "^4.2.3",
+        "crypto-js": "^4.2.0",
         "dbinfoz": "^0.14.0",
         "diff": "^7.0.0",
         "dotenv": "^16.4.5",
+        "express": "^5.1.0",
         "fastest-levenshtein": "^1.0.16",
         "filtrex": "^3.1.0",
         "follow-redirects": "^1.15.5",
@@ -140,11 +142,13 @@
         "handlebars": "^4.7.8",
         "http-proxy-agent": "^7.0.1",
         "https-proxy-agent": "^7.0.3",
+        "iconv-lite": "^0.6.3",
         "ignore": "^5.3.1",
         "is-localhost-ip": "^2.0.0",
         "jinja-js": "0.1.8",
         "js-tiktoken": "^1.0.8",
         "jsdom": "^24.0.0",
+        "jwt-decode": "4.0.0",
         "launchdarkly-node-client-sdk": "^3.2.0",
         "llm-code-highlighter": "^0.0.14",
         "lru-cache": "^11.0.2",
@@ -153,7 +157,8 @@
         "node-html-markdown": "^1.3.0",
         "ollama": "^0.4.6",
         "onnxruntime-node": "1.14.0",
-        "openai": "^4.76.0",
+        "openai": "^4.104.0",
+        "openid-client": "^5.7.1",
         "p-limit": "^6.1.0",
         "partial-json": "^0.1.7",
         "pg": "^8.11.3",
@@ -186,7 +191,9 @@
         "@google/generative-ai": "^0.11.4",
         "@shikijs/colorized-brackets": "^3.7.0",
         "@shikijs/transformers": "^3.7.0",
+        "@types/crypto-js": "^4.2.2",
         "@types/diff": "^7.0.1",
+        "@types/express": "^5.0.3",
         "@types/follow-redirects": "^1.14.4",
         "@types/jest": "^29.5.12",
         "@types/jquery": "^3.5.29",
diff --git a/gui/public/logos/oca.png b/gui/public/logos/oca.png
new file mode 100644
index 0000000000000000000000000000000000000000..735f22d24c5e9426aec6df011cb09fb38fd0d1ad
GIT binary patch
literal 5882
zcmbVQcRXBMyB;-|Q4=x*!652jlrYiDFc`f>bVf;Z6TNp~)Cr;sA&4$&ln6oe=tQC>
zNOaMnTsi05^PT&B_x^MD{_VZq_kEtXtat4{)?P7M8p`Bk3}gTRfE=l!sB<;OTs_ew
z#8>Yz?_S5NfzVD4B?kahCjieZiLP`OYZV<70N~3B00f5v0H;@`;57i?u^<4jVF3WZ
z(*b~+u3636l2?Eh+6ZZjLIHTLWD)>A9u0utO2WIk0Z|SB!armH;40G9MUaR0FEkJT
zZ!{*4;BPtlHxc-B^)Uc|4|C8n!Wf~{;nprrP)i#ZD>T&G$@Mn@An6Ui5}nW(OBQb@
zM`sVXw-nnS4EUA&+bqDw@&^U;NQ%t}rNyG);*Mq!g9<_g*`&!>SXd<8ZEWE>iip45
zuQVw(dkn@EE+F9L<puQ;hPt@h2?$9@NC*hR1Yj`!D+a%Zk2A*7o8Q?3@@J6$j-!b7
zuy%KF#W=V)v;2;0Y31@5BgMw{JJH|QpLL?W9sZTc+2gNiT}@EnHzFVe6%_d2+%OKd
z|A*Ue<WILh=JjVf$=|`?S`OZ5$NP#7PH1P3tJ0)lFhR*b()<VVuR{OfY4k5oVe$Xr
z`48mZJr!IWUEFnDEv?bgLVqRuhv^^e-*v+^-5t<ZE&biN-}L{m{l%9Q_}$fibotLE
z{KI;+hSFq`0)KxG(qyIf^fv&2>)(-za(do)o2EdVUiY)D=A%Q8Qz1%MKt$Ec#wXj<
zI1WcdifBJW&8=mw_rcMjRlV;Otvr|A#&V>591qhcl&E%<6l28iIAhW{c8}8=Ee)UV
z!NQacBEZ4~?*zvx=PG}_Jbz@{+*G;M*3jZYIc9p4l~Z#1z4Eg1bff)eMKi^<051F+
zcuxRI!ECbBc_dnd|E7}QM|UPF%f=85>6R2!V+%cermutgfCO^eG<W*VV$lAaEbijG
zs+IdC<G@fViMmJcBGn7#V)iy2z<ls~?@Z=QFyBTmmXFkuMd)EeYr+XaJ?_=@!I#@%
zVam+gTU)6Il2|zhamc#K<6-vPo_*slF>irbtb*Z=yWfNUOnQm>M!T`1aA+MK2|1b_
zXgDvWPgR(`jybgAdN3(}vcy^WjVpF$xb@^f^TLAF%(O}@E@{C0a8Q^dY6oFJbwQ{a
z&s%W7o-j8bOZ3Kd*yENJx+}Lz8#KE_nwe%rs+^@3NCmQ?6I=%oo^n|AZr}UJK=LLC
z@yH{WuOD$vDVE(gup8z7AeOtdrz-L#vZC#Li|Ae7c)wO~`K&z7rm5%c-c)--z%N(m
zj}MvcqtKce(`0t@)B^5{o=lTZXY(@i(`9)RuWMN!(liY3L%eUv&nAawEN*|E+dZC8
zC192G3q0J}^~w!6aKF}hS&AhHH0Po^YsPDJMm{!A;WKU+nwLqJBH{3cp5adB8!qh<
zOwFF#jGnE2*C>R|h;iI@&yxus%7m5OVWfL{;QM$g0Oh`-JL96~?GOKzfWVNGD<7}O
zIM`GC=%~m~h+ofu@|(9FfB&pfb#GOShp!<jU@p4iMc?|5eq)ARVVX%%bA<m-*)l&!
zNnPR_zRc|r9&|N{AMV1}bE-ATl}7azElcW-B&0bt^($CG8fmp;{Mq;C6=Xvr{rTli
z2EoNo1ctx7_4TTGoygjSE#dk~Uc6axc=O$4N-wA0juoSic=M>$lm%U&z^~a^8N-it
zTRsgHEfNfxiQN9H5Fzk+X+z80$T2SN=hEb$^rYH*+(`#mYC(3*p(^DoBh%Yux9avb
z_x0KDH0ynphn`WjO;tmy{Zg<gf4?|QspNvyi+5mS3-DLkow9Ohk5<&>txgq_!T9VF
zR?Eu%^&jD|fvKF5fnI~8?3>x&88;d)mHn8a7bQ|jIdw{!qJl0<oYz3aY$0(3!a6;d
z=h<+PNcsCZ8c^D$65y%C-FaWn>&qvay*rM*TA#J}Y$zU5oW=0fm`hHduU(^CLU|kT
z_OD)t*DADLiyVIA4Gm4c;Ik>rTKo=(8kr5aC$^n4B8y8pjufH^MP2%BpLy;PrRCay
zMQ*<_JAPJzM1Bd28rq%>7<M_4XuP%Mzy)D_ac`u>tJ3SekAQggC!Y~KDWJ*_+Y6|T
z;v!ZNVRG<xIQJAq-PTM2+vl9%2Y5864%(B}OJ}JRwGlqk^IYPnocqZ$Ts+D6BXCJ&
z9^V3HP42`_SP<V`=3jHWmB{G><4!UKzk^wzK(v*z%TbELg7a~4mRX=_2p#P_&4D^0
zs)$`E?6nBF+Oqep&njfJulsWi#AG6-8A3nrAeIhqLk58XPgq8F5Xne&p&w~YgzYAT
z4UuFIy&=@PZVHf?W^dznajj&<<}J4<gcr#^>#Di=`Du^5MMV&Ga0|ZdqX(XRSsD}z
zD5|a9KhGJ`&=q~c(Q197+f5pUTBnaS9t)DNcvvb@2?8wvdkTaz&+|E+vwunaP+0u_
zxQ_Sf;El|M56YF(AwmT8i;<()(SEkK7UBe9Rt3W1v}KcIuI@t^j}%SUrtE;cBM0W)
zIX`A!E;9dRvjS{p5}%RVlt{dr6PBGOH%#9zjZS1k*{b8)2^NxaHX9_<@*+rb_hnNO
z=JDg|YVO*tdx5Y$CU50|irlz6h~=_d4{MQcJ1DyyF18b<sN*v#<_ES<i>BP(7n+BL
zd?M>jnJxH=fVXj&MS9wkrOf>3G<fgv_Jy$Y<;Q#lDN%<D9C!JB)+C@cnDTN%O9WwH
zp?Rb|;e9}$iX$4*aCY!PsrXiI&oGF6`c%$0{jeDecbve<@Bra2U&`!GYl#HXQh~?`
zt@-X{4|!Qhw)67Z93h|M<UzbCgdZqUA6E&U%9219QkZIbqlc>RK6E@}6oL@Nf{9~Q
zI$sf1Cxy|<0lK)104mJb9u`uKWg&W`ElqD<5m=l(jzjw<WlQv{(M>L+WJKru-da%d
z{oZgWMgBKt1eGASrOLdDuTWP6dy7%m5a{ImZcK6=i9vB+j2vo)Wh!Q|_w{DEJwbT+
zKwnw+<#YN{1N@5ntrxrsqg~coCMyQ46Dic;7kaQ(TU+<Tp`4ue;$kKE9Ua2^0%-$|
zdv~QkbMzPZp~!aBNtb-!cCxw5#R!yRRHI=N;lBIvCn{^8ohZ{28XWiXA+_|g&nH0w
z=QzHxu^vE(gefmGre<hj#ABa36rDEqT653lYkLb?4MoSQA5o;DGLbbV|EVGWtMoO(
zQp{VE-bdrIPu_i+J0F*N&gX&;McX~?BYRe>pl*TOot^;d)0+J3idSWOH!qU|enVW!
zJ0Tg((kH}C-&iqwx}nYdKIvE9{vNBy#FHTrvLfNmFOxj&^$dMITf$IF`a`nbIC;wV
z@?rruB}DYg)HQ6RTuDGf1o`EH!mnPT82d2q)iU;sS5VsC6NcZ8yhVuRF)Y$7KDXQz
z+?q)C<2<e(s7Xg0H_e9Q<{T>_uNzIC87$2_Vwcvu$&Q#9KMu%Q-oEIe6Zb^kt|jsJ
zc7A|gulrEQ<F#m%s%fXSfs(fL11vkQn$4R^200(otuwa|&$$aiim8r2AMN0f{DKJu
zei&Uccsvi4qbQAbqTXu~q`*5^@n*6&?M|ICp?rMsRNAA5?r?CbwM_2*^vM?kh+OfZ
z{mOnYRYB?fJ-l&kFdnRGw19Yj*yxCcj!q{qx*TDJ<MZY|m=U!qtkWS;0q1+E3F$*V
zi9teMgN;&T@toM+o|Yup%Ly$if4Cp69oU!z^h!+NPLDRDR^uQW38g(cmD1?Z4+%c1
zly58YOt@vx&_VK1u>17x7m8v+?TiW((`zbzwy$TwnH0@jxsui!XZ7El+rP>s^eiKG
zxaqX%IE0ckD6?0V?`3P`e_OqMDUQcbcTVr2+SB*}mi)-DvRx3e7*!C{Yj<+PJtt1-
zF+CTK3^bvZFR0oODJ$|8ay)OuGMO!#1~>d%dwa6hu<c|;^N@Cd7g=w^zOrN@cW^N$
z%kB$QiB!6?W;s&KNg}JSrQy`kc{oDBRe0Itx#<;{wA$M6wDx8<CbzKcJCQ-6<UL}@
z=p29+#$=Kjf=e08z;!yj3b!D(NQ=1JN7r=(0x3CTL^)b4NqcJ;#}LWs%||U^N#L0;
zTB91C#2eDduBYRSc(xYezJp6H^Fa;zgGF)S{!XPq7RO>$@|(oz)Bz)!5#;(+X>n)K
zw*rZzuPr57x;&du6obq7{KOMc_yoYn#oT+#j7W`qQ+OsVA?DiCYi141%Yf0`iE1Nz
z$`q$J9zeB*qP!#g3@tAvj0P)*x#fbvsSr6snh1+5VWutF2@awybg^&+Tu=47pySfG
z^o|qr%=Z4Ur>HQiNS3oSX=BQ50n*KqS5=W{@E{EdqnTSC_YhUHF>hJ=7xf<6rmQWB
zD1`t<8a{)iM9kvi&4xn<T7S5zN}%OnE4Ay_%5HWWdunXCzX-+oBRsr>{=W8_-P{BQ
zMb_Am%we<U)9&COEOwrIPw~c8^Ha6P41*8NiFZNBlitYua4^NYHjBg91s$e#dvfBX
zUpYalb}XtAT4P+T5NBBW6g77~A0a>`;OFzigVFjy0+iVip0}uex-~sYzv?L_Rg8v;
zHAJtRJ>FVW|5+-*8A%x^*7e5V(-0EXQV?F{T*1860t+^nwuA#)2&B+|_Y!Hx9#~nt
zQY>j9R9WcH8}s7LBz16LOvR4{izo30>NO?uHlV1r7e6~zF`_eOhJ0aIX5z0FrE#%~
zdey;JoeoA%sj3c_%5X6KmxF`!q~n@Ag9{}r^TyiaE)e|YP)IZAL#+|b06kKORK$^y
zS~fBzljFLLy+nldGZ>9He;I>3Eu9^w;+G`Y_1HZyOYqMEWdbM@X}rpJ`)-n=I6^`k
z^A_FMbCO#7t|#f(Es+O$oUS!orR=}5Bs>H`&KD%5Wy0NZ<z0&08P+AVI1Vg3BZY!)
z7^Ol@+1LuMTF;51=Jac6k(|-IyzxgBMBZ%)E2Hd*2h9)KK-LDsrD?2rHC$igx{Q=X
zv2#WQFAU;jMN2PL;|iBRT6l*LE$rQ<uLyjsf#^pkndah@NVlA(S4~NJZON|ir)JiL
z-MFM1;9mv>O^-mhvc&#f!Z}=$9&3URwLz5mN%Xk3D4|7hFh`~^ntcR2Ldx__`~CzV
zvo{nIVU<WPEJ-}7$F7Tb{zN-JDrcdLN;Y;B?Y>!lII3I6$kR>_!LzR8daSMl&zx||
z)^#Xm29n?miM5u~ZfYmNgb_N2;b*<8gJkF~WKTPTtmEN_6%YQ5YdkmA$`dt$5oSYW
zWz-r7Ysa2aeGZNNYT5^GP`ra69}*j)U7bxjq2kzD46=$F5;6yhe2omJgnC5Vr4Fr=
z-TGWVMjz=XycQv9JYBjGWlWD<aAbMPxYfQf*|LS@q$#+$n6R73L+H!h1A2ag{n@PX
z@Eu{lyg}BZ=+a{)dKn2n;){zHN9PNGPg5Cke4j+gj<!1_6eQ@7UDly_EnP(xs`kNX
z!i7K@+hpP6AN)t>Bb2WRZcx)L#+9?EO=qicd@HIY&=rx7!GaV<9VbR&ef1;EqEo&d
z-^~KGXeO@ubQF{Z#2+w0NJlw~61g6)gqnzSfbd=K#t;PFeYVK7oMc3I?!32i=kgJ2
zd=m_Ea~=pT4`Je1>CJngksv0tlEKH1Jym1T%0_bQI4cvfSFCMq8O%dX<y#~mtn!C0
zU+TVWE>4Ddyu^)IExOt?u|aq_Gb3pggDnC(yCtTWJ{@)?g_;oI>!FnKawL6*C$Yot
z5;x$DTNVO(T>5iI8HTb<Vl2VE9B*&;#~n<y&mZ<ye$ck)Q;7}@8+MuTkd7Y;8y!qr
zq&YL^94iR~+a~qTsn8ak(NhHRPk1P@20UQ{c%|%g>`<RcN1BrbLePmcHDMz{)8x5Q
zP5DiiVKP$3pRT*e8Qo7Pi7zwQGs;A~s>ws=)Y@nNdbM6b$+p{NhugIb86NS*Nsc>F
zgdq6`la`aFU!B*^6}bK)aM0=1JYxK){fe4ziruz5Me}LL{nf_Q+>B^C>gyLtDCOq1
ztRIVwUZ3YK)&#*MKD!|DuJD6ozIuAnQAd&F{IqEt-*p9I2=FCsYCQw#$ypJ!Ct_>=
zqmWK01KzwZa2nfIWYAL*KWqST6Kv*59vGi1tA#hJlW?zNA~AYSL5}=_jbmzQF?ES<
zb2(+cx_}giBySx<gB|2FhQFp%*97%K>rqF5X{mrVJh>#UJp;}lKS@Bza_m~?%ucqS
zys{)ecl&Bfz<_Nf%%+*B5%K4nb(=}19djJM&%`Z$X<^>d-^blft{w^N?6b$`6x|GR
z6ipTv_z^LX*q7t~jgj$fV*BcYL%Z@o5%q_M=K!iK3W*QogbPIq{^HmIfeE&>tG!Ri
z)?ff%f2UZO?t?X!v@Md`?Tf$vip^p{8W^Viw!m*3yLubGy-}r2i(oM~*Ez90{Mn1?
zhwO>IKORe%M>WWvB*|4>7h$>=VF;(I)X~qc|K=IWo!;Q+lu6*$9&B?>6q#@jY+D;?
zn>pnSabx_Rb~{9srY$j`R1EK~zp80-G`ZU~XxnOhtz-Xu7j0ZcBl;&k-{Sdw?X3L1
z$bss$0zKb73i5d|mkMkx3Xj^qyGArtQ7(`;D@EjqiaEy&9q0!`+>6d@Lz!oR)uJS*
zPrHYyozO3oy6kmYS=44VcGD0s(~m1|QZPZrXTaS!vn4{?=}KmA=P_Qgrg}J#qj^?!
zG?(A}NDr1`N)`$<omL9&EYG)KtYE+MUHX3bw53WO$$ou-Zo>i|r&0#(Q1y-4RYsLN
z?sCd~>Ir6Ibm5ALz|937iF7Dq43aReJBn7FCDwJ&1O%0c3rh<Z+__or{v5D|cX!<@
z`BmbtH~DReE5}-VJlWuQO#-u;I}^R)(eWThUH`RBJFyFb7+`ybWa&^MmZAE){hX@h
zY4FXq{v-5=g6yPpVd99E2wkW-)RFD3QhAel`mv1hJ33L_tW|O6p1E4ipqncb1F|Z!
zz}5-QJv4T8ZIrob`}Dh67JNW6@^hck&U>7Ayd^3y+XJ}sBGJya=$ZlZY+cFM2mDWF
zD@;4geU~?go-54uRu7!yz1vZVG;O|<Zjz)l(39T%=+JrY?9}_keB)-Vgy=8x={LXp
z8P|gm0rw4P`YL#8GM`8nQw0lqHd015c@5AI3xG8VSdk2A87nvFAW)HCYW+ngp%+i{
zIlthi2j<|%_6(WGxYq?0o1i#zjlk<|FF#V4HyEDuV8Ejy8)X~%KWX!Z;TdPtv^<(-
z+y~aISSo}xj{s6gI(vo*RU~%d+(WmwHxl)~AA$YbiP--~weY7p4$@oG;hyF8zdEc2
O0FX)=iWTw}q5lO?uY92Z

literal 0
HcmV?d00001

diff --git a/gui/src/pages/AddNewModel/configs/providers.ts b/gui/src/pages/AddNewModel/configs/providers.ts
index d210da9d662..2431dd51ec6 100644
--- a/gui/src/pages/AddNewModel/configs/providers.ts
+++ b/gui/src/pages/AddNewModel/configs/providers.ts
@@ -997,4 +997,25 @@ To get started, [register](https://dataplatform.cloud.ibm.com/registration/stepo
     packages: [{ ...models.AUTODETECT }],
     apiKeyUrl: "https://venice.ai/chat",
   },
+  oca: {
+    title: "Oracle Code Assist",
+    provider: "oca",
+    icon: "oca.png",
+    description:
+      "For internal Oracle Employees, please see https://confluence.oraclecorp.com/confluence/display/AICODE/Oracle+Code+Assist+via+Cline.",
+    longDescription: "For external customers, contact your IT admin to provision Oracle Code Assist access.",
+    tags: [ModelProviderTags.RequiresApiKey],
+    collectInputFor: [
+      {
+        inputType: "text",
+        key: "apiBase",
+        label: "Use Custom Base URL (optional)",
+        placeholder: "Enter the API Base URL",
+        defaultValue: "https://code-internal.aiservice.us-chicago-1.oci.oraclecloud.com/20250206/app/litellm",
+        required: false,
+      },
+      ...completionParamsInputsConfigs,
+    ],
+    packages: [{ ...models.AUTODETECT }],
+  },
 };
diff --git a/package-lock.json b/package-lock.json
index 0a253884094..b4289d4228a 100644
--- a/package-lock.json
+++ b/package-lock.json
@@ -1,5 +1,5 @@
 {
-  "name": "wt-openai-adapters-tests",
+  "name": "continue",
   "lockfileVersion": 3,
   "requires": true,
   "packages": {
diff --git a/packages/llm-info/src/index.ts b/packages/llm-info/src/index.ts
index fe71f419ddb..0eddc0ba6a8 100644
--- a/packages/llm-info/src/index.ts
+++ b/packages/llm-info/src/index.ts
@@ -4,6 +4,7 @@ import { Bedrock } from "./providers/bedrock.js";
 import { Cohere } from "./providers/cohere.js";
 import { Gemini } from "./providers/gemini.js";
 import { Mistral } from "./providers/mistral.js";
+import { Oca } from "./providers/oca.js";
 import { Ollama } from "./providers/ollama.js";
 import { OpenAi } from "./providers/openai.js";
 import { Vllm } from "./providers/vllm.js";
@@ -23,6 +24,7 @@ export const allModelProviders: ModelProvider[] = [
   Bedrock,
   Cohere,
   xAI,
+  Oca
 ];
 
 export const allLlms: LlmInfo[] = allModelProviders.flatMap((provider) =>
diff --git a/packages/llm-info/src/providers/oca.ts b/packages/llm-info/src/providers/oca.ts
new file mode 100644
index 00000000000..db4504be31a
--- /dev/null
+++ b/packages/llm-info/src/providers/oca.ts
@@ -0,0 +1,7 @@
+import { ModelProvider } from "../types.js";
+
+export const Oca: ModelProvider = {
+  models: [],
+  id: "oca",
+  displayName: "Oracle Code Assist",
+};
diff --git a/scripts/install-dependencies.sh b/scripts/install-dependencies.sh
index 3f3e54f7b74..ec322bd8a00 100755
--- a/scripts/install-dependencies.sh
+++ b/scripts/install-dependencies.sh
@@ -5,6 +5,9 @@
 # - Debug -> Extension
 set -e
 
+# Ensure .npmrc in the repo root is used for all npm commands
+export NPM_CONFIG_USERCONFIG="$(pwd)/.npmrc"
+
 # Check if node version matches .nvmrc
 if [ -f .nvmrc ]; then
     required_node_version=$(cat .nvmrc)

From b1024cce9f8601468be280e92680e458a0c7ce3f Mon Sep 17 00:00:00 2001
From: nturumel <nihar.turumella@oracle.com>
Date: Thu, 7 Aug 2025 04:16:18 -0500
Subject: [PATCH 2/5] wip:

---
 core/config/load.ts                           |   1 +
 core/index.d.ts                               |  22 ++++
 core/llm/index.ts                             |   7 +
 core/llm/llms/BedrockImport.ts                |   2 +-
 core/llm/llms/oca/Oca.ts                      |  74 ++++++++---
 .../components/modelSelection/ModelSelect.tsx | 123 ++++++++++++++++--
 gui/src/forms/AddModelForm.tsx                |   2 +
 gui/src/forms/ocaRestrictive.tsx              |  43 ++++++
 .../pages/AddNewModel/configs/providers.ts    |   2 +-
 9 files changed, 247 insertions(+), 29 deletions(-)
 create mode 100644 gui/src/forms/ocaRestrictive.tsx

diff --git a/core/config/load.ts b/core/config/load.ts
index 5206bb8bb04..73bd569fdb0 100644
--- a/core/config/load.ts
+++ b/core/config/load.ts
@@ -653,6 +653,7 @@ function llmToSerializedModelDescription(llm: ILLM): ModelDescription {
     apiKeyLocation: llm.apiKeyLocation,
     envSecretLocations: llm.envSecretLocations,
     sourceFile: llm.sourceFile,
+    modelInfo: llm.getModelInfo(llm.model)
   };
 }
 
diff --git a/core/index.d.ts b/core/index.d.ts
index f9fdc34cf4a..b5b409ef929 100644
--- a/core/index.d.ts
+++ b/core/index.d.ts
@@ -94,6 +94,7 @@ type RequiredLLMOptions =
 export interface ILLM
   extends Omit<LLMOptions, RequiredLLMOptions>,
     Required<Pick<LLMOptions, RequiredLLMOptions>> {
+  getModelInfo(model: string): ModelInfo | undefined;
   get providerName(): string;
   get underlyingProviderName(): string;
 
@@ -1131,6 +1132,26 @@ export interface ModelCapability {
   tools?: boolean;
 }
 
+export interface ModelInfo {
+  maxTokens?: number | undefined;
+  contextWindow?: number | undefined;
+  supportsImages?: boolean | undefined;
+  supportsPromptCache: boolean;
+  inputPrice?: number | undefined;
+  outputPrice?: number | undefined;
+  cacheWritesPrice?: number | undefined;
+  cacheReadsPrice?: number | undefined;
+  description?: string | undefined;
+  temperature?: number | undefined;
+  surveyContent?: string | undefined;
+  surveyId?: string | undefined;
+  bannerContent?: string | undefined;
+  modelName: string;
+}
+
+export interface ModelInfoMap {
+  models: { [key: string]: ModelInfo };
+}
 export interface ModelDescription {
   title: string;
   provider: string;
@@ -1156,6 +1177,7 @@ export interface ModelDescription {
   promptTemplates?: { [key: string]: string };
   cacheBehavior?: CacheBehavior;
   capabilities?: ModelCapability;
+  modelInfo?: ModelInfo
   roles?: ModelRole[];
   configurationStatus?: LLMConfigurationStatuses;
 
diff --git a/core/llm/index.ts b/core/llm/index.ts
index 0df366bbf25..54ea22243f9 100644
--- a/core/llm/index.ts
+++ b/core/llm/index.ts
@@ -29,6 +29,7 @@ import {
   TabAutocompleteOptions,
   TemplateType,
   Usage,
+  type ModelInfo,
 } from "../index.js";
 import mergeJson from "../util/merge.js";
 import { renderChatMessage } from "../util/messageContent.js";
@@ -295,6 +296,12 @@ export abstract class BaseLLM implements ILLM {
     this.autocompleteOptions = options.autocompleteOptions;
     this.sourceFile = options.sourceFile;
   }
+  getModelInfo(model: string): ModelInfo | undefined {
+    return undefined;
+  }
+  useLegacyCompletionsEndpoint?: boolean | undefined;
+  modelArn?: string | undefined;
+  env?: Record<string, string | number | boolean> | undefined;
 
   getConfigurationStatus() {
     return LLMConfigurationStatuses.VALID;
diff --git a/core/llm/llms/BedrockImport.ts b/core/llm/llms/BedrockImport.ts
index 3ab45f373f7..f378561232b 100644
--- a/core/llm/llms/BedrockImport.ts
+++ b/core/llm/llms/BedrockImport.ts
@@ -13,7 +13,7 @@ class BedrockImport extends BaseLLM {
     region: "us-east-1",
   };
   // the BedRock imported custom model ARN
-  modelArn?: string | undefined;
+  declare modelArn?: string | undefined;
 
   constructor(options: LLMOptions) {
     super(options);
diff --git a/core/llm/llms/oca/Oca.ts b/core/llm/llms/oca/Oca.ts
index 6303a8e42af..292d68fc94b 100644
--- a/core/llm/llms/oca/Oca.ts
+++ b/core/llm/llms/oca/Oca.ts
@@ -1,6 +1,4 @@
-import {
-  ChatCompletionCreateParams,
-} from "openai/resources/index";
+import { ChatCompletionCreateParams } from "openai/resources/index";
 
 import { streamSse } from "@continuedev/fetch";
 import {
@@ -8,6 +6,7 @@ import {
   CompletionOptions,
   LLMOptions,
   Tool,
+  type ModelInfo,
 } from "../../../index.js";
 import { renderChatMessage } from "../../../util/messageContent.js";
 import { BaseLLM } from "../../index.js";
@@ -20,17 +19,30 @@ import { OcaTokenManager } from "./util/ocaTokenManager.js";
 import { createOcaHeaders, generateOpcRequestId } from "./util/utils.js";
 import { DEFAULT_OCA_BASE_URL, DEFAULT_OCA_VERSION } from "./util/constants.js";
 
+interface ModelInfoMap {
+  models: { [key: string]: ModelInfo };
+}
+
+const parsePrice = (price: any) => {
+  if (price) {
+    return parseFloat(price) * 1_000_000;
+  }
+  return undefined;
+};
 class Oca extends BaseLLM {
+  private modelMap: ModelInfoMap;
+
   constructor(options: LLMOptions) {
     super({
       ...options,
       capabilities: {
         uploadImage: false,
-        tools: true
-      }
+        tools: true,
+      },
     });
     this.uniqueId = options.uniqueId || "no-unique-id";
     this.apiVersion = options.apiVersion ?? DEFAULT_OCA_VERSION;
+    this.modelMap = { models: {} };
   }
 
   static providerName = "oca";
@@ -105,9 +117,7 @@ class Oca extends BaseLLM {
     return completion;
   }
 
-  protected _getEndpoint(
-    endpoint: "chat/completions" | "models",
-  ) {
+  protected _getEndpoint(endpoint: "chat/completions" | "models" | "model/info") {
     if (!this.apiBase) {
       throw new Error(
         "No API base URL provided. Please set the 'apiBase' option in config.json",
@@ -153,9 +163,9 @@ class Oca extends BaseLLM {
     messages: ChatMessage[],
     signal: AbortSignal,
     options: CompletionOptions,
-  ): AsyncGenerator<ChatMessage> {    
+  ): AsyncGenerator<ChatMessage> {
     const body = this._convertArgs(options, messages);
-    const headers = await this._getHeaders()
+    const headers = await this._getHeaders();
 
     const response = await this.fetch(this._getEndpoint("chat/completions"), {
       method: "POST",
@@ -185,18 +195,52 @@ class Oca extends BaseLLM {
     }
   }
 
-
   async listModels(): Promise<string[]> {
-    const headers = await this._getHeaders()
-    const response = await this.fetch(this._getEndpoint("models"), {
+    const headers = await this._getHeaders();
+    const response = await this.fetch(this._getEndpoint("model/info"), {
       method: "GET",
       headers: headers,
     });
 
-    const data = await response.json();
-    return data.data.map((m: any) => m.id);
+    const data = (await response.json()).data;
+    // Initialize the map
+    for (const model of data) {
+      if (typeof model?.litellm_params?.model !== "string") {
+        continue;
+      }
+      const modelId: string = model.litellm_params.model;
+      const maxTokens = model.litellm_params?.max_tokens;
+      if (!modelId) {
+        continue;
+      }
+
+      const modelInfo = model.model_info;
+
+      const ocaModelInfo: ModelInfo = {
+        maxTokens: maxTokens || -1,
+        contextWindow: modelInfo.context_window,
+        supportsImages: modelInfo.supports_vision || false,
+        supportsPromptCache: modelInfo.supports_caching || false,
+        inputPrice: parsePrice(modelInfo.input_price) || 0,
+        outputPrice: parsePrice(modelInfo.output_price) || 0,
+        cacheWritesPrice: parsePrice(modelInfo.caching_price) || 0,
+        cacheReadsPrice: parsePrice(modelInfo.cached_price) || 0,
+        description: modelInfo.description,
+        surveyContent: modelInfo.survey_content,
+        surveyId: modelInfo.survey_id,
+        temperature: modelInfo.temperature || 0,
+        bannerContent: modelInfo.banner,
+        modelName: modelId,
+      };
+      this.modelMap.models[modelId] = ocaModelInfo;
+    }
+    console.log("Oca models fetched", this.modelMap);
+    return Object.keys(this.modelMap.models);
   }
 
+  getModelInfo(model: string): ModelInfo | undefined {
+    return this.modelMap.models[model]
+  }
 }
 
 export default Oca;
diff --git a/gui/src/components/modelSelection/ModelSelect.tsx b/gui/src/components/modelSelection/ModelSelect.tsx
index d474fe58a68..ecef6ccc8d3 100644
--- a/gui/src/components/modelSelection/ModelSelect.tsx
+++ b/gui/src/components/modelSelection/ModelSelect.tsx
@@ -25,6 +25,7 @@ import {
   ListboxOption,
   ListboxOptions,
 } from "../ui/Listbox";
+import { OcaRestrictivePopup } from "../../forms/ocaRestrictive";
 
 interface ModelOptionProps {
   option: Option;
@@ -64,6 +65,11 @@ function ModelOption({
     }
   }
 
+  function requiresConfirmation(modelTitle: string) {
+    const name = modelTitle.toLowerCase();
+    return name.includes("openai") || name.includes("gpt");
+  }
+
   return (
     <ListboxOption
       key={idx}
@@ -99,6 +105,8 @@ function ModelSelect() {
   const [options, setOptions] = useState<Option[]>([]);
   const [sortedOptions, setSortedOptions] = useState<Option[]>([]);
   const { selectedProfile } = useAuth();
+  const [pendingModel, setPendingModel] = useState<Option | null>(null);
+  const [showPopup, setShowPopup] = useState(false);
 
   let selectedModel = null;
   let allModels = null;
@@ -113,6 +121,50 @@ function ModelSelect() {
     allModels = config.modelsByRole.chat;
   }
 
+  function requiresConfirmation(modelTitle: string) {
+    const name = modelTitle.toLowerCase();
+    return name.includes("openai") || name.includes("gpt");
+  }
+
+  // CHANGED onChange handler
+  const handleModelChange = async (val: string) => {
+    if (val === selectedModel?.title) return;
+    const picked = options.find((opt) => opt.value === val);
+    if (picked && requiresConfirmation(picked.title)) {
+      setPendingModel(picked);
+      setShowPopup(true); // Show confirmation dialog
+      return;
+    }
+    // If no confirmation needed, just switch model
+    void dispatch(
+      updateSelectedModelByRole({
+        selectedProfile,
+        role: isInEdit ? "edit" : "chat",
+        modelTitle: val,
+      }),
+    );
+  };
+
+  // Confirmation popup handlers
+  const handleConfirm = () => {
+    if (pendingModel) {
+      void dispatch(
+        updateSelectedModelByRole({
+          selectedProfile,
+          role: isInEdit ? "edit" : "chat",
+          modelTitle: pendingModel.value,
+        }),
+      );
+      setPendingModel(null);
+    }
+    setShowPopup(false);
+  };
+
+  const handleCancel = () => {
+    setPendingModel(null);
+    setShowPopup(false);
+  };
+
   // Sort so that options without an API key are at the end
   useEffect(() => {
     const alphaSort = options.sort((a, b) => a.title.localeCompare(b.title));
@@ -196,18 +248,7 @@ function ModelSelect() {
   const hasNoModels = allModels?.length === 0;
 
   return (
-    <Listbox
-      onChange={async (val: string) => {
-        if (val === selectedModel?.title) return;
-        void dispatch(
-          updateSelectedModelByRole({
-            selectedProfile,
-            role: isInEdit ? "edit" : "chat",
-            modelTitle: val,
-          }),
-        );
-      }}
-    >
+    <Listbox onChange={handleModelChange}>
       <div className="relative flex">
         <ListboxButton
           data-testid="model-select-button"
@@ -288,6 +329,64 @@ function ModelSelect() {
           )}
         </ListboxOptions>
       </div>
+      {/* Confirm dialog when user picks "openai" or "gpt" */}
+      {showPopup && (
+        <OcaRestrictivePopup
+          onAcknowledge={handleConfirm}
+          bannerText={`<div class="m-auto max-w-full w-[56rem] mx-2 shadow-3xl min-h-fit scrollbar-hidden bg-white dark:bg-gray-900 rounded-2xl svelte-fq1rhy"
+     style="">
+    <div class="px-5 pt-4 dark:text-gray-300 text-gray-700">
+        <div class="flex justify-between items-start">
+            <div class="text-xl font-semibold">Acknowledgement required to access Oracle Code Assist</div>
+        </div>
+    </div>
+    <div class="w-full p-4 px-5 text-gray-700 dark:text-gray-100">
+        <div class="overflow-y-scroll max-h-150 scrollbar-hidden">
+            <div class="mb-3 pr-2 my-2.5 px-1.5">
+                <div class="text-sm mb-2">
+                    <div class="mb-2 mt-1 text-sm/6 leading-6"><h3 class="text-lg/6 font-semibold text-gray-900">
+                        Disclaimer: Prohibited Data Submission</h3>
+                        <p class="mt-4 text-base/6 leading-6 text-gray-900 font-semibold">Attention Employees:</p>
+                        <p>By using this system, you acknowledge and agree that:</p>
+                        <p class="mt-2">You are not located in or accessing this system from China, Guam, Hong Kong,
+                            Macao, Puerto Rico or Ukraine; and</p>
+                        <p class="mt-2">You are strictly <strong>prohibited</strong> from uploading, submitting, or
+                            sharing the following types of data or submitting prompts requesting information about the
+                            following types of data through this platform, tool, or service:</p>
+                        <ul class="list-disc list-outside my-4 ml-8">
+                            <li>Non-public Oracle or line of business quarterly or annual financial results</li>
+                            <li>Any non-public information regarding vulnerabilities in any Oracle software or service
+                            </li>
+                            <li>Oracle Database source code</li>
+                            <li>Oracle policies</li>
+                            <li>Oracle employee PII or other HR data of any kind</li>
+                            <li>Health data of any kind, including but not limited to Protected Health Information
+                                (PHI)
+                            </li>
+                            <li>Any customer credit card or bank account details, or Payment Card Industry (PCI) data
+                            </li>
+                            <li>Data related to any Oracle M&amp;A activity</li>
+                            <li>Data pertaining to any pending, active or potential litigation or dispute</li>
+                            <li>Data with special handling restrictions imposed by law or contract, including data
+                                residency and nonstandard disclosure constraints
+                            </li>
+                            <li>Any usernames, passwords, authentication tokens or other access credentials for any
+                                Oracle or third-party system
+                            </li>
+                        </ul>
+                        <p class="text-base/6 leading-6 text-gray-900 font-semibold">Violation of this policy may result
+                            in disciplinary action, up to and including termination of employment, and/or legal
+                            consequences.
+                            This policy does not supersede any other relevant Oracle policy.</p>
+                        <p class="mt-2">If you are unsure whether your data falls under these categories, please consult
+                            your manager or the Information Security team <strong>before</strong> submission.</p></div>
+                </div>
+            </div>
+        </div>
+    </div>
+</div>`}
+        />
+      )}
     </Listbox>
   );
 }
diff --git a/gui/src/forms/AddModelForm.tsx b/gui/src/forms/AddModelForm.tsx
index 5de78133ccf..2c51851c805 100644
--- a/gui/src/forms/AddModelForm.tsx
+++ b/gui/src/forms/AddModelForm.tsx
@@ -14,6 +14,7 @@ import {
 } from "../pages/AddNewModel/configs/providers";
 import { useAppDispatch } from "../redux/hooks";
 import { updateSelectedModelByRole } from "../redux/thunks/updateSelectedModelByRole";
+import { OcaRestrictivePopup } from "./ocaRestrictive";
 
 interface AddModelFormProps {
   onDone: () => void;
@@ -47,6 +48,7 @@ export function AddModelForm({
     providers["gemini"]?.title || "",
     providers["azure"]?.title || "",
     providers["ollama"]?.title || "",
+    providers["oca"]?.title || "",
   ];
 
   const allProviders = Object.entries(providers)
diff --git a/gui/src/forms/ocaRestrictive.tsx b/gui/src/forms/ocaRestrictive.tsx
new file mode 100644
index 00000000000..ca34ab3e991
--- /dev/null
+++ b/gui/src/forms/ocaRestrictive.tsx
@@ -0,0 +1,43 @@
+import React from "react";
+import { Button } from "../components";
+
+export const OcaRestrictivePopup: React.FC<{
+  onAcknowledge: () => void;
+  bannerText?: string | null;
+}> = React.memo(({ onAcknowledge, bannerText }) => (
+  <div className="fixed left-0 top-0 z-[2000] flex h-screen w-screen items-center justify-center bg-[rgba(0,0,0,0.25)]">
+    <div
+      role="dialog"
+      aria-modal="true"
+      aria-labelledby="oca-popup-title"
+      className="flex max-h-[80vh] w-[90%] max-w-[600px] flex-col rounded-[8px] border border-[#007acc] bg-[#252526] p-6 font-sans text-[13px] text-[#cccccc] shadow-[0_4px_24px_0_rgba(0,0,0,0.4)]"
+    >
+      <h2 id="oca-popup-title" className="mt-0 font-bold text-[#111]">
+        Acknowledgement Required
+      </h2>
+      <h4 className="mb-2 font-semibold text-[#b3b3b3]">
+        Disclaimer: Prohibited Data Submission
+      </h4>
+      <div className="mb-4 flex-1 overflow-y-auto pr-2 text-[13px] leading-[1.5] text-[#222] [mask-image:linear-gradient(to_bottom,black_96%,transparent_100%)]">
+        {bannerText && (
+          <div
+            className="break-words bg-[#252526] text-[#222]"
+            dangerouslySetInnerHTML={{ __html: bannerText }}
+          />
+        )}
+      </div>
+      <div className="text-right">
+        <Button
+          type="button"
+          onClick={onAcknowledge}
+          style={{
+            background: "#0e639c",
+            color: "#fff",
+          }}
+        >
+          I acknowledge and agree
+        </Button>
+      </div>
+    </div>
+  </div>
+));
diff --git a/gui/src/pages/AddNewModel/configs/providers.ts b/gui/src/pages/AddNewModel/configs/providers.ts
index 2431dd51ec6..4cd04d9962a 100644
--- a/gui/src/pages/AddNewModel/configs/providers.ts
+++ b/gui/src/pages/AddNewModel/configs/providers.ts
@@ -1012,7 +1012,7 @@ To get started, [register](https://dataplatform.cloud.ibm.com/registration/stepo
         label: "Use Custom Base URL (optional)",
         placeholder: "Enter the API Base URL",
         defaultValue: "https://code-internal.aiservice.us-chicago-1.oci.oraclecloud.com/20250206/app/litellm",
-        required: false,
+        required: true,
       },
       ...completionParamsInputsConfigs,
     ],

From 470a71c5d4c5b18db380f16303f8b585bc23f8d5 Mon Sep 17 00:00:00 2001
From: nturumel <nihar.turumella@oracle.com>
Date: Thu, 7 Aug 2025 11:43:39 -0500
Subject: [PATCH 3/5] wip:

---
 gui/src/forms/ocaRestrictive.tsx | 114 +++++++++++++++++++++----------
 1 file changed, 79 insertions(+), 35 deletions(-)

diff --git a/gui/src/forms/ocaRestrictive.tsx b/gui/src/forms/ocaRestrictive.tsx
index ca34ab3e991..a8566d3b884 100644
--- a/gui/src/forms/ocaRestrictive.tsx
+++ b/gui/src/forms/ocaRestrictive.tsx
@@ -1,43 +1,87 @@
 import React from "react";
 import { Button } from "../components";
 
+
+export const VSC_INPUT_BACKGROUND = "--vscode-input-background"
+export const VSC_INPUT_FOREGROUND = "--vscode-input-foreground"
+export const VSC_SIDEBAR_BACKGROUND = "--vscode-sideBar-background"
+export const VSC_FOREGROUND = "--vscode-foreground"
+export const VSC_EDITOR_FOREGROUND = "--vscode-editor-foreground"
+export const VSC_FOREGROUND_MUTED = "--vscode-foreground-muted"
+export const VSC_DESCRIPTION_FOREGROUND = "--vscode-descriptionForeground"
+export const VSC_INPUT_PLACEHOLDER_FOREGROUND = "--vscode-input-placeholderForeground"
+export const VSC_BUTTON_BACKGROUND = "--vscode-button-background"
+export const VSC_BUTTON_FOREGROUND = "--vscode-button-foreground"
+export const VSC_EDITOR_BACKGROUND = "--vscode-editor-background"
+export const VSC_LIST_SELECTION_BACKGROUND = "--vscode-list-activeSelectionBackground"
+export const VSC_FOCUS_BORDER = "--vscode-focus-border"
+export const VSC_LIST_ACTIVE_FOREGROUND = "--vscode-quickInputList-focusForeground"
+export const VSC_QUICK_INPUT_BACKGROUND = "--vscode-quickInput-background"
+export const VSC_INPUT_BORDER = "--vscode-input-border"
+export const VSC_INPUT_BORDER_FOCUS = "--vscode-focusBorder"
+export const VSC_BADGE_BACKGROUND = "--vscode-badge-background"
+export const VSC_BADGE_FOREGROUND = "--vscode-badge-foreground"
+export const VSC_SIDEBAR_BORDER = "--vscode-sideBar-border"
+export const VSC_DIFF_REMOVED_LINE_BACKGROUND = "--vscode-diffEditor-removedLineBackground"
+export const VSC_DIFF_INSERTED_LINE_BACKGROUND = "--vscode-diffEditor-insertedLineBackground"
+export const VSC_INACTIVE_SELECTION_BACKGROUND = "--vscode-editor-inactiveSelectionBackground"
+export const VSC_TITLEBAR_INACTIVE_FOREGROUND = "--vscode-titleBar-inactiveForeground"
+
+export function getAsVar(varName: string): string {
+	return `var(${varName})`
+}
+
+export function hexToRGB(hexColor: string): { r: number; g: number; b: number } {
+	const hex = hexColor.replace(/^#/, "").slice(0, 6)
+	const [r, g, b] = [0, 2, 4].map((offset) => parseInt(hex.slice(offset, offset + 2), 16))
+	return { r, g, b }
+}
+
+export function colorToHex(colorVar: string): string {
+	const value = getComputedStyle(document.documentElement).getPropertyValue(colorVar).trim()
+	if (value.startsWith("#")) {
+		return value.slice(0, 7)
+	}
+
+	const rgbValues = value.match(/\d+/g)?.slice(0, 3).map(Number) || []
+	return `#${rgbValues.map((x) => x.toString(16).padStart(2, "0")).join("")}`
+}
+
 export const OcaRestrictivePopup: React.FC<{
   onAcknowledge: () => void;
   bannerText?: string | null;
 }> = React.memo(({ onAcknowledge, bannerText }) => (
-  <div className="fixed left-0 top-0 z-[2000] flex h-screen w-screen items-center justify-center bg-[rgba(0,0,0,0.25)]">
-    <div
-      role="dialog"
-      aria-modal="true"
-      aria-labelledby="oca-popup-title"
-      className="flex max-h-[80vh] w-[90%] max-w-[600px] flex-col rounded-[8px] border border-[#007acc] bg-[#252526] p-6 font-sans text-[13px] text-[#cccccc] shadow-[0_4px_24px_0_rgba(0,0,0,0.4)]"
-    >
-      <h2 id="oca-popup-title" className="mt-0 font-bold text-[#111]">
-        Acknowledgement Required
-      </h2>
-      <h4 className="mb-2 font-semibold text-[#b3b3b3]">
-        Disclaimer: Prohibited Data Submission
-      </h4>
-      <div className="mb-4 flex-1 overflow-y-auto pr-2 text-[13px] leading-[1.5] text-[#222] [mask-image:linear-gradient(to_bottom,black_96%,transparent_100%)]">
-        {bannerText && (
-          <div
-            className="break-words bg-[#252526] text-[#222]"
-            dangerouslySetInnerHTML={{ __html: bannerText }}
-          />
-        )}
-      </div>
-      <div className="text-right">
-        <Button
-          type="button"
-          onClick={onAcknowledge}
-          style={{
-            background: "#0e639c",
-            color: "#fff",
-          }}
-        >
-          I acknowledge and agree
-        </Button>
-      </div>
-    </div>
-  </div>
+  <div className="fixed top-0 left-0 w-screen h-screen z-[2000] [background:rgba(0,0,0,0.25)] flex items-center justify-center">
+		<div
+			role="dialog"
+			aria-modal="true"
+			aria-labelledby="oca-popup-title"
+			className={`p-6 max-w-[600px] w-[90%] rounded-[8px] [box-shadow:0_4px_24px_0_var(--vscode-widget-shadow,rgba(0,0,0,.4))] [border:1px_solid_var(--vscode-focusBorder,#007acc)] [background:var(--vscode-editor-background,#252526)] [color:var(${VSC_FOREGROUND},#cccccc)] [font-family:var(--vscode-font-family,sans-serif)] [font-size:var(--vscode-font-size,13px)] flex flex-col max-h-[80vh]`}>
+			<h2 id="oca-popup-title" className={`mt-0 [color:var(${VSC_FOREGROUND},#111)] font-bold`}>
+				Acknowledgement Required
+			</h2>
+			<h4 className={`mb-2 [color:var(${VSC_DESCRIPTION_FOREGROUND},#b3b3b3)] font-semibold`}>
+				Disclaimer: Prohibited Data Submission
+			</h4>
+			<div className="overflow-y-auto flex-1 pr-2 mb-4 text-[13px] leading-[1.5] [color:var(--vscode-foreground,#222)] [mask-image:linear-gradient(to_bottom,black_96%,transparent_100%)]">
+				{bannerText && (
+					<div
+						className={`break-words [background:var(${VSC_INPUT_BACKGROUND},#252526)] [color:var(${VSC_FOREGROUND},#222)]`}
+						dangerouslySetInnerHTML={{ __html: bannerText }}
+					/>
+				)}
+			</div>
+			<div className="text-right">
+				<Button
+					type="button"
+					onClick={onAcknowledge}
+					style={{
+						background: `var(${VSC_BUTTON_BACKGROUND}, #0e639c)`,
+						color: `var(${VSC_BUTTON_FOREGROUND}, #fff)`,
+					}}>
+					I acknowledge and agree
+				</Button>
+			</div>
+		</div>
+	</div>
 ));

From a341056853696480932bc76bd17f9060ee6bacee Mon Sep 17 00:00:00 2001
From: nturumel <nihar.turumella@oracle.com>
Date: Thu, 7 Aug 2025 17:23:46 -0500
Subject: [PATCH 4/5] wip: fixing api base

---
 core/llm/llms/oca/Oca.ts            | 10 ++++------
 core/llm/llms/oca/util/constants.ts |  3 +--
 2 files changed, 5 insertions(+), 8 deletions(-)

diff --git a/core/llm/llms/oca/Oca.ts b/core/llm/llms/oca/Oca.ts
index 292d68fc94b..32199187609 100644
--- a/core/llm/llms/oca/Oca.ts
+++ b/core/llm/llms/oca/Oca.ts
@@ -17,7 +17,7 @@ import {
 } from "../../openaiTypeConverters.js";
 import { OcaTokenManager } from "./util/ocaTokenManager.js";
 import { createOcaHeaders, generateOpcRequestId } from "./util/utils.js";
-import { DEFAULT_OCA_BASE_URL, DEFAULT_OCA_VERSION } from "./util/constants.js";
+import { DEFAULT_OCA_BASE_URL } from "./util/constants.js";
 
 interface ModelInfoMap {
   models: { [key: string]: ModelInfo };
@@ -41,7 +41,8 @@ class Oca extends BaseLLM {
       },
     });
     this.uniqueId = options.uniqueId || "no-unique-id";
-    this.apiVersion = options.apiVersion ?? DEFAULT_OCA_VERSION;
+    this.apiVersion = options.apiVersion;
+    this.apiBase = options.apiBase;
     this.modelMap = { models: {} };
   }
 
@@ -97,6 +98,7 @@ class Oca extends BaseLLM {
       );
     }
     const ocaHeaders = await createOcaHeaders(token, this.uniqueId);
+    console.log(`Making request with customer opc-request-id: ${ocaHeaders["opc-request-id"]}`)
     return ocaHeaders;
   }
 
@@ -126,13 +128,9 @@ class Oca extends BaseLLM {
     // Remove trailing slashes from base and leading/trailing slashes from endpoint
     const base = this.apiBase.replace(/\/+$/, "");
     const ep = endpoint.replace(/^\/+|\/+$/g, "");
-    const version = this.apiVersion
-      ? this.apiVersion.replace(/^\/+|\/+$/g, "")
-      : "";
 
     // Build the path
     let urlStr = base;
-    if (version) urlStr += `/${version}`;
     if (ep) urlStr += `/${ep}`;
 
     return new URL(urlStr);
diff --git a/core/llm/llms/oca/util/constants.ts b/core/llm/llms/oca/util/constants.ts
index e20c02fb01a..6b69af13d7f 100644
--- a/core/llm/llms/oca/util/constants.ts
+++ b/core/llm/llms/oca/util/constants.ts
@@ -11,8 +11,7 @@ export const OCA_CONFIG_PATH = path.join(os.homedir(), ".oca", "config.json")
 export const OCA_RENEW_TOKEN_BUFFER_SEC = 180 // 3 minutes
 
 // OCA LITELLM
-export const DEFAULT_OCA_BASE_URL = "https://code-internal.aiservice.us-chicago-1.oci.oraclecloud.com"
-export const DEFAULT_OCA_VERSION = "20250206/app/litellm"
+export const DEFAULT_OCA_BASE_URL = "https://code-internal.aiservice.us-chicago-1.oci.oraclecloud.com/20250206/app/litellm"
 
 // OCA SURVEY
 export const DEFAULT_SURVEY_PORT = 3000

From 6953d11862c4ea7a3effd19b0f25da1f68223d6d Mon Sep 17 00:00:00 2001
From: shhussa <shiraz.hussain@oracle.com>
Date: Wed, 13 Aug 2025 11:55:42 -0500
Subject: [PATCH 5/5] For OCA, templating is happening on model serving side.
 Set template to none

---
 core/llm/llms/oca/Oca.ts | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/core/llm/llms/oca/Oca.ts b/core/llm/llms/oca/Oca.ts
index 32199187609..51e11cdf005 100644
--- a/core/llm/llms/oca/Oca.ts
+++ b/core/llm/llms/oca/Oca.ts
@@ -35,6 +35,7 @@ class Oca extends BaseLLM {
   constructor(options: LLMOptions) {
     super({
       ...options,
+      template: "none", //AICODE-3372
       capabilities: {
         uploadImage: false,
         tools: true,
@@ -98,7 +99,9 @@ class Oca extends BaseLLM {
       );
     }
     const ocaHeaders = await createOcaHeaders(token, this.uniqueId);
-    console.log(`Making request with customer opc-request-id: ${ocaHeaders["opc-request-id"]}`)
+    console.log(
+      `Making request with customer opc-request-id: ${ocaHeaders["opc-request-id"]}`,
+    );
     return ocaHeaders;
   }
 
@@ -119,7 +122,9 @@ class Oca extends BaseLLM {
     return completion;
   }
 
-  protected _getEndpoint(endpoint: "chat/completions" | "models" | "model/info") {
+  protected _getEndpoint(
+    endpoint: "chat/completions" | "models" | "model/info",
+  ) {
     if (!this.apiBase) {
       throw new Error(
         "No API base URL provided. Please set the 'apiBase' option in config.json",
@@ -237,7 +242,7 @@ class Oca extends BaseLLM {
   }
 
   getModelInfo(model: string): ModelInfo | undefined {
-    return this.modelMap.models[model]
+    return this.modelMap.models[model];
   }
 }