@eddyskywalker/dsh-chatgpt-subscription 0.22.0 → 0.23.0

package/lib/index.js

@@ -5,7 +5,7 @@ import { HarnessError, LlmAdapter, LlmError, LlmError as LlmError$1, ProviderReq
 import fs, { chmod, lstat, mkdir, open, readFile, rename, stat, unlink } from "node:fs/promises";
 import path, { basename, dirname, join, relative, resolve } from "node:path";
 import os, { homedir, platform, userInfo } from "node:os";
-import crypto, { createDecipheriv, createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
+import { createDecipheriv, createHash, createHmac, randomBytes, randomUUID } from "node:crypto";
 import { isDeepStrictEqual } from "node:util";
 import { execSync, spawn } from "node:child_process";
 import fs$1, { appendFileSync, constants, copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, statSync, utimesSync, writeFileSync } from "node:fs";
@@ -278,7 +278,7 @@ const GPT_6_REASONING_EFFORTS = [
 	"xhigh",
 	"max"
 ];
-function reasoningEffortsForModel(model) {
+function reasoningEffortsForModel$1(model) {
 	const profile = resolveCodexCatalogEntry(model).reasoningProfile;
 	if (profile === "gpt-6") return GPT_6_REASONING_EFFORTS;
 	return profile === "gpt-5.6" ? GPT_56_REASONING_EFFORTS : STANDARD_REASONING_EFFORTS;
@@ -396,7 +396,7 @@ function resolveCodexModel(model, preferences, live) {
 	const liveEntry = live?.find((candidate) => candidate.id === model);
 	const configuredContextWindow = (preferences?.status())?.contextWindowOverrides[model];
 	const listedEfforts = liveEntry?.reasoningEfforts?.filter(isCodexReasoningEffort);
-	const efforts = listedEfforts !== void 0 && listedEfforts.length > 0 ? listedEfforts : reasoningEffortsForModel(model);
+	const efforts = listedEfforts !== void 0 && listedEfforts.length > 0 ? listedEfforts : reasoningEffortsForModel$1(model);
 	const statedDefault = liveEntry?.defaultReasoningEffort ?? entry.defaultReasoningEffort;
 	const defaultEffort = isCodexReasoningEffort(statedDefault) && efforts.includes(statedDefault) ? statedDefault : efforts[0];
 	return {
@@ -17334,6 +17334,8 @@ const CLOUD_BASE_URL = "https://ollama.com";
 /** Native surface. */
 const NATIVE_CHAT_PATH = "/api/chat";
 const NATIVE_TAGS_PATH = "/api/tags";
+/** Per-model metadata: the one surface where a model states its own thinking levels. */
+const NATIVE_SHOW_PATH = "/api/show";
 const OPENAI_CHAT_PATH = "/chat/completions";
 /**
 * Default context window for a model whose catalog entry states none.
@@ -17361,12 +17363,13 @@ const DEFAULT_MAX_OUTPUT_TOKENS = 8192;
 *
 * @param modelId - the routed model id.
 * @param requested - the caller's cap, undefined when it stated none.
+* @param declared - the model's own thinking metadata, when it was read.
 * @returns the cap to request, raised only when that is the difference between an
 * empty truncated answer and a usable one.
 */
-function floorForcedThinkingTokens$1(modelId, requested) {
+function floorForcedThinkingTokens$1(modelId, requested, declared) {
 	if (requested === void 0) return void 0;
-	if (thinkingModeForModel(modelId) !== "levels") return requested;
+	if (thinkingModeForModel(modelId, declared) !== "levels") return requested;
 	return Math.max(requested, 512);
 }
 /** How long a catalog sync may take before the cached list is used instead. */
@@ -17427,13 +17430,110 @@ function ollamaModelSupportsImage(modelId) {
 	return supportsOllamaImage(modelId, "openai", "api-key");
 }
 /**
+* The ladder a levels model takes when no metadata could be read for it.
+*
+* The list is the fallback, not the answer: it can only ever name families this
+* file already knows, and a model the service describes with any other level
+* names has to be sent those names verbatim.
+*/
+const DEFAULT_LEVEL_EFFORTS = Object.freeze([
+	{
+		id: "low",
+		name: "low"
+	},
+	{
+		id: "medium",
+		name: "medium"
+	},
+	{
+		id: "high",
+		name: "high"
+	}
+]);
+/**
+* The on/off positions a boolean ladder is made of.
+*
+* The ids are the two values `thinkForModel` puts on the wire for such a model:
+* `none` becomes `false`, `low` becomes `true`. The names are the user's, because
+* on a model that thinks, a bare "none" reads as "this model cannot think"
+* rather than as the switch that turns its thinking off.
+*/
+const BOOLEAN_EFFORTS = Object.freeze([{
+	value: false,
+	id: "none",
+	name: "关闭思考"
+}, {
+	value: true,
+	id: "low",
+	name: "开启思考"
+}]);
+/** The same two positions as the picker renders them, without the wire value. */
+function booleanEfforts() {
+	return BOOLEAN_EFFORTS.map(({ id, name }) => ({
+		id,
+		name
+	}));
+}
+/**
+* The ladder this model declares, one row per value it accepts.
+*
+* Every row is derived from `declared.values` itself, so the ladder can neither
+* offer a position the wire would refuse nor hide one it will take: a model that
+* declares `[true]` - thinking on, with no way to switch it off - is offered
+* exactly that one position and never the off switch, which `false` there would
+* be refused for.
+*
+* Levels keep the model's own spelling and declaration order; the on/off pair
+* follows them in a fixed order (off, then on). So two models declaring the same
+* values in a different order offer the same ladder, and the last position a
+* picker shows is the one that turns thinking on rather than off.
+*/
+function declaredEfforts(declared) {
+	const levels = [];
+	const switches = /* @__PURE__ */ new Map();
+	const taken = /* @__PURE__ */ new Set();
+	for (const value of declared.values) {
+		if (typeof value === "string") {
+			if (taken.has(value)) continue;
+			taken.add(value);
+			levels.push({
+				value,
+				id: value,
+				name: value
+			});
+			continue;
+		}
+		const known = BOOLEAN_EFFORTS.find((entry) => entry.value === value);
+		if (known === void 0 || switches.has(value) || taken.has(known.id)) continue;
+		switches.set(value, known);
+		taken.add(known.id);
+	}
+	const off = switches.get(false);
+	const on = switches.get(true);
+	return [
+		...levels,
+		...off === void 0 ? [] : [off],
+		...on === void 0 ? [] : [on]
+	];
+}
+/**
 * Resolve model-specific thinking support in Ollama.
+*
+* The service's own metadata outranks the prefix list: `/api/show` is where a
+* model states the levels it accepts, and it is the only source there is for a
+* family this file has never heard of. The prefix list stays as the fallback for
+* a model whose metadata could not be read, and that fallback is unchanged.
+*
 * Source: official https://github.com/ollama/ollama/blob/main/docs/capabilities/thinking.mdx
-* - 'levels': gpt-oss family (values low, medium, high; cannot disable thinking)
-* - 'boolean': deepseek-r1, qwq, qwen3 families (values true, false)
-* - 'none': all other / unknown models (omit thinking control entirely)
+* - 'levels': named levels (gpt-oss: low, medium, high; cannot disable thinking)
+* - 'boolean': booleans (deepseek-r1, qwq, qwen3: true, false)
+* - 'none': declared [false], declared nothing, or unknown
 */
-function thinkingModeForModel(modelId) {
+function thinkingModeForModel(modelId, declared) {
+	if (declared !== void 0) {
+		if (declared.values.some((value) => typeof value === "string")) return "levels";
+		return declared.values.includes(true) ? "boolean" : "none";
+	}
 	if (!supportsOllamaThinkingControl(modelId, "native", "api-key")) return "none";
 	const base = modelId.toLowerCase().split(":")[0] ?? "";
 	if (base === "gpt-oss") return "levels";
@@ -17441,18 +17541,80 @@ function thinkingModeForModel(modelId) {
 	return "none";
 }
 /**
+* The efforts one model can actually be sent, in display order.
+*
+* This set is the whole contract with the harness: a level outside it is
+* rejected before a request is built (see `resolveCallWithInfo`), so it must be
+* exactly what the wire accepts and no more - which is why, when the model has
+* declared its own values, this returns that table row for row instead of
+* choosing from a fixed menu. A model that declares `[false]` is the one case
+* with a declared value and no ladder at all: `[false]` is the service saying
+* there is no thinking here to turn on or off.
+*
+* Without metadata the families this file knows answer instead, unchanged:
+* gpt-oss takes the three levels, and a boolean family takes the on/off pair.
+*/
+function reasoningEffortsForModel(modelId, declared) {
+	if (declared !== void 0) {
+		if (thinkingModeForModel(modelId, declared) === "none") return [];
+		return declaredEfforts(declared).map(({ id, name }) => ({
+			id,
+			name
+		}));
+	}
+	const mode = thinkingModeForModel(modelId);
+	if (mode === "none") return [];
+	if (mode === "boolean") return booleanEfforts();
+	return [...DEFAULT_LEVEL_EFFORTS];
+}
+/**
+* The effort this model's ladder should start on.
+*
+* A stored default is a per-route preference, not a per-model promise: the
+* settings card offers one ladder for the whole line, so a level chosen for one
+* model can be one this model cannot express - and DSH rejects a level that is
+* not on the ladder before a request is built. So the order is: the configured
+* level when this model has it, then the level the model itself defaults to,
+* then the ladder's own first entry.
+*
+* The last step skips a "thinking off" position. A user who picked a thinking
+* model and was handed that position would silently get a model that never
+* thinks, which is a worse wrong answer than the mildest level that does think.
+*/
+function resolveOllamaDefaultEffort(modelId, declared, configured) {
+	const efforts = reasoningEffortsForModel(modelId, declared);
+	if (efforts.length === 0) return void 0;
+	if (typeof configured === "string" && efforts.some((effort) => effort.id === configured)) return configured;
+	if (declared?.default !== void 0) {
+		const wanted = declared.default;
+		const match = efforts.find((effort) => thinkForModel(modelId, effort.id, declared) === wanted);
+		if (match !== void 0) return match.id;
+	}
+	return efforts.find((effort) => effort.id !== "none")?.id ?? efforts[0]?.id;
+}
+/**
 * Map reasoning effort to wire think parameter for the target model.
 * Per Ollama docs:
-* - gpt-oss: only 'low' | 'medium' | 'high' are valid. gpt-oss cannot disable thinking, so 'none'
-*   as well as 'xhigh'/'max'/garbage MUST be omitted (undefined).
+* - a model that has declared its own values: the effort reverses to the one
+*   value that model declared for it, and nothing else is sent. A level the
+*   model never declared is omitted rather than coerced - a model that declares
+*   `[true]` is never asked for `false`, and one that declares ['low','high'] is
+*   never handed 'medium'. Omitting is the service's own default, which is a
+*   weaker turn and never a failed one.
+* - gpt-oss with no metadata: only 'low' | 'medium' | 'high' are valid. gpt-oss cannot disable
+*   thinking, so 'none' as well as 'xhigh'/'max'/garbage MUST be omitted (undefined).
 * - boolean models: 'none' -> false; 'low'|'medium'|'high'|'auto'|'true' -> true; garbage -> undefined.
 * - all other models: omit (undefined).
 */
-function thinkForModel(modelId, reasoningEffort) {
+function thinkForModel(modelId, reasoningEffort, declared) {
 	if (reasoningEffort === void 0 || reasoningEffort === null) return void 0;
+	const effort = String(reasoningEffort).toLowerCase();
+	if (declared !== void 0) {
+		for (const entry of declaredEfforts(declared)) if (entry.id.toLowerCase() === effort) return entry.value;
+		return;
+	}
 	const mode = thinkingModeForModel(modelId);
 	if (mode === "none") return void 0;
-	const effort = String(reasoningEffort).toLowerCase();
 	if (mode === "boolean") {
 		if (effort === "none") return false;
 		if (effort === "low" || effort === "medium" || effort === "high" || effort === "auto" || effort === "true") return true;
@@ -18130,6 +18292,55 @@ async function fetchCatalog$1(fetchFn, credentials) {
 	}
 	return { models: result };
 }
+/**
+* Read what one model says about its own thinking.
+*
+* `POST /api/show` is the only place a model states the values `think` accepts,
+* and the ladder this line offers has to be exactly those values: DSH rejects an
+* effort that is not on the ladder before a request is built, and the service
+* rejects a `think` it does not know. So the metadata, not a prefix list, is
+* what the picker is built from.
+*
+* Returns undefined rather than throwing for every way this can fail - no key, a
+* 401, a 500, a proxy's HTML where JSON was promised, a document that is not
+* `/api/show`. The caller falls back to what it already knew about the model,
+* and a failed probe must never be what breaks a turn.
+*/
+async function fetchModelThinking(fetchFn, credentials, modelId) {
+	let response;
+	try {
+		response = await fetchFn(`${CLOUD_BASE_URL}${NATIVE_SHOW_PATH}`, {
+			method: "POST",
+			headers: headersFor(credentials, "application/json"),
+			body: JSON.stringify({ model: modelId }),
+			signal: AbortSignal.timeout(CATALOG_TIMEOUT_MS)
+		});
+	} catch {
+		return;
+	}
+	if (!response.ok) return void 0;
+	let data;
+	try {
+		data = await response.json();
+	} catch {
+		return;
+	}
+	if (typeof data !== "object" || data === null || Array.isArray(data)) return void 0;
+	const thinking = data.thinking;
+	if (typeof thinking !== "object" || thinking === null || Array.isArray(thinking)) return void 0;
+	const record = thinking;
+	if (!Array.isArray(record.values)) return void 0;
+	const values = [];
+	for (const value of record.values) if (typeof value === "boolean") values.push(value);
+	else if (typeof value === "string" && value !== "") values.push(value);
+	if (values.length === 0) return void 0;
+	const fallback = record.default;
+	const declaredDefault = typeof fallback === "boolean" || typeof fallback === "string" ? fallback : void 0;
+	return {
+		values,
+		...declaredDefault === void 0 ? {} : { default: declaredDefault }
+	};
+}
 //#endregion
 //#region src/host/ollama/mapper.ts
 function createStreamState$6() {
@@ -18342,6 +18553,16 @@ var OllamaAdapter = class extends LlmAdapter {
 	* than minting pool state that would outlive the process.
 	*/
 	accountPool;
+	/**
+	* What `/api/show` has already said, per model id.
+	*
+	* Only a successful read is remembered. A failed one is a transient condition
+	* (no key, a 500, a proxy), and caching it would pin every model to the
+	* fallback ladder for the life of the process - so it is asked again next time.
+	*/
+	thinkingCache = /* @__PURE__ */ new Map();
+	/** Probes currently in flight, so one model asked twice at once is read once. */
+	thinkingProbes = /* @__PURE__ */ new Map();
 	constructor(store = new FileCredentialStore$5(), modelSettings = new FileModelSettingsStore$5(), options = {}, accountPool) {
 		super();
 		this.store = store;
@@ -18390,6 +18611,34 @@ var OllamaAdapter = class extends LlmAdapter {
 		if (this.accountPool !== null) return (await this.accountPool.getEffectiveCredential(/* @__PURE__ */ new Set(), this.options.fetchFn ?? fetch).catch(() => null))?.credentials ?? null;
 		return this.store.read().catch(() => null);
 	}
+	/**
+	* What this model says about its own thinking, read once and remembered.
+	*
+	* Never throws and never rejects: an adapter that cannot reach `/api/show`
+	* (no key stored yet, service down) is a line that still resolves models and
+	* still chats, one step behind on the ladder.
+	*/
+	async thinkingCapability(modelId) {
+		const cached = this.thinkingCache.get(modelId);
+		if (cached !== void 0) return cached;
+		const inflight = this.thinkingProbes.get(modelId);
+		if (inflight !== void 0) return await inflight;
+		const tracked = (async () => {
+			try {
+				const credentials = await this.anyCredentials();
+				if (credentials === null) return void 0;
+				const declared = await fetchModelThinking(this.options.fetchFn ?? fetch, credentials, modelId);
+				if (declared !== void 0) this.thinkingCache.set(modelId, declared);
+				return declared;
+			} catch {
+				return;
+			}
+		})().finally(() => {
+			this.thinkingProbes.delete(modelId);
+		});
+		this.thinkingProbes.set(modelId, tracked);
+		return await tracked;
+	}
 	async listModels(provider) {
 		const prov = provider || "ollama";
 		const settings = await this.settings();
@@ -18405,14 +18654,25 @@ var OllamaAdapter = class extends LlmAdapter {
 	}
 	async resolveModel(provider, modelId, signal) {
 		if (signal?.aborted) throw new LlmError("Ollama model resolution aborted", "ABORTED");
+		const settings = await this.settings();
 		const entry = (await this.catalog()).find((model) => model.id === modelId);
+		const declared = signal?.aborted ? void 0 : await this.thinkingCapability(modelId);
+		const efforts = reasoningEffortsForModel(modelId, declared);
+		const defaultEffort = resolveOllamaDefaultEffort(modelId, declared, settings.defaultReasoningEffort);
 		return {
 			provider,
 			id: modelId,
 			name: entry?.name ?? modelId,
 			inputModalities: ollamaModelSupportsImage(modelId) ? ["text", "image"] : ["text"],
 			context: { contextWindow: contextWindowFor(entry) },
-			...outputReservation(contextWindowFor(entry), DEFAULT_MAX_OUTPUT_TOKENS)
+			...outputReservation(contextWindowFor(entry), DEFAULT_MAX_OUTPUT_TOKENS),
+			...efforts.length === 0 ? {} : { reasoning: {
+				efforts: efforts.map((effort) => ({
+					id: ReasoningEffortId(effort.id),
+					name: effort.name
+				})),
+				...defaultEffort === void 0 ? {} : { defaultEffort: ReasoningEffortId(defaultEffort) }
+			} }
 		};
 	}
 	async prepareCall(provider, model, signal) {
@@ -18428,7 +18688,13 @@ var OllamaAdapter = class extends LlmAdapter {
 		const fetchFn = this.options.fetchFn ?? fetch;
 		const options = normalizeGenerateOptions(rawOptions);
 		const wire = wireForModel$1(options.model);
-		const request = await toOllamaRequest(options, this.options.attachments, signal);
+		const configured = (await this.settings()).defaultReasoningEffort;
+		const effort = options.reasoningEffort ?? configured ?? void 0;
+		const declared = effort === void 0 && options.maxTokens === void 0 ? void 0 : await this.thinkingCapability(options.model);
+		const request = await toOllamaRequest(effort === void 0 || effort === null ? options : {
+			...options,
+			reasoningEffort: ReasoningEffortId(String(effort))
+		}, this.options.attachments, signal, declared);
 		const pool = this.accountPool;
 		const tried = /* @__PURE__ */ new Set();
 		let lastStatus;
@@ -18687,7 +18953,7 @@ async function processMessageContent(content, model, attachments, signal) {
 * Project DSH's request shape onto Ollama's, per surface.
 * Consumes the canonical Message vocabulary produced by normalizeGenerateOptions.
 */
-async function toOllamaRequest(options, attachments, signal) {
+async function toOllamaRequest(options, attachments, signal, declared) {
 	if (signal?.aborted) throw abortException(signal);
 	const messages = [];
 	const trimmedSystem = typeof options.system === "string" && options.system.trim() !== "" ? options.system.trim() : void 0;
@@ -18751,10 +19017,10 @@ async function toOllamaRequest(options, attachments, signal) {
 		model: options.model,
 		messages
 	};
-	const flooredMax = floorForcedThinkingTokens$1(options.model, options.maxTokens);
+	const flooredMax = floorForcedThinkingTokens$1(options.model, options.maxTokens, declared);
 	if (flooredMax !== void 0) request.maxOutputTokens = flooredMax;
 	if (options.temperature !== void 0) request.temperature = options.temperature;
-	const think = thinkForModel(options.model, options.reasoningEffort);
+	const think = thinkForModel(options.model, options.reasoningEffort, declared);
 	if (think !== void 0) request.think = think;
 	const tools = options.tools;
 	if (Array.isArray(tools) && tools.length > 0) request.tools = tools.map((tool) => ({
@@ -18816,10 +19082,51 @@ function textOf$7(content) {
 	return "";
 }
 //#endregion
+//#region src/shared/ollama-contracts.ts
+/**
+* The thinking levels this line's card offers.
+*
+* Deliberately narrower than the union of what every model accepts. Ollama's
+* thinking control comes in three shapes (see {@link thinkingModeForModel} in
+* src/host/ollama/types.ts): gpt-oss takes low/medium/high, the boolean models
+* (deepseek-r1, qwq, qwen3) take only on/off, and every other model takes no
+* thinking control at all. These four strings are the vocabulary both shapes can
+* be expressed with, so one dropdown covers the whole line.
+*
+* Whether a given model can actually honour a level is decided by the host, not
+* by this list: {@link thinkForModel} in src/host/ollama/types.ts drops what a
+* model cannot express, so picking 'high' is safe for a user whose catalog holds
+* a mixture of families.
+*/
+const OLLAMA_REASONING_EFFORTS = [
+	"none",
+	"low",
+	"medium",
+	"high"
+];
+/**
+* Whether a submitted value names a level this line accepts.
+*
+* The route uses this to refuse an unknown level outright. Storing one anyway
+* would be silently useless: {@link thinkForModel} drops a level a model cannot
+* express, so the card would keep showing a choice that does nothing at all.
+*/
+function isOllamaReasoningEffort(value) {
+	return typeof value === "string" && OLLAMA_REASONING_EFFORTS.includes(value);
+}
+//#endregion
 //#region src/host/ollama/routes.ts
 const ROUTE_PREFIX$3 = "/ollama/api";
 /** Where a user creates the keys this line stores. */
 const OLLAMA_KEYS_URL = "https://ollama.com/settings/keys";
+/**
+* The one sentence every refused thinking level answers with.
+*
+* Names the accepted values because the card sends its own dropdown values, so a
+* rejected body is a stale card talking to a newer line (or the reverse), and
+* the fix is on whichever side moved.
+*/
+const UNSUPPORTED_EFFORT_ERROR = "Unsupported reasoning effort. Expected null, or one of: none, low, medium, high.";
 function sendJson$7(response, status, body) {
 	const payload = JSON.stringify(body);
 	response.writeHead(status, { "content-type": "application/json; charset=utf-8" });
@@ -18892,7 +19199,8 @@ async function getOllamaWebStatus(options) {
 		})),
 		enabledModelIds: settings.enabledModelIds,
 		usable: accounts.some((account) => isUsable(account, now)),
-		catalogSynced: settings.catalogModels.length > 0
+		catalogSynced: settings.catalogModels.length > 0,
+		defaultReasoningEffort: settings.defaultReasoningEffort ?? null
 	};
 }
 /**
@@ -18923,10 +19231,25 @@ function registerOllamaRoutes(ctx, options) {
 						error: "Cross-origin request rejected."
 					});
 					const body = await readRequestJson$7(request).catch(() => ({}));
+					let effort;
+					if (body.defaultReasoningEffort !== void 0) {
+						const submitted = body.defaultReasoningEffort;
+						if (submitted !== null && !isOllamaReasoningEffort(submitted)) return sendJson$7(response, 400, {
+							ok: false,
+							error: UNSUPPORTED_EFFORT_ERROR
+						});
+						effort = submitted;
+					}
+					let touched = false;
 					if (typeof body.enabled === "boolean") {
 						await modelSettings.update({ enabled: body.enabled });
-						ctx.emit?.("llm/adapters-updated");
+						touched = true;
+					}
+					if (effort !== void 0) {
+						await modelSettings.update({ defaultReasoningEffort: effort });
+						touched = true;
 					}
+					if (touched) ctx.emit?.("llm/adapters-updated");
 					return sendJson$7(response, 200, {
 						ok: true,
 						value: await modelSettings.read()
@@ -19009,6 +19332,15 @@ function registerOllamaRoutes(ctx, options) {
 						error: "Cross-origin request rejected."
 					});
 					const body = await readRequestJson$7(request).catch(() => ({}));
+					let effort;
+					if (body.defaultReasoningEffort !== void 0) {
+						const submitted = body.defaultReasoningEffort;
+						if (submitted !== null && !isOllamaReasoningEffort(submitted)) return sendJson$7(response, 400, {
+							ok: false,
+							error: UNSUPPORTED_EFFORT_ERROR
+						});
+						effort = submitted;
+					}
 					let touched = false;
 					if (typeof body.enabled === "boolean") {
 						await modelSettings.update({ enabled: body.enabled });
@@ -19018,6 +19350,10 @@ function registerOllamaRoutes(ctx, options) {
 						await modelSettings.update({ enabledModelIds: Array.isArray(body.enabledModelIds) ? body.enabledModelIds.filter((id) => typeof id === "string") : null });
 						touched = true;
 					}
+					if (effort !== void 0) {
+						await modelSettings.update({ defaultReasoningEffort: effort });
+						touched = true;
+					}
 					if (touched) ctx.emit?.("llm/adapters-updated");
 					return sendJson$7(response, 200, {
 						ok: true,
@@ -20480,7 +20816,7 @@ async function kimiIdentityHeaders(extra = {}) {
 * `AbortSignal.any` keeps whichever fires first, so an abandoned login stops
 * promptly while a hung endpoint still cannot hold the request forever.
 */
-function withTimeout$8(signal, ms) {
+function withTimeout$7(signal, ms) {
 	const timeout = AbortSignal.timeout(ms);
 	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
 }
@@ -20524,7 +20860,7 @@ async function requestDeviceAuthorization(options = {}) {
 			accept: "application/json"
 		}),
 		body: new URLSearchParams$1({ client_id: KIMI_CODE_CLIENT_ID }).toString(),
-		signal: withTimeout$8(options.signal, OAUTH_TIMEOUT_MS$2)
+		signal: withTimeout$7(options.signal, OAUTH_TIMEOUT_MS$2)
 	});
 	const payload = await response.json().catch(() => void 0);
 	if (!response.ok) {
@@ -20570,7 +20906,7 @@ async function pollDeviceToken$1(host, deviceCode, options) {
 			device_code: deviceCode,
 			grant_type: DEVICE_CODE_GRANT_TYPE$1
 		}).toString(),
-		signal: withTimeout$8(options.signal, OAUTH_TIMEOUT_MS$2)
+		signal: withTimeout$7(options.signal, OAUTH_TIMEOUT_MS$2)
 	});
 	const payload = await response.json().catch(() => void 0);
 	const record = asRecord$13(payload) ?? {};
@@ -20694,7 +21030,7 @@ async function refreshAccessToken$1(refreshToken, options = {}) {
 					grant_type: "refresh_token",
 					refresh_token: refreshToken
 				}).toString(),
-				signal: withTimeout$8(options.signal, OAUTH_TIMEOUT_MS$2)
+				signal: withTimeout$7(options.signal, OAUTH_TIMEOUT_MS$2)
 			});
 			const payload = await response.json().catch(() => void 0);
 			const { code, description } = oauthErrorFields$2(payload);
@@ -27967,7 +28303,7 @@ const OAUTH_HEADERS = {
 	accept: "application/json",
 	"content-type": "application/x-www-form-urlencoded"
 };
-function withTimeout$7(signal, ms) {
+function withTimeout$6(signal, ms) {
 	const timeout = AbortSignal.timeout(ms);
 	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
 }
@@ -28035,7 +28371,7 @@ async function requestDeviceAuthorization$1(options = {}) {
 			code_challenge: pkce.challenge,
 			code_challenge_method: PKCE_CHALLENGE_METHOD
 		}).toString(),
-		signal: withTimeout$7(options.signal, OAUTH_TIMEOUT_MS$1)
+		signal: withTimeout$6(options.signal, OAUTH_TIMEOUT_MS$1)
 	});
 	const payload = await response.json().catch(() => void 0);
 	if (!response.ok) {
@@ -28093,7 +28429,7 @@ async function pollDeviceToken(authorization, options = {}) {
 			code_verifier: authorization.codeVerifier,
 			grant_type: DEVICE_CODE_GRANT_TYPE
 		}).toString(),
-		signal: withTimeout$7(options.signal, OAUTH_TIMEOUT_MS$1)
+		signal: withTimeout$6(options.signal, OAUTH_TIMEOUT_MS$1)
 	});
 	const payload = await response.json().catch(() => void 0);
 	const record = asRecord$11(payload) ?? {};
@@ -28155,7 +28491,7 @@ async function refreshAccessToken$2(refreshToken, options) {
 					scope: MINIMAX_CODE_SCOPE,
 					audience: MINIMAX_CODE_AUDIENCE
 				}).toString(),
-				signal: withTimeout$7(options.signal, OAUTH_TIMEOUT_MS$1)
+				signal: withTimeout$6(options.signal, OAUTH_TIMEOUT_MS$1)
 			});
 			const payload = await response.json().catch(() => void 0);
 			const { code, description } = oauthErrorFields$1(payload);
@@ -28188,7 +28524,7 @@ async function revokeToken(token, options) {
 				token,
 				token_type_hint: "refresh_token"
 			}).toString(),
-			signal: withTimeout$7(options.signal, OAUTH_TIMEOUT_MS$1)
+			signal: withTimeout$6(options.signal, OAUTH_TIMEOUT_MS$1)
 		})).ok;
 	} catch {
 		return false;
@@ -28460,7 +28796,7 @@ async function pollWebLogin(store, loginId, options = {}) {
 */
 /** Timeout for the connection probe and any other one-shot call. */
 const PROBE_TIMEOUT_MS = 3e4;
-function withTimeout$6(signal, ms) {
+function withTimeout$5(signal, ms) {
 	const timeout = AbortSignal.timeout(ms);
 	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
 }
@@ -28570,7 +28906,7 @@ async function testConnection(store, options = {}) {
 					content: "ping"
 				}]
 			}),
-			signal: withTimeout$6(options.signal, PROBE_TIMEOUT_MS)
+			signal: withTimeout$5(options.signal, PROBE_TIMEOUT_MS)
 		});
 		const latencyMs = Date.now() - startedAt;
 		if (!response.ok) {
@@ -28635,7 +28971,7 @@ async function createMessage(store, request, options = {}) {
 					content: request.prompt
 				}]
 			}),
-			signal: withTimeout$6(options.signal, PROBE_TIMEOUT_MS)
+			signal: withTimeout$5(options.signal, PROBE_TIMEOUT_MS)
 		});
 		const payload = await response.json().catch(() => void 0);
 		return {
@@ -28908,7 +29244,7 @@ async function fetchTokenPlanQuota(credentials, options = {}) {
 		const response = await fetchFn(tokenPlanRemainsUrl(host), {
 			method: "GET",
 			headers: quotaRequestHeaders(credentials.accessToken, remainsPath),
-			signal: withTimeout$6(options.signal, QUOTA_TIMEOUT_MS)
+			signal: withTimeout$5(options.signal, QUOTA_TIMEOUT_MS)
 		});
 		if (response.status === 401 || response.status === 403) {
 			if (await options.isCredentialStale?.() === true) return null;
@@ -30604,7 +30940,7 @@ function ms(value) {
 function text$1(value) {
 	return typeof value === "string" && value !== "" ? value : void 0;
 }
-function withTimeout$5(signal, ms_) {
+function withTimeout$4(signal, ms_) {
 	const timeout = AbortSignal.timeout(ms_);
 	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
 }
@@ -30660,7 +30996,7 @@ async function resetCardCall(input) {
 			method: input.method,
 			headers: resetCardRequestHeaders(input.accessToken),
 			...input.body === void 0 ? {} : { body: input.body },
-			signal: withTimeout$5(input.signal, RESET_CARD_TIMEOUT_MS)
+			signal: withTimeout$4(input.signal, RESET_CARD_TIMEOUT_MS)
 		});
 	} catch (error) {
 		throw new MinimaxCodeResetCardError("reset-card call could not be reached: " + (error instanceof Error ? error.message : String(error)), null, null);
@@ -40597,7 +40933,7 @@ function oauthErrorFields(payload) {
 * Whichever fires first wins, so an abandoned sign-in stops promptly while a
 * hung endpoint still cannot hold the request open forever.
 */
-function withTimeout$4(signal, ms) {
+function withTimeout$3(signal, ms) {
 	const timeout = AbortSignal.timeout(ms);
 	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
 }
@@ -40739,7 +41075,7 @@ async function postTokenGrant(body, options, requireRefreshToken, secrets) {
 				accept: "application/json"
 			},
 			body: JSON.stringify(body),
-			signal: withTimeout$4(options.signal, OAUTH_TIMEOUT_MS)
+			signal: withTimeout$3(options.signal, OAUTH_TIMEOUT_MS)
 		});
 	} catch (error) {
 		throw new ClaudeRetryableError("Could not reach the Claude token endpoint.", error);
@@ -44605,10 +44941,6 @@ function cliPollUrl(flowId, env = process.env) {
 function keyName(env = process.env) {
 	return textOverride$1(env, "DSH_GLM_KEY_NAME") || "dsh-glm-coding-plan";
 }
-/** 签名层是否被显式打开；默认关闭（证据等级 C，见 `CLIENT_SIGNING_DEFAULT_ENABLED`）。 */
-function clientSigningEnabled(env = process.env) {
-	return (env.DSH_GLM_CLIENT_SIGNING ?? "").trim() === "1";
-}
 /** 认不出区域时的默认部署。国际区是本仓库的历史默认值（沿用 `9ad8a53` 的 `regionForBaseUrl`）。 */
 const DEFAULT_REGION = "intl";
 /** 把自由输入的区域名规整到本线路认识的部署；认不出来时返回 undefined。 */
@@ -46680,7 +47012,7 @@ function asRecord$5(value) {
 function asString$6(value) {
 	return typeof value === "string" && value !== "" ? value : void 0;
 }
-function withTimeout$3(signal, ms) {
+function withTimeout$2(signal, ms) {
 	const timeout = AbortSignal.timeout(ms);
 	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
 }
@@ -46754,7 +47086,7 @@ async function loginBizToken(accessToken, region, options = {}) {
 				"user-agent": USER_AGENT$1
 			},
 			body: JSON.stringify({ token: accessToken }),
-			signal: withTimeout$3(options.signal, options.timeoutMs ?? 2e4)
+			signal: withTimeout$2(options.signal, options.timeoutMs ?? 2e4)
 		});
 		status = response.status;
 		ok = response.ok;
@@ -46809,7 +47141,7 @@ async function bizRequest(options) {
 				"user-agent": USER_AGENT$1
 			},
 			...options.body === void 0 ? {} : { body: JSON.stringify(options.body) },
-			signal: withTimeout$3(options.signal, options.timeoutMs ?? 2e4)
+			signal: withTimeout$2(options.signal, options.timeoutMs ?? 2e4)
 		});
 	} catch (error) {
 		fail(options.region, options.action + " 请求失败：" + (error instanceof Error ? error.message : String(error)), error);
@@ -47028,7 +47360,7 @@ async function verifyCodingPlanKey(region, codingPlanKey, options = {}) {
 				accept: "application/json",
 				"user-agent": USER_AGENT$1
 			},
-			signal: withTimeout$3(options.signal, options.timeoutMs ?? 2e4)
+			signal: withTimeout$2(options.signal, options.timeoutMs ?? 2e4)
 		});
 	} catch (error) {
 		fail(region, "配额验活请求失败：" + (error instanceof Error ? error.message : String(error)), error);
@@ -47160,7 +47492,7 @@ function asText$1(value) {
 function clampPercent(value) {
 	return Math.max(0, Math.min(100, value));
 }
-function withTimeout$2(signal, ms) {
+function withTimeout$1(signal, ms) {
 	const timeout = AbortSignal.timeout(ms);
 	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
 }
@@ -47269,7 +47601,7 @@ async function fetchCatalog(region, codingPlanKey, options = {}) {
 	const response = await fetchFn(url, {
 		method: "GET",
 		headers: glmOpenAiProbeHeaders(codingPlanKey),
-		signal: withTimeout$2(options.signal, options.timeoutMs ?? 2e4)
+		signal: withTimeout$1(options.signal, options.timeoutMs ?? 2e4)
 	});
 	const text = await response.text().catch(() => "");
 	if (!response.ok) {
@@ -47509,7 +47841,7 @@ async function fetchSubscriptionPlan(region, codingPlanKey, options = {}) {
 		const response = await fetchFn(subscriptionUrl(region, options.env ?? process.env), {
 			method: "GET",
 			headers: quotaRequestHeaders$1(codingPlanKey),
-			signal: withTimeout$2(options.signal, options.timeoutMs ?? 2e4)
+			signal: withTimeout$1(options.signal, options.timeoutMs ?? 2e4)
 		});
 		if (!response.ok) return null;
 		const payload = await response.json().catch(() => void 0);
@@ -47556,7 +47888,7 @@ async function fetchGlmQuota(region, codingPlanKey, options = {}) {
 			response = await fetchFn(quotaUrl(region, env), {
 				method: "GET",
 				headers: quotaRequestHeaders$1(codingPlanKey),
-				signal: withTimeout$2(options.signal, options.timeoutMs ?? 2e4)
+				signal: withTimeout$1(options.signal, options.timeoutMs ?? 2e4)
 			});
 		} catch (error) {
 			return {
@@ -47593,7 +47925,7 @@ async function fetchGlmQuota(region, codingPlanKey, options = {}) {
 		});
 		if (snapshot === null) return {
 			snapshot: null,
-			error: failure("配额响应里没有可解析的窗口（信封 success 不为 true，或只剩未知 unit / MCP 请求上限）。"),
+			error: failure("上游没有返回可显示的额度窗口。"),
 			fromCache: false
 		};
 		return {
@@ -47616,450 +47948,6 @@ async function fetchGlmQuota(region, codingPlanKey, options = {}) {
 		if (quotaInFlight$1.get(key) === request) quotaInFlight$1.delete(key);
 	}
 }
-//#endregion
-//#region src/host/glm-coding-plan/signing.ts
-/**
-* GLM（ZCode 账号）线路的 Client Request Signing V4（计划 §6.1 的 `signing.ts`，工作包 W4）。
-*
-* ## 一句话说清它的地位：这一层**默认关闭**，而且它不进入默认路径
-*
-* 唯一有真实调用记录的实现（hj01857655/ZCode）做过 A/B 对照：**带签名与不带签名的响应
-* 归一化后完全一致**（都是 HTTP 429 / 业务码 1113「没有余额也没有可用的资源包」）。
-* 也就是说：
-*
-* - 没有人观察到服务端因为**缺**签名而拒绝请求；
-* - 也没有一份证据能证明带签名能换到额外额度（参考实现注释里说的「150% 额度 / 夜间免费
-*   Flash」是它的**声称**，不是实测结论）。
-*
-* 按计划的证据分级（§2）这属于 **C 级 = 社区经验或架构推断，无实测**，实施规则是
-* 「**实现但默认不启用**，做对照实验」。所以：
-*
-* 1. `CLIENT_SIGNING_DEFAULT_ENABLED = false`（`types.ts`，冻结），本文件不重定义它；
-* 2. `buildSigningHeaders()` 是**唯一对外的签名入口**，它在门控关闭时返回空表并且
-*    **一次网络请求都不发**——这是结构性保证，不是靠调用方自觉；
-* 3. 门控由 `types.ts` 的 `clientSigningEnabled(env)` 读 `DSH_GLM_CLIENT_SIGNING=1` 打开。
-*
-* 门控关掉之后，`applyGlmClientSigning()` 拿到一个空表，调用方的请求头**一个键都不会变**。
-*
-* ## 实现来源与许可
-*
-* 移植自 MIT 许可的现成实现（本身就是 DSH 插件里的 TS 文件，纯 `node:crypto` 零依赖）：
-*
-* - 来源：<https://raw.githubusercontent.com/ShanWuYinShe/dsh-plugins/main/packages/dsh-any-connect/src/zcode-signer.ts>
-*   （仓库 ShanWuYinShe/dsh-plugins，路径 `packages/dsh-any-connect/src/zcode-signer.ts`，219 行）
-* - 许可：**MIT**（计划 R7：只有 MIT 仓库可以复制代码；bacnh85/pi-extensions 与
-*   TriDefender/zcode-api 的许可为 null，只读协议、照协议重写）
-* - 随附参考测试：同仓库 `test/zcode-signer.test.ts`
-*
-* 协议逐字要点（与上实现一致，本文件未改动算法）：
-*
-* - 握手：`POST {握手 origin}/api/paas/c1f3a7e2/v2/client`，头 `Authorization: {apiKeyId}.{apiKeySecret}`
-*   （**裸 Key，不加 Bearer**），体四字段 `{apiKey, nonce, sig, ts}`
-* - 密钥派生：HKDF-SHA256，`salt = 'WD_CLIENT_SIGN_KDF_SALT'`，`info = 'getSignKey_hmac'`（导出
-*   HMAC 密钥）/ `'ed25519_priv'`（导出解私钥用的 AES-GCM 密钥），长度均为 32 字节
-* - HMAC 消息：`"get_sign_key\n{apiKeyId}\n{ts}\n{nonce}"`，**换行分隔**（空格分隔会被拒），
-*   结果 base64
-* - 响应 `data.privateCipher` → AES-256-GCM 解密，iv 取前 12 字节、tag 取末 16 字节、
-*   AAD = apiKeyId；解密出的明文**又是 base64** 的 PKCS#8 Ed25519 私钥（双层编码）
-* - 业务签名消息：`"{apiKeyId}\n{ts}\n{clientVersion}\n{sessionId}\n{nonce}"`，Ed25519 签名后
-*   **base64**（不是 hex）
-* - PoW：`sha256("{apiKeyId}\n{appId}\n{sessionId}\n{ts}")` 的 hex 取**前 32 字符**作 seed，
-*   在 `sha256("{seed}\n{nonce}{counter hex 8 位}")` 上找前导 0 位 >= 8 的解
-* - App id = `'zcode'`
-*
-* ## 相对参考实现改掉的三处（计划 R2 / 任务书，逐条对应）
-*
-* 1. **握手 origin 改成 `https://api.z.ai`。**
-*    参考实现硬编码 `open.bigmodel.cn`，但实测记录逐字写着「`/api/paas/*` 在 zcode.z.ai 上
-*    404，get_sign_key 端点回应在 api.z.ai 这个 origin」（计划 R2）。本线路默认用 api.z.ai，
-*    并按 `types.ts` 的覆盖写法接受 `DSH_GLM_SIGN_HANDSHAKE_BASE` /
-*    `DSH_GLM_SIGN_HANDSHAKE_URL` 覆盖（读取发生在调用时，不是模块加载时）。
-* 2. **clientVersion 默认提到 `3.15.1`**（参考实现是 `3.4.0`）。这个值同时进签名串与
-*    `X-Client-Version` / `X-ZCode-App-Version` / `User-Agent` 三个头，写错签名直接失效；
-*    TriDefender 的测试注释称 3.15.1 起 `/api/v1/agent/configs` 这个 gate 已移除。
-*    默认值可被 `DSH_GLM_SIGN_CLIENT_VERSION` 覆盖。
-* 3. **不移植 gate 逻辑。** 第二参考实现（pi-extensions，许可 null，只读协议）里有
-*    「先探 `/api/v1/agent/configs` 决定要不要签名」的门控，本线路**不做这个探测**：
-*    计划已把门控收敛成「默认关闭 + `DSH_GLM_CLIENT_SIGNING` 显式打开」，
-*    多一次探测就多一个会失败的上游依赖。
-*
-* ## 另外三处刻意偏离参考实现（理由随代码给出）
-*
-* - **不发 `Authorization`。** 参考实现返回的表里带 `Authorization: Bearer {id}.{secret}`，
-*   但本线路模型面的认证头是 W5/W6 的活，且 Anthropic 面要求**双头**
-*   （`x-api-key` + `Authorization: Bearer` 同值，计划 §3.3 逐字引用官方注释）。
-*   签名器若顺手覆盖 `Authorization`，会把装配层算好的认证头顶掉，所以这一行不归它。
-* - **默认不覆盖调用方的 `User-Agent`。** `types.ts` 的 `USER_AGENT` 明写「如实报成这个
-*   第三方插件，不冒充官方客户端」。`buildSigningHeaders()` 作为原样移植仍然返回
-*   `ZCode/{version}`，但 `applyGlmClientSigning()` 默认保留调用方已有的 `User-Agent`，
-*   要替换得显式传 `overrideUserAgent: true`。签名层本身整层都是「假装成官方客户端」，
-*   这道默认值让「开签名」不必等于「改身份」。
-* - **成功码同时认 `0` 与 `200`。** 参考实现只认 `code === 200`；本线路业务面信封把两者都
-*   当成功（见 `exchange.ts` 的 `isBizSuccessCode`），握手面在同一个 origin 上，只认一个会
-*   凭空制造一次失败。
-*
-* ## 未验证（缺什么证据）
-*
-* - 握手路径里的 `c1f3a7e2` 是否会轮换（计划 §9 明确未验证第 2 条）。缺一份上游变更通告，
-*   所以路径做成常量 + URL 覆盖。
-* - 私钥是否长期稳定：没有任何证据说服务端会为同一把 Coding Plan Key 重新下发私钥，
-*   因此这里按「一把凭据一把私钥」缓存到进程结束，W6 换凭据时应调 `clearPrivateKey()`。
-* - 明文**直接是 DER**（不做 base64）的形状没有证据；这里按 ASN.1 首字节做一次形状判定，
-*   两种形状都能解开，但只有 base64 双层那一种是参考实现实测过的。
-* - `X-Title: 'Z Code@cli'` / `X-Release-Channel: 'stable'` / `X-ZCode-Agent: 'glm'` 三个头
-*   是否参与签名校验无从判断；它们原样保留参考实现的取值，未做删减实验。
-* - 服务端是否真的因缺签名返回 `VERIFY_SIGNATURE_INVALID`：**从未被观察到**（计划 §9 末条）。
-*/
-/** HKDF 的 salt，逐字来自参考实现的 `KDF_SALT`。 */
-const SIGNING_KDF_SALT = "WD_CLIENT_SIGN_KDF_SALT";
-/** 导出 HMAC 密钥的 HKDF info，逐字来自参考实现的 `INFO_HMAC`。 */
-const SIGNING_INFO_HMAC = "getSignKey_hmac";
-/** 导出「解私钥用的 AES-GCM 密钥」的 HKDF info，逐字来自参考实现的 `INFO_PRIV`。 */
-const SIGNING_INFO_PRIV = "ed25519_priv";
-/** HMAC 消息的第一行，逐字来自参考实现。**换行分隔**，空格分隔会被服务端拒。 */
-const SIGNING_HMAC_PREFIX = "get_sign_key";
-/** 握手路径（逐字来自参考实现）。**未验证**：`c1f3a7e2` 是否会轮换（计划 §9 第 2 条）。 */
-const SIGNING_HANDSHAKE_PATH = "/api/paas/c1f3a7e2/v2/client";
-/** PoW 计数器能取到的最大值（含）：答案的末 8 位十六进制就是它。 */
-const POW_MAX_COUNTER = 4294967295;
-/** 一次握手请求体里的 nonce 字节数（12 字节 → 24 个十六进制字符）。 */
-const HANDSHAKE_NONCE_BYTES = 12;
-/** 一次业务请求头里的 nonce 字节数（16 字节 → 32 个十六进制字符）。 */
-const REQUEST_NONCE_BYTES = 16;
-/** 签名层的任何失败都抛这一类，调用方按「签名不可用」降级（关闭该功能，而不是让请求整体失败）。 */
-var GlmSigningError = class extends Error {
-	constructor(message, options) {
-		super(message, options === void 0 ? void 0 : { cause: options.cause });
-		this.name = "GlmSigningError";
-	}
-};
-/**
-* 拆 `{apiKeyId}.{apiKeySecret}`。
-*
-* 严格只允许**一个**点：secret 里再有点会被判为非法，而不是悄悄把后面的部分截掉——
-* 上游对畸形 Key 的处置是 401（`ERROR_CODE.AUTH_INVALID`），本地早失败比发一次注定失败的
-* 握手请求好。返回值里没有 secret 之外的东西，日志里不要打印它。
-*/
-function parseGlmCodingPlanApiKey(raw) {
-	const trimmed = raw.trim();
-	const dot = trimmed.indexOf(".");
-	if (dot <= 0 || dot !== trimmed.lastIndexOf(".")) return void 0;
-	const apiKeyId = trimmed.slice(0, dot).trim();
-	const apiKeySecret = trimmed.slice(dot + 1).trim();
-	if (apiKeyId === "" || apiKeySecret === "") return void 0;
-	return {
-		apiKeyId,
-		apiKeySecret,
-		credential: trimmed
-	};
-}
-function requireApiKey(raw) {
-	const parsed = parseGlmCodingPlanApiKey(raw);
-	if (parsed === void 0) throw new GlmSigningError("Coding Plan Key 格式非法（应为 apiKeyId.apiKeySecret）");
-	return parsed;
-}
-/**
-* 覆盖读取方式照抄 `types.ts` 末尾那两个函数：调用时读 `env`、空串视作未设置、host 值去掉尾部斜杠。
-*
-* 不复用 `types.ts` 的 `hostOverride` 是因为它是模块私有的；这里复制的是**写法**而不是常量，
-* 覆盖表本身是本文件独有的（见文件头「实现来源」一节）。
-*/
-function signHostOverride(env, name) {
-	const value = (env[name] ?? "").trim();
-	return value === "" ? "" : value.replace(/\/+$/, "");
-}
-function signTextOverride(env, name) {
-	const value = (env[name] ?? "").trim();
-	return value === "" ? "" : value;
-}
-/**
-* 握手 origin：`DSH_GLM_SIGN_HANDSHAKE_BASE` 覆盖，默认 `https://api.z.ai`。
-*
-* 做成 origin 而不是整串 URL，是为了让「换个部署/反代根」这件事与 `types.ts` 里
-* `businessHost` / `apiBaseForRegion` 的形状一致；路径部分是常量。
-*/
-function signingHandshakeOrigin(env = process.env) {
-	return signHostOverride(env, "DSH_GLM_SIGN_HANDSHAKE_BASE") || "https://api.z.ai";
-}
-/**
-* 握手完整 URL。
-*
-* `DSH_GLM_SIGN_HANDSHAKE_URL`（整串覆盖）优先于 `DSH_GLM_SIGN_HANDSHAKE_BASE`。
-* 单独留一个整串覆盖是因为 `c1f3a7e2` 这段路径**是否会轮换没有验证**（计划 §9 第 2 条），
-* 上游一旦换路径，只改环境变量就能救，不必发一个版本。
-*/
-function signingHandshakeUrl(env = process.env) {
-	const whole = signHostOverride(env, "DSH_GLM_SIGN_HANDSHAKE_URL");
-	if (whole !== "") return whole;
-	return signingHandshakeOrigin(env) + SIGNING_HANDSHAKE_PATH;
-}
-/** 签名用的 clientVersion：`DSH_GLM_SIGN_CLIENT_VERSION` 覆盖，默认 `3.15.1`。 */
-function signingClientVersion(env = process.env) {
-	return signTextOverride(env, "DSH_GLM_SIGN_CLIENT_VERSION") || "3.15.1";
-}
-/**
-* PoW 的 seed：`sha256("{apiKeyId}\n{appId}\n{sessionId}\n{ts}")` 的 hex 前 32 个字符。
-*
-* 单独抽出来是因为它同时是**签名前的诊断信息**：seed 算错时 PoW 必然解不出，
-* 而解不出与「难度太高」是两种完全不同的故障。
-*/
-function signingPowSeed(input) {
-	const appId = input.appId ?? "zcode";
-	const message = `${input.apiKeyId}\n${appId}\n${input.sessionId}\n${input.ts}`;
-	return crypto.createHash("sha256").update(message).digest("hex").slice(0, 32);
-}
-/**
-* 解 PoW：找一个让 `sha256("{seed}\n{nonce}{counter}")` 前导 0 位 >= powBits 的 `{nonce}{counter}`。
-*
-* 答案的形状是 24 个字符的随机 nonce + 8 位十六进制计数器（原样照抄参考实现）。
-* 8 位难度平均 256 次尝试、12 位平均 4096 次，都是纯 CPU 的小量级，不构成请求路径上的负担；
-* 上游要更高难度时改 `powBits` 即可，本文件不做「自适应难度」。
-*/
-function solveSigningProofOfWork(input) {
-	const powBits = input.powBits ?? 8;
-	const seed = signingPowSeed(input);
-	const nonce = input.noncePrefix ?? crypto.randomBytes(HANDSHAKE_NONCE_BYTES).toString("hex");
-	const fullBytes = Math.floor(powBits / 8);
-	const remBits = powBits % 8;
-	const remMask = remBits === 0 ? 0 : 255 << 8 - remBits & 255;
-	for (let counter = 0; counter <= POW_MAX_COUNTER; counter += 1) {
-		const candidate = nonce + counter.toString(16).padStart(8, "0");
-		const digest = crypto.createHash("sha256").update(`${seed}\n${candidate}`).digest();
-		let matched = true;
-		for (let i = 0; i < fullBytes; i += 1) if (digest[i] !== 0) {
-			matched = false;
-			break;
-		}
-		if (matched && (remBits === 0 || ((digest[fullBytes] ?? 255) & remMask) === 0)) return candidate;
-	}
-	throw new GlmSigningError("解不开签名用的 proof-of-work（counter 空间已耗尽）");
-}
-function withTimeout$1(signal, ms) {
-	const timeout = AbortSignal.timeout(ms);
-	return signal === void 0 ? timeout : AbortSignal.any([signal, timeout]);
-}
-/** 大小写不敏感地写一个头：同名不同大小写的两个键会被 `fetch` 合并成一条，后者覆盖前者。 */
-function putHeader(target, name, value) {
-	const lower = name.toLowerCase();
-	for (const key of Object.keys(target)) if (key.toLowerCase() === lower && key !== name) delete target[key];
-	target[name] = value;
-}
-/**
-* 一把 Coding Plan Key 的签名器。
-*
-* **实例化而不是模块级单例**：一个号池可以同时持有两区多个账号（计划 §1、§8.2），
-* 而握手结果与私钥都是**按凭据**缓存的，单例会把第二个账号的私钥混进第一个账号的缓存。
-*
-* 但缓存只在实例内：模块级表会让 `{id}.{secret}` 这种含密的值在进程里长期驻留，
-* 而它并不需要跨实例复用——W6 建一个签名器用到底即可（同 `biz-token-cache.ts` 的取舍理由）。
-*
-* W5/W6 不应直接构造本类，请走 `applyGlmClientSigning()`（受门控）。
-*/
-var GlmClientSigner = class {
-	env;
-	fetchFn;
-	handshakeTimeoutMs;
-	/** 已解出的私钥（PKCS#8 DER），按裸凭据分桶。 */
-	privateKeys = /* @__PURE__ */ new Map();
-	/** 在飞的握手，按裸凭据分桶：并发调用只打一次上游。 */
-	handshakes = /* @__PURE__ */ new Map();
-	constructor(options = {}) {
-		this.env = options.env ?? process.env;
-		this.fetchFn = options.fetchFn ?? fetch;
-		this.handshakeTimeoutMs = options.handshakeTimeoutMs ?? 3e4;
-	}
-	/** 本实例当前会打的握手 URL（诊断用，设置卡片展示「签名会打到哪里」）。 */
-	get handshakeUrl() {
-		return signingHandshakeUrl(this.env);
-	}
-	/**
-	* 拿到这把凭据的 Ed25519 私钥（PKCS#8 DER），必要时先握手一次。
-	*
-	* 缓存策略是「一把凭据一把私钥，直到 `clearPrivateKey()`」。
-	* **未验证**：服务端会不会为同一把 Coding Plan Key 重新下发私钥，没有任何证据；
-	* 若上游轮换私钥，症状会是「签名被拒」，处置是调 `clearPrivateKey()` 让它重握手。
-	*
-	* 这是低层原语，**不受门控**——门控在唯一对外的 `buildSigningHeaders()` 上。
-	*/
-	async ensurePrivateKey(apiKey, signal) {
-		const parsed = requireApiKey(apiKey);
-		const cached = this.privateKeys.get(parsed.credential);
-		if (cached !== void 0) return cached;
-		const joined = this.handshakes.get(parsed.credential);
-		if (joined !== void 0) return joined;
-		const pending = this.performHandshake(parsed, signal).then((key) => {
-			this.privateKeys.set(parsed.credential, key);
-			return key;
-		}).finally(() => {
-			if (this.handshakes.get(parsed.credential) === pending) this.handshakes.delete(parsed.credential);
-		});
-		this.handshakes.set(parsed.credential, pending);
-		return pending;
-	}
-	/** 丢掉缓存的私钥（换凭据、怀疑上游轮换私钥时调用）；不给参数则全丢。 */
-	clearPrivateKey(apiKey) {
-		if (apiKey === void 0) {
-			this.privateKeys.clear();
-			return;
-		}
-		const parsed = parseGlmCodingPlanApiKey(apiKey);
-		if (parsed !== void 0) this.privateKeys.delete(parsed.credential);
-	}
-	/**
-	* 握手一次并解出私钥。
-	*
-	* 步骤逐字照参考实现：HKDF 导出 HMAC 密钥 → 用 `"get_sign_key\n{id}\n{ts}\n{nonce}"`
-	* （换行分隔）算 base64 签名 → POST → 取 `data.privateCipher` → HKDF 导出 AES-GCM 密钥解密。
-	*/
-	async performHandshake(parsed, signal) {
-		const ts = String(Date.now());
-		const nonce = crypto.randomBytes(HANDSHAKE_NONCE_BYTES).toString("hex");
-		const url = signingHandshakeUrl(this.env);
-		const hmacKey = crypto.hkdfSync("sha256", parsed.apiKeySecret, SIGNING_KDF_SALT, SIGNING_INFO_HMAC, 32);
-		const hmac = crypto.createHmac("sha256", Buffer.from(hmacKey));
-		hmac.update(`${SIGNING_HMAC_PREFIX}\n${parsed.apiKeyId}\n${ts}\n${nonce}`);
-		const sig = hmac.digest("base64");
-		let payload;
-		let status = 0;
-		try {
-			const response = await this.fetchFn(url, {
-				method: "POST",
-				headers: {
-					authorization: parsed.credential,
-					"content-type": "application/json",
-					accept: "application/json"
-				},
-				body: JSON.stringify({
-					apiKey: parsed.credential,
-					nonce,
-					sig,
-					ts
-				}),
-				signal: withTimeout$1(signal, this.handshakeTimeoutMs)
-			});
-			status = response.status;
-			payload = await response.json().catch(() => void 0);
-		} catch (error) {
-			throw new GlmSigningError(`签名握手（${url}）请求失败（HTTP ${status || "—"}）：` + (error instanceof Error ? error.message : String(error)), { cause: error });
-		}
-		if (typeof payload !== "object" || payload === null || Array.isArray(payload)) throw new GlmSigningError(`签名握手（${url}）响应不是 JSON 对象（HTTP ${status}）`);
-		const envelope = payload;
-		if (envelope.code !== 200 && envelope.code !== 0) {
-			const msg = typeof envelope.msg === "string" ? envelope.msg : "unknown";
-			throw new GlmSigningError(`签名握手被拒（HTTP ${status}）：code=${String(envelope.code)} msg=${msg}`);
-		}
-		const privateCipher = envelope.data?.privateCipher;
-		if (typeof privateCipher !== "string" || privateCipher === "") throw new GlmSigningError(`签名握手响应里没有 data.privateCipher（HTTP ${status}）`);
-		return this.decryptPrivateKey(parsed, privateCipher);
-	}
-	/**
-	* 解 `privateCipher`：base64 → iv(12) ‖ ciphertext ‖ tag(16) → AES-256-GCM。
-	*
-	* AAD 是 apiKeyId（逐字来自参考实现）。解密出的明文按形状判定：
-	*
-	* - 明文**首字节是 0x30**（ASN.1 SEQUENCE）→ 明文本身就是 PKCS#8 DER；
-	* - 否则按参考实现的实测口径再解一层 base64（双层编码）。
-	*
-	* **未验证**：第一种形状没有任何证据，只是为了上游哪天改掉这层 base64 时不至于整体失败。
-	*/
-	decryptPrivateKey(parsed, privateCipher) {
-		const cipherBytes = Buffer.from(privateCipher, "base64");
-		const IV_BYTES = 12;
-		if (cipherBytes.length <= 28) throw new GlmSigningError(`签名握手返回的 privateCipher 太短（${cipherBytes.length} 字节）`);
-		const aesKey = crypto.hkdfSync("sha256", parsed.apiKeySecret, SIGNING_KDF_SALT, SIGNING_INFO_PRIV, 32);
-		const iv = cipherBytes.subarray(0, IV_BYTES);
-		const ciphertextWithTag = cipherBytes.subarray(IV_BYTES);
-		const ciphertext = ciphertextWithTag.subarray(0, -16);
-		const tag = ciphertextWithTag.subarray(-16);
-		let plaintext;
-		try {
-			const decipher = crypto.createDecipheriv("aes-256-gcm", Buffer.from(aesKey), iv);
-			decipher.setAuthTag(tag);
-			decipher.setAAD(Buffer.from(parsed.apiKeyId, "utf8"));
-			plaintext = Buffer.concat([decipher.update(ciphertext), decipher.final()]);
-		} catch (error) {
-			throw new GlmSigningError("签名握手返回的 privateCipher 解不开（密钥、AAD 或密文长度不对）", { cause: error });
-		}
-		if (plaintext.length > 0 && plaintext[0] === 48) return plaintext;
-		return Buffer.from(plaintext.toString("utf8").trim(), "base64");
-	}
-	/**
-	* 生成本次请求的签名头表。**这是签名层唯一对外的入口，受门控。**
-	*
-	* 门控关闭（默认）时：返回**空表**，并且一次网络请求都不发——所以「默认路径不产生
-	* 任何 X-Client-* 头」不是一句约定，而是这条分支的必然结果。
-	*
-	* 返回的表里**没有 `Authorization`**：本线路模型面的认证头由 W5/W6 装配，
-	* Anthropic 面要求 `x-api-key` 与 `Authorization: Bearer` 双头同值（计划 §3.3），
-	* 签名器越权写那一行会把装配层算好的头顶掉。
-	*/
-	async buildSigningHeaders(input) {
-		if (!clientSigningEnabled(this.env)) return {};
-		const parsed = requireApiKey(input.apiKey);
-		const privateKeyDer = await this.ensurePrivateKey(input.apiKey, input.signal);
-		const sessionId = input.sessionId ?? crypto.randomUUID();
-		const clientVersion = input.clientVersion ?? signingClientVersion(this.env);
-		const ts = String(Date.now());
-		const clientNonce = crypto.randomBytes(REQUEST_NONCE_BYTES).toString("hex");
-		const pow = solveSigningProofOfWork({
-			apiKeyId: parsed.apiKeyId,
-			appId: input.appId,
-			sessionId,
-			ts,
-			powBits: input.powBits
-		});
-		const signData = `${parsed.apiKeyId}\n${ts}\n${clientVersion}\n${sessionId}\n${clientNonce}`;
-		const privateKey = crypto.createPrivateKey({
-			key: privateKeyDer,
-			format: "der",
-			type: "pkcs8"
-		});
-		const clientSig = crypto.sign(null, Buffer.from(signData, "utf8"), privateKey).toString("base64");
-		const platform = os.platform();
-		const osCategory = platform === "darwin" ? "macos" : platform === "win32" ? "windows" : "linux";
-		return {
-			"User-Agent": `ZCode/${clientVersion}`,
-			"X-App-Id": input.appId ?? "zcode",
-			"X-Client-Version": clientVersion,
-			"X-ZCode-App-Version": clientVersion,
-			"X-Session-Id": sessionId,
-			"X-Client-Ts": ts,
-			"X-Client-Nonce": clientNonce,
-			"X-Client-Pow": pow,
-			"X-Client-Sig": clientSig,
-			"X-Title": "Z Code@cli",
-			"X-Release-Channel": "stable",
-			"X-ZCode-Agent": "glm",
-			"X-Platform": `${platform}-${os.arch()}`,
-			"X-Os-Category": osCategory
-		};
-	}
-};
-/**
-* 把签名头合并进调用方的请求头表，**就地写入并返回同一对象**。
-*
-* 门控关闭时返回原对象且**一个键都不动**——这是计划 §8.2「断言默认路径不产生 X-Client-* 头」
-* 对装配层（W5/W6）的保证：不调用方需要写任何 `if`。
-*
-* 合并时大小写不敏感地覆盖同名头，避免调用方已经写了 `x-client-version` 时
-* `fetch` 拿到两条同名头、取值取决于键的插入顺序。
-*/
-async function applyGlmClientSigning(headers, input, options = {}) {
-	if (!clientSigningEnabled(options.env ?? process.env)) return headers;
-	const signing = await (options.signer ?? new GlmClientSigner(options)).buildSigningHeaders({
-		apiKey: input.apiKey,
-		sessionId: options.sessionId,
-		clientVersion: options.clientVersion,
-		powBits: options.powBits,
-		signal: input.signal
-	});
-	const overrideUserAgent = options.overrideUserAgent === true;
-	for (const [name, value] of Object.entries(signing)) {
-		if (!overrideUserAgent && name.toLowerCase() === "user-agent") continue;
-		putHeader(headers, name, value);
-	}
-	return headers;
-}
 /** 凭据文件在数据根下的两段目录名（逐字：`join(base, ".zcode", "v2", "credentials.json")`）。 */
 const ZCODE_CREDENTIAL_DIR_SEGMENTS = [".zcode", "v2"];
 /** 凭据文件名（逐字：`shared-credentials.ts` 的 `resolveSharedZCodeCredentialsPath`）。 */
@@ -48934,14 +48822,11 @@ function registerGlmCodingPlanPreferenceStore(settings, fallbackStore = new GlmC
 * Chat Completions 线，`null`（目录没有转录过的 id）**拒绝这个模型**——挑错的表现是
 * 1212 `WRONG_METHOD`，比直接拒绝更难排查。
 *
-* 另外三件事也刻意留在这里而不是散进两个 mapper：
+* 另外两件事也刻意留在这里而不是散进两个 mapper：
 *
 * - **ladder 由本层传入**：`glmEffortForLadder` / `buildChatRequest` 只收敛，不查目录。
 *   梯子来自 `GlmModelOption.reasoningEfforts`，空数组 = 该模型完全不发思考控制
 *   （**有意语义**，不是 bug）。
-* - **签名层就地合并**：`applyGlmClientSigning` 门控关闭时原样返回、零网络请求，
-*   所以这里不写任何 `if`。sessionId 在一个适配器实例的生命周期内固定复用，
-*   每次新生成会让 PoW seed 与签名串都变。
 * - **冷却键看状态码 429 与正文里的重置时刻**，而不是只看 `code`。冻结的错误码表里
 *   七条 429 有五条是额度类（`USAGE_LIMIT` / `PLAN_LIMIT` / `NO_BALANCE` / `PLAN_EXPIRED` /
 *   `MODEL_NOT_IN_PLAN`），它们不可重试，而「`code === 'RATE_LIMIT'` 才冷却」会让
@@ -49096,16 +48981,6 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 	preferences;
 	accountPool;
 	options;
-	/**
-	* 签名器：每个适配器实例一个。
-	*
-	* 握手结果与私钥按凭据缓存，而一个池里可以同时有两区多个账号，所以做成实例级而不是模块级单例。
-	* 默认门控关闭时它从不被用到（`applyGlmClientSigning` 直接原样返回），
-	* 换凭据时也不需要手动清——因为它按 `apiKey` 派生缓存键。
-	*/
-	signer;
-	/** 一个实例内固定复用的会话 id；每次新生成都会改变 PoW seed 与签名串。 */
-	signingSessionId;
 	constructor(store = new GlmCodingPlanCredentialStore(), modelSettings = new GlmCodingPlanModelSettingsStore(), preferences, options = {}) {
 		super();
 		this.store = store;
@@ -49113,8 +48988,6 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 		this.preferences = preferences;
 		this.options = options;
 		this.accountPool = options.accountPool ?? null;
-		this.signer = new GlmClientSigner({ ...options.fetchFn === void 0 ? {} : { fetchFn: options.fetchFn } });
-		this.signingSessionId = "dsh-glm-coding-plan";
 	}
 	providerInfo(provider) {
 		return {
@@ -49237,19 +49110,11 @@ var GlmCodingPlanAdapter = class extends LlmAdapter {
 			});
 			const key = picked.credentials.codingPlan.codingPlanKey;
 			const headers = plan.wire === "anthropic" ? glmAnthropicHeaders(key, plan.headers) : glmOpenAiHeaders(key, plan.headers);
-			const signed = clientSigningEnabled(process.env) ? await applyGlmClientSigning(headers, {
-				apiKey: key,
-				signal
-			}, {
-				signer: this.signer,
-				sessionId: this.signingSessionId,
-				...this.options.fetchFn === void 0 ? {} : { fetchFn: this.options.fetchFn }
-			}) : headers;
 			const body = JSON.stringify(plan.body);
 			try {
 				response = await fetchWithContextBudgetRecovery(fetchFn)(plan.url, {
 					method: "POST",
-					headers: signed,
+					headers,
 					body,
 					signal
 				});
@@ -59719,4 +59584,4 @@ function localWebServerBaseUrl(host, port) {
 	return `http://${host === "0.0.0.0" ? "127.0.0.1" : host}:${port}`;
 }
 //#endregion
-export { AccountPoolCore, AccountPoolStore, AntigravityAdapter, ADOPTED_CREDENTIAL_EXPIRED_HINT as CLAUDE_ADOPTED_CREDENTIAL_EXPIRED_HINT, API_BASE as CLAUDE_API_BASE, DEFAULT_VISIBLE_MODEL_IDS as CLAUDE_DEFAULT_VISIBLE_MODELS, FALLBACK_MODELS as CLAUDE_FALLBACK_MODELS, MESSAGES_PATH as CLAUDE_MESSAGES_PATH, CLAUDE_MODELS, CLAUDE_MODEL_IDS, PROVIDER_ID as CLAUDE_PROVIDER_ID, PROVIDER_NAME as CLAUDE_PROVIDER_NAME, QUOTA_CACHE_TTL_MS as CLAUDE_QUOTA_CACHE_TTL_MS, CLAUDE_REASONING_EFFORTS, ROUTE_PREFIX as CLAUDE_ROUTE_PREFIX, ClaudeAccountPool, ClaudeAdapter, FileCredentialStore as ClaudeCredentialStore, FileModelSettingsStore as ClaudeModelSettingsStore, CodexAccountPool, CodexChatGptAdapter, CommandCodeAccountPool, CommandCodeAdapter, FileCredentialStore$1 as CommandCodeCredentialStore, FileModelSettingsStore$1 as CommandCodeModelSettingsStore, Config, DEFAULT_GUARD_OPTIONS, DEFAULT_SUBAGENT_INHERIT_TOOLS, FileCredentialStore$2 as FileCredentialStore, FileModelSettingsStore$2 as FileModelSettingsStore, GLM_CODING_PLAN_PREFERENCES_NAMESPACE, QUOTA_WINDOW_MINUTES as GLM_CODING_PLAN_QUOTA_WINDOW_MINUTES, GLM_CODING_PLAN_RETRY_POLICY_CONFIG, PROVIDER_ID$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_ID, PROVIDER_NAME$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_NAME, GLM_MODEL_CATALOG, GLM_MODEL_IDS, GLM_POOL_COOLDOWN_MS, GlmAdoptedCredentialRefreshError, GlmClientSigner, GlmCodingPlanAccountPool, GlmCodingPlanAdapter, GlmCodingPlanCredentialStore, GlmCodingPlanModelSettingsStore, KIMI_CODE_MODELS, KIMI_CODE_RETRY_POLICY_CONFIG, KimiCodeAccountPool, KimiCodeAdapter, FileCredentialStore$3 as KimiCodeCredentialStore, FileModelSettingsStore$3 as KimiCodeModelSettingsStore, LinuxFileTokenStore, AGENT_LLM_PREFIX as MINIMAX_CODE_AGENT_LLM_PREFIX, DEFAULT_MAX_MESSAGE_BODY_BYTES as MINIMAX_CODE_MAX_MESSAGE_BODY_BYTES, MESSAGES_PATH$1 as MINIMAX_CODE_MESSAGES_PATH, MINIMAX_CODE_MODELS, PROBE_MODEL as MINIMAX_CODE_PROBE_MODEL, MINIMAX_CODE_PROVIDER_ID, MINIMAX_CODE_PROVIDER_NAME, MINIMAX_CODE_REASONING_EFFORTS, REGION_HOSTS as MINIMAX_CODE_REGION_HOSTS, MINIMAX_CODE_RETRY_POLICY_CONFIG, MINIMAX_CODE_ROUTE_PREFIX, MacKeychainTokenStore, MinimaxCodeAccountPool, MinimaxCodeAdapter, MinimaxCodeCheckinService, MinimaxCodeCredentialStore, MinimaxCodeModelSettingsStore, OAuthService, ProxyManager, RELAY_PROBE_ENV, RELAY_PROBE_FILE_ENV, RELAY_PROBE_FILE_NAME, RELAY_PROBE_MAX_BYTES, RELAY_SOURCE_KINDS, RESUME_HINT, RESUME_HINT_STRICT, RelayProbe, ResponsesClient, STEP_CODE_POOL_COOLDOWN_MS, STEP_CODE_PROFILES, STEP_CODE_PROVIDER_ID, STEP_CODE_PROVIDER_NAME, STEP_CODE_RETRY_POLICY_CONFIG, STEP_CODE_ROUTE_PREFIX, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, SearchProviderSwitcher, StepCodeAccountPool, StepCodeAdapter, StepCodeCredentialRefreshError, StepCodeCredentialStore, StepCodeModelSettingsStore, StepCodeQuotaCredentialStore, UsageService, FALLBACK_MODELS$1 as WORKBUDDY_MODELS, WORKBUDDY_MODEL_IDS, WindowsDpapiTokenStore, WorkBuddyAdapter, WorkBuddyCheckinService, FileCredentialStore$4 as WorkBuddyCredentialStore, FileModelSettingsStore$4 as WorkBuddyModelSettingsStore, adoptZcodeSignIn as adoptGlmZcodeSignIn, adoptedPoolAccountKey, apply, applyGlmClientSigning, assertRequestBodyFits as assertMinimaxCodeBodyFits, assertStreamComplete as assertMinimaxCodeStreamComplete, auditChildRoutes, auditedRoutesOf, authorizedRoutesFor, beginLogin as beginClaudeLogin, beginWebLogin as beginKimiCodeLogin, beginWebLogin$1 as beginMinimaxCodeLogin, beginWebLogin$2 as beginWebLogin, buildClaudeModelOptions, buildGlmRequestPlan, buildMinimaxCodeModelOptions, buildMinimaxRequest, cachedStepCodeModelCatalog, cancelLogin as cancelClaudeLogin, cancelWebLogin as cancelMinimaxCodeLogin, catalogModelOptions, childRoutesOf, clampOutputToContext as clampMinimaxCodeOutputToContext, classifyFailure as classifyClaudeFailure, classifyKimiFailure, classifyMinimaxFailure, classifyFailure$1 as classifyWorkBuddyFailure, claudeCliVersion, claudeCodeCredentialPaths, claudeCodeCredentialPresence, codeForFailure as claudeCodeForFailure, credentialPath as claudeCredentialPath, defaultContextWindowFor as claudeDefaultContextWindow, maxOutputTokensFor as claudeMaxOutputTokens, claudeModelCanDisableThinking, modelSettingsPath as claudeModelSettingsPath, claudeModelSupportsImage, claudeModelSupportsTemperature, claudePoolPath, claudeReasoningEfforts, claudeThinkingMode, toLlmError as claudeToLlmError, clearCachedQuota, clearCachedCatalog as clearClaudeCatalog, clearCachedQuota$1 as clearClaudeQuota, clearCachedQuota$2 as clearCommandCodeQuota, clearCachedQuota$3 as clearKimiCodeQuota, clearCachedQuota$4 as clearMinimaxCodeQuota, clearCachedCatalog$1 as clearWorkBuddyCatalog, clearCachedQuota$5 as clearWorkBuddyQuota, closeMinimaxStream, codeBuddyAuthDir, codexPoolPath, collapseScore, commandCodeAccountKey, credentialPath$1 as commandCodeCredentialPath, modelSettingsPath$1 as commandCodeModelSettingsPath, commandCodePoolPath, contextWindowForModel, convergeGlmEffort, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createFileRelayProbeSink, createMinimaxCodeAccountsHandler, createMessage as createMinimaxCodeMessage, createPkcePair as createMinimaxCodePkcePair, createStreamState as createMinimaxCodeStreamState, createPlatformTokenStore, createSubagentAuthorization, credentialPath$2 as credentialPath, credentialsFromAdopt, credentialsFromCliLogin, delegationDenialReason, delegationModeOf, describeCredentials as describeMinimaxCodeCredentials, detectSystemProxy, dshHomeDir, effectiveRouteOf, ensureAccessToken as ensureClaudeAccessToken, ensureAccessToken$1 as ensureKimiCodeAccessToken, ensureAccessToken$2 as ensureMinimaxCodeAccessToken, fetchAccountQuota, fetchAccountQuota$1 as fetchClaudeQuota, fetchAccountQuota$2 as fetchCommandCodeQuota, fetchGlmQuota, fetchAccountQuota$3 as fetchKimiCodeQuota, fetchUserInfo as fetchKimiCodeUserInfo, fetchTokenPlanQuota as fetchMinimaxCodeQuota, fetchAccountQuota$4 as fetchWorkBuddyQuota, getCachedQuota as getCachedGlmCodingPlanQuota, getCachedQuota$1 as getCachedQuota, getLoginStatus as getClaudeLoginStatus, getCachedQuota$2 as getClaudeQuota, getClaudeWebStatus, getWebLoginStatus as getCommandCodeLoginStatus, getCachedQuota$3 as getCommandCodeQuota, getCommandCodeWebStatus, getGlmCodingPlanStatus, getWebLoginStatus$1 as getKimiCodeLoginStatus, getCachedQuota$4 as getKimiCodeQuota, getKimiCodeWebStatus, getWebLogin as getMinimaxCodeLogin, getCachedQuota$5 as getMinimaxCodeQuota, getMinimaxCodeWebStatus, getStepCodeStatus, getCachedQuota$6 as getWorkBuddyQuota, getWorkBuddyWebStatus, glmCatalogSize, authorizeUrl as glmCodingPlanAuthorizeUrl, catalogSize as glmCodingPlanCatalogCount, credentialPath$3 as glmCodingPlanCredentialPath, modelSettingsPath$2 as glmCodingPlanModelSettingsPath, modelsForRegion as glmCodingPlanModelsForRegion, glmCodingPlanPoolIdentity, glmCodingPlanPoolPath, glmCodingPlanPoolQuota, glmCodingPlanPoolStatus, glmCodingPlanSettingsSource, glmCooldownDecision, glmSubPathOf, inheritOverrideReason, inheritRouteDenialReason, inheritedRouteOf, inject, installReasoningCollapseGuard, installRelayProbe, installSubagentModelAuthorization, isAdoptedClaudeCredential, isAdoptedCredentialExpired, isAdoptedCredential as isAdoptedGlmCodingPlanCredential, isAdoptedZcodeCredential as isAdoptedGlmZcodeCredential, isAdoptedPoolCredential, isClaudeReasoningEffort, isGlmReasoningEffort, isMinimaxCodeReasoningEffort, isRefreshTokenRejected as isMinimaxCodeRefreshTokenRejected, isThinkingDisabledEffort, credentialPath$4 as kimiCodeCredentialPath, kimiCodeModelDef, modelSettingsPath$3 as kimiCodeModelSettingsPath, kimiCodePoolPath, listModelIds as listMinimaxCodeModelIds, loadCatalog as loadClaudeCatalog, loadProviderModels as loadCommandCodeModels, loadCatalog$1 as loadGlmCodingPlanCatalog, loadProviderModels$1 as loadKimiCodeModels, loadConfigCatalog as loadWorkBuddyModels, loginAndSave, mapCodexUsage, mergeGlmCodingPlanSettings, accountFromCredentials as minimaxCodeAccountFromCredentials, accountHost as minimaxCodeAccountHost, agentBaseUrl as minimaxCodeAgentBaseUrl, authJsonPath as minimaxCodeAuthJsonPath, authStateJsonPath as minimaxCodeAuthStateJsonPath, catalogSize$1 as minimaxCodeCatalogSize, credentialIsFresh as minimaxCodeCredentialIsFresh, effortForModel as minimaxCodeEffortForModel, minimaxHomeDir as minimaxCodeHomeDir, maxMessageBodyBytes as minimaxCodeMaxMessageBodyBytes, maxOutputTokensFor$1 as minimaxCodeMaxOutputTokens, messagesUrl as minimaxCodeMessagesUrl, minimaxCodeModelDef, minimaxCodeModelIds, minimaxCodeModelName, modelRequestHeaders as minimaxCodeModelRequestHeaders, modelSettingsPath$4 as minimaxCodeModelSettingsPath, outputConfigFor as minimaxCodeOutputConfig, pluginCredentialPath as minimaxCodePluginCredentialPath, minimaxCodePoolIdentity, minimaxCodePoolPath, minimaxCodePoolStatus, quotaHostCandidates as minimaxCodeQuotaHostCandidates, quotaRequestHeaders as minimaxCodeQuotaRequestHeaders, subPathOf as minimaxCodeSubPathOf, tokenPlanRemainsUrl as minimaxCodeTokenPlanRemainsUrl, modelSettingsPath$5 as modelSettingsPath, normalizeDelegationToolNames, normalizeRegion as normalizeGlmCodingPlanRegion, normalizeInheritToolNames, normalizeRotationStrategy, parseAllowedRoutes, parseClaudeCredentialDocument, parseClaudeCredentials, parseClaudePoolData, parseUsagePayload as parseClaudeUsagePayload, parseCodexPoolData, parseCodexUsage, parseCommandCodePoolData, parseGlmCodingPlanApiKey, parseGlmCodingPlanCredentials, parseGlmCodingPlanPoolData, parseKimiCodePoolData, parseMinimaxCodeCredentials, parseMinimaxCodePoolData, parseTokenPlanQuota as parseMinimaxCodeQuota, parseAnthropicUsage as parseMinimaxCodeUsage, parseResponsesStream, parseBilling as parseWorkBuddyBilling, parseConfigModels as parseWorkBuddyConfigModels, parseCredentialFile as parseWorkBuddyCredential, policyRoutesOf, pollWebLogin as pollMinimaxCodeLogin, probeConnection as probeClaudeConnection, processMinimaxStreamLine, readChildDescriptor, readClaudeCodeCredentials, readGlmResetAt, readStepCodeCacheStats, redactToken as redactMinimaxCodeToken, refreshAntigravityToken, refreshAccessToken as refreshClaudeToken, refreshAccessToken$1 as refreshKimiCodeToken, refreshAccessToken$2 as refreshMinimaxCodeToken, refreshCredentials as refreshWorkBuddyCredentials, registerClaudePreferenceStore, registerClaudeRoutes, registerCommandCodePreferenceStore, registerCommandCodeRoutes, registerGlmCodingPlanPreferenceStore, registerGlmCodingPlanRoutes, registerKimiCodePreferenceStore, registerKimiCodeRoutes, registerMinimaxCodePreferenceStore, registerMinimaxCodeRoutes, registerStepCodePreferenceStore, registerStepCodeRoutes, registerWorkBuddyPreferenceStore, registerWorkBuddyRoutes, relayProbeEnabled, relayProbeEnvFile, relayProbeEnvValue, relayProbeLogPath, rememberStepCodeCacheUsage, requestDeviceAuthorization as requestKimiCodeDeviceAuthorization, requestDeviceAuthorization$1 as requestMinimaxCodeDeviceAuthorization, resetWebLogins as resetMinimaxCodeLogins, resolveEnabledModelIds as resolveClaudeEnabledModelIds, resolveLoginInput as resolveClaudeLoginInput, resolveClaudeModel, resolveGlmModel, resolveGuardOptions, resolveRegion as resolveKimiCodeRegion, resolveMinimaxCodeEnabledModelIds, resolveQuotaCounts as resolveMinimaxCodeQuotaCounts, resolveWorkBuddyModel, revokeToken as revokeMinimaxCodeToken, saveApiKey as saveCommandCodeApiKey, scanCredentials as scanWorkBuddyCredentials, setClaudeCliVersion, beginWebLogin$3 as startCommandCodeLogin, stepCodeCatalogSize, credentialPath$5 as stepCodeCredentialPath, stepCodeModelCatalogFrom, modelSettingsPath$6 as stepCodeModelSettingsPath, stepCodePoolIdentity, stepCodePoolPath, stepCodePoolQuota, stepCodePoolStatus, stepCodePoolStatusSlice, quotaCredentialPath as stepCodeQuotaCredentialPath, stepCodeSettingsSource, stepCodeSubPathOf, subagentModelSelectionPreference, submitLoginInput as submitClaudeLoginInput, summarizeFailureBody as summarizeMinimaxCodeFailureBody, testConnection as testMinimaxCodeConnection, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames, validateInheritToolNames, verifyCodingPlanKey as verifyGlmCodingPlanKey, violationText, modelSettingsPath$7 as workBuddyModelSettingsPath, modelsForRegion$1 as workBuddyModelsForRegion, zcodeCredentialsPath };
+export { AccountPoolCore, AccountPoolStore, AntigravityAdapter, ADOPTED_CREDENTIAL_EXPIRED_HINT as CLAUDE_ADOPTED_CREDENTIAL_EXPIRED_HINT, API_BASE as CLAUDE_API_BASE, DEFAULT_VISIBLE_MODEL_IDS as CLAUDE_DEFAULT_VISIBLE_MODELS, FALLBACK_MODELS as CLAUDE_FALLBACK_MODELS, MESSAGES_PATH as CLAUDE_MESSAGES_PATH, CLAUDE_MODELS, CLAUDE_MODEL_IDS, PROVIDER_ID as CLAUDE_PROVIDER_ID, PROVIDER_NAME as CLAUDE_PROVIDER_NAME, QUOTA_CACHE_TTL_MS as CLAUDE_QUOTA_CACHE_TTL_MS, CLAUDE_REASONING_EFFORTS, ROUTE_PREFIX as CLAUDE_ROUTE_PREFIX, ClaudeAccountPool, ClaudeAdapter, FileCredentialStore as ClaudeCredentialStore, FileModelSettingsStore as ClaudeModelSettingsStore, CodexAccountPool, CodexChatGptAdapter, CommandCodeAccountPool, CommandCodeAdapter, FileCredentialStore$1 as CommandCodeCredentialStore, FileModelSettingsStore$1 as CommandCodeModelSettingsStore, Config, DEFAULT_GUARD_OPTIONS, DEFAULT_SUBAGENT_INHERIT_TOOLS, FileCredentialStore$2 as FileCredentialStore, FileModelSettingsStore$2 as FileModelSettingsStore, GLM_CODING_PLAN_PREFERENCES_NAMESPACE, QUOTA_WINDOW_MINUTES as GLM_CODING_PLAN_QUOTA_WINDOW_MINUTES, GLM_CODING_PLAN_RETRY_POLICY_CONFIG, PROVIDER_ID$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_ID, PROVIDER_NAME$1 as GLM_CODING_PLAN_ROUTE_PROVIDER_NAME, GLM_MODEL_CATALOG, GLM_MODEL_IDS, GLM_POOL_COOLDOWN_MS, GlmAdoptedCredentialRefreshError, GlmCodingPlanAccountPool, GlmCodingPlanAdapter, GlmCodingPlanCredentialStore, GlmCodingPlanModelSettingsStore, KIMI_CODE_MODELS, KIMI_CODE_RETRY_POLICY_CONFIG, KimiCodeAccountPool, KimiCodeAdapter, FileCredentialStore$3 as KimiCodeCredentialStore, FileModelSettingsStore$3 as KimiCodeModelSettingsStore, LinuxFileTokenStore, AGENT_LLM_PREFIX as MINIMAX_CODE_AGENT_LLM_PREFIX, DEFAULT_MAX_MESSAGE_BODY_BYTES as MINIMAX_CODE_MAX_MESSAGE_BODY_BYTES, MESSAGES_PATH$1 as MINIMAX_CODE_MESSAGES_PATH, MINIMAX_CODE_MODELS, PROBE_MODEL as MINIMAX_CODE_PROBE_MODEL, MINIMAX_CODE_PROVIDER_ID, MINIMAX_CODE_PROVIDER_NAME, MINIMAX_CODE_REASONING_EFFORTS, REGION_HOSTS as MINIMAX_CODE_REGION_HOSTS, MINIMAX_CODE_RETRY_POLICY_CONFIG, MINIMAX_CODE_ROUTE_PREFIX, MacKeychainTokenStore, MinimaxCodeAccountPool, MinimaxCodeAdapter, MinimaxCodeCheckinService, MinimaxCodeCredentialStore, MinimaxCodeModelSettingsStore, OAuthService, ProxyManager, RELAY_PROBE_ENV, RELAY_PROBE_FILE_ENV, RELAY_PROBE_FILE_NAME, RELAY_PROBE_MAX_BYTES, RELAY_SOURCE_KINDS, RESUME_HINT, RESUME_HINT_STRICT, RelayProbe, ResponsesClient, STEP_CODE_POOL_COOLDOWN_MS, STEP_CODE_PROFILES, STEP_CODE_PROVIDER_ID, STEP_CODE_PROVIDER_NAME, STEP_CODE_RETRY_POLICY_CONFIG, STEP_CODE_ROUTE_PREFIX, SUBAGENT_MODEL_SELECTION_NAMESPACE, SUBAGENT_POLICY_EVENT, SearchProviderSwitcher, StepCodeAccountPool, StepCodeAdapter, StepCodeCredentialRefreshError, StepCodeCredentialStore, StepCodeModelSettingsStore, StepCodeQuotaCredentialStore, UsageService, FALLBACK_MODELS$1 as WORKBUDDY_MODELS, WORKBUDDY_MODEL_IDS, WindowsDpapiTokenStore, WorkBuddyAdapter, WorkBuddyCheckinService, FileCredentialStore$4 as WorkBuddyCredentialStore, FileModelSettingsStore$4 as WorkBuddyModelSettingsStore, adoptZcodeSignIn as adoptGlmZcodeSignIn, adoptedPoolAccountKey, apply, assertRequestBodyFits as assertMinimaxCodeBodyFits, assertStreamComplete as assertMinimaxCodeStreamComplete, auditChildRoutes, auditedRoutesOf, authorizedRoutesFor, beginLogin as beginClaudeLogin, beginWebLogin as beginKimiCodeLogin, beginWebLogin$1 as beginMinimaxCodeLogin, beginWebLogin$2 as beginWebLogin, buildClaudeModelOptions, buildGlmRequestPlan, buildMinimaxCodeModelOptions, buildMinimaxRequest, cachedStepCodeModelCatalog, cancelLogin as cancelClaudeLogin, cancelWebLogin as cancelMinimaxCodeLogin, catalogModelOptions, childRoutesOf, clampOutputToContext as clampMinimaxCodeOutputToContext, classifyFailure as classifyClaudeFailure, classifyKimiFailure, classifyMinimaxFailure, classifyFailure$1 as classifyWorkBuddyFailure, claudeCliVersion, claudeCodeCredentialPaths, claudeCodeCredentialPresence, codeForFailure as claudeCodeForFailure, credentialPath as claudeCredentialPath, defaultContextWindowFor as claudeDefaultContextWindow, maxOutputTokensFor as claudeMaxOutputTokens, claudeModelCanDisableThinking, modelSettingsPath as claudeModelSettingsPath, claudeModelSupportsImage, claudeModelSupportsTemperature, claudePoolPath, claudeReasoningEfforts, claudeThinkingMode, toLlmError as claudeToLlmError, clearCachedQuota, clearCachedCatalog as clearClaudeCatalog, clearCachedQuota$1 as clearClaudeQuota, clearCachedQuota$2 as clearCommandCodeQuota, clearCachedQuota$3 as clearKimiCodeQuota, clearCachedQuota$4 as clearMinimaxCodeQuota, clearCachedCatalog$1 as clearWorkBuddyCatalog, clearCachedQuota$5 as clearWorkBuddyQuota, closeMinimaxStream, codeBuddyAuthDir, codexPoolPath, collapseScore, commandCodeAccountKey, credentialPath$1 as commandCodeCredentialPath, modelSettingsPath$1 as commandCodeModelSettingsPath, commandCodePoolPath, contextWindowForModel, convergeGlmEffort, createCodexFetchProvider, createCodexImageTool, createCodexSearchProvider, createFileRelayProbeSink, createMinimaxCodeAccountsHandler, createMessage as createMinimaxCodeMessage, createPkcePair as createMinimaxCodePkcePair, createStreamState as createMinimaxCodeStreamState, createPlatformTokenStore, createSubagentAuthorization, credentialPath$2 as credentialPath, credentialsFromAdopt, credentialsFromCliLogin, delegationDenialReason, delegationModeOf, describeCredentials as describeMinimaxCodeCredentials, detectSystemProxy, dshHomeDir, effectiveRouteOf, ensureAccessToken as ensureClaudeAccessToken, ensureAccessToken$1 as ensureKimiCodeAccessToken, ensureAccessToken$2 as ensureMinimaxCodeAccessToken, fetchAccountQuota, fetchAccountQuota$1 as fetchClaudeQuota, fetchAccountQuota$2 as fetchCommandCodeQuota, fetchGlmQuota, fetchAccountQuota$3 as fetchKimiCodeQuota, fetchUserInfo as fetchKimiCodeUserInfo, fetchTokenPlanQuota as fetchMinimaxCodeQuota, fetchAccountQuota$4 as fetchWorkBuddyQuota, getCachedQuota as getCachedGlmCodingPlanQuota, getCachedQuota$1 as getCachedQuota, getLoginStatus as getClaudeLoginStatus, getCachedQuota$2 as getClaudeQuota, getClaudeWebStatus, getWebLoginStatus as getCommandCodeLoginStatus, getCachedQuota$3 as getCommandCodeQuota, getCommandCodeWebStatus, getGlmCodingPlanStatus, getWebLoginStatus$1 as getKimiCodeLoginStatus, getCachedQuota$4 as getKimiCodeQuota, getKimiCodeWebStatus, getWebLogin as getMinimaxCodeLogin, getCachedQuota$5 as getMinimaxCodeQuota, getMinimaxCodeWebStatus, getStepCodeStatus, getCachedQuota$6 as getWorkBuddyQuota, getWorkBuddyWebStatus, glmCatalogSize, authorizeUrl as glmCodingPlanAuthorizeUrl, catalogSize as glmCodingPlanCatalogCount, credentialPath$3 as glmCodingPlanCredentialPath, modelSettingsPath$2 as glmCodingPlanModelSettingsPath, modelsForRegion as glmCodingPlanModelsForRegion, glmCodingPlanPoolIdentity, glmCodingPlanPoolPath, glmCodingPlanPoolQuota, glmCodingPlanPoolStatus, glmCodingPlanSettingsSource, glmCooldownDecision, glmSubPathOf, inheritOverrideReason, inheritRouteDenialReason, inheritedRouteOf, inject, installReasoningCollapseGuard, installRelayProbe, installSubagentModelAuthorization, isAdoptedClaudeCredential, isAdoptedCredentialExpired, isAdoptedCredential as isAdoptedGlmCodingPlanCredential, isAdoptedZcodeCredential as isAdoptedGlmZcodeCredential, isAdoptedPoolCredential, isClaudeReasoningEffort, isGlmReasoningEffort, isMinimaxCodeReasoningEffort, isRefreshTokenRejected as isMinimaxCodeRefreshTokenRejected, isThinkingDisabledEffort, credentialPath$4 as kimiCodeCredentialPath, kimiCodeModelDef, modelSettingsPath$3 as kimiCodeModelSettingsPath, kimiCodePoolPath, listModelIds as listMinimaxCodeModelIds, loadCatalog as loadClaudeCatalog, loadProviderModels as loadCommandCodeModels, loadCatalog$1 as loadGlmCodingPlanCatalog, loadProviderModels$1 as loadKimiCodeModels, loadConfigCatalog as loadWorkBuddyModels, loginAndSave, mapCodexUsage, mergeGlmCodingPlanSettings, accountFromCredentials as minimaxCodeAccountFromCredentials, accountHost as minimaxCodeAccountHost, agentBaseUrl as minimaxCodeAgentBaseUrl, authJsonPath as minimaxCodeAuthJsonPath, authStateJsonPath as minimaxCodeAuthStateJsonPath, catalogSize$1 as minimaxCodeCatalogSize, credentialIsFresh as minimaxCodeCredentialIsFresh, effortForModel as minimaxCodeEffortForModel, minimaxHomeDir as minimaxCodeHomeDir, maxMessageBodyBytes as minimaxCodeMaxMessageBodyBytes, maxOutputTokensFor$1 as minimaxCodeMaxOutputTokens, messagesUrl as minimaxCodeMessagesUrl, minimaxCodeModelDef, minimaxCodeModelIds, minimaxCodeModelName, modelRequestHeaders as minimaxCodeModelRequestHeaders, modelSettingsPath$4 as minimaxCodeModelSettingsPath, outputConfigFor as minimaxCodeOutputConfig, pluginCredentialPath as minimaxCodePluginCredentialPath, minimaxCodePoolIdentity, minimaxCodePoolPath, minimaxCodePoolStatus, quotaHostCandidates as minimaxCodeQuotaHostCandidates, quotaRequestHeaders as minimaxCodeQuotaRequestHeaders, subPathOf as minimaxCodeSubPathOf, tokenPlanRemainsUrl as minimaxCodeTokenPlanRemainsUrl, modelSettingsPath$5 as modelSettingsPath, normalizeDelegationToolNames, normalizeRegion as normalizeGlmCodingPlanRegion, normalizeInheritToolNames, normalizeRotationStrategy, parseAllowedRoutes, parseClaudeCredentialDocument, parseClaudeCredentials, parseClaudePoolData, parseUsagePayload as parseClaudeUsagePayload, parseCodexPoolData, parseCodexUsage, parseCommandCodePoolData, parseGlmCodingPlanCredentials, parseGlmCodingPlanPoolData, parseKimiCodePoolData, parseMinimaxCodeCredentials, parseMinimaxCodePoolData, parseTokenPlanQuota as parseMinimaxCodeQuota, parseAnthropicUsage as parseMinimaxCodeUsage, parseResponsesStream, parseBilling as parseWorkBuddyBilling, parseConfigModels as parseWorkBuddyConfigModels, parseCredentialFile as parseWorkBuddyCredential, policyRoutesOf, pollWebLogin as pollMinimaxCodeLogin, probeConnection as probeClaudeConnection, processMinimaxStreamLine, readChildDescriptor, readClaudeCodeCredentials, readGlmResetAt, readStepCodeCacheStats, redactToken as redactMinimaxCodeToken, refreshAntigravityToken, refreshAccessToken as refreshClaudeToken, refreshAccessToken$1 as refreshKimiCodeToken, refreshAccessToken$2 as refreshMinimaxCodeToken, refreshCredentials as refreshWorkBuddyCredentials, registerClaudePreferenceStore, registerClaudeRoutes, registerCommandCodePreferenceStore, registerCommandCodeRoutes, registerGlmCodingPlanPreferenceStore, registerGlmCodingPlanRoutes, registerKimiCodePreferenceStore, registerKimiCodeRoutes, registerMinimaxCodePreferenceStore, registerMinimaxCodeRoutes, registerStepCodePreferenceStore, registerStepCodeRoutes, registerWorkBuddyPreferenceStore, registerWorkBuddyRoutes, relayProbeEnabled, relayProbeEnvFile, relayProbeEnvValue, relayProbeLogPath, rememberStepCodeCacheUsage, requestDeviceAuthorization as requestKimiCodeDeviceAuthorization, requestDeviceAuthorization$1 as requestMinimaxCodeDeviceAuthorization, resetWebLogins as resetMinimaxCodeLogins, resolveEnabledModelIds as resolveClaudeEnabledModelIds, resolveLoginInput as resolveClaudeLoginInput, resolveClaudeModel, resolveGlmModel, resolveGuardOptions, resolveRegion as resolveKimiCodeRegion, resolveMinimaxCodeEnabledModelIds, resolveQuotaCounts as resolveMinimaxCodeQuotaCounts, resolveWorkBuddyModel, revokeToken as revokeMinimaxCodeToken, saveApiKey as saveCommandCodeApiKey, scanCredentials as scanWorkBuddyCredentials, setClaudeCliVersion, beginWebLogin$3 as startCommandCodeLogin, stepCodeCatalogSize, credentialPath$5 as stepCodeCredentialPath, stepCodeModelCatalogFrom, modelSettingsPath$6 as stepCodeModelSettingsPath, stepCodePoolIdentity, stepCodePoolPath, stepCodePoolQuota, stepCodePoolStatus, stepCodePoolStatusSlice, quotaCredentialPath as stepCodeQuotaCredentialPath, stepCodeSettingsSource, stepCodeSubPathOf, subagentModelSelectionPreference, submitLoginInput as submitClaudeLoginInput, summarizeFailureBody as summarizeMinimaxCodeFailureBody, testConnection as testMinimaxCodeConnection, unauthorizedRouteReason, validateAuthorizationScope, validateDelegationToolNames, validateInheritToolNames, verifyCodingPlanKey as verifyGlmCodingPlanKey, violationText, modelSettingsPath$7 as workBuddyModelSettingsPath, modelsForRegion$1 as workBuddyModelsForRegion, zcodeCredentialsPath };