@eddyskywalker/dsh-chatgpt-subscription 0.56.0 → 0.58.0

package/lib/index.js

@@ -807,7 +807,7 @@ const ROUTE_PREFIX$5 = "/api/dsh-chatgpt-subscription";
 * `test/responses-client.test.ts` asserts the two agree, so a release that
 * forgets this constant fails the suite instead of shipping quietly.
 */
-const PLUGIN_VERSION = "0.56.0";
+const PLUGIN_VERSION = "0.58.0";
 const CODEX_CHATGPT_PROVIDER_ID = "codex-chatgpt";
 const CODEX_API_BASE = "https://chatgpt.com/backend-api/codex";
 const CODEX_RESPONSES_URL = `${CODEX_API_BASE}/responses`;
@@ -1345,6 +1345,144 @@ async function rehydrateCatalogCache(name, parseModels, accept, currentFetchedAt
 	return snapshot.fetchedAt;
 }
 //#endregion
+//#region src/host/codex-identity.ts
+/**
+* Who one ChatGPT credential belongs to, and what makes two sign-ins the same
+* account.
+*
+* TWO IDENTITIES, AND THEY ARE NOT THE SAME THING.
+*
+* - The WORKSPACE identity is `chatgpt_account_id`, carried as
+*   `credentials.accountId` and sent upstream as `chatgpt-account-id`. It
+*   decides which workspace a request is billed to and what its listing serves,
+*   and every member of that workspace shares it.
+* - The LOCAL LOGIN identity is (workspace, user): that same workspace id plus a
+*   stable id for the person who signed in. Two members of one workspace are two
+*   accounts here — separate tokens, separate rows, separately selectable — and
+*   re-authorizing the same person updates the row that person already owns.
+*
+* Keying the account pool on the workspace alone is the bug this module exists to
+* prevent. Adding a second member of a workspace replaced the first: the card read
+* "1 account signed in", the earlier sign-in was gone from the list, and nothing in
+* the credential was wrong — the pool simply believed both sign-ins were one
+* account, because that is what the key said.
+*
+* The user id is read from the tokens themselves, most explicit claim first:
+* `chatgpt_user_id` (the field upstream states for exactly this purpose), then
+* the OIDC `sub` that an id token always carries, then the address. Only when none
+* of the three is present does the workspace stand in on its own, because nothing
+* better exists then and merging is what every row written before this module
+* already did. The workspace id alone is NEVER treated as a user identity while
+* some user claim is available.
+*/
+/** Namespace of the ChatGPT auth claims inside an id or access token. */
+const CODEX_AUTH_CLAIMS_KEY = "https://api.openai.com/auth";
+/**
+* The claims of a JWT, decoded in process, or nothing.
+*
+* The payload is the second base64url segment; the signature is never touched and
+* the result is used only for the non-secret facts above. Never sent anywhere: a
+* token handed to a decoder service is a token handed away.
+*
+* No verification is claimed and none is possible here. What this does instead is
+* refuse to invent: a token that does not decode is treated as stating nothing,
+* which leaves the caller on its own fallback rather than on a guessed identity.
+*/
+function parseJwtClaims(token) {
+	if (token === void 0) return void 0;
+	const parts = token.split(".");
+	if (parts.length !== 3) return void 0;
+	try {
+		const value = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
+		return typeof value === "object" && value !== null ? value : void 0;
+	} catch {
+		return;
+	}
+}
+/**
+* What the tokens state about their owner.
+*
+* The id token is read before the access token, because it is the document that
+* describes the sign-in; the access token is the fallback for credentials stored
+* without one. First statement wins, so a value the id token states is never
+* overwritten by the access token's copy of it.
+*/
+function extractIdentity(credentials) {
+	const result = {};
+	let subject;
+	for (const token of [credentials.idToken, credentials.accessToken]) {
+		const claims = parseJwtClaims(token);
+		if (claims === void 0) continue;
+		const nested = claims[CODEX_AUTH_CLAIMS_KEY];
+		result.email ??= stringClaim(claims.email);
+		result.planType ??= stringClaim(claims.chatgpt_plan_type) ?? stringClaim(nested?.chatgpt_plan_type);
+		result.userId ??= stringClaim(claims.chatgpt_user_id) ?? stringClaim(nested?.chatgpt_user_id);
+		result.accountId ??= stringClaim(claims.chatgpt_account_id) ?? stringClaim(nested?.chatgpt_account_id) ?? stringClaim(claims.organizations?.[0]?.id) ?? stringClaim(nested?.organizations?.[0]?.id);
+		subject ??= stringClaim(claims.sub);
+	}
+	result.userId ??= subject;
+	return result;
+}
+/**
+* The stable id of the human behind a credential, or nothing.
+*
+* Explicit claim first, then `sub`, and deliberately NOT the email: an address is
+* the caller's fallback (see {@link codexAccountIdentity}), while this function
+* answers the narrower question "does this credential name its user outright?".
+* A persisted `userId` wins over anything re-derived from the tokens, so an opaque
+* access token handed back by a rotation cannot make an account look like a
+* different one.
+*/
+function codexUserId(credentials) {
+	const stored = nonEmpty$3(credentials.userId);
+	if (stored !== void 0) return stored;
+	return extractIdentity(credentials).userId;
+}
+/**
+* One opaque key per local login: the pool's dedupe key, and the scope of every
+* per-account cache this line keeps.
+*
+* A digest of an EXPLICIT serialization rather than a readable join, for three
+* reasons that are really one: the string is a label, not data.
+*
+* - A separator can be forged. `workspace:user` joins two values that may
+*   themselves contain the separator, so `a` + `b:c` and `a:b` + `c` would have to
+*   be the same key. A JSON array has no such ambiguity: quotes and escapes are
+*   the boundary, and they cannot be re-cut by a value.
+* - The key becomes a FILE NAME. `catalogSnapshotName` folds everything outside
+*   `[a-z0-9]` to `_`, so a readable key would collide with its neighbours after
+*   folding *and* leave an email address on disk. Hex survives the fold unchanged.
+* - It is compared for equality only, so nothing is lost by making it opaque.
+*
+* `v1` is part of the serialized tuple, not decoration: a future change to the
+* composition has to produce different keys, and a version tag is what lets that
+* change be told apart from a corrupted row instead of silently merging two
+* accounts that the new rule would separate.
+*
+* Returns `undefined` when the credential states nothing at all about who it is.
+* The pool then mints its own `acc_<random>` and ADDS the row, which is the honest
+* answer: a credential nothing identifies cannot be recognized again, and merging
+* it with an unrelated one would be worse than a duplicate.
+*/
+function codexAccountIdentity(credentials) {
+	const workspace = nonEmpty$3(credentials.accountId);
+	const user = codexUserId(credentials) ?? nonEmpty$3(credentials.email);
+	if (workspace === void 0 && user === void 0) return void 0;
+	const serialized = JSON.stringify([
+		"v1",
+		workspace ?? "",
+		user ?? ""
+	]);
+	return "v1-" + createHash("sha256").update(serialized).digest("hex").slice(0, 32);
+}
+function stringClaim(value) {
+	return typeof value === "string" && value !== "" ? value : void 0;
+}
+function nonEmpty$3(value) {
+	const trimmed = value?.trim();
+	return trimmed === void 0 || trimmed === "" ? void 0 : trimmed;
+}
+//#endregion
 //#region src/host/wire-auth.ts
 /**
 * Turn-state header the Codex backend hands back on a responses response.
@@ -1441,18 +1579,36 @@ const CATALOG_TTL_MS = 15 * 6e4;
 * scope a rehydrated listing from one account would answer another's picker.
 */
 const SNAPSHOT_SCOPE = "chatgpt-codex";
-let catalogCache$2 = null;
+/**
+* How many accounts' listings are held at once.
+*
+* One slot was enough while a workspace id was mistaken for an account, because
+* every member of a workspace then shared one. It is not enough now: a pool
+* rotates between accounts, and a single slot would have each rotation evict the
+* other account's listing and re-fetch it, which turns the 15-minute TTL into
+* "no cache at all" for exactly the multi-account setup this line supports. The
+* bound is the pool's own order of magnitude, so a real composition always fits
+* and a pathological one only loses the coldest entry.
+*/
+const CATALOG_CACHE_ACCOUNTS = 8;
+/** Listings held per login identity; see {@link CATALOG_CACHE_ACCOUNTS}. */
+const catalogCache$2 = /* @__PURE__ */ new Map();
+/** The entry {@link getCachedCatalog} answers with: the one a load last wrote. */
+let latestKey = null;
 const catalogInFlight$6 = /* @__PURE__ */ new Map();
-let snapshotRehydrated = null;
+/** Snapshots already read back from disk, per identity. */
+const snapshotRehydrated = /* @__PURE__ */ new Map();
 /**
 * The listing currently held, or undefined before the first load.
 *
-* Callers that need a catalog with no credential read the shipped table
-* directly; returning it here under a different entry type would force every
-* one of them to convert it.
+* "Currently held" is the entry a load wrote last: a picker asks what the
+* account serving it can call, and that is the account whose listing was fetched
+* most recently. Callers that need a catalog with no credential read the shipped
+* table directly; returning it here under a different entry type would force
+* every one of them to convert it.
 */
 function getCachedCatalog$3() {
-	return catalogCache$2?.models;
+	return latestKey === null ? void 0 : catalogCache$2.get(latestKey)?.models;
 }
 /**
 * Read the models this subscription can call.
@@ -1470,8 +1626,11 @@ function getCachedCatalog$3() {
 function loadCodexCatalog(credentials, options = {}) {
 	const key = accountKeyFor$1(credentials);
 	if (options.force !== true) {
-		const cached = catalogCache$2;
-		if (cached !== null && cached.key === key && Date.now() - cached.at < CATALOG_TTL_MS) return Promise.resolve(cached.models);
+		const cached = catalogCache$2.get(key);
+		if (cached !== void 0 && Date.now() - cached.at < CATALOG_TTL_MS) {
+			latestKey = key;
+			return Promise.resolve(cached.models);
+		}
 	}
 	const pending = catalogInFlight$6.get(key);
 	if (pending !== void 0) return pending;
@@ -1488,10 +1647,17 @@ function loadCodexCatalog(credentials, options = {}) {
 async function performCatalogLoad$1(credentials, options) {
 	const key = accountKeyFor$1(credentials);
 	const fetchFn = options.fetchFn ?? fetch;
-	snapshotRehydrated ??= rehydrateSnapshot(key);
-	await snapshotRehydrated;
-	const cached = catalogCache$2;
-	if (cached !== null && cached.key === key && Date.now() - cached.at < CATALOG_TTL_MS) return cached.models;
+	let rehydrated = snapshotRehydrated.get(key);
+	if (rehydrated === void 0) {
+		rehydrated = rehydrateSnapshot(key);
+		snapshotRehydrated.set(key, rehydrated);
+	}
+	await rehydrated;
+	const cached = catalogCache$2.get(key);
+	if (cached !== void 0 && Date.now() - cached.at < CATALOG_TTL_MS) {
+		latestKey = key;
+		return cached.models;
+	}
 	let models;
 	let live = false;
 	try {
@@ -1510,18 +1676,34 @@ async function performCatalogLoad$1(credentials, options) {
 		live = true;
 		writeCatalogSnapshot(catalogSnapshotName(SNAPSHOT_SCOPE, key), [...models], Date.now());
 	} catch {
-		models = getCachedCatalog$3() ?? [];
+		models = catalogCache$2.get(key)?.models ?? [];
 		live = false;
 	}
-	catalogCache$2 = {
+	remember(key, {
 		at: Date.now(),
 		models,
 		key,
 		live
-	};
+	});
 	return models;
 }
 /**
+* File one listing under its identity, keeping the map bounded.
+*
+* Eviction is oldest-fetch-first, which is the entry a rotation is least likely to
+* ask for next; the bound exists so a composition that signs in far more accounts
+* than the pool holds cannot grow this map without end.
+*/
+function remember(key, entry) {
+	catalogCache$2.set(key, entry);
+	latestKey = key;
+	while (catalogCache$2.size > CATALOG_CACHE_ACCOUNTS) {
+		const oldest = [...catalogCache$2.entries()].filter(([candidate]) => candidate !== key).sort((left, right) => left[1].at - right[1].at)[0];
+		if (oldest === void 0) break;
+		catalogCache$2.delete(oldest[0]);
+	}
+}
+/**
 * Seed the in-memory cache from the last persisted listing.
 *
 * Best effort by construction: a missing or malformed snapshot leaves the cache
@@ -1530,13 +1712,13 @@ async function performCatalogLoad$1(credentials, options) {
 async function rehydrateSnapshot(key) {
 	const snapshot = await readCatalogSnapshot(catalogSnapshotName(SNAPSHOT_SCOPE, key), (value) => Array.isArray(value) ? value.flatMap((item) => parseListingEntry$1(item)) : void 0).catch(() => void 0);
 	if (snapshot === void 0 || snapshot.models.length === 0) return;
-	if (catalogCache$2 !== null) return;
-	catalogCache$2 = {
+	if (catalogCache$2.has(key)) return;
+	remember(key, {
 		at: snapshot.fetchedAt,
 		models: snapshot.models,
 		key,
 		live: true
-	};
+	});
 }
 /**
 * Read the listing payload.
@@ -1605,12 +1787,19 @@ function parseEfforts(value) {
 /**
 * Cache identity for one credential.
 *
-* The account id is the entitlement boundary: two accounts of the same user can
-* see different listings, and a pool rotates between them, so the key has to
-* follow the account rather than the person.
+* The listing is served per PLAN, and a plan belongs to the local login — the
+* workspace id alone is not an identity here either: two members of one workspace
+* can hold different plans, so filing both listings under the workspace would let
+* one member's picker answer with models the other member's plan does not serve.
+* The key is therefore the same composite identity the pool dedupes on, and its
+* digest form is what keeps the persisted snapshot's file name both distinct after
+* `catalogSnapshotName` folds it and free of an email address.
+*
+* `'default'` answers a credential that states nothing about itself, which is the
+* single pre-sign-in case this loader ever sees.
 */
 function accountKeyFor$1(credentials) {
-	return credentials.accountId || "default";
+	return codexAccountIdentity(credentials) ?? "default";
 }
 function asRecord$20(value) {
 	return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
@@ -1729,6 +1918,7 @@ function parseStoredCredentials(value) {
 		expiresAt: record.expiresAt,
 		idToken: optional("idToken"),
 		accountId: optional("accountId"),
+		userId: optional("userId"),
 		email: optional("email"),
 		planType: optional("planType")
 	};
@@ -4498,17 +4688,6 @@ function buildAuthorizationUrl(verifier, state) {
 		originator: OAUTH_ORIGINATOR
 	}).toString()}`;
 }
-function parseJwtClaims(token) {
-	if (token === void 0) return void 0;
-	const parts = token.split(".");
-	if (parts.length !== 3) return void 0;
-	try {
-		const value = JSON.parse(Buffer.from(parts[1], "base64url").toString("utf8"));
-		return typeof value === "object" && value !== null ? value : void 0;
-	} catch {
-		return;
-	}
-}
 function publicError(error, fallback = "internal") {
 	if (error instanceof OAuthServiceError) return {
 		code: error.code,
@@ -4535,28 +4714,25 @@ function credentialsFromTokenResponse(response, now, previous) {
 	return {
 		...base,
 		accountId: identity.accountId ?? previous?.accountId,
+		userId: identity.userId ?? previous?.userId,
 		email: identity.email ?? previous?.email,
 		planType: identity.planType ?? previous?.planType
 	};
 }
-function extractIdentity(credentials) {
-	const result = {};
-	for (const token of [credentials.idToken, credentials.accessToken]) {
-		const claims = parseJwtClaims(token);
-		if (claims === void 0) continue;
-		const nested = claims["https://api.openai.com/auth"];
-		result.email ??= stringClaim(claims.email);
-		result.planType ??= stringClaim(claims.chatgpt_plan_type) ?? stringClaim(nested?.chatgpt_plan_type);
-		result.accountId ??= stringClaim(claims.chatgpt_account_id) ?? stringClaim(nested?.chatgpt_account_id) ?? stringClaim(claims.organizations?.[0]?.id) ?? stringClaim(nested?.organizations?.[0]?.id);
-	}
-	return result;
-}
-/** Identity one refresh is keyed by, so a rotation is never redeemed twice. */
+/**
+* Identity one refresh is keyed by, so a rotation is never redeemed twice.
+*
+* The SAME key the pool dedupes on, and deliberately so: it has to separate two
+* members of one workspace, because their grants are unrelated and sharing one
+* in-flight refresh between them would hand one account's rotated token to the
+* other. A workspace id alone cannot do that — it is what both members have in
+* common — so this is the composite local login identity, with the rotating
+* refresh token as the fallback for a credential that states nothing else. That
+* fallback is the conservative direction: a token that differs always gets its
+* own flight, and a flight nobody joined simply runs by itself.
+*/
 function refreshKey(credentials) {
-	return credentials.accountId ?? credentials.email ?? credentials.refreshToken;
-}
-function stringClaim(value) {
-	return typeof value === "string" && value !== "" ? value : void 0;
+	return codexAccountIdentity(credentials) ?? credentials.refreshToken;
 }
 function maskEmail(email) {
 	if (email === void 0) return null;
@@ -4851,8 +5027,6 @@ const CODEX_CLI_CREDENTIAL_FILE = "auth.json";
 const CODEX_CLI_TOKENS_KEY = "tokens";
 /** Where an adopted snapshot came from, for the card and for the pool record. */
 const CODEX_CLI_CREDENTIAL_SOURCE = "codex";
-/** Namespace the id token carries the ChatGPT account claims under. */
-const CODEX_AUTH_CLAIMS_KEY = "https://api.openai.com/auth";
 /**
 * What the user is told when an adopted credential has aged out.
 *
@@ -5256,7 +5430,7 @@ var CodexAccountPool = class extends AccountPoolCore {
 			poolFile: codexPoolPath(),
 			keychainService: "dsh-chatgpt-subscription-pool",
 			parsePoolData: parseCodexPoolData,
-			dedupeKey: (credentials) => credentials.accountId ?? credentials.email,
+			dedupeKey: (credentials) => codexAccountIdentity(credentials),
 			defaultAlias: (credentials, position) => credentials.email ?? `账号 ${position}`,
 			createAccount: ({ id, alias, credentials, addedAt, isPrimary }) => {
 				const adopted = isAdoptedCodexPoolCredential(credentials);
@@ -15123,8 +15297,17 @@ function readableLimitName(value) {
 function isWindow(value) {
 	return value !== null;
 }
+/**
+* The identity a reading is filed under when no pool row names one.
+*
+* The composite local login identity, for the same reason the pool dedupes on it:
+* with several accounts in one composition, a workspace id alone would make two
+* members of that workspace share a slot — each showing the other's numbers. The
+* trailing fallbacks are for a credential that states nothing about itself, which
+* is the single-account case, where there is nobody to mix up.
+*/
 function identityKey(credentials) {
-	return credentials.accountId ?? credentials.email ?? credentials.planType ?? "signed-in";
+	return codexAccountIdentity(credentials) ?? credentials.planType ?? "signed-in";
 }
 //#endregion
 //#region src/host/routes.ts
@@ -86900,7 +87083,7 @@ function installToolResultPrunerGuard(ctx, options = {}) {
 		return next === void 0 ? void 0 : next();
 	};
 	for (const event of GUARDED_EVENTS$1) {
-		const disposer = subscribe$3(host, event, handleAgentEvent);
+		const disposer = subscribe$4(host, event, handleAgentEvent);
 		if (disposer !== void 0) disposers.push(disposer);
 	}
 	scanAndWrap();
@@ -86930,7 +87113,7 @@ function installToolResultPrunerGuard(ctx, options = {}) {
 * @param listener - 回调。
 * @returns 移除监听器的 disposer；宿主不支持事件时为 `undefined`。
 */
-function subscribe$3(host, event, listener) {
+function subscribe$4(host, event, listener) {
 	const on = host?.on;
 	if (typeof on !== "function") return void 0;
 	for (const options of [
@@ -87107,7 +87290,7 @@ function markPatched$3(patched, holder, name) {
 //#endregion
 //#region src/host/plan-mode-cache-guard.ts
 /** 没有 scope 的装配（会话标题之类）用的桶键。 */
-const GLOBAL_KEY$1 = Object.freeze({});
+const GLOBAL_KEY$2 = Object.freeze({});
 /**
 * 读一个可选服务。
 * @param ctx - 宿主上下文。
@@ -87128,8 +87311,8 @@ function serviceOf$1(ctx, service) {
 * @param value - scope / agent。
 * @returns WeakMap 键。
 */
-function bucketOf(value) {
-	return typeof value === "object" && value !== null ? value : GLOBAL_KEY$1;
+function bucketOf$1(value) {
+	return typeof value === "object" && value !== null ? value : GLOBAL_KEY$2;
 }
 /**
 * 订阅一个事件。
@@ -87138,7 +87321,7 @@ function bucketOf(value) {
 * @param listener - 监听器。
 * @returns 解绑函数或 undefined。
 */
-function subscribe$2(ctx, event, listener) {
+function subscribe$3(ctx, event, listener) {
 	const on = ctx?.on;
 	if (typeof on !== "function") return void 0;
 	try {
@@ -87191,7 +87374,7 @@ function installPlanModeCacheGuard(ctx) {
 			}
 			kept.push(section);
 		}
-		const state = stateOf(bucketOf(context?.scope ?? context?.agent));
+		const state = stateOf(bucketOf$1(context?.scope ?? context?.agent));
 		if (policy !== void 0) if (policy.trim() === "") {
 			state.pending = void 0;
 			state.delivered = false;
@@ -87210,7 +87393,7 @@ function installPlanModeCacheGuard(ctx) {
 		if (decision === void 0 || decision.kind === "reject") return decision;
 		if (payload?.signal?.aborted === true) return decision;
 		const agent = payload?.agent;
-		const key = bucketOf(agent ?? void 0);
+		const key = bucketOf$1(agent ?? void 0);
 		const state = states.get(key);
 		if (state === void 0) return decision;
 		if (state.delivered) if (planActiveOf(ctx, agent?.session) === false) state.delivered = false;
@@ -87225,8 +87408,8 @@ function installPlanModeCacheGuard(ctx) {
 			messages: [...messages, createPlanNotice(text, void 0, "Plan mode guidance")]
 		};
 	};
-	const offAssemble = subscribe$2(ctx, "system-prompt/assemble", onAssemble);
-	const offPreStep = subscribe$2(ctx, "agent/pre-step", onPreStep);
+	const offAssemble = subscribe$3(ctx, "system-prompt/assemble", onAssemble);
+	const offPreStep = subscribe$3(ctx, "agent/pre-step", onPreStep);
 	if (offAssemble !== void 0) restores.push(() => {
 		offAssemble();
 	});
@@ -87255,7 +87438,7 @@ function installPlanModeCacheGuard(ctx) {
 			restoreMethod$2(target);
 		});
 		if (typeof tools.get === "function") try {
-			if (tools.get("exit_plan_mode") !== void 0) logWarn(ctx, "[dsh-chatgpt-subscription] plan-mode cache guard was installed after exit_plan_mode was already registered; this session keeps the conditional admission");
+			if (tools.get("exit_plan_mode") !== void 0) logWarn$1(ctx, "[dsh-chatgpt-subscription] plan-mode cache guard was installed after exit_plan_mode was already registered; this session keeps the conditional admission");
 		} catch {}
 	};
 	const tools = serviceOf$1(ctx, "tools");
@@ -87302,7 +87485,7 @@ function planActiveOf(ctx, session) {
 * @param ctx - 宿主上下文。
 * @param message - 正文。
 */
-function logWarn(ctx, message) {
+function logWarn$1(ctx, message) {
 	const logger = ctx?.logger;
 	try {
 		logger?.warn(message);
@@ -87415,7 +87598,7 @@ const DEFAULT_PTC_SDK_CACHE_PROVIDERS = Object.freeze(["kimi-code", "minimax-cod
 /** PTC 生成的 SDK 段名。 */
 const PTC_SDK_SECTION_NAME = "tools:sdk";
 /** 没有 scope 的装配（会话标题之类）用的桶键。 */
-const GLOBAL_KEY = Object.freeze({});
+const GLOBAL_KEY$1 = Object.freeze({});
 /**
 * 读一个装配 scope 的 provider。
 *
@@ -87509,7 +87692,7 @@ function installPtcSdkCacheGuard(ctx, options = {}) {
 	* @param scope - 装配 scope。
 	* @returns WeakMap 键。
 	*/
-	const bucketOf = (scope) => typeof scope === "object" && scope !== null ? scope : GLOBAL_KEY;
+	const bucketOf = (scope) => typeof scope === "object" && scope !== null ? scope : GLOBAL_KEY$1;
 	/**
 	* 算未过滤工具集的名字指纹。
 	*
@@ -87599,7 +87782,7 @@ function installPtcSdkCacheGuard(ctx, options = {}) {
 		});
 		return result;
 	};
-	const offAssemble = subscribe$1(host, "system-prompt/assemble", onAssemble);
+	const offAssemble = subscribe$2(host, "system-prompt/assemble", onAssemble);
 	if (offAssemble !== void 0) disposers.push(offAssemble);
 	const initialTools = serviceOf(host, "tools");
 	if (initialTools !== void 0) {
@@ -87656,7 +87839,7 @@ function serviceOf(ctx, service) {
 * @param listener - 回调。
 * @returns 移除监听器的 disposer；宿主不支持事件时为 `undefined`。
 */
-function subscribe$1(host, event, listener) {
+function subscribe$2(host, event, listener) {
 	const on = host?.["on"];
 	if (typeof on !== "function") return void 0;
 	for (const options of [
@@ -87787,6 +87970,233 @@ function markPatched$1(patched, holder, name) {
 	else names.add(name);
 }
 //#endregion
+//#region src/host/team-policy-cache-guard.ts
+/**
+* 「Agent Teams 策略段前缀缓存守卫」—— 把内置 `team:policy` 段从 system 里摘掉，
+* 改为切开关时**尾部投递**一次。
+*
+* ## 为什么需要它
+*
+* 内置 `@deepseek-ai/dsh-tool-agent-team` 注册一个段 `team:policy`，正文是
+* `enabled(agent) ? TEAM_POLICY : ''`：团队开关一开，system prompt 里凭空多出整段
+* 指引，从那里起的前缀全部作废。这与计划模式当初那处重建同构，本仓库已经用
+* 「摘段 + 尾部投递」把它压平过（见 `plan-mode-cache-guard.ts`），这里复用同一套
+* 做法，只是触发器从 `enter_plan_mode` 换成客户端远程调用 `agentTeams.setEnabled`
+* ——那一步只往会话里追加 `team/mode` 事件，段正文在**装配时**才翻面，所以守卫只要
+* 盯着装配结果就够，不需要订阅任何 team 服务。
+*
+* ## 三条动作
+*
+* 1. `system-prompt/assemble` 瀑布：把 `team:policy` 段从呈现里摘掉，并记下它的
+*    正文。system 段从此在开关前后逐字节恒定。
+* 2. `agent/pre-step`：把记下的正文作为**尾部用户消息**投一次（每次激活一次）。
+*    末尾追加不改变已发前缀，指引没有丢，只是从最前面的 system 段搬到了末尾。
+* 3. 段正文回到空串 = 本次激活结束：复位投递状态，并在下一步投一条**撤销**通知，
+*    免得历史里那句「这里有一块共享任务板」在关闭后继续误导模型。
+*
+* ## 抓的是官方原文，不是抄的副本
+*
+* 投递的正文永远是装配时从官方段里捕获到的那一份，不落任何本包的副本。harness 改
+* 措辞（它已经改过三次）不会让这里过期。代价是它依赖段名 `team:policy`：启用后
+* 若从未观察到该段，守卫记一条 warn 点名，而不是安静地什么都不做。
+*
+* ## 默认开启
+*
+* 会话中途切开关才会付一次重建；开会话时就是目标状态则本来就零成本。守卫本身不
+* 增加任何工具声明面，所以默认开着没有代价，由 `teamPolicyCacheGuard` 关闭，
+* 每次装配/每步重读活引用。
+*
+* @module @eddyskywalker/dsh-chatgpt-subscription/host/team-policy-cache-guard
+*/
+/** 官方 Agent Teams 的指引段名。 */
+const TEAM_POLICY_SECTION = "team:policy";
+/** 尾部撤销通知的来源 kind（本包自有，见下方 MessageSourceMap 增补）。 */
+const TEAM_BOARD_NOTICE_SOURCE_KIND = "team-board-notice";
+/** 开关关掉时补投的那句话。 */
+const BOARD_OFF_NOTICE = "The shared team task board was turned off. Ignore earlier guidance describing an available board and coordinate through list_agents and send_message.";
+/**
+* 从插件配置里读开关。
+* @param config - 插件配置（结构化：只读一个键）。
+* @returns 是否启用本守卫；未声明时按开启处理（宿主 schema 的默认值）。
+*/
+function resolveTeamPolicyCacheGuardEnabled(config) {
+	return config?.teamPolicyCacheGuard !== false;
+}
+/** 没有 scope 的装配（会话标题之类）用的桶键。 */
+const GLOBAL_KEY = Object.freeze({});
+/**
+* 桶键：agent 对象本身，或全局桶。
+* @param value - scope / agent。
+* @returns WeakMap 键。
+*/
+function bucketOf(value) {
+	return typeof value === "object" && value !== null ? value : GLOBAL_KEY;
+}
+/**
+* 订阅一个事件。
+* @param ctx - 宿主上下文。
+* @param event - 事件名。
+* @param listener - 监听器。
+* @returns 解绑函数或 undefined。
+*/
+function subscribe$1(ctx, event, listener) {
+	const on = ctx?.on;
+	if (typeof on !== "function") return void 0;
+	try {
+		return on.call(ctx, event, listener);
+	} catch {
+		return;
+	}
+}
+/**
+* 记一条警告。
+* @param ctx - 宿主上下文。
+* @param message - 正文。
+*/
+function logWarn(ctx, message) {
+	try {
+		ctx?.logger?.warn(message);
+	} catch {}
+}
+/**
+* 造一条尾部通知消息。
+* @param text - 正文。
+* @param summary - 卡片上显示的一句摘要。
+* @returns 用户角色的通知消息。
+*/
+function createBoardNotice(text, summary) {
+	return createUserMessage({
+		content: [{
+			type: "text",
+			text
+		}],
+		source: {
+			kind: TEAM_BOARD_NOTICE_SOURCE_KIND,
+			form: "notice",
+			summary
+		}
+	});
+}
+/**
+* 装一台「Agent Teams 策略段缓存守卫」。
+*
+* 幂等性留给调用方：同一个 ctx 装两次会得到两条监听器，宿主入口应当只装一次。
+* @param ctx - 宿主上下文（结构化：老代 ctx 也认）。
+* @param options - 开关读取器。
+* @returns 句柄，dispose 摘掉全部挂载。
+*/
+function installTeamPolicyCacheGuard(ctx, options = {}) {
+	const states = /* @__PURE__ */ new WeakMap();
+	const stats = {
+		seen: false,
+		warned: false
+	};
+	const restores = [];
+	let closed = false;
+	const enabled = () => {
+		try {
+			return options.enabled?.() === true;
+		} catch {
+			return false;
+		}
+	};
+	const stateOf = (key) => {
+		let state = states.get(key);
+		if (state === void 0) {
+			state = {
+				policy: "",
+				pending: void 0,
+				delivered: false,
+				revoked: false
+			};
+			states.set(key, state);
+		}
+		return state;
+	};
+	const onAssemble = async (_assembly, context, next) => {
+		const result = await next();
+		if (closed || !enabled()) return result;
+		const sections = Array.isArray(result?.sections) ? result.sections : void 0;
+		if (sections === void 0) return result;
+		const kept = [];
+		let policy;
+		for (const section of sections) {
+			if (section?.name === "team:policy") {
+				stats.seen = true;
+				policy = typeof section.text === "string" ? section.text : "";
+				continue;
+			}
+			kept.push(section);
+		}
+		if (policy === void 0) {
+			if (!stats.seen && !stats.warned) {
+				stats.warned = true;
+				logWarn(ctx, `[dsh-chatgpt-subscription] team policy cache guard is enabled but no "${TEAM_POLICY_SECTION}" section has appeared; the guard is inert on this deployment`);
+			}
+			return result;
+		}
+		const state = stateOf(bucketOf(context?.scope ?? context?.agent));
+		if (policy.trim() === "") {
+			if (state.delivered) state.revoked = true;
+			state.delivered = false;
+			state.pending = void 0;
+		} else {
+			state.policy = policy;
+			state.revoked = false;
+			if (!state.delivered) state.pending = policy;
+		}
+		if (kept.length === sections.length) return result;
+		return {
+			...result,
+			sections: kept
+		};
+	};
+	const onPreStep = async (payload, next) => {
+		const decision = await next();
+		if (closed || decision === void 0 || decision.kind === "reject") return decision;
+		if (payload?.signal?.aborted === true) return decision;
+		if (!enabled()) return decision;
+		const state = states.get(bucketOf(payload?.agent ?? void 0));
+		if (state === void 0) return decision;
+		const messages = Array.isArray(decision.messages) ? decision.messages : [];
+		if (!state.delivered) {
+			const text = state.pending;
+			if (text !== void 0) {
+				state.pending = void 0;
+				state.delivered = true;
+				state.revoked = false;
+				return {
+					...decision,
+					messages: [...messages, createBoardNotice(text, "Team board guidance")]
+				};
+			}
+		}
+		if (state.revoked) {
+			state.revoked = false;
+			return {
+				...decision,
+				messages: [...messages, createBoardNotice(BOARD_OFF_NOTICE, "Team board off")]
+			};
+		}
+		return decision;
+	};
+	const offAssemble = subscribe$1(ctx, "system-prompt/assemble", onAssemble);
+	const offPreStep = subscribe$1(ctx, "agent/pre-step", onPreStep);
+	if (offAssemble !== void 0) restores.push(() => {
+		offAssemble();
+	});
+	if (offPreStep !== void 0) restores.push(() => {
+		offPreStep();
+	});
+	return { dispose() {
+		if (closed) return;
+		closed = true;
+		for (const restore of restores.splice(0)) try {
+			restore();
+		} catch {}
+	} };
+}
+//#endregion
 //#region src/host/compaction-policy-guard.ts
 /**
 * 「压缩策略守卫」——把 `compaction-basic` 的预算换成 Kimi Code 的口径，
@@ -92150,13 +92560,13 @@ const DISPATCH_PRESET = {
 [Execution Pipeline] R0.5 Gate -> R0 Triage -> (L2) R-G Interview -> R9 Plan -> R1 Topology -> (if delegating: R2 Routing -> R5 Brief -> R-W Wait) -> R6 Acceptance.
 
 ## R0.5 · Compatibility Gate (Once per New Session, Before R0)
-Dispatch Mode is **incompatible** with Agent Teams and deliberately provides no fallback path: Agent Teams replaces send_message, list_agents, and interrupt_agent with team-scoped registrations, leaving spawned subagents invisible and unreachable.
-Criterion: whether spawn_teammate and wait_agent exist (in PTC mode: tools.spawn_teammate / tools.wait_agent).
-- Neither exists -> Write one line "Orchestration ready: subagent" and proceed to R0.
-- Either exists -> This session is **not orchestratable**. Do these three things in order, and nothing else:
-  1. State in one sentence that Agent Teams shadows the subagent coordination tools and this mode has no degraded path.
-  2. Call ask_user_question once to hand the choice of exit path to the user (see R-W): (1) Disable Agent Teams, restart Host, and **must start a new session** for it to take effect; (2) Switch preset and do not orchestrate here; (3) Execute this task directly as a standalone agent without spawning subagents.
-  3. **Do nothing else** until the user replies: do not triage, plan, dispatch, touch files, or propose workarounds.
+A legacy Agent Teams runtime (pre-#7519) registers spawn_teammate and replaces send_message / list_agents / interrupt_agent with team-scoped variants, leaving spawned subagents unreachable. The current runtime only adds a shared task board (team_task_create and its list/get/update siblings) and reuses this mode's tools.
+Criterion: whether spawn_teammate exists (PTC: tools.spawn_teammate). Never gate on wait_agent, send_message, list_agents, or interrupt_agent: this mode mounts those itself.
+- Absent -> Write "Orchestration ready: subagent" and proceed to R0. The board tools stay visible in the PTC SDK whether or not the board is on - frozen declaration, not availability - so confirm with team_task_list before relying on it. When the board is on it is bookkeeping, not a second dispatcher: the dispatch ledger stays the dispatch authority and R5 briefs stay the task contract; publish cross-agent dependencies (blocked_by) and write scopes on one team task per brief, claimed and completed by the child that owns it; never start work because a task is ready, and never reassign a task to skip R6.
+- Present -> This session runs the legacy runtime and is **not orchestratable**. In order, and nothing else:
+  1. State in one sentence that the legacy runtime shadows the coordination tools and this mode has no degraded path.
+  2. Call ask_user_question once (see R-W) offering: disable the legacy runtime, restart Host, **start a new session**; switch preset; or execute this task directly.
+  3. **Do nothing else** until the user replies: no triage, plan, dispatch, file edits, or workarounds.
 
 ## R0 · Complexity Triage (Triage First, Then Choose the Workflow)
 Upon receiving a task, determine its tier by semantic impact and uncertainty first, write one line stating "Tier + Rationale", and run the matching workflow:
@@ -92226,7 +92636,7 @@ Fallback is a task-scoped, non-session-wide exception for delegated briefs: it c
 
 ## Anti-Patterns (Any Occurrence Is a Violation)
 1. Orchestrating or opening Plan Mode for an L0/L1 task, or before the R-G interview has converged (21. Entering Plan Mode for an L0/L1 task, or before the R-G interview has converged; 22. Using leave_plan_mode to bypass exit_plan_mode approval).
-2. Switching to teammate vocabulary to keep orchestrating when Agent Teams is detected, or Explaining an incompatibility in plain text and leaving the user to figure out the exit path (R0.5).
+2. Switching to teammate vocabulary to keep orchestrating under the legacy team runtime, or Treating the team task board as a substitute for R1 topology, R2 routing, R5 briefs, R6 acceptance, or R-W waiting (R0.5).
 3. Omitting provider/model under [State: Listed], Second-guessing list_subagent_models output by hunting through local config or source files just to check which subagent models are allowed, or Reporting a route as "authorized", or claiming per-task routing is in force, when the session recorded no allowlist (R2).
 4. Writing a task brief with a range where a cap belongs ("2–5 files", "a few attempts"), or Asking a subagent to restate its rules as a correctness check (R0, R5).
 5. Running sleep, polling loops, or placeholder long commands to wait, Proactively creating a goal at the start of a task, or Ending with a paragraph of prose to wait for user sign-off instead of calling ask_user_question (R-W).
@@ -95118,14 +95528,14 @@ const WORKBUDDY_STANDARD_EFFORTS = [
 * Snap a level onto the nearest rung a model's ladder actually exposes.
 *
 * The gateway names a default from a wider vocabulary than the ladder it
-* publishes for the same model: an effort-only entry (minimax-m3, kimi-k3,
-* `glm-5.3` in the cn region) reports `effort: 'medium'` while exposing only
-* `low`/`high`/`max`. Letting that value through is not cosmetic — a default
-* outside the ladder is discarded by the level-resolution step, the request
-* then carries no `reasoning_effort`, and the model returns an EMPTY
-* `reasoning_content` (measured on minimax-m3: 0 characters across three
-* samples, versus 282-659 with the field). Ties resolve upward, which is the
-* mapping the sibling Kimi line documents for `medium`. A ladder that names
+* publishes for the same model: an effort-only entry — the shape `kimi-k3`
+* publishes — names a single default while exposing only `low`/`high`/`max`.
+* Letting an unlisted value through is not cosmetic — a default outside the
+* ladder is discarded by the level-resolution step, the request then carries no
+* `reasoning_effort`, and the model returns an EMPTY `reasoning_content`
+* (measured on `minimax-m3` while that id was still served: 0 characters across
+* three samples, versus 282-659 with the field). Ties resolve upward, which is
+* the mapping the sibling Kimi line documents for `medium`. A ladder that names
 * no level (a text-only model) yields nothing to converge to.
 */
 function convergeWorkBuddyEffort(effort, ladder) {
@@ -95408,96 +95818,27 @@ function refreshSourceForDomain(domain) {
 /**
 * Models the gateway serves but does not publish in `/v3/config`.
 *
-* The catalog is a published list, not the served one: measured on the
-* international backend, `gpt-6-sol`, `gpt-6-luna` and `gemini-3.8-flash` all
-* answer a normal streaming completion with 200 while being absent from
+* The catalog is a published list, not the served one: measured 2026-10-09 on
+* the international backend, `gpt-6-sol`, `gpt-6-luna` and `gemini-3.8-flash`
+* all answered a normal streaming completion with 200 while being absent from
 * `/v3/config` entirely, and a reachable gateway *replaces* the shipped table
-* with that list. Without these rows the picker would simply never show them, so
-* they are declared here and merged into a live catalog too
-* ({@link withUnpublishedModels}) rather than living in the fallback alone.
-*
-* What each row records, and how it was established, differs by field:
-*
-* - **Existence, the reasoning ladder, image support** were measured against the
-*   live endpoint, not inferred from the name. A rejected level answers 400
-*   `code 11133` with `extError` `400002`; `gpt-6-sol` takes exactly the ladder
-*   `gpt-6-astra` publishes (`minimal` refused, `low`/`medium`/`high`/`xhigh`/
-*   `max` accepted) and both accept a 1x1 PNG.
-* - **Context window, output cap and `canDisableThinking` are inherited from the
-*   published sibling in the same family** — `gpt-6-astra` for `gpt-6-sol` and
-*   `gpt-6-luna`, `gemini-3.5-flash` for `gemini-3.8-flash`. They are marked
-*   here rather than measured because the gateway publishes nothing for these
-*   ids and offers no cheap way to read the real figure: it accepts a
-*   `max_tokens` larger than any published window (even for `gpt-6-astra`, whose
-*   own catalog caps at 128000), so the number is neither enforced nor
-*   discoverable from the request side.
-*
-* Every field stays overridable per model from the settings card, and an
-* inherited window errs low rather than high: over-declaring overflows the
-* gateway mid-session, while under-declaring only compresses earlier.
-*/
-const UNPUBLISHED_MODELS = [
-	{
-		id: "gpt-6-sol",
-		name: "GPT-6-Sol",
-		contextWindow: 4e5,
-		maxContextWindow: 1e6,
-		maxTokens: 128e3,
-		regions: ["intl"],
-		supportsImage: true,
-		reasoningEfforts: [
-			"low",
-			"medium",
-			"high",
-			"xhigh",
-			"max"
-		],
-		defaultReasoningEffort: "high",
-		canDisableThinking: true,
-		description: "OpenAI 旗舰模型，擅长复杂推理与长程任务"
-	},
-	{
-		id: "gpt-6-luna",
-		name: "GPT-6-Luna",
-		contextWindow: 4e5,
-		maxContextWindow: 1e6,
-		maxTokens: 128e3,
-		regions: ["intl"],
-		supportsImage: true,
-		reasoningEfforts: [
-			"low",
-			"medium",
-			"high",
-			"xhigh",
-			"max"
-		],
-		defaultReasoningEffort: "high",
-		canDisableThinking: true,
-		description: "OpenAI 轻量模型，响应快速，适合日常任务"
-	},
-	{
-		id: "gemini-3.8-flash",
-		name: "Gemini-3.8-Flash",
-		contextWindow: 1e6,
-		maxContextWindow: 1e6,
-		maxTokens: 65536,
-		regions: ["intl"],
-		supportsImage: true,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
-		],
-		defaultReasoningEffort: "medium",
-		canDisableThinking: false,
-		description: "能力均衡，适合日常使用"
-	}
-];
+* with that list — so a row living only in the fallback would drop out of the
+* picker the moment the catalog loaded.
+*
+* The list is empty as of the 2026-11-04 read: all three ids are published now,
+* with figures measured on the wire, and their rows therefore live in
+* {@link FALLBACK_MODELS} like any other. The seam stays rather than being
+* deleted because the gap it covers belongs to the gateway, not to those three
+* models: the next id it serves without listing belongs here, and
+* {@link withUnpublishedModels} is what keeps such a row offered.
+*/
+const UNPUBLISHED_MODELS = [];
 /**
 * Offline fallback catalog, transcribed from a live `/v3/config` read.
 *
-* Used when the gateway cannot be reached (first run before sign-in, or a
-* network failure); a reachable gateway always wins.
+* Last transcribed 2026-11-04 from both backends. Used when the gateway cannot
+* be reached (first run before sign-in, or a network failure); a reachable
+* gateway always wins.
 */
 const FALLBACK_MODELS$1 = [
 	{
@@ -95513,20 +95854,6 @@ const FALLBACK_MODELS$1 = [
 		canDisableThinking: false,
 		description: "优秀的编码模型，适合日常使用"
 	},
-	{
-		id: "default",
-		name: "Default",
-		contextWindow: 56e3,
-		maxContextWindow: 56e3,
-		maxTokens: 24e3,
-		regions: ["cn"],
-		credits: { cn: "2.00" },
-		supportsImage: false,
-		reasoningEfforts: [],
-		defaultReasoningEffort: null,
-		canDisableThinking: false,
-		description: ""
-	},
 	{
 		id: "fast-model",
 		name: "Fast",
@@ -95541,7 +95868,7 @@ const FALLBACK_MODELS$1 = [
 			"high",
 			"max"
 		],
-		defaultReasoningEffort: "medium",
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
 		description: "响应快，适合简单任务"
 	},
@@ -95559,7 +95886,7 @@ const FALLBACK_MODELS$1 = [
 			"high",
 			"max"
 		],
-		defaultReasoningEffort: "medium",
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
 		description: "速度与质量兼顾，日常工作首选"
 	},
@@ -95582,20 +95909,65 @@ const FALLBACK_MODELS$1 = [
 		description: "高质量输出，胜任复杂任务"
 	},
 	{
-		id: "deep-model",
-		name: "Deep",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 24e3,
+		id: "deepseek-v4.1-flash",
+		name: "Deepseek-V4.1-Flash",
+		contextWindow: 3e5,
+		maxContextWindow: 1e6,
+		maxTokens: 128e3,
+		regions: ["intl", "cn"],
+		credits: {
+			cn: "0.11",
+			intl: "0.00"
+		},
+		supportsImage: true,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: "DeepSeek 旗舰模型，支持 1M 上下文窗口，原生多模态"
+	},
+	{
+		id: "deepseek-v4.1-flash-sg",
+		name: "Deepseek-V4.1-Flash",
+		contextWindow: 3e5,
+		maxContextWindow: 1e6,
+		maxTokens: 128e3,
 		regions: ["intl"],
-		credits: { intl: "3.33" },
+		credits: { intl: "0.03" },
 		supportsImage: true,
-		reasoningEfforts: [],
-		defaultReasoningEffort: null,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "深度推理，适合深度分析与难题"
+		description: "DeepSeek 旗舰模型，支持 1M 上下文窗口，原生多模态"
+	},
+	{
+		id: "glm-5.3-flash",
+		name: "GLM-5.3-Flash",
+		contextWindow: 3e5,
+		maxContextWindow: 1e6,
+		maxTokens: 32e3,
+		regions: ["intl", "cn"],
+		credits: {
+			cn: "0.08",
+			intl: "0.08"
+		},
+		supportsImage: true,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: "原生多模态模型，擅长视觉理解与专业任务"
 	},
-	...UNPUBLISHED_MODELS.filter((model) => model.id === "gpt-6-sol" || model.id === "gpt-6-luna"),
 	{
 		id: "gpt-6-astra",
 		name: "GPT-6-Astra",
@@ -95616,6 +95988,37 @@ const FALLBACK_MODELS$1 = [
 		canDisableThinking: true,
 		description: "OpenAI 旗舰模型，擅长复杂推理与长程任务"
 	},
+	{
+		id: "hy4-preview",
+		name: "Hy4 Preview",
+		contextWindow: 2e5,
+		maxContextWindow: 1e6,
+		maxTokens: 64e3,
+		regions: ["intl"],
+		credits: { intl: "0.29" },
+		supportsImage: true,
+		reasoningEfforts: ["high"],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: "混元思考模型，具有增强的推理能力"
+	},
+	{
+		id: "hy3",
+		name: "Hy3",
+		contextWindow: 192e3,
+		maxContextWindow: 192e3,
+		maxTokens: 64e3,
+		regions: ["intl", "cn"],
+		credits: {
+			cn: "0.00",
+			intl: "0.00"
+		},
+		supportsImage: true,
+		reasoningEfforts: ["low", "high"],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: "混元思考模型，具有增强的推理能力"
+	},
 	{
 		id: "gpt-5.6-sol",
 		name: "GPT-5.6-Sol",
@@ -95722,8 +96125,8 @@ const FALLBACK_MODELS$1 = [
 		maxTokens: 48e3,
 		regions: ["intl", "cn"],
 		credits: {
-			cn: "0.79",
-			intl: "0.79"
+			cn: "0.69",
+			intl: "0.69"
 		},
 		supportsImage: true,
 		reasoningEfforts: [
@@ -95732,30 +96135,9 @@ const FALLBACK_MODELS$1 = [
 			"max"
 		],
 		defaultReasoningEffort: "high",
-		canDisableThinking: true,
+		canDisableThinking: false,
 		description: "能力均衡，适合日常使用"
 	},
-	{
-		id: "glm-5.3-flash",
-		name: "GLM-5.3-Flash",
-		contextWindow: 3e5,
-		maxContextWindow: 1e6,
-		maxTokens: 32e3,
-		regions: ["intl", "cn"],
-		credits: {
-			cn: "0.06",
-			intl: "0.06"
-		},
-		supportsImage: true,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
-		],
-		defaultReasoningEffort: "high",
-		canDisableThinking: true,
-		description: "原生多模态模型，擅长视觉理解与专业任务"
-	},
 	{
 		id: "glm-5.2",
 		name: "GLM-5.2",
@@ -95768,101 +96150,63 @@ const FALLBACK_MODELS$1 = [
 			intl: "0.79"
 		},
 		supportsImage: true,
-		reasoningEfforts: ["high", "xhigh"],
+		reasoningEfforts: ["high"],
 		defaultReasoningEffort: "high",
-		canDisableThinking: true,
+		canDisableThinking: false,
 		description: "1M 上下文，擅长长程任务"
 	},
 	{
-		id: "glm-5.1",
-		name: "GLM-5.1",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 48e3,
-		regions: ["cn"],
-		credits: { cn: "0.79" },
+		id: "minimax-m3.1-flash",
+		name: "MiniMax-M3.1-Flash",
+		contextWindow: 3e5,
+		maxContextWindow: 1e6,
+		maxTokens: 128e3,
+		regions: ["intl", "cn"],
+		credits: {
+			cn: "0.08",
+			intl: "0.08"
+		},
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
+			"medium",
 			"high",
+			"xhigh",
 			"max"
 		],
-		defaultReasoningEffort: "medium",
+		defaultReasoningEffort: "max",
 		canDisableThinking: false,
-		description: ""
+		description: "原生多模态，擅长office、agentic、编程任务，推理速度优异"
 	},
 	{
-		id: "glm-5v-turbo",
-		name: "GLM-5v-Turbo",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 64e3,
-		regions: ["cn"],
-		credits: { cn: "0.71" },
+		id: "kimi-k3.1-pro",
+		name: "Kimi-K3.1-Pro",
+		contextWindow: 3e5,
+		maxContextWindow: 1e6,
+		maxTokens: 32e3,
+		regions: ["intl", "cn"],
+		credits: {
+			cn: "0.97",
+			intl: "0.97"
+		},
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
 			"high",
 			"max"
 		],
-		defaultReasoningEffort: "medium",
-		canDisableThinking: false,
-		description: ""
-	},
-	{
-		id: "glm-5.0",
-		name: "GLM-5.0",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 48e3,
-		regions: ["cn"],
-		credits: { cn: "0.80" },
-		supportsImage: false,
-		reasoningEfforts: [],
-		defaultReasoningEffort: null,
-		canDisableThinking: false,
-		description: ""
-	},
-	{
-		id: "glm-5.0-turbo",
-		name: "GLM-5.0-Turbo",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 48e3,
-		regions: ["cn"],
-		credits: { cn: "0.95" },
-		supportsImage: false,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
-		],
-		defaultReasoningEffort: "medium",
-		canDisableThinking: false,
-		description: ""
-	},
-	{
-		id: "glm-4.7",
-		name: "GLM-4.7",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 48e3,
-		regions: ["cn"],
-		credits: { cn: "0.23" },
-		supportsImage: false,
-		reasoningEfforts: [],
-		defaultReasoningEffort: null,
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: ""
+		description: "Kimi 全新旗舰模型，3万亿级参数。办公、代码、3D 创作与长程 Agent 能力全面升级。"
 	},
 	{
-		id: "glm-4.6v",
-		name: "GLM-4.6V",
-		contextWindow: 128e3,
-		maxContextWindow: 128e3,
+		id: "kimi-k3.1-pro-highspeed",
+		name: "Kimi-K3.1-Pro-Highspeed",
+		contextWindow: 3e5,
+		maxContextWindow: 1e6,
 		maxTokens: 32e3,
-		regions: ["cn"],
-		credits: { cn: "0.11" },
+		regions: ["intl"],
+		credits: { intl: "1.56" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
@@ -95871,21 +96215,7 @@ const FALLBACK_MODELS$1 = [
 		],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: ""
-	},
-	{
-		id: "glm-4.6",
-		name: "GLM-4.6",
-		contextWindow: 168e3,
-		maxContextWindow: 168e3,
-		maxTokens: 32e3,
-		regions: ["cn"],
-		credits: { cn: "0.23" },
-		supportsImage: false,
-		reasoningEfforts: [],
-		defaultReasoningEffort: null,
-		canDisableThinking: false,
-		description: ""
+		description: "K3.1 Pro 高速版本，响应速度提升至 K3.1 Pro 的 2–3 倍，交互更流畅。"
 	},
 	{
 		id: "kimi-k3",
@@ -95901,166 +96231,121 @@ const FALLBACK_MODELS$1 = [
 			"high",
 			"max"
 		],
-		defaultReasoningEffort: "medium",
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
 		description: "擅长处理复杂的长程自主任务，前端开发能力突出，同时在知识工作与科研推理上表现出色。"
 	},
 	{
-		id: "kimi-k3-1",
-		name: "Kimi-K3",
-		contextWindow: 1e6,
-		maxContextWindow: 1e6,
-		maxTokens: 32e3,
-		regions: ["cn"],
-		credits: { cn: "1.62" },
+		id: "grok-4.7",
+		name: "Grok-4.7",
+		contextWindow: 2e5,
+		maxContextWindow: 5e5,
+		maxTokens: 128e3,
+		regions: ["intl"],
+		credits: { intl: "1.90" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
+			"medium",
 			"high",
-			"max"
+			"xhigh"
 		],
-		defaultReasoningEffort: "medium",
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "擅长处理复杂的长程自主任务，前端开发能力突出，同时在知识工作与科研推理上表现出色。"
+		description: "SpaceXAI 打造的前沿模型，专为编程、智能体任务及知识型工作而设计。"
 	},
 	{
-		id: "kimi-k2.8-preview",
-		name: "Kimi-K2.8-Preview",
+		id: "gemini-3.8-flash",
+		name: "Gemini-3.8-Flash",
 		contextWindow: 3e5,
 		maxContextWindow: 1e6,
-		maxTokens: 32e3,
-		regions: ["intl", "cn"],
-		credits: {
-			cn: "0.77",
-			intl: "0.77"
-		},
-		supportsImage: true,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
-		],
-		defaultReasoningEffort: "high",
-		canDisableThinking: true,
-		description: "擅长处理复杂的长程自主任务，前端开发能力突出，同时在知识工作与科研推理上表现出色。"
-	},
-	{
-		id: "kimi-k2.7",
-		name: "Kimi-K2.7-Code",
-		contextWindow: 256e3,
-		maxContextWindow: 256e3,
-		maxTokens: 32e3,
-		regions: ["cn"],
-		credits: { cn: "0.57" },
-		supportsImage: true,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
-		],
-		defaultReasoningEffort: "medium",
-		canDisableThinking: false,
-		description: ""
-	},
-	{
-		id: "kimi-k2.6",
-		name: "Kimi-K2.6",
-		contextWindow: 256e3,
-		maxContextWindow: 256e3,
-		maxTokens: 32e3,
-		regions: ["intl", "cn"],
-		credits: {
-			cn: "0.52",
-			intl: "0.52"
-		},
+		maxTokens: 65536,
+		regions: ["intl"],
+		credits: { intl: "0.95" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
-			"high",
-			"max"
+			"medium",
+			"high"
 		],
 		defaultReasoningEffort: "medium",
 		canDisableThinking: false,
-		description: "多模态模型，适合日常任务"
+		description: "能力均衡，适合日常使用"
 	},
 	{
-		id: "kimi-k2.5",
-		name: "Kimi-K2.5",
-		contextWindow: 164e3,
-		maxContextWindow: 164e3,
-		maxTokens: 32e3,
-		regions: ["cn"],
-		credits: { cn: "0.45" },
+		id: "gpt-6-sol",
+		name: "GPT-6-Sol",
+		contextWindow: 1e6,
+		maxContextWindow: 1e6,
+		maxTokens: 128e3,
+		regions: ["intl"],
+		credits: { intl: "1.33" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
+			"medium",
 			"high",
-			"max"
-		],
-		defaultReasoningEffort: "high",
-		canDisableThinking: false,
-		description: ""
-	},
-	{
-		id: "kimi-k2-thinking",
-		name: "Kimi-K2-Thinking",
-		contextWindow: 164e3,
-		maxContextWindow: 164e3,
-		maxTokens: 32e3,
-		regions: ["cn"],
-		credits: { cn: "0.54" },
-		supportsImage: false,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
+			"xhigh"
 		],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: ""
+		description: "专为复杂编码和智能体工作流构建的模型"
 	},
 	{
-		id: "deepseek-v4.1-flash",
-		name: "Deepseek-V4.1-Flash",
-		contextWindow: 3e5,
+		id: "gpt-6-luna",
+		name: "GPT-6-Luna",
+		contextWindow: 1e6,
 		maxContextWindow: 1e6,
 		maxTokens: 128e3,
-		regions: ["intl", "cn"],
-		credits: {
-			cn: "0.11",
-			intl: "0.00"
-		},
+		regions: ["intl"],
+		credits: { intl: "0.07" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
+			"medium",
 			"high",
-			"max"
+			"xhigh"
 		],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "DeepSeek 旗舰模型，支持 1M 上下文窗口，原生多模态"
+		description: "专为单一聚焦、高吞吐量任务打造的高效模型"
 	},
 	{
-		id: "deepseek-v4.1-flash-sg",
-		name: "Deepseek-V4.1-Flash",
-		contextWindow: 3e5,
+		id: "gpt-6.1-sol",
+		name: "GPT-6.1-Sol",
+		contextWindow: 272e3,
 		maxContextWindow: 1e6,
 		maxTokens: 128e3,
 		regions: ["intl"],
-		credits: { intl: "0.03" },
+		credits: { intl: "1.33" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
+			"medium",
 			"high",
-			"max"
+			"xhigh"
 		],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "DeepSeek 旗舰模型，支持 1M 上下文窗口，原生多模态"
+		description: "专为复杂编码和智能体工作流构建的模型"
+	},
+	{
+		id: "default",
+		name: "Default",
+		contextWindow: 56e3,
+		maxContextWindow: 56e3,
+		maxTokens: 24e3,
+		regions: ["cn"],
+		credits: { cn: "2.00" },
+		supportsImage: false,
+		reasoningEfforts: [],
+		defaultReasoningEffort: null,
+		canDisableThinking: false,
+		description: ""
 	},
 	{
 		id: "deepseek-v4-pro",
-		name: "Deepseek-V4-Pro",
+		name: "DeepSeek-V4-Pro",
 		contextWindow: 1e6,
 		maxContextWindow: 1e6,
 		maxTokens: 128e3,
@@ -96113,52 +96398,190 @@ const FALLBACK_MODELS$1 = [
 		description: ""
 	},
 	{
-		id: "hy4-preview",
-		name: "Hy4 preview",
+		id: "minimax-m2.5",
+		name: "MiniMax-M2.5",
 		contextWindow: 2e5,
-		maxContextWindow: 1e6,
-		maxTokens: 64e3,
-		regions: ["intl", "cn"],
-		credits: {
-			cn: "0.29",
-			intl: "0.29"
-		},
+		maxContextWindow: 2e5,
+		maxTokens: 48e3,
+		regions: ["cn"],
+		credits: { cn: "0.18" },
+		supportsImage: false,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: ""
+	},
+	{
+		id: "minimax-m2.7",
+		name: "MiniMax-M2.7",
+		contextWindow: 2e5,
+		maxContextWindow: 2e5,
+		maxTokens: 48e3,
+		regions: ["cn"],
+		credits: { cn: "0.19" },
 		supportsImage: true,
-		reasoningEfforts: ["high"],
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "混元思考模型，具有增强的推理能力"
+		description: ""
 	},
 	{
-		id: "hy4-preview-f",
-		name: "Hy4 preview",
+		id: "glm-5.0",
+		name: "GLM-5.0",
+		contextWindow: 2e5,
+		maxContextWindow: 2e5,
+		maxTokens: 48e3,
+		regions: ["cn"],
+		credits: { cn: "0.80" },
+		supportsImage: false,
+		reasoningEfforts: [],
+		defaultReasoningEffort: null,
+		canDisableThinking: false,
+		description: ""
+	},
+	{
+		id: "glm-5.0-turbo",
+		name: "GLM-5.0-Turbo",
+		contextWindow: 2e5,
+		maxContextWindow: 2e5,
+		maxTokens: 48e3,
+		regions: ["cn"],
+		credits: { cn: "0.95" },
+		supportsImage: false,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: ""
+	},
+	{
+		id: "glm-4.7",
+		name: "GLM-4.7",
+		contextWindow: 2e5,
+		maxContextWindow: 2e5,
+		maxTokens: 48e3,
+		regions: ["cn"],
+		credits: { cn: "0.23" },
+		supportsImage: false,
+		reasoningEfforts: [],
+		defaultReasoningEffort: null,
+		canDisableThinking: false,
+		description: ""
+	},
+	{
+		id: "glm-4.6",
+		name: "GLM-4.6",
+		contextWindow: 168e3,
+		maxContextWindow: 168e3,
+		maxTokens: 32e3,
+		regions: ["cn"],
+		credits: { cn: "0.23" },
+		supportsImage: false,
+		reasoningEfforts: [],
+		defaultReasoningEffort: null,
+		canDisableThinking: false,
+		description: ""
+	},
+	{
+		id: "glm-4.6v",
+		name: "GLM-4.6V",
+		contextWindow: 128e3,
+		maxContextWindow: 128e3,
+		maxTokens: 32e3,
+		regions: ["cn"],
+		credits: { cn: "0.11" },
+		supportsImage: true,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: ""
+	},
+	{
+		id: "kimi-k3-1",
+		name: "Kimi-K3",
 		contextWindow: 1e6,
 		maxContextWindow: 1e6,
-		maxTokens: 64e3,
+		maxTokens: 32e3,
 		regions: ["cn"],
-		credits: { cn: "0.00" },
+		credits: { cn: "1.62" },
 		supportsImage: true,
-		reasoningEfforts: ["high"],
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "混元思考模型，具有增强的推理能力"
+		description: "擅长处理复杂的长程自主任务，前端开发能力突出，同时在知识工作与科研推理上表现出色。"
 	},
 	{
-		id: "hy3",
-		name: "Hy3",
-		contextWindow: 192e3,
-		maxContextWindow: 192e3,
+		id: "kimi-k2.8-preview",
+		name: "Kimi-K2.8-Preview",
+		contextWindow: 1e6,
+		maxContextWindow: 1e6,
 		maxTokens: 64e3,
-		regions: ["intl", "cn"],
-		credits: {
-			cn: "0.00",
-			intl: "0.00"
-		},
+		regions: ["cn"],
+		credits: { cn: "0.77" },
 		supportsImage: true,
-		reasoningEfforts: ["low", "high"],
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
+		canDisableThinking: true,
+		description: "Moonshot AI · 擅长复杂长程自主任务、知识工作与科研推理，前端开发突出"
+	},
+	{
+		id: "kimi-k2.5",
+		name: "Kimi-K2.5",
+		contextWindow: 164e3,
+		maxContextWindow: 164e3,
+		maxTokens: 32e3,
+		regions: ["cn"],
+		credits: { cn: "0.45" },
+		supportsImage: true,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "混元思考模型，具有增强的推理能力"
+		description: ""
+	},
+	{
+		id: "kimi-k2-thinking",
+		name: "Kimi-K2-Thinking",
+		contextWindow: 164e3,
+		maxContextWindow: 164e3,
+		maxTokens: 32e3,
+		regions: ["cn"],
+		credits: { cn: "0.54" },
+		supportsImage: false,
+		reasoningEfforts: [
+			"low",
+			"high",
+			"max"
+		],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: ""
 	},
 	{
 		id: "hy3-x",
@@ -96178,6 +96601,20 @@ const FALLBACK_MODELS$1 = [
 		canDisableThinking: false,
 		description: "混元思考模型，具有增强的推理能力"
 	},
+	{
+		id: "hy4-preview-x",
+		name: "Hy4 preview",
+		contextWindow: 1e6,
+		maxContextWindow: 1e6,
+		maxTokens: 64e3,
+		regions: ["cn"],
+		credits: { cn: "0.29" },
+		supportsImage: true,
+		reasoningEfforts: ["high"],
+		defaultReasoningEffort: "high",
+		canDisableThinking: false,
+		description: "混元思考模型，具有增强的推理能力"
+	},
 	{
 		id: "hunyuan-chat",
 		name: "Hunyuan-Turbos",
@@ -96213,77 +96650,68 @@ const FALLBACK_MODELS$1 = [
 		description: "推理速度极快，编码能力强劲，并支持原生多模态输入的匿名大模型"
 	},
 	{
-		id: "minimax-m3",
-		name: "MiniMax-M3",
-		contextWindow: 512e3,
-		maxContextWindow: 512e3,
+		id: "step-5-preview",
+		name: "Step-5-Preview",
+		contextWindow: 1e6,
+		maxContextWindow: 1e6,
 		maxTokens: 64e3,
 		regions: ["cn"],
-		credits: { cn: "0.25" },
+		credits: { cn: "0.33" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
-			"high",
-			"max"
+			"medium",
+			"high"
 		],
-		defaultReasoningEffort: "medium",
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "原生多模态，擅长代码、智能体任务"
+		description: "阶跃 StepFun 面向真实任务的新一代旗舰基模"
 	},
 	{
-		id: "minimax-m2.7",
-		name: "MiniMax-M2.7",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 48e3,
+		id: "mimo-v2.6-pro",
+		name: "Xiaomi MiMo-V2.6-Pro",
+		contextWindow: 1e6,
+		maxContextWindow: 1e6,
+		maxTokens: 128e3,
 		regions: ["cn"],
-		credits: { cn: "0.19" },
+		credits: { cn: "0.13" },
 		supportsImage: true,
 		reasoningEfforts: [
 			"low",
 			"high",
 			"max"
 		],
-		defaultReasoningEffort: "medium",
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: ""
+		description: "Xiaomi · 旗舰推理模型，面向专业、复杂长程工作流，兼顾高阶科研与网络安全"
 	},
 	{
-		id: "minimax-m2.5",
-		name: "MiniMax-M2.5",
-		contextWindow: 2e5,
-		maxContextWindow: 2e5,
-		maxTokens: 48e3,
+		id: "hy4free",
+		name: "Hy4 Free",
+		contextWindow: 1e6,
+		maxContextWindow: 1e6,
+		maxTokens: 64e3,
 		regions: ["cn"],
-		credits: { cn: "0.18" },
-		supportsImage: false,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
-		],
+		credits: { cn: "0.00" },
+		supportsImage: true,
+		reasoningEfforts: ["high"],
 		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: ""
+		description: "最新旗舰模型，Agent与多模专长"
 	},
-	...UNPUBLISHED_MODELS.filter((model) => model.id === "gemini-3.8-flash"),
 	{
-		id: "gemini-3.5-flash",
-		name: "Gemini-3.5-Flash",
+		id: "hy4std",
+		name: "Hy4",
 		contextWindow: 1e6,
 		maxContextWindow: 1e6,
-		maxTokens: 65536,
-		regions: ["intl"],
-		credits: { intl: "0.99" },
+		maxTokens: 64e3,
+		regions: ["cn"],
+		credits: { cn: "0.29" },
 		supportsImage: true,
-		reasoningEfforts: [
-			"low",
-			"high",
-			"max"
-		],
-		defaultReasoningEffort: "medium",
+		reasoningEfforts: ["high"],
+		defaultReasoningEffort: "high",
 		canDisableThinking: false,
-		description: "能力均衡，适合日常使用"
+		description: "最新旗舰模型，Agent与多模专长"
 	}
 ];
 /**
@@ -96295,11 +96723,41 @@ const FALLBACK_MODELS$1 = [
 * the account's region can actually call.
 */
 const DEFAULT_VISIBLE_MODEL_IDS$1 = [
+	"glm-5.3",
+	"deepseek-v4.1-flash",
+	"hy4std",
+	"kimi-k3.1-pro"
+];
+/**
+* Default selections this table used to ship.
+*
+* "Never edited" is recognised by matching the CURRENT shipped set, so replacing
+* the set outright would turn every existing install into what looks like a user
+* who hand-picked a short list — and the picker would quietly narrow to it,
+* because the 2026-11-04 refresh dropped two of the retired ids outright
+* (`kimi-k2.6` is gone from both regions, `hy4-preview` is intl-only now).
+* Keeping the retired sets here is what lets the default move without that.
+*/
+const RETIRED_DEFAULT_SELECTIONS = [[
 	"glm-5.3",
 	"deepseek-v4.1-flash",
 	"hy4-preview",
 	"kimi-k2.6"
-];
+]];
+/**
+* Whether a stored selection is still a shipped default, i.e. the user never
+* touched the picker.
+*
+* Same size and same members, not order-sensitive: the card writes the list in
+* catalog order, which one default can spell two ways.
+*/
+function isUntouchedModelSelection(stored) {
+	if (stored.length === 0) return false;
+	return [DEFAULT_VISIBLE_MODEL_IDS$1, ...RETIRED_DEFAULT_SELECTIONS].some((shipped) => {
+		const known = new Set(shipped);
+		return stored.length === known.size && stored.every((id) => known.has(id));
+	});
+}
 /** Every id the fallback knows, in declaration order. */
 const WORKBUDDY_MODEL_IDS = FALLBACK_MODELS$1.map((model) => model.id);
 /**
@@ -96404,6 +96862,18 @@ const WORKBUDDY_VENDOR_RULES = [
 		re: /^minimax-/,
 		family: "minimax"
 	},
+	{
+		re: /^mimo-/,
+		family: "xiaomi"
+	},
+	{
+		re: /^step-/,
+		family: "stepfun"
+	},
+	{
+		re: /^grok-/,
+		family: "xai"
+	},
 	{
 		re: /^space-bunny$/,
 		family: "space-bunny"
@@ -100325,8 +100795,7 @@ function isPoolPausedError(error) {
 */
 function resolveEnabledModelIds$2(stored, available, enabled = true) {
 	if (!enabled) return [];
-	const shippedDefaults = new Set(DEFAULT_VISIBLE_MODEL_IDS$1);
-	if (stored.length > 0 && stored.length === shippedDefaults.size && stored.every((id) => shippedDefaults.has(id))) return [...available];
+	if (isUntouchedModelSelection(stored)) return [...available];
 	const known = new Set(available);
 	return stored.filter((id) => known.has(id));
 }
@@ -101993,8 +102462,7 @@ async function readRequestJson(request) {
 */
 function resolveEnabledModelIds$1(stored, available, enabled = true) {
 	if (!enabled) return [];
-	const shippedDefaults = new Set(DEFAULT_VISIBLE_MODEL_IDS$1);
-	if (stored.length > 0 && stored.length === shippedDefaults.size && stored.every((id) => shippedDefaults.has(id))) return [...available];
+	if (isUntouchedModelSelection(stored)) return [...available];
 	const known = new Set(available);
 	return stored.filter((id) => known.has(id));
 }
@@ -103039,6 +103507,7 @@ const Config = z$1.object({
 	]).default("auto").volatile().description("进展更新的输出语言：auto 跟随对话语言，zh 中文，en 英文。"),
 	planModePipeline: z$1.boolean().default(true).volatile().description("启用计划模式管线：允许调度模式在澄清访谈收敛后用 enter_plan_mode 进入计划模式，放弃规划时用 leave_plan_mode 退出。"),
 	dispatchExecutionGuard: z$1.boolean().default(true).volatile().description("启用调度执行守卫：在执行期拦截子代理越权调用主控专用工具，并拦截等待子代理期间的纯 sleep 空等命令；不修改工具声明面，零损耗保护 Kimi 缓存。"),
+	teamPolicyCacheGuard: z$1.boolean().default(true).volatile().description("把内置 Agent Teams 的 team:policy 段从 system prompt 摘掉，改为开关切换时以尾部用户消息投递一次，避免中途开团队协作时刷掉整段前缀缓存；默认开启。"),
 	cacheWarmup: z$1.boolean().default(true).volatile().description(CACHE_WARMUP_SETTING_DESCRIPTION),
 	cacheWarmupRetrieval: z$1.boolean().default(true).volatile().description(CACHE_WARMUP_RETRIEVAL_SETTING_DESCRIPTION),
 	cacheWaitWarmup: z$1.boolean().default(true).volatile().description(CACHE_WAIT_WARMUP_SETTING_DESCRIPTION),
@@ -103107,6 +103576,10 @@ function apply(ctx, pluginConfig = {}) {
 		const guard = installPtcSdkCacheGuard(ctx);
 		return () => guard.dispose();
 	}, "dsh-chatgpt-subscription: PTC SDK cache guard");
+	ctx.effect(() => {
+		const guard = installTeamPolicyCacheGuard(ctx, { enabled: () => resolveTeamPolicyCacheGuardEnabled(pluginConfig) });
+		return () => guard.dispose();
+	}, "dsh-chatgpt-subscription: team policy cache guard");
 	ctx.effect(() => {
 		const guard = installCompactionPolicyGuard(ctx);
 		return () => guard.dispose();