@goodandready/dsh-clinebot 0.6.29 → 0.6.31

package/lib/path-safety.js

@@ -6,6 +6,60 @@ export function dshHome() {
   return path.resolve(process.env.DSH_HOME || path.join(process.env.HOME || os.homedir(), '.dsh'))
 }
 
+export function defaultStatsPath() {
+  return path.join(dshHome(), 'clinebot-stats.json')
+}
+
+export function defaultEventLogPath() {
+  return path.join(dshHome(), 'clinebot-events.json')
+}
+
+export function defaultPriceCatalogPath() {
+  return path.join(dshHome(), 'clinebot-prices.json')
+}
+
+export function defaultModelsCachePath() {
+  return path.join(dshHome(), 'clinebot-models-cache.json')
+}
+
+export function unwrapPathValue(target) {
+  let guard = 0
+  let current = target
+  while (guard < 5 && current) {
+    if (typeof current === 'function') {
+      try { current = current() } catch { current = ''; break }
+      guard += 1
+    } else if (typeof current === 'object' && typeof current.get === 'function') {
+      try { current = current.get() } catch { current = ''; break }
+      guard += 1
+    } else {
+      break
+    }
+  }
+  return typeof current === 'string' ? current : ''
+}
+
+export function resolveDataPath(targetPath, defaultName = '') {
+  const unwrapped = unwrapPathValue(targetPath)
+  const raw = String(unwrapped || '').trim()
+  if (!raw) {
+    return defaultName ? path.join(dshHome(), defaultName) : ''
+  }
+  if (raw === '~/.dsh') {
+    return dshHome()
+  }
+  if (raw.startsWith('~/.dsh/') || raw.startsWith('~/.dsh\\') || raw.startsWith('~\\.dsh\\')) {
+    return path.join(dshHome(), raw.slice(7))
+  }
+  if (raw === '~') {
+    return process.env.HOME || os.homedir()
+  }
+  if (raw.startsWith('~/') || raw.startsWith('~\\')) {
+    return path.join(process.env.HOME || os.homedir(), raw.slice(2))
+  }
+  return path.resolve(raw)
+}
+
 function realPath(target) {
   let current = target
   const missing = []
@@ -28,12 +82,11 @@ function realPath(target) {
 }
 
 export function isSafeDataPath(value) {
-  const raw = String(value ?? '').trim()
+  const unwrapped = unwrapPathValue(value)
+  const raw = String(unwrapped ?? '').trim()
   if (!raw) return true
   if (raw.includes('\0')) return false
-  const resolved = raw === '~' || raw.startsWith('~/')
-    ? path.resolve(process.env.HOME || os.homedir(), raw.slice(1))
-    : path.resolve(raw)
+  const resolved = resolveDataPath(raw, '')
   const home = realPath(dshHome())
   const realResolved = realPath(resolved)
   if (!home || !realResolved) return false

package/lib/price-sync.js

@@ -1,5 +1,5 @@
 import { readFileSync, writeFileSync, renameSync, mkdirSync, existsSync } from 'node:fs'
-import { homedir } from 'node:os'
+import { resolveDataPath, isSafeDataPath } from './path-safety.js'
 import path from 'node:path'
 import { normalizeModelKey, getPublicPriceCatalog, setPublicPriceCatalog } from './model-prices.js'
 import { safeDict } from './safe-dict.js'
@@ -48,10 +48,7 @@ const PROVIDER_PRIORITY = {
 }
 
 function expandHome(target) {
-  const value = String(target || '')
-  if (value === '~') return homedir()
-  if (value.startsWith('~/')) return path.join(homedir(), value.slice(2))
-  return value || path.join(homedir(), '.dsh', 'clinebot-prices.json')
+  return resolveDataPath(target, 'clinebot-prices.json')
 }
 
 function priority(provider) {

package/lib/provider-sync.js

@@ -1,275 +1,258 @@
-import { getStatsSummary } from './stats-storage.js'
-import os from 'node:os'
-import path from 'node:path'
-import {
-  PROVIDER_ID,
-  PROVIDER_DISPLAY_NAME,
-  getAllModels,
-  saveModelsDiskCache,
-  loadModelsDiskCache,
-  OBSOLETE_MODEL_ID_MAP,
-  migrateModelEntry,
-  isCatalogDifferent,
-} from './models.js'
-import { ensurePublicPricesForModels } from './price-sync.js'
-import {
-  probeHealth,
-  fetchUsageLimits,
-  sessionStats,
-  DEFAULT_API_KEY_ENV,
-} from './cline-client.js'
-import { publicConfig, plainConfig, Config } from './config.js'
-import { publicUsage } from './http.js'
-import { resolveKeyValue } from './credential-refs.js'
-import { resolveAccountPool, getLastRotation } from './account-pool.js'
-import { isSafeDataPath } from './path-safety.js'
-
-export function resolvePathWithHome(p) {
-  let guard = 0
-  while (guard < 5 && p) {
-    if (typeof p === 'function') {
-      try { p = p() } catch { p = ''; break }
-      guard += 1
-    } else if (typeof p === 'object' && typeof p.get === 'function') {
-      try { p = p.get() } catch { p = ''; break }
-      guard += 1
-    } else {
-      break
-    }
-  }
-  if (typeof p !== 'string') return ''
-  if (p.startsWith('~/') || p === '~') {
-    const home = process.env.HOME || os.homedir()
-    return path.join(home, p.slice(1))
-  }
-  return p
-}
-
-async function checkRegisteredInLlm(ctx) {
-  try {
-    const llm = ctx?.get?.('llm')
-    if (llm && typeof llm.listProviders === 'function') {
-      const providers = await llm.listProviders()
-      if (Array.isArray(providers) && providers.some((entry) => (entry?.id || entry) === PROVIDER_ID)) {
-        return true
-      }
-    }
-  } catch {
-    /* llm service may not be mounted */
-  }
-  return false
-}
-
-export async function resolveActiveAccountKey(ctx, cfg, pool = null) {
-  const accountPool = pool || await resolveAccountPool(ctx, cfg)
-  const configured = accountPool.filter((acc) => acc.present && acc.value)
-  if (!configured.length) {
-    const fallbackEnv = publicConfig(cfg).apiKeyEnv || DEFAULT_API_KEY_ENV
-    return { envName: fallbackEnv, apiKeyEnv: fallbackEnv, value: '', source: 'none', id: 'default' }
-  }
-  const pub = publicConfig(cfg)
-  let chosen = configured[0]
-  if (pub.activeAccount) {
-    const pinned = configured.find((acc) => acc.apiKeyEnv === pub.activeAccount || acc.id === pub.activeAccount)
-    if (pinned) chosen = pinned
-  }
-  const keyEnv = chosen.apiKeyEnv || chosen.envName || DEFAULT_API_KEY_ENV
-  return {
-    ...chosen,
-    envName: keyEnv,
-    apiKeyEnv: keyEnv,
-  }
-}
-
-export async function buildStatus(ctx, cfg) {
-  const pub = publicConfig(cfg)
-  const probeTimeout = Math.min(2500, pub.timeoutMs || 2500)
-
-  const [key, pool, isRegistered, health] = await Promise.all([
-    resolveKeyValue(ctx, pub.apiKeyEnv),
-    resolveAccountPool(ctx, cfg),
-    checkRegisteredInLlm(ctx),
-    probeHealth(pub.baseUrl, { timeoutMs: probeTimeout }),
-  ])
-
-  const activeAcc = await resolveActiveAccountKey(ctx, cfg, pool)
-  const allModels = getAllModels(pub.dynamicModels, pub.modelContextOverrides, pub.customModels)
-
-  let usage = null
-  const keyToUse = activeAcc.value || key.value
-  if (keyToUse) {
-    usage = await fetchUsageLimits(pub.baseUrl, keyToUse, { timeoutMs: probeTimeout }).catch(() => null)
-  }
-
-  let quotaWarning = null
-  if (usage?.windows) {
-    const fiveHour = usage.windows.fiveHour
-    const weekly = usage.windows.weekly
-    const monthly = usage.windows.monthly
-
-    if (fiveHour && typeof fiveHour.percentUsed === 'number') {
-      if (fiveHour.percentUsed >= 95) {
-        quotaWarning = {
-          level: 'exhausted',
-          code: 'quota.exhausted_5h',
-          params: { percentUsed: fiveHour.percentUsed },
-          message: `5-hour rolling limit is almost exhausted (${fiveHour.percentUsed}%). New requests may be rejected until quota reset.`,
-          resetsAt: fiveHour.resetsAt,
-        }
-      } else if (fiveHour.percentUsed >= 90) {
-        quotaWarning = {
-          level: 'warning',
-          code: 'quota.warning_5h',
-          params: { percentUsed: fiveHour.percentUsed },
-          message: `Low quota warning: ${fiveHour.percentUsed}% of 5-hour limit consumed (<10% remaining).`,
-          resetsAt: fiveHour.resetsAt,
-        }
-      }
-    }
-
-    if (!quotaWarning && weekly && typeof weekly.percentUsed === 'number' && weekly.percentUsed >= 90) {
-      const remainingPercent = weekly.remainingPercent ?? (100 - weekly.percentUsed)
-      quotaWarning = {
-        level: weekly.percentUsed >= 99 ? 'exhausted' : 'warning',
-        code: 'quota.warning_weekly',
-        params: { percentUsed: weekly.percentUsed, remainingPercent },
-        message: `Low weekly quota warning: ${weekly.percentUsed}% consumed (${remainingPercent}% remaining).`,
-        resetsAt: weekly.resetsAt,
-      }
-    }
-
-    if (!quotaWarning && monthly && typeof monthly.percentUsed === 'number' && monthly.percentUsed >= 90) {
-      const remainingPercent = monthly.remainingPercent ?? (100 - monthly.percentUsed)
-      quotaWarning = {
-        level: monthly.percentUsed >= 99 ? 'exhausted' : 'warning',
-        code: 'quota.warning_monthly',
-        params: { percentUsed: monthly.percentUsed, remainingPercent },
-        message: `Low monthly quota warning: ${monthly.percentUsed}% consumed (${remainingPercent}% remaining).`,
-        resetsAt: monthly.resetsAt,
-      }
-    }
-  }
-
-  return {
-    ok: true,
-    providerId: PROVIDER_ID,
-    displayName: PROVIDER_DISPLAY_NAME,
-    config: pub,
-    key: {
-      envName: activeAcc.apiKeyEnv || key.envName,
-      present: !!(activeAcc.value || key.value),
-      source: activeAcc.source || key.source,
-    },
-    accounts: pool.map((acc) => {
-      return {
-        id: acc.id,
-        label: acc.label,
-        apiKeyEnv: acc.apiKeyEnv,
-        present: acc.present,
-        source: acc.source,
-        isPinned: acc.isPinned,
-        percentUsed: typeof acc.percentUsed === 'number' ? acc.percentUsed : null,
-      }
-    }),
-    activeAccount: activeAcc.apiKeyEnv,
-    health,
-    usage: publicUsage(usage),
-    quotaWarning,
-    sessionStats: { ...sessionStats },
-    statsSummary: getStatsSummary(),
-    lastRotation: getLastRotation(),
-    isRegistered,
-    availableModels: allModels,
-  }
-}
-
-export function formatProgressBar(pct, totalWidth = 10) {
-  const clamped = Math.max(0, Math.min(100, pct || 0))
-  const filled = Math.round((clamped / 100) * totalWidth)
-  const empty = Math.max(0, totalWidth - filled)
-  return `[${'█'.repeat(filled)}${'░'.repeat(empty)}] ${clamped}%`
-}
-
-export async function autoDiscoverPlanModels(ctx, { live, getSettingsApi, syncProviderState }) {
-  try {
-    const cfg = live()
-    const pub = publicConfig(cfg)
-    const cacheFile = isSafeDataPath(pub.modelsCachePath) ? resolvePathWithHome(pub.modelsCachePath) : ''
-    const settingsApi = getSettingsApi()
-
-    // Auto-migrate obsolete IDs (e.g. deepseek-v41-flash -> deepseek-v4.1-flash)
-    const existingDynamic = pub.dynamicModels || []
-    const hasObsolete = existingDynamic.some((m) => Boolean(OBSOLETE_MODEL_ID_MAP[m?.id]))
-    if (hasObsolete && settingsApi?.replace) {
-      const migrated = existingDynamic.map(migrateModelEntry)
-      const next = plainConfig(Config({
-        ...plainConfig(live()),
-        dynamicModels: migrated,
-      }))
-      await settingsApi.replace(next)
-      await syncProviderState(next)
-    }
-
-    const activeAcc = await resolveActiveAccountKey(ctx, cfg)
-    if (!activeAcc.value) return
-
-    const cacheIdentity = {
-      endpoint: pub.baseUrl,
-      accountRef: activeAcc.envName || activeAcc.id || pub.apiKeyEnv,
-    }
-
-    let usageData = null
-    try {
-      usageData = await fetchUsageLimits(pub.baseUrl, activeAcc.value, {
-        timeoutMs: Math.min(pub.timeoutMs, 5000),
-        bypassCache: true,
-        includeCatalog: true,
-      })
-    } catch {
-      usageData = null
-    }
-
-    if (usageData?.ok && Array.isArray(usageData.dynamicModels)) {
-      const existingDynamic = pub.dynamicModels || []
-      const isDifferent = isCatalogDifferent(existingDynamic, usageData.dynamicModels)
-      const now = Date.now()
-
-      if (isDifferent && settingsApi?.replace) {
-        const next = plainConfig(Config({
-          ...plainConfig(live()),
-          dynamicModels: usageData.dynamicModels,
-          planSyncedAt: now,
-        }))
-        await settingsApi.replace(next)
-        await syncProviderState(next)
-      }
-      if (cacheFile) {
-        await saveModelsDiskCache(cacheFile, usageData.dynamicModels, now, cacheIdentity)
-      }
-      if (isDifferent) {
-        await ensurePublicPricesForModels(usageData.dynamicModels.map((model) => model.id), {
-          url: pub.priceCatalogUrl,
-          cachePath: isSafeDataPath(pub.priceCatalogPath) ? pub.priceCatalogPath : undefined,
-          enabled: pub.priceAutoSync !== false,
-        }).catch(() => {})
-      }
-      return
-    }
-
-    if ((!pub.dynamicModels || !pub.dynamicModels.length) && cacheFile) {
-      const fromDisk = await loadModelsDiskCache(cacheFile, cacheIdentity)
-      if (Array.isArray(fromDisk) && fromDisk.length && settingsApi?.replace) {
-        const migratedDisk = fromDisk.map(migrateModelEntry)
-        const next = plainConfig(Config({
-          ...plainConfig(live()),
-          dynamicModels: migratedDisk,
-          planSyncedAt: 0,
-        }))
-        await settingsApi.replace(next)
-        await syncProviderState(next)
-      }
-    }
-  } catch {
-    /* best-effort discovery */
-  }
-}
+import { getStatsSummary } from './stats-storage.js'
+
+import path from 'node:path'
+import {
+  PROVIDER_ID,
+  PROVIDER_DISPLAY_NAME,
+  getAllModels,
+  saveModelsDiskCache,
+  loadModelsDiskCache,
+  OBSOLETE_MODEL_ID_MAP,
+  migrateModelEntry,
+  isCatalogDifferent,
+} from './models.js'
+import { ensurePublicPricesForModels } from './price-sync.js'
+import {
+  probeHealth,
+  fetchUsageLimits,
+  sessionStats,
+  DEFAULT_API_KEY_ENV,
+} from './cline-client.js'
+import { publicConfig, plainConfig, Config } from './config.js'
+import { publicUsage } from './http.js'
+import { resolveKeyValue } from './credential-refs.js'
+import { resolveAccountPool, getLastRotation } from './account-pool.js'
+import { isSafeDataPath, resolveDataPath } from './path-safety.js'
+
+export function resolvePathWithHome(p) {
+  return resolveDataPath(p, '')
+}
+
+async function checkRegisteredInLlm(ctx) {
+  try {
+    const llm = ctx?.get?.('llm')
+    if (llm && typeof llm.listProviders === 'function') {
+      const providers = await llm.listProviders()
+      if (Array.isArray(providers) && providers.some((entry) => (entry?.id || entry) === PROVIDER_ID)) {
+        return true
+      }
+    }
+  } catch {
+    /* llm service may not be mounted */
+  }
+  return false
+}
+
+export async function resolveActiveAccountKey(ctx, cfg, pool = null) {
+  const accountPool = pool || await resolveAccountPool(ctx, cfg)
+  const configured = accountPool.filter((acc) => acc.present && acc.value)
+  if (!configured.length) {
+    const fallbackEnv = publicConfig(cfg).apiKeyEnv || DEFAULT_API_KEY_ENV
+    return { envName: fallbackEnv, apiKeyEnv: fallbackEnv, value: '', source: 'none', id: 'default' }
+  }
+  const pub = publicConfig(cfg)
+  let chosen = configured[0]
+  if (pub.activeAccount) {
+    const pinned = configured.find((acc) => acc.apiKeyEnv === pub.activeAccount || acc.id === pub.activeAccount)
+    if (pinned) chosen = pinned
+  }
+  const keyEnv = chosen.apiKeyEnv || chosen.envName || DEFAULT_API_KEY_ENV
+  return {
+    ...chosen,
+    envName: keyEnv,
+    apiKeyEnv: keyEnv,
+  }
+}
+
+export async function buildStatus(ctx, cfg) {
+  const pub = publicConfig(cfg)
+  const probeTimeout = Math.min(2500, pub.timeoutMs || 2500)
+
+  const [key, pool, isRegistered, health] = await Promise.all([
+    resolveKeyValue(ctx, pub.apiKeyEnv),
+    resolveAccountPool(ctx, cfg),
+    checkRegisteredInLlm(ctx),
+    probeHealth(pub.baseUrl, { timeoutMs: probeTimeout }),
+  ])
+
+  const activeAcc = await resolveActiveAccountKey(ctx, cfg, pool)
+  const allModels = getAllModels(pub.dynamicModels, pub.modelContextOverrides, pub.customModels)
+
+  let usage = null
+  const keyToUse = activeAcc.value || key.value
+  if (keyToUse) {
+    usage = await fetchUsageLimits(pub.baseUrl, keyToUse, { timeoutMs: probeTimeout }).catch(() => null)
+  }
+
+  let quotaWarning = null
+  if (usage?.windows) {
+    const fiveHour = usage.windows.fiveHour
+    const weekly = usage.windows.weekly
+    const monthly = usage.windows.monthly
+
+    if (fiveHour && typeof fiveHour.percentUsed === 'number') {
+      if (fiveHour.percentUsed >= 95) {
+        quotaWarning = {
+          level: 'exhausted',
+          code: 'quota.exhausted_5h',
+          params: { percentUsed: fiveHour.percentUsed },
+          message: `5-hour rolling limit is almost exhausted (${fiveHour.percentUsed}%). New requests may be rejected until quota reset.`,
+          resetsAt: fiveHour.resetsAt,
+        }
+      } else if (fiveHour.percentUsed >= 90) {
+        quotaWarning = {
+          level: 'warning',
+          code: 'quota.warning_5h',
+          params: { percentUsed: fiveHour.percentUsed },
+          message: `Low quota warning: ${fiveHour.percentUsed}% of 5-hour limit consumed (<10% remaining).`,
+          resetsAt: fiveHour.resetsAt,
+        }
+      }
+    }
+
+    if (!quotaWarning && weekly && typeof weekly.percentUsed === 'number' && weekly.percentUsed >= 90) {
+      const remainingPercent = weekly.remainingPercent ?? (100 - weekly.percentUsed)
+      quotaWarning = {
+        level: weekly.percentUsed >= 99 ? 'exhausted' : 'warning',
+        code: 'quota.warning_weekly',
+        params: { percentUsed: weekly.percentUsed, remainingPercent },
+        message: `Low weekly quota warning: ${weekly.percentUsed}% consumed (${remainingPercent}% remaining).`,
+        resetsAt: weekly.resetsAt,
+      }
+    }
+
+    if (!quotaWarning && monthly && typeof monthly.percentUsed === 'number' && monthly.percentUsed >= 90) {
+      const remainingPercent = monthly.remainingPercent ?? (100 - monthly.percentUsed)
+      quotaWarning = {
+        level: monthly.percentUsed >= 99 ? 'exhausted' : 'warning',
+        code: 'quota.warning_monthly',
+        params: { percentUsed: monthly.percentUsed, remainingPercent },
+        message: `Low monthly quota warning: ${monthly.percentUsed}% consumed (${remainingPercent}% remaining).`,
+        resetsAt: monthly.resetsAt,
+      }
+    }
+  }
+
+  return {
+    ok: true,
+    providerId: PROVIDER_ID,
+    displayName: PROVIDER_DISPLAY_NAME,
+    config: pub,
+    key: {
+      envName: activeAcc.apiKeyEnv || key.envName,
+      present: !!(activeAcc.value || key.value),
+      source: activeAcc.source || key.source,
+    },
+    accounts: pool.map((acc) => {
+      return {
+        id: acc.id,
+        label: acc.label,
+        apiKeyEnv: acc.apiKeyEnv,
+        present: acc.present,
+        source: acc.source,
+        isPinned: acc.isPinned,
+        percentUsed: typeof acc.percentUsed === 'number' ? acc.percentUsed : null,
+      }
+    }),
+    activeAccount: activeAcc.apiKeyEnv,
+    health,
+    usage: publicUsage(usage),
+    quotaWarning,
+    sessionStats: { ...sessionStats },
+    statsSummary: getStatsSummary(),
+    lastRotation: getLastRotation(),
+    isRegistered,
+    availableModels: allModels,
+  }
+}
+
+export function formatProgressBar(pct, totalWidth = 10) {
+  const clamped = Math.max(0, Math.min(100, pct || 0))
+  const filled = Math.round((clamped / 100) * totalWidth)
+  const empty = Math.max(0, totalWidth - filled)
+  return `[${'█'.repeat(filled)}${'░'.repeat(empty)}] ${clamped}%`
+}
+
+export async function autoDiscoverPlanModels(ctx, { live, getSettingsApi, syncProviderState }) {
+  try {
+    const cfg = live()
+    const pub = publicConfig(cfg)
+    const cacheFile = isSafeDataPath(pub.modelsCachePath) ? resolvePathWithHome(pub.modelsCachePath) : ''
+    const settingsApi = getSettingsApi()
+
+    // Auto-migrate obsolete IDs (e.g. deepseek-v41-flash -> deepseek-v4.1-flash)
+    const existingDynamic = pub.dynamicModels || []
+    const hasObsolete = existingDynamic.some((m) => Boolean(OBSOLETE_MODEL_ID_MAP[m?.id]))
+    if (hasObsolete && settingsApi?.replace) {
+      const migrated = existingDynamic.map(migrateModelEntry)
+      const next = plainConfig(Config({
+        ...plainConfig(live()),
+        dynamicModels: migrated,
+      }))
+      await settingsApi.replace(next)
+      await syncProviderState(next)
+    }
+
+    const activeAcc = await resolveActiveAccountKey(ctx, cfg)
+    if (!activeAcc.value) return
+
+    const cacheIdentity = {
+      endpoint: pub.baseUrl,
+      accountRef: activeAcc.envName || activeAcc.id || pub.apiKeyEnv,
+    }
+
+    let usageData = null
+    try {
+      usageData = await fetchUsageLimits(pub.baseUrl, activeAcc.value, {
+        timeoutMs: Math.min(pub.timeoutMs, 5000),
+        bypassCache: true,
+        includeCatalog: true,
+      })
+    } catch {
+      usageData = null
+    }
+
+    if (usageData?.ok && Array.isArray(usageData.dynamicModels)) {
+      const existingDynamic = pub.dynamicModels || []
+      const isDifferent = isCatalogDifferent(existingDynamic, usageData.dynamicModels)
+      const now = Date.now()
+
+      if (isDifferent && settingsApi?.replace) {
+        const next = plainConfig(Config({
+          ...plainConfig(live()),
+          dynamicModels: usageData.dynamicModels,
+          planSyncedAt: now,
+        }))
+        await settingsApi.replace(next)
+        await syncProviderState(next)
+      }
+      if (cacheFile) {
+        await saveModelsDiskCache(cacheFile, usageData.dynamicModels, now, cacheIdentity)
+      }
+      if (isDifferent) {
+        await ensurePublicPricesForModels(usageData.dynamicModels.map((model) => model.id), {
+          url: pub.priceCatalogUrl,
+          cachePath: isSafeDataPath(pub.priceCatalogPath) ? pub.priceCatalogPath : undefined,
+          enabled: pub.priceAutoSync !== false,
+        }).catch(() => {})
+      }
+      return
+    }
+
+    if ((!pub.dynamicModels || !pub.dynamicModels.length) && cacheFile) {
+      const fromDisk = await loadModelsDiskCache(cacheFile, cacheIdentity)
+      if (Array.isArray(fromDisk) && fromDisk.length && settingsApi?.replace) {
+        const migratedDisk = fromDisk.map(migrateModelEntry)
+        const next = plainConfig(Config({
+          ...plainConfig(live()),
+          dynamicModels: migratedDisk,
+          planSyncedAt: 0,
+        }))
+        await settingsApi.replace(next)
+        await syncProviderState(next)
+      }
+    }
+  } catch {
+    /* best-effort discovery */
+  }
+}