@nanogpt/private-mode 0.2.11 → 0.2.13

package/README.md

@@ -46,7 +46,7 @@ NanoGPT can see account identity, selected private model, selected TEE target me
 
 NanoGPT's web app can also use these models without running this local proxy. Select an eligible Private Mode model and use the Private Mode control in the model picker. This package is for API clients, CLIs, agents, and other OpenAI-compatible tools.
 
-The web-app toggle is narrower than the proxy path in v1. It supports text chat and model settings, and disables attachments, web search, URL-scraped content, project tools, multi-model chat, Context Memory injection, quick replies, and automatic title generation for private turns.
+The web app supports local image attachments for Private Mode vision models (Kimi K3 and Gemma 4 31B). Image bytes are converted to base64 in the browser and included inside the EHBP-encrypted request; they are not uploaded to NanoGPT object storage. Other attachment types, web search, URL-scraped content, project tools, multi-model chat, Context Memory injection, quick replies, and automatic title generation remain disabled for private turns.
 
 In the hosted web app, decrypted Private Mode turns remain in local browser history. Cloud conversation sync is blocked for Private Mode chats unless password-based end-to-end sync is enabled; the recoverable default sync mode is not used for those chats.
 
@@ -74,10 +74,12 @@ Supported private model IDs include:
 - `private/llama3-3-70b`
 - `private/glm-5-2`
 - `private/glm-5-2:thinking`
+- `private/glm-5-3`
+- `private/glm-5-3-flash`
 - `private/gemma4-31b`
 - `private/gemma4-31b:thinking`
 
-Both GLM 5.2 variants are deployed with a 393,216-token total context limit, with prompt and output sharing that window. Kimi K3 Private has a 256,000-token context limit. DeepSeek V4 Flash 0731 Private has a 1,048,576-token total context limit. The model-list extension `context_length` is the combined prompt-and-output window, while `max_output_tokens` is the output ceiling within that same window. These values are not additive.
+Both GLM 5.2 variants are deployed with a 393,216-token total context limit, with prompt and output sharing that window. GLM 5.3 Private and GLM 5.3 Flash Private each have a 1,048,576-token total context limit and a 131,072-token output ceiling. Kimi K3 Private has a 256,000-token context limit. DeepSeek V4 Flash 0731 Private has a 1,048,576-token total context limit. The model-list extension `context_length` is the combined prompt-and-output window, while `max_output_tokens` is the output ceiling within that same window. These values are not additive.
 
 Browser requests are locked down by default. The proxy only accepts same-machine clients and rejects browser `Origin` headers that are not explicitly allowed, so a random website or LAN client cannot spend the local `NANOGPT_API_KEY` while the proxy is running. If a local browser app needs to call the proxy directly, allow that exact origin:
 

package/lib/requestTransforms.js

@@ -29,6 +29,7 @@ const KIMI_K3_TEXT_ENCODER = new TextEncoder();
 const DEEPSEEK_V4_CONTEXT_WINDOW_TOKENS = 1_048_576;
 const DEEPSEEK_V4_MAX_COMPLETION_TOKENS = 1_048_576;
 const DEEPSEEK_V4_CONTEXT_SAFETY_MARGIN_TOKENS = 10;
+const GLM_53_MAX_COMPLETION_TOKENS = 131_072;
 const PRIVATE_TINFOIL_CHAT_COMPLETION_BODY_FIELDS = new Set([
   'chat_template_kwargs',
   'frequency_penalty',
@@ -243,6 +244,14 @@ function normalizeDeepSeekV4ReasoningEffort(value) {
   return 'high';
 }
 
+function normalizeGlm53ReasoningEffort(value) {
+  const normalized = typeof value === 'string' ? value.trim().toLowerCase() : '';
+  if (normalized === 'max' || normalized === 'xhigh') return 'max';
+  if (normalized === 'low' || normalized === 'minimal') return 'low';
+  if (normalized === 'high' || normalized === 'medium') return 'high';
+  return 'max';
+}
+
 function getPrivateModeModelSignals(body, model) {
   return [
     body.model,
@@ -419,6 +428,10 @@ function isPrivateModeKimiK3Model(model) {
     });
 }
 
+function isPrivateModeGlm53Model(model) {
+  return model.thinkingMode === 'glm-5.3';
+}
+
 function getPrivateModeFunctionToolName(tool) {
   if (!isPlainObject(tool) || tool.type !== 'function' || !isPlainObject(tool.function)) {
     return undefined;
@@ -513,7 +526,7 @@ export function normalizePrivateModelReasoningControls(body, model) {
 
 export function shouldSuppressPrivateModelReasoning(body, model) {
   const isKimiK3 = isPrivateModeKimiK3Model(model);
-  if (!isKimiK3 && model.thinkingMode !== 'deepseek-v4') return false;
+  if (!isKimiK3 && model.thinkingMode !== 'deepseek-v4' && model.thinkingMode !== 'glm-5.3') return false;
   const reasoningVisibilityOptOut = body.reasoningOptOut === true ||
     body.exposeReasoning === false ||
     body.materializeReasoning === false ||
@@ -528,9 +541,6 @@ export function shouldSuppressPrivateModelReasoning(body, model) {
 
 function resolvePrivateModeKimiK3ReasoningEffort(body) {
   const candidates = [
-    body.reasoningOptOut === true ? false : undefined,
-    body.exposeReasoning === false ? false : undefined,
-    body.materializeReasoning === false ? false : undefined,
     body.enable_thinking,
     body.thinking,
     body.reasoning_effort,
@@ -544,8 +554,7 @@ function resolvePrivateModeKimiK3ReasoningEffort(body) {
   const normalizedEffort = typeof explicitEffort === 'string'
     ? explicitEffort.trim().toLowerCase()
     : undefined;
-  const excludesReasoning = candidates.some((value) => isPlainObject(value) && value.exclude === true);
-  return excludesReasoning ? normalizedEffort ?? 'low' : normalizedEffort ?? 'max';
+  return normalizedEffort ?? 'max';
 }
 
 function applyPrivateModeKimiK3RequestParams(body, model) {
@@ -618,6 +627,20 @@ function clampPrivateModeDeepSeekV4Output(body) {
   );
 }
 
+function clampPrivateModeGlm53Output(body) {
+  const requested = typeof body.max_tokens === 'number' && Number.isFinite(body.max_tokens)
+    ? body.max_tokens
+    : undefined;
+  if (requested === undefined) return;
+  const promptTokens = estimatePrivateModeKimiK3PromptTokens(body);
+  const remainingContext = Math.max(1, DEEPSEEK_V4_CONTEXT_WINDOW_TOKENS - promptTokens - DEEPSEEK_V4_CONTEXT_SAFETY_MARGIN_TOKENS);
+  body.max_tokens = Math.min(
+    requested < 0 ? GLM_53_MAX_COMPLETION_TOKENS : Math.max(1, Math.floor(requested)),
+    GLM_53_MAX_COMPLETION_TOKENS,
+    remainingContext,
+  );
+}
+
 export function createPrivateModeReasoningContentSuppressor() {
   const openTags = ['<think>', '<thinking>', '<previous_reasoning>', '◁think▷'];
   const closeTags = ['</think>', '</thinking>', '</previous_reasoning>', '◁/think▷'];
@@ -1011,10 +1034,12 @@ function normalizeStreamOptions(body) {
 }
 
 export function applyPrivateModelRequestMutations(body, model) {
-  if (isPrivateModeKimiK3Model(model)) {
+  if (isPrivateModeKimiK3Model(model) || isPrivateModeGlm53Model(model)) {
     normalizePrivateModelReasoningControls(body, model);
     normalizePrivateModeKimiK3ReasoningFromMessages(body);
-    normalizePrivateModeKimiK3DynamicToolMessages(body);
+    if (isPrivateModeKimiK3Model(model)) {
+      normalizePrivateModeKimiK3DynamicToolMessages(body);
+    }
   } else {
     stripPrivateModeReasoningFromMessages(body);
   }
@@ -1026,6 +1051,8 @@ export function applyPrivateModelRequestMutations(body, model) {
     applyPrivateModeKimiK3RequestParams(body, model);
   } else if (model.thinkingMode === 'deepseek-v4') {
     clampPrivateModeDeepSeekV4Output(body);
+  } else if (model.thinkingMode === 'glm-5.3') {
+    clampPrivateModeGlm53Output(body);
   }
 
   if (model.thinkingMode === 'gemma') {
@@ -1037,9 +1064,12 @@ export function applyPrivateModelRequestMutations(body, model) {
     delete body.reasoning_effort;
   } else if (
     model.thinkingMode === 'glm-5.2' ||
+    model.thinkingMode === 'glm-5.3' ||
     model.thinkingMode === 'deepseek-v4'
   ) {
-    const thinkingEnabled = shouldEnableThinking(body, model);
+    const thinkingEnabled = model.thinkingMode === 'glm-5.3'
+      ? true
+      : shouldEnableThinking(body, model);
     const requestedReasoningEffort = body.reasoning_effort
       ?? (isPlainObject(body.reasoning) ? body.reasoning.effort : undefined);
     body.chat_template_kwargs = {
@@ -1048,8 +1078,9 @@ export function applyPrivateModelRequestMutations(body, model) {
     };
 
     if (thinkingEnabled) {
-      body.chat_template_kwargs.reasoning_effort =
-        normalizeDeepSeekV4ReasoningEffort(requestedReasoningEffort);
+      body.chat_template_kwargs.reasoning_effort = model.thinkingMode === 'glm-5.3'
+        ? normalizeGlm53ReasoningEffort(requestedReasoningEffort)
+        : normalizeDeepSeekV4ReasoningEffort(requestedReasoningEffort);
     } else {
       delete body.chat_template_kwargs.reasoning_effort;
     }

package/lib/serverErrorNormalization.js

@@ -6,7 +6,7 @@ const EHBP_RESPONSE_NONCE_HEADER = 'ehbp-response-nonce';
 const PRIVATE_MODE_REFUND_NOTICE = 'Any reserved balance will be released or refunded.';
 const MAX_UPSTREAM_ERROR_BODY_BYTES = 16 * 1024;
 const MAX_UPSTREAM_ERROR_MESSAGE_CHARS = 1_000;
-const HIDDEN_PROVIDER_NAME_PATTERN = /\b(?:openrouter|spoke\s*ai|aihubmix|ollama|mimas|comet|azure|digital\s*ocean|axionic|whale\s*ai|langfork)\b/gi;
+const HIDDEN_PROVIDER_NAME_PATTERN = /\b(?:openrouter|spoke\s*ai|aihubmix|mimas|comet|azure|digital\s*ocean|axionic|whale\s*ai|langfork)\b/gi;
 
 export function privateModeProviderFailureMessage(status) {
   if (status === 429) {

package/lib/statusContract.js

@@ -2,6 +2,7 @@ import { createHash } from 'node:crypto';
 
 export const PRIVATE_MODE_FRONTEND_SUPPORTED_FEATURES = Object.freeze([
   'text_chat',
+  'vision_image_inputs',
   'streaming',
   'conversation_history',
   'model_settings',
@@ -9,7 +10,7 @@ export const PRIVATE_MODE_FRONTEND_SUPPORTED_FEATURES = Object.freeze([
 ]);
 
 export const PRIVATE_MODE_FRONTEND_DISABLED_FEATURES = Object.freeze([
-  'attachments',
+  'non_image_attachments',
   'web_search',
   'url_scraped_content',
   'project_chats',

package/models/private-tee.json

@@ -76,6 +76,34 @@
     "ownedBy": "nanogpt-private-mode",
     "aliases": ["private/glm-5.2:thinking", "TEE/glm-5-2:thinking", "TEE/glm-5.2:thinking"]
   },
+  {
+    "id": "private/glm-5-3",
+    "name": "GLM 5.3 Private",
+    "upstreamModel": "glm-5-3",
+    "billingModel": "TEE/glm-5.3",
+    "providerPricingModel": "TEE/glm-5.3",
+    "teeTargetModel": "glm-5-3",
+    "maxInputTokens": 1048576,
+    "maxOutputTokens": 131072,
+    "thinkingMode": "glm-5.3",
+    "created": 1788391929,
+    "ownedBy": "nanogpt-private-mode",
+    "aliases": ["private/glm-5.3", "TEE/glm-5-3", "TEE/glm-5.3"]
+  },
+  {
+    "id": "private/glm-5-3-flash",
+    "name": "GLM 5.3 Flash Private",
+    "upstreamModel": "glm-5-3-flash",
+    "billingModel": "TEE/glm-5.3-flash",
+    "providerPricingModel": "TEE/glm-5.3-flash",
+    "teeTargetModel": "glm-5-3-flash",
+    "maxInputTokens": 1048576,
+    "maxOutputTokens": 131072,
+    "thinkingMode": "glm-5.3",
+    "created": 1788307200,
+    "ownedBy": "nanogpt-private-mode",
+    "aliases": ["private/glm-5.3-flash", "TEE/glm-5-3-flash", "TEE/glm-5.3-flash"]
+  },
   {
     "id": "private/gemma4-31b",
     "name": "Gemma 4 31B Private",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@nanogpt/private-mode",
-  "version": "0.2.11",
+  "version": "0.2.13",
   "description": "OpenAI-compatible localhost proxy for NanoGPT Private Mode.",
   "type": "module",
   "publishConfig": {