@prestyj/core 5.1.0 → 5.2.0

package/dist/index.cjs

@@ -36,12 +36,15 @@ __export(index_exports, {
   MOONSHOT_OAUTH_KEY: () => MOONSHOT_OAUTH_KEY,
   NotLoggedInError: () => NotLoggedInError,
   TelegramBot: () => TelegramBot,
+  XIAOMI_CREDITS_KEY: () => XIAOMI_CREDITS_KEY,
   closeLogger: () => closeLogger,
   createAutoUpdater: () => createAutoUpdater,
   decodeOggOpus: () => decodeOggOpus,
   downmixToMono: () => downmixToMono,
   generatePKCE: () => generatePKCE,
   getAppPaths: () => getAppPaths,
+  getAuthStorageKey: () => getAuthStorageKey,
+  getAuthStorageKeys: () => getAuthStorageKeys,
   getClaudeCliUserAgent: () => getClaudeCliUserAgent,
   getClaudeCodeVersion: () => getClaudeCodeVersion,
   getContextWindow: () => getContextWindow,
@@ -79,457 +82,9 @@ __export(index_exports, {
 });
 module.exports = __toCommonJS(index_exports);
 
-// src/model-registry.ts
-var MODELS = [
-  // ── Anthropic ──────────────────────────────────────────
-  // NOTE: Claude Fable 5 (`claude-fable-5`) and Claude Mythos 5
-  // (`claude-mythos-5`) are temporarily unavailable, so they're commented out
-  // here to keep them out of the /model selector and avoid user confusion.
-  // Re-enable once they're generally available again.
-  // {
-  //   id: "claude-fable-5",
-  //   name: "Claude Fable 5",
-  //   provider: "anthropic",
-  //   contextWindow: 1_000_000,
-  //   maxOutputTokens: 128_000,
-  //   supportsThinking: true,
-  //   supportsImages: true,
-  //   supportsVideo: false,
-  //   costTier: "high",
-  //   maxThinkingLevel: "max",
-  // },
-  // {
-  //   // Mythos-class model offered through Project Glasswing (limited
-  //   // availability, invitation-only). Same underlying model as Fable 5 with
-  //   // some safeguards lifted; kept here so approved accounts can select it.
-  //   id: "claude-mythos-5",
-  //   name: "Claude Mythos 5",
-  //   provider: "anthropic",
-  //   contextWindow: 1_000_000,
-  //   maxOutputTokens: 128_000,
-  //   supportsThinking: true,
-  //   supportsImages: true,
-  //   supportsVideo: false,
-  //   costTier: "high",
-  //   maxThinkingLevel: "max",
-  // },
-  {
-    id: "claude-opus-4-8",
-    name: "Claude Opus 4.8",
-    provider: "anthropic",
-    contextWindow: 1e6,
-    maxOutputTokens: 128e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "high",
-    maxThinkingLevel: "max"
-  },
-  {
-    id: "claude-sonnet-4-6",
-    name: "Claude Sonnet 4.6",
-    provider: "anthropic",
-    contextWindow: 1e6,
-    maxOutputTokens: 64e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "medium",
-    maxThinkingLevel: "max"
-  },
-  {
-    id: "claude-haiku-4-5-20251001",
-    name: "Claude Haiku 4.5",
-    provider: "anthropic",
-    contextWindow: 2e5,
-    maxOutputTokens: 64e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "low",
-    maxThinkingLevel: "high"
-  },
-  // ── OpenAI (Codex) ─────────────────────────────────────
-  {
-    id: "gpt-5.5",
-    name: "GPT-5.5",
-    provider: "openai",
-    contextWindow: 105e4,
-    codexContextWindow: 272e3,
-    maxOutputTokens: 128e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "high",
-    maxThinkingLevel: "xhigh"
-  },
-  {
-    id: "gpt-5.4",
-    name: "GPT-5.4",
-    provider: "openai",
-    contextWindow: 105e4,
-    codexContextWindow: 272e3,
-    maxOutputTokens: 128e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "high",
-    maxThinkingLevel: "xhigh"
-  },
-  {
-    id: "gpt-5.4-mini",
-    name: "GPT-5.4 Mini",
-    provider: "openai",
-    contextWindow: 4e5,
-    maxOutputTokens: 128e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "low",
-    maxThinkingLevel: "xhigh"
-  },
-  {
-    id: "gpt-5.3-codex",
-    name: "GPT-5.3 Codex",
-    provider: "openai",
-    contextWindow: 4e5,
-    maxOutputTokens: 128e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "high",
-    maxThinkingLevel: "xhigh"
-  },
-  // ── Sakana (Fugu) ──────────────────────────────────────
-  // Sakana Fugu is a multi-agent system surfaced as a standard LLM via the
-  // OpenAI-compatible Sakana API (https://api.sakana.ai/v1). Both models take
-  // text + image input and only accept "high"/"xhigh" reasoning effort, so the
-  // top tier is `xhigh`. `fugu` routes across all providers; `fugu-ultra` is
-  // the heavier tier (may need larger client timeouts on complex tasks).
-  {
-    id: "fugu",
-    name: "Fugu",
-    provider: "sakana",
-    contextWindow: 1e6,
-    maxOutputTokens: 128e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "medium",
-    maxThinkingLevel: "xhigh"
-  },
-  {
-    id: "fugu-ultra",
-    name: "Fugu Ultra",
-    provider: "sakana",
-    contextWindow: 1e6,
-    maxOutputTokens: 128e3,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: false,
-    costTier: "high",
-    maxThinkingLevel: "xhigh"
-  },
-  // ── Gemini ─────────────────────────────────────────────
-  {
-    id: "gemini-3.1-flash-lite-preview",
-    name: "Gemini 3.1 Flash Lite Preview",
-    provider: "gemini",
-    contextWindow: 1048576,
-    maxOutputTokens: 65536,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: true,
-    maxVideoBytes: 20 * 1024 * 1024,
-    costTier: "low",
-    maxThinkingLevel: "high"
-  },
-  {
-    id: "gemini-3.5-flash",
-    name: "Gemini 3.5 Flash",
-    provider: "gemini",
-    contextWindow: 1048576,
-    maxOutputTokens: 65536,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: true,
-    maxVideoBytes: 20 * 1024 * 1024,
-    costTier: "low",
-    maxThinkingLevel: "high"
-  },
-  // ── Moonshot (Kimi) ────────────────────────────────────
-  {
-    id: "kimi-k2.7-code",
-    name: "Kimi K2.7",
-    provider: "moonshot",
-    contextWindow: 262144,
-    maxOutputTokens: 262144,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: true,
-    maxVideoBytes: 100 * 1024 * 1024,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  },
-  // ── Z.AI (GLM) ─────────────────────────────────────────
-  // GLM-5.2: coding-first flagship with a usable 1M-token context window
-  // (5x jump over GLM-5.1's ~200K) and 131K max output. Released 2026-06-13.
-  {
-    id: "glm-5.2",
-    name: "GLM-5.2",
-    provider: "glm",
-    contextWindow: 1e6,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  },
-  {
-    id: "glm-5.1",
-    name: "GLM-5.1",
-    provider: "glm",
-    contextWindow: 204800,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  },
-  {
-    id: "glm-4.7",
-    name: "GLM-4.7",
-    provider: "glm",
-    contextWindow: 2e5,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "low",
-    maxThinkingLevel: "high"
-  },
-  {
-    id: "glm-4.7-flash",
-    name: "GLM-4.7 Flash",
-    provider: "glm",
-    contextWindow: 2e5,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "low",
-    maxThinkingLevel: "high"
-  },
-  // ── MiniMax ────────────────────────────────────────────
-  {
-    id: "MiniMax-M3",
-    name: "MiniMax M3",
-    provider: "minimax",
-    contextWindow: 1e6,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: true,
-    maxVideoBytes: 50 * 1024 * 1024,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  },
-  // ── Xiaomi (MiMo) ──────────────────────────────────────
-  // Pro series: text-only coding/agentic flagship. The legacy mimo-v2-pro
-  // auto-routes to v2.5 on 2026-06-01 and is fully deprecated by 2026-06-30.
-  {
-    id: "mimo-v2.5-pro",
-    name: "MiMo-V2.5-Pro",
-    provider: "xiaomi",
-    contextWindow: 1e6,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  },
-  // UltraSpeed: latency-optimized Pro variant (beta). Same text-only coding
-  // profile as mimo-v2.5-pro, tuned for faster time-to-first-token.
-  {
-    id: "mimo-v2.5-pro-ultraspeed",
-    name: "MiMo-V2.5-Pro UltraSpeed",
-    provider: "xiaomi",
-    contextWindow: 1e6,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  },
-  // Omni series: native full-modal understanding (image + audio + video).
-  // Video/image ride the OpenAI-compatible transport as base64 data URLs
-  // (`video_url`/`image_url`), which the shared transform already emits.
-  {
-    id: "mimo-v2.5",
-    name: "MiMo-V2.5",
-    provider: "xiaomi",
-    contextWindow: 1e6,
-    maxOutputTokens: 131072,
-    supportsThinking: true,
-    supportsImages: true,
-    supportsVideo: true,
-    maxVideoBytes: 36 * 1024 * 1024,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  },
-  // ── DeepSeek ───────────────────────────────────────────
-  {
-    id: "deepseek-v4-pro",
-    name: "DeepSeek V4 Pro",
-    provider: "deepseek",
-    contextWindow: 1048576,
-    maxOutputTokens: 384e3,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "high",
-    // DeepSeek V4 maps `xhigh` → its internal `max` tier.
-    maxThinkingLevel: "xhigh"
-  },
-  {
-    id: "deepseek-v4-flash",
-    name: "DeepSeek V4 Flash",
-    provider: "deepseek",
-    contextWindow: 1048576,
-    maxOutputTokens: 384e3,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "low",
-    maxThinkingLevel: "xhigh"
-  },
-  // ── OpenRouter ─────────────────────────────────────────
-  {
-    id: "qwen/qwen3.6-plus",
-    name: "Qwen3.6-Plus",
-    provider: "openrouter",
-    contextWindow: 1e6,
-    maxOutputTokens: 65536,
-    supportsThinking: true,
-    supportsImages: false,
-    supportsVideo: false,
-    costTier: "medium",
-    maxThinkingLevel: "high"
-  }
-];
-function getModel(id) {
-  return MODELS.find((m) => m.id === id);
-}
-function getModelsForProvider(provider) {
-  return MODELS.filter((m) => m.provider === provider);
-}
-var DEFAULT_MAX_VIDEO_BYTES = 20 * 1024 * 1024;
-function getVideoByteLimit(modelId) {
-  const model = getModel(modelId);
-  if (!model?.supportsVideo) return void 0;
-  return model.maxVideoBytes ?? DEFAULT_MAX_VIDEO_BYTES;
-}
-function getDefaultModel(provider) {
-  if (provider === "xiaomi") return MODELS.find((m) => m.id === "mimo-v2.5-pro");
-  if (provider === "openai") return MODELS.find((m) => m.id === "gpt-5.5");
-  if (provider === "gemini") return MODELS.find((m) => m.id === "gemini-3.1-flash-lite-preview");
-  if (provider === "glm") return MODELS.find((m) => m.id === "glm-5.2");
-  if (provider === "moonshot") return MODELS.find((m) => m.id === "kimi-k2.7-code");
-  if (provider === "minimax") return MODELS.find((m) => m.id === "MiniMax-M3");
-  if (provider === "deepseek") return MODELS.find((m) => m.id === "deepseek-v4-pro");
-  if (provider === "openrouter") return MODELS.find((m) => m.id === "qwen/qwen3.6-plus");
-  if (provider === "sakana") return MODELS.find((m) => m.id === "fugu");
-  return MODELS.find((m) => m.id === "claude-sonnet-4-6");
-}
-function usesOpenAICodexTransport(options) {
-  return options?.provider === "openai" && Boolean(options.accountId);
-}
-function getContextWindow(modelId, options) {
-  const model = getModel(modelId);
-  if (!model) return 2e5;
-  if (usesOpenAICodexTransport(options) && model.codexContextWindow) {
-    return model.codexContextWindow;
-  }
-  return model.contextWindow;
-}
-function getMaxThinkingLevel(modelId) {
-  return getModel(modelId)?.maxThinkingLevel ?? "high";
-}
-function getSummaryModel(provider, currentModelId) {
-  if (provider === "anthropic") {
-    return MODELS.find((m) => m.id === "claude-sonnet-4-6");
-  }
-  if (provider === "openai" || provider === "glm" || provider === "deepseek") {
-    const low = getModelsForProvider(provider).find((m) => m.costTier === "low");
-    if (low) return low;
-  }
-  return getModel(currentModelId) ?? getDefaultModel(provider);
-}
-
-// src/thinking-level.ts
-var OPENAI_GPT_THINKING_LEVELS = ["medium", "high", "xhigh"];
-var SAKANA_THINKING_LEVELS = ["high", "xhigh"];
-var ANTHROPIC_OPUS_48_47_THINKING_LEVELS = [
-  "low",
-  "medium",
-  "high",
-  "xhigh",
-  "max"
-];
-var ANTHROPIC_ADAPTIVE_THINKING_LEVELS = [
-  "low",
-  "medium",
-  "high",
-  "max"
-];
-function isOpenAIGptModel(provider, model) {
-  return provider === "openai" && model.startsWith("gpt-");
-}
-function isSakanaModel(provider) {
-  return provider === "sakana";
-}
-function isAnthropicOpus48Or47Model(provider, model) {
-  return provider === "anthropic" && /opus-4-8|opus-4-7/.test(model);
-}
-function isAnthropicAdaptiveModel(provider, model) {
-  return provider === "anthropic" && /opus-4-8|opus-4-7|opus-4-6|sonnet-4-6|fable-5|mythos-5/.test(model);
-}
-function getSupportedThinkingLevels(provider, model) {
-  const maxLevel = getMaxThinkingLevel(model);
-  if (isAnthropicAdaptiveModel(provider, model)) {
-    const levels = isAnthropicOpus48Or47Model(provider, model) ? ANTHROPIC_OPUS_48_47_THINKING_LEVELS : ANTHROPIC_ADAPTIVE_THINKING_LEVELS;
-    const maxIndex2 = levels.indexOf(maxLevel);
-    if (maxIndex2 === -1) return ["low", "medium", "high"];
-    return levels.slice(0, maxIndex2 + 1);
-  }
-  if (isSakanaModel(provider)) {
-    const maxIndex2 = SAKANA_THINKING_LEVELS.indexOf(maxLevel);
-    if (maxIndex2 === -1) return SAKANA_THINKING_LEVELS;
-    return SAKANA_THINKING_LEVELS.slice(0, maxIndex2 + 1);
-  }
-  if (!isOpenAIGptModel(provider, model)) return [maxLevel];
-  const maxIndex = OPENAI_GPT_THINKING_LEVELS.indexOf(maxLevel);
-  if (maxIndex === -1) return ["medium"];
-  return OPENAI_GPT_THINKING_LEVELS.slice(0, maxIndex + 1);
-}
-function isThinkingLevelSupported(provider, model, level) {
-  return getSupportedThinkingLevels(provider, model).includes(level);
-}
-function getNextThinkingLevel(provider, model, current) {
-  const supportedLevels = getSupportedThinkingLevels(provider, model);
-  const shouldCycleLevels = isOpenAIGptModel(provider, model) || isAnthropicAdaptiveModel(provider, model) || isSakanaModel(provider);
-  if (!shouldCycleLevels) {
-    return current ? void 0 : supportedLevels[0];
-  }
-  if (!current) return supportedLevels[0];
-  const index = supportedLevels.indexOf(current);
-  if (index === -1) return supportedLevels[0];
-  return supportedLevels[index + 1];
-}
+// src/auth-storage.ts
+var import_promises4 = __toESM(require("fs/promises"), 1);
+var import_node_crypto6 = __toESM(require("crypto"), 1);
 
 // src/paths.ts
 var import_node_path = __toESM(require("path"), 1);
@@ -552,6 +107,31 @@ function getAppPaths() {
   };
 }
 
+// src/oauth/anthropic.ts
+var import_node_crypto2 = __toESM(require("crypto"), 1);
+
+// src/oauth/pkce.ts
+function base64urlEncode(bytes) {
+  let binary = "";
+  for (const byte of bytes) {
+    binary += String.fromCharCode(byte);
+  }
+  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
+}
+async function generatePKCE() {
+  const verifierBytes = new Uint8Array(32);
+  crypto.getRandomValues(verifierBytes);
+  const verifier = base64urlEncode(verifierBytes);
+  const data = new TextEncoder().encode(verifier);
+  const hashBuffer = await crypto.subtle.digest("SHA-256", data);
+  const challenge = base64urlEncode(new Uint8Array(hashBuffer));
+  return { verifier, challenge };
+}
+
+// src/claude-code-version.ts
+var import_promises = __toESM(require("fs/promises"), 1);
+var import_node_path3 = __toESM(require("path"), 1);
+
 // src/logger.ts
 var import_node_fs = __toESM(require("fs"), 1);
 var import_node_path2 = __toESM(require("path"), 1);
@@ -609,91 +189,27 @@ function log(level, category, message, data) {
     if (pairs) line += ` ${pairs}`;
   }
   line += "\n";
-  try {
-    import_node_fs.default.writeSync(fd, line);
-  } catch {
-  }
-}
-function registerLogCleanup(fn) {
-  cleanups.push(fn);
-}
-function closeLogger(opts) {
-  if (fd === null) return;
-  if (opts?.shutdownLine !== false) log("INFO", "shutdown", `${appName} shutting down`);
-  try {
-    import_node_fs.default.closeSync(fd);
-  } catch {
-  }
-  fd = null;
-  for (const unsub of cleanups) unsub();
-  cleanups = [];
-}
-
-// src/file-lock.ts
-var import_promises = __toESM(require("fs/promises"), 1);
-var import_promises2 = require("timers/promises");
-var STALE_TIMEOUT_MS = 1e4;
-var RETRY_INTERVAL_MS = 50;
-var MAX_WAIT_MS = 5e3;
-async function withFileLock(filePath, fn) {
-  const lockPath = filePath + ".lock";
-  await acquireLock(lockPath);
-  try {
-    return await fn();
-  } finally {
-    await releaseLock(lockPath);
-  }
-}
-async function acquireLock(lockPath) {
-  const startTime = Date.now();
-  while (true) {
-    try {
-      const info = { pid: process.pid, timestamp: Date.now() };
-      await import_promises.default.writeFile(lockPath, JSON.stringify(info), { flag: "wx" });
-      return;
-    } catch (err) {
-      if (err.code !== "EEXIST") throw err;
-      try {
-        const content = await import_promises.default.readFile(lockPath, "utf-8");
-        const info = JSON.parse(content);
-        const isProcessAlive = isAlive(info.pid);
-        const isStale = Date.now() - info.timestamp > STALE_TIMEOUT_MS;
-        if (!isProcessAlive || isStale) {
-          await import_promises.default.unlink(lockPath).catch(() => {
-          });
-          continue;
-        }
-      } catch {
-        await import_promises.default.unlink(lockPath).catch(() => {
-        });
-        continue;
-      }
-      if (Date.now() - startTime > MAX_WAIT_MS) {
-        await import_promises.default.unlink(lockPath).catch(() => {
-        });
-        continue;
-      }
-      await (0, import_promises2.setTimeout)(RETRY_INTERVAL_MS);
-    }
+  try {
+    import_node_fs.default.writeSync(fd, line);
+  } catch {
   }
 }
-async function releaseLock(lockPath) {
-  await import_promises.default.unlink(lockPath).catch(() => {
-  });
+function registerLogCleanup(fn) {
+  cleanups.push(fn);
 }
-function isAlive(pid) {
+function closeLogger(opts) {
+  if (fd === null) return;
+  if (opts?.shutdownLine !== false) log("INFO", "shutdown", `${appName} shutting down`);
   try {
-    process.kill(pid, 0);
-    return true;
-  } catch (err) {
-    if (err.code === "EPERM") return true;
-    return false;
+    import_node_fs.default.closeSync(fd);
+  } catch {
   }
+  fd = null;
+  for (const unsub of cleanups) unsub();
+  cleanups = [];
 }
 
 // src/claude-code-version.ts
-var import_promises3 = __toESM(require("fs/promises"), 1);
-var import_node_path3 = __toESM(require("path"), 1);
 var NPM_LATEST_URL = "https://registry.npmjs.org/@anthropic-ai/claude-code/latest";
 var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
 var FETCH_TIMEOUT_MS = 3e3;
@@ -705,7 +221,7 @@ function cachePath() {
 }
 async function readDiskCache() {
   try {
-    const raw = await import_promises3.default.readFile(cachePath(), "utf-8");
+    const raw = await import_promises.default.readFile(cachePath(), "utf-8");
     const parsed = JSON.parse(raw);
     if (typeof parsed.version === "string" && typeof parsed.fetchedAt === "number") {
       return parsed;
@@ -717,8 +233,8 @@ async function readDiskCache() {
 }
 async function writeDiskCache(data) {
   try {
-    await import_promises3.default.mkdir(getAppPaths().agentDir, { recursive: true, mode: 448 });
-    await import_promises3.default.writeFile(cachePath(), JSON.stringify(data), { mode: 384 });
+    await import_promises.default.mkdir(getAppPaths().agentDir, { recursive: true, mode: 448 });
+    await import_promises.default.writeFile(cachePath(), JSON.stringify(data), { mode: 384 });
   } catch (err) {
     log(
       "WARN",
@@ -782,31 +298,6 @@ async function getClaudeCliUserAgent() {
   return `claude-cli/${version} (external, cli)`;
 }
 
-// src/auth-storage.ts
-var import_promises4 = __toESM(require("fs/promises"), 1);
-var import_node_crypto6 = __toESM(require("crypto"), 1);
-
-// src/oauth/anthropic.ts
-var import_node_crypto2 = __toESM(require("crypto"), 1);
-
-// src/oauth/pkce.ts
-function base64urlEncode(bytes) {
-  let binary = "";
-  for (const byte of bytes) {
-    binary += String.fromCharCode(byte);
-  }
-  return btoa(binary).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "");
-}
-async function generatePKCE() {
-  const verifierBytes = new Uint8Array(32);
-  crypto.getRandomValues(verifierBytes);
-  const verifier = base64urlEncode(verifierBytes);
-  const data = new TextEncoder().encode(verifier);
-  const hashBuffer = await crypto.subtle.digest("SHA-256", data);
-  const challenge = base64urlEncode(new Uint8Array(hashBuffer));
-  return { verifier, challenge };
-}
-
 // src/oauth/anthropic.ts
 var CLIENT_ID = atob("OWQxYzI1MGEtZTYxYi00NGQ5LTg4ZWQtNTk0NGQxOTYyZjVl");
 var AUTHORIZE_URL = "https://claude.ai/oauth/authorize";
@@ -1657,8 +1148,71 @@ async function refreshKimiToken(refreshToken) {
   throw new Error(`Kimi token refresh failed (${status}): ${errorCode || errorDetail(data)}`);
 }
 
+// src/file-lock.ts
+var import_promises2 = __toESM(require("fs/promises"), 1);
+var import_promises3 = require("timers/promises");
+var STALE_TIMEOUT_MS = 1e4;
+var RETRY_INTERVAL_MS = 50;
+var MAX_WAIT_MS = 5e3;
+async function withFileLock(filePath, fn) {
+  const lockPath = filePath + ".lock";
+  await acquireLock(lockPath);
+  try {
+    return await fn();
+  } finally {
+    await releaseLock(lockPath);
+  }
+}
+async function acquireLock(lockPath) {
+  const startTime = Date.now();
+  while (true) {
+    try {
+      const info = { pid: process.pid, timestamp: Date.now() };
+      await import_promises2.default.writeFile(lockPath, JSON.stringify(info), { flag: "wx" });
+      return;
+    } catch (err) {
+      if (err.code !== "EEXIST") throw err;
+      try {
+        const content = await import_promises2.default.readFile(lockPath, "utf-8");
+        const info = JSON.parse(content);
+        const isProcessAlive = isAlive(info.pid);
+        const isStale = Date.now() - info.timestamp > STALE_TIMEOUT_MS;
+        if (!isProcessAlive || isStale) {
+          await import_promises2.default.unlink(lockPath).catch(() => {
+          });
+          continue;
+        }
+      } catch {
+        await import_promises2.default.unlink(lockPath).catch(() => {
+        });
+        continue;
+      }
+      if (Date.now() - startTime > MAX_WAIT_MS) {
+        await import_promises2.default.unlink(lockPath).catch(() => {
+        });
+        continue;
+      }
+      await (0, import_promises3.setTimeout)(RETRY_INTERVAL_MS);
+    }
+  }
+}
+async function releaseLock(lockPath) {
+  await import_promises2.default.unlink(lockPath).catch(() => {
+  });
+}
+function isAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err) {
+    if (err.code === "EPERM") return true;
+    return false;
+  }
+}
+
 // src/auth-storage.ts
 var MOONSHOT_OAUTH_KEY = "moonshot-oauth";
+var XIAOMI_CREDITS_KEY = "xiaomi-credits";
 var REFRESH_SKEW_MS = 6e4;
 var STATIC_API_KEY_PROVIDERS = /* @__PURE__ */ new Set([
   "glm",
@@ -1692,6 +1246,17 @@ var AuthStorage = class {
     await this.ensureLoaded();
     return Boolean(this.data[provider]);
   }
+  /**
+   * First key in `keys` (in order) that has stored credentials, or `undefined`
+   * if none do. Mirrors the first-match logic `resolveCredentials({ storageKeys })`
+   * uses internally — callers that need to know WHICH credential will actually
+   * be used (e.g. to clear the right one after a 401) call this directly
+   * instead of re-deriving the same order.
+   */
+  async pickStorageKey(keys) {
+    await this.ensureLoaded();
+    return keys.find((key) => Boolean(this.data[key]));
+  }
   /**
    * True if the user has any usable auth for the logical provider. For
    * `moonshot` this is satisfied by either the Kimi OAuth credential or the
@@ -1702,6 +1267,9 @@ var AuthStorage = class {
     if (provider === "moonshot") {
       return Boolean(this.data[MOONSHOT_OAUTH_KEY] || this.data["moonshot"]);
     }
+    if (provider === "xiaomi") {
+      return Boolean(this.data["xiaomi"] || this.data[XIAOMI_CREDITS_KEY]);
+    }
     return Boolean(this.data[provider]);
   }
   /**
@@ -1744,6 +1312,17 @@ var AuthStorage = class {
   async ensureLoaded() {
     if (!this.loaded) await this.load();
   }
+  /**
+   * Force a re-read from disk, discarding the in-memory cache. Needed when
+   * another process mutates the auth file out-of-band — e.g. the desktop app
+   * writes API keys natively (Rust → ~/.ezcoder/auth.json) without going through
+   * this instance, so a long-lived daemon's cache would otherwise stay stale and
+   * never see a newly added provider key.
+   */
+  async reload() {
+    this.loaded = false;
+    await this.load();
+  }
   async getCredentials(provider) {
     await this.ensureLoaded();
     return this.data[provider];
@@ -1758,123 +1337,593 @@ var AuthStorage = class {
     delete this.data[provider];
     await this.save();
   }
-  async clearAll() {
-    this.data = {};
-    await this.save();
+  async clearAll() {
+    this.data = {};
+    await this.save();
+  }
+  /**
+   * Returns valid credentials, auto-refreshing if expired.
+   * If `forceRefresh` is true, refreshes even if the token hasn't expired
+   * (useful when the provider rejects a token with 401 before its stored expiry).
+   * Throws if not logged in.
+   */
+  async resolveCredentials(provider, opts) {
+    await this.ensureLoaded();
+    if (opts?.storageKeys && !(opts.storageKeys.length === 1 && opts.storageKeys[0] === provider)) {
+      for (const key of opts.storageKeys) {
+        const creds2 = this.data[key];
+        if (creds2) return creds2;
+      }
+      throw new NotLoggedInError(provider);
+    }
+    if (provider === "moonshot" && this.data[MOONSHOT_OAUTH_KEY]) {
+      try {
+        return await this.resolveCredentials(MOONSHOT_OAUTH_KEY, opts);
+      } catch (err) {
+        if (err instanceof NotLoggedInError && this.data["moonshot"]) {
+          log(
+            "WARN",
+            "auth",
+            'Kimi OAuth credential is no longer valid \u2014 falling back to the Moonshot API key. Run "ezcoder login" and choose Kimi OAuth to restore OAuth auth.'
+          );
+          return this.data["moonshot"];
+        }
+        throw err;
+      }
+    }
+    const creds = this.data[provider];
+    if (!creds) {
+      throw new NotLoggedInError(provider);
+    }
+    if (STATIC_API_KEY_PROVIDERS.has(provider)) {
+      return creds;
+    }
+    if (!opts?.forceRefresh && Date.now() < creds.expiresAt - REFRESH_SKEW_MS) {
+      return creds;
+    }
+    const existing = this.refreshLocks.get(provider);
+    if (existing) return existing;
+    const refreshPromise = withFileLock(this.filePath, async () => {
+      try {
+        const content = await import_promises4.default.readFile(this.filePath, "utf-8");
+        const freshData = JSON.parse(content);
+        const freshCreds = freshData[provider];
+        if (freshCreds && !opts?.forceRefresh && Date.now() < freshCreds.expiresAt - REFRESH_SKEW_MS) {
+          this.data[provider] = freshCreds;
+          return freshCreds;
+        }
+      } catch {
+      }
+      const refreshFn = provider === "anthropic" ? refreshAnthropicToken : provider === "gemini" ? refreshGeminiToken : provider === MOONSHOT_OAUTH_KEY ? refreshKimiToken : refreshOpenAIToken;
+      let refreshed;
+      try {
+        refreshed = await refreshFn(creds.refreshToken);
+      } catch (err) {
+        const msg = err instanceof Error ? err.message : String(err);
+        const isAuthFailure = /\((401|400)\)/.test(msg) || /invalid_grant|invalid_token|invalid.*refresh/i.test(msg) || /unauthorized/i.test(msg);
+        if (isAuthFailure) {
+          delete this.data[provider];
+          await atomicWriteFile(this.filePath, JSON.stringify(this.data, null, 2));
+          throw new NotLoggedInError(provider);
+        }
+        throw err;
+      }
+      if (!refreshed.accountId && creds.accountId) {
+        refreshed.accountId = creds.accountId;
+      }
+      if (!refreshed.projectId && creds.projectId) {
+        refreshed.projectId = creds.projectId;
+      }
+      if (!refreshed.baseUrl && creds.baseUrl) {
+        refreshed.baseUrl = creds.baseUrl;
+      }
+      this.data[provider] = refreshed;
+      await atomicWriteFile(this.filePath, JSON.stringify(this.data, null, 2));
+      return refreshed;
+    });
+    this.refreshLocks.set(provider, refreshPromise);
+    try {
+      return await refreshPromise;
+    } finally {
+      this.refreshLocks.delete(provider);
+    }
+  }
+  /**
+   * Returns a valid access token, auto-refreshing if expired.
+   * Throws if not logged in.
+   */
+  async resolveToken(provider) {
+    const creds = await this.resolveCredentials(provider);
+    return creds.accessToken;
+  }
+  async save() {
+    await withFileLock(this.filePath, async () => {
+      await atomicWriteFile(this.filePath, JSON.stringify(this.data, null, 2));
+    });
+  }
+};
+async function atomicWriteFile(filePath, content) {
+  const tmpPath = `${filePath}.${process.pid}.${Date.now()}.${import_node_crypto6.default.randomUUID().slice(0, 8)}.tmp`;
+  try {
+    await import_promises4.default.writeFile(tmpPath, content, { encoding: "utf-8", mode: 384 });
+    await import_promises4.default.rename(tmpPath, filePath);
+  } catch (err) {
+    await import_promises4.default.unlink(tmpPath).catch(() => {
+    });
+    throw err;
+  }
+}
+var NotLoggedInError = class extends Error {
+  provider;
+  constructor(provider) {
+    super(`Not logged in to ${provider}. Run "ezcoder login" to authenticate.`);
+    this.name = "NotLoggedInError";
+    this.provider = provider;
+  }
+};
+
+// src/model-registry.ts
+var MODELS = [
+  // ── Anthropic ──────────────────────────────────────────
+  // NOTE: Claude Mythos 5 (`claude-mythos-5`) is kept commented out — it's a
+  // Project Glasswing (limited, invitation-only) model unavailable to most
+  // users. Re-enable once it's generally available.
+  {
+    id: "claude-fable-5",
+    name: "Claude Fable 5",
+    provider: "anthropic",
+    contextWindow: 1e6,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "high",
+    maxThinkingLevel: "max"
+  },
+  // {
+  //   // Mythos-class model offered through Project Glasswing (limited
+  //   // availability, invitation-only). Same underlying model as Fable 5 with
+  //   // some safeguards lifted; kept here so approved accounts can select it.
+  //   id: "claude-mythos-5",
+  //   name: "Claude Mythos 5",
+  //   provider: "anthropic",
+  //   contextWindow: 1_000_000,
+  //   maxOutputTokens: 128_000,
+  //   supportsThinking: true,
+  //   supportsImages: true,
+  //   supportsVideo: false,
+  //   costTier: "high",
+  //   maxThinkingLevel: "max",
+  // },
+  {
+    id: "claude-opus-4-8",
+    name: "Claude Opus 4.8",
+    provider: "anthropic",
+    contextWindow: 1e6,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "high",
+    maxThinkingLevel: "max"
+  },
+  {
+    id: "claude-sonnet-5",
+    name: "Claude Sonnet 5",
+    provider: "anthropic",
+    contextWindow: 1e6,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "max"
+  },
+  {
+    id: "claude-haiku-4-5-20251001",
+    name: "Claude Haiku 4.5",
+    provider: "anthropic",
+    contextWindow: 2e5,
+    maxOutputTokens: 64e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "low",
+    maxThinkingLevel: "high"
+  },
+  // ── OpenAI (Codex) ─────────────────────────────────────
+  {
+    id: "gpt-5.5",
+    name: "GPT-5.5",
+    provider: "openai",
+    contextWindow: 105e4,
+    codexContextWindow: 272e3,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "high",
+    maxThinkingLevel: "xhigh"
+  },
+  {
+    id: "gpt-5.4",
+    name: "GPT-5.4",
+    provider: "openai",
+    contextWindow: 105e4,
+    codexContextWindow: 272e3,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "high",
+    maxThinkingLevel: "xhigh"
+  },
+  {
+    id: "gpt-5.4-mini",
+    name: "GPT-5.4 Mini",
+    provider: "openai",
+    contextWindow: 4e5,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "low",
+    maxThinkingLevel: "xhigh"
+  },
+  {
+    id: "gpt-5.3-codex",
+    name: "GPT-5.3 Codex",
+    provider: "openai",
+    contextWindow: 4e5,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "high",
+    maxThinkingLevel: "xhigh"
+  },
+  // ── Sakana (Fugu) ──────────────────────────────────────
+  // Sakana Fugu is a multi-agent system surfaced as a standard LLM via the
+  // OpenAI-compatible Sakana API (https://api.sakana.ai/v1). Both models take
+  // text + image input and only accept "high"/"xhigh" reasoning effort, so the
+  // top tier is `xhigh`. `fugu` routes across all providers; `fugu-ultra` is
+  // the heavier tier (may need larger client timeouts on complex tasks).
+  {
+    id: "fugu",
+    name: "Fugu",
+    provider: "sakana",
+    contextWindow: 1e6,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "xhigh"
+  },
+  {
+    id: "fugu-ultra",
+    name: "Fugu Ultra",
+    provider: "sakana",
+    contextWindow: 1e6,
+    maxOutputTokens: 128e3,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: false,
+    costTier: "high",
+    maxThinkingLevel: "xhigh"
+  },
+  // ── Gemini ─────────────────────────────────────────────
+  {
+    id: "gemini-3.1-flash-lite-preview",
+    name: "Gemini 3.1 Flash Lite Preview",
+    provider: "gemini",
+    contextWindow: 1048576,
+    maxOutputTokens: 65536,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: true,
+    maxVideoBytes: 20 * 1024 * 1024,
+    costTier: "low",
+    maxThinkingLevel: "high"
+  },
+  {
+    id: "gemini-3.5-flash",
+    name: "Gemini 3.5 Flash",
+    provider: "gemini",
+    contextWindow: 1048576,
+    maxOutputTokens: 65536,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: true,
+    maxVideoBytes: 20 * 1024 * 1024,
+    costTier: "low",
+    maxThinkingLevel: "high"
+  },
+  // ── Moonshot (Kimi) ────────────────────────────────────
+  {
+    id: "kimi-k2.7-code",
+    name: "Kimi K2.7",
+    provider: "moonshot",
+    contextWindow: 262144,
+    maxOutputTokens: 262144,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: true,
+    maxVideoBytes: 100 * 1024 * 1024,
+    costTier: "medium",
+    maxThinkingLevel: "high"
+  },
+  // ── Z.AI (GLM) ─────────────────────────────────────────
+  // GLM-5.2: coding-first flagship with a usable 1M-token context window
+  // (5x jump over GLM-5.1's ~200K) and 131K max output. Released 2026-06-13.
+  {
+    id: "glm-5.2",
+    name: "GLM-5.2",
+    provider: "glm",
+    contextWindow: 1e6,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "high"
+  },
+  {
+    id: "glm-5.1",
+    name: "GLM-5.1",
+    provider: "glm",
+    contextWindow: 204800,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "high"
+  },
+  {
+    id: "glm-4.7",
+    name: "GLM-4.7",
+    provider: "glm",
+    contextWindow: 2e5,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "low",
+    maxThinkingLevel: "high"
+  },
+  {
+    id: "glm-4.7-flash",
+    name: "GLM-4.7 Flash",
+    provider: "glm",
+    contextWindow: 2e5,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "low",
+    maxThinkingLevel: "high"
+  },
+  // ── MiniMax ────────────────────────────────────────────
+  {
+    id: "MiniMax-M3",
+    name: "MiniMax M3",
+    provider: "minimax",
+    contextWindow: 1e6,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: true,
+    maxVideoBytes: 50 * 1024 * 1024,
+    costTier: "medium",
+    maxThinkingLevel: "high"
+  },
+  // ── Xiaomi (MiMo) ──────────────────────────────────────
+  // Pro series: text-only coding/agentic flagship. The legacy mimo-v2-pro
+  // auto-routes to v2.5 on 2026-06-01 and is fully deprecated by 2026-06-30.
+  {
+    id: "mimo-v2.5-pro",
+    name: "MiMo-V2.5-Pro",
+    provider: "xiaomi",
+    contextWindow: 1e6,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "high",
+    authStorageKeys: ["xiaomi", XIAOMI_CREDITS_KEY]
+  },
+  // UltraSpeed: lower-latency sibling of the Pro coding flagship, same
+  // text-only capability surface, premium-priced for the throughput gain.
+  // API-only — not served over the Token Plan endpoint, so credentials
+  // resolve from the distinct API Credits key only (see authStorageKeys doc).
+  {
+    id: "mimo-v2.5-pro-ultraspeed",
+    name: "MiMo-V2.5-Pro-UltraSpeed",
+    provider: "xiaomi",
+    contextWindow: 1e6,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "high",
+    maxThinkingLevel: "high",
+    authStorageKeys: [XIAOMI_CREDITS_KEY]
+  },
+  // Omni series: native full-modal understanding (image + audio + video).
+  // Video/image ride the OpenAI-compatible transport as base64 data URLs
+  // (`video_url`/`image_url`), which the shared transform already emits.
+  {
+    id: "mimo-v2.5",
+    name: "MiMo-V2.5",
+    provider: "xiaomi",
+    contextWindow: 1e6,
+    maxOutputTokens: 131072,
+    supportsThinking: true,
+    supportsImages: true,
+    supportsVideo: true,
+    maxVideoBytes: 36 * 1024 * 1024,
+    costTier: "medium",
+    maxThinkingLevel: "high",
+    authStorageKeys: ["xiaomi", XIAOMI_CREDITS_KEY]
+  },
+  // ── DeepSeek ───────────────────────────────────────────
+  {
+    id: "deepseek-v4-pro",
+    name: "DeepSeek V4 Pro",
+    provider: "deepseek",
+    contextWindow: 1048576,
+    maxOutputTokens: 384e3,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "high",
+    // DeepSeek V4 maps `xhigh` → its internal `max` tier.
+    maxThinkingLevel: "xhigh"
+  },
+  {
+    id: "deepseek-v4-flash",
+    name: "DeepSeek V4 Flash",
+    provider: "deepseek",
+    contextWindow: 1048576,
+    maxOutputTokens: 384e3,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "low",
+    maxThinkingLevel: "xhigh"
+  },
+  // ── OpenRouter ─────────────────────────────────────────
+  {
+    id: "qwen/qwen3.6-plus",
+    name: "Qwen3.6-Plus",
+    provider: "openrouter",
+    contextWindow: 1e6,
+    maxOutputTokens: 65536,
+    supportsThinking: true,
+    supportsImages: false,
+    supportsVideo: false,
+    costTier: "medium",
+    maxThinkingLevel: "high"
+  }
+];
+function getModel(id) {
+  return MODELS.find((m) => m.id === id);
+}
+function getModelsForProvider(provider) {
+  return MODELS.filter((m) => m.provider === provider);
+}
+function getAuthStorageKeys(provider, modelId) {
+  const model = MODELS.find((m) => m.id === modelId && m.provider === provider);
+  return model?.authStorageKeys ?? [provider];
+}
+function getAuthStorageKey(provider, modelId) {
+  return getAuthStorageKeys(provider, modelId)[0];
+}
+var DEFAULT_MAX_VIDEO_BYTES = 20 * 1024 * 1024;
+function getVideoByteLimit(modelId) {
+  const model = getModel(modelId);
+  if (!model?.supportsVideo) return void 0;
+  return model.maxVideoBytes ?? DEFAULT_MAX_VIDEO_BYTES;
+}
+function getDefaultModel(provider) {
+  if (provider === "xiaomi") return MODELS.find((m) => m.id === "mimo-v2.5-pro");
+  if (provider === "openai") return MODELS.find((m) => m.id === "gpt-5.5");
+  if (provider === "gemini") return MODELS.find((m) => m.id === "gemini-3.1-flash-lite-preview");
+  if (provider === "glm") return MODELS.find((m) => m.id === "glm-5.2");
+  if (provider === "moonshot") return MODELS.find((m) => m.id === "kimi-k2.7-code");
+  if (provider === "minimax") return MODELS.find((m) => m.id === "MiniMax-M3");
+  if (provider === "deepseek") return MODELS.find((m) => m.id === "deepseek-v4-pro");
+  if (provider === "openrouter") return MODELS.find((m) => m.id === "qwen/qwen3.6-plus");
+  if (provider === "sakana") return MODELS.find((m) => m.id === "fugu");
+  return MODELS.find((m) => m.id === "claude-sonnet-5");
+}
+function usesOpenAICodexTransport(options) {
+  return options?.provider === "openai" && Boolean(options.accountId);
+}
+function getContextWindow(modelId, options) {
+  const model = getModel(modelId);
+  if (!model) return 2e5;
+  if (usesOpenAICodexTransport(options) && model.codexContextWindow) {
+    return model.codexContextWindow;
   }
-  /**
-   * Returns valid credentials, auto-refreshing if expired.
-   * If `forceRefresh` is true, refreshes even if the token hasn't expired
-   * (useful when the provider rejects a token with 401 before its stored expiry).
-   * Throws if not logged in.
-   */
-  async resolveCredentials(provider, opts) {
-    await this.ensureLoaded();
-    if (provider === "moonshot" && this.data[MOONSHOT_OAUTH_KEY]) {
-      try {
-        return await this.resolveCredentials(MOONSHOT_OAUTH_KEY, opts);
-      } catch (err) {
-        if (err instanceof NotLoggedInError && this.data["moonshot"]) {
-          log(
-            "WARN",
-            "auth",
-            'Kimi OAuth credential is no longer valid \u2014 falling back to the Moonshot API key. Run "ezcoder login" and choose Kimi OAuth to restore OAuth auth.'
-          );
-          return this.data["moonshot"];
-        }
-        throw err;
-      }
-    }
-    const creds = this.data[provider];
-    if (!creds) {
-      throw new NotLoggedInError(provider);
-    }
-    if (STATIC_API_KEY_PROVIDERS.has(provider)) {
-      return creds;
-    }
-    if (!opts?.forceRefresh && Date.now() < creds.expiresAt - REFRESH_SKEW_MS) {
-      return creds;
-    }
-    const existing = this.refreshLocks.get(provider);
-    if (existing) return existing;
-    const refreshPromise = withFileLock(this.filePath, async () => {
-      try {
-        const content = await import_promises4.default.readFile(this.filePath, "utf-8");
-        const freshData = JSON.parse(content);
-        const freshCreds = freshData[provider];
-        if (freshCreds && !opts?.forceRefresh && Date.now() < freshCreds.expiresAt - REFRESH_SKEW_MS) {
-          this.data[provider] = freshCreds;
-          return freshCreds;
-        }
-      } catch {
-      }
-      const refreshFn = provider === "anthropic" ? refreshAnthropicToken : provider === "gemini" ? refreshGeminiToken : provider === MOONSHOT_OAUTH_KEY ? refreshKimiToken : refreshOpenAIToken;
-      let refreshed;
-      try {
-        refreshed = await refreshFn(creds.refreshToken);
-      } catch (err) {
-        const msg = err instanceof Error ? err.message : String(err);
-        const isAuthFailure = /\((401|400)\)/.test(msg) || /invalid_grant|invalid_token|invalid.*refresh/i.test(msg) || /unauthorized/i.test(msg);
-        if (isAuthFailure) {
-          delete this.data[provider];
-          await atomicWriteFile(this.filePath, JSON.stringify(this.data, null, 2));
-          throw new NotLoggedInError(provider);
-        }
-        throw err;
-      }
-      if (!refreshed.accountId && creds.accountId) {
-        refreshed.accountId = creds.accountId;
-      }
-      if (!refreshed.projectId && creds.projectId) {
-        refreshed.projectId = creds.projectId;
-      }
-      if (!refreshed.baseUrl && creds.baseUrl) {
-        refreshed.baseUrl = creds.baseUrl;
-      }
-      this.data[provider] = refreshed;
-      await atomicWriteFile(this.filePath, JSON.stringify(this.data, null, 2));
-      return refreshed;
-    });
-    this.refreshLocks.set(provider, refreshPromise);
-    try {
-      return await refreshPromise;
-    } finally {
-      this.refreshLocks.delete(provider);
-    }
+  return model.contextWindow;
+}
+function getMaxThinkingLevel(modelId) {
+  return getModel(modelId)?.maxThinkingLevel ?? "high";
+}
+function getSummaryModel(provider, currentModelId) {
+  if (provider === "anthropic") {
+    return MODELS.find((m) => m.id === "claude-sonnet-5");
   }
-  /**
-   * Returns a valid access token, auto-refreshing if expired.
-   * Throws if not logged in.
-   */
-  async resolveToken(provider) {
-    const creds = await this.resolveCredentials(provider);
-    return creds.accessToken;
+  if (provider === "openai" || provider === "glm" || provider === "deepseek") {
+    const low = getModelsForProvider(provider).find((m) => m.costTier === "low");
+    if (low) return low;
   }
-  async save() {
-    await withFileLock(this.filePath, async () => {
-      await atomicWriteFile(this.filePath, JSON.stringify(this.data, null, 2));
-    });
+  return getModel(currentModelId) ?? getDefaultModel(provider);
+}
+
+// src/thinking-level.ts
+var OPENAI_GPT_THINKING_LEVELS = ["medium", "high", "xhigh"];
+var SAKANA_THINKING_LEVELS = ["high", "xhigh"];
+var ANTHROPIC_OPUS_48_47_THINKING_LEVELS = [
+  "low",
+  "medium",
+  "high",
+  "xhigh",
+  "max"
+];
+var ANTHROPIC_ADAPTIVE_THINKING_LEVELS = [
+  "low",
+  "medium",
+  "high",
+  "max"
+];
+function isOpenAIGptModel(provider, model) {
+  return provider === "openai" && model.startsWith("gpt-");
+}
+function isSakanaModel(provider) {
+  return provider === "sakana";
+}
+function isAnthropicOpus48Or47Model(provider, model) {
+  return provider === "anthropic" && /opus-4-8|opus-4-7/.test(model);
+}
+function isAnthropicAdaptiveModel(provider, model) {
+  return provider === "anthropic" && /opus-4-8|opus-4-7|opus-4-6|sonnet-5|fable-5|mythos-5/.test(model);
+}
+function getSupportedThinkingLevels(provider, model) {
+  const maxLevel = getMaxThinkingLevel(model);
+  if (isAnthropicAdaptiveModel(provider, model)) {
+    const levels = isAnthropicOpus48Or47Model(provider, model) ? ANTHROPIC_OPUS_48_47_THINKING_LEVELS : ANTHROPIC_ADAPTIVE_THINKING_LEVELS;
+    const maxIndex2 = levels.indexOf(maxLevel);
+    if (maxIndex2 === -1) return ["low", "medium", "high"];
+    return levels.slice(0, maxIndex2 + 1);
   }
-};
-async function atomicWriteFile(filePath, content) {
-  const tmpPath = `${filePath}.${process.pid}.${Date.now()}.${import_node_crypto6.default.randomUUID().slice(0, 8)}.tmp`;
-  try {
-    await import_promises4.default.writeFile(tmpPath, content, { encoding: "utf-8", mode: 384 });
-    await import_promises4.default.rename(tmpPath, filePath);
-  } catch (err) {
-    await import_promises4.default.unlink(tmpPath).catch(() => {
-    });
-    throw err;
+  if (isSakanaModel(provider)) {
+    const maxIndex2 = SAKANA_THINKING_LEVELS.indexOf(maxLevel);
+    if (maxIndex2 === -1) return SAKANA_THINKING_LEVELS;
+    return SAKANA_THINKING_LEVELS.slice(0, maxIndex2 + 1);
   }
+  if (!isOpenAIGptModel(provider, model)) return [maxLevel];
+  const maxIndex = OPENAI_GPT_THINKING_LEVELS.indexOf(maxLevel);
+  if (maxIndex === -1) return ["medium"];
+  return OPENAI_GPT_THINKING_LEVELS.slice(0, maxIndex + 1);
 }
-var NotLoggedInError = class extends Error {
-  provider;
-  constructor(provider) {
-    super(`Not logged in to ${provider}. Run "ezcoder login" to authenticate.`);
-    this.name = "NotLoggedInError";
-    this.provider = provider;
+function isThinkingLevelSupported(provider, model, level) {
+  return getSupportedThinkingLevels(provider, model).includes(level);
+}
+function getNextThinkingLevel(provider, model, current) {
+  const supportedLevels = getSupportedThinkingLevels(provider, model);
+  const shouldCycleLevels = isOpenAIGptModel(provider, model) || isAnthropicAdaptiveModel(provider, model) || isSakanaModel(provider);
+  if (!shouldCycleLevels) {
+    return current ? void 0 : supportedLevels[0];
   }
-};
+  if (!current) return supportedLevels[0];
+  const index = supportedLevels.indexOf(current);
+  if (index === -1) return supportedLevels[0];
+  return supportedLevels[index + 1];
+}
 
 // src/telegram.ts
 var TELEGRAM_API = "https://api.telegram.org";
@@ -2359,12 +2408,15 @@ function createAutoUpdater(config) {
   MOONSHOT_OAUTH_KEY,
   NotLoggedInError,
   TelegramBot,
+  XIAOMI_CREDITS_KEY,
   closeLogger,
   createAutoUpdater,
   decodeOggOpus,
   downmixToMono,
   generatePKCE,
   getAppPaths,
+  getAuthStorageKey,
+  getAuthStorageKeys,
   getClaudeCliUserAgent,
   getClaudeCodeVersion,
   getContextWindow,