@serviceme/devtools-shared 0.4.11 → 0.4.13

package/dist/index.d.mts

@@ -40,7 +40,7 @@
  * pre-fill baseUrl / displayName / default model list without
  * requiring the user to look up endpoint docs.
  */
-type ProviderType = "openai-compatible" | "anthropic-compatible" | "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "vscode-builtin";
+type ProviderType = "openai-compatible" | "anthropic-compatible" | "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova" | "vscode-builtin";
 /**
  * Curated metadata for named, well-known models. Used as a
  * **fallback** when a `ProviderModel` entry omits one of the
@@ -770,7 +770,7 @@ interface PresetModelFamilyGroup {
     entries: readonly PresetModelListing[];
 }
 declare function listPresetModelGroups(): readonly PresetModelFamilyGroup[];
-declare const BUILTIN_PROVIDER_PRESETS: Readonly<Record<"minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft", {
+declare const BUILTIN_PROVIDER_PRESETS: Readonly<Record<"minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova", {
     displayName: string;
     baseUrl: string;
     models: ProviderModel[];

package/dist/index.d.ts

@@ -40,7 +40,7 @@
  * pre-fill baseUrl / displayName / default model list without
  * requiring the user to look up endpoint docs.
  */
-type ProviderType = "openai-compatible" | "anthropic-compatible" | "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "vscode-builtin";
+type ProviderType = "openai-compatible" | "anthropic-compatible" | "minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova" | "vscode-builtin";
 /**
  * Curated metadata for named, well-known models. Used as a
  * **fallback** when a `ProviderModel` entry omits one of the
@@ -770,7 +770,7 @@ interface PresetModelFamilyGroup {
     entries: readonly PresetModelListing[];
 }
 declare function listPresetModelGroups(): readonly PresetModelFamilyGroup[];
-declare const BUILTIN_PROVIDER_PRESETS: Readonly<Record<"minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft", {
+declare const BUILTIN_PROVIDER_PRESETS: Readonly<Record<"minimax" | "deepseek" | "kimi" | "zhipu" | "stepfun" | "siliconflow" | "openrouter" | "novita" | "agnes" | "medalsoft" | "sensenova", {
     displayName: string;
     baseUrl: string;
     models: ProviderModel[];

package/dist/index.js

@@ -183,6 +183,13 @@ var PROVIDER_BASE_URL_PRESETS = {
     { label: "\u5185\u7F51", baseUrl: MEDALSOFT_PRIVATE_GATEWAY_URL },
     { label: "\u5916\u7F51", baseUrl: "https://nexus.servicemecloud.com/v1" }
   ],
+  // SenseNova (SenseTime) — single OpenAI-compatible token-plan
+  // gateway (https://platform.sensenova.cn/docs). Also exposes an
+  // Anthropic-compatible endpoint at the bare host
+  // `https://token.sensenova.cn` (SDK appends /v1/messages), but the
+  // named `sensenova` type routes through OpenAIAdapter, so only the
+  // OpenAI-compat `/v1` base is offered here.
+  sensenova: [{ label: "\u5B98\u65B9", baseUrl: "https://token.sensenova.cn/v1" }],
   "vscode-builtin": []
 };
 function getProviderBaseUrlPresets(type) {
@@ -227,6 +234,11 @@ var PROVIDER_CACHE_CONTROL_METADATA = {
   // Flip to `supportsCacheControl: true` once the gateway is verified
   // to honour stable prompt caching.
   medalsoft: {},
+  // SenseNova (SenseTime) token-plan gateway — the /v1/models payload
+  // publishes an `input_cache_read` pricing field (all-zero today), so
+  // the upstream is cache-aware in principle, but there is no
+  // documented prompt-cache key contract. Off until verified.
+  sensenova: {},
   "vscode-builtin": {}
 };
 function isProviderCacheControlAware(type) {
@@ -283,6 +295,29 @@ var PRIMARY_METADATA = {
     maxInputTokens: 131072,
     maxOutputTokens: 73728
   },
+  "sensenova-6.8-flash-lite": {
+    detail: "SenseNova 6.8 Flash-Lite \u2014 \u8F7B\u91CF\u591A\u6A21\u6001\u667A\u80FD\u4F53\u6A21\u578B\uFF0C\u652F\u6301\u56FE\u50CF\u7406\u89E3 / \u5DE5\u5177\u8C03\u7528\uFF08262K \u4E0A\u4E0B\u6587\uFF0Ctoken-plan \u9650\u9891\uFF09",
+    imageInput: true,
+    toolCalling: true,
+    // Per https://platform.sensenova.cn/docs (fetched 2026-08-25): the
+    // /v1/models listing publishes all-zero pricing (token-plan free
+    // tier, quota-limited per 5h window rather than per-token billed).
+    // Both currency blocks pin 0 so the picker shows a free model
+    // instead of an invented rate; when SenseNova publishes per-token
+    // pricing, update both blocks here.
+    pricingUSD: { input: 0, output: 0, cacheRead: 0 },
+    pricingCNY: { input: 0, output: 0, cacheRead: 0 },
+    priceCategory: "low",
+    // Docs advertise `reasoning_effort` ("low"/"medium"/"high"/"none",
+    // default "medium") and list "reasoning" in supported_features —
+    // a leveled effort scale, so the picker gets the 3-level dropdown
+    // and the OpenAI adapter gates the wire field.
+    thinkingSchema: "reasoningEffort",
+    supportsReasoningEffort: true,
+    // Per /v1/models: context_length 262144, max_output_length 65536.
+    maxInputTokens: 262144,
+    maxOutputTokens: 65536
+  },
   "deepseek-v4-flash": {
     detail: "Fast, general-purpose model",
     imageInput: true,
@@ -1117,7 +1152,11 @@ function currencyForBaseUrl(baseUrl) {
     // MODEL_METADATA pins the PEAK tier for these entries
     // (conservative worst-case; see the deepseek-v4-flash
     // comment).
-    hostname === "api.deepseek.com") {
+    hostname === "api.deepseek.com" || // SenseNova (SenseTime) token-plan gateway — CN-domiciled,
+    // quota-billed (all-zero published pricing, so the currency is
+    // cosmetic today, but pinning it keeps a future per-token ¥ table
+    // from silently rendering as USD).
+    hostname === "token.sensenova.cn") {
       return "CNY";
     }
     if (hostname === "api.minimax.io" || hostname === "api.minimaxi.io" || hostname === "api.siliconflow.cn" || hostname === "api.siliconflow.com" || hostname === "api.stepfun.com" || hostname === "openrouter.ai" || hostname === "api.novita.ai" || // Z.ai / Zhipu international. Billed in USD per the
@@ -1205,6 +1244,7 @@ var PRESET_MODEL_FAMILIES = [
   "StepFun",
   "MiniMax",
   "Agnes",
+  "SenseNova",
   "Qwen",
   "SiliconFlow (aggregator)",
   "Novita (aggregator)",
@@ -1219,6 +1259,7 @@ function vendorFamilyForId(id) {
   if (id.startsWith("step-")) return "StepFun";
   if (id.startsWith("MiniMax-")) return "MiniMax";
   if (id.startsWith("agnes-")) return "Agnes";
+  if (id.startsWith("sensenova-")) return "SenseNova";
   if (id.startsWith("Qwen")) return "Qwen";
   if (id.startsWith("openrouter/")) return "OpenRouter (aggregator)";
   return "Other";
@@ -1272,8 +1313,16 @@ var BUILTIN_PROVIDER_PRESETS = {
     // (otherwise the user's added model never shows up in the
     // Copilot Chat picker).
     models: [
-      buildPresetModel("MiniMax-M3", "MiniMax-M3", "https://api.minimaxi.com/anthropic"),
-      buildPresetModel("MiniMax-M2.7", "MiniMax-M2.7", "https://api.minimaxi.com/anthropic"),
+      buildPresetModel(
+        "MiniMax-M3",
+        "MiniMax-M3",
+        "https://api.minimaxi.com/anthropic"
+      ),
+      buildPresetModel(
+        "MiniMax-M2.7",
+        "MiniMax-M2.7",
+        "https://api.minimaxi.com/anthropic"
+      ),
       buildPresetModel(
         "MiniMax-M2.7-highspeed",
         "MiniMax-M2.7-highspeed",
@@ -1283,7 +1332,11 @@ var BUILTIN_PROVIDER_PRESETS = {
       // predecessor of M2.7. Still in the catalog and often
       // available on MiniMax's promotional $0.30/$1.20 rate, so
       // keep it as a preset for users on the M2.5 plan tier.
-      buildPresetModel("MiniMax-M2.5", "MiniMax-M2.5", "https://api.minimaxi.com/anthropic")
+      buildPresetModel(
+        "MiniMax-M2.5",
+        "MiniMax-M2.5",
+        "https://api.minimaxi.com/anthropic"
+      )
     ]
   },
   deepseek: {
@@ -1305,8 +1358,16 @@ var BUILTIN_PROVIDER_PRESETS = {
     // the recommended default — users still on V3 can override
     // these defaults in the ProvidersTab form.
     models: [
-      buildPresetModel("deepseek-v4-flash", "DeepSeek V4 Flash", "https://api.deepseek.com/v1"),
-      buildPresetModel("deepseek-v4-pro", "DeepSeek V4 Pro", "https://api.deepseek.com/v1")
+      buildPresetModel(
+        "deepseek-v4-flash",
+        "DeepSeek V4 Flash",
+        "https://api.deepseek.com/v1"
+      ),
+      buildPresetModel(
+        "deepseek-v4-pro",
+        "DeepSeek V4 Pro",
+        "https://api.deepseek.com/v1"
+      )
     ]
   },
   agnes: {
@@ -1320,14 +1381,26 @@ var BUILTIN_PROVIDER_PRESETS = {
     // benchmark-listed alpha — followed by the flash tier
     // newest-first.
     models: [
-      buildPresetModel("agnes-2.5-pro", "Agnes 2.5 Pro", "https://apihub.agnes-ai.com/v1"),
+      buildPresetModel(
+        "agnes-2.5-pro",
+        "Agnes 2.5 Pro",
+        "https://apihub.agnes-ai.com/v1"
+      ),
       buildPresetModel(
         "agnes-2.5-pro-alpha",
         "Agnes 2.5 Pro Alpha",
         "https://apihub.agnes-ai.com/v1"
       ),
-      buildPresetModel("agnes-2.5-flash", "Agnes 2.5 Flash", "https://apihub.agnes-ai.com/v1"),
-      buildPresetModel("agnes-2.0-flash", "Agnes 2.0 Flash", "https://apihub.agnes-ai.com/v1")
+      buildPresetModel(
+        "agnes-2.5-flash",
+        "Agnes 2.5 Flash",
+        "https://apihub.agnes-ai.com/v1"
+      ),
+      buildPresetModel(
+        "agnes-2.0-flash",
+        "Agnes 2.0 Flash",
+        "https://apihub.agnes-ai.com/v1"
+      )
     ]
   },
   kimi: {
@@ -1335,7 +1408,11 @@ var BUILTIN_PROVIDER_PRESETS = {
     baseUrl: "https://api.moonshot.cn/v1",
     models: [
       buildPresetModel("kimi-k3", "Kimi K3", "https://api.moonshot.cn/v1"),
-      buildPresetModel("kimi-k2.7-code", "Kimi K2.7 Code", "https://api.moonshot.cn/v1"),
+      buildPresetModel(
+        "kimi-k2.7-code",
+        "Kimi K2.7 Code",
+        "https://api.moonshot.cn/v1"
+      ),
       buildPresetModel(
         "kimi-k2.7-code-highspeed",
         "Kimi K2.7 Code HighSpeed",
@@ -1413,23 +1490,67 @@ var BUILTIN_PROVIDER_PRESETS = {
     // `MODEL_METADATA` entries are kept so the id is still
     // resolvable for the curated detail / pricing columns.
     models: [
-      buildPresetModel("glm-5.3", "GLM-5.3", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5.2", "GLM-5.2", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5.1", "GLM-5.1", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5", "GLM-5", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5-turbo", "GLM-5 Turbo", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.7", "GLM-4.7", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.6", "GLM-4.6", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.5-air", "GLM-4.5 Air", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.5", "GLM-4.5", "https://open.bigmodel.cn/api/paas/v4")
+      buildPresetModel(
+        "glm-5.3",
+        "GLM-5.3",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5.2",
+        "GLM-5.2",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5.1",
+        "GLM-5.1",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5",
+        "GLM-5",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5-turbo",
+        "GLM-5 Turbo",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.7",
+        "GLM-4.7",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.6",
+        "GLM-4.6",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.5-air",
+        "GLM-4.5 Air",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.5",
+        "GLM-4.5",
+        "https://open.bigmodel.cn/api/paas/v4"
+      )
     ]
   },
   stepfun: {
     displayName: "StepFun",
     baseUrl: "https://api.stepfun.com/v1",
     models: [
-      buildPresetModel("step-3.7-flash", "Step 3.7 Flash", "https://api.stepfun.com/v1"),
-      buildPresetModel("step-3.5-flash", "Step 3.5 Flash", "https://api.stepfun.com/v1"),
+      buildPresetModel(
+        "step-3.7-flash",
+        "Step 3.7 Flash",
+        "https://api.stepfun.com/v1"
+      ),
+      buildPresetModel(
+        "step-3.5-flash",
+        "Step 3.5 Flash",
+        "https://api.stepfun.com/v1"
+      ),
       buildPresetModel(
         "step-1o-turbo-vision",
         "Step 1o Turbo Vision",
@@ -1482,7 +1603,11 @@ var BUILTIN_PROVIDER_PRESETS = {
     displayName: "OpenRouter",
     baseUrl: "https://openrouter.ai/api/v1",
     models: [
-      buildPresetModel("openrouter/auto", "OpenRouter Auto", "https://openrouter.ai/api/v1")
+      buildPresetModel(
+        "openrouter/auto",
+        "OpenRouter Auto",
+        "https://openrouter.ai/api/v1"
+      )
     ]
   },
   novita: {
@@ -1506,8 +1631,16 @@ var BUILTIN_PROVIDER_PRESETS = {
         "https://api.novita.ai/openai/v1"
       ),
       // GLM-5 系列 (2026-04/06)
-      buildPresetModel("zai/glm-5.2", "GLM-5.2 (via Novita)", "https://api.novita.ai/openai/v1"),
-      buildPresetModel("zai/glm-5.1", "GLM-5.1 (via Novita)", "https://api.novita.ai/openai/v1"),
+      buildPresetModel(
+        "zai/glm-5.2",
+        "GLM-5.2 (via Novita)",
+        "https://api.novita.ai/openai/v1"
+      ),
+      buildPresetModel(
+        "zai/glm-5.1",
+        "GLM-5.1 (via Novita)",
+        "https://api.novita.ai/openai/v1"
+      ),
       // Kimi K3 (2026-07-16 API, 2026-07-27 开源) — 1M context, 2.8T MoE
       buildPresetModel(
         "moonshotai/kimi-k3",
@@ -1532,6 +1665,64 @@ var BUILTIN_PROVIDER_PRESETS = {
     // token caps) still resolves via `MODEL_METADATA` after the fetch.
     baseUrl: "https://nexus.servicemecloud.com/v1",
     models: []
+  },
+  sensenova: {
+    displayName: "SenseNova",
+    // SenseTime's SenseNova OpenAI-compatible gateway (see
+    // https://platform.sensenova.cn/docs — `POST /v1/chat/completions`,
+    // `Authorization: Bearer`, `GET /v1/models`). Token-plan quota per
+    // model (e.g. 1500 req / 5h for flash-lite) is enforced upstream.
+    //
+    // The starter list mirrors the live `GET /v1/models` response
+    // (fetched 2026-08-25 with a real key). The image-generation
+    // models (sensenova-u1.5-lite / sensenova-u1-fast) live on
+    // /v1/images/* endpoints and are explicitly documented as NOT
+    // usable as chat Model IDs, so they are not curated here.
+    // `sensenova-6.7-flash-lite` is likewise excluded — the docs
+    // state it is a compat alias whose calls auto-redirect to
+    // `sensenova-6.8-flash-lite` (through 2026-08-31).
+    //
+    // The relayed deepseek-v4-flash / glm-5.2 rows reuse their
+    // MODEL_METADATA entries (keyed on the un-qualified id) and then
+    // OVERRIDE the gateway-published specifics below: SenseNova
+    // serves them with a 1M context window and TEXT-ONLY input
+    // (per the live /v1/models payload), which differs from the
+    // vendor-official curated values (655K input / vision on).
+    // The global MODEL_METADATA stays vendor-official; only this
+    // preset carries the gateway-specific caps so other providers
+    // (DeepSeek official / Zhipu) are unaffected.
+    baseUrl: "https://token.sensenova.cn/v1",
+    models: [
+      buildPresetModel(
+        "sensenova-6.8-flash-lite",
+        "SenseNova 6.8 Flash-Lite",
+        "https://token.sensenova.cn/v1"
+      ),
+      {
+        // Live /v1/models: context_length 1048576,
+        // max_output_length 65536, input_modalities ["text"] only.
+        ...buildPresetModel(
+          "deepseek-v4-flash",
+          "DeepSeek V4 Flash (via SenseNova)",
+          "https://token.sensenova.cn/v1"
+        ),
+        maxInputTokens: 1048576,
+        maxOutputTokens: 65536,
+        capabilities: { supportsImageToText: false, supportsToolCalling: true }
+      },
+      {
+        // Live /v1/models: context_length 1048576,
+        // max_output_length 131072, input_modalities ["text"] only.
+        ...buildPresetModel(
+          "glm-5.2",
+          "GLM-5.2 (via SenseNova)",
+          "https://token.sensenova.cn/v1"
+        ),
+        maxInputTokens: 1048576,
+        maxOutputTokens: 131072,
+        capabilities: { supportsImageToText: false, supportsToolCalling: true }
+      }
+    ]
   }
 };
 var PRESET_MODEL_DISPLAY_NAMES = (() => {
@@ -1577,6 +1768,7 @@ function getBuiltinProviderPreset(type) {
     case "openrouter":
     case "novita":
     case "medalsoft":
+    case "sensenova":
       return BUILTIN_PROVIDER_PRESETS[type];
     default:
       return null;
@@ -1619,8 +1811,115 @@ var CERTIFICATE_BUNDLE_FORMATS = [
   }
 ];
 
+// ../../node_modules/.pnpm/js-sha256@1.0.0/node_modules/js-sha256/src/node.mjs
+var import_crypto = require("crypto");
+
+// ../../node_modules/.pnpm/js-sha256@1.0.0/node_modules/js-sha256/src/shared.mjs
+var INPUT_ERROR = "input is invalid type";
+var FINALIZE_ERROR = "finalize already called";
+var ARRAY_BUFFER = typeof ArrayBuffer !== "undefined";
+var formatMessage = function(message) {
+  var type = typeof message;
+  if (type === "string") {
+    return [message, true];
+  }
+  if (Array.isArray(message)) {
+    return [message, false];
+  }
+  if (ARRAY_BUFFER && message) {
+    if (message.constructor === ArrayBuffer) {
+      return [new Uint8Array(message), false];
+    } else if (ArrayBuffer.isView(message)) {
+      return [message, false];
+    }
+  }
+  throw new Error(INPUT_ERROR);
+};
+
+// ../../node_modules/.pnpm/js-sha256@1.0.0/node_modules/js-sha256/src/node.mjs
+function toNodeInput(message) {
+  const [msg, isString] = formatMessage(message);
+  return isString ? Buffer.from(msg, "utf8") : Buffer.from(msg);
+}
+var NodeHasher = class {
+  constructor(hash) {
+    this.hash = hash;
+    this.result = void 0;
+  }
+  update(message) {
+    if (this.result) {
+      throw new Error(FINALIZE_ERROR);
+    }
+    this.hash.update(toNodeInput(message));
+    return this;
+  }
+  finalize() {
+    if (!this.result) {
+      this.result = this.hash.digest();
+      this.hash = void 0;
+    }
+  }
+  hex() {
+    this.finalize();
+    return this.result.toString("hex");
+  }
+  toString() {
+    return this.hex();
+  }
+  array() {
+    this.finalize();
+    return Array.from(this.result);
+  }
+  digest() {
+    return this.array();
+  }
+  arrayBuffer() {
+    return Uint8Array.from(this.array()).buffer;
+  }
+};
+function addOutputMethods(method, createHasher) {
+  method.hex = method;
+  method.array = function(...args) {
+    return createHasher(...args.slice(0, -1)).update(args[args.length - 1]).array();
+  };
+  method.digest = method.array;
+  method.arrayBuffer = function(...args) {
+    return createHasher(...args.slice(0, -1)).update(args[args.length - 1]).arrayBuffer();
+  };
+  return method;
+}
+function createNodeMethod(algorithm) {
+  const createHasher = () => new NodeHasher((0, import_crypto.createHash)(algorithm));
+  const method = function(message) {
+    return createHasher().update(message).hex();
+  };
+  addOutputMethods(method, createHasher);
+  method.create = createHasher;
+  method.update = function(message) {
+    return method.create().update(message);
+  };
+  return method;
+}
+function createNodeHmacMethod(algorithm) {
+  const createHasher = (key) => new NodeHasher((0, import_crypto.createHmac)(algorithm, toNodeInput(key)));
+  const method = function(key, message) {
+    return createHasher(key).update(message).hex();
+  };
+  addOutputMethods(method, createHasher);
+  method.create = createHasher;
+  method.update = function(key, message) {
+    return method.create(key).update(message);
+  };
+  return method;
+}
+var sha256 = createNodeMethod("sha256");
+var sha224 = createNodeMethod("sha224");
+sha256.sha256 = sha256;
+sha256.sha224 = sha224;
+sha256.hmac = createNodeHmacMethod("sha256");
+sha224.hmac = createNodeHmacMethod("sha224");
+
 // src/device-auth.ts
-var import_js_sha256 = require("js-sha256");
 var DeviceAuthHeaders = {
   deviceId: "x-ms-device-id",
   deviceSecret: "x-ms-device-secret",
@@ -1636,7 +1935,7 @@ function createDeviceRequestSignature(params) {
     params.body,
     params.secret
   ].join("\n");
-  return (0, import_js_sha256.sha256)(basis);
+  return sha256(basis);
 }
 
 // src/git-utils.ts

package/dist/index.mjs

@@ -104,6 +104,13 @@ var PROVIDER_BASE_URL_PRESETS = {
     { label: "\u5185\u7F51", baseUrl: MEDALSOFT_PRIVATE_GATEWAY_URL },
     { label: "\u5916\u7F51", baseUrl: "https://nexus.servicemecloud.com/v1" }
   ],
+  // SenseNova (SenseTime) — single OpenAI-compatible token-plan
+  // gateway (https://platform.sensenova.cn/docs). Also exposes an
+  // Anthropic-compatible endpoint at the bare host
+  // `https://token.sensenova.cn` (SDK appends /v1/messages), but the
+  // named `sensenova` type routes through OpenAIAdapter, so only the
+  // OpenAI-compat `/v1` base is offered here.
+  sensenova: [{ label: "\u5B98\u65B9", baseUrl: "https://token.sensenova.cn/v1" }],
   "vscode-builtin": []
 };
 function getProviderBaseUrlPresets(type) {
@@ -148,6 +155,11 @@ var PROVIDER_CACHE_CONTROL_METADATA = {
   // Flip to `supportsCacheControl: true` once the gateway is verified
   // to honour stable prompt caching.
   medalsoft: {},
+  // SenseNova (SenseTime) token-plan gateway — the /v1/models payload
+  // publishes an `input_cache_read` pricing field (all-zero today), so
+  // the upstream is cache-aware in principle, but there is no
+  // documented prompt-cache key contract. Off until verified.
+  sensenova: {},
   "vscode-builtin": {}
 };
 function isProviderCacheControlAware(type) {
@@ -204,6 +216,29 @@ var PRIMARY_METADATA = {
     maxInputTokens: 131072,
     maxOutputTokens: 73728
   },
+  "sensenova-6.8-flash-lite": {
+    detail: "SenseNova 6.8 Flash-Lite \u2014 \u8F7B\u91CF\u591A\u6A21\u6001\u667A\u80FD\u4F53\u6A21\u578B\uFF0C\u652F\u6301\u56FE\u50CF\u7406\u89E3 / \u5DE5\u5177\u8C03\u7528\uFF08262K \u4E0A\u4E0B\u6587\uFF0Ctoken-plan \u9650\u9891\uFF09",
+    imageInput: true,
+    toolCalling: true,
+    // Per https://platform.sensenova.cn/docs (fetched 2026-08-25): the
+    // /v1/models listing publishes all-zero pricing (token-plan free
+    // tier, quota-limited per 5h window rather than per-token billed).
+    // Both currency blocks pin 0 so the picker shows a free model
+    // instead of an invented rate; when SenseNova publishes per-token
+    // pricing, update both blocks here.
+    pricingUSD: { input: 0, output: 0, cacheRead: 0 },
+    pricingCNY: { input: 0, output: 0, cacheRead: 0 },
+    priceCategory: "low",
+    // Docs advertise `reasoning_effort` ("low"/"medium"/"high"/"none",
+    // default "medium") and list "reasoning" in supported_features —
+    // a leveled effort scale, so the picker gets the 3-level dropdown
+    // and the OpenAI adapter gates the wire field.
+    thinkingSchema: "reasoningEffort",
+    supportsReasoningEffort: true,
+    // Per /v1/models: context_length 262144, max_output_length 65536.
+    maxInputTokens: 262144,
+    maxOutputTokens: 65536
+  },
   "deepseek-v4-flash": {
     detail: "Fast, general-purpose model",
     imageInput: true,
@@ -1038,7 +1073,11 @@ function currencyForBaseUrl(baseUrl) {
     // MODEL_METADATA pins the PEAK tier for these entries
     // (conservative worst-case; see the deepseek-v4-flash
     // comment).
-    hostname === "api.deepseek.com") {
+    hostname === "api.deepseek.com" || // SenseNova (SenseTime) token-plan gateway — CN-domiciled,
+    // quota-billed (all-zero published pricing, so the currency is
+    // cosmetic today, but pinning it keeps a future per-token ¥ table
+    // from silently rendering as USD).
+    hostname === "token.sensenova.cn") {
       return "CNY";
     }
     if (hostname === "api.minimax.io" || hostname === "api.minimaxi.io" || hostname === "api.siliconflow.cn" || hostname === "api.siliconflow.com" || hostname === "api.stepfun.com" || hostname === "openrouter.ai" || hostname === "api.novita.ai" || // Z.ai / Zhipu international. Billed in USD per the
@@ -1126,6 +1165,7 @@ var PRESET_MODEL_FAMILIES = [
   "StepFun",
   "MiniMax",
   "Agnes",
+  "SenseNova",
   "Qwen",
   "SiliconFlow (aggregator)",
   "Novita (aggregator)",
@@ -1140,6 +1180,7 @@ function vendorFamilyForId(id) {
   if (id.startsWith("step-")) return "StepFun";
   if (id.startsWith("MiniMax-")) return "MiniMax";
   if (id.startsWith("agnes-")) return "Agnes";
+  if (id.startsWith("sensenova-")) return "SenseNova";
   if (id.startsWith("Qwen")) return "Qwen";
   if (id.startsWith("openrouter/")) return "OpenRouter (aggregator)";
   return "Other";
@@ -1193,8 +1234,16 @@ var BUILTIN_PROVIDER_PRESETS = {
     // (otherwise the user's added model never shows up in the
     // Copilot Chat picker).
     models: [
-      buildPresetModel("MiniMax-M3", "MiniMax-M3", "https://api.minimaxi.com/anthropic"),
-      buildPresetModel("MiniMax-M2.7", "MiniMax-M2.7", "https://api.minimaxi.com/anthropic"),
+      buildPresetModel(
+        "MiniMax-M3",
+        "MiniMax-M3",
+        "https://api.minimaxi.com/anthropic"
+      ),
+      buildPresetModel(
+        "MiniMax-M2.7",
+        "MiniMax-M2.7",
+        "https://api.minimaxi.com/anthropic"
+      ),
       buildPresetModel(
         "MiniMax-M2.7-highspeed",
         "MiniMax-M2.7-highspeed",
@@ -1204,7 +1253,11 @@ var BUILTIN_PROVIDER_PRESETS = {
       // predecessor of M2.7. Still in the catalog and often
       // available on MiniMax's promotional $0.30/$1.20 rate, so
       // keep it as a preset for users on the M2.5 plan tier.
-      buildPresetModel("MiniMax-M2.5", "MiniMax-M2.5", "https://api.minimaxi.com/anthropic")
+      buildPresetModel(
+        "MiniMax-M2.5",
+        "MiniMax-M2.5",
+        "https://api.minimaxi.com/anthropic"
+      )
     ]
   },
   deepseek: {
@@ -1226,8 +1279,16 @@ var BUILTIN_PROVIDER_PRESETS = {
     // the recommended default — users still on V3 can override
     // these defaults in the ProvidersTab form.
     models: [
-      buildPresetModel("deepseek-v4-flash", "DeepSeek V4 Flash", "https://api.deepseek.com/v1"),
-      buildPresetModel("deepseek-v4-pro", "DeepSeek V4 Pro", "https://api.deepseek.com/v1")
+      buildPresetModel(
+        "deepseek-v4-flash",
+        "DeepSeek V4 Flash",
+        "https://api.deepseek.com/v1"
+      ),
+      buildPresetModel(
+        "deepseek-v4-pro",
+        "DeepSeek V4 Pro",
+        "https://api.deepseek.com/v1"
+      )
     ]
   },
   agnes: {
@@ -1241,14 +1302,26 @@ var BUILTIN_PROVIDER_PRESETS = {
     // benchmark-listed alpha — followed by the flash tier
     // newest-first.
     models: [
-      buildPresetModel("agnes-2.5-pro", "Agnes 2.5 Pro", "https://apihub.agnes-ai.com/v1"),
+      buildPresetModel(
+        "agnes-2.5-pro",
+        "Agnes 2.5 Pro",
+        "https://apihub.agnes-ai.com/v1"
+      ),
       buildPresetModel(
         "agnes-2.5-pro-alpha",
         "Agnes 2.5 Pro Alpha",
         "https://apihub.agnes-ai.com/v1"
       ),
-      buildPresetModel("agnes-2.5-flash", "Agnes 2.5 Flash", "https://apihub.agnes-ai.com/v1"),
-      buildPresetModel("agnes-2.0-flash", "Agnes 2.0 Flash", "https://apihub.agnes-ai.com/v1")
+      buildPresetModel(
+        "agnes-2.5-flash",
+        "Agnes 2.5 Flash",
+        "https://apihub.agnes-ai.com/v1"
+      ),
+      buildPresetModel(
+        "agnes-2.0-flash",
+        "Agnes 2.0 Flash",
+        "https://apihub.agnes-ai.com/v1"
+      )
     ]
   },
   kimi: {
@@ -1256,7 +1329,11 @@ var BUILTIN_PROVIDER_PRESETS = {
     baseUrl: "https://api.moonshot.cn/v1",
     models: [
       buildPresetModel("kimi-k3", "Kimi K3", "https://api.moonshot.cn/v1"),
-      buildPresetModel("kimi-k2.7-code", "Kimi K2.7 Code", "https://api.moonshot.cn/v1"),
+      buildPresetModel(
+        "kimi-k2.7-code",
+        "Kimi K2.7 Code",
+        "https://api.moonshot.cn/v1"
+      ),
       buildPresetModel(
         "kimi-k2.7-code-highspeed",
         "Kimi K2.7 Code HighSpeed",
@@ -1334,23 +1411,67 @@ var BUILTIN_PROVIDER_PRESETS = {
     // `MODEL_METADATA` entries are kept so the id is still
     // resolvable for the curated detail / pricing columns.
     models: [
-      buildPresetModel("glm-5.3", "GLM-5.3", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5.2", "GLM-5.2", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5.1", "GLM-5.1", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5", "GLM-5", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-5-turbo", "GLM-5 Turbo", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.7", "GLM-4.7", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.6", "GLM-4.6", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.5-air", "GLM-4.5 Air", "https://open.bigmodel.cn/api/paas/v4"),
-      buildPresetModel("glm-4.5", "GLM-4.5", "https://open.bigmodel.cn/api/paas/v4")
+      buildPresetModel(
+        "glm-5.3",
+        "GLM-5.3",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5.2",
+        "GLM-5.2",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5.1",
+        "GLM-5.1",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5",
+        "GLM-5",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-5-turbo",
+        "GLM-5 Turbo",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.7",
+        "GLM-4.7",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.6",
+        "GLM-4.6",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.5-air",
+        "GLM-4.5 Air",
+        "https://open.bigmodel.cn/api/paas/v4"
+      ),
+      buildPresetModel(
+        "glm-4.5",
+        "GLM-4.5",
+        "https://open.bigmodel.cn/api/paas/v4"
+      )
     ]
   },
   stepfun: {
     displayName: "StepFun",
     baseUrl: "https://api.stepfun.com/v1",
     models: [
-      buildPresetModel("step-3.7-flash", "Step 3.7 Flash", "https://api.stepfun.com/v1"),
-      buildPresetModel("step-3.5-flash", "Step 3.5 Flash", "https://api.stepfun.com/v1"),
+      buildPresetModel(
+        "step-3.7-flash",
+        "Step 3.7 Flash",
+        "https://api.stepfun.com/v1"
+      ),
+      buildPresetModel(
+        "step-3.5-flash",
+        "Step 3.5 Flash",
+        "https://api.stepfun.com/v1"
+      ),
       buildPresetModel(
         "step-1o-turbo-vision",
         "Step 1o Turbo Vision",
@@ -1403,7 +1524,11 @@ var BUILTIN_PROVIDER_PRESETS = {
     displayName: "OpenRouter",
     baseUrl: "https://openrouter.ai/api/v1",
     models: [
-      buildPresetModel("openrouter/auto", "OpenRouter Auto", "https://openrouter.ai/api/v1")
+      buildPresetModel(
+        "openrouter/auto",
+        "OpenRouter Auto",
+        "https://openrouter.ai/api/v1"
+      )
     ]
   },
   novita: {
@@ -1427,8 +1552,16 @@ var BUILTIN_PROVIDER_PRESETS = {
         "https://api.novita.ai/openai/v1"
       ),
       // GLM-5 系列 (2026-04/06)
-      buildPresetModel("zai/glm-5.2", "GLM-5.2 (via Novita)", "https://api.novita.ai/openai/v1"),
-      buildPresetModel("zai/glm-5.1", "GLM-5.1 (via Novita)", "https://api.novita.ai/openai/v1"),
+      buildPresetModel(
+        "zai/glm-5.2",
+        "GLM-5.2 (via Novita)",
+        "https://api.novita.ai/openai/v1"
+      ),
+      buildPresetModel(
+        "zai/glm-5.1",
+        "GLM-5.1 (via Novita)",
+        "https://api.novita.ai/openai/v1"
+      ),
       // Kimi K3 (2026-07-16 API, 2026-07-27 开源) — 1M context, 2.8T MoE
       buildPresetModel(
         "moonshotai/kimi-k3",
@@ -1453,6 +1586,64 @@ var BUILTIN_PROVIDER_PRESETS = {
     // token caps) still resolves via `MODEL_METADATA` after the fetch.
     baseUrl: "https://nexus.servicemecloud.com/v1",
     models: []
+  },
+  sensenova: {
+    displayName: "SenseNova",
+    // SenseTime's SenseNova OpenAI-compatible gateway (see
+    // https://platform.sensenova.cn/docs — `POST /v1/chat/completions`,
+    // `Authorization: Bearer`, `GET /v1/models`). Token-plan quota per
+    // model (e.g. 1500 req / 5h for flash-lite) is enforced upstream.
+    //
+    // The starter list mirrors the live `GET /v1/models` response
+    // (fetched 2026-08-25 with a real key). The image-generation
+    // models (sensenova-u1.5-lite / sensenova-u1-fast) live on
+    // /v1/images/* endpoints and are explicitly documented as NOT
+    // usable as chat Model IDs, so they are not curated here.
+    // `sensenova-6.7-flash-lite` is likewise excluded — the docs
+    // state it is a compat alias whose calls auto-redirect to
+    // `sensenova-6.8-flash-lite` (through 2026-08-31).
+    //
+    // The relayed deepseek-v4-flash / glm-5.2 rows reuse their
+    // MODEL_METADATA entries (keyed on the un-qualified id) and then
+    // OVERRIDE the gateway-published specifics below: SenseNova
+    // serves them with a 1M context window and TEXT-ONLY input
+    // (per the live /v1/models payload), which differs from the
+    // vendor-official curated values (655K input / vision on).
+    // The global MODEL_METADATA stays vendor-official; only this
+    // preset carries the gateway-specific caps so other providers
+    // (DeepSeek official / Zhipu) are unaffected.
+    baseUrl: "https://token.sensenova.cn/v1",
+    models: [
+      buildPresetModel(
+        "sensenova-6.8-flash-lite",
+        "SenseNova 6.8 Flash-Lite",
+        "https://token.sensenova.cn/v1"
+      ),
+      {
+        // Live /v1/models: context_length 1048576,
+        // max_output_length 65536, input_modalities ["text"] only.
+        ...buildPresetModel(
+          "deepseek-v4-flash",
+          "DeepSeek V4 Flash (via SenseNova)",
+          "https://token.sensenova.cn/v1"
+        ),
+        maxInputTokens: 1048576,
+        maxOutputTokens: 65536,
+        capabilities: { supportsImageToText: false, supportsToolCalling: true }
+      },
+      {
+        // Live /v1/models: context_length 1048576,
+        // max_output_length 131072, input_modalities ["text"] only.
+        ...buildPresetModel(
+          "glm-5.2",
+          "GLM-5.2 (via SenseNova)",
+          "https://token.sensenova.cn/v1"
+        ),
+        maxInputTokens: 1048576,
+        maxOutputTokens: 131072,
+        capabilities: { supportsImageToText: false, supportsToolCalling: true }
+      }
+    ]
   }
 };
 var PRESET_MODEL_DISPLAY_NAMES = (() => {
@@ -1498,6 +1689,7 @@ function getBuiltinProviderPreset(type) {
     case "openrouter":
     case "novita":
     case "medalsoft":
+    case "sensenova":
       return BUILTIN_PROVIDER_PRESETS[type];
     default:
       return null;
@@ -1540,8 +1732,115 @@ var CERTIFICATE_BUNDLE_FORMATS = [
   }
 ];
 
+// ../../node_modules/.pnpm/js-sha256@1.0.0/node_modules/js-sha256/src/node.mjs
+import { createHash, createHmac } from "crypto";
+
+// ../../node_modules/.pnpm/js-sha256@1.0.0/node_modules/js-sha256/src/shared.mjs
+var INPUT_ERROR = "input is invalid type";
+var FINALIZE_ERROR = "finalize already called";
+var ARRAY_BUFFER = typeof ArrayBuffer !== "undefined";
+var formatMessage = function(message) {
+  var type = typeof message;
+  if (type === "string") {
+    return [message, true];
+  }
+  if (Array.isArray(message)) {
+    return [message, false];
+  }
+  if (ARRAY_BUFFER && message) {
+    if (message.constructor === ArrayBuffer) {
+      return [new Uint8Array(message), false];
+    } else if (ArrayBuffer.isView(message)) {
+      return [message, false];
+    }
+  }
+  throw new Error(INPUT_ERROR);
+};
+
+// ../../node_modules/.pnpm/js-sha256@1.0.0/node_modules/js-sha256/src/node.mjs
+function toNodeInput(message) {
+  const [msg, isString] = formatMessage(message);
+  return isString ? Buffer.from(msg, "utf8") : Buffer.from(msg);
+}
+var NodeHasher = class {
+  constructor(hash) {
+    this.hash = hash;
+    this.result = void 0;
+  }
+  update(message) {
+    if (this.result) {
+      throw new Error(FINALIZE_ERROR);
+    }
+    this.hash.update(toNodeInput(message));
+    return this;
+  }
+  finalize() {
+    if (!this.result) {
+      this.result = this.hash.digest();
+      this.hash = void 0;
+    }
+  }
+  hex() {
+    this.finalize();
+    return this.result.toString("hex");
+  }
+  toString() {
+    return this.hex();
+  }
+  array() {
+    this.finalize();
+    return Array.from(this.result);
+  }
+  digest() {
+    return this.array();
+  }
+  arrayBuffer() {
+    return Uint8Array.from(this.array()).buffer;
+  }
+};
+function addOutputMethods(method, createHasher) {
+  method.hex = method;
+  method.array = function(...args) {
+    return createHasher(...args.slice(0, -1)).update(args[args.length - 1]).array();
+  };
+  method.digest = method.array;
+  method.arrayBuffer = function(...args) {
+    return createHasher(...args.slice(0, -1)).update(args[args.length - 1]).arrayBuffer();
+  };
+  return method;
+}
+function createNodeMethod(algorithm) {
+  const createHasher = () => new NodeHasher(createHash(algorithm));
+  const method = function(message) {
+    return createHasher().update(message).hex();
+  };
+  addOutputMethods(method, createHasher);
+  method.create = createHasher;
+  method.update = function(message) {
+    return method.create().update(message);
+  };
+  return method;
+}
+function createNodeHmacMethod(algorithm) {
+  const createHasher = (key) => new NodeHasher(createHmac(algorithm, toNodeInput(key)));
+  const method = function(key, message) {
+    return createHasher(key).update(message).hex();
+  };
+  addOutputMethods(method, createHasher);
+  method.create = createHasher;
+  method.update = function(key, message) {
+    return method.create(key).update(message);
+  };
+  return method;
+}
+var sha256 = createNodeMethod("sha256");
+var sha224 = createNodeMethod("sha224");
+sha256.sha256 = sha256;
+sha256.sha224 = sha224;
+sha256.hmac = createNodeHmacMethod("sha256");
+sha224.hmac = createNodeHmacMethod("sha224");
+
 // src/device-auth.ts
-import { sha256 } from "js-sha256";
 var DeviceAuthHeaders = {
   deviceId: "x-ms-device-id",
   deviceSecret: "x-ms-device-secret",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@serviceme/devtools-shared",
-  "version": "0.4.11",
+  "version": "0.4.13",
   "description": "Shared webview↔extension message contracts and cross-package data models used by SERVICEME.",
   "license": "SEE LICENSE IN LICENSE.md",
   "repository": {
@@ -46,8 +46,8 @@
     "lint": "biome check src test",
     "format": "biome check --write src test",
     "typecheck": "tsc --noEmit",
-    "test": "pnpm run build && node --test test/*.test.mjs",
-    "release:check": "pnpm run test && npm pack --dry-run",
+    "test": "pnpm run build && node scripts/check-bundle-deps.mjs && node --test test/*.test.mjs",
+    "release:check": "pnpm run test && node scripts/check-bundle-deps.mjs && npm pack --dry-run",
     "pack": "npm pack",
     "publish:npm": "pnpm publish --access public --no-git-checks"
   }