@techysy/10router 1.3.0 → 1.3.3

package/app/public/i18n/changelog/zh-CN.md

@@ -2,6 +2,53 @@
 
 这里展示面向用户的关键更新；完整开发明细见 [CHANGELOG.md](https://github.com/techysy/10router/blob/main/CHANGELOG.md)。
 
+## v1.3.3 (2026-10-04)
+
+### ✨ 新增
+
+- **新增 MiniMax Code Free 供应商（`minimax-free`）**：经本地 CreditDaddy 网关使用 MiniMax 免费额度（M3.1-Flash-Preview / M3 / M2.7），与 ZCode Free 同款接线——免登录卡片、主机/端口共享、路径按线独立，详情页带官方图标与网关设置区。
+- **MiniMax 家族能力对齐官方客户端**：M3.1-Flash-Preview 支持五档思考深度（default/low/medium/high/xhigh/max）透传；M3 思考为开/关切换；上下文按 1M 上报。
+
+### 🐛 修复
+
+- **zcode-free 网关端点补齐 `/zcode` 段**：对齐 CreditDaddy 侧的路径迁移（MiniMax 线早已同形）。
+- **CreditDaddy 网关卡片**：路径字段改为显示实际生效值（预填，不再藏在占位符后）；远程接入说明纠错——网关由 IP 白名单保护、不校验 key，无需填凭据（旧文案曾错误要求建带 key 的连接）。
+- **CodeBuddy CN 不再拦截工具多的 Claude Code / codex 会话**：移除「工具数 > 60」的本地一刀切（它曾锁死挂 MCP 工具集的真实会话），工具数现在只进拒绝诊断信息；体积 3.2MB 与消息数守卫不变。
+
+## v1.3.2 (2026-10-03)
+
+### ✨ 新增
+
+- **桌面端：统一 HTML 更新窗**：检查更新 / 下载进度 / 取消 / 安装全部在同一个品牌化小窗内完成，视觉与仪表盘一致；顺带修掉 Windows 非整数缩放下窗口出现滚动条的问题。
+- **桌面端：「通过桌面壳更新」按钮**：仪表盘「检查更新」发现新版本后一键通知托盘壳，由壳接管下载 → SHA-256 校验 → 安装的全自动流程；远程（局域网 / Tailscale）打开的仪表盘同样生效。
+- **桌面端：安装器与「关于」窗对齐仪表盘设计语言**：安装器/卸载器换上品牌侧板（同款设计 token）；「关于 10Router」从系统原生对话框换成品牌化小窗。
+- **修复：Windows 升级不再被旧进程锁死（重要）**：旧版卸载器杀不掉后台服务进程导致升级报「无法关闭」——新安装器会先清场、退出时确定性停车。
+- **CodeBuddy CN 上架 Space-Bunny**（0.03x 限时折扣 10/2–10/7）；**APInex 复上架**，目录实测刷新为 36 模型（免费档扩到 18 个）。
+- **供应商目录与图标整理**：Token Harbor 免费档新增 qwen3.8-flash / mimo-v2.6-flash（1M 窗口、带视觉）；新增 fledge-alpha-free 能力行；Atria 取 key 链接修正为官方控制台；Atria / Token Harbor / OpenCode Zen 上官方图标；Dahl Inference 下架。
+
+### 🐛 修复
+
+- **模型能力上报补齐**：zcode-free 等免登录供应商、未连接供应商的自定义模型（opencode-zen 等）现在都会上报「上下文窗口 / 最大输出」，客户端不再靠模型名瞎猜。
+- **缓存命中率算法修复**：缓存最密集的请求不再被静默丢出统计（此前 684 行）；缓存写入 token 计入分母，数字更诚实——agent 类流量命中率高是真实状态。
+- **供应商详情页**：邀请码不再两处重复显示；全部供应商提示文案补齐简繁双语。
+
+## v1.3.1 (2026-10-02)
+
+### ✨ 新增
+
+- **GLM Coding 支持 Z.ai OAuth 登录（双认证）**：除粘贴 API key 外新增浏览器授权登录，额度卡片两种登录方式通用。
+- **新增 Meta Muse 供应商（OAuth + 模型目录）**：Meta 官方 Muse Code 通道，设备流程一键登录，五个 Muse Spark 模型与官方定价齐备。
+- **新增 System One 决策供应商 v1m（v1m.ir）**：与 Drex 同协议的第二家决策模型后端。
+- **codex 暴露 GPT-6 / GPT-5.6「[1m]」超长上下文变体**：872K 窗口，模型名后缀加 `[1m]` 即用。
+- **配额卡片实验性「嵌套周期配额条」**：实验页开关开启后，滚动 ⊂ 每周 ⊂ 月度 的包含链恢复为一条同心嵌套进度条。
+
+### 🐛 修复
+
+- **同步上游 9router v0.5.95 四大批次（20+ 项）**：codex CLI 身份升 0.159 并修复 auto-ping 反复掉授权；grok-cli 升 1.0.44 恢复可用；codebuddy 6004 限流转精确冷却；Claude 尾部轮保留与思考格式适配、工具循环缓存优化；Claude Sonnet 5.5 / Kiro Opus 5.5 新模型；GPT-6 系列官方定价与真实上下文窗口；DeepSeek 同名工具去重；Gemini 工具 schema 兼容增强；严格代理解析失败时不再静默直连；Responses 流补发 watchdog。
+- **配额修复打包**：重置时间改自适应倒计时（天+时 / 时+分 / 分+秒）；「5 小时」时间轴以现在为中心前后各 12 小时；月度窗口固定显示在卡片底部；qoder / qoder-cn 的 Auto/Efficient 档位与显示名别名不再落到默认能力值。
+- **登录与安全**：开启「需要登录」不再把自己踢出登录页；登录页「忘记密码？」补中文并写明 reset-password 文件格式（reset-password.txt / .md 等任意扩展名均可）；用量统计排除隐藏供应商。
+- **Drex 取 key 链接改为官方邀请注册**（Nace 现为邀请制）。
+
 ## v1.3.0 (2026-10-01)
 
 ### ✨ 新增

package/app/public/i18n/changelog/zh-TW.md

@@ -2,6 +2,53 @@
 
 這裡展示面向用戶的關鍵更新；完整開發明細見 [CHANGELOG.md](https://github.com/techysy/10router/blob/main/CHANGELOG.md)。
 
+## v1.3.3 (2026-10-04)
+
+### ✨ 新增
+
+- **新增 MiniMax Code Free 供應商（`minimax-free`）**：經本地 CreditDaddy 閘道使用 MiniMax 免費額度（M3.1-Flash-Preview / M3 / M2.7），與 ZCode Free 同款接線——免登入卡片、主機/連接埠共享、路徑按線獨立，詳情頁附官方圖標與閘道設定區。
+- **MiniMax 家族能力對齊官方用戶端**：M3.1-Flash-Preview 支援五檔思考深度（default/low/medium/high/xhigh/max）透傳；M3 思考為開/關切換；上下文按 1M 上報。
+
+### 🐛 修復
+
+- **zcode-free 閘道端點補齊 `/zcode` 段**：對齊 CreditDaddy 側的路徑遷移（MiniMax 線早已同形）。
+- **CreditDaddy 閘道卡片**：路徑欄位改為顯示實際生效值（預填，不再藏在佔位符後）；遠端接入說明糾錯——閘道由 IP 白名單保護、不驗證 key，無需填憑證（舊文案曾錯誤要求建帶 key 的連線）。
+- **CodeBuddy CN 不再攔截工具多的 Claude Code / codex 工作階段**：移除「工具數 > 60」的本地一刀切（它曾鎖死掛 MCP 工具集的真實工作階段），工具數現在只進拒絕診斷資訊；體積 3.2MB 與訊息數守衛不變。
+
+## v1.3.2 (2026-10-03)
+
+### ✨ 新增
+
+- **桌面端：統一 HTML 更新窗**：檢查更新 / 下載進度 / 取消 / 安裝全部在同一個品牌化小窗內完成，視覺與儀表板一致；順帶修掉 Windows 非整數縮放下視窗出現捲軸的問題。
+- **桌面端：「透過桌面殼更新」按鈕**：儀表板「檢查更新」發現新版本後一鍵通知系統匣殼，由殼接管下載 → SHA-256 驗證 → 安裝的全自動流程；遠端（區網 / Tailscale）開啟的儀表板同樣生效。
+- **桌面端：安裝器與「關於」窗對齊儀表板設計語言**：安裝器/解除安裝器換上品牌側板（同款設計 token）；「關於 10Router」從系統原生對話框換成品牌化小窗。
+- **修復：Windows 升級不再被舊程序鎖死（重要）**：舊版解除安裝器殺不掉背景服務程序導致升級報「無法關閉」——新安裝器會先清場、退出時確定性停車。
+- **CodeBuddy CN 上架 Space-Bunny**（0.03x 限時折扣 10/2–10/7）；**APInex 復上架**，目錄實測刷新為 36 模型（免費檔擴到 18 個）。
+- **供應商目錄與圖標整理**：Token Harbor 免費檔新增 qwen3.8-flash / mimo-v2.6-flash（1M 視窗、帶視覺）；新增 fledge-alpha-free 能力行；Atria 取 key 連結修正為官方控制台；Atria / Token Harbor / OpenCode Zen 上官方圖標；Dahl Inference 下架。
+
+### 🐛 修復
+
+- **模型能力上報補齊**：zcode-free 等免登入供應商、未連接供應商的自訂模型（opencode-zen 等）現在都會上報「上下文視窗 / 最大輸出」，客戶端不再靠模型名瞎猜。
+- **快取命中率演算法修復**：快取最密集的請求不再被靜默丟出統計（此前 684 行）；快取寫入 token 計入分母，數字更誠實——agent 類流量命中率高是真實狀態。
+- **供應商詳情頁**：邀請碼不再兩處重複顯示；全部供應商提示文案補齊簡繁雙語。
+
+## v1.3.1 (2026-10-02)
+
+### ✨ 新增
+
+- **GLM Coding 支援 Z.ai OAuth 登入（雙認證）**：除貼上 API key 外新增瀏覽器授權登入，額度卡片兩種登入方式通用。
+- **新增 Meta Muse 供應商（OAuth + 模型目錄）**：Meta 官方 Muse Code 通道，裝置流程一鍵登入，五個 Muse Spark 模型與官方定價齊備。
+- **新增 System One 決策供應商 v1m（v1m.ir）**：與 Drex 同協議的第二家決策模型後端。
+- **codex 暴露 GPT-6 / GPT-5.6「[1m]」超長上下文變體**：872K 窗口，模型名後綴加 `[1m]` 即用。
+- **配額卡片實驗性「巢狀週期配額條」**：實驗頁開關開啟後，滾動 ⊂ 每週 ⊂ 月度 的包含鏈恢復為一條同心巢狀進度條。
+
+### 🐛 修正
+
+- **同步上游 9router v0.5.95 四大批次（20+ 項）**：codex CLI 身份升 0.159 並修復 auto-ping 反覆掉授權；grok-cli 升 1.0.44 恢復可用；codebuddy 6004 限流轉精確冷卻；Claude 尾部輪保留與思考格式適配、工具循環快取優化；Claude Sonnet 5.5 / Kiro Opus 5.5 新模型；GPT-6 系列官方定價與真實上下文窗口；DeepSeek 同名工具去重；Gemini 工具 schema 相容增強；嚴格代理解析失敗時不再靜默直連；Responses 流補發 watchdog。
+- **配額修正打包**：重置時間改自適應倒數（天+時 / 時+分 / 分+秒）；「5 小時」時間軸以現在為中心前後各 12 小時；月度窗口固定顯示在卡片底部；qoder / qoder-cn 的 Auto/Efficient 檔位與顯示名別名不再落到預設能力值。
+- **登入與安全**：開啟「需要登入」不再把自己踢出登入頁；登入頁「忘記密碼？」補中文並寫明 reset-password 檔案格式（reset-password.txt / .md 等任意副檔名均可）；用量統計排除隱藏供應商。
+- **Drex 取 key 連結改為官方邀請註冊**（Nace 現為邀請制）。
+
 ## v1.3.0 (2026-10-01)
 
 ### ✨ 新增

package/app/public/i18n/literals/zh-CN.json

@@ -1261,6 +1261,8 @@
   "Turn off Empty": "关闭空账号",
   "Turn on Available": "可用账号",
   "Hide no-quota provider cards": "隐藏无配额提供商卡片",
+  "Nested cycle quota bars": "嵌套周期配额条",
+  "Draw contained windows (rolling ⊂ weekly ⊂ monthly) as one nested track instead of flat rows": "把包含关系的周期窗口（滚动 ⊂ 每周 ⊂ 月度）画成一条嵌套轨道，而不是拆分平铺行",
   "Quota page view: hide cards that have no quota to display": "配额页视图：隐藏没有配额可显示的卡片",
   "Turn request detail recording on/off globally": "全局打开/关闭请求详细信息记录",
   "Turned off": "已关闭",
@@ -1721,6 +1723,7 @@
   "Copied": "已复制",
   "Web console": "网页版",
   "Use your CommandCode CLI API key (starts with user_...) from ~/.commandcode/auth.json or commandcode.ai/studio.": "使用来自 ~/.commandcode/auth.json 或 commandcode.ai/studio 的 CommandCode CLI API 密钥（以 user_ 开头）。",
+  "v1m System One calibrated decision engine. Fast probabilistic evaluations over state and questions.": "v1m System One 校准决策引擎：针对状态与问题做快速概率评估。",
   "Monthly Credits": "月度额度",
   "Purchased Credits": "加量额度",
   "Earliest Expiry First": "配额包到期优先",
@@ -1844,11 +1847,16 @@
   "Hide it": "隐藏",
   "Check for updates automatically": "自动检查更新",
   "Forgot your password?": "忘记密码？",
+  "Recovery file format:": "找回文件格式：",
+  "Name: reset-password — any extension works too (.txt, .md, …), since Windows makes extensionless files awkward. Content: plain UTF-8 text holding only the new password — a single line, no quotes, nothing else (leading/trailing whitespace is ignored).": "文件名：reset-password——带任意扩展名也可以（.txt、.md 等，Windows 上创建无扩展名文件不便）。内容：UTF-8 纯文本，只写新密码本身——单独一行，不带引号、不带其他文字（首尾空白与换行会被忽略）。",
+  "Full format reference (docs)": "完整格式说明（文档）",
+  "An empty file removes the stored password and falls back to the first-login password (INITIAL_PASSWORD / fnOS initial-password).": "留空文件：删除已存密码，回到首次登录密码（INITIAL_PASSWORD / fnOS 初始密码）。",
+  "Put it in the data folder — Windows: %APPDATA%\\10router · macOS / Linux: ~/.10router · Docker: the mounted DATA_DIR · fnOS: @appdata/10router on the app's volume. It applies on your next sign-in attempt (no restart) and is deleted the moment it is read.": "放入数据目录——Windows：%APPDATA%\\10router · macOS / Linux：~/.10router · Docker：挂载的 DATA_DIR · fnOS：应用卷上的 @appdata/10router。下次登录尝试时生效（无需重启），读取后立即删除。",
+  "First sign-in on fnOS: the generated password is in the initial-password file in that folder.": "fnOS 首次登录：自动生成的密码保存在该目录的 initial-password 文件里。",
   "fnOS: open App Center → 10Router → Settings, enter a new dashboard password and save. Sign in with it right away.": "飞牛 fnOS：打开「应用中心 → 10Router → 应用设置」，填写新的仪表盘密码并保存，即可用新密码登录。",
   "Any install: create a file named reset-password in the 10Router data folder with the new password inside, then sign in with it. The file is read once and deleted.": "任何安装方式：在 10Router 数据目录里新建一个名为 reset-password 的文件，内容写新密码，然后用它登录。该文件只读取一次，随即删除。",
   "Leave that file empty to remove the password and go back to the first-login password.": "若该文件留空，则会移除当前密码，恢复为首次登录密码。",
   "Data folder — Windows: %APPDATA%\\10router · macOS / Linux: ~/.10router · Docker: the mounted DATA_DIR · fnOS: @appdata/10router on the app's volume.": "数据目录 —— Windows：%APPDATA%\\10router · macOS / Linux：~/.10router · Docker：挂载的 DATA_DIR · 飞牛 fnOS：应用所在存储卷的 @appdata/10router。",
-  "First sign-in on fnOS: the generated password is in the initial-password file in that folder.": "fnOS 首次登录：自动生成的密码保存在该目录的 initial-password 文件里。",
   "Set a password to turn on the log-in check": "设置密码后开启登录校验",
   "Set password and turn on": "设置密码并开启",
   "You have not set a dashboard password of your own yet. Choose one now — you will need it to sign in from then on.": "你还没有设置自己的仪表盘密码。请现在设置一个——之后登录都需要它。",
@@ -1859,6 +1867,9 @@
   "Could not reach the update server. Try again later.": "无法连接更新服务器，请稍后再试。",
   "New version available: v${latest} (installed v${current})": "有新版本：v${latest}（当前 v${current}）",
   "You are on the latest version (v${current}).": "已是最新版本（v${current}）。",
+  "Update via desktop shell": "通过桌面壳更新",
+  "Desktop shell notified — confirm the download in its update window (system tray).": "已通知桌面壳——请在弹出的更新窗口中确认下载。",
+  "Could not notify the desktop shell. Use the Releases page instead.": "无法通知桌面壳，请改用 Releases 页面下载。",
   "Anyone who can reach this port will be able to manage every provider, key and credential without a password. The dashboard keeps a warning banner while it is off.": "关闭后，任何能访问该端口的人无需密码即可管理全部供应商、密钥与凭据。关闭期间仪表盘会常驻一条警告横幅。",
   "Turn it off": "确认关闭",
   "Credential storage": "凭据存储",
@@ -1892,7 +1903,7 @@
   "resets": "重置于",
   "resets {date}": "{date} 重置",
   "resets in {duration}": "{duration}后重置",
-  "expires in {duration}": "{duration}后到期",
+  "expires in {duration}": "{duration}后过期",
   "Cards": "卡片",
   "View": "视图",
   "Quota windows": "配额窗口",
@@ -1937,7 +1948,6 @@
   "earliest {date}": "最早 {date} 到期",
   "{name}: {count} packs, remaining {remaining} of {total}": "{name}：{count} 个包，剩余 {remaining} / {total}",
   "Per-pack details": "逐包明细",
-  "expires in {duration}": "{duration}后过期",
   "{count} resource packs": "{count} 个资源包（可用）",
   "expires on {date}": "于 {date} 到期",
   "includes {names}": "包含 {names}",
@@ -1956,5 +1966,40 @@
   "Failed to save profile": "保存方案失败",
   "Failed to delete profile": "删除方案失败",
   "Failed to apply profile": "应用方案失败",
-  "Enter a profile name to save": "输入方案名称后再保存"
+  "Enter a profile name to save": "输入方案名称后再保存",
+  "$200 free credit on signup (no card required). Aura-1: $0.015/1k chars, Aura-2: $0.030/1k chars (Pay-As-You-Go).": "注册送 $200 免费额度（无需绑卡）。Aura-1：$0.015/千字符，Aura-2：$0.030/千字符（按量付费）。",
+  "10M free tokens on signup (non-commercial), no credit card required.": "注册送 1000 万免费 tokens（非商业用途），无需绑卡。",
+  "3rd-party proxy for Google Nano Banana (Gemini 2.5/3 Flash Image). For official, use Gemini provider.": "Google Nano Banana（Gemini 2.5/3 Flash Image）的第三方代理；求稳请用 Gemini 官方供应商。",
+  "Free access for NVIDIA Developer Program members (prototyping & testing).": "NVIDIA 开发者计划成员免费使用（适合原型与测试）。",
+  "Free credits for new accounts. Access to Seed 2.0, Kimi K2 Thinking, GLM 4.7, GPT-OSS-120B models.": "新账号送免费额度，可用 Seed 2.0、Kimi K2 Thinking、GLM 4.7、GPT-OSS-120B 等模型。",
+  "Free tier: 27+ free models, no credit card needed, 200 req/day. After  0 credit: 1,000 req/day.": "免费层：27+ 个免费模型，无需绑卡，每天 200 次请求；余额归零后每天 1,000 次。",
+  "Free tier: 40 minutes/month TTS. Paid: TTS-1.5 Mini $0.01/min ($15/1M chars), TTS-1.5 Max $0.025/min ($30/1M chars). 270+ voices, 15 languages.": "免费层：TTS 每月 40 分钟。付费：TTS-1.5 Mini $0.01/分钟（$15/百万字符），TTS-1.5 Max $0.025/分钟（$30/百万字符）。270+ 音色，15 种语言。",
+  "Free tier: light usage, 1 cloud model at a time (limits reset every 5h & 7d). Pro $20/mo · Max $100/mo.": "免费层：轻度使用，同时 1 个云端模型（限额每 5 小时 / 7 天重置）。Pro $20/月 · Max $100/月。",
+  "Install: `curl -fsSL https://cli.devin.ai/install.sh | bash` (macOS: `brew install --cask devin-cli`, Windows PowerShell: `irm https://static.devin.ai/cli/setup.ps1 | iex`). Then run `devin auth login`. No API key needed.": "安装：`curl -fsSL https://cli.devin.ai/install.sh | bash`（macOS：`brew install --cask devin-cli`，Windows PowerShell：`irm https://static.devin.ai/cli/setup.ps1 | iex`），然后运行 `devin auth login`。无需 API key。",
+  "New Google Cloud accounts get $300 free credits. Requires GCP project + Service Account with Vertex AI API enabled.": "新 Google Cloud 账号送 $300 免费额度。需要 GCP 项目 + 已启用 Vertex AI API 的 Service Account。",
+  "OpenAI-compatible gateway. 300+ models (OpenAI, Claude, Gemini, Qwen, DeepSeek, Kimi, GLM, dsb).": "OpenAI 兼容网关，300+ 模型（OpenAI、Claude、Gemini、Qwen、DeepSeek、Kimi、GLM、dsb）。",
+  "OpenAI-compatible. Private inference + uncensored models (Venice Uncensored, GLM, Qwen, DeepSeek, Llama).": "OpenAI 兼容。私有推理 + 无审查模型（Venice Uncensored、GLM、Qwen、DeepSeek、Llama）。",
+  "OpenCode Go subscription: $5/mo (then  0/mo). Access to Kimi, GLM, Qwen, MiMo, MiniMax, DeepSeek, Grok, GPT and more.": "OpenCode Go 订阅：$5/月（此后 0/月）。可用 Kimi、GLM、Qwen、MiMo、MiniMax、DeepSeek、Grok、GPT 等。",
+  "OpenCode Zen PAYG: pay-as-you-go, key from https://opencode.ai/auth. Same models as Zen: paid + free tiers on the fast lane.": "OpenCode Zen 按量付费，key 从 https://opencode.ai/auth 获取。模型与 Zen 相同：付费与免费档同在快车道。",
+  "Perplexity Agent API exposes GPT, Claude, Gemini, Grok, GLM, Kimi, and Sonar models through one OpenAI-compatible Responses API.": "Perplexity Agent API 通过单一 OpenAI 兼容 Responses API 提供 GPT、Claude、Gemini、Grok、GLM、Kimi、Sonar 等模型。",
+  "Prepaid USD-credit gateway with gamified rewards (XP/airdrop). free/* models require a DAILY check-in at the airdrop page; paid models bill a prepaid balance (402 otherwise). Third-party reseller — treat as untrusted for sensitive traffic.": "预充美元额度的网关，带游戏化奖励（XP/空投）。free/* 模型需每日到空投页签到；付费模型消耗预存余额（不足返回 402）。第三方转售商——敏感流量请勿信任。",
+  "Searches public X posts. Billing uses 1 Xquik credit per returned post.": "搜索 X 公开帖子。按返回帖子计费，每条 1 个 Xquik 积分。",
+  "Set providerSpecificData.baseUrl to the OpenAI base URL, e.g. http://host:8080/v1 — /embeddings is appended. The API key is not checked by local servers; any value works.": "把 providerSpecificData.baseUrl 设为 OpenAI 形态的 base URL（如 http://host:8080/v1），系统会自动追加 /embeddings。本地服务不校验 API key，任意值均可。",
+  "Set providerSpecificData.baseUrl to the full transcriptions URL, e.g. http://host:8080/v1/audio/transcriptions. The API key is not checked by local servers; any value works.": "把 providerSpecificData.baseUrl 设为完整的转写 URL（如 http://host:8080/v1/audio/transcriptions）。本地服务不校验 API key，任意值均可。",
+  "Set providerSpecificData.baseUrl to the server root, e.g. http://host:8080 — /v1/audio/speech is appended. The API key is not checked by local servers; any value works.": "把 providerSpecificData.baseUrl 设为服务根地址（如 http://host:8080），系统会自动追加 /v1/audio/speech。本地服务不校验 API key，任意值均可。",
+  "Sign in with your Meta account (Muse Code subscription) or paste a Model API key from dev.meta.ai. Subscription keys are minted per account; Meta may train on contributor-tier data.": "用 Meta 账号登录（Muse Code 订阅），或粘贴 dev.meta.ai 的 Model API key。订阅 key 按账号铸造；贡献者档数据 Meta 可能用于训练。",
+  "Sign in with your xAI / Grok account via device code. Uses Grok Build subscription credits (cli-chat-proxy.grok.com).": "通过设备码登录 xAI / Grok 账号。消耗 Grok Build 订阅额度（cli-chat-proxy.grok.com）。",
+  "Unified OpenAI-compatible endpoint from Vercel. Use your AI Gateway API key, then pick models with provider/model IDs like anthropic/claude-sonnet-4.6 or openai/gpt-5.4.": "Vercel 的统一 OpenAI 兼容端点。使用你的 AI Gateway API key，模型用 provider/model 形式选择（如 anthropic/claude-sonnet-4.6、openai/gpt-5.4）。",
+  "Use AWS Secret Access Key as API key; set providerSpecificData.accessKeyId and optional region.": "用 AWS Secret Access Key 作为 API key；并在 providerSpecificData 里设置 accessKeyId 与可选 region。",
+  "Web search via Ollama Cloud subscription. Reuses the API key from the Ollama (chat) provider.": "通过 Ollama Cloud 订阅做网页搜索。复用 Ollama（对话）供应商的 API key。",
+  "Workers AI free tier. Requires a Cloudflare API token and Account ID.": "Workers AI 免费层。需要 Cloudflare API token 与 Account ID。",
+  "Sign up / Learn more": "注册 / 了解更多",
+  "{n} connections": "{n} 个连接",
+  "1 connection": "1 个连接",
+  "CreditDaddy gateway host": "CreditDaddy 网关主机",
+  "Empty = this machine (127.0.0.1); LAN = CreditDaddy host IP": "留空 = 本机 127.0.0.1；局域网填 CreditDaddy 主机 IP",
+  "Local: enable the gateway switch under \"MiniMax → Interface settings\" in CreditDaddy desktop and add a MiniMax account (default 127.0.0.1:47860).": "本机：在 CreditDaddy 桌面版「MiniMax → 接口设置」里开启网关开关并添加 MiniMax 账号（默认 127.0.0.1:47860）。",
+  "Local: enable the gateway switch under \"ZCode → Interface settings\" in CreditDaddy desktop (default 127.0.0.1:47860).": "本机：在 CreditDaddy 桌面版「ZCode → 接口设置」里开启网关开关（默认 127.0.0.1:47860）。",
+  "LAN (NAS, etc.): put the CreditDaddy machine IP above, then in the same CreditDaddy panel turn on \"Allow LAN access\" and add this 10Router machine's IP to the allowlist, then restart CreditDaddy.": "局域网（NAS 等）：在上方填 CreditDaddy 所在机器的 IP，再在同一面板里打开「允许局域网访问」并把本 10Router 机器的 IP 加入白名单，然后重启 CreditDaddy。",
+  "The gateway is protected by an IP allowlist and checks no key, so there is nothing to enter here.": "网关由 IP 白名单保护、不校验任何 key，所以这里无需填凭据。"
 }

package/app/public/i18n/literals/zh-TW.json

@@ -269,6 +269,8 @@
   "Turn off Empty": "關閉空帳號",
   "Turn on Available": "可用帳號",
   "Hide no-quota provider cards": "隱藏無配額提供者卡片",
+  "Nested cycle quota bars": "巢狀週期配額條",
+  "Draw contained windows (rolling ⊂ weekly ⊂ monthly) as one nested track instead of flat rows": "把包含關係的週期窗口（滾動 ⊂ 每週 ⊂ 月度）畫成一條巢狀軌道，而不是拆分平鋪行",
   "Quota page view: hide cards that have no quota to display": "配額頁檢視：隱藏沒有配額可顯示的卡片",
   "Only with balance": "只看有餘額",
   "Show all": "顯示全部",
@@ -563,6 +565,7 @@
   "Web console": "網頁版",
   "Get API Key →": "取得 API 金鑰 →",
   "Use your CommandCode CLI API key (starts with user_...) from ~/.commandcode/auth.json or commandcode.ai/studio.": "使用來自 ~/.commandcode/auth.json 或 commandcode.ai/studio 的 CommandCode CLI API 金鑰（以 user_ 開頭）。",
+  "v1m System One calibrated decision engine. Fast probabilistic evaluations over state and questions.": "v1m System One 校準決策引擎：針對狀態與問題做快速機率評估。",
   "Monthly Credits": "月度額度",
   "Purchased Credits": "加量額度",
   "Earliest Expiry First": "配額包到期優先",
@@ -670,11 +673,16 @@
   "Hide it": "隱藏",
   "Check for updates automatically": "自動檢查更新",
   "Forgot your password?": "忘記密碼？",
+  "Recovery file format:": "找回檔案格式：",
+  "Name: reset-password — any extension works too (.txt, .md, …), since Windows makes extensionless files awkward. Content: plain UTF-8 text holding only the new password — a single line, no quotes, nothing else (leading/trailing whitespace is ignored).": "檔名：reset-password——帶任意副檔名也可以（.txt、.md 等，Windows 上建立無副檔名檔案不便）。內容：UTF-8 純文字，只寫新密碼本身——單獨一行，不帶引號、不帶其他文字（首尾空白與換行會被忽略）。",
+  "Full format reference (docs)": "完整格式說明（文件）",
+  "An empty file removes the stored password and falls back to the first-login password (INITIAL_PASSWORD / fnOS initial-password).": "留空檔案：刪除已存密碼，回到首次登入密碼（INITIAL_PASSWORD / fnOS 初始密碼）。",
+  "Put it in the data folder — Windows: %APPDATA%\\10router · macOS / Linux: ~/.10router · Docker: the mounted DATA_DIR · fnOS: @appdata/10router on the app's volume. It applies on your next sign-in attempt (no restart) and is deleted the moment it is read.": "放入資料目錄——Windows：%APPDATA%\\10router · macOS / Linux：~/.10router · Docker：掛載的 DATA_DIR · fnOS：應用磁碟區上的 @appdata/10router。下次登入嘗試時生效（無需重啟），讀取後立即刪除。",
+  "First sign-in on fnOS: the generated password is in the initial-password file in that folder.": "fnOS 首次登入：自動產生的密碼儲存在該目錄的 initial-password 檔案中。",
   "fnOS: open App Center → 10Router → Settings, enter a new dashboard password and save. Sign in with it right away.": "飛牛 fnOS：開啟「應用中心 → 10Router → 應用設定」，填寫新的儀表板密碼並儲存，即可用新密碼登入。",
   "Any install: create a file named reset-password in the 10Router data folder with the new password inside, then sign in with it. The file is read once and deleted.": "任何安裝方式：在 10Router 資料目錄中新增一個名為 reset-password 的檔案，內容寫新密碼，然後用它登入。該檔案只讀取一次，隨即刪除。",
   "Leave that file empty to remove the password and go back to the first-login password.": "若該檔案留空，則會移除目前密碼，恢復為首次登入密碼。",
   "Data folder — Windows: %APPDATA%\\10router · macOS / Linux: ~/.10router · Docker: the mounted DATA_DIR · fnOS: @appdata/10router on the app's volume.": "資料目錄 —— Windows：%APPDATA%\\10router · macOS / Linux：~/.10router · Docker：掛載的 DATA_DIR · 飛牛 fnOS：應用所在儲存卷的 @appdata/10router。",
-  "First sign-in on fnOS: the generated password is in the initial-password file in that folder.": "fnOS 首次登入：自動產生的密碼儲存在該目錄的 initial-password 檔案中。",
   "Set a password to turn on the log-in check": "設定密碼後開啟登入檢查",
   "Set password and turn on": "設定密碼並開啟",
   "You have not set a dashboard password of your own yet. Choose one now — you will need it to sign in from then on.": "你尚未設定自己的儀表板密碼。請現在設定一個——之後登入都需要它。",
@@ -688,6 +696,9 @@
   "Could not reach the update server. Try again later.": "無法連線更新伺服器，請稍後再試。",
   "New version available: v${latest} (installed v${current})": "有新版本：v${latest}（目前 v${current}）",
   "You are on the latest version (v${current}).": "已是最新版本（v${current}）。",
+  "Update via desktop shell": "透過桌面殼更新",
+  "Desktop shell notified — confirm the download in its update window (system tray).": "已通知桌面殼——請在彈出的更新視窗中確認下載。",
+  "Could not notify the desktop shell. Use the Releases page instead.": "無法通知桌面殼，請改用 Releases 頁面下載。",
   "Anyone who can reach this port will be able to manage every provider, key and credential without a password. The dashboard keeps a warning banner while it is off.": "關閉後，任何能存取該連接埠的人無需密碼即可管理全部供應商、金鑰與憑證。關閉期間儀表板會常駐一條警告橫幅。",
   "Turn it off": "確認關閉",
   "Credential storage": "憑證儲存",
@@ -728,7 +739,7 @@
   "resets": "重置於",
   "resets {date}": "{date} 重置",
   "resets in {duration}": "{duration}後重置",
-  "expires in {duration}": "{duration}後到期",
+  "expires in {duration}": "{duration}後過期",
   "Cards": "卡片",
   "Quota windows": "配額窗口",
   "24 hours": "24 小時",
@@ -779,7 +790,6 @@
   "earliest {date}": "最早 {date} 到期",
   "{name}: {count} packs, remaining {remaining} of {total}": "{name}：{count} 個包，剩餘 {remaining} / {total}",
   "Per-pack details": "逐包明細",
-  "expires in {duration}": "{duration}後過期",
   "{count} resource packs": "{count} 個資源包（可用）",
   "expires on {date}": "於 {date} 到期",
   "includes {names}": "包含 {names}",
@@ -798,5 +808,41 @@
   "Failed to save profile": "儲存方案失敗",
   "Failed to delete profile": "刪除方案失敗",
   "Failed to apply profile": "應用方案失敗",
-  "Enter a profile name to save": "輸入方案名稱後再儲存"
+  "Enter a profile name to save": "輸入方案名稱後再儲存",
+  "$200 free credit on signup (no card required). Aura-1: $0.015/1k chars, Aura-2: $0.030/1k chars (Pay-As-You-Go).": "註冊送 $200 免費額度（無需綁卡）。Aura-1：$0.015/千字元，Aura-2：$0.030/千字元（按量計費）。",
+  "10M free tokens on signup (non-commercial), no credit card required.": "註冊送 1000 萬免費 tokens（非商業用途），無需綁卡。",
+  "3rd-party proxy for Google Nano Banana (Gemini 2.5/3 Flash Image). For official, use Gemini provider.": "Google Nano Banana（Gemini 2.5/3 Flash Image）的第三方代理；求穩請用 Gemini 官方供應商。",
+  "Free access for NVIDIA Developer Program members (prototyping & testing).": "NVIDIA 開發者計畫成員免費使用（適合原型與測試）。",
+  "Free credits for new accounts. Access to Seed 2.0, Kimi K2 Thinking, GLM 4.7, GPT-OSS-120B models.": "新帳號送免費額度，可用 Seed 2.0、Kimi K2 Thinking、GLM 4.7、GPT-OSS-120B 等模型。",
+  "Free tier: 27+ free models, no credit card needed, 200 req/day. After  0 credit: 1,000 req/day.": "免費層：27+ 個免費模型，無需綁卡，每天 200 次請求；餘額歸零後每天 1,000 次。",
+  "Free tier: 40 minutes/month TTS. Paid: TTS-1.5 Mini $0.01/min ($15/1M chars), TTS-1.5 Max $0.025/min ($30/1M chars). 270+ voices, 15 languages.": "免費層：TTS 每月 40 分鐘。付費：TTS-1.5 Mini $0.01/分鐘（$15/百萬字元），TTS-1.5 Max $0.025/分鐘（$30/百萬字元）。270+ 音色，15 種語言。",
+  "Free tier: light usage, 1 cloud model at a time (limits reset every 5h & 7d). Pro $20/mo · Max $100/mo.": "免費層：輕度使用，同時 1 個雲端模型（限額每 5 小時 / 7 天重置）。Pro $20/月 · Max $100/月。",
+  "Install: `curl -fsSL https://cli.devin.ai/install.sh | bash` (macOS: `brew install --cask devin-cli`, Windows PowerShell: `irm https://static.devin.ai/cli/setup.ps1 | iex`). Then run `devin auth login`. No API key needed.": "安裝：`curl -fsSL https://cli.devin.ai/install.sh | bash`（macOS：`brew install --cask devin-cli`，Windows PowerShell：`irm https://static.devin.ai/cli/setup.ps1 | iex`），然後執行 `devin auth login`。無需 API key。",
+  "New Google Cloud accounts get $300 free credits. Requires GCP project + Service Account with Vertex AI API enabled.": "新 Google Cloud 帳號送 $300 免費額度。需要 GCP 專案 + 已啟用 Vertex AI API 的 Service Account。",
+  "OpenAI-compatible gateway. 300+ models (OpenAI, Claude, Gemini, Qwen, DeepSeek, Kimi, GLM, dsb).": "OpenAI 相容閘道，300+ 模型（OpenAI、Claude、Gemini、Qwen、DeepSeek、Kimi、GLM、dsb）。",
+  "OpenAI-compatible. Private inference + uncensored models (Venice Uncensored, GLM, Qwen, DeepSeek, Llama).": "OpenAI 相容。私有推理 + 無審查模型（Venice Uncensored、GLM、Qwen、DeepSeek、Llama）。",
+  "OpenCode Go subscription: $5/mo (then  0/mo). Access to Kimi, GLM, Qwen, MiMo, MiniMax, DeepSeek, Grok, GPT and more.": "OpenCode Go 訂閱：$5/月（此後 0/月）。可用 Kimi、GLM、Qwen、MiMo、MiniMax、DeepSeek、Grok、GPT 等。",
+  "OpenCode Zen PAYG: pay-as-you-go, key from https://opencode.ai/auth. Same models as Zen: paid + free tiers on the fast lane.": "OpenCode Zen 按量付費，key 從 https://opencode.ai/auth 獲取。模型與 Zen 相同：付費與免費檔同在快車道。",
+  "Perplexity Agent API exposes GPT, Claude, Gemini, Grok, GLM, Kimi, and Sonar models through one OpenAI-compatible Responses API.": "Perplexity Agent API 透過單一 OpenAI 相容 Responses API 提供 GPT、Claude、Gemini、Grok、GLM、Kimi、Sonar 等模型。",
+  "Prepaid USD-credit gateway with gamified rewards (XP/airdrop). free/* models require a DAILY check-in at the airdrop page; paid models bill a prepaid balance (402 otherwise). Third-party reseller — treat as untrusted for sensitive traffic.": "預充美元額度的閘道，帶遊戲化獎勵（XP/空投）。free/* 模型需每日到空投頁簽到；付費模型消耗預存餘額（不足返回 402）。第三方轉售商——敏感流量請勿信任。",
+  "Searches public X posts. Billing uses 1 Xquik credit per returned post.": "搜尋 X 公開貼文。按返回貼文計費，每條 1 個 Xquik 積分。",
+  "Set providerSpecificData.baseUrl to the OpenAI base URL, e.g. http://host:8080/v1 — /embeddings is appended. The API key is not checked by local servers; any value works.": "把 providerSpecificData.baseUrl 設為 OpenAI 形態的 base URL（如 http://host:8080/v1），系統會自動附加 /embeddings。本地服務不校驗 API key，任意值均可。",
+  "Set providerSpecificData.baseUrl to the full transcriptions URL, e.g. http://host:8080/v1/audio/transcriptions. The API key is not checked by local servers; any value works.": "把 providerSpecificData.baseUrl 設為完整的轉寫 URL（如 http://host:8080/v1/audio/transcriptions）。本地服務不校驗 API key，任意值均可。",
+  "Set providerSpecificData.baseUrl to the server root, e.g. http://host:8080 — /v1/audio/speech is appended. The API key is not checked by local servers; any value works.": "把 providerSpecificData.baseUrl 設為服務根位址（如 http://host:8080），系統會自動附加 /v1/audio/speech。本地服務不校驗 API key，任意值均可。",
+  "Sign in with your Meta account (Muse Code subscription) or paste a Model API key from dev.meta.ai. Subscription keys are minted per account; Meta may train on contributor-tier data.": "用 Meta 帳號登入（Muse Code 訂閱），或貼上 dev.meta.ai 的 Model API key。訂閱 key 按帳號鑄造；貢獻者檔資料 Meta 可能用於訓練。",
+  "Sign in with your xAI / Grok account via device code. Uses Grok Build subscription credits (cli-chat-proxy.grok.com).": "透過裝置碼登入 xAI / Grok 帳號。消耗 Grok Build 訂閱額度（cli-chat-proxy.grok.com）。",
+  "Unified OpenAI-compatible endpoint from Vercel. Use your AI Gateway API key, then pick models with provider/model IDs like anthropic/claude-sonnet-4.6 or openai/gpt-5.4.": "Vercel 的統一 OpenAI 相容端點。使用你的 AI Gateway API key，模型用 provider/model 形式選擇（如 anthropic/claude-sonnet-4.6、openai/gpt-5.4）。",
+  "Use AWS Secret Access Key as API key; set providerSpecificData.accessKeyId and optional region.": "用 AWS Secret Access Key 作為 API key；並在 providerSpecificData 裡設定 accessKeyId 與可選 region。",
+  "Web search via Ollama Cloud subscription. Reuses the API key from the Ollama (chat) provider.": "透過 Ollama Cloud 訂閱做網頁搜尋。重用 Ollama（對話）供應商的 API key。",
+  "Workers AI free tier. Requires a Cloudflare API token and Account ID.": "Workers AI 免費層。需要 Cloudflare API token 與 Account ID。",
+  "Sign up / Learn more": "註冊 / 瞭解更多",
+  "{n} connections": "{n} 個連線",
+  "1 connection": "1 個連線",
+  "Get API Key": "取得 API 金鑰",
+  "CreditDaddy gateway host": "CreditDaddy 閘道主機",
+  "Empty = this machine (127.0.0.1); LAN = CreditDaddy host IP": "留空 = 本機 127.0.0.1；區網填 CreditDaddy 主機 IP",
+  "Local: enable the gateway switch under \"MiniMax → Interface settings\" in CreditDaddy desktop and add a MiniMax account (default 127.0.0.1:47860).": "本機：在 CreditDaddy 桌面版「MiniMax → 介面設定」裡開啟閘道開關並新增 MiniMax 帳號（預設 127.0.0.1:47860）。",
+  "Local: enable the gateway switch under \"ZCode → Interface settings\" in CreditDaddy desktop (default 127.0.0.1:47860).": "本機：在 CreditDaddy 桌面版「ZCode → 介面設定」裡開啟閘道開關（預設 127.0.0.1:47860）。",
+  "LAN (NAS, etc.): put the CreditDaddy machine IP above, then in the same CreditDaddy panel turn on \"Allow LAN access\" and add this 10Router machine's IP to the allowlist, then restart CreditDaddy.": "區網（NAS 等）：在上方填 CreditDaddy 所在機器的 IP，再在同一面板裡開啟「允許區網存取」並把本 10Router 機器的 IP 加入白名單，然後重新啟動 CreditDaddy。",
+  "The gateway is protected by an IP allowlist and checks no key, so there is nothing to enter here.": "閘道由 IP 白名單保護、不驗證任何 key，所以這裡無需填憑證。"
 }

package/package.json

@@ -1,61 +1,61 @@
-{
-  "name": "@techysy/10router",
-  "version": "1.3.0",
-  "description": "10Router CLI - Start and manage 10Router server",
-  "publishConfig": {
-    "access": "public"
-  },
-  "bin": {
-    "10router": "./cli.js"
-  },
-  "files": [
-    "cli.js",
-    "src",
-    "hooks",
-    "app",
-    "README.md",
-    "LICENSE"
-  ],
-  "scripts": {
-    "dev": "nodemon -I --watch cli.js --watch src --watch hooks --ext js,json cli.js",
-    "build": "node scripts/build-cli.js",
-    "pack:cli": "npm run build && npm pack --pack-destination ..",
-    "publish:cli": "npm run build && npm publish --registry https://registry.npmjs.org",
-    "postinstall": "node hooks/postinstall.js || exit 0",
-    "prepublishOnly": "npm run build"
-  },
-  "dependencies": {
-    "enquirer": "^2.4.1",
-    "node-forge": "^1.3.3",
-    "node-machine-id": "^1.1.12",
-    "react": "19.2.1",
-    "react-dom": "19.2.1"
-  },
-  "comment_postinstall": "`|| exit 0` is deliberate: this hook only warms ~/.10router/runtime, and cli.js re-runs the same ensureSqliteRuntime/ensureTrayRuntime on every start, so a failure here costs nothing. Without it npm aborts the whole install — e.g. running Windows npm against a WSL path, where cmd.exe cannot cd to a UNC directory, falls back to C:\\Windows and node then cannot find hooks/postinstall.js at all, so the script's own try/catch never gets to run.",
-  "comment_sqlite": "sql.js + better-sqlite3 are NOT bundled here. They are installed into ~/.10router/runtime/node_modules by hooks/postinstall.js (and re-checked at runtime by cli.js). This avoids Windows EBUSY errors when updating the global CLI, since native .node files no longer live under the locked install dir. Both runtime deps are installed WITH save (never --no-save): the runtime dir is a single shared npm project, so a package found in node_modules but missing from runtime/package.json is pruned as extraneous by the other hook's next install, and the two hooks would otherwise uninstall each other in a ping-pong.",
-  "comment_systray": "systray2 is NOT bundled here. It is lazy-installed into ~/.10router/runtime/node_modules by hooks/postinstall.js on macOS/Linux only. Windows uses PowerShell NotifyIcon (zero binary). This avoids shipping unsigned Go binaries that trigger antivirus false positives (Kaspersky). We use the systray2 fork because the legacy systray@1.0.5 ships a 2017 x86_64 binary that fails on modern macOS dyld.",
-  "engines": {
-    "node": ">=18.0.0"
-  },
-  "keywords": [
-    "10router",
-    "cli",
-    "proxy",
-    "ai",
-    "api"
-  ],
-  "license": "MIT",
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/techysy/10router.git",
-    "directory": "cli"
-  },
-  "homepage": "https://github.com/techysy/10router#readme",
-  "bugs": {
-    "url": "https://github.com/techysy/10router/issues"
-  },
-  "devDependencies": {
-    "esbuild": "^0.25.12",
-    "nodemon": "^3.1.14"
-  }
-}
+{
+  "name": "@techysy/10router",
+  "version": "1.3.3",
+  "description": "10Router CLI - Start and manage 10Router server",
+  "publishConfig": {
+    "access": "public"
+  },
+  "bin": {
+    "10router": "./cli.js"
+  },
+  "files": [
+    "cli.js",
+    "src",
+    "hooks",
+    "app",
+    "README.md",
+    "LICENSE"
+  ],
+  "scripts": {
+    "dev": "nodemon -I --watch cli.js --watch src --watch hooks --ext js,json cli.js",
+    "build": "node scripts/build-cli.js",
+    "pack:cli": "npm run build && npm pack --pack-destination ..",
+    "publish:cli": "npm run build && npm publish --registry https://registry.npmjs.org",
+    "postinstall": "node hooks/postinstall.js || exit 0",
+    "prepublishOnly": "npm run build"
+  },
+  "dependencies": {
+    "enquirer": "^2.4.1",
+    "node-forge": "^1.3.3",
+    "node-machine-id": "^1.1.12",
+    "react": "19.2.1",
+    "react-dom": "19.2.1"
+  },
+  "comment_postinstall": "`|| exit 0` is deliberate: this hook only warms ~/.10router/runtime, and cli.js re-runs the same ensureSqliteRuntime/ensureTrayRuntime on every start, so a failure here costs nothing. Without it npm aborts the whole install — e.g. running Windows npm against a WSL path, where cmd.exe cannot cd to a UNC directory, falls back to C:\\Windows and node then cannot find hooks/postinstall.js at all, so the script's own try/catch never gets to run.",
+  "comment_sqlite": "sql.js + better-sqlite3 are NOT bundled here. They are installed into ~/.10router/runtime/node_modules by hooks/postinstall.js (and re-checked at runtime by cli.js). This avoids Windows EBUSY errors when updating the global CLI, since native .node files no longer live under the locked install dir. Both runtime deps are installed WITH save (never --no-save): the runtime dir is a single shared npm project, so a package found in node_modules but missing from runtime/package.json is pruned as extraneous by the other hook's next install, and the two hooks would otherwise uninstall each other in a ping-pong.",
+  "comment_systray": "systray2 is NOT bundled here. It is lazy-installed into ~/.10router/runtime/node_modules by hooks/postinstall.js on macOS/Linux only. Windows uses PowerShell NotifyIcon (zero binary). This avoids shipping unsigned Go binaries that trigger antivirus false positives (Kaspersky). We use the systray2 fork because the legacy systray@1.0.5 ships a 2017 x86_64 binary that fails on modern macOS dyld.",
+  "engines": {
+    "node": ">=18.0.0"
+  },
+  "keywords": [
+    "10router",
+    "cli",
+    "proxy",
+    "ai",
+    "api"
+  ],
+  "license": "MIT",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/techysy/10router.git",
+    "directory": "cli"
+  },
+  "homepage": "https://github.com/techysy/10router#readme",
+  "bugs": {
+    "url": "https://github.com/techysy/10router/issues"
+  },
+  "devDependencies": {
+    "esbuild": "^0.25.12",
+    "nodemon": "^3.1.14"
+  }
+}

package/src/cli/menus/providers.js

@@ -137,11 +137,12 @@ const OAUTH_PROVIDERS = {
   iflow: { id: "iflow", alias: "if", name: "iFlow AI" },
   qwen: { id: "qwen", alias: "qw", name: "Qwen Code" },
   kiro: { id: "kiro", alias: "kr", name: "Kiro AI" },
+  glm: { id: "glm", alias: "glm", name: "Zai GLM Coding" },
 };
 
 const APIKEY_PROVIDERS = {
   openrouter: { id: "openrouter", name: "OpenRouter" },
-  glm: { id: "glm", name: "GLM Coding" },
+  glm: { id: "glm", name: "Zai GLM Coding" },
   minimax: { id: "minimax", name: "Minimax Coding" },
   kimi: { id: "kimi", name: "Kimi" },
   openai: { id: "openai", name: "OpenAI" },
@@ -398,7 +399,7 @@ async function showConnectionActions(connection, providerId, breadcrumb = []) {
  * @param {string} authType - "oauth" or "apikey"
  */
 // Providers that use Device Code Flow (terminal-based polling)
-const DEVICE_CODE_PROVIDERS = ["github", "qwen", "kiro"];
+const DEVICE_CODE_PROVIDERS = ["github", "qwen", "kiro", "glm"];
 
 /**
  * Handle adding new connection - auto-detect flow type

package/src/cli/utils/modelSelector.js

@@ -22,7 +22,7 @@ const PROVIDER_ALIAS_NAMES = {
   oc: "OpenCode Free",
   opencode: "OpenCode Free",
   openrouter: "OpenRouter",
-  glm: "GLM Coding",
+  glm: "Zai GLM Coding",
   kimi: "Kimi Coding",
   minimax: "Minimax Coding",
   openai: "OpenAI",

package/app/.next-cli-build/server/chunks/2051.js

@@ -1 +0,0 @@
-"use strict";exports.id=2051,exports.ids=[2051],exports.modules={52007:(a,b,c)=>{c.d(b,{av:()=>o,gK:()=>m});var d=c(55511),e=c(39609);let f="https://llm.kimchi.dev",g=new Set([429,500,502,503,504]),h=new Map,i=new Map;function j(a){return(("string"==typeof a?a.trim():"")||f).replace(/\/+$/,"")}function k(a){return a?.accessToken||a?.apiKey||a?.providerSpecificData?.apiKey||null}function l(a){if(!a||"object"!=typeof a)return null;let b=a.slug||a.id||a.model||a.name;if("string"!=typeof b||""===b.trim())return null;let c=Array.isArray(a.input_modalities)?a.input_modalities.filter(a=>"text"===a||"image"===a):[],d=a.limits&&"object"==typeof a.limits?a.limits:{},e=Number(d.context_window||a.contextLength||a.context_length)||void 0,f=Number(d.max_output_tokens||a.maxOutputTokens||a.max_output_tokens)||void 0,g="string"==typeof a.provider?a.provider:"",h=!0===a.reasoning,i=Array.isArray(c)&&c.includes("image")?"imageToText":"llm",j={...a,id:b.trim(),name:String(a.display_name||a.displayName||a.name||b).trim(),provider:g,upstreamProvider:g,reasoning:h,inputModalities:c,kind:i,type:i,capabilities:{vision:c.includes("image"),reasoning:h,...e?{contextWindow:e}:{},...f?{maxOutput:f}:{},...g?{upstreamProvider:g}:{}},...e?{contextLength:e}:{},...f?{maxOutputTokens:f}:{}};return"anthropic"===g&&(j.compat={supportsReasoningEffort:!1,cacheControlFormat:"anthropic"}),j}function m(a){if("string"!=typeof a||""===a.trim())return null;let b=a.includes("/")?a.split("/").pop():a;return i.get(b)||i.get(b.toLowerCase())||null}async function n(a,b,c={}){let d=`${j(b)}/v1/models/metadata?include_in_cli=true`,f=new AbortController,h=setTimeout(()=>f.abort(Error("Kimchi models fetch timeout")),2e4),i=c.signal?AbortSignal.any([c.signal,f.signal]):f.signal;try{let b=await (0,e.proxyAwareFetch)(d,{method:"GET",headers:{Accept:"application/json",Authorization:`Bearer ${a}`,"User-Agent":"kimchi/0.1.40"},cache:"no-store",signal:i},c.proxyOptions||null);if(!b.ok){let a=Error(`Kimchi models ${b.status}: ${b.statusText}`);throw a.status=b.status,a.retryable=g.has(b.status),a}let f=await b.json();return Array.isArray(f?.models)?f.models:[]}finally{clearTimeout(h)}}async function o(a,b={}){let c,e,g,m=k(a);if(!m)return null;let p=a?.providerSpecificData?.kimchiEndpoint||b.endpoint||f,q=(g=(e=a?.providerSpecificData||{}).userId||e.username||a?.refreshToken||k(a)||"anonymous",(0,d.createHash)("sha256").update(`kimchi:${j(p)}:${g}`).digest("hex")),r=Date.now();if(!b.forceRefresh){let a=h.get(q);if(a&&a.expiresAt>r)return a}try{c=await n(m,p,b)}catch(a){return b.log?.warn?.("KIMCHI_MODELS",a.message),null}let s=c.map(l).filter(Boolean);if(0===s.length)return null;for(let a of s||[])a?.id&&(i.set(a.id,a),i.set(a.id.toLowerCase(),a));let t={expiresAt:Date.now()+3e5,models:s,rawModels:c};return h.set(q,t),t}},55456:(a,b,c)=>{c.d(b,{CP:()=>r,Xh:()=>l,Y8:()=>q,tM:()=>n,yI:()=>o});var d=c(94755),e=c(74075),f=c.n(e);let g="1"===process.env.CURSOR_PROTOBUF_DEBUG,h=(a,...b)=>g&&console.log(`[PROTOBUF:${a}]`,...b);new TextDecoder;let i="1.1.3",j=new Set([1,2,3,9,10,11,27,1,25]);function k(a){let b=[];for(;a>=128;)b.push(127&a|128),a>>>=7;return b.push(127&a),new Uint8Array(b)}function l(a,b,c){let d=k(a<<3|b);if(0===b)return m(d,k(c));if(2===b){let a="string"==typeof c?new TextEncoder().encode(c):c instanceof Uint8Array?c:Buffer.isBuffer(c)?new Uint8Array(c):new Uint8Array(0);return m(d,k(a.length),a)}return new Uint8Array(0)}function m(...a){let b=new Uint8Array(a.reduce((a,b)=>a+b.length,0)),c=0;for(let d of a)b.set(d,c),c+=d.length;return b}function n(a,b=!1){let c=a,d=0;b&&(c=new Uint8Array(f().gzipSync(Buffer.from(a))),d=1);let e=new Uint8Array(5+c.length);return e[0]=d,e[1]=c.length>>24&255,e[2]=c.length>>16&255,e[3]=c.length>>8&255,e[4]=255&c.length,e.set(c,5),e}function o(a,b,c=[],e=null,f=!1){h("BODY",`Generating: ${a.length} msgs, model=${b}, tools=${c.length}, reasoning=${e||"none"}, forceAgentMode=${f}`);let g=function(a,b,c=[],e=null,f=!1){return l(1,2,function(a,b,c=[],e=null,f=!1){let g,i=c?.length>0,j=i||f,n=[],o=[],p=[];for(let b=0;b<a.length;b++){let c=a[b],d=Array.isArray(c?.tool_calls)&&c.tool_calls.length>0,e=Array.isArray(c?.tool_results)&&c.tool_results.length>0;if(c?.role==="assistant"&&d&&e){h("ENCODE",`normalizing mixed assistant tool payload at msg[${b}] (calls=${c.tool_calls.length}, results=${c.tool_results.length})`),p.push({...c,tool_results:[]});let d=a[b+1],e=d?.role==="assistant"&&Array.isArray(d?.tool_results)&&d.tool_results.length>0,f=new Set(c.tool_results.map(a=>a?.tool_call_id).filter(a=>"string"==typeof a)),g=new Set((d?.tool_results||[]).map(a=>a?.tool_call_id).filter(a=>"string"==typeof a)),i=f.size>0&&f.size===g.size;if(i){for(let a of f)if(!g.has(a)){i=!1;break}}e&&i||p.push({role:"assistant",content:"",tool_results:c.tool_results});continue}p.push(c)}for(let a=0;a<p.length;a++){let b=p[a],c="user"===b.role?1:2,e=(0,d.A)(),f=a===p.length-1;n.push({content:b.content,role:c,messageId:e,isLast:f,hasTools:i,toolResults:b.tool_results||[]}),o.push({messageId:e,role:c})}let q=0;return"medium"===e?q=1:"high"===e&&(q=2),m(...n.map(a=>l(1,2,function(a,b,c,d=!1,e=!1,f=[],g=null){let h=f.length>0;return m(l(1,2,a),l(2,0,b),l(13,2,c),...g?[l(32,2,g)]:[],...h?f.map(a=>l(18,2,function(a){var b;let c,d,e=function(a){let b="string"==typeof a&&a.length>0?a:"tool";if(b.startsWith("mcp__")){let a=b.slice(5),c=a.indexOf("__");if(c>=0){let b=a.slice(0,c)||"custom",d=a.slice(c+2)||"tool";return`mcp_${b}_${d}`}return`mcp_custom_${a||"tool"}`}return b.startsWith("mcp_")?b:`mcp_custom_${b}`}(a.tool_name||a.name||""),f=a.raw_args||"{}",g=a.result_content||a.result||"",{toolCallId:h,modelCallId:i}=(b=a.tool_call_id||"",c="\nmc_",(d=b.indexOf(c))>=0?{toolCallId:b.slice(0,d),modelCallId:b.slice(d+c.length)}:{toolCallId:b,modelCallId:null}),j=a.tool_index||a.index||1,{serverName:k,selectedTool:n}=function(a){if("string"!=typeof a||!a.startsWith("mcp_"))return{serverName:"custom",selectedTool:a||"tool"};let b=a.slice(4),c=b.indexOf("_");return c<0?{serverName:"custom",selectedTool:b||"tool"}:{serverName:b.slice(0,c)||"custom",selectedTool:b.slice(c+1)||"tool"}}(e);return m(l(1,2,h),l(2,2,e),l(3,0,j>0?j:1),...i?[l(12,2,i)]:[],l(5,2,f),l(8,2,function(a,b,c,d,e=1){return m(l(1,0,19),l(28,2,m(l(1,2,c),l(2,2,d))),l(35,2,a),...b?[l(48,2,b)]:[],l(49,0,e>0?e:1))}(h,i,n,g,j)),l(11,2,function(a,b,c,d,e,f,g=1){let h;return m(l(1,0,19),l(27,2,(h=m(l(1,2,c),l(3,2,e),l(4,2,d)),l(1,2,h))),l(3,2,a),l(9,2,b),l(10,2,e),l(48,0,g>0?g:1),...f?[l(49,2,f)]:[])}(h,e,n,k,f,i,j)))}(a))):[],l(29,0,+!!e),l(47,0,e?2:1),...d&&e?[l(51,2,k(1))]:[])}(a.content,a.role,a.messageId,a.isLast,a.hasTools,a.toolResults))),l(2,0,1),l(3,2,new Uint8Array(0)),l(4,0,1),l(5,2,m(l(1,2,b),l(4,2,new Uint8Array(0)))),l(8,2,""),l(13,0,1),l(15,2,(g=m(l(1,2,new Uint8Array(0)),l(2,2,new Uint8Array(0))),m(l(1,2,"cursor\\aisettings"),l(3,2,new Uint8Array(0)),l(6,2,g),l(8,0,1),l(9,0,1)))),l(19,0,1),l(23,2,(0,d.A)()),l(26,2,m(l(1,2,process.platform||"linux"),l(2,2,process.arch||"x64"),l(3,2,process.version||"v20.0.0"),l(4,2,process.cwd?.()||"/"),l(5,2,new Date().toISOString()))),l(27,0,+!!j),...j?[l(29,2,k(1))]:[],...o.map(a=>l(30,2,function(a,b,c=null){return m(l(1,2,a),...c?[l(2,2,c)]:[],l(3,0,b))}(a.messageId,a.role))),...c?.length>0?c.map(a=>{let b,c,d;return l(34,2,(b=a.function?.name||a.name||"",c=a.function?.description||a.description||"",d=a.function?.parameters||a.input_schema||{},m(...b?[l(1,2,b)]:[],...c?[l(2,2,c)]:[],...Object.keys(d).length>0?[l(3,2,JSON.stringify(d))]:[],l(4,2,"custom"))))}):[],l(35,0,0),l(38,0,0),l(46,0,j?2:1),l(47,2,""),l(48,0,+!j),l(49,0,q),l(51,0,0),l(53,0,1),l(54,2,j?"Agent":"Ask"))}(a,b,c,e,f))}(a,b,c,e,f),i=n(g,!1);return h("BODY",`Protobuf=${g.length}B, Framed=${i.length}B`),i}function p(a,b){let c=0,d=0,e=b;for(;e<a.length;){let b=a[e];if(c|=(127&b)<<d,e++,!(128&b))break;d+=7}return[c,e]}function q(a){let b=new Map,c=0;for(;c<a.length;){let[d,e,f,g]=function(a,b){let c;if(b>=a.length)return[null,null,null,b];let[d,e]=p(a,b),f=7&d,g=e;if(0===f)[c,g]=p(a,g);else if(2===f){let[b,d]=p(a,g);c=a.slice(d,d+b),g=d+b}else 1===f?(c=a.slice(g,g+8),g+=8):5===f?(c=a.slice(g,g+4),g+=4):c=null;return[d>>3,f,c,g]}(a,c);if(null===d)break;b.has(d)||b.set(d,[]),b.get(d).push({wireType:e,value:f}),c=g}return b}function r(a){try{let b=q(a);for(let a of b.keys())j.has(a)||h("SCHEMA",`Unknown response field #${a} detected. Schema v${i} may be outdated.`);if(b.has(1)){let a=function(a){let b=q(a),c="",d="",e="",f=!1;if(b.has(3)&&(c=new TextDecoder().decode(b.get(3)[0].value).split("\n")[0]),b.has(9)&&(d=new TextDecoder().decode(b.get(9)[0].value)),b.has(11)&&(f=0!==b.get(11)[0].value),b.has(27))try{let a=q(b.get(27)[0].value);if(a.has(1)){let b=q(a.get(1)[0].value);b.has(1)&&(d=new TextDecoder().decode(b.get(1)[0].value)),b.has(3)&&(e=new TextDecoder().decode(b.get(3)[0].value))}}catch(a){h("EXTRACT",`MCP parse error: ${a.message}`)}return(!e&&b.has(10)&&(e=new TextDecoder().decode(b.get(10)[0].value)),c&&d)?{id:c,type:"function",function:{name:d,arguments:e||"{}"},isLast:f}:null}(b.get(1)[0].value);if(a)return h("EXTRACT",`Tool call: ${a.function.name}`),{text:null,error:null,toolCall:a,thinking:null}}if(b.has(2)){let{text:a,thinking:c}=function(a){let b=q(a),c=null,d=null;if(b.has(1)&&(c=new TextDecoder().decode(b.get(1)[0].value)),b.has(25))try{let a=q(b.get(25)[0].value);a.has(1)&&(d=new TextDecoder().decode(a.get(1)[0].value))}catch(a){h("EXTRACT",`Thinking parse error: ${a.message}`)}return{text:c,thinking:d}}(b.get(2)[0].value);if(a||c)return{text:a,error:null,toolCall:null,thinking:c}}return{text:null,error:null,toolCall:null,thinking:null}}catch(b){return h("EXTRACT",`Decode failed (schema v${i}): ${b.message}`),{text:null,error:null,toolCall:null,thinking:null,raw:Buffer.from(a).toString("base64"),decodeError:b.message}}}},81756:(a,b,c)=>{c.d(b,{JA:()=>h});var d=c(55511),e=c.n(d),f=c(85081);function g(a,b=""){return e().createHash("sha256").update(a+b).digest("hex")}function h(a,b=null,c=!0){let d=a.includes("::")?a.split("::")[1]:a,i=b||g(d,"machineId"),j=(0,f.Ay)(d,f.Ay.DNS),k=g(d),l=function(a){let b=Math.floor(Date.now()/1e6),c=new Uint8Array([b>>40&255,b>>32&255,b>>24&255,b>>16&255,b>>8&255,255&b]),d=165;for(let a=0;a<c.length;a++)c[a]=(c[a]^d)+a%256&255,d=c[a];let e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789-_",f="";for(let a=0;a<c.length;a+=3){let b=c[a],d=a+1<c.length?c[a+1]:0,g=a+2<c.length?c[a+2]:0;f+=e[b>>2],f+=e[(3&b)<<4|d>>4],a+1<c.length&&(f+=e[(15&d)<<2|g>>6]),a+2<c.length&&(f+=e[63&g])}return`${f}${a}`}(i),m="linux";"u">typeof process&&("win32"===process.platform?m="windows":"darwin"===process.platform&&(m="macos"));let n="x64";return"u">typeof process&&"arm64"===process.arch&&(n="aarch64"),{authorization:`Bearer ${d}`,"connect-accept-encoding":"gzip","connect-protocol-version":"1","content-type":"application/connect+proto","user-agent":"connect-es/1.6.1","x-amzn-trace-id":`Root=${e().randomUUID()}`,"x-client-key":k,"x-cursor-checksum":l,"x-cursor-client-version":"3.12.17","x-cursor-client-commit":"0fb762053c34788bb7760d5673f8a6d4c8589d50","x-cursor-client-type":"ide","x-cursor-client-os":m,"x-cursor-client-arch":n,"x-cursor-client-device-type":"desktop","x-cursor-config-version":e().randomUUID(),"x-cursor-timezone":Intl.DateTimeFormat().resolvedOptions().timeZone||"UTC","x-ghost-mode":c?"true":"false","x-request-id":e().randomUUID(),"x-session-id":j}}}};