@techysy/10router 1.3.6 → 1.5.0

package/app/public/i18n/changelog/zh-TW.md

@@ -2,24 +2,64 @@
 
 這裡展示面向用戶的關鍵更新；完整開發明細見 [CHANGELOG.md](https://github.com/techysy/10router/blob/main/CHANGELOG.md)。
 
-## v1.3.6 (2026-10-07)
+## v1.5.0 (2026-10-15)
 
 ### ✨ 新增
 
-- **免費線卡片新增 CreditDaddy 閘道狀態**（issue #49）：ZCode Free / MiniMax Free / Trae Free 卡片現在會探測本地閘道連接埠並直觀顯示連通狀態，不通時給出下載連結與開啟引導。
+- **多帳號「到期優先調度」升級為環形接力**：原「配額包到期優先」開關現已覆蓋配額包 / 訂閱速率視窗 / 餘額三類額度，並對週期雙桶（Antigravity/Gemini 5h+7d、MiniMax Code M Plan）改用「單點死磕、只前滾不插隊、跌破 5% 紅區無感換血」的接力演算法——不再全池輪流失血、整條通道一起黑屏。
+- **新供應商**：MiniMax Code 訂閱雙線（國內 / 國際，裝置碼 OAuth 直連 + M Plan 視窗 + Credits 餘額追蹤）、River AI（按量計費 + OpenAI 相容雙端點）、ModelScope 魔搭（按量 + 20 款主流模型 + passthrough）、Codiv 與 HAL-X THX-01（System One 決策模型端點）。
+- **通用外部額度推送介面**：外部伴侶（首個接線方 CreditDaddy）把自己解析好的額度 POST 到 `/api/external-quota/<source>`，統一配額頁即渲染成卡片；配合「同名認領」，CD 帳號別名與連線名相同時餘額直接掛到路由連線卡上。
+- **API Key 細粒度權限**：客戶端 key 可設可呼叫的模型 / Combo 白名單，越權請求直接 403；Endpoint 頁互動式編輯。
+- **Gemini 4「Argon」入庫**：能力（視覺 + 推理 + 搜尋 + 1M 上下文）與官方價目（$2 / $10）。
+- **重排序（Rerank）類別**：新增 `/v1/rerank` 端點與獨立模型類別，接入 Cohere、Jina AI、SiliconFlow（BGE Reranker）三家——輸入 `query` + 候選文件、輸出相關性分數，RAG / 知識庫檢索精排即插即用；側邊欄媒體供應商新增「Rerank」入口，詳情頁帶可互動範例。
+- **LongCat 資源包額度**：CreditDaddy 可推送 LongCat Token 資源包餘量到配額頁（同名認領掛到連線卡）；贈送/購買包按官方消耗順序規則逐包展示。
+- **供應商頁連線狀態篩選器**：供應商牆可按「活躍 / 錯誤 / 未啟用 / 無連線」篩選——「活躍」含已連上的供應商與拓撲開關開啟的免密供應商；彈出選單與整體控制項語言一致（不再使用原生下拉框）。
 
 ### 🐛 修復
 
-- **升級安裝不再彈「無法關閉」**：升級時安裝器此前會執行舊版本凍結的解除安裝器，其程序檢查即使在沒有 10Router 程序執行時也可能失敗並反覆重試後彈框。現在新安裝器自帶清理、跳過舊解除安裝器，用戶資料不受影響。
+- **同名認領後連線卡的「重新整理配額」真正回源**：此前重新整理只會重讀本地快照，CreditDaddy 收不到現拉請求、數字不變；現在重新整理先 POST 回 CD 觸發現拉重推，且全程按鈕保持旋轉。
+- **用量拓撲圖不再顯示已下架供應商**：曾被下架（如 Token Harbor 網頁會話）但庫裡仍有殘留連線的供應商，不再以幽靈節點復活在拓撲畫布上。
+- **0 積分配額包不再劫持到期倒數**：已耗盡的贈送包此前仍參與「最快到期」排序，把帳號頂到隊首空燒；現只按明細中存活包排序。
+- **混合大小寫命名空間模型 id 不再被剝圖**：reseller 以 `vendor/Model-Name` 形式暴露的多模態模型，此前因大小寫漏配能力行導致圖片被靜默剝離，現補大小寫不敏感兜底。
+- **Qoder DeepSeek / GLM / MiniMax 檔補回視覺**：這幾檔模型上游實測支援圖片輸入，但能力表漏配導致圖片被剝離，現已按活體實測結果補上。
+- **MiniMax Code Credits 卡面「999.96 / 999.96」雙印**、**未認領的 river / modelscope 連線不再報「Usage API not implemented」**（改給同名認領指路文案）。
+
+## v1.4.0 (2026-10-10)
+
+### ✨ 新增
+
+- **API 金鑰支援每日 Token 限額**：每個客戶端 key 可設每日上限（如 100M/天），超限回傳 429 `rate_limit_error`，伺服器本地零點自動重置；Endpoint 頁有全域總開關，每 key 隨時增改限額，列表即時顯示今日用量佔比。
+- **配額追蹤器卡片圖示直達供應商官網**：配額頁每張卡片左上角的供應商 logo 現在點擊即在新分頁開啟對應官網/控制台。
+- **「隱藏零餘額供應商卡片」開關**：實驗頁的卡片隱藏新增第二檔——0 餘額/0 積分的連接卡片可整卡隱藏，與既有「隱藏無配額卡片」互相獨立、可疊加。
+- **「待重新授權」帳號狀態**：OAuth 帳號重新整理權杖失效時，連接列亮起「待重新授權」標記並冷卻 24 小時（不再每 2 分鐘空撞一次）；重新授權立即恢復。
+- **CodeBuddy 模型面對齊官方積分頁**：國際線補上整條 Claude 線（Opus 5.5 / Sonnet 5.5 等 8 款）與 Grok-4.7、Gemini-3.8-Flash、GPT-6.1-Sol；國內線新增 GLM-5.3-FlashX（0.14x）與 StepFun Step-5-Preview（0.43x）；Space-Bunny 折扣結束回調 0.08x。新增「付費檔」「訂閱優先」兩種模型徽章。
+- **OpenCode / Token Harbor 新模型**：OpenCode 付費線補齊 Claude Haiku 5.5（能力宣告修正為 1M）等新上架模型；Token Harbor 收錄 `claude-haiku-5.5:free`。
+- **Trae Free 模型目錄對齊官方目錄**（issue #54）：新增 18 款，移除 10 款已被上游下架的模型。
+- **免費線卡片的 CreditDaddy 閘道狀態**（issue #49）：桌面 v1.3.5 修訂資產已先行帶上，本版起全渠道生效。
+- **Release 資產命名平台化**：Windows / macOS / fnOS 安裝包檔名統一為「軟體名-平台-…」，同一 Release 頁面內同平台資產自動聚類排序。
+
+### 🐛 修復
+
+- **combo 模型組的上下文視窗現在正確發給客戶端**：此前組合條目只寫嵌套能力區塊，客戶端讀不到頂層 `context_window` 只能按模型名猜、且往高猜，長上下文直到上游硬失敗。
+- **流式請求統計口徑兩處修正**：答覆完整送達後客戶端提前斷開不再記成失敗（issue #48 / #50）；上游中途掐斷的乾淨結束不再記成成功，改記「截斷」；SSE 流中被丟棄的損壞行會計數並顯示在請求明細。
+- **重新整理權杖處理三連修**：輪換後的新權杖落庫失敗時立即報錯，不再靜默用舊權杖把帳號整體踢下線；sql.js 模式落盤失敗自動重排重試；401 自動刷新重試失敗時把真實原因透傳給客戶端。
+- **StepFun CN 實名閘門不再誤報「額度用完」**：未完成實名核驗的 403 不再把模型鎖 2 分鐘，儀表盤給出實名頁直達連結，combo 立即穿透到下一候選。
+- **GitHub Copilot 配額按類別分行**：chat / completions 月度視窗不再併入資源包合計，與 Antigravity 口徑一致。
+- **自訂連接名稱優先顯示**：連接列不再被使用者名稱/信箱擠掉自訂名稱。
+- **模型目錄與能力參數糾錯**：客戶端拿到的上下文/輸出上限對齊各供應商真實值（修復別名漂移、目錄查找落空、combo 聚合缺口等同源問題）。
+- **Windows 安裝器三連修**：升級不再彈「無法關閉」、不再執行舊版卸載器；UAC 被拒絕不再無聲失敗。
+- **fnOS 打包修復**：不再誤覆蓋 standalone 自帶的精簡 next 模組（裝上即起不來的根因）。
 
 ## v1.3.5 (2026-10-05)
 
 ### ✨ 新增
 
+- **免費線卡片新增 CreditDaddy 閘道狀態**（issue #49）：ZCode Free / MiniMax Free / Trae Free 卡片現在會探測本地閘道連接埠並直觀顯示連通狀態，不通時給出下載連結與開啟引導。
 - **新增 Trae Free 供應商（`trae-free`）**：經本地 CreditDaddy 閘道使用 Trae（SOLO）遠端 Agent 額度，與 ZCode Free / MiniMax Free 同款接線——免登入卡片、主機/連接埠共享、路徑按線獨立，12 款模型（Doubao Seed Code、MiniMax M2.7、GLM 5 系、DeepSeek V4 系、Kimi K2.5/2.6、Qwen 3.5/3.6），支援思考流；卡片圖示為從客戶端 exe 提取的官方黑白標。
 
 ### 🐛 修復
 
+- **升級安裝不再彈「無法關閉」（Windows 安裝包已原位替換更新）**：升級時新安裝器自帶清理、跳過舊版本凍結的舊解除安裝器程式碼，不再觸發幽靈程序的無法關閉彈窗或靜默退出碼 2，用戶資料不受影響。
 - **中途夭折的串流請求不再留下一條「綠色 0 token」的假成功**（issue #48）—— 串流請求一開就寫入佔位記錄，但那時還沒產出任何內容、狀態卻已是「成功」。上游隨後斷鏈時，中止路徑完全不碰資料庫，那列記錄再沒人修正：一次被掐斷的請求會在詳情列表裡一直顯示成「已完成、且恰好沒花錢」。現在進行中的記錄就顯示為進行中，被中止的串流請求記為失敗。
 - **單一模型失敗不再把整條連線標記為「不可用」**（issue #46）—— 這才是根因：按模型的鎖在寫入時，會連帶寫一個帳號級的「不可用」標誌，而選路自始至終只看那把按模型的鎖。於是兄弟模型照常工作、連線卻顯示為停擺。現在這個標誌只在真正的帳號級失敗時才寫。
 - **CreditDaddy 三條線的 404 不再被報成「模型不存在」**（issue #47）：CreditDaddy 已把閘道端點遷到帶品牌名的路徑（`/gateway/zcode/…` 等），404 說的是端點而不是你的模型。現在提示會直說這一點，卡片上也給出排查指引：路徑要保留品牌段；若 CreditDaddy 版本早於這次改名（仍只提供舊的裸端點），應升級 CreditDaddy 而不是改那個輸入框。

package/app/public/i18n/literals/zh-CN.json

@@ -330,6 +330,15 @@
   "Create model combos with fallback support": "创建具有后备支持的模型组合",
   "Create your first API key to get started": "创建您的第一个 API 密钥以开始使用",
   "Created": "已创建",
+  "Daily Token Limit": "每日 Token 限额",
+  "Daily token limits": "每日 Token 限额开关",
+  "Master switch for the per-key daily token caps. Turning this off stops enforcement but keeps every key's configured limit.": "每个密钥每日 Token 限额的总开关。关闭后不再拦截请求，但保留各密钥已配置的限额值。",
+  "Daily token limit exceeded for API key \"{name}\" (used {used} / {limit} today). Resets in {reset}.": "API 密钥 \"{name}\" 今日 Token 限额已用完（今日已用 {used} / {limit}）。将在 {reset} 后重置。",
+  "(rotated)": "（已轮换）",
+  "Edit Daily Token Limit": "编辑每日 Token 限额",
+  "e.g. 100000000 — empty means unlimited": "例如 100000000 — 留空表示不限",
+  "Leave empty to remove the limit.": "留空以移除限额。",
+  "Limit reached": "已达限额",
   "Creating...": "创建中...",
   "Credit multiplier": "积分倍率",
   "Current": "当前",
@@ -378,6 +387,7 @@
   "Delete selected preset": "删除选中的预设",
   "Delete this combo?": "删除此组合？",
   "Delete this connection?": "删除此连接？",
+  "Remove this pushed quota card? The pushing app can re-add it with its next update.": "移除此推送额度卡片？推送方可在下次更新时重新添加。",
   "Deno Deploy API Token": "Deno Deploy API 令牌",
   "Deno Deploy v2 runs on a high-performance global edge network": "Deno Deploy v2 运行在高性能全球边缘网络上",
   "Deno Relay": "Deno Relay",
@@ -831,6 +841,7 @@
   "Open DevTools (F12) → Application/Storage → Cookies": "打开 DevTools (F12) → 应用程序/存储 → Cookie",
   "Open Settings": "打开设置",
   "Open platform.iflow.cn in your browser": "在浏览器中打开platform.iflow.cn",
+  "Open provider site": "打开提供商官网",
   "OpenAI / ElevenLabs / Edge / Google / Deepgram voices.": "OpenAI / ElevenLabs / Edge / Google / Deepgram 语音。",
   "OpenAI Codex CLI": "OpenAI Codex CLI",
   "OpenAI Compatible (Prod)": "OpenAI 兼容（生产）",
@@ -1025,6 +1036,10 @@
   "Retry": "重试",
   "rides the free quota": "走免费额度",
   "promo free until": "限时免费至",
+  "Paid tier": "付费档",
+  "Not available on every plan yet — needs a paid tier, or is still rolling out": "尚未对所有账号档位开放——需付费档,或仍在灰度中",
+  "Sub priority": "订阅优先",
+  "Prioritized for subscribers": "订阅用户排队优先",
   "Risk Notice": "风险提示",
   "Roo AI Assistant": "Roo AI 助手",
   "Rotate providers across requests instead of strict fallback order.": "在请求间轮换提供商，而不是严格的回退顺序。",
@@ -1261,8 +1276,10 @@
   "Turn off Empty": "关闭空账号",
   "Turn on Available": "可用账号",
   "Hide no-quota provider cards": "隐藏无配额提供商卡片",
+  "Hide zero-balance provider cards": "隐藏零余额提供商卡片",
+  "Quota page view: hide cards whose quota is fully depleted (0 balance / 0 credits)": "配额页视图：隐藏配额已耗尽（0 余额 / 0 积分）的卡片",
   "Nested cycle quota bars": "嵌套周期配额条",
-  "Draw contained windows (rolling ⊂ weekly ⊂ monthly) as one nested track instead of flat rows": "把包含关系的周期窗口（滚动 ⊂ 每周 ⊂ 月度）画成一条嵌套轨道，而不是拆分平铺行",
+  "Draw contained subscription windows as nested concentric tracks instead of flat rows": "把包含关系的订阅窗口画成嵌套同心轨道，而不是拆分平铺行",
   "Quota page view: hide cards that have no quota to display": "配额页视图：隐藏没有配额可显示的卡片",
   "Turn request detail recording on/off globally": "全局打开/关闭请求详细信息记录",
   "Turned off": "已关闭",
@@ -1273,6 +1290,8 @@
   "Unified Endpoint": "统一端点",
   "Unknown": "未知",
   "Partial": "部分受限",
+  "Needs re-auth": "待重新授权",
+  "Refresh token expired or revoked. Please re-authorize this connection.": "刷新令牌已失效或被吊销，请重新授权该连接。",
   "Unauthorized": "会话已过期或无访问权限，请重新登录后重试",
   "Unselect all": "取消选择全部",
   "Update": "更新",
@@ -1456,6 +1475,8 @@
   "Rolling": "滚动",
   "Weekly": "每周",
   "Monthly": "每月",
+  "chat": "聊天",
+  "completions": "补全",
   "session (5h)": "滚动",
   "Session (5h)": "滚动",
   "weekly (7d)": "每周",
@@ -1727,9 +1748,9 @@
   "v1m System One calibrated decision engine. Fast probabilistic evaluations over state and questions.": "v1m System One 校准决策引擎：针对状态与问题做快速概率评估。",
   "Monthly Credits": "月度额度",
   "Purchased Credits": "加量额度",
-  "Earliest Expiry First": "配额包到期优先",
-  "Prioritize accounts with quota packages that expire soonest": "跨账号优先消耗最快到期的配额包/赠送包",
-  "Earliest package": "最早到期配额包",
+  "Earliest Expiry First": "到期优先调度",
+  "Prioritize accounts whose quota (packages, subscription windows, balances) expires soonest": "跨账号优先消耗最快到期/重置的额度（配额包 / 订阅窗口 / 余额）",
+  "Earliest package": "最早到期额度",
   "Quota package": "配额包",
   "Success": "成功率",
   "Avg Latency": "平均延迟",
@@ -1763,6 +1784,8 @@
   "Individual quota reached. Resets at {time} (in {duration}).": "该账号额度已用完，将于 {time} 重置（约 {duration} 后）；可升级订阅提升限额。",
   "Individual quota reached for model {model}. Resets at {time} (in {duration}).": "模型 {model} 的额度已用完，将于 {time} 重置（约 {duration} 后）；该账号的其它模型仍可正常使用。",
   "Subscription quota used up. Please wait for the quota reset.": "该账号额度已用完，请等待重置。",
+  "This account must complete real-name verification before StepFun will serve it. Complete it at {url}, then retry.": "该账号需先完成实名（人脸）核验，StepFun 才会放行调用：前往 {url} 完成核验后重试。",
+  "Complete verification": "去完成核验",
   "Retry on empty": "空回复时切换",
   "When the model returns an empty answer (content filter or zero output), fall through to the next model. The abandoned attempt still consumes its input tokens.": "当模型返回空回复（内容审查或零输出）时，自动改用下一个模型。被放弃的调用仍会消耗其输入 token。",
   "{n}d": "{n}天",
@@ -2013,5 +2036,22 @@
   "Download CreditDaddy": "下载 CreditDaddy",
   "Synced CreditDaddy web session expired — plan credits may read low or missing. Re-export the account from CreditDaddy after logging in to Qoder web again.": "已同步的 CreditDaddy 网页会话已失效——套餐积分可能显示偏低或缺失。请在 CreditDaddy 重新登录 Qoder 网页后再次导出导入。",
   "Web session check failed for": "以下账号的网页会话校验失败：",
-  "Web sessions verified": "网页会话校验通过"
+  "Web sessions verified": "网页会话校验通过",
+  "Allowed Models & Combos": "允许调用的模型与组合",
+  "Restrict this key to specific models or combos. Leave empty for unrestricted access.": "为此 API Key 限制可调用的模型或 Combo 组合白名单。留空表示无限制。",
+  "Allowed Models (one per line or comma-separated)": "允许的模型（每行一个或逗号分隔，支持通配符）",
+  "Allowed Combos (one per line or comma-separated)": "允许的组合（每行一个或逗号分隔）",
+  "Allowed": "已限制",
+  "combos": "个组合",
+  "Not connected": "未连接",
+  "Card display preferences": "配额卡片显示偏好",
+  "Customize which quota cards are displayed and their layout style.": "自定义哪些配额卡片显示在列表中以及进度条布局样式。",
+  "Show external pushed cards": "显示外部推送卡片",
+  "Display companion cards (CreditDaddy free quotas & status notes)": "显示外部伴侣应用（CreditDaddy 等）推送的免费额度与状态提示卡",
+  "Hide standard connection cards that have no quota to display": "隐藏没有配额可展示的常规连接卡片",
+  "Hide connection cards whose quota is fully depleted (0 balance / 0 credits)": "隐藏已完全耗尽的连接卡片（0 余额 / 0 积分）",
+  "Quota card display preferences have moved to the Quota Tracker toolbar.": "配额卡片显示偏好已移至配额追踪器工具栏统一配置。",
+  "Filter providers by connection status": "按连接状态筛选供应商",
+  "No providers match this filter": "没有符合此筛选条件的供应商",
+  "No custom providers match this filter": "没有符合此筛选条件的自定义供应商"
 }

package/app/public/i18n/literals/zh-TW.json

@@ -87,9 +87,23 @@
   "Date": "日期",
   "Time": "時間",
   "Created": "已建立",
+  "Daily Token Limit": "每日 Token 限額",
+  "Daily token limits": "每日 Token 限額開關",
+  "Master switch for the per-key daily token caps. Turning this off stops enforcement but keeps every key's configured limit.": "每個金鑰每日 Token 限額的總開關。關閉後不再攔截請求，但保留各金鑰已配置的限額值。",
+  "Daily token limit exceeded for API key \"{name}\" (used {used} / {limit} today). Resets in {reset}.": "API 金鑰 \"{name}\" 今日 Token 限額已用完（今日已用 {used} / {limit}）。將在 {reset} 後重置。",
+  "(rotated)": "（已輪換）",
+  "Edit Daily Token Limit": "編輯每日 Token 限額",
+  "e.g. 100000000 — empty means unlimited": "例如 100000000 — 留空表示不限",
+  "Leave empty to remove the limit.": "留空以移除限額。",
+  "Limit reached": "已達限額",
+  "tokens": "Token",
   "Credit multiplier": "積分倍率",
   "rides the free quota": "走免費額度",
   "promo free until": "限時免費至",
+  "Paid tier": "付費檔",
+  "Not available on every plan yet — needs a paid tier, or is still rolling out": "尚未對所有帳號檔位開放——需付費檔，或仍在灰度中",
+  "Sub priority": "訂閱優先",
+  "Prioritized for subscribers": "訂閱使用者排隊優先",
   "Updated": "已更新",
   "Actions": "操作",
   "Details": "詳細信息",
@@ -269,8 +283,10 @@
   "Turn off Empty": "關閉空帳號",
   "Turn on Available": "可用帳號",
   "Hide no-quota provider cards": "隱藏無配額提供者卡片",
+  "Hide zero-balance provider cards": "隱藏零餘額提供者卡片",
+  "Quota page view: hide cards whose quota is fully depleted (0 balance / 0 credits)": "配額頁檢視：隱藏配額已耗盡（0 餘額 / 0 積分）的卡片",
   "Nested cycle quota bars": "巢狀週期配額條",
-  "Draw contained windows (rolling ⊂ weekly ⊂ monthly) as one nested track instead of flat rows": "把包含關係的週期窗口（滾動 ⊂ 每週 ⊂ 月度）畫成一條巢狀軌道，而不是拆分平鋪行",
+  "Draw contained subscription windows as nested concentric tracks instead of flat rows": "把包含關係的訂閱窗口畫成嵌套同心軌道，而不是拆分平鋪行",
   "Quota page view: hide cards that have no quota to display": "配額頁檢視：隱藏沒有配額可顯示的卡片",
   "Only with balance": "只看有餘額",
   "Show all": "顯示全部",
@@ -524,6 +540,7 @@
   "Open Login Page": "開啟登錄頁",
   "Open Funnel Settings": "開啟 Funnel 設置",
   "Delete this API key?": "刪除此 API 金鑰？",
+  "Remove this pushed quota card? The pushing app can re-add it with its next update.": "移除此推送額度卡片？推送方可在下次更新時重新新增。",
   "Default Key": "預設金鑰",
   "Security required: ": "安全要求：",
   "Failed to read local Xiaomi MiMo Desktop credentials.": "讀取本機小米 MiMo 桌面版憑證失敗。",
@@ -568,9 +585,9 @@
   "v1m System One calibrated decision engine. Fast probabilistic evaluations over state and questions.": "v1m System One 校準決策引擎：針對狀態與問題做快速機率評估。",
   "Monthly Credits": "月度額度",
   "Purchased Credits": "加量額度",
-  "Earliest Expiry First": "配額包到期優先",
-  "Prioritize accounts with quota packages that expire soonest": "跨帳號優先消耗最快到期的配額包/贈送包",
-  "Earliest package": "最早到期配額包",
+  "Earliest Expiry First": "到期優先調度",
+  "Prioritize accounts whose quota (packages, subscription windows, balances) expires soonest": "跨帳號優先消耗最快到期/重設的額度（配額包 / 訂閱視窗 / 餘額）",
+  "Earliest package": "最早到期額度",
   "Quota package": "配額包",
   "Activity Heatmap": "活躍熱力圖",
   "No nodes with 100+ requests in this period": "本時間段內沒有請求數達到 100 的節點",
@@ -587,6 +604,8 @@
   "Individual quota reached. Resets at {time} (in {duration}).": "該帳號額度已用完，將於 {time} 重置（約 {duration} 後）；可升級訂閱提升限額。",
   "Individual quota reached for model {model}. Resets at {time} (in {duration}).": "模型 {model} 的額度已用完，將於 {time} 重置（約 {duration} 後）；該帳號的其它模型仍可正常使用。",
   "Subscription quota used up. Please wait for the quota reset.": "該帳號額度已用完，請等待重置。",
+  "This account must complete real-name verification before StepFun will serve it. Complete it at {url}, then retry.": "該帳號需先完成實名（人臉）核驗，StepFun 才會放行呼叫：前往 {url} 完成核驗後重試。",
+  "Complete verification": "去完成核驗",
   "Retry on empty": "空回覆時切換",
   "When the model returns an empty answer (content filter or zero output), fall through to the next model. The abandoned attempt still consumes its input tokens.": "當模型返回空回覆（內容審查或零輸出）時，自動改用下一個模型。被放棄的呼叫仍會消耗其輸入 token。",
   "{n}d": "{n}天",
@@ -641,6 +660,7 @@
   "Beta toggles for provider tools, daily check-ins, and dashboard security": "提供商工具、每日簽到與儀表板安全的內測開關",
   "No dashboard password is set yet": "尚未設定儀表板密碼",
   "Open dashboard": "開啟儀表板",
+  "Open provider site": "開啟供應商官網",
   "Dashboard: local access only": "儀表板僅本機存取",
   "Refuse every non-local request to the dashboard and its management APIs. The LLM API (/v1) is unaffected — it uses its own API keys. Takes effect immediately; you will lose remote access to this dashboard until you turn it off from the machine itself.": "拒絕所有非本機來源對儀表板及其管理介面的請求。LLM 介面（/v1）不受影響，它使用自己的 API 金鑰。立即生效；關閉前你將無法從其它裝置存取本儀表板（需在本機操作）。",
   "Exposure": "暴露面",
@@ -659,6 +679,8 @@
   "Anyone who can reach the port": "任何能存取該連接埠的人",
   "Unknown": "未知",
   "Partial": "部分受限",
+  "Needs re-auth": "待重新授權",
+  "Refresh token expired or revoked. Please re-authorize this connection.": "刷新權杖已失效或被吊銷，請重新授權該連線。",
   "Anyone who can reach the port and knows the password": "任何能存取該連接埠且知道密碼的人",
   "Remote access to the dashboard stays disabled until a password is set. Set the first password on the machine running 10Router (open http://127.0.0.1:20128 there), or start it with the INITIAL_PASSWORD environment variable.": "在設定密碼之前，儀表板的遠端存取維持關閉。請在執行 10Router 的機器上設定第一個密碼（在該機開啟 http://127.0.0.1:20128），或以 INITIAL_PASSWORD 環境變數啟動。",
   "No password is set yet, so the dashboard opens on this machine only. Set a password on the Settings page to reach it from other devices. The gateway API (/v1) is unaffected.": "尚未設定密碼：儀表板目前只能在本機開啟。請在「設定」頁設定一組密碼，即可從其它裝置存取；閘道介面（/v1）不受影響。",
@@ -856,5 +878,23 @@
   "Download CreditDaddy": "下載 CreditDaddy",
   "Synced CreditDaddy web session expired — plan credits may read low or missing. Re-export the account from CreditDaddy after logging in to Qoder web again.": "已同步的 CreditDaddy 網頁工作階段已失效——套餐積分可能顯示偏低或缺失。請在 CreditDaddy 重新登入 Qoder 網頁後再次匯出匯入。",
   "Web session check failed for": "以下帳號的網頁工作階段校驗失敗：",
-  "Web sessions verified": "網頁工作階段校驗通過"
+  "Web sessions verified": "網頁工作階段校驗通過",
+  "Allowed Models & Combos": "允許叫用的模型與組合",
+  "Restrict this key to specific models or combos. Leave empty for unrestricted access.": "為此 API Key 限制可叫用的模型或 Combo 組合白名單。留空表示無限制。",
+  "Allowed Models (one per line or comma-separated)": "允許的模型（每行一個或逗號分隔，支援萬用字元）",
+  "Allowed Combos (one per line or comma-separated)": "允許的組合（每行一個或逗號分隔）",
+  "Allowed": "已限制",
+  "models": "個模型",
+  "combos": "個組合",
+  "Not connected": "未連線",
+  "Card display preferences": "配額卡片顯示偏好",
+  "Customize which quota cards are displayed and their layout style.": "自訂哪些配額卡片顯示在列表中以及進度條佈局樣式。",
+  "Show external pushed cards": "顯示外部推送卡片",
+  "Display companion cards (CreditDaddy free quotas & status notes)": "顯示外部伴侶應用（CreditDaddy 等）推送的免費額度與狀態提示卡",
+  "Hide standard connection cards that have no quota to display": "隱藏沒有配額可展示的常規連線卡片",
+  "Hide connection cards whose quota is fully depleted (0 balance / 0 credits)": "隱藏已完全耗盡的連線卡片（0 餘額 / 0 積分）",
+  "Quota card display preferences have moved to the Quota Tracker toolbar.": "配額卡片顯示偏好已移至配額追蹤器工具列統一設定。",
+  "Filter providers by connection status": "依連線狀態篩選供應商",
+  "No providers match this filter": "沒有符合此篩選條件的供應商",
+  "No custom providers match this filter": "沒有符合此篩選條件的自訂供應商"
 }

package/app/src/lib/db/adapters/sqljsAdapter.js

@@ -19,23 +19,43 @@ export async function createSqlJsAdapter(filePath) {
 
   let dirty = false;
   let saveTimer = null;
+  let saveFailures = 0;
   const SAVE_DEBOUNCE_MS = 100;
+  const SAVE_RETRY_MAX_MS = 30_000;
 
   function persist() {
     const data = db.export();
     fs.writeFileSync(filePath, Buffer.from(data));
     dirty = false;
+    saveFailures = 0;
   }
 
   function scheduleSave() {
     dirty = true;
     if (saveTimer) clearTimeout(saveTimer);
-    saveTimer = setTimeout(() => {
-      saveTimer = null;
-      if (dirty) {
-        try { persist(); } catch (e) { console.error("[sqljs] save failed:", e); }
-      }
-    }, SAVE_DEBOUNCE_MS);
+    saveTimer = setTimeout(runSave, SAVE_DEBOUNCE_MS);
+  }
+
+  function runSave() {
+    saveTimer = null;
+    if (!dirty) return;
+    try {
+      persist();
+    } catch (e) {
+      // A lost write is not always harmless. The request path persists rotated
+      // refresh tokens through this adapter, and a consumed token left in the
+      // DB gets the whole OAuth session revoked on the next request (see
+      // persistRefreshedCredentials). Retrying on the next mutation alone means
+      // a quiet install that stops writing loses the batch outright — and the
+      // write that triggered it has already reported success. Back off rather
+      // than spin: a permanently locked file settles at the cap instead of
+      // hammering the disk.
+      saveFailures += 1;
+      const delay = Math.min(SAVE_DEBOUNCE_MS * 2 ** saveFailures, SAVE_RETRY_MAX_MS);
+      console.error(`[sqljs] save failed (retrying in ${delay}ms):`, e?.message || e);
+      if (saveTimer) clearTimeout(saveTimer);
+      saveTimer = setTimeout(runSave, delay);
+    }
   }
 
   function paramsObj(params) {
@@ -101,12 +121,25 @@ export async function createSqlJsAdapter(filePath) {
 
   function close() {
     if (saveTimer) clearTimeout(saveTimer);
-    if (dirty) persist();
+    saveTimer = null;
+    // Never throw out of close(): a failed final write must not stop the caller
+    // shutting down, but it must not vanish either.
+    if (dirty) {
+      try { persist(); } catch (e) {
+        console.error("[sqljs] final save failed, in-memory changes are lost:", e?.message || e);
+      }
+    }
     db.close();
   }
 
-  // Flush on shutdown
-  const flush = () => { if (dirty) try { persist(); } catch {} };
+  // Flush on shutdown. A silent `catch {}` here hid the exact failure that loses
+  // a rotated refresh token at process exit, so log it loudly instead.
+  const flush = () => {
+    if (!dirty) return;
+    try { persist(); } catch (e) {
+      console.error("[sqljs] shutdown save failed, in-memory changes are lost:", e?.message || e);
+    }
+  };
   process.on("beforeExit", flush);
   process.on("SIGINT", flush);
   process.on("SIGTERM", flush);

package/app/src/sse/services/backgroundTokenRefresh.js

@@ -4,6 +4,7 @@
 import * as log from "../utils/logger.js";
 import { getRefreshLeadMs } from "open-sse/services/tokenRefresh.js";
 import { getCredentialExpiryMs } from "open-sse/services/oauthCredentialManager.js";
+import { isNeedsReauthCooling } from "open-sse/services/accountFallback.js";
 
 /** Refresh when expiry is within 30 minutes (or the provider on-request lead, whichever larger). */
 export const BACKGROUND_REFRESH_LEAD_MS = 30 * 60 * 1000;
@@ -56,6 +57,12 @@ export function selectConnectionsNeedingRefresh(connections, nowMs = Date.now())
     const authType = String(conn.authType || "").toLowerCase().replace(/_/g, "");
     if (authType !== "oauth") continue;
     if (!conn.refreshToken) continue;
+    // Needs-reauth cooling: the refresh token is known-dead until the user
+    // re-authorizes. Without this skip the 5-minute tick would probe the corpse
+    // forever and each rejection rewrites needsReauthUntil to a fresh 24h, so
+    // the account would never re-enter rotation. First tick after the window
+    // expires probes once and (if still dead) starts a new window.
+    if (isNeedsReauthCooling(conn, nowMs)) continue;
 
     const expiresAtMs = getCredentialExpiryMs(conn);
     if (expiresAtMs === null) continue;

package/app/src/sse/services/codebuddyCheckin.js

@@ -18,6 +18,7 @@
 // rejects the whole run or kills the server.
 
 import * as log from "../utils/logger.js";
+import { isNeedsReauthCooling } from "open-sse/services/accountFallback.js";
 
 const DAILY_CHECKIN_URL = "https://www.codebuddy.cn/v2/billing/meter/daily-checkin";
 const STATUS_URL = "https://www.codebuddy.cn/v2/billing/meter/checkin-activity-status";
@@ -118,6 +119,9 @@ export function isEligibleCbcnConnection(conn) {
   if (!conn || !conn.accessToken) return false;
   if (conn.provider !== "codebuddy-cn") return false;
   if (conn.isActive === false) return false;
+  // Needs-reauth cooling: the token set is known-dead. A check-in would 401,
+  // its refresh re-marks the account and re-extends the cooldown window forever.
+  if (isNeedsReauthCooling(conn)) return false;
   const claims = decodeJwt(conn.accessToken) || {};
   return isCodeBuddyCnRealm(claims.iss || "");
 }
@@ -131,6 +135,8 @@ export function isEligibleCbIntlConnection(conn) {
   if (!conn || !conn.accessToken) return false;
   if (conn.provider !== "codebuddy-intl") return false;
   if (conn.isActive === false) return false;
+  // Same needs-reauth cooling skip as the CN check-in — see above.
+  if (isNeedsReauthCooling(conn)) return false;
   const claims = decodeJwt(conn.accessToken) || {};
   return isCodeBuddyRealm(claims.iss || "");
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@techysy/10router",
-  "version": "1.3.6",
+  "version": "1.5.0",
   "description": "10Router CLI - Start and manage 10Router server",
   "publishConfig": {
     "access": "public"

package/app/.next-cli-build/server/chunks/1159.js

@@ -1,7 +0,0 @@
-"use strict";exports.id=1159,exports.ids=[1159],exports.modules={12557:(a,b,c)=>{c.d(b,{Bl:()=>m,Hu:()=>u,Qo:()=>i,S5:()=>o,d5:()=>q,hk:()=>h,jl:()=>j,kJ:()=>n,pT:()=>p,vt:()=>r,wz:()=>k});var d=c(3662);let e=new Set([401,402,403,404,429]),f=/^(?:(\d+(?:\.\d+)?)h)?(?:(\d+(?:\.\d+)?)m)?(?:(\d+(?:\.\d+)?)s)?$/i;function g(a){let b="string"==typeof a?a:"";if(!b)return null;let c=/"quotaResetDelay"\s*:\s*"([^"]+)"/.exec(b)||/"retryDelay"\s*:\s*"([^"]+)"/.exec(b)||/\bResets in\s+([0-9hms.]+)/i.exec(b);if(c){var d;let a,b=(d=c[1].replace(/[.\s]+$/,""),(a=f.exec(String(d||"").trim()))&&(a[1]||a[2]||a[3])?Math.round(3600*parseFloat(a[1]||0)+60*parseFloat(a[2]||0)+parseFloat(a[3]||0)):null);if(null!==b&&b>0)return 1e3*b}let e=/"quotaResetTimeStamp"\s*:\s*"([^"]+)"/.exec(b);if(e){let a=Date.parse(e[1]);if(Number.isFinite(a)){let b=a-Date.now();if(b>0)return b}}return null}function h(a,b,c=0,f=null){let i=b?("string"==typeof b?b:JSON.stringify(b)).toLowerCase():"";for(let b of d.t2)if((!b.provider||b.provider===f)&&(b.text&&i&&i.includes(b.text)||b.status&&b.status===a)){if(b.backoff){let a=Math.min(c+1,d.EQ.maxLevel);return{shouldFallback:!0,cooldownMs:function(a,b){let c=g(a);if(null!==c)return Math.min(c,d.$e);let e=function(a=0){let b=Math.max(0,a-1);return Math.min(d.EQ.base*Math.pow(2,b),d.EQ.max)}(Math.min(b+1,d.EQ.maxLevel)),f=function(a){let b="string"==typeof a?a:"";if(!b)return null;let c=b.match(/(\d+)\s*秒(?:钟)?后(?:重试|再试|再尝试)?/);return c||(c=b.match(/(?:retry|try again|come back|wait)\s+(?:after|in)\s+(\d+)\s*(?:s|sec|secs|seconds?)\b/i))?parseInt(c[1],10):null}(a);return null===f?e:Math.min(Math.max(e,1e3*f),d.fh)}(i,c),newBackoffLevel:a,channelScope:!!b.channelScope}}return{shouldFallback:!0,cooldownMs:b.cooldownMs,channelScope:!!b.channelScope}}return a>=400&&a<500&&!e.has(a)?{shouldFallback:!1,cooldownMs:0,channelScope:!1}:{shouldFallback:!0,cooldownMs:d.wf,channelScope:!1}}function i(a){if(!a)return"";let b=new Date(a).getTime()-Date.now();if(b<=0)return"reset after 0s";let c=Math.ceil(b/1e3),d=Math.floor(c/3600),e=Math.floor(c%3600/60),f=c%60,g=[];return d>0&&g.push(`${d}h`),e>0&&g.push(`${e}m`),(f>0||0===g.length)&&g.push(`${f}s`),`reset after ${g.join(" ")}`}let j="modelLock_",k=`${j}__all`;function l(a){return a?`${j}${a}`:k}function m(a,b){let c=a[l(b)]||a[k];return!!c&&new Date(c).getTime()>Date.now()}function n(a){if(!a)return null;let b=null,c=Date.now();for(let[d,e]of Object.entries(a)){if(!d.startsWith(j)||!e)continue;let a=new Date(e).getTime();a<=c||(!b||a<b)&&(b=a)}return b?new Date(b).toISOString():null}function o(a,b){return{[l(a)]:new Date(Date.now()+b).toISOString()}}function p(a,b=Date.now()){let c=a?.lastAt?new Date(a.lastAt).getTime():0,e=c>0&&b-c<=d.Dt,f=e?d.X8.long:d.X8.short;return{until:new Date(b+f).toISOString(),lastAt:new Date(b).toISOString(),strikes:(a?.strikes||0)+1,durationMs:f,escalated:e}}function q(a,b=Date.now()){if(!a?.until)return 0;let c=new Date(a.until).getTime();return Number.isFinite(c)?Math.max(0,c-b):0}function r(a){return`${a}
-
-提示：当前请求触发上游渠道级安全风控（非账号问题）。出路：1. 开启新对话重试（推荐）；2. 输入 /compact 压缩会话后重试；3. 稍等窗口结束后自动恢复。（注意：切到其它渠道前请确认该渠道也有同名模型，否则会报 11102 模型不存在。）`}let s=/too many requests|rate[_\s-]*limit|频率限制|quota.*exceeded|"429"|\[\s*429\s*\]/i,t={"xiaomi-mimo":"小米 MiMo 为体验/免费通道，每分钟请求数与 Token 数（TPM）均有硬限制，超出即拒绝。"};function u(a,b){if(!s.test(String(a||"")))return a;let c=g(a);if(null!==c||/Individual quota reached|QUOTA_EXHAUSTED|RESOURCE_EXHAUSTED/i.test(a)){let b="";if(null!==c)try{b=new Date(Date.now()+c).toLocaleTimeString("zh-CN",{hour:"2-digit",minute:"2-digit"})}catch{b=""}return`${a}
-
-提示：该账号的本阶段额度已用尽（非故障、非账号异常），系统已按上游重置时间自动冷却${b?`，约 ${b} 自动恢复`:""}；期间请切换其他模型或渠道。`}let d=t[b]?` ${t[b]}`:"";return`${a}
-
-提示：上游触发了限流（HTTP 429），非账号异常，已按上游提示自动冷却并稍后自动恢复；期间可切换其他模型或渠道，或稍候重试。${d}`}},43659:(a,b,c)=>{c.d(b,{A1:()=>j,Yx:()=>h,lR:()=>l,wO:()=>k,xJ:()=>e,yj:()=>f,zL:()=>i});var d=c(3662);function e(a,b){let c=d.LY[a]||(a>=500?{type:"server_error",code:"internal_server_error"}:{type:"invalid_request_error",code:""});return{type:"error",error:{message:b||d.O[a]||"An error occurred",type:c.type,code:c.code}}}function f(a,b,c=null){return new Response(JSON.stringify(e(a,b)),{status:a,headers:{"Content-Type":"application/json","Access-Control-Allow-Origin":"*",...c}})}let g=/"validation_url"\s*:\s*"([^"]+)"/;function h(a){if(!a||!a.includes("VALIDATION_REQUIRED"))return null;let b=g.exec(a);if(!b)return null;let c=b[1];try{c=JSON.parse(`"${c}"`)}catch{}return`Google requires account verification (VALIDATION_REQUIRED). Most often this means the account's 18+ age verification is missing — complete it at https://myaccount.google.com/age-verification (check the birthdate at https://myaccount.google.com/birthday first). Otherwise open this URL in a browser signed in to the affected account, complete "Verify your account", then retry: ${c}`}async function i(a,b=null){let c="";try{c=await a.text()}catch{c=""}let e=h(c);if(b&&"function"==typeof b.parseError)try{let f=b.parseError(a,c);if(f&&"object"==typeof f){let b=e||f.message||d.O[a.status]||`Upstream error: ${a.status}`;return{statusCode:f.status||a.status,message:b,resetsAtMs:f.resetsAtMs}}}catch{}if(e)return{statusCode:a.status,message:e};let f="";try{let a=JSON.parse(c);f=a.error?.message||a.message||a.error||c}catch{f=c}let g=("string"==typeof f?f:JSON.stringify(f))||d.O[a.status]||`Upstream error: ${a.status}`;return{statusCode:a.status,message:g}}function j(a,b,c,d=null){return{success:!1,status:a,error:b,resetsAtMs:c,response:f(a,b,d)}}function k(a,b,c,d,e=null){let f=Math.max(Math.ceil((new Date(c).getTime()-Date.now())/1e3),1);return new Response(JSON.stringify({type:"error",error:{type:a>=500?"api_error":"invalid_request_error",message:`${b} (${d})`}}),{status:a,headers:{...e,"Content-Type":"application/json","retry-after":String(f)}})}function l(a,b,c,d){let e=d||a.code||"FETCH_FAILED",f=a.message||"Unknown error",g=a.cause?.code,h=a.cause?.message,i=g||h?` (cause: ${[g,h].filter(Boolean).join(": ")})`:"";return`[${e}]: ${f}${i}`}}};

package/app/.next-cli-build/server/chunks/1710.js

@@ -1,6 +0,0 @@
-exports.id=1710,exports.ids=[1710,1998,4755,6457,8838],exports.modules={7803:(a,b,c)=>{"use strict";c.r(b),c.d(b,{debug:()=>o,error:()=>r,errorLine:()=>l,fmtThink:()=>m,info:()=>p,line:()=>k,maskKey:()=>v,nextTag:()=>i,request:()=>s,response:()=>t,stream:()=>u,tagForSession:()=>j,warn:()=>q});let d={DEBUG:0,INFO:1,WARN:2,ERROR:3},e=d[process.env.LOG_LEVEL?.toUpperCase?.()]??d.INFO;function f(){return new Date().toLocaleTimeString("en-US",{hour12:!1})}let g=["\uD83D\uDFE2","\uD83D\uDD35","\uD83D\uDFE3","\uD83D\uDFE1","\uD83D\uDFE0","\uD83D\uDD34","⚪","\uD83D\uDFE4"],h=0;function i(){let a=g[h%g.length];return h++,a}function j(a){if(!a)return i();let b=0;for(let c=0;c<a.length;c++)b=31*b+a.charCodeAt(c)|0;return g[Math.abs(b)%g.length]}function k(a,b,c){e>d.INFO||console.log(`[${f()}] ${a} ${b} ${c}`)}function l(a,b,c){console.log(`[${f()}] ${a} ${b} ${c}`)}function m(a){return a&&a.mode?"none"===a.mode?"off":"auto"===a.mode?"auto":"budget"===a.mode?a.budget>=1e3?`${Math.round(a.budget/1e3)}k`:`${a.budget}`:"level"===a.mode?a.level:null:null}function n(a){if(!a)return"";if("string"==typeof a)return a;try{return JSON.stringify(a)}catch{return String(a)}}function o(a,b,c){if(e<=d.DEBUG){let d=c?` ${n(c)}`:"";console.log(`[${f()}] 🔍 [${a}] ${b}${d}`)}}function p(a,b,c){if(e<=d.INFO){let d=c?` ${n(c)}`:"";console.log(`[${f()}] ℹ️  [${a}] ${b}${d}`)}}function q(a,b,c){if(e<=d.WARN){let d=c?` ${n(c)}`:"";console.warn(`[${f()}] ⚠️  [${a}] ${b}${d}`)}}function r(a,b,c){if(e<=d.ERROR){let d=c?` ${n(c)}`:"";console.log(`[${f()}] ❌ [${a}] ${b}${d}`)}}function s(a,b,c){let d=c?` ${n(c)}`:"";console.log(`\x1b[36m[${f()}] 📥 ${a} ${b}${d}\x1b[0m`)}function t(a,b,c){let d=c?` ${n(c)}`:"";console.log(`[${f()}] ${a<400?"\uD83D\uDCE4":"\uD83D\uDCA5"} ${a} (${b}ms)${d}`)}function u(a,b){let c=b?` ${n(b)}`:"";console.log(`[${f()}] 🌊 [STREAM] ${a}${c}`)}function v(a){return!a||a.length<8?"***":`${a.slice(0,4)}...${a.slice(-4)}`}},29679:(a,b,c)=>{"use strict";c.d(b,{cW:()=>l});var d=c(94755),e=c(55511),f=c(8521);let g="1.0.0",h="0.10.32",i="us-east-1",j=new Map;async function k(a,b){let c,f,j,k=a?.providerSpecificData?.profileArn||"",l=function(a){if(!a||"string"!=typeof a)return i;let b=a.split(":");return b.length>=4&&b[3]?b[3]:i}(k),m=new URLSearchParams;m.set("origin","AI_EDITOR"),k&&m.set("profileArn",k);let n=`https://q.${l}.amazonaws.com/ListAvailableModels?${m.toString()}`,o={...(f=a?.providerSpecificData?.clientId||a?.refreshToken||a?.providerSpecificData?.profileArn||a?.accessToken||"kiro-anonymous",j=(0,e.createHash)("sha256").update(String(f)).digest("hex"),{"User-Agent":`aws-sdk-js/${g} ua/2.1 os/windows#10.0.26200 lang/js md/nodejs#22.21.1 api/codewhispererruntime#${g} m/N,E KiroIDE-${h}-${j}`,"x-amz-user-agent":`aws-sdk-js/${g} KiroIDE-${h}-${j}`,"x-amzn-kiro-agent-mode":"vibe","x-amzn-codewhisperer-optout":"true","amz-sdk-request":"attempt=1; max=1","amz-sdk-invocation-id":(0,d.A)(),Accept:"application/json"}),Authorization:`Bearer ${a?.accessToken||""}`},p=new AbortController,q=setTimeout(()=>p.abort("timeout"),3e4);b&&"function"==typeof b.addEventListener&&b.addEventListener("abort",()=>p.abort(b.reason));try{c=await fetch(n,{method:"GET",headers:o,signal:p.signal})}finally{clearTimeout(q)}if(!c.ok){let a=await c.text().catch(()=>""),b=Error(`Kiro ListAvailableModels ${c.status}: ${a||c.statusText}`);throw b.status=c.status,b.body=a,b}let r=await c.json();return Array.isArray(r?.models)?r.models:[]}async function l(a,b={}){let c,d,g;if(!a||!a.accessToken)return b.log?.debug?.("KIRO_MODELS","No accessToken; skipping live fetch"),null;let h=(g=(d=a?.providerSpecificData||{}).profileArn||d.clientId||a?.refreshToken||a?.accessToken||"anonymous",(0,e.createHash)("sha256").update(`kiro:${g}`).digest("hex")),i=Date.now();if(!b.forceRefresh){let a=j.get(h);if(a&&a.expiresAt>i)return{models:a.models,rawModels:a.rawModels}}try{c=await k(a,b.signal)}catch(d){if(!d||401!==d.status||!a.refreshToken)return b.log?.warn?.("KIRO_MODELS",`ListAvailableModels failed: ${d?.message||d}`),null;{b.log?.info?.("KIRO_MODELS","Got 401 from Kiro; refreshing token");let d=await (0,f.Ql)(a.refreshToken,a.providerSpecificData,b.log);if(!d?.accessToken)return b.log?.warn?.("KIRO_MODELS","Token refresh did not return accessToken"),null;{let e={...a,...d};if("function"==typeof b.onCredentialsRefreshed)try{await b.onCredentialsRefreshed(d)}catch(a){b.log?.warn?.("KIRO_MODELS",`onCredentialsRefreshed failed: ${a?.message||a}`)}try{c=await k(e,b.signal),a.accessToken=e.accessToken,e.refreshToken&&(a.refreshToken=e.refreshToken)}catch(a){return b.log?.warn?.("KIRO_MODELS",`Retry after refresh failed: ${a?.message||a}`),null}}}}let m=[];for(let a of c){if(!a||"object"!=typeof a)continue;let b=a.modelId||a.id;if(!b)continue;let c=function(a,b,c){let d=(a||b||"Kiro").trim(),e=Number(c);if(!Number.isFinite(e)||1e-9>Math.abs(e-1)||e<=0)return`Kiro ${d}`;let f=e.toFixed(1).replace(",",".");return`Kiro ${d} (${f}x credit)`}(a.modelName,b,a.rateMultiplier),d=Number(a?.tokenLimits?.maxInputTokens)||2e5;for(let e of function(a,b){let c,d=((c=a).endsWith("-agentic")&&(c=c.slice(0,-8)),c.endsWith("-thinking")&&(c=c.slice(0,-9)),c),e=b||`Kiro ${d}`,f=[{id:d,name:e,capabilities:{thinking:!1,agentic:!1}},{id:`${d}-thinking`,name:`${e} (Thinking)`,capabilities:{thinking:!0,agentic:!1}}];return"auto"!==d&&(f.push({id:`${d}-agentic`,name:`${e} (Agentic)`,capabilities:{thinking:!1,agentic:!0}}),f.push({id:`${d}-thinking-agentic`,name:`${e} (Thinking + Agentic)`,capabilities:{thinking:!0,agentic:!0}})),f}(b,c))m.push({...e,contextLength:d,rateMultiplier:Number.isFinite(Number(a.rateMultiplier))?Number(a.rateMultiplier):1,upstreamModelId:b,description:a.description||""})}return j.set(h,{expiresAt:i+3e5,models:m,rawModels:c}),{models:m,rawModels:c}}},38709:(a,b,c)=>{"use strict";c.d(b,{M:()=>h});var d=c(90737),e=c(93943),f=c(39609);let g=`${d.Nr}/models`;async function h(a,b={}){let{fetchFn:c=f.proxyAwareFetch,log:i=console,proxyOptions:j=null,onCredentialsRefreshed:k}=b,l=a?.accessToken;if(!l)return{models:[],warning:"Grok CLI access token is missing."};let m=b=>c(g,{method:"GET",headers:function(a,b={}){let c={Authorization:`Bearer ${a}`,Accept:"application/json","User-Agent":d.fZ,"x-xai-token-auth":"xai-grok-cli","x-grok-client-version":d.uG,"x-grok-client-identifier":d.rK,"x-grok-client-mode":"headless"},e=b?.email,f=b?.userId||b?.principalId;return e&&(c["x-email"]=e),f&&(c["x-userid"]=f),c}(b,a?.providerSpecificData)},j);try{let b=await m(l);if((401===b.status||403===b.status)&&a?.refreshToken){let c=await (0,e.Vq)("grok-cli",a,i,j);if(c?.accessToken){l=c.accessToken;try{await k?.(c)}catch(a){i?.warn?.("Grok CLI credential persistence failed",a)}b=await m(l)}}if(!b.ok){let a=await b.text().catch(()=>"");return{models:[],warning:`Grok CLI model discovery failed (${b.status})${a?`: ${a.slice(0,160)}`:""}`}}let c=function(a){let b,c=new Set,e=[];for(let[f,g]of(b=Array.isArray(a)?a:a?.data??a?.models??a?.results??[],Array.isArray(b)?b.map(a=>[null,a]):b&&"object"==typeof b?Object.entries(b):[])){let a="string"==typeof g?{id:g}:g;if(!a||"object"!=typeof a||Array.isArray(a))continue;let b=String(a.id??a.model_id??a.modelId??a.model??a.slug??f??a.name??"").trim();if(!b||c.has(b))continue;c.add(b);let h={...a,id:b,name:a.display_name??a.displayName??a.name??b},i=Number(a.context_length??a.contextLength??a.context_window??a.contextWindow),j=Number(a.max_output_tokens??a.maxOutputTokens);Number.isFinite(i)&&i>0&&(h.contextLength=i),Number.isFinite(j)&&j>0&&(h.maxOutputTokens=j),b===d.to&&(h.contextLength||=5e5,h.maxOutputTokens||=64e3),e.push(h)}return e}(await b.json());return c.length?{models:c}:{models:[],warning:"Grok CLI returned no selectable models."}}catch(a){return{models:[],warning:`Grok CLI model discovery failed: ${a.message}`}}}},39326:(a,b,c)=>{"use strict";c.d(b,{B:()=>j,p:()=>i});var d=c(71998),e=c(72082);function f(a){return null==a?"":String(a).trim()}function g(a){let b=f(a);if(!b)return"";if((0,e.isEncrypted)(b))try{return f((0,e.decryptSecret)(b))}catch(a){console.warn(`[ConnectionProxy] Could not decrypt proxy URL: ${a?.message||a}`)}return b}let h=new Map;function i(a,b,c){if(!a||0===a.length)return null;if(1===a.length)return a[0];if("round-robin"===b){let b=h.get(c)||{index:-1};return b.index=(b.index+1)%a.length,h.set(c,b),a[b.index]}return"random"===b?a[Math.floor(Math.random()*a.length)]:a[0]}async function j(a={}){try{let b=f(a?.proxyPoolId),c="__none__"===b?"":b,e=function(a={}){let b=a?.connectionProxyEnabled===!0,c=g(a?.connectionProxyUrl),d=f(a?.connectionNoProxy);return{connectionProxyEnabled:b,connectionProxyUrl:c,connectionNoProxy:d,strictProxy:a?.strictProxy===!0}}(a),h=!1;if(c){let a=await (0,d.hr)(c);h=a?.strictProxy===!0;let b=g(a?.proxyUrl),e=f(a?.noProxy);if(a&&!0===a.isActive&&b){if("vercel"===a.type||"cloudflare"===a.type||"deno"===a.type)return{source:a.type,proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:e,strictProxy:!0===a.strictProxy,vercelRelayUrl:b};return{source:"pool",proxyPoolId:c,proxyPool:a,connectionProxyEnabled:!0,connectionProxyUrl:b,connectionNoProxy:e,strictProxy:!0===a.strictProxy}}}if(e.connectionProxyEnabled&&e.connectionProxyUrl)return{source:"legacy",proxyPoolId:c||null,proxyPool:null,...e,strictProxy:h||e.strictProxy};return{source:"none",proxyPoolId:c||null,proxyPool:null,...e,strictProxy:h||e.strictProxy}}catch(a){return console.error("[resolveConnectionProxyConfig] Failed to resolve proxy config:",a),{source:"error",proxyPoolId:null,proxyPool:null,connectionProxyEnabled:!1,connectionProxyUrl:"",connectionNoProxy:"",strictProxy:!1}}}},50122:(a,b,c)=>{"use strict";c.d(b,{k:()=>e});let d=[];for(let a=0;a<256;++a)d.push((a+256).toString(16).slice(1));function e(a,b=0){return(d[a[b+0]]+d[a[b+1]]+d[a[b+2]]+d[a[b+3]]+"-"+d[a[b+4]]+d[a[b+5]]+"-"+d[a[b+6]]+d[a[b+7]]+"-"+d[a[b+8]]+d[a[b+9]]+"-"+d[a[b+10]]+d[a[b+11]]+d[a[b+12]]+d[a[b+13]]+d[a[b+14]]+d[a[b+15]]).toLowerCase()}},69704:(a,b,c)=>{"use strict";c.d(b,{Dg:()=>k,F8:()=>u,KC:()=>w,L7:()=>d,OQ:()=>j,R$:()=>l,RB:()=>D,Ty:()=>z,UJ:()=>q,VD:()=>r,_G:()=>i,bR:()=>t,bg:()=>h,cT:()=>y,cn:()=>p,h3:()=>o,ii:()=>n,j9:()=>f,jJ:()=>m,li:()=>s,pM:()=>C,pr:()=>E,qk:()=>A,rf:()=>g,t6:()=>x,xG:()=>B});let d="https://openapi.qoder.sh",e="https://api3.qoder.sh",f="https://api2.qoder.sh",g="https://qoder.com/device/selectAccounts",h=`${d}/api/v1/deviceToken/poll`,i=`${d}/api/v1/userinfo`,j=`${d}/api/v1/jobToken/exchange`,k="https://qoder.com",l="https://gateway.qoder.com.cn",m="https://openapi.qoder.com.cn",n="https://qoder.cn/device/selectAccounts",o=`${m}/api/v1/deviceToken/poll`,p=`${m}/api/v1/userinfo`,q=`${m}/api/v1/jobToken/exchange`,r="https://qoder.cn",s=l,t=`${l}/algo/api/v2/model/list`,u="/api/v2/service/pro/sse/agent_chat_generation",v=`${e}/algo${u}?FetchKeys=llm_model_result&AgentId=agent_common`,w=`${v}&Encode=1`,x=`${e}/algo/api/v2/model/list`,y="1.0.0",z="5",A="disagree",B="v2",C="x86_64_windows",D="5",E=`-----BEGIN PUBLIC KEY-----
-MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA8iMH5c02LilrsERw9t6Pv5Nc
-4k6Pz1EaDicBMpdpxKduSZu5OANqUq8er4GM95omAGIOPOh+Nx0spthYA2BqGz+l
-6HRkPJ7S236FZz73In/KVuLnwI8JJ2CbuJap8kvheCCZpmAWpb/cPx/3Vr/J6I17
-XcW+ML9FoCI6AOvOzwIDAQAB
------END PUBLIC KEY-----`},71998:(a,b,c)=>{"use strict";c.d(b,{Fh:()=>d.Fh,L9:()=>d.L9,Mc:()=>d.Mc,OM:()=>d.OM,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Yd:()=>d.Yd,ZO:()=>d.ZO,c:()=>d.c,createProviderConnection:()=>d.iE,fK:()=>d.fK,fv:()=>d.fv,getProviderConnections:()=>d.getProviderConnections,h1:()=>d.h1,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,o5:()=>d.o5,op:()=>d.op,uL:()=>d.uL,ui:()=>d.ui,updateProviderConnection:()=>d.updateProviderConnection,uv:()=>d.uv});var d=c(89718)},78335:()=>{},82578:(a,b,c)=>{"use strict";c.d(b,{FD:()=>n});var d=c(55511),e=c.n(d),f=c(73496),g=c.n(f),h=c(26070),i=c(81756),j=c(55456);let k=new Map;function l(a,b){let c=a.get(b)?.[0]?.value;return c&&"number"!=typeof c?Buffer.from(c).toString("utf8"):""}async function m(a,b){var c;let d,e=a?.accessToken,f=a?.providerSpecificData?.machineId,k=(d=h.sr.cursor,d?.agentEndpoint&&d?.modelsEndpoint?`${d.agentEndpoint.replace(/\/$/,"")}${d.modelsEndpoint}`:null);if(!e||!f||!k)return null;let m={...(0,i.JA)(e,f,a?.providerSpecificData?.ghostMode!==!1),accept:"application/proto","content-type":"application/proto"};delete m["connect-accept-encoding"],delete m["connect-protocol-version"];let n=await (c=new Uint8Array,new Promise((a,d)=>{let e=new URL(k),f=g().connect(`https://${e.host}`),h=[],i={},j=!1,l=a=>(...b)=>{if(!j){j=!0,clearTimeout(n);try{f.close()}catch{}a(...b)}},n=setTimeout(l(()=>{d(Error("Cursor GetUsableModels timed out"))}),1e4);f.on("error",l(d));let o=f.request({":method":"POST",":path":e.pathname,":authority":e.host,":scheme":"https",...m});if(o.on("response",a=>{i=a}),o.on("data",a=>{h.push(a)}),o.on("end",l(()=>{a({status:Number(i[":status"]||0),body:Buffer.concat(h)})})),o.on("error",l(d)),b){let a=l(()=>d(Error("Request aborted")));b.aborted?a():b.addEventListener("abort",a,{once:!0})}o.end(c&&c.length?Buffer.from(c):void 0)}));if(200!==n.status){let a=Error(`Cursor GetUsableModels returned ${n.status}`);throw a.status=n.status,a}return function(a){let b=(0,j.Y8)(a),c=new Set,d=[];for(let a of b.get(1)||[]){if(!a?.value||"number"==typeof a.value)continue;let b=(0,j.Y8)(a.value),e=l(b,1).trim();if(!e||c.has(e))continue;c.add(e);let f=(l(b,4)||l(b,5)||l(b,3)||e).trim();d.push({id:e,name:f})}return d}(new Uint8Array(n.body))}async function n(a,b={}){let c;if(!a?.accessToken||!a?.providerSpecificData?.machineId)return b.log?.debug?.("CURSOR_MODELS","No Cursor access token or machine ID; skipping live fetch"),null;let d=(c=[a?.providerSpecificData?.machineId,a?.accessToken].filter(Boolean).join(":"))?e().createHash("sha256").update(`cursor:${c}`).digest("hex"):"cursor-anonymous",f=Date.now();if(!b.forceRefresh){let a=k.get(d);if(a?.expiresAt>f)return{models:a.models}}try{let c=await m(a,b.signal);if(!c?.length)return null;return k.set(d,{expiresAt:f+3e5,models:c}),{models:c}}catch(a){return b.log?.warn?.("CURSOR_MODELS",`Live model fetch failed: ${a?.message||a}`),null}}},85081:(a,b,c)=>{"use strict";c.d(b,{Ay:()=>j});var d=c(77598);let e=function(a){return Array.isArray(a)?a=Buffer.from(a):"string"==typeof a&&(a=Buffer.from(a,"utf8")),(0,d.createHash)("sha1").update(a).digest()},f=/^(?:[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}|00000000-0000-0000-0000-000000000000|ffffffff-ffff-ffff-ffff-ffffffffffff)$/i,g=function(a){let b;if(!("string"==typeof a&&f.test(a)))throw TypeError("Invalid UUID");return Uint8Array.of((b=parseInt(a.slice(0,8),16))>>>24,b>>>16&255,b>>>8&255,255&b,(b=parseInt(a.slice(9,13),16))>>>8,255&b,(b=parseInt(a.slice(14,18),16))>>>8,255&b,(b=parseInt(a.slice(19,23),16))>>>8,255&b,(b=parseInt(a.slice(24,36),16))/0x10000000000&255,b/0x100000000&255,b>>>24&255,b>>>16&255,b>>>8&255,255&b)};var h=c(50122);function i(a,b,c,d){var f=b,i=d;let j="string"==typeof a?function(a){let b=new Uint8Array((a=unescape(encodeURIComponent(a))).length);for(let c=0;c<a.length;++c)b[c]=a.charCodeAt(c);return b}(a):a,k="string"==typeof f?g(f):f;if("string"==typeof f&&(f=g(f)),f?.length!==16)throw TypeError("Namespace must be array-like (16 iterable integer values, 0-255)");let l=new Uint8Array(16+j.length);if(l.set(k),l.set(j,k.length),(l=e(l))[6]=15&l[6]|80,l[8]=63&l[8]|128,c){if((i=i||0)<0||i+16>c.length)throw RangeError(`UUID byte range ${i}:${i+15} is out of buffer bounds`);for(let a=0;a<16;++a)c[i+a]=l[a];return c}return(0,h.k)(l)}i.DNS="6ba7b810-9dad-11d1-80b4-00c04fd430c8",i.URL="6ba7b811-9dad-11d1-80b4-00c04fd430c8";let j=i},89718:(a,b,c)=>{"use strict";c.d(b,{Bf:()=>d.Bf,CG:()=>d.CG,Dj:()=>d.Dj,Fh:()=>d.Fh,Iq:()=>d.Iq,K1:()=>d.K1,KJ:()=>d.KJ,L:()=>d.L,L9:()=>d.L9,Lh:()=>d.Lh,Mc:()=>d.Mc,OM:()=>d.OM,PX:()=>d.PX,Pc:()=>d.Pc,Q_:()=>d.Q_,Qu:()=>d.Qu,S8:()=>d.S8,Um:()=>d.Um,Uv:()=>d.Uv,VT:()=>d.VT,XW:()=>d.XW,Yd:()=>d.Yd,ZO:()=>d.ZO,bI:()=>d.bI,c:()=>d.c,ek:()=>d.ek,fK:()=>d.fK,fv:()=>d.fv,getProviderConnections:()=>d.P,getSettings:()=>d.mt,h1:()=>d.h1,hj:()=>d.hj,ho:()=>d.ho,hr:()=>d.hr,i0:()=>d.i0,iE:()=>d.iE,jd:()=>d.jd,o5:()=>d.o5,oG:()=>d.oG,op:()=>d.op,r4:()=>d.r4,uL:()=>d.uL,ui:()=>d.ui,updateProviderConnection:()=>d.rj,updateSettings:()=>d.Xx,uv:()=>d.uv,yF:()=>d.yF,yg:()=>d.yg,zP:()=>d.zP});var d=c(27274)},94755:(a,b,c)=>{"use strict";c.d(b,{A:()=>i});var d=c(77598);let e={randomUUID:d.randomUUID},f=new Uint8Array(256),g=f.length;var h=c(50122);let i=function(a,b,c){if(e.randomUUID&&!b&&!a)return e.randomUUID();var i=a,j=c;let k=(i=i||{}).random??i.rng?.()??(g>f.length-16&&((0,d.randomFillSync)(f),g=0),f.slice(g,g+=16));if(k.length<16)throw Error("Random bytes length must be >= 16");if(k[6]=15&k[6]|64,k[8]=63&k[8]|128,b){if((j=j||0)<0||j+16>b.length)throw RangeError(`UUID byte range ${j}:${j+15} is out of buffer bounds`);for(let a=0;a<16;++a)b[j+a]=k[a];return b}return(0,h.k)(k)}},96487:()=>{}};

package/app/.next-cli-build/server/chunks/2120.js

@@ -1 +0,0 @@
-"use strict";exports.id=2120,exports.ids=[2120],exports.modules={12132:(a,b,c)=>{c.d(b,{$6:()=>G,Fp:()=>I,ND:()=>p,Nv:()=>F,XX:()=>x,getMimoAccountCookie:()=>H,readDesktopPassToken:()=>A});var d=c(73024),e=c.n(d),f=c(48161),g=c.n(f),h=c(76760),i=c.n(h),j=c(77598),k=c.n(j),l=c(39609);let m={cn:"https://mimo-server-cn.xiaomimimo.com",sgp:"https://mimo-server-sgp.xiaomimimo.com",ams:"https://mimo-server-ams.xiaomimimo.com",ru:"https://mimo-server-ru.xiaomimimo.com",in:"https://mimo-server-in.xiaomimimo.com"},n={cn:"mimopc",sgp:"mimosgp",ams:"mimoams",ru:"mimoru",in:"mimoin"};function o(a=null){return String(a?.region||"").toLowerCase()}function p(a=null){return m[o(a)]||m.cn}m.cn;let q="account.xiaomi.com",r="miNative PC/Normal Windows_NT/10.0.19045 SDKV/1.0.0 DEVT/PC DEVS/Windows APP/miaccount_desktop APPV/0.1.0",s="MiClaw/1.0",t=new Set(["EBUSY","EPERM","EACCES"]),u=new Map,v=new Map,w="Xiaomi MiMo";function x(){let a=g().homedir(),b=i().join(a,".local","share","mimocode"),c=process.env.XDG_DATA_HOME,d=c?i().join(c,"mimocode"):b;return(d===b?[d]:[d,b]).map(a=>i().join(a,"auth.json"))}async function y(){let a,b=i().join((a=g().homedir(),"win32"===process.platform?i().join(process.env.APPDATA||i().join(a,"AppData","Roaming"),w):"darwin"===process.platform?i().join(a,"Library","Application Support",w):i().join(process.env.XDG_CONFIG_HOME||i().join(a,".config"),w)),"Partitions","xiaomi-account","Network","Cookies");if(!e().existsSync(b))return null;let d=i().join(g().tmpdir(),`10router-mimo-cookies-${process.pid}-${k().randomBytes(4).toString("hex")}.db`);try{e().copyFileSync(b,d)}catch(a){if(t.has(a?.code)){let a=Error("Xiaomi MiMo Desktop is holding its cookie store (quit the app and retry)");throw a.code="DESKTOP_LOCKED",a}return null}try{e().chmodSync(d,384)}catch{}try{let{DatabaseSync:a}=await Promise.resolve().then(c.t.bind(c,80099,23)),b=null;try{let c=(b=new a(d,{readOnly:!0})).prepare("SELECT name, value FROM cookies WHERE host_key = ?").all("."+q),e=Object.fromEntries(c.map(a=>[a.name,a.value]));return e.passToken?e:null}finally{try{b?.close()}catch{}}}catch{return null}finally{await z(d)}}async function z(a){for(let b=0;b<3;b++)try{e().unlinkSync(a);return}catch(a){if("ENOENT"===a.code)return;b<2&&await new Promise(a=>setTimeout(a,20))}}async function A(){try{let a=await y();if(!a?.passToken)return null;return{passToken:a.passToken,userId:a.userId||null,cUserId:a.cUserId||null}}catch(a){if(a?.code==="DESKTOP_LOCKED")throw a;return null}}function B(a,b){for(let c of b.headers.getSetCookie?.()||[]){let b=/^([^=]+)=([^;]*)/.exec(c.trim());b&&b[2]&&(a[b[1]]=b[2])}}function C(a){return Object.entries(a).filter(([,a])=>a).map(([a,b])=>`${a}=${b}`).join("; ")}async function D(a,b,c=null){var d;let e,f={...a},g=p(c),h=function(a=null){return n[o(a)]||n.cn}(c),i=(await (0,l.proxyAwareFetch)(`${g}/api/user/xiaomi/me`,{redirect:"manual",headers:{"User-Agent":r,Cookie:C(f)},signal:AbortSignal.timeout(1e4)},b)).headers.get("location");if(!i)return null;let j=new URL(i).searchParams.get("callback");if(!j)return null;let m=await (0,l.proxyAwareFetch)(`https://${q}/pass/serviceLogin?sid=passportapi&_json=true`,{headers:{Cookie:C(f),"User-Agent":s,Accept:"application/json"},signal:AbortSignal.timeout(1e4)},b),t=JSON.parse((await m.text()).replace(/^&&&START&&&/,"")),u=t.nonce||(t.location?new URL(t.location).searchParams.get("nonce"):null);if(!u||!t.location)return null;let v=await (0,l.proxyAwareFetch)(`${t.location}&clientSign=${(e=`nonce=${u}`+((d=t.ssecurity)&&d.trim()?`&${d}`:""),encodeURIComponent(k().createHash("sha1").update(e).digest("base64")))}`,{redirect:"manual",headers:{Cookie:C(f),"User-Agent":s},signal:AbortSignal.timeout(1e4)},b);B(f,v);let w=await (0,l.proxyAwareFetch)(`https://${q}/pass/serviceLogin?sid=${encodeURIComponent(h)}&callback=${encodeURIComponent(j)}&_json=true`,{headers:{Cookie:C(f),"User-Agent":s,Accept:"application/json"},signal:AbortSignal.timeout(1e4)},b),x=JSON.parse((await w.text()).replace(/^&&&START&&&/,""));if(B(f,w),!x?.location||!/\/api\/sts/.test(x.location))return null;let y=await (0,l.proxyAwareFetch)(x.location,{redirect:"manual",headers:{"User-Agent":r,Cookie:C(f)},signal:AbortSignal.timeout(1e4)},b);if(B(f,y),!f.serviceToken)return null;let z={};for(let a of["serviceToken","mimopc_ph","mimopc_slh","userId"])f[a]&&(z[a]=f[a]);return C(z)}async function E(a,b){let c=a?.mimoPassToken?{passToken:a.mimoPassToken,userId:a.mimoUserId,cUserId:a.mimoCUserId}:null;if(!c)try{c=await y()}catch(a){if(a?.code==="DESKTOP_LOCKED")return{cookie:null,reason:"desktop-locked"};throw a}if(!c)return{cookie:null,reason:"no-pass-token"};let d=k().createHash("sha256").update(`${c.passToken}|${o(a)}`).digest("hex"),e=u.get(d);if(e&&Date.now()-e.at<18e5)return{cookie:e.cookie};let f=v.get(d);if(f){let a=await f;return a?{cookie:a}:{cookie:null,reason:"sso-failed"}}let g=(async()=>{try{return await D(c,b,a)}catch{return null}finally{v.delete(d)}})();v.set(d,g);let h=await g;return h?(u.set(d,{cookie:h,at:Date.now()}),{cookie:h}):{cookie:null,reason:"sso-failed"}}function F(){u.clear()}let G=r;async function H(a=null,b=null){try{let{cookie:c}=await E(a,b);return c}catch{return null}}async function I(a=null,b=null){let{cookie:c,reason:d}=await E(a,b);if(!c)return{error:"no-pass-token"===d||"desktop-locked"===d?"no-session":"session-failed"};try{let d=await (0,l.proxyAwareFetch)(`${p(a)}/api/user/usage`,{headers:{"User-Agent":r,Cookie:c,Accept:"application/json"},signal:AbortSignal.timeout(1e4)},b);if(!d.ok)return{error:`http-${d.status}`};let e=await d.json().catch(()=>null);if(!e||0!==e.code||!e.data)return{error:"bad-response"};return{percent:e.data.percent,resetDate:e.data.resetDate,resetAt:e.data.resetAt}}catch(a){return{error:a.message}}}},40669:(a,b,c)=>{c.d(b,{XO:()=>i,Xh:()=>g,hb:()=>l,js:()=>j});var d=c(10682);let e={el:"elevenlabs",jina:"jina-ai","jina-ai":"jina-ai",polly:"aws-polly","aws-polly":"aws-polly"};for(let a of d.default)for(let b of(e[a.id]=a.id,a.alias&&(e[a.alias]=a.id),a.aliases||[]))e[b]=a.id;let f={"grok-build":"gcli/grok-build"};function g(a){if(!a)return{provider:null,model:null,isAlias:!1,providerAlias:null};if(a.includes("/")){let b=a.indexOf("/"),c=a.slice(0,b),d=a.slice(b+1);return{provider:e[c]||c,model:d,isAlias:!1,providerAlias:c}}return{provider:null,model:a,isAlias:!0,providerAlias:null}}function h(a,b){var c,d;if(!b)return null;let f=b[a];if(!f)return null;if("string"==typeof f&&f.includes("/")){let a=f.indexOf("/");return{provider:e[c=f.slice(0,a)]||c,model:f.slice(a+1)}}return"object"==typeof f&&f.provider&&f.model?{provider:e[d=f.provider]||d,model:f.model}:null}async function i(a,b){let c=g(a);if(!c.isAlias)return null;let d="function"==typeof b?await b():b;return h(c.model,d)||h(c.model,f)||null}async function j(a,b){let c=g(a);if(!c.isAlias)return{provider:c.provider,model:c.model};let d=await i(a,b);return d||{provider:function(a){if(!a)return"openai";let b=a.toLowerCase();return m.find(([a])=>a.test(b))?.[1]||"openai"}(c.model),model:c.model}}let k=[/^gpt-[56]\./,/^gpt-6-/,/^gpt-daybreak-/,/^gpt-reserve/];function l(a){if(!a)return!1;let b=a.toLowerCase();return k.some(a=>a.test(b))}let m=[...k.map(a=>[a,"codex"]),[/^claude-/,"anthropic"],[/^gemini-/,"gemini"],[/^gpt-/,"openai"],[/^o[134]/,"openai"],[/^deepseek-/,"openrouter"]]}};