@thebtf/dsh-cliproxyapi-provider 0.4.3 → 0.4.4

package/cordis.patch.yml

@@ -1,5 +1,5 @@
-# Install the CLIProxyAPI catalog discovery and browser settings integration.
-# The existing pi-ai route remains in use until an explicit CPA cutover.
-- insert:
-    - id: llm-cliproxyapi
-      name: "@thebtf/dsh-cliproxyapi-provider"
+# Install the CLIProxyAPI catalog discovery and browser settings integration.
+# The existing pi-ai route remains in use until an explicit CPA cutover.
+- insert:
+    - id: llm-cliproxyapi
+      name: "@thebtf/dsh-cliproxyapi-provider"

package/details/en.md

@@ -1,9 +1,9 @@
-# CLIProxyAPI for DeepSeek Harness
-
-Open **Plugins**, then select **CLIProxyAPI**. Choose the wire protocol your gateway exposes — OpenAI Responses, OpenAI Chat Completions, Anthropic Messages or Google Generative AI — then enter your actual endpoint and explicitly choose keep, replace, reference, or no authentication. HTTP is unencrypted. A changed endpoint cannot reuse saved credentials without consent.
-
-Preview models, search or select all/deselect all, then save the connection, policy and model draft together. Zero selected models is valid but not ready. Details show metadata, source labels and advertised reasoning efforts. A stale catalog can remain available after a refresh failure. Save and activation are reported separately.
-
-Disable retains the configuration and credential; forget-key is separate. Saving the first connection adopts an existing legacy profile automatically, with a reversible backup; **Import legacy connection** is still available for an explicit import. The plugin also keeps a copy of the last saved connection outside the profile: when a rebuild or a core gate removes the settings entry, **Restore saved connection** brings it back without retyping the address or key. Inspect recovery errors before retrying. Do not overwrite newer settings with an old rollback backup.
-
-The Models footer opens Plugins; select CLIProxyAPI there. It does not provide a full managed Models row. Restart DSH after installing or updating. Requires Node 24.9.0 or newer and DSH 0.2.2-rc.3; `engines.dsh` accepts the rest of the 0.2.x line.
+# CLIProxyAPI for DeepSeek Harness
+
+Open **Plugins**, then select **CLIProxyAPI**. Choose the wire protocol your gateway exposes — OpenAI Responses, OpenAI Chat Completions, Anthropic Messages or Google Generative AI — then enter your actual endpoint and explicitly choose keep, replace, reference, or no authentication. HTTP is unencrypted. A changed endpoint cannot reuse saved credentials without consent.
+
+Preview models, search or select all/deselect all, then save the connection, policy and model draft together. Zero selected models is valid but not ready. Details show metadata, source labels and advertised reasoning efforts. A stale catalog can remain available after a refresh failure. Save and activation are reported separately.
+
+Disable retains the configuration and credential; forget-key is separate. Saving the first connection adopts an existing legacy profile automatically, with a reversible backup; **Import legacy connection** is still available for an explicit import. The plugin also keeps a copy of the last saved connection outside the profile: when a rebuild or a core gate removes the settings entry, **Restore saved connection** brings it back without retyping the address or key. Inspect recovery errors before retrying. Do not overwrite newer settings with an old rollback backup.
+
+The Models footer opens Plugins; select CLIProxyAPI there. It does not provide a full managed Models row. Restart DSH after installing or updating. Requires Node 24.9.0 or newer and DSH 0.2.2-rc.3; `engines.dsh` accepts the rest of the 0.2.x line.

package/details/ru.md

@@ -1,9 +1,9 @@
-# CLIProxyAPI для DeepSeek Harness
-
-Откройте **Plugins** и выберите **CLIProxyAPI**. Выберите протокол обмена, который предоставляет шлюз (OpenAI Responses, OpenAI Chat Completions, Anthropic Messages или Google Generative AI), затем укажите фактический адрес и явно выберите действие с авторизацией: сохранить, заменить ключ, использовать ссылку или отключить авторизацию. HTTP не шифруется. Повторное использование ключа с новым адресом требует согласия.
-
-Загрузите предпросмотр, найдите и выберите модели; массовые действия применяются ко всему каталогу. Сохранение включает адрес, авторизацию, политику и выбор. Ноль моделей допустим, но подключение не готово. Детали содержат метаданные, источник возможностей и заявленные уровни рассуждения. При ошибке обновления прежний каталог может быть показан как устаревший. Сохранение и активация показываются отдельно.
-
-Отключение сохраняет настройки и ключ; удаление ключа выполняется отдельно. При сохранении первого подключения прежняя запись принимается автоматически с обратимой резервной копией; **Импорт прежнего подключения** по-прежнему доступен для явного импорта. Плагин также хранит копию последнего сохранённого подключения вне профиля: если запись настроек исчезла после пересборки профиля или блокировки по совместимости, кнопка **Восстановить сохранённое подключение** вернёт её без повторного ввода адреса и ключа. Изучите ошибки восстановления перед повтором. Не восстанавливайте старую копию поверх новых настроек.
-
-Внизу Models можно открыть Plugins и затем выбрать CLIProxyAPI. Это не полноценная управляемая строка Models. После установки или обновления перезапустите DSH. Требуются Node от 24.9.0 и DSH 0.2.2-rc.3; `engines.dsh` допускает остальную линию 0.2.x.
+# CLIProxyAPI для DeepSeek Harness
+
+Откройте **Plugins** и выберите **CLIProxyAPI**. Выберите протокол обмена, который предоставляет шлюз (OpenAI Responses, OpenAI Chat Completions, Anthropic Messages или Google Generative AI), затем укажите фактический адрес и явно выберите действие с авторизацией: сохранить, заменить ключ, использовать ссылку или отключить авторизацию. HTTP не шифруется. Повторное использование ключа с новым адресом требует согласия.
+
+Загрузите предпросмотр, найдите и выберите модели; массовые действия применяются ко всему каталогу. Сохранение включает адрес, авторизацию, политику и выбор. Ноль моделей допустим, но подключение не готово. Детали содержат метаданные, источник возможностей и заявленные уровни рассуждения. При ошибке обновления прежний каталог может быть показан как устаревший. Сохранение и активация показываются отдельно.
+
+Отключение сохраняет настройки и ключ; удаление ключа выполняется отдельно. При сохранении первого подключения прежняя запись принимается автоматически с обратимой резервной копией; **Импорт прежнего подключения** по-прежнему доступен для явного импорта. Плагин также хранит копию последнего сохранённого подключения вне профиля: если запись настроек исчезла после пересборки профиля или блокировки по совместимости, кнопка **Восстановить сохранённое подключение** вернёт её без повторного ввода адреса и ключа. Изучите ошибки восстановления перед повтором. Не восстанавливайте старую копию поверх новых настроек.
+
+Внизу Models можно открыть Plugins и затем выбрать CLIProxyAPI. Это не полноценная управляемая строка Models. После установки или обновления перезапустите DSH. Требуются Node от 24.9.0 и DSH 0.2.2-rc.3; `engines.dsh` допускает остальную линию 0.2.x.

package/details/zh.md

@@ -1,9 +1,9 @@
-# DeepSeek Harness 的 CLIProxyAPI
-
-打开 **插件**，然后选择 **CLIProxyAPI**。先选择网关提供的通信协议（OpenAI Responses、OpenAI Chat Completions、Anthropic Messages 或 Google Generative AI），再输入实际地址，并明确选择保留、替换密钥、凭据引用或不验证。HTTP 不加密。更换地址后，重用保存的凭据需要明确同意。
-
-预览目录后搜索、选择或批量选择模型。保存同时提交连接、策略和模型草稿。允许零模型，但连接尚未就绪。详情展示元数据、来源和已声明的推理等级；刷新失败后，上次目录可能标为过期。保存和激活分别显示。
-
-停用会保留设置和凭据；忘记密钥是独立操作。保存第一个连接时会自动接管旧配置并保留可回退的备份；仍可显式选择导入旧连接。插件还在配置文件之外保留最后保存连接的副本：如果配置文件重建或核心兼容性门禁移除了设置条目，页面上的 **恢复已保存的连接** 可直接恢复，无需重新输入地址和密钥。重试前检查恢复错误。不要用旧备份覆盖较新设置。
-
-Models 页底部可打开插件，然后选择 CLIProxyAPI；这不是完整的 Models 管理行。安装或更新后重启 DSH。需要 Node 24.9.0 及以上和 DSH 0.2.2-rc.3；`engines.dsh` 接受 0.2.x 的其余版本。
+# DeepSeek Harness 的 CLIProxyAPI
+
+打开 **插件**，然后选择 **CLIProxyAPI**。先选择网关提供的通信协议（OpenAI Responses、OpenAI Chat Completions、Anthropic Messages 或 Google Generative AI），再输入实际地址，并明确选择保留、替换密钥、凭据引用或不验证。HTTP 不加密。更换地址后，重用保存的凭据需要明确同意。
+
+预览目录后搜索、选择或批量选择模型。保存同时提交连接、策略和模型草稿。允许零模型，但连接尚未就绪。详情展示元数据、来源和已声明的推理等级；刷新失败后，上次目录可能标为过期。保存和激活分别显示。
+
+停用会保留设置和凭据；忘记密钥是独立操作。保存第一个连接时会自动接管旧配置并保留可回退的备份；仍可显式选择导入旧连接。插件还在配置文件之外保留最后保存连接的副本：如果配置文件重建或核心兼容性门禁移除了设置条目，页面上的 **恢复已保存的连接** 可直接恢复，无需重新输入地址和密钥。重试前检查恢复错误。不要用旧备份覆盖较新设置。
+
+Models 页底部可打开插件，然后选择 CLIProxyAPI；这不是完整的 Models 管理行。安装或更新后重启 DSH。需要 Node 24.9.0 及以上和 DSH 0.2.2-rc.3；`engines.dsh` 接受 0.2.x 的其余版本。

package/locale/en.json

@@ -1,7 +1,7 @@
-{
-  "meta": {
-    "title": "CLIProxyAPI",
-    "description": "Connect a CLIProxyAPI gateway and manage its models in DeepSeek Harness.",
-    "detail": "details/en.md"
-  }
-}
+{
+  "meta": {
+    "title": "CLIProxyAPI",
+    "description": "Connect a CLIProxyAPI gateway and manage its models in DeepSeek Harness.",
+    "detail": "details/en.md"
+  }
+}

package/locale/ru.json

@@ -1,7 +1,7 @@
-{
-  "meta": {
-    "title": "CLIProxyAPI",
-    "description": "Подключение шлюза CLIProxyAPI и управление моделями в DeepSeek Harness.",
-    "detail": "details/ru.md"
-  }
-}
+{
+  "meta": {
+    "title": "CLIProxyAPI",
+    "description": "Подключение шлюза CLIProxyAPI и управление моделями в DeepSeek Harness.",
+    "detail": "details/ru.md"
+  }
+}

package/locale/zh.json

@@ -1,7 +1,7 @@
-{
-  "meta": {
-    "title": "CLIProxyAPI",
-    "description": "在 DeepSeek Harness 中连接 CLIProxyAPI 网关并管理模型。",
-    "detail": "details/zh.md"
-  }
-}
+{
+  "meta": {
+    "title": "CLIProxyAPI",
+    "description": "在 DeepSeek Harness 中连接 CLIProxyAPI 网关并管理模型。",
+    "detail": "details/zh.md"
+  }
+}

package/package.json

@@ -1,85 +1,85 @@
-{
-  "name": "@thebtf/dsh-cliproxyapi-provider",
-  "version": "0.4.3",
-  "description": "GUI-configurable CLIProxyAPI provider for DeepSeek Harness with a selectable wire protocol",
-  "type": "module",
-  "main": "./src/index.js",
-  "exports": {
-    ".": "./src/index.js",
-    "./client": "./client.js",
-    "./catalog": "./src/catalog.js",
-    "./cordis.patch.yml": "./cordis.patch.yml",
-    "./locale/*.json": "./locale/*.json",
-    "./package.json": "./package.json"
-  },
-  "files": [
-    "src",
-    "client.js",
-    "locale",
-    "details",
-    "cordis.patch.yml",
-    "README.md",
-    "README_EN.md"
-  ],
-  "scripts": {
-    "test": "node --test",
-    "check": "node --check src/index.js && node --check src/catalog.js && node --check client.js && node --test",
-    "pack:github": "npm pack"
-  },
-  "dsh": {
-    "bundle": {
-      "patch": "./cordis.patch.yml"
-    },
-    "client": {
-      "inject": [
-        "@deepseek-ai/dsh-client-locale",
-        "@deepseek-ai/dsh-client-ui-settings",
-        "@deepseek-ai/dsh-client-ui-primitives",
-        "@deepseek-ai/dsh-client-ui-plugin-manager",
-        "@deepseek-ai/dsh-api-remotes"
-      ],
-      "platform": "web"
-    }
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/thebtf/dsh-cliproxyapi-provider.git"
-  },
-  "peerDependencies": {
-    "@deepseek-ai/cordis": "^4.0.4",
-    "@deepseek-ai/dsh-credentials": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-llm": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-settings": "^0.2.2-rc.2"
-  },
-  "dependencies": {
-    "@deepseek-ai/dsh-home-paths": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-llm-pi-ai": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-util-values": "^0.2.2-rc.2",
-    "@earendil-works/pi-ai": "^1.3.0",
-    "@deepseek-ai/schemastery": "^3.18.2"
-  },
-  "devDependencies": {
-    "@deepseek-ai/dsh-api-remotes": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-client-locale": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-client-ui-settings": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-client-ui-primitives": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-client-ui-plugin-manager": "^0.2.2-rc.2",
-    "@deepseek-ai/dsh-client-ui-slots": "^0.2.2-rc.2",
-    "react": "^18.2.0"
-  },
-  "engines": {
-    "node": ">=24.9.0",
-    "dsh": "^0.2.2-rc.2"
-  },
-  "keywords": [
-    "dsh",
-    "dsh-plugin",
-    "deepseek-harness",
-    "cliproxyapi",
-    "llm"
-  ],
-  "publishConfig": {
-    "access": "public"
-  },
-  "license": "MIT"
-}
+{
+  "name": "@thebtf/dsh-cliproxyapi-provider",
+  "version": "0.4.4",
+  "description": "GUI-configurable CLIProxyAPI provider for DeepSeek Harness with a selectable wire protocol",
+  "type": "module",
+  "main": "./src/index.js",
+  "exports": {
+    ".": "./src/index.js",
+    "./client": "./client.js",
+    "./catalog": "./src/catalog.js",
+    "./cordis.patch.yml": "./cordis.patch.yml",
+    "./locale/*.json": "./locale/*.json",
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "src",
+    "client.js",
+    "locale",
+    "details",
+    "cordis.patch.yml",
+    "README.md",
+    "README_EN.md"
+  ],
+  "scripts": {
+    "test": "node --test",
+    "check": "node --check src/index.js && node --check src/catalog.js && node --check client.js && node --test",
+    "pack:github": "npm pack"
+  },
+  "dsh": {
+    "bundle": {
+      "patch": "./cordis.patch.yml"
+    },
+    "client": {
+      "inject": [
+        "@deepseek-ai/dsh-client-locale",
+        "@deepseek-ai/dsh-client-ui-settings",
+        "@deepseek-ai/dsh-client-ui-primitives",
+        "@deepseek-ai/dsh-client-ui-plugin-manager",
+        "@deepseek-ai/dsh-api-remotes"
+      ],
+      "platform": "web"
+    }
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/thebtf/dsh-cliproxyapi-provider.git"
+  },
+  "peerDependencies": {
+    "@deepseek-ai/cordis": "^4.0.4",
+    "@deepseek-ai/dsh-credentials": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-llm": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-settings": "^0.2.2-rc.2"
+  },
+  "dependencies": {
+    "@deepseek-ai/dsh-home-paths": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-llm-pi-ai": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-util-values": "^0.2.2-rc.2",
+    "@earendil-works/pi-ai": "^1.3.0",
+    "@deepseek-ai/schemastery": "^3.18.2"
+  },
+  "devDependencies": {
+    "@deepseek-ai/dsh-api-remotes": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-client-locale": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-client-ui-settings": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-client-ui-primitives": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-client-ui-plugin-manager": "^0.2.2-rc.2",
+    "@deepseek-ai/dsh-client-ui-slots": "^0.2.2-rc.2",
+    "react": "^18.2.0"
+  },
+  "engines": {
+    "node": ">=24.9.0",
+    "dsh": "^0.2.2-rc.2"
+  },
+  "keywords": [
+    "dsh",
+    "dsh-plugin",
+    "deepseek-harness",
+    "cliproxyapi",
+    "llm"
+  ],
+  "publishConfig": {
+    "access": "public"
+  },
+  "license": "MIT"
+}

package/src/adapter.js

@@ -1,68 +1,68 @@
-import { PiAiAdapter } from '@deepseek-ai/dsh-llm-pi-ai'
-import { LlmError, resolveImageAttachmentAccess, resolveRetryPolicy } from '@deepseek-ai/dsh-llm'
-import { createProvider, InMemoryCredentialStore, defaultProviderAuthContext } from '@earendil-works/pi-ai'
-import { createTransport } from './transport.js'
-import { resolveIdentity } from './connection.js'
-import { protocolOf } from './policy.js'
-
-const PROVIDER = 'CLIProxyAPI'
-const LEVELS = ['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max']
-
-export function createGatewayAdapter(ctx, snapshot, diagnostics, onMissing = () => { }) {
-  let profiles = new Map()
-  const update = (next) => {
-    const captured = structuredClone(next)
-    const protocol = protocolOf(captured.policy)
-    const models = captured.models.filter((model) => captured.modelSelection?.[model.id] !== false).map((model) => {
-      const efforts = model.reasoningEfforts
-      const thinkingLevelMap = efforts && Object.fromEntries(LEVELS.flatMap((level) => efforts[level] === undefined ? [[level, null]] : efforts[level] === null ? [] : [[level, efforts[level]]]))
-      return {
-        id: model.id, name: model.name ?? model.id, provider: PROVIDER, api: protocol,
-        baseUrl: captured.baseURL, reasoning: !!efforts, ...(thinkingLevelMap ? { thinkingLevelMap } : {}),
-        input: model.inputModalities ?? model.input ?? ['text'], contextWindow: model.contextWindow,
-        maxTokens: model.maxTokens, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
-        compat: { ...captured.policy?.compat, ...model.compat, supportsStrictMode: true },
-      }
-    })
-    const piProvider = createProvider({
-      id: PROVIDER, name: PROVIDER, baseUrl: captured.baseURL, models,
-      auth: { apiKey: { name: 'DSH key resolver', resolve: async ({ credential }) => ({ auth: { apiKey: credential?.key ?? 'cpa-keyless' }, source: 'DSH' }) } },
-      api: createTransport(protocol, captured.baseURL, diagnostics, globalThis.fetch, captured.authIdentity?.type === 'none'),
-    })
-    const profile = {
-      provider: PROVIDER, displayName: PROVIDER, baseURL: captured.baseURL, piProvider, api: protocol,
-      authIdentity: captured.authIdentity, headers: captured.policy?.headers,
-      reasoning: captured.policy?.reasoning, thinkingBudgets: captured.policy?.thinkingBudgets,
-      cacheRetention: captured.policy?.cacheRetention, transport: captured.policy?.transport,
-      timeoutMs: captured.policy?.timeoutMs, websocketConnectTimeoutMs: captured.policy?.websocketConnectTimeoutMs,
-      streamIdleTimeoutMs: captured.policy?.streamIdleTimeoutMs ?? 30000,
-      maxRequestImageBytes: captured.policy?.maxRequestImageBytes ?? 20 * 1024 * 1024,
-      maxRequestImages: captured.policy?.maxRequestImages ?? 50,
-      imageOffloadCountQuantum: captured.policy?.imageOffloadCountQuantum ?? Math.min(10, captured.policy?.maxRequestImages ?? 50),
-      requestImagePixelBudget: captured.policy?.requestImagePixelBudget ?? 2048 * 2048, requestImageMaxBytes: captured.policy?.requestImageMaxBytes ?? 1024 * 1024,
-      retryPolicy: resolveRetryPolicy(captured.policy?.retryPolicy, 'CPA'),
-      modelErrors: new Map(), configuredMaxTokens: new Map(),
-    }
-    profiles = new Map([[PROVIDER, profile]])
-  }
-  if (snapshot) update(snapshot)
-  const adapter = new PiAiAdapter({
-    profiles: () => profiles,
-    resolveApiKey: async (_provider, profile) => {
-      const value = await resolveIdentity(ctx.credentials, profile.authIdentity)
-      if (profile.authIdentity?.type !== 'none' && !value) {
-        onMissing()
-        throw new LlmError('CPA credential is missing', 'MISSING_CREDENTIAL')
-      }
-      return value
-    },
-    auth: { credentials: new InMemoryCredentialStore(), authContext: defaultProviderAuthContext },
-    resolveAttachments: () => ctx.get('attachments'),
-    resolveImageAccess: (attachments, ref) => resolveImageAttachmentAccess(attachments, (path) => ctx.get('fs')?.processPathFromHostPath(path), ref),
-    onReplayDegrade: () => {
-      diagnostics.push({ at: Date.now(), stage: 'replay-degraded' })
-      if (diagnostics.length > 50) diagnostics.splice(0, diagnostics.length - 50)
-    },
-  })
-  return { adapter, update }
-}
+import { PiAiAdapter } from '@deepseek-ai/dsh-llm-pi-ai'
+import { LlmError, resolveImageAttachmentAccess, resolveRetryPolicy } from '@deepseek-ai/dsh-llm'
+import { createProvider, InMemoryCredentialStore, defaultProviderAuthContext } from '@earendil-works/pi-ai'
+import { createTransport } from './transport.js'
+import { resolveIdentity } from './connection.js'
+import { protocolOf } from './policy.js'
+
+const PROVIDER = 'CLIProxyAPI'
+const LEVELS = ['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max']
+
+export function createGatewayAdapter(ctx, snapshot, diagnostics, onMissing = () => { }) {
+  let profiles = new Map()
+  const update = (next) => {
+    const captured = structuredClone(next)
+    const protocol = protocolOf(captured.policy)
+    const models = captured.models.filter((model) => captured.modelSelection?.[model.id] !== false).map((model) => {
+      const efforts = model.reasoningEfforts
+      const thinkingLevelMap = efforts && Object.fromEntries(LEVELS.flatMap((level) => efforts[level] === undefined ? [[level, null]] : efforts[level] === null ? [] : [[level, efforts[level]]]))
+      return {
+        id: model.id, name: model.name ?? model.id, provider: PROVIDER, api: protocol,
+        baseUrl: captured.baseURL, reasoning: !!efforts, ...(thinkingLevelMap ? { thinkingLevelMap } : {}),
+        input: model.inputModalities ?? model.input ?? ['text'], contextWindow: model.contextWindow,
+        maxTokens: model.maxTokens, cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+        compat: { ...captured.policy?.compat, ...model.compat, supportsStrictMode: true },
+      }
+    })
+    const piProvider = createProvider({
+      id: PROVIDER, name: PROVIDER, baseUrl: captured.baseURL, models,
+      auth: { apiKey: { name: 'DSH key resolver', resolve: async ({ credential }) => ({ auth: { apiKey: credential?.key ?? 'cpa-keyless' }, source: 'DSH' }) } },
+      api: createTransport(protocol, captured.baseURL, diagnostics, globalThis.fetch, captured.authIdentity?.type === 'none'),
+    })
+    const profile = {
+      provider: PROVIDER, displayName: PROVIDER, baseURL: captured.baseURL, piProvider, api: protocol,
+      authIdentity: captured.authIdentity, headers: captured.policy?.headers,
+      reasoning: captured.policy?.reasoning, thinkingBudgets: captured.policy?.thinkingBudgets,
+      cacheRetention: captured.policy?.cacheRetention, transport: captured.policy?.transport,
+      timeoutMs: captured.policy?.timeoutMs, websocketConnectTimeoutMs: captured.policy?.websocketConnectTimeoutMs,
+      streamIdleTimeoutMs: captured.policy?.streamIdleTimeoutMs ?? 30000,
+      maxRequestImageBytes: captured.policy?.maxRequestImageBytes ?? 20 * 1024 * 1024,
+      maxRequestImages: captured.policy?.maxRequestImages ?? 50,
+      imageOffloadCountQuantum: captured.policy?.imageOffloadCountQuantum ?? Math.min(10, captured.policy?.maxRequestImages ?? 50),
+      requestImagePixelBudget: captured.policy?.requestImagePixelBudget ?? 2048 * 2048, requestImageMaxBytes: captured.policy?.requestImageMaxBytes ?? 1024 * 1024,
+      retryPolicy: resolveRetryPolicy(captured.policy?.retryPolicy, 'CPA'),
+      modelErrors: new Map(), configuredMaxTokens: new Map(),
+    }
+    profiles = new Map([[PROVIDER, profile]])
+  }
+  if (snapshot) update(snapshot)
+  const adapter = new PiAiAdapter({
+    profiles: () => profiles,
+    resolveApiKey: async (_provider, profile) => {
+      const value = await resolveIdentity(ctx.credentials, profile.authIdentity)
+      if (profile.authIdentity?.type !== 'none' && !value) {
+        onMissing()
+        throw new LlmError('CPA credential is missing', 'MISSING_CREDENTIAL')
+      }
+      return value
+    },
+    auth: { credentials: new InMemoryCredentialStore(), authContext: defaultProviderAuthContext },
+    resolveAttachments: () => ctx.get('attachments'),
+    resolveImageAccess: (attachments, ref) => resolveImageAttachmentAccess(attachments, (path) => ctx.get('fs')?.processPathFromHostPath(path), ref),
+    onReplayDegrade: () => {
+      diagnostics.push({ at: Date.now(), stage: 'replay-degraded' })
+      if (diagnostics.length > 50) diagnostics.splice(0, diagnostics.length - 50)
+    },
+  })
+  return { adapter, update }
+}

package/src/catalog-store.js

@@ -1,62 +1,62 @@
-import { createHash, randomUUID } from 'node:crypto'
-import { mkdir, open, rename, unlink, writeFile } from 'node:fs/promises'
-import { dirname } from 'node:path'
-import { dshCachePath } from '@deepseek-ai/dsh-home-paths'
-
-const MAX_CACHE_BYTES = 8 * 1024 * 1024
-const MAX_CATALOG_BYTES = 4 * 1024 * 1024
-
-function cachePath(documentPath, generation) {
-  if (typeof documentPath !== 'string' || !documentPath || typeof generation !== 'string' || !/^[a-f0-9]{64}$/.test(generation)) throw new TypeError('A document path and valid generation are required')
-  const documentHash = createHash('sha256').update(documentPath).digest('hex')
-  return dshCachePath('llm-cliproxyapi', documentHash, `${generation}.json`)
-}
-
-function redact(value) {
-  if (Array.isArray(value)) return value.map(redact)
-  if (!value || typeof value !== 'object') return value
-  return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, /^(?:api[_-]?key|authorization|proxy[_-]?authorization|cookie|set-cookie|password|secret|access[_-]?token|refresh[_-]?token)$/i.test(key) ? '[redacted]' : redact(item)]))
-}
-function validModels(models) {
-  return Array.isArray(models) && models.length > 0 && models.every((model) => model && typeof model === 'object' && !Array.isArray(model) && typeof model.id === 'string' && model.id.length > 0 && typeof model.name === 'string' && Number.isSafeInteger(model.contextWindow) && model.contextWindow > 0 && Number.isSafeInteger(model.maxTokens) && model.maxTokens > 0 && Array.isArray(model.inputModalities) && model.inputModalities.length > 0 && model.inputModalities.every((input) => input === 'text' || input === 'image') && (model.reasoningEfforts === undefined || (model.reasoningEfforts && typeof model.reasoningEfforts === 'object' && !Array.isArray(model.reasoningEfforts) && Object.entries(model.reasoningEfforts).every(([level, wire]) => ['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'].includes(level) && (typeof wire === 'string' && wire.length > 0 || level === 'off' && wire === null))))) && new Set(models.map((model) => model.id)).size === models.length
-}
-
-export async function readCatalogCache(documentPath, generation, baseURL, authIdentity) {
-  try {
-    const handle = await open(cachePath(documentPath, generation), 'r')
-    let data
-    try {
-      const buffer = Buffer.alloc(MAX_CACHE_BYTES + 1)
-      const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0)
-      if (bytesRead > MAX_CACHE_BYTES) return undefined
-      data = buffer.subarray(0, bytesRead)
-    } finally {
-      await handle.close()
-    }
-    const value = JSON.parse(data.toString('utf8'))
-    if (!value || value.schemaVersion !== 1 || value.generation !== generation || value.baseURL !== baseURL || JSON.stringify(value.authIdentity) !== JSON.stringify(authIdentity) || !Number.isFinite(value.fetchedAt) || !Array.isArray(value.raw) || !validModels(value.effective)) return undefined
-    return value
-  } catch (error) {
-    if (error.code === 'ENOENT' || error instanceof SyntaxError) return undefined
-    throw error
-  }
-}
-
-export async function writeCatalogCache(documentPath, snapshot) {
-  const file = cachePath(documentPath, snapshot.generation)
-  const raw = redact(snapshot.raw)
-  const effective = redact(snapshot.effective)
-  if (!Array.isArray(raw) || !validModels(effective)) throw new TypeError('Catalog models are invalid')
-  if (Buffer.byteLength(JSON.stringify(raw)) > MAX_CATALOG_BYTES) throw new RangeError('Catalog exceeds 4 MiB')
-  const contents = JSON.stringify({ schemaVersion: 1, generation: snapshot.generation, baseURL: snapshot.baseURL, authIdentity: snapshot.authIdentity, fetchedAt: snapshot.fetchedAt, raw, effective })
-  if (Buffer.byteLength(contents) > MAX_CACHE_BYTES) throw new RangeError('Catalog cache exceeds 8 MiB')
-  await mkdir(dirname(file), { recursive: true })
-  const temporary = `${file}.${randomUUID()}.tmp`
-  try {
-    await writeFile(temporary, contents, { encoding: 'utf8', flag: 'wx', mode: 0o600 })
-    await rename(temporary, file)
-  } catch (error) {
-    await unlink(temporary).catch(() => { })
-    throw error
-  }
-}
+import { createHash, randomUUID } from 'node:crypto'
+import { mkdir, open, rename, unlink, writeFile } from 'node:fs/promises'
+import { dirname } from 'node:path'
+import { dshCachePath } from '@deepseek-ai/dsh-home-paths'
+
+const MAX_CACHE_BYTES = 8 * 1024 * 1024
+const MAX_CATALOG_BYTES = 4 * 1024 * 1024
+
+function cachePath(documentPath, generation) {
+  if (typeof documentPath !== 'string' || !documentPath || typeof generation !== 'string' || !/^[a-f0-9]{64}$/.test(generation)) throw new TypeError('A document path and valid generation are required')
+  const documentHash = createHash('sha256').update(documentPath).digest('hex')
+  return dshCachePath('llm-cliproxyapi', documentHash, `${generation}.json`)
+}
+
+function redact(value) {
+  if (Array.isArray(value)) return value.map(redact)
+  if (!value || typeof value !== 'object') return value
+  return Object.fromEntries(Object.entries(value).map(([key, item]) => [key, /^(?:api[_-]?key|authorization|proxy[_-]?authorization|cookie|set-cookie|password|secret|access[_-]?token|refresh[_-]?token)$/i.test(key) ? '[redacted]' : redact(item)]))
+}
+function validModels(models) {
+  return Array.isArray(models) && models.length > 0 && models.every((model) => model && typeof model === 'object' && !Array.isArray(model) && typeof model.id === 'string' && model.id.length > 0 && typeof model.name === 'string' && Number.isSafeInteger(model.contextWindow) && model.contextWindow > 0 && Number.isSafeInteger(model.maxTokens) && model.maxTokens > 0 && Array.isArray(model.inputModalities) && model.inputModalities.length > 0 && model.inputModalities.every((input) => input === 'text' || input === 'image') && (model.reasoningEfforts === undefined || (model.reasoningEfforts && typeof model.reasoningEfforts === 'object' && !Array.isArray(model.reasoningEfforts) && Object.entries(model.reasoningEfforts).every(([level, wire]) => ['off', 'minimal', 'low', 'medium', 'high', 'xhigh', 'max'].includes(level) && (typeof wire === 'string' && wire.length > 0 || level === 'off' && wire === null))))) && new Set(models.map((model) => model.id)).size === models.length
+}
+
+export async function readCatalogCache(documentPath, generation, baseURL, authIdentity) {
+  try {
+    const handle = await open(cachePath(documentPath, generation), 'r')
+    let data
+    try {
+      const buffer = Buffer.alloc(MAX_CACHE_BYTES + 1)
+      const { bytesRead } = await handle.read(buffer, 0, buffer.length, 0)
+      if (bytesRead > MAX_CACHE_BYTES) return undefined
+      data = buffer.subarray(0, bytesRead)
+    } finally {
+      await handle.close()
+    }
+    const value = JSON.parse(data.toString('utf8'))
+    if (!value || value.schemaVersion !== 1 || value.generation !== generation || value.baseURL !== baseURL || JSON.stringify(value.authIdentity) !== JSON.stringify(authIdentity) || !Number.isFinite(value.fetchedAt) || !Array.isArray(value.raw) || !validModels(value.effective)) return undefined
+    return value
+  } catch (error) {
+    if (error.code === 'ENOENT' || error instanceof SyntaxError) return undefined
+    throw error
+  }
+}
+
+export async function writeCatalogCache(documentPath, snapshot) {
+  const file = cachePath(documentPath, snapshot.generation)
+  const raw = redact(snapshot.raw)
+  const effective = redact(snapshot.effective)
+  if (!Array.isArray(raw) || !validModels(effective)) throw new TypeError('Catalog models are invalid')
+  if (Buffer.byteLength(JSON.stringify(raw)) > MAX_CATALOG_BYTES) throw new RangeError('Catalog exceeds 4 MiB')
+  const contents = JSON.stringify({ schemaVersion: 1, generation: snapshot.generation, baseURL: snapshot.baseURL, authIdentity: snapshot.authIdentity, fetchedAt: snapshot.fetchedAt, raw, effective })
+  if (Buffer.byteLength(contents) > MAX_CACHE_BYTES) throw new RangeError('Catalog cache exceeds 8 MiB')
+  await mkdir(dirname(file), { recursive: true })
+  const temporary = `${file}.${randomUUID()}.tmp`
+  try {
+    await writeFile(temporary, contents, { encoding: 'utf8', flag: 'wx', mode: 0o600 })
+    await rename(temporary, file)
+  } catch (error) {
+    await unlink(temporary).catch(() => { })
+    throw error
+  }
+}