@toddzheng024/dscode-bundle 0.7.6 → 0.7.7

package/THIRD_PARTY_NOTICES.md

@@ -19,9 +19,6 @@ Local changes: DSCODE effort, shell control, TUI commands and footer.
 @deepseek-ai/dsh-llm-deepseek@0.1.5-rc.1: MIT; {"type":"git","url":"git+https://github.com/deepseek-ai/deepseek-harness.git","directory":"packages/llm/llm-deepseek"}
 Local changes: DSCODE effort, shell control, TUI commands and footer.
 
-@deepseek-ai/dsh-llm-pi-ai@0.1.5-rc.1: MIT; {"type":"git","url":"git+https://github.com/deepseek-ai/deepseek-harness.git","directory":"packages/llm/llm-pi-ai"}
-Local changes: DSCODE effort, shell control, TUI commands and footer.
-
 @deepseek-ai/dsh-tool-bash@0.1.5-rc.1: MIT; {"type":"git","url":"git+https://github.com/deepseek-ai/deepseek-harness.git","directory":"packages/shell/tool-bash"}
 Local changes: DSCODE effort, shell control, TUI commands and footer.
 
@@ -30,3 +27,6 @@ Local changes: DSCODE effort, shell control, TUI commands and footer.
 
 @deepseek-ai/dsh-terminal-bash@0.1.5-rc.1: MIT; {"type":"git","url":"git+https://github.com/deepseek-ai/deepseek-harness.git","directory":"packages/terminal/terminal-bash"}
 Local changes: DSCODE effort, shell control, TUI commands and footer.
+
+@deepseek-ai/dsh-compaction-basic@0.1.5-rc.1: MIT; {"type":"git","url":"git+https://github.com/deepseek-ai/deepseek-harness.git","directory":"packages/compaction/compaction-basic"}
+Local changes: DSCODE effort, shell control, TUI commands and footer.

package/cordis.patch.yml

@@ -662,6 +662,29 @@
   config:
     policy: ask
 
+# OpenRouter is DSCODE's own adapter (plugins/openrouter); the pi-ai route that
+# served it before stays unmounted so the two never claim the same route.
+- id: llm-pi-ai
+  disabled: true
+
+# Web search follows the session's route: OpenRouter's web plugin for an
+# OpenRouter session, DeepSeek's native search for a DeepSeek one. A patch
+# replaces the row's whole config, so fetch keeps its provider here.
+- id: web
+  config:
+    searchProvider: dscode-web
+    fetchProvider: http
+
+# A reasoning model spends tokens before its title; 64 left most titles empty.
+# DeepSeek's route disables thinking for titles, so its usage stays small.
+- id: session-title-llm
+  config:
+    targetWords: 5
+    targetCjkCharacters: 10
+    maxInputBytes: 4096
+    maxOutputTokens: 1024
+    timeoutMs: 60000
+
 - id: computer-use
   config:
     observationTtlMs: 30000
@@ -702,11 +725,13 @@
 - id: credentials
   name: "@toddzheng024/dscode-bundle/credentials"
 - insert:
+    - id: dscode-openrouter
+      name: "@toddzheng024/dscode-bundle/openrouter"
     - id: dscode-auto-review
       name: "@toddzheng024/dscode-bundle/auto-review"
       config:
         timeoutMs: 30000
-        maxOutputTokens: 768
+        maxOutputTokens: 4096
         maxReviewsPerTurn: 20
     - id: dscode-session-metrics
       name: "@toddzheng024/dscode-bundle/session-metrics"
@@ -738,12 +763,8 @@
 
 - id: llm-deepseek
   disabled: true
-- id: llm-pi-ai
-  disabled: true
 - insert:
     - id: dscode-deepseek
       name: '@toddzheng024/dscode-bundle/deepseek'
-    - id: dscode-pi-ai
-      name: '@toddzheng024/dscode-bundle/pi-ai'
     - id: dscode-bootstrap
       name: '@toddzheng024/dscode-bundle/bootstrap'

package/package.json

@@ -1,5 +1,5 @@
 {
-  "version": "0.7.6",
+  "version": "0.7.7",
   "type": "module",
   "license": "MIT",
   "author": "Todd Zheng",
@@ -44,14 +44,15 @@
     "./tui": "./vendor/tui/index.mjs",
     "./startup": "./vendor/tui/startup.mjs",
     "./deepseek": "./vendor/deepseek/index.js",
-    "./pi-ai": "./vendor/pi-ai/index.js",
     "./bash": "./vendor/bash/index.js",
     "./persistent": "./vendor/persistent/index.js",
     "./terminal": "./vendor/terminal/index.js",
+    "./compaction-basic": "./vendor/compaction-basic/index.js",
     "./policy": "./plugins/dscode/index.mjs",
     "./code-review": "./plugins/code-review/index.mjs",
     "./auto-review": "./plugins/auto-review/index.mjs",
     "./session-metrics": "./plugins/session-metrics/index.mjs",
+    "./openrouter": "./plugins/openrouter/index.mjs",
     "./tui-tools": "./plugins/tui-tools/index.mjs"
   },
   "dependencies": {
@@ -305,8 +306,7 @@
     "nodemailer": "10.0.9",
     "react": "18.3.1",
     "commander": "15.0.0",
-    "eventsource-parser": "3.1.1",
-    "@earendil-works/pi-ai": "0.85.1"
+    "eventsource-parser": "3.1.1"
   },
   "dsh": {
     "bundle": {

package/plugins/auto-review/index.mjs

@@ -3,13 +3,15 @@ import { BlockAssembler, createSystemMessage, createUserMessage } from '@deepsee
 import { REVIEW_POLICY, escalationDiagnosticGrant, needsMcpApproval, redact, fingerprint, contextFor, parseDecision } from './policy.mjs';
 import { join, resolve } from 'node:path';
 import { auditStore } from './audit.mjs';
+import { effortFor } from '../providers/effort.mjs';
 
 export const name = 'dscode-auto-review';
 export const inject = ['approval', 'permissionPresets', 'tools', 'llm', 'commands'];
 export const Config = z.object({
   provider: z.string().default(''), model: z.string().default(''),
   timeoutMs: z.number().min(100).max(120000).default(30000),
-  maxOutputTokens: z.number().step(1).min(128).max(2048).default(768),
+  // Reasoning tokens count against the cap: a reasoning model needs room before its verdict.
+  maxOutputTokens: z.number().step(1).min(128).max(16384).default(4096),
   maxReviewsPerTurn: z.number().step(1).min(1).max(100).default(20),
   maxEscalationGrantsPerTurn: z.number().step(1).min(0).max(10).default(2),
   auditDirectory: z.string(),
@@ -105,8 +107,11 @@ export function apply(ctx, config) {
       // file reads, or main-agent reasoning are added to the reviewer context.
       const operation = (async () => {
         let terminal = false;
+        // A verdict needs little deliberation: the lowest level near low the reviewer model offers.
+        const effort = await effortFor(ctx.llm, target, 'low', signal);
         for await (const chunk of ctx.llm.stream({
           provider: target.provider, model: target.model, sessionId: req.agent.session.id,
+          ...(effort === undefined ? {} : { reasoningEffort: effort }),
           messages: [createSystemMessage(REVIEW_POLICY, name), createUserMessage({
             content: [{ type: 'text', text: JSON.stringify({ action, context }) }],
             source: { kind: 'plugin', plugin: name },

package/plugins/compaction/tetris.mjs

@@ -0,0 +1,65 @@
+// The compaction indicator: a small scripted Tetris bot. It lines each piece up
+// over its slot, drops it and clears the full rows, the way compaction clears
+// older history. The script tiles the well, so every run ends empty and loops.
+// Cells: '.' empty, '@' falling piece, '#' settled, '=' a row being cleared.
+export const TETRIS_WIDTH = 8;
+export const TETRIS_HEIGHT = 4;
+export const TETRIS_TICK_MS = 160;
+
+const EMPTY_ROW = '.'.repeat(TETRIS_WIDTH);
+// [row, column] cells inside each piece's box, row 0 on top.
+const O = [[0, 0], [0, 1], [1, 0], [1, 1]];
+const I = [[0, 0], [0, 1], [0, 2], [0, 3]];
+const J = [[0, 0], [1, 0], [1, 1], [1, 2]];
+const HOOK = [[0, 0], [0, 1], [0, 2], [1, 2]];
+// Two rows cleared at once, then a single row whose leftovers fall and clear next.
+const SCRIPT = [
+  { cells: O, x: 0 }, { cells: J, x: 2 }, { cells: HOOK, x: 3 }, { cells: O, x: 6 },
+  { cells: I, x: 0 }, { cells: O, x: 4 }, { cells: O, x: 6 }, { cells: I, x: 0 },
+];
+
+function fits(board, cells, x, y) {
+  return cells.every(([row, column]) => y + row < TETRIS_HEIGHT && x + column >= 0 && x + column < TETRIS_WIDTH && board[y + row][x + column] === '.');
+}
+
+function paint(board, cells, x, y, mark) {
+  const rows = board.map(row => [...row]);
+  for (const [row, column] of cells) rows[y + row][x + column] = mark;
+  return rows.map(row => row.join(''));
+}
+
+/** Every frame of one loop, simulated from the script; throws when the script stops tiling the well. */
+export function tetrisFrames() {
+  let board = Array.from({ length: TETRIS_HEIGHT }, () => EMPTY_ROW);
+  const frames = [];
+  for (const { cells, x: target } of SCRIPT) {
+    const width = Math.max(...cells.map(([, column]) => column)) + 1;
+    let x = Math.floor((TETRIS_WIDTH - width) / 2), y = 0;
+    if (!fits(board, cells, x, y)) throw Error('Tetris script spawns into the stack');
+    frames.push(paint(board, cells, x, y, '@'));
+    while (x !== target) {
+      x += Math.sign(target - x);
+      if (!fits(board, cells, x, y)) throw Error('Tetris script steers into the stack');
+      frames.push(paint(board, cells, x, y, '@'));
+    }
+    while (fits(board, cells, x, y + 1)) frames.push(paint(board, cells, x, ++y, '@'));
+    board = paint(board, cells, x, y, '#');
+    const kept = board.filter(row => row.includes('.'));
+    if (kept.length < TETRIS_HEIGHT) {
+      const flash = board.map(row => row.includes('.') ? row : '='.repeat(TETRIS_WIDTH));
+      frames.push(flash, flash);
+      board = [...Array.from({ length: TETRIS_HEIGHT - kept.length }, () => EMPTY_ROW), ...kept];
+    }
+    frames.push(board);
+  }
+  if (board.some(row => row !== EMPTY_ROW)) throw Error('Tetris script does not clear the well');
+  return frames;
+}
+
+const FRAMES = tetrisFrames();
+
+/** The board rows for an animation tick; the loop wraps. */
+export function tetrisFrame(tick) {
+  const index = Math.floor(tick) % FRAMES.length;
+  return FRAMES[index < 0 ? index + FRAMES.length : index];
+}

package/plugins/compaction/threshold.mjs

@@ -0,0 +1,46 @@
+import { cacheReadRatio } from '../session-metrics/pricing.mjs';
+import { ensureOpenRouterModels } from '../openrouter/models.mjs';
+
+// Auto-compaction threshold priced from the route's cache discount. Staying put
+// re-reads the whole context at the cache-read price; compacting pays for a
+// summary call and re-reads the kept tail at the full input price once. With a
+// deep discount (r = cache read / input price) a long context is cheap to carry,
+// so compaction waits; with no discount it pays off early.
+export const DEFAULT_THRESHOLD_RATIO = 0.8;
+
+/** Threshold ratio for a cache-read / input price ratio; unknown prices keep the upstream default. */
+export function thresholdForCacheRatio(ratio) {
+  if (!Number.isFinite(ratio) || ratio < 0) return DEFAULT_THRESHOLD_RATIO;
+  // Prices are decimal fractions: 0.3 / 3 must land on the 0.1 boundary, not just below it.
+  const rounded = Math.round(ratio * 1e9) / 1e9;
+  return rounded < 0.1 ? 0.9 : rounded < 0.5 ? 0.8 : 0.6;
+}
+
+/** The route's threshold ratio, waiting for the OpenRouter listing when it has not loaded yet. */
+export async function pricedThresholdRatio(provider, model, now = Date.now()) {
+  if (provider === 'openrouter') await ensureOpenRouterModels({ home: process.env.DSH_HOME, now });
+  return thresholdForCacheRatio(cacheReadRatio(provider, model, now));
+}
+
+/**
+ * A compaction-basic route policy with the priced threshold. A threshold the
+ * deployment configured, globally or for this route, is left as it is.
+ * @param config - resolved compaction-basic config; `dscodePricedThreshold` marks an unset top-level threshold.
+ * @param policy - that route's merged policy.
+ */
+export async function pricedCompactionPolicy(config, policy, now = Date.now()) {
+  const { provider, model } = policy.target;
+  const override = config.modelPolicies?.find(entry => entry.provider === provider && entry.model === model);
+  if (config.dscodePricedThreshold !== true || override?.thresholdRatio !== undefined) return policy;
+  const thresholdRatio = await pricedThresholdRatio(provider, model, now);
+  // The retained tail must stay below the threshold, so a configured tail that large keeps the configured policy.
+  if (policy.retainRatio !== undefined && policy.retainRatio >= thresholdRatio) return policy;
+  return { ...policy, thresholdRatio };
+}
+
+/** Whether the session's current context would compact on a route's next step, or undefined when either size is unknown. */
+export function compactionPreview({ used, contextWindow, thresholdRatio, label = '' }) {
+  if (!Number.isFinite(used) || used <= 0 || !Number.isInteger(contextWindow) || contextWindow <= 0) return undefined;
+  const threshold = Math.floor(contextWindow * thresholdRatio);
+  return { label, used, contextWindow, thresholdRatio, threshold, compacts: used >= threshold, overflows: used >= contextWindow };
+}

package/plugins/credentials/index.mjs

@@ -5,8 +5,8 @@ import { Context, Service } from '@deepseek-ai/cordis';
 import { launchEnvironmentOf } from '@deepseek-ai/dsh-launch-environment';
 import { PROVIDERS } from '../providers/catalog.mjs';
 
-// The `/provider` keys (DeepSeek, OpenRouter) live in the shared store.
-const SHARED = new Set(PROVIDERS.map(provider => provider.credentialRef));
+// The `/provider` keys (DeepSeek, OpenRouter and its management key) live in the shared store.
+const SHARED = new Set(PROVIDERS.flatMap(provider => [provider.credentialRef, provider.managementRef].filter(Boolean)));
 
 // Use the native locked, watched, owner-only store. Keep this independent of
 // the installed profile so upgrades and different projects share credentials.

package/plugins/i18n/messages.mjs

@@ -37,6 +37,9 @@ export const MESSAGES = {
     'language.saveFailed': 'language save failed: {error}',
     'doctor.logs.new': 'Only warnings/errors since this TUI version started are recorded.',
     'footer.current': 'current', 'footer.average': 'average', 'footer.context': 'context', 'footer.cache': 'cache hit', 'composer.placeholder': 'type a message',
+    'compaction.running': 'Compacting context, please wait', 'compaction.confirm.title': 'Switching to {model} will compact the conversation',
+    'compaction.confirm.usage': 'context {used} ≥ compaction threshold {threshold} ({window} × {ratio})', 'compaction.confirm.next': 'the next step compacts older history first',
+    'compaction.confirm.overflow': 'it already exceeds the {window} window: the next request compacts and retries', 'compaction.confirm.hint': 'y switch · n/esc back',
     'doctor.nearTimeout': 'Assessment: {count} Bash calls ended at about 300 seconds, which matches the tool timeout; traces alone cannot prove the root cause. Next, check those calls\' shell completion markers and terminal errors.',
     'doctor.logs.none': 'No log file yet; earlier console logs were not persisted and cannot be recovered.',
     'doctor.evidence': 'Diagnostic evidence: {traces} recent sessions, {logs} warnings/errors.',
@@ -58,6 +61,9 @@ export const MESSAGES = {
     'language.saveFailed': '语言设置保存失败：{error}',
     'doctor.logs.new': '仅记录新版 TUI 启动后的 warning/error。',
     'footer.current': '当前', 'footer.average': '平均', 'footer.context': '上下文', 'footer.cache': '缓存命中', 'composer.placeholder': '输入消息',
+    'compaction.running': '正在压缩上下文，请稍后', 'compaction.confirm.title': '切换到 {model} 会触发自动压缩',
+    'compaction.confirm.usage': '当前上下文 {used} ≥ 压缩阈值 {threshold}（{window} × {ratio}）', 'compaction.confirm.next': '下一步开始前会先压缩较早的对话',
+    'compaction.confirm.overflow': '已超出新模型的 {window} 上下文窗口：下一次请求会先压缩再重试', 'compaction.confirm.hint': 'y 确认切换 · n/esc 返回',
     'doctor.nearTimeout': '判断：{count} 次 Bash 调用在约 300 秒结束，符合工具超时特征；trace 不能单独证明触发超时的根因。下一步检查这些调用的 shell 完成标记和终端错误。',
     'doctor.logs.none': '日志文件尚未建立；旧版控制台日志未持久化，无法回溯。',
     'doctor.evidence': '诊断证据：{traces} 个近期会话、{logs} 条 warning/error。',
@@ -79,6 +85,9 @@ export const MESSAGES = {
     'language.saveFailed': '語言設定儲存失敗：{error}',
     'doctor.logs.new': '僅記錄新版 TUI 啟動後的 warning/error。',
     'footer.current': '目前', 'footer.average': '平均', 'footer.context': '上下文', 'footer.cache': '快取命中', 'composer.placeholder': '輸入訊息',
+    'compaction.running': '正在壓縮上下文，請稍候', 'compaction.confirm.title': '切換到 {model} 會觸發自動壓縮',
+    'compaction.confirm.usage': '目前上下文 {used} ≥ 壓縮閾值 {threshold}（{window} × {ratio}）', 'compaction.confirm.next': '下一步開始前會先壓縮較早的對話',
+    'compaction.confirm.overflow': '已超出新模型的 {window} 上下文視窗：下一次請求會先壓縮再重試', 'compaction.confirm.hint': 'y 確認切換 · n/esc 返回',
     'doctor.nearTimeout': '判斷：{count} 次 Bash 呼叫在約 300 秒結束，符合工具逾時特徵；trace 無法單獨證明觸發逾時的根因。下一步檢查這些呼叫的 shell 完成標記和終端錯誤。',
     'doctor.logs.none': '日誌檔尚未建立；舊版主控台日誌未持久化，無法回溯。',
     'doctor.evidence': '診斷證據：{traces} 個近期工作階段、{logs} 筆 warning/error。',
@@ -100,6 +109,9 @@ export const MESSAGES = {
     'language.saveFailed': '言語設定の保存に失敗しました：{error}',
     'doctor.logs.new': 'この TUI バージョンの起動以降の warning/error のみ記録されています。',
     'footer.current': '現在', 'footer.average': '平均', 'footer.context': 'コンテキスト', 'footer.cache': 'キャッシュヒット', 'composer.placeholder': 'メッセージを入力',
+    'compaction.running': 'コンテキストを圧縮しています。しばらくお待ちください', 'compaction.confirm.title': '{model} に切り替えると自動圧縮が実行されます',
+    'compaction.confirm.usage': '現在のコンテキスト {used} ≥ 圧縮しきい値 {threshold}（{window} × {ratio}）', 'compaction.confirm.next': '次のステップの前に古い履歴を圧縮します',
+    'compaction.confirm.overflow': '新しいモデルの {window} ウィンドウを超えています。次のリクエストで圧縮して再試行します', 'compaction.confirm.hint': 'y 切り替え · n/esc 戻る',
     'doctor.nearTimeout': '判断：Bash 呼び出し {count} 件が約 300 秒で終了しており、ツールのタイムアウトの特徴に一致します。トレースだけでは根本原因を証明できません。次はこれらの呼び出しのシェル完了マーカーと端末エラーを確認してください。',
     'doctor.logs.none': 'ログファイルはまだありません。以前のコンソールログは保存されておらず、遡れません。',
     'doctor.evidence': '診断の根拠：直近のセッション {traces} 件、warning/error {logs} 件。',
@@ -121,6 +133,9 @@ export const MESSAGES = {
     'language.saveFailed': '언어 설정 저장 실패: {error}',
     'doctor.logs.new': '이 TUI 버전 시작 이후의 warning/error만 기록됩니다.',
     'footer.current': '현재', 'footer.average': '평균', 'footer.context': '컨텍스트', 'footer.cache': '캐시 적중', 'composer.placeholder': '메시지를 입력하세요',
+    'compaction.running': '컨텍스트를 압축하는 중입니다. 잠시만 기다려 주세요', 'compaction.confirm.title': '{model}(으)로 전환하면 자동 압축이 실행됩니다',
+    'compaction.confirm.usage': '현재 컨텍스트 {used} ≥ 압축 임계값 {threshold} ({window} × {ratio})', 'compaction.confirm.next': '다음 단계 전에 이전 대화를 먼저 압축합니다',
+    'compaction.confirm.overflow': '새 모델의 {window} 창을 이미 넘었습니다. 다음 요청에서 압축한 뒤 재시도합니다', 'compaction.confirm.hint': 'y 전환 · n/esc 뒤로',
     'doctor.nearTimeout': '판단: Bash 호출 {count}건이 약 300초에 종료되어 도구 시간 초과 특징과 일치합니다. 트레이스만으로는 근본 원인을 증명할 수 없습니다. 다음으로 해당 호출의 셸 완료 표시와 터미널 오류를 확인하세요.',
     'doctor.logs.none': '아직 로그 파일이 없습니다. 이전 콘솔 로그는 저장되지 않아 복구할 수 없습니다.',
     'doctor.evidence': '진단 근거: 최근 세션 {traces}개, warning/error {logs}건.',
@@ -142,6 +157,9 @@ export const MESSAGES = {
     'language.saveFailed': 'no se pudo guardar el idioma: {error}',
     'doctor.logs.new': 'Solo se registran los warnings/errores desde que arrancó esta versión del TUI.',
     'footer.current': 'actual', 'footer.average': 'promedio', 'footer.context': 'contexto', 'footer.cache': 'éxitos de caché', 'composer.placeholder': 'escribe un mensaje',
+    'compaction.running': 'Compactando el contexto, espera un momento', 'compaction.confirm.title': 'Cambiar a {model} compactará la conversación',
+    'compaction.confirm.usage': 'contexto {used} ≥ umbral de compactación {threshold} ({window} × {ratio})', 'compaction.confirm.next': 'el siguiente paso compacta antes el historial antiguo',
+    'compaction.confirm.overflow': 'ya supera la ventana de {window}: la siguiente petición compacta y reintenta', 'compaction.confirm.hint': 'y cambiar · n/esc volver',
     'doctor.nearTimeout': 'Valoración: {count} llamadas a Bash terminaron a unos 300 segundos, lo que coincide con el tiempo de espera de la herramienta; las trazas por sí solas no prueban la causa raíz. A continuación, revisa los marcadores de finalización del shell y los errores de terminal de esas llamadas.',
     'doctor.logs.none': 'Aún no hay archivo de registro; los registros de consola anteriores no se conservaron y no se pueden recuperar.',
     'doctor.evidence': 'Evidencia del diagnóstico: {traces} sesiones recientes, {logs} warnings/errores.',

package/plugins/openrouter/adapter.mjs

@@ -0,0 +1,157 @@
+import { LlmAdapter, LlmError, ReasoningEffortId, attributionHeaders, contentHasImage, offloadRequestImagesWithPolicy, offloadedImageText } from '@deepseek-ai/dsh-llm';
+import { listOpenRouterModels, openRouterModel } from './models.mjs';
+import { PROVIDER, effortInfo, errorCode, errorMessage, modelReasoning, requestBody, retryAfterMs, sseData, translate } from './wire.mjs';
+
+export { PROVIDER };
+/** Context assumed for a model the listing does not size. */
+export const DEFAULT_CONTEXT_WINDOW = 262144;
+/** Output cap materialized when a caller names none; OpenRouter reserves credit for it. */
+export const DEFAULT_OUTPUT_CAP = 131072;
+const APP_URL = 'https://github.com/qiz029/dscode';
+const IMAGE_POLICY = Object.freeze({ maxPixels: 2048 * 2048, maxBytes: 1024 * 1024 });
+
+function modelInfo(provider, id, entry) {
+  return { provider, id, name: entry?.name ?? id, inputModalities: entry?.inputModalities?.length ? [...entry.inputModalities] : ['text'] };
+}
+
+function collectImages(blocks, refs) {
+  for (const block of blocks) {
+    if (block.type === 'image') refs.set(block.attachment.attachmentId, block.attachment);
+    else if (block.type === 'tool-result') collectImages(block.content, refs);
+  }
+}
+
+/**
+ * OpenRouter chat completions as a harness adapter: fetch + SSE with the model
+ * directory, reasoning controls and prices of OpenRouter's live listing. Connection
+ * facts and the key resolve per request, so settings and `/login` changes reach the
+ * next call.
+ */
+export class OpenRouterAdapter extends LlmAdapter {
+  /**
+   * @param config - `options()` connection facts, `resolveApiKey(connection)`, `ensureModels()`,
+   *   optional `resolveAttachments()`, `resolveImageAccess(attachments, ref)` and `fetch`.
+   */
+  constructor(config) {
+    super();
+    this.config = config;
+  }
+
+  providerInfo(provider) {
+    return { id: provider, name: 'OpenRouter' };
+  }
+
+  providerRetryPolicy() {
+    return this.config.options().retryPolicy;
+  }
+
+  /** Models that can drive an agent: text output and tool calls. */
+  async listModels(provider) {
+    await this.config.ensureModels();
+    return listOpenRouterModels().filter(([, entry]) => entry.tools !== false && entry.textOutput !== false).map(([id, entry]) => modelInfo(provider, id, entry));
+  }
+
+  async resolveModel(provider, model) {
+    await this.config.ensureModels();
+    const entry = openRouterModel(model);
+    const reasoning = modelReasoning(model, entry);
+    return {
+      ...modelInfo(provider, model, entry),
+      context: { contextWindow: entry?.contextWindow ?? DEFAULT_CONTEXT_WINDOW },
+      ...(entry?.maxOutput ? { defaultMaxTokens: Math.min(entry.maxOutput, DEFAULT_OUTPUT_CAP) } : {}),
+      ...(reasoning ? { reasoning: {
+        efforts: reasoning.levels.map(id => ({ ...effortInfo(id), id: ReasoningEffortId(id) })),
+        ...(reasoning.defaultEffort ? { defaultEffort: ReasoningEffortId(reasoning.defaultEffort) } : {}),
+      } } : {}),
+    };
+  }
+
+  async *stream(options) {
+    const connection = this.config.options();
+    const idle = new AbortController(), consumer = new AbortController();
+    let timer;
+    const pulse = () => {
+      clearTimeout(timer);
+      timer = setTimeout(() => idle.abort(new Error('OpenRouter stream idle')), connection.streamIdleTimeoutMs);
+      timer.unref?.();
+    };
+    const signal = AbortSignal.any([idle.signal, consumer.signal, ...(options.signal ? [options.signal] : [])]);
+    try {
+      const apiKey = await this.config.resolveApiKey(connection);
+      await this.config.ensureModels();
+      const entry = openRouterModel(options.model);
+      pulse();
+      const images = await this.prepareImages(options, entry, connection, signal);
+      const body = requestBody(images?.options ?? options, { entry, images });
+      const fetchImpl = this.config.fetch ?? globalThis.fetch;
+      let response;
+      try {
+        response = await fetchImpl(`${connection.baseURL}/chat/completions`, {
+          method: 'POST',
+          headers: {
+            authorization: `Bearer ${apiKey}`,
+            'content-type': 'application/json',
+            accept: 'text/event-stream',
+            ...attributionHeaders(),
+            'HTTP-Referer': APP_URL,
+            'X-OpenRouter-Title': 'DSCODE',
+            'X-OpenRouter-Categories': 'cli-agent',
+          },
+          body: JSON.stringify(body),
+          signal,
+        });
+      } catch (error) {
+        if (signal.aborted) throw error;
+        throw new LlmError(`OpenRouter request to ${connection.baseURL} failed`, 'TRANSPORT', { cause: error });
+      }
+      // A rejected request, or a 200 whose JSON body holds only an error.
+      if (!response.ok || !response.headers.get('content-type')?.includes('text/event-stream')) {
+        const raw = await response.text();
+        let error;
+        try { error = JSON.parse(raw)?.error; } catch { /* not JSON */ }
+        if (response.ok && error === undefined) throw new LlmError(`OpenRouter returned a non-stream response: ${raw.slice(0, 120)}`, 'MALFORMED_RESPONSE');
+        const delay = retryAfterMs(response.headers.get('retry-after'));
+        const status = response.ok ? (Number.isInteger(error?.code) ? error.code : undefined) : response.status;
+        throw new LlmError(errorMessage(error, `OpenRouter API error (HTTP ${response.status})`), errorCode(response.ok ? undefined : response.status, error), {
+          cause: new Error(raw.length > 0 ? raw : `OpenRouter HTTP ${response.status}`),
+          ...(status === undefined ? {} : { status }),
+          ...(delay === undefined ? {} : { providerRetryAfterMs: delay }),
+        });
+      }
+      if (!response.body) throw new LlmError('OpenRouter returned no response body', 'EMPTY_RESPONSE');
+      for await (const chunk of translate(sseData(response.body, pulse), { model: options.model })) {
+        // The idle clock measures the provider, not a slow consumer.
+        clearTimeout(timer);
+        yield chunk;
+        pulse();
+      }
+    } catch (error) {
+      if (idle.signal.aborted && !options.signal?.aborted) throw new LlmError(`OpenRouter stream idle timeout after ${connection.streamIdleTimeoutMs}ms`, 'TIMEOUT', { cause: error });
+      if (options.signal?.aborted) throw new LlmError('OpenRouter request aborted by caller', 'ABORTED', { cause: error });
+      if (error instanceof LlmError) throw error;
+      throw new LlmError(`OpenRouter API stream from ${connection.baseURL} failed`, 'TRANSPORT', { cause: error });
+    } finally {
+      clearTimeout(timer);
+      consumer.abort('OpenRouter stream consumer stopped');
+    }
+  }
+
+  /** Read request versions of every image, oldest beyond the byte budget replaced by text first. */
+  async prepareImages(options, entry, connection, signal) {
+    if (!options.messages.some(message => contentHasImage(message.content))) return undefined;
+    if (!entry?.inputModalities?.includes('image')) throw new LlmError(`OpenRouter model "${options.model}" does not accept image input.`, 'UNSUPPORTED_CONTENT');
+    const attachments = this.config.resolveAttachments?.();
+    if (attachments === undefined) throw new LlmError('OpenRouter image input requires the durable attachment service.', 'UNSUPPORTED_CONTENT');
+    const access = ref => this.config.resolveImageAccess?.(attachments, ref);
+    const bounded = policyBytes => offloadRequestImagesWithPolicy(policyBytes.messages, {
+      representation: 'base64', maxBytes: connection.maxRequestImageBytes, byteQuantum: 1,
+      byteLength: policyBytes.byteLength, placeholder: ref => offloadedImageText(ref, access(ref)),
+    });
+    const estimated = bounded({ messages: options.messages, byteLength: ref => Math.min(ref.bytes, IMAGE_POLICY.maxBytes) });
+    const refs = new Map();
+    for (const message of estimated) collectImages(message.content, refs);
+    const versions = new Map(await Promise.all([...refs.values()].map(async ref => [ref.attachmentId, await attachments.readImageRequest(ref, IMAGE_POLICY, signal)])));
+    const exact = bounded({ messages: estimated, byteLength: ref => versions.get(ref.attachmentId).bytes });
+    return { options: { ...options, messages: [...exact] }, versions, access };
+  }
+}

package/plugins/openrouter/index.mjs

@@ -0,0 +1,112 @@
+import z from '@deepseek-ai/schemastery';
+import { LlmError, RetryPolicySchema, assertUsableApiKey, resolveImageAttachmentAccess, resolveRetryPolicy } from '@deepseek-ai/dsh-llm';
+import { credentialRef } from '@deepseek-ai/dsh-credentials';
+import { launchEnvironmentOf } from '@deepseek-ai/dsh-launch-environment';
+import { OpenRouterAdapter, PROVIDER } from './adapter.mjs';
+import { ensureOpenRouterModels } from './models.mjs';
+import { OpenRouterSearchProvider, RoutedSearchProvider } from './search.mjs';
+
+// The `openrouter` route: DSCODE's own OpenRouter adapter over its live model
+// listing, configured by the `llm-openrouter` settings section, plus web search
+// that follows the session's route.
+export const name = 'dscode-openrouter';
+export const inject = ['llm'];
+const NS = 'llm-openrouter';
+const DEFAULT_BASE_URL = 'https://openrouter.ai/api/v1';
+
+export const Config = z.object({
+  apiKeyEnv: z.string().role('credential-ref').default('OPENROUTER_API_KEY'),
+  baseURL: z.string().default(DEFAULT_BASE_URL),
+  streamIdleTimeoutMs: z.number().min(1).default(300000),
+  maxRequestImageBytes: z.number().step(1).min(1).default(20 * 1024 * 1024),
+  searchModel: z.string().default('deepseek/deepseek-v4-flash'),
+  retryPolicy: RetryPolicySchema,
+});
+
+/** Validated connection facts from one config snapshot. */
+export function resolveOptions(config = {}) {
+  const streamIdleTimeoutMs = config.streamIdleTimeoutMs ?? 300000;
+  if (!Number.isFinite(streamIdleTimeoutMs) || streamIdleTimeoutMs <= 0) throw new Error(`${name}: streamIdleTimeoutMs must be a positive number`);
+  const baseURL = (config.baseURL || DEFAULT_BASE_URL).replace(/\/+$/, '');
+  if (!URL.canParse(baseURL)) throw new Error(`${name}: baseURL must be a URL`);
+  return {
+    apiKeyEnv: credentialRef(config.apiKeyEnv || 'OPENROUTER_API_KEY'),
+    baseURL,
+    streamIdleTimeoutMs,
+    maxRequestImageBytes: config.maxRequestImageBytes ?? 20 * 1024 * 1024,
+    searchModel: config.searchModel || 'deepseek/deepseek-v4-flash',
+    retryPolicy: resolveRetryPolicy(config.retryPolicy, `${name}: retryPolicy`),
+  };
+}
+
+export function apply(ctx, config = {}) {
+  let current = () => config, lastRaw, lastGood;
+  const options = () => {
+    const raw = current();
+    if (raw === lastRaw && lastGood !== undefined) return lastGood;
+    try {
+      lastGood = resolveOptions(raw);
+      lastRaw = raw;
+      return lastGood;
+    } catch (error) {
+      if (lastGood === undefined) throw error;
+      lastRaw = raw;
+      ctx.logger.error(`${name}: keeping the last good configuration after an invalid settings section`);
+      ctx.logger.error(error);
+      return lastGood;
+    }
+  };
+  options();
+  const resolveKey = async ref => {
+    const credentials = ctx.get('credentials');
+    if (credentials !== undefined) return (await credentials.resolve(ref))?.value || undefined;
+    return launchEnvironmentOf(ctx).get(ref)?.value || undefined;
+  };
+  const home = process.env.DSH_HOME;
+  const ensureModels = () => ensureOpenRouterModels({ home });
+  const adapter = new OpenRouterAdapter({
+    options,
+    ensureModels,
+    resolveApiKey: async connection => {
+      const key = await resolveKey(connection.apiKeyEnv);
+      if (key !== undefined) return assertUsableApiKey(key, name, connection.apiKeyEnv);
+      throw new LlmError(`${name}: no API key for OpenRouter; run /login openrouter, or export ${connection.apiKeyEnv} in the launching environment`, 'MISSING_CREDENTIAL');
+    },
+    resolveAttachments: () => ctx.get('attachments'),
+    resolveImageAccess: (attachments, ref) => resolveImageAttachmentAccess(attachments, hostPath => ctx.get('fs')?.processPathFromHostPath(hostPath), ref),
+  });
+  ctx.llm.registerConfigurableProviders([{ provider: PROVIDER, displayName: 'OpenRouter', settingsNs: NS, settingsPath: [] }]);
+  const registration = ctx.llm.registerAdapter([PROVIDER], adapter);
+  let registeredPolicy = JSON.stringify(options().retryPolicy);
+  ctx.inject(['settings'], settingsCtx => {
+    settingsCtx.settings.installSection(ctx, NS, Config, config, {
+      setSource: source => { current = source; },
+      // The retry policy is captured at registration: re-register the route when it changes.
+      onChange: () => {
+        const policy = JSON.stringify(options().retryPolicy);
+        if (policy === registeredPolicy) return;
+        registration.replace([PROVIDER]);
+        registeredPolicy = policy;
+      },
+    });
+  });
+  ctx.inject(['web'], webCtx => {
+    const openrouter = new OpenRouterSearchProvider(() => {
+      const connection = options();
+      return { baseURL: connection.baseURL, model: connection.searchModel, resolveApiKey: () => resolveKey(connection.apiKeyEnv) };
+    });
+    webCtx.web.registerSearchProvider(openrouter);
+    webCtx.web.registerSearchProvider(new RoutedSearchProvider({
+      openrouter,
+      // `ctx.web` keeps no per-call selection; the DeepSeek provider is looked up in its registry.
+      deepseek: () => webCtx.web.searchProviders?.get?.('deepseek-official'),
+      currentProvider: () => {
+        const agent = ctx.get('agents')?.currentInitiator?.();
+        return agent?.session?.requestHeader?.()?.config?.provider ?? agent?.options?.provider;
+      },
+      hasKey: async ref => (await resolveKey(credentialRef(ref))) !== undefined,
+    }));
+  });
+  // Warm the listing for an OpenRouter user, so the first /model opens with every model.
+  void resolveKey(options().apiKeyEnv).then(key => key === undefined ? undefined : ensureModels(), () => {});
+}