@zergai/ztc 0.4.0-beta.1 → 0.5.0-beta.1

package/dist/config.js

@@ -1,7 +1,10 @@
-import { join } from 'path';
-import { readFile, writeFile, mkdir, chmod, unlink, rename, realpath } from 'fs/promises';
+import { modelContract } from '@zerg/model-contracts';
+import { isLocalSubscriptionProvider } from './agent/backends/provider_ids.js';
+import { resolveRouterModel, readRouterCatalog } from './utils/router_catalog.js';
+import { dirname, join } from 'path';
+import { stat, readFile, writeFile, mkdir, chmod, rm, unlink, rename, realpath } from 'fs/promises';
 import { randomUUID } from 'crypto';
-import { activeProfile, builtinProfileEmulation, profileConfigDir, validateProfileName } from './config/profiles.js';
+import { activeProfile, builtinProfileEmulation, listConfigProfiles, profileConfigDir, validateProfileName } from './config/profiles.js';
 import { accountSourceToBackendOptions, canonicalAccountProvider, probeAccountIsolated, resolveActiveAccount, resolveRotation, } from './agent/backends/account_pool.js';
 import { notifyAccountsChanged } from './agent/backends/account_events.js';
 import { inferDefaultProvider, getDefaultApiKeyForProvider, getDefaultModelForProvider, resolveCodexEffort, unsupportedCodexEffort } from './config/defaults.js';
@@ -118,8 +121,27 @@ export const DEFAULT_PERMISSION_PROFILES = {
             file_write: false,
             shell_exec: false,
             network: true,
+            computer_control: false,
+            ml_inference: false,
         },
     },
+    safe_edits: {
+        description: 'Policy checks: edit files in the current project; shell and computer control are disabled.',
+        capabilities: { file_read: true, file_write: true, shell_exec: false, network: true, screen_capture: true, computer_control: false, ml_inference: false },
+        allowedPaths: ['.'],
+    },
+    tests_allowed: {
+        description: 'Policy checks: project edits plus host approval for every shell command, including tests. Tests may change files. Requires an OS command sandbox.',
+        capabilities: { file_read: true, file_write: true, shell_exec: true, network: true, screen_capture: true, computer_control: false, ml_inference: false },
+        approvalRequiredCapabilities: ['shell_exec'],
+        allowedPaths: ['.'],
+        sandbox: { backend: 'auto', requireOsEnforcement: true },
+    },
+    local_full: {
+        description: 'Policy checks allow full local tool access. No OS command sandbox is requested unless required by host settings.',
+        capabilities: { file_read: true, file_write: true, shell_exec: true, network: true, screen_capture: true, computer_control: true, ml_inference: true },
+        sandbox: { backend: 'none' },
+    },
     locked_down: {
         description: 'Disable local filesystem mutation, shell execution, network, screen, computer, and ML tools.',
         capabilities: {
@@ -205,6 +227,21 @@ function default_provider() {
     const hasRouteCredential = ROUTE_CREDENTIAL_ENV.some(name => Boolean(process.env[name]?.trim()));
     return hasRouteCredential ? inferDefaultProvider() : PERSONAL_DEFAULT_PROVIDER;
 }
+export const DEFAULT_TERMINAL_INTERACTION = {
+    mouseCapture: true,
+    wheelScrollLines: 3,
+};
+export function resolveTerminalInteractionSettings(value) {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) {
+        return { ...DEFAULT_TERMINAL_INTERACTION };
+    }
+    const settings = value;
+    const wheel = settings.wheelScrollLines;
+    return {
+        mouseCapture: typeof settings.mouseCapture === 'boolean' ? settings.mouseCapture : true,
+        wheelScrollLines: typeof wheel === 'number' && Number.isInteger(wheel) && wheel >= 1 && wheel <= 20 ? wheel : 3,
+    };
+}
 export function build_default_config() {
     const provider = default_provider();
     return {
@@ -230,6 +267,7 @@ export function build_default_config() {
         intents: { ...DEFAULT_INTENTS },
         contextProgressBar: { ...DEFAULT_CONTEXT_PROGRESS_BAR },
         messageDisplay: { ...DEFAULT_MESSAGE_DISPLAY },
+        terminalInteraction: { ...DEFAULT_TERMINAL_INTERACTION },
         compaction: resolveCompactionSettings({}),
         // zmux shortcut overrides edited from /keybindings (empty = all defaults).
         keybindings: { zmux: {} },
@@ -290,6 +328,20 @@ const ROUTING_SETTING_KEYS = [
 function normalizedOrigin(value) {
     return value?.trim().replace(/\/+$/, '') || undefined;
 }
+/** Explicit deployment routing takes precedence over a saved session origin. */
+function routerOriginFromEnvironment() {
+    if (process.env.ZERG_PROXY_URL)
+        return process.env.ZERG_PROXY_URL;
+    if (process.env.ZERG_ROUTER_BASE_URL)
+        return normalizedOrigin(process.env.ZERG_ROUTER_BASE_URL);
+    const tiers = {
+        local: 'http://host.docker.internal:8000/api/zrouter',
+        dev: 'https://api-dev.zergai.com/api/zrouter', development: 'https://api-dev.zergai.com/api/zrouter',
+        prod: 'https://api.zergai.com/api/zrouter', production: 'https://api.zergai.com/api/zrouter', main: 'https://api.zergai.com/api/zrouter',
+    };
+    const tier = process.env.ZERG_DEPLOY_TIER || '';
+    return Object.hasOwn(tiers, tier) ? tiers[tier] : undefined;
+}
 /**
  * True when the saved provider route can already reach a model: a direct or
  * platform credential, a subscription or account login, a configured
@@ -300,6 +352,10 @@ function normalizedOrigin(value) {
 function savedRouteIsUsable(saved) {
     if (!saved.provider)
         return false;
+    // A hosted native route is deliberately independent of direct keys and
+    // personal Router logins. Keep its explicit provider/model during migration.
+    if (saved.nativeAnthropicMessagesRouter)
+        return true;
     const provider = normalizeProviderId(saved.provider);
     if (saved.authMode === 'direct')
         return true;
@@ -402,6 +458,12 @@ export class ConfigStore {
     // The legacy slot also carries runtime defaults. Only a configured key may
     // be migrated into apiKeys or written to disk.
     legacyApiKeyFromEnvironment = true;
+    /**
+     * Whether the routing in `this.config` came from a saved file or an explicit
+     * choice, rather than the built-in default. A config-less process that never
+     * picked a route must not hard-fail on the preset Router route it inherited.
+     */
+    routingIsConfigured = false;
     routerCredentials = null;
     routerCredentialsError = null;
     routerFallbackWarning = null;
@@ -409,6 +471,7 @@ export class ConfigStore {
     configScope = 'global';
     /** Session-local overrides. Never persisted to config.json. */
     sessionOverrides = {};
+    restoredSessionSelection = false;
     /** CLI-only overrides. Never persisted to config.json. */
     cliOverrides = {};
     /**
@@ -475,23 +538,10 @@ export class ConfigStore {
             else if (tier === 'prod' || tier === 'production' || tier === 'main')
                 this.config.apiEnvironment = 'production';
         }
-        // LLM proxy URL (routes through platform ZRouter instead of direct API)
-        if (process.env.ZERG_PROXY_URL) {
-            this.config.zergProxyUrl = process.env.ZERG_PROXY_URL;
-        }
-        else if (process.env.ZERG_ROUTER_BASE_URL) {
-            // Standalone ZergRouter (https://zergrouter.com) serves /v1/* at
-            // its root, no /api/zrouter suffix. Lower precedence than ZERG_PROXY_URL.
-            this.config.zergProxyUrl = process.env.ZERG_ROUTER_BASE_URL.replace(/\/+$/, '');
-        }
-        else if (process.env.ZERG_DEPLOY_TIER) {
-            const tier = process.env.ZERG_DEPLOY_TIER;
-            if (tier === 'local')
-                this.config.zergProxyUrl = 'http://host.docker.internal:8000/api/zrouter';
-            else if (tier === 'dev' || tier === 'development')
-                this.config.zergProxyUrl = 'https://api-dev.zergai.com/api/zrouter';
-            else if (tier === 'prod' || tier === 'production' || tier === 'main')
-                this.config.zergProxyUrl = 'https://api.zergai.com/api/zrouter';
+        // Resolve all explicit origin environment variables through one policy.
+        const originOverride = routerOriginFromEnvironment();
+        if (originOverride) {
+            this.config.zergProxyUrl = originOverride;
         }
         else if (!this.config.zergProxyUrl) {
             // Local default: infer ZRouter from the selected API environment.
@@ -569,9 +619,6 @@ export class ConfigStore {
         if (saved.provider && saved.model === undefined) {
             this.config.model = getDefaultModelForProvider(saved.provider);
         }
-        if (this.config.model === 'claude-opus-4-5-20250514' || this.config.model === 'claude-opus-4-20250514') {
-            this.config.model = 'claude-opus-5';
-        }
         if (!this.config.spinnerVerbs) {
             this.config.spinnerVerbs = DEFAULT_SPINNER_VERBS;
         }
@@ -587,6 +634,7 @@ export class ConfigStore {
         this.config.intents = { ...DEFAULT_INTENTS, ...(this.config.intents || {}) };
         this.config.contextProgressBar = { ...DEFAULT_CONTEXT_PROGRESS_BAR, ...(this.config.contextProgressBar || {}) };
         this.config.messageDisplay = { ...DEFAULT_MESSAGE_DISPLAY, ...(this.config.messageDisplay || {}) };
+        this.config.terminalInteraction = resolveTerminalInteractionSettings(this.config.terminalInteraction);
         this.config.compaction = resolveCompactionSettings(this.config);
         this.applyEnvOverrides();
         this.loaded = true;
@@ -599,6 +647,59 @@ export class ConfigStore {
         this.sessionOverrides = sessionOverrides;
         this.configScope = scope;
     }
+    /** Copy saved settings and Router credentials, then activate them transactionally.
+     * Account registrations retain their credential paths; account homes are not cloned.
+     */
+    async duplicateProfile(requestedName, source = activeProfile(), activate = () => { }) {
+        const name = validateProfileName(requestedName.trim());
+        const from = validateProfileName(source);
+        if (name === 'default' || builtinProfileEmulation(name)) {
+            throw new Error(`Cannot duplicate onto "${name}": it is a built-in profile sharing the default settings. Pick another name.`);
+        }
+        if (name === from || (await listConfigProfiles()).includes(name)) {
+            throw new Error(`Config profile "${name}" already exists. Pick another name.`);
+        }
+        const sourceDir = profileConfigDir(from);
+        const emulation = builtinProfileEmulation(from);
+        if (from !== 'default' && !emulation && !(await stat(sourceDir)).isDirectory()) {
+            throw new Error(`Config profile "${from}" does not exist.`);
+        }
+        let saved = {};
+        try {
+            const parsed = JSON.parse(await readFile(join(sourceDir, 'config.json'), 'utf8'));
+            if (!parsed || typeof parsed !== 'object' || Array.isArray(parsed)) {
+                throw new Error(`Invalid config profile "${from}": expected an object.`);
+            }
+            saved = parsed;
+        }
+        catch (error) {
+            if (error.code !== 'ENOENT')
+                throw error;
+        }
+        if (emulation)
+            saved.emulationId = emulation;
+        const destination = profileConfigDir(name);
+        await mkdir(dirname(destination), { recursive: true, mode: 0o700 });
+        // An existing destination, including one created concurrently, is never ours to modify.
+        await mkdir(destination, { mode: 0o700 });
+        try {
+            await writeFile(join(destination, 'config.json'), JSON.stringify(saved, null, 2), { flag: 'wx', mode: 0o600 });
+            try {
+                const auth = await readFile(join(sourceDir, 'router-auth.json'));
+                await writeFile(join(destination, 'router-auth.json'), auth, { flag: 'wx', mode: 0o600 });
+            }
+            catch (error) {
+                if (error.code !== 'ENOENT')
+                    throw error;
+            }
+            await this.switchProfile(name, activate);
+        }
+        catch (error) {
+            await rm(destination, { recursive: true, force: true });
+            throw error;
+        }
+        return name;
+    }
     /** Load a profile in this process; restore the old view if runtime activation fails. */
     async switchProfile(name, activate) {
         const next = validateProfileName(name);
@@ -627,6 +728,7 @@ export class ConfigStore {
             routerCredentialsError: this.routerCredentialsError,
             routerFallbackWarning: this.routerFallbackWarning,
             sessionOverrides: this.sessionOverrides,
+            restoredSessionSelection: this.restoredSessionSelection,
             cliOverrides: this.cliOverrides,
             runtimeActivePerProvider: this.runtimeActivePerProvider,
             configScope: this.configScope,
@@ -640,6 +742,7 @@ export class ConfigStore {
         }
         else {
             this.sessionOverrides = {};
+            this.restoredSessionSelection = false;
             this.cliOverrides = {};
             this.runtimeActivePerProvider = {};
             this.configScope = 'global';
@@ -658,11 +761,13 @@ export class ConfigStore {
         }
     }
     async save() {
+        const directory = configDir();
+        const path = configFile();
         if (this.configScope === 'session') {
             return;
         }
         try {
-            await mkdir(configDir(), { recursive: true });
+            await mkdir(directory, { recursive: true });
             // Don't persist API key if it came from an environment variable
             const toSave = { ...this.config };
             if (this.legacyApiKeyFromEnvironment)
@@ -678,8 +783,8 @@ export class ConfigStore {
             // config.json holds secrets (apiKey, apiKeys, auth.token) — keep it owner-
             // only. writeFile's mode applies only when it CREATES the file, so also
             // chmod to tighten an existing 0644 file left by an earlier ZTC.
-            await writeFile(configFile(), JSON.stringify(toSave, null, 2), { encoding: 'utf-8', mode: 0o600 });
-            await chmod(configFile(), 0o600);
+            await writeFile(path, JSON.stringify(toSave, null, 2), { encoding: 'utf-8', mode: 0o600 });
+            await chmod(path, 0o600);
         }
         catch (err) {
             runtimeDiag('error', `Failed to save config: ${err?.message ?? err}`);
@@ -714,7 +819,7 @@ export class ConfigStore {
         return this.composeConfig(false);
     }
     composeConfig(includeEffortOverride) {
-        return {
+        const config = {
             ...this.config,
             ...(this.profileEmulation ? { emulationId: this.profileEmulation } : {}),
             ...this.sessionOverrides,
@@ -727,11 +832,14 @@ export class ConfigStore {
             provider: this.getProvider(),
             model: this.getModel(),
         };
+        return { ...config, terminalInteraction: resolveTerminalInteractionSettings(config.terminalInteraction) };
     }
     cliOverridesWithoutEffort() {
         return {
             ...(this.cliOverrides.provider !== undefined ? { provider: this.cliOverrides.provider } : {}),
             ...(this.cliOverrides.model !== undefined ? { model: this.cliOverrides.model } : {}),
+            ...(this.cliOverrides.authMode !== undefined ? { authMode: this.cliOverrides.authMode } : {}),
+            ...(this.cliOverrides.zergProxyUrl !== undefined ? { zergProxyUrl: this.cliOverrides.zergProxyUrl } : {}),
         };
     }
     getMaxTokensSource() {
@@ -747,6 +855,7 @@ export class ConfigStore {
     }
     clearSessionOverrides() {
         this.sessionOverrides = {};
+        this.restoredSessionSelection = false;
     }
     async withConfigScope(scope, fn) {
         const previous = this.configScope;
@@ -758,7 +867,23 @@ export class ConfigStore {
             this.configScope = previous;
         }
     }
+    releaseRestoredSelection(key) {
+        if (!this.restoredSessionSelection || !['provider', 'model', 'authMode', 'zergProxyUrl'].includes(key))
+            return;
+        for (const route of ['provider', 'model', 'authMode', 'zergProxyUrl'])
+            delete this.sessionOverrides[route];
+        this.restoredSessionSelection = false;
+    }
     set(key, value) {
+        this.releaseRestoredSelection(key);
+        if (key === 'terminalInteraction') {
+            const normalized = resolveTerminalInteractionSettings(value);
+            if (this.configScope === 'session')
+                this.sessionOverrides.terminalInteraction = normalized;
+            else
+                this.config.terminalInteraction = normalized;
+            return;
+        }
         if (this.configScope === 'session' || (key === 'emulationId' && this.profileEmulation)) {
             this.sessionOverrides[key] = value;
             return;
@@ -768,17 +893,21 @@ export class ConfigStore {
             this.legacyApiKeyFromEnvironment = false;
     }
     setGlobal(key, value) {
+        this.releaseRestoredSelection(key);
+        if (key === 'terminalInteraction') {
+            this.config.terminalInteraction = resolveTerminalInteractionSettings(value);
+            return;
+        }
         this.config[key] = value;
         if (key === 'apiKey')
             this.legacyApiKeyFromEnvironment = false;
     }
     setAll(next) {
+        for (const key of Object.keys(next))
+            this.releaseRestoredSelection(key);
         this.config = { ...build_default_config(), ...this.config, ...next };
         if (Object.hasOwn(next, 'apiKey'))
             this.legacyApiKeyFromEnvironment = false;
-        if (this.config.model === 'claude-opus-4-5-20250514' || this.config.model === 'claude-opus-4-20250514') {
-            this.config.model = 'claude-opus-5';
-        }
         if (!this.config.spinnerVerbs) {
             this.config.spinnerVerbs = DEFAULT_SPINNER_VERBS;
         }
@@ -794,6 +923,7 @@ export class ConfigStore {
         this.config.intents = { ...DEFAULT_INTENTS, ...(this.config.intents || {}) };
         this.config.contextProgressBar = { ...DEFAULT_CONTEXT_PROGRESS_BAR, ...(this.config.contextProgressBar || {}) };
         this.config.messageDisplay = { ...DEFAULT_MESSAGE_DISPLAY, ...(this.config.messageDisplay || {}) };
+        this.config.terminalInteraction = resolveTerminalInteractionSettings(this.config.terminalInteraction);
         this.config.compaction = resolveCompactionSettings(this.config);
         this.applyEnvOverrides();
         this.loaded = true;
@@ -1021,8 +1151,34 @@ export class ConfigStore {
      * Effective Codex effort for the active (or given) provider/model. Priority:
      * per-model > per-provider > global. Defaults to the current provider/model.
      */
+    getReasoningWireSurface(provider = this.getProvider(), model = this.getModel()) {
+        if (provider === 'openai_compatible')
+            return 'chat_tools';
+        if (modelContract(provider, model)?.chatToolReasoningEfforts === undefined)
+            return 'native_api';
+        try {
+            return this.resolveLLMBackendConfig({ provider, model }).useProxy ? 'chat_tools' : 'native_api';
+        }
+        catch (error) {
+            if (error instanceof RouterConfigurationError)
+                return 'chat_tools';
+            throw error;
+        }
+    }
     getCodexEffort(provider, model) {
-        return resolveCodexEffort(this.get(), provider ?? this.getProvider(), model ?? this.getModel());
+        const selectedProvider = provider ?? this.getProvider();
+        const selectedModel = model ?? this.getModel();
+        const catalog = this.getRoutedModelCatalog();
+        const capabilities = catalog ? resolveRouterModel(catalog, selectedProvider, selectedModel)?.capabilities : undefined;
+        return resolveCodexEffort(this.get(), selectedProvider, selectedModel, capabilities
+            ?? this.getReasoningWireSurface(selectedProvider, selectedModel));
+    }
+    /** The active transport owns the model's choices, aliases and advertised default. */
+    getReasoningContract(provider = this.getProvider(), model = this.getModel()) {
+        const catalog = this.getRoutedModelCatalog();
+        if (catalog?.version === 1)
+            return resolveRouterModel(catalog, provider, model)?.capabilities?.reasoning ?? [];
+        return this.getReasoningWireSurface(provider, model);
     }
     /** Saved effort the active (or given) model rejects; undefined when it applies. */
     getUnsupportedCodexEffort(provider, model) {
@@ -1201,6 +1357,84 @@ export class ConfigStore {
             authMode: this.getAuthMode(),
         };
     }
+    restoreSessionSelection(metadata) {
+        // Legacy sessions did not persist routes. Explicit launch overrides retain priority.
+        if (!metadata.authMode || this.cliOverrides.provider || this.cliOverrides.model
+            || (metadata.configProfile && metadata.configProfile !== activeProfile()))
+            return;
+        this.restoredSessionSelection = true;
+        this.sessionOverrides.provider = metadata.provider;
+        this.sessionOverrides.model = metadata.model;
+        this.sessionOverrides.authMode = metadata.authMode;
+        if (metadata.authMode !== 'direct' && metadata.routerOrigin && !routerOriginFromEnvironment())
+            this.sessionOverrides.zergProxyUrl = metadata.routerOrigin;
+    }
+    getRouterCatalogConnection(destination = this.get().zergProxyUrl) {
+        const origin = normalizedOrigin(destination);
+        if (!origin)
+            return undefined;
+        const credentials = this.routerCredentials;
+        if (credentials && !this.routerCredentialsError && credentials.origin === origin) {
+            return { origin, token: credentials.token, workspaceId: credentials.workspaceId };
+        }
+        // Platform sessions are scoped to the platform's proxy, never another Router.
+        const token = origin === this.deriveZRouterUrl(this.getApiBaseUrl()) ? this.getAuthToken() : undefined;
+        return token ? { origin, token, workspaceId: this.getActiveWorkspace()?.id.toString() } : undefined;
+    }
+    /** New children use configured routing, not a parent's restored inference route. */
+    getChildAuthMode() {
+        if (!this.restoredSessionSelection)
+            return this.getAuthMode();
+        const { authMode: _restored, ...session } = this.sessionOverrides;
+        return resolveAuthMode({ ...this.config, ...session, ...this.cliOverrides });
+    }
+    async adoptRouterCatalog(catalog) {
+        if (catalog.version !== 1 || catalog.authRequired || this.getResolvedAuthMode() !== 'zrouter')
+            return;
+        const provider = this.getProvider(), model = this.getModel();
+        const row = resolveRouterModel(catalog, provider, model);
+        if (!row || (row.id === model && row.owned_by === provider))
+            return;
+        if (this.cliOverrides.provider || this.cliOverrides.model) {
+            this.cliOverrides.provider = row.owned_by;
+            this.cliOverrides.model = row.id;
+        }
+        else if (this.sessionOverrides.provider || this.sessionOverrides.model) {
+            this.sessionOverrides.provider = row.owned_by;
+            this.sessionOverrides.model = row.id;
+        }
+        else {
+            this.config.provider = row.owned_by;
+            this.config.model = row.id;
+            await this.save();
+        }
+    }
+    getRouterCatalog() {
+        const connection = this.getRouterCatalogConnection();
+        return connection ? readRouterCatalog(connection) : undefined;
+    }
+    getResolvedAuthMode() {
+        const mode = this.getAuthMode();
+        if (mode !== 'auto')
+            return mode;
+        try {
+            return this.resolveLLMBackendConfig().useProxy ? 'zrouter' : 'direct';
+        }
+        catch {
+            return mode;
+        }
+    }
+    getRoutedModelCatalog() {
+        if (isLocalSubscriptionProvider(this.getProvider()))
+            return undefined;
+        return this.getResolvedAuthMode() === 'zrouter' ? this.getRouterCatalog() : undefined;
+    }
+    getModelContextWindow(model = this.getModel(), provider = this.getProvider()) {
+        const catalog = this.getRoutedModelCatalog();
+        if (catalog?.version !== 1)
+            return undefined;
+        return resolveRouterModel(catalog, provider, model)?.capabilities?.context_window ?? null;
+    }
     /**
      * Resolve everything a backend factory needs into one struct. Folds in the
      * provider/model override precedence, the direct-key precedence
@@ -1215,8 +1449,7 @@ export class ConfigStore {
      *
      * Reads through `get()` and the env-aware getters (never raw `this.config`)
      * so cli/session overrides stay honored. `apiKey` is the DIRECT provider key;
-     * `authToken`/`useProxy` describe the proxy route separately, so a caller can
-     * still prefer a direct key (e.g. Gemini) over the proxy.
+     * `authToken`/`useProxy` describe the selected proxy route separately.
      */
     resolveLLMBackendConfig(opts = {}) {
         // `opts.config` resolves the config reads below (provider, model, authMode,
@@ -1233,15 +1466,15 @@ export class ConfigStore {
         const repoOverride = !opts.provider && !opts.model && !this.hasExplicitModelOverride() && opts.cwd
             ? resolveRepoModelOverride(opts.cwd)
             : null;
-        const provider = repoOverride?.provider
+        let provider = repoOverride?.provider
             ?? normalizeProviderId(opts.provider || cfg.provider || this.getProvider());
         const configProvider = cfg.provider ? normalizeProviderId(cfg.provider) : undefined;
-        const model = repoOverride?.model
+        let model = repoOverride?.model
             ?? opts.model
             ?? (configProvider === provider ? cfg.model : undefined)
             ?? getDefaultModelForProvider(provider);
-        const authMode = resolveAuthMode(cfg);
-        const proxyUrl = cfg.zergProxyUrl;
+        const authMode = isLocalSubscriptionProvider(provider) ? 'direct' : resolveAuthMode(cfg);
+        const proxyUrl = normalizedOrigin(cfg.zergProxyUrl);
         // Legacy platform tokens belong only to its /api/zrouter endpoint. A
         // standalone Router requires its own device login, including after logout.
         // Modal shared endpoints are unavailable through the legacy platform proxy.
@@ -1254,7 +1487,7 @@ export class ConfigStore {
                 routerError = new Error('Router origin does not match this login. Run ztc auth login --url <origin>.');
             }
             else if (Date.parse(this.routerCredentials.expiresAt) <= Date.now()) {
-                routerError = new Error('Router session expired. Run ztc auth login again.');
+                routerError = new RouterConfigurationError('Router session expired. Run ztc auth login again.', 'expired');
             }
             else {
                 authToken = this.routerCredentials.token;
@@ -1263,7 +1496,7 @@ export class ConfigStore {
         if (authMode !== 'direct' && routerError) {
             authToken = undefined;
             if (authMode === 'zrouter') {
-                throw new RouterConfigurationError(`${routerError.message} For a direct provider, recover with ZTC_LLM_AUTH_MODE=direct.`);
+                throw new RouterConfigurationError(`${routerError.message} For a direct provider, recover with ZTC_LLM_AUTH_MODE=direct.`, routerError instanceof RouterConfigurationError ? routerError.kind : 'configuration');
             }
             if (this.routerFallbackWarning !== routerError.message) {
                 runtimeDiag('warn', `${routerError.message} Auto mode is using direct-provider authentication.`);
@@ -1274,7 +1507,7 @@ export class ConfigStore {
             this.routerFallbackWarning = null;
         }
         if (authMode === 'zrouter' && (!proxyUrl || !authToken)) {
-            throw new RouterConfigurationError('Router authentication is required. Run ztc auth login before using router mode, or use ZTC_LLM_AUTH_MODE=direct for a direct provider.');
+            throw new RouterConfigurationError('Router authentication is required. Run ztc auth login before using router mode, or use ZTC_LLM_AUTH_MODE=direct for a direct provider.', 'authentication_required');
         }
         // Prefer the per-provider config key over an exported env var for the direct
         // key, matching the pre-seam factory's providerScopedApiKey precedence.
@@ -1293,7 +1526,19 @@ export class ConfigStore {
             || this.getOpenAICompatibleSettings(cfg).baseUrl
             || cfg.openaiCompatibleBaseUrl;
         const proxyAvailable = Boolean(proxyUrl && authToken);
-        const useProxy = authMode === 'direct' ? false : proxyAvailable;
+        // Resolve the route here so discovery and backend construction agree. Auto
+        // retains the existing local-subscription and direct-Gemini preferences.
+        const localSubscription = isLocalSubscriptionProvider(provider);
+        const useProxy = authMode === 'direct' ? false : proxyAvailable
+            && !localSubscription && !(authMode === 'auto' && provider === 'gemini' && Boolean(apiKey));
+        if (useProxy) {
+            const catalog = readRouterCatalog({ origin: proxyUrl, token: authToken, workspaceId: this.getRouterCatalogConnection(proxyUrl)?.workspaceId });
+            const descriptor = catalog?.version === 1 ? resolveRouterModel(catalog, provider, model) : undefined;
+            if (descriptor) {
+                provider = descriptor.owned_by;
+                model = descriptor.id;
+            }
+        }
         const compatBaseUrl = provider === 'openai_compatible' && rawCompatBaseUrl
             ? compatEndpoint(rawCompatBaseUrl, { apiKey })
             : rawCompatBaseUrl;
@@ -1314,7 +1559,9 @@ export class ConfigStore {
             codexHome: accountOptions.codexHome,
             codexAuthFilePath: accountOptions.codexAuthFilePath,
             kimiCredsFilePath: accountOptions.kimiCredsFilePath,
-            codexEffort: this.getCodexEffort(provider, model),
+            codexEffort: resolveCodexEffort(cfg, provider, model, (useProxy
+                ? this.getRouterCatalog()?.models.find(row => row.id === model && row.owned_by === provider)?.capabilities : undefined)
+                ?? (useProxy || provider === 'openai_compatible' ? 'chat_tools' : 'native_api')),
         };
     }
     getEnvKey(provider) {
@@ -1335,6 +1582,7 @@ export class ConfigStore {
                     : undefined;
             case 'openai': return process.env.OPENAI_API_KEY;
             case 'deepseek': return process.env.DEEPSEEK_API_KEY;
+            case 'fireworks': return process.env.FIREWORKS_API_KEY;
             case 'gemini': return process.env.GOOGLE_API_KEY || process.env.GEMINI_API_KEY;
             case 'inception': return process.env.INCEPTION_API_KEY;
             case 'openai_compatible': return process.env.OPENAI_COMPAT_API_KEY;

package/dist/context/project_intelligence.d.ts

@@ -0,0 +1,44 @@
+export declare const PROJECT_CONTEXT_SOURCE_LIMIT = 16;
+export declare const PROJECT_CONTEXT_FILE_BYTES: number;
+export declare const PROJECT_CONTEXT_TOTAL_BYTES: number;
+export declare const PROJECT_CONTEXT_INDEX_BYTES: number;
+export declare const PROJECT_CONTEXT_INDEX_PATH = ".ztc/project-context.json";
+export interface ProjectContextSource {
+    path: string;
+    sha256: string;
+    bytes: number;
+    git: {
+        head: string | null;
+        committed: boolean;
+    };
+}
+export interface ProjectContextIndexResult {
+    status: 'indexed';
+    sources: ProjectContextSource[];
+    skipped: Array<{
+        path: string;
+        reason: string;
+    }>;
+    sourceBytes: number;
+    readBytes: number;
+    indexPath: string;
+}
+export interface ProjectContextMatch {
+    source: ProjectContextSource;
+    state: 'current' | 'stale' | 'missing' | 'unreadable';
+    excerpt: string;
+    line: number;
+    excerptTruncated?: true;
+}
+export interface ProjectContextQueryResult {
+    status: 'ok' | 'missing_index' | 'invalid_index';
+    matches: ProjectContextMatch[];
+    unknownSources: Array<{
+        path: string;
+        reason: string;
+    }>;
+    indexPath: string;
+    omittedMatches: number;
+}
+export declare function indexProjectContext(root: string, paths: string[]): Promise<ProjectContextIndexResult>;
+export declare function queryProjectContext(root: string, query: string, paths?: string[]): Promise<ProjectContextQueryResult>;