charness 0.0.0-stage → 3.0.0

package/dist/utils/messageSendService.js

@@ -0,0 +1,165 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.maxDiscreteMessages = void 0;
+exports.createSendMessagesToThread = createSendMessagesToThread;
+const utils_1 = require("../utils");
+/**
+ * Upper bound on how many discrete messages one call may deliver. A per-item
+ * news digest is ~30–40 messages; 50 leaves headroom while bounding a runaway
+ * call (each message is separately rate-paced, so a large batch also floods the
+ * topic with notifications).
+ */
+exports.maxDiscreteMessages = 50;
+/** Trim a value and report whether anything non-blank remains. */
+function getNonBlank(value) {
+    if (value === undefined)
+        return undefined;
+    return value.trim().length > 0 ? value : undefined;
+}
+/**
+ * @description Classify one raw batch item. A plain non-empty string is a text
+ * message; a blank string is skipped (a stray separator never posts an empty
+ * bubble). An object with a non-blank `path` is an attachment send (its `text`
+ * becomes the caption when non-blank); an object with only text is a text
+ * message; an object with neither is a fatal validation error (the agent sent
+ * an empty item).
+ */
+function normalizeDiscreteMessageItem(item) {
+    if (typeof item === 'string') {
+        return item.trim().length === 0 ? { kind: 'skip' } : { kind: 'text', text: item };
+    }
+    const path = getNonBlank(item.path);
+    const text = getNonBlank(item.text);
+    if (path !== undefined) {
+        return {
+            kind: 'file',
+            path,
+            ...(text !== undefined ? { caption: text } : {}),
+            ...(item.asFile !== undefined ? { asFile: item.asFile } : {}),
+        };
+    }
+    if (text !== undefined)
+        return { kind: 'text', text };
+    return { kind: 'invalid', error: 'each message item must have a non-empty text or path' };
+}
+/** Pluralised "N message(s)" for the human summary. */
+function formatMessageCount(count) {
+    return `${count} message${count === 1 ? '' : 's'}`;
+}
+/**
+ * @description The graceful-cancellation result. Naming what ALREADY landed is
+ * load-bearing: without it the agent's natural next move is to re-send the whole
+ * batch, and the user sees the delivered items twice.
+ */
+function buildCancelledResult(landed) {
+    return { ok: false, error: `cancelled after delivering ${formatMessageCount(landed)}` };
+}
+/**
+ * @description Build the discrete-message sender. Each item is delivered as its
+ * OWN message, preserving order: a text item is split (defensively) into
+ * Telegram-sized chunks and each chunk sent separately; an attachment item goes
+ * through the injected file-send pipeline as a single path (text → caption).
+ * Cancellation is checked between items (coarse — a chunk already dispatched to
+ * the pacer still lands) and is ALSO caught when it is raised from inside an
+ * in-flight attachment send: `sendFiles` rejects on abort rather than returning,
+ * and letting that escape hid how many messages had already landed (the agent's
+ * natural retry then posted them twice).
+ *
+ * Items are validated up front (an all-empty object → error, nothing sent) so
+ * the service mirrors the MCP schema's all-or-nothing rejection. Failure is NOT
+ * swallowed: if every send failed the result is an ERROR (with any attachment
+ * errors named), so the agent knows nothing reached the topic instead of reading
+ * a false "Delivered 0" success; a partial failure stays `ok` but says how many
+ * landed. An attachment whose delivery outcome is unknown terminates the batch
+ * with a `deliveryUnknown` result so the agent does not blindly retry (mirrors
+ * `send_file_to_user`).
+ */
+function createSendMessagesToThread(deps) {
+    return async (threadKey, { messages, authorizedWorkDir, signal }) => {
+        const normalized = [];
+        for (const rawItem of messages) {
+            const item = normalizeDiscreteMessageItem(rawItem);
+            if (item.kind === 'invalid')
+                return { ok: false, error: item.error };
+            normalized.push(item);
+        }
+        const resolved = deps.resolveTarget(threadKey);
+        if (!resolved.ok)
+            return { ok: false, error: resolved.error };
+        const { target } = resolved;
+        let attempted = 0;
+        let landed = 0;
+        const sentMessageIds = [];
+        const attachmentErrors = [];
+        for (const item of normalized) {
+            if (signal?.aborted)
+                return buildCancelledResult(landed);
+            if (item.kind === 'skip')
+                continue;
+            if (item.kind === 'file') {
+                attempted += 1;
+                let fileResult;
+                try {
+                    fileResult = await deps.sendFiles(threadKey, {
+                        paths: [item.path],
+                        ...(item.caption !== undefined ? { caption: item.caption } : {}),
+                        ...(item.asFile !== undefined ? { asFile: item.asFile } : {}),
+                        ...(authorizedWorkDir !== undefined ? { authorizedWorkDir } : {}),
+                        signal,
+                    });
+                }
+                catch (error) {
+                    // Unlike the between-items check, `sendFiles` REJECTS on abort (it
+                    // rethrows `getAbortError`) rather than returning — so a batch
+                    // cancelled mid-upload used to let the raw abort escape the whole
+                    // service, hiding how many messages had already landed. Report the
+                    // SAME structured cancellation instead. A genuine failure still
+                    // propagates untouched, and an ambiguous delivery is unaffected:
+                    // `sendFiles` maps that to a RETURNED `deliveryUnknown` result before
+                    // it ever reaches its abort rethrow, so this catch cannot swallow it.
+                    if (!(0, utils_1.checkIsAbortError)(error))
+                        throw error;
+                    return buildCancelledResult(landed);
+                }
+                if (fileResult.ok) {
+                    landed += 1;
+                }
+                else if ('kind' in fileResult && fileResult.kind === 'deliveryUnknown') {
+                    return {
+                        ok: false,
+                        kind: 'deliveryUnknown',
+                        error: `Delivered ${formatMessageCount(landed)} before an attachment's delivery ` +
+                            `outcome became unknown: ${fileResult.error}`,
+                    };
+                }
+                else {
+                    attachmentErrors.push(fileResult.error);
+                }
+                continue;
+            }
+            const chunks = deps.splitMessage(item.text, deps.maxMessageLength, deps.measureRendered);
+            for (const chunk of chunks) {
+                attempted += 1;
+                const messageId = await deps.sendChunk(target, chunk, signal);
+                if (messageId === null)
+                    continue;
+                landed += 1;
+                sentMessageIds.push(messageId);
+            }
+        }
+        const attachmentErrorSuffix = attachmentErrors.length > 0 ? ` Attachment errors: ${attachmentErrors.join('; ')}.` : '';
+        if (attempted > 0 && landed === 0) {
+            return {
+                ok: false,
+                error: 'Failed to deliver any message to the topic (Telegram rejected the sends).' +
+                    attachmentErrorSuffix,
+            };
+        }
+        const summary = (landed === attempted
+            ? `Delivered ${formatMessageCount(landed)} to the topic.`
+            : `Delivered ${landed} of ${attempted} messages to the topic (${attempted - landed} failed to send).`) +
+            attachmentErrorSuffix;
+        return { ok: true, summary, undeliveredCount: attempted - landed, sentMessageIds };
+    };
+}
+//# sourceMappingURL=messageSendService.js.map

package/dist/utils/messageSendService.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"messageSendService.js","sourceRoot":"","sources":["../../src/utils/messageSendService.ts"],"names":[],"mappings":";;;AA6LA,gEA0FC;AAvRD,oCAA6C;AAwE7C;;;;;GAKG;AACU,QAAA,mBAAmB,GAAG,EAAE,CAAC;AA6CtC,kEAAkE;AAClE,SAAS,WAAW,CAAC,KAAyB;IAC5C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,OAAO,KAAK,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACrD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,4BAA4B,CAAC,IAAyB;IAC7D,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE,CAAC;QAC7B,OAAO,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IACpF,CAAC;IACD,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,MAAM,IAAI,GAAG,WAAW,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO;YACL,IAAI,EAAE,MAAM;YACZ,IAAI;YACJ,GAAG,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC9D,CAAC;IACJ,CAAC;IACD,IAAI,IAAI,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;IACtD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;AAC5F,CAAC;AAED,uDAAuD;AACvD,SAAS,kBAAkB,CAAC,KAAa;IACvC,OAAO,GAAG,KAAK,WAAW,KAAK,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC;AACrD,CAAC;AAED;;;;GAIG;AACH,SAAS,oBAAoB,CAAC,MAAc;IAC1C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,8BAA8B,kBAAkB,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,SAAgB,0BAA0B,CACxC,IAAuC;IAEvC,OAAO,KAAK,EAAE,SAAS,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,MAAM,EAAE,EAAE,EAAE;QAClE,MAAM,UAAU,GAA6B,EAAE,CAAC;QAChD,KAAK,MAAM,OAAO,IAAI,QAAQ,EAAE,CAAC;YAC/B,MAAM,IAAI,GAAG,4BAA4B,CAAC,OAAO,CAAC,CAAC;YACnD,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC;YACrE,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxB,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,aAAa,CAAC,SAAS,CAAC,CAAC;QAC/C,IAAI,CAAC,QAAQ,CAAC,EAAE;YAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,QAAQ,CAAC,KAAK,EAAE,CAAC;QAC9D,MAAM,EAAE,MAAM,EAAE,GAAG,QAAQ,CAAC;QAE5B,IAAI,SAAS,GAAG,CAAC,CAAC;QAClB,IAAI,MAAM,GAAG,CAAC,CAAC;QACf,MAAM,cAAc,GAAa,EAAE,CAAC;QACpC,MAAM,gBAAgB,GAAa,EAAE,CAAC;QACtC,KAAK,MAAM,IAAI,IAAI,UAAU,EAAE,CAAC;YAC9B,IAAI,MAAM,EAAE,OAAO;gBAAE,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;YACzD,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM;gBAAE,SAAS;YAEnC,IAAI,IAAI,CAAC,IAAI,KAAK,MAAM,EAAE,CAAC;gBACzB,SAAS,IAAI,CAAC,CAAC;gBACf,IAAI,UAAmC,CAAC;gBACxC,IAAI,CAAC;oBACH,UAAU,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,SAAS,EAAE;wBAC3C,KAAK,EAAE,CAAC,IAAI,CAAC,IAAI,CAAC;wBAClB,GAAG,CAAC,IAAI,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAChE,GAAG,CAAC,IAAI,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBAC7D,GAAG,CAAC,iBAAiB,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,iBAAiB,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;wBACjE,MAAM;qBACP,CAAC,CAAC;gBACL,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,mEAAmE;oBACnE,+DAA+D;oBAC/D,kEAAkE;oBAClE,mEAAmE;oBACnE,gEAAgE;oBAChE,iEAAiE;oBACjE,sEAAsE;oBACtE,sEAAsE;oBACtE,IAAI,CAAC,IAAA,yBAAiB,EAAC,KAAK,CAAC;wBAAE,MAAM,KAAK,CAAC;oBAC3C,OAAO,oBAAoB,CAAC,MAAM,CAAC,CAAC;gBACtC,CAAC;gBACD,IAAI,UAAU,CAAC,EAAE,EAAE,CAAC;oBAClB,MAAM,IAAI,CAAC,CAAC;gBACd,CAAC;qBAAM,IAAI,MAAM,IAAI,UAAU,IAAI,UAAU,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;oBACzE,OAAO;wBACL,EAAE,EAAE,KAAK;wBACT,IAAI,EAAE,iBAAiB;wBACvB,KAAK,EACH,aAAa,kBAAkB,CAAC,MAAM,CAAC,mCAAmC;4BAC1E,2BAA2B,UAAU,CAAC,KAAK,EAAE;qBAChD,CAAC;gBACJ,CAAC;qBAAM,CAAC;oBACN,gBAAgB,CAAC,IAAI,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC;gBAC1C,CAAC;gBACD,SAAS;YACX,CAAC;YAED,MAAM,MAAM,GAAG,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,gBAAgB,EAAE,IAAI,CAAC,eAAe,CAAC,CAAC;YACzF,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;gBAC3B,SAAS,IAAI,CAAC,CAAC;gBACf,MAAM,SAAS,GAAG,MAAM,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,EAAE,MAAM,CAAC,CAAC;gBAC9D,IAAI,SAAS,KAAK,IAAI;oBAAE,SAAS;gBACjC,MAAM,IAAI,CAAC,CAAC;gBACZ,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;YACjC,CAAC;QACH,CAAC;QAED,MAAM,qBAAqB,GACzB,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,uBAAuB,gBAAgB,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;QAE3F,IAAI,SAAS,GAAG,CAAC,IAAI,MAAM,KAAK,CAAC,EAAE,CAAC;YAClC,OAAO;gBACL,EAAE,EAAE,KAAK;gBACT,KAAK,EACH,2EAA2E;oBAC3E,qBAAqB;aACxB,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,GACX,CAAC,MAAM,KAAK,SAAS;YACnB,CAAC,CAAC,aAAa,kBAAkB,CAAC,MAAM,CAAC,gBAAgB;YACzD,CAAC,CAAC,aAAa,MAAM,OAAO,SAAS,2BAA2B,SAAS,GAAG,MAAM,mBAAmB,CAAC;YACxG,qBAAqB,CAAC;QACxB,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,OAAO,EAAE,gBAAgB,EAAE,SAAS,GAAG,MAAM,EAAE,cAAc,EAAE,CAAC;IACrF,CAAC,CAAC;AACJ,CAAC"}

package/dist/utils/minutesOverride.d.ts

@@ -0,0 +1,7 @@
+/**
+ * @description A window set in MINUTES through an environment override for a test
+ * or live-test instance (`REQUEST_BACKSTOP_MINUTES`, `AGENT_IDLE_MINUTES`). A
+ * missing, blank, non-numeric or non-positive value keeps `defaultMs`.
+ */
+export declare function getMinutesOverrideMs(overrideMinutes: string | undefined, defaultMs: number): number;
+//# sourceMappingURL=minutesOverride.d.ts.map

package/dist/utils/minutesOverride.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"minutesOverride.d.ts","sourceRoot":"","sources":["../../src/utils/minutesOverride.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,eAAe,EAAE,MAAM,GAAG,SAAS,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAInG"}

package/dist/utils/minutesOverride.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getMinutesOverrideMs = getMinutesOverrideMs;
+const msPerMinute = 60 * 1000;
+/**
+ * @description A window set in MINUTES through an environment override for a test
+ * or live-test instance (`REQUEST_BACKSTOP_MINUTES`, `AGENT_IDLE_MINUTES`). A
+ * missing, blank, non-numeric or non-positive value keeps `defaultMs`.
+ */
+function getMinutesOverrideMs(overrideMinutes, defaultMs) {
+    if (overrideMinutes === undefined || overrideMinutes.trim() === '')
+        return defaultMs;
+    const minutes = Number(overrideMinutes);
+    return Number.isFinite(minutes) && minutes > 0 ? minutes * msPerMinute : defaultMs;
+}
+//# sourceMappingURL=minutesOverride.js.map

package/dist/utils/minutesOverride.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"minutesOverride.js","sourceRoot":"","sources":["../../src/utils/minutesOverride.ts"],"names":[],"mappings":";;AAOA,oDAIC;AAXD,MAAM,WAAW,GAAG,EAAE,GAAG,IAAI,CAAC;AAE9B;;;;GAIG;AACH,SAAgB,oBAAoB,CAAC,eAAmC,EAAE,SAAiB;IACzF,IAAI,eAAe,KAAK,SAAS,IAAI,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE;QAAE,OAAO,SAAS,CAAC;IACrF,MAAM,OAAO,GAAG,MAAM,CAAC,eAAe,CAAC,CAAC;IACxC,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;AACrF,CAAC"}

package/dist/utils/modelPickerPlan.d.ts

@@ -0,0 +1,119 @@
+/**
+ * @description Pure decision + codec layer behind the two-level `/model`
+ * picker (providers → that provider's models, paginated).
+ *
+ * Why it exists: the old `/model` rendered EVERY model id into one Telegram
+ * message. Once the operator's OpenCode gained the `openrouter` provider (367
+ * models) that message grew to ~13 000 chars and every `/model` died on
+ * Telegram's 4096-char cap ("message is too long") — the topic just went
+ * silent. Buttons carry the list now; the message text stays short.
+ *
+ * Everything here is pure so `bot.ts` stays wiring: grouping, the
+ * visible/hidden split, and the callback-id codec are unit-tested without a
+ * Telegram surface.
+ */
+/**
+ * @description Telegram's hard limit on `callback_data` (bytes, not chars).
+ * Model ids like `openrouter/anthropic/claude-sonnet-4.5` blow past it, which
+ * is why every picker callback carries INDEXES instead of names — the same
+ * trick the `connm_<idx>` / `resume_<idx>` callbacks already use.
+ */
+export declare const telegramCallbackDataMaxBytes = 64;
+/** Back to the provider level (level 2 → level 1). */
+export declare const modelPickerBackCallback = "mdlback";
+/** Inert label buttons (the "2/5" page pill, the hidden-provider name). */
+export declare const modelPickerNoopCallback = "mdlnoop";
+/** Anchored matchers for `bot.action(...)`, kept beside the builders so the
+ *  wire format has a single definition. */
+export declare const providerPageCallbackRe: RegExp;
+export declare const modelPickCallbackRe: RegExp;
+export declare const providerHideCallbackRe: RegExp;
+export declare const providerShowCallbackRe: RegExp;
+/** A provider index paired with a page index (level-2 navigation). */
+export interface ProviderPageRef {
+    providerIndex: number;
+    page: number;
+}
+/** A provider index paired with a model index WITHIN that provider's list. */
+export interface ModelPickRef {
+    providerIndex: number;
+    modelIndex: number;
+}
+export declare function buildProviderPageCallback(providerIndex: number, page: number): string;
+export declare function buildModelPickCallback(providerIndex: number, modelIndex: number): string;
+export declare function buildProviderHideCallback(providerIndex: number): string;
+export declare function buildProviderShowCallback(providerIndex: number): string;
+export declare function parseProviderPageCallback(callbackData: string): ProviderPageRef | null;
+export declare function parseModelPickCallback(callbackData: string): ModelPickRef | null;
+export declare function parseProviderHideCallback(callbackData: string): number | null;
+export declare function parseProviderShowCallback(callbackData: string): number | null;
+/** Whether a callback id fits Telegram's 64-BYTE `callback_data` budget. */
+export declare function checkIsCallbackDataWithinLimit(callbackData: string): boolean;
+/**
+ * @description Group model ids by the provider segment before the first `/`.
+ *
+ * Ids WITHOUT a `/` land under `fallbackProvider` — the Claude backends report
+ * bare aliases (`sonnet`, `opus`, `haiku`), and the old slash-only grouping
+ * dropped them entirely, so `/model` on a Claude topic printed a header and an
+ * EMPTY list. The fallback is the adapter's own label.
+ *
+ * Insertion order is preserved for both providers and their models so the
+ * indexes the callback ids carry stay stable for a given catalog.
+ */
+export declare function groupModelsByProvider(models: readonly string[], fallbackProvider: string): Map<string, string[]>;
+/**
+ * @description Label a model carries inside its provider's page — the id with
+ * the redundant `<provider>/` prefix stripped. A slash-less id (Claude alias
+ * grouped under the adapter label) is shown whole.
+ */
+export declare function getModelShortLabel(modelId: string, provider: string): string;
+/**
+ * @description Whether the picker needs its provider level at all.
+ *
+ * A catalog with a single offered provider and nothing hidden (the Claude
+ * backends: one fallback group of aliases) would make level 1 a one-button
+ * detour, so the picker opens straight on that provider's models. As soon as
+ * something is hidden the level is needed again — the unhide buttons live
+ * there and are otherwise unreachable.
+ */
+export declare function checkHasProviderLevel(visibleProviderCount: number, hiddenProviderCount: number): boolean;
+/**
+ * @description A model catalog split the way the picker consumes it: grouped by
+ * provider, plus the offered/hidden partition.
+ */
+export interface ModelCatalog {
+    /** Provider → its model ids, catalog order. */
+    byProvider: Map<string, string[]>;
+    /** Every provider in catalog order — the index space the callbacks carry. */
+    providers: string[];
+    visibleProviders: string[];
+    hiddenProviders: string[];
+}
+/**
+ * @description Assemble the picker's catalog from a raw model list. Pure — the
+ * bot's `getModelCatalog` only adds the adapter fetch and the persisted
+ * hidden-provider read around it.
+ */
+export declare function buildModelCatalog(models: readonly string[], fallbackProvider: string, hiddenProviders: readonly string[]): ModelCatalog;
+export interface ProviderVisibility {
+    /** Providers offered in the picker, in catalog order. */
+    visible: string[];
+    /** Providers the operator hid, in catalog order. */
+    hidden: string[];
+}
+/**
+ * @description Split the catalog's providers into offered vs hidden.
+ *
+ * Hiding is bot-side and GLOBAL (persisted in `state.json`): it is the only
+ * lever that works for providers OpenCode enables from an environment variable
+ * (`openrouter` ← `OPENROUTER_API_KEY`), which `DELETE /auth/:id` cannot remove.
+ * A hidden provider is omitted from the pick list only — an explicit
+ * `/model <provider/model>` still resolves it, so hiding never breaks a saved
+ * model pref.
+ *
+ * Hidden entries no longer present in the catalog are ignored rather than
+ * reported: a stale name from a disconnected provider must not render a
+ * button that resolves to nothing.
+ */
+export declare function getProviderVisibility(allProviders: readonly string[], hiddenProviders: readonly string[]): ProviderVisibility;
+//# sourceMappingURL=modelPickerPlan.d.ts.map

package/dist/utils/modelPickerPlan.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelPickerPlan.d.ts","sourceRoot":"","sources":["../../src/utils/modelPickerPlan.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH;;;;;GAKG;AACH,eAAO,MAAM,4BAA4B,KAAK,CAAC;AAO/C,sDAAsD;AACtD,eAAO,MAAM,uBAAuB,YAAY,CAAC;AACjD,2EAA2E;AAC3E,eAAO,MAAM,uBAAuB,YAAY,CAAC;AAEjD;2CAC2C;AAC3C,eAAO,MAAM,sBAAsB,QAAuB,CAAC;AAC3D,eAAO,MAAM,mBAAmB,QAAsB,CAAC;AACvD,eAAO,MAAM,sBAAsB,QAAoB,CAAC;AACxD,eAAO,MAAM,sBAAsB,QAAoB,CAAC;AAExD,sEAAsE;AACtE,MAAM,WAAW,eAAe;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,IAAI,EAAE,MAAM,CAAC;CACd;AAED,8EAA8E;AAC9E,MAAM,WAAW,YAAY;IAC3B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAErF;AAED,wBAAgB,sBAAsB,CAAC,aAAa,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,CAExF;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,yBAAyB,CAAC,aAAa,EAAE,MAAM,GAAG,MAAM,CAEvE;AAED,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,eAAe,GAAG,IAAI,CAItF;AAED,wBAAgB,sBAAsB,CAAC,YAAY,EAAE,MAAM,GAAG,YAAY,GAAG,IAAI,CAIhF;AAED,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG7E;AAED,wBAAgB,yBAAyB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAG7E;AAED,4EAA4E;AAC5E,wBAAgB,8BAA8B,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAE5E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,gBAAgB,EAAE,MAAM,GACvB,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAUvB;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAG5E;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,oBAAoB,EAAE,MAAM,EAC5B,mBAAmB,EAAE,MAAM,GAC1B,OAAO,CAET;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,+CAA+C;IAC/C,UAAU,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;IAClC,6EAA6E;IAC7E,SAAS,EAAE,MAAM,EAAE,CAAC;IACpB,gBAAgB,EAAE,MAAM,EAAE,CAAC;IAC3B,eAAe,EAAE,MAAM,EAAE,CAAC;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAC/B,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,gBAAgB,EAAE,MAAM,EACxB,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,YAAY,CAKd;AAED,MAAM,WAAW,kBAAkB;IACjC,yDAAyD;IACzD,OAAO,EAAE,MAAM,EAAE,CAAC;IAClB,oDAAoD;IACpD,MAAM,EAAE,MAAM,EAAE,CAAC;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,qBAAqB,CACnC,YAAY,EAAE,SAAS,MAAM,EAAE,EAC/B,eAAe,EAAE,SAAS,MAAM,EAAE,GACjC,kBAAkB,CASpB"}

package/dist/utils/modelPickerPlan.js

@@ -0,0 +1,171 @@
+"use strict";
+/**
+ * @description Pure decision + codec layer behind the two-level `/model`
+ * picker (providers → that provider's models, paginated).
+ *
+ * Why it exists: the old `/model` rendered EVERY model id into one Telegram
+ * message. Once the operator's OpenCode gained the `openrouter` provider (367
+ * models) that message grew to ~13 000 chars and every `/model` died on
+ * Telegram's 4096-char cap ("message is too long") — the topic just went
+ * silent. Buttons carry the list now; the message text stays short.
+ *
+ * Everything here is pure so `bot.ts` stays wiring: grouping, the
+ * visible/hidden split, and the callback-id codec are unit-tested without a
+ * Telegram surface.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.providerShowCallbackRe = exports.providerHideCallbackRe = exports.modelPickCallbackRe = exports.providerPageCallbackRe = exports.modelPickerNoopCallback = exports.modelPickerBackCallback = exports.telegramCallbackDataMaxBytes = void 0;
+exports.buildProviderPageCallback = buildProviderPageCallback;
+exports.buildModelPickCallback = buildModelPickCallback;
+exports.buildProviderHideCallback = buildProviderHideCallback;
+exports.buildProviderShowCallback = buildProviderShowCallback;
+exports.parseProviderPageCallback = parseProviderPageCallback;
+exports.parseModelPickCallback = parseModelPickCallback;
+exports.parseProviderHideCallback = parseProviderHideCallback;
+exports.parseProviderShowCallback = parseProviderShowCallback;
+exports.checkIsCallbackDataWithinLimit = checkIsCallbackDataWithinLimit;
+exports.groupModelsByProvider = groupModelsByProvider;
+exports.getModelShortLabel = getModelShortLabel;
+exports.checkHasProviderLevel = checkHasProviderLevel;
+exports.buildModelCatalog = buildModelCatalog;
+exports.getProviderVisibility = getProviderVisibility;
+/**
+ * @description Telegram's hard limit on `callback_data` (bytes, not chars).
+ * Model ids like `openrouter/anthropic/claude-sonnet-4.5` blow past it, which
+ * is why every picker callback carries INDEXES instead of names — the same
+ * trick the `connm_<idx>` / `resume_<idx>` callbacks already use.
+ */
+exports.telegramCallbackDataMaxBytes = 64;
+const providerPageCallbackPrefix = 'mdlp_';
+const modelPickCallbackPrefix = 'mdl_';
+const providerHideCallbackPrefix = 'mdlhide_';
+const providerShowCallbackPrefix = 'mdlshow_';
+/** Back to the provider level (level 2 → level 1). */
+exports.modelPickerBackCallback = 'mdlback';
+/** Inert label buttons (the "2/5" page pill, the hidden-provider name). */
+exports.modelPickerNoopCallback = 'mdlnoop';
+/** Anchored matchers for `bot.action(...)`, kept beside the builders so the
+ *  wire format has a single definition. */
+exports.providerPageCallbackRe = /^mdlp_(\d+)_(\d+)$/;
+exports.modelPickCallbackRe = /^mdl_(\d+)_(\d+)$/;
+exports.providerHideCallbackRe = /^mdlhide_(\d+)$/;
+exports.providerShowCallbackRe = /^mdlshow_(\d+)$/;
+function buildProviderPageCallback(providerIndex, page) {
+    return `${providerPageCallbackPrefix}${providerIndex}_${page}`;
+}
+function buildModelPickCallback(providerIndex, modelIndex) {
+    return `${modelPickCallbackPrefix}${providerIndex}_${modelIndex}`;
+}
+function buildProviderHideCallback(providerIndex) {
+    return `${providerHideCallbackPrefix}${providerIndex}`;
+}
+function buildProviderShowCallback(providerIndex) {
+    return `${providerShowCallbackPrefix}${providerIndex}`;
+}
+function parseProviderPageCallback(callbackData) {
+    const match = exports.providerPageCallbackRe.exec(callbackData);
+    if (!match)
+        return null;
+    return { providerIndex: Number(match[1]), page: Number(match[2]) };
+}
+function parseModelPickCallback(callbackData) {
+    const match = exports.modelPickCallbackRe.exec(callbackData);
+    if (!match)
+        return null;
+    return { providerIndex: Number(match[1]), modelIndex: Number(match[2]) };
+}
+function parseProviderHideCallback(callbackData) {
+    const match = exports.providerHideCallbackRe.exec(callbackData);
+    return match ? Number(match[1]) : null;
+}
+function parseProviderShowCallback(callbackData) {
+    const match = exports.providerShowCallbackRe.exec(callbackData);
+    return match ? Number(match[1]) : null;
+}
+/** Whether a callback id fits Telegram's 64-BYTE `callback_data` budget. */
+function checkIsCallbackDataWithinLimit(callbackData) {
+    return Buffer.byteLength(callbackData, 'utf8') <= exports.telegramCallbackDataMaxBytes;
+}
+/**
+ * @description Group model ids by the provider segment before the first `/`.
+ *
+ * Ids WITHOUT a `/` land under `fallbackProvider` — the Claude backends report
+ * bare aliases (`sonnet`, `opus`, `haiku`), and the old slash-only grouping
+ * dropped them entirely, so `/model` on a Claude topic printed a header and an
+ * EMPTY list. The fallback is the adapter's own label.
+ *
+ * Insertion order is preserved for both providers and their models so the
+ * indexes the callback ids carry stay stable for a given catalog.
+ */
+function groupModelsByProvider(models, fallbackProvider) {
+    const byProvider = new Map();
+    for (const model of models) {
+        const slashIndex = model.indexOf('/');
+        const provider = slashIndex > 0 ? model.slice(0, slashIndex) : fallbackProvider;
+        const providerModels = byProvider.get(provider);
+        if (providerModels)
+            providerModels.push(model);
+        else
+            byProvider.set(provider, [model]);
+    }
+    return byProvider;
+}
+/**
+ * @description Label a model carries inside its provider's page — the id with
+ * the redundant `<provider>/` prefix stripped. A slash-less id (Claude alias
+ * grouped under the adapter label) is shown whole.
+ */
+function getModelShortLabel(modelId, provider) {
+    const prefix = `${provider}/`;
+    return modelId.startsWith(prefix) ? modelId.slice(prefix.length) : modelId;
+}
+/**
+ * @description Whether the picker needs its provider level at all.
+ *
+ * A catalog with a single offered provider and nothing hidden (the Claude
+ * backends: one fallback group of aliases) would make level 1 a one-button
+ * detour, so the picker opens straight on that provider's models. As soon as
+ * something is hidden the level is needed again — the unhide buttons live
+ * there and are otherwise unreachable.
+ */
+function checkHasProviderLevel(visibleProviderCount, hiddenProviderCount) {
+    return visibleProviderCount > 1 || hiddenProviderCount > 0;
+}
+/**
+ * @description Assemble the picker's catalog from a raw model list. Pure — the
+ * bot's `getModelCatalog` only adds the adapter fetch and the persisted
+ * hidden-provider read around it.
+ */
+function buildModelCatalog(models, fallbackProvider, hiddenProviders) {
+    const byProvider = groupModelsByProvider(models, fallbackProvider);
+    const providers = [...byProvider.keys()];
+    const { visible, hidden } = getProviderVisibility(providers, hiddenProviders);
+    return { byProvider, providers, visibleProviders: visible, hiddenProviders: hidden };
+}
+/**
+ * @description Split the catalog's providers into offered vs hidden.
+ *
+ * Hiding is bot-side and GLOBAL (persisted in `state.json`): it is the only
+ * lever that works for providers OpenCode enables from an environment variable
+ * (`openrouter` ← `OPENROUTER_API_KEY`), which `DELETE /auth/:id` cannot remove.
+ * A hidden provider is omitted from the pick list only — an explicit
+ * `/model <provider/model>` still resolves it, so hiding never breaks a saved
+ * model pref.
+ *
+ * Hidden entries no longer present in the catalog are ignored rather than
+ * reported: a stale name from a disconnected provider must not render a
+ * button that resolves to nothing.
+ */
+function getProviderVisibility(allProviders, hiddenProviders) {
+    const hiddenSet = new Set(hiddenProviders);
+    const visible = [];
+    const hidden = [];
+    for (const provider of allProviders) {
+        if (hiddenSet.has(provider))
+            hidden.push(provider);
+        else
+            visible.push(provider);
+    }
+    return { visible, hidden };
+}
+//# sourceMappingURL=modelPickerPlan.js.map

package/dist/utils/modelPickerPlan.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelPickerPlan.js","sourceRoot":"","sources":["../../src/utils/modelPickerPlan.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;GAaG;;;AAuCH,8DAEC;AAED,wDAEC;AAED,8DAEC;AAED,8DAEC;AAED,8DAIC;AAED,wDAIC;AAED,8DAGC;AAED,8DAGC;AAGD,wEAEC;AAaD,sDAaC;AAOD,gDAGC;AAWD,sDAKC;AAoBD,8CASC;AAuBD,sDAYC;AAlMD;;;;;GAKG;AACU,QAAA,4BAA4B,GAAG,EAAE,CAAC;AAE/C,MAAM,0BAA0B,GAAG,OAAO,CAAC;AAC3C,MAAM,uBAAuB,GAAG,MAAM,CAAC;AACvC,MAAM,0BAA0B,GAAG,UAAU,CAAC;AAC9C,MAAM,0BAA0B,GAAG,UAAU,CAAC;AAE9C,sDAAsD;AACzC,QAAA,uBAAuB,GAAG,SAAS,CAAC;AACjD,2EAA2E;AAC9D,QAAA,uBAAuB,GAAG,SAAS,CAAC;AAEjD;2CAC2C;AAC9B,QAAA,sBAAsB,GAAG,oBAAoB,CAAC;AAC9C,QAAA,mBAAmB,GAAG,mBAAmB,CAAC;AAC1C,QAAA,sBAAsB,GAAG,iBAAiB,CAAC;AAC3C,QAAA,sBAAsB,GAAG,iBAAiB,CAAC;AAcxD,SAAgB,yBAAyB,CAAC,aAAqB,EAAE,IAAY;IAC3E,OAAO,GAAG,0BAA0B,GAAG,aAAa,IAAI,IAAI,EAAE,CAAC;AACjE,CAAC;AAED,SAAgB,sBAAsB,CAAC,aAAqB,EAAE,UAAkB;IAC9E,OAAO,GAAG,uBAAuB,GAAG,aAAa,IAAI,UAAU,EAAE,CAAC;AACpE,CAAC;AAED,SAAgB,yBAAyB,CAAC,aAAqB;IAC7D,OAAO,GAAG,0BAA0B,GAAG,aAAa,EAAE,CAAC;AACzD,CAAC;AAED,SAAgB,yBAAyB,CAAC,aAAqB;IAC7D,OAAO,GAAG,0BAA0B,GAAG,aAAa,EAAE,CAAC;AACzD,CAAC;AAED,SAAgB,yBAAyB,CAAC,YAAoB;IAC5D,MAAM,KAAK,GAAG,8BAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,SAAgB,sBAAsB,CAAC,YAAoB;IACzD,MAAM,KAAK,GAAG,2BAAmB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IACxB,OAAO,EAAE,aAAa,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAgB,yBAAyB,CAAC,YAAoB;IAC5D,MAAM,KAAK,GAAG,8BAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,SAAgB,yBAAyB,CAAC,YAAoB;IAC5D,MAAM,KAAK,GAAG,8BAAsB,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxD,OAAO,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzC,CAAC;AAED,4EAA4E;AAC5E,SAAgB,8BAA8B,CAAC,YAAoB;IACjE,OAAO,MAAM,CAAC,UAAU,CAAC,YAAY,EAAE,MAAM,CAAC,IAAI,oCAA4B,CAAC;AACjF,CAAC;AAED;;;;;;;;;;GAUG;AACH,SAAgB,qBAAqB,CACnC,MAAyB,EACzB,gBAAwB;IAExB,MAAM,UAAU,GAAG,IAAI,GAAG,EAAoB,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC3B,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,UAAU,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC;QAChF,MAAM,cAAc,GAAG,UAAU,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAChD,IAAI,cAAc;YAAE,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;;YAC1C,UAAU,CAAC,GAAG,CAAC,QAAQ,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC;IACzC,CAAC;IACD,OAAO,UAAU,CAAC;AACpB,CAAC;AAED;;;;GAIG;AACH,SAAgB,kBAAkB,CAAC,OAAe,EAAE,QAAgB;IAClE,MAAM,MAAM,GAAG,GAAG,QAAQ,GAAG,CAAC;IAC9B,OAAO,OAAO,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;AAC7E,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,qBAAqB,CACnC,oBAA4B,EAC5B,mBAA2B;IAE3B,OAAO,oBAAoB,GAAG,CAAC,IAAI,mBAAmB,GAAG,CAAC,CAAC;AAC7D,CAAC;AAeD;;;;GAIG;AACH,SAAgB,iBAAiB,CAC/B,MAAyB,EACzB,gBAAwB,EACxB,eAAkC;IAElC,MAAM,UAAU,GAAG,qBAAqB,CAAC,MAAM,EAAE,gBAAgB,CAAC,CAAC;IACnE,MAAM,SAAS,GAAG,CAAC,GAAG,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC;IACzC,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,GAAG,qBAAqB,CAAC,SAAS,EAAE,eAAe,CAAC,CAAC;IAC9E,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,gBAAgB,EAAE,OAAO,EAAE,eAAe,EAAE,MAAM,EAAE,CAAC;AACvF,CAAC;AASD;;;;;;;;;;;;;GAaG;AACH,SAAgB,qBAAqB,CACnC,YAA+B,EAC/B,eAAkC;IAElC,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,eAAe,CAAC,CAAC;IAC3C,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,KAAK,MAAM,QAAQ,IAAI,YAAY,EAAE,CAAC;QACpC,IAAI,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC;YAAE,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;;YAC9C,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC9B,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,CAAC;AAC7B,CAAC"}

package/dist/utils/modelSetReplyDecision.d.ts

@@ -0,0 +1,67 @@
+/**
+ * @description Pure reply-decision for the four `/model`-set paths (the
+ * `/model <num>` and `/model <name>` commands, the text-handler numeric pick,
+ * and the `model_<id>` button callback — all through `applyModelSelection` in
+ * `connectors/telegram/commands/modelProviders.ts`). All four asked the adapter to
+ * set the model and now must build the SAME user-facing reply — so the branchy
+ * decision lives here, unit-testable without the Telegraf machinery (same
+ * pattern as `statusFlushDecision.ts`).
+ *
+ * The no-session decision itself now lives in the adapters (OpenCode persists
+ * the pref and returns success; Claude refuses with a notice), so this helper
+ * is purely about turning the adapter's outcome into a message — it does NOT
+ * gate on session state itself.
+ *
+ * `isActive` only distinguishes the two SUCCESS copies: a live switch
+ * (`model.set_success`) vs a pref saved for the next agent start
+ * (`model.saved_for_next_start`). BOTH copies come from i18n, so a `translate`
+ * callback is injected (callers pass `t`; tests pass a stub) to keep this module
+ * free of the i18n import and trivially testable. The live copy used to be a
+ * hardcoded English template literal — once the effort hint below was appended
+ * to it, a non-English chat would have read an English headline above a
+ * translated hint, so it moved into the catalog too.
+ *
+ * Both success copies carry the SHARED `effort.current_hint` block (the same key
+ * the post-start `agent.ready` notice renders), so the level in force and the
+ * "/effort to change it" pointer can never drift between the two messages. The
+ * caller must resolve `effort` AFTER `setModel` returned: switching to a model
+ * that does not offer the current level clears it (see
+ * `effort.cleared_on_model_switch`), so a pre-switch read would name a level
+ * that no longer applies.
+ *
+ * @name ModelSetReplyDecision
+ * @description
+ * - `unsupported` — the adapter has no `setModel`: nothing was changed.
+ * - `error`       — `setModel` returned a non-null error string.
+ * - success (`isOk: true`) — live switch or deferred-to-next-start save.
+ */
+export interface ModelSetReplyDecisionInput {
+    /** Does the thread's adapter implement `setModel`? */
+    hasSetModel: boolean;
+    /** Error string returned by `setModel`, or `null` on success. */
+    setModelError: string | null;
+    /** Is the thread's agent session live right now? */
+    isActive: boolean;
+    /** Human-facing agent label (e.g. "Claude Code"), for the unsupported copy. */
+    adapterLabel: string;
+    /** Resolved model label to show on success (current model or the picked id). */
+    displayLabel: string;
+    /**
+     * Reasoning effort in force AFTER the switch, or `null` when the backend has
+     * no effort concept (Claude tmux/terminal) — then no effort block is appended.
+     */
+    effort: string | null;
+}
+export interface ModelSetReplyDecision {
+    isOk: boolean;
+    message: string;
+}
+/**
+ * @description Build the reply for a `/model`-set attempt.
+ *
+ * @param translate i18n lookup (`t`) — used for both success copies and the
+ * shared effort block. The `unsupported` / `error` branches carry no effort
+ * hint: nothing was switched, so naming the level would only add noise.
+ */
+export declare function getModelSetReplyDecision(input: ModelSetReplyDecisionInput, translate: (code: string, vars?: Record<string, string | number>) => string): ModelSetReplyDecision;
+//# sourceMappingURL=modelSetReplyDecision.d.ts.map

package/dist/utils/modelSetReplyDecision.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelSetReplyDecision.d.ts","sourceRoot":"","sources":["../../src/utils/modelSetReplyDecision.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,MAAM,WAAW,0BAA0B;IACzC,sDAAsD;IACtD,WAAW,EAAE,OAAO,CAAC;IACrB,iEAAiE;IACjE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,EAAE,OAAO,CAAC;IAClB,+EAA+E;IAC/E,YAAY,EAAE,MAAM,CAAC;IACrB,gFAAgF;IAChF,YAAY,EAAE,MAAM,CAAC;IACrB;;;OAGG;IACH,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;CACvB;AAED,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,OAAO,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;CACjB;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,KAAK,EAAE,0BAA0B,EACjC,SAAS,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,MAAM,GAC1E,qBAAqB,CAevB"}

package/dist/utils/modelSetReplyDecision.js

@@ -0,0 +1,27 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getModelSetReplyDecision = getModelSetReplyDecision;
+/**
+ * @description Build the reply for a `/model`-set attempt.
+ *
+ * @param translate i18n lookup (`t`) — used for both success copies and the
+ * shared effort block. The `unsupported` / `error` branches carry no effort
+ * hint: nothing was switched, so naming the level would only add noise.
+ */
+function getModelSetReplyDecision(input, translate) {
+    if (!input.hasSetModel) {
+        return { isOk: false, message: `Model switching not supported for ${input.adapterLabel}` };
+    }
+    if (input.setModelError) {
+        return { isOk: false, message: `Error: ${input.setModelError}` };
+    }
+    const effortSuffix = input.effort === null
+        ? ''
+        : `\n${translate('effort.current_hint', { effort: input.effort })}`;
+    const successKey = input.isActive ? 'model.set_success' : 'model.saved_for_next_start';
+    return {
+        isOk: true,
+        message: translate(successKey, { model: input.displayLabel }) + effortSuffix,
+    };
+}
+//# sourceMappingURL=modelSetReplyDecision.js.map

package/dist/utils/modelSetReplyDecision.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modelSetReplyDecision.js","sourceRoot":"","sources":["../../src/utils/modelSetReplyDecision.ts"],"names":[],"mappings":";;AAmEA,4DAkBC;AAzBD;;;;;;GAMG;AACH,SAAgB,wBAAwB,CACtC,KAAiC,EACjC,SAA2E;IAE3E,IAAI,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,qCAAqC,KAAK,CAAC,YAAY,EAAE,EAAE,CAAC;IAC7F,CAAC;IACD,IAAI,KAAK,CAAC,aAAa,EAAE,CAAC;QACxB,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,OAAO,EAAE,UAAU,KAAK,CAAC,aAAa,EAAE,EAAE,CAAC;IACnE,CAAC;IACD,MAAM,YAAY,GAAG,KAAK,CAAC,MAAM,KAAK,IAAI;QACxC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,SAAS,CAAC,qBAAqB,EAAE,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,CAAC;IACtE,MAAM,UAAU,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,mBAAmB,CAAC,CAAC,CAAC,4BAA4B,CAAC;IACvF,OAAO;QACL,IAAI,EAAE,IAAI;QACV,OAAO,EAAE,SAAS,CAAC,UAAU,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,GAAG,YAAY;KAC7E,CAAC;AACJ,CAAC"}