charness 0.0.0-stage → 3.1.0

package/dist/connectors/telegram/commands/modelProviders.js

@@ -0,0 +1,966 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getProviderAuthAdapter = getProviderAuthAdapter;
+exports.buildModelProviderRender = buildModelProviderRender;
+exports.buildRecentModelsRender = buildRecentModelsRender;
+exports.buildModelPageRender = buildModelPageRender;
+exports.createModelProviders = createModelProviders;
+/**
+ * `/model`, `/effort`, `/connect` and `/disconnect` — the provider → models picker, the effort picker and the
+ * provider credential flows — with their buttons. See README.md in this folder.
+ */
+const telegraf_1 = require("telegraf");
+const createAdapter_1 = require("../../../adapters/createAdapter");
+const adapterNames_1 = require("../../../adapters/adapterNames");
+const sessionKey_1 = require("../../../sessionKey");
+const sessionKeyCodec_1 = require("../sessionKeyCodec");
+const openCodeAdapter_1 = require("../../../adapters/openCodeAdapter");
+const rateLimiter_1 = require("../../../rateLimiter");
+const i18n_1 = require("../../../i18n");
+const paginateList_1 = require("../../../utils/paginateList");
+const modelPickerPlan_1 = require("../../../utils/modelPickerPlan");
+const modelRecentPlan_1 = require("../../../utils/modelRecentPlan");
+const providerDisconnectPlan_1 = require("../../../utils/providerDisconnectPlan");
+const sendErrorClassifier_1 = require("../../../sendErrorClassifier");
+const modelSetReplyDecision_1 = require("../../../utils/modelSetReplyDecision");
+const effortLevels_1 = require("../../../effortLevels");
+const openCodeAuthLogin_1 = require("../../../utils/openCodeAuthLogin");
+const callbackMessage_1 = require("./callbackMessage");
+const defaultConnectProviderId = 'openai';
+function checkLooksLikeProviderApiKey(value) {
+    return value.startsWith('sk-');
+}
+function getConnectCommandArgs(parsed) {
+    const args = parsed.args;
+    if (args.length === 0)
+        return { providerId: defaultConnectProviderId, apiKey: null };
+    if (args.length === 1) {
+        const onlyArg = args[0].trim();
+        if (checkLooksLikeProviderApiKey(onlyArg)) {
+            return { providerId: defaultConnectProviderId, apiKey: onlyArg };
+        }
+        return { providerId: onlyArg.toLowerCase(), apiKey: null };
+    }
+    return {
+        providerId: args[0].trim().toLowerCase(),
+        apiKey: args.slice(1).join(' ').trim(),
+    };
+}
+/**
+ * @description The adapter that owns provider credentials.
+ *
+ * Provider auth is an OpenCode concept, so `/connect` and `/disconnect` BOTH
+ * target the OpenCode adapter directly instead of the thread's current
+ * backend — otherwise a topic that never started OpenCode could connect a
+ * provider (which `/connect` has always allowed) but not disconnect it, and
+ * the two are advertised side by side in the bound-thread help.
+ */
+function getProviderAuthAdapter() {
+    return (0, createAdapter_1.getAdapter)('opencode');
+}
+// ═══════════════════════════════════════════════════════════════════════════════
+//  /model — two-level provider → models picker
+// ═══════════════════════════════════════════════════════════════════════════════
+/**
+ * @description Models per page in the `/model` model level. Model names are
+ * long, so each gets a full-width row; 10 rows keep the keyboard scroll-free
+ * and the numbered text list ~10 short lines — far from Telegram's 4096-char
+ * message cap, which the old render-everything list blew past (12 990 chars on
+ * a 367-model `openrouter` catalog → every `/model` died with "message is too
+ * long" and the topic went silent).
+ */
+const MODEL_PAGE_SIZE = 10;
+/** Model label the thread currently runs, or the localized "default" stand-in. */
+function getCurrentModelLabel(adapter, key) {
+    return adapter.getCurrentModel?.(key) || (0, i18n_1.t)('model.current_default');
+}
+/**
+ * @description Provider level: one row per provider, each with a 🙈 button that
+ * hides it from the picker. Hidden providers follow in their own section with a
+ * 👁 button to bring them back — the only way back, so they must always render.
+ *
+ * The FIRST row is the "Recently used" shortcut — the flat cross-provider list
+ * of models picked before — present only when that list (already filtered
+ * against the catalog) has something to offer: an empty level would be a dead
+ * end, so the button is simply absent.
+ */
+function buildModelProviderKeyboard(catalog, recentModels) {
+    const hiddenProviderSet = new Set(catalog.hiddenProviders);
+    const visibleRows = [];
+    const hiddenRows = [];
+    if (recentModels.length > 0) {
+        visibleRows.push([
+            telegraf_1.Markup.button.callback((0, i18n_1.t)('model.recent_button', { count: recentModels.length }), modelRecentPlan_1.recentModelsOpenCallback),
+        ]);
+    }
+    catalog.providers.forEach((provider, providerIndex) => {
+        const count = catalog.byProvider.get(provider)?.length ?? 0;
+        if (hiddenProviderSet.has(provider)) {
+            hiddenRows.push([
+                telegraf_1.Markup.button.callback((0, i18n_1.t)('model.hidden_provider_button', { provider, count }), modelPickerPlan_1.modelPickerNoopCallback),
+                telegraf_1.Markup.button.callback((0, i18n_1.t)('model.show_button'), (0, modelPickerPlan_1.buildProviderShowCallback)(providerIndex)),
+            ]);
+            return;
+        }
+        visibleRows.push([
+            telegraf_1.Markup.button.callback((0, i18n_1.t)('model.provider_button', { provider, count }), (0, modelPickerPlan_1.buildProviderPageCallback)(providerIndex, 0)),
+            telegraf_1.Markup.button.callback((0, i18n_1.t)('model.hide_button'), (0, modelPickerPlan_1.buildProviderHideCallback)(providerIndex)),
+        ]);
+    });
+    return telegraf_1.Markup.inlineKeyboard([...visibleRows, ...hiddenRows]);
+}
+function buildModelProviderText(catalog, current) {
+    // An EMPTY catalog is not "everything is hidden": there is no 👁 row to tap,
+    // so that copy would be a dead end. Reachable on the in-place re-render path
+    // (hide/show/«back») when the backend's model lookup comes back empty — e.g.
+    // a `/disconnect` dropped the last provider, or the CLI lookup failed right
+    // after `resetOpenCodeProviderCaches()` wiped the cache.
+    if (catalog.providers.length === 0)
+        return (0, i18n_1.t)('model.none_available', { current });
+    if (catalog.visibleProviders.length === 0)
+        return (0, i18n_1.t)('model.all_hidden', { current });
+    const header = (0, i18n_1.t)('model.pick_provider', { current });
+    return catalog.hiddenProviders.length > 0 ? `${header}\n\n${(0, i18n_1.t)('model.hidden_header')}` : header;
+}
+/**
+ * @description Provider level (level 1) as a ready-to-send render. Exported so
+ * the "no render path can outgrow Telegram's message cap" guarantee — the whole
+ * point of the two-level picker — is assertable on THIS level too, not just on
+ * the paginated model level.
+ *
+ * `recentModels` is the recently-used list ALREADY filtered against `catalog`
+ * (`getRecentModelsInCatalog`); the caller passes nothing for a backend that
+ * has no providers to hop between (the Claude backends).
+ */
+function buildModelProviderRender(catalog, current, recentModels = []) {
+    return {
+        text: buildModelProviderText(catalog, current),
+        keyboard: buildModelProviderKeyboard(catalog, recentModels),
+        pageModels: [],
+        isNumberedPickArmed: false,
+    };
+}
+/**
+ * @description The "Recently used" level: one flat list of full
+ * `provider/model` ids (the provider is the point here, so it is NOT
+ * stripped), most recent first, ✓ on the current one, and the way back to the
+ * providers. Buttons only — no numbered list, so it never arms the bare-digit
+ * pick.
+ *
+ * Each button carries its position AND the entry's identity hash
+ * (`mdlr_<i>_<hash>`): the list is reordered by every pick, so an index alone
+ * would let a keyboard left in the history apply a different model than the
+ * one printed on it.
+ *
+ * Returns `null` for an empty list — the row that opens this level is absent
+ * then, so a tap can only come from a stale keyboard.
+ */
+function buildRecentModelsRender(recentModels, current) {
+    if (recentModels.length === 0)
+        return null;
+    const rows = recentModels.map((modelId, index) => [
+        telegraf_1.Markup.button.callback(modelId === current ? `${modelId} ✓` : modelId, (0, modelRecentPlan_1.buildRecentModelPickCallback)(index, modelId)),
+    ]);
+    rows.push([telegraf_1.Markup.button.callback((0, i18n_1.t)('model.back_button'), modelPickerPlan_1.modelPickerBackCallback)]);
+    const header = (0, i18n_1.t)('model.recent_header', { count: recentModels.length, current });
+    return {
+        text: `${header}\n\n${(0, i18n_1.t)('model.page_hint_buttons_only')}`,
+        keyboard: telegraf_1.Markup.inlineKeyboard(rows),
+        pageModels: [],
+        isNumberedPickArmed: false,
+    };
+}
+/**
+ * @description Model level: one page of a single provider's models.
+ *
+ * Returns `null` when the provider index no longer resolves (a stale keyboard
+ * after the catalog changed) or points at a HIDDEN provider — hiding must make
+ * a provider unreachable here, not just invisible one level up.
+ */
+function buildModelPageRender(catalog, providerIndex, page, current, options) {
+    const provider = catalog.providers[providerIndex];
+    if (provider === undefined || catalog.hiddenProviders.includes(provider))
+        return null;
+    const providerModels = catalog.byProvider.get(provider) ?? [];
+    const { slice, currentPage, totalPages } = (0, paginateList_1.paginateList)(providerModels, page, MODEL_PAGE_SIZE);
+    const firstIndexOnPage = currentPage * MODEL_PAGE_SIZE;
+    const rows = slice.map((modelId, offset) => {
+        const shortLabel = (0, modelPickerPlan_1.getModelShortLabel)(modelId, provider);
+        return [
+            telegraf_1.Markup.button.callback(modelId === current ? `${shortLabel} ✓` : shortLabel, (0, modelPickerPlan_1.buildModelPickCallback)(providerIndex, firstIndexOnPage + offset)),
+        ];
+    });
+    if (totalPages > 1) {
+        const nav = [];
+        if (currentPage > 0) {
+            nav.push(telegraf_1.Markup.button.callback((0, i18n_1.t)('model.prev_button'), (0, modelPickerPlan_1.buildProviderPageCallback)(providerIndex, currentPage - 1)));
+        }
+        nav.push(telegraf_1.Markup.button.callback((0, i18n_1.t)('model.page_button', { page: currentPage + 1, totalPages }), modelPickerPlan_1.modelPickerNoopCallback));
+        if (currentPage < totalPages - 1) {
+            nav.push(telegraf_1.Markup.button.callback((0, i18n_1.t)('model.next_button'), (0, modelPickerPlan_1.buildProviderPageCallback)(providerIndex, currentPage + 1)));
+        }
+        rows.push(nav);
+    }
+    // No back row when the provider level was skipped — it would lead nowhere.
+    if ((0, modelPickerPlan_1.checkHasProviderLevel)(catalog.visibleProviders.length, catalog.hiddenProviders.length)) {
+        rows.push([telegraf_1.Markup.button.callback((0, i18n_1.t)('model.back_button'), modelPickerPlan_1.modelPickerBackCallback)]);
+    }
+    const header = (0, i18n_1.t)('model.page_header', {
+        provider,
+        count: providerModels.length,
+        page: currentPage + 1,
+        totalPages,
+        current,
+    });
+    const numberedList = options.isWithNumberedList
+        ? slice.map((modelId, offset) => `${offset + 1}. ${(0, modelPickerPlan_1.getModelShortLabel)(modelId, provider)}`).join('\n')
+        : '';
+    const hint = options.isWithNumberedList ? (0, i18n_1.t)('model.page_hint') : (0, i18n_1.t)('model.page_hint_buttons_only');
+    const text = [header, numberedList, hint].filter((part) => part.length > 0).join('\n\n');
+    return {
+        text,
+        keyboard: telegraf_1.Markup.inlineKeyboard(rows),
+        pageModels: slice,
+        isNumberedPickArmed: options.isWithNumberedList,
+    };
+}
+/**
+ * @description Swap a picker message to another level/page in place, keeping
+ * the thread clean. A no-op edit (same button tapped twice) comes back as
+ * Telegram's "message is not modified" 400, which is swallowed.
+ */
+async function editModelPickerMessage(ctx, render) {
+    try {
+        await ctx.editMessageText(render.text, render.keyboard);
+    }
+    catch (e) {
+        const desc = (0, sendErrorClassifier_1.checkIsApiError)(e) ? (0, sendErrorClassifier_1.getErrorDescription)(e) : '';
+        if (!/message is not modified/i.test(desc)) {
+            console.warn('[model picker] edit failed:', desc || e);
+        }
+    }
+}
+/**
+ * @description Build the `/effort` level picker keyboard.
+ *
+ * One callback button per available reasoning-effort level (3 per row);
+ * the level matching `current` carries a `✓` marker. Shared by the
+ * `/effort` command (initial render) and the `effort_<level>` callback
+ * (re-render after a press) so the marker can never drift between the two.
+ */
+function buildEffortKeyboard(levels, current) {
+    const buttons = levels.map((l) => telegraf_1.Markup.button.callback(l === current ? `${l} ✓` : l, `effort_${l}`));
+    return telegraf_1.Markup.inlineKeyboard(buttons, { columns: 3 });
+}
+/**
+ * @description Build the model, effort and provider-credential flows over their ports. It returns what the bot's
+ * text handler reaches into (a pasted provider key, a numbered model pick) and the `register…()` calls, which the
+ * bot makes at the positions its neighbouring commands and buttons are registered.
+ */
+function createModelProviders(ports) {
+    const { awaitingModelSelection, awaitingSessionSelection, awaitingFolderName, threadModelLists, pendingProviderConnects, connectMethodLists, disconnectProviderLists, startOpenCodeOAuthLogin, bot, command, getState, replyToThread, deleteThreadMessage, authoriseContext, updatePinnedStatus, wakeSleepingSession } = ports;
+    /**
+     * @description Single choke point for the four `/model`-set paths (the
+     * `/model <num>` and `/model <name>` commands, the text-handler numeric pick,
+     * and the `model_<id>` button callback). Drives the thread's adapter and turns
+     * the outcome into a ready reply via the pure {@link getModelSetReplyDecision}.
+     *
+     * No session gate here: each adapter decides what "no session" means
+     * (OpenCode persists the pick for the next start and succeeds; Claude refuses
+     * with a notice). On success the pinned banner is refreshed best-effort.
+     */
+    async function applyModelSelection(adapter, key, modelId) {
+        // A sleeping conversation is woken first (L-D4), so the pick applies to its live session
+        // instead of the "start the agent first" refusal of an idle backend.
+        const wakeNotice = await wakeSleepingSession(key);
+        if (wakeNotice)
+            await replyToThread(key, wakeNotice);
+        const setModelError = adapter.setModel ? await adapter.setModel(key, modelId) : null;
+        const displayLabel = adapter.getCurrentModel?.(key) || modelId;
+        // Read AFTER the switch: a model that does not offer the level in force
+        // clears it (`effort.cleared_on_model_switch`), so a pre-switch read would
+        // report a level the new model no longer runs. Same resolution rule as
+        // `/status` — no `getEffort` means the backend has no effort concept at all.
+        const effort = adapter.getEffort ? (adapter.getEffort(key) ?? effortLevels_1.defaultEffortLevel) : null;
+        const decision = (0, modelSetReplyDecision_1.getModelSetReplyDecision)({
+            hasSetModel: Boolean(adapter.setModel),
+            setModelError,
+            isActive: adapter.checkIsActive(key),
+            adapterLabel: adapter.label,
+            displayLabel,
+            effort,
+        }, i18n_1.t);
+        if (decision.isOk) {
+            await updatePinnedStatus(key).catch(() => { });
+            // The "Recently used" list is an OpenCode concept (providers to hop
+            // between); a Claude alias has none. `displayLabel` is the adapter's
+            // resolved `provider/model`, not whatever shorthand the user typed.
+            if (adapter.name === adapterNames_1.openCodeAdapterName && displayLabel.includes('/')) {
+                await getState().addRecentModel(displayLabel);
+            }
+        }
+        return { ...decision, setModelError, displayLabel };
+    }
+    /**
+     * @description The recently-used entries the picker may offer for `adapter`:
+     * the persisted list filtered against the live catalog (a stale entry must
+     * not render a button that resolves to nothing), and nothing at all for a
+     * backend without providers — the Claude backends never show the row.
+     */
+    function getRecentModelsForPicker(adapter, catalog) {
+        if (adapter.name !== adapterNames_1.openCodeAdapterName)
+            return [];
+        return (0, modelRecentPlan_1.getRecentModelsInCatalog)(getState().getRecentModels(), catalog);
+    }
+    function armProviderConnect(key, providerId) {
+        const keyString = (0, sessionKey_1.keyToString)(key);
+        awaitingModelSelection.delete(keyString);
+        awaitingSessionSelection.delete(keyString);
+        awaitingFolderName.delete(keyString);
+        pendingProviderConnects.set(keyString, { providerId });
+    }
+    async function handleProviderConnectKey(key, providerId, apiKey, secretMessageId) {
+        const trimmedApiKey = apiKey.trim();
+        if (!trimmedApiKey) {
+            armProviderConnect(key, providerId);
+            await replyToThread(key, (0, i18n_1.t)('connect.empty_key'));
+            return;
+        }
+        // Reject a value that can't be a real key (spaces / non-Latin-1 / controls)
+        // BEFORE storing it — otherwise a stray chat message captured by a stale
+        // `/connect` state becomes a broken `Authorization` header that only fails
+        // (cryptically) on the next request. An implausible value is NOT a secret, so
+        // keep it visible, re-arm, and hint. (live 2026-07-20)
+        if (!(0, openCodeAuthLogin_1.checkIsPlausibleProviderApiKey)(trimmedApiKey)) {
+            armProviderConnect(key, providerId);
+            await replyToThread(key, (0, i18n_1.t)('connect.invalid_key'));
+            return;
+        }
+        // A plausible key IS a single-use secret → delete it from history now.
+        if (secretMessageId !== null) {
+            await deleteThreadMessage(key, secretMessageId);
+        }
+        const adapter = (0, createAdapter_1.getAdapter)('opencode');
+        if (!adapter.connectProvider) {
+            await replyToThread(key, (0, i18n_1.t)('connect.unsupported_backend'));
+            return;
+        }
+        const connectError = await adapter.connectProvider(key, providerId, trimmedApiKey);
+        if (connectError) {
+            await replyToThread(key, connectError);
+            return;
+        }
+        await replyToThread(key, (0, i18n_1.t)('connect.success', { provider: providerId }));
+    }
+    /**
+     * @description Show the `/connect <provider>` method picker: one inline button
+     * per auth method from the live catalog — OAuth (subscription/account, driven
+     * out-of-band via `opencode auth login` in a pty) and the API-key method (the
+     * existing key-paste flow). Tapping a button fires the `connm_<idx>` callback.
+     */
+    async function showConnectMethodPicker(key, providerId) {
+        const adapter = (0, createAdapter_1.getAdapter)('opencode');
+        if (!adapter.fetchProviderAuthMethods) {
+            await replyToThread(key, (0, i18n_1.t)('connect.unsupported_backend'));
+            return;
+        }
+        let methods;
+        try {
+            methods = await adapter.fetchProviderAuthMethods(providerId);
+        }
+        catch (e) {
+            const reason = e instanceof Error ? e.message : String(e);
+            await replyToThread(key, (0, i18n_1.t)('connect.failed', { provider: providerId, reason }));
+            return;
+        }
+        if (methods.length === 0) {
+            await replyToThread(key, (0, i18n_1.t)('connect.no_methods', { provider: providerId }));
+            return;
+        }
+        connectMethodLists.set((0, sessionKey_1.keyToString)(key), { providerId, methods });
+        const buttons = methods.map((m, i) => telegraf_1.Markup.button.callback((0, openCodeAuthLogin_1.buildConnectMethodButtonLabel)(m), `connm_${i}`));
+        await replyToThread(key, (0, i18n_1.t)('connect.pick_method', { provider: providerId }), telegraf_1.Markup.inlineKeyboard(buttons, { columns: 1 }));
+    }
+    /**
+     * @description Apply a `/disconnect` for one provider and report the outcome.
+     *
+     * The adapter's `null` means a clean disconnect; a non-null string is the
+     * notice to show verbatim — a failure, OR the honest caveat that the provider
+     * is still active because the backend enables it from an environment variable
+     * (the `openrouter` / `OPENROUTER_API_KEY` case that `DELETE /auth/:id` cannot
+     * touch, and the reason `/model` also has a bot-side hide toggle).
+     */
+    async function applyProviderDisconnect(key, providerId) {
+        const adapter = getProviderAuthAdapter();
+        if (!adapter.disconnectProvider) {
+            await replyToThread(key, (0, i18n_1.t)('disconnect.unsupported_backend'));
+            return;
+        }
+        const notice = await adapter.disconnectProvider(key, providerId);
+        await replyToThread(key, notice ?? (0, i18n_1.t)('disconnect.success', { provider: providerId }));
+    }
+    /**
+     * @description Bare `/disconnect` → one button per currently active provider.
+     * The provider list comes from OpenCode's live model catalog (a provider
+     * serving no models is not connected in any useful sense) and INCLUDES hidden
+     * ones — hiding is a picker preference, orthogonal to dropping credentials.
+     *
+     * The snapshot is stored under the SENT MESSAGE's id, so this keyboard can only
+     * ever resolve against the list it actually shows.
+     */
+    async function showDisconnectProviderPicker(key) {
+        const adapter = getProviderAuthAdapter();
+        if (!adapter.disconnectProvider) {
+            await replyToThread(key, (0, i18n_1.t)('disconnect.unsupported_backend'));
+            return;
+        }
+        const catalog = await getModelCatalog(adapter);
+        if (catalog.providers.length === 0) {
+            await replyToThread(key, (0, i18n_1.t)('disconnect.no_providers'));
+            return;
+        }
+        const buttons = catalog.providers.map((provider, index) => telegraf_1.Markup.button.callback((0, i18n_1.t)('disconnect.provider_button', { provider }), (0, providerDisconnectPlan_1.buildDisconnectProviderCallback)(index)));
+        const messageId = await replyToThread(key, (0, i18n_1.t)('disconnect.pick_provider'), telegraf_1.Markup.inlineKeyboard(buttons, { columns: 1 }));
+        // A failed send has no keyboard to resolve against — recording the snapshot
+        // would only leak an entry.
+        if (messageId === null)
+            return;
+        disconnectProviderLists.set((0, providerDisconnectPlan_1.buildDisconnectPickerKey)((0, sessionKey_1.keyToString)(key), messageId), catalog.providers);
+        for (const evictedKey of (0, providerDisconnectPlan_1.getEvictedDisconnectPickerKeys)(disconnectProviderLists.keys())) {
+            disconnectProviderLists.delete(evictedKey);
+        }
+    }
+    /**
+     * @description Read the thread backend's model list and split it for the
+     * picker. Re-derived on every render (command AND callback) rather than
+     * snapshotted per thread — the same self-healing approach `bind_page` takes,
+     * and both adapters cache the underlying lookup.
+     *
+     * A backend without `getAvailableModels` (or a failing one) yields an empty
+     * catalog, which the caller turns into the "set it manually" notice.
+     */
+    async function getModelCatalog(adapter) {
+        let models = [];
+        if (adapter.getAvailableModels) {
+            try {
+                models = await adapter.getAvailableModels();
+            }
+            catch (e) {
+                console.error('[Bot] getAvailableModels:', e);
+            }
+        }
+        // Claude reports slash-less aliases (`sonnet`, `opus`, …) — they group under
+        // the adapter label, otherwise the picker would render an empty list.
+        return (0, modelPickerPlan_1.buildModelCatalog)(models, adapter.label, getState().getHiddenModelProviders());
+    }
+    /**
+     * @description Arm the numbered-reply affordance for the page just rendered.
+     * Scoped to the CURRENT PAGE: `threadModelLists` holds that page's ids in
+     * button order, so a bare digit picks what the user is looking at.
+     */
+    function armModelPagePick(key, pageModels) {
+        const kStr = (0, sessionKey_1.keyToString)(key);
+        threadModelLists.set(kStr, pageModels);
+        awaitingModelSelection.add(kStr);
+    }
+    /**
+     * @description Whether a bare digit in this thread is currently read as a
+     * `/model` page pick. Read-only probe, exported so the "a BUTTON pick must
+     * disarm the numbered affordance" rule is directly assertable in tests — an
+     * armed thread silently swallows a later ordinary "3" prompt.
+     */
+    function checkIsNumberedModelPickArmed(key) {
+        return awaitingModelSelection.has((0, sessionKey_1.keyToString)(key));
+    }
+    /** Disarm the numbered-reply affordance — the provider level shows no numbers. */
+    function clearModelPagePick(key) {
+        const kStr = (0, sessionKey_1.keyToString)(key);
+        threadModelLists.delete(kStr);
+        awaitingModelSelection.delete(kStr);
+    }
+    /**
+     * @description Resolve a numbered pick against the page the thread is currently
+     * looking at, and CONSUME the bare-digit affordance. `null` when the number
+     * addresses nothing on that page.
+     *
+     * The single resolver behind BOTH numbered entry points — `/model <n>` and the
+     * plain "3" reply — so the range check and the disarm cannot drift apart. The
+     * disarm is unconditional because an armed thread silently swallows a later
+     * ordinary "3" prompt as a model pick instead of forwarding it to the agent;
+     * `/model <n>` used to skip it entirely. The page list itself survives, so a
+     * follow-up `/model 4` still resolves against the list still on screen.
+     *
+     * Exported so that rule is directly assertable without a Telegram surface.
+     */
+    function getNumberedModelPick(key, num) {
+        const kStr = (0, sessionKey_1.keyToString)(key);
+        const pageModels = threadModelLists.get(kStr);
+        awaitingModelSelection.delete(kStr);
+        if (!pageModels || num < 1 || num > pageModels.length)
+            return null;
+        return pageModels[num - 1];
+    }
+    /**
+     * @description Apply a numbered pick and reply — the shared tail of `/model <n>`
+     * and the plain "3" reply. Always replies (even for an adapter that cannot set a
+     * model), so both call sites can return unconditionally afterwards.
+     */
+    async function applyNumberedModelPick(adapter, key, num) {
+        const selected = getNumberedModelPick(key, num);
+        if (selected === null) {
+            await replyToThread(key, (0, i18n_1.t)('model.invalid_number'));
+            return;
+        }
+        const { message } = await applyModelSelection(adapter, key, selected);
+        await replyToThread(key, message);
+    }
+    /**
+     * @description Arm (or disarm) the bare-digit pick to match what the render
+     * actually shows. THE single choke point: a button pick re-renders its page
+     * WITHOUT numbers, and leaving `awaitingModelSelection` armed there made a
+     * later ordinary "3" prompt get swallowed as a model pick instead of reaching
+     * the agent.
+     */
+    function applyModelPagePickArming(key, render) {
+        if (render.isNumberedPickArmed && render.pageModels.length > 0) {
+            armModelPagePick(key, render.pageModels);
+            return;
+        }
+        clearModelPagePick(key);
+    }
+    /**
+     * @description Open the `/model` picker as a NEW message. Starts at the model
+     * level when the catalog has a single offered provider (the Claude aliases),
+     * otherwise at the provider level.
+     */
+    async function showModelPicker(key, adapter) {
+        const current = getCurrentModelLabel(adapter, key);
+        const catalog = await getModelCatalog(adapter);
+        if (catalog.providers.length === 0) {
+            clearModelPagePick(key);
+            await replyToThread(key, (0, i18n_1.t)('model.none_available', { current }));
+            return;
+        }
+        const render = (0, modelPickerPlan_1.checkHasProviderLevel)(catalog.visibleProviders.length, catalog.hiddenProviders.length)
+            ? buildModelProviderRender(catalog, current, getRecentModelsForPicker(adapter, catalog))
+            // Single offered provider → the provider level is a one-button detour;
+            // `providers` then holds exactly that one entry, hence index 0.
+            : buildModelPageRender(catalog, 0, 0, current, { isWithNumberedList: true });
+        if (!render) {
+            clearModelPagePick(key);
+            await replyToThread(key, (0, i18n_1.t)('model.none_available', { current }));
+            return;
+        }
+        applyModelPagePickArming(key, render);
+        await replyToThread(key, render.text, render.keyboard);
+    }
+    /** Re-render the provider level in place (after a hide/show toggle or «back»). */
+    async function refreshModelProviderLevel(ctx, key) {
+        const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+        const catalog = await getModelCatalog(adapter);
+        const render = buildModelProviderRender(catalog, getCurrentModelLabel(adapter, key), getRecentModelsForPicker(adapter, catalog));
+        applyModelPagePickArming(key, render);
+        await editModelPickerMessage(ctx, render);
+    }
+    /**
+     * @description Re-render the "Recently used" level in place. Falls back to the
+     * provider level when the list came out empty (nothing left after the catalog
+     * filter), so the message never shows a level with no buttons.
+     */
+    async function refreshRecentModelsLevel(ctx, key) {
+        const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+        const catalog = await getModelCatalog(adapter);
+        const render = buildRecentModelsRender(getRecentModelsForPicker(adapter, catalog), getCurrentModelLabel(adapter, key));
+        if (!render) {
+            await refreshModelProviderLevel(ctx, key);
+            return;
+        }
+        applyModelPagePickArming(key, render);
+        await editModelPickerMessage(ctx, render);
+    }
+    function registerProviderCommands() {
+        command('connect', async (ctx, key, parsed) => {
+            const { providerId, apiKey } = getConnectCommandArgs(parsed);
+            if (!(0, openCodeAdapter_1.checkIsValidProviderId)(providerId)) {
+                if (apiKey !== null)
+                    await deleteThreadMessage(key, ctx.message.message_id);
+                await replyToThread(key, (0, i18n_1.t)('connect.invalid_provider', { provider: providerId }));
+                return;
+            }
+            // Inline API-key fast path: `/connect <provider> sk-…` connects with the key
+            // directly (and deletes the secret message). No key → show the method picker
+            // so the user can choose OAuth (subscription) vs API key.
+            if (apiKey !== null) {
+                await handleProviderConnectKey(key, providerId, apiKey, ctx.message.message_id);
+                return;
+            }
+            await showConnectMethodPicker(key, providerId);
+        });
+        command('disconnect', async (_ctx, key, parsed) => {
+            // No thread-adapter gate — `/connect` has none either; the unsupported-build
+            // guard lives where the provider-auth adapter is resolved.
+            const providerId = parsed.argsText;
+            if (!providerId) {
+                await showDisconnectProviderPicker(key);
+                return;
+            }
+            await applyProviderDisconnect(key, providerId);
+        });
+    }
+    function registerModelCommands() {
+        command('model', async (_ctx, key, parsed) => {
+            const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+            const args = parsed.argsText;
+            // numeric selection from the last rendered page
+            if (/^\d+$/.test(args)) {
+                await applyNumberedModelPick(adapter, key, parseInt(args, 10));
+                return;
+            }
+            // direct «/model provider/name» — resolves a HIDDEN provider too: hiding
+            // filters the picker only and must never break an explicit pick or a saved
+            // model pref.
+            if (args) {
+                const { message } = await applyModelSelection(adapter, key, args);
+                await replyToThread(key, message);
+                return;
+            }
+            await showModelPicker(key, adapter);
+        });
+        command('effort', async (_ctx, key, parsed) => {
+            const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+            const args = parsed.argsText;
+            // Backend must support the effort contract (both methods are optional).
+            if (!adapter.setEffort || !adapter.getAvailableEffortLevels) {
+                await replyToThread(key, (0, i18n_1.t)('effort.unsupported_backend', { label: adapter.label }));
+                return;
+            }
+            // No `checkIsActive` gate — like `/model`, effort works pre-session: the
+            // adapter persists the pick (OpenCode/Claude) and a later session replays it.
+            // The picker lists the PROSPECTIVE model's levels; the direct-set path
+            // surfaces the adapter's own notice (e.g. Claude's `effort.start_agent_first`).
+            // Direct set: `/effort <level>`. The adapter validates (Claude against its
+            // canonical set, OpenCode against the model's variants) and returns a
+            // user-facing notice string on any non-success.
+            if (args) {
+                const wakeNotice = await wakeSleepingSession(key); // L-D4: apply to the woken session
+                if (wakeNotice)
+                    await replyToThread(key, wakeNotice);
+                const err = await adapter.setEffort(key, args);
+                if (err) {
+                    await replyToThread(key, err);
+                }
+                else {
+                    await replyToThread(key, (0, i18n_1.t)('effort.set_success', { level: args }));
+                    await updatePinnedStatus(key).catch(() => { });
+                }
+                return;
+            }
+            // No arg: show current effort + a button per available level.
+            let levels = [];
+            try {
+                levels = await adapter.getAvailableEffortLevels(key);
+            }
+            catch (e) {
+                console.error('[Bot] getAvailableEffortLevels:', e);
+            }
+            if (levels.length === 0) {
+                // Empty means the current model declares no variants (OpenCode) or the
+                // backend reports no levels — not an error, just nothing to pick.
+                await replyToThread(key, (0, i18n_1.t)('effort.not_available'));
+                return;
+            }
+            const cur = adapter.getEffort?.(key) ?? null;
+            await replyToThread(key, (0, i18n_1.t)('effort.choose', { current: cur ?? (0, i18n_1.t)('effort.current_none') }), buildEffortKeyboard(levels, cur));
+        });
+    }
+    function registerModelCallbacks() {
+        /**
+         * @description `/model` picker callbacks — the two-level provider → models
+         * keyboard. All of them are registered BEFORE the generic `model_(.+)$`
+         * handler below (which is the legacy "pick this model id" button kept for
+         * back-compat) so no prefix can be mis-matched; Telegraf dispatches action
+         * regexes first-match-wins, the same ordering rule `bind_page_(\d+)$` relies on.
+         */
+        // Provider tapped (or a page arrow) → render that provider's model page.
+        bot.action(modelPickerPlan_1.providerPageCallbackRe, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+            const catalog = await getModelCatalog(adapter);
+            const render = buildModelPageRender(catalog, Number(ctx.match[1]), Number(ctx.match[2]), getCurrentModelLabel(adapter, key), { isWithNumberedList: true });
+            if (!render) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_provider_gone'));
+                return;
+            }
+            applyModelPagePickArming(key, render);
+            await editModelPickerMessage(ctx, render);
+            await ctx.answerCbQuery();
+        });
+        // Model tapped → same apply path as `/model <name>` and the numeric reply.
+        bot.action(modelPickerPlan_1.modelPickCallbackRe, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+            if (!adapter.setModel) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.not_supported', { label: adapter.label }));
+                return;
+            }
+            const catalog = await getModelCatalog(adapter);
+            const providerIndex = Number(ctx.match[1]);
+            const modelIndex = Number(ctx.match[2]);
+            const provider = catalog.providers[providerIndex];
+            const modelId = provider === undefined
+                ? undefined
+                : catalog.byProvider.get(provider)?.[modelIndex];
+            if (modelId === undefined) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_provider_gone'));
+                return;
+            }
+            const { isOk, message, setModelError, displayLabel } = await applyModelSelection(adapter, key, modelId);
+            if (!isOk) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_error', { error: (setModelError ?? message).slice(0, 50) }));
+                return;
+            }
+            await ctx.answerCbQuery((0, i18n_1.t)('cb.model_set', { model: displayLabel.split('/').pop() || displayLabel }));
+            // The pick is made, so the page's bare-digit affordance must go (an armed
+            // thread swallows a later ordinary "3" prompt) — and with it the numbers in
+            // the text. Re-render the SAME page so the ✓ moves to the model just picked.
+            const refreshed = buildModelPageRender(catalog, providerIndex, Math.floor(modelIndex / MODEL_PAGE_SIZE), getCurrentModelLabel(adapter, key), { isWithNumberedList: false });
+            if (refreshed) {
+                applyModelPagePickArming(key, refreshed);
+                await editModelPickerMessage(ctx, refreshed);
+            }
+            else {
+                clearModelPagePick(key);
+            }
+            await replyToThread(key, message);
+        });
+        // 🕘 Recently used → the flat cross-provider list of earlier picks.
+        bot.action(modelRecentPlan_1.recentModelsOpenCallback, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            await ctx.answerCbQuery();
+            await refreshRecentModelsLevel(ctx, key);
+        });
+        // A recent entry tapped → the same apply path as every other pick. Resolved
+        // by the identity hash the button carries, against the list AS IT IS NOW:
+        // an old keyboard can name a model that moved (still applied — it is the
+        // model printed on the button) or one that left the list (refused), never
+        // a different one.
+        bot.action(modelRecentPlan_1.recentModelPickCallbackRe, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+            if (!adapter.setModel) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.not_supported', { label: adapter.label }));
+                return;
+            }
+            const catalog = await getModelCatalog(adapter);
+            const modelId = (0, modelRecentPlan_1.getRecentModelPick)(getRecentModelsForPicker(adapter, catalog), { index: Number(ctx.match[1]), identity: ctx.match[2] });
+            if (modelId === null) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_recent_gone'));
+                return;
+            }
+            const { isOk, message, setModelError, displayLabel } = await applyModelSelection(adapter, key, modelId);
+            if (!isOk) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_error', { error: (setModelError ?? message).slice(0, 50) }));
+                return;
+            }
+            await ctx.answerCbQuery((0, i18n_1.t)('cb.model_set', { model: displayLabel.split('/').pop() || displayLabel }));
+            // Re-render the SAME level: the pick just moved to the head and takes the ✓.
+            await refreshRecentModelsLevel(ctx, key);
+            await replyToThread(key, message);
+        });
+        // 🙈 / 👁 — the bot-side provider filter. GLOBAL for the instance and the only
+        // lever that works for a provider OpenCode enables from an environment
+        // variable, which `/disconnect` cannot remove.
+        bot.action(modelPickerPlan_1.providerHideCallbackRe, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const catalog = await getModelCatalog((0, createAdapter_1.getThreadAdapter)(key));
+            const provider = catalog.providers[Number(ctx.match[1])];
+            if (provider === undefined) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_provider_gone'));
+                return;
+            }
+            await getState().setModelProviderHidden(provider, true);
+            await ctx.answerCbQuery((0, i18n_1.t)('cb.model_hidden', { provider }));
+            await refreshModelProviderLevel(ctx, key);
+        });
+        bot.action(modelPickerPlan_1.providerShowCallbackRe, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const catalog = await getModelCatalog((0, createAdapter_1.getThreadAdapter)(key));
+            const provider = catalog.providers[Number(ctx.match[1])];
+            if (provider === undefined) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_provider_gone'));
+                return;
+            }
+            await getState().setModelProviderHidden(provider, false);
+            await ctx.answerCbQuery((0, i18n_1.t)('cb.model_shown', { provider }));
+            await refreshModelProviderLevel(ctx, key);
+        });
+        // «⬅️ providers» — back to the provider level.
+        bot.action(modelPickerPlan_1.modelPickerBackCallback, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            await ctx.answerCbQuery();
+            await refreshModelProviderLevel(ctx, key);
+        });
+        // Inert label buttons (the "2/5" page pill, a hidden provider's name).
+        bot.action(modelPickerPlan_1.modelPickerNoopCallback, async (ctx) => {
+            await ctx.answerCbQuery();
+        });
+        // Bare-`/disconnect` picker row → drop that provider's stored credentials.
+        // Resolved against the snapshot of the message the button sits on, so an older
+        // picker left in the history can never map its index onto a newer list and
+        // delete the wrong provider's credentials.
+        bot.action(providerDisconnectPlan_1.disconnectProviderCallbackRe, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const provider = (0, providerDisconnectPlan_1.getDisconnectPickerProviderAt)(disconnectProviderLists, (0, sessionKey_1.keyToString)(key), (0, callbackMessage_1.getCallbackMessageId)(ctx), Number(ctx.match[1]));
+            if (provider === null) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.disconnect_expired'));
+                return;
+            }
+            await ctx.answerCbQuery();
+            await applyProviderDisconnect(key, provider);
+        });
+        bot.action(/^model_(.+)$/, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const modelId = ctx.match[1];
+            const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+            // No bot-side session gate: the adapter owns the no-session decision
+            // (OpenCode persists the pick for next start and succeeds; Claude refuses
+            // with a notice surfaced as the error toast below).
+            if (!adapter.setModel) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.not_supported', { label: adapter.label }));
+                return;
+            }
+            const { isOk, message, setModelError, displayLabel } = await applyModelSelection(adapter, key, modelId);
+            if (!isOk) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.model_error', { error: (setModelError ?? message).slice(0, 50) }));
+                return;
+            }
+            await ctx.answerCbQuery((0, i18n_1.t)('cb.model_set', { model: displayLabel.split('/').pop() || displayLabel }));
+            await replyToThread(key, message);
+        });
+        bot.action(/^connm_(\d+)$/, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const entry = connectMethodLists.get((0, sessionKey_1.keyToString)(key));
+            const idx = Number(ctx.match[1]);
+            const method = entry?.methods[idx];
+            if (!entry || !method) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.connect_method_expired'));
+                return;
+            }
+            await ctx.answerCbQuery();
+            if ((0, openCodeAuthLogin_1.checkIsOAuthMethod)(method)) {
+                // OAuth (subscription/account): drive `opencode auth login` out-of-band.
+                await startOpenCodeOAuthLogin(key, entry.providerId, method.label);
+                return;
+            }
+            // API-key method: arm the existing key-paste flow (next message is the key).
+            armProviderConnect(key, entry.providerId);
+            await replyToThread(key, (0, i18n_1.t)('connect.prompt_key', { provider: entry.providerId }));
+        });
+        bot.action(/^effort_(.+)$/, async (ctx) => {
+            const key = await authoriseContext(ctx);
+            if (!key) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.access_denied'));
+                return;
+            }
+            const level = ctx.match[1];
+            const adapter = (0, createAdapter_1.getThreadAdapter)(key);
+            // No `checkIsActive` gate — effort is persisted pre-session (mirrors the
+            // `/effort` command and `/model`). The adapter returns its own notice if the
+            // pick can't apply live; we surface it via `cb.effort_error` below.
+            if (!adapter.setEffort) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.not_supported', { label: adapter.label }));
+                return;
+            }
+            const wakeNotice = await wakeSleepingSession(key); // L-D4: apply to the woken session
+            if (wakeNotice)
+                await replyToThread(key, wakeNotice);
+            const err = await adapter.setEffort(key, level);
+            if (err) {
+                await ctx.answerCbQuery((0, i18n_1.t)('cb.effort_error', { error: err.slice(0, 50) }));
+                return;
+            }
+            await ctx.answerCbQuery((0, i18n_1.t)('cb.effort_set', { level }));
+            await replyToThread(key, (0, i18n_1.t)('effort.set_success', { level }));
+            await updatePinnedStatus(key).catch(() => { });
+            // Re-render the picker so the `✓` marker follows the new level instead of
+            // staying stuck on the previously-selected one (B12). The current level is
+            // the freshly-set one; fall back to `level` if the adapter can't report it.
+            const cbMsg = ctx.callbackQuery?.message;
+            if (cbMsg && adapter.getAvailableEffortLevels) {
+                let levels = [];
+                try {
+                    levels = await adapter.getAvailableEffortLevels(key);
+                }
+                catch (e) {
+                    console.error('[effort_cb] getAvailableEffortLevels:', e);
+                }
+                if (levels.length > 0) {
+                    const cur = adapter.getEffort?.(key) ?? level;
+                    const keyboard = buildEffortKeyboard(levels, cur);
+                    try {
+                        await (0, rateLimiter_1.enqueueSend)(key, () => bot.telegram.editMessageReplyMarkup((0, sessionKeyCodec_1.getTelegramChatId)(key), cbMsg.message_id, undefined, keyboard.reply_markup));
+                    }
+                    catch (e) {
+                        const desc = (0, sendErrorClassifier_1.checkIsApiError)(e) ? (0, sendErrorClassifier_1.getErrorDescription)(e) : '';
+                        if (!/message is not modified/i.test(desc)) {
+                            console.warn('[effort_cb] keyboard re-render failed:', desc || e);
+                        }
+                    }
+                }
+            }
+        });
+    }
+    return {
+        showConnectMethodPicker,
+        applyProviderDisconnect,
+        handleProviderConnectKey,
+        applyNumberedModelPick,
+        applyModelPagePickArming,
+        checkIsNumberedModelPickArmed,
+        getNumberedModelPick,
+        registerProviderCommands,
+        registerModelCommands,
+        registerModelCallbacks,
+    };
+}
+//# sourceMappingURL=modelProviders.js.map