dsh-cliworker-now 0.7.6 → 0.7.7

package/README.en.md

@@ -107,12 +107,20 @@ An integrated adapter does not mean every model, subscription or platform has be
 | ZCode | 0.16.9 | Native authentication, headless execution and session protocol integrated; see its probe record |
 | Grok Build | 1.0.0 | Own login, official Build access permission and model directory checked separately; generation remains unverified |
 | OMP | 16.4.4 | Native login/logout menus and own log-write permissions checked; RPC integrated; Zhipu Coding CN GLM-5.3-Flash was tested historically |
-| Pi | 1.0.2 / 1.0.4 | Executable identity and SDK/RPC checked by version; 1.0.2 with Zhipu Coding CN GLM-5.3-Flash was tested historically; 1.0.4 checks were read-only or offline |
+| Pi | 1.0.2 / 1.0.4 / 1.1.0 | Executable identity and SDK/RPC checked by version; 1.0.2 with Zhipu Coding CN GLM-5.3-Flash was tested historically; 1.0.4 checks were read-only or offline; 1.1.0 passed credential-free SDK/RPC, native login menu display and termination cleanup on Windows, with live login and model execution still unverified |
 | Hermes Agent | Installed checkout 6c80c32734 | Own account directory, native account menus and Nous model access checked; a read-only check returned 10 free models; generation and continuation remain unverified |
 | OpenCode | 1.18.21 | Native model directory and JSONL adapter integrated; Zhipu models were tested historically; a free MiMo request previously returned HTTP 403 |
 
 MiMo refers to [XiaomiMiMo/MiMo-Code](https://github.com/XiaomiMiMo/MiMo-Code). Hermes Agent replaced the old external Harness CLI adapter; DeepSeek Harness remains the plugin's host.
 
+MiMo reuses a bounded, short-lived in-memory cache of native capabilities to reduce repeated CLI startup on Windows. The first load still queries the native CLI. Changes to the account, configuration, project or executable invalidate the cache, and each dispatch still checks the current account's access.
+
+The settings dialog allows at most two concurrent account-status requests, including the selected CLI. The selected item goes first when settings opens; switching only reprioritizes queued requests. Model catalogs are queried separately, so this is not a limit on all subprocesses. Closing or disabling cancels the relevant reads; Host remains responsible for process cleanup.
+
+Verified Kimi managed OAuth model capabilities and Claude command-parameter capabilities can also be reused briefly. Each catalog query still checks current credentials, expiry and remote access; remote quota is not cached. Windows launchers hide extra console windows for background queries and embedded account terminals.
+
+Successful extended-CLI catalog queries remove their private temporary directory and extracted native cache after process exit is confirmed. Failed or unconfirmed cleanup preserves the query files and never deletes native account files.
+
 Probe records: [ZCode](doc/zcode-probe.md) · [Grok](doc/grok-probe.md) · [Pi / OMP](doc/pi-omp-probe.md) · [Hermes](doc/hermes-probe.md) · [OpenCode](doc/opencode-probe.md)
 
 ## 5. Installation and updates
@@ -120,7 +128,7 @@ Probe records: [ZCode](doc/zcode-probe.md) · [Grok](doc/grok-probe.md) · [Pi /
 ### 5.1 One-line install
 
 ```sh
-dsh plugin --profile desktop add dsh-cliworker-now@0.7.6
+dsh plugin --profile desktop add dsh-cliworker-now@0.7.7
 ```
 
 <details>
@@ -129,15 +137,15 @@ dsh plugin --profile desktop add dsh-cliworker-now@0.7.6
 For the Web profile:
 
 ```sh
-dsh plugin --profile web add dsh-cliworker-now@0.7.6
+dsh plugin --profile web add dsh-cliworker-now@0.7.7
 ```
 
-Finish active tasks and fully quit Harness before installation or updates, then reopen it. The npm package is prebuilt and needs no manual extraction or compilation. You can also enter `dsh-cliworker-now@0.7.6` in the plugin manager's Add Plugin dialog.
+Finish active tasks and fully quit Harness before installation or updates, then reopen it. The npm package is prebuilt and needs no manual extraction or compilation. You can also enter `dsh-cliworker-now@0.7.7` in the plugin manager's Add Plugin dialog.
 
 GitHub Release fallback:
 
 ```sh
-dsh plugin --profile desktop add https://github.com/SuperWheel/cliworker-now/releases/download/v0.7.6/dsh-cliworker-now-0.7.6.tgz
+dsh plugin --profile desktop add https://github.com/SuperWheel/cliworker-now/releases/download/v0.7.7/dsh-cliworker-now-0.7.7.tgz
 ```
 
 For source development:
@@ -174,7 +182,7 @@ Short aliases are also supported:
 >
 > Use glm CLI to check this code.
 
-`agy` maps to **Antigravity**, `glm / zhipu / 智谱` to **ZCode**, and `harmes` to **Hermes Agent**. Explicit requests receive a routing hint, and dispatch tools resolve these aliases consistently. A small spelling error in a longer name is accepted only with one unambiguous match. Unknown names or multiple targets return a short error with candidates and do not start a task. Ordinary model discussion, negated requests and quoted examples do not trigger a routing hint. Harness's main model still decides whether to invoke the tool; if needed, explicitly ask it to “use the CLI Worker plugin to call agy CLI”.
+`agy` maps to **Antigravity**, `glm / zhipu / 智谱` to **ZCode**, and `harmes` to **Hermes Agent**. Explicit requests receive a routing hint, and dispatch tools resolve these aliases consistently. Matching parenthesized aliases such as `Antigravity (agy) CLI` and repeated requests for the same CLI resolve to one target. A small spelling error in a longer name is accepted only with one unambiguous match. Unknown names or multiple targets return a short error with candidates and do not start a task. Ordinary model discussion, negated requests and quoted examples do not trigger a routing hint. Harness's main model still decides whether to invoke the tool; if needed, explicitly ask it to “use the CLI Worker plugin to call agy CLI”.
 
 The first use of a project and CLI opens a native Harness question card for:
 
@@ -197,6 +205,14 @@ Model menus show readable names without provider or organization path prefixes o
 
 **OMP (Oh My Pi) and Pi Coding Agent are separate CLIs.** Their installations, accounts, models and sessions are managed independently. The plugin checks executable identity and does not silently replace an installation with another version.
 
+macOS and Windows share the same account terminal with text selection and copying, Cmd+V / Ctrl+V paste and a blinking block cursor. Right-click copies selected text, or pastes when nothing is selected. Login opens the native authorization page directly; the complete Windows ZCode login URL is also clickable and can be selected and copied into a browser.
+
+Windows discovers the CLI inside the current user’s verified official Codex app package, the official npm entry, and Hermes’s official installation directory. An incomplete installation without an executable is reported explicitly.
+
+Windows supports the verified official Pi launcher and the native executable declared by the OpenCode npm package. The plugin parses their fixed launch commands and validates installation identity. Unrecognized or broken entries require an installation check. Other Pi versions require SDK/RPC and native menu verification before support is added.
+
+Settings prioritize the selected CLI and limit background account checks to two at a time. Verified Kimi OAuth model capabilities and Claude command capabilities can be reused briefly, while credentials, expiry and remote allowance are checked again. Windows metadata and embedded account launchers hide additional console windows. Codex reports confirmed exhausted quota separately from unavailable authentication; native model capabilities alone do not establish permission to run a task.
+
 OMP, Pi, Hermes and OpenCode display their own provider and authentication method. Account logins use a concise label such as `OpenAI账号登录`; full safe identity details and other API sources remain in the hover text. API-only authentication uses a label such as `zai.cn API 登录`. Valid authentication is not reduced to a generic “configured” state; model access is checked separately.
 
 OMP, Pi and Hermes use the same logout button and open their own native logout menus. If more than one own account directory exists, choose the source first. The operation targets that source and preserves others. API keys in Pi/OMP `.env` or model configuration must be managed in their original configuration when native logout cannot remove them. Hermes's native disabled-source state also governs login, model discovery and execution.
@@ -207,10 +223,12 @@ Some account modes have additional boundaries:
 
 - **Antigravity:** uses its own native login and live `agy models` directory, including native effort variants. A slow or failed model query does not turn a logged-in account into “not logged in”. Duplicate in-flight account reads are combined; refresh and execution still read current authentication.
 - **Codex:** supports checked official file-based accounts. Keyring accounts or custom routes remain unavailable when account scope cannot be established.
-- **Claude, Kimi and OpenCode:** unsupported OAuth model-discovery modes currently show an empty model list. Own API configurations are filtered by account scope. OpenCode OAuth writeback lacks account-version protection, so only its own API configuration is currently enabled for execution.
-- **MiMo:** its native browser login writes own API authentication, including the official service address. Only verifiable local configuration is accepted; file/environment interpolation or remote organization configuration must first be removed.
+- **Claude:** the active source is displayed. A reachable own local proxy is used; when it is offline, the native official account is selected. Proxy authentication or metadata errors do not trigger account fallback. Official login/logout preserves proxy settings, and a worker keeps its selected source throughout execution. Official OAuth models require native account, capability, and remaining-quota evidence.
+- **Kimi and OpenCode:** Kimi native managed OAuth combines its own model aliases, authenticated catalog and confirmed remaining quota. Missing, unknown or exhausted quota asks the user to check the account. Other unverified Kimi OAuth modes remain unavailable. Own API configurations are filtered by account scope. OpenCode OAuth writeback lacks account-version protection, so only its own API configuration is currently enabled for execution.
+- **ZCode:** choose China BigModel or overseas Z.AI before login on either platform. Only the selected native flow starts. A complete CLI with `login [zai|bigmodel]` is required for both providers; older Desktop bundles that only support Z.AI reject a BigModel selection with an upgrade message. A deployed `~/.local/share/cliworker-now/runtimes/zcode/cli/zcode.cjs` takes precedence over the bundled default on both platforms; explicit executable configuration still takes precedence. Windows requires its own native dependencies. Desktop credentials are not migrated; login uses the plugin's separate ZCode account directory. Windows opens the complete native authorization URL once, with clickable/selectable terminal text for recovery; opening a page alone does not complete authentication.
+- **MiMo:** repeated local capability queries use a bounded in-memory cache to avoid repeated CLI startup on Windows. Initial reads still query the native CLI. Account, configuration, project and executable changes invalidate the cache; each dispatch still verifies current authorization. Its native browser login writes own API authentication, including the official service address. Only verifiable local configuration is accepted; file/environment interpolation or remote organization configuration must first be removed.
 - **Kimi identity:** a valid or renewable native login displays “logged in” and a confirmed shortened account ID. Email addresses or names are not invented when the native account does not store them. “Manage login” opens the native terminal; enter `/logout` and then `/login` to switch accounts. It starts in an empty directory without project MCP configuration. Native trust prompts remain user decisions. Provider configuration without a token does not count as a login.
-- **Hermes:** explicitly opening login settings establishes its isolated native account directory inside the plugin. Status, models and tasks then remain bound to it; logout does not fall back to an older global account. Host account discovery excludes credentials borrowed from other CLIs and never injects Harness authentication. The native process follows its own permissions. Nous models come from the authenticated official directory and access permissions; only confirmed free models are offered without paid access. Discovery does not refresh or generate. Authentication that does not meet native execution's remaining-lifetime requirement asks for login again.
+- **Hermes:** explicitly opening login settings establishes its isolated native account directory inside the plugin. Status, models and tasks then remain bound to it; logout does not fall back to an older global account. Host account discovery excludes credentials borrowed from other CLIs and never injects Harness authentication. The native process follows its own permissions. Nous models come from the authenticated official directory and access permissions; only confirmed free models are offered without paid access. Mac and Windows share native renewal for expired or soon-to-expire access tokens from the same account. Healthy tokens require no extra process. Temporary network failures allow retry; missing or explicitly invalid refresh credentials require login. Renewal does not generate, switch accounts, clear quota/cooldown restrictions, or restore a logged-out account from an old snapshot.
 - **Grok:** checks the official Build access gate before matching the authenticated directory with native models and efforts. Login, an HTTP 200 catalog response or subscription status alone does not establish execution permission. Unknown or denied access leaves the model list empty with a short reason.
 
 ```mermaid
@@ -314,6 +332,8 @@ pnpm --config.verify-deps-before-run=false build:preview
 
 The isolated package is written to `.cache/preview-package`. Verify it in a separate profile first, then check that no tasks are active before the production build, so development does not overwrite the version used by an active Desktop session.
 
+After building on Mac, use SSH to install isolated native dependencies and run targeted regressions on your own Windows machine, then return logs and package hashes. See the [Windows remote testing guide](doc/windows-remote-testing.md) (Chinese). Run `pnpm --config.verifyDepsBeforeRun=false test:windows:remote --config .test-data/windows-remote/config.json`; the default workflow makes no model requests and does not verify the Desktop UI.
+
 Live CLI acceptance is separate and uses the selected account's model allowance:
 
 ```sh

package/README.md

@@ -72,6 +72,8 @@ CLI Worker Now 是 **DeepSeek Harness 的独立多 CLI 智能体插件**。它
 
 每个 CLI 可以单独开启或关闭，分别管理账号、项目默认模型与思考强度。支持的 CLI 可直接打开原生账号终端；登录状态与账号来源按各 CLI 的实际能力显示。
 
+macOS 与 Windows 共用同一账号终端，支持选择文字复制及 Cmd+V／Ctrl+V 粘贴；右键在有选区时复制、无选区时粘贴，输入位置使用闪烁块状光标。登录时直接打开原生授权网页；Windows ZCode 的完整登录网址也可在终端点击或选择复制到浏览器。
+
 ![Harness 中的 CLI 连接设置：选取无个人账号标识的 OMP 页面](doc/assets/readme/cli-settings.jpg)
 
 ### 3.4 亮暗主题与交互
@@ -106,12 +108,20 @@ CLI Worker Now 是 **DeepSeek Harness 的独立多 CLI 智能体插件**。它
 | ZCode | 0.16.9 | 原生登录、headless 与会话协议已接入；详见专项记录 |
 | Grok Build | 1.0.0 | 自身登录、官方 Build 访问许可和模型目录分别核对；目录可读不等于有调用权限，真实生成未验收 |
 | OMP | 16.4.4 | 原生登录菜单及自身日志写权限已修复；RPC 接入，历史智谱 Coding CN GLM-5.3-Flash 已实测 |
-| Pi | 1.0.2 / 1.0.4 | 原生安装身份及 SDK/RPC 按版本核验；1.0.2 的智谱 Coding CN GLM-5.3-Flash 曾实测，1.0.4 本轮仅只读/离线核验 |
+| Pi | 1.0.2 / 1.0.4 / 1.1.0 | 原生安装身份及 SDK/RPC 按版本核验；1.0.2 的智谱 Coding CN GLM-5.3-Flash 曾实测，1.0.4 仅只读/离线核验；1.1.0 在 Windows 通过无凭据 SDK/RPC、原生登录菜单显示及终止清理验证，尚未完成真实登录与模型调用 |
 | Hermes Agent | 当前安装 checkout 6c80c32734 | 独立自身账号目录、原生登录菜单及 Nous 自身账号目录已验收；只读确认 10 个免费模型，真实生成与续聊未验收 |
 | OpenCode | 1.18.21 | 原生目录与 JSONL 接入；智谱模型已实测，免费 MiMo 请求曾返回 403 |
 
 MiMo 指 [XiaomiMiMo/MiMo-Code](https://github.com/XiaomiMiMo/MiMo-Code)。Hermes Agent 替代的是旧的外部 Harness CLI 入口，**DeepSeek Harness 宿主仍是插件的运行基础**。
 
+MiMo 短时间重复加载模型能力时复用有界内存缓存，减少 Windows 上反复启动 CLI 的等待。首次加载仍需查询原生 CLI；账号、配置、项目或程序变化使缓存失效，每次派遣仍核对当前账号授权。
+
+设置页的账号状态请求最多两个并发，包含当前选中的 CLI。首次打开优先当前项，切换时只调整待排顺序；模型目录另行查询，因此这不是全部子进程的数量上限。关闭或禁用会取消对应读取，底层进程清理仍由 Host 管理。
+
+Kimi 已核验的 managed OAuth 模型能力和 Claude 的命令参数能力也可短时复用；每次目录查询仍核对当前凭据、有效期和远端权限，不缓存远端额度。Windows 后台查询及嵌入式账号终端的启动器隐藏额外控制台窗口。
+
+成功且进程退出已确认的扩展 CLI 模型查询会自动删除本次临时目录和原生解压缓存；失败或清理未确认时保留现场，不删除原始账号文件。
+
 专项记录：[ZCode](doc/zcode-probe.md) · [Grok](doc/grok-probe.md) · [Pi / OMP](doc/pi-omp-probe.md) · [Hermes](doc/hermes-probe.md) · [OpenCode](doc/opencode-probe.md)
 
 ## 5. 安装与更新
@@ -119,7 +129,7 @@ MiMo 指 [XiaomiMiMo/MiMo-Code](https://github.com/XiaomiMiMo/MiMo-Code)。Herme
 ### 5.1 一行安装
 
 ```sh
-dsh plugin --profile desktop add dsh-cliworker-now@0.7.6
+dsh plugin --profile desktop add dsh-cliworker-now@0.7.7
 ```
 
 <details>
@@ -128,15 +138,15 @@ dsh plugin --profile desktop add dsh-cliworker-now@0.7.6
 使用 Web profile 时：
 
 ```sh
-dsh plugin --profile web add dsh-cliworker-now@0.7.6
+dsh plugin --profile web add dsh-cliworker-now@0.7.7
 ```
 
-安装或更新前先结束活动任务并完整退出 Harness，完成后重新打开。npm 包已预构建，无需手动解压或编译。也可以在插件页“添加插件”中输入 `dsh-cliworker-now@0.7.6`。
+安装或更新前先结束活动任务并完整退出 Harness，完成后重新打开。npm 包已预构建，无需手动解压或编译。也可以在插件页“添加插件”中输入 `dsh-cliworker-now@0.7.7`。
 
 GitHub Release 备用安装：
 
 ```sh
-dsh plugin --profile desktop add https://github.com/SuperWheel/cliworker-now/releases/download/v0.7.6/dsh-cliworker-now-0.7.6.tgz
+dsh plugin --profile desktop add https://github.com/SuperWheel/cliworker-now/releases/download/v0.7.7/dsh-cliworker-now-0.7.7.tgz
 ```
 
 从源码开发：
@@ -173,7 +183,7 @@ dsh plugin --profile desktop remove dsh-cliworker-now
 >
 > 调用 glm cli 帮我检查这段代码。
 
-`agy` 对应 **Antigravity**，`glm / zhipu / 智谱` 对应 **ZCode**，`harmes` 对应 **Hermes Agent**。插件会为当前明确调用提供路由提示，并在派遣工具里统一解析名称；较长名称的轻微拼写误差只有唯一候选时才接受。未知名称或多个目标返回简短错误和候选，不自动派遣，普通模型讨论、否定调用和引用示例不会触发路由提示。是否调用工具仍由 Harness 主模型决定；如果模型忽略请求，可明确说“使用 CLI Worker 插件调用 agy CLI”。
+`agy` 对应 **Antigravity**，`glm / zhipu / 智谱` 对应 **ZCode**，`harmes` 对应 **Hermes Agent**。插件会为当前明确调用提供路由提示，并在派遣工具里统一解析名称；支持 `Antigravity（agy）CLI` 这样的同名别名，重复指定同一 CLI 仍视为一个目标。较长名称的轻微拼写误差只有唯一候选时才接受。未知名称或多个目标返回简短错误和候选，不自动派遣，普通模型讨论、否定调用和引用示例不会触发路由提示。是否调用工具仍由 Harness 主模型决定；如果模型忽略请求，可明确说“使用 CLI Worker 插件调用 agy CLI”。
 
 首次使用相应项目和 CLI 时，通过 Harness 原生问题卡片选择：
 
@@ -196,21 +206,31 @@ dsh plugin --profile desktop remove dsh-cliworker-now
 
 OMP（Oh My Pi）与 Pi Coding Agent 是两个独立 CLI；安装、账号、模型和会话各自管理，即使使用相同模型也不能互换。插件核验实际执行程序身份；Pi 优先使用已核验的原生安装，不暗中切换到另一旧版。
 
+Windows 也能发现当前用户注册的官方 Codex 应用包内 CLI 和官方 npm 固定入口，以及 Hermes 的官方安装目录；只有安装痕迹而没有可执行文件时会提示完成安装。Windows 支持已核验的 Pi 官方固定启动器，以及 OpenCode npm 包声明的原生程序入口。插件静态解析并校验安装身份；无法确认或已损坏的入口会提示检查安装。Pi 其他版本需先核验 SDK/RPC 和原生菜单后接入。
+
 OMP、Pi、Hermes 和 OpenCode 的账号行按自身认证显示服务商及方式。有账号登录时简写为“OpenAI账号登录”等，完整安全身份及其他 API 认证保留在悬浮详情；仅 API 时显示“zai.cn API 登录”等。有效认证不会统一降成“已配置”。只有配置声明、缺失或失效凭据保留对应灰/红状态，模型权限仍单独核对。
 
 OMP、Pi 和 Hermes 的“退出”使用统一按钮并打开各自原生退出菜单。多个自身账号目录先选择来源；操作针对所选真实来源，其他来源保留。Pi/OMP 原生退出不能删除的 `.env` 或模型配置内 API，需在原配置中管理。Hermes 原生写入的停用来源会同步约束登录、模型和调用，不从保留的配置值恢复账号。
 
+ZCode 登录前可选择“中国智谱 BigModel”或“海外 Z.AI”，Mac 和 Windows 使用同一入口；只启动所选来源的官方授权。完整 CLI 的 `login [zai|bigmodel]` 能力与部分 Desktop 内置旧 CLI 不同，仅有 Z.AI 的旧版本选择 BigModel 时会提示升级，不会改开海外页面。插件优先使用 `~/.local/share/cliworker-now/runtimes/zcode/cli/zcode.cjs` 中已部署的完整 CLI，显式配置的执行路径优先级更高；Windows 安装需对应平台的原生依赖。升级 CLI 不会自动迁移 ZCode Desktop 账号，登录继续写入插件独立的 ZCode 账号目录。
+
+Windows 的原生授权网址会完整打开一次，也可在终端中点击或选择复制；网页打开不代表授权已完成，需按官方网页提示完成登录。
+
 账号发现和执行绑定同一来源；保存选型、新任务、排队出队和续聊都会重新核对账号、模型与强度。换号或退出会阻止旧任务启动，历史任务换号后需新建任务；升级前未记录账号绑定的历史任务也需新建，原对话保留。插件不读取其他 CLI 的凭据，也不继承 Harness API 凭据；旧 `zaiCredentialRef` 配置兼容读取但不生效。旧派生认证快照会按当前自身来源重建，原生账号、历史会话和偏好保留；失效偏好需重新选择。
 
-Antigravity 使用自身原生登录和实时 `agy models` 目录，只展示原生返回的模型及强度变体。账号读取先完成，模型查询的等待或失败不会把已登录账号改为未登录。重复的在途账号读取会合并，后续刷新与执行授权仍读取当前账号。
+Antigravity 使用自身原生登录和实时 `agy models` 目录，只展示原生返回的模型及强度变体。Windows 使用原生 Credential Manager 中当前交互式用户的账号，仅返回安全身份摘要。账号读取先完成，模型查询的等待或失败不会把已登录账号改为未登录。重复的在途账号读取会合并，后续刷新与执行授权仍读取当前账号。
+
+Claude 会显示当前来源：自身配置的本地代理可达时使用代理，代理关闭时使用原生官方账号。代理认证或模型查询失败会明确报错，不自动换号。官方登录／退出只作用于官方账号，保留代理设置；任务启动前固定来源，不在运行中切换。官方 OAuth 模型需同时通过原生身份、模型能力和剩余额度核验；缺少证据时不放行。
 
-当前账号范围边界：Claude／Kimi 的未支持 OAuth 模式及 OpenCode OAuth 暂显示空列表。Claude 自身设置中的 API Key、Kimi 自身 API 配置、MiMo 原生网页登录写入的自身 API 认证，以及可核对的本地配置，按账号列表筛选；保留网页登录附带的官方服务地址。Codex 支持已核验的官方文件账号路径，keyring 或自定义路由缺少范围证据时不放行。MiMo 目前只接受可核验的本地配置，文件／环境插值和远程组织配置需先移除。OpenCode 原生 OAuth 写回缺少账号版本保护，暂只开放自身 API 配置。
+当前账号范围边界：Kimi 原生 managed OAuth 使用自身模型别名、认证目录和可确认的套餐额度；额度为空、未知或耗尽时提示检查账号。其他未核验的 Kimi OAuth 模式及 OpenCode OAuth 暂不开放派遣。Claude 自身设置中的 API Key／Bearer Token、Kimi 自身 API 配置、MiMo 原生网页登录写入的自身 API 认证，以及可核对的本地配置，按账号列表筛选；保留网页登录附带的官方服务地址。Codex 支持已核验的官方文件账号路径，keyring 或自定义路由缺少范围证据时不放行。MiMo 目前只接受可核验的本地配置，文件／环境插值和远程组织配置需先移除。OpenCode 原生 OAuth 写回缺少账号版本保护，暂只开放自身 API 配置。
+
+Codex 能读取模型但当前额度耗尽时，设置明确提示等待额度恢复；认证失效或访问被拒绝单独提示检查登录。两者都保留现有账号和项目偏好，不把原生模型能力当成当前可调用权限。
 
 Kimi 已有有效或可续期的自身原生登录时显示“已登录”及可确认的简短账号 ID；原生未保存邮箱或昵称时不编造，点击“管理登录”打开原生终端；切换账号由用户输入 `/logout` 后再输入 `/login`。账号终端使用独立空目录，不加载用户项目 MCP；原生若显示 Trust 提示，由用户自行确认。只有提供商配置而没有对应令牌时显示未登录，不会自动退出原账号。
 
 Hermes 首次明确打开登录设置后使用插件内独立原生账号目录，自动导入关闭，状态、模型、任务统一绑定该目录；之后退出不会回退到全局旧账号。原全局账号和历史保留，Host 不把其他 CLI 导入凭据作为自身登录证据，不注入 Harness 认证；原生进程按自身权限运行。现有官方安装的已选依赖环境可直接复用，账号操作不触发重新安装。
 
-Hermes 的 Nous 登录按当前原生授权识别，模型来自该账号认证的官方目录及访问权限；无付费权限时仅开放明确免费的可用模型。目录查询不自动续期或生成，当前认证不足原生执行所需的有效期时提示重新登录；不会用旧快照恢复账号。
+Hermes 的 Nous 登录按当前原生授权识别，模型来自该账号认证的官方目录及访问权限；无付费权限时仅开放明确免费的可用模型。Mac 与 Windows 共用自动续期：短期访问令牌临近过期或已过期时，使用同一账号的原生刷新凭据续期，健康令牌不额外启动进程。临时网络问题可刷新重试，只有刷新凭据缺失或明确失效才要求重新登录。续期不调用模型、不切换账号，也不清除额度或冷却限制；不会用旧快照恢复已退出的账号。
 
 Grok 先核对自身官方 Build 访问门禁，再读取认证模型目录并匹配原生模型及强度能力；登录成功或目录 HTTP 200 均不能单独证明调用权限。是否有付费订阅也不能代替服务端门禁结果；未知或拒绝时保持空列表和简短原因，不通过生成请求试探。
 
@@ -317,6 +337,8 @@ pnpm --config.verify-deps-before-run=false build:preview
 
 隔离包输出到 `.cache/preview-package`。先在隔离 profile 验收，确认没有活动任务后，再运行正式构建；避免开发构建影响 Desktop 正在使用的版本。
 
+在 Mac 构建后，可通过 SSH 在自己的 Windows 原生测试机安装隔离依赖、运行定向回归并回传日志与包哈希；见 [Windows 远程测试指南](doc/windows-remote-testing.md)。入口为 `pnpm --config.verifyDepsBeforeRun=false test:windows:remote --config .test-data/windows-remote/config.json`，默认不调用模型或验收 Desktop 界面。
+
 真实 CLI 验收是额外步骤，会使用对应账号与模型额度，不由以上自动测试代替：
 
 ```sh

package/lib/account-models.mjs

@@ -1,7 +1,12 @@
 // Read-only account metadata. Never refresh OAuth, submit prompts, or return
 // credentials, account IDs, headers, endpoint URLs, or raw exception messages.
 const unknown = () => ({ state: 'unknown', source: 'unknown', models: [] })
-const denied = () => ({ state: 'denied', source: 'unknown', models: [] })
+const denied = (denialReason) => ({
+  state: 'denied',
+  source: 'unknown',
+  models: [],
+  ...(denialReason ? { denialReason } : {}),
+})
 const validId = (id) => typeof id === 'string' && !!id && id.length <= 1024 && !/[\s\x00-\x1f]/.test(id)
 const object = (value) => value && typeof value === 'object' && !Array.isArray(value)
 const unavailable = (model) =>
@@ -124,7 +129,7 @@ export async function probeAccountModels(input, options = {}) {
   if (typeof token !== 'string' || !token.trim() || token.trimStart().startsWith('!')) return unknown()
   // Near-expiry credentials cannot reliably finish the query. Do not renew them.
   if (oauth && (typeof credential.expires !== 'number' || credential.expires <= Date.now() + 30000))
-    return denied()
+    return denied('authentication')
   const codex = oauth && ['openai', 'openai-codex'].includes(input.provider)
   // xAI/other subscription catalogs do not expose a verified per-account scope
   // contract here. Do not turn an OAuth login into their whole public catalog.
@@ -142,8 +147,8 @@ export async function probeAccountModels(input, options = {}) {
     if (input.apiType === 'anthropic-messages' && !oauth) {
       // ZCode's native Anthropic factory sends both headers. Other callers keep
       // the ordinary x-api-key contract unless they explicitly mirror that route.
-      if (input.anthropicAuth !== 'api-key-and-bearer') delete headers.Authorization
-      headers['x-api-key'] = token
+      if (!['api-key-and-bearer', 'bearer'].includes(input.anthropicAuth)) delete headers.Authorization
+      if (input.anthropicAuth !== 'bearer') headers['x-api-key'] = token
       headers['anthropic-version'] = '2023-06-01'
     }
     if (codex) {
@@ -179,7 +184,7 @@ export async function probeAccountModels(input, options = {}) {
             : '/models',
         ]) {
       modelResponse = await request(path)
-      if (modelResponse.status === 401 || modelResponse.status === 403) return denied()
+      if (modelResponse.status === 401 || modelResponse.status === 403) return denied('authentication')
       if (modelResponse.status >= 200 && modelResponse.status < 300) break
       if (![404, 405].includes(modelResponse.status)) return unknown()
     }
@@ -191,7 +196,7 @@ export async function probeAccountModels(input, options = {}) {
         return ['invalid_api_key', 'authentication_failed', 'unauthorized', 'forbidden', 401, 403].includes(
           code,
         )
-          ? denied()
+          ? denied('authentication')
           : unknown()
       }
       const models = normalize(envelope, oauth, token)
@@ -199,13 +204,11 @@ export async function probeAccountModels(input, options = {}) {
       if (codex) {
         const usage = await request('/wham/usage')
         const rate = usage.payload?.rate_limit
-        if (
-          usage.status === 401 ||
-          usage.status === 403 ||
-          rate?.allowed === false ||
-          rate?.limit_reached === true
-        )
-          return denied()
+        if (usage.status === 401 || usage.status === 403) return denied('authentication')
+        // Only the authenticated usage response establishes exhausted quota.
+        // Keep an unclassified denial distinct from expiry/401/403 and network failure.
+        if (usage.status === 200 && rate?.limit_reached === true) return denied('quota')
+        if (rate?.allowed === false || rate?.limit_reached === true) return denied()
         // A catalog/menu is not evidence that the account has an executable quota.
         if (usage.status !== 200 || rate?.allowed !== true || rate?.limit_reached !== false) return unknown()
         const plan =