dsh-connect-agnes-token-plan 0.8.0 → 0.8.1

package/CHANGELOG.md

@@ -2,6 +2,16 @@
 
 本文件只记**公开行为变化**（新增能力、破坏性改动、重要修复）。实现细节、重构与测试加固请直接看 `git log`。
 
+## [0.8.1] — 2026-10-03
+
+### 修复：AgnesCode provider 补全思考契约——档位可用，`off` 诚实不提供
+
+- **背景**：AgnesCode 是桌面端上游，v1 一直按「wire 通道未验证」把 `reasoning` 钉成 `false`，DSH 里看不到思考档位。2026-10-03 对真 BFF（`agnes-3.0-flash`）补探 7 发，推翻两条假设。
+- **实测**：`{bffBase}/v1/chat/completions` 在**不发任何思考字段**时仍返回 `message.reasoning_content`（406 字 / 320 reasoning_tokens）——默认即思考开；`reasoning_effort` 的 `none`/`low`/`medium`/`high` 全被接受（都 200）。
+- **关键发现**：`reasoning_effort:"none"` **关不掉思考**（仍回 257 字 / 188 reasoning_tokens）。桌面端真正关思考的开关是 `request_params.agnes_thinking_enabled=false`（或 `thinking_effort:"off"`），而 pi-ai 的档位映射是字符串值、表达不了它。
+- **落地**：descriptor 翻 `reasoning:true` + `agnescodeThinkingLevelMap()`（`off:null` 诚实不提供，避免「点关思考实际还开着」的静默谎言；`low/medium/high` 开；`xhigh/max` 关，BFF 未实测）；profile 钉 `reasoning: DEFAULT_REASONING_EFFORT`（high），与 Token Plan 侧对齐。
+- 影响面：`src/host/{agnescode-models, agnescode-llm-adapter}.ts`、`test/agnescode.test.mjs`、`docs/ROADMAP.md` §6.3、`lib/`（按 ADR-008 重建入库）。
+
 ## [0.8.0] — 2026-10-02
 
 ### 修复：AgnesCode provider 必须进 tab 才启用（mount seed 竞态）

package/README.md

@@ -90,7 +90,7 @@ npm run doctor:json     # 机器读：JSON（可进你的巡检 / 工单脚本
 - [docs/API.md](docs/API.md) — 路由与控制台端点
 - [docs/AGNES-API.md](docs/AGNES-API.md) — Agnes 接口全集（控制台额度侧 + 推理侧）
 - [docs/TESTING.md](docs/TESTING.md) — 测试体系
-- [docs/PITFALLS.md](docs/PITFALLS.md) — 真实踩坑（39 条）
+- [docs/PITFALLS.md](docs/PITFALLS.md) — 真实踩坑（41 条）
 - [CHANGELOG.md](CHANGELOG.md) — 版本变化
 
 AI 协作会话请先读 [AGENTS.md](AGENTS.md)。

package/client.js

@@ -1,4 +1,4 @@
-var dsh_connect_sensenova_token_plan_client = (function() {
+var dsh_connect_agnes_token_plan_client = (function() {
 
 //#region \0rolldown/runtime.js
 	var __esmMin = (fn, res, err) => () => {
@@ -300,8 +300,8 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			"quota.perYear": " / yr",
 			"quota.cycle.monthly": "monthly",
 			"quota.cycle.yearly": "yearly",
-			"quota.unit.requests": "",
-			"quota.unit.images": "",
+			"quota.unit.requests": " times",
+			"quota.unit.images": " images",
 			"quota.used": "Used",
 			"quota.resetAt": "resets {time}",
 			"quota.resetCountdown": "resets in ~{minutes} min",
@@ -587,6 +587,21 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 //#endregion
 //#region src/client/snapshot.ts
 /**
+	* Whether a body is a DATA snapshot, as opposed to a refusal.
+	*
+	* The two `ok` checks in `interpretSnapshot` do the real work — this is the
+	* name for the fact they establish, so the caller types the payload as data
+	* instead of casting through `unknown`. A type predicate still trusts the
+	* wire (the Host owns the shape; `wire.ts` documents that types are loaded,
+	* never enforced at runtime), but it records that `ok:true` was seen, where
+	* `as unknown as` threw that fact away.
+	* @param {unknown} value - the body that reached the `ok:true` branch.
+	* @returns {boolean} whether the value is a data snapshot.
+	*/
+	function isSnapshotData(value) {
+		return typeof value === "object" && value !== null && value.ok === true;
+	}
+	/**
 	* Read one snapshot response into the (data, error) pair the panel renders.
 	*
 	* The Host answers HTTP 200 for every expected outcome and signals the
@@ -614,7 +629,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			error: "unexpected payload"
 		};
 		return {
-			data: payload,
+			data: isSnapshotData(payload) ? payload : null,
 			error: null
 		};
 	}
@@ -666,6 +681,21 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			shapeWarnings: Array.isArray(data?.shapeWarnings) ? data.shapeWarnings : []
 		};
 	}
+	/**
+	* Whether to show the account management section.
+	*
+	* Decision: show the account editor UNCONDITIONALLY whenever the snapshot
+	* carries the Host's auth block. Gating on `hasAccount` / `needsAccount` made
+	* the "middle state" (grant still alive, saved account cleared) a dead end:
+	* the full-screen setup form lives behind `!data`, and the section card
+	* vanished with `hasAccount` — the user was locked out of their own account
+	* with no re-entry path until the grant died. This is a single-point-of-truth
+	* declaration; callers should use `shouldShowAccountManagement(auth)` rather
+	* than duplicating `auth !== null`.
+	*/
+	function shouldShowAccountManagement(auth) {
+		return auth !== null;
+	}
 	var GUIDANCE_BY_CODE, FORM_EXCLUDED_CODES, CLIENT_CODE, COOLDOWN_TEXT, REFUSAL_TEXT;
 	var init_snapshot = __esmMin((() => {
 		init_format();
@@ -769,7 +799,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			tabActive: {
 				color: "var(--dsw-alias-label-primary)",
 				fontWeight: 600,
-				borderBottom: "2px solid var(--agnes-brand, #6C5CE7)"
+				borderBottom: "2px solid var(--agnes-brand, #1E40AF)"
 			},
 			updated: {
 				color: "var(--dsw-alias-label-secondary)",
@@ -946,7 +976,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			barFill: {
 				height: "100%",
 				borderRadius: 3,
-				background: "var(--agnes-brand, #6C5CE7)"
+				background: "var(--agnes-brand, #1E40AF)"
 			},
 			barFillWarn: { background: "var(--dsw-alias-state-warn-primary)" },
 			barFillError: { background: "var(--dsw-alias-state-error-primary)" },
@@ -1082,7 +1112,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 				width: "100%",
 				minHeight: 2,
 				borderRadius: 2,
-				background: "var(--agnes-brand, #6C5CE7)"
+				background: "var(--agnes-brand, #1E40AF)"
 			},
 			usageAxis: {
 				display: "flex",
@@ -1208,7 +1238,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 				width: 15,
 				height: 15,
 				cursor: "pointer",
-				accentColor: "var(--agnes-brand, #6C5CE7)",
+				accentColor: "var(--agnes-brand, #1E40AF)",
 				margin: 0
 			},
 			modelName: {
@@ -2642,6 +2672,42 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 //#endregion
 //#region src/client/agnescode-tab.ts
 /**
+	* The tab's rendering decisions, lifted out of the JSX so they can be nailed.
+	*
+	* Three decisions here were each a REAL repair, and each is explained in a
+	* comment at its old site — but none of them had a test, so the next person to
+	* "simplify" the JSX could undo any of them silently. Same shape as `barPlan`
+	* in `panel-page.ts`: the decision is a pure function of (state, error), so the
+	* suite drives it directly instead of scraping a layout.
+	*
+	* The three, in the order they were learned:
+	*
+	*  1. `showError` — a route that ANSWERS with a failure is not "no local login
+	*     state". Naming the status is what stops a broken Host route from looking
+	*     exactly like a signed-out desktop App.
+	*  2. `credentialCard` — withheld ONLY while a failed read leaves us knowing
+	*     NOTHING (`state === null`). Then `linked` is false and the unlinked copy
+	*     would accuse the reader's desktop App of not being signed in — a claim
+	*     this tab has no evidence for. Once ANY reading has landed, the card stays
+	*     up through a later failed poll: the honest statement is the error line
+	*     plus the LAST KNOWN account, not a blank. (`load` therefore never calls
+	*     `setState(null)` — clearing on failure is exactly the regression this
+	*     pins.)
+	*  3. `linked` — reads `loggedIn` off the state, never inferred from the
+	*     absence of an error.
+	*
+	* @param {AgnescodeState|null} state - the last body the route answered, if any.
+	* @param {string|null} error - the last read failure, if any.
+	* @returns {{showError: boolean, credentialCard: boolean, linked: boolean}}
+	*/
+	function agnescodeView(state, error) {
+		return {
+			showError: error !== null,
+			credentialCard: !(state === null && error !== null),
+			linked: state?.loggedIn === true
+		};
+	}
+	/**
 	* The AgnesCode tab body.
 	* @param {object} props
 	* @param {Tt} props.tt - the dictionary.
@@ -2765,7 +2831,8 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			if (alive.current) load();
 		}, [load]);
 		const enabled = state?.enabled === true;
-		const loggedIn = state?.loggedIn === true;
+		const view = agnescodeView(state, error);
+		const loggedIn = view.linked;
 		const models = Array.isArray(state?.models) ? state.models : [];
 		const attempts = Array.isArray(state?.harvest?.attempts) ? state.harvest.attempts : [];
 		const balance = state?.balance ?? null;
@@ -2773,7 +2840,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			fontSize: 12,
 			color: "var(--dsw-alias-label-secondary)",
 			marginBottom: 12
-		} }, tt("agnescode.desc")), error !== null ? h("div", {
+		} }, tt("agnescode.desc")), view.showError ? h("div", {
 			style: S.formError,
 			role: "alert"
 		}, format(tt("agnescode.error"), { error })) : null, h("label", { style: {
@@ -2805,7 +2872,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 		} }, tt("agnescode.awaitingHarvest")) : state.providerRegistered === true ? null : h("div", { style: {
 			...S.muted,
 			fontSize: 12
-		} }, tt("agnescode.unregistered")) : null, state === null && error !== null ? null : h("div", { style: {
+		} }, tt("agnescode.unregistered")) : null, view.credentialCard ? h("div", { style: {
 			...S.card,
 			marginTop: 4
 		} }, loggedIn ? h("div", null, h("div", { style: {
@@ -2842,7 +2909,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			},
 			onClick: () => void harvest(),
 			disabled: harvestBusy
-		}, harvestBusy ? tt("agnescode.harvesting") : tt("agnescode.harvest")))), attempts.length > 0 ? h("div", {
+		}, harvestBusy ? tt("agnescode.harvesting") : tt("agnescode.harvest")))) : null, attempts.length > 0 ? h("div", {
 			style: {
 				...S.muted,
 				fontSize: 12,
@@ -3258,7 +3325,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 			style: S.chip,
 			title: auth.error || guidance || ""
 		}, tt("auth.needsLogin")) : h("span", { style: S.chip }, tt("auth.selfRenew"));
-		const authManage = auth !== null;
+		const authManage = shouldShowAccountManagement(auth);
 		const tabBar = h("div", {
 			style: S.tabBar,
 			role: "tablist"
@@ -3546,6 +3613,7 @@ var dsh_connect_sensenova_token_plan_client = (function() {
 				viewOf,
 				errorOfStatus,
 				barPlan,
+				agnescodeView,
 				dictionaries: Object.freeze({
 					zh,
 					en

package/lib/agnescode-llm-adapter-BmiNipn7.js

@@ -0,0 +1,104 @@
+import { t as DEFAULT_REASONING_EFFORT, w as name } from "./llm-models-BZfJOFax.js";
+import { i as buildAgnescodeDescriptors, n as AGNESCODE_PROVIDER_ID, r as agnescodeRoster, t as AGNESCODE_DISPLAY_NAME } from "./agnescode-models-w02GyYgT.js";
+import { i as buildRetryPolicyConfig, n as STREAM_IDLE_TIMEOUT_MS, r as createWrappedPiAiAdapter, t as REQUEST_IMAGE_BUDGETS } from "./pi-ai-adapter-core-D0iGPjK-.js";
+import { createProvider } from "@earendil-works/pi-ai";
+import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
+import { resolveRetryPolicy } from "@deepseek-ai/dsh-llm";
+
+//#region src/host/agnescode-llm-adapter.ts
+/**
+* The peer-dependent half of the directly-registered AgnesCode provider —
+* the desktop-app upstream (ROADMAP §6.3).
+*
+* ONE `PiAiAdapter` carrying ONE profile (`agnescode` → the credential's
+* per-account BFF base), an INERT pi-ai auth plane (the AgnesCode JWT is
+* resolved per request from the plugin's own credential store, pi-ai never
+* manufactures it), and no token baked into the profile — the picker
+* advertises models without one and a request fails at resolve time, where the
+* panel status is visible.
+*
+* Both IMAGE hooks are wired, exactly as the Token Plan adapter
+* (`llm-adapter.ts`) wires them — the shape a working vision route has. The
+* catalogue still declares no modality field (`model_type: "text"`), so the
+* vision CLAIM is borrowed from `PROBED_VISION` in the peer-free
+* `agnescode-models.ts` (the Agnes family is the same gateway the Token Plan
+* side probed accepting `image_url`); the descriptor's `input` and the adapter's
+* hooks must agree, or a message carrying an image reaches the durable
+* attachment service with no way to locate the image and fails. Wiring the
+* hooks without the claim would be inert; making the claim without the hooks is
+* the bug this closes.
+*
+* The descriptor mapping lives in the peer-free `agnescode-models.ts`, so this
+* module holds only assembly against the runtime and is exercised by the
+* wiring/e2e checks, exactly as `llm-adapter.ts` is. The assembly MECHANISM
+* itself (auth plane, image budgets/hooks, 429 correction) is shared with the
+* Token Plan route through `pi-ai-adapter-core.ts` — what stays here is the
+* AgnesCode configuration: provider id, model builder, credential resolver, and
+* a profile that pins the SAME effort default as the Token Plan route (probed
+* live 2026-10-03: the BFF accepts `reasoning_effort` and defaults thinking ON,
+* so an unselected effort must not reach pi-ai as "no effort").
+*
+* @module dsh-connect-agnes-token-plan/agnescode-llm-adapter
+*/
+/**
+* Assemble the AgnesCode adapter for one credential/catalogue snapshot.
+*
+* A fresh instance per rebuild is deliberate: `PiAiAdapter` memoizes the
+* profiles snapshot internally, so the caller REPLACES the registered
+* adapter when the credential or catalogue changes and emits
+* `llm/adapters-updated`.
+* @param {object} options - wiring.
+* @param {object[]} [options.rows] - the AgnesCode roster rows (`agnescodeRoster`).
+* @param {string} options.bffBase - the credential's pinned per-account BFF base.
+* @param {() => Promise<string>} options.resolveToken - resolves the live
+*   AgnesCode JWT per request (re-harvested by the caller when expired).
+* @param {(service: string) => unknown} [options.get] - service resolver for
+*   the image hooks (`attachments`, `fs`); resolved lazily per request because
+*   a service may register after this adapter is built.
+* @returns {{adapter: object, providerIds: string[]}} the adapter and the ids
+*   it owns.
+*/
+function createAgnescodeAdapter({ rows, bffBase, resolveToken, get } = {}) {
+	const models = buildAgnescodeDescriptors(rows ?? agnescodeRoster(null), { bffBase: String(bffBase ?? "") });
+	const provider = {
+		...createProvider({
+			id: AGNESCODE_PROVIDER_ID,
+			name: AGNESCODE_DISPLAY_NAME,
+			auth: { apiKey: {
+				name: "AgnesCode access token",
+				async resolve({ credential } = {}) {
+					const token = credential?.key;
+					return token === void 0 || token === "" ? void 0 : {
+						auth: { apiKey: token },
+						source: AGNESCODE_DISPLAY_NAME
+					};
+				}
+			} },
+			models,
+			api: openAICompletionsApi()
+		}),
+		getModels: () => models
+	};
+	const profiles = /* @__PURE__ */ new Map([[AGNESCODE_PROVIDER_ID, {
+		provider: AGNESCODE_PROVIDER_ID,
+		displayName: AGNESCODE_DISPLAY_NAME,
+		streamIdleTimeoutMs: STREAM_IDLE_TIMEOUT_MS,
+		retryPolicy: resolveRetryPolicy(buildRetryPolicyConfig(), `${name}.${AGNESCODE_PROVIDER_ID}.retryPolicy`),
+		configuredMaxTokens: /* @__PURE__ */ new Map(),
+		modelErrors: /* @__PURE__ */ new Map(),
+		reasoning: DEFAULT_REASONING_EFFORT,
+		...REQUEST_IMAGE_BUDGETS,
+		piProvider: provider
+	}]]);
+	return {
+		adapter: createWrappedPiAiAdapter({
+			profiles,
+			resolveApiKey: async () => resolveToken?.() ?? "",
+			get
+		}),
+		providerIds: [AGNESCODE_PROVIDER_ID]
+	};
+}
+
+//#endregion
+export { createAgnescodeAdapter };

package/lib/{agnescode-models-eTXfaiwF.js → agnescode-models-w02GyYgT.js}

@@ -1,4 +1,4 @@
-import { D as num, N as str, i as PROBED_VISION, k as obj, w as name } from "./llm-models-CvWAbIG8.js";
+import { D as num, P as str, i as PROBED_VISION, k as obj, w as name } from "./llm-models-BZfJOFax.js";
 import { mkdir, readFile, rename, rm, writeFile } from "node:fs/promises";
 import { join } from "node:path";
 import { homedir } from "node:os";
@@ -610,8 +610,8 @@ function parse(raw) {
 * @typedef {object} CatalogStore
 * @property {() => Promise<object[]>} list - stored entries, `[]` when none usable.
 * @property {() => Promise<string[]>} listEnabledIds - allow-list; `[]` means "no filter".
-* @property {(entries: object[], enabledModelIds?: string[]) => Promise<void>} replace - swap the catalog, preserving the allow-list unless given a new one.
-* @property {(ids: string[]) => Promise<void>} setEnabledIds - swap ONLY the allow-list.
+* @property {(entries: object[], enabledModelIds?: string[]) => Promise<boolean>} replace - swap the catalog, preserving the allow-list unless given a new one; returns whether the record actually reached disk.
+* @property {(ids: string[]) => Promise<boolean>} setEnabledIds - swap ONLY the allow-list; same return contract.
 * @property {() => Promise<void>} clear - remove the stored catalog.
 */
 /**
@@ -662,15 +662,23 @@ function createFileCatalogStore(options = {}) {
 	* The temp path is process-plus-clock unique (`state-store.ts`'s
 	* `temporaryOf`), so two Host processes sharing this directory never write
 	* the same temp name and `rename` each other's half-written file away.
+	*
+	* Returns whether the record actually reached disk. The failure is still
+	* swallowed — a read-only Home must not break the panel — but the caller has
+	* to know it happened: an in-memory record the disk does not hold must not
+	* be treated as settled (PITFALLS §40).
+	* @returns {Promise<boolean>} `true` when disk now holds `held`, `false` when the write failed.
 	*/
 	const persist = async () => {
-		if (held === null) return;
+		if (held === null) return true;
 		const temporary = temporaryOf(stateDir$1, "catalog.json", now);
 		try {
 			await ensureStateDir(stateDir$1);
 			await writeStateFile(file, JSON.stringify(held), { temporary });
+			return true;
 		} catch {
 			await rm(temporary, { force: true }).catch(() => {});
+			return false;
 		}
 	};
 	return {
@@ -699,7 +707,7 @@ function createFileCatalogStore(options = {}) {
 		* PRESERVED across a catalog refresh unless a new one is supplied.
 		* @param {object[]} entries - the fresh catalog entries.
 		* @param {string[]} [enabledModelIds] - an optional replacement allow-list.
-		* @returns {Promise<void>}
+		* @returns {Promise<boolean>} whether the record reached disk.
 		*/
 		async replace(entries, enabledModelIds) {
 			const current = await seen();
@@ -711,9 +719,12 @@ function createFileCatalogStore(options = {}) {
 				enabledModelIds: enabledModelIds === void 0 ? kept : normalizeEnabledIds(enabledModelIds)
 			};
 			cache.remember(held);
-			await persist();
+			return persist();
 		},
-		/** Replace ONLY the curated allow-list, keeping the cached catalog. */
+		/**
+		* Replace ONLY the curated allow-list, keeping the cached catalog.
+		* @returns {Promise<boolean>} whether the record reached disk.
+		*/
 		async setEnabledIds(ids) {
 			const current = await seen();
 			const entries = current === null ? [] : current.entries;
@@ -725,7 +736,7 @@ function createFileCatalogStore(options = {}) {
 				enabledModelIds: normalizeEnabledIds(ids)
 			};
 			cache.remember(held);
-			await persist();
+			return persist();
 		},
 		/** Remove the stored catalog (used when the API key is forgotten). */
 		async clear() {
@@ -1394,12 +1405,19 @@ const AGNESCODE_FALLBACK_MODELS = Object.freeze([
 * is the peer-dependent half.
 *
 * Three decisions carried here:
-*   1. `reasoning: false` — the catalogue rows declare a `thinking_toggle`
-*      (default ON), but the WIRE field that would control it from OpenAI
-*      chat is UNVERIFIED (ROADMAP §6.3). Offering a thinking selector would
-*      promise something the descriptor cannot emit; the honest v1 shape is
-*      "no toggle; the BFF defaults to thinking ON". A stated limitation, not
-*      an oversight.
+*   1. `reasoning: true` + a BFF-specific `thinkingLevelMap` — probed LIVE on
+*      2026-10-03 against the per-account BFF (`agnes-3.0-flash`,
+*      `{bffBase}/v1/chat/completions`): the OpenAI-compatible `reasoning_effort`
+*      ladder `none`/`low`/`medium`/`high` is ACCEPTED (HTTP 200 under every
+*      one) and the BFF returns `message.reasoning_content` under each — even
+*      with NO thinking field at all (the v1 shape), which is why v1's
+*      `reasoning: false` never actually turned thinking off, it only hid the
+*      selector. `off` is `null` on purpose: `reasoning_effort:"none"` does NOT
+*      disable thinking (still 188 reasoning tokens), and the desktop App's real
+*      off switch (`request_params.agnes_thinking_enabled:false`) is not
+*      expressible in pi-ai's string-valued map. Offering "off" would promise
+*      "thinking off" and deliver "still thinking". `xhigh`/`max` stay closed
+*      until a probe proves them on the BFF.
 *   2. The base URL is PER-ACCOUNT (`bffPublicBaseUrl` from the session
 *      file), so it rides through the builder's options instead of a module
 *      constant — the reference reverse-proxy's hardcoded `.com` constant is
@@ -1515,6 +1533,33 @@ function filterAgnescodeRows(rows, enabledIds) {
 	return list.filter((row) => keep.has(str(row?.id, "")));
 }
 /**
+* The thinking level map this provider offers, keyed on pi-ai's ladder.
+*
+* The BFF's `reasoning_effort` ladder was probed live on 2026-10-03
+* (`agnes-3.0-flash`): `none`/`low`/`medium`/`high` are all ACCEPTED (HTTP 200)
+* — but `none` does NOT disable thinking (the response still carried
+* `reasoning_content`, 188 reasoning tokens). The desktop App's real off switch
+* is `request_params.agnes_thinking_enabled:false` (or
+* `request_params.thinking_effort:"off"`), which a string-valued thinking map
+* cannot emit. So `off` is DELIBERATELY `null`: offering it would promise
+* "thinking off" and deliver "still thinking" — the same class of silent lie
+* `docs/DSH-LLM-DEVELOP.md` §4 warns about for the opposite direction. The
+* levels pi-ai actually sends (`low`/`medium`/`high`) are the ones probed 200.
+* `xhigh`/`max` stay closed until a probe proves them on the BFF.
+* @returns {object} the level → wire-spelling map.
+*/
+function agnescodeThinkingLevelMap() {
+	return {
+		off: null,
+		minimal: null,
+		low: "low",
+		medium: "medium",
+		high: "high",
+		xhigh: null,
+		max: null
+	};
+}
+/**
 * Map one AgnesCode row onto the pi-ai model descriptor the adapter offers.
 * @param {object} row - an {@link agnescodeRoster} row (must carry `id`).
 * @param {object} [options] - `{ bffBase }` — the pinned per-account base.
@@ -1533,7 +1578,8 @@ function agnescodeToDescriptor(row, options = {}) {
 		provider: AGNESCODE_PROVIDER_ID,
 		baseUrl: bffBase,
 		input: vision ? ["text", "image"] : ["text"],
-		reasoning: false,
+		reasoning: true,
+		thinkingLevelMap: agnescodeThinkingLevelMap(),
 		cost: { ...NO_COST },
 		contextWindow: num(row?.contextWindow) ?? 512e3,
 		maxTokens: num(row?.maxOutputLength) ?? 32e3,