dsh-oauth-login 0.2.4

package/src/client/locales.ts

@@ -0,0 +1,176 @@
+export const en = {
+  nav: 'Subscription Login',
+  title: 'Subscription Login',
+  loadingAccount: 'Loading accounts…',
+  signedOut: 'Not signed in',
+  signingIn: 'Waiting for authorization…',
+  waitingForCredential: 'Waiting for a Plan API key…',
+  waitingForCallback: 'Waiting for the authorization callback…',
+  waitingForAuthInput: 'Waiting for authorization details…',
+  signedIn: 'Signed in',
+  login: 'Sign in',
+  connectPlan: 'Connect plan',
+  loginAgain: 'Sign in again',
+  reopenAuthorization: 'Reopen authorization',
+  cancelLogin: 'Cancel',
+  logout: 'Sign out',
+  working: 'Working…',
+  userCode: 'Code',
+  openUrl: 'Authorize',
+  openPlanPage: 'Plan page',
+  credentialHelp: 'Create or copy the provider-specific Plan API key, then paste it here. It stays in DSH’s private credential file.',
+  credentialPlaceholder: 'Paste Plan API key',
+  saveCredential: 'Save and connect',
+  credentialRequired: 'Paste the Plan API key first.',
+  callbackHelp: 'Paste the complete callback URL from the browser after authorization. DSH uses it only to finish this sign-in.',
+  callbackPlaceholder: 'Paste the callback URL',
+  submitCallback: 'Complete sign-in',
+  callbackRequired: 'Paste the callback URL first.',
+  authInputHelp: 'Enter the value requested by the provider to continue authorization.',
+  authInputPlaceholder: 'Enter authorization value',
+  submitAuthInput: 'Continue',
+  authInputRequired: 'Enter the requested authorization value first.',
+  requestFailed: 'The login request failed.',
+  proxyTitle: 'Network proxy',
+  proxyScope: 'Only applies to requests made by this subscription plugin. Does not change your system or browser proxy.',
+  proxyLoading: 'Loading network settings…',
+  proxyHttpEnabled: 'Use a proxy for HTTP',
+  proxyWsEnabled: 'Use a proxy for WebSocket',
+  proxyHttpHelp: 'Login, token refresh, model requests over HTTPS / SSE, and model catalogs.',
+  proxyWsHelp: 'Model WebSocket connections. This switch controls proxy routing; it does not disable WebSocket itself.',
+  proxyAddress: 'Proxy address (HTTP / HTTPS)',
+  proxyPort: 'Port',
+  proxyPortPlaceholder: 'e.g. 45678',
+  proxyDirect: 'Off: connect directly, ignoring proxy environment variables. The address is kept for later.',
+  proxyAuto: 'Default address with no port: keep automatic environment / system proxy discovery; connect directly if none is found. Port 80 is not assumed.',
+  proxyExplicit: 'Use this HTTP(S) CONNECT proxy instead of the automatically detected one. SOCKS-only ports are not supported.',
+  proxyApplyHelp: 'Saving applies to new requests without interrupting a running call. Sessions already using SSE stay on SSE. Original retry limits are unchanged.',
+  proxySave: 'Save network settings',
+  proxyReload: 'Reload settings',
+  proxySaved: 'Saved. New requests use these settings.',
+  proxyLoadFailed: 'Network settings could not be loaded. Reload, or activate the updated plugin backend.',
+  proxySaveFailed: 'Could not confirm that network settings were saved. Reload to check their current state.',
+  proxyInvalid: 'Enter an HTTP(S) proxy address without credentials or a path, and a port from 1 to 65535. If both fields specify a port, they must match.',
+  proxyConflict: 'Another page changed these settings. Reload before saving again.',
+} as const
+
+export type PiLoginKey = keyof typeof en
+
+export const zh: { [Key in PiLoginKey]: string } = {
+  nav: '订阅登录',
+  title: '订阅登录',
+  loadingAccount: '正在加载账户…',
+  signedOut: '尚未登录',
+  signingIn: '正在等待授权…',
+  waitingForCredential: '等待输入套餐 API Key…',
+  waitingForCallback: '等待输入授权回调地址…',
+  waitingForAuthInput: '等待输入授权信息…',
+  signedIn: '已登录',
+  login: '登录',
+  connectPlan: '连接套餐',
+  loginAgain: '重新登录',
+  reopenAuthorization: '重新打开授权页',
+  cancelLogin: '取消',
+  logout: '退出',
+  working: '处理中…',
+  userCode: '授权码',
+  openUrl: '授权',
+  openPlanPage: '套餐页面',
+  credentialHelp: '请在套餐页新建或复制专用 API Key，再粘贴到这里。密钥只保存在 DSH 的私有凭据文件中。',
+  credentialPlaceholder: '粘贴套餐 API Key',
+  saveCredential: '保存并连接',
+  credentialRequired: '请先粘贴套餐 API Key。',
+  callbackHelp: '请在浏览器完成授权后，复制完整的回调地址并粘贴到这里。DSH 只用它完成本次登录。',
+  callbackPlaceholder: '粘贴授权回调地址',
+  submitCallback: '完成登录',
+  callbackRequired: '请先粘贴授权回调地址。',
+  authInputHelp: '请输入服务商要求的内容以继续授权。',
+  authInputPlaceholder: '输入授权信息',
+  submitAuthInput: '继续',
+  authInputRequired: '请先输入服务商要求的授权信息。',
+  requestFailed: '登录请求失败。',
+  proxyTitle: '网络代理',
+  proxyScope: '仅影响本订阅插件发出的请求，不修改系统或浏览器代理。',
+  proxyLoading: '正在加载网络设置…',
+  proxyHttpEnabled: 'HTTP 使用代理',
+  proxyWsEnabled: 'WebSocket 使用代理',
+  proxyHttpHelp: '用于登录、令牌刷新、HTTPS / SSE 模型请求和模型列表。',
+  proxyWsHelp: '用于模型的 WebSocket 连接。此开关只控制是否走代理，不关闭 WebSocket 本身。',
+  proxyAddress: '代理地址（HTTP / HTTPS）',
+  proxyPort: '端口',
+  proxyPortPlaceholder: '例如 45678',
+  proxyDirect: '已关闭：直接连接，忽略代理环境变量。保留地址，方便下次开启。',
+  proxyAuto: '默认地址、端口留空：沿用环境变量、系统代理等自动发现；没有找到代理时直连，不会默认使用 80 端口。',
+  proxyExplicit: '优先使用此 HTTP(S) CONNECT 代理，不使用自动发现的地址。不支持纯 SOCKS 端口。',
+  proxyApplyHelp: '保存后用于新请求，不中断正在进行的调用。已降级的会话继续使用 SSE，原有重试上限不变。',
+  proxySave: '保存网络设置',
+  proxyReload: '重新加载',
+  proxySaved: '已保存，新请求将使用这些设置。',
+  proxyLoadFailed: '网络设置加载失败。请重新加载，或先启用更新后的插件服务端。',
+  proxySaveFailed: '未能确认网络设置已保存，请重新加载后检查当前设置。',
+  proxyInvalid: '请填写不含账号密码或路径的 HTTP(S) 代理地址，端口为 1–65535。若地址中也有端口，须与端口栏一致。',
+  proxyConflict: '其他页面已修改设置，请重新加载后再保存。',
+}
+
+/** `model-search` namespace: copy for the searchable composer model seat. */
+export const searchEn = {
+  placeholder: 'Search models…',
+  aria: 'Filter models',
+  empty: 'No models match “{query}”.',
+  all: 'All',
+  freeOnly: 'Free only',
+  freeFilterAria: 'Model price filter (OpenRouter)',
+  free: 'Free · Rate limited',
+  freeCached: 'Free (cached) · Recheck pending',
+  freeEnded: 'Free offer ended · Paid calls blocked',
+  freeUnknown: 'Price unconfirmed · Free guard active',
+  tools: 'Tool calling',
+  chatOnly: 'Chat only',
+  context: '{tokens} context',
+  emptyFree: 'No matching free OpenRouter models. Clear the search or refresh the catalog.',
+  syncSchedule: 'OpenRouter · Sync every 15 min',
+  syncing: 'Syncing models…',
+  syncSignIn: 'Sign in to OpenRouter to sync models.',
+  syncRefresh: 'Refresh models',
+  syncCooldown: 'Refreshed within 60s',
+  syncUpdated: 'Last synced',
+  syncStale: 'Cached · Refresh needed',
+  syncBuiltin: 'Not synced yet; using built-in models.',
+  syncError: 'Sync failed. Keeping the previous list; retry later.',
+  syncSaveError: 'Could not save the safe catalog cache. Keeping the previous list; check DSH disk permissions.',
+  syncRestart: 'Restart DSH to activate the new model-sync backend.',
+  freeHelp: 'Free models have rate and daily limits. Unavailable models never fall back to paid ones.',
+  forcedPluginWarning: 'Disable account-enforced paid OpenRouter plugins: DSH cannot override platform-enforced charges.',
+} as const
+
+export type ModelSearchKey = keyof typeof searchEn
+
+export const searchZh: { [Key in ModelSearchKey]: string } = {
+  placeholder: '搜索模型…',
+  aria: '筛选模型',
+  empty: '没有匹配“{query}”的模型。',
+  all: '全部',
+  freeOnly: '仅免费',
+  freeFilterAria: '模型价格筛选（OpenRouter）',
+  free: '免费 · 有限额',
+  freeCached: '免费缓存 · 待更新',
+  freeEnded: '免费已结束 · 付费已拦截',
+  freeUnknown: '价格未确认 · 免费保护中',
+  tools: '支持工具调用',
+  chatOnly: '仅聊天',
+  context: '{tokens} 上下文',
+  emptyFree: '没有匹配的 OpenRouter 免费模型。请清空搜索或刷新列表。',
+  syncSchedule: 'OpenRouter · 每 15 分钟同步',
+  syncing: '正在同步模型…',
+  syncSignIn: '登录 OpenRouter 后自动同步模型。',
+  syncRefresh: '刷新模型',
+  syncCooldown: '60 秒内已刷新',
+  syncUpdated: '上次同步',
+  syncStale: '缓存待更新',
+  syncBuiltin: '尚未同步，暂用内置模型列表。',
+  syncError: '同步失败，保留上次列表；请稍后重试。',
+  syncSaveError: '安全缓存保存失败，保留上次列表；请检查 DSH 目录写入权限。',
+  syncRestart: '请重启 DSH，启用新的模型同步服务。',
+  freeHelp: '免费模型有速率和每日限额；不可用时不会切换到付费模型。',
+  forcedPluginWarning: '请关闭 OpenRouter 账户强制启用的收费插件；平台强制规则不能由 DSH 覆盖。',
+}

package/src/client/login-input-copy.ts

@@ -0,0 +1,34 @@
+import type { PiLoginKey } from './locales.ts'
+
+export type LoginAuthType = 'oauth' | 'api_key'
+export type LoginChallengeType = 'secret' | 'text' | 'manual_code'
+
+export interface LoginInputCopy {
+  waiting: PiLoginKey
+  help: PiLoginKey
+  placeholder: PiLoginKey
+  action: PiLoginKey
+  required: PiLoginKey
+}
+
+const PLAN_COPY: LoginInputCopy = {
+  waiting: 'waitingForCredential', help: 'credentialHelp', placeholder: 'credentialPlaceholder',
+  action: 'saveCredential', required: 'credentialRequired',
+}
+
+const CALLBACK_COPY: LoginInputCopy = {
+  waiting: 'waitingForCallback', help: 'callbackHelp', placeholder: 'callbackPlaceholder',
+  action: 'submitCallback', required: 'callbackRequired',
+}
+
+const AUTH_INPUT_COPY: LoginInputCopy = {
+  waiting: 'waitingForAuthInput', help: 'authInputHelp', placeholder: 'authInputPlaceholder',
+  action: 'submitAuthInput', required: 'authInputRequired',
+}
+
+/** Select visible copy from the provider contract and the actual Pi challenge. */
+export function loginInputCopy(authType: LoginAuthType, challengeType: LoginChallengeType): LoginInputCopy {
+  if (authType === 'api_key') return PLAN_COPY
+  if (challengeType === 'manual_code') return CALLBACK_COPY
+  return AUTH_INPUT_COPY
+}

package/src/client/login-window.ts

@@ -0,0 +1,24 @@
+export interface LoginPopup {
+  close(): void
+  location: { replace(url: string): void }
+}
+
+export type LoginUrlOpener = (url: string) => void
+
+/** Deliver a login challenge even when an Electron shell rejects the reserved about:blank popup. */
+export function openLoginChallenge(
+  popup: LoginPopup | null,
+  url: string | undefined,
+  openUrl: LoginUrlOpener,
+): 'reserved' | 'fallback' | 'none' {
+  if (url === undefined) {
+    popup?.close()
+    return 'none'
+  }
+  if (popup !== null) {
+    popup.location.replace(url)
+    return 'reserved'
+  }
+  openUrl(url)
+  return 'fallback'
+}

package/src/client/model-filter.ts

@@ -0,0 +1,45 @@
+/**
+ * Pure filtering for the searchable composer model seat. Kept free of React
+ * so the unit suite can exercise it without a DOM.
+ */
+
+/** Minimal structural mirror of the host model catalog row (no runtime import). */
+export interface FilterModel {
+  id: string
+  name: string
+  description?: string
+}
+
+/** Minimal structural mirror of one provider group. */
+export interface FilterGroup {
+  id: string
+  name: string
+  models: readonly FilterModel[]
+}
+
+/**
+ * Case-insensitive substring filter over model name, model id, and provider
+ * name. Blank queries return the input unchanged (same array identity).
+ * Groups whose every model is filtered out disappear; relative order holds.
+ * @param groups - provider groups from the shared directory snapshot.
+ * @param query - raw user text; trimmed and lowercased here.
+ * @returns the filtered groups.
+ */
+export function filterGroups(
+  groups: readonly FilterGroup[],
+  query: string,
+  freeModels?: ReadonlySet<string>,
+): readonly FilterGroup[] {
+  const q = query.trim().toLowerCase()
+  if (q === '' && freeModels === undefined) return groups
+  const out: FilterGroup[] = []
+  for (const group of groups) {
+    if (freeModels !== undefined && group.id !== 'pi-openrouter') continue
+    const groupHit = group.name.toLowerCase().includes(q)
+    const matches = groupHit ? group.models : group.models.filter(model =>
+      model.name.toLowerCase().includes(q) || model.id.toLowerCase().includes(q))
+    const models = freeModels === undefined ? matches : matches.filter(model => freeModels.has(model.id))
+    if (models.length > 0) out.push({ ...group, models })
+  }
+  return out
+}

package/src/client/openrouter-store.ts

@@ -0,0 +1,122 @@
+import { OPENROUTER_CATALOG_PATH, OPENROUTER_REFRESH_PATH } from '../openrouter-types.ts'
+import type { OpenRouterCatalogSnapshot } from '../openrouter-types.ts'
+
+export interface OpenRouterClientState {
+  data: OpenRouterCatalogSnapshot | null
+  loading: boolean
+  error: 'unavailable' | 'restart' | null
+}
+
+function validSnapshot(value: unknown): value is OpenRouterCatalogSnapshot {
+  if (typeof value !== 'object' || value === null) return false
+  const data = value as Record<string, unknown>
+  const timestamp = (entry: unknown) => entry === null
+    || typeof entry === 'number' && Number.isFinite(entry) && entry > 0 && entry <= 8.64e15
+  if (data.version !== 1 || typeof data.connected !== 'boolean'
+    || typeof data.refreshing !== 'boolean' || typeof data.stale !== 'boolean'
+    || !timestamp(data.lastUpdatedAt) || !timestamp(data.lastAttemptAt)
+    || !timestamp(data.nextRefreshAt) || !timestamp(data.retryAt)
+    || !Array.isArray(data.models) || data.models.length > 10_000) return false
+  return data.models.every((entry: unknown) => {
+    if (typeof entry !== 'object' || entry === null) return false
+    const model = entry as Record<string, unknown>
+    return typeof model.id === 'string' && typeof model.name === 'string'
+      && typeof model.tools === 'boolean' && typeof model.freeOnly === 'boolean'
+      && typeof model.contextWindow === 'number' && Number.isFinite(model.contextWindow)
+      && ['free', 'paid', 'unknown'].includes(String(model.priceStatus))
+  })
+}
+
+/** One metadata store/poll per browser plugin, shared by settings and menus. */
+export class OpenRouterCatalogClient {
+  private state: OpenRouterClientState = { data: null, loading: false, error: null }
+  private readonly listeners = new Set<() => void>()
+  private pending: Promise<void> | undefined
+  private controller: AbortController | undefined
+  private poll: ReturnType<typeof setTimeout> | undefined
+  private lastRead = -Infinity
+  private disposed = false
+
+  constructor(private readonly request: typeof globalThis.fetch = (...args) => globalThis.fetch(...args)) {}
+
+  getSnapshot = (): OpenRouterClientState => this.state
+  subscribe = (listener: () => void): (() => void) => {
+    this.listeners.add(listener)
+    if (this.listeners.size === 1 && !this.disposed) void this.load()
+    return () => {
+      this.listeners.delete(listener)
+      if (this.listeners.size === 0) {
+        clearTimeout(this.poll)
+        this.poll = undefined
+      }
+    }
+  }
+  private update(state: OpenRouterClientState): void {
+    this.state = state
+    for (const listener of this.listeners) listener()
+  }
+  private failed(error: OpenRouterClientState['error']): void {
+    if (this.disposed) return
+    this.update({ ...this.state, error,
+      data: this.state.data === null ? null : { ...this.state.data, stale: true },
+    })
+  }
+
+  load = (force = false): Promise<void> => {
+    if (this.disposed) return Promise.resolve()
+    if (this.pending !== undefined) return this.pending
+    if (!force && Date.now() - this.lastRead < 1500) {
+      this.schedule()
+      return Promise.resolve()
+    }
+    this.lastRead = Date.now()
+    clearTimeout(this.poll)
+    this.poll = undefined
+    this.controller = new AbortController()
+    const signal = AbortSignal.any([this.controller.signal, AbortSignal.timeout(20_000)])
+    this.update({ ...this.state, loading: true, error: null })
+    const pending = this.read(force, signal).finally(() => {
+      if (this.pending !== pending) return
+      this.pending = undefined
+      this.controller = undefined
+      if (!this.disposed) {
+        this.update({ ...this.state, loading: false })
+        this.schedule()
+      }
+    })
+    this.pending = pending
+    return pending
+  }
+  private async read(force: boolean, signal: AbortSignal): Promise<void> {
+    try {
+      const response = await this.request(force ? OPENROUTER_REFRESH_PATH : OPENROUTER_CATALOG_PATH, {
+        method: force ? 'POST' : 'GET', credentials: 'same-origin',
+        headers: { accept: 'application/json' }, signal,
+      })
+      if (response.status === 404) {
+        this.failed('restart')
+        return
+      }
+      if (!response.ok) throw new Error('catalog unavailable')
+      const data: unknown = await response.json()
+      if (!validSnapshot(data)) {
+        throw new Error('invalid catalog response')
+      }
+      if (!this.disposed) this.update({ ...this.state, data, error: null })
+    } catch {
+      this.failed('unavailable')
+    }
+  }
+  private schedule(): void {
+    if (this.disposed || this.listeners.size === 0) return
+    clearTimeout(this.poll)
+    // This is a local metadata read, NOT an upstream model refresh.
+    this.poll = setTimeout(() => { void this.load() }, this.state.data?.refreshing ? 2000 : 60_000)
+  }
+  dispose(): void {
+    this.disposed = true
+    clearTimeout(this.poll)
+    this.controller?.abort()
+    this.listeners.clear()
+  }
+}

package/src/client/proxy-draft.ts

@@ -0,0 +1,57 @@
+import { parseProxySettings } from '../proxy-config.ts'
+import type { ProxyChannelSettings, ProxySettingsSnapshot } from '../proxy-config.ts'
+
+export interface ProxyChannelDraft {
+  enabled: boolean
+  address: string
+  port: string
+}
+
+export type ProxyDraft = Record<'http' | 'websocket', ProxyChannelDraft>
+
+export const DEFAULT_PROXY_ADDRESS = 'http://127.0.0.1'
+
+export function isAutomaticProxyDraft({ address, port }: ProxyChannelDraft): boolean {
+  const host = address.trim().replace(/\/$/, '')
+  return port.trim() === '' && (host === '' || host === DEFAULT_PROXY_ADDRESS || host === '127.0.0.1')
+}
+
+export function proxyDraft(settings: ProxySettingsSnapshot): ProxyDraft {
+  const channel = ({ enabled, url }: ProxyChannelSettings): ProxyChannelDraft => {
+    if (url === '') return { enabled, address: DEFAULT_PROXY_ADDRESS, port: '' }
+    const parsed = new URL(url)
+    return {
+      enabled,
+      address: `${parsed.protocol}//${parsed.hostname}`,
+      port: parsed.port || (parsed.protocol === 'https:' ? '443' : '80'),
+    }
+  }
+  return { http: channel(settings.http), websocket: channel(settings.websocket) }
+}
+
+export function proxyDraftSettings(draft: ProxyDraft, revision: number): ProxySettingsSnapshot {
+  const channel = (value: ProxyChannelDraft): ProxyChannelSettings => {
+    const { enabled, address, port } = value
+    const host = address.trim()
+    const portText = port.trim()
+    if (isAutomaticProxyDraft(value)) return { enabled, url: '' }
+    if (host === '' || (portText !== '' && (!/^\d{1,5}$/.test(portText)
+      || Number(portText) < 1 || Number(portText) > 65535))) {
+      throw new Error('Enter a proxy address and a port from 1 to 65535')
+    }
+    const parsed = new URL(host.includes('://') ? host : `http://${host}`)
+    // URL.port omits explicit default ports (80/443), so retain the pasted port.
+    const pastedPort = /:(\d+)\/?$/.exec(host)?.[1] ?? ''
+    if (portText === '' && pastedPort === '') {
+      throw new Error('Enter a proxy port from 1 to 65535')
+    }
+    if (portText !== '') {
+      if (pastedPort !== '' && Number(pastedPort) !== Number(portText)) {
+        throw new Error('The address and port fields specify different ports')
+      }
+      parsed.port = portText
+    }
+    return { enabled, url: parsed.href }
+  }
+  return parseProxySettings({ revision, http: channel(draft.http), websocket: channel(draft.websocket) })
+}

package/src/extra-models.ts

@@ -0,0 +1,201 @@
+/**
+ * Catalog models pi-ai has not shipped yet, but DSH OAuth routes already need.
+ * Entries are merged on top of the installed pi-ai provider catalog.
+ */
+
+import type { Api, Model } from '@earendil-works/pi-ai'
+
+/**
+ * https://developers.openai.com/api/docs/models/gpt-6-astra
+ * Use the Codex catalog's default 272K context, not the API's larger ceiling.
+ * Ultra is an app orchestration mode, not a Pi reasoning effort.
+ */
+const OPENAI_CODEX_EXTRA_MODELS: readonly Model<Api>[] = [
+  {
+    id: 'gpt-6-astra',
+    name: 'GPT-6 Astra',
+    api: 'openai-codex-responses',
+    provider: 'openai-codex',
+    baseUrl: 'https://chatgpt.com/backend-api',
+    reasoning: true,
+    input: ['text', 'image'],
+    cost: { input: 10, output: 50, cacheRead: 1, cacheWrite: 12.5 },
+    contextWindow: 272_000,
+    maxTokens: 128_000,
+    thinkingLevelMap: {
+      off: null,
+      minimal: null,
+      low: 'low',
+      medium: 'medium',
+      high: 'high',
+      xhigh: 'xhigh',
+      max: 'max',
+    },
+  },
+]
+
+/** Newer xAI Grok models missing from the installed pi-ai catalog (0.82.x). */
+const XAI_EXTRA_MODELS: readonly Model<Api>[] = [
+  {
+    id: 'grok-4.6',
+    name: 'Grok 4.6',
+    api: 'openai-responses',
+    provider: 'xai',
+    baseUrl: 'https://api.x.ai/v1',
+    reasoning: true,
+    input: ['text', 'image'],
+    cost: { input: 2, output: 6, cacheRead: 0.3, cacheWrite: 0 },
+    contextWindow: 500_000,
+    maxTokens: 500_000,
+    compat: { supportsLongCacheRetention: false },
+    thinkingLevelMap: {
+      off: null,
+      minimal: null,
+      low: 'low',
+      medium: 'medium',
+      high: 'high',
+      xhigh: 'xhigh',
+      max: null,
+    },
+  },
+]
+
+/** Latest Coding Plan models missing from the installed pi-ai catalog (0.82.x). */
+export const GLM_5_3_MODEL_ID = 'glm-5.3'
+export const GLM_5_3_DEFAULT_EFFORT = 'max'
+export const GLM_5_3_FLASH_MODEL_ID = 'glm-5.3-flash'
+export const GLM_5_3_FLASH_DEFAULT_EFFORT = 'max'
+
+/**
+ * Official GLM-5.3 family metadata. Standard is text-only; Flash also accepts
+ * images. Keep separate IDs so choosing standard never routes to Flash.
+ * https://docs.bigmodel.cn/cn/guide/models/text/glm-5.3
+ * https://docs.bigmodel.cn/cn/coding-plan/latest-model
+ */
+const ZAI_CODING_CN_EXTRA_MODELS: readonly Model<Api>[] = [
+  {
+    id: GLM_5_3_FLASH_MODEL_ID,
+    name: 'GLM-5.3-Flash',
+    api: 'openai-completions',
+    provider: 'zai-coding-cn',
+    baseUrl: 'https://open.bigmodel.cn/api/coding/paas/v4',
+    reasoning: true,
+    input: ['text', 'image'],
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+    contextWindow: 1_000_000,
+    maxTokens: 131_072,
+    compat: {
+      supportsStore: false,
+      supportsDeveloperRole: false,
+      supportsReasoningEffort: true,
+      thinkingFormat: 'zai',
+      zaiToolStream: true,
+    },
+    thinkingLevelMap: {
+      off: null,
+      minimal: null,
+      low: 'low',
+      medium: null,
+      high: 'high',
+      xhigh: null,
+      max: 'max',
+    },
+  },
+  {
+    id: GLM_5_3_MODEL_ID,
+    name: 'GLM-5.3',
+    api: 'openai-completions',
+    provider: 'zai-coding-cn',
+    baseUrl: 'https://open.bigmodel.cn/api/coding/paas/v4',
+    reasoning: true,
+    input: ['text'],
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+    contextWindow: 1_000_000,
+    maxTokens: 131_072,
+    compat: {
+      supportsStore: false,
+      supportsDeveloperRole: false,
+      supportsReasoningEffort: true,
+      thinkingFormat: 'zai',
+      zaiToolStream: true,
+    },
+    thinkingLevelMap: {
+      off: null,
+      minimal: null,
+      low: 'low',
+      medium: null,
+      high: 'high',
+      xhigh: null,
+      max: 'max',
+    },
+  },
+]
+
+/** OpenRouter stealth model missing from the installed pi-ai catalog (0.82.x–0.84.x). */
+export const OX_ALPHA_MODEL_ID = 'stealth/ox-alpha'
+
+/**
+ * OpenRouter's live default for ox-alpha (`reasoning.default_effort`).
+ * Must be sent explicitly: pi-ai's OpenRouter dialect writes
+ * `reasoning: { effort: thinkingLevelMap.off ?? "none" }` when the caller
+ * omits an effort, and ox-alpha rejects `none` (`reasoning.mandatory: true`).
+ */
+export const OX_ALPHA_DEFAULT_EFFORT = 'max'
+
+/**
+ * OpenRouter stealth models missing from the installed pi-ai catalog (0.82.x).
+ * Capacities follow the public OpenRouter listing: 1M context, text+image, free.
+ * Effort levels follow live `/api/v1/models` (`supported_efforts`, `default_effort`).
+ */
+const OPENROUTER_EXTRA_MODELS: readonly Model<Api>[] = [
+  {
+    id: OX_ALPHA_MODEL_ID,
+    name: 'OX Alpha',
+    api: 'openai-completions',
+    provider: 'openrouter',
+    baseUrl: 'https://openrouter.ai/api/v1',
+    reasoning: true,
+    input: ['text', 'image'],
+    cost: { input: 0, output: 0, cacheRead: 0, cacheWrite: 0 },
+    contextWindow: 1_000_000,
+    maxTokens: 131_072,
+    compat: { supportsDeveloperRole: false, thinkingFormat: 'openrouter' },
+    // Absent keys default to "supported" for off/minimal/low/medium/high and
+    // "unsupported" for max — the opposite of this model's live metadata.
+    thinkingLevelMap: {
+      off: null,
+      minimal: null,
+      low: 'low',
+      medium: null,
+      high: 'high',
+      xhigh: null,
+      max: 'max',
+    },
+  },
+]
+
+/** Per-model default the selector and request path should apply when omitted. */
+export function defaultReasoningEffortFor(
+  modelId: string,
+): typeof OX_ALPHA_DEFAULT_EFFORT | typeof GLM_5_3_DEFAULT_EFFORT | typeof GLM_5_3_FLASH_DEFAULT_EFFORT | 'medium' | undefined {
+  if (modelId === 'gpt-6-astra') return 'medium'
+  if (modelId === OX_ALPHA_MODEL_ID) return OX_ALPHA_DEFAULT_EFFORT
+  if (modelId === GLM_5_3_MODEL_ID) return GLM_5_3_DEFAULT_EFFORT
+  if (modelId === GLM_5_3_FLASH_MODEL_ID) return GLM_5_3_FLASH_DEFAULT_EFFORT
+  return undefined
+}
+
+const EXTRA_MODELS_BY_PROVIDER: Readonly<Record<string, readonly Model<Api>[]>> = {
+  'openai-codex': OPENAI_CODEX_EXTRA_MODELS,
+  xai: XAI_EXTRA_MODELS,
+  openrouter: OPENROUTER_EXTRA_MODELS,
+  'zai-coding-cn': ZAI_CODING_CN_EXTRA_MODELS,
+}
+
+/**
+ * Extra models this plugin publishes for one pi-ai provider id.
+ * @param providerId - catalog provider id (e.g. `xai`), not the harness route.
+ */
+export function extraModelsFor(providerId: string): readonly Model<Api>[] {
+  return EXTRA_MODELS_BY_PROVIDER[providerId] ?? []
+}