dsh-opendesign-corouter 0.1.2 → 0.1.4

package/lib/index.js

@@ -228,96 +228,59 @@ function inferenceEndpoint(baseURL, protocol) {
   return baseURL.trim() === "" ? suffix : `${openAiBaseURL(baseURL.trim())}${suffix}`;
 }
 
-// src/util.ts
-function record(value) {
-  return value !== null && typeof value === "object" && !Array.isArray(value);
-}
-function finite(value) {
-  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-function safeSecret(raw) {
-  const value = raw.trim();
-  if (!value || /[^\x20-\x7e]/u.test(value)) throw new Error("\u51ED\u636E\u4E3A\u7A7A\u6216\u542B\u6709\u4E0D\u53EF\u7528\u4E8E HTTP \u8BF7\u6C42\u5934\u7684\u5B57\u7B26");
-  return value;
-}
-function combinedSignal(signal, timeoutMs) {
-  const deadline = AbortSignal.timeout(timeoutMs);
-  return signal ? AbortSignal.any([signal, deadline]) : deadline;
-}
-function sleep(ms, signal) {
-  return new Promise((resolve) => {
-    if (signal.aborted) return resolve();
-    const done = () => {
-      clearTimeout(timer);
-      signal.removeEventListener("abort", done);
-      resolve();
-    };
-    const timer = setTimeout(done, ms);
-    signal.addEventListener("abort", done, { once: true });
-  });
-}
-
 // src/model-settings.ts
-var MAX_ENTRIES = 512;
-var MAX_MODEL_ID_LENGTH = 128;
-var MODEL_ID = /^[A-Za-z0-9._:/-]{1,128}$/u;
-var MAX_TEMPERATURE = 2;
-var MAX_TOP_P = 1;
-var MAX_TOKENS = 1e7;
-var MAX_CONTEXT_WINDOW = 1e8;
-var REASONING_EFFORTS = ["none", "minimal", "low", "medium", "high", "xhigh", "ultra", "max"];
 var RESERVED_KEYS = /* @__PURE__ */ new Set(["__proto__", "constructor", "prototype"]);
-var SETTINGS_FIELDS = /* @__PURE__ */ new Set(["enabled", "temperature", "topP", "maxTokens", "contextWindow", "reasoningEffort"]);
-function flag(value) {
-  if (typeof value !== "boolean") throw new Error("\u6A21\u578B\u8BBE\u7F6E\u7684 enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C");
-  return value;
-}
-function bounded(value, max, label) {
-  if (typeof value !== "number" || !Number.isFinite(value) || value < 0 || value > max) throw new Error(`\u6A21\u578B\u8BBE\u7F6E\u7684 ${label} \u5FC5\u987B\u662F 0 \u5230 ${max} \u4E4B\u95F4\u7684\u6709\u9650\u6570\u5B57`);
-  return value;
-}
-function capacity(value, max, label) {
-  if (typeof value !== "number" || !Number.isSafeInteger(value) || value < 1 || value > max) throw new Error(`\u6A21\u578B\u8BBE\u7F6E\u7684 ${label} \u5FC5\u987B\u662F 1 \u5230 ${max} \u4E4B\u95F4\u7684\u6574\u6570`);
-  return value;
-}
-function effort(value) {
-  const hit = REASONING_EFFORTS.find((candidate) => candidate === value);
-  if (hit === void 0) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u7684 reasoningEffort \u4E0D\u5728\u5141\u8BB8\u7684\u53D6\u503C\u5185");
-  return hit;
-}
-function settingsOf(value) {
-  if (!record(value)) throw new Error("\u6BCF\u4E2A\u6A21\u578B\u7684\u8BBE\u7F6E\u5FC5\u987B\u662F\u5BF9\u8C61");
-  for (const field of Object.keys(value)) {
-    if (!SETTINGS_FIELDS.has(field)) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u542B\u6709\u4E0D\u652F\u6301\u7684\u5B57\u6BB5");
-  }
-  const out = {};
-  if (value.enabled !== void 0) out.enabled = flag(value.enabled);
-  if (value.temperature !== void 0) out.temperature = bounded(value.temperature, MAX_TEMPERATURE, "temperature");
-  if (value.topP !== void 0) out.topP = bounded(value.topP, MAX_TOP_P, "topP");
-  if (value.maxTokens !== void 0) out.maxTokens = capacity(value.maxTokens, MAX_TOKENS, "maxTokens");
-  if (value.contextWindow !== void 0) out.contextWindow = capacity(value.contextWindow, MAX_CONTEXT_WINDOW, "contextWindow");
-  if (value.reasoningEffort !== void 0) out.reasoningEffort = effort(value.reasoningEffort);
-  return out;
-}
 function parseModelSettingsMap(value) {
-  if (!record(value)) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u5FC5\u987B\u662F\u5BF9\u8C61");
+  if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u5FC5\u987B\u662F\u5BF9\u8C61");
   const keys = Object.keys(value);
-  if (keys.length > MAX_ENTRIES) throw new Error(`\u6A21\u578B\u8BBE\u7F6E\u6700\u591A\u5141\u8BB8 ${MAX_ENTRIES} \u4E2A\u6A21\u578B`);
+  if (keys.length > 512) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u6700\u591A\u5141\u8BB8 512 \u4E2A\u6A21\u578B");
+  const fields = /* @__PURE__ */ new Set(["enabled", "temperature", "topP", "maxTokens", "contextWindow", "reasoningEffort"]);
+  const efforts = ["none", "minimal", "low", "medium", "high", "xhigh", "ultra", "max"];
   const out = {};
   for (const id of keys) {
-    if (RESERVED_KEYS.has(id)) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u4E0D\u5141\u8BB8\u4FDD\u7559\u5B57\u6BB5\u540D");
-    if (!MODEL_ID.test(id)) throw new Error(`\u6A21\u578B ID \u5FC5\u987B\u662F 1\u2013${MAX_MODEL_ID_LENGTH} \u4F4D\u5B57\u6BCD\u3001\u6570\u5B57\u6216 . _ : / -`);
-    out[id] = settingsOf(value[id]);
+    if (["__proto__", "constructor", "prototype"].includes(id)) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u4E0D\u5141\u8BB8\u4FDD\u7559\u5B57\u6BB5\u540D");
+    if (!/^[A-Za-z0-9._:/-]{1,128}$/u.test(id)) throw new Error("\u6A21\u578B ID \u5FC5\u987B\u662F 1\u2013128 \u4F4D\u5B57\u6BCD\u3001\u6570\u5B57\u6216 . _ : / -");
+    const entry = value[id];
+    if (entry === null || typeof entry !== "object" || Array.isArray(entry)) throw new Error("\u6BCF\u4E2A\u6A21\u578B\u7684\u8BBE\u7F6E\u5FC5\u987B\u662F\u5BF9\u8C61");
+    const settings = entry;
+    for (const field of Object.keys(settings)) {
+      if (!fields.has(field)) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u542B\u6709\u4E0D\u652F\u6301\u7684\u5B57\u6BB5");
+    }
+    const parsed = {};
+    if (settings.enabled !== void 0) {
+      if (typeof settings.enabled !== "boolean") throw new Error("\u6A21\u578B\u8BBE\u7F6E\u7684 enabled \u5FC5\u987B\u662F\u5E03\u5C14\u503C");
+      parsed.enabled = settings.enabled;
+    }
+    for (const [field, max] of [["temperature", 2], ["topP", 1]]) {
+      const item = settings[field];
+      if (item === void 0) continue;
+      if (typeof item !== "number" || !Number.isFinite(item) || item < 0 || item > max) throw new Error(`\u6A21\u578B\u8BBE\u7F6E\u7684 ${field} \u5FC5\u987B\u662F 0 \u5230 ${max} \u4E4B\u95F4\u7684\u6709\u9650\u6570\u5B57`);
+      parsed[field] = item;
+    }
+    for (const [field, max] of [["maxTokens", 1e7], ["contextWindow", 1e8]]) {
+      const item = settings[field];
+      if (item === void 0) continue;
+      if (typeof item !== "number" || !Number.isSafeInteger(item) || item < 1 || item > max) throw new Error(`\u6A21\u578B\u8BBE\u7F6E\u7684 ${field} \u5FC5\u987B\u662F 1 \u5230 ${max} \u4E4B\u95F4\u7684\u6574\u6570`);
+      parsed[field] = item;
+    }
+    if (settings.reasoningEffort !== void 0) {
+      if (typeof settings.reasoningEffort !== "string" || !efforts.includes(settings.reasoningEffort)) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u7684 reasoningEffort \u4E0D\u5728\u5141\u8BB8\u7684\u53D6\u503C\u5185");
+      parsed.reasoningEffort = settings.reasoningEffort;
+    }
+    if (parsed.maxTokens !== void 0 && parsed.contextWindow !== void 0 && parsed.maxTokens >= parsed.contextWindow) throw new Error("\u6A21\u578B\u8BBE\u7F6E\u7684 maxTokens \u5FC5\u987B\u5C0F\u4E8E contextWindow");
+    out[id] = parsed;
   }
   return out;
 }
 function applyModelSettings(row, settings) {
   const { contextWindow, maxTokens } = settings ?? {};
   if (contextWindow === void 0 && maxTokens === void 0) return { ...row };
+  if (contextWindow !== void 0) parseModelSettingsMap({ model: { contextWindow } });
+  if (maxTokens !== void 0) parseModelSettingsMap({ model: { maxTokens } });
   return {
     ...row,
-    ...contextWindow === void 0 ? {} : { contextWindow: capacity(contextWindow, MAX_CONTEXT_WINDOW, "contextWindow") },
-    ...maxTokens === void 0 ? {} : { maxOutputTokens: capacity(maxTokens, MAX_TOKENS, "maxTokens") }
+    ...contextWindow === void 0 ? {} : { contextWindow },
+    ...maxTokens === void 0 ? {} : { maxOutputTokens: maxTokens }
   };
 }
 function isModelEnabled(id, settings = {}) {
@@ -331,10 +294,10 @@ var PLAN_PROVIDER = "opendesign-corouter-plan";
 var PAID_PROVIDER = "opendesign-corouter-paid";
 var DEFAULT_BASE_URL = "https://amr-link.open-design.ai/v1";
 var Config = Schema.object({
-  apiKeyEnv: Schema.string().pattern(/^[A-Za-z_][A-Za-z0-9_]*$/u).default("COROUTER_API_KEY").description("CoRouter API Key \u7684\u73AF\u5883\u53D8\u91CF\u6216 DSH \u51ED\u636E\u5F15\u7528\u540D").volatile(),
-  baseURL: Schema.transform(Schema.string(), (value) => assertBaseURL(value)).default(DEFAULT_BASE_URL).description("CoRouter \u7F51\u5173\u5730\u5740\uFF1B\u4E0D\u7528\u4E8E\u63A7\u5236\u53F0\u767B\u5F55\u6216\u989D\u5EA6\u67E5\u8BE2").volatile(),
+  apiKeyEnv: Schema.string().max(128).pattern(/^[A-Za-z_][A-Za-z0-9_]*$/u).default("COROUTER_API_KEY").description("CoRouter API Key \u7684\u73AF\u5883\u53D8\u91CF\u6216 DSH \u51ED\u636E\u5F15\u7528\u540D").volatile(),
+  baseURL: Schema.transform(Schema.string(), assertBaseURL).default(DEFAULT_BASE_URL).description("CoRouter \u7F51\u5173\u5730\u5740\uFF1B\u4E0D\u7528\u4E8E\u63A7\u5236\u53F0\u767B\u5F55\u6216\u989D\u5EA6\u67E5\u8BE2").volatile(),
   apiProtocol: Schema.union(API_PROTOCOL_IDS).default("chat-completions").description("\u63A8\u7406 API \u534F\u8BAE\uFF1B\u6A21\u578B\u53D1\u73B0\u59CB\u7EC8\u4F7F\u7528 OpenAI models \u63A5\u53E3").volatile(),
-  modelSettings: Schema.transform(Schema.dict(Schema.any()), (value) => parseModelSettingsMap(value)).default({}).description("\u9010\u6A21\u578B\u542F\u7528\u72B6\u6001\u548C\u8BF7\u6C42\u53C2\u6570").volatile(),
+  modelSettings: Schema.transform(Schema.dict(Schema.any()), parseModelSettingsMap).default({}).description("\u9010\u6A21\u578B\u542F\u7528\u72B6\u6001\u548C\u8BF7\u6C42\u53C2\u6570").volatile(),
   useDesktopCredential: Schema.boolean().default(true).description("\u4F18\u5148\u8BFB\u53D6 OpenDesign \u684C\u9762\u7AEF\u767B\u5F55\u6001\u67E5\u8BE2\u989D\u5EA6").volatile(),
   emptyTurnGuard: Schema.boolean().default(true).description("\u76D1\u63A7\u5957\u9910\u8D60\u9001\u6A21\u578B\u7684\u7A7A\u8F6E/\u534F\u8BAE\u6B8B\u6E23\uFF1B\u7531\u5BBF\u4E3B\u91CD\u8BD5\u7B56\u7565\u5904\u7406\uFF0C\u53EF\u80FD\u989D\u5916\u6D88\u8017\u8D60\u9001\u989D\u5EA6").volatile(),
   quotaRefreshSeconds: Schema.natural().min(5).max(3600).default(60).description("\u989D\u5EA6\u81EA\u52A8\u5237\u65B0\u95F4\u9694\uFF08\u79D2\uFF09").volatile(),
@@ -342,6 +305,7 @@ var Config = Schema.object({
   streamIdleTimeoutMs: Schema.natural().min(1e3).max(18e5).default(3e5).description("\u6D41\u5F0F\u54CD\u5E94\u65E0\u6570\u636E\u8D85\u65F6\uFF08\u6BEB\u79D2\uFF09").volatile()
 });
 function assertBaseURL(raw) {
+  if (raw.length > 2048) throw new Error("\u63A8\u7406 Base URL \u6700\u591A\u5141\u8BB8 2048 \u5B57\u7B26");
   let url;
   try {
     url = new URL(raw);
@@ -350,7 +314,9 @@ function assertBaseURL(raw) {
   }
   if (!["https:", "http:"].includes(url.protocol) || url.username || url.password || url.search || url.hash) throw new Error("\u63A8\u7406 Base URL \u4E0D\u53EF\u5305\u542B\u51ED\u636E\u3001\u67E5\u8BE2\u4E32\u6216\u7247\u6BB5");
   if (url.protocol === "http:" && !["localhost", "127.0.0.1", "[::1]"].includes(url.hostname)) throw new Error("\u975E\u672C\u673A\u63A8\u7406\u5730\u5740\u5FC5\u987B\u4F7F\u7528 HTTPS");
-  return url.href.replace(/\/+$/u, "");
+  const normalized = url.href.replace(/\/+$/u, "");
+  if (normalized.length > 2048) throw new Error("\u63A8\u7406 Base URL \u6700\u591A\u5141\u8BB8 2048 \u5B57\u7B26");
+  return normalized;
 }
 function readConfig(config) {
   return {
@@ -462,6 +428,35 @@ function estimateTokens(value) {
 // src/stream.ts
 import { LlmError as LlmError4, ToolCallId } from "@deepseek-ai/dsh-llm";
 
+// src/util.ts
+function record(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function finite(value) {
+  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
+}
+function safeSecret(raw) {
+  const value = raw.trim();
+  if (!value || /[^\x20-\x7e]/u.test(value)) throw new Error("\u51ED\u636E\u4E3A\u7A7A\u6216\u542B\u6709\u4E0D\u53EF\u7528\u4E8E HTTP \u8BF7\u6C42\u5934\u7684\u5B57\u7B26");
+  return value;
+}
+function combinedSignal(signal, timeoutMs) {
+  const deadline = AbortSignal.timeout(timeoutMs);
+  return signal ? AbortSignal.any([signal, deadline]) : deadline;
+}
+function sleep(ms, signal) {
+  return new Promise((resolve) => {
+    if (signal.aborted) return resolve();
+    const done = () => {
+      clearTimeout(timer);
+      signal.removeEventListener("abort", done);
+      resolve();
+    };
+    const timer = setTimeout(done, ms);
+    signal.addEventListener("abort", done, { once: true });
+  });
+}
+
 // src/protocols/errors.ts
 import {
   ACCOUNT_QUOTA_EXCEEDED_CODE,
@@ -1130,12 +1125,12 @@ function buildMessagesRequest(ctx) {
   if (ctx.topP !== void 0) body.top_p = ctx.topP;
   if (options.stop?.length) body.stop_sequences = options.stop;
   if (options.reasoningEffort !== void 0) {
-    const effort2 = String(options.reasoningEffort);
-    if (effort2 === "none") body.thinking = { type: "disabled" };
-    else if (THINKING_EFFORTS.includes(effort2)) {
+    const effort = String(options.reasoningEffort);
+    if (effort === "none") body.thinking = { type: "disabled" };
+    else if (THINKING_EFFORTS.includes(effort)) {
       body.thinking = { type: "adaptive" };
-      body.output_config = { effort: effort2 };
-    } else throw new LlmError7(`Anthropic Messages \u534F\u8BAE\u4E0D\u63A5\u53D7\u601D\u8003\u6DF1\u5EA6\u300C${effort2}\u300D`, "UNSUPPORTED_OPTION");
+      body.output_config = { effort };
+    } else throw new LlmError7(`Anthropic Messages \u534F\u8BAE\u4E0D\u63A5\u53D7\u601D\u8003\u6DF1\u5EA6\u300C${effort}\u300D`, "UNSUPPORTED_OPTION");
   }
   return { url: messagesURL(ctx.baseURL), headers: streamHeaders(ctx.apiKey, { "anthropic-version": ANTHROPIC_VERSION }), body };
 }
@@ -1330,7 +1325,7 @@ import {
   LlmError as LlmError8,
   ToolCallId as ToolCallId3
 } from "@deepseek-ai/dsh-llm";
-var REASONING_EFFORTS2 = ["none", "minimal", "low", "medium", "high", "xhigh", "max"];
+var REASONING_EFFORTS = ["none", "minimal", "low", "medium", "high", "xhigh", "max"];
 function userContent(text2, images) {
   if (!images.length) return text2;
   return [
@@ -1390,9 +1385,9 @@ function buildResponsesRequest(ctx) {
     body.max_output_tokens = options.maxTokens;
   }
   if (options.reasoningEffort !== void 0) {
-    const effort2 = String(options.reasoningEffort);
-    if (!REASONING_EFFORTS2.includes(effort2)) throw new LlmError8(`Responses \u534F\u8BAE\u4E0D\u63A5\u53D7\u601D\u8003\u6DF1\u5EA6\u300C${effort2}\u300D`, "UNSUPPORTED_OPTION");
-    body.reasoning = { effort: effort2, summary: "auto" };
+    const effort = String(options.reasoningEffort);
+    if (!REASONING_EFFORTS.includes(effort)) throw new LlmError8(`Responses \u534F\u8BAE\u4E0D\u63A5\u53D7\u601D\u8003\u6DF1\u5EA6\u300C${effort}\u300D`, "UNSUPPORTED_OPTION");
+    body.reasoning = { effort, summary: "auto" };
   }
   if (options.stop?.length) throw new LlmError8("Responses \u534F\u8BAE\u4E0D\u652F\u6301 stop \u5E8F\u5217", "UNSUPPORTED_OPTION");
   return { url: inferenceEndpoint(ctx.baseURL, "responses"), headers: streamHeaders(ctx.apiKey), body };
@@ -1485,6 +1480,18 @@ async function* streamResponses(body, signal, idleMs) {
     }
     out.push({ type: "tool-call-delta", index: call.index, id: ToolCallId3(call.id), ...name2, argumentsDelta: delta });
   }
+  function completeCall(call, item, out) {
+    const args = item.arguments;
+    let delta = "";
+    if (args !== void 0) {
+      if (typeof args !== "string" || !args.startsWith(call.args)) {
+        throw new LlmError8("OpenDesign\uFF1A\u5DE5\u5177\u8C03\u7528\u5B8C\u6574\u53C2\u6570\u4E0E\u6D41\u5F0F\u589E\u91CF\u4E0D\u4E00\u81F4", "INVALID_RESPONSE");
+      }
+      delta = args.slice(call.args.length);
+      call.args = args;
+    }
+    flushCall(call, delta, out);
+  }
   function keyFor(value, kind, outputIndex) {
     const itemId = str(value.item_id) ?? (outputIndex === void 0 ? void 0 : keyByOutput.get(outputIndex));
     return `${kind}:${itemId ?? `idx:${outputIndex ?? -1}`}`;
@@ -1496,10 +1503,10 @@ async function* streamResponses(body, signal, idleMs) {
       if (item.type === "function_call") {
         const itemId = str(item.id) ?? str(item.call_id);
         const callId = str(item.call_id) ?? itemId;
-        if (!callId || [...calls.values()].some((call2) => call2.id === callId)) continue;
-        const call = callState(`call:${itemId ?? callId}`, item, out);
-        call.args = str(item.arguments) ?? call.args;
-        flushCall(call, call.args, out);
+        if (!callId) continue;
+        const existing = [...calls].find(([, call2]) => call2.id === callId);
+        const call = callState(existing?.[0] ?? `call:${itemId ?? callId}`, item, out);
+        completeCall(call, item, out);
         continue;
       }
       if (item.type === "message") {
@@ -1612,11 +1619,7 @@ async function* streamResponses(body, signal, idleMs) {
         const outputIndex = int(value.output_index);
         if (item.type === "function_call") {
           const call = callState(keyFor(value, "call", outputIndex), item, out);
-          const args = str(item.arguments);
-          if (args !== void 0 && call.args === "") {
-            call.args = args;
-            flushCall(call, args, out);
-          } else flushCall(call, "", out);
+          completeCall(call, item, out);
         } else if (item.type === "message") {
           const key = `text:${str(item.id) ?? `idx:${outputIndex ?? -1}`}:0`;
           if (!texts.has(key)) {
@@ -1749,8 +1752,8 @@ var CoRouterAdapter = class extends LlmAdapter {
   async *#stream(options, config, row) {
     const signal = AbortSignal.any([combinedSignal(options.signal, config.requestTimeoutMs), this.#lifetime.signal]);
     signal.throwIfAborted();
-    const raw = await this.options.apiKey(config.apiKeyEnv);
-    if (!raw) throw new LlmError10("\u672A\u914D\u7F6E CoRouter API Key\uFF1B\u8BF7\u5728\u63D2\u4EF6\u8BBE\u7F6E\u4E2D\u4FDD\u5B58\u6216\u8BBE\u7F6E\u5BF9\u5E94\u73AF\u5883\u53D8\u91CF", "MISSING_CREDENTIAL");
+    const raw = await this.options.apiKey(config.apiKeyEnv, config.baseURL);
+    if (!raw) throw new LlmError10("\u672A\u914D\u7F6E\u5F53\u524D\u7F51\u5173\u7684\u63A8\u7406\u51ED\u636E\uFF1B\u8BF7\u5B8C\u6210\u8BBE\u5907\u6388\u6743\u6216\u914D\u7F6E\u5BF9\u5E94 API Key", "MISSING_CREDENTIAL");
     const key = assertUsableApiKey(raw, "dsh-opendesign-corouter", config.apiKeyEnv);
     const setting = config.modelSettings?.[row.id] ?? {};
     const protocolId = config.apiProtocol ?? "chat-completions";
@@ -1787,13 +1790,13 @@ var CoRouterAdapter = class extends LlmAdapter {
       if (room < 1) throw new LlmError10("\u5F53\u524D\u8F93\u5165\u6CA1\u6709\u4E3A\u8F93\u51FA\u7559\u4E0B\u4E0A\u4E0B\u6587\u7A7A\u95F4", "CONTEXT_WINDOW_EXCEEDED");
       maxTokens = Math.min(capped, Math.floor(room));
     }
-    const effort2 = options.reasoningEffort ?? (setting.reasoningEffort ? ReasoningEffortId(setting.reasoningEffort) : void 0);
-    if (effort2 !== void 0 && row.reasoningEfforts && !row.reasoningEfforts.includes(effort2)) throw new LlmError10("\u8BE5\u6A21\u578B\u4E0D\u652F\u6301\u6240\u9009\u601D\u8003\u6DF1\u5EA6", "UNSUPPORTED_OPTION");
+    const effort = options.reasoningEffort ?? (setting.reasoningEffort ? ReasoningEffortId(setting.reasoningEffort) : void 0);
+    if (effort !== void 0 && row.reasoningEfforts && !row.reasoningEfforts.includes(effort)) throw new LlmError10("\u8BE5\u6A21\u578B\u4E0D\u652F\u6301\u6240\u9009\u601D\u8003\u6DF1\u5EA6", "UNSUPPORTED_OPTION");
     const effective = {
       ...projectedOptions,
       ...(options.temperature ?? setting.temperature) === void 0 ? {} : { temperature: options.temperature ?? setting.temperature },
       ...maxTokens === void 0 ? {} : { maxTokens },
-      ...effort2 === void 0 ? {} : { reasoningEffort: effort2 }
+      ...effort === void 0 ? {} : { reasoningEffort: effort }
     };
     const protocol = protocolFor(protocolId);
     const request = protocol.build({ baseURL: config.baseURL, apiKey: key, model: row, options: effective, images, ...setting.topP === void 0 ? {} : { topP: setting.topP } });
@@ -1859,7 +1862,7 @@ var DISCOVERY_TIMEOUT_MS = 2e4;
 var MAX_DISCOVERY_BODY_BYTES = 2 * 1024 * 1024;
 var MAX_MODELS = 512;
 var MAX_MODEL_NAME_LENGTH = 128;
-var MODEL_ID2 = /^[A-Za-z0-9._:/-]{1,128}$/u;
+var MODEL_ID = /^[A-Za-z0-9._:/-]{1,128}$/u;
 var MEDIA_MODEL_ID = /^(?:gpt-image-|nano-banana-|seedream-|imagen-|veo-|doubao-seedance-|sora-)/u;
 var MESSAGES2 = {
   url: "\u6A21\u578B\u53D1\u73B0\u5730\u5740\u65E0\u6548\uFF1A\u5FC5\u987B\u662F\u7EDD\u5BF9 HTTP(S) \u5730\u5740\uFF0C\u4E14\u4E0D\u542B\u51ED\u636E\u3001\u67E5\u8BE2\u4E32\u6216\u7247\u6BB5",
@@ -1933,7 +1936,7 @@ function normalize(body) {
   const seen = /* @__PURE__ */ new Set();
   const rows = [];
   for (const value of body.data) {
-    if (!record(value) || typeof value.id !== "string" || !MODEL_ID2.test(value.id) || ["__proto__", "constructor", "prototype"].includes(value.id)) continue;
+    if (!record(value) || typeof value.id !== "string" || !MODEL_ID.test(value.id) || ["__proto__", "constructor", "prototype"].includes(value.id)) continue;
     if (MEDIA_MODEL_ID.test(value.id) || seen.has(value.id)) continue;
     seen.add(value.id);
     const known = findModel(value.id);
@@ -2002,7 +2005,7 @@ function isOfficialApiUrl(raw) {
   if (url.username || url.password) return false;
   if (url.search || url.hash) return false;
   if (url.pathname !== "/" && url.pathname !== "") return false;
-  return url.hostname.toLowerCase() === API_HOST;
+  return url.hostname.toLowerCase() === API_HOST && !url.port;
 }
 function normalizeApiUrl(raw) {
   const value = typeof raw === "string" ? raw.trim() : "";
@@ -2077,6 +2080,24 @@ async function readDesktopCredential(deps = {}) {
   }
   return parseDesktopConfigText(text2, profile);
 }
+function deviceGrant(value) {
+  if (!record(value) || value.kind !== "device" || typeof value.controlKey !== "string" || typeof value.runtimeKey !== "string") return;
+  try {
+    const controlKey = safeSecret(value.controlKey), runtimeKey = safeSecret(value.runtimeKey);
+    if ([controlKey, runtimeKey].some((key) => key.length > 8192 || /\s/u.test(key))) return;
+    return { kind: "device", controlKey, runtimeKey, ...typeof value.savedAt === "string" ? { savedAt: value.savedAt } : {} };
+  } catch {
+    return void 0;
+  }
+}
+function isOfficialRuntimeUrl(raw) {
+  try {
+    const url = new URL(raw);
+    return url.origin === "https://amr-link.open-design.ai" && !url.username && !url.password && !url.search && !url.hash;
+  } catch {
+    return false;
+  }
+}
 function cookieHeader(raw) {
   const value = raw.trim();
   if (!value || !value.includes("=")) return void 0;
@@ -2097,6 +2118,10 @@ function desktopSession(credential, apiUrl = credential.apiUrl ?? DEFAULT_API_UR
     ...credential.plan ? { plan: credential.plan } : {}
   };
 }
+function deviceSession(tokens) {
+  const controlKey = typeof tokens === "string" ? tokens : tokens.controlKey;
+  return { headers: { authorization: `Bearer ${safeSecret(controlKey)}` }, source: "login", via: "login", apiUrl: DEFAULT_API_URL, credentialType: "device" };
+}
 function cookieSession(cookie, source, apiUrl = DEFAULT_API_URL) {
   const header = cookieHeader(cookie);
   if (!header) return void 0;
@@ -2137,10 +2162,15 @@ async function resolveSession(deps = {}) {
     } catch {
       grant = void 0;
     }
-    const expiry = typeof grant?.expiresAt === "number" && Number.isFinite(grant.expiresAt) ? grant.expiresAt : 0;
-    if (grant && (expiry === 0 || expiry > now())) {
-      const session = cookieSession(grant.cookie, "login");
-      if (session) return { state: "ready", session, warnings };
+    if (grant && "kind" in grant && grant.kind === "device") {
+      const device = deviceGrant(grant);
+      if (device) return { state: "ready", session: deviceSession(device), warnings };
+    } else if (grant && "cookie" in grant) {
+      const expiry = typeof grant.expiresAt === "number" && Number.isFinite(grant.expiresAt) ? grant.expiresAt : 0;
+      if (expiry === 0 || expiry > now()) {
+        const session = cookieSession(grant.cookie, "login");
+        if (session) return { state: "ready", session, warnings };
+      }
     }
   }
   if (deps.resolveRef) {
@@ -2161,61 +2191,207 @@ async function resolveSession(deps = {}) {
 
 // src/login.ts
 import { randomUUID } from "node:crypto";
-var CONSOLE_ORIGIN = "https://open-design.ai";
-var CONSOLE_DASHBOARD_URL = `${CONSOLE_ORIGIN}/cloud/dashboard`;
-var API_COOKIE_URL = "https://amr-api.open-design.ai/api/v1/workspaces/current";
-function extractConsoleSession(cookies, now = Date.now()) {
-  const usable = cookies.filter((c) => typeof c.name === "string" && c.name.length > 0 && typeof c.value === "string" && c.value.length > 0 && (c.expires === void 0 || c.expires === -1 || c.expires * 1e3 > now));
-  if (!usable.length) return null;
-  const declared = usable.map((c) => c.expires).filter((expires) => typeof expires === "number" && Number.isFinite(expires) && expires > 0);
+
+// src/device-auth.ts
+var DEVICE_AUTH_ENDPOINT = "https://amr-api.open-design.ai/api/v1/cli/device-authorizations";
+var DEVICE_AUTH_PLUGIN_VERSION = "0.1.4";
+var DEVICE_REQUEST_TIMEOUT_MS = 2e4;
+var DEVICE_RESPONSE_MAX_BYTES = 65536;
+var DEVICE_POLL_MIN_MS = 1e3;
+var DEVICE_POLL_MAX_MS = 3e5;
+var DeviceAuthError = class extends Error {
+  constructor(code) {
+    super("\u8BBE\u5907\u6388\u6743\u672A\u5B8C\u6210\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB");
+    this.code = code;
+  }
+  code;
+};
+function validateActivationUrl(value, userCode) {
+  if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
+  try {
+    const url = new URL(value);
+    if (url.origin !== "https://open-design.ai" || url.pathname !== "/cloud/cli/activate" || url.username || url.password || url.hash) return null;
+    const entries = [...url.searchParams];
+    if (entries.length > 1) return null;
+    if (entries.length) {
+      const entry = entries[0];
+      if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
+    }
+    return url.href;
+  } catch {
+    return null;
+  }
+}
+function object(value) {
+  return value !== null && typeof value === "object" && !Array.isArray(value);
+}
+function validUserCode(value) {
+  return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
+}
+function secret(value) {
+  return typeof value === "string" && value.length > 0 && value.length <= 8192 && /^[\x21-\x7e]+$/u.test(value);
+}
+function parseDeviceAuthorization(value) {
+  if (!object(value) || typeof value.deviceId !== "string" || !/^[a-z0-9_-]{1,200}$/iu.test(value.deviceId) || !secret(value.deviceSecret) || !validUserCode(value.userCode)) throw new DeviceAuthError("opendesign/login-response");
+  const activationUrl = validateActivationUrl(value.activationUrl, value.userCode);
+  if (!activationUrl || value.userCode.toLowerCase().includes(value.deviceSecret.toLowerCase()) || decodeURIComponent(activationUrl).toLowerCase().includes(value.deviceSecret.toLowerCase())) throw new DeviceAuthError("opendesign/login-response");
+  const expiresAt = typeof value.expiresAt === "string" && /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d(?:\.\d{1,3})?(?:Z|[+-]\d\d:\d\d)$/u.test(value.expiresAt) ? Date.parse(value.expiresAt) : NaN;
+  if (!Number.isFinite(expiresAt) || typeof value.pollIntervalSeconds !== "number" || !Number.isFinite(value.pollIntervalSeconds) || value.pollIntervalSeconds <= 0) throw new DeviceAuthError("opendesign/login-response");
   return {
-    cookie: usable.map((c) => `${c.name}=${c.value}`).join("; "),
-    expiresAt: declared.length ? Math.min(...declared) * 1e3 : 0
+    deviceId: value.deviceId,
+    deviceSecret: value.deviceSecret,
+    userCode: value.userCode,
+    activationUrl,
+    expiresAt,
+    pollMs: Math.max(DEVICE_POLL_MIN_MS, Math.min(DEVICE_POLL_MAX_MS, value.pollIntervalSeconds * 1e3))
   };
 }
-function consoleSite(overrides = {}) {
-  const origin = overrides.origin ?? CONSOLE_ORIGIN;
-  return {
-    origin,
-    loginUrl: overrides.loginUrl ?? (origin === CONSOLE_ORIGIN ? CONSOLE_DASHBOARD_URL : `${origin}/cloud/dashboard`),
-    cookieUrls: overrides.cookieUrls ?? [API_COOKIE_URL],
-    extract: extractConsoleSession
+function parseDevicePoll(value) {
+  if (!object(value)) throw new DeviceAuthError("opendesign/login-response");
+  const state = typeof value.status === "string" ? value.status.toLowerCase() : "";
+  if (["expired", "cancelled", "canceled", "denied", "rejected", "failed", "error"].includes(state)) throw new DeviceAuthError(state === "expired" ? "opendesign/login-expired" : "opendesign/login-denied");
+  if (value.error !== void 0 && value.error !== null && value.error !== "") throw new DeviceAuthError("opendesign/login-response");
+  const user = object(value.user) ? value.user : {};
+  const topPresent = value.controlKey !== void 0 || value.runtimeKey !== void 0;
+  const source = topPresent ? value : user;
+  if (source.controlKey !== void 0 || source.runtimeKey !== void 0) {
+    if (!secret(source.controlKey) || !secret(source.runtimeKey)) throw new DeviceAuthError("opendesign/login-incomplete");
+    if (topPresent && (user.controlKey !== void 0 && user.controlKey !== source.controlKey || user.runtimeKey !== void 0 && user.runtimeKey !== source.runtimeKey)) throw new DeviceAuthError("opendesign/login-response");
+    return { state: "success", tokens: { controlKey: source.controlKey, runtimeKey: source.runtimeKey } };
+  }
+  if (state === "pending" || state === "authorization_pending") return { state: "pending" };
+  throw new DeviceAuthError("opendesign/login-response");
+}
+function validRequestUrl(value) {
+  return value === DEVICE_AUTH_ENDPOINT || /^https:\/\/amr-api\.open-design\.ai\/api\/v1\/cli\/device-authorizations\/[a-zA-Z0-9_-]{1,200}\/token$/u.test(value);
+}
+async function postDeviceJson(fetcher, url, body, signal, timeoutMs = DEVICE_REQUEST_TIMEOUT_MS) {
+  if (!validRequestUrl(url)) throw new DeviceAuthError("opendesign/login-url");
+  signal.throwIfAborted();
+  const controller = new AbortController();
+  let timedOut = false;
+  let timer;
+  let rejectAbort = () => void 0;
+  const aborted = new Promise((_resolve, reject) => {
+    rejectAbort = reject;
+  });
+  const cancel = () => {
+    controller.abort();
+    rejectAbort(new DeviceAuthError(timedOut ? "opendesign/login-request-timeout" : "opendesign/login-cancelled"));
   };
+  signal.addEventListener("abort", cancel, { once: true });
+  timer = setTimeout(() => {
+    timedOut = true;
+    cancel();
+  }, Math.max(1, Math.min(DEVICE_REQUEST_TIMEOUT_MS, timeoutMs)));
+  const read = async () => {
+    let response;
+    try {
+      response = await fetcher(url, {
+        method: "POST",
+        redirect: "error",
+        credentials: "omit",
+        referrerPolicy: "no-referrer",
+        headers: { accept: "application/json", "content-type": "application/json" },
+        body: JSON.stringify(body),
+        signal: controller.signal
+      });
+    } catch {
+      throw new DeviceAuthError("opendesign/login-network");
+    }
+    if (controller.signal.aborted) {
+      void response.body?.cancel().catch(() => void 0);
+      throw new DeviceAuthError("opendesign/login-cancelled");
+    }
+    const rejectResponse = (code) => {
+      void response.body?.cancel().catch(() => void 0);
+      throw new DeviceAuthError(code);
+    };
+    if (response.redirected || response.url && response.url !== url || response.status >= 300 && response.status < 400) return rejectResponse("opendesign/login-redirect");
+    if (response.status === 401 || response.status === 403) return rejectResponse("opendesign/login-denied");
+    if (response.status === 404 || response.status === 410) return rejectResponse("opendesign/login-expired");
+    if (!response.ok) return rejectResponse("opendesign/login-network");
+    const declared = response.headers.get("content-length");
+    if (declared !== null && (!/^\d+$/u.test(declared) || Number(declared) > DEVICE_RESPONSE_MAX_BYTES)) return rejectResponse("opendesign/login-response-size");
+    if (!response.body) throw new DeviceAuthError("opendesign/login-response");
+    const reader = response.body.getReader();
+    const stopReading = () => {
+      void reader.cancel().catch(() => void 0);
+    };
+    controller.signal.addEventListener("abort", stopReading, { once: true });
+    const chunks = [];
+    let length = 0;
+    try {
+      for (; ; ) {
+        const part = await reader.read();
+        if (controller.signal.aborted) throw new DeviceAuthError("opendesign/login-cancelled");
+        if (part.done) break;
+        length += part.value.byteLength;
+        if (length > DEVICE_RESPONSE_MAX_BYTES) {
+          stopReading();
+          throw new DeviceAuthError("opendesign/login-response-size");
+        }
+        chunks.push(part.value);
+      }
+      const bytes = new Uint8Array(length);
+      let offset = 0;
+      for (const chunk of chunks) {
+        bytes.set(chunk, offset);
+        offset += chunk.length;
+      }
+      try {
+        return JSON.parse(new TextDecoder("utf-8", { fatal: true }).decode(bytes));
+      } catch {
+        throw new DeviceAuthError("opendesign/login-response");
+      }
+    } finally {
+      controller.signal.removeEventListener("abort", stopReading);
+      reader.releaseLock();
+    }
+  };
+  try {
+    return await Promise.race([read(), aborted]);
+  } catch (error) {
+    if (error instanceof DeviceAuthError) throw error;
+    throw new DeviceAuthError("opendesign/login-network");
+  } finally {
+    if (timer !== void 0) clearTimeout(timer);
+    signal.removeEventListener("abort", cancel);
+  }
 }
+
+// src/login.ts
 var LoginError = class extends Error {
   constructor(code) {
-    super(code === "opendesign/login-state" ? "\u767B\u5F55\u4EFB\u52A1\u4E0D\u5B58\u5728\u6216\u72B6\u6001\u5DF2\u6539\u53D8" : code === "opendesign/login-disposed" ? "\u767B\u5F55\u670D\u52A1\u5DF2\u5378\u8F7D" : "\u65E0\u6CD5\u6355\u83B7\u5F53\u524D\u8BBE\u7F6E\u72B6\u6001\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88");
+    super(code === "opendesign/login-disposed" ? "\u767B\u5F55\u670D\u52A1\u5DF2\u5378\u8F7D" : "\u767B\u5F55\u4EFB\u52A1\u4E0D\u5B58\u5728\u6216\u72B6\u6001\u5DF2\u6539\u53D8");
     this.code = code;
   }
   code;
 };
 var ACTIVE = /* @__PURE__ */ new Set(["launching", "waiting", "verifying"]);
-var DEFAULT_TIMEOUT_MS = 3e5;
-var DEFAULT_POLL_MS = 1e3;
-var FATAL_COMMIT_CODES = /* @__PURE__ */ new Set(["opendesign/revision-conflict", "opendesign/invalid-request", "opendesign/config", "opendesign/login-disposed"]);
-var CHROME_LAUNCH_OPTIONS = {
-  channel: "chrome",
-  headless: false,
-  ignoreDefaultArgs: ["--enable-automation"],
-  args: ["--disable-blink-features=AutomationControlled"]
-};
+var MAX_TIMEOUT_MS = 3e5;
+var SAFE_HOST_CODES = /* @__PURE__ */ new Set(["opendesign/revision-conflict", "opendesign/invalid-request", "opendesign/config", "opendesign/login-disposed"]);
 var ConsoleLogin = class {
-  job = null;
-  disposed = false;
-  callbacks;
-  options;
-  now;
-  delay;
   constructor(callbacks, options = {}) {
     this.callbacks = callbacks;
     this.options = options;
     this.now = options.now ?? Date.now;
     this.delay = options.delay ?? sleep;
+    this.fetcher = options.fetcher ?? fetch;
   }
-  /** Idempotent, credential-free view of the current attempt. */
+  callbacks;
+  options;
+  job = null;
+  disposed = false;
+  now;
+  delay;
+  fetcher;
+  /** Explicit public allowlist. Codes are never available after waiting or expiry. */
   status() {
     if (!this.job) return { jobId: null, state: "idle" };
-    const s = this.job.status;
+    const job = this.job;
+    if (job.status.state === "waiting" && this.now() >= job.deadline) this.expire(job);
+    const s = job.status;
     return {
       jobId: s.jobId,
       state: s.state,
@@ -2223,234 +2399,177 @@ var ConsoleLogin = class {
       ...s.finishedAt ? { finishedAt: s.finishedAt } : {},
       ...s.message ? { message: s.message } : {},
       ...s.errorCode ? { errorCode: s.errorCode } : {},
-      ...s.browserOpenFailed ? { browserOpenFailed: true } : {}
+      ...s.state === "waiting" && this.now() < job.deadline ? {
+        ...s.activationUrl ? { activationUrl: s.activationUrl } : {},
+        ...s.userCode ? { userCode: s.userCode } : {},
+        ...s.expiresAt ? { expiresAt: s.expiresAt } : {}
+      } : {}
     };
   }
-  /**
-   * Queue one attempt and return immediately: the RPC that starts a login must not wait on a
-   * browser window or on a human. Re-entrant calls while an attempt is live return that
-   * attempt's status instead of opening a second browser.
-   */
+  /** Synchronous/non-blocking and idempotent while capture/network/commit is pending. */
   start(request) {
     if (this.disposed) throw new LoginError("opendesign/login-disposed");
+    this.status();
     if (this.job && ACTIVE.has(this.job.status.state)) return this.status();
+    const started = this.now();
+    const requested = this.options.timeoutMs;
+    const timeoutMs = typeof requested === "number" && Number.isFinite(requested) && requested > 0 ? Math.min(MAX_TIMEOUT_MS, requested) : MAX_TIMEOUT_MS;
     const job = {
       id: randomUUID(),
-      startedAt: new Date(this.now()).toISOString(),
       controller: new AbortController(),
-      expectedRevision: request.expectedRevision,
-      status: { jobId: "", state: "launching", message: "\u6B63\u5728\u6253\u5F00\u4E34\u65F6 Chrome \u767B\u5F55\u7A97\u53E3" },
+      deadline: started + timeoutMs,
+      status: { jobId: null, state: "launching", startedAt: new Date(started).toISOString(), message: "\u6B63\u5728\u7533\u8BF7\u5B98\u65B9\u8BBE\u5907\u6388\u6743\u7801" },
       captured: void 0,
-      capturedAt: void 0,
-      verifying: false,
       committing: false,
       cancelRequested: false
     };
     job.status.jobId = job.id;
-    job.status.startedAt = job.startedAt;
     this.job = job;
-    job.timer = setTimeout(() => this.finish(job, "cancelled", "\u767B\u5F55\u5DF2\u8D85\u8FC7\u4E94\u5206\u949F\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB"), this.options.timeoutMs ?? DEFAULT_TIMEOUT_MS);
-    job.timer.unref?.();
-    job.capturedAt = Promise.resolve().then(() => this.callbacks.capture(job.expectedRevision)).then((captured) => {
-      job.captured = captured;
-      return captured;
-    });
-    void job.capturedAt.then(() => this.run(job)).catch((error) => {
-      if (this.alive(job)) this.finish(job, "error", "\u767B\u5F55\u65E0\u6CD5\u5F00\u59CB\uFF0C\u8BF7\u91CD\u8BD5", errorCode(error) ?? "opendesign/login-capture");
+    this.armExpiry(job);
+    void Promise.resolve().then(async () => {
+      if (!this.alive(job)) return;
+      try {
+        job.captured = await this.callbacks.capture(request.expectedRevision);
+      } catch (error) {
+        if (this.alive(job)) this.finish(job, "error", "\u65E0\u6CD5\u6355\u83B7\u5F53\u524D\u8BBE\u7F6E\u72B6\u6001\uFF0C\u8BF7\u91CD\u65B0\u8BFB\u53D6\u540E\u91CD\u8BD5", hostCode(error) ?? "opendesign/login-capture");
+        return;
+      }
+      if (this.alive(job)) await this.run(job);
+    }).catch((error) => {
+      if (this.alive(job)) this.finish(job, "error", failureMessage(error), error instanceof DeviceAuthError ? error.code : "opendesign/login-network");
     });
     return this.status();
   }
-  /**
-   * Abandon the attempt. While `commit` is in flight this only aborts the signal and records
-   * the request: the Host's atomic store decides, because the commit is the linearization
-   * point. A cancel that wins that race reports `cancelled`; one that loses reports `success`
-   * and the cookie really is stored.
-   */
   cancel(request) {
-    const job = this.job;
-    if (!job || job.status.jobId !== request.jobId) return this.status();
-    if (job.committing) {
-      job.cancelRequested = true;
-      job.controller.abort();
-      return this.status();
-    }
-    if (ACTIVE.has(job.status.state)) this.finish(job, "cancelled", "\u767B\u5F55\u5DF2\u53D6\u6D88\uFF0C\u672A\u4FDD\u5B58 Cookie");
+    if (this.job?.id === request.jobId) this.requestCancellation(this.job, "\u767B\u5F55\u5DF2\u53D6\u6D88\uFF0C\u672A\u4FDD\u5B58\u6388\u6743");
     return this.status();
   }
-  /** Plugin teardown: abort the attempt and close the browser. */
   dispose() {
-    const job = this.job;
-    if (job && job.committing) {
-      job.cancelRequested = true;
-      job.controller.abort();
-    } else if (job && ACTIVE.has(job.status.state)) {
-      this.finish(job, "cancelled", "\u670D\u52A1\u5DF2\u5378\u8F7D\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88");
-    }
     this.disposed = true;
+    if (this.job) this.requestCancellation(this.job, "\u670D\u52A1\u5DF2\u5378\u8F7D\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88");
   }
   alive(job) {
-    if (this.disposed || this.job !== job) return false;
-    if (job.controller.signal.aborted && !job.committing) return false;
-    return job.status.state !== "success" && job.status.state !== "cancelled" && job.status.state !== "error";
+    return this.job === job && !this.disposed && !job.controller.signal.aborted && ACTIVE.has(job.status.state);
   }
   stopTimer(job) {
-    if (job.timer) {
+    if (job.timer !== void 0) {
       clearTimeout(job.timer);
       job.timer = void 0;
     }
   }
-  async close(job) {
-    const browser = job.browser;
-    job.browser = void 0;
-    try {
-      await browser?.close();
-    } catch {
+  armExpiry(job) {
+    this.stopTimer(job);
+    job.timer = setTimeout(() => this.expire(job), Math.max(1, job.deadline - this.now()));
+    job.timer.unref?.();
+  }
+  clearCode(job) {
+    delete job.status.activationUrl;
+    delete job.status.userCode;
+    delete job.status.expiresAt;
+  }
+  expire(job) {
+    if (job.committing) this.requestCancellation(job, "\u6388\u6743\u5DF2\u8FC7\u671F\uFF0C\u672A\u4FDD\u5B58\u6388\u6743");
+    else this.finish(job, "error", "\u8BBE\u5907\u6388\u6743\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB", "opendesign/login-expired");
+  }
+  requestCancellation(job, message) {
+    if (this.job !== job || !ACTIVE.has(job.status.state)) return;
+    this.clearCode(job);
+    if (!job.committing) {
+      this.finish(job, "cancelled", message);
+      return;
     }
+    if (!job.cancelRequested) {
+      job.cancellationMessage = message;
+      job.status.message = "\u6B63\u5728\u786E\u8BA4\u6388\u6743\u4FDD\u5B58\u7ED3\u679C";
+    }
+    job.cancelRequested = true;
+    this.stopTimer(job);
+    job.controller.abort();
   }
-  finish(job, state, message, errorCode2) {
-    if (this.job !== job) return;
-    if (job.status.state === "success" || job.status.state === "cancelled" || job.status.state === "error") return;
+  finish(job, state, message, errorCode) {
+    if (this.job !== job || !ACTIVE.has(job.status.state)) return;
     job.status.state = state;
     job.status.finishedAt = new Date(this.now()).toISOString();
     job.status.message = message;
-    if (errorCode2) job.status.errorCode = errorCode2;
-    job.secret = void 0;
+    if (errorCode) job.status.errorCode = errorCode;
+    this.clearCode(job);
     this.stopTimer(job);
     job.controller.abort();
-    void this.close(job);
-  }
-  async resolveBrowser(job) {
-    if (!this.alive(job)) return null;
-    const launch = this.options.launch ?? defaultLaunch;
-    const browser = await launch(job.controller.signal);
-    if (!browser) return null;
-    job.browser = browser;
-    browser.on?.("disconnected", () => this.finish(job, "cancelled", "\u767B\u5F55\u7A97\u53E3\u5DF2\u5173\u95ED\uFF0C\u672A\u4FDD\u5B58 Cookie"));
-    return browser;
   }
   async run(job) {
-    const site = this.options.site ?? consoleSite();
-    const browser = await this.resolveBrowser(job);
-    if (!browser) return;
-    if (!this.alive(job)) {
-      await this.close(job);
-      return;
-    }
-    const context = await browser.newContext();
-    if (!this.alive(job)) {
-      await this.close(job);
-      return;
-    }
-    const page = await context.newPage();
-    page.on?.("close", () => this.finish(job, "cancelled", "\u767B\u5F55\u7A97\u53E3\u5DF2\u5173\u95ED\uFF0C\u672A\u4FDD\u5B58 Cookie"));
-    if (!this.alive(job)) {
-      await this.close(job);
+    const signal = job.controller.signal;
+    const raw = await postDeviceJson(this.fetcher, DEVICE_AUTH_ENDPOINT, {
+      // The third-party protocol's official-CLI version is NOT our version. Compatibility
+      // of this actual plugin version requires a real-account check outside offline tests.
+      cliVersion: DEVICE_AUTH_PLUGIN_VERSION,
+      host: "DSH CoRouter",
+      profile: "prod"
+    }, signal, job.deadline - this.now());
+    if (!this.alive(job)) return;
+    const device = parseDeviceAuthorization(raw);
+    job.deadline = Math.min(job.deadline, device.expiresAt);
+    if (this.now() >= job.deadline) {
+      this.expire(job);
       return;
     }
-    try {
-      await page.goto(site.loginUrl, { waitUntil: "domcontentloaded", timeout: 3e4 });
-    } catch {
-      if (!this.alive(job)) return;
-      try {
-        await page.goto(site.origin, { waitUntil: "domcontentloaded", timeout: 3e4 });
-      } catch {
-        job.status.browserOpenFailed = true;
-      }
-    }
-    if (!this.alive(job)) return;
+    this.armExpiry(job);
     job.status.state = "waiting";
-    job.status.message = "\u8BF7\u5728\u5B98\u65B9\u7A97\u53E3\u81EA\u884C\u5B8C\u6210\u767B\u5F55\uFF1B\u8D26\u6237\u9A8C\u8BC1\u901A\u8FC7\u540E\u4FDD\u5B58\uFF0C\u989D\u5EA6\u72B6\u6001\u53E6\u884C\u663E\u793A";
-    let nextAttempt = 0;
-    let failures = 0;
-    const pollMs = this.options.pollMs ?? DEFAULT_POLL_MS;
+    job.status.message = "\u8BF7\u5728\u5E38\u7528\u6D4F\u89C8\u5668\u6253\u5F00\u5B98\u65B9\u6388\u6743\u9875\uFF0C\u4F7F\u7528\u5DF2\u4FDD\u5B58\u7684\u5BC6\u7801\u767B\u5F55\u5E76\u786E\u8BA4\u8BBE\u5907\u7801";
+    job.status.activationUrl = device.activationUrl;
+    job.status.userCode = device.userCode;
+    job.status.expiresAt = new Date(job.deadline).toISOString();
     while (this.alive(job)) {
-      if (!job.verifying) {
-        const session = site.extract(await context.cookies(site.cookieUrls), this.now());
-        if (!this.alive(job)) return;
-        if (session && this.now() >= nextAttempt) {
-          job.verifying = true;
-          job.status.state = "verifying";
-          job.status.message = "\u6B63\u5728\u9A8C\u8BC1\u767B\u5F55\u548C\u8BA2\u9605\u989D\u5EA6\uFF08\u5C1A\u672A\u4FDD\u5B58\uFF09";
-          try {
-            const verified = await this.callbacks.verify(session.cookie, job.controller.signal);
-            if (!this.alive(job)) return;
-            if (verified.usageError || !verified.balanceOk) {
-              job.status.state = "waiting";
-              job.status.message = "\u5DF2\u8BFB\u53D6\u8D26\u6237\uFF0C\u4F46\u8BA2\u9605\u989D\u5EA6\u5C1A\u672A\u5B8C\u6574\u9A8C\u8BC1\uFF1B\u5C1A\u672A\u4FDD\u5B58\uFF0C\u8BF7\u786E\u8BA4\u5957\u9910\u6216\u7EE7\u7EED\u767B\u5F55";
-              nextAttempt = this.now() + 15e3;
-            } else {
-              const outcome = await this.commit(job, session);
-              if (outcome !== "retry") return;
-              failures += 1;
-              nextAttempt = this.now() + Math.max(5e3, Math.min(6e4, 2e3 * 2 ** Math.min(failures, 5)));
-            }
-          } catch (error) {
-            if (!this.alive(job)) return;
-            failures += 1;
-            nextAttempt = this.now() + Math.max(5e3, Math.min(6e4, 2e3 * 2 ** Math.min(failures, 5)), retryAfterMs(error));
-            job.status.state = "waiting";
-            job.status.message = errorCode(error) === "opendesign/auth" ? "\u767B\u5F55\u5C1A\u672A\u751F\u6548\uFF0C\u8BF7\u7EE7\u7EED\u5728\u5B98\u65B9\u7A97\u53E3\u5B8C\u6210\u767B\u5F55\uFF1B\u672A\u4FDD\u5B58" : "\u989D\u5EA6\u9A8C\u8BC1\u6682\u672A\u6210\u529F\uFF0C\u5C06\u9650\u9891\u91CD\u8BD5\uFF1B\u672A\u4FDD\u5B58";
-          } finally {
-            job.verifying = false;
-          }
-        }
+      await this.delay(Math.min(device.pollMs, Math.max(1, job.deadline - this.now())), signal);
+      if (!this.alive(job)) return;
+      if (this.now() >= job.deadline) {
+        this.expire(job);
+        return;
+      }
+      const result = parseDevicePoll(await postDeviceJson(
+        this.fetcher,
+        `${DEVICE_AUTH_ENDPOINT}/${device.deviceId}/token`,
+        { deviceSecret: device.deviceSecret },
+        signal,
+        job.deadline - this.now()
+      ));
+      if (!this.alive(job)) return;
+      if (this.now() >= job.deadline) {
+        this.expire(job);
+        return;
+      }
+      if (result.state === "success") {
+        await this.commit(job, result.tokens);
+        return;
       }
-      await this.delay(pollMs, job.controller.signal);
     }
   }
-  /**
-   * Persist the verified session; `commit` resolving is the linearization point. Returns
-   * `retry` when the store rejected the write transiently, so the caller decides when to try
-   * again instead of claiming a success that did not happen.
-   */
-  async commit(job, session) {
-    if (job.committing || !this.alive(job)) return "cancelled";
+  async commit(job, tokens) {
+    if (!this.alive(job) || job.committing) return;
     job.committing = true;
+    this.clearCode(job);
     job.status.state = "verifying";
-    job.status.message = "\u767B\u5F55\u5DF2\u9A8C\u8BC1\uFF0C\u6B63\u5728\u4FDD\u5B58\u4F1A\u8BDD";
+    job.status.message = "\u5B98\u65B9\u6388\u6743\u5DF2\u5B8C\u6210\uFF0C\u6B63\u5728\u4FDD\u5B58\u6388\u6743";
     try {
-      await this.callbacks.commit(session.cookie, job.captured, job.controller.signal, session.expiresAt);
+      await this.callbacks.commit(tokens, job.captured, job.controller.signal);
       job.committing = false;
-      this.finish(job, "success", "\u767B\u5F55\u53CA\u8BA2\u9605\u989D\u5EA6\u5DF2\u9A8C\u8BC1\uFF0CCookie \u5DF2\u4FDD\u5B58");
-      return "success";
+      this.finish(job, "success", "\u8BBE\u5907\u6388\u6743\u5DF2\u5B8C\u6210\u5E76\u4FDD\u5B58\uFF1B\u989D\u5EA6\u72B6\u6001\u53E6\u884C\u663E\u793A");
     } catch (error) {
       job.committing = false;
-      if (job.cancelRequested || job.controller.signal.aborted) {
-        this.finish(job, "cancelled", "\u767B\u5F55\u5DF2\u53D6\u6D88\uFF0C\u672A\u4FDD\u5B58 Cookie");
-        return "cancelled";
-      }
-      if (FATAL_COMMIT_CODES.has(errorCode(error) ?? "")) {
-        this.finish(job, "error", "\u8BBE\u7F6E\u5DF2\u6539\u53D8\u6216\u65E0\u6CD5\u4FDD\u5B58\uFF0C\u8BF7\u91CD\u65B0\u8BFB\u53D6\u540E\u91CD\u8BD5", errorCode(error));
-        return "error";
-      }
-      job.status.state = "waiting";
-      job.status.message = "\u767B\u5F55\u5DF2\u9A8C\u8BC1\uFF0C\u4F46\u4FDD\u5B58\u6682\u672A\u6210\u529F\uFF0C\u5C06\u9650\u9891\u91CD\u8BD5\uFF1B\u5C1A\u672A\u4FDD\u5B58";
-      return "retry";
+      if (job.cancelRequested || job.controller.signal.aborted) this.finish(job, "cancelled", job.cancellationMessage ?? "\u767B\u5F55\u5DF2\u53D6\u6D88\uFF0C\u672A\u4FDD\u5B58\u6388\u6743");
+      else this.finish(job, "error", hostCode(error) ? "\u8BBE\u7F6E\u5DF2\u6539\u53D8\u6216\u65E0\u6CD5\u4FDD\u5B58\uFF0C\u8BF7\u91CD\u65B0\u8BFB\u53D6\u540E\u91CD\u8BD5" : "\u6388\u6743\u4FDD\u5B58\u5931\u8D25\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB", hostCode(error) ?? "opendesign/login-commit");
     }
   }
 };
-function errorCode(error) {
-  if (error && typeof error === "object" && "code" in error && typeof error.code === "string") return error.code;
+function hostCode(error) {
+  if (error !== null && typeof error === "object" && "code" in error && typeof error.code === "string" && SAFE_HOST_CODES.has(error.code)) return error.code;
   return void 0;
 }
-function retryAfterMs(error) {
-  if (!error || typeof error !== "object") return 0;
-  const details = error.details;
-  if (!details || typeof details !== "object") return 0;
-  const value = details.retryAfterMs;
-  return typeof value === "number" && Number.isFinite(value) && value > 0 ? Math.min(3e5, value) : 0;
-}
-async function defaultLaunch(signal) {
-  if (signal.aborted) return null;
-  const { chromium } = await import("playwright-core");
-  if (signal.aborted) return null;
-  return await chromium.launch({
-    channel: CHROME_LAUNCH_OPTIONS.channel,
-    headless: CHROME_LAUNCH_OPTIONS.headless,
-    // Copied so Playwright, which wants mutable arrays, cannot freeze on the readonly literals.
-    ignoreDefaultArgs: [...CHROME_LAUNCH_OPTIONS.ignoreDefaultArgs],
-    args: [...CHROME_LAUNCH_OPTIONS.args]
-  });
+function failureMessage(error) {
+  const code = error instanceof DeviceAuthError ? error.code : "";
+  if (code === "opendesign/login-expired") return "\u8BBE\u5907\u6388\u6743\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB";
+  if (code === "opendesign/login-denied") return "\u8BBE\u5907\u6388\u6743\u88AB\u62D2\u7EDD\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB";
+  if (code === "opendesign/login-request-timeout") return "\u8BBE\u5907\u6388\u6743\u8BF7\u6C42\u8D85\u65F6\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB";
+  return "\u8BBE\u5907\u6388\u6743\u8BF7\u6C42\u5931\u8D25\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB";
 }
 
 // src/quota.ts
@@ -2459,6 +2578,7 @@ var API_BASE = "https://amr-api.open-design.ai/api/v1";
 var CURRENT_URL = `${API_BASE}/workspaces/current`;
 var SUMMARY_URL = `${API_BASE}/billing/summary`;
 var usageUrl = (workspace) => `${API_BASE}/workspaces/${encodeURIComponent(workspace)}/billing/coding-plan-usage`;
+var preflightUrl = (workspace) => `${API_BASE}/workspaces/${encodeURIComponent(workspace)}/billing/preflight`;
 var ConsoleError = class extends Error {
   constructor(kind, status) {
     super(kind === "auth" ? "OpenDesign \u767B\u5F55\u5DF2\u5931\u6548\uFF0C\u8BF7\u91CD\u65B0\u767B\u5F55" : kind === "permission" ? "OpenDesign \u5F53\u524D\u767B\u5F55\u6001\u65E0\u6743\u8BFB\u53D6\u8BE5\u989D\u5EA6\u5C42" : kind === "rate-limit" ? "OpenDesign \u989D\u5EA6\u63A5\u53E3\u9650\u6D41\uFF0C\u8BF7\u7A0D\u540E\u5237\u65B0" : kind === "response" ? "OpenDesign \u989D\u5EA6\u63A5\u53E3\u8FD4\u56DE\u683C\u5F0F\u53D1\u751F\u53D8\u5316" : "OpenDesign \u989D\u5EA6\u6682\u65F6\u65E0\u6CD5\u8BFB\u53D6");
@@ -2469,46 +2589,90 @@ var ConsoleError = class extends Error {
   status;
 };
 async function consoleJson(url, session, signal, fetcher = fetch) {
-  let response;
-  try {
-    response = await fetcher(url, { headers: { ...attributionHeaders3(), accept: "application/json", ...session.headers }, signal: combinedSignal(signal, 2e4), redirect: "error" });
-  } catch {
-    throw new ConsoleError("network");
-  }
-  if (response.status === 401 || response.status === 403) {
-    await response.body?.cancel();
-    throw new ConsoleError(response.status === 401 ? "auth" : "permission", response.status);
-  }
-  if (!response.ok) {
-    await response.body?.cancel();
-    throw new ConsoleError(response.status === 429 ? "rate-limit" : "network", response.status);
-  }
-  const reader = response.body?.getReader();
-  if (!reader) throw new ConsoleError("response");
-  let size = 0, raw = "";
-  const decoder = new TextDecoder();
-  try {
-    while (true) {
-      const chunk = await reader.read();
-      if (chunk.done) break;
-      size += chunk.value.byteLength;
-      if (size > 2 * 1024 * 1024) throw new ConsoleError("response");
-      raw += decoder.decode(chunk.value, { stream: true });
+  signal?.throwIfAborted();
+  if (session.credentialType === "device") {
+    let target;
+    try {
+      target = new URL(url);
+    } catch {
+      throw new ConsoleError("response");
     }
-    raw += decoder.decode();
-  } finally {
-    await reader.cancel().catch(() => void 0);
-    reader.releaseLock();
+    if (target.origin !== "https://amr-api.open-design.ai" || target.username || target.password) throw new ConsoleError("response");
   }
-  let body;
+  const requestSignal = combinedSignal(signal, 2e4);
+  let rejectAbort = () => void 0;
+  const aborted = new Promise((_resolve, reject) => {
+    rejectAbort = reject;
+  });
+  const onAbort = () => rejectAbort(new ConsoleError("network"));
+  requestSignal.addEventListener("abort", onAbort, { once: true });
+  const read = async () => {
+    const response = await fetcher(url, { headers: { ...attributionHeaders3(), accept: "application/json", ...session.headers }, signal: requestSignal, redirect: "error", credentials: "omit" });
+    const cancelBody = () => {
+      void response.body?.cancel().catch(() => void 0);
+    };
+    if (requestSignal.aborted) {
+      cancelBody();
+      throw new ConsoleError("network");
+    }
+    if (response.redirected || response.url && response.url !== url) {
+      cancelBody();
+      throw new ConsoleError("response");
+    }
+    if (response.status === 401 || response.status === 403) {
+      cancelBody();
+      throw new ConsoleError(response.status === 401 ? "auth" : "permission", response.status);
+    }
+    if (!response.ok) {
+      cancelBody();
+      throw new ConsoleError(response.status === 429 ? "rate-limit" : "network", response.status);
+    }
+    const declared = response.headers.get("content-length");
+    if (declared !== null && (!/^\d+$/u.test(declared) || Number(declared) > 2 * 1024 * 1024)) {
+      cancelBody();
+      throw new ConsoleError("response");
+    }
+    const reader = response.body?.getReader();
+    if (!reader) throw new ConsoleError("response");
+    const cancelReader = () => {
+      void reader.cancel().catch(() => void 0);
+    };
+    requestSignal.addEventListener("abort", cancelReader, { once: true });
+    let size = 0, raw = "";
+    const decoder = new TextDecoder("utf-8", { fatal: true });
+    try {
+      while (true) {
+        const chunk = await reader.read();
+        if (requestSignal.aborted) throw new ConsoleError("network");
+        if (chunk.done) break;
+        size += chunk.value.byteLength;
+        if (size > 2 * 1024 * 1024) throw new ConsoleError("response");
+        raw += decoder.decode(chunk.value, { stream: true });
+      }
+      raw += decoder.decode();
+    } finally {
+      requestSignal.removeEventListener("abort", cancelReader);
+      cancelReader();
+      reader.releaseLock();
+    }
+    let body;
+    try {
+      body = JSON.parse(raw);
+    } catch {
+      throw new ConsoleError("response");
+    }
+    if (record(body) && (body.code === 401 || body.code === "401")) throw new ConsoleError("auth", 401);
+    if (record(body) && (body.code === 403 || body.code === "403")) throw new ConsoleError("permission", 403);
+    return body;
+  };
   try {
-    body = JSON.parse(raw);
-  } catch {
-    throw new ConsoleError("response");
+    return await Promise.race([read(), aborted]);
+  } catch (error) {
+    signal?.throwIfAborted();
+    throw error instanceof ConsoleError ? error : new ConsoleError("network");
+  } finally {
+    requestSignal.removeEventListener("abort", onAbort);
   }
-  if (record(body) && (body.code === 401 || body.code === "401")) throw new ConsoleError("auth", 401);
-  if (record(body) && (body.code === 403 || body.code === "403")) throw new ConsoleError("permission", 403);
-  return body;
 }
 function number(value, negative = false) {
   const n = typeof value === "number" ? value : typeof value === "string" && /^-?\d+(\.\d+)?$/u.test(value.trim()) ? Number(value) : NaN;
@@ -2546,7 +2710,51 @@ function normalizeBalances(summary) {
   const totalUsd = number(summary.balanceUsd, true) ?? number(summary.totalAvailableCreditsUsd, true) ?? (divisor !== void 0 && total !== void 0 ? total / divisor : void 0);
   return { ...divisor !== void 0 && subscription !== void 0 ? { subscriptionUsd: subscription / divisor } : {}, ...divisor !== void 0 && recharge !== void 0 ? { rechargeUsd: recharge / divisor } : {}, ...totalUsd !== void 0 ? { totalUsd } : {} };
 }
+async function readDeviceQuota(session, signal, fetcher = fetch) {
+  const common = { source: session.source, updatedAt: (/* @__PURE__ */ new Date()).toISOString() };
+  let current;
+  try {
+    current = await consoleJson(CURRENT_URL, session, signal, fetcher);
+  } catch (error) {
+    signal?.throwIfAborted();
+    if (error instanceof ConsoleError && error.kind === "permission") return { ...common, state: "partial", windows: [], balances: {}, note: "\u5F53\u524D\u8BBE\u5907\u6388\u6743\u65E0\u6743\u8BFB\u53D6\u5DE5\u4F5C\u533A\uFF1B\u989D\u5EA6\u6682\u4E0D\u53EF\u786E\u8BA4" };
+    throw error;
+  }
+  if (!record(current)) throw new ConsoleError("response");
+  const workspaceId = typeof current.activeWorkspaceId === "string" && current.activeWorkspaceId.trim() ? current.activeWorkspaceId : current.workspaceId;
+  if (typeof workspaceId !== "string" || !/^[A-Za-z0-9_-]{1,64}$/u.test(workspaceId)) throw new ConsoleError("response");
+  const personal = current.workspaceType === "personal";
+  const [preflight, billing] = await Promise.allSettled([
+    consoleJson(preflightUrl(workspaceId), session, signal, fetcher),
+    personal ? consoleJson(SUMMARY_URL, session, signal, fetcher) : Promise.resolve(void 0)
+  ]);
+  signal?.throwIfAborted();
+  for (const item of [preflight, billing]) if (item.status === "rejected" && item.reason instanceof ConsoleError && item.reason.kind === "auth") throw item.reason;
+  const summary = billing.status === "fulfilled" ? billing.value : void 0;
+  const flight = preflight.status === "fulfilled" && record(preflight.value) ? preflight.value : void 0;
+  let normalized;
+  try {
+    normalized = normalizeQuota(flight?.codingPlan, personal ? summary : void 0);
+  } catch (error) {
+    if (!(error instanceof ConsoleError)) throw error;
+  }
+  const balances = personal ? normalizeBalances(summary) : {};
+  const total = personal ? number(flight?.balanceUsd, true) : void 0;
+  if (total !== void 0) balances.totalUsd = total;
+  const permission = [preflight, billing].some((item) => item.status === "rejected" && item.reason instanceof ConsoleError && item.reason.kind === "permission");
+  if (!normalized && !Object.keys(balances).length && !permission) {
+    if (preflight.status === "rejected") throw preflight.reason;
+    throw new ConsoleError("response");
+  }
+  const windows = normalized?.windows ?? [];
+  const missingWindows = normalized?.eligible !== false && !windows.length;
+  const missingBalances = personal && Object.keys(balances).length < 3;
+  const partial = missingWindows || missingBalances || !personal || permission;
+  const note = !personal ? "\u56E2\u961F\u6216\u672A\u77E5\u5DE5\u4F5C\u533A\uFF1A\u8D26\u53F7\u94B1\u5305\u53E3\u5F84\u672A\u6838\u5B9E\uFF0C\u6682\u4E0D\u663E\u793A" : missingWindows ? "\u5957\u9910\u989D\u5EA6\u7A97\u53E3\u6682\u4E0D\u53EF\u786E\u8BA4" : missingBalances ? "\u90E8\u5206\u94B1\u5305\u4F59\u989D\u6682\u4E0D\u53EF\u786E\u8BA4" : permission ? "\u90E8\u5206\u989D\u5EA6\u5C42\u65E0\u6743\u8BFB\u53D6" : normalized?.eligible === false ? "\u8BE5\u8D26\u53F7\u6CA1\u6709 Design Plan \u8BA2\u9605\uFF1B\u94B1\u5305\u4F59\u989D\u7167\u5E38\u663E\u793A" : void 0;
+  return { ...common, ...normalized, ...normalizeSubscription(personal ? summary : void 0), windows, balances, state: partial ? "partial" : "ok", ...note ? { note } : {} };
+}
 async function readQuota(session, signal, fetcher = fetch) {
+  if (session.credentialType === "device") return readDeviceQuota(session, signal, fetcher);
   const current = await consoleJson(CURRENT_URL, session, signal, fetcher);
   if (!record(current) || typeof current.workspaceId !== "string" || !/^[A-Za-z0-9_-]{1,64}$/u.test(current.workspaceId)) throw new ConsoleError("response");
   const personal = current.workspaceType === "personal";
@@ -2611,6 +2819,7 @@ async function readDesktopQuota(session, signal, runner = runVela, fetcher = fet
     consoleJson(`${session.apiUrl}/api/v1/wallet/balance`, session, deadline, fetcher),
     cli
   ]);
+  if (wallet.status === "rejected" && wallet.reason instanceof ConsoleError && wallet.reason.kind === "auth") throw wallet.reason;
   const walletBalances = wallet.status === "fulfilled" ? normalizeBalances(wallet.value) : {};
   const cliBalances = funding.status === "fulfilled" && "balance" in funding.value ? normalizeBalances({ balanceUsd: funding.value.balance }) : {};
   const windows = funding.status === "fulfilled" ? funding.value.windows : [];
@@ -2623,7 +2832,7 @@ async function readDesktopQuota(session, signal, runner = runVela, fetcher = fet
   }
   const tier = (funding.status === "fulfilled" ? funding.value.tier : void 0) ?? session.plan;
   const updatedAt = funding.status === "fulfilled" && funding.value.generatedAt || (/* @__PURE__ */ new Date()).toISOString();
-  const note = noSubscription ? "\u684C\u9762\u767B\u5F55\u6001\u663E\u793A\u8BE5\u8D26\u53F7\u6CA1\u6709 Design Plan \u8BA2\u9605\uFF1B\u672A\u8BFB\u5230\u7684\u5206\u6C60\u4FDD\u6301\u672A\u77E5\u3002\u5982\u9700\u5B8C\u6574\u5206\u6C60\uFF0C\u8BF7\u5728\u8FDE\u63A5\u9875\u767B\u5F55\u5E76\u5173\u95ED\u201C\u4F18\u5148\u684C\u9762\u767B\u5F55\u6001\u201D\u3002" : !windows.length ? "\u684C\u9762\u767B\u5F55\u6001\u672A\u8FD4\u56DE\u5957\u9910\u7A97\u53E3\uFF1B\u5DF2\u8BFB\u5230\u7684\u94B1\u5305\u4F59\u989D\u7167\u5E38\u663E\u793A\uFF0C\u672A\u8BFB\u5230\u7684\u5206\u6C60\u4FDD\u6301\u672A\u77E5\u3002\u5982\u9700\u5B8C\u6574\u5206\u6C60\uFF0C\u8BF7\u5728\u8FDE\u63A5\u9875\u767B\u5F55\u5E76\u5173\u95ED\u201C\u4F18\u5148\u684C\u9762\u767B\u5F55\u6001\u201D\u3002" : "\u684C\u9762\u767B\u5F55\u6001\u90E8\u5206\u63A5\u53E3\u6743\u9650\u53D7\u9650\uFF1B\u672A\u8BFB\u5230\u7684\u5206\u6C60\u663E\u793A\u672A\u77E5\u3002\u5982\u9700\u5B8C\u6574\u5206\u6C60\uFF0C\u8BF7\u5728\u8FDE\u63A5\u9875\u767B\u5F55\u5E76\u5173\u95ED\u201C\u4F18\u5148\u684C\u9762\u767B\u5F55\u6001\u201D\u3002";
+  const note = noSubscription ? "\u684C\u9762\u767B\u5F55\u6001\u663E\u793A\u8BE5\u8D26\u53F7\u6CA1\u6709 Design Plan \u8BA2\u9605\uFF1B\u672A\u8BFB\u5230\u7684\u5206\u6C60\u4FDD\u6301\u672A\u77E5\u3002\u53EF\u5728\u8FDE\u63A5\u9875\u5B8C\u6210\u72EC\u7ACB\u767B\u5F55\uFF0C\u63D2\u4EF6\u4F1A\u4F18\u5148\u91C7\u7528\u53EF\u8BFB\u53D6\u7684\u5B8C\u6574\u989D\u5EA6\u3002" : !windows.length ? "\u684C\u9762\u767B\u5F55\u6001\u672A\u8FD4\u56DE\u5957\u9910\u7A97\u53E3\uFF1B\u5DF2\u8BFB\u5230\u7684\u94B1\u5305\u4F59\u989D\u7167\u5E38\u663E\u793A\uFF0C\u672A\u8BFB\u5230\u7684\u5206\u6C60\u4FDD\u6301\u672A\u77E5\u3002\u53EF\u5728\u8FDE\u63A5\u9875\u5B8C\u6210\u72EC\u7ACB\u767B\u5F55\uFF0C\u63D2\u4EF6\u4F1A\u4F18\u5148\u91C7\u7528\u53EF\u8BFB\u53D6\u7684\u5B8C\u6574\u989D\u5EA6\u3002" : "\u684C\u9762\u767B\u5F55\u6001\u90E8\u5206\u63A5\u53E3\u6743\u9650\u53D7\u9650\uFF1B\u672A\u8BFB\u5230\u7684\u5206\u6C60\u663E\u793A\u672A\u77E5\u3002\u53EF\u5728\u8FDE\u63A5\u9875\u5B8C\u6210\u72EC\u7ACB\u767B\u5F55\uFF0C\u63D2\u4EF6\u4F1A\u4F18\u5148\u91C7\u7528\u53EF\u8BFB\u53D6\u7684\u5B8C\u6574\u989D\u5EA6\u3002";
   return {
     state: "partial",
     source: "desktop",
@@ -2649,7 +2858,7 @@ var MAX_WINDOWS = 64;
 var MAX_API_KEY = 16384;
 var HTTP_ASCII = /^[\x21-\x7e]+$/u;
 var ENV_REF = /^[A-Za-z_][A-Za-z0-9_]*$/u;
-var MODEL_ID3 = /^[A-Za-z0-9._:/-]{1,128}$/u;
+var MODEL_ID2 = /^[A-Za-z0-9._:/-]{1,128}$/u;
 var LOGIN_PHASES = ["idle", "launching", "waiting", "verifying", "success", "cancelled", "error"];
 var QUOTA_STATES = ["ok", "partial", "need-login", "error"];
 var SESSION_SOURCES = ["desktop", "login", "environment"];
@@ -2663,7 +2872,7 @@ function isoTime(value, label) {
   if (!Number.isFinite(Date.parse(time))) throw new Error(`${label} \u5FC5\u987B\u662F ISO \u65F6\u95F4\u5B57\u7B26\u4E32`);
   return time;
 }
-function flag2(value, label) {
+function flag(value, label) {
   if (typeof value !== "boolean") throw new Error(`${label} \u5FC5\u987B\u662F\u5E03\u5C14\u503C`);
   return value;
 }
@@ -2719,11 +2928,11 @@ function parseQuotaSnapshot(value) {
     ...value.subscriptionPeriodStart === void 0 ? {} : { subscriptionPeriodStart: isoTime(value.subscriptionPeriodStart, "\u8BA2\u9605\u5468\u671F\u5F00\u59CB\u65F6\u95F4") },
     ...value.subscriptionPeriodEnd === void 0 ? {} : { subscriptionPeriodEnd: isoTime(value.subscriptionPeriodEnd, "\u8BA2\u9605\u5468\u671F\u7ED3\u675F\u65F6\u95F4") },
     ...value.nextRefreshAt === void 0 ? {} : { nextRefreshAt: isoTime(value.nextRefreshAt, "\u4E0B\u6B21\u81EA\u52A8\u5237\u65B0\u65F6\u95F4") },
-    ...value.stale === void 0 ? {} : { stale: flag2(value.stale, "\u5386\u53F2\u989D\u5EA6\u8BFB\u6570") },
+    ...value.stale === void 0 ? {} : { stale: flag(value.stale, "\u5386\u53F2\u989D\u5EA6\u8BFB\u6570") },
     ...value.refreshFailures === void 0 ? {} : { refreshFailures: count(value.refreshFailures, "\u8FDE\u7EED\u5237\u65B0\u5931\u8D25\u6B21\u6570") },
-    ...value.autoRefreshPaused === void 0 ? {} : { autoRefreshPaused: flag2(value.autoRefreshPaused, "\u81EA\u52A8\u5237\u65B0\u6682\u505C\u72B6\u6001") },
+    ...value.autoRefreshPaused === void 0 ? {} : { autoRefreshPaused: flag(value.autoRefreshPaused, "\u81EA\u52A8\u5237\u65B0\u6682\u505C\u72B6\u6001") },
     ...value.tier === void 0 ? {} : { tier: text(value.tier, "\u5957\u9910\u540D", MAX_TIER) },
-    ...value.eligible === void 0 ? {} : { eligible: flag2(value.eligible, "\u5957\u9910\u8D44\u683C") },
+    ...value.eligible === void 0 ? {} : { eligible: flag(value.eligible, "\u5957\u9910\u8D44\u683C") },
     windows: windows.map(parseQuotaWindow),
     balances: {
       ...balances.subscriptionUsd === void 0 ? {} : { subscriptionUsd: amount(balances.subscriptionUsd, "\u8BA2\u9605\u4F59\u989D") },
@@ -2737,9 +2946,19 @@ function parseLoginState(value) {
   if (!record(value)) throw new Error("\u767B\u5F55\u72B6\u6001\u5FC5\u987B\u662F\u5BF9\u8C61");
   const jobId = value.jobId;
   if (jobId !== null && jobId !== void 0 && typeof jobId !== "string") throw new Error("\u767B\u5F55\u4EFB\u52A1 id \u5FC5\u987B\u662F\u5B57\u7B26\u4E32\u6216 null");
+  const state = member(value.state, LOGIN_PHASES, "\u767B\u5F55\u9636\u6BB5");
+  let approval = {};
+  if (state === "waiting" && (value.activationUrl !== void 0 || value.userCode !== void 0 || value.expiresAt !== void 0)) {
+    const userCode = text(value.userCode, "\u8BBE\u5907\u6388\u6743\u7801", 64);
+    if (!/^[A-Za-z0-9-]+$/u.test(userCode)) throw new Error("\u8BBE\u5907\u6388\u6743\u7801\u683C\u5F0F\u65E0\u6548");
+    const activationUrl = validateActivationUrl(value.activationUrl, userCode);
+    if (activationUrl === null) throw new Error("\u8BBE\u5907\u6388\u6743\u94FE\u63A5\u65E0\u6548");
+    approval = { activationUrl, userCode, expiresAt: isoTime(value.expiresAt, "\u8BBE\u5907\u6388\u6743\u5230\u671F\u65F6\u95F4") };
+  }
   return {
     jobId: typeof jobId === "string" && jobId.length > 0 ? text(jobId, "\u767B\u5F55\u4EFB\u52A1 id", MAX_JOB_ID) : null,
-    state: member(value.state, LOGIN_PHASES, "\u767B\u5F55\u9636\u6BB5"),
+    state,
+    ...approval,
     ...value.message === void 0 ? {} : { message: text(value.message, "\u767B\u5F55\u8BF4\u660E", MAX_MESSAGE) },
     ...value.startedAt === void 0 ? {} : { startedAt: isoTime(value.startedAt, "\u767B\u5F55\u5F00\u59CB\u65F6\u95F4") },
     ...value.finishedAt === void 0 ? {} : { finishedAt: isoTime(value.finishedAt, "\u767B\u5F55\u7ED3\u675F\u65F6\u95F4") }
@@ -2748,12 +2967,12 @@ function parseLoginState(value) {
 function parseStatusModel(value) {
   if (!record(value)) throw new Error("\u6A21\u578B\u6761\u76EE\u5FC5\u987B\u662F\u5BF9\u8C61");
   const id = text(value.id, "\u6A21\u578B id", 128);
-  if (!MODEL_ID3.test(id)) throw new Error("\u6A21\u578B id \u542B\u4E0D\u5141\u8BB8\u7684\u5B57\u7B26");
+  if (!MODEL_ID2.test(id)) throw new Error("\u6A21\u578B id \u542B\u4E0D\u5141\u8BB8\u7684\u5B57\u7B26");
   return {
     id,
     name: text(value.name, "\u6A21\u578B\u540D", 128),
     group: member(value.group, MODEL_GROUPS, "\u6A21\u578B\u5206\u7EC4"),
-    ...value.enabled === void 0 ? {} : { enabled: flag2(value.enabled, "\u6A21\u578B\u542F\u7528\u72B6\u6001") },
+    ...value.enabled === void 0 ? {} : { enabled: flag(value.enabled, "\u6A21\u578B\u542F\u7528\u72B6\u6001") },
     ...value.contextWindow === void 0 ? {} : { contextWindow: positiveInteger(value.contextWindow, "\u4E0A\u4E0B\u6587\u9884\u7B97", 1e8) },
     ...value.maxOutputTokens === void 0 ? {} : { maxOutputTokens: positiveInteger(value.maxOutputTokens, "\u6700\u5927\u8F93\u51FA", 1e7) },
     ...value.reasoningEfforts === void 0 ? {} : { reasoningEfforts: parseEfforts(value.reasoningEfforts) }
@@ -2764,8 +2983,8 @@ function parseStatusConfig(value) {
   const apiKeyEnv = text(value.apiKeyEnv, "\u51ED\u636E\u5F15\u7528\u540D", MAX_ENV_REF);
   if (!ENV_REF.test(apiKeyEnv)) throw new Error("\u51ED\u636E\u5F15\u7528\u540D\u5FC5\u987B\u662F\u5408\u6CD5\u6807\u8BC6\u7B26");
   return {
-    emptyTurnGuard: flag2(value.emptyTurnGuard, "\u7A7A\u8F6E\u4FDD\u62A4\u5F00\u5173"),
-    useDesktopCredential: flag2(value.useDesktopCredential, "\u684C\u9762\u767B\u5F55\u6001\u5F00\u5173"),
+    emptyTurnGuard: flag(value.emptyTurnGuard, "\u7A7A\u8F6E\u4FDD\u62A4\u5F00\u5173"),
+    useDesktopCredential: flag(value.useDesktopCredential, "\u684C\u9762\u767B\u5F55\u6001\u5F00\u5173"),
     baseURL: text(value.baseURL, "\u63A8\u7406\u5730\u5740", MAX_BASE_URL),
     apiKeyEnv,
     ...value.apiProtocol === void 0 ? {} : { apiProtocol: member(value.apiProtocol, API_PROTOCOL_IDS, "\u63A8\u7406\u534F\u8BAE") },
@@ -2787,7 +3006,7 @@ function parseStatus(value) {
   }
   return {
     revision: text(value.revision, "\u914D\u7F6E\u7248\u672C", MAX_REVISION),
-    apiKeyConfigured: flag2(value.apiKeyConfigured, "\u51ED\u636E\u662F\u5426\u5C31\u7EEA"),
+    apiKeyConfigured: flag(value.apiKeyConfigured, "\u51ED\u636E\u662F\u5426\u5C31\u7EEA"),
     ...value.sessionSource === void 0 ? {} : { sessionSource: member(value.sessionSource, SESSION_SOURCES, "\u767B\u5F55\u6001\u6765\u6E90") },
     quota: parseQuotaSnapshot(value.quota),
     login: parseLoginState(value.login),
@@ -2824,7 +3043,9 @@ var SESSION = credentialKey(name, "console");
 var hash = (value) => createHash("sha256").update(JSON.stringify(value) ?? "").digest("hex");
 var needLogin = () => ({ state: "need-login", updatedAt: (/* @__PURE__ */ new Date()).toISOString(), windows: [], balances: {}, note: "\u5C1A\u672A\u8BFB\u53D6\u989D\u5EA6\uFF1B\u53EF\u4F7F\u7528\u684C\u9762\u767B\u5F55\u6001\u6216\u5728\u8FDE\u63A5\u9875\u767B\u5F55" });
 function grantOf(value) {
-  if (value?.kind !== "grant" || !record(value.payload) || typeof value.payload.cookie !== "string") return;
+  if (value?.kind !== "grant" || !record(value.payload)) return;
+  if (value.payload.kind === "device") return deviceGrant(value.payload);
+  if (typeof value.payload.cookie !== "string") return;
   return { cookie: value.payload.cookie, ...typeof value.payload.expiresAt === "number" ? { expiresAt: value.payload.expiresAt } : {} };
 }
 var _saveApiKey_dec, _cancelLogin_dec, _loginStatus_dec, _startLogin_dec, _refreshQuotaNow_dec, _refreshQuota_dec, _refreshModels_dec, _status_dec, _a, _init;
@@ -2861,13 +3082,7 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
         this._credentials();
         return { revision: expectedRevision, sessionHash: hash(state.sessionRecord), configHash: hash(state.config) };
       },
-      verify: async (cookie, signal) => {
-        const session = cookieSession(cookie, "login");
-        if (!session) throw new ConsoleError("auth");
-        const quota = await this.dependencies.readQuota(session, signal);
-        return { balanceOk: true, coverage: quota.state === "ok" ? "complete" : "partial", windows: quota.windows };
-      },
-      commit: async (cookie, captured, signal, expiresAt) => {
+      commit: async (tokens, captured, signal) => {
         if (!record(captured) || typeof captured.revision !== "string" || typeof captured.sessionHash !== "string" || typeof captured.configHash !== "string") throw this._conflict();
         await this._state();
         this._expect(captured.revision);
@@ -2875,11 +3090,15 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
         await this._credentials().modifyRecord(SESSION, async (current) => {
           signal.throwIfAborted();
           if (hash(current) !== captured.sessionHash || hash(this._config()) !== captured.configHash) throw this._conflict();
-          return { kind: "grant", payload: { cookie, expiresAt, savedAt: (/* @__PURE__ */ new Date()).toISOString() } };
+          const grant = deviceGrant({ kind: "device", ...tokens });
+          if (!grant) throw new ConsoleError("auth");
+          return { kind: "grant", payload: { ...grant, savedAt: (/* @__PURE__ */ new Date()).toISOString() } };
         });
         this._invalidateQuota();
+        this._modelsFingerprint = "";
+        this._invalidateModels();
       }
-    });
+    }, dependencies.loginOptions);
     ctx.effect(() => () => {
       this._lifetime.abort();
       this._login.dispose();
@@ -2894,28 +3113,43 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
     if (!service) throw new RemoteError("opendesign/credentials-unavailable", "DSH \u51ED\u636E\u670D\u52A1\u4E0D\u53EF\u7528\uFF1B\u53EF\u5148\u4F7F\u7528\u542F\u52A8\u73AF\u5883\u53D8\u91CF", void 0);
     return service;
   }
-  async resolveApiKey(ref) {
+  async _key(ref, baseURL, apiRecord, sessionRecord) {
     const credentials = this.ctx.get("credentials");
     const ambient = credentials ? (await credentials.resolve(credentialRef(ref)))?.value : launchEnvironmentOf(this.ctx).get(ref)?.value;
     if (ambient?.trim()) return ambient;
-    const saved = await credentials?.readRecord(API_KEY);
-    return saved?.kind === "api-key" ? saved.key : void 0;
+    if (apiRecord?.kind === "api-key" && apiRecord.key?.trim()) return apiRecord.key;
+    const grant = grantOf(sessionRecord);
+    return isOfficialRuntimeUrl(baseURL) && grant && "kind" in grant && grant.kind === "device" ? grant.runtimeKey : void 0;
+  }
+  async resolveApiKey(ref, baseURL = this._config().baseURL) {
+    const credentials = this.ctx.get("credentials");
+    const [apiRecord, sessionRecord] = await Promise.all([credentials?.readRecord(API_KEY), credentials?.readRecord(SESSION)]);
+    return this._key(ref, baseURL, apiRecord, sessionRecord);
+  }
+  _invalidateModels() {
+    const changed = this._modelsUpdatedAt !== void 0;
+    this._modelsEpoch++;
+    this._modelsController?.abort();
+    this._modelsPending = void 0;
+    this._models = MODELS;
+    this._modelsUpdatedAt = void 0;
+    this._modelsError = void 0;
+    if (changed) {
+      try {
+        this.dependencies.modelsChanged?.();
+      } catch {
+      }
+    }
   }
   async _state() {
     const credentials = this.ctx.get("credentials"), config = this._config();
-    const [apiRecord, sessionRecord, key] = await Promise.all([credentials?.readRecord(API_KEY), credentials?.readRecord(SESSION), this.resolveApiKey(config.apiKeyEnv)]);
+    const [apiRecord, sessionRecord] = await Promise.all([credentials?.readRecord(API_KEY), credentials?.readRecord(SESSION)]);
+    const key = await this._key(config.apiKeyEnv, config.baseURL, apiRecord, sessionRecord);
     const state = { apiRecord, sessionRecord, key, config };
     const modelsFingerprint = hash({ key, baseURL: config.baseURL });
     if (modelsFingerprint !== this._modelsFingerprint) {
-      const changed = this._modelsUpdatedAt !== void 0;
       this._modelsFingerprint = modelsFingerprint;
-      this._modelsEpoch++;
-      this._modelsController?.abort();
-      this._modelsPending = void 0;
-      this._models = MODELS;
-      this._modelsUpdatedAt = void 0;
-      this._modelsError = void 0;
-      if (changed) this.dependencies.modelsChanged?.();
+      this._invalidateModels();
     }
     const fingerprint = hash(state);
     if (fingerprint !== this._fingerprint) {
@@ -3038,9 +3272,10 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
     let identity;
     let refreshFailed = false;
     try {
+      const grant = grantOf(await this.ctx.get("credentials")?.readRecord(SESSION));
       const authDeps = {
         useDesktop: config.useDesktopCredential,
-        readGrant: async () => grantOf(await this.ctx.get("credentials")?.readRecord(SESSION)),
+        readGrant: async () => grant,
         resolveRef: async (ref) => {
           const credentials = this.ctx.get("credentials");
           return credentials ? (await credentials.resolve(credentialRef(ref)))?.value : launchEnvironmentOf(this.ctx).get(ref)?.value;
@@ -3058,7 +3293,10 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
             if (fallback.state === "ready") {
               try {
                 const complete = await this.dependencies.readQuota(fallback.session, signal);
-                if (complete.state === "ok" && (complete.windows.length > 0 || complete.eligible === false)) result = { ...complete, note: `\u684C\u9762\u767B\u5F55\u6001\u4EC5\u63D0\u4F9B\u90E8\u5206\u989D\u5EA6\uFF1B\u5F53\u524D\u663E\u793A\u72EC\u7ACB\u767B\u5F55\u8D26\u53F7\u7684\u5B8C\u6574\u989D\u5EA6\u3002${complete.note ? ` ${complete.note}` : ""}` };
+                if (complete.state === "ok" && (complete.windows.length > 0 || complete.eligible === false)) {
+                  result = { ...complete, note: `\u684C\u9762\u767B\u5F55\u6001\u4EC5\u63D0\u4F9B\u90E8\u5206\u989D\u5EA6\uFF1B\u5F53\u524D\u663E\u793A\u72EC\u7ACB\u767B\u5F55\u8D26\u53F7\u7684\u5B8C\u6574\u989D\u5EA6\u3002${complete.note ? ` ${complete.note}` : ""}` };
+                  identity = hash(fallback.session);
+                }
               } catch (error) {
                 if (signal.aborted) throw error;
               }
@@ -3068,6 +3306,7 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
           if (!(error instanceof ConsoleError) || !["auth", "permission"].includes(error.kind)) throw error;
           const fallback = await this.dependencies.resolveSession({ ...authDeps, useDesktop: false });
           if (fallback.state !== "ready") throw new ConsoleError("auth");
+          identity = hash(fallback.session);
           result = await this.dependencies.readQuota(fallback.session, signal);
         }
       }
@@ -3145,7 +3384,7 @@ function apply(ctx, config) {
   const adapter = new CoRouterAdapter({
     config: current,
     models: () => service.modelCatalog(),
-    apiKey: (ref) => service.resolveApiKey(ref),
+    apiKey: (ref, baseURL) => service.resolveApiKey(ref, baseURL),
     onEmptyTurn: () => {
       service.guardedTurns++;
     },
@@ -3168,7 +3407,7 @@ function apply(ctx, config) {
   ctx.llm.registerModelDiscovery(SETTINGS_NS, async (request, signal) => {
     if (request.provider !== void 0 && ![PLAN_PROVIDER, PAID_PROVIDER].includes(request.provider)) throw new LlmError11("\u4E0D\u662F\u672C\u63D2\u4EF6\u7684\u6A21\u578B\u901A\u9053", "INVALID_REQUEST");
     const config2 = current();
-    const key = request.apiKey ?? await service.resolveApiKey(config2.apiKeyEnv);
+    const key = request.apiKey ?? await service.resolveApiKey(config2.apiKeyEnv, config2.baseURL);
     if (!key) throw new LlmError11("\u8BF7\u5148\u914D\u7F6E CoRouter API Key", "MISSING_CREDENTIAL");
     const models = await fetchModelCatalog(config2.baseURL, key, signal);
     return models.map((row) => ({ id: row.id, name: row.name, ...row.contextWindow === void 0 ? {} : { contextWindow: row.contextWindow }, ...row.maxOutputTokens === void 0 ? {} : { maxTokens: row.maxOutputTokens }, ...row.inputModalities ? { inputModalities: row.inputModalities } : {} }));