dsh-provider-qoder 0.1.0 → 0.2.1

package/lib/index.js

@@ -1,23 +1,203 @@
 import z from "@deepseek-ai/schemastery";
-import { EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ReasoningEffortId, ToolCallId, attributionHeaders } from "@deepseek-ai/dsh-llm";
-import crypto from "node:crypto";
+import { EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ProviderRequestId, ReasoningEffortId, ToolCallId, attributionHeaders, contentHasImage } from "@deepseek-ai/dsh-llm";
+import crypto, { createHash } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir } from "node:os";
 import { dirname, join } from "node:path";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
-//#region src/endpoints.ts
+//#region src/qoder/catalog.ts
+const discoveredMetadataKeys = [
+	"description",
+	"source",
+	"isReasoning",
+	"supportsEffort",
+	"reasoningEfforts",
+	"defaultReasoningEffort",
+	"priceFactor",
+	"contextOptions",
+	"maxContextWindow",
+	"supportsImages"
+];
+const reasoningEffortOrder = /* @__PURE__ */ new Map([
+	["low", 0],
+	["medium", 1],
+	["high", 2],
+	["xhigh", 3],
+	["max", 4]
+]);
+function positiveNumber(value) {
+	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
+}
+function contextOptionsOf(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
+	const options = {};
+	for (const [key, raw] of Object.entries(value)) {
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
+		const entry = raw;
+		const tokenCount = positiveNumber(entry.token_count);
+		const isDefault = typeof entry.is_default === "boolean" ? entry.is_default : void 0;
+		if (tokenCount === void 0) continue;
+		options[key] = {
+			...tokenCount === void 0 ? {} : { tokenCount },
+			...isDefault === void 0 ? {} : { isDefault }
+		};
+	}
+	if (Object.keys(options).length === 0) return void 0;
+	return options;
+}
+function reasoningEffortsOf(value) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return {};
+	const enabled = value.enabled;
+	if (typeof enabled !== "object" || enabled === null || Array.isArray(enabled)) return {};
+	const rawEfforts = enabled.efforts;
+	if (typeof rawEfforts !== "object" || rawEfforts === null || Array.isArray(rawEfforts)) return {};
+	const efforts = [];
+	let defaultEffort;
+	for (const [id, raw] of Object.entries(rawEfforts)) {
+		if (!id.trim() || typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
+		const entry = raw;
+		efforts.push({
+			id,
+			name: id,
+			...typeof entry.description === "string" && entry.description.trim() ? { description: entry.description.trim() } : {}
+		});
+		if (entry.is_default === true) defaultEffort = id;
+	}
+	return {
+		...efforts.length === 0 ? {} : { efforts: efforts.sort((left, right) => (reasoningEffortOrder.get(left.id) ?? Number.MAX_SAFE_INTEGER) - (reasoningEffortOrder.get(right.id) ?? Number.MAX_SAFE_INTEGER)) },
+		...defaultEffort === void 0 ? {} : { defaultEffort }
+	};
+}
+function thinkingDefault(value, fallback, onConflict) {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return fallback;
+	const config = value;
+	const isDefault = (entry) => typeof entry === "object" && entry !== null && !Array.isArray(entry) && entry.is_default === true;
+	const enabled = isDefault(config.enabled);
+	const disabled = isDefault(config.disabled);
+	if (enabled && disabled) onConflict?.("thinking-defaults");
+	return enabled === disabled ? fallback : enabled;
+}
+function normalizeQoderModels(payload, onConflict) {
+	if (typeof payload !== "object" || payload === null || !Array.isArray(payload.assistant)) return [];
+	const models = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const raw of payload.assistant) {
+		if (typeof raw !== "object" || raw === null || raw.enable !== true) continue;
+		const id = typeof raw.key === "string" ? raw.key.trim() : "";
+		if (!id || seen.has(id)) continue;
+		seen.add(id);
+		const contextOptions = contextOptionsOf(raw.context_config);
+		const defaultOptions = Object.values(contextOptions ?? {}).filter((option) => option.isDefault && option.tokenCount !== void 0);
+		if (defaultOptions.length > 1) onConflict?.("context-defaults");
+		const contextWindow = (defaultOptions.length === 1 ? defaultOptions[0].tokenCount : void 0) ?? positiveNumber(raw.max_input_tokens) ?? 18e4;
+		const maxContextWindow = Math.max(positiveNumber(raw.max_input_tokens) ?? 0, contextWindow, ...Object.values(contextOptions ?? {}).map((option) => option.tokenCount ?? 0));
+		const isReasoning = thinkingDefault(raw.thinking_config, raw.is_reasoning === true, onConflict);
+		const priceFactor = typeof raw.price_factor === "number" && Number.isFinite(raw.price_factor) && raw.price_factor >= 0 ? raw.price_factor : void 0;
+		const reasoning = reasoningEffortsOf(raw.thinking_config);
+		models.push({
+			id,
+			name: typeof raw.display_name === "string" && raw.display_name.trim() ? raw.display_name.trim() : id,
+			contextWindow,
+			maxContextWindow,
+			maxTokens: positiveNumber(raw.max_output_tokens) ?? 32768,
+			source: typeof raw.source === "string" && raw.source.trim() ? raw.source.trim() : "system",
+			isReasoning,
+			supportsEffort: reasoning.efforts !== void 0,
+			supportsImages: raw.is_vl === true,
+			...reasoning.efforts === void 0 ? {} : { reasoningEfforts: reasoning.efforts },
+			...reasoning.defaultEffort === void 0 ? {} : { defaultReasoningEffort: reasoning.defaultEffort },
+			...priceFactor === void 0 ? {} : { priceFactor },
+			...contextOptions === void 0 ? {} : { contextOptions }
+		});
+	}
+	return models;
+}
+function mergeQoderDiscoveryMetadata(configured, discovered) {
+	const catalog = new Map(discovered.map((model) => [model.id, model]));
+	return configured.map((model) => {
+		const advertised = catalog.get(model.id);
+		if (advertised === void 0) return { ...model };
+		const merged = { ...model };
+		if (advertised.contextWindow !== void 0) merged.contextWindow = Math.min(model.contextWindow ?? advertised.contextWindow, advertised.contextWindow);
+		for (const key of discoveredMetadataKeys) delete merged[key];
+		for (const key of discoveredMetadataKeys) if (advertised[key] !== void 0) Object.assign(merged, { [key]: advertised[key] });
+		return merged;
+	});
+}
+function hasSameQoderDiscoveryMetadata(left, right) {
+	return left?.length === right.length && left.every((model, index) => {
+		const candidate = right[index];
+		return candidate?.id === model.id && candidate.contextWindow === model.contextWindow && discoveredMetadataKeys.every((key) => JSON.stringify(model[key]) === JSON.stringify(candidate[key]));
+	});
+}
+const defaultMaxTokens = 32768;
+const defaultModels = [
+	{
+		id: "cmodel",
+		name: "Cantus (Qoder)",
+		description: "Default Global Qoder subscription model for quick validation",
+		contextWindow: 1e6,
+		maxTokens: defaultMaxTokens,
+		supportsImages: true
+	},
+	{
+		id: "auto",
+		name: "Qoder Auto",
+		description: "Server-routed Global Qoder model pool",
+		contextWindow: 18e4,
+		maxTokens: defaultMaxTokens,
+		supportsImages: true
+	},
+	{
+		id: "ultimate",
+		name: "Qoder Ultimate",
+		description: "Highest-capability Global Qoder model pool",
+		contextWindow: 1e6,
+		maxTokens: defaultMaxTokens,
+		supportsImages: true
+	},
+	{
+		id: "performance",
+		name: "Qoder Performance",
+		description: "Performance-oriented Global Qoder model pool",
+		contextWindow: 1e6,
+		maxTokens: defaultMaxTokens,
+		supportsImages: true
+	},
+	{
+		id: "efficient",
+		name: "Qoder Efficient",
+		description: "Efficiency-oriented Global Qoder model pool",
+		contextWindow: 18e4,
+		maxTokens: defaultMaxTokens,
+		supportsImages: true
+	},
+	{
+		id: "lite",
+		name: "Qoder Lite",
+		description: "Basic Global Qoder model pool",
+		contextWindow: 18e4,
+		maxTokens: defaultMaxTokens
+	}
+];
+//#endregion
+//#region src/qoder/transport/endpoints.ts
 const qoderRegionEndpoints = {
 	global: {
 		baseUrl: "https://api3.qoder.sh/",
-		openApiUrl: "https://openapi.qoder.sh"
+		openApiUrl: "https://openapi.qoder.sh",
+		centerUrl: "https://center.qoder.sh"
 	},
 	china: {
 		baseUrl: "https://gateway.qoder.com.cn/",
-		openApiUrl: "https://openapi.qoder.com.cn"
+		openApiUrl: "https://openapi.qoder.com.cn",
+		centerUrl: "https://gateway.qoder.com.cn"
 	}
 };
-const qoderGlobalBaseUrl = qoderRegionEndpoints.global.baseUrl;
-const qoderGlobalOpenApiUrl = qoderRegionEndpoints.global.openApiUrl;
+/** Signed path of the center image upload route; it never carries an `/algo` prefix. */
+const qoderImageUploadPath = "/api/v2/image/upload";
+qoderRegionEndpoints.global.baseUrl;
+qoderRegionEndpoints.global.openApiUrl;
 function resolveQoderEndpoints(region = "global") {
 	return qoderRegionEndpoints[region] ?? qoderRegionEndpoints.global;
 }
@@ -29,6 +209,11 @@ function getQoderModelListUrl(region = "global") {
 	const { baseUrl } = resolveQoderEndpoints(region);
 	return `${baseUrl}algo/api/v2/model/list?Encode=1`;
 }
+function getQoderImageUploadUrl(region = "global", requestId) {
+	const { centerUrl } = resolveQoderEndpoints(region);
+	const base = `${centerUrl.replace(/\/+$/u, "")}/algo${qoderImageUploadPath}`;
+	return requestId === void 0 ? base : `${base}?request_id=${encodeURIComponent(requestId)}`;
+}
 function getQoderExchangeUrl(region = "global") {
 	const { openApiUrl } = resolveQoderEndpoints(region);
 	return `${openApiUrl}/api/v1/jobToken/exchange`;
@@ -41,12 +226,20 @@ function getQoderUsageUrl(region = "global") {
 	const { openApiUrl } = resolveQoderEndpoints(region);
 	return `${openApiUrl}/api/v2/quota/usage`;
 }
+function getQoderUserPlanUrl(region = "global") {
+	const { openApiUrl } = resolveQoderEndpoints(region);
+	return `${openApiUrl}/api/v2/user/plan`;
+}
+function getQoderUserStatusUrl(region = "global") {
+	const { openApiUrl } = resolveQoderEndpoints(region);
+	return `${openApiUrl}/api/v3/user/status`;
+}
 //#endregion
-//#region src/errors.ts
+//#region src/qoder/errors.ts
 /**
 * DSH-compatible LLM error representation.
 *
-* @module dsh-provider-qoder/errors
+* @module dsh-provider-qoder/qoder/errors
 */
 var QoderLlmError = class extends LlmError {
 	constructor(message, code = "UNKNOWN_ERROR", options) {
@@ -57,11 +250,17 @@ function qoderHttpError(message, response) {
 	const { status } = response;
 	const code = status === 401 || status === 403 ? "AUTH" : status === 408 ? "TIMEOUT" : status === 429 ? "RATE_LIMIT" : status >= 500 && status <= 599 ? "SERVER" : status >= 400 && status <= 499 ? "INVALID_REQUEST" : "PROVIDER_ERROR";
 	const providerRetryAfterMs = retryAfterMs(response.headers?.get("retry-after") ?? null);
+	const requestId = qoderRequestId(response.headers);
 	return new QoderLlmError(message, code, {
 		status,
-		...providerRetryAfterMs === void 0 ? {} : { providerRetryAfterMs }
+		...providerRetryAfterMs === void 0 ? {} : { providerRetryAfterMs },
+		...requestId === void 0 ? {} : { requestId }
 	});
 }
+function qoderRequestId(headers) {
+	const normalized = (headers?.get("x-request-id") ?? headers?.get("request-id") ?? headers?.get("x-amzn-requestid"))?.trim();
+	return normalized ? ProviderRequestId(normalized) : void 0;
+}
 function retryAfterMs(value, nowMs = Date.now()) {
 	const normalized = value?.trim();
 	if (!normalized) return void 0;
@@ -75,7 +274,37 @@ function retryAfterMs(value, nowMs = Date.now()) {
 	return delayMs > 0 ? delayMs : void 0;
 }
 //#endregion
-//#region src/logging.ts
+//#region src/qoder/transport/machine-id.ts
+function defaultMachineIdPaths() {
+	return [join(homedir(), ".qoder", ".auth", "machine_id"), join(homedir(), ".dsh", "qoder", "machine_id")];
+}
+/** Read Qoder's machine id or create the DSH-owned fallback. */
+function getMachineId(paths = defaultMachineIdPaths()) {
+	for (const path of paths) {
+		if (!existsSync(path)) continue;
+		try {
+			const value = readFileSync(path, "utf8").trim();
+			if (value) return value;
+		} catch {}
+	}
+	const machineId = crypto.randomUUID();
+	const savePath = paths.at(-1);
+	if (savePath !== void 0) try {
+		mkdirSync(dirname(savePath), { recursive: true });
+		writeFileSync(savePath, machineId, {
+			encoding: "utf8",
+			flag: "wx"
+		});
+	} catch {
+		try {
+			const existing = readFileSync(savePath, "utf8").trim();
+			if (existing) return existing;
+		} catch {}
+	}
+	return machineId;
+}
+//#endregion
+//#region src/qoder/transport/logging.ts
 const sensitiveKey = /(?:authorization|credential|password|secret|token)/iu;
 const identifierKey = /^(?:accountId|id|uid|userId)$/iu;
 const tokenValue = /\b(?:jrt|jt|pt)-[\w.-]+\b/giu;
@@ -122,224 +351,22 @@ function redactLogPayload(text) {
 		return redactLogValue(text);
 	}
 }
-//#endregion
-//#region src/machine-id.ts
-function defaultMachineIdPaths() {
-	return [join(homedir(), ".qoder", ".auth", "machine_id"), join(homedir(), ".dsh", "qoder", "machine_id")];
-}
-/** Read Qoder's machine id or create the DSH-owned fallback. */
-function getMachineId(paths = defaultMachineIdPaths()) {
-	for (const path of paths) {
-		if (!existsSync(path)) continue;
-		try {
-			const value = readFileSync(path, "utf8").trim();
-			if (value) return value;
-		} catch {}
-	}
-	const machineId = crypto.randomUUID();
-	const savePath = paths.at(-1);
-	if (savePath !== void 0) try {
-		mkdirSync(dirname(savePath), { recursive: true });
-		writeFileSync(savePath, machineId, {
-			encoding: "utf8",
-			flag: "wx"
-		});
-	} catch {
-		try {
-			const existing = readFileSync(savePath, "utf8").trim();
-			if (existing) return existing;
-		} catch {}
-	}
-	return machineId;
+/** Log one successfully parsed non-stream response through the shared redaction policy. */
+function logParsedResponse(logger, operation, result) {
+	logger?.debug?.("[Qoder Response] Parsed", redactLogValue({
+		operation,
+		result
+	}));
 }
 //#endregion
-//#region src/auth.ts
-const userAgent$1 = "dsh-provider-qoder";
-const expiryBufferMs = 300 * 1e3;
-const defaultExpiryMs = 1440 * 60 * 1e3;
-const defaultAuthTimeoutMs = 15e3;
-function abortedError() {
-	return new QoderLlmError("Qoder authentication was aborted.", "ABORTED");
-}
-async function waitForFlight(promise, signal) {
-	if (signal === void 0) return promise;
-	if (signal.aborted) throw abortedError();
-	return new Promise((resolve, reject) => {
-		const onAbort = () => reject(abortedError());
-		signal.addEventListener("abort", onAbort, { once: true });
-		promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
-	});
-}
-var QoderAuthService = class {
-	cache = /* @__PURE__ */ new Map();
-	inFlight = /* @__PURE__ */ new Map();
-	fetchImpl;
-	timeoutMs;
-	resolveMachineId;
-	resolveRegion;
-	region;
-	logger;
-	constructor(options = {}) {
-		this.fetchImpl = options.fetch ?? globalThis.fetch;
-		this.timeoutMs = options.timeoutMs ?? defaultAuthTimeoutMs;
-		this.resolveMachineId = options.resolveMachineId ?? getMachineId;
-		this.resolveRegion = options.resolveRegion;
-		this.region = options.region;
-		this.logger = options.logger;
-	}
-	setRegion(region) {
-		this.region = region;
-	}
-	currentRegion() {
-		if (this.resolveRegion) return this.resolveRegion();
-		return this.region ?? "global";
-	}
-	clear(pat) {
-		if (pat) {
-			for (const key of this.cache.keys()) if (key.endsWith(`:${pat}`) || key === pat) this.cache.delete(key);
-		} else this.cache.clear();
-	}
-	async getCredentials(pat, signal, region) {
-		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid. Configure Qoder in the Qoder settings page.", "MISSING_CREDENTIAL");
-		if (signal?.aborted) throw abortedError();
-		const effectiveRegion = region ?? this.currentRegion();
-		const cacheKey = `${effectiveRegion}:${pat}`;
-		const cached = this.cache.get(cacheKey);
-		if (cached && cached.expiresAt > Date.now() + expiryBufferMs) return cached.creds;
-		let entry = this.inFlight.get(cacheKey);
-		if (entry === void 0) {
-			const controller = new AbortController();
-			const created = {};
-			created.controller = controller;
-			created.waiters = 0;
-			created.settled = false;
-			created.timeout = setTimeout(() => controller.abort("authentication timeout"), this.timeoutMs);
-			created.promise = this.exchangeAndResolve(pat, controller.signal, effectiveRegion).finally(() => {
-				created.settled = true;
-				clearTimeout(created.timeout);
-				if (this.inFlight.get(cacheKey) === created) this.inFlight.delete(cacheKey);
-			});
-			entry = created;
-			this.inFlight.set(cacheKey, entry);
-		}
-		entry.waiters++;
-		try {
-			return await waitForFlight(entry.promise, signal);
-		} finally {
-			entry.waiters--;
-			if (entry.waiters === 0 && !entry.settled) entry.controller.abort("all callers aborted");
-		}
-	}
-	async exchangeAndResolve(pat, signal, region) {
-		let jobToken;
-		let expiresAt = Date.now() + defaultExpiryMs;
-		try {
-			const url = getQoderExchangeUrl(region);
-			this.logger?.debug?.("[Qoder Auth] Exchanging PAT for job token", {
-				url,
-				region
-			});
-			const response = await this.fetchImpl(url, {
-				method: "POST",
-				headers: {
-					"content-type": "application/json",
-					"accept": "application/json",
-					"user-agent": userAgent$1,
-					"cosy-version": "1.0.1",
-					"cosy-clienttype": "5"
-				},
-				body: JSON.stringify({ personal_token: pat }),
-				signal
-			});
-			this.logger?.debug?.("[Qoder Auth] Exchange completed", {
-				status: response.status,
-				statusText: response.statusText
-			});
-			if (!response.ok) {
-				const errorText = await response.text();
-				this.logger?.error?.("[Qoder Auth] Exchange failed", redactLogPayload(errorText));
-				throw qoderHttpError(`Qoder PAT exchange failed with HTTP status ${response.status}.`, response);
-			}
-			const data = await response.json();
-			if (!data.token) throw new QoderLlmError("Qoder PAT exchange returned no job token.", "AUTH");
-			jobToken = data.token;
-			if (data.expires_at) {
-				const parsed = Date.parse(data.expires_at);
-				if (!Number.isNaN(parsed)) expiresAt = parsed;
-			} else if (typeof data.expires_in === "number" && data.expires_in > 0) expiresAt = Date.now() + data.expires_in;
-		} catch (error) {
-			if (error instanceof QoderLlmError) throw error;
-			if (signal.aborted) throw new QoderLlmError("Qoder authentication request timed out or was cancelled.", "TIMEOUT");
-			throw new QoderLlmError("Qoder PAT exchange network request failed.", "TRANSPORT", { cause: error });
-		}
-		const userInfo = await this.fetchUserInfo(jobToken, signal, region);
-		const creds = {
-			userID: userInfo.userID,
-			authToken: jobToken,
-			name: userInfo.name || "Qoder User",
-			email: userInfo.email,
-			machineID: this.resolveMachineId()
-		};
-		const cacheKey = `${region}:${pat}`;
-		this.cache.set(cacheKey, {
-			creds,
-			expiresAt
-		});
-		return creds;
-	}
-	async fetchUserInfo(jobToken, signal, region) {
-		const url = getQoderUserInfoUrl(region);
-		this.logger?.debug?.("[Qoder UserInfo] Requesting subscriber profile", { url });
-		try {
-			const response = await this.fetchImpl(url, {
-				headers: {
-					"authorization": `Bearer ${jobToken}`,
-					"accept": "application/json",
-					"user-agent": userAgent$1,
-					"cosy-version": "1.0.1",
-					"cosy-clienttype": "5"
-				},
-				signal
-			});
-			this.logger?.debug?.("[Qoder UserInfo] Request completed", {
-				status: response.status,
-				statusText: response.statusText
-			});
-			const text = await response.text();
-			if (!response.ok) {
-				this.logger?.error?.("[Qoder UserInfo] Request failed", redactLogPayload(text));
-				throw qoderHttpError(`Qoder identity lookup failed with HTTP status ${response.status}.`, response);
-			}
-			let info;
-			try {
-				info = JSON.parse(text);
-			} catch {
-				this.logger?.error?.("[Qoder UserInfo] Invalid JSON response", redactLogPayload(text));
-				throw new QoderLlmError("Qoder identity lookup returned invalid JSON.", "AUTH");
-			}
-			this.logger?.debug?.("[Qoder UserInfo] Subscriber profile resolved", redactLogValue(info));
-			if (!info.id) throw new QoderLlmError("Qoder identity lookup returned no user id.", "AUTH");
-			return {
-				userID: info.id,
-				email: info.email ?? "",
-				name: info.name ?? info.username ?? ""
-			};
-		} catch (error) {
-			if (error instanceof QoderLlmError) throw error;
-			if (signal.aborted) throw new QoderLlmError("Qoder identity lookup timed out or was cancelled.", "TIMEOUT");
-			throw new QoderLlmError("Qoder identity lookup network request failed.", "TRANSPORT", { cause: error });
-		}
-	}
-};
-//#endregion
-//#region src/cosy.ts
+//#region src/qoder/transport/wire/cosy.ts
 /**
 * COSY authentication headers and signature algorithm for Qoder services.
 *
 * Implements RSA + AES + MD5 signature generation required by the upstream
 * Qoder gateway.
 *
-* @module dsh-provider-qoder/cosy
+* @module dsh-provider-qoder/qoder/transport/wire/cosy
 */
 const qoderRSAPublicKey = `-----BEGIN PUBLIC KEY-----
 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA8iMH5c02LilrsERw9t6Pv5Nc
@@ -347,8 +374,8 @@ MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA8iMH5c02LilrsERw9t6Pv5Nc
 6HRkPJ7S236FZz73In/KVuLnwI8JJ2CbuJap8kvheCCZpmAWpb/cPx/3Vr/J6I17
 XcW+ML9FoCI6AOvOzwIDAQAB
 -----END PUBLIC KEY-----`;
-const qoderIdeVersion = "1.1.3";
-const qoderClientType = "5";
+const qoderIdeVersion = "1.1.47";
+const defaultUserAgent = `qoder/${qoderIdeVersion}`;
 const qoderDataPolicy = "disagree";
 const qoderLoginVersion = "v2";
 const qoderMachineOs = process.platform === "win32" ? process.arch === "arm64" ? "aarch64_windows" : "x86_64_windows" : process.arch === "arm64" ? "aarch64_linux" : "x86_64_linux";
@@ -409,7 +436,7 @@ function buildAuthHeaders(body, requestURL, creds) {
 		"Cosy-Machinetoken": machineID,
 		"Cosy-Machinetype": qoderMachineTypeMagic,
 		"Cosy-Machineos": qoderMachineOs,
-		"Cosy-Clienttype": qoderClientType,
+		"Cosy-Clienttype": "5",
 		"Cosy-Clientip": "127.0.0.1",
 		"Cosy-Bodyhash": bodyHash,
 		"Cosy-Bodylength": bodyLen,
@@ -421,48 +448,418 @@ function buildAuthHeaders(body, requestURL, creds) {
 		"X-Request-Id": crypto.randomUUID()
 	};
 }
+const defaultMaxJsonBytes = 2 * 1024 * 1024;
+const defaultMaxErrorBytes = 16 * 1024;
+const metadataRetryBaseDelayMs = 200;
+const maxProviderRetryDelayMs = 1e4;
+function opaqueCredentialKey(value) {
+	return createHash("sha256").update(value).digest("hex");
+}
+function retryableMetadataError(error) {
+	return error instanceof QoderLlmError && [
+		"RATE_LIMIT",
+		"SERVER",
+		"TIMEOUT",
+		"TRANSPORT"
+	].includes(error.code);
+}
+function abortableDelay(ms, signal) {
+	if (signal.aborted) return Promise.reject(new DOMException("aborted", "AbortError"));
+	return new Promise((resolve, reject) => {
+		const timer = setTimeout(() => {
+			signal.removeEventListener("abort", onAbort);
+			resolve();
+		}, ms);
+		const onAbort = () => {
+			clearTimeout(timer);
+			reject(new DOMException("aborted", "AbortError"));
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+	});
+}
+async function retryMetadataRead(signal, operation) {
+	try {
+		return await operation();
+	} catch (error) {
+		if (!retryableMetadataError(error) || signal.aborted) throw error;
+		const providerDelay = error.failure.providerRetryAfterMs;
+		await abortableDelay(providerDelay === void 0 ? metadataRetryBaseDelayMs + Math.floor(Math.random() * 41) : Math.min(providerDelay, maxProviderRetryDelayMs), signal);
+		return operation();
+	}
+}
+function withDeadline(signal, timeoutMs) {
+	const timeoutSignal = AbortSignal.timeout(timeoutMs);
+	return {
+		timeoutSignal,
+		signal: signal === void 0 ? timeoutSignal : AbortSignal.any([signal, timeoutSignal])
+	};
+}
+async function readLimitedText(response, maxBytes, label) {
+	const declaredLength = Number(response.headers.get("content-length"));
+	if (Number.isFinite(declaredLength) && declaredLength > maxBytes) {
+		await response.body?.cancel().catch(() => void 0);
+		throw new QoderLlmError(`${label} exceeded its response size limit.`, "MALFORMED_RESPONSE");
+	}
+	if (!response.body) return "";
+	const reader = response.body.getReader();
+	const decoder = new TextDecoder();
+	let bytes = 0;
+	let text = "";
+	try {
+		while (true) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			bytes += value.byteLength;
+			if (bytes > maxBytes) throw new QoderLlmError(`${label} exceeded its response size limit.`, "MALFORMED_RESPONSE");
+			text += decoder.decode(value, { stream: true });
+		}
+		return text + decoder.decode();
+	} finally {
+		await reader.cancel().catch(() => void 0);
+		reader.releaseLock();
+	}
+}
+var SingleFlight = class {
+	flights = /* @__PURE__ */ new Map();
+	run(key, signal, start, abortedError) {
+		if (signal?.aborted) return Promise.reject(abortedError());
+		let flight = this.flights.get(key);
+		if (flight === void 0 || flight.controller.signal.aborted) {
+			const controller = new AbortController();
+			const created = {};
+			created.controller = controller;
+			created.settled = false;
+			created.waiters = 0;
+			created.promise = start(controller.signal).finally(() => {
+				created.settled = true;
+				if (this.flights.get(key) === created) this.flights.delete(key);
+			});
+			flight = created;
+			this.flights.set(key, created);
+		}
+		flight.waiters++;
+		return new Promise((resolve, reject) => {
+			let finished = false;
+			const finish = (callback) => {
+				if (finished) return;
+				finished = true;
+				signal?.removeEventListener("abort", onAbort);
+				flight.waiters--;
+				if (flight.waiters === 0 && !flight.settled) {
+					if (this.flights.get(key) === flight) this.flights.delete(key);
+					flight.controller.abort("all callers aborted");
+				}
+				callback();
+			};
+			const onAbort = () => finish(() => reject(abortedError()));
+			signal?.addEventListener("abort", onAbort, { once: true });
+			flight.promise.then((value) => finish(() => resolve(value)), (error) => finish(() => reject(error)));
+		});
+	}
+};
+async function openApiJsonRequest(fetchImpl, options) {
+	const method = options.method ?? (options.body !== void 0 ? "POST" : "GET");
+	const timeoutMs = options.timeoutMs ?? 15e3;
+	const timeoutSignal = AbortSignal.timeout(timeoutMs);
+	const requestSignal = options.signal === void 0 ? timeoutSignal : AbortSignal.any([options.signal, timeoutSignal]);
+	const startedAt = performance.now();
+	options.logger?.debug?.(`[Qoder ${options.operation}] Requesting`, {
+		url: options.url,
+		method
+	});
+	try {
+		const headers = {
+			accept: "application/json",
+			"user-agent": options.userAgent ?? defaultUserAgent,
+			"cosy-version": "1.0.1",
+			"cosy-clienttype": "5",
+			...options.headers
+		};
+		if (options.token) headers.authorization = `Bearer ${options.token}`;
+		if (options.machineId) {
+			headers["Cosy-MachineToken"] = options.machineId;
+			headers["Cosy-MachineType"] = "host";
+		}
+		let bodyText;
+		if (options.body !== void 0) {
+			headers["content-type"] = "application/json";
+			bodyText = typeof options.body === "string" ? options.body : JSON.stringify(options.body);
+		}
+		const response = await fetchImpl(options.url, {
+			method,
+			headers,
+			body: bodyText,
+			signal: requestSignal
+		});
+		options.logger?.debug?.(`[Qoder ${options.operation}] Request completed`, {
+			status: response.status,
+			statusText: response.statusText,
+			durationMs: Math.round(performance.now() - startedAt),
+			...qoderRequestId(response.headers) === void 0 ? {} : { requestId: qoderRequestId(response.headers) }
+		});
+		const text = await readLimitedText(response, response.ok ? defaultMaxJsonBytes : defaultMaxErrorBytes, `Qoder ${options.operation} response`);
+		if (!response.ok) {
+			options.logger?.error?.(`[Qoder ${options.operation}] Request failed`, redactLogPayload(text));
+			throw qoderHttpError(`Failed to execute Qoder ${options.operation} with status ${response.status}.`, response);
+		}
+		let data;
+		try {
+			data = JSON.parse(text);
+		} catch {
+			options.logger?.error?.(`[Qoder ${options.operation}] Invalid JSON response`, redactLogPayload(text));
+			throw new QoderLlmError(`Failed to parse Qoder ${options.operation} JSON response`, "MALFORMED_RESPONSE");
+		}
+		if (options.logCategory) logParsedResponse(options.logger, options.logCategory, data);
+		return data;
+	} catch (error) {
+		if (error instanceof QoderLlmError) throw error;
+		if (options.signal?.aborted) throw new QoderLlmError(`Qoder ${options.operation} request was aborted.`, "ABORTED");
+		if (timeoutSignal.aborted) throw new QoderLlmError(`Qoder ${options.operation} request timed out.`, "TIMEOUT");
+		throw new QoderLlmError(`Qoder ${options.operation} network request failed.`, "TRANSPORT", { cause: error });
+	}
+}
 //#endregion
-//#region src/encoding.ts
-/**
-* Qoder WAF Body encoding algorithm.
-*
-* Re-arranges standard Base64 chunks and translates characters against
-* a custom alphabet to satisfy Qoder upstream WAF requirements.
-*
-* @module dsh-provider-qoder/encoding
-*/
-const qoderCustomAlphabet = "_doRTgHZBKcGVjlvpC,@aFSx#DPuNJme&i*MzLOEn)sUrthbf%Y^w.(kIQyXqWA!";
-const qoderStdAlphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-function qoderEncodeBody(plaintext) {
-	const std = Buffer.isBuffer(plaintext) ? plaintext.toString("base64") : Buffer.from(plaintext).toString("base64");
-	const n = std.length;
-	const a = Math.floor(n / 3);
-	const rearranged = std.slice(n - a) + std.slice(a, n - a) + std.slice(0, a);
-	let out = "";
-	for (let i = 0; i < n; i++) {
-		const c = rearranged[i];
-		if (c === "=") out += "$";
-		else {
-			const idx = qoderStdAlphabet.indexOf(c);
-			if (idx >= 0) out += qoderCustomAlphabet[idx];
-			else out += c;
+//#region src/qoder/transport/auth.ts
+const expiryBufferMs = 300 * 1e3;
+const defaultExpiryMs = 1440 * 60 * 1e3;
+const defaultAuthTimeoutMs = 15e3;
+function abortedError() {
+	return new QoderLlmError("Qoder authentication was aborted.", "ABORTED");
+}
+async function waitForFlight(promise, signal) {
+	if (signal === void 0) return promise;
+	if (signal.aborted) throw abortedError();
+	return new Promise((resolve, reject) => {
+		const onAbort = () => reject(abortedError());
+		signal.addEventListener("abort", onAbort, { once: true });
+		promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+	});
+}
+var QoderAuthService = class {
+	cache = /* @__PURE__ */ new Map();
+	inFlight = /* @__PURE__ */ new Map();
+	fetchImpl;
+	timeoutMs;
+	resolveMachineId;
+	region;
+	logger;
+	constructor(options = {}) {
+		this.fetchImpl = options.fetch ?? globalThis.fetch;
+		this.timeoutMs = options.timeoutMs ?? defaultAuthTimeoutMs;
+		this.resolveMachineId = options.resolveMachineId ?? getMachineId;
+		this.region = options.region ?? "global";
+		this.logger = options.logger;
+	}
+	clear(pat) {
+		if (pat) this.cache.delete(`${this.region}:${opaqueCredentialKey(pat)}`);
+		else this.cache.clear();
+	}
+	async getCredentials(pat, signal) {
+		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid. Configure Qoder in the Qoder settings page.", "MISSING_CREDENTIAL");
+		if (signal?.aborted) throw abortedError();
+		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
+		const cached = this.cache.get(cacheKey);
+		if (cached && cached.expiresAt > Date.now() + expiryBufferMs) return cached.creds;
+		let entry = this.inFlight.get(cacheKey);
+		if (entry === void 0 || entry.controller.signal.aborted) {
+			const controller = new AbortController();
+			const created = {};
+			created.controller = controller;
+			created.waiters = 0;
+			created.settled = false;
+			created.timeout = setTimeout(() => controller.abort("authentication timeout"), this.timeoutMs);
+			created.promise = this.exchangeAndResolve(pat, controller.signal).finally(() => {
+				created.settled = true;
+				clearTimeout(created.timeout);
+				if (this.inFlight.get(cacheKey) === created) this.inFlight.delete(cacheKey);
+			});
+			entry = created;
+			this.inFlight.set(cacheKey, entry);
+		}
+		entry.waiters++;
+		try {
+			return await waitForFlight(entry.promise, signal);
+		} finally {
+			entry.waiters--;
+			if (entry.waiters === 0 && !entry.settled) {
+				if (this.inFlight.get(cacheKey) === entry) this.inFlight.delete(cacheKey);
+				entry.controller.abort("all callers aborted");
+			}
+		}
+	}
+	async exchangeAndResolve(pat, signal) {
+		let jobToken;
+		let expiresAt = Date.now() + defaultExpiryMs;
+		const data = await openApiJsonRequest(this.fetchImpl, {
+			url: getQoderExchangeUrl(this.region),
+			body: { personal_token: pat },
+			signal,
+			timeoutMs: this.timeoutMs,
+			logger: this.logger,
+			operation: "Auth",
+			logCategory: "auth.exchange"
+		});
+		if (!data.token) throw new QoderLlmError("Qoder PAT exchange returned no job token.", "AUTH");
+		jobToken = data.token;
+		if (data.expires_at) {
+			const parsed = Date.parse(data.expires_at);
+			if (!Number.isNaN(parsed)) expiresAt = parsed;
+		} else if (typeof data.expires_in === "number" && data.expires_in > 0) expiresAt = Date.now() + data.expires_in;
+		const userInfo = await retryMetadataRead(signal, () => this.fetchUserInfo(jobToken, signal));
+		const creds = {
+			userID: userInfo.userID,
+			authToken: jobToken,
+			name: userInfo.name || "Qoder User",
+			email: userInfo.email,
+			machineID: this.resolveMachineId()
+		};
+		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
+		this.cache.set(cacheKey, {
+			creds,
+			expiresAt
+		});
+		return creds;
+	}
+	async fetchUserInfo(jobToken, signal) {
+		const info = await openApiJsonRequest(this.fetchImpl, {
+			url: getQoderUserInfoUrl(this.region),
+			token: jobToken,
+			signal,
+			timeoutMs: this.timeoutMs,
+			logger: this.logger,
+			operation: "UserInfo",
+			logCategory: "auth.user-info"
+		});
+		if (!info.id) throw new QoderLlmError("Qoder identity lookup returned no user id.", "AUTH");
+		return {
+			userID: info.id,
+			email: info.email ?? "",
+			name: info.name ?? info.username ?? ""
+		};
+	}
+};
+//#endregion
+//#region src/qoder/transport/catalog-reader.ts
+async function fetchQoderModels(credentials, options = {}) {
+	const url = getQoderModelListUrl(options.region);
+	const fetchImpl = options.fetch ?? globalThis.fetch;
+	const startedAt = performance.now();
+	const deadline = withDeadline(options.signal, options.timeoutMs ?? 15e3);
+	options.logger?.debug?.("[Qoder Models] Requesting model catalog", { url });
+	try {
+		const response = await fetchImpl(url, {
+			method: "GET",
+			headers: {
+				accept: "application/json",
+				...buildAuthHeaders(null, url, credentials)
+			},
+			signal: deadline.signal
+		});
+		options.logger?.debug?.("[Qoder Models] Catalog request completed", {
+			url,
+			status: response.status,
+			durationMs: Math.round(performance.now() - startedAt),
+			...qoderRequestId(response.headers) === void 0 ? {} : { requestId: qoderRequestId(response.headers) }
+		});
+		const text = await readLimitedText(response, response.ok ? defaultMaxJsonBytes : defaultMaxErrorBytes, "Qoder model discovery response");
+		if (!response.ok) {
+			options.logger?.error?.("[Qoder Models] Catalog request failed", redactLogPayload(text));
+			throw qoderHttpError(`Qoder model discovery failed with HTTP status ${response.status}.`, response);
+		}
+		let payload;
+		try {
+			payload = JSON.parse(text);
+		} catch {
+			throw new QoderLlmError("Qoder model discovery returned invalid JSON.", "MALFORMED_RESPONSE");
 		}
+		const models = normalizeQoderModels(payload, (conflict) => {
+			options.logger?.warn?.("[Qoder Models] Conflicting catalog defaults; using fallback", { conflict });
+		});
+		if (models.length === 0) throw new QoderLlmError("Qoder model discovery returned no enabled models.", "EMPTY_RESPONSE");
+		return models;
+	} catch (error) {
+		if (error instanceof QoderLlmError) throw error;
+		if (options.signal?.aborted) throw new QoderLlmError("Qoder model discovery was aborted.", "ABORTED");
+		if (deadline.timeoutSignal.aborted) throw new QoderLlmError("Qoder model discovery timed out.", "TIMEOUT");
+		options.logger?.error?.("[Qoder Models] Catalog network request failed", redactLogValue(error));
+		throw new QoderLlmError("Qoder model discovery network request failed.", "TRANSPORT", { cause: error });
 	}
-	return out;
 }
 //#endregion
-//#region src/translate.ts
+//#region src/qoder/transport/wire/translate.ts
 function unsupported(message) {
 	return new QoderLlmError(message, "UNSUPPORTED_CONTENT");
 }
 function toolResultText(block) {
 	let text = "";
 	for (const nested of block.content) {
+		if (nested.type === "image") continue;
 		if (nested.type !== "text") throw unsupported(`Qoder tool results support text only; received nested ${String(nested.type)} content.`);
 		text += nested.text;
 	}
 	return text;
 }
+/**
+* Check message shapes without performing any provider I/O.
+*
+* Callers run this before resolving credentials so an invalid request never
+* consumes a Qoder subscription.
+*/
+function validateMessageShapes(messages) {
+	for (const message of messages) {
+		const toolResults = message.content.filter((block) => block.type === "tool-result");
+		if (toolResults.length > 0) {
+			if (message.role !== "user" || toolResults.length !== message.content.length) throw unsupported("Qoder tool-result messages cannot contain sibling content or use a non-user role.");
+			for (const result of toolResults) toolResultText(result);
+			continue;
+		}
+		for (const block of message.content) {
+			if (block.type === "text") continue;
+			if (block.type === "image") {
+				if (message.role !== "user") throw unsupported("Qoder image content is valid only in user messages.");
+				continue;
+			}
+			if (block.type === "tool-call") {
+				if (message.role !== "assistant") throw unsupported("Qoder tool calls are valid only in assistant messages.");
+				continue;
+			}
+			if (block.type === "reasoning") continue;
+			throw unsupported(`Qoder transport encountered unsupported block type: ${String(block.type)}`);
+		}
+	}
+}
+/** Reject a batch that exceeds the deployment image policy before any upload work starts. */
+function enforceImageLimits(images, attachments) {
+	const limits = attachments.imageLimits;
+	if (images.length > limits.maxImagesPerMessage) throw unsupported(`Qoder accepts at most ${limits.maxImagesPerMessage} images per message; received ${images.length}.`);
+	let total = 0;
+	for (const image of images) total += image.attachment.bytes;
+	if (total > limits.maxMessageImageBytes) throw unsupported("Qoder message image content exceeds the configured total byte limit.");
+}
+async function resolveImagePart(block, context) {
+	const { attachments, uploader, credentials, signal } = context;
+	if (attachments === void 0) throw new QoderLlmError("Qoder image input requires the DSH attachment service.", "ATTACHMENT");
+	let image;
+	try {
+		const limits = attachments.imageLimits;
+		image = await attachments.readImageRequest(block.attachment, {
+			maxPixels: limits.maxImagePixels,
+			maxBytes: limits.maxImageBytes
+		}, signal);
+	} catch (error) {
+		if (signal?.aborted) throw new QoderLlmError("Qoder image preparation was aborted.", "ABORTED", { cause: error });
+		if (error instanceof QoderLlmError) throw error;
+		throw new QoderLlmError("Qoder could not prepare an image attachment.", "ATTACHMENT", { cause: error });
+	}
+	if (uploader !== void 0 && credentials !== void 0) return {
+		type: "image_url",
+		image_url: { url: await uploader.resolveImageUrl(image, credentials, signal) }
+	};
+	return {
+		type: "image_url",
+		image_url: { url: `data:${image.mediaType};base64,${Buffer.from(image.data).toString("base64")}` }
+	};
+}
 function translateTools(tools) {
 	return (tools ?? []).map((tool) => ({
 		type: "function",
@@ -473,7 +870,15 @@ function translateTools(tools) {
 		}
 	}));
 }
-function validateAndTranslateMessages(messages, systemPrompt) {
+async function validateAndTranslateMessages(messages, systemPrompt, attachments, signal, pipeline) {
+	validateMessageShapes(messages);
+	const context = {
+		attachments,
+		signal,
+		uploader: pipeline?.uploader,
+		credentials: pipeline?.credentials
+	};
+	const preserveThinking = pipeline?.preserveThinking ?? true;
 	const output = [];
 	if (typeof systemPrompt === "string" && systemPrompt.trim().length > 0) output.push({
 		role: "system",
@@ -483,23 +888,51 @@ function validateAndTranslateMessages(messages, systemPrompt) {
 		const toolResults = message.content.filter((block) => block.type === "tool-result");
 		if (toolResults.length > 0) {
 			if (message.role !== "user" || toolResults.length !== message.content.length) throw unsupported("Qoder tool-result messages cannot contain sibling content or use a non-user role.");
-			for (const result of toolResults) output.push({
-				role: "tool",
-				tool_call_id: String(result.toolCallId),
-				content: toolResultText(result)
-			});
+			for (const result of toolResults) {
+				output.push({
+					role: "tool",
+					tool_call_id: String(result.toolCallId),
+					content: toolResultText(result)
+				});
+				const images = result.content.filter((block) => block.type === "image");
+				if (images.length > 0) {
+					if (attachments !== void 0) enforceImageLimits(images, attachments);
+					output.push({
+						role: "user",
+						content: [{
+							type: "text",
+							text: `[${images.length} image${images.length === 1 ? "" : "s"} returned by the previous tool call]`
+						}, ...await Promise.all(images.map((image) => resolveImagePart(image, context)))]
+					});
+				}
+			}
 			continue;
 		}
 		let text = "";
+		let reasoningText = "";
+		const userContent = [];
+		const pendingImages = [];
+		let hasImage = false;
 		const toolCalls = [];
 		for (const block of message.content) {
 			if (block.type === "text") {
 				text += block.text;
+				if (message.role === "user") userContent.push({
+					type: "text",
+					text: block.text
+				});
+				continue;
+			}
+			if (block.type === "image") {
+				hasImage = true;
+				pendingImages.push({
+					slot: userContent.length,
+					block
+				});
+				userContent.push(void 0);
 				continue;
 			}
-			if (block.type === "image") throw unsupported("Qoder transport does not support image content.");
 			if (block.type === "tool-call") {
-				if (message.role !== "assistant") throw unsupported("Qoder tool calls are valid only in assistant messages.");
 				toolCalls.push({
 					id: String(block.id),
 					type: "function",
@@ -510,31 +943,37 @@ function validateAndTranslateMessages(messages, systemPrompt) {
 				});
 				continue;
 			}
-			if (block.type === "tool-result") throw unsupported("Qoder encountered an invalid mixed tool-result message.");
 			if (block.type === "reasoning") {
-				if (message.role !== "assistant") throw unsupported("Qoder historical reasoning is valid only in assistant messages.");
+				if (message.role === "assistant") reasoningText += block.text;
 				continue;
 			}
-			throw unsupported(`Qoder transport encountered unsupported block type: ${String(block.type)}`);
 		}
 		if (message.role === "assistant") {
-			if (!text && toolCalls.length === 0) continue;
+			const hasReasoning = preserveThinking && reasoningText.length > 0;
+			if (!text && toolCalls.length === 0 && !hasReasoning) continue;
 			output.push({
 				role: "assistant",
 				content: text || " ",
-				...toolCalls.length === 0 ? {} : { tool_calls: toolCalls }
+				...toolCalls.length === 0 ? {} : { tool_calls: toolCalls },
+				...hasReasoning ? { reasoning_content: reasoningText } : {}
 			});
 			continue;
 		}
+		if (pendingImages.length > 0) {
+			if (attachments !== void 0) enforceImageLimits(pendingImages.map((pending) => pending.block), attachments);
+			await Promise.all(pendingImages.map(async (pending) => {
+				userContent[pending.slot] = await resolveImagePart(pending.block, context);
+			}));
+		}
 		output.push({
 			role: message.role,
-			content: text
+			content: hasImage ? userContent.filter((part) => part !== void 0) : text
 		});
 	}
 	return output;
 }
 //#endregion
-//#region src/serialize.ts
+//#region src/qoder/transport/wire/serialize.ts
 /** Build the minimum qodercli request envelope for a validated DSH request. */
 function stableHash(prefix, ...inputs) {
 	const hash = crypto.createHash("sha256");
@@ -558,28 +997,46 @@ function stableChatRecordId(model, messages, tools, maxTokens) {
 	hash.update(`mt=${maxTokens}`);
 	return hash.digest("hex").slice(0, 16);
 }
-function validateQoderRequest(options, model) {
+/**
+* Reject an unusable request before any credential resolution or provider I/O.
+*
+* Image publication needs credentials, so message translation now runs after
+* authentication. This static pass preserves the guarantee that a request the
+* provider cannot serve never reaches the network.
+*/
+function validateQoderRequestShape(options, model) {
 	if (options.reasoningEffort !== void 0) {
 		const effort = String(options.reasoningEffort);
 		if (!model?.reasoningEfforts?.some((candidate) => candidate.id === effort)) throw new QoderLlmError(`Qoder model "${options.model}" does not advertise reasoning effort "${effort}".`, "UNSUPPORTED_REASONING_EFFORT");
 	}
-	return validateAndTranslateMessages(options.messages, options.system);
+	if (options.messages.some((message) => contentHasImage(message.content)) && model?.supportsImages !== true) throw new QoderLlmError(`Qoder model "${options.model}" does not advertise image input.`, "UNSUPPORTED_CONTENT");
+	validateMessageShapes(options.messages);
+}
+/** Translate a request whose shape has already been validated. */
+function translateQoderMessages(options, attachments, pipeline) {
+	return validateAndTranslateMessages(options.messages, options.system, attachments, options.signal, pipeline);
+}
+async function validateQoderRequest(options, model, attachments) {
+	validateQoderRequestShape(options, model);
+	return validateAndTranslateMessages(options.messages, options.system, attachments, options.signal);
 }
-function buildQoderRequestBody(options, userId, translatedMessages, model) {
+async function buildQoderRequestBody(options, userId, translatedMessages, model, attachments) {
 	if (!userId) throw new QoderLlmError("Qoder request identity is missing.", "AUTH");
 	const modelKey = options.model || "cmodel";
-	const messages = translatedMessages ?? validateQoderRequest(options, model);
+	const messages = translatedMessages ?? await validateQoderRequest(options, model, attachments);
 	const modelMaxTokens = model?.maxTokens ?? 32768;
 	const maxTokens = Math.min(options.maxTokens ?? modelMaxTokens, modelMaxTokens);
-	const isReasoning = model?.isReasoning ?? false;
+	const isReasoning = options.reasoningEffort !== void 0 || (model?.isReasoning ?? false);
 	const tools = translateTools(options.tools);
-	const contextConfig = model?.contextOptions === void 0 ? void 0 : Object.fromEntries(Object.entries(model.contextOptions).map(([key, value]) => [key, {
+	const defaultContexts = Object.values(model?.contextOptions ?? {}).filter((option) => option.isDefault === true && typeof option.tokenCount === "number" && Number.isFinite(option.tokenCount) && option.tokenCount > 0);
+	const contextConfig = model?.contextOptions === void 0 || defaultContexts.length !== 1 ? void 0 : Object.fromEntries(Object.entries(model.contextOptions).map(([key, value]) => [key, {
 		...value.tokenCount === void 0 ? {} : { token_count: value.tokenCount },
 		...value.isDefault === void 0 ? {} : { is_default: value.isDefault }
 	}]));
 	let lastUserText = "";
 	for (let index = messages.length - 1; index >= 0; index--) if (messages[index].role === "user") {
-		lastUserText = messages[index].content ?? "";
+		const content = messages[index].content;
+		lastUserText = typeof content === "string" ? content : Array.isArray(content) ? content.filter((part) => part.type === "text").map((part) => part.text).join("") : "";
 		break;
 	}
 	const stablePart = stableHash("qoder-session", userId, modelKey);
@@ -640,10 +1097,570 @@ function buildQoderRequestBody(options, userId, translatedMessages, model) {
 			name: lastUserText.substring(0, 30),
 			begin_at: Date.now()
 		}
-	};
+	};
+}
+const mediaTypeExtensions = {
+	"image/png": "png",
+	"image/jpeg": "jpg",
+	"image/webp": "webp",
+	"image/gif": "gif"
+};
+function aborted$2() {
+	return new QoderLlmError("Qoder image upload was aborted.", "ABORTED");
+}
+/** Encode one image as a single-field multipart payload using the Qoder boundary shape. */
+function buildQoderImageMultipart(data, mediaType, boundaryId = crypto.randomUUID()) {
+	const boundary = `----qodercli-${boundaryId}`;
+	const extension = mediaTypeExtensions[mediaType] ?? "png";
+	const header = Buffer.from(`--${boundary}\r\nContent-Disposition: form-data; name="file"; filename="image.${extension}"\r\nContent-Type: ${mediaType}\r\n\r\n`, "utf8");
+	const footer = Buffer.from(`\r\n--${boundary}--\r\n`, "utf8");
+	return {
+		body: Buffer.concat([
+			header,
+			Buffer.from(data),
+			footer
+		]),
+		boundary
+	};
+}
+/**
+* Extract the durable object URL from a center upload response.
+*
+* @param payload - parsed response body.
+* @returns the first usable absolute URL, or undefined when none is present.
+*/
+function readQoderImageUrl(payload) {
+	if (payload === null || typeof payload !== "object") return void 0;
+	const root = payload;
+	const result = root.result;
+	const data = root.data;
+	const candidates = [
+		root.url,
+		result?.url,
+		result?.oss_url,
+		data?.url,
+		data?.oss_url
+	];
+	for (const candidate of candidates) {
+		if (typeof candidate !== "string") continue;
+		const trimmed = candidate.trim();
+		if (trimmed.length === 0) continue;
+		if (!URL.canParse(trimmed)) continue;
+		return trimmed;
+	}
+}
+function dataUrl(image) {
+	return `data:${image.mediaType};base64,${Buffer.from(image.data).toString("base64")}`;
+}
+/**
+* Publishes request images to the Qoder center service and remembers the result.
+*
+* Publication never fails a model request: any upstream problem degrades to an
+* inline data URL so the turn proceeds with the same content it would have
+* carried before the pipeline existed.
+*/
+var QoderImageUploader = class {
+	cache = /* @__PURE__ */ new Map();
+	flights = new SingleFlight();
+	fetchImpl;
+	region;
+	logger;
+	timeoutMs;
+	cacheTtlMs;
+	cacheCapacity;
+	maxConcurrency;
+	refreshCredentials;
+	now;
+	active = 0;
+	queue = [];
+	constructor(options = {}) {
+		this.fetchImpl = options.fetch ?? globalThis.fetch;
+		this.region = options.region ?? "global";
+		this.logger = options.logger;
+		this.timeoutMs = options.timeoutMs ?? 3e4;
+		this.cacheTtlMs = options.cacheTtlMs ?? 18e5;
+		this.cacheCapacity = options.cacheCapacity ?? 512;
+		this.maxConcurrency = options.maxConcurrency ?? 4;
+		this.refreshCredentials = options.refreshCredentials;
+		this.now = options.now ?? Date.now;
+	}
+	/**
+	* Resolve the wire URL for one request image.
+	*
+	* @param image - request-encoded image produced by the DSH attachment store.
+	* @param credentials - credentials authorizing the center exchange.
+	* @param signal - optional caller cancellation.
+	* @returns a center object URL, or an inline data URL when publication fails.
+	* @throws QoderLlmError with code `ABORTED` only when the caller cancels.
+	*/
+	async resolveImageUrl(image, credentials, signal) {
+		if (signal?.aborted) throw aborted$2();
+		const key = this.cacheKey(image, credentials);
+		const cached = this.cache.get(key);
+		if (cached !== void 0) {
+			if (cached.expiresAt > this.now()) {
+				this.cache.delete(key);
+				this.cache.set(key, cached);
+				this.logger?.debug?.("[image-upload] cache hit", {
+					url: cached.url,
+					region: this.region,
+					mediaType: image.mediaType,
+					bytes: image.data.byteLength
+				});
+				return cached.url;
+			}
+			this.cache.delete(key);
+		}
+		return this.flights.run(key, signal, async (sharedSignal) => {
+			const url = await this.publish(image, credentials, sharedSignal);
+			if (url !== void 0) {
+				this.remember(key, url);
+				return url;
+			}
+			return dataUrl(image);
+		}, aborted$2);
+	}
+	/**
+	* Derive the deduplication identity for one request image.
+	*
+	* `variantId` is the attachment store's deterministic cache and upload index
+	* over the attachment, the request policy, and the encoder parameters, so it
+	* identifies these exact bytes without rehashing them. Region and subscriber
+	* are included because a center object is never shared across either.
+	*/
+	cacheKey(image, credentials) {
+		const hash = crypto.createHash("sha256");
+		hash.update(getQoderImageUploadUrl(this.region));
+		hash.update("\0");
+		hash.update(credentials.userID);
+		hash.update("\0");
+		hash.update(image.mediaType);
+		hash.update("\0");
+		const variantId = typeof image.variantId === "string" ? image.variantId : "";
+		if (variantId.length > 0) hash.update(variantId);
+		else hash.update(crypto.createHash("sha256").update(Buffer.from(image.data)).digest("hex"));
+		return hash.digest("hex");
+	}
+	remember(key, url) {
+		this.cache.delete(key);
+		this.cache.set(key, {
+			url,
+			expiresAt: this.now() + this.cacheTtlMs
+		});
+		while (this.cache.size > this.cacheCapacity) {
+			const oldest = this.cache.keys().next();
+			if (oldest.done === true) break;
+			this.cache.delete(oldest.value);
+		}
+	}
+	async withSlot(signal, operation) {
+		if (signal.aborted) throw aborted$2();
+		if (this.active >= this.maxConcurrency) {
+			this.logger?.debug?.("[image-upload] queued", {
+				region: this.region,
+				active: this.active,
+				queued: this.queue.length + 1
+			});
+			await new Promise((resolve, reject) => {
+				const onAbort = () => {
+					const index = this.queue.indexOf(release);
+					if (index !== -1) this.queue.splice(index, 1);
+					reject(aborted$2());
+				};
+				const release = () => {
+					signal.removeEventListener("abort", onAbort);
+					resolve();
+				};
+				signal.addEventListener("abort", onAbort, { once: true });
+				this.queue.push(release);
+			});
+		} else this.active++;
+		try {
+			if (signal.aborted) throw aborted$2();
+			return await operation();
+		} finally {
+			const next = this.queue.shift();
+			if (next !== void 0) next();
+			else this.active--;
+		}
+	}
+	/** Attempt publication, returning undefined when the request must degrade. */
+	async publish(image, credentials, signal) {
+		return this.withSlot(signal, async () => {
+			const first = await this.attempt(image, credentials, signal);
+			if (first.url !== void 0) return first.url;
+			if (!first.retryable || this.refreshCredentials === void 0) {
+				this.warnDegraded(first.reason);
+				return;
+			}
+			let refreshed;
+			this.logger?.debug?.("[image-upload] refreshing credentials before retry", {
+				region: this.region,
+				reason: first.reason
+			});
+			try {
+				refreshed = await this.refreshCredentials(signal);
+			} catch (error) {
+				if (signal.aborted) throw aborted$2();
+				this.warnDegraded("credential refresh failed", error);
+				return;
+			}
+			const second = await this.attempt(image, refreshed, signal);
+			if (second.url !== void 0) return second.url;
+			this.warnDegraded(second.reason);
+		});
+	}
+	warnDegraded(reason, cause) {
+		this.logger?.warn?.("[image-upload] upload failed, keeping base64 image", {
+			region: this.region,
+			reason
+		}, ...cause === void 0 ? [] : [redactLogValue(cause)]);
+	}
+	async attempt(image, credentials, signal) {
+		const requestId = crypto.randomUUID();
+		const url = getQoderImageUploadUrl(this.region, requestId);
+		const multipart = buildQoderImageMultipart(image.data, image.mediaType);
+		const signedBody = Buffer.from(String(multipart.body.length), "utf8");
+		const timeout = AbortSignal.timeout(this.timeoutMs);
+		const requestSignal = AbortSignal.any([signal, timeout]);
+		const startedAt = this.now();
+		const details = {
+			requestId,
+			region: this.region,
+			mediaType: image.mediaType,
+			bytes: image.data.byteLength,
+			timeoutMs: this.timeoutMs
+		};
+		this.logger?.debug?.("[image-upload] started", details);
+		try {
+			const response = await this.fetchImpl(url, {
+				method: "PUT",
+				headers: {
+					...buildAuthHeaders(signedBody, url, credentials),
+					"AI-CLIENT-TIMESTAMP": String(Math.floor(this.now() / 1e3)),
+					"Content-Type": `multipart/form-data; boundary=${multipart.boundary}`,
+					"Content-Length": String(multipart.body.length),
+					"accept": "application/json"
+				},
+				body: new Uint8Array(multipart.body),
+				signal: requestSignal
+			});
+			this.logger?.debug?.("[image-upload] response received", {
+				requestId,
+				status: response.status,
+				elapsedMs: this.now() - startedAt
+			});
+			const text = await readLimitedText(response, defaultMaxJsonBytes, "Qoder image upload response");
+			if (!response.ok) return {
+				retryable: response.status === 401 || response.status === 403,
+				reason: `HTTP ${response.status}`
+			};
+			let payload;
+			try {
+				payload = JSON.parse(text);
+			} catch {
+				return {
+					retryable: false,
+					reason: "invalid JSON response"
+				};
+			}
+			const resolved = readQoderImageUrl(payload);
+			if (resolved === void 0) return {
+				retryable: false,
+				reason: "response carried no image URL"
+			};
+			this.logger?.debug?.("[image-upload] succeeded", {
+				...details,
+				status: response.status,
+				elapsedMs: this.now() - startedAt,
+				url: resolved
+			});
+			return {
+				url: resolved,
+				retryable: false,
+				reason: ""
+			};
+		} catch (error) {
+			const failureDetails = {
+				requestId,
+				region: this.region,
+				elapsedMs: this.now() - startedAt
+			};
+			if (signal.aborted) {
+				this.logger?.debug?.("[image-upload] aborted", failureDetails);
+				throw aborted$2();
+			}
+			if (timeout.aborted) {
+				this.logger?.debug?.("[image-upload] timed out", failureDetails);
+				return {
+					retryable: false,
+					reason: "upload timed out"
+				};
+			}
+			this.logger?.debug?.("[image-upload] network failure", failureDetails, redactLogValue(error));
+			return {
+				retryable: false,
+				reason: "network failure"
+			};
+		}
+	}
+};
+//#endregion
+//#region src/qoder/transport/account-reader.ts
+const defaultUsageTtlMs = 6e4;
+const defaultUsageTimeoutMs = 15e3;
+function normalizeQuota(raw) {
+	if (!raw || typeof raw !== "object") return void 0;
+	const total = typeof raw.total === "number" && Number.isFinite(raw.total) ? raw.total : typeof raw.cap === "number" && Number.isFinite(raw.cap) ? raw.cap : typeof raw.remaining === "number" && typeof raw.used === "number" ? raw.used + raw.remaining : 0;
+	const used = typeof raw.used === "number" && Number.isFinite(raw.used) ? raw.used : 0;
+	const remaining = typeof raw.remaining === "number" && Number.isFinite(raw.remaining) ? raw.remaining : Math.max(0, total - used);
+	let percentage;
+	if (typeof raw.percentage === "number" && Number.isFinite(raw.percentage)) percentage = raw.percentage <= 1 && total > 1 ? raw.percentage * 100 : raw.percentage;
+	else percentage = total > 0 ? used / total * 100 : 0;
+	const unit = typeof raw.unit === "string" && raw.unit.length > 0 ? raw.unit : "credits";
+	return {
+		total,
+		used,
+		remaining,
+		percentage,
+		unit
+	};
+}
+function normalizeExpiresAt(rawExpires) {
+	if (rawExpires === void 0 || rawExpires === null) return void 0;
+	if (typeof rawExpires === "number" && rawExpires > 0) return new Date(rawExpires).toISOString();
+	if (typeof rawExpires === "string" && rawExpires.length > 0) {
+		const parsed = Date.parse(rawExpires);
+		if (!Number.isNaN(parsed) && parsed > 0) return new Date(parsed).toISOString();
+	}
+}
+function asString(value) {
+	return typeof value === "string" && value.trim().length > 0 ? value.trim() : void 0;
+}
+function asBoolean(value) {
+	return typeof value === "boolean" ? value : void 0;
+}
+function asNumber(value) {
+	if (typeof value === "number" && Number.isFinite(value)) return value;
+	if (typeof value === "string" && value.trim().length > 0) {
+		const num = Number(value);
+		if (Number.isFinite(num)) return num;
+	}
+}
+function normalizeOrganization(raw) {
+	if (!raw || typeof raw !== "object") return void 0;
+	const obj = raw;
+	const orgId = asString(obj.org_id) ?? asString(obj.orgId) ?? asString(obj.id);
+	const orgName = asString(obj.org_name) ?? asString(obj.orgName) ?? asString(obj.name);
+	if (!orgId || !orgName) return void 0;
+	return {
+		orgId,
+		orgName,
+		...asString(obj.role_name) ?? asString(obj.roleName) !== void 0 ? { roleName: asString(obj.role_name) ?? asString(obj.roleName) } : {},
+		isSuspended: asBoolean(obj.is_suspended) ?? asBoolean(obj.isSuspended) ?? false,
+		canManageSubscriptions: asBoolean(obj.can_manage_subscriptions) ?? asBoolean(obj.canManageSubscriptions) ?? false,
+		resourcePackageFeatureEnabled: asBoolean(obj.resource_package_feature_enabled) ?? asBoolean(obj.resourcePackageFeatureEnabled) ?? false
+	};
+}
+function normalizeFeatureAllowed(raw) {
+	if (!raw || typeof raw !== "object") return void 0;
+	const obj = raw;
+	return {
+		quest: asBoolean(obj.quest) ?? false,
+		wiki: asBoolean(obj.wiki) ?? false,
+		codeReview: asBoolean(obj.code_review) ?? asBoolean(obj.codeReview) ?? false
+	};
+}
+function normalizePlan(raw) {
+	if (!raw || typeof raw !== "object") return void 0;
+	const obj = raw;
+	const userType = asString(obj.user_type) ?? asString(obj.userType);
+	const planTierName = asString(obj.plan_tier_name) ?? asString(obj.planTierName) ?? asString(obj.plan_name) ?? asString(obj.planName);
+	if (!userType || !planTierName) return void 0;
+	const organization = normalizeOrganization(obj.organization);
+	const isPersonalVersion = asBoolean(obj.is_personal_version) ?? asBoolean(obj.isPersonalVersion) ?? organization === void 0;
+	const startDate = normalizeExpiresAt(obj.start_date ?? obj.startDate);
+	const endDate = normalizeExpiresAt(obj.end_date ?? obj.endDate);
+	const planTier = asString(obj.plan_tier) ?? asString(obj.planTier);
+	const isHighestTier = asBoolean(obj.is_highest_tier) ?? asBoolean(obj.isHighestTier);
+	const isRenewed = asBoolean(obj.is_renewed) ?? asBoolean(obj.isRenewed);
+	const featureAllowed = normalizeFeatureAllowed(obj.feature_allowed ?? obj.featureAllowed);
+	return {
+		userType,
+		planTierName,
+		...planTier !== void 0 ? { planTier } : {},
+		isPersonalVersion,
+		...isHighestTier !== void 0 ? { isHighestTier } : {},
+		...isRenewed !== void 0 ? { isRenewed } : {},
+		...startDate !== void 0 ? { startDate } : {},
+		...endDate !== void 0 ? { endDate } : {},
+		...organization !== void 0 ? { organization } : {},
+		...featureAllowed !== void 0 ? { featureAllowed } : {},
+		raw
+	};
+}
+function normalizeStatus(raw) {
+	if (!raw || typeof raw !== "object") return void 0;
+	const obj = raw;
+	const featureSwitches = obj.featureSwitches ?? obj.feature_switches;
+	const teamSwitches = obj.teamSwitches ?? obj.team_switches;
+	const allowByok = asNumber(featureSwitches?.allow_byok ?? featureSwitches?.allowByok) ?? 0;
+	const teamAllowByok = asNumber(teamSwitches?.allow_byok ?? teamSwitches?.allowByok);
+	const isPrivacyPolicyModifiable = asBoolean(obj.isPrivacyPolicyModifiable ?? obj.is_data_policy_modifiable);
+	return {
+		allowByok,
+		...teamAllowByok !== void 0 ? { teamAllowByok } : {},
+		...isPrivacyPolicyModifiable !== void 0 ? { isPrivacyPolicyModifiable } : {},
+		raw
+	};
+}
+var QoderUsageReader = class {
+	authService;
+	fetchImpl;
+	ttlMs;
+	timeoutMs;
+	region;
+	logger;
+	cache = /* @__PURE__ */ new Map();
+	flights = new SingleFlight();
+	constructor(options) {
+		this.authService = options.authService;
+		this.fetchImpl = options.fetch ?? globalThis.fetch;
+		this.ttlMs = options.ttlMs ?? defaultUsageTtlMs;
+		this.timeoutMs = options.timeoutMs ?? defaultUsageTimeoutMs;
+		this.region = options.region ?? "global";
+		this.logger = options.logger;
+	}
+	async readAccount(pat, options) {
+		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid.", "MISSING_CREDENTIAL");
+		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
+		if (!options?.force) {
+			const cached = this.cache.get(cacheKey);
+			if (cached && cached.expiresAt > Date.now()) return cached.info;
+		}
+		return this.flights.run(cacheKey, options?.signal, (sharedSignal) => this.loadAccount(pat, sharedSignal, cacheKey), () => new QoderLlmError("Qoder account request was aborted.", "ABORTED"));
+	}
+	async loadAccount(pat, signal, cacheKey) {
+		const creds = await this.authService.getCredentials(pat, signal);
+		const profile = {
+			id: creds.userID,
+			name: creds.name || "Qoder User",
+			email: creds.email || ""
+		};
+		const [usage, plan, status] = await Promise.all([
+			retryMetadataRead(signal, () => this.fetchUsage(creds.authToken, signal)),
+			this.safeFetchPlan(creds.authToken, signal),
+			this.safeFetchStatus(creds.authToken, creds.machineID, signal)
+		]);
+		const accountInfo = {
+			profile,
+			usage,
+			...plan !== void 0 ? { plan } : {},
+			...status !== void 0 ? { status } : {},
+			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
+		};
+		this.cache.set(cacheKey, {
+			info: accountInfo,
+			expiresAt: Date.now() + this.ttlMs
+		});
+		return accountInfo;
+	}
+	clear(pat) {
+		if (pat) this.cache.delete(`${this.region}:${opaqueCredentialKey(pat)}`);
+		else this.cache.clear();
+	}
+	async fetchUsage(jobToken, signal) {
+		const data = await openApiJsonRequest(this.fetchImpl, {
+			url: getQoderUsageUrl(this.region),
+			token: jobToken,
+			signal,
+			timeoutMs: this.timeoutMs,
+			logger: this.logger,
+			operation: "Usage",
+			logCategory: "account.usage"
+		});
+		return {
+			userQuota: normalizeQuota(data.userQuota),
+			orgResourcePackage: normalizeQuota(data.orgResourcePackage),
+			totalUsagePercentage: typeof data.totalUsagePercentage === "number" ? data.totalUsagePercentage : void 0,
+			isQuotaExceeded: typeof data.isQuotaExceeded === "boolean" ? data.isQuotaExceeded : false,
+			expiresAt: normalizeExpiresAt(data.expiresAt),
+			raw: data
+		};
+	}
+	async fetchPlan(jobToken, signal) {
+		return normalizePlan(await openApiJsonRequest(this.fetchImpl, {
+			url: getQoderUserPlanUrl(this.region),
+			token: jobToken,
+			signal,
+			timeoutMs: this.timeoutMs,
+			logger: this.logger,
+			operation: "Plan",
+			logCategory: "account.plan"
+		}));
+	}
+	async safeFetchPlan(jobToken, signal) {
+		try {
+			return await this.fetchPlan(jobToken, signal);
+		} catch (error) {
+			if (signal.aborted) throw error;
+			this.logger?.warn?.("[Qoder Plan] Failed to load user plan (degraded)", error instanceof Error ? error.message : error);
+			return;
+		}
+	}
+	async fetchStatus(jobToken, machineId, signal) {
+		return normalizeStatus(await openApiJsonRequest(this.fetchImpl, {
+			url: getQoderUserStatusUrl(this.region),
+			token: jobToken,
+			machineId,
+			signal,
+			timeoutMs: this.timeoutMs,
+			logger: this.logger,
+			operation: "Status",
+			logCategory: "account.status"
+		}));
+	}
+	async safeFetchStatus(jobToken, machineId, signal) {
+		try {
+			return await this.fetchStatus(jobToken, machineId, signal);
+		} catch (error) {
+			if (signal?.aborted) throw error;
+			this.logger?.warn?.("[Qoder Status] Failed to load user status (degraded)", error instanceof Error ? error.message : error);
+			return;
+		}
+	}
+};
+//#endregion
+//#region src/qoder/transport/wire/encoding.ts
+/**
+* Qoder WAF Body encoding algorithm.
+*
+* Re-arranges standard Base64 chunks and translates characters against
+* a custom alphabet to satisfy Qoder upstream WAF requirements.
+*
+* @module dsh-provider-qoder/qoder/transport/wire/encoding
+*/
+const qoderCustomAlphabet = "_doRTgHZBKcGVjlvpC,@aFSx#DPuNJme&i*MzLOEn)sUrthbf%Y^w.(kIQyXqWA!";
+const qoderStdAlphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
+function qoderEncodeBody(plaintext) {
+	const std = Buffer.isBuffer(plaintext) ? plaintext.toString("base64") : Buffer.from(plaintext).toString("base64");
+	const n = std.length;
+	const a = Math.floor(n / 3);
+	const rearranged = std.slice(n - a) + std.slice(a, n - a) + std.slice(0, a);
+	let out = "";
+	for (let i = 0; i < n; i++) {
+		const c = rearranged[i];
+		if (c === "=") out += "$";
+		else {
+			const idx = qoderStdAlphabet.indexOf(c);
+			if (idx >= 0) out += qoderCustomAlphabet[idx];
+			else out += c;
+		}
+	}
+	return out;
 }
 //#endregion
-//#region src/thinking.ts
+//#region src/qoder/transport/wire/thinking.ts
 const thinkingTags = [{
 	open: "<thinking>",
 	close: "</thinking>"
@@ -800,7 +1817,7 @@ var QoderThinkingParser = class {
 	}
 };
 //#endregion
-//#region src/sse.ts
+//#region src/qoder/transport/wire/sse.ts
 /** Decode Qoder's outer SSE envelope and inner model chunks. */
 const doneMarker = "[DONE]";
 function malformed(message) {
@@ -866,6 +1883,7 @@ async function* parseQoderSse(stream, options = {}) {
 	let pendingUsage;
 	let terminalKind = "stop";
 	let sawContent = false;
+	const maxBufferChars = options.maxBufferChars ?? 2097152;
 	const closeTextual = () => {
 		if (activeTextual === void 0) return [];
 		const state = activeTextual;
@@ -942,6 +1960,7 @@ async function* parseQoderSse(stream, options = {}) {
 			} else {
 				options.onActivity?.();
 				buffer += decoder.decode(value, { stream: true });
+				if (buffer.length > maxBufferChars) throw malformed("Qoder SSE frame exceeded its size limit.");
 			}
 			while (!sawDone) {
 				const lineEnd = buffer.indexOf("\n");
@@ -987,16 +2006,22 @@ async function* parseQoderSse(stream, options = {}) {
 								};
 								toolCalls.set(upstreamIndex, state);
 							}
-							if (rawCall.id !== void 0) {
-								if (typeof rawCall.id !== "string" || !rawCall.id) throw malformed("Qoder tool call has an invalid id.");
+							if (rawCall.id !== void 0) if (rawCall.id === "" || rawCall.id === null) {} else if (typeof rawCall.id !== "string") throw malformed("Qoder tool call has an invalid id.");
+							else {
 								if (state.id && state.id !== rawCall.id) throw malformed("Qoder changed a streamed tool-call id.");
 								state.id = rawCall.id;
 							}
+							let hasNewName = false;
 							if (rawCall.function?.name !== void 0) {
 								const name = rawCall.function.name;
-								if (typeof name !== "string" || !name) throw malformed("Qoder tool call has an invalid name.");
-								if (state.name && state.name !== name) throw malformed("Qoder changed a streamed tool-call name.");
-								state.name = name;
+								if (name === "" || name === null) {} else if (typeof name !== "string") throw malformed("Qoder tool call has an invalid name.");
+								else {
+									if (state.name && state.name !== name) throw malformed("Qoder changed a streamed tool-call name.");
+									if (state.name !== name) {
+										state.name = name;
+										hasNewName = true;
+									}
+								}
 							}
 							if (rawCall.function?.arguments !== void 0) {
 								if (typeof rawCall.function.arguments !== "string") throw malformed("Qoder tool-call arguments delta is not a string.");
@@ -1014,7 +2039,7 @@ async function* parseQoderSse(stream, options = {}) {
 									...state.name ? { name: state.name } : {},
 									argumentsDelta
 								};
-							} else if (wasOpen && state.blockIndex !== void 0 && rawCall.function?.name !== void 0) yield {
+							} else if (wasOpen && state.blockIndex !== void 0 && hasNewName) yield {
 								type: "tool-call-delta",
 								index: state.blockIndex,
 								id: ToolCallId(state.id),
@@ -1071,531 +2096,220 @@ async function* parseQoderSse(stream, options = {}) {
 			reason: {
 				kind: "error",
 				failure: {
-					message: "Model returned a completed response with no content.",
-					code: EMPTY_RESPONSE_CODE
-				}
-			}
-		};
-		return;
-	}
-	yield {
-		type: "finish",
-		reason: { kind: toolCalls.size > 0 ? "tool-calls" : terminalKind }
-	};
-}
-//#endregion
-//#region src/adapter.ts
-/** DSH LlmAdapter for the Global Qoder subscription transport. */
-const defaultMaxTokens = 32768;
-const defaultStreamIdleTimeoutMs = 300 * 1e3;
-const defaultModels = [
-	{
-		id: "cmodel",
-		name: "Cantus (Qoder)",
-		description: "Default Global Qoder subscription model for quick validation",
-		contextWindow: 1e6,
-		maxTokens: defaultMaxTokens
-	},
-	{
-		id: "auto",
-		name: "Qoder Auto",
-		description: "Server-routed Global Qoder model pool",
-		contextWindow: 18e4,
-		maxTokens: defaultMaxTokens
-	},
-	{
-		id: "ultimate",
-		name: "Qoder Ultimate",
-		description: "Highest-capability Global Qoder model pool",
-		contextWindow: 1e6,
-		maxTokens: defaultMaxTokens
-	},
-	{
-		id: "performance",
-		name: "Qoder Performance",
-		description: "Performance-oriented Global Qoder model pool",
-		contextWindow: 1e6,
-		maxTokens: defaultMaxTokens
-	},
-	{
-		id: "efficient",
-		name: "Qoder Efficient",
-		description: "Efficiency-oriented Global Qoder model pool",
-		contextWindow: 18e4,
-		maxTokens: defaultMaxTokens
-	},
-	{
-		id: "lite",
-		name: "Qoder Lite",
-		description: "Basic Global Qoder model pool",
-		contextWindow: 18e4,
-		maxTokens: defaultMaxTokens
-	}
-];
-function modelInfo(provider, model) {
-	return {
-		provider,
-		id: model.id,
-		name: model.priceFactor === void 0 ? model.name : `${model.name} （${model.priceFactor}x）`,
-		description: model.description,
-		inputModalities: ["text"]
-	};
-}
-var QoderAdapter = class extends LlmAdapter {
-	resolvePat;
-	catalogModels;
-	authService;
-	fetchImpl;
-	logger;
-	streamIdleTimeoutMs;
-	providerId;
-	providerName;
-	region;
-	constructor(options) {
-		super();
-		this.resolvePat = options.resolvePat;
-		this.catalogModels = options.models && options.models.length > 0 ? options.models : defaultModels;
-		this.authService = options.authService ?? new QoderAuthService({ fetch: options.fetch });
-		this.fetchImpl = options.fetch ?? globalThis.fetch;
-		this.logger = options.logger;
-		this.streamIdleTimeoutMs = options.streamIdleTimeoutMs ?? 3e5;
-		this.providerId = options.providerId ?? "qoder-official";
-		this.providerName = options.providerName ?? "Qoder";
-		this.region = options.region ?? "global";
-	}
-	providerInfo(provider) {
-		return {
-			id: provider,
-			name: this.providerName
-		};
-	}
-	listModels(provider) {
-		return Promise.resolve(this.catalogModels.map((model) => modelInfo(provider, model)));
-	}
-	replaceConfig(models, streamIdleTimeoutMs, region = "global") {
-		this.catalogModels = models;
-		this.streamIdleTimeoutMs = streamIdleTimeoutMs;
-		this.region = region;
-	}
-	resolveModel(provider, modelId, signal) {
-		if (signal?.aborted) return Promise.reject(new QoderLlmError("Qoder model resolution was aborted.", "ABORTED"));
-		const configured = this.catalogModels.find((model) => model.id === modelId);
-		if (configured === void 0) return Promise.resolve({
-			provider,
-			id: modelId,
-			name: modelId,
-			inputModalities: ["text"]
-		});
-		return Promise.resolve({
-			...modelInfo(provider, configured),
-			...configured.contextWindow === void 0 ? {} : { context: { contextWindow: configured.contextWindow } },
-			...configured.maxTokens === void 0 ? {} : { defaultMaxTokens: configured.maxTokens },
-			...configured.reasoningEfforts === void 0 || configured.reasoningEfforts.length === 0 ? {} : { reasoning: {
-				efforts: configured.reasoningEfforts.map((effort) => ({
-					id: ReasoningEffortId(effort.id),
-					name: effort.name,
-					...effort.description === void 0 ? {} : { description: effort.description }
-				})),
-				...configured.defaultReasoningEffort === void 0 ? {} : { defaultEffort: ReasoningEffortId(configured.defaultReasoningEffort) }
-			} }
-		});
-	}
-	stream(options) {
-		return this.generate(options);
-	}
-	async *generate(options) {
-		if (options.provider !== this.providerId) throw new QoderLlmError(`Qoder adapter does not own provider "${options.provider}".`, "INVALID_PROVIDER");
-		if (options.signal?.aborted) throw new QoderLlmError("Request was aborted prior to generation.", "ABORTED");
-		const model = this.catalogModels.find((candidate) => candidate.id === (options.model || "cmodel"));
-		const messages = validateQoderRequest(options, model);
-		const pat = await this.resolvePat();
-		if (!pat) throw new QoderLlmError("Qoder Personal Access Token is missing. Configure Qoder in the Qoder settings page.", "MISSING_CREDENTIAL");
-		if (options.signal?.aborted) throw new QoderLlmError("Request was aborted.", "ABORTED");
-		const credentials = await this.authService.getCredentials(pat, options.signal, this.region);
-		const request = buildQoderRequestBody(options, credentials.userID, messages, model);
-		const encodedBody = qoderEncodeBody(JSON.stringify(request));
-		const encodedBytes = Buffer.from(encodedBody, "utf8");
-		const chatUrl = getQoderChatUrl(this.region);
-		const requestController = new AbortController();
-		let idleTimedOut = false;
-		let idleTimer;
-		const onCallerAbort = () => requestController.abort(options.signal?.reason);
-		options.signal?.addEventListener("abort", onCallerAbort, { once: true });
-		const resetIdleTimer = () => {
-			if (idleTimer !== void 0) clearTimeout(idleTimer);
-			idleTimer = setTimeout(() => {
-				idleTimedOut = true;
-				requestController.abort("stream idle timeout");
-			}, this.streamIdleTimeoutMs);
-		};
-		resetIdleTimer();
-		try {
-			const response = await this.fetchImpl(chatUrl, {
-				method: "POST",
-				headers: {
-					"content-type": "application/json",
-					"accept": "text/event-stream",
-					"cache-control": "no-cache",
-					"accept-encoding": "identity",
-					"x-model-key": options.model || "cmodel",
-					"x-model-source": model?.source || "system",
-					...attributionHeaders(),
-					...buildAuthHeaders(encodedBytes, chatUrl, credentials)
-				},
-				body: encodedBytes,
-				signal: requestController.signal
-			});
-			resetIdleTimer();
-			if (!response.ok) throw qoderHttpError(`Qoder upstream service returned HTTP ${response.status}.`, response);
-			if (!response.body) throw new QoderLlmError("Qoder response contains no readable body stream.", "EMPTY_RESPONSE");
-			yield* parseQoderSse(response.body, { onActivity: resetIdleTimer });
-		} catch (error) {
-			if (options.signal?.aborted) throw new QoderLlmError("Request was aborted.", "ABORTED");
-			if (idleTimedOut) {
-				const failure = new QoderLlmError("Qoder model stream exceeded its idle timeout.", "TIMEOUT");
-				this.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure));
-				throw failure;
-			}
-			if (error instanceof QoderLlmError) {
-				this.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(error));
-				throw error;
-			}
-			const failure = new QoderLlmError("Qoder transport request failed.", "TRANSPORT", { cause: error });
-			this.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure), { cause: redactLogValue(error) });
-			throw failure;
-		} finally {
-			if (idleTimer !== void 0) clearTimeout(idleTimer);
-			options.signal?.removeEventListener("abort", onCallerAbort);
-			requestController.abort("request complete");
-		}
-	}
-};
-//#endregion
-//#region src/credential-contract.ts
-/** Shared Host/browser contract for the one managed Qoder credential. */
-const qoderCredentialRef = "QODER_MANAGED_CREDENTIAL";
-/** DSH's local provider uses `env` and `*-env` for ambient credential layers. */
-function isEnvironmentCredentialSource(source) {
-	return source === "env" || source?.endsWith("-env") === true;
-}
-//#endregion
-//#region src/credential.ts
-/** Host-side resolution of the one managed Qoder credential. */
-const managedQoderCredentialRef = credentialRef(qoderCredentialRef);
-/** Resolve only provider-managed storage; ambient environment layers are intentionally unsupported. */
-async function resolveManagedQoderPat(credentials) {
-	const hit = await credentials.resolve(managedQoderCredentialRef);
-	if (hit === void 0 || isEnvironmentCredentialSource(hit.source)) return "";
-	return hit.value.trim();
-}
-//#endregion
-//#region src/models.ts
-const discoveredMetadataKeys = [
-	"description",
-	"source",
-	"isReasoning",
-	"supportsEffort",
-	"reasoningEfforts",
-	"defaultReasoningEffort",
-	"priceFactor",
-	"contextOptions"
-];
-function positiveNumber(value) {
-	return typeof value === "number" && Number.isFinite(value) && value > 0 ? value : void 0;
-}
-const reasoningEffortOrder = /* @__PURE__ */ new Map([
-	["low", 0],
-	["medium", 1],
-	["high", 2],
-	["xhigh", 3],
-	["max", 4]
-]);
-function contextOptionsOf(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return void 0;
-	const options = {};
-	for (const [key, raw] of Object.entries(value)) {
-		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
-		const entry = raw;
-		const tokenCount = positiveNumber(entry.token_count);
-		const isDefault = typeof entry.is_default === "boolean" ? entry.is_default : void 0;
-		if (tokenCount === void 0 && isDefault === void 0) continue;
-		options[key] = {
-			...tokenCount === void 0 ? {} : { tokenCount },
-			...isDefault === void 0 ? {} : { isDefault }
-		};
-	}
-	if (Object.keys(options).length === 0) return void 0;
-	const largest = Math.max(...Object.values(options).map((option) => option.tokenCount ?? 0));
-	if (largest <= 0) return options;
-	return Object.fromEntries(Object.entries(options).map(([key, option]) => [key, {
-		...option,
-		isDefault: option.tokenCount === largest
-	}]));
-}
-function reasoningEffortsOf(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return {};
-	const enabled = value.enabled;
-	if (typeof enabled !== "object" || enabled === null || Array.isArray(enabled)) return {};
-	const rawEfforts = enabled.efforts;
-	if (typeof rawEfforts !== "object" || rawEfforts === null || Array.isArray(rawEfforts)) return {};
-	const efforts = [];
-	let defaultEffort;
-	for (const [id, raw] of Object.entries(rawEfforts)) {
-		if (!id.trim() || typeof raw !== "object" || raw === null || Array.isArray(raw)) continue;
-		const entry = raw;
-		efforts.push({
-			id,
-			name: id,
-			...typeof entry.description === "string" && entry.description.trim() ? { description: entry.description.trim() } : {}
-		});
-		if (entry.is_default === true) defaultEffort = id;
-	}
-	return {
-		...efforts.length === 0 ? {} : { efforts: efforts.sort((left, right) => (reasoningEffortOrder.get(left.id) ?? Number.MAX_SAFE_INTEGER) - (reasoningEffortOrder.get(right.id) ?? Number.MAX_SAFE_INTEGER)) },
-		...defaultEffort === void 0 ? {} : { defaultEffort }
-	};
-}
-function normalizeQoderModels(payload) {
-	if (typeof payload !== "object" || payload === null || !Array.isArray(payload.chat)) return [];
-	const models = [];
-	const seen = /* @__PURE__ */ new Set();
-	for (const raw of payload.chat) {
-		if (typeof raw !== "object" || raw === null || raw.enable !== true) continue;
-		const id = typeof raw.key === "string" ? raw.key.trim() : "";
-		if (!id || seen.has(id)) continue;
-		seen.add(id);
-		const contextOptions = contextOptionsOf(raw.context_config);
-		const contextWindow = Math.max(positiveNumber(raw.max_input_tokens) ?? 18e4, ...Object.values(contextOptions ?? {}).map((option) => option.tokenCount ?? 0));
-		const thinking = typeof raw.thinking_config === "object" && raw.thinking_config !== null;
-		const reasoning = reasoningEffortsOf(raw.thinking_config);
-		models.push({
-			id,
-			name: typeof raw.display_name === "string" && raw.display_name.trim() ? raw.display_name.trim() : id,
-			contextWindow,
-			maxTokens: positiveNumber(raw.max_output_tokens) ?? 32768,
-			source: typeof raw.source === "string" && raw.source.trim() ? raw.source.trim() : "system",
-			isReasoning: raw.is_reasoning === true || thinking,
-			supportsEffort: reasoning.efforts !== void 0,
-			...reasoning.efforts === void 0 ? {} : { reasoningEfforts: reasoning.efforts },
-			...reasoning.defaultEffort === void 0 ? {} : { defaultReasoningEffort: reasoning.defaultEffort },
-			...positiveNumber(raw.price_factor) === void 0 ? {} : { priceFactor: positiveNumber(raw.price_factor) },
-			...contextOptions === void 0 ? {} : { contextOptions }
-		});
+					message: "Model returned a completed response with no content.",
+					code: EMPTY_RESPONSE_CODE
+				}
+			}
+		};
+		return;
 	}
-	return models;
-}
-/**
-* Restore Qoder-only metadata after DSH's provider-neutral discovery contract
-* has retained only id, name, and token limits.
-*/
-function mergeQoderDiscoveryMetadata(configured, discovered) {
-	const catalog = new Map(discovered.map((model) => [model.id, model]));
-	return configured.map((model) => {
-		const advertised = catalog.get(model.id);
-		if (advertised === void 0) return { ...model };
-		const merged = { ...model };
-		for (const key of discoveredMetadataKeys) delete merged[key];
-		for (const key of discoveredMetadataKeys) if (advertised[key] !== void 0) Object.assign(merged, { [key]: advertised[key] });
-		return merged;
-	});
+	yield {
+		type: "finish",
+		reason: { kind: toolCalls.size > 0 ? "tool-calls" : terminalKind }
+	};
 }
-function hasSameQoderDiscoveryMetadata(left, right) {
-	return left?.length === right.length && left.every((model, index) => {
-		const candidate = right[index];
-		return candidate?.id === model.id && discoveredMetadataKeys.every((key) => JSON.stringify(model[key]) === JSON.stringify(candidate[key]));
-	});
+//#endregion
+//#region src/qoder/transport/chat.ts
+/** Qoder chat request encoding, timeout lifecycle, and SSE streaming. */
+function aborted$1(message) {
+	return new QoderLlmError(message, "ABORTED");
 }
-async function fetchQoderModels(credentials, options = {}) {
-	const url = getQoderModelListUrl(options.region);
-	const fetchImpl = options.fetch ?? globalThis.fetch;
-	options.logger?.debug?.("[Qoder Models] Requesting model catalog", { url });
-	let response;
+async function* streamQoderChat(options, model, credentials, messages, dependencies) {
+	const request = await buildQoderRequestBody(options, credentials.userID, messages, model);
+	const encodedBody = qoderEncodeBody(JSON.stringify(request));
+	const encodedBytes = Buffer.from(encodedBody, "utf8");
+	const chatUrl = getQoderChatUrl(dependencies.region);
+	const requestController = new AbortController();
+	let headerTimedOut = false;
+	let idleTimedOut = false;
+	let idleTimer;
+	const startedAt = performance.now();
+	const onCallerAbort = () => requestController.abort(options.signal?.reason);
+	options.signal?.addEventListener("abort", onCallerAbort, { once: true });
+	const headerTimer = setTimeout(() => {
+		headerTimedOut = true;
+		requestController.abort("response header timeout");
+	}, dependencies.responseHeaderTimeoutMs);
+	const resetIdleTimer = () => {
+		if (idleTimer !== void 0) clearTimeout(idleTimer);
+		idleTimer = setTimeout(() => {
+			idleTimedOut = true;
+			requestController.abort("stream idle timeout");
+		}, dependencies.streamIdleTimeoutMs);
+	};
 	try {
-		response = await fetchImpl(url, {
-			method: "GET",
+		const response = await dependencies.fetch(chatUrl, {
+			method: "POST",
 			headers: {
-				accept: "application/json",
-				...buildAuthHeaders(null, url, credentials)
+				"content-type": "application/json",
+				"accept": "text/event-stream",
+				"cache-control": "no-cache",
+				"accept-encoding": "identity",
+				"x-model-key": options.model || "cmodel",
+				"x-model-source": model?.source || "system",
+				...attributionHeaders(),
+				...buildAuthHeaders(encodedBytes, chatUrl, credentials)
 			},
-			signal: options.signal
+			body: encodedBytes,
+			signal: requestController.signal
+		});
+		clearTimeout(headerTimer);
+		dependencies.logger?.debug?.("[Qoder Stream] Response headers received", {
+			region: dependencies.region,
+			status: response.status,
+			durationMs: Math.round(performance.now() - startedAt),
+			...qoderRequestId(response.headers) === void 0 ? {} : { requestId: qoderRequestId(response.headers) }
 		});
+		resetIdleTimer();
+		if (!response.ok) throw qoderHttpError(`Qoder upstream service returned HTTP ${response.status}.`, response);
+		if (!response.body) throw new QoderLlmError("Qoder response contains no readable body stream.", "EMPTY_RESPONSE");
+		yield* parseQoderSse(response.body, { onActivity: resetIdleTimer });
 	} catch (error) {
-		if (options.signal?.aborted) throw new QoderLlmError("Qoder model discovery was aborted.", "ABORTED");
-		options.logger?.error?.("[Qoder Models] Catalog network request failed", redactLogValue(error));
-		throw new QoderLlmError("Qoder model discovery network request failed.", "TRANSPORT", { cause: error });
-	}
-	options.logger?.debug?.("[Qoder Models] Catalog request completed", {
-		url,
-		status: response.status
-	});
-	const text = await response.text();
-	if (!response.ok) {
-		options.logger?.error?.("[Qoder Models] Catalog request failed", redactLogPayload(text));
-		throw qoderHttpError(`Qoder model discovery failed with HTTP status ${response.status}.`, response);
-	}
-	let payload;
-	try {
-		payload = JSON.parse(text);
-	} catch {
-		throw new QoderLlmError("Qoder model discovery returned invalid JSON.", "MALFORMED_RESPONSE");
+		if (options.signal?.aborted) throw aborted$1("Request was aborted.");
+		if (headerTimedOut) {
+			const failure = new QoderLlmError("Qoder model request exceeded its response header timeout.", "TIMEOUT");
+			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure));
+			throw failure;
+		}
+		if (idleTimedOut) {
+			const failure = new QoderLlmError("Qoder model stream exceeded its idle timeout.", "TIMEOUT");
+			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure));
+			throw failure;
+		}
+		if (error instanceof QoderLlmError) {
+			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(error));
+			throw error;
+		}
+		const failure = new QoderLlmError("Qoder transport request failed.", "TRANSPORT", { cause: error });
+		dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(failure), { cause: redactLogValue(error) });
+		throw failure;
+	} finally {
+		clearTimeout(headerTimer);
+		if (idleTimer !== void 0) clearTimeout(idleTimer);
+		options.signal?.removeEventListener("abort", onCallerAbort);
+		requestController.abort("request complete");
 	}
-	const models = normalizeQoderModels(payload);
-	if (models.length === 0) throw new QoderLlmError("Qoder model discovery returned no enabled models.", "EMPTY_RESPONSE");
-	options.logger?.debug?.("[Qoder Models] Model catalog resolved", { models });
-	return models;
 }
 //#endregion
-//#region src/usage.ts
-const userAgent = "dsh-provider-qoder";
-const defaultUsageTtlMs = 6e4;
-const defaultUsageTimeoutMs = 15e3;
-function normalizeQuota(raw) {
-	if (!raw || typeof raw !== "object") return void 0;
-	const total = typeof raw.total === "number" && Number.isFinite(raw.total) ? raw.total : typeof raw.cap === "number" && Number.isFinite(raw.cap) ? raw.cap : typeof raw.remaining === "number" && typeof raw.used === "number" ? raw.used + raw.remaining : 0;
-	const used = typeof raw.used === "number" && Number.isFinite(raw.used) ? raw.used : 0;
-	const remaining = typeof raw.remaining === "number" && Number.isFinite(raw.remaining) ? raw.remaining : Math.max(0, total - used);
-	let percentage;
-	if (typeof raw.percentage === "number" && Number.isFinite(raw.percentage)) percentage = raw.percentage <= 1 && total > 1 ? raw.percentage * 100 : raw.percentage;
-	else percentage = total > 0 ? used / total * 100 : 0;
-	const unit = typeof raw.unit === "string" && raw.unit.length > 0 ? raw.unit : "credits";
-	return {
-		total,
-		used,
-		remaining,
-		percentage,
-		unit
-	};
-}
-function normalizeExpiresAt(rawExpires) {
-	if (rawExpires === void 0 || rawExpires === null) return void 0;
-	if (typeof rawExpires === "number" && rawExpires > 0) return new Date(rawExpires).toISOString();
-	if (typeof rawExpires === "string" && rawExpires.length > 0) {
-		const parsed = Date.parse(rawExpires);
-		if (!Number.isNaN(parsed) && parsed > 0) return new Date(parsed).toISOString();
-	}
+//#region src/qoder/transport/default-transport.ts
+const defaultStreamIdleTimeoutMs = 300 * 1e3;
+function aborted(message) {
+	return new QoderLlmError(message, "ABORTED");
 }
-var QoderUsageReader = class {
-	authService;
-	fetchImpl;
-	ttlMs;
-	timeoutMs;
-	resolveRegion;
+var DefaultQoderTransport = class {
 	region;
+	resolvePat;
+	fetchImpl;
 	logger;
-	cache = /* @__PURE__ */ new Map();
+	streamIdleTimeoutMs;
+	responseHeaderTimeoutMs;
+	metadataTimeoutMs;
+	auth;
+	usage;
+	modelFlights = new SingleFlight();
+	attachments;
+	imageUploader;
+	preserveThinking;
 	constructor(options) {
-		this.authService = options.authService;
-		this.fetchImpl = options.fetch ?? globalThis.fetch;
-		this.ttlMs = options.ttlMs ?? defaultUsageTtlMs;
-		this.timeoutMs = options.timeoutMs ?? defaultUsageTimeoutMs;
-		this.resolveRegion = options.resolveRegion;
 		this.region = options.region;
+		this.resolvePat = options.resolvePat;
+		this.fetchImpl = options.fetch ?? globalThis.fetch;
 		this.logger = options.logger;
+		this.streamIdleTimeoutMs = options.streamIdleTimeoutMs ?? 3e5;
+		this.responseHeaderTimeoutMs = options.responseHeaderTimeoutMs ?? 3e4;
+		this.metadataTimeoutMs = options.metadataTimeoutMs;
+		this.attachments = options.attachments;
+		this.preserveThinking = options.preserveThinking;
+		this.auth = new QoderAuthService({
+			fetch: this.fetchImpl,
+			logger: this.logger,
+			region: this.region,
+			resolveMachineId: options.resolveMachineId
+		});
+		this.usage = new QoderUsageReader({
+			authService: this.auth,
+			fetch: this.fetchImpl,
+			logger: this.logger,
+			region: this.region,
+			timeoutMs: this.metadataTimeoutMs
+		});
+		this.imageUploader = new QoderImageUploader({
+			fetch: this.fetchImpl,
+			logger: this.logger,
+			region: this.region,
+			...options.imageUploadTimeoutMs === void 0 ? {} : { timeoutMs: options.imageUploadTimeoutMs },
+			...options.imageUrlCacheTtlMs === void 0 ? {} : { cacheTtlMs: options.imageUrlCacheTtlMs },
+			refreshCredentials: async (signal) => {
+				const pat = await this.requirePat(signal);
+				this.auth.clear(pat);
+				return this.auth.getCredentials(pat, signal);
+			}
+		});
 	}
-	setRegion(region) {
-		this.region = region;
+	stream(options, model) {
+		return this.generate(options, model);
 	}
-	currentRegion() {
-		if (this.resolveRegion) return this.resolveRegion();
-		return this.region ?? "global";
+	async discoverModels(signal) {
+		const pat = await this.requirePat(signal);
+		const key = opaqueCredentialKey(pat);
+		return this.modelFlights.run(key, signal, async (sharedSignal) => {
+			const credentials = await this.auth.getCredentials(pat, sharedSignal);
+			return retryMetadataRead(sharedSignal, () => fetchQoderModels(credentials, {
+				fetch: this.fetchImpl,
+				signal: sharedSignal,
+				logger: this.logger,
+				region: this.region,
+				timeoutMs: this.metadataTimeoutMs
+			}));
+		}, () => aborted("Qoder model discovery was aborted."));
 	}
-	async readAccount(pat, options) {
-		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid.", "MISSING_CREDENTIAL");
-		const effectiveRegion = options?.region ?? this.currentRegion();
-		const cacheKey = `${effectiveRegion}:${pat}`;
-		if (!options?.force) {
-			const cached = this.cache.get(cacheKey);
-			if (cached && cached.expiresAt > Date.now()) return cached.info;
-		}
-		const creds = await this.authService.getCredentials(pat, options?.signal, effectiveRegion);
-		const accountInfo = {
-			profile: {
-				id: creds.userID,
-				name: creds.name || "Qoder User",
-				email: creds.email || ""
-			},
-			usage: await this.fetchUsage(creds.authToken, options?.signal, effectiveRegion),
-			updatedAt: (/* @__PURE__ */ new Date()).toISOString()
-		};
-		this.cache.set(cacheKey, {
-			info: accountInfo,
-			expiresAt: Date.now() + this.ttlMs
+	async readAccount(options) {
+		const pat = await this.requirePat(options?.signal);
+		return this.usage.readAccount(pat, {
+			force: options?.force,
+			signal: options?.signal
 		});
-		return accountInfo;
 	}
-	clear(pat) {
-		if (pat) {
-			for (const key of this.cache.keys()) if (key.endsWith(`:${pat}`) || key === pat) this.cache.delete(key);
-		} else this.cache.clear();
-	}
-	async fetchUsage(jobToken, signal, region) {
-		const url = getQoderUsageUrl(region ?? this.currentRegion());
-		const timeoutSignal = AbortSignal.timeout(this.timeoutMs);
-		const requestSignal = signal === void 0 ? timeoutSignal : AbortSignal.any([signal, timeoutSignal]);
-		this.logger?.debug?.("[Qoder Usage] Requesting quota usage", { url });
-		try {
-			const response = await this.fetchImpl(url, {
-				method: "GET",
-				headers: {
-					authorization: `Bearer ${jobToken}`,
-					accept: "application/json",
-					"user-agent": userAgent,
-					"cosy-version": "1.0.1",
-					"cosy-clienttype": "5"
-				},
-				signal: requestSignal
-			});
-			this.logger?.debug?.("[Qoder Usage] Request completed", {
-				status: response.status,
-				statusText: response.statusText
-			});
-			const text = await response.text();
-			if (!response.ok) {
-				this.logger?.error?.("[Qoder Usage] Request failed", redactLogPayload(text));
-				throw qoderHttpError(`Failed to fetch Qoder quota usage with status ${response.status}: ${text}`, response);
-			}
-			let data;
-			try {
-				data = JSON.parse(text);
-			} catch {
-				this.logger?.error?.("[Qoder Usage] Invalid JSON response", redactLogPayload(text));
-				throw new QoderLlmError("Failed to parse Qoder quota JSON response", "USAGE_FETCH_FAILED");
-			}
-			this.logger?.debug?.("[Qoder Usage] Quota usage resolved", redactLogValue(data));
-			return {
-				userQuota: normalizeQuota(data.userQuota),
-				orgResourcePackage: normalizeQuota(data.orgResourcePackage),
-				totalUsagePercentage: typeof data.totalUsagePercentage === "number" ? data.totalUsagePercentage : void 0,
-				isQuotaExceeded: typeof data.isQuotaExceeded === "boolean" ? data.isQuotaExceeded : false,
-				expiresAt: normalizeExpiresAt(data.expiresAt),
-				raw: data
-			};
-		} catch (error) {
-			if (error instanceof QoderLlmError) throw error;
-			if (signal?.aborted) throw new QoderLlmError("Qoder quota usage request was aborted.", "ABORTED");
-			if (timeoutSignal.aborted) throw new QoderLlmError("Qoder quota usage request timed out.", "TIMEOUT");
-			throw new QoderLlmError("Qoder quota usage network request failed.", "TRANSPORT", { cause: error });
-		}
+	async requirePat(signal) {
+		if (signal?.aborted) throw aborted("Qoder request was aborted.");
+		const pat = (await this.resolvePat()).trim();
+		if (!pat) throw new QoderLlmError("Qoder Personal Access Token is missing. Configure Qoder in the Qoder settings page.", "MISSING_CREDENTIAL");
+		if (signal?.aborted) throw aborted("Qoder request was aborted.");
+		return pat;
+	}
+	async *generate(options, model) {
+		if (options.signal?.aborted) throw aborted("Request was aborted prior to generation.");
+		validateQoderRequestShape(options, model);
+		const pat = await this.requirePat(options.signal);
+		const credentials = await this.auth.getCredentials(pat, options.signal);
+		const messages = await translateQoderMessages(options, this.attachments, {
+			uploader: this.imageUploader,
+			credentials,
+			preserveThinking: this.preserveThinking
+		});
+		yield* streamQoderChat(options, model, await this.auth.getCredentials(pat, options.signal), messages, {
+			fetch: this.fetchImpl,
+			logger: this.logger,
+			region: this.region,
+			responseHeaderTimeoutMs: this.responseHeaderTimeoutMs,
+			streamIdleTimeoutMs: this.streamIdleTimeoutMs
+		});
 	}
 };
 //#endregion
-//#region src/index.ts
-const name = "provider-qoder";
-const inject = [
-	"llm",
-	"credentials",
-	"connection"
-];
-const providerQoder = "qoder-official";
-const settingsNamespace = "provider-qoder";
-const qoderChannel = "/qoder-subscription";
-const fiberDisposed = 4;
-const fiberUnloading = 5;
+//#region src/qoder/transport/index.ts
+function createQoderTransport(options) {
+	return new DefaultQoderTransport(options);
+}
+//#endregion
+//#region src/dsh/config.ts
+/** DSH configuration schema and region-scoped model catalog migration rules. */
 const catalogModel = z.object({
 	id: z.string().required(),
 	name: z.string().required(),
 	description: z.string(),
 	contextWindow: z.number().step(1).min(1),
+	maxContextWindow: z.number().step(1).min(1),
 	maxTokens: z.number().step(1).min(1),
 	source: z.string(),
 	isReasoning: z.boolean(),
@@ -1607,15 +2321,19 @@ const catalogModel = z.object({
 	})),
 	defaultReasoningEffort: z.string(),
 	priceFactor: z.number().min(0),
+	supportsImages: z.boolean(),
 	contextOptions: z.dict(z.object({
 		tokenCount: z.number().step(1).min(1),
 		isDefault: z.boolean()
 	}))
 });
+const modelsByRegionSchema = z.dict(z.array(catalogModel));
 const Config = z.object({
 	region: z.union(["global", "china"]).default("global"),
-	models: z.array(catalogModel).default(defaultModels),
-	streamIdleTimeoutMs: z.number().step(1).min(1).default(defaultStreamIdleTimeoutMs)
+	modelsByRegion: modelsByRegionSchema.default({}),
+	models: z.array(catalogModel),
+	streamIdleTimeoutMs: z.number().step(1).min(1).default(defaultStreamIdleTimeoutMs),
+	preserveThinking: z.boolean().default(true)
 });
 function resolveModels(models) {
 	const resolved = models ?? defaultModels;
@@ -1628,6 +2346,117 @@ function resolveModels(models) {
 		return { ...model };
 	});
 }
+function modelsFor(config, region, legacyModelsRegion = config.region ?? "global") {
+	const scoped = config.modelsByRegion?.[region];
+	if (scoped !== void 0) return resolveModels(scoped);
+	if (legacyModelsRegion === region && config.models !== void 0 && config.models.length > 0) return resolveModels(config.models);
+	return resolveModels(defaultModels);
+}
+//#endregion
+//#region src/dsh/adapter.ts
+/** Thin DSH adapter over the Qoder transport seam. */
+function modelInfo(provider, model) {
+	return {
+		provider,
+		id: model.id,
+		name: model.priceFactor === void 0 ? model.name : `${model.name} （${model.priceFactor}x）`,
+		description: model.description,
+		inputModalities: model.supportsImages === true ? ["text", "image"] : ["text"]
+	};
+}
+var QoderAdapter = class extends LlmAdapter {
+	resolveTransport;
+	catalogModels;
+	providerId;
+	providerName;
+	constructor(options) {
+		super();
+		this.resolveTransport = options.resolveTransport;
+		this.catalogModels = options.models && options.models.length > 0 ? options.models : defaultModels;
+		this.providerId = options.providerId ?? "qoder-official";
+		this.providerName = options.providerName ?? "Qoder";
+	}
+	providerInfo(provider) {
+		return {
+			id: provider,
+			name: this.providerName
+		};
+	}
+	listModels(provider) {
+		return Promise.resolve(this.catalogModels.map((model) => modelInfo(provider, model)));
+	}
+	replaceModels(models) {
+		this.catalogModels = models;
+	}
+	resolveModel(provider, modelId, signal) {
+		if (signal?.aborted) return Promise.reject(new QoderLlmError("Qoder model resolution was aborted.", "ABORTED"));
+		const configured = this.catalogModels.find((model) => model.id === modelId);
+		if (configured === void 0) return Promise.resolve({
+			provider,
+			id: modelId,
+			name: modelId,
+			inputModalities: ["text"]
+		});
+		return Promise.resolve({
+			...modelInfo(provider, configured),
+			...configured.contextWindow === void 0 ? {} : { context: { contextWindow: configured.contextWindow } },
+			...configured.maxTokens === void 0 ? {} : { defaultMaxTokens: configured.maxTokens },
+			...configured.reasoningEfforts === void 0 || configured.reasoningEfforts.length === 0 ? {} : { reasoning: {
+				efforts: configured.reasoningEfforts.map((effort) => ({
+					id: ReasoningEffortId(effort.id),
+					name: effort.name,
+					...effort.description === void 0 ? {} : { description: effort.description }
+				})),
+				...configured.isReasoning === false || configured.defaultReasoningEffort === void 0 ? {} : { defaultEffort: ReasoningEffortId(configured.defaultReasoningEffort) }
+			} }
+		});
+	}
+	stream(options) {
+		if (options.provider !== this.providerId) throw new QoderLlmError(`Qoder adapter does not own provider "${options.provider}".`, "INVALID_PROVIDER");
+		const model = this.catalogModels.find((candidate) => candidate.id === (options.model || "cmodel"));
+		return this.resolveTransport().stream(options, model);
+	}
+};
+//#endregion
+//#region src/dsh/credential-contract.ts
+/** Shared DSH host/browser contract for the one managed Qoder credential. */
+const qoderCredentialRef = "QODER_MANAGED_CREDENTIAL";
+/** DSH's local provider uses `env` and `*-env` for ambient credential layers. */
+function isEnvironmentCredentialSource(source) {
+	return source === "env" || source?.endsWith("-env") === true;
+}
+//#endregion
+//#region src/dsh/credential.ts
+/** DSH host-side resolution of the one managed Qoder credential. */
+const managedQoderCredentialRef = credentialRef(qoderCredentialRef);
+/** Resolve only provider-managed storage; ambient environment layers are intentionally unsupported. */
+async function resolveManagedQoderPat(credentials) {
+	const hit = await credentials.resolve(managedQoderCredentialRef);
+	if (hit === void 0 || isEnvironmentCredentialSource(hit.source)) return "";
+	return hit.value.trim();
+}
+//#endregion
+//#region src/dsh/plugin.ts
+const name = "provider-qoder";
+const inject = [
+	"llm",
+	"credentials",
+	"connection",
+	"attachments"
+];
+const providerQoder = "qoder-official";
+const settingsNamespace = "provider-qoder";
+const qoderChannel = "/qoder-subscription";
+const fiberDisposed = 4;
+const fiberUnloading = 5;
+function logError(error) {
+	if (!(error instanceof Error)) return { name: "UnknownError" };
+	return {
+		name: error.name,
+		message: error.message,
+		..."code" in error ? { code: error.code } : {}
+	};
+}
 function publicError(message) {
 	return {
 		ok: false,
@@ -1640,81 +2469,119 @@ function publicError(message) {
 }
 function apply(ctx, config = {}) {
 	const logger = ctx.logger;
+	const initialRegion = config.region ?? "global";
+	const hasConfiguredModels = config.models !== void 0 && config.models.length > 0;
+	const baseConfig = {
+		region: initialRegion,
+		modelsByRegion: { ...config.modelsByRegion },
+		...hasConfiguredModels ? { models: resolveModels(config.models) } : {},
+		streamIdleTimeoutMs: config.streamIdleTimeoutMs ?? 3e5,
+		preserveThinking: config.preserveThinking ?? true
+	};
 	let current = () => baseConfig;
-	const authService = new QoderAuthService({
-		logger,
-		resolveRegion: () => current().region ?? "global"
-	});
-	const usageReader = new QoderUsageReader({
-		authService,
+	let legacyModelsRegion = initialRegion;
+	let persistDiscoveredModels = async (_region) => {};
+	const discoveredCatalogs = {
+		global: [],
+		china: []
+	};
+	const createTransport = (region, streamIdleTimeoutMs, preserveThinking, resolvePat = () => resolveManagedQoderPat(ctx.credentials)) => createQoderTransport({
+		region,
+		resolvePat,
 		logger,
-		resolveRegion: () => current().region ?? "global"
+		streamIdleTimeoutMs,
+		attachments: ctx.attachments,
+		preserveThinking
 	});
-	const baseConfig = {
-		region: config.region ?? "global",
-		models: resolveModels(config.models),
-		streamIdleTimeoutMs: config.streamIdleTimeoutMs ?? 3e5
+	const resolveConfig = () => {
+		const value = current();
+		const region = value.region ?? "global";
+		return {
+			region,
+			models: mergeQoderDiscoveryMetadata(modelsFor(value, region, legacyModelsRegion), discoveredCatalogs[region]),
+			streamIdleTimeoutMs: value.streamIdleTimeoutMs ?? 3e5,
+			preserveThinking: value.preserveThinking ?? true
+		};
 	};
-	let discoveredCatalog = [];
-	let previousRegion = baseConfig.region ?? "global";
-	const resolveConfig = () => ({
-		region: current().region ?? "global",
-		models: mergeQoderDiscoveryMetadata(resolveModels(current().models), discoveredCatalog),
-		streamIdleTimeoutMs: current().streamIdleTimeoutMs ?? 3e5
-	});
 	const initial = resolveConfig();
+	let activeTransport = createTransport(initial.region, initial.streamIdleTimeoutMs, initial.preserveThinking);
+	let activeTransportConfig = {
+		region: initial.region,
+		streamIdleTimeoutMs: initial.streamIdleTimeoutMs,
+		preserveThinking: initial.preserveThinking
+	};
 	const adapter = new QoderAdapter({
-		resolvePat: () => resolveManagedQoderPat(ctx.credentials),
+		resolveTransport: () => activeTransport,
 		models: initial.models,
 		providerId: providerQoder,
-		providerName: "Qoder",
-		authService,
-		logger,
-		streamIdleTimeoutMs: initial.streamIdleTimeoutMs,
-		region: initial.region
+		providerName: "Qoder"
 	});
 	const registration = ctx.llm.registerAdapter([providerQoder], adapter);
 	const refreshAdapter = () => {
 		const next = resolveConfig();
-		if (next.region !== previousRegion) {
-			authService.clear();
-			usageReader.clear();
-			previousRegion = next.region;
+		if (next.region !== activeTransportConfig.region || next.streamIdleTimeoutMs !== activeTransportConfig.streamIdleTimeoutMs || next.preserveThinking !== activeTransportConfig.preserveThinking) {
+			activeTransport = createTransport(next.region, next.streamIdleTimeoutMs, next.preserveThinking);
+			activeTransportConfig = {
+				region: next.region,
+				streamIdleTimeoutMs: next.streamIdleTimeoutMs,
+				preserveThinking: next.preserveThinking
+			};
 		}
-		adapter.replaceConfig(next.models, next.streamIdleTimeoutMs, next.region);
+		adapter.replaceModels(next.models);
 		registration.replace([providerQoder]);
 	};
 	ctx.inject(["settings"], (settingsCtx) => {
 		const scope = settingsCtx.settings.register(settingsNamespace, Config, {
 			base: baseConfig,
 			validate: (value) => {
-				resolveModels(value.models);
+				for (const region of Object.keys(value.modelsByRegion ?? {})) if (region !== "global" && region !== "china") throw new Error(`provider-qoder: unsupported model catalog region "${region}"`);
+				modelsFor(value, "global", legacyModelsRegion);
+				modelsFor(value, "china", legacyModelsRegion);
 			}
 		});
+		legacyModelsRegion = scope.get().region ?? initialRegion;
 		current = () => scope.get();
+		persistDiscoveredModels = async (region) => {
+			const value = scope.get();
+			const selected = modelsFor(value, region, legacyModelsRegion);
+			const enriched = mergeQoderDiscoveryMetadata(selected, discoveredCatalogs[region]);
+			if (!hasSameQoderDiscoveryMetadata(selected, enriched)) await scope.update({ modelsByRegion: {
+				...value.modelsByRegion,
+				[region]: enriched
+			} });
+		};
 		refreshAdapter();
+		const loaded = scope.get();
+		const loadedRegion = loaded.region ?? "global";
+		if (loaded.models !== void 0 && loaded.models.length > 0 && loaded.modelsByRegion?.[loadedRegion] === void 0) scope.update({ modelsByRegion: {
+			...loaded.modelsByRegion,
+			[loadedRegion]: resolveModels(loaded.models)
+		} }).catch((error) => logger?.error?.("[Qoder Settings] Failed to migrate model catalog", logError(error)));
 		scope.watch(async (next) => {
 			if (ctx.fiber.state === fiberUnloading || ctx.fiber.state === fiberDisposed) return;
 			refreshAdapter();
-			const enriched = mergeQoderDiscoveryMetadata(resolveModels(next.models), discoveredCatalog);
-			if (!hasSameQoderDiscoveryMetadata(next.models, enriched)) await scope.update({ models: enriched });
+			const region = next.region ?? "global";
+			const selected = modelsFor(next, region, legacyModelsRegion);
+			const enriched = mergeQoderDiscoveryMetadata(selected, discoveredCatalogs[region]);
+			if (!hasSameQoderDiscoveryMetadata(selected, enriched)) await scope.update({ modelsByRegion: {
+				...next.modelsByRegion,
+				[region]: enriched
+			} });
 		});
 		settingsCtx.effect(() => () => {
 			if (ctx.fiber.state === fiberUnloading || ctx.fiber.state === fiberDisposed) return;
+			persistDiscoveredModels = async () => {};
 			current = () => baseConfig;
 			refreshAdapter();
 		});
 	});
 	const discoverModels = async (signal, suppliedPat) => {
-		const pat = suppliedPat?.trim() || await resolveManagedQoderPat(ctx.credentials);
-		if (!pat) throw new QoderLlmError("Qoder PAT is not configured.", "MISSING_CREDENTIAL");
-		const region = current().region ?? "global";
-		const models = await fetchQoderModels(await authService.getCredentials(pat, signal, region), {
-			signal,
-			logger,
-			region
-		});
-		discoveredCatalog = models;
+		const snapshot = resolveConfig();
+		const normalizedPat = suppliedPat?.trim();
+		const models = await (normalizedPat ? createTransport(snapshot.region, snapshot.streamIdleTimeoutMs, snapshot.preserveThinking, () => Promise.resolve(normalizedPat)) : activeTransport).discoverModels(signal);
+		discoveredCatalogs[snapshot.region] = models;
+		refreshAdapter();
+		await persistDiscoveredModels(snapshot.region);
 		return models;
 	};
 	ctx.llm.registerModelDiscovery(settingsNamespace, async (request, signal) => {
@@ -1737,28 +2604,15 @@ function apply(ctx, config = {}) {
 				};
 			} catch (error) {
 				if (signal.aborted || error instanceof QoderLlmError && error.code === "ABORTED") throw error;
-				logger?.error?.("[Qoder RPC] Failed to discover models", redactLogValue(error));
+				logger?.error?.("[Qoder RPC] Failed to discover models", logError(error));
 				return publicError(error instanceof Error ? error.message : "Failed to discover Qoder models");
 			}
 			const force = typeof payload === "object" && payload !== null && "force" in payload ? payload.force === true : false;
 			logger?.debug?.("[Qoder RPC] Reading subscriber account", { force });
-			let pat;
-			try {
-				pat = await resolveManagedQoderPat(ctx.credentials);
-			} catch (error) {
-				if (signal.aborted) throw error;
-				logger?.error?.("[Qoder RPC] Failed to resolve managed PAT", redactLogValue(error));
-				return publicError(error instanceof Error ? error.message : "No Qoder PAT configured");
-			}
-			if (!pat) {
-				logger?.warn?.("[Qoder RPC] No managed Qoder PAT is configured");
-				return publicError("Qoder PAT is not configured");
-			}
 			try {
-				const account = await usageReader.readAccount(pat, {
+				const account = await activeTransport.readAccount({
 					force,
-					signal,
-					region: current().region ?? "global"
+					signal
 				});
 				logger?.debug?.("[Qoder RPC] Subscriber account resolved");
 				return {
@@ -1767,7 +2621,7 @@ function apply(ctx, config = {}) {
 				};
 			} catch (error) {
 				if (signal.aborted || error instanceof QoderLlmError && error.code === "ABORTED") throw error;
-				logger?.error?.("[Qoder RPC] Failed to read subscriber account", redactLogValue(error));
+				logger?.error?.("[Qoder RPC] Failed to read subscriber account", logError(error));
 				return publicError(error instanceof Error ? error.message : "Failed to load Qoder account");
 			}
 		};
@@ -1775,4 +2629,4 @@ function apply(ctx, config = {}) {
 	}
 }
 //#endregion
-export { Config, QoderAdapter, QoderAuthService, QoderLlmError, QoderUsageReader, apply, buildAuthHeaders, buildQoderRequestBody, computeSigPath, defaultMaxTokens, defaultModels, defaultStreamIdleTimeoutMs, fetchQoderModels, getMachineId, getQoderChatUrl, getQoderExchangeUrl, getQoderModelListUrl, getQoderUsageUrl, getQoderUserInfoUrl, hasSameQoderDiscoveryMetadata, inject, isEnvironmentCredentialSource, managedQoderCredentialRef, mergeQoderDiscoveryMetadata, name, normalizeQoderModels, parseQoderSse, qoderCredentialRef, qoderEncodeBody, qoderGlobalBaseUrl, qoderGlobalOpenApiUrl, qoderHttpError, qoderRegionEndpoints, redactLogPayload, redactLogValue, resolveManagedQoderPat, resolveQoderEndpoints, retryAfterMs, translateTools, validateAndTranslateMessages, validateQoderRequest };
+export { Config, apply, inject, name };