dsh-provider-qoder 0.4.2 → 0.5.0

package/lib/index.js

@@ -1,12 +1,18 @@
 import z from "@deepseek-ai/schemastery";
-import { EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ProviderRequestId, ReasoningEffortId, ToolCallId, attributionHeaders, contentHasImage } from "@deepseek-ai/dsh-llm";
-import crypto, { createHash } from "node:crypto";
+import { CONTEXT_WINDOW_EXCEEDED_CODE, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ProviderRequestId, QUOTA_EXCEEDED_CODE, ReasoningEffortId, ToolCallId, attributionHeaders, contentHasImage, isContextWindowExceededError, isQuotaExceededError } from "@deepseek-ai/dsh-llm";
+import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { homedir } from "node:os";
-import { dirname, join } from "node:path";
+import { homedir, hostname } from "node:os";
+import { dirname, join, resolve } from "node:path";
 import { WebError } from "@deepseek-ai/dsh-web";
+import * as zlib from "node:zlib";
+import { promisify } from "node:util";
+import { setTimeout as setTimeout$1 } from "node:timers/promises";
 import { SettingsConflictError } from "@deepseek-ai/dsh-settings";
-import { credentialRef } from "@deepseek-ai/dsh-credentials";
+import { credentialKey, credentialRef } from "@deepseek-ai/dsh-credentials";
+//#region src/qoder/queue.ts
+const defaultModelQueueMaxWaitMs = 3600 * 1e3;
+//#endregion
 //#region src/qoder/catalog.ts
 const discoveredMetadataKeys = [
 	"description",
@@ -103,7 +109,7 @@ function normalizeQoderModels(payload, onConflict) {
 		const rawOriginalPrice = nonNegativeNumber(raw.original_price_factor) ?? nonNegativeNumber(raw.originPriceFactor);
 		const promotionPrice = typeof raw.promotion === "object" && raw.promotion !== null && raw.promotion.active === true ? nonNegativeNumber(raw.promotion.before_promotion_price_factor) : void 0;
 		const originalPriceFactor = rawOriginalPrice ?? promotionPrice;
-		const isFree = raw.is_free === true || raw.isFree === true || Array.isArray(raw.tags) && raw.tags.includes("limited_time_free") || priceFactor === 0;
+		const isFree = priceFactor === void 0 ? raw.is_free === true || raw.isFree === true || Array.isArray(raw.tags) && raw.tags.includes("limited_time_free") : priceFactor === 0;
 		const reasoning = reasoningEffortsOf(raw.thinking_config);
 		models.push({
 			id,
@@ -153,12 +159,12 @@ function formatRateFactor(value) {
 }
 /**
 * Format model price factor / rate string.
-* - Free models or price factor 0: '免费' or 'Free'
+* - Price factor 0, or free models without a price factor: '免费' or 'Free'
 * - Promotional models: '0.5x（原 1x）' or '0.5x (was 1x)'
 * - Standard models: '1x'
 */
 function formatModelRate(model, isZh = true) {
-	if (model.isFree || model.priceFactor === 0) return isZh ? "免费" : "Free";
+	if (model.priceFactor === 0 || model.priceFactor === void 0 && model.isFree) return isZh ? "免费" : "Free";
 	if (model.priceFactor === void 0) return void 0;
 	const current = `${formatRateFactor(model.priceFactor)}x`;
 	if (model.originalPriceFactor !== void 0 && model.originalPriceFactor > model.priceFactor) {
@@ -305,6 +311,21 @@ function getQoderChatUrl(region = "global") {
 	const { baseUrl } = resolveQoderEndpoints(region);
 	return `${baseUrl}algo/api/v2/service/pro/sse/agent_chat_generation?FetchKeys=llm_model_result&AgentId=agent_common&Encode=1`;
 }
+function getQoderQueueStatusUrl(region, params) {
+	const query = new URLSearchParams({
+		requestSetId: params.requestSetId,
+		modelKey: params.modelKey
+	});
+	if (params.queueType) query.set("queueType", params.queueType);
+	return `${resolveQoderEndpoints(region).baseUrl}algo/api/v2/service/ask/queue/status?${query}`;
+}
+function getQoderQueueFinishUrl(region) {
+	return `${resolveQoderEndpoints(region).baseUrl}algo/api/v2/service/ask/finish?Encode=1`;
+}
+/**  model-server HTTP endpoint. */
+function getQoderModelServerUrl(region = "global") {
+	return `https://${region === "china" ? "gateway.qoder.com.cn" : "api2-v2.qoder.sh"}/model/v1/chat/completions`;
+}
 function getQoderModelListUrl(region = "global") {
 	const { baseUrl } = resolveQoderEndpoints(region);
 	return `${baseUrl}algo/api/v2/model/list?Encode=1`;
@@ -348,10 +369,222 @@ function getQoderWebSearchUrl(region = "global") {
 * @module dsh-provider-qoder/qoder/errors
 */
 var QoderLlmError = class extends LlmError {
+	upstreamCode;
+	source;
+	httpStatus;
 	constructor(message, code = "UNKNOWN_ERROR", options) {
 		super(message, code, options);
 	}
 };
+/** Internal protocol signal; the queue controller consumes it before DSH sees it. */
+var QoderModelQueuedError = class extends QoderLlmError {
+	queue;
+	constructor(queue) {
+		super("Qoder model is queued.", "QODER_MODEL_QUEUED");
+		this.queue = queue;
+		this.upstreamCode = "10605";
+	}
+};
+const modelBusinessErrors = {
+	"103": {
+		code: "PROVIDER_ERROR",
+		message: "Qoder rejected a duplicate model request."
+	},
+	"105": {
+		code: "AUTH",
+		message: "Qoder subscriber authentication has expired."
+	},
+	"110": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder daily usage limit has been reached."
+	},
+	"112": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder personal Credits are exhausted."
+	},
+	"114": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder free trial account limit has been reached."
+	},
+	"115": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder free subscriber quota limit has been reached."
+	},
+	"116": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder Teams administrator Credits are exhausted."
+	},
+	"117": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder Teams member Credits are exhausted."
+	},
+	"119": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder Vela model free usage limit has been reached."
+	},
+	"122": {
+		code: QUOTA_EXCEEDED_CODE,
+		message: "Qoder billing group Credits limit has been reached."
+	},
+	"406": {
+		code: "PROVIDER_ERROR",
+		message: "Qoder rejected the request through its content safety policy."
+	},
+	"416": {
+		code: "INVALID_REQUEST",
+		message: "Qoder cannot satisfy the requested range."
+	},
+	"430": {
+		code: "INVALID_REQUEST",
+		message: "Qoder does not support this request; check client compatibility."
+	},
+	"10605": {
+		code: "RATE_LIMIT",
+		message: "Qoder model is queued."
+	},
+	"100400": {
+		code: "PROVIDER_ERROR",
+		message: "Qoder custom model service failed."
+	},
+	"100401": {
+		code: "AUTH",
+		message: "Qoder custom model authentication failed."
+	},
+	"100403": {
+		code: "PROVIDER_ERROR",
+		message: "Qoder custom model is unavailable."
+	}
+};
+/** Decode only model rejection diagnostics, with bounded depth, work and JSON size. */
+function modelErrorDetails(raw, status) {
+	let upstreamCode;
+	let codeDepth = -1;
+	let detail;
+	let textCode;
+	let delayMs;
+	let remaining = 100;
+	const seen = /* @__PURE__ */ new Set();
+	function visit(value, depth) {
+		if (depth > 10 || --remaining < 0) return;
+		if (typeof value === "string") {
+			const text = value.trim();
+			if (!text) return;
+			if (text.length <= 16 * 1024) try {
+				visit(JSON.parse(text), depth + 1);
+				return;
+			} catch {}
+			const diagnostic = text.slice(0, 16 * 1024);
+			if (isContextWindowExceededError(diagnostic)) textCode = CONTEXT_WINDOW_EXCEEDED_CODE;
+			else if (textCode === void 0 && isQuotaExceededError(diagnostic)) textCode = QUOTA_EXCEEDED_CODE;
+			detail = text.slice(0, 300);
+			return;
+		}
+		if (!value || typeof value !== "object" || Array.isArray(value) || seen.has(value)) return;
+		seen.add(value);
+		const obj = value;
+		for (const key of [
+			"code",
+			"error_code",
+			"errorCode",
+			"errCode"
+		]) {
+			const candidate = obj[key];
+			const code = (typeof candidate === "number" && Number.isFinite(candidate) ? String(candidate) : typeof candidate === "string" ? candidate.trim() : void 0)?.slice(0, 100);
+			if (!code || code === "0" || code === String(status) && !Object.hasOwn(modelBusinessErrors, code)) continue;
+			if (depth >= codeDepth) {
+				upstreamCode = code;
+				codeDepth = depth;
+			}
+		}
+		const seconds = obj.retryAfterSeconds;
+		if (typeof seconds === "number" && Number.isFinite(seconds * 1e3) && seconds > 0) delayMs = Math.max(delayMs ?? 0, seconds * 1e3);
+		for (const key of [
+			"message",
+			"body",
+			"details",
+			"error",
+			"cause",
+			"data",
+			"qoderApiError",
+			"providerError"
+		]) visit(obj[key], depth + 1);
+	}
+	visit(raw, 0);
+	return {
+		upstreamCode,
+		detail,
+		textCode,
+		delayMs
+	};
+}
+/** Model business semantics precede HTTP status; other transport capabilities keep their own protocols. */
+function qoderModelError(message, response) {
+	const details = modelErrorDetails(response.cause, response.status);
+	const known = details.upstreamCode === void 0 ? void 0 : Object.hasOwn(modelBusinessErrors, details.upstreamCode) ? modelBusinessErrors[details.upstreamCode] : void 0;
+	const fallback = qoderHttpError(message, response);
+	let code = fallback.code;
+	let summary = details.detail ? `${message}: ${details.detail}` : message;
+	if (details.upstreamCode !== void 0) {
+		code = known?.code ?? "PROVIDER_ERROR";
+		summary = `${known?.message ?? summary} (Qoder code ${details.upstreamCode}).`;
+	} else if (details.textCode === CONTEXT_WINDOW_EXCEEDED_CODE) {
+		code = CONTEXT_WINDOW_EXCEEDED_CODE;
+		summary = "Qoder model context window has been exceeded.";
+	} else if (details.textCode === QUOTA_EXCEEDED_CODE) {
+		code = QUOTA_EXCEEDED_CODE;
+		summary = "Qoder subscriber quota is exhausted.";
+	}
+	const providerRetryAfterMs = Math.max(fallback.failure.providerRetryAfterMs ?? 0, details.delayMs ?? 0) || void 0;
+	const error = new QoderLlmError(summary, code, {
+		status: response.status,
+		...providerRetryAfterMs === void 0 ? {} : { providerRetryAfterMs },
+		...fallback.failure.requestId === void 0 ? {} : { requestId: fallback.failure.requestId },
+		...response.cause === void 0 ? {} : { cause: response.cause }
+	});
+	error.upstreamCode = details.upstreamCode;
+	error.source = response.source;
+	error.httpStatus = response.httpStatus ?? (response.source === "http" ? response.status : void 0);
+	return error;
+}
+function canRefreshModelCredentials(error) {
+	return error.source === "http" && (error.failure.status === 401 || error.failure.status === 403) && error.code === "AUTH" && (error.upstreamCode === void 0 || error.upstreamCode === "105");
+}
+/** Model-server errors have their own wire contract; do not apply legacy business codes. */
+function qoderModelServerError(status, cause, source, headers) {
+	let payload = cause;
+	if (typeof payload === "string") try {
+		payload = JSON.parse(payload);
+	} catch {}
+	const root = payload !== null && typeof payload === "object" ? payload : {};
+	const nested = root.error !== null && typeof root.error === "object" ? root.error : root;
+	const rawCode = nested.code ?? root.code;
+	const upstreamCode = typeof rawCode === "string" || typeof rawCode === "number" ? String(rawCode) : void 0;
+	const effectiveStatus = upstreamCode === "105" ? 401 : status;
+	const fallback = qoderHttpError(`Qoder model-server returned HTTP ${status}.`, {
+		status: effectiveStatus,
+		headers
+	});
+	const code = upstreamCode === "105" ? "AUTH" : upstreamCode === "10605" ? "RATE_LIMIT" : upstreamCode && (/* @__PURE__ */ new Set([
+		"110",
+		"112",
+		"114",
+		"115",
+		"116",
+		"117",
+		"118",
+		"119",
+		"122"
+	])).has(upstreamCode) ? QUOTA_EXCEEDED_CODE : upstreamCode === "430" ? "INVALID_REQUEST" : upstreamCode === void 0 ? fallback.code : "PROVIDER_ERROR";
+	const error = new QoderLlmError(typeof nested.message === "string" ? nested.message.slice(0, 300) : fallback.message, code, {
+		status: effectiveStatus,
+		...fallback.failure.requestId === void 0 ? {} : { requestId: fallback.failure.requestId },
+		...fallback.failure.providerRetryAfterMs === void 0 ? {} : { providerRetryAfterMs: fallback.failure.providerRetryAfterMs }
+	});
+	error.source = source;
+	error.httpStatus = source === "http" ? status : void 0;
+	error.upstreamCode = upstreamCode;
+	return error;
+}
 function qoderHttpError(message, response) {
 	const { status } = response;
 	const code = status === 401 || status === 403 ? "AUTH" : status === 408 ? "TIMEOUT" : status === 429 ? "RATE_LIMIT" : status >= 500 && status <= 599 ? "SERVER" : status >= 400 && status <= 499 ? "INVALID_REQUEST" : "PROVIDER_ERROR";
@@ -382,11 +615,16 @@ function retryAfterMs(value, nowMs = Date.now()) {
 }
 //#endregion
 //#region src/qoder/transport/machine-id.ts
-function defaultMachineIdPaths() {
-	return [join(homedir(), ".qoder", ".auth", "machine_id"), join(homedir(), ".dsh", "qoder", "machine_id")];
+/** Match the native CLI's region-specific config directory overrides. */
+function qoderMachineIdPaths(region = "global", env = process.env, home = homedir()) {
+	const prefix = region === "china" ? "QODERCN_" : "QODER_";
+	const cliHome = env[`${prefix}CLI_HOME`] ?? env.GEMINI_CLI_HOME ?? home;
+	const configDir = env[`${prefix}CONFIG_DIR`];
+	return [join(configDir ? resolve(configDir) : join(cliHome, region === "china" ? ".qoder-cn" : ".qoder"), ".auth", "machine_id"), join(home, ".dsh", "qoder", "machine_id")];
 }
+const ephemeralMachineIds = /* @__PURE__ */ new Map();
 /** Read Qoder's machine id or create the DSH-owned fallback. */
-function getMachineId(paths = defaultMachineIdPaths()) {
+function getMachineId(paths = qoderMachineIdPaths()) {
 	for (const path of paths) {
 		if (!existsSync(path)) continue;
 		try {
@@ -394,8 +632,8 @@ function getMachineId(paths = defaultMachineIdPaths()) {
 			if (value) return value;
 		} catch {}
 	}
-	const machineId = crypto.randomUUID();
 	const savePath = paths.at(-1);
+	const machineId = (savePath === void 0 ? void 0 : ephemeralMachineIds.get(savePath)) ?? crypto.randomUUID();
 	if (savePath !== void 0) try {
 		mkdirSync(dirname(savePath), { recursive: true });
 		writeFileSync(savePath, machineId, {
@@ -408,6 +646,7 @@ function getMachineId(paths = defaultMachineIdPaths()) {
 			if (existing) return existing;
 		} catch {}
 	}
+	if (savePath !== void 0) ephemeralMachineIds.set(savePath, machineId);
 	return machineId;
 }
 //#endregion
@@ -434,7 +673,12 @@ function redactString(value) {
 }
 /** Redact credentials and bound arbitrary provider values before logging them. */
 function redactLogValue(value, depth = 0) {
-	if (typeof value === "string") return redactString(value);
+	if (typeof value === "string") {
+		if (depth < maxDepth && value.length <= 16 * 1024 && /^[\s]*[{"]/u.test(value)) try {
+			return redactString(JSON.stringify(redactLogValue(JSON.parse(value), depth + 1)));
+		} catch {}
+		return redactString(value);
+	}
 	if (value === null || typeof value !== "object") return value;
 	if (depth >= maxDepth) return "[TRUNCATED]";
 	if (value instanceof Error) return {
@@ -442,6 +686,10 @@ function redactLogValue(value, depth = 0) {
 		message: redactString(value.message),
 		..."code" in value ? { code: redactLogValue(value.code, depth + 1) } : {},
 		..."cause" in value ? { cause: redactLogValue(value.cause, depth + 1) } : {},
+		..."upstreamCode" in value ? { upstreamCode: redactLogValue(value.upstreamCode, depth + 1) } : {},
+		..."source" in value ? { source: value.source } : {},
+		..."httpStatus" in value ? { httpStatus: value.httpStatus } : {},
+		..."failure" in value ? { failure: redactLogValue(value.failure, depth + 1) } : {},
 		...value instanceof AggregateError ? { errors: redactLogValue(value.errors, depth + 1) } : {}
 	};
 	if (Array.isArray(value)) return value.slice(0, maxEntries).map((item) => redactLogValue(item, depth + 1));
@@ -468,6 +716,24 @@ function logParsedResponse(logger, operation, result) {
 	}));
 }
 //#endregion
+//#region src/qoder/transport/wire/client-identity.ts
+/** Client identity shared by Qoder model protocols and Open API exchanges. */
+const qoderIdeVersion = "1.1.73";
+const defaultUserAgent = `qoder/${qoderIdeVersion}`;
+function qoderMachineOs(platform = process.platform, arch = process.arch) {
+	return `${arch === "arm64" ? "aarch64" : arch === "x64" ? "x86_64" : arch}_${platform}`;
+}
+/** Identity injected by qodercli's common infer-sse HTTP request pipeline. */
+function qoderModelClientHeaders() {
+	const machineHostname = hostname().replace(/[^\x20-\x7e]/gu, "").trim();
+	return {
+		"Cosy-Version": qoderIdeVersion,
+		"Cosy-ClientType": "5",
+		"Cosy-MachineOS": qoderMachineOs(),
+		...machineHostname ? { "Cosy-MachineHostname": machineHostname } : {}
+	};
+}
+//#endregion
 //#region src/qoder/transport/wire/cosy.ts
 /**
 * COSY authentication headers and signature algorithm for Qoder services.
@@ -483,11 +749,8 @@ MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDA8iMH5c02LilrsERw9t6Pv5Nc
 6HRkPJ7S236FZz73In/KVuLnwI8JJ2CbuJap8kvheCCZpmAWpb/cPx/3Vr/J6I17
 XcW+ML9FoCI6AOvOzwIDAQAB
 -----END PUBLIC KEY-----`;
-const qoderIdeVersion = "1.1.60";
-const defaultUserAgent = `qoder/${qoderIdeVersion}`;
 const qoderDataPolicy = "disagree";
 const qoderLoginVersion = "v2";
-const qoderMachineOs = process.platform === "win32" ? process.arch === "arm64" ? "aarch64_windows" : "x86_64_windows" : process.arch === "arm64" ? "aarch64_linux" : "x86_64_linux";
 const qoderMachineTypeMagic = "5";
 function computeSigPath(urlStr) {
 	let sigPath = new URL(urlStr).pathname;
@@ -514,9 +777,9 @@ function buildAuthHeaders(body, requestURL, creds) {
 	const userInfo = {
 		uid: creds.userID,
 		security_oauth_token: creds.authToken,
-		name: creds.name || "",
-		aid: "",
-		email: creds.email || ""
+		...creds.organizationId === void 0 ? {} : { organization_id: creds.organizationId },
+		...creds.organizationTags === void 0 ? {} : { organization_tags: creds.organizationTags },
+		...creds.dataPolicyAgreed === void 0 ? {} : { data_policy_agreed: creds.dataPolicyAgreed }
 	};
 	const infoB64 = aesEncryptCBCBase64(JSON.stringify(userInfo), aesKey);
 	const cosyKey = rsaEncryptBase64(aesKey);
@@ -532,9 +795,9 @@ function buildAuthHeaders(body, requestURL, creds) {
 	const sigPath = computeSigPath(requestURL);
 	const sigInput = `${payloadB64}\n${cosyKey}\n${timestamp}\n${body ? Buffer.isBuffer(body) ? body.toString("utf8") : body : ""}\n${sigPath}`;
 	const sig = crypto.createHash("md5").update(sigInput).digest("hex");
-	const bodyHash = crypto.createHash("md5").update(body || "").digest("hex");
-	const bodyLen = body ? (Buffer.isBuffer(body) ? body.length : Buffer.from(body).length).toString() : "0";
 	const machineID = creds.machineID || getMachineId();
+	const isModelRequest = sigPath === "/api/v2/service/pro/sse/agent_chat_generation";
+	const machineHostname = hostname().replace(/[^\x20-\x7e]/gu, "").trim();
 	return {
 		Authorization: `Bearer COSY.${payloadB64}.${sig}`,
 		"Cosy-Key": cosyKey,
@@ -544,17 +807,17 @@ function buildAuthHeaders(body, requestURL, creds) {
 		"Cosy-Machineid": machineID,
 		"Cosy-Machinetoken": machineID,
 		"Cosy-Machinetype": qoderMachineTypeMagic,
-		"Cosy-Machineos": qoderMachineOs,
+		"Cosy-Machineos": qoderMachineOs(),
+		...isModelRequest && machineHostname ? { "Cosy-MachineHostname": machineHostname } : {},
 		"Cosy-Clienttype": "5",
-		"Cosy-Clientip": "127.0.0.1",
-		"Cosy-Bodyhash": bodyHash,
-		"Cosy-Bodylength": bodyLen,
-		"Cosy-Sigpath": sigPath,
-		"Cosy-Data-Policy": qoderDataPolicy,
-		"Cosy-Organization-Id": "",
-		"Cosy-Organization-Tags": "",
-		"Login-Version": qoderLoginVersion,
-		"X-Request-Id": crypto.randomUUID()
+		"Cosy-Business-Product": "cli",
+		"Cosy-Business-Type": "agent",
+		"Cosy-Scene": "assistant",
+		...isModelRequest ? {} : { "Cosy-Clientip": machineID },
+		"Cosy-Data-Policy": creds.dataPolicyAgreed === true ? "agree" : qoderDataPolicy,
+		...creds.organizationId ? { "Cosy-Organization-Id": creds.organizationId } : {},
+		...creds.organizationTags?.length ? { "Cosy-Organization-Tags": creds.organizationTags.join(",") } : {},
+		"Login-Version": qoderLoginVersion
 	};
 }
 const defaultResponseHeaderTimeoutMs = 6e4;
@@ -681,15 +944,12 @@ async function openApiJsonRequest(fetchImpl, options) {
 		const headers = {
 			accept: "application/json",
 			"user-agent": options.userAgent ?? defaultUserAgent,
-			"cosy-version": "1.0.1",
+			"cosy-version": qoderIdeVersion,
+			"cosy-machineos": qoderMachineOs(),
 			"cosy-clienttype": "5",
 			...options.headers
 		};
 		if (options.token) headers.authorization = `Bearer ${options.token}`;
-		if (options.machineId) {
-			headers["Cosy-MachineToken"] = options.machineId;
-			headers["Cosy-MachineType"] = "host";
-		}
 		let bodyText;
 		if (options.body !== void 0) {
 			headers["content-type"] = "application/json";
@@ -733,43 +993,83 @@ async function openApiJsonRequest(fetchImpl, options) {
 const expiryBufferMs = 300 * 1e3;
 const defaultExpiryMs = 1440 * 60 * 1e3;
 const defaultAuthTimeoutMs = 15e3;
+const defaultOrganizationTagsTimeoutMs = 3e3;
+/** Match qodercli's seconds/milliseconds compatibility, preferring absolute expiry. */
+function jobTokenExpiry(data, now = Date.now()) {
+	const absolute = data.expires_at ?? data.expiresAt ?? data.expire_time ?? data.expireTime;
+	if (absolute !== void 0) {
+		const parsed = typeof absolute === "string" ? Date.parse(absolute) : absolute > 0xe8d4a51000 ? absolute : absolute * 1e3;
+		if (Number.isFinite(parsed)) return parsed;
+	}
+	const relative = data.expires_in;
+	if (typeof relative === "number" && Number.isFinite(relative) && relative > 0) return now + (relative > 86400 ? relative : relative * 1e3);
+	return now + defaultExpiryMs;
+}
 function abortedError() {
 	return new QoderLlmError("Qoder authentication was aborted.", "ABORTED");
 }
 async function waitForFlight(promise, signal) {
 	if (signal === void 0) return promise;
-	if (signal.aborted) throw abortedError();
 	return new Promise((resolve, reject) => {
 		const onAbort = () => reject(abortedError());
 		signal.addEventListener("abort", onAbort, { once: true });
 		promise.then(resolve, reject).finally(() => signal.removeEventListener("abort", onAbort));
+		if (signal.aborted) onAbort();
 	});
 }
-var QoderAuthService = class {
+var QoderAuthManager = class {
 	cache = /* @__PURE__ */ new Map();
 	inFlight = /* @__PURE__ */ new Map();
+	epochs = /* @__PURE__ */ new Map();
+	nextVersion = 0;
 	fetchImpl;
 	timeoutMs;
+	organizationTagsTimeoutMs;
 	resolveMachineId;
 	region;
 	logger;
 	constructor(options = {}) {
 		this.fetchImpl = options.fetch ?? globalThis.fetch;
 		this.timeoutMs = options.timeoutMs ?? defaultAuthTimeoutMs;
-		this.resolveMachineId = options.resolveMachineId ?? getMachineId;
+		this.organizationTagsTimeoutMs = options.organizationTagsTimeoutMs ?? defaultOrganizationTagsTimeoutMs;
 		this.region = options.region ?? "global";
+		this.resolveMachineId = options.resolveMachineId ?? (() => getMachineId(qoderMachineIdPaths(this.region)));
 		this.logger = options.logger;
 	}
 	clear(pat) {
-		if (pat) this.cache.delete(`${this.region}:${opaqueCredentialKey(pat)}`);
-		else this.cache.clear();
+		if (pat) this.invalidate(`${this.region}:${opaqueCredentialKey(pat)}`);
+		else for (const key of /* @__PURE__ */ new Set([...this.cache.keys(), ...this.inFlight.keys()])) this.invalidate(key);
+	}
+	invalidate(key) {
+		this.epochs.set(key, (this.epochs.get(key) ?? 0) + 1);
+		this.cache.delete(key);
+		const flight = this.inFlight.get(key);
+		if (flight) {
+			this.inFlight.delete(key);
+			flight.controller.abort("credential invalidated");
+		}
+	}
+	/** Recover a rejected credential once; concurrent rejections share the exchange. */
+	async refreshCredentials(pat, rejected, signal) {
+		if (signal?.aborted) throw abortedError();
+		const key = `${this.region}:${opaqueCredentialKey(pat)}`;
+		const current = this.cache.get(key)?.creds;
+		if (current && current !== rejected) return current;
+		this.cache.delete(key);
+		if (this.inFlight.get(key)) return this.getCredentials(pat, signal);
+		this.invalidate(key);
+		return this.getCredentials(pat, signal);
 	}
 	async getCredentials(pat, signal) {
 		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid. Configure Qoder in the Qoder settings page.", "MISSING_CREDENTIAL");
 		if (signal?.aborted) throw abortedError();
 		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
 		const cached = this.cache.get(cacheKey);
-		if (cached && cached.expiresAt > Date.now() + expiryBufferMs) return cached.creds;
+		if (cached) {
+			const lifetime = cached.expiresAt - cached.issuedAt;
+			const buffer = Math.min(expiryBufferMs, Math.max(0, lifetime / 5));
+			if (cached.expiresAt > Date.now() + buffer) return cached.creds;
+		}
 		let entry = this.inFlight.get(cacheKey);
 		if (entry === void 0 || entry.controller.signal.aborted) {
 			const controller = new AbortController();
@@ -778,7 +1078,12 @@ var QoderAuthService = class {
 			created.waiters = 0;
 			created.settled = false;
 			created.timeout = setTimeout(() => controller.abort("authentication timeout"), this.timeoutMs);
-			created.promise = this.exchangeAndResolve(pat, controller.signal).finally(() => {
+			const epoch = this.epochs.get(cacheKey) ?? 0;
+			created.promise = this.exchangeAndResolve(pat, controller.signal, () => clearTimeout(created.timeout), epoch).catch((error) => {
+				const stale = this.cache.get(cacheKey);
+				if (error instanceof QoderLlmError && (error.code === "TRANSPORT" || error.code === "TIMEOUT" || error.code === "SERVER") && stale && stale.expiresAt > Date.now() && (this.epochs.get(cacheKey) ?? 0) === epoch && !controller.signal.aborted) return stale.creds;
+				throw error;
+			}).finally(() => {
 				created.settled = true;
 				clearTimeout(created.timeout);
 				if (this.inFlight.get(cacheKey) === created) this.inFlight.delete(cacheKey);
@@ -797,37 +1102,61 @@ var QoderAuthService = class {
 			}
 		}
 	}
-	async exchangeAndResolve(pat, signal) {
-		let jobToken;
-		let expiresAt = Date.now() + defaultExpiryMs;
+	async exchangeAndResolve(pat, signal, onAuthenticated, epoch) {
+		const machineID = this.resolveMachineId().trim();
 		const data = await openApiJsonRequest(this.fetchImpl, {
 			url: getQoderExchangeUrl(this.region),
-			body: { personal_token: pat },
+			body: {
+				personal_token: pat,
+				...machineID && machineID !== "unknown" ? { machine_id: machineID } : {}
+			},
 			signal,
 			timeoutMs: this.timeoutMs,
 			logger: this.logger,
 			operation: "Auth",
 			logCategory: "auth.exchange"
 		});
-		if (!data.token) throw new QoderLlmError("Qoder PAT exchange returned no job token.", "AUTH");
-		jobToken = data.token;
-		if (data.expires_at) {
-			const parsed = Date.parse(data.expires_at);
-			if (!Number.isNaN(parsed)) expiresAt = parsed;
-		} else if (typeof data.expires_in === "number" && data.expires_in > 0) expiresAt = Date.now() + data.expires_in;
+		const jobToken = [
+			data.token,
+			data.device_token,
+			data.access_token
+		].find((value) => typeof value === "string" && value.length > 0);
+		if (!jobToken) throw new QoderLlmError("Qoder PAT exchange returned no job token.", "AUTH");
+		const expiresAt = jobTokenExpiry(data);
+		const creds = {
+			...await this.credentialsForToken(jobToken, machineID, signal, onAuthenticated),
+			expiresAt,
+			version: ++this.nextVersion
+		};
+		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
+		if ((this.epochs.get(cacheKey) ?? 0) !== epoch || signal.aborted) throw abortedError();
+		this.cache.set(cacheKey, {
+			creds,
+			expiresAt,
+			issuedAt: Date.now()
+		});
+		return creds;
+	}
+	/** Both PAT exchange and browser authorization use the same verified subscriber identity. */
+	async credentialsForToken(jobToken, machineID, signal, onAuthenticated = () => {}) {
 		const userInfo = await retryMetadataRead(signal, () => this.fetchUserInfo(jobToken, signal));
+		if (signal.aborted) throw abortedError();
+		onAuthenticated();
 		const creds = {
 			userID: userInfo.userID,
 			authToken: jobToken,
 			name: userInfo.name || "Qoder User",
 			email: userInfo.email,
-			machineID: this.resolveMachineId()
+			machineID,
+			...userInfo.organizationId === void 0 ? {} : { organizationId: userInfo.organizationId },
+			...userInfo.organizationTags === void 0 ? {} : { organizationTags: userInfo.organizationTags },
+			...userInfo.dataPolicyAgreed === void 0 ? {} : { dataPolicyAgreed: userInfo.dataPolicyAgreed }
 		};
-		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
-		this.cache.set(cacheKey, {
-			creds,
-			expiresAt
-		});
+		if (creds.organizationId && creds.organizationTags === void 0) {
+			const tags = await this.fetchOrganizationTags(jobToken, creds.organizationId, signal);
+			if (tags !== void 0) creds.organizationTags = tags;
+		}
+		if (signal.aborted) throw abortedError();
 		return creds;
 	}
 	async fetchUserInfo(jobToken, signal) {
@@ -840,13 +1169,49 @@ var QoderAuthService = class {
 			operation: "UserInfo",
 			logCategory: "auth.user-info"
 		});
-		if (!info.id) throw new QoderLlmError("Qoder identity lookup returned no user id.", "AUTH");
+		const userID = [
+			info.id,
+			info.user_id,
+			info.uid
+		].find((value) => typeof value === "string" && value.length > 0);
+		const organizationId = [
+			info.orgId,
+			info.organization_id,
+			info.organizationId,
+			info.organization?.org_id,
+			info.organization?.orgId,
+			info.organization?.id
+		].find((value) => typeof value === "string" && value.length > 0);
+		if (!userID) throw new QoderLlmError("Qoder identity lookup returned no user id.", "AUTH");
+		const organizationTags = Array.isArray(info.organization_tags) ? info.organization_tags.filter((tag) => typeof tag === "string") : void 0;
 		return {
-			userID: info.id,
+			userID,
 			email: info.email ?? "",
-			name: info.name ?? info.username ?? ""
+			name: info.name ?? info.username ?? "",
+			...organizationId ? { organizationId } : {},
+			...organizationTags === void 0 ? {} : { organizationTags },
+			...typeof info.data_policy_agreed === "boolean" ? { dataPolicyAgreed: info.data_policy_agreed } : {}
 		};
 	}
+	async fetchOrganizationTags(jobToken, organizationId, signal) {
+		const timeout = AbortSignal.timeout(this.organizationTagsTimeoutMs);
+		const lookupSignal = AbortSignal.any([signal, timeout]);
+		try {
+			const { tags } = await retryMetadataRead(lookupSignal, () => openApiJsonRequest(this.fetchImpl, {
+				url: `${resolveQoderEndpoints(this.region).openApiUrl}/api/v1/organizations/${encodeURIComponent(organizationId)}/tags`,
+				token: jobToken,
+				signal: lookupSignal,
+				timeoutMs: this.organizationTagsTimeoutMs,
+				logger: this.logger,
+				operation: "OrganizationTags"
+			}));
+			return Array.isArray(tags) ? tags.filter((tag) => typeof tag === "string") : [];
+		} catch (error) {
+			if (signal.aborted) throw error;
+			this.logger?.warn?.("[Qoder Auth] Organization tags unavailable; retaining subscriber organization.");
+			return;
+		}
+	}
 };
 //#endregion
 //#region src/qoder/transport/catalog-reader.ts
@@ -900,14 +1265,19 @@ async function fetchQoderModels(credentials, options = {}) {
 function unsupported(message) {
 	return new QoderLlmError(message, "UNSUPPORTED_CONTENT");
 }
-function toolResultText(block) {
-	let text = "";
-	for (const nested of block.content) {
-		if (nested.type === "image") continue;
-		if (nested.type !== "text") throw unsupported(`Qoder tool results support text only; received nested ${String(nested.type)} content.`);
-		text += nested.text;
-	}
-	return text;
+/** Keep multimodal tool results attached to their call. */
+async function translateToolResultContent(blocks, context) {
+	const supportedBlocks = blocks.map((block) => {
+		if (block.type === "text" || block.type === "image") return block;
+		throw unsupported(`Qoder tool results support text and images only; received ${String(block.type)} content.`);
+	});
+	const images = supportedBlocks.filter((block) => block.type === "image");
+	if (images.length === 0) return { content: supportedBlocks.map((block) => block.type === "text" ? block.text : "").join("") };
+	if (context.attachments !== void 0) enforceImageLimits(images, context.attachments);
+	return { content: await Promise.all(supportedBlocks.map((block) => block.type === "image" ? resolveImagePart(block, context) : {
+		type: "text",
+		text: block.text
+	})) };
 }
 /** Reject a batch that exceeds the deployment image policy before any upload work starts. */
 function enforceImageLimits(images, attachments) {
@@ -1000,23 +1370,21 @@ async function validateAndTranslateMessages(messages, systemPrompt, attachments,
 				output.push({
 					role: "tool",
 					tool_call_id: callId,
-					content: toolResultText(result)
+					...await translateToolResultContent(result.content, context)
 				});
-				const images = result.content.filter((block) => block.type === "image");
-				if (images.length > 0) {
-					if (attachments !== void 0) enforceImageLimits(images, attachments);
-					output.push({
-						role: "user",
-						content: [{
-							type: "text",
-							text: `[${images.length} image${images.length === 1 ? "" : "s"} returned by the previous tool call]`
-						}, ...await Promise.all(images.map((image) => resolveImagePart(image, context)))]
-					});
-				}
 			}
 			if (nonToolBlocks.length === 0) continue;
 		}
 		const contentBlocks = toolResults.length > 0 ? nonToolBlocks : message.content;
+		if (message.role === "tool") {
+			const callId = consumeToolCallId(message, void 0, lastAssistantToolCallIds, output.length);
+			output.push({
+				role: "tool",
+				tool_call_id: callId,
+				...await translateToolResultContent(contentBlocks, context)
+			});
+			continue;
+		}
 		let text = "";
 		let reasoningText = "";
 		const userContent = [];
@@ -1024,7 +1392,6 @@ async function validateAndTranslateMessages(messages, systemPrompt, attachments,
 		let hasImage = false;
 		const toolCalls = [];
 		for (const block of contentBlocks) {
-			if (message.role === "tool" && block.type !== "text" && block.type !== "image") throw unsupported(`Qoder tool results support text and images only; received ${block.type} content.`);
 			if (block.type === "text") {
 				text += block.text;
 				if (message.role === "user" || toolResults.length > 0) userContent.push({
@@ -1034,7 +1401,7 @@ async function validateAndTranslateMessages(messages, systemPrompt, attachments,
 				continue;
 			}
 			if (block.type === "image") {
-				if (message.role !== "user" && message.role !== "tool" && toolResults.length === 0) throw unsupported("Qoder image content is valid only in user messages.");
+				if (message.role !== "user" && toolResults.length === 0) throw unsupported("Qoder image content is valid only in user messages.");
 				hasImage = true;
 				pendingImages.push({
 					slot: userContent.length,
@@ -1071,25 +1438,6 @@ async function validateAndTranslateMessages(messages, systemPrompt, attachments,
 			});
 			continue;
 		}
-		if (message.role === "tool") {
-			const callId = consumeToolCallId(message, void 0, lastAssistantToolCallIds, output.length);
-			output.push({
-				role: "tool",
-				tool_call_id: callId,
-				content: text
-			});
-			if (pendingImages.length > 0) {
-				if (attachments !== void 0) enforceImageLimits(pendingImages.map((pending) => pending.block), attachments);
-				output.push({
-					role: "user",
-					content: [{
-						type: "text",
-						text: `[${pendingImages.length} image${pendingImages.length === 1 ? "" : "s"} returned by the previous tool call]`
-					}, ...await Promise.all(pendingImages.map((pending) => resolveImagePart(pending.block, context)))]
-				});
-			}
-			continue;
-		}
 		if (pendingImages.length > 0) {
 			if (attachments !== void 0) enforceImageLimits(pendingImages.map((pending) => pending.block), attachments);
 			await Promise.all(pendingImages.map(async (pending) => {
@@ -1167,10 +1515,10 @@ const injectedContextOpenings = [
 */
 const hostNotificationTemplate = /^(?:Agent|Background subagent) \S{3,} (?:sent a message:|finished\b)/;
 /**
-* Text this transport synthesizes while translating a turn's own tool results.
+* Compatibility with image markers synthesized by older transport versions.
 *
-* A tool result carrying images becomes a user-role message, so it must be
-* recognized as part of the open record rather than as new subscriber input.
+* Current tool images stay in tool-role messages. Historical user-role markers
+* still belong to the open record rather than to new subscriber input.
 */
 const syntheticMarkerTemplate = /^\[\d+ images? returned by the previous tool call\]/;
 /** Wire text of one user message, used for injection classification and text extraction. */
@@ -1245,7 +1593,8 @@ var QoderTurnTracker = class {
 			requestSetId: `qoder-request-${crypto.randomUUID()}`,
 			chatRecordId: requestId,
 			businessId: crypto.randomUUID(),
-			beginAt: now
+			beginAt: now,
+			businessStage: "start"
 		};
 		if (kind === "auxiliary") {
 			if (this.sessions.has(sessionId)) this.sessions.get(sessionId).lastTouchedAt = now;
@@ -1253,7 +1602,8 @@ var QoderTurnTracker = class {
 				requestSetId: `qoder-request-${crypto.randomUUID()}`,
 				chatRecordId: requestId,
 				businessId: crypto.randomUUID(),
-				beginAt: now
+				beginAt: now,
+				businessStage: "start"
 			};
 		}
 		let state = this.sessions.get(sessionId);
@@ -1301,12 +1651,15 @@ var QoderTurnTracker = class {
 			if (current === void 0) state.claimed.delete(fingerprint);
 			else if (current.count < claimed) state.claimed.set(fingerprint, current.count);
 		}
+		let businessStage = "processing";
 		if (opening !== void 0 && unclaimed > 0 || modelChanged) {
+			businessStage = "start";
 			state.turnCount += 1;
 			state.currentTurnId = turnIdFor(sessionId, state.turnCount, opening ?? state.currentModel ?? "");
 			state.currentBusinessId = crypto.randomUUID();
 			state.turnOpenedAt = now;
 		} else if (state.currentTurnId === "") {
+			businessStage = "start";
 			state.turnCount += 1;
 			state.currentTurnId = turnIdFor(sessionId, state.turnCount, state.currentModel ?? "");
 			state.currentBusinessId = crypto.randomUUID();
@@ -1316,7 +1669,8 @@ var QoderTurnTracker = class {
 			requestSetId: state.currentTurnId,
 			chatRecordId: requestId,
 			businessId: state.currentBusinessId,
-			beginAt: state.turnOpenedAt
+			beginAt: state.turnOpenedAt,
+			businessStage
 		};
 	}
 	/**
@@ -1380,8 +1734,8 @@ var QoderTurnTracker = class {
 	}
 };
 //#endregion
-//#region src/qoder/transport/wire/serialize.ts
-/** Build the minimum qodercli request envelope for a validated DSH request. */
+//#region src/qoder/transport/wire/prepare.ts
+/** Shared model request preparation, before selecting a wire protocol. */
 function stableHash(prefix, ...inputs) {
 	const hash = crypto.createHash("sha256");
 	hash.update(prefix);
@@ -1391,33 +1745,11 @@ function stableHash(prefix, ...inputs) {
 	}
 	return hash.digest("hex").slice(0, 16);
 }
-/**
-* Turn identity shared by every request the process serves.
-*
-* Qoder's Credits panel aggregates consumption per agent run — the
-* `business.id` a request reports — so every step of one turn must carry the
-* same run identity while the next subscriber prompt opens a new one. The
-* tracker owns that boundary.
-*/
+/** One tracker preserves agent-run identity across both model protocols. */
 const qoderTurnTracker = new QoderTurnTracker();
-/**
-* Whether this request serves the subscriber's turn or the host's bookkeeping.
-*
-* The host marks an auxiliary call through `GenerateOptions.purpose`, and those
-* calls carry a message list of their own under the same session identity. They
-* must never move the open turn's boundary, or one subscriber prompt would
-* report two consumption records.
-*/
 function callKind(options) {
 	return options.purpose === void 0 ? "conversation" : "auxiliary";
 }
-/**
-* Reject an unusable request before any credential resolution or provider I/O.
-*
-* Image publication needs credentials, so message translation now runs after
-* authentication. This static pass preserves the guarantee that a request the
-* provider cannot serve never reaches the network.
-*/
 function validateQoderRequestShape(options, model) {
 	if (options.reasoningEffort !== void 0) {
 		const effort = String(options.reasoningEffort);
@@ -1425,29 +1757,24 @@ function validateQoderRequestShape(options, model) {
 	}
 	if (options.messages.some((message) => contentHasImage(message.content)) && model?.supportsImages !== true) throw new QoderLlmError(`Qoder model "${options.model}" does not advertise image input.`, "UNSUPPORTED_CONTENT");
 }
-/** Translate a request whose shape has already been validated. */
 function translateQoderMessages(options, attachments, pipeline) {
 	return validateAndTranslateMessages(options.messages, options.system, attachments, options.signal, pipeline);
 }
-async function validateQoderRequest(options, model, attachments) {
-	validateQoderRequestShape(options, model);
-	return validateAndTranslateMessages(options.messages, options.system, attachments, options.signal);
-}
-async function buildQoderRequestBody(options, userId, translatedMessages, model, attachments, tracker) {
+async function prepareQoderRequest(options, userId, translatedMessages, model, attachments, tracker = qoderTurnTracker, identityScope = "") {
 	if (!userId) throw new QoderLlmError("Qoder request identity is missing.", "AUTH");
+	if (translatedMessages === void 0) validateQoderRequestShape(options, model);
+	const messages = translatedMessages ?? await translateQoderMessages(options, attachments);
 	const modelKey = options.model || "cmodel";
-	const messages = translatedMessages ?? await validateQoderRequest(options, model, attachments);
 	const modelMaxTokens = model?.maxTokens ?? 32768;
 	const maxTokens = Math.min(options.maxTokens ?? modelMaxTokens, modelMaxTokens);
 	const isReasoning = options.reasoningEffort !== void 0 || (model?.isReasoning ?? false);
-	const tools = translateTools(options.tools);
 	const selectedTier = model === void 0 ? void 0 : selectedContextTier(model);
 	const defaultContexts = Object.values(model?.contextOptions ?? {}).filter((option) => option.isDefault === true && typeof option.tokenCount === "number" && Number.isFinite(option.tokenCount) && option.tokenCount > 0);
 	const contextConfig = model?.contextOptions === void 0 || selectedTier === void 0 && defaultContexts.length !== 1 ? void 0 : Object.fromEntries(Object.entries(model.contextOptions).map(([key, value]) => [key, {
 		...value.tokenCount === void 0 ? {} : { token_count: value.tokenCount },
 		...selectedTier === void 0 ? value.isDefault === void 0 ? {} : { is_default: value.isDefault } : { is_default: key === selectedTier.key }
 	}]));
-	const effectiveBudget = selectedTier?.tokenCount ?? model?.contextWindow;
+	const contextLength = selectedTier?.tokenCount ?? model?.contextWindow;
 	let lastUserText = "";
 	for (let index = messages.length - 1; index >= 0; index--) if (messages[index].role === "user") {
 		lastUserText = wireMessageText(messages[index]);
@@ -1457,59 +1784,32 @@ async function buildQoderRequestBody(options, userId, translatedMessages, model,
 	const sessionId = options.sessionId === void 0 ? `${stablePart}-${crypto.randomUUID()}` : `${stablePart}-${String(options.sessionId)}`;
 	const requestId = crypto.randomUUID();
 	const sessionIdParam = options.sessionId === void 0 ? void 0 : String(options.sessionId);
-	const identity = (tracker ?? qoderTurnTracker).resolveTurnIdentity(sessionIdParam, messages, callKind(options), requestId, modelKey);
+	const identity = tracker.resolveTurnIdentity(sessionIdParam === void 0 ? void 0 : JSON.stringify([
+		identityScope,
+		userId,
+		sessionIdParam
+	]), messages, callKind(options), requestId, modelKey);
 	return {
-		request_id: requestId,
-		request_set_id: identity.requestSetId,
-		chat_record_id: identity.chatRecordId,
-		session_id: sessionId,
-		stream: true,
-		chat_task: "FREE_INPUT",
-		is_reply: true,
-		is_retry: false,
-		source: 1,
-		version: "3",
-		session_type: "qodercli",
-		agent_id: "agent_common",
-		task_id: "common",
-		code_language: "",
-		chat_prompt: "",
-		image_urls: null,
-		aliyun_user_type: "",
-		system: "",
+		requestId,
+		requestSetId: identity.requestSetId,
+		chatRecordId: identity.chatRecordId,
+		sessionId,
+		taskId: "common",
+		modelKey,
+		modelSource: model?.source || "system",
 		messages,
-		tools,
-		parameters: {
-			max_tokens: maxTokens,
-			...effectiveBudget === void 0 ? {} : { context_length: effectiveBudget },
-			...options.reasoningEffort === void 0 ? {} : { reasoning_effort: String(options.reasoningEffort) }
-		},
-		chat_context: {
-			chatPrompt: "",
-			imageUrls: null,
-			extra: {
-				context: [],
-				modelConfig: {
-					key: modelKey,
-					is_reasoning: isReasoning
-				},
-				originalContent: lastUserText
-			},
-			features: [],
-			text: lastUserText
-		},
-		model_config: {
-			key: modelKey,
-			is_reasoning: isReasoning,
-			max_output_tokens: maxTokens,
-			source: model?.source || "system",
-			...contextConfig === void 0 ? {} : { context_config: contextConfig }
-		},
+		tools: translateTools(options.tools),
+		maxTokens,
+		...contextLength === void 0 ? {} : { contextLength },
+		...options.reasoningEffort === void 0 ? {} : { reasoningEffort: String(options.reasoningEffort) },
+		isReasoning,
+		...contextConfig === void 0 ? {} : { contextConfig },
+		lastUserText,
 		business: {
 			product: "cli",
-			version: "1.0.60",
+			version: qoderIdeVersion,
 			type: "agent",
-			stage: "start",
+			stage: identity.businessStage,
 			id: identity.businessId,
 			name: lastUserText.substring(0, 30),
 			begin_at: identity.beginAt
@@ -1716,7 +2016,7 @@ var QoderImageUploader = class {
 				reason: first.reason
 			});
 			try {
-				refreshed = await this.refreshCredentials(signal);
+				refreshed = await this.refreshCredentials(credentials, signal);
 			} catch (error) {
 				if (signal.aborted) throw aborted$2();
 				this.warnDegraded("credential refresh failed", error);
@@ -2027,15 +2327,18 @@ var QoderUsageReader = class {
 	}
 	async readAccount(pat, options) {
 		if (!pat || typeof pat !== "string") throw new QoderLlmError("Qoder Personal Access Token is missing or invalid.", "MISSING_CREDENTIAL");
-		const cacheKey = `${this.region}:${opaqueCredentialKey(pat)}`;
+		return this.readWithCredentials(opaqueCredentialKey(pat), (signal) => this.authService.getCredentials(pat, signal), options);
+	}
+	async readWithCredentials(key, resolve, options) {
+		const cacheKey = `${this.region}:${key}`;
 		if (!options?.force) {
 			const cached = this.cache.get(cacheKey);
 			if (cached && cached.expiresAt > Date.now()) return cached.info;
 		}
-		return this.flights.run(cacheKey, options?.signal, (sharedSignal) => this.loadAccount(pat, sharedSignal, cacheKey), () => new QoderLlmError("Qoder account request was aborted.", "ABORTED"));
+		return this.flights.run(cacheKey, options?.signal, (sharedSignal) => this.loadAccount(resolve, sharedSignal, cacheKey), () => new QoderLlmError("Qoder account request was aborted.", "ABORTED"));
 	}
-	async loadAccount(pat, signal, cacheKey) {
-		const creds = await this.authService.getCredentials(pat, signal);
+	async loadAccount(resolve, signal, cacheKey) {
+		const creds = await resolve(signal);
 		const profile = {
 			id: creds.userID,
 			name: creds.name || "Qoder User",
@@ -2044,7 +2347,7 @@ var QoderUsageReader = class {
 		const [usage, plan, status] = await Promise.all([
 			retryMetadataRead(signal, () => this.fetchUsage(creds.authToken, signal)),
 			this.safeFetchPlan(creds.authToken, signal),
-			this.safeFetchStatus(creds.authToken, creds.machineID, signal)
+			this.safeFetchStatus(creds.authToken, signal)
 		]);
 		const accountInfo = {
 			profile,
@@ -2070,6 +2373,11 @@ var QoderUsageReader = class {
 	* `dedicatedResourcePackages`: those entries carry the campaign identifiers
 	* that the normalized list deliberately discards, and this payload crosses
 	* the seam into the browser.
+	*
+	* `addOnQuota` is the pool a plan holds separately from its own subscription
+	* quota. A plan whose subscription quota is zero — Free in particular —
+	* reports its whole balance there, so dropping the bucket left the card with
+	* nothing to render.
 	*/
 	async fetchUsage(jobToken, signal) {
 		const data = await openApiJsonRequest(this.fetchImpl, {
@@ -2087,6 +2395,7 @@ var QoderUsageReader = class {
 		return {
 			userQuota: normalizeQuota(data.userQuota),
 			orgResourcePackage: normalizeQuota(data.orgResourcePackage),
+			addOnQuota: normalizeQuota(data.add_on_quota ?? data.addOnQuota),
 			...dedicatedResourcePackages !== void 0 ? { dedicatedResourcePackages } : {},
 			totalUsagePercentage: typeof data.totalUsagePercentage === "number" ? data.totalUsagePercentage : void 0,
 			isQuotaExceeded: typeof data.isQuotaExceeded === "boolean" ? data.isQuotaExceeded : false,
@@ -2114,11 +2423,10 @@ var QoderUsageReader = class {
 			return;
 		}
 	}
-	async fetchStatus(jobToken, machineId, signal) {
+	async fetchStatus(jobToken, signal) {
 		return normalizeStatus(await openApiJsonRequest(this.fetchImpl, {
 			url: getQoderUserStatusUrl(this.region),
 			token: jobToken,
-			machineId,
 			signal,
 			timeoutMs: this.timeoutMs,
 			logger: this.logger,
@@ -2126,9 +2434,9 @@ var QoderUsageReader = class {
 			logCategory: "account.status"
 		}));
 	}
-	async safeFetchStatus(jobToken, machineId, signal) {
+	async safeFetchStatus(jobToken, signal) {
 		try {
-			return await this.fetchStatus(jobToken, machineId, signal);
+			return await this.fetchStatus(jobToken, signal);
 		} catch (error) {
 			if (signal?.aborted) throw error;
 			this.logger?.warn?.("[Qoder Status] Failed to load user status (degraded)", error instanceof Error ? error.message : error);
@@ -2148,23 +2456,27 @@ var QoderUsageReader = class {
 */
 const qoderCustomAlphabet = "_doRTgHZBKcGVjlvpC,@aFSx#DPuNJme&i*MzLOEn)sUrthbf%Y^w.(kIQyXqWA!";
 const qoderStdAlphabet = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-function qoderEncodeBody(plaintext) {
+const qoderEncodeTable = /* @__PURE__ */ new Uint8Array(128);
+for (let i = 0; i < 64; i++) qoderEncodeTable[qoderStdAlphabet.charCodeAt(i)] = qoderCustomAlphabet.charCodeAt(i);
+qoderEncodeTable["=".charCodeAt(0)] = "$".charCodeAt(0);
+/** Encode directly into wire bytes without building per-character string ropes. */
+function qoderEncodeBodyBytes(plaintext) {
 	const std = Buffer.isBuffer(plaintext) ? plaintext.toString("base64") : Buffer.from(plaintext).toString("base64");
 	const n = std.length;
 	const a = Math.floor(n / 3);
-	const rearranged = std.slice(n - a) + std.slice(a, n - a) + std.slice(0, a);
-	let out = "";
-	for (let i = 0; i < n; i++) {
-		const c = rearranged[i];
-		if (c === "=") out += "$";
-		else {
-			const idx = qoderStdAlphabet.indexOf(c);
-			if (idx >= 0) out += qoderCustomAlphabet[idx];
-			else out += c;
-		}
-	}
+	const out = Buffer.allocUnsafe(n);
+	let offset = 0;
+	const writeRange = (start, end) => {
+		for (let i = start; i < end; i++) out[offset++] = qoderEncodeTable[std.charCodeAt(i)];
+	};
+	writeRange(n - a, n);
+	writeRange(a, n - a);
+	writeRange(0, a);
 	return out;
 }
+function qoderEncodeBody(plaintext) {
+	return qoderEncodeBodyBytes(plaintext).toString("latin1");
+}
 //#endregion
 //#region src/qoder/transport/search.ts
 /**
@@ -2212,7 +2524,7 @@ var QoderSearchClient = class {
 				reason: first.reason
 			});
 			try {
-				credentials = await this.refreshCredentials(signal);
+				credentials = await this.refreshCredentials(credentials, signal);
 			} catch (error) {
 				if (signal?.aborted) throw searchAborted(signal, error);
 				throw new WebError(`Qoder credential refresh failed: ${String(error)}`, "WEB_PROVIDER_ERROR", { cause: error });
@@ -2335,224 +2647,624 @@ var QoderSearchClient = class {
 	}
 };
 //#endregion
-//#region src/qoder/transport/wire/thinking.ts
-const thinkingTags = [{
-	open: "<thinking>",
-	close: "</thinking>"
-}, {
-	open: "<think>",
-	close: "</think>"
-}];
-const allTags = thinkingTags.flatMap((tag) => [tag.open, tag.close]);
-function trailingPrefixLength(text, candidates) {
-	let best = 0;
-	for (const candidate of candidates) {
-		const limit = Math.min(text.length, candidate.length - 1);
-		for (let length = limit; length > best; length--) if (text.endsWith(candidate.slice(0, length))) {
-			best = length;
-			break;
+//#region src/qoder/transport/request-compression.ts
+/** qodercli-compatible request compression and endpoint capability recovery. */
+const disabledEndpoints = /* @__PURE__ */ new Set();
+function endpointKey(protocol, url) {
+	const { origin, pathname } = new URL(url);
+	return `${protocol}:${origin}${pathname}`;
+}
+function vpcEndpoint(url) {
+	const host = new URL(url).hostname.toLowerCase().replace(/\.$/u, "");
+	return host === "vpc.qoder.com.cn" || host.endsWith(".vpc.qoder.com.cn");
+}
+function envInteger(value, fallback, max = Number.MAX_SAFE_INTEGER) {
+	if (value === void 0 || !value.trim()) return fallback;
+	const parsed = Number(value);
+	return Number.isSafeInteger(parsed) && parsed >= 1 && parsed <= max ? parsed : fallback;
+}
+function compressionRejection(status, text, protocol) {
+	if (status === 415 && /zstd|content[- ]encoding|compressed (?:request|body)/iu.test(text)) return "unsupported_encoding";
+	if (status === 400 && /invalid.*json|invalid character|parse.*json|unexpected token|not valid json/iu.test(text) && /\\x28|\\u0028|0x28|(?:character|token)\s*['"]\(['"]/iu.test(text)) return "invalid_json_at_origin";
+	if (protocol === "legacy" && status === 403) {
+		let payload;
+		try {
+			payload = JSON.parse(text);
+		} catch {
+			return;
+		}
+		if (payload && typeof payload === "object") {
+			const root = payload;
+			const error = root.error && typeof root.error === "object" ? root.error : root;
+			if (String(error.code) === "101" && /signature (?:is )?invalid/iu.test(text)) return "signature_invalid";
 		}
 	}
-	return best;
 }
-function earliestTag(text, kind) {
-	let found;
-	for (const tag of thinkingTags) {
-		const position = text.indexOf(tag[kind]);
-		if (position !== -1 && (found === void 0 || position < found.position)) found = {
-			position,
-			tag
+/** Probe only rejection responses, without consuming the transport's response. */
+async function probe(response, protocol, signal) {
+	if (![
+		400,
+		403,
+		415
+	].includes(response.status)) return void 0;
+	const reader = response.clone().body?.getReader();
+	if (!reader) return void 0;
+	const deadline = AbortSignal.any([signal, AbortSignal.timeout(1e3)]);
+	const decoder = new TextDecoder();
+	let remaining = 8192;
+	let text = "";
+	let truncated = false;
+	const interrupted = () => {
+		reader.cancel().catch(() => void 0);
+	};
+	deadline.addEventListener("abort", interrupted, { once: true });
+	try {
+		if (deadline.aborted) return void 0;
+		while (remaining > 0 && !deadline.aborted) {
+			const { value, done } = await reader.read();
+			if (done) break;
+			if (value.byteLength >= remaining) truncated = true;
+			text += decoder.decode(value.subarray(0, remaining), { stream: true });
+			remaining -= Math.min(value.byteLength, remaining);
+			try {
+				JSON.parse(text);
+				break;
+			} catch {}
+		}
+		text += decoder.decode();
+		return {
+			status: response.status,
+			contentType: response.headers.get("content-type"),
+			serverRequestId: response.headers.get("x-request-id") ?? void 0,
+			body: text,
+			bodyTruncated: truncated,
+			probeTimedOut: deadline.aborted,
+			reason: deadline.aborted ? void 0 : compressionRejection(response.status, text, protocol)
 		};
+	} catch {
+		return;
+	} finally {
+		deadline.removeEventListener("abort", interrupted);
+		reader.cancel().catch(() => void 0);
 	}
-	return found;
-}
-function trimSeparator(text) {
-	if (text.startsWith("\n\n")) return text.slice(2);
-	if (text.startsWith("\n")) return text.slice(1);
-	return text;
-}
-var NativeReasoningStripper = class {
-	buffer = "";
-	push(chunk) {
-		this.buffer += chunk;
-		let output = "";
-		while (this.buffer) {
-			let firstPosition = -1;
-			let firstTag = "";
-			for (const tag of allTags) {
-				const position = this.buffer.indexOf(tag);
-				if (position !== -1 && (firstPosition === -1 || position < firstPosition)) {
-					firstPosition = position;
-					firstTag = tag;
-				}
-			}
-			if (firstPosition !== -1) {
-				output += this.buffer.slice(0, firstPosition);
-				this.buffer = this.buffer.slice(firstPosition + firstTag.length);
-				continue;
-			}
-			const held = trailingPrefixLength(this.buffer, allTags);
-			output += this.buffer.slice(0, this.buffer.length - held);
-			this.buffer = this.buffer.slice(this.buffer.length - held);
-			break;
+}
+/** One instance per prepared model request; endpoint decisions survive requests. */
+var QoderRequestCompression = class {
+	fallbackAttempted = false;
+	pendingConfirmation;
+	compressedEndpoint;
+	diagnostics;
+	async send(options) {
+		const { url, protocol, body, headers, signal, logger, requestId } = options;
+		let identityReason;
+		const dispatch = (wireBody, wireHeaders) => {
+			this.diagnostics = {
+				encoding: new Headers(wireHeaders).get("content-encoding") ?? "identity",
+				originalBytes: Buffer.byteLength(body),
+				sentBytes: typeof wireBody === "string" ? Buffer.byteLength(wireBody) : wireBody.byteLength,
+				...identityReason === void 0 ? {} : { reason: identityReason }
+			};
+			logger?.debug?.("[Qoder Request] Dispatch", {
+				requestId,
+				protocol,
+				...this.diagnostics
+			});
+			return options.dispatch(wireBody, wireHeaders);
+		};
+		signal.throwIfAborted();
+		const enabled = options.enabled ?? false;
+		const key = endpointKey(protocol, url);
+		const minChars = envInteger(process.env.QODER_ZSTD_REQUEST_BODY_MIN_CHARS, 4096);
+		const level = envInteger(process.env.QODER_ZSTD_REQUEST_BODY_LEVEL, 1, 22);
+		const existingEncoding = new Headers(headers).get("content-encoding");
+		identityReason = !enabled ? "disabled" : this.fallbackAttempted ? "fallback_already_attempted" : vpcEndpoint(url) ? "vpc_endpoint" : disabledEndpoints.has(key) ? "endpoint_disabled" : body.length < minChars ? "below_threshold" : typeof zlib.zstdCompress !== "function" || zlib.constants.ZSTD_c_compressionLevel === void 0 ? "native_unavailable" : existingEncoding && existingEncoding !== "identity" ? "existing_encoding" : void 0;
+		if (identityReason) return dispatch(body, headers);
+		let compressed;
+		const original = Buffer.from(body, "utf8");
+		try {
+			compressed = await promisify(zlib.zstdCompress)(original, { params: { [zlib.constants.ZSTD_c_compressionLevel]: level } });
+		} catch {
+			signal.throwIfAborted();
+			identityReason = "compression_error";
+			logger?.warn?.("[Qoder Request] Zstd compression failed; sending identity", {
+				requestId,
+				protocol
+			});
+			return dispatch(body, headers);
+		}
+		signal.throwIfAborted();
+		if (compressed.byteLength >= original.byteLength) {
+			identityReason = "not_smaller";
+			return dispatch(body, headers);
+		}
+		const identityHeaders = Object.fromEntries(Object.entries(headers).filter(([key]) => !["content-length", "content-encoding"].includes(key.toLowerCase())));
+		logger?.debug?.("[Qoder Request] Sending zstd", {
+			requestId,
+			protocol,
+			originalBytes: original.byteLength,
+			compressedBytes: compressed.byteLength,
+			level
+		});
+		this.compressedEndpoint = key;
+		const response = await dispatch(new Uint8Array(compressed), {
+			...identityHeaders,
+			"Content-Encoding": "zstd"
+		});
+		const rejection = await probe(response, protocol, signal);
+		signal.throwIfAborted();
+		if (rejection && options.onRejection) try {
+			await options.onRejection(rejection);
+		} catch {
+			logger?.warn?.("[Qoder Request] Compression rejection capture failed", {
+				requestId,
+				protocol,
+				status: response.status
+			});
 		}
-		return output;
+		signal.throwIfAborted();
+		if (!rejection?.reason) return response;
+		if (protocol === "legacy") {
+			response.body?.cancel().catch(() => void 0);
+			this.rejectLegacy(response.status, rejection.reason);
+		}
+		this.fallbackAttempted = true;
+		identityReason = rejection.reason;
+		logger?.debug?.("[Qoder Request] Retrying identity", {
+			requestId,
+			protocol,
+			reason: rejection.reason,
+			status: response.status
+		});
+		response.body?.cancel().catch(() => void 0);
+		const identityResponse = await dispatch(body, identityHeaders);
+		this.pendingConfirmation = key;
+		return identityResponse;
 	}
-	finish() {
-		const output = allTags.some((tag) => tag.startsWith(this.buffer)) ? "" : this.buffer;
-		this.buffer = "";
-		return output;
+	confirm() {
+		if (this.pendingConfirmation) disabledEndpoints.add(this.pendingConfirmation);
+		this.pendingConfirmation = void 0;
+		this.compressedEndpoint = void 0;
 	}
-};
-var QoderThinkingParser = class {
-	buffer = "";
-	mode = "text";
-	closingTag = thinkingTags[0].close;
-	native = new NativeReasoningStripper();
-	pushReasoning(chunk) {
-		const text = this.native.push(chunk);
-		return text ? [{
-			type: "reasoning",
-			text
-		}] : [];
+	/** Legacy may reject the encoding in its SSE envelope before model output. */
+	rejectLegacyError(error) {
+		if (!(error instanceof QoderLlmError) || !this.compressedEndpoint) return;
+		const status = error.failure.status;
+		const cause = error.cause;
+		if (typeof status !== "number") return;
+		const rejection = compressionRejection(status, typeof cause === "string" ? cause : JSON.stringify(cause) ?? "", "legacy");
+		if (rejection) this.rejectLegacy(status, rejection);
 	}
-	pushContent(chunk) {
-		const output = [];
-		const pendingReasoning = this.native.finish();
-		if (pendingReasoning) output.push({
-			type: "reasoning",
-			text: pendingReasoning
-		});
-		this.buffer += chunk;
-		while (this.buffer) {
-			if (this.mode === "reasoning") {
-				const closeAt = this.buffer.indexOf(this.closingTag);
-				if (closeAt !== -1) {
-					if (closeAt > 0) output.push({
-						type: "reasoning",
-						text: this.buffer.slice(0, closeAt)
-					});
-					this.buffer = trimSeparator(this.buffer.slice(closeAt + this.closingTag.length));
-					this.mode = "text";
-					continue;
-				}
-				const held = trailingPrefixLength(this.buffer, [this.closingTag]);
-				const safeLength = this.buffer.length - held;
-				if (safeLength > 0) output.push({
-					type: "reasoning",
-					text: this.buffer.slice(0, safeLength)
-				});
-				this.buffer = this.buffer.slice(safeLength);
-				break;
-			}
-			const opener = earliestTag(this.buffer, "open");
-			const closer = earliestTag(this.buffer, "close");
-			if (opener !== void 0 && (closer === void 0 || opener.position < closer.position)) {
-				if (opener.position > 0) output.push({
-					type: "text",
-					text: this.buffer.slice(0, opener.position)
-				});
-				this.buffer = this.buffer.slice(opener.position + opener.tag.open.length);
-				this.closingTag = opener.tag.close;
-				this.mode = "reasoning";
-				continue;
-			}
-			if (closer !== void 0) {
-				if (closer.position > 0) output.push({
-					type: "text",
-					text: this.buffer.slice(0, closer.position)
-				});
-				this.buffer = trimSeparator(this.buffer.slice(closer.position + closer.tag.close.length));
+	rejectLegacy(status, reason) {
+		if (this.compressedEndpoint) disabledEndpoints.add(this.compressedEndpoint);
+		throw new QoderLlmError(`Qoder rejected Zstd (${reason}); retry without compression.`, "TRANSPORT", { status });
+	}
+};
+//#endregion
+//#region src/qoder/transport/wire/queue.ts
+/** Decode queue fields from the provider's nested JSON envelopes, never from prose. */
+function records(value) {
+	const pending = [value];
+	const seen = /* @__PURE__ */ new Set();
+	const result = [];
+	for (let count = 0; pending.length && count < 64; count++) {
+		let next = pending.shift();
+		if (typeof next === "string") {
+			if (next.length > 65536) continue;
+			try {
+				next = JSON.parse(next);
+			} catch {
 				continue;
 			}
-			const held = trailingPrefixLength(this.buffer, allTags);
-			const safeLength = this.buffer.length - held;
-			if (safeLength > 0) output.push({
-				type: "text",
-				text: this.buffer.slice(0, safeLength)
-			});
-			this.buffer = this.buffer.slice(safeLength);
-			break;
 		}
-		return output;
+		if (!next || typeof next !== "object" || Array.isArray(next) || seen.has(next)) continue;
+		seen.add(next);
+		const record = next;
+		result.push(record);
+		for (const key of [
+			"error",
+			"data",
+			"result",
+			"message",
+			"body",
+			"cause",
+			"queue",
+			"details",
+			"qoderApiError",
+			"providerError"
+		]) if (record[key] !== void 0) pending.push(record[key]);
 	}
-	finish() {
-		const output = [];
-		const pendingReasoning = this.native.finish();
-		if (pendingReasoning) output.push({
-			type: "reasoning",
-			text: pendingReasoning
-		});
-		if (this.buffer) output.push({
-			type: this.mode,
-			text: this.buffer
-		});
-		this.buffer = "";
-		return output;
+	return result;
+}
+function boolean(value) {
+	return value === true || value === "true" ? true : value === false || value === "false" ? false : void 0;
+}
+function number(value) {
+	if (typeof value !== "number" && (typeof value !== "string" || !value.trim())) return void 0;
+	const parsed = Number(value);
+	return Number.isFinite(parsed) && parsed >= 0 && parsed <= Number.MAX_SAFE_INTEGER / 1e3 ? parsed : void 0;
+}
+function status(record) {
+	const result = {};
+	for (const key of ["isQueued", "serviceAvailable"]) {
+		const value = boolean(record[key]);
+		if (value !== void 0) result[key] = value;
 	}
-};
+	for (const key of [
+		"queueCount",
+		"waitTime",
+		"retryAfterSeconds"
+	]) {
+		const value = number(record[key]);
+		if (value !== void 0) result[key] = value;
+	}
+	for (const key of ["modelKey", "queueType"]) {
+		const value = record[key];
+		if (typeof value === "string" && value.trim() && value.length <= 256) result[key] = value.trim();
+	}
+	return result;
+}
+function parseQueueStatus(value) {
+	for (const record of records(value)) {
+		const parsed = status(record);
+		if (parsed.isQueued !== void 0 || parsed.serviceAvailable !== void 0) return parsed;
+	}
+}
+function queuedError(value) {
+	const candidates = records(value);
+	if (!candidates.some((record) => String(record.code) === "10605" || boolean(record.isQueued) === true)) return void 0;
+	return new QoderModelQueuedError(candidates.map(status).find((candidate) => candidate.isQueued === true || candidate.waitTime !== void 0) ?? candidates.map(status).find((candidate) => Object.keys(candidate).length > 0) ?? {});
+}
 //#endregion
-//#region src/qoder/transport/wire/sse.ts
-/** Decode Qoder's outer SSE envelope and inner model chunks. */
-const doneMarker = "[DONE]";
-const defaultMaxSseBufferChars = 2 * 1024 * 1024;
-function malformed(message) {
-	return new QoderLlmError(message, "MALFORMED_RESPONSE");
+//#region src/qoder/transport/queue.ts
+/** Queue polling and lease cleanup, scoped to one logical model call. */
+function queueFailure(message, code = "QODER_QUEUE_FAILED") {
+	const error = new QoderLlmError(message, code);
+	error.upstreamCode = "10605";
+	return error;
 }
-function extractErrorDetail(envelope) {
-	const raw = envelope.body ?? envelope.message;
-	if (!raw) return void 0;
-	if (typeof raw !== "string") return JSON.stringify(raw);
-	const trimmed = raw.trim();
-	try {
-		const parsed = JSON.parse(trimmed);
-		if (parsed && typeof parsed === "object") {
-			let detailMsg;
-			if (typeof parsed.details === "string") try {
-				const inner = JSON.parse(parsed.details);
-				if (typeof inner?.error?.message === "string") detailMsg = inner.error.message.trim();
-				else if (typeof inner?.message === "string") detailMsg = inner.message.trim();
-			} catch {}
-			const msg = typeof parsed.message === "string" ? parsed.message.trim() : void 0;
-			const code = typeof parsed.code === "string" ? parsed.code.trim() : void 0;
-			const err = typeof parsed.error === "string" ? parsed.error.trim() : void 0;
-			const text = detailMsg || msg || err;
-			if (code && text) return `${code}: ${text}`;
-			return text || code || trimmed;
-		}
-	} catch {}
-	return trimmed;
+function checkAbort(signal) {
+	if (signal?.aborted) throw new QoderLlmError("Qoder request was aborted.", "ABORTED");
 }
-function parseEnvelope(rawData) {
-	let value;
-	try {
-		value = JSON.parse(rawData);
-	} catch {
-		throw malformed("Malformed outer SSE JSON payload received from Qoder.");
-	}
-	if (value === null || typeof value !== "object") throw malformed("Malformed outer SSE envelope received from Qoder.");
-	const envelope = value;
-	if (envelope.statusCodeValue !== void 0 && typeof envelope.statusCodeValue !== "number") throw malformed("Qoder SSE envelope has an invalid status code.");
-	if (envelope.statusCodeValue !== void 0 && (!Number.isInteger(envelope.statusCodeValue) || envelope.statusCodeValue < 100 || envelope.statusCodeValue > 599)) throw malformed("Qoder SSE envelope has an invalid status code.");
-	if (envelope.statusCodeValue !== void 0 && envelope.statusCodeValue !== 200) {
-		const detail = extractErrorDetail(envelope);
-		throw qoderHttpError(detail ? `Qoder service returned upstream error status ${envelope.statusCodeValue}: ${detail}` : `Qoder service returned upstream error status ${envelope.statusCodeValue}.`, {
-			status: envelope.statusCodeValue,
-			cause: envelope.body
-		});
+const queueClock = {
+	now: () => performance.now(),
+	sleep: (ms, signal) => new Promise((resolve, reject) => {
+		if (signal?.aborted) {
+			reject(new QoderLlmError("Qoder request was aborted.", "ABORTED"));
+			return;
+		}
+		const abort = () => {
+			clearTimeout(timer);
+			reject(new QoderLlmError("Qoder request was aborted.", "ABORTED"));
+		};
+		const timer = setTimeout(() => {
+			signal?.removeEventListener("abort", abort);
+			resolve();
+		}, ms);
+		signal?.addEventListener("abort", abort, { once: true });
+	})
+};
+/** A cancellable deadline with no surviving timers, including failed operations. */
+async function bounded(ms, signal, run) {
+	checkAbort(signal);
+	const controller = new AbortController();
+	const onAbort = () => controller.abort(signal?.reason);
+	signal?.addEventListener("abort", onAbort, { once: true });
+	const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("Qoder queue operation timed out.")), Math.max(1, Math.ceil(ms)));
+	let stop = () => {};
+	const interrupted = new Promise((_resolve, reject) => {
+		stop = () => reject(signal?.aborted ? new QoderLlmError("Qoder request was aborted.", "ABORTED") : queueFailure("Qoder queue operation timed out."));
+		controller.signal.addEventListener("abort", stop, { once: true });
+	});
+	try {
+		return await Promise.race([run(controller.signal), interrupted]);
+	} finally {
+		clearTimeout(timer);
+		signal?.removeEventListener("abort", onAbort);
+		controller.signal.removeEventListener("abort", stop);
+		controller.abort();
 	}
-	if (envelope.body !== void 0 && typeof envelope.body !== "string") throw malformed("Qoder SSE envelope has an invalid model body.");
-	return envelope;
 }
-function parseInner(body) {
+async function readBody(response, signal) {
+	if (!response.body) return "";
+	const reader = response.body.getReader();
+	const cancel = () => {
+		reader.cancel().catch(() => {});
+	};
+	signal.addEventListener("abort", cancel, { once: true });
+	const decoder = new TextDecoder();
+	let bytes = 0;
+	let text = "";
 	try {
-		const value = JSON.parse(body);
-		if (value === null || typeof value !== "object") throw new Error("not an object");
-		return value;
-	} catch {
-		throw malformed("Malformed inner model payload received from Qoder.");
+		checkAbort(signal);
+		while (true) {
+			const { done, value } = await reader.read();
+			checkAbort(signal);
+			if (done) return text + decoder.decode();
+			bytes += value.byteLength;
+			if (bytes > 65536) throw queueFailure("Qoder queue response exceeded its size limit.");
+			text += decoder.decode(value, { stream: true });
+		}
+	} finally {
+		signal.removeEventListener("abort", cancel);
+		await reader.cancel().catch(() => {});
+		reader.releaseLock();
 	}
 }
+function queueInterval(seconds) {
+	return Math.min(3e4, Math.max(500, seconds !== void 0 && Number.isFinite(seconds) ? seconds * 1e3 : 3e4));
+}
+var ModelQueue = class {
+	callId = randomUUID();
+	options;
+	clock;
+	maxWaitMs;
+	models = /* @__PURE__ */ new Set();
+	deferred = /* @__PURE__ */ new Set();
+	waitMs = 0;
+	recoveries = 0;
+	constructor(options) {
+		this.options = options;
+		this.clock = options.clock ?? queueClock;
+		this.maxWaitMs = options.maxWaitMs ?? 36e5;
+		if (!Number.isSafeInteger(this.maxWaitMs) || this.maxWaitMs <= 0 || this.maxWaitMs > 2147483647) throw new Error("modelQueueMaxWaitMs must be a positive integer no greater than 2147483647");
+	}
+	publish(update) {
+		try {
+			this.options.onUpdate?.(update);
+		} catch {
+			this.options.logger?.warn?.("[Qoder Queue] Status observer failed");
+		}
+	}
+	clear() {
+		this.publish({
+			type: "clear",
+			callId: this.callId
+		});
+	}
+	/** Register even a queue signal rejected by the output guard, so cleanup still runs. */
+	entered(status) {
+		const model = status.modelKey ?? this.options.model;
+		if (this.models.has(model)) return;
+		this.models.add(model);
+		if (this.options.dshSessionId && this.options.onLease) {
+			const key = JSON.stringify([
+				this.options.region,
+				this.options.subscriberId,
+				this.options.requestSetId,
+				model
+			]);
+			if (this.options.onLease({
+				key,
+				sessionId: this.options.dshSessionId,
+				release: () => this.release(model, Math.max(0, Date.now() - (this.options.runStartedAt ?? Date.now())))
+			})) this.deferred.add(model);
+		}
+	}
+	async wait(initial, requestId) {
+		this.entered(initial);
+		if (this.recoveries >= 10) throw queueFailure("Qoder queue recovery limit reached.", "QODER_QUEUE_LIMIT");
+		const started = this.clock.now();
+		const remaining = () => this.maxWaitMs - this.waitMs - (this.clock.now() - started);
+		const assertTime = () => {
+			checkAbort(this.options.signal);
+			if (remaining() <= 0) throw queueFailure("Qoder model queue wait timed out.", "QODER_QUEUE_TIMEOUT");
+		};
+		let status = initial;
+		let failures = 0;
+		let first = true;
+		try {
+			while (true) {
+				assertTime();
+				if (this.options.dshSessionId !== void 0) this.publish({
+					type: "waiting",
+					snapshot: {
+						callId: this.callId,
+						sessionId: this.options.dshSessionId,
+						model: status.modelKey ?? this.options.model,
+						...this.options.modelName ? { modelName: this.options.modelName } : {},
+						...status.queueCount === void 0 ? {} : { queueCount: status.queueCount },
+						...status.waitTime === void 0 ? {} : { waitTimeMs: status.waitTime * 1e3 },
+						...status.serviceAvailable === void 0 ? {} : { serviceAvailable: status.serviceAvailable },
+						waitElapsedMs: this.waitMs + Math.max(0, this.clock.now() - started),
+						maxWaitMs: this.maxWaitMs,
+						updatedAt: Date.now()
+					}
+				});
+				if (!first) await this.clock.sleep(Math.min(queueInterval(status.retryAfterSeconds), remaining()), this.options.signal);
+				first = false;
+				assertTime();
+				try {
+					const next = await this.poll(status, requestId, remaining());
+					status = {
+						...next,
+						modelKey: next.modelKey ?? status.modelKey,
+						queueType: next.queueType ?? status.queueType
+					};
+					failures = 0;
+					this.entered(status);
+					if (status.isQueued === false) {
+						if (status.retryAfterSeconds !== void 0 && status.retryAfterSeconds > 0) await this.clock.sleep(Math.min(queueInterval(status.retryAfterSeconds), remaining()), this.options.signal);
+						assertTime();
+						this.recoveries++;
+						return;
+					}
+					if (status.isQueued !== true && status.serviceAvailable !== false) throw queueFailure("Qoder returned an invalid queue state.", "QODER_QUEUE_INVALID_STATE");
+				} catch (error) {
+					assertTime();
+					if (error instanceof QoderLlmError && [
+						"QODER_QUEUE_UNAVAILABLE",
+						"QODER_QUEUE_INVALID_STATE",
+						"QODER_QUEUE_IDENTITY"
+					].includes(error.code)) throw error;
+					if (++failures >= 3) throw queueFailure("Qoder queue status polling failed three consecutive times.");
+					this.options.logger?.warn?.("[Qoder Queue] Status poll failed; will retry", { failures });
+					status = {
+						...status,
+						retryAfterSeconds: void 0
+					};
+				}
+			}
+		} finally {
+			this.waitMs += Math.max(0, this.clock.now() - started);
+			this.clear();
+		}
+	}
+	async poll(status, requestId, remainingMs) {
+		const url = getQoderQueueStatusUrl(this.options.region, {
+			requestSetId: this.options.requestSetId,
+			modelKey: status.modelKey ?? this.options.model,
+			queueType: status.queueType
+		});
+		return bounded(remainingMs, this.options.signal, async (signal) => {
+			for (let attempt = 0; attempt < 2; attempt++) {
+				const credentials = await this.options.credentials(attempt > 0, signal);
+				checkAbort(signal);
+				const outcome = await bounded(Math.min(3e4, remainingMs), signal, async (httpSignal) => {
+					const response = await this.options.fetch(url, {
+						method: "GET",
+						headers: {
+							...attributionHeaders(),
+							...buildAuthHeaders(null, url, credentials),
+							Accept: "application/json",
+							"Accept-Encoding": "identity",
+							"X-Request-Id": requestId,
+							"X-Session-ID": this.options.sessionId
+						},
+						signal: httpSignal
+					});
+					return {
+						status: response.status,
+						ok: response.ok,
+						body: await readBody(response, httpSignal)
+					};
+				});
+				if ((outcome.status === 401 || outcome.status === 403) && attempt === 0) continue;
+				if (outcome.status === 404) throw queueFailure("Qoder queue endpoint is unavailable.", "QODER_QUEUE_UNAVAILABLE");
+				if (!outcome.ok) throw queueFailure(`Qoder queue status returned HTTP ${outcome.status}.`);
+				const parsed = parseQueueStatus(outcome.body);
+				if (!parsed) throw queueFailure("Qoder returned a malformed queue status.");
+				return parsed;
+			}
+			throw queueFailure("Qoder queue authentication failed.");
+		});
+	}
+	/** Best-effort cleanup has an independent signal even after caller cancellation. */
+	async finish(elapsedMs) {
+		this.clear();
+		const models = [...this.models].filter((model) => !this.deferred.has(model));
+		this.models.clear();
+		await Promise.allSettled(models.map((model) => this.release(model, elapsedMs)));
+	}
+	async release(model, elapsedMs) {
+		try {
+			await bounded(3e3, void 0, async (signal) => {
+				const credentials = await this.options.credentials(false, signal);
+				checkAbort(signal);
+				const url = getQoderQueueFinishUrl(this.options.region);
+				const body = JSON.stringify({
+					payload: JSON.stringify({
+						model_key: model,
+						request_set_id: this.options.requestSetId,
+						user_id: credentials.userID,
+						time_consumed: Math.max(0, Math.round(elapsedMs))
+					}),
+					encodeVersion: "1"
+				});
+				const response = await this.options.fetch(url, {
+					method: "POST",
+					headers: {
+						...attributionHeaders(),
+						...buildAuthHeaders(body, url, credentials),
+						"Content-Type": "application/json",
+						Accept: "application/json",
+						"X-Request-Id": randomUUID()
+					},
+					body,
+					signal
+				});
+				await readBody(response, signal);
+				if (!response.ok) throw queueFailure("Qoder lease release failed.");
+			});
+		} catch {
+			this.options.logger?.warn?.("[Qoder Queue] Finish failed; server TTL will release the lease");
+		}
+	}
+};
+//#endregion
+//#region src/qoder/transport/wire/serialize.ts
+async function buildQoderRequestBody(options, userId, translatedMessages, model, attachments, tracker, identityScope = "") {
+	const prepared = await prepareQoderRequest(options, userId, translatedMessages, model, attachments, tracker, identityScope);
+	return {
+		request_id: prepared.requestId,
+		request_set_id: prepared.requestSetId,
+		chat_record_id: prepared.chatRecordId,
+		session_id: prepared.sessionId,
+		stream: true,
+		chat_task: "FREE_INPUT",
+		is_reply: true,
+		is_retry: false,
+		source: 1,
+		version: "3",
+		session_type: "qodercli",
+		agent_id: "agent_common",
+		task_id: prepared.taskId,
+		code_language: "",
+		chat_prompt: "",
+		image_urls: null,
+		aliyun_user_type: "",
+		system: prepared.messages.filter((message) => message.role === "system").flatMap((message) => typeof message.content === "string" && message.content.length > 0 ? [{
+			type: "text",
+			text: message.content
+		}] : []),
+		messages: prepared.messages,
+		tools: prepared.tools,
+		parameters: {
+			max_tokens: prepared.maxTokens,
+			...prepared.contextLength === void 0 ? {} : { context_length: prepared.contextLength },
+			...prepared.reasoningEffort === void 0 ? {} : { reasoning_effort: prepared.reasoningEffort }
+		},
+		chat_context: {
+			chatPrompt: "",
+			imageUrls: null,
+			extra: {
+				context: [],
+				modelConfig: {
+					key: prepared.modelKey,
+					is_reasoning: prepared.isReasoning
+				},
+				originalContent: prepared.lastUserText
+			},
+			features: [],
+			text: prepared.lastUserText
+		},
+		model_config: {
+			key: prepared.modelKey,
+			is_reasoning: prepared.isReasoning,
+			max_output_tokens: prepared.maxTokens,
+			source: prepared.modelSource,
+			...prepared.contextConfig === void 0 ? {} : { context_config: prepared.contextConfig }
+		},
+		business: prepared.business
+	};
+}
+//#endregion
+//#region src/qoder/transport/wire/stream-chunks.ts
+/** Convert decoded Qoder model frames into DSH stream chunks. */
+const doneMarker = "[DONE]";
+const defaultMaxSseBufferChars = 2 * 1024 * 1024;
+function malformed$1(message) {
+	return new QoderLlmError(message, "MALFORMED_RESPONSE");
+}
+/** Distinguish invalid JSON from a valid JSON value with an invalid model shape. */
+var QoderMalformedJsonFrameError = class extends QoderLlmError {
+	incomplete;
+	auxiliary;
+	constructor(incomplete = false, auxiliary = false) {
+		super("Malformed model-server SSE JSON payload.", "MALFORMED_RESPONSE");
+		this.incomplete = incomplete;
+		this.auxiliary = auxiliary;
+	}
+};
 function tokenUsage(innerChunk) {
 	if (!innerChunk.usage) return void 0;
 	const usage = innerChunk.usage;
@@ -2574,7 +3286,7 @@ function finishKind(value) {
 	if (value === "length") return "max-tokens";
 	if (value === "tool_calls" || value === "toolUse" || value === "function_call") return "tool-calls";
 	if (value === "content_filter") throw new QoderLlmError("Qoder blocked the response through its content filter.", "PROVIDER_ERROR");
-	throw malformed(`Qoder returned unknown finish reason "${value}".`);
+	throw malformed$1(`Qoder returned unknown finish reason "${value}".`);
 }
 /** Whether a choice delta streams content, reasoning, or tool-call data. Control-only frames do not. */
 function carriesStreamDelta(delta) {
@@ -2584,12 +3296,15 @@ function carriesStreamDelta(delta) {
 	if (typeof delta.reasoning_content === "string" && delta.reasoning_content) return true;
 	return false;
 }
-async function* parseQoderSse(stream, options = {}) {
+async function* parseQoderChunks(stream, decodeFrame, options = {}, behavior = {}) {
 	const reader = stream.getReader();
 	const decoder = new TextDecoder();
-	const thinkingParser = new QoderThinkingParser();
 	const toolCalls = /* @__PURE__ */ new Map();
 	let buffer = "";
+	let eventData = [];
+	let continuedEventData = [];
+	let eventDataChars = 0;
+	let eventType;
 	let sourceEnded = false;
 	let sawDone = false;
 	let nextBlockIndex = 0;
@@ -2672,10 +3387,11 @@ async function* parseQoderSse(stream, options = {}) {
 				sourceEnded = true;
 				buffer += decoder.decode();
 				if (buffer.length > 0 && !buffer.endsWith("\n")) buffer += "\n";
+				buffer += "\n";
 			} else {
 				options.onActivity?.();
 				buffer += decoder.decode(value, { stream: true });
-				if (buffer.length > maxBufferChars) throw malformed("Qoder SSE frame exceeded its size limit.");
+				if (buffer.length > maxBufferChars) throw malformed$1("Qoder SSE frame exceeded its size limit.");
 			}
 			while (!sawDone) {
 				const lineEnd = buffer.indexOf("\n");
@@ -2683,22 +3399,86 @@ async function* parseQoderSse(stream, options = {}) {
 				let line = buffer.substring(0, lineEnd);
 				buffer = buffer.substring(lineEnd + 1);
 				if (line.endsWith("\r")) line = line.slice(0, -1);
-				line = line.trim();
-				if (!line.startsWith("data:")) continue;
-				const rawData = line.substring(5).trim();
+				if (line.startsWith("event:")) {
+					eventType = line.substring(6).trim();
+					continue;
+				}
+				if (line.startsWith("data:")) {
+					const value = line.substring(5);
+					const data = value.startsWith(" ") ? value.substring(1) : value;
+					eventData.push(data);
+					if (behavior.recoverUnprefixedContinuations) continuedEventData.push(data);
+					eventDataChars += data.length + 1;
+					if (eventDataChars > maxBufferChars) throw malformed$1("Qoder SSE frame exceeded its size limit.");
+					continue;
+				}
+				if (line !== "") {
+					const jsonPropertyContinuation = /^:\s*(?:-?\d|true\b|false\b|null\b|["{\[\\])/u.test(line);
+					if (behavior.recoverUnprefixedContinuations && continuedEventData.length > 0 && (!line.startsWith(":") || jsonPropertyContinuation) && !/^[a-zA-Z][\w-]*(?::|$)/u.test(line)) {
+						const index = continuedEventData.length - 1;
+						continuedEventData[index] += line;
+						eventDataChars += line.length;
+						if (eventDataChars > maxBufferChars) throw malformed$1("Qoder SSE frame exceeded its size limit.");
+					}
+					continue;
+				}
+				const rawData = eventData.join("\n").trim();
+				const continuedData = continuedEventData.join("\n").trim();
+				const frameEventType = eventType;
+				eventData = [];
+				continuedEventData = [];
+				eventDataChars = 0;
+				eventType = void 0;
 				if (!rawData) continue;
 				if (rawData === doneMarker) {
+					options.onControlFrame?.("done");
 					sawDone = true;
 					break;
 				}
-				const envelope = parseEnvelope(rawData);
-				const body = typeof envelope.body === "string" ? envelope.body.trim() : "";
-				if (!body) continue;
-				if (body === doneMarker) {
+				let innerChunk;
+				let malformedDetails;
+				try {
+					const frameOptions = {
+						...options,
+						onMalformedFrame: (details) => {
+							malformedDetails = {
+								...details,
+								atEof: sourceEnded,
+								afterFinish: sawFinishReason
+							};
+						}
+					};
+					try {
+						innerChunk = decodeFrame(rawData, frameOptions, frameEventType);
+					} catch (error) {
+						if (!(error instanceof QoderMalformedJsonFrameError) || !continuedData || continuedData === rawData) throw error;
+						const originalDetails = malformedDetails;
+						innerChunk = decodeFrame(continuedData, frameOptions, frameEventType);
+						if (originalDetails) options.onMalformedFrame?.({
+							...originalDetails,
+							disposition: "recovered-continuation"
+						});
+					}
+				} catch (error) {
+					const malformedJson = error instanceof QoderMalformedJsonFrameError ? error : void 0;
+					const skippedAfterFinish = behavior.ignoreMalformedAfterFinish && sawFinishReason && frameEventType !== "error" && malformedJson !== void 0;
+					const skippedAuxiliary = !sourceEnded && behavior.allowIncompleteAuxiliaryFrames && malformedJson?.incomplete && malformedJson.auxiliary && frameEventType !== "error";
+					if (malformedDetails !== void 0) options.onMalformedFrame?.({
+						...malformedDetails,
+						emptyChoicesPrefix: malformedJson?.auxiliary ?? false,
+						disposition: skippedAfterFinish ? "skipped-after-finish" : skippedAuxiliary ? "skipped-auxiliary" : "rejected"
+					});
+					if (skippedAfterFinish) continue;
+					if (sourceEnded && error instanceof QoderMalformedJsonFrameError && error.incomplete) throw new QoderLlmError("Qoder SSE connection ended with an incomplete JSON event before model completion.", "TRANSPORT");
+					if (skippedAuxiliary) continue;
+					throw error;
+				}
+				if (innerChunk === void 0) continue;
+				if (innerChunk === doneMarker) {
+					options.onControlFrame?.("done");
 					sawDone = true;
 					break;
 				}
-				const innerChunk = parseInner(body);
 				pendingUsage = tokenUsage(innerChunk) ?? pendingUsage;
 				for (const choice of innerChunk.choices ?? []) {
 					const kind = finishKind(choice.finish_reason);
@@ -2708,14 +3488,20 @@ async function* parseQoderSse(stream, options = {}) {
 					} else if (carriesStreamDelta(choice.delta)) sawFinishReason = false;
 					const delta = choice.delta;
 					if (!delta) continue;
-					if (typeof delta.reasoning_content === "string" && delta.reasoning_content) for (const segment of thinkingParser.pushReasoning(delta.reasoning_content)) for (const chunk of appendSegment(segment)) yield chunk;
-					if (typeof delta.content === "string" && delta.content) for (const segment of thinkingParser.pushContent(delta.content)) for (const chunk of appendSegment(segment)) yield chunk;
+					if (typeof delta.reasoning_content === "string" && delta.reasoning_content) for (const chunk of appendSegment({
+						type: "reasoning",
+						text: delta.reasoning_content
+					})) yield chunk;
+					if (typeof delta.content === "string" && delta.content) for (const chunk of appendSegment({
+						type: "text",
+						text: delta.content
+					})) yield chunk;
 					if (delta.tool_calls !== void 0) {
-						if (!Array.isArray(delta.tool_calls)) throw malformed("Qoder tool-call delta is not an array.");
+						if (!Array.isArray(delta.tool_calls)) throw malformed$1("Qoder tool-call delta is not an array.");
 						for (const rawCall of delta.tool_calls) {
-							if (typeof rawCall !== "object" || rawCall === null || Array.isArray(rawCall)) throw malformed("Qoder tool-call delta is not an object.");
+							if (typeof rawCall !== "object" || rawCall === null || Array.isArray(rawCall)) throw malformed$1("Qoder tool-call delta is not an object.");
 							const upstreamIndex = rawCall.index ?? 0;
-							if (!Number.isInteger(upstreamIndex) || upstreamIndex < 0) throw malformed("Qoder tool-call delta has an invalid index.");
+							if (!Number.isInteger(upstreamIndex) || upstreamIndex < 0) throw malformed$1("Qoder tool-call delta has an invalid index.");
 							let state = toolCalls.get(upstreamIndex);
 							if (state === void 0) {
 								state = {
@@ -2726,17 +3512,17 @@ async function* parseQoderSse(stream, options = {}) {
 								};
 								toolCalls.set(upstreamIndex, state);
 							}
-							if (rawCall.id !== void 0) if (rawCall.id === "" || rawCall.id === null) {} else if (typeof rawCall.id !== "string") throw malformed("Qoder tool call has an invalid id.");
+							if (rawCall.id !== void 0) if (rawCall.id === "" || rawCall.id === null) {} else if (typeof rawCall.id !== "string") throw malformed$1("Qoder tool call has an invalid id.");
 							else {
-								if (state.id && state.id !== rawCall.id) throw malformed("Qoder changed a streamed tool-call id.");
+								if (state.id && state.id !== rawCall.id) throw malformed$1("Qoder changed a streamed tool-call id.");
 								state.id = rawCall.id;
 							}
 							let hasNewName = false;
 							if (rawCall.function?.name !== void 0) {
 								const name = rawCall.function.name;
-								if (name === "" || name === null) {} else if (typeof name !== "string") throw malformed("Qoder tool call has an invalid name.");
+								if (name === "" || name === null) {} else if (typeof name !== "string") throw malformed$1("Qoder tool call has an invalid name.");
 								else {
-									if (state.name && state.name !== name) throw malformed("Qoder changed a streamed tool-call name.");
+									if (state.name && state.name !== name) throw malformed$1("Qoder changed a streamed tool-call name.");
 									if (state.name !== name) {
 										state.name = name;
 										hasNewName = true;
@@ -2744,7 +3530,7 @@ async function* parseQoderSse(stream, options = {}) {
 								}
 							}
 							if (rawCall.function?.arguments !== void 0) {
-								if (typeof rawCall.function.arguments !== "string") throw malformed("Qoder tool-call arguments delta is not a string.");
+								if (typeof rawCall.function.arguments !== "string") throw malformed$1("Qoder tool-call arguments delta is not a string.");
 								state.arguments += rawCall.function.arguments;
 							}
 							const wasOpen = state.blockIndex !== void 0;
@@ -2776,18 +3562,17 @@ async function* parseQoderSse(stream, options = {}) {
 		reader.releaseLock();
 	}
 	if (!sawDone && !sawFinishReason) throw new QoderLlmError("SSE stream ended prematurely without [DONE].", "TRANSPORT");
-	for (const segment of thinkingParser.finish()) for (const chunk of appendSegment(segment)) yield chunk;
 	for (const chunk of closeTextual()) yield chunk;
 	for (const [, state] of [...toolCalls.entries()].sort(([left], [right]) => left - right)) {
-		if (!state.id || !state.name) throw malformed("Qoder completed an unidentifiable tool call.");
+		if (!state.id || !state.name) throw malformed$1("Qoder completed an unidentifiable tool call.");
 		const normalizedArguments = state.arguments.trim() ? state.arguments : "{}";
 		try {
 			JSON.parse(normalizedArguments);
 		} catch {
-			throw malformed(`Qoder completed tool call "${state.name}" with malformed JSON arguments.`);
+			throw malformed$1(`Qoder completed tool call "${state.name}" with malformed JSON arguments.`);
 		}
 		for (const chunk of openToolCall(state)) yield chunk;
-		if (state.blockIndex === void 0) throw malformed("Qoder failed to open a completed tool call.");
+		if (state.blockIndex === void 0) throw malformed$1("Qoder failed to open a completed tool call.");
 		if (state.emittedArguments === 0 && normalizedArguments === "{}") yield {
 			type: "tool-call-delta",
 			index: state.blockIndex,
@@ -2829,15 +3614,128 @@ async function* parseQoderSse(stream, options = {}) {
 	};
 }
 //#endregion
+//#region src/qoder/transport/wire/control-frames.ts
+function qoderControlFrameKind(data) {
+	if (data === "[DONE]") return "done";
+	if (data === "[NOT_EXCEED_QUOTA]") return "quota-available";
+	if (data.startsWith("[EXCEED_QUOTA]")) return "quota-exceeded";
+	if (data.startsWith("[NOTIFICATIONS]")) return "notifications";
+}
+//#endregion
+//#region src/qoder/transport/wire/sse.ts
+function malformed(message) {
+	return new QoderLlmError(message, "MALFORMED_RESPONSE");
+}
+function decodeLegacyFrame(rawData, options) {
+	const outerControlKind = qoderControlFrameKind(rawData);
+	if (outerControlKind !== void 0) {
+		options.onControlFrame?.(outerControlKind);
+		return outerControlKind === "done" ? "[DONE]" : void 0;
+	}
+	let value;
+	try {
+		value = JSON.parse(rawData);
+	} catch {
+		throw malformed("Malformed outer SSE JSON payload received from Qoder.");
+	}
+	if (value === null || typeof value !== "object") throw malformed("Malformed outer SSE envelope received from Qoder.");
+	const envelope = value;
+	if (envelope.statusCodeValue !== void 0 && (typeof envelope.statusCodeValue !== "number" || !Number.isInteger(envelope.statusCodeValue) || envelope.statusCodeValue < 100 || envelope.statusCodeValue > 599)) throw malformed("Qoder SSE envelope has an invalid status code.");
+	if (envelope.statusCodeValue !== void 0 && envelope.statusCodeValue !== 200) {
+		const queued = options.queueRecovery ? queuedError(envelope.body ?? envelope) : void 0;
+		if (queued) throw queued;
+		throw qoderModelError(`Qoder service returned upstream error status ${envelope.statusCodeValue}`, {
+			status: envelope.statusCodeValue,
+			cause: envelope.body ?? envelope.message,
+			source: "sse",
+			headers: options.headers,
+			httpStatus: options.httpStatus
+		});
+	}
+	if (envelope.body !== void 0 && typeof envelope.body !== "string") throw malformed("Qoder SSE envelope has an invalid model body.");
+	const body = typeof envelope.body === "string" ? envelope.body.trim() : "";
+	if (!body) return void 0;
+	const innerControlKind = qoderControlFrameKind(body);
+	if (innerControlKind !== void 0) {
+		if (innerControlKind !== "done") options.onControlFrame?.(innerControlKind);
+		return innerControlKind === "done" ? "[DONE]" : void 0;
+	}
+	try {
+		const inner = JSON.parse(body);
+		if (inner === null || typeof inner !== "object") throw new Error("not an object");
+		return inner;
+	} catch {
+		throw malformed("Malformed inner model payload received from Qoder.");
+	}
+}
+function parseQoderSse(stream, options = {}) {
+	return parseQoderChunks(stream, decodeLegacyFrame, options);
+}
+//#endregion
 //#region src/qoder/transport/chat.ts
-/** Qoder chat request encoding, timeout lifecycle, and SSE streaming. */
+/** Qoder chat request encoding, queue recovery, timeout lifecycle, and SSE streaming. */
 function aborted$1(message) {
 	return new QoderLlmError(message, "ABORTED");
 }
 async function* streamQoderChat(options, model, credentials, messages, dependencies) {
-	const request = await buildQoderRequestBody(options, credentials.userID, messages, model);
-	const encodedBody = qoderEncodeBody(JSON.stringify(request));
-	const encodedBytes = Buffer.from(encodedBody, "utf8");
+	const identityScope = options.purpose === void 0 && dependencies.hostRunId !== void 0 ? JSON.stringify([dependencies.region, dependencies.hostRunId]) : dependencies.region;
+	const request = await buildQoderRequestBody(options, credentials.userID, messages, model, void 0, void 0, identityScope);
+	request.session_type = dependencies.region === "china" ? "qoderclicn" : "qodercli";
+	const startedAt = performance.now();
+	let activeCredentials = credentials;
+	const resolveCredentials = async (refresh, signal) => {
+		const next = dependencies.resolveCredentials ? await dependencies.resolveCredentials(refresh, signal) : refresh && dependencies.refreshCredentials ? await dependencies.refreshCredentials(activeCredentials, signal) : activeCredentials;
+		if (next.userID !== credentials.userID) throw queueFailure("Qoder subscriber changed during queue recovery.", "QODER_QUEUE_IDENTITY");
+		activeCredentials = next;
+		return next;
+	};
+	const queue = new ModelQueue({
+		region: dependencies.region,
+		fetch: dependencies.fetch,
+		subscriberId: credentials.userID,
+		requestSetId: request.request_set_id,
+		sessionId: request.session_id,
+		dshSessionId: options.purpose === void 0 && options.sessionId !== void 0 ? String(options.sessionId) : void 0,
+		runStartedAt: request.business.begin_at,
+		model: request.model_config.key,
+		modelName: model?.name,
+		signal: options.signal,
+		maxWaitMs: dependencies.modelQueueMaxWaitMs,
+		credentials: resolveCredentials,
+		onUpdate: dependencies.onQueueUpdate,
+		onLease: dependencies.onQueueLease,
+		logger: dependencies.logger,
+		clock: dependencies.queueClock
+	});
+	let sawOutput = false;
+	const clear = () => queue.clear();
+	options.signal?.addEventListener("abort", clear, { once: true });
+	try {
+		for (;;) {
+			if (options.signal?.aborted) throw aborted$1("Request was aborted.");
+			try {
+				for await (const chunk of streamAttempt(options, model, activeCredentials, request, dependencies)) {
+					if (chunk.type !== "usage" && chunk.type !== "finish") sawOutput = true;
+					yield chunk;
+				}
+				return;
+			} catch (error) {
+				if (!(error instanceof QoderModelQueuedError)) throw error;
+				queue.entered(error.queue);
+				if (sawOutput) throw queueFailure("Qoder queued a request after output began; replay was stopped.", "QODER_QUEUE_AFTER_OUTPUT");
+				await queue.wait(error.queue, request.request_id);
+				await resolveCredentials(false, options.signal ?? new AbortController().signal);
+				request.request_id = randomUUID();
+				request.chat_record_id = request.request_id;
+			}
+		}
+	} finally {
+		options.signal?.removeEventListener("abort", clear);
+		await queue.finish(performance.now() - startedAt);
+	}
+}
+async function* streamAttempt(options, model, credentials, request, dependencies) {
+	const encodedBytes = qoderEncodeBodyBytes(JSON.stringify(request));
 	const chatUrl = getQoderChatUrl(dependencies.region);
 	const requestController = new AbortController();
 	let headerTimedOut = false;
@@ -2849,10 +3747,7 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 	let lastActivityAt = startedAt;
 	const onCallerAbort = () => requestController.abort(options.signal?.reason);
 	options.signal?.addEventListener("abort", onCallerAbort, { once: true });
-	const headerTimer = setTimeout(() => {
-		headerTimedOut = true;
-		requestController.abort("response header timeout");
-	}, dependencies.responseHeaderTimeoutMs);
+	let headerTimer;
 	const resetIdleTimer = () => {
 		lastActivityAt = performance.now();
 		if (idleTimer !== void 0) clearTimeout(idleTimer);
@@ -2872,69 +3767,118 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 			contextTier: markedTiers.length === 1 ? markedTiers[0][0] : null,
 			context_length: request.parameters.context_length ?? null
 		}));
-		const response = await dependencies.fetch(chatUrl, {
-			method: "POST",
-			headers: {
-				"content-type": "application/json",
-				"accept": "text/event-stream",
-				"cache-control": "no-cache",
-				"accept-encoding": "identity",
-				"x-model-key": options.model || "cmodel",
-				"x-model-source": model?.source || "system",
-				...attributionHeaders(),
-				...buildAuthHeaders(encodedBytes, chatUrl, credentials)
-			},
-			body: encodedBytes,
-			signal: requestController.signal
-		});
-		clearTimeout(headerTimer);
-		reqId = qoderRequestId(response.headers);
-		dependencies.logger?.debug?.("[Qoder Stream] Response headers received", {
-			region: dependencies.region,
-			status: response.status,
-			durationMs: Math.round(performance.now() - startedAt),
-			...reqId === void 0 ? {} : { requestId: reqId }
-		});
-		resetIdleTimer();
-		if (!response.ok) {
+		const compression = new QoderRequestCompression();
+		let response;
+		let activeCredentials = credentials;
+		for (let attempt = 0; attempt < 2; attempt++) {
+			if (options.signal?.aborted) throw aborted$1("Request was aborted.");
+			response = await compression.send({
+				url: chatUrl,
+				protocol: "legacy",
+				body: encodedBytes.toString("latin1"),
+				enabled: dependencies.requestCompression,
+				signal: requestController.signal,
+				logger: dependencies.logger,
+				requestId: request.request_id,
+				dispatch: async (wireBody, headers) => {
+					headerTimer = setTimeout(() => {
+						headerTimedOut = true;
+						requestController.abort("response header timeout");
+					}, dependencies.responseHeaderTimeoutMs);
+					try {
+						return await dependencies.fetch(chatUrl, {
+							method: "POST",
+							headers,
+							body: wireBody,
+							signal: requestController.signal
+						});
+					} finally {
+						clearTimeout(headerTimer);
+					}
+				},
+				headers: {
+					"content-type": "application/json",
+					"accept": "text/event-stream",
+					"cache-control": "no-cache",
+					"connection": "keep-alive",
+					"accept-encoding": "identity",
+					"x-model-key": options.model || "cmodel",
+					"x-model-source": model?.source || "system",
+					...attributionHeaders(),
+					...buildAuthHeaders(encodedBytes, chatUrl, activeCredentials),
+					"X-Request-Id": request.request_id,
+					"X-Session-ID": request.session_id
+				}
+			});
+			clearTimeout(headerTimer);
+			reqId = qoderRequestId(response.headers);
+			dependencies.logger?.debug?.("[Qoder Stream] Response headers received", {
+				region: dependencies.region,
+				status: response.status,
+				attempt: attempt + 1,
+				durationMs: Math.round(performance.now() - startedAt),
+				...reqId === void 0 ? {} : { requestId: reqId }
+			});
+			resetIdleTimer();
+			if (response.ok) break;
 			let bodyText = "";
 			try {
-				bodyText = (await response.text()).trim();
-			} catch {}
-			let detail = "";
-			if (bodyText) try {
-				const parsed = JSON.parse(bodyText);
-				const msg = typeof parsed.message === "string" && parsed.message.trim() ? parsed.message.trim() : void 0;
-				const code = typeof parsed.code === "string" && parsed.code.trim() ? parsed.code.trim() : void 0;
-				if (code && msg) detail = `: ${code}: ${msg}`;
-				else if (msg) detail = `: ${msg}`;
-				else detail = `: ${bodyText.slice(0, 300)}`;
-			} catch {
-				detail = `: ${bodyText.slice(0, 300)}`;
+				bodyText = (await readLimitedText(response, defaultMaxErrorBytes, "Qoder model error response")).trim();
+			} catch (error) {
+				if (requestController.signal.aborted) throw error;
 			}
-			throw qoderHttpError(`Qoder upstream service returned HTTP ${response.status}${detail}.`, {
+			const queued = queuedError(bodyText);
+			if (queued) throw queued;
+			const failure = qoderModelError(`Qoder upstream service returned HTTP ${response.status}`, {
 				status: response.status,
 				headers: response.headers,
-				cause: bodyText || void 0
+				cause: bodyText || void 0,
+				source: "http"
 			});
+			if (attempt === 0 && dependencies.refreshCredentials && canRefreshModelCredentials(failure)) {
+				if (idleTimer !== void 0) clearTimeout(idleTimer);
+				activeCredentials = await dependencies.refreshCredentials(activeCredentials, options.signal);
+				if (activeCredentials.userID !== credentials.userID) throw new QoderLlmError("Qoder subscriber identity changed during authentication recovery.", "AUTH");
+				continue;
+			}
+			throw failure;
 		}
+		if (!response) throw new QoderLlmError("Qoder response is missing.", "EMPTY_RESPONSE");
 		if (!response.body) throw new QoderLlmError("Qoder response contains no readable body stream.", "EMPTY_RESPONSE");
 		let firstChunkDurationMs;
 		let tokenUsage;
 		let finishReason;
 		const streamStartedAt = performance.now();
-		for await (const chunk of parseQoderSse(response.body, { onActivity: resetIdleTimer })) {
-			chunkCount++;
-			if (firstChunkDurationMs === void 0) {
-				firstChunkDurationMs = Math.round(performance.now() - startedAt);
-				dependencies.logger?.debug?.("[Qoder Stream] First chunk received", {
-					durationMs: firstChunkDurationMs,
-					...reqId === void 0 ? {} : { requestId: reqId }
-				});
+		try {
+			for await (const chunk of parseQoderSse(response.body, {
+				queueRecovery: true,
+				onActivity: resetIdleTimer,
+				headers: response.headers,
+				httpStatus: response.status,
+				onControlFrame: (kind) => {
+					if (kind !== "done") dependencies.logger?.warn?.("[Qoder Stream] Control frame skipped", {
+						transport: "legacy",
+						kind,
+						...reqId === void 0 ? {} : { requestId: reqId }
+					});
+				}
+			})) {
+				compression.confirm();
+				chunkCount++;
+				if (firstChunkDurationMs === void 0) {
+					firstChunkDurationMs = Math.round(performance.now() - startedAt);
+					dependencies.logger?.debug?.("[Qoder Stream] First chunk received", {
+						durationMs: firstChunkDurationMs,
+						...reqId === void 0 ? {} : { requestId: reqId }
+					});
+				}
+				if (chunk.type === "usage") tokenUsage = chunk.usage;
+				if (chunk.type === "finish") finishReason = chunk.reason.kind;
+				yield chunk;
 			}
-			if (chunk.type === "usage") tokenUsage = chunk.usage;
-			if (chunk.type === "finish") finishReason = chunk.reason.kind;
-			yield chunk;
+		} catch (error) {
+			if (chunkCount === 0) compression.rejectLegacyError(error);
+			throw error;
 		}
 		dependencies.logger?.debug?.("[Qoder Stream] Stream completed", {
 			durationMs: Math.round(performance.now() - startedAt),
@@ -2967,6 +3911,7 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 			});
 			throw failure;
 		}
+		if (error instanceof QoderModelQueuedError) throw error;
 		if (error instanceof QoderLlmError) {
 			dependencies.logger?.error?.("[Qoder Stream] Request failed", redactLogValue(error), {
 				chunkCount,
@@ -2991,13 +3936,399 @@ async function* streamQoderChat(options, model, credentials, messages, dependenc
 	}
 }
 //#endregion
+//#region src/qoder/transport/browser-authorization.ts
+/** qodercli 1.1.73 PKCE device flow. No website password or agent runtime is needed. */
+var QoderBrowserAuthorization = class {
+	options;
+	constructor(options) {
+		this.options = options;
+	}
+	async begin(signal) {
+		signal.throwIfAborted();
+		const verifier = randomBytes(48).toString("base64url");
+		const challenge = createHash("sha256").update(verifier).digest("base64url");
+		const nonce = randomUUID();
+		const machineID = (this.options.resolveMachineId ?? (() => getMachineId(qoderMachineIdPaths(this.options.region))))();
+		const query = new URLSearchParams({
+			challenge,
+			challenge_method: "S256",
+			nonce,
+			machine_id: machineID,
+			client_id: "e883ade2-e6e3-4d6d-adf7-f92ceff5fdcb"
+		});
+		const origin = this.options.region === "china" ? "https://qoder.cn" : "https://qoder.com";
+		const expiresAt = Date.now() + (this.options.loginTimeoutMs ?? 3e5);
+		const deadline = AbortSignal.timeout(Math.max(1, expiresAt - Date.now()));
+		const combined = AbortSignal.any([signal, deadline]);
+		return {
+			url: `${origin}/device/selectAccounts?${query}`,
+			expiresAt,
+			complete: async () => {
+				try {
+					const poll = new URL(`${resolveQoderEndpoints(this.options.region).openApiUrl}/api/v1/deviceToken/poll`);
+					poll.search = new URLSearchParams({
+						nonce,
+						verifier,
+						challenge_method: "S256"
+					}).toString();
+					while (!combined.aborted) {
+						let response;
+						try {
+							response = await (this.options.fetch ?? fetch)(poll, {
+								headers: {
+									accept: "application/json",
+									"user-agent": defaultUserAgent
+								},
+								signal: AbortSignal.any([combined, AbortSignal.timeout(15e3)])
+							});
+						} catch {
+							if (combined.aborted) break;
+							await setTimeout$1(this.options.pollIntervalMs ?? 1e3, void 0, { signal: combined });
+							continue;
+						}
+						if (response.status === 404 || response.status >= 500 || response.status === 429) {
+							await response.body?.cancel();
+							await setTimeout$1(this.options.pollIntervalMs ?? 1e3, void 0, { signal: combined });
+							continue;
+						}
+						if (!response.ok) {
+							await response.body?.cancel();
+							throw new QoderLlmError("Qoder browser authorization was rejected.", "AUTH");
+						}
+						const raw = JSON.parse(await readLimitedText(response, defaultMaxJsonBytes, "Qoder browser authorization"));
+						return await this.grant(raw, machineID, combined);
+					}
+					throw new QoderLlmError("Qoder browser login timed out.", "TIMEOUT");
+				} catch (error) {
+					if (signal.aborted) throw new QoderLlmError("Qoder browser login was cancelled.", "ABORTED");
+					if (deadline.aborted) throw new QoderLlmError("Qoder browser login timed out.", "TIMEOUT");
+					if (error instanceof QoderLlmError) throw error;
+					throw new QoderLlmError("Qoder browser authorization returned an invalid response.", "MALFORMED_RESPONSE");
+				}
+			}
+		};
+	}
+	async refresh(grant, signal, rejectedToken) {
+		if (grant.region !== this.options.region) throw new QoderLlmError("Qoder authorization region mismatch.", "AUTH");
+		if (!(rejectedToken !== void 0 && rejectedToken === grant.credentials.authToken) && grant.expiresAt > Date.now() + 3e5) return grant;
+		if (grant.refreshExpiresAt !== void 0 && grant.refreshExpiresAt <= Date.now()) throw new QoderLlmError("Qoder browser authorization expired. Sign in again.", "AUTH");
+		const raw = await openApiJsonRequest(this.options.fetch ?? fetch, {
+			url: `${resolveQoderEndpoints(this.options.region).openApiUrl}/api/v1/deviceToken/refresh`,
+			body: {
+				refresh_token: grant.refreshToken,
+				machine_id: grant.credentials.machineID
+			},
+			signal,
+			operation: "BrowserRefresh"
+		});
+		const token = raw.device_token ?? raw.token;
+		if (!token || typeof token !== "string" || !raw.refresh_token || typeof raw.refresh_token !== "string") throw new QoderLlmError("Qoder refresh returned incomplete credentials.", "MALFORMED_RESPONSE");
+		return {
+			...grant,
+			credentials: {
+				...grant.credentials,
+				authToken: token
+			},
+			refreshToken: raw.refresh_token,
+			expiresAt: deviceExpiry(raw.expires_at, raw.expires_in) ?? Date.now() + 864e5,
+			refreshExpiresAt: refreshExpiry(raw) ?? grant.refreshExpiresAt
+		};
+	}
+	async grant(raw, machineID, signal) {
+		if (!raw.token || typeof raw.token !== "string" || !raw.refresh_token || typeof raw.refresh_token !== "string") throw new QoderLlmError("Qoder browser authorization returned incomplete credentials.", "MALFORMED_RESPONSE");
+		const credentials = await new QoderAuthManager({
+			region: this.options.region,
+			fetch: this.options.fetch
+		}).credentialsForToken(raw.token, machineID, signal);
+		return {
+			id: randomUUID(),
+			region: this.options.region,
+			credentials,
+			refreshToken: raw.refresh_token,
+			expiresAt: deviceExpiry(raw.expires_at, raw.expires_in) ?? Date.now() + 864e5,
+			refreshExpiresAt: refreshExpiry(raw)
+		};
+	}
+};
+function refreshExpiry(raw) {
+	return deviceExpiry(raw.refresh_token_expires_at, raw.refresh_token_expires_in);
+}
+/** Device-flow durations are seconds, including multi-day refresh-token lifetimes. */
+function deviceExpiry(absolute, seconds) {
+	if (absolute !== void 0) {
+		const parsed = typeof absolute === "string" ? Date.parse(absolute) : absolute > 0xe8d4a51000 ? absolute : absolute * 1e3;
+		if (Number.isFinite(parsed)) return parsed;
+	}
+	if (typeof seconds === "number" && Number.isFinite(seconds * 1e3) && seconds > 0) return Date.now() + seconds * 1e3;
+}
+//#endregion
+//#region src/qoder/transport/wire/model-server-sse.ts
+function malformedFrameDetails(rawData, eventType, error) {
+	const marker = /^\[[A-Z][A-Z_]{0,63}\]/u.exec(rawData)?.[0];
+	const safeEventType = eventType && /^[a-z][\w.-]{0,40}$/iu.test(eventType) ? eventType : void 0;
+	const message = error instanceof SyntaxError ? error.message : "";
+	const offset = /\bposition (\d+)\b/u.exec(message)?.[1];
+	const first = rawData.charAt(0);
+	const last = rawData.charAt(rawData.length - 1);
+	return {
+		...safeEventType === void 0 ? {} : { eventType: safeEventType },
+		...marker === void 0 ? {} : { marker },
+		chars: rawData.length,
+		lines: rawData.split("\n").length,
+		shape: rawData.startsWith("data:") ? "nested-data" : first === "{" ? "object" : first === "[" ? "array" : first === "\"" ? "string" : "other",
+		endsWith: last === "}" ? "object" : last === "]" ? "array" : last === "\"" ? "string" : "other",
+		syntax: /end of JSON input|Unterminated string/u.test(message) || offset === String(rawData.length) ? "truncated" : /non-whitespace character after JSON/u.test(message) ? "trailing-data" : /control character/u.test(message) ? "invalid-control" : "invalid-json",
+		...offset === void 0 ? {} : { syntaxOffset: Number(offset) },
+		...rawData.includes("\r") ? { hasCarriageReturn: true } : {},
+		...rawData.includes("�") ? { hasReplacementCharacter: true } : {}
+	};
+}
+function decodeModelServerFrame(rawData, options, eventType) {
+	const controlKind = qoderControlFrameKind(rawData);
+	if (controlKind !== void 0) {
+		options.onControlFrame?.(controlKind);
+		return;
+	}
+	let value;
+	try {
+		value = JSON.parse(rawData);
+	} catch (error) {
+		const details = malformedFrameDetails(rawData, eventType, error);
+		options.onMalformedFrame?.(details);
+		if (eventType === "error") throw qoderModelServerError(options.httpStatus ?? 200, { error: { message: "Qoder model-server emitted a non-JSON error SSE event." } }, "sse", options.headers);
+		throw new QoderMalformedJsonFrameError(details.syntax === "truncated", /^\{\s*"choices"\s*:\s*\[\s*\]\s*[,}]/u.test(rawData));
+	}
+	if (eventType === "error") throw qoderModelServerError(options.httpStatus ?? 200, value, "sse", options.headers);
+	if (value === null || typeof value !== "object") throw new QoderLlmError("Malformed model-server SSE frame.", "MALFORMED_RESPONSE");
+	const payload = value;
+	if (payload.error !== void 0) throw qoderModelServerError(options.httpStatus ?? 200, payload, "sse", options.headers);
+	return payload;
+}
+function parseModelServerSse(stream, options = {}) {
+	return parseQoderChunks(stream, decodeModelServerFrame, options, {
+		ignoreMalformedAfterFinish: true,
+		allowIncompleteAuxiliaryFrames: true,
+		recoverUnprefixedContinuations: true
+	});
+}
+//#endregion
+//#region src/qoder/transport/model-server.ts
+/** Bearer-authenticated model-server HTTP SSE transport. */
+/** Convert the shared Qoder turn into the model-server's OpenAI-shaped request. */
+function modelServerBody(request) {
+	return {
+		model: request.modelKey,
+		messages: request.messages,
+		stream: true,
+		stream_options: { include_usage: true },
+		metadata: {
+			context: {
+				request_id: request.requestId,
+				request_set_id: request.requestSetId,
+				session_id: request.sessionId,
+				task_id: request.taskId,
+				client_type: "5"
+			},
+			business: request.business
+		},
+		...request.tools.length > 0 ? { tools: request.tools } : {},
+		max_tokens: request.maxTokens,
+		...request.contextLength === void 0 ? {} : { context_length: request.contextLength },
+		...request.reasoningEffort === void 0 ? {} : { reasoning_effort: request.reasoningEffort }
+	};
+}
+async function* streamModelServerChat(options, model, credentials, messages, dependencies) {
+	const identityScope = options.purpose === void 0 && dependencies.hostRunId !== void 0 ? JSON.stringify([dependencies.region, dependencies.hostRunId]) : dependencies.region;
+	const request = await prepareQoderRequest(options, credentials.userID, messages, model, void 0, void 0, identityScope);
+	const body = JSON.stringify(modelServerBody(request));
+	const startedAt = performance.now();
+	dependencies.logger?.debug?.("[Qoder Stream] Request context", {
+		requestId: request.requestId,
+		model: request.modelKey,
+		region: dependencies.region,
+		purpose: options.purpose ?? "chat",
+		transport: "http"
+	});
+	const controller = new AbortController();
+	const onAbort = () => controller.abort(options.signal?.reason);
+	options.signal?.addEventListener("abort", onAbort, { once: true });
+	if (options.signal?.aborted) onAbort();
+	let headerTimedOut = false;
+	let idleTimedOut = false;
+	let headerTimer;
+	let idleTimer;
+	const clearTimers = () => {
+		if (headerTimer) clearTimeout(headerTimer);
+		if (idleTimer) clearTimeout(idleTimer);
+	};
+	const resetIdle = () => {
+		if (idleTimer) clearTimeout(idleTimer);
+		idleTimer = setTimeout(() => {
+			idleTimedOut = true;
+			controller.abort("stream idle timeout");
+		}, dependencies.streamIdleTimeoutMs);
+	};
+	try {
+		const compression = new QoderRequestCompression();
+		let activeCredentials = credentials;
+		for (let attempt = 0; attempt < 2; attempt++) {
+			if (controller.signal.aborted) throw new QoderLlmError("Qoder model request was aborted.", "ABORTED");
+			let response;
+			try {
+				response = await compression.send({
+					url: getQoderModelServerUrl(dependencies.region),
+					protocol: "http",
+					body,
+					enabled: dependencies.requestCompression,
+					signal: controller.signal,
+					logger: dependencies.logger,
+					requestId: request.requestId,
+					onRejection: async (rejection) => {
+						dependencies.logger?.warn?.("[Qoder Stream] Compression rejected", {
+							requestId: request.requestId,
+							status: rejection.status,
+							contentType: rejection.contentType,
+							serverRequestId: rejection.serverRequestId,
+							bodyTruncated: rejection.bodyTruncated,
+							reason: rejection.reason,
+							request: compression.diagnostics
+						});
+					},
+					dispatch: async (wireBody, headers) => {
+						headerTimer = setTimeout(() => {
+							headerTimedOut = true;
+							controller.abort("response header timeout");
+						}, dependencies.responseHeaderTimeoutMs);
+						try {
+							return await dependencies.fetch(getQoderModelServerUrl(dependencies.region), {
+								method: "POST",
+								headers,
+								body: wireBody,
+								signal: controller.signal
+							});
+						} finally {
+							if (headerTimer) clearTimeout(headerTimer);
+						}
+					},
+					headers: {
+						...attributionHeaders(),
+						...qoderModelClientHeaders(),
+						"Accept": "text/event-stream",
+						"Content-Type": "application/json",
+						"Authorization": `Bearer ${activeCredentials.authToken}`,
+						"X-Request-ID": request.requestId,
+						"X-Session-ID": request.sessionId
+					}
+				});
+			} finally {
+				if (headerTimer) clearTimeout(headerTimer);
+			}
+			const responseRequestId = qoderRequestId(response.headers);
+			dependencies.logger?.debug?.("[Qoder Stream] Response headers received", {
+				region: dependencies.region,
+				transport: "http",
+				status: response.status,
+				contentType: response.headers.get("content-type"),
+				contentEncoding: response.headers.get("content-encoding"),
+				attempt: attempt + 1,
+				durationMs: Math.round(performance.now() - startedAt),
+				...responseRequestId === void 0 ? {} : { requestId: responseRequestId }
+			});
+			if (!response.ok) {
+				let cause;
+				resetIdle();
+				try {
+					cause = await readLimitedText(response, defaultMaxErrorBytes, "Qoder model-server error");
+				} catch {
+					cause = void 0;
+				}
+				if (idleTimer) clearTimeout(idleTimer);
+				if (controller.signal.aborted) throw new QoderLlmError("Qoder model-server error body was interrupted.", "ABORTED");
+				dependencies.logger?.warn?.("[Qoder Stream] HTTP request rejected", {
+					requestId: request.requestId,
+					status: response.status,
+					contentType: response.headers.get("content-type"),
+					serverRequestId: responseRequestId,
+					request: compression.diagnostics,
+					bodyAvailable: typeof cause === "string"
+				});
+				const error = qoderModelServerError(response.status, cause, "http", response.headers);
+				if (attempt === 0 && canRefreshModelCredentials(error)) {
+					activeCredentials = await dependencies.refreshCredentials(activeCredentials, options.signal);
+					if (activeCredentials.userID !== credentials.userID) throw new QoderLlmError("Qoder subscriber identity changed during authentication recovery.", "AUTH");
+					continue;
+				}
+				throw error;
+			}
+			if (!response.body) throw new QoderLlmError("Qoder model-server response has no body.", "EMPTY_RESPONSE");
+			resetIdle();
+			const streamStartedAt = performance.now();
+			let chunkCount = 0;
+			let firstChunkReceived = false;
+			let finishReason;
+			for await (const chunk of parseModelServerSse(response.body, {
+				headers: response.headers,
+				httpStatus: response.status,
+				onActivity: resetIdle,
+				onControlFrame: (kind) => {
+					if (kind !== "done") dependencies.logger?.warn?.("[Qoder Stream] Control frame skipped", {
+						transport: "http",
+						kind,
+						...responseRequestId === void 0 ? {} : { requestId: responseRequestId }
+					});
+				},
+				onMalformedFrame: (details) => dependencies.logger?.warn?.("[Qoder Stream] Malformed SSE frame", {
+					transport: "http",
+					...details,
+					...responseRequestId === void 0 ? {} : { requestId: responseRequestId }
+				})
+			})) {
+				compression.confirm();
+				chunkCount++;
+				if (!firstChunkReceived) {
+					firstChunkReceived = true;
+					dependencies.logger?.debug?.("[Qoder Stream] First chunk received", {
+						transport: "http",
+						durationMs: Math.round(performance.now() - startedAt),
+						...responseRequestId === void 0 ? {} : { requestId: responseRequestId }
+					});
+				}
+				if (chunk.type === "finish") finishReason = chunk.reason.kind;
+				yield chunk;
+			}
+			dependencies.logger?.debug?.("[Qoder Stream] Stream completed", {
+				transport: "http",
+				durationMs: Math.round(performance.now() - startedAt),
+				streamDurationMs: Math.round(performance.now() - streamStartedAt),
+				chunkCount,
+				...finishReason === void 0 ? {} : { finishReason },
+				...responseRequestId === void 0 ? {} : { requestId: responseRequestId }
+			});
+			return;
+		}
+	} catch (error) {
+		if (options.signal?.aborted) throw new QoderLlmError("Qoder model request was aborted.", "ABORTED");
+		if (headerTimedOut) throw new QoderLlmError("Qoder model-server response header timeout.", "TIMEOUT");
+		if (idleTimedOut) throw new QoderLlmError("Qoder model-server stream idle timeout.", "TIMEOUT");
+		throw error;
+	} finally {
+		clearTimers();
+		options.signal?.removeEventListener("abort", onAbort);
+		controller.abort("stream finished");
+	}
+}
+//#endregion
 //#region src/qoder/transport/default-transport.ts
 const defaultStreamIdleTimeoutMs = 300 * 1e3;
 function aborted(message) {
 	return new QoderLlmError(message, "ABORTED");
 }
 var DefaultQoderTransport = class {
+	authorization;
+	resolveCredential;
 	region;
+	requestCompression;
+	modelTransport;
 	resolvePat;
 	fetchImpl;
 	logger;
@@ -3009,19 +4340,34 @@ var DefaultQoderTransport = class {
 	modelFlights = new SingleFlight();
 	attachments;
 	imageUploader;
-	searchClient;
+	credentialLeases = /* @__PURE__ */ new WeakMap();
 	preserveThinking;
+	modelQueueMaxWaitMs;
+	onQueueUpdate;
+	captureQueueLeaseOwner;
 	constructor(options) {
+		this.modelQueueMaxWaitMs = options.modelQueueMaxWaitMs;
+		this.onQueueUpdate = options.onQueueUpdate;
+		this.captureQueueLeaseOwner = options.captureQueueLeaseOwner;
 		this.region = options.region;
+		this.requestCompression = options.requestCompression ?? false;
+		this.modelTransport = options.modelTransport ?? "legacy";
 		this.resolvePat = options.resolvePat;
+		this.resolveCredential = options.resolveCredential;
+		this.authorization = new QoderBrowserAuthorization(options);
 		this.fetchImpl = options.fetch ?? globalThis.fetch;
 		this.logger = options.logger;
+		this.logger?.debug?.("[Qoder Transport] Request compression configuration", {
+			implementation: "zstd-v1",
+			node: process.version,
+			requestCompression: this.requestCompression
+		});
 		this.streamIdleTimeoutMs = options.streamIdleTimeoutMs ?? 3e5;
 		this.responseHeaderTimeoutMs = options.responseHeaderTimeoutMs ?? 6e4;
 		this.metadataTimeoutMs = options.metadataTimeoutMs;
 		this.attachments = options.attachments;
 		this.preserveThinking = options.preserveThinking;
-		this.auth = new QoderAuthService({
+		this.auth = new QoderAuthManager({
 			fetch: this.fetchImpl,
 			logger: this.logger,
 			region: this.region,
@@ -3040,24 +4386,10 @@ var DefaultQoderTransport = class {
 			region: this.region,
 			...options.imageUploadTimeoutMs === void 0 ? {} : { timeoutMs: options.imageUploadTimeoutMs },
 			...options.imageUrlCacheTtlMs === void 0 ? {} : { cacheTtlMs: options.imageUrlCacheTtlMs },
-			refreshCredentials: async (signal) => {
-				const pat = await this.requirePat(signal);
-				this.auth.clear(pat);
-				return this.auth.getCredentials(pat, signal);
-			}
-		});
-		this.searchClient = new QoderSearchClient({
-			fetch: this.fetchImpl,
-			logger: this.logger,
-			region: this.region,
-			resolveCredentials: async (signal) => {
-				const pat = await this.requirePat(signal);
-				return this.auth.getCredentials(pat, signal);
-			},
-			refreshCredentials: async (signal) => {
-				const pat = await this.requirePat(signal);
-				this.auth.clear(pat);
-				return this.auth.getCredentials(pat, signal);
+			refreshCredentials: async (rejected, signal) => {
+				const lease = rejected && this.credentialLeases.get(rejected);
+				if (!lease) throw aborted("Qoder image credentials are no longer available.");
+				return lease.resolve(signal, rejected.authToken);
 			}
 		});
 	}
@@ -3065,28 +4397,54 @@ var DefaultQoderTransport = class {
 		return this.generate(options, model);
 	}
 	async discoverModels(signal) {
-		const pat = await this.requirePat(signal);
-		const key = opaqueCredentialKey(pat);
+		const lease = await this.lease(signal);
+		const key = lease.key;
 		return this.modelFlights.run(key, signal, async (sharedSignal) => {
-			const credentials = await this.auth.getCredentials(pat, sharedSignal);
-			return retryMetadataRead(sharedSignal, () => fetchQoderModels(credentials, {
+			const credentials = await lease.resolve(sharedSignal);
+			const read = (resolved) => retryMetadataRead(sharedSignal, () => fetchQoderModels(resolved, {
 				fetch: this.fetchImpl,
 				signal: sharedSignal,
 				logger: this.logger,
 				region: this.region,
 				timeoutMs: this.metadataTimeoutMs
 			}));
+			try {
+				return await read(credentials);
+			} catch (error) {
+				if (!(error instanceof QoderLlmError) || error.code !== "AUTH") throw error;
+				return read(await lease.resolve(sharedSignal, credentials.authToken));
+			}
 		}, () => aborted("Qoder model discovery was aborted."));
 	}
 	async readAccount(options) {
-		const pat = await this.requirePat(options?.signal);
-		return this.usage.readAccount(pat, {
-			force: options?.force,
+		const lease = await this.lease(options?.signal);
+		let used;
+		const read = (force = options?.force) => this.usage.readWithCredentials(lease.key, async (signal) => {
+			used = await lease.resolve(signal);
+			return used;
+		}, {
+			force,
 			signal: options?.signal
 		});
+		try {
+			return await read();
+		} catch (error) {
+			if (!(error instanceof QoderLlmError) || error.code !== "AUTH" || !used) throw error;
+			await lease.resolve(options?.signal, used.authToken);
+			return read(true);
+		}
 	}
 	async searchWeb(request, signal) {
-		return this.searchClient.search(request, signal);
+		const lease = await this.lease(signal);
+		return new QoderSearchClient({
+			fetch: this.fetchImpl,
+			logger: this.logger,
+			region: this.region,
+			resolveCredentials: async (nextSignal) => {
+				return lease.resolve(nextSignal);
+			},
+			refreshCredentials: (rejected, nextSignal) => lease.resolve(nextSignal, rejected.authToken)
+		}).search(request, signal);
 	}
 	async requirePat(signal) {
 		if (signal?.aborted) throw aborted("Qoder request was aborted.");
@@ -3095,22 +4453,51 @@ var DefaultQoderTransport = class {
 		if (signal?.aborted) throw aborted("Qoder request was aborted.");
 		return pat;
 	}
+	async lease(signal) {
+		if (signal?.aborted) throw aborted("Qoder request was aborted.");
+		const managed = await this.resolveCredential?.(signal);
+		if (managed) return managed;
+		const pat = await this.requirePat(signal);
+		return {
+			key: opaqueCredentialKey(pat),
+			resolve: async (nextSignal, rejectedToken) => {
+				const current = await this.auth.getCredentials(pat, nextSignal);
+				if (rejectedToken !== void 0 && current.authToken === rejectedToken) return this.auth.refreshCredentials(pat, current, nextSignal);
+				return current;
+			}
+		};
+	}
 	async *generate(options, model) {
 		if (options.signal?.aborted) throw aborted("Request was aborted prior to generation.");
+		const queueOwner = options.sessionId === void 0 ? void 0 : this.captureQueueLeaseOwner?.(String(options.sessionId));
 		validateQoderRequestShape(options, model);
-		const pat = await this.requirePat(options.signal);
-		const credentials = await this.auth.getCredentials(pat, options.signal);
+		const lease = await this.lease(options.signal);
+		const credentials = await lease.resolve(options.signal);
+		this.credentialLeases.set(credentials, lease);
 		const messages = await translateQoderMessages(options, this.attachments, {
 			uploader: this.imageUploader,
 			credentials,
 			preserveThinking: this.preserveThinking
 		});
-		yield* streamQoderChat(options, model, await this.auth.getCredentials(pat, options.signal), messages, {
+		const chatCredentials = await lease.resolve(options.signal);
+		yield* (this.modelTransport === "legacy" ? streamQoderChat : streamModelServerChat)(options, model, chatCredentials, messages, {
 			fetch: this.fetchImpl,
 			logger: this.logger,
 			region: this.region,
+			requestCompression: this.requestCompression,
 			responseHeaderTimeoutMs: this.responseHeaderTimeoutMs,
-			streamIdleTimeoutMs: this.streamIdleTimeoutMs
+			streamIdleTimeoutMs: this.streamIdleTimeoutMs,
+			modelQueueMaxWaitMs: this.modelQueueMaxWaitMs,
+			onQueueUpdate: this.onQueueUpdate,
+			hostRunId: queueOwner?.runId,
+			onQueueLease: queueOwner?.retain,
+			resolveCredentials: async (refresh, signal) => {
+				const current = await lease.resolve(signal);
+				return refresh ? lease.resolve(signal, current.authToken) : current;
+			},
+			refreshCredentials: async (rejected, signal) => {
+				return lease.resolve(signal, rejected.authToken);
+			}
 		});
 	}
 };
@@ -3150,6 +4537,7 @@ const catalogModel = z.object({
 });
 const modelsByRegionSchema = z.dict(z.array(catalogModel));
 const Config = z.object({
+	modelQueueMaxWaitMs: z.number().step(1).min(1).max(2147483647).default(defaultModelQueueMaxWaitMs).description("Maximum cumulative model queue wait in milliseconds; changes apply to new calls"),
 	region: z.union(["global", "china"]).default("global"),
 	modelsByRegion: modelsByRegionSchema.default({}),
 	streamIdleTimeoutMs: z.number().step(1).min(1).default(defaultStreamIdleTimeoutMs),
@@ -3159,7 +4547,9 @@ const Config = z.object({
 		"auto",
 		"always",
 		"disabled"
-	]).default("auto")
+	]).default("auto"),
+	requestCompression: z.boolean().default(false),
+	modelTransport: z.union(["http", "legacy"]).default("legacy")
 });
 const PluginConfig = typeof Config.volatile === "function" ? Config.volatile() : Config;
 function readConfig(value) {
@@ -3180,6 +4570,237 @@ function modelsFor(config, region) {
 	return resolveModels(config.modelsByRegion?.[region]);
 }
 //#endregion
+//#region src/dsh/queue-leases.ts
+/** Correlate transport-owned release actions with committed DSH turn boundaries. */
+/** Bind committed boundaries and recover ownership when loaded during an open turn. */
+function bindQoderQueueLeases(ctx, leases) {
+	ctx.on("session/event", (session, event) => {
+		if (event.type === "turn/start") leases.start(session.id, event.data.turn);
+		if (event.type === "turn/end") leases.end(session.id, event.data.turn);
+	});
+	ctx.on("agent/request", async ({ agent, turn }, next) => {
+		leases.start(agent.session.id, turn);
+		return next();
+	});
+}
+var QoderQueueLeases = class {
+	runs = /* @__PURE__ */ new Map();
+	pending = /* @__PURE__ */ new Set();
+	disposed = false;
+	start(sessionId, turn) {
+		if (this.disposed || this.runs.get(sessionId)?.turn === turn) return;
+		this.end(sessionId);
+		this.runs.set(sessionId, {
+			turn,
+			runId: randomUUID(),
+			leases: /* @__PURE__ */ new Map()
+		});
+	}
+	retain = (lease) => {
+		const run = this.runs.get(lease.sessionId);
+		if (this.disposed || !run) return false;
+		if (!run.leases.has(lease.key)) run.leases.set(lease.key, lease);
+		return true;
+	};
+	/** Bind ownership before provider I/O; a late old call cannot join a newer turn. */
+	capture = (sessionId) => {
+		const owner = this.runs.get(sessionId);
+		if (!owner || this.disposed) return void 0;
+		return {
+			runId: owner.runId,
+			retain: (lease) => lease.sessionId === sessionId && this.runs.get(sessionId) === owner && this.retain(lease)
+		};
+	};
+	async end(sessionId, turn) {
+		const run = this.runs.get(sessionId);
+		if (!run || turn !== void 0 && turn !== run.turn) return;
+		this.runs.delete(sessionId);
+		const cleanup = Promise.allSettled([...run.leases.values()].map((lease) => Promise.resolve().then(() => lease.release())));
+		this.pending.add(cleanup);
+		try {
+			await cleanup;
+		} finally {
+			this.pending.delete(cleanup);
+		}
+	}
+	async dispose() {
+		this.disposed = true;
+		await Promise.allSettled([...this.runs.keys()].map((id) => this.end(id)));
+		await Promise.allSettled([...this.pending]);
+	}
+};
+//#endregion
+//#region src/dsh/queue-status.ts
+var QoderQueueStatusStore = class {
+	calls = /* @__PURE__ */ new Map();
+	active = true;
+	update = (event) => {
+		if (!this.active) return;
+		if (event.type === "clear") this.calls.delete(event.callId);
+		else this.calls.set(event.snapshot.callId, { ...event.snapshot });
+	};
+	read(sessionId) {
+		return [...this.calls.values()].filter((value) => value.sessionId === sessionId).map((value) => ({ ...value }));
+	}
+	dispose() {
+		this.active = false;
+		this.calls.clear();
+	}
+};
+//#endregion
+//#region src/dsh/catalog-lifecycle.ts
+/** Region-scoped Qoder model discovery, effective catalogs, and advisory persistence. */
+var QoderCatalogLifecycle = class {
+	options;
+	catalogs = {
+		global: {
+			models: [],
+			generation: 0,
+			expiresAt: 0,
+			dirty: false,
+			retryRequested: false
+		},
+		china: {
+			models: [],
+			generation: 0,
+			expiresAt: 0,
+			dirty: false,
+			retryRequested: false
+		}
+	};
+	settings;
+	disposed = false;
+	activeTransport;
+	activeRegion;
+	constructor(options) {
+		this.options = options;
+	}
+	/** Observe every transport replacement, including switching away and back. */
+	observeTransport() {
+		const transport = this.options.resolveTransport();
+		const region = this.options.region();
+		if (transport === this.activeTransport && region === this.activeRegion) return;
+		if (this.activeRegion !== void 0) {
+			const previous = this.catalogs[this.activeRegion];
+			previous.generation++;
+			previous.inflight = void 0;
+		}
+		this.activeTransport = transport;
+		this.activeRegion = region;
+		const state = this.catalogs[region];
+		state.generation++;
+		state.expiresAt = 0;
+		state.inflight = void 0;
+	}
+	models() {
+		this.observeTransport();
+		const region = this.options.region();
+		return mergeQoderDiscoveryMetadata(this.options.configuredModels(region), this.catalogs[region].models);
+	}
+	/** Subscriber replacement must not retain another subscriber's discovered capabilities. */
+	clearDiscovered() {
+		for (const state of Object.values(this.catalogs)) {
+			state.models = [];
+			state.generation++;
+			state.expiresAt = 0;
+			state.inflight = void 0;
+			state.dirty = false;
+		}
+	}
+	/** Automatic reads join the newest discovery and never wait for settings writes. */
+	async refresh() {
+		while (!this.disposed) {
+			this.observeTransport();
+			const region = this.options.region();
+			const state = this.catalogs[region];
+			const transport = this.activeTransport;
+			const pending = state.inflight ?? (Date.now() >= state.expiresAt ? this.discover() : void 0);
+			await pending?.catch(() => {});
+			this.observeTransport();
+			if (this.activeTransport !== transport || this.activeRegion !== region) continue;
+			if (state.inflight && state.inflight !== pending) continue;
+			return;
+		}
+	}
+	/** Explicit discovery supersedes older work as soon as it starts, even if it fails. */
+	discover(signal, requestTransport) {
+		if (this.disposed || signal?.aborted) return Promise.reject(new QoderLlmError("Qoder model discovery was aborted.", "ABORTED"));
+		this.observeTransport();
+		const region = this.options.region();
+		const state = this.catalogs[region];
+		const transport = this.activeTransport;
+		const generation = ++state.generation;
+		const pending = Promise.resolve().then(() => (requestTransport ?? transport).discoverModels(signal)).then((models) => {
+			this.observeTransport();
+			if (!this.disposed && this.activeTransport === transport && this.activeRegion === region && state.generation === generation) {
+				state.models = models.map(cloneCatalogModel);
+				state.expiresAt = Date.now() + 300 * 1e3;
+				state.dirty = true;
+				this.schedulePersistence(region);
+				try {
+					Promise.resolve(this.options.onDiscovered?.(transport, state.models)).catch(() => {});
+				} catch {}
+			}
+			return models;
+		}).finally(() => {
+			if (state.inflight === pending) state.inflight = void 0;
+		});
+		state.inflight = pending;
+		return pending;
+	}
+	bindSettings(settings) {
+		this.settings = settings;
+		this.retryPersistence();
+	}
+	/** Called by settings changes/reattachment; no timer retries or fallback writes. */
+	retryPersistence() {
+		for (const region of ["global", "china"]) {
+			const state = this.catalogs[region];
+			if (state.models.length === 0) continue;
+			state.dirty = true;
+			this.schedulePersistence(region);
+		}
+	}
+	dispose() {
+		this.disposed = true;
+		this.settings = void 0;
+		for (const state of Object.values(this.catalogs)) state.generation++;
+	}
+	schedulePersistence(region) {
+		const state = this.catalogs[region];
+		const settings = this.settings;
+		if (this.disposed || !settings || !state.dirty) return;
+		if (state.writing) {
+			state.retryRequested = true;
+			return;
+		}
+		state.retryRequested = false;
+		const writing = Promise.resolve().then(() => this.persist(region, settings)).catch((error) => {
+			this.options.onPersistenceError?.(error);
+		}).finally(() => {
+			if (state.writing === writing) state.writing = void 0;
+			if (this.settings !== settings || state.retryRequested) this.schedulePersistence(region);
+		});
+		state.writing = writing;
+	}
+	async persist(region, settings) {
+		const state = this.catalogs[region];
+		while (!this.disposed && this.settings === settings && state.dirty) {
+			const snapshot = settings.read(region);
+			if (!snapshot) return;
+			const enriched = modelsFor(Config({ modelsByRegion: { [region]: mergeQoderDiscoveryMetadata(snapshot.models, state.models) } }), region);
+			state.dirty = false;
+			if (hasSameQoderDiscoveryMetadata(snapshot.models, enriched)) continue;
+			try {
+				await settings.write(region, enriched, snapshot.revision);
+			} catch (error) {
+				state.dirty = true;
+				if (!(error instanceof SettingsConflictError)) throw error;
+			}
+		}
+	}
+};
+//#endregion
 //#region src/dsh/provider.ts
 /** DSH model provider route, matching the plugin package name. */
 const QODER_PROVIDER_ID = "dsh-provider-qoder";
@@ -3201,12 +4822,12 @@ var QoderAdapter = class extends LlmAdapter {
 	catalogModels;
 	providerId;
 	providerName;
-	onModelsDiscovered;
-	discoveries = /* @__PURE__ */ new WeakMap();
+	catalog;
 	historyRegion;
 	historyRegionChanged = false;
 	region;
 	sessionTiers = /* @__PURE__ */ new Map();
+	tierListeners = /* @__PURE__ */ new Set();
 	sessions;
 	agents;
 	constructor(options) {
@@ -3215,8 +4836,13 @@ var QoderAdapter = class extends LlmAdapter {
 		this.catalogModels = options.models && options.models.length > 0 ? options.models : defaultModels;
 		this.providerId = options.providerId ?? "dsh-provider-qoder";
 		this.providerName = options.providerName ?? "Qoder";
-		this.onModelsDiscovered = options.onModelsDiscovered;
 		this.region = options.region ?? (() => "global");
+		this.catalog = options.catalog ?? new QoderCatalogLifecycle({
+			resolveTransport: this.resolveTransport,
+			region: this.region,
+			configuredModels: () => this.catalogModels,
+			onDiscovered: options.onModelsDiscovered
+		});
 		this.historyRegion = this.region();
 		this.sessions = options.sessions;
 		this.agents = options.agents;
@@ -3229,6 +4855,31 @@ var QoderAdapter = class extends LlmAdapter {
 			sessionId,
 			modelId
 		]), tierKey);
+		for (const listener of this.tierListeners) try {
+			listener({
+				region,
+				sessionId,
+				modelId
+			});
+		} catch {}
+	}
+	subscribeSessionTiers(listener) {
+		this.tierListeners.add(listener);
+		return () => {
+			this.tierListeners.delete(listener);
+		};
+	}
+	readSessionTier(scope) {
+		const { region, sessionId, modelId } = scope;
+		if (region !== this.region() || !sessionId || this.sessions && !this.sessions.get(sessionId)) throw new QoderLlmError("Invalid session context tier scope.", "INVALID_REQUEST");
+		const model = this.resolveEffectiveModelForSession(modelId, sessionId);
+		const tier = model && resolveContextTier(model, model.contextTier);
+		if (!tier) throw new QoderLlmError("Model has no context tiers.", "INVALID_REQUEST");
+		return {
+			...scope,
+			tierKey: tier.key,
+			tokenCount: tier.tokenCount
+		};
 	}
 	getSessionTier(sessionId, modelId) {
 		return this.sessionTiers.get(JSON.stringify([
@@ -3265,52 +4916,17 @@ var QoderAdapter = class extends LlmAdapter {
 			name: this.providerName
 		};
 	}
-	/** Refresh advertised metadata on catalog reads, sharing a five-minute transport-local cache. */
 	async listModels(provider) {
-		const transport = this.resolveTransport();
-		let cached = this.discoveries.get(transport);
-		if (cached === void 0) {
-			cached = { expiresAt: 0 };
-			this.discoveries.set(transport, cached);
-		}
-		const entry = cached;
-		if (entry.inflight === void 0 && Date.now() >= entry.expiresAt) entry.inflight = Promise.resolve().then(() => transport.discoverModels()).then((models) => {
-			if (this.discoveries.get(transport) !== entry || this.resolveTransport() !== transport) return;
-			entry.models = models;
-			entry.expiresAt = Date.now() + 300 * 1e3;
-			this.publishDiscoveredModels(transport, models);
-		}).catch(() => {}).finally(() => {
-			entry.inflight = void 0;
-		});
-		await entry.inflight;
-		if (this.resolveTransport() !== transport) return this.listModels(provider);
+		await this.catalog.refresh();
 		return this.effectiveModels().map((model) => modelInfo(provider, model));
 	}
-	/**
-	* Announce one accepted discovery without joining the catalog read.
-	*
-	* Persisting metadata can queue behind unrelated settings writes, so awaiting
-	* it here would stall every `listModels` call on settings storage.
-	*/
-	publishDiscoveredModels(transport, models) {
-		try {
-			Promise.resolve(this.onModelsDiscovered?.(transport, models)).catch(() => {});
-		} catch {}
-	}
 	effectiveModels() {
-		return mergeQoderDiscoveryMetadata(this.catalogModels, this.discoveries.get(this.resolveTransport())?.models ?? []);
+		return this.catalog.models();
 	}
 	replaceModels(models) {
 		this.observeRegion();
 		this.catalogModels = models;
 	}
-	/** Publish an explicit discovery without letting older in-flight reads overwrite it. */
-	updateDiscoveredModels(transport, models) {
-		this.discoveries.set(transport, {
-			models,
-			expiresAt: Date.now() + 300 * 1e3
-		});
-	}
 	resolveModel(provider, modelId, signal) {
 		if (signal?.aborted) return Promise.reject(new QoderLlmError("Qoder model resolution was aborted.", "ABORTED"));
 		const sessionId = this.agents?.currentInitiator()?.session?.id;
@@ -3469,7 +5085,14 @@ const qoderRpcApiPath = `/api/qoder-subscription`;
 const qoderRpcEndpoints = [
 	"account",
 	"models",
-	"sessionTier"
+	"queue",
+	"sessionTier",
+	"readSessionTier",
+	"sessionTierEvents",
+	"authorization",
+	"beginLogin",
+	"cancelLogin",
+	"selectAuthorization"
 ];
 /** Absolute Fetch-route path of one endpoint. */
 function qoderRpcPath(endpoint) {
@@ -3492,16 +5115,18 @@ function isQoderRpcEndpoint(value) {
 * @returns disposer removing every registered route.
 * @throws when Connection exposes no exact Fetch registry.
 */
-function registerQoderRpc(ctx, handler) {
+function registerQoderRpc(ctx, handler, subscribeTiers) {
 	const registry = ctx.connection?.fetch;
 	if (typeof registry?.register !== "function") throw new Error("provider-qoder: connection exposes no exact Fetch route registry");
+	const streams = /* @__PURE__ */ new Set();
 	const disposers = qoderRpcEndpoints.map((endpoint) => registry.register({
 		path: qoderRpcPath(endpoint),
 		methods: ["POST"],
 		requestBody: "buffered",
-		fetch: (request) => handleQoderRpcRequest(endpoint, handler, request)
+		fetch: (request) => endpoint === "sessionTierEvents" && subscribeTiers ? Promise.resolve(sessionTierEvents(request, subscribeTiers, streams)) : handleQoderRpcRequest(endpoint, handler, request)
 	}));
 	return () => {
+		for (const close of streams) close();
 		for (const dispose of disposers) dispose();
 	};
 }
@@ -3541,6 +5166,333 @@ async function handleQoderRpcRequest(endpoint, handler, request) {
 		return new Response(`handler failure: ${String(error)}`, { status: 500 });
 	}
 }
+/** Authenticated change stream; reconnecting clients reread on the initial ready item. */
+function sessionTierEvents(request, subscribe, streams) {
+	let close = () => {};
+	const encoder = new TextEncoder();
+	const body = new ReadableStream({
+		start(controller) {
+			let ended = false;
+			let unsubscribe = () => {};
+			const send = (value) => {
+				if (!ended) controller.enqueue(encoder.encode(JSON.stringify(value) + "\n"));
+			};
+			close = () => {
+				if (ended) return;
+				ended = true;
+				unsubscribe();
+				request.signal.removeEventListener("abort", close);
+				streams.delete(close);
+				try {
+					controller.close();
+				} catch {}
+			};
+			unsubscribe = subscribe((scope) => send(scope));
+			streams.add(close);
+			request.signal.addEventListener("abort", close, { once: true });
+			if (request.signal.aborted) close();
+			else send({ ready: true });
+		},
+		cancel() {
+			close();
+		}
+	});
+	return new Response(body, { headers: {
+		"content-type": "application/x-ndjson",
+		"cache-control": "no-store",
+		"x-accel-buffering": "no"
+	} });
+}
+//#endregion
+//#region src/dsh/browser-authorization.ts
+/** Instance-shared authorization lifecycle. Provider I/O is delegated to Qoder transport. */
+const browserAuthorizationKey = (region) => credentialKey("provider-qoder", region);
+function decode(record, region) {
+	if (record === void 0) return {
+		version: 1,
+		method: "pat"
+	};
+	const value = record.kind === "grant" ? record.payload : null;
+	if (!value || value.version !== 1 || ![
+		"pat",
+		"browser",
+		"none"
+	].includes(value.method ?? "")) throw new QoderLlmError("Saved Qoder authorization is invalid. Remove it and sign in again.", "AUTH");
+	if (value.grant) {
+		const grant = value.grant;
+		if (grant.region !== region || typeof grant.id !== "string" || !grant.id || typeof grant.refreshToken !== "string" || !grant.refreshToken || !Number.isFinite(grant.expiresAt) || !grant.credentials || typeof grant.credentials.userID !== "string" || !grant.credentials.userID || typeof grant.credentials.authToken !== "string" || !grant.credentials.authToken) throw new QoderLlmError("Saved Qoder browser authorization is invalid.", "AUTH");
+	}
+	return value;
+}
+const record = (payload) => ({
+	kind: "grant",
+	payload: JSON.parse(JSON.stringify(payload))
+});
+const pending = (attempt) => attempt !== void 0 && [
+	"waiting",
+	"verifying",
+	"saving"
+].includes(attempt.phase);
+const cancelled = () => new QoderLlmError("Qoder authorization changed or was cancelled.", "ABORTED");
+var QoderBrowserAuthorizationManager = class {
+	credentials;
+	transport;
+	changed;
+	attempts = /* @__PURE__ */ new Map();
+	volatile = /* @__PURE__ */ new Map();
+	invalid = /* @__PURE__ */ new Set();
+	renewals = /* @__PURE__ */ new Set();
+	lifecycle = new AbortController();
+	activeRegion;
+	regionGeneration = 0;
+	disposed = false;
+	constructor(options) {
+		this.credentials = options.credentials;
+		this.transport = options.transport;
+		this.changed = options.changed;
+		this.activeRegion = options.region;
+	}
+	activateRegion(region) {
+		if (this.activeRegion === region) return;
+		const previous = this.activeRegion;
+		this.activeRegion = region;
+		this.regionGeneration++;
+		if (previous) this.cancel(previous).catch(() => {});
+	}
+	assertRegion(region, generation) {
+		if (this.disposed || this.regionGeneration !== generation || this.activeRegion !== void 0 && this.activeRegion !== region) throw cancelled();
+	}
+	async read(region) {
+		return decode(await this.credentials.readRecord?.(browserAuthorizationKey(region)), region);
+	}
+	async describe(region) {
+		const writable = await this.credentials.describeRecord?.(browserAuthorizationKey(region));
+		let saved;
+		try {
+			saved = await this.read(region);
+		} catch (error) {
+			if (!(error instanceof QoderLlmError) || error.code !== "AUTH") throw error;
+			return {
+				region,
+				method: "none",
+				configured: false,
+				writable: writable?.writable ?? false,
+				expired: true
+			};
+		}
+		const live = this.volatile.get(region);
+		const grant = live && live.grant.id === saved.grant?.id && live.baseToken === saved.grant?.credentials.authToken ? live.grant : saved.grant;
+		const attempt = this.attempts.get(region);
+		const expired = grant !== void 0 && (saved.expired === true || this.invalid.has(grant.id) || grant.refreshExpiresAt !== void 0 && grant.refreshExpiresAt <= Date.now());
+		return {
+			region,
+			method: saved.method,
+			writable: writable?.writable ?? false,
+			configured: saved.method === "pat" ? Boolean(await resolveManagedQoderPat(this.credentials)) : saved.method === "browser" && grant !== void 0 && !expired,
+			...grant ? {
+				profile: {
+					id: grant.credentials.userID,
+					name: grant.credentials.name,
+					email: grant.credentials.email
+				},
+				expired: saved.method === "browser" && expired,
+				unsaved: live?.grant === grant
+			} : {},
+			...attempt ? { attempt: {
+				id: attempt.id,
+				phase: attempt.phase,
+				expiresAt: attempt.expiresAt,
+				...attempt.failure ? { failure: attempt.failure } : {},
+				...pending(attempt) ? { url: attempt.url } : {}
+			} } : {}
+		};
+	}
+	async begin(region) {
+		const generation = this.regionGeneration;
+		await this.assertWritable(region);
+		this.assertRegion(region, generation);
+		if (pending(this.attempts.get(region))) return this.describe(region);
+		const attempt = {
+			id: randomUUID(),
+			phase: "waiting",
+			controller: new AbortController(),
+			expiresAt: Date.now() + 3e5
+		};
+		this.attempts.set(region, attempt);
+		attempt.done = this.login(region, attempt);
+		await Promise.resolve();
+		return this.describe(region);
+	}
+	async login(region, attempt) {
+		let previous;
+		let installed;
+		try {
+			const flow = await this.transport(region).begin(attempt.controller.signal);
+			this.assertAttempt(region, attempt);
+			attempt.url = flow.url;
+			attempt.expiresAt = flow.expiresAt;
+			const grant = await flow.complete();
+			this.assertAttempt(region, attempt);
+			attempt.phase = "saving";
+			await this.credentials.modifyRecord(browserAuthorizationKey(region), async (current) => {
+				this.assertAttempt(region, attempt);
+				previous = current;
+				installed = grant.id;
+				return record({
+					version: 1,
+					method: "browser",
+					grant
+				});
+			});
+			this.assertAttempt(region, attempt);
+			this.volatile.delete(region);
+			attempt.phase = "complete";
+			this.changed();
+		} catch (error) {
+			attempt.failure = attempt.phase === "saving" ? "storage" : error instanceof QoderLlmError && [
+				"TRANSPORT",
+				"SERVER",
+				"TIMEOUT"
+			].includes(error.code) ? "connection" : "authorization";
+			if (installed && attempt.controller.signal.aborted) await this.credentials.modifyRecord(browserAuthorizationKey(region), async (current) => {
+				if (decode(current, region).grant?.id !== installed) return void 0;
+				return previous ?? record({
+					version: 1,
+					method: "pat"
+				});
+			}).catch(() => {
+				attempt.cleanupFailed = true;
+			});
+			attempt.phase = attempt.cleanupFailed ? "failed" : attempt.controller.signal.aborted ? "cancelled" : error instanceof QoderLlmError && error.code === "TIMEOUT" && Date.now() >= attempt.expiresAt ? "timeout" : "failed";
+		} finally {
+			attempt.url = void 0;
+		}
+	}
+	assertAttempt(region, attempt) {
+		if (this.disposed || attempt.controller.signal.aborted || this.attempts.get(region) !== attempt) throw cancelled();
+	}
+	async cancel(region) {
+		const attempt = this.attempts.get(region);
+		if (!pending(attempt)) return;
+		attempt.controller.abort();
+		await attempt.done;
+		if (attempt.cleanupFailed) throw new QoderLlmError("Could not restore the previous Qoder authorization after cancellation. Reload account status.", "INVALID_REQUEST");
+	}
+	async select(region, method) {
+		const generation = this.regionGeneration;
+		await this.assertWritable(region);
+		await this.cancel(region);
+		await this.credentials.modifyRecord(browserAuthorizationKey(region), async (current) => {
+			this.assertRegion(region, generation);
+			const saved = method === "none" ? {
+				version: 1,
+				method
+			} : decode(current, region);
+			if (method === "browser" && !saved.grant) throw new QoderLlmError("Sign in to Qoder first.", "MISSING_CREDENTIAL");
+			return record(method === "none" ? {
+				version: 1,
+				method
+			} : {
+				...saved,
+				method
+			});
+		});
+		if (method === "none") this.volatile.delete(region);
+		this.attempts.delete(region);
+		this.changed();
+		return this.describe(region);
+	}
+	async lease(region, signal) {
+		if (signal?.aborted || this.disposed) throw cancelled();
+		const saved = await this.read(region);
+		if (saved.method === "pat") return void 0;
+		const grant = saved.grant;
+		if (saved.method !== "browser" || !grant) throw new QoderLlmError("Sign in to Qoder or select a Managed Qoder PAT.", "MISSING_CREDENTIAL");
+		if (saved.expired || this.invalid.has(grant.id)) throw new QoderLlmError("Qoder browser authorization expired. Sign in again.", "AUTH");
+		let captured = grant;
+		return {
+			key: `browser:${grant.id}`,
+			resolve: async (nextSignal, rejectedToken) => {
+				if (nextSignal?.aborted || this.disposed) throw cancelled();
+				const latest = await this.read(region);
+				if (latest.method !== "browser" || latest.grant?.id !== grant.id) {
+					if (rejectedToken !== void 0 || captured.expiresAt <= Date.now()) throw cancelled();
+					return captured.credentials;
+				}
+				const combined = nextSignal ? AbortSignal.any([nextSignal, this.lifecycle.signal]) : this.lifecycle.signal;
+				const renewal = this.renew(region, grant.id, combined, rejectedToken);
+				this.renewals.add(renewal);
+				try {
+					captured = await renewal;
+				} finally {
+					this.renewals.delete(renewal);
+				}
+				if (combined.aborted) throw cancelled();
+				return captured.credentials;
+			}
+		};
+	}
+	async renew(region, id, signal, rejectedToken) {
+		if (this.invalid.has(id)) throw new QoderLlmError("Qoder browser authorization expired. Sign in again.", "AUTH");
+		const snapshot = await this.read(region);
+		const fresh = snapshot.method === "browser" && snapshot.grant?.id === id ? snapshot.grant : void 0;
+		if (fresh && !snapshot.expired && !this.volatile.has(region) && fresh.expiresAt > Date.now() + 3e5 && rejectedToken !== fresh.credentials.authToken) return fresh;
+		let rotated;
+		let baseToken;
+		try {
+			await this.credentials.modifyRecord(browserAuthorizationKey(region), async (current) => {
+				const saved = decode(current, region);
+				if (this.disposed || signal?.aborted || saved.method !== "browser" || saved.grant?.id !== id) throw cancelled();
+				if (saved.expired) throw new QoderLlmError("Qoder browser authorization expired. Sign in again.", "AUTH");
+				const volatile = this.volatile.get(region);
+				baseToken = saved.grant.credentials.authToken;
+				const source = volatile?.grant.id === id && volatile.baseToken === baseToken ? volatile.grant : saved.grant;
+				rotated = await this.transport(region).refresh(source, this.lifecycle.signal, rejectedToken);
+				return rotated === saved.grant ? void 0 : record({
+					...saved,
+					grant: rotated
+				});
+			});
+			this.volatile.delete(region);
+			return rotated;
+		} catch (error) {
+			if (error instanceof QoderLlmError && error.code === "AUTH") {
+				this.invalid.add(id);
+				await this.credentials.modifyRecord(browserAuthorizationKey(region), async (current) => {
+					const saved = decode(current, region);
+					return saved.grant?.id === id ? record({
+						...saved,
+						expired: true
+					}) : void 0;
+				}).catch(() => {});
+			}
+			if (rotated && baseToken) {
+				const saved = await this.read(region);
+				if (saved.method === "browser" && saved.grant?.id === id && saved.grant.credentials.authToken === rotated.credentials.authToken) return saved.grant;
+				if (saved.method === "browser" && saved.grant?.id === id && saved.grant.credentials.authToken === baseToken) {
+					this.volatile.set(region, {
+						baseToken,
+						grant: rotated
+					});
+					return rotated;
+				}
+			}
+			throw error;
+		}
+	}
+	async assertWritable(region) {
+		if (!(await this.credentials.describeRecord?.(browserAuthorizationKey(region)))?.writable) throw new QoderLlmError("Qoder authorization storage is read-only or unsupported.", "INVALID_REQUEST");
+	}
+	async dispose() {
+		this.disposed = true;
+		this.lifecycle.abort();
+		for (const attempt of this.attempts.values()) attempt.controller.abort();
+		await Promise.all([...this.attempts.values()].map((attempt) => attempt.done));
+		await Promise.allSettled(this.renewals);
+		this.volatile.clear();
+		this.invalid.clear();
+	}
+};
 //#endregion
 //#region src/dsh/plugin.ts
 const name = "provider-qoder";
@@ -3593,41 +5545,57 @@ async function executeRpc(operation, task, signal, logger) {
 	}
 }
 function apply(ctx, input = {}) {
+	const leases = new QoderQueueLeases();
+	const queueStatus = new QoderQueueStatusStore();
+	ctx.effect(() => async () => {
+		queueStatus.dispose();
+		await leases.dispose();
+	}, "provider-qoder: queue lifecycle");
+	bindQoderQueueLeases(ctx, leases);
 	const config = readConfig(input);
 	const logger = ctx.logger;
+	const initialRegion = config.region ?? "global";
 	const baseConfig = {
-		region: config.region ?? "global",
+		region: initialRegion,
 		modelsByRegion: { ...config.modelsByRegion },
 		streamIdleTimeoutMs: config.streamIdleTimeoutMs ?? 3e5,
 		responseHeaderTimeoutMs: config.responseHeaderTimeoutMs ?? 6e4,
+		modelQueueMaxWaitMs: config.modelQueueMaxWaitMs ?? 36e5,
 		preserveThinking: config.preserveThinking ?? true,
-		webSearchMode: config.webSearchMode ?? "auto"
+		webSearchMode: config.webSearchMode ?? "auto",
+		requestCompression: config.requestCompression ?? false,
+		modelTransport: config.modelTransport ?? "legacy"
 	};
 	let current = () => baseConfig;
-	let persistDiscoveredModels = async (_region) => {};
-	const discoveredCatalogs = {
-		global: [],
-		china: []
-	};
-	const createTransport = (region, streamIdleTimeoutMs, responseHeaderTimeoutMs, preserveThinking, resolvePat = () => resolveManagedQoderPat(ctx.credentials)) => createQoderTransport({
+	let authorization;
+	const createTransport = (region, streamIdleTimeoutMs, responseHeaderTimeoutMs, preserveThinking, resolvePat) => createQoderTransport({
 		region,
-		resolvePat,
+		resolvePat: resolvePat ?? (() => resolveManagedQoderPat(ctx.credentials)),
+		resolveCredential: resolvePat ? void 0 : (signal) => authorization.lease(region, signal),
+		requestCompression: current().requestCompression ?? false,
+		modelTransport: current().modelTransport ?? "legacy",
 		logger,
 		streamIdleTimeoutMs,
 		responseHeaderTimeoutMs,
 		attachments: ctx.attachments,
-		preserveThinking
+		preserveThinking,
+		modelQueueMaxWaitMs: current().modelQueueMaxWaitMs ?? 36e5,
+		onQueueUpdate: queueStatus.update,
+		captureQueueLeaseOwner: leases.capture
 	});
 	const resolveConfig = () => {
 		const value = current();
 		const region = value.region ?? "global";
 		return {
 			region,
-			models: mergeQoderDiscoveryMetadata(modelsFor(value, region), discoveredCatalogs[region]),
+			models: modelsFor(value, region),
 			streamIdleTimeoutMs: value.streamIdleTimeoutMs ?? 3e5,
 			responseHeaderTimeoutMs: value.responseHeaderTimeoutMs ?? 6e4,
+			modelQueueMaxWaitMs: value.modelQueueMaxWaitMs ?? 36e5,
 			preserveThinking: value.preserveThinking ?? true,
-			webSearchMode: value.webSearchMode ?? "auto"
+			webSearchMode: value.webSearchMode ?? "auto",
+			requestCompression: value.requestCompression ?? false,
+			modelTransport: value.modelTransport ?? "legacy"
 		};
 	};
 	const initial = resolveConfig();
@@ -3636,38 +5604,81 @@ function apply(ctx, input = {}) {
 		region: initial.region,
 		streamIdleTimeoutMs: initial.streamIdleTimeoutMs,
 		responseHeaderTimeoutMs: initial.responseHeaderTimeoutMs,
-		preserveThinking: initial.preserveThinking
+		modelQueueMaxWaitMs: initial.modelQueueMaxWaitMs,
+		preserveThinking: initial.preserveThinking,
+		requestCompression: initial.requestCompression,
+		modelTransport: initial.modelTransport
 	};
+	const authorizationTransports = /* @__PURE__ */ new Map();
+	authorization = new QoderBrowserAuthorizationManager({
+		credentials: ctx.credentials,
+		region: initialRegion,
+		transport: (region) => {
+			let transport = authorizationTransports.get(region);
+			if (!transport) {
+				transport = createQoderTransport({
+					region,
+					resolvePat: () => Promise.resolve("")
+				}).authorization;
+				authorizationTransports.set(region, transport);
+			}
+			return transport;
+		},
+		changed: () => {
+			catalog.refresh();
+		}
+	});
+	ctx.effect(() => () => authorization.dispose(), "provider-qoder: browser authorization lifecycle");
+	const catalog = new QoderCatalogLifecycle({
+		resolveTransport: () => activeTransport,
+		region: () => activeTransportConfig.region,
+		configuredModels: (region) => modelsFor(current(), region),
+		onDiscovered: () => registration.replace([providerQoder]),
+		onPersistenceError: (error) => logger?.error?.("[Qoder Settings] Failed to synchronize model catalog", logError(error))
+	});
+	ctx.effect(() => () => catalog.dispose(), "provider-qoder: catalog lifecycle");
 	const adapter = new QoderAdapter({
 		resolveTransport: () => activeTransport,
-		models: initial.models,
+		catalog,
 		region: () => activeTransportConfig.region,
 		providerId: providerQoder,
 		providerName: "Qoder",
 		sessions: ctx.get("sessions"),
-		agents: ctx.get("agents"),
-		onModelsDiscovered: (transport, models) => {
-			if (transport !== activeTransport || ctx.fiber.state === fiberUnloading || ctx.fiber.state === fiberDisposed) return;
-			const region = activeTransportConfig.region;
-			discoveredCatalogs[region] = models;
-			refreshAdapter();
-			persistDiscoveredModels(region).catch((error) => {
-				logger?.error?.("[Qoder Settings] Failed to synchronize model catalog", logError(error));
-			});
-		}
+		agents: ctx.get("agents")
 	});
 	const registration = ctx.llm.registerAdapter([providerQoder], adapter);
+	const refreshAuthentication = () => {
+		const value = resolveConfig();
+		activeTransport = createTransport(value.region, value.streamIdleTimeoutMs, value.responseHeaderTimeoutMs, value.preserveThinking);
+		catalog.clearDiscovered();
+		catalog.observeTransport();
+		registration.replace([providerQoder]);
+	};
+	ctx.on("credentials/record-updated", (key) => {
+		if (key === browserAuthorizationKey(activeTransportConfig.region)) {
+			refreshAuthentication();
+			catalog.refresh();
+		}
+	});
+	ctx.on("credentials/reference-updated", (ref) => {
+		if (ref === "QODER_MANAGED_CREDENTIAL") refreshAuthentication();
+	});
 	const refreshAdapter = () => {
 		const next = resolveConfig();
-		if (next.region !== activeTransportConfig.region || next.streamIdleTimeoutMs !== activeTransportConfig.streamIdleTimeoutMs || next.responseHeaderTimeoutMs !== activeTransportConfig.responseHeaderTimeoutMs || next.preserveThinking !== activeTransportConfig.preserveThinking) {
+		if (next.region !== activeTransportConfig.region || next.streamIdleTimeoutMs !== activeTransportConfig.streamIdleTimeoutMs || next.responseHeaderTimeoutMs !== activeTransportConfig.responseHeaderTimeoutMs || next.modelQueueMaxWaitMs !== activeTransportConfig.modelQueueMaxWaitMs || next.requestCompression !== activeTransportConfig.requestCompression || next.modelTransport !== activeTransportConfig.modelTransport || next.preserveThinking !== activeTransportConfig.preserveThinking) {
+			authorization.activateRegion(next.region);
 			activeTransport = createTransport(next.region, next.streamIdleTimeoutMs, next.responseHeaderTimeoutMs, next.preserveThinking);
 			activeTransportConfig = {
 				region: next.region,
 				streamIdleTimeoutMs: next.streamIdleTimeoutMs,
 				responseHeaderTimeoutMs: next.responseHeaderTimeoutMs,
-				preserveThinking: next.preserveThinking
+				modelQueueMaxWaitMs: next.modelQueueMaxWaitMs,
+				preserveThinking: next.preserveThinking,
+				requestCompression: next.requestCompression,
+				modelTransport: next.modelTransport
 			};
 		}
+		catalog.observeTransport();
 		adapter.replaceModels(next.models);
 		registration.replace([providerQoder]);
 	};
@@ -3678,52 +5689,35 @@ function apply(ctx, input = {}) {
 			modelsFor(value, "china");
 		} });
 		current = () => scope.get();
-		let bindingActive = true;
-		const persistCatalog = async (region) => {
-			while (bindingActive && ctx.fiber.state !== fiberUnloading && ctx.fiber.state !== fiberDisposed) {
-				if (!settingsCtx.settings.writable || discoveredCatalogs[region].length === 0) return;
+		catalog.bindSettings({
+			read: (region) => {
+				if (!settingsCtx.settings.writable) return void 0;
 				const snapshot = settingsCtx.settings.describe().find((section) => section.ns === namespace);
-				if (snapshot === void 0) return;
-				const selected = modelsFor(snapshot.value, region);
-				const enriched = modelsFor(Config({ modelsByRegion: { [region]: mergeQoderDiscoveryMetadata(selected, discoveredCatalogs[region]) } }), region);
-				if (hasSameQoderDiscoveryMetadata(selected, enriched)) return;
-				try {
-					await settingsCtx.settings.update(namespace, { modelsByRegion: { [region]: enriched } }, snapshot.revision);
-					return;
-				} catch (error) {
-					if (!(error instanceof SettingsConflictError)) throw error;
-				}
-			}
-		};
-		persistDiscoveredModels = persistCatalog;
+				return snapshot === void 0 ? void 0 : {
+					models: modelsFor(snapshot.value, region),
+					revision: snapshot.revision
+				};
+			},
+			write: (region, models, revision) => settingsCtx.settings.update(namespace, { modelsByRegion: { [region]: models } }, revision)
+		});
 		refreshAdapter();
-		scope.watch(async () => {
-			if (!bindingActive || ctx.fiber.state === fiberUnloading || ctx.fiber.state === fiberDisposed) return;
+		scope.watch(() => {
+			if (ctx.fiber.state === fiberUnloading || ctx.fiber.state === fiberDisposed) return;
 			refreshAdapter();
-			await persistCatalog(scope.get().region ?? "global");
+			catalog.retryPersistence();
 		});
-		for (const region of ["global", "china"]) {
-			if (discoveredCatalogs[region].length === 0) continue;
-			persistCatalog(region).catch((error) => logger?.error?.("[Qoder Settings] Failed to synchronize model catalog", logError(error)));
-		}
 		settingsCtx.effect(() => () => {
-			bindingActive = false;
+			catalog.bindSettings(void 0);
 			if (ctx.fiber.state === fiberUnloading || ctx.fiber.state === fiberDisposed) return;
-			persistDiscoveredModels = async () => {};
 			current = () => baseConfig;
 			refreshAdapter();
 		});
 	});
 	const discoverModels = async (signal, suppliedPat) => {
 		const snapshot = resolveConfig();
-		const snapshotTransport = activeTransport;
 		const normalizedPat = suppliedPat?.trim();
-		const models = await (normalizedPat ? createTransport(snapshot.region, snapshot.streamIdleTimeoutMs, snapshot.responseHeaderTimeoutMs, snapshot.preserveThinking, () => Promise.resolve(normalizedPat)) : snapshotTransport).discoverModels(signal);
-		adapter.updateDiscoveredModels(snapshotTransport, models);
-		discoveredCatalogs[snapshot.region] = models;
-		refreshAdapter();
-		await persistDiscoveredModels(snapshot.region);
-		return models;
+		const transport = normalizedPat ? createTransport(snapshot.region, snapshot.streamIdleTimeoutMs, snapshot.responseHeaderTimeoutMs, snapshot.preserveThinking, () => Promise.resolve(normalizedPat)) : activeTransport;
+		return catalog.discover(signal, transport);
 	};
 	ctx.llm.registerModelDiscovery(settingsNamespace, async (request, signal) => {
 		if (request.provider !== void 0 && request.provider !== providerQoder) throw new QoderLlmError(`Qoder discovery does not own provider "${request.provider}".`, "INVALID_PROVIDER");
@@ -3737,14 +5731,54 @@ function apply(ctx, input = {}) {
 	const handler = async (endpoint, payload, signal) => {
 		if (!isQoderRpcEndpoint(endpoint)) return publicError("UNKNOWN_ENDPOINT", `Unknown endpoint: ${endpoint}`);
 		if (signal.aborted) return publicError("ABORTED", "Request aborted");
+		if (endpoint === "authorization" || endpoint === "beginLogin" || endpoint === "cancelLogin" || endpoint === "selectAuthorization") {
+			const data = payload;
+			const region = data?.region;
+			if (region !== "global" && region !== "china" || region !== resolveConfig().region) return publicError("INTERNAL", "The active Qoder service region is required");
+			return executeRpc("manage Qoder authorization", async () => {
+				if (endpoint === "beginLogin") return authorization.begin(region);
+				if (endpoint === "cancelLogin") {
+					await authorization.cancel(region);
+					return authorization.describe(region);
+				}
+				if (endpoint === "selectAuthorization") {
+					const method = data?.method;
+					if (method !== "pat" && method !== "browser" && method !== "none") throw new QoderLlmError("Invalid authorization method.", "INVALID_REQUEST");
+					return authorization.select(region, method);
+				}
+				return authorization.describe(region);
+			}, signal, logger);
+		}
+		if (endpoint === "queue") {
+			const sessionId = payload?.sessionId;
+			if (typeof sessionId !== "string" || !sessionId.trim() || sessionId.length > 256) return publicError("INTERNAL", "A valid sessionId is required");
+			return {
+				ok: true,
+				value: queueStatus.read(sessionId)
+			};
+		}
 		if (endpoint === "models") return await executeRpc("discover Qoder models", () => discoverModels(signal), signal, logger);
-		if (endpoint === "sessionTier") {
+		if (endpoint === "sessionTier" || endpoint === "readSessionTier") {
 			const data = payload;
-			if (typeof data?.sessionId === "string" && typeof data?.modelId === "string" && typeof data?.tierKey === "string" && (data.region === "global" || data.region === "china")) {
+			if (typeof data?.sessionId === "string" && typeof data?.modelId === "string" && (endpoint === "readSessionTier" || typeof data?.tierKey === "string") && (data.region === "global" || data.region === "china")) {
 				const { sessionId, modelId, tierKey, region } = data;
-				return await executeRpc("select session context tier", async () => {
-					adapter.setSessionTier(sessionId, modelId, tierKey, region);
-					return { success: true };
+				return await executeRpc(endpoint === "sessionTier" ? "select session context tier" : "read session context tier", async () => {
+					if (!sessionId.trim() || region !== resolveConfig().region) throw new QoderLlmError("Invalid session context tier scope.", "INVALID_REQUEST");
+					const sessions = ctx.get("sessions");
+					if (sessions && !sessions.get(sessionId)) {
+						const controller = ctx.get("sessionController");
+						if (controller) {
+							const result = await controller.resolveAgent(sessionId);
+							if ("error" in result) throw result.error;
+						}
+					}
+					signal.throwIfAborted();
+					if (endpoint === "sessionTier") adapter.setSessionTier(sessionId, modelId, tierKey, region);
+					return adapter.readSessionTier({
+						sessionId,
+						modelId,
+						region
+					});
 				}, signal, logger);
 			}
 			return publicError("INTERNAL", "Invalid sessionTier payload");
@@ -3759,7 +5793,7 @@ function apply(ctx, input = {}) {
 		return outcome;
 	};
 	try {
-		ctx.effect(() => registerQoderRpc(ctx, handler), "provider-qoder: settings RPC routes");
+		ctx.effect(() => registerQoderRpc(ctx, handler, (listener) => adapter.subscribeSessionTiers(listener)), "provider-qoder: settings RPC routes");
 	} catch (error) {
 		logger?.error?.("[Qoder RPC] Failed to register the settings RPC routes", logError(error));
 	}