dsh-provider-qoder 0.5.0 → 0.5.1

package/lib/client.js

@@ -672,10 +672,13 @@ window.__ModuleLoader__.load({
 				const followsConfig = this.snapshot.catalog === this.confirmed;
 				this.confirmed = models.map(cloneCatalogModel);
 				const selected = new Map(this.confirmed.map((model) => [model.id, model]));
+				const catalog = new Map(this.snapshot.catalog.map((model) => [model.id, selected.get(model.id) ?? model]));
+				for (const model of this.confirmed) catalog.set(model.id, model);
 				this.publish({
 					...this.snapshot,
 					models: this.confirmed,
-					catalog: followsConfig ? this.confirmed : this.snapshot.catalog.map((model) => selected.get(model.id) ?? model)
+					catalog: followsConfig ? this.confirmed : [...catalog.values()],
+					unavailableIds: new Set([...this.snapshot.unavailableIds].filter((id) => !selected.has(id)))
 				});
 			}
 			activate() {
@@ -2500,7 +2503,8 @@ window.__ModuleLoader__.load({
 						if (response.ok) {
 							const region = regionOf(readModelSnapshot().value);
 							const current = await authorizationOperations.read(region);
-							if (current.ok && current.value.method !== "pat") return (await authorizationOperations.select(region, "pat")).ok;
+							if (!current.ok) return false;
+							if (current.value.method !== "pat") return (await authorizationOperations.select(region, "pat")).ok;
 						}
 						return response.ok;
 					} catch {

package/lib/index.js

@@ -1,5 +1,5 @@
 import z from "@deepseek-ai/schemastery";
-import { CONTEXT_WINDOW_EXCEEDED_CODE, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ProviderRequestId, QUOTA_EXCEEDED_CODE, ReasoningEffortId, ToolCallId, attributionHeaders, contentHasImage, isContextWindowExceededError, isQuotaExceededError } from "@deepseek-ai/dsh-llm";
+import { CONTEXT_WINDOW_EXCEEDED_CODE, EMPTY_RESPONSE_CODE, LlmAdapter, LlmError, ProviderRequestId, QUOTA_EXCEEDED_CODE, ReasoningEffortId, ToolCallId, attributionHeaders, isContextWindowExceededError, isQuotaExceededError } from "@deepseek-ai/dsh-llm";
 import crypto, { createHash, randomBytes, randomUUID } from "node:crypto";
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { homedir, hostname } from "node:os";
@@ -1265,6 +1265,9 @@ async function fetchQoderModels(credentials, options = {}) {
 function unsupported(message) {
 	return new QoderLlmError(message, "UNSUPPORTED_CONTENT");
 }
+function validateText(block) {
+	if ((block.type === "text" || block.type === "reasoning") && typeof block.text !== "string") throw unsupported("Qoder text and reasoning content must contain a string text value.");
+}
 /** Keep multimodal tool results attached to their call. */
 async function translateToolResultContent(blocks, context) {
 	const supportedBlocks = blocks.map((block) => {
@@ -1347,7 +1350,49 @@ function consumeToolCallId(message, result, pendingIds, fallbackIndex) {
 	}
 	return pendingIds.shift() ?? `call_unknown_${fallbackIndex}`;
 }
+/** Validate the entire batch without reading attachments or resolving credentials. */
+function validateMessageShapes(messages, attachments) {
+	let hasImages = false;
+	const validateImages = (blocks) => {
+		const images = blocks.filter((block) => block.type === "image");
+		hasImages ||= images.length > 0;
+		if (attachments) enforceImageLimits(images, attachments);
+	};
+	for (const message of messages) {
+		if (![
+			"system",
+			"user",
+			"assistant",
+			"tool"
+		].includes(message.role) || !Array.isArray(message.content)) throw unsupported("Qoder received an unsupported message shape.");
+		const results = message.content.filter((block) => block.type === "tool-result");
+		for (const result of results) {
+			if (!Array.isArray(result.content) || result.content.some((block) => block.type !== "text" && block.type !== "image")) throw unsupported("Qoder tool results support text and images only.");
+			for (const block of result.content) validateText(block);
+			validateImages(result.content);
+		}
+		const blocks = message.content.filter((block) => block.type !== "tool-result");
+		for (const block of blocks) {
+			validateText(block);
+			if (block.type === "tool-call") {
+				if (message.role !== "assistant") throw unsupported("Qoder tool-call content is valid only in assistant messages.");
+				if (asCallId(block.id) === void 0 || typeof block.name !== "string" || block.name.trim().length === 0 || typeof block.arguments !== "string") throw unsupported("Qoder tool-call content requires a non-empty string id and name, and string arguments.");
+			}
+			if (message.role === "tool" && block.type !== "text" && block.type !== "image") throw unsupported("Qoder tool results support text and images only.");
+			if (block.type === "image" && message.role !== "user" && message.role !== "tool") throw unsupported("Qoder image content is valid only in user and tool messages.");
+			if (![
+				"text",
+				"image",
+				"reasoning",
+				"tool-call"
+			].includes(block.type)) throw unsupported(`Qoder does not support ${String(block.type)} content.`);
+		}
+		validateImages(blocks);
+	}
+	return hasImages;
+}
 async function validateAndTranslateMessages(messages, systemPrompt, attachments, signal, pipeline) {
+	validateMessageShapes(messages, attachments);
 	const context = {
 		attachments,
 		signal,
@@ -1401,7 +1446,7 @@ async function validateAndTranslateMessages(messages, systemPrompt, attachments,
 				continue;
 			}
 			if (block.type === "image") {
-				if (message.role !== "user" && toolResults.length === 0) throw unsupported("Qoder image content is valid only in user messages.");
+				if (message.role !== "user") throw unsupported("Qoder image content is valid only in user and tool messages.");
 				hasImage = true;
 				pendingImages.push({
 					slot: userContent.length,
@@ -1464,20 +1509,15 @@ async function validateAndTranslateMessages(messages, systemPrompt, attachments,
 * request reports — so every step of one turn must carry the same run identity
 * while the next subscriber prompt opens a new one.
 *
-* The adapter never sees a turn number, and the host appends messages to a
-* turn's history while it runs — its own context, notifications, delegated
-* agents' messages — so the boundary is derived from the history here. A turn is
-* the multiset of user-role messages it has accounted for: a subscriber message
-* the run has not seen opens the next turn, while host-appended context,
-* transport-synthesized markers, and anything an auxiliary call carries continue
-* the open record.
+* Hosted calls use a captured host run as their authoritative boundary. The
+* weakly owned identity survives history projections and standalone-cache eviction.
+* Standalone calls infer boundaries from the multiset of user-role messages:
+* unseen subscriber input opens a run; recognized host context continues it.
+* Auxiliary calls always receive independent identities.
 *
-* Known limit: text identifies a message because the host's message ids are not
-* part of the wire shape. A subscriber who sends the same words twice with the
-* first copy already gone from history — compaction replaced that span — shares
-* the open record instead of opening a new one. Carrying the host's message
-* identity through translation is the fix, and needs the host to expose it on
-* the request the adapter receives.
+* Standalone limit: text identifies a message because wire messages lack host
+* message IDs. Identical input replacing an earlier occurrence during compaction
+* can share the open record. Hosted calls use real boundaries instead.
 *
 * @module dsh-provider-qoder/qoder/transport/wire/turn-identity
 */
@@ -1566,14 +1606,14 @@ function messageFingerprint(message) {
 /**
 * Resolves the record identity of the turn one request belongs to.
 *
-* One tracker instance owns its sessions, so tests and transports stay
-* independent. State is created lazily per session and bounded by
-* `maxSessions`.
+* Standalone session state is bounded by `maxSessions`. Hosted state is weakly
+* owned by its run handle, which the host and outstanding requests keep alive.
 */
 var QoderTurnTracker = class {
 	maxSessions;
 	idleSessionTtlMs;
 	now;
+	hosted = /* @__PURE__ */ new WeakMap();
 	sessions = /* @__PURE__ */ new Map();
 	constructor(options = {}) {
 		this.maxSessions = options.maxSessions ?? defaultMaxSessions;
@@ -1587,7 +1627,7 @@ var QoderTurnTracker = class {
 	* that requests within one subscriber turn share a single agent run and
 	* consumption record.
 	*/
-	resolveTurnIdentity(sessionId, messages, kind = "conversation", requestId = crypto.randomUUID(), modelKey) {
+	resolveTurnIdentity(sessionId, messages, kind = "conversation", requestId = crypto.randomUUID(), modelKey, hostRun) {
 		const now = this.now();
 		if (sessionId === void 0 || sessionId.length === 0) return {
 			requestSetId: `qoder-request-${crypto.randomUUID()}`,
@@ -1606,6 +1646,7 @@ var QoderTurnTracker = class {
 				businessStage: "start"
 			};
 		}
+		if (hostRun !== void 0) return this.resolveHosted(hostRun, sessionId, requestId, modelKey, now);
 		let state = this.sessions.get(sessionId);
 		if (state === void 0) {
 			state = {
@@ -1673,6 +1714,36 @@ var QoderTurnTracker = class {
 			businessStage
 		};
 	}
+	/** Host boundaries are authoritative; message projections cannot open a new run. */
+	resolveHosted(run, scope, requestId, modelKey, now) {
+		let scopes = this.hosted.get(run);
+		if (scopes === void 0) {
+			scopes = /* @__PURE__ */ new Map();
+			this.hosted.set(run, scopes);
+		}
+		const previous = scopes.get(scope);
+		const modelChanged = previous?.modelKey !== void 0 && modelKey !== void 0 && previous.modelKey !== modelKey;
+		if (previous !== void 0 && !modelChanged) {
+			if (modelKey !== void 0) previous.modelKey = modelKey;
+			return {
+				...previous.identity,
+				chatRecordId: requestId,
+				businessStage: "processing"
+			};
+		}
+		const identity = {
+			requestSetId: `qoder-request-${crypto.randomUUID()}`,
+			chatRecordId: requestId,
+			businessId: crypto.randomUUID(),
+			beginAt: now,
+			businessStage: "start"
+		};
+		scopes.set(scope, {
+			modelKey,
+			identity
+		});
+		return identity;
+	}
 	/**
 	* Record id shared by every step of `sessionId`'s current turn.
 	*
@@ -1697,13 +1768,14 @@ var QoderTurnTracker = class {
 			beginAt: identity.beginAt
 		};
 	}
-	/** Forget one session, e.g. when its transport is disposed. */
+	/** Forget one standalone session. Hosted state follows its run handle lifetime. */
 	forget(sessionId) {
 		this.sessions.delete(sessionId);
 	}
 	/** Forget every session. */
 	clear() {
 		this.sessions.clear();
+		this.hosted = /* @__PURE__ */ new WeakMap();
 	}
 	claimSession(sessionId, state) {
 		this.sessions.set(sessionId, state);
@@ -1735,7 +1807,6 @@ var QoderTurnTracker = class {
 };
 //#endregion
 //#region src/qoder/transport/wire/prepare.ts
-/** Shared model request preparation, before selecting a wire protocol. */
 function stableHash(prefix, ...inputs) {
 	const hash = crypto.createHash("sha256");
 	hash.update(prefix);
@@ -1750,17 +1821,18 @@ const qoderTurnTracker = new QoderTurnTracker();
 function callKind(options) {
 	return options.purpose === void 0 ? "conversation" : "auxiliary";
 }
-function validateQoderRequestShape(options, model) {
+function validateQoderRequestShape(options, model, attachments) {
+	const hasImages = validateMessageShapes(options.messages, attachments);
 	if (options.reasoningEffort !== void 0) {
 		const effort = String(options.reasoningEffort);
 		if (!model?.reasoningEfforts?.some((candidate) => candidate.id === effort)) throw new QoderLlmError(`Qoder model "${options.model}" does not advertise reasoning effort "${effort}".`, "UNSUPPORTED_REASONING_EFFORT");
 	}
-	if (options.messages.some((message) => contentHasImage(message.content)) && model?.supportsImages !== true) throw new QoderLlmError(`Qoder model "${options.model}" does not advertise image input.`, "UNSUPPORTED_CONTENT");
+	if (hasImages && model?.supportsImages !== true) throw new QoderLlmError(`Qoder model "${options.model}" does not advertise image input.`, "UNSUPPORTED_CONTENT");
 }
 function translateQoderMessages(options, attachments, pipeline) {
 	return validateAndTranslateMessages(options.messages, options.system, attachments, options.signal, pipeline);
 }
-async function prepareQoderRequest(options, userId, translatedMessages, model, attachments, tracker = qoderTurnTracker, identityScope = "") {
+async function prepareQoderRequest(options, userId, translatedMessages, model, attachments, tracker = qoderTurnTracker, identityScope = "", hostRun) {
 	if (!userId) throw new QoderLlmError("Qoder request identity is missing.", "AUTH");
 	if (translatedMessages === void 0) validateQoderRequestShape(options, model);
 	const messages = translatedMessages ?? await translateQoderMessages(options, attachments);
@@ -1788,7 +1860,7 @@ async function prepareQoderRequest(options, userId, translatedMessages, model, a
 		identityScope,
 		userId,
 		sessionIdParam
-	]), messages, callKind(options), requestId, modelKey);
+	]), messages, callKind(options), requestId, modelKey, hostRun);
 	return {
 		requestId,
 		requestSetId: identity.requestSetId,
@@ -2335,7 +2407,19 @@ var QoderUsageReader = class {
 			const cached = this.cache.get(cacheKey);
 			if (cached && cached.expiresAt > Date.now()) return cached.info;
 		}
-		return this.flights.run(cacheKey, options?.signal, (sharedSignal) => this.loadAccount(resolve, sharedSignal, cacheKey), () => new QoderLlmError("Qoder account request was aborted.", "ABORTED"));
+		return this.flights.run(cacheKey, options?.signal, async (sharedSignal) => {
+			let credentials;
+			try {
+				return await this.loadAccount(async (signal) => {
+					credentials = await resolve(signal);
+					return credentials;
+				}, sharedSignal, cacheKey);
+			} catch (error) {
+				if (!(error instanceof QoderLlmError) || error.code !== "AUTH" || !credentials || !options?.refresh) throw error;
+				const refreshed = await options.refresh(credentials, sharedSignal);
+				return this.loadAccount(async () => refreshed, sharedSignal, cacheKey);
+			}
+		}, () => new QoderLlmError("Qoder account request was aborted.", "ABORTED"));
 	}
 	async loadAccount(resolve, signal, cacheKey) {
 		const creds = await resolve(signal);
@@ -3192,8 +3276,8 @@ var ModelQueue = class {
 };
 //#endregion
 //#region src/qoder/transport/wire/serialize.ts
-async function buildQoderRequestBody(options, userId, translatedMessages, model, attachments, tracker, identityScope = "") {
-	const prepared = await prepareQoderRequest(options, userId, translatedMessages, model, attachments, tracker, identityScope);
+async function buildQoderRequestBody(options, userId, translatedMessages, model, attachments, tracker, identityScope = "", hostRun) {
+	const prepared = await prepareQoderRequest(options, userId, translatedMessages, model, attachments, tracker, identityScope, hostRun);
 	return {
 		request_id: prepared.requestId,
 		request_set_id: prepared.requestSetId,
@@ -3391,14 +3475,18 @@ async function* parseQoderChunks(stream, decodeFrame, options = {}, behavior = {
 			} else {
 				options.onActivity?.();
 				buffer += decoder.decode(value, { stream: true });
-				if (buffer.length > maxBufferChars) throw malformed$1("Qoder SSE frame exceeded its size limit.");
 			}
 			while (!sawDone) {
 				const lineEnd = buffer.indexOf("\n");
-				if (lineEnd === -1) break;
+				if (lineEnd === -1) {
+					const pending = buffer.endsWith("\r") ? buffer.slice(0, -1) : buffer;
+					if ((pending.startsWith("data:") ? eventDataChars + pending.slice(pending.startsWith("data: ") ? 6 : 5).length + 1 : pending.length) > maxBufferChars) throw malformed$1("Qoder SSE frame exceeded its size limit.");
+					break;
+				}
 				let line = buffer.substring(0, lineEnd);
 				buffer = buffer.substring(lineEnd + 1);
 				if (line.endsWith("\r")) line = line.slice(0, -1);
+				if (!line.startsWith("data:") && line.length > maxBufferChars) throw malformed$1("Qoder SSE frame exceeded its size limit.");
 				if (line.startsWith("event:")) {
 					eventType = line.substring(6).trim();
 					continue;
@@ -3673,13 +3761,11 @@ function parseQoderSse(stream, options = {}) {
 }
 //#endregion
 //#region src/qoder/transport/chat.ts
-/** Qoder chat request encoding, queue recovery, timeout lifecycle, and SSE streaming. */
 function aborted$1(message) {
 	return new QoderLlmError(message, "ABORTED");
 }
 async function* streamQoderChat(options, model, credentials, messages, dependencies) {
-	const identityScope = options.purpose === void 0 && dependencies.hostRunId !== void 0 ? JSON.stringify([dependencies.region, dependencies.hostRunId]) : dependencies.region;
-	const request = await buildQoderRequestBody(options, credentials.userID, messages, model, void 0, void 0, identityScope);
+	const request = await buildQoderRequestBody(options, credentials.userID, messages, model, void 0, void 0, dependencies.region, dependencies.hostRun);
 	request.session_type = dependencies.region === "china" ? "qoderclicn" : "qodercli";
 	const startedAt = performance.now();
 	let activeCredentials = credentials;
@@ -4113,7 +4199,6 @@ function parseModelServerSse(stream, options = {}) {
 }
 //#endregion
 //#region src/qoder/transport/model-server.ts
-/** Bearer-authenticated model-server HTTP SSE transport. */
 /** Convert the shared Qoder turn into the model-server's OpenAI-shaped request. */
 function modelServerBody(request) {
 	return {
@@ -4138,8 +4223,7 @@ function modelServerBody(request) {
 	};
 }
 async function* streamModelServerChat(options, model, credentials, messages, dependencies) {
-	const identityScope = options.purpose === void 0 && dependencies.hostRunId !== void 0 ? JSON.stringify([dependencies.region, dependencies.hostRunId]) : dependencies.region;
-	const request = await prepareQoderRequest(options, credentials.userID, messages, model, void 0, void 0, identityScope);
+	const request = await prepareQoderRequest(options, credentials.userID, messages, model, void 0, void 0, dependencies.region, dependencies.hostRun);
 	const body = JSON.stringify(modelServerBody(request));
 	const startedAt = performance.now();
 	dependencies.logger?.debug?.("[Qoder Stream] Request context", {
@@ -4418,21 +4502,10 @@ var DefaultQoderTransport = class {
 	}
 	async readAccount(options) {
 		const lease = await this.lease(options?.signal);
-		let used;
-		const read = (force = options?.force) => this.usage.readWithCredentials(lease.key, async (signal) => {
-			used = await lease.resolve(signal);
-			return used;
-		}, {
-			force,
-			signal: options?.signal
+		return this.usage.readWithCredentials(lease.key, (signal) => lease.resolve(signal), {
+			...options,
+			refresh: (rejected, signal) => lease.resolve(signal, rejected.authToken)
 		});
-		try {
-			return await read();
-		} catch (error) {
-			if (!(error instanceof QoderLlmError) || error.code !== "AUTH" || !used) throw error;
-			await lease.resolve(options?.signal, used.authToken);
-			return read(true);
-		}
 	}
 	async searchWeb(request, signal) {
 		const lease = await this.lease(signal);
@@ -4470,7 +4543,7 @@ var DefaultQoderTransport = class {
 	async *generate(options, model) {
 		if (options.signal?.aborted) throw aborted("Request was aborted prior to generation.");
 		const queueOwner = options.sessionId === void 0 ? void 0 : this.captureQueueLeaseOwner?.(String(options.sessionId));
-		validateQoderRequestShape(options, model);
+		validateQoderRequestShape(options, model, this.attachments);
 		const lease = await this.lease(options.signal);
 		const credentials = await lease.resolve(options.signal);
 		this.credentialLeases.set(credentials, lease);
@@ -4489,7 +4562,7 @@ var DefaultQoderTransport = class {
 			streamIdleTimeoutMs: this.streamIdleTimeoutMs,
 			modelQueueMaxWaitMs: this.modelQueueMaxWaitMs,
 			onQueueUpdate: this.onQueueUpdate,
-			hostRunId: queueOwner?.runId,
+			hostRun: queueOwner?.run,
 			onQueueLease: queueOwner?.retain,
 			resolveCredentials: async (refresh, signal) => {
 				const current = await lease.resolve(signal);
@@ -4592,7 +4665,7 @@ var QoderQueueLeases = class {
 		this.end(sessionId);
 		this.runs.set(sessionId, {
 			turn,
-			runId: randomUUID(),
+			run: Object.freeze({ id: randomUUID() }),
 			leases: /* @__PURE__ */ new Map()
 		});
 	}
@@ -4607,7 +4680,7 @@ var QoderQueueLeases = class {
 		const owner = this.runs.get(sessionId);
 		if (!owner || this.disposed) return void 0;
 		return {
-			runId: owner.runId,
+			run: owner.run,
 			retain: (lease) => lease.sessionId === sessionId && this.runs.get(sessionId) === owner && this.retain(lease)
 		};
 	};
@@ -4648,6 +4721,47 @@ var QoderQueueStatusStore = class {
 	}
 };
 //#endregion
+//#region src/dsh/transport-runtime.ts
+function transportConfig(value) {
+	return {
+		region: value.region ?? "global",
+		streamIdleTimeoutMs: value.streamIdleTimeoutMs ?? 3e5,
+		responseHeaderTimeoutMs: value.responseHeaderTimeoutMs ?? 6e4,
+		modelQueueMaxWaitMs: value.modelQueueMaxWaitMs ?? 36e5,
+		preserveThinking: value.preserveThinking ?? true,
+		requestCompression: value.requestCompression ?? false,
+		modelTransport: value.modelTransport ?? "legacy"
+	};
+}
+var QoderTransportRuntime = class {
+	snapshot;
+	constructor(value, factory) {
+		this.create = factory;
+		const config = Object.freeze(transportConfig(value));
+		this.snapshot = {
+			config,
+			transport: this.create(config)
+		};
+	}
+	create;
+	get config() {
+		return this.snapshot.config;
+	}
+	get transport() {
+		return this.snapshot.transport;
+	}
+	update(value, force = false) {
+		const config = Object.freeze(transportConfig(value));
+		if (!force && Object.keys(config).every((key) => config[key] === this.config[key])) return false;
+		const transport = this.create(config);
+		this.snapshot = {
+			config,
+			transport
+		};
+		return true;
+	}
+};
+//#endregion
 //#region src/dsh/catalog-lifecycle.ts
 /** Region-scoped Qoder model discovery, effective catalogs, and advisory persistence. */
 var QoderCatalogLifecycle = class {
@@ -4722,10 +4836,11 @@ var QoderCatalogLifecycle = class {
 			return;
 		}
 	}
-	/** Explicit discovery supersedes older work as soon as it starts, even if it fails. */
+	/** Active discovery supersedes older work; a foreign transport is an isolated preview. */
 	discover(signal, requestTransport) {
 		if (this.disposed || signal?.aborted) return Promise.reject(new QoderLlmError("Qoder model discovery was aborted.", "ABORTED"));
 		this.observeTransport();
+		if (requestTransport && requestTransport !== this.activeTransport) return requestTransport.discoverModels(signal);
 		const region = this.options.region();
 		const state = this.catalogs[region];
 		const transport = this.activeTransport;
@@ -4863,6 +4978,9 @@ var QoderAdapter = class extends LlmAdapter {
 			});
 		} catch {}
 	}
+	forgetSession(sessionId) {
+		for (const key of this.sessionTiers.keys()) if (JSON.parse(key)[1] === sessionId) this.sessionTiers.delete(key);
+	}
 	subscribeSessionTiers(listener) {
 		this.tierListeners.add(listener);
 		return () => {
@@ -5119,12 +5237,21 @@ function registerQoderRpc(ctx, handler, subscribeTiers) {
 	const registry = ctx.connection?.fetch;
 	if (typeof registry?.register !== "function") throw new Error("provider-qoder: connection exposes no exact Fetch route registry");
 	const streams = /* @__PURE__ */ new Set();
-	const disposers = qoderRpcEndpoints.map((endpoint) => registry.register({
-		path: qoderRpcPath(endpoint),
-		methods: ["POST"],
-		requestBody: "buffered",
-		fetch: (request) => endpoint === "sessionTierEvents" && subscribeTiers ? Promise.resolve(sessionTierEvents(request, subscribeTiers, streams)) : handleQoderRpcRequest(endpoint, handler, request)
-	}));
+	const disposers = [];
+	try {
+		for (const endpoint of qoderRpcEndpoints) disposers.push(registry.register({
+			path: qoderRpcPath(endpoint),
+			methods: ["POST"],
+			requestBody: "buffered",
+			fetch: (request) => endpoint === "sessionTierEvents" && subscribeTiers ? Promise.resolve(sessionTierEvents(request, subscribeTiers, streams)) : handleQoderRpcRequest(endpoint, handler, request)
+		}));
+	} catch (error) {
+		for (const close of streams) close();
+		for (const dispose of disposers.reverse()) try {
+			Promise.resolve(dispose()).catch(() => {});
+		} catch {}
+		throw error;
+	}
 	return () => {
 		for (const close of streams) close();
 		for (const dispose of disposers) dispose();
@@ -5556,59 +5683,31 @@ function apply(ctx, input = {}) {
 	const logger = ctx.logger;
 	const initialRegion = config.region ?? "global";
 	const baseConfig = {
-		region: initialRegion,
+		...transportConfig(config),
 		modelsByRegion: { ...config.modelsByRegion },
-		streamIdleTimeoutMs: config.streamIdleTimeoutMs ?? 3e5,
-		responseHeaderTimeoutMs: config.responseHeaderTimeoutMs ?? 6e4,
-		modelQueueMaxWaitMs: config.modelQueueMaxWaitMs ?? 36e5,
-		preserveThinking: config.preserveThinking ?? true,
-		webSearchMode: config.webSearchMode ?? "auto",
-		requestCompression: config.requestCompression ?? false,
-		modelTransport: config.modelTransport ?? "legacy"
+		webSearchMode: config.webSearchMode ?? "auto"
 	};
 	let current = () => baseConfig;
 	let authorization;
-	const createTransport = (region, streamIdleTimeoutMs, responseHeaderTimeoutMs, preserveThinking, resolvePat) => createQoderTransport({
-		region,
+	const createTransport = (value, resolvePat) => createQoderTransport({
+		...value,
 		resolvePat: resolvePat ?? (() => resolveManagedQoderPat(ctx.credentials)),
-		resolveCredential: resolvePat ? void 0 : (signal) => authorization.lease(region, signal),
-		requestCompression: current().requestCompression ?? false,
-		modelTransport: current().modelTransport ?? "legacy",
+		resolveCredential: resolvePat ? void 0 : (signal) => authorization.lease(value.region, signal),
 		logger,
-		streamIdleTimeoutMs,
-		responseHeaderTimeoutMs,
 		attachments: ctx.attachments,
-		preserveThinking,
-		modelQueueMaxWaitMs: current().modelQueueMaxWaitMs ?? 36e5,
 		onQueueUpdate: queueStatus.update,
 		captureQueueLeaseOwner: leases.capture
 	});
 	const resolveConfig = () => {
 		const value = current();
-		const region = value.region ?? "global";
+		const transport = transportConfig(value);
 		return {
-			region,
-			models: modelsFor(value, region),
-			streamIdleTimeoutMs: value.streamIdleTimeoutMs ?? 3e5,
-			responseHeaderTimeoutMs: value.responseHeaderTimeoutMs ?? 6e4,
-			modelQueueMaxWaitMs: value.modelQueueMaxWaitMs ?? 36e5,
-			preserveThinking: value.preserveThinking ?? true,
-			webSearchMode: value.webSearchMode ?? "auto",
-			requestCompression: value.requestCompression ?? false,
-			modelTransport: value.modelTransport ?? "legacy"
+			...transport,
+			models: modelsFor(value, transport.region),
+			webSearchMode: value.webSearchMode ?? "auto"
 		};
 	};
-	const initial = resolveConfig();
-	let activeTransport = createTransport(initial.region, initial.streamIdleTimeoutMs, initial.responseHeaderTimeoutMs, initial.preserveThinking);
-	let activeTransportConfig = {
-		region: initial.region,
-		streamIdleTimeoutMs: initial.streamIdleTimeoutMs,
-		responseHeaderTimeoutMs: initial.responseHeaderTimeoutMs,
-		modelQueueMaxWaitMs: initial.modelQueueMaxWaitMs,
-		preserveThinking: initial.preserveThinking,
-		requestCompression: initial.requestCompression,
-		modelTransport: initial.modelTransport
-	};
+	const runtime = new QoderTransportRuntime(current(), createTransport);
 	const authorizationTransports = /* @__PURE__ */ new Map();
 	authorization = new QoderBrowserAuthorizationManager({
 		credentials: ctx.credentials,
@@ -5630,32 +5729,34 @@ function apply(ctx, input = {}) {
 	});
 	ctx.effect(() => () => authorization.dispose(), "provider-qoder: browser authorization lifecycle");
 	const catalog = new QoderCatalogLifecycle({
-		resolveTransport: () => activeTransport,
-		region: () => activeTransportConfig.region,
+		resolveTransport: () => runtime.transport,
+		region: () => runtime.config.region,
 		configuredModels: (region) => modelsFor(current(), region),
 		onDiscovered: () => registration.replace([providerQoder]),
 		onPersistenceError: (error) => logger?.error?.("[Qoder Settings] Failed to synchronize model catalog", logError(error))
 	});
 	ctx.effect(() => () => catalog.dispose(), "provider-qoder: catalog lifecycle");
 	const adapter = new QoderAdapter({
-		resolveTransport: () => activeTransport,
+		resolveTransport: () => runtime.transport,
 		catalog,
-		region: () => activeTransportConfig.region,
+		region: () => runtime.config.region,
 		providerId: providerQoder,
 		providerName: "Qoder",
 		sessions: ctx.get("sessions"),
 		agents: ctx.get("agents")
 	});
+	ctx.on("session/disposed", (session) => adapter.forgetSession(session.id));
 	const registration = ctx.llm.registerAdapter([providerQoder], adapter);
 	const refreshAuthentication = () => {
 		const value = resolveConfig();
-		activeTransport = createTransport(value.region, value.streamIdleTimeoutMs, value.responseHeaderTimeoutMs, value.preserveThinking);
+		runtime.update(value, true);
+		authorization.activateRegion(runtime.config.region);
 		catalog.clearDiscovered();
 		catalog.observeTransport();
 		registration.replace([providerQoder]);
 	};
 	ctx.on("credentials/record-updated", (key) => {
-		if (key === browserAuthorizationKey(activeTransportConfig.region)) {
+		if (key === browserAuthorizationKey(runtime.config.region)) {
 			refreshAuthentication();
 			catalog.refresh();
 		}
@@ -5665,19 +5766,7 @@ function apply(ctx, input = {}) {
 	});
 	const refreshAdapter = () => {
 		const next = resolveConfig();
-		if (next.region !== activeTransportConfig.region || next.streamIdleTimeoutMs !== activeTransportConfig.streamIdleTimeoutMs || next.responseHeaderTimeoutMs !== activeTransportConfig.responseHeaderTimeoutMs || next.modelQueueMaxWaitMs !== activeTransportConfig.modelQueueMaxWaitMs || next.requestCompression !== activeTransportConfig.requestCompression || next.modelTransport !== activeTransportConfig.modelTransport || next.preserveThinking !== activeTransportConfig.preserveThinking) {
-			authorization.activateRegion(next.region);
-			activeTransport = createTransport(next.region, next.streamIdleTimeoutMs, next.responseHeaderTimeoutMs, next.preserveThinking);
-			activeTransportConfig = {
-				region: next.region,
-				streamIdleTimeoutMs: next.streamIdleTimeoutMs,
-				responseHeaderTimeoutMs: next.responseHeaderTimeoutMs,
-				modelQueueMaxWaitMs: next.modelQueueMaxWaitMs,
-				preserveThinking: next.preserveThinking,
-				requestCompression: next.requestCompression,
-				modelTransport: next.modelTransport
-			};
-		}
+		if (runtime.update(next)) authorization.activateRegion(runtime.config.region);
 		catalog.observeTransport();
 		adapter.replaceModels(next.models);
 		registration.replace([providerQoder]);
@@ -5716,7 +5805,12 @@ function apply(ctx, input = {}) {
 	const discoverModels = async (signal, suppliedPat) => {
 		const snapshot = resolveConfig();
 		const normalizedPat = suppliedPat?.trim();
-		const transport = normalizedPat ? createTransport(snapshot.region, snapshot.streamIdleTimeoutMs, snapshot.responseHeaderTimeoutMs, snapshot.preserveThinking, () => Promise.resolve(normalizedPat)) : activeTransport;
+		const transport = runtime.transport;
+		if (normalizedPat) {
+			const view = await authorization.describe(snapshot.region);
+			const managedPat = await resolveManagedQoderPat(ctx.credentials);
+			if (view.method !== "pat" || normalizedPat !== managedPat.trim() || transport !== runtime.transport) return createTransport(transportConfig(snapshot), () => Promise.resolve(normalizedPat)).discoverModels(signal);
+		}
 		return catalog.discover(signal, transport);
 	};
 	ctx.llm.registerModelDiscovery(settingsNamespace, async (request, signal) => {
@@ -5785,7 +5879,7 @@ function apply(ctx, input = {}) {
 		}
 		const force = typeof payload === "object" && payload !== null && "force" in payload ? payload.force === true : false;
 		logger?.debug?.("[Qoder RPC] Reading subscriber account", { force });
-		const outcome = await executeRpc("load Qoder account", () => activeTransport.readAccount({
+		const outcome = await executeRpc("load Qoder account", () => runtime.transport.readAccount({
 			force,
 			signal
 		}), signal, logger);
@@ -5800,7 +5894,7 @@ function apply(ctx, input = {}) {
 	ctx.inject(["web"], (webCtx) => {
 		const searchProvider = new QoderSearchProvider({
 			ctx,
-			resolveTransport: () => activeTransport,
+			resolveTransport: () => runtime.transport,
 			getWebSearchMode: () => resolveConfig().webSearchMode ?? "auto"
 		});
 		webCtx.web.registerSearchProvider(searchProvider);

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-provider-qoder",
   "description": "Global Qoder subscription adapter for the DeepSeek Harness LLM seam",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "publishConfig": {
     "access": "public"
   },