dsh-qoder-connect 0.2.6 → 0.2.8

package/lib/index.js

@@ -1,7 +1,7 @@
-import { A as QoderCatalog, B as QODER_PAT_ENV_GLOBAL, C as getMachineId, D as QoderCatalogStore, E as randomSentinel, F as QODER_PROBE_PATH, G as QODER_DATA_DIR_ENV, H as patTail, I as QODER_SETTINGS_FACE_PATH, J as qoderMachineIdPath, K as QODER_DATA_DIR_NAME, L as QODER_STATUS_PATH, M as QODER_GLOBAL_AUTH_PATH, N as QODER_GLOBAL_PROBE_PATH, O as qoderCatalogPath, P as QODER_GLOBAL_STATUS_PATH, R as QODER_AUTH_FILENAME, S as utc8WallClock, T as probeModel, U as qoderCredentialIdentity, V as QoderCredentialStore, W as qoderOwnAuthPath, X as qoderStateDir, Y as qoderPluginDataDir, _ as modelInfoOf, a as QODER_HOST_HEARTBEAT_FILENAME, b as createQoderTransport, c as processStartTimeMs, d as writeHostHeartbeat, f as QODER_CONNECT_VERSION, g as kindFromQoderFailure, h as classifyUpstreamError, i as variantFor, j as QODER_AUTH_PATH, k as FALLBACK_QODER_MODELS, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as KIND_STATUS, q as configurePluginPaths, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, v as normalizeCredits, w as PROBE_EFFORT_CANDIDATES, x as formatUtc8Date, y as validateApiKey, z as QODER_PAT_ENV_CN } from "./variants-COxX6r1j.js";
+import { $ as configurePluginPaths, A as probeModel, B as QODER_PROBE_PATH, C as normalizeCredits, D as utc8WallClock, E as formatUtc8Date, F as QoderCatalog, G as QODER_PAT_ENV_GLOBAL, H as QODER_STATUS_PATH, I as QODER_AUTH_PATH, J as qoderCredentialId, K as QoderCredentialStore, L as QODER_GLOBAL_AUTH_PATH, M as QoderCatalogStore, N as qoderCatalogPath, O as getMachineId, P as FALLBACK_QODER_MODELS, Q as QODER_DATA_DIR_NAME, R as QODER_GLOBAL_PROBE_PATH, S as modelInfoOf, T as createQoderTransport, U as QODER_AUTH_FILENAME, V as QODER_SETTINGS_FACE_PATH, W as QODER_PAT_ENV_CN, X as qoderOwnAuthPath, Y as qoderCredentialIdentity, Z as QODER_DATA_DIR_ENV, _ as qoderProbePath, a as QODER_HOST_HEARTBEAT_FILENAME, b as classifyUpstreamError, c as processStartTimeMs, d as writeHostHeartbeat, et as qoderMachineIdPath, f as QODER_CONNECT_VERSION, g as newestFirst, h as fingerprintModel, i as variantFor, j as randomSentinel, k as PROBE_EFFORT_CANDIDATES, l as qoderHostHeartbeatPath, m as QoderProbeStore, n as GLOBAL_VARIANT, o as clearHostHeartbeat, p as QODER_PROBE_FILENAME, q as patTail, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, tt as qoderPluginDataDir, u as readHostHeartbeat, v as KIND_STATUS, w as validateApiKey, x as kindFromQoderFailure, y as QoderUpstreamClient, z as QODER_GLOBAL_STATUS_PATH } from "./variants-Dl1AbWre.js";
 import z from "@deepseek-ai/schemastery";
-import { createHash, randomBytes, timingSafeEqual } from "node:crypto";
-import { dirname, join, resolve } from "node:path";
+import { randomBytes, timingSafeEqual } from "node:crypto";
+import { dirname, join } from "node:path";
 import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
 import { createProvider } from "@earendil-works/pi-ai";
 import { openAICompletionsApi } from "@earendil-works/pi-ai/api/openai-completions.lazy";
@@ -60,7 +60,8 @@ function originIsLoopback(origin) {
 //#endregion
 //#region src/auth-route.ts
 /**
-* PAT route: saves (validate-then-persist) or clears one variant's token.
+* PAT route: saves (validate-then-persist), switches, removes, or clears the
+* tokens of one variant.
 *
 * The state-changing endpoints the plugin exposes share one guard shape — a
 * loopback Host and Origin, plus the in-process key the card receives with its
@@ -111,9 +112,20 @@ function parseRequest(text) {
 	if (action === "save-pat") {
 		const pat = wrapped["pat"];
 		if (typeof pat !== "string" || pat.trim() === "") return void 0;
+		const label = wrapped["label"];
+		if (label !== void 0 && (typeof label !== "string" || label.length > 200)) return void 0;
 		return {
 			action,
-			pat
+			pat,
+			...label === void 0 ? {} : { label }
+		};
+	}
+	if (action === "activate" || action === "remove") {
+		const id = wrapped["id"];
+		if (typeof id !== "string" || id.trim() === "") return void 0;
+		return {
+			action,
+			id: id.trim()
 		};
 	}
 }
@@ -143,7 +155,7 @@ function keyMatches$1(expected, presented) {
 * The PAT route's handler, extracted so tests can mount it on a bare server
 * with a known key.
 *
-* @param deps - the save/clear operations for one variant.
+* @param deps - the save/activate/remove/clear operations for one variant.
 * @param key - the in-process control key this route requires.
 * @returns the Node request handler.
 */
@@ -177,7 +189,15 @@ function qoderAuthHandler(deps, key) {
 				json$2(res, 200, { ok: true });
 				return;
 			}
-			json$2(res, 200, await deps.save(request.pat));
+			if (request.action === "activate") {
+				json$2(res, 200, await deps.activate(request.id));
+				return;
+			}
+			if (request.action === "remove") {
+				json$2(res, 200, await deps.remove(request.id));
+				return;
+			}
+			json$2(res, 200, await deps.save(request.pat, request.label));
 		} catch (error) {
 			json$2(res, 200, {
 				ok: false,
@@ -201,6 +221,245 @@ function registerQoderAuthRoute(ctx, deps, key) {
 	}, "dsh-qoder-connect: PAT route");
 }
 //#endregion
+//#region src/shim.ts
+/**
+* Loopback OpenAI-compatible endpoint. The pi-ai provider points here; the
+* shim guards the local boundary and hands the raw JSON body to the upstream
+* client, which translates it onto the Qoder transport. It binds 127.0.0.1
+* only and never serves another interface.
+*
+* Inbound hardening: the loopback bind alone is not a trust boundary (any
+* local process or a DNS-rebinding page can reach 127.0.0.1), so every
+* request must carry a loopback Host header, browser-sent Origins must be
+* loopback, chat POSTs must be application/json, and the Authorization
+* header must carry the shim's per-process shared secret. The plugin's
+* own client satisfies all four by construction; local attackers cannot
+* read the secret out of the plugin process's memory.
+*
+* @module dsh-qoder-connect/shim
+*/
+const REQUEST_BODY_LIMIT = 67108864;
+/** Chat-completion POSTs must carry a JSON body type (simple-request CSRF drops here). */
+function isJsonContentType(req) {
+	const type = req.headers["content-type"];
+	return typeof type === "string" && type.trim().toLowerCase().startsWith("application/json");
+}
+function writeJson(res, status, body, headers = {}) {
+	const payload = JSON.stringify(body);
+	res.writeHead(status, {
+		"Content-Type": "application/json",
+		"Content-Length": Buffer.byteLength(payload),
+		...headers
+	});
+	res.end(payload);
+}
+/**
+* The prefix the shim stamps onto a failure message carrying an upstream retry
+* hint.
+*
+* The hint has to cross two text-only boundaries to reach the harness retry
+* policy: pi-ai flattens an HTTP failure to its message and the adapter may only
+* rewrite that message. So the marker is written here, in front of the 400-byte
+* excerpt (never inside it, where truncation could cut it off), and read back by
+* {@link retryAfterFromMessage}.
+*/
+const RETRY_AFTER_TAG = /\[retry-after=(\d+)s\]/u;
+/**
+* The upstream's retry hint, in milliseconds, recovered from a shim failure
+* message.
+*
+* The tagged form is the contract this plugin writes itself. The untagged
+* `retryAfterSeconds` form is the fallback for a message the transport built
+* before the tag existed (an installed older shim, or a caller that composed the
+* message itself), and is the same field {@link qoderQueueSignal} reads.
+*/
+function retryAfterFromMessage(message) {
+	const tagged = RETRY_AFTER_TAG.exec(message);
+	if (tagged !== null) {
+		const seconds = Number(tagged[1]);
+		return Number.isFinite(seconds) && seconds > 0 ? seconds * 1e3 : void 0;
+	}
+	const body = /"retryAfterSeconds"\s*:\s*(\d+)/u.exec(message);
+	if (body !== null) {
+		const seconds = Number(body[1]);
+		return Number.isFinite(seconds) && seconds > 0 ? seconds * 1e3 : void 0;
+	}
+}
+/**
+* Seconds an OpenAI `Retry-After` header carries: the ceiling of the hint, so a
+* client that honors it never returns before the upstream's window closed.
+*/
+function retryAfterSeconds(retryAfterMs) {
+	return Math.max(1, Math.ceil(retryAfterMs / 1e3));
+}
+function writeOpenAIError(res, status, kind, message, retryAfterMs) {
+	const hint = typeof retryAfterMs === "number" && Number.isFinite(retryAfterMs) && retryAfterMs > 0 ? Math.floor(retryAfterMs) : void 0;
+	if (hint === void 0) {
+		writeJson(res, status, { error: {
+			message,
+			type: kind,
+			code: kind
+		} });
+		return;
+	}
+	const seconds = retryAfterSeconds(hint);
+	writeJson(res, status, { error: {
+		message: `[retry-after=${seconds}s] ${message}`,
+		type: kind,
+		code: kind
+	} }, {
+		"Retry-After": String(seconds),
+		"retry-after-ms": String(hint)
+	});
+}
+/** Read a request body with a size cap; over-limit bodies fail the request. */
+function readBody$1(req) {
+	return new Promise((resolve, reject) => {
+		const chunks = [];
+		let size = 0;
+		req.on("data", (chunk) => {
+			size += chunk.length;
+			if (size > REQUEST_BODY_LIMIT) {
+				reject(/* @__PURE__ */ new Error("request body too large"));
+				req.destroy();
+				return;
+			}
+			chunks.push(chunk);
+		});
+		req.on("end", () => resolve(Buffer.concat(chunks)));
+		req.on("error", reject);
+	});
+}
+/**
+* Start the loopback endpoint. Requests carry any bearer; the loopback bind
+* is the boundary, and the upstream credential comes from the store alone.
+*/
+function createQoderShim(options) {
+	const { store, client, catalog } = options;
+	const logger = options.logger;
+	const providerId = options.providerId;
+	const SHARED_SECRET = randomBytes(32).toString("base64url");
+	/** Constant-time bearer check; absent or mismatched bearers are rejected. */
+	function bearerOk(req) {
+		const header = req.headers.authorization;
+		if (typeof header !== "string") return false;
+		const match = /^Bearer\s+(.+)$/i.exec(header.trim());
+		if (match === null) return false;
+		const presented = match[1];
+		const expected = SHARED_SECRET;
+		const a = Buffer.from(presented);
+		const b = Buffer.from(expected);
+		if (a.length !== b.length) return false;
+		return timingSafeEqual(a, b);
+	}
+	const server = createServer((req, res) => {
+		handle(req, res).catch((error) => {
+			logger?.warn("dsh-qoder-connect: loopback request failed", error);
+			try {
+				if (!res.headersSent) writeOpenAIError(res, 500, "internal", "loopback request failed");
+				else res.end();
+			} catch {}
+		});
+	});
+	const ready = new Promise((resolve, reject) => {
+		server.once("listening", () => resolve());
+		server.once("error", reject);
+	});
+	server.listen(0, "127.0.0.1");
+	const baseUrl = () => {
+		const address = server.address();
+		if (address === null || typeof address === "string") throw new Error(`${providerId} shim has no listening address`);
+		return `http://127.0.0.1:${address.port}`;
+	};
+	async function handle(req, res) {
+		try {
+			if (!hostIsLoopback(req.headers.host)) {
+				writeOpenAIError(res, 403, "host_not_allowed", "Host header must name the loopback interface");
+				return;
+			}
+			if (!originIsLoopback(req.headers.origin)) {
+				writeOpenAIError(res, 403, "origin_not_allowed", "Origin must be a loopback origin");
+				return;
+			}
+			if (!bearerOk(req)) {
+				writeOpenAIError(res, 401, "unauthorized", "missing or invalid Authorization bearer");
+				return;
+			}
+			const url = req.url ?? "/";
+			if (req.method === "GET" && (url === "/healthz" || url === "/healthz/")) {
+				writeJson(res, 200, { ok: true });
+				return;
+			}
+			if (req.method === "GET" && (url === "/v1/models" || url === "/v1/models/")) {
+				writeJson(res, 200, {
+					object: "list",
+					data: catalog.current().map((model) => ({
+						id: model.id,
+						object: "model",
+						created: 0,
+						owned_by: providerId
+					}))
+				});
+				return;
+			}
+			if (req.method === "POST" && (url === "/v1/chat/completions" || url === "/v1/chat/completions/")) {
+				await chatCompletions(req, res);
+				return;
+			}
+			writeOpenAIError(res, 404, "not_found", `no such route: ${req.method} ${url}`);
+		} catch (error) {
+			if (!res.headersSent) writeOpenAIError(res, 500, "internal", String(error));
+			else res.end();
+		}
+	}
+	async function chatCompletions(req, res) {
+		if (!isJsonContentType(req)) {
+			writeOpenAIError(res, 415, "unsupported_media_type", "Content-Type must be application/json");
+			return;
+		}
+		try {
+			await store.resolve();
+		} catch (error) {
+			writeOpenAIError(res, KIND_STATUS.missing_credential, "not_signed_in", String(error));
+			return;
+		}
+		const raw = (await readBody$1(req)).toString("utf8");
+		const controller = new AbortController();
+		req.on("close", () => controller.abort());
+		const result = await client.chatStream(raw, controller.signal);
+		if (!result.ok) {
+			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `${providerId} upstream ${result.kind} (http ${KIND_STATUS[result.kind]}): ${result.message.slice(0, 400)}`, result.retryAfterMs);
+			return;
+		}
+		res.writeHead(200, {
+			"Content-Type": "text/event-stream",
+			"Cache-Control": "no-cache",
+			"Connection": "keep-alive",
+			"X-Accel-Buffering": "no"
+		});
+		let sawDone = false;
+		const body = Readable.fromWeb(result.response.body);
+		body.on("data", (chunk) => {
+			if (chunk.includes("[DONE]")) sawDone = true;
+		});
+		body.on("error", (error) => {
+			logger?.warn("dsh-qoder-connect: upstream stream failed mid-flight", error);
+			if (!sawDone && res.writable) res.end("data: [DONE]\n\n");
+		});
+		body.pipe(res);
+	}
+	return {
+		ready,
+		baseUrl,
+		token: () => SHARED_SECRET,
+		close: () => new Promise((resolve, reject) => {
+			server.close(() => resolve());
+			server.closeAllConnections();
+			server.once("error", reject);
+		})
+	};
+}
+//#endregion
 //#region src/adapter.ts
 /**
 * The Qoder pi-ai provider: one loopback-backed adapter per variant route,
@@ -472,6 +731,64 @@ var QoderPiAiAdapter = class QoderPiAiAdapter extends PiAiAdapter {
 		};
 	}
 	/**
+	* Carry the upstream's retry hint onto the finish failure.
+	*
+	* `dsh-llm-pi-ai` maps a failed pi-ai turn onto `{ message, code }` before the
+	* chunk reaches the loop: the HTTP status and headers pi-ai's own error object
+	* still holds are flattened away, so `failure.providerRetryAfterMs` — the one
+	* field the harness retry policy honors — never arrives. The policy then falls
+	* back to its local backoff, which is capped (20s in the report that prompted
+	* this) below Qoder's 30-second queue answer, so every retry hits the same
+	* closed window.
+	*
+	* The shim stamps `[retry-after=<n>s]` in front of its error message for this
+	* layer to recover; see `retryAfterFromMessage`. Rewriting only the field,
+	* never the message, keeps the text a human reads unchanged.
+	*
+	* Both entry points are wrapped because `PiAiAdapter` has two of them and the
+	* harness uses the other one: `prepareCall()` returns
+	* `stream: (options) => this.streamWithSnapshot(options, snapshot)`, which
+	* never calls `this.stream`. Overriding `stream` alone is dead code on every
+	* harness request (verified against a live session log: the finish failure
+	* arrived as bare `{ message, code }` while a direct `adapter.stream()` call
+	* carried the hint).
+	*/
+	async *stream(options) {
+		yield* this.withRetryHint(super.stream(options));
+	}
+	async prepareCall(provider, model, signal) {
+		const prepared = await super.prepareCall(provider, model, signal);
+		return {
+			...prepared,
+			stream: (options) => this.withRetryHint(prepared.stream(options))
+		};
+	}
+	/** Re-stamp `failure.providerRetryAfterMs` on every terminal failure chunk. */
+	async *withRetryHint(inner) {
+		for await (const chunk of inner) {
+			if (chunk.type === "finish") {
+				const { reason } = chunk;
+				if ((reason.kind === "error" || reason.kind === "aborted") && reason.failure.providerRetryAfterMs === void 0) {
+					const retryAfterMs = retryAfterFromMessage(reason.failure.message);
+					if (retryAfterMs !== void 0) {
+						yield {
+							...chunk,
+							reason: {
+								...reason,
+								failure: {
+									...reason.failure,
+									providerRetryAfterMs: retryAfterMs
+								}
+							}
+						};
+						continue;
+					}
+				}
+			}
+			yield chunk;
+		}
+	}
+	/**
 	* Resolve the request-image projection target for one route.
 	*
 	* `dsh-llm` 0.2.1 added `LlmAdapter.imageRequestTarget()` and its runtime calls
@@ -497,389 +814,6 @@ var QoderPiAiAdapter = class QoderPiAiAdapter extends PiAiAdapter {
 	}
 };
 //#endregion
-//#region src/shim.ts
-/**
-* Loopback OpenAI-compatible endpoint. The pi-ai provider points here; the
-* shim guards the local boundary and hands the raw JSON body to the upstream
-* client, which translates it onto the Qoder transport. It binds 127.0.0.1
-* only and never serves another interface.
-*
-* Inbound hardening: the loopback bind alone is not a trust boundary (any
-* local process or a DNS-rebinding page can reach 127.0.0.1), so every
-* request must carry a loopback Host header, browser-sent Origins must be
-* loopback, chat POSTs must be application/json, and the Authorization
-* header must carry the shim's per-process shared secret. The plugin's
-* own client satisfies all four by construction; local attackers cannot
-* read the secret out of the plugin process's memory.
-*
-* @module dsh-qoder-connect/shim
-*/
-const REQUEST_BODY_LIMIT = 67108864;
-/** Chat-completion POSTs must carry a JSON body type (simple-request CSRF drops here). */
-function isJsonContentType(req) {
-	const type = req.headers["content-type"];
-	return typeof type === "string" && type.trim().toLowerCase().startsWith("application/json");
-}
-function writeJson(res, status, body) {
-	const payload = JSON.stringify(body);
-	res.writeHead(status, {
-		"Content-Type": "application/json",
-		"Content-Length": Buffer.byteLength(payload)
-	});
-	res.end(payload);
-}
-function writeOpenAIError(res, status, kind, message) {
-	writeJson(res, status, { error: {
-		message,
-		type: kind,
-		code: kind
-	} });
-}
-/** Read a request body with a size cap; over-limit bodies fail the request. */
-function readBody$1(req) {
-	return new Promise((resolve, reject) => {
-		const chunks = [];
-		let size = 0;
-		req.on("data", (chunk) => {
-			size += chunk.length;
-			if (size > REQUEST_BODY_LIMIT) {
-				reject(/* @__PURE__ */ new Error("request body too large"));
-				req.destroy();
-				return;
-			}
-			chunks.push(chunk);
-		});
-		req.on("end", () => resolve(Buffer.concat(chunks)));
-		req.on("error", reject);
-	});
-}
-/**
-* Start the loopback endpoint. Requests carry any bearer; the loopback bind
-* is the boundary, and the upstream credential comes from the store alone.
-*/
-function createQoderShim(options) {
-	const { store, client, catalog } = options;
-	const logger = options.logger;
-	const providerId = options.providerId;
-	const SHARED_SECRET = randomBytes(32).toString("base64url");
-	/** Constant-time bearer check; absent or mismatched bearers are rejected. */
-	function bearerOk(req) {
-		const header = req.headers.authorization;
-		if (typeof header !== "string") return false;
-		const match = /^Bearer\s+(.+)$/i.exec(header.trim());
-		if (match === null) return false;
-		const presented = match[1];
-		const expected = SHARED_SECRET;
-		const a = Buffer.from(presented);
-		const b = Buffer.from(expected);
-		if (a.length !== b.length) return false;
-		return timingSafeEqual(a, b);
-	}
-	const server = createServer((req, res) => {
-		handle(req, res).catch((error) => {
-			logger?.warn("dsh-qoder-connect: loopback request failed", error);
-			try {
-				if (!res.headersSent) writeOpenAIError(res, 500, "internal", "loopback request failed");
-				else res.end();
-			} catch {}
-		});
-	});
-	const ready = new Promise((resolve, reject) => {
-		server.once("listening", () => resolve());
-		server.once("error", reject);
-	});
-	server.listen(0, "127.0.0.1");
-	const baseUrl = () => {
-		const address = server.address();
-		if (address === null || typeof address === "string") throw new Error(`${providerId} shim has no listening address`);
-		return `http://127.0.0.1:${address.port}`;
-	};
-	async function handle(req, res) {
-		try {
-			if (!hostIsLoopback(req.headers.host)) {
-				writeOpenAIError(res, 403, "host_not_allowed", "Host header must name the loopback interface");
-				return;
-			}
-			if (!originIsLoopback(req.headers.origin)) {
-				writeOpenAIError(res, 403, "origin_not_allowed", "Origin must be a loopback origin");
-				return;
-			}
-			if (!bearerOk(req)) {
-				writeOpenAIError(res, 401, "unauthorized", "missing or invalid Authorization bearer");
-				return;
-			}
-			const url = req.url ?? "/";
-			if (req.method === "GET" && (url === "/healthz" || url === "/healthz/")) {
-				writeJson(res, 200, { ok: true });
-				return;
-			}
-			if (req.method === "GET" && (url === "/v1/models" || url === "/v1/models/")) {
-				writeJson(res, 200, {
-					object: "list",
-					data: catalog.current().map((model) => ({
-						id: model.id,
-						object: "model",
-						created: 0,
-						owned_by: providerId
-					}))
-				});
-				return;
-			}
-			if (req.method === "POST" && (url === "/v1/chat/completions" || url === "/v1/chat/completions/")) {
-				await chatCompletions(req, res);
-				return;
-			}
-			writeOpenAIError(res, 404, "not_found", `no such route: ${req.method} ${url}`);
-		} catch (error) {
-			if (!res.headersSent) writeOpenAIError(res, 500, "internal", String(error));
-			else res.end();
-		}
-	}
-	async function chatCompletions(req, res) {
-		if (!isJsonContentType(req)) {
-			writeOpenAIError(res, 415, "unsupported_media_type", "Content-Type must be application/json");
-			return;
-		}
-		try {
-			await store.resolve();
-		} catch (error) {
-			writeOpenAIError(res, KIND_STATUS.missing_credential, "not_signed_in", String(error));
-			return;
-		}
-		const raw = (await readBody$1(req)).toString("utf8");
-		const controller = new AbortController();
-		req.on("close", () => controller.abort());
-		const result = await client.chatStream(raw, controller.signal);
-		if (!result.ok) {
-			writeOpenAIError(res, KIND_STATUS[result.kind], result.kind, `${providerId} upstream ${result.kind} (http ${KIND_STATUS[result.kind]}): ${result.message.slice(0, 400)}`);
-			return;
-		}
-		res.writeHead(200, {
-			"Content-Type": "text/event-stream",
-			"Cache-Control": "no-cache",
-			"Connection": "keep-alive",
-			"X-Accel-Buffering": "no"
-		});
-		let sawDone = false;
-		const body = Readable.fromWeb(result.response.body);
-		body.on("data", (chunk) => {
-			if (chunk.includes("[DONE]")) sawDone = true;
-		});
-		body.on("error", (error) => {
-			logger?.warn("dsh-qoder-connect: upstream stream failed mid-flight", error);
-			if (!sawDone && res.writable) res.end("data: [DONE]\n\n");
-		});
-		body.pipe(res);
-	}
-	return {
-		ready,
-		baseUrl,
-		token: () => SHARED_SECRET,
-		close: () => new Promise((resolve, reject) => {
-			server.close(() => resolve());
-			server.closeAllConnections();
-			server.once("error", reject);
-		})
-	};
-}
-//#endregion
-//#region src/probe-store.ts
-/**
-* Local record of reasoning-effort probes.
-*
-* What this stores is an *observation*, never a claim about the upstream: a
-* model's row is only consulted when the catalog carries no explicit
-* `supportedEfforts` set, and it always loses to a declared set. The plan this
-* implements (`docs/reasoning-effort-probe-plan.md` §5) requires that a result
-* is invalidated whenever the model's catalog row changes, so every record
-* carries a fingerprint of the fields the probe depended on.
-*
-* The file lives in the plugin's own state directory, never beside the
-* product's files, and carries no token, prompt, or response body — only
-* model ids, effort spellings, and timestamps.
-*
-* @module dsh-qoder-connect/probe-store
-*/
-/** Basename of the China variant's probe record inside the plugin's state dir. */
-const QODER_PROBE_FILENAME = ".qoder-probe.json";
-/** On-disk format this reader accepts; other versions are discarded. */
-const PROBE_FORMAT_VERSION = 1;
-/**
-* How long an observation stays usable. Conservative on purpose: the plan's
-* whole argument is that upstream metadata moves fast, so a result that has
-* outlived its fingerprint's usefulness should not quietly keep granting a
-* picker entry.
-*/
-const DEFAULT_TTL_MS = 12096e5;
-/**
-* Plugin-owned probe record path inside the plugin's state directory.
-*
-* One file per variant. The two regions serve overlapping model ids with
-* different entitlements, and {@link fingerprintModel} covers only
-* `id`/`reasoning`/`supportsImages` — never the provider — so a single shared
-* file would let one variant's observation answer for the other. The paths
-* differ; the format does not.
-*/
-function qoderProbePath(filename = QODER_PROBE_FILENAME) {
-	return join(qoderStateDir(), filename);
-}
-/**
-* Fingerprint the catalog fields a probe depends on.
-*
-* Deliberately excludes display-only fields (`name`, `billing`, `contextWindow`)
-* so a rename or a rate relabel does not throw away a valid observation, and
-* deliberately includes the whole reasoning object so any change to the
-* declared shape re-probes.
-*/
-function fingerprintModel(info) {
-	const basis = JSON.stringify({
-		id: info.id,
-		reasoning: info.reasoning ?? null,
-		supportsImages: info.supportsImages ?? null
-	});
-	return createHash("sha256").update(basis).digest("hex").slice(0, 16);
-}
-/** Read-and-validate the documents on disk; anything malformed reads as empty. */
-function readDocument(path) {
-	if (!existsSync(path)) return void 0;
-	let parsed;
-	try {
-		parsed = JSON.parse(readFileSync(path, "utf8"));
-	} catch {
-		return;
-	}
-	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return void 0;
-	const wrapped = parsed;
-	if (wrapped["version"] !== PROBE_FORMAT_VERSION) return void 0;
-	const records = wrapped["records"];
-	if (typeof records !== "object" || records === null || Array.isArray(records)) return void 0;
-	return parsed;
-}
-/** One record's shape check; a bad row is dropped rather than trusted. */
-function isRecord(value) {
-	if (typeof value !== "object" || value === null || Array.isArray(value)) return false;
-	const wrapped = value;
-	const validation = wrapped["validation"];
-	if (validation !== "validating" && validation !== "non-validating" && validation !== "unknown") return false;
-	if (typeof wrapped["fingerprint"] !== "string") return false;
-	if (typeof wrapped["probedAtMs"] !== "number" || !Number.isFinite(wrapped["probedAtMs"])) return false;
-	if (typeof wrapped["pluginVersion"] !== "string") return false;
-	const efforts = wrapped["efforts"];
-	if (!Array.isArray(efforts) || efforts.some((effort) => typeof effort !== "string")) return false;
-	return true;
-}
-/**
-* The plugin's probe records: read once, written atomically, never trusted
-* across a fingerprint change or past the TTL.
-*/
-var QoderProbeStore = class {
-	path;
-	ttlMs;
-	pluginVersion;
-	now;
-	records;
-	constructor(options) {
-		const opts = typeof options === "string" ? {
-			path: options,
-			pluginVersion: "0.0.0"
-		} : options;
-		this.path = opts.path ?? qoderProbePath();
-		this.ttlMs = opts.ttlMs ?? DEFAULT_TTL_MS;
-		this.pluginVersion = opts.pluginVersion;
-		this.now = opts.now ?? (() => Date.now());
-	}
-	/** Resolved state-file path, for the CLI and tests. */
-	filePath() {
-		return this.path;
-	}
-	load() {
-		if (this.records === void 0) {
-			const document = readDocument(this.path);
-			const records = {};
-			for (const [id, record] of Object.entries(document?.records ?? {})) if (isRecord(record)) records[id] = record;
-			this.records = records;
-		}
-		return this.records;
-	}
-	/**
-	* The usable record for a model, or `undefined` when there is none, it is
-	* expired, it was taken against a different catalog row, or it belongs to a
-	* different account.
-	*
-	* @param account - the account in effect, as `uid:enterpriseId`. Records are
-	*   only returned for the account that produced them.
-	*/
-	get(modelId, fingerprint, account) {
-		const record = this.load()[modelId];
-		if (record === void 0) return void 0;
-		if (record.fingerprint !== fingerprint) return void 0;
-		if (record.account !== account) return void 0;
-		if (this.now() - record.probedAtMs > this.ttlMs) return void 0;
-		return record;
-	}
-	/**
-	* Store one observation. Only a decisive answer (`validating` /
-	* `non-validating`) replaces an existing decisive record: a transient
-	* `unknown` must not erase knowledge the user already paid for.
-	*/
-	set(modelId, record) {
-		const records = this.load();
-		const existing = records[modelId];
-		if (record.validation === "unknown" && existing !== void 0 && existing.fingerprint === record.fingerprint && existing.validation !== "unknown") return;
-		records[modelId] = record;
-		this.persist();
-	}
-	/** Drop every record; used by the card's explicit "clear" action. */
-	clear() {
-		this.records = {};
-		this.persist();
-	}
-	/** Every record currently held, for status display. */
-	all() {
-		return { ...this.load() };
-	}
-	/** Build a record stamped with this store's clock, version, and account. */
-	record(fingerprint, validation, efforts, account) {
-		return {
-			fingerprint,
-			validation,
-			efforts: validation === "validating" ? [...efforts] : [],
-			probedAtMs: this.now(),
-			pluginVersion: this.pluginVersion,
-			account
-		};
-	}
-	/**
-	* Write through a temporary file and rename, so a crash mid-write cannot
-	* leave a half-parsed document that reads as "no records" and silently drops
-	* every observation.
-	*/
-	persist() {
-		const directory = dirname(this.path);
-		try {
-			if (!existsSync(directory)) mkdirSync(directory, { recursive: true });
-			const document = {
-				version: PROBE_FORMAT_VERSION,
-				records: this.load()
-			};
-			const temporary = resolve(`${this.path}.tmp`);
-			writeFileSync(temporary, `${JSON.stringify(document, null, 2)}\n`, { mode: 384 });
-			renameSync(temporary, this.path);
-		} catch {}
-	}
-};
-/**
-* Order observations newest-first for display.
-*
-* The store keeps insertion order so the file reads chronologically, but the
-* card wants the most recent detection at the top: a sweep the user just ran
-* should not appear below every earlier one, which is what appending to an
-* insertion-ordered list does.
-*/
-function newestFirst(records) {
-	return [...records].sort((a, b) => b.probedAt - a.probedAt);
-}
-//#endregion
 //#region src/probe-service.ts
 /**
 * Serial probe runner. One instance is shared by the manual API and any
@@ -1070,6 +1004,8 @@ async function qoderWebStatus(deps) {
 		status: "signed-in",
 		...authStatus.region === void 0 ? {} : { region: authStatus.region },
 		...authStatus.pat === void 0 ? {} : { pat: authStatus.pat },
+		...authStatus.profiles === void 0 ? {} : { patProfiles: authStatus.profiles },
+		...authStatus.activeId === void 0 ? {} : { activePatId: authStatus.activeId },
 		...deps.authKey === void 0 ? {} : { authKey: deps.authKey }
 	};
 	const modelsField = deps.models().map(modelSnapshot);
@@ -2687,10 +2623,7 @@ function apply(ctx, config) {
 		runtime.catalogGeneration += 1;
 		runtime.inflightFetch?.controller.abort();
 		runtime.inflightFetch = void 0;
-		if (hadCredential && known !== identity) {
-			runtime.probeStore.clear();
-			runtime.invalidate();
-		}
+		if (hadCredential && known !== identity) runtime.invalidate();
 		if (identity === void 0) {
 			if (known !== void 0) runtime.savedCatalogs.delete(known);
 			runtime.catalog.set(runtime.fallback);
@@ -2765,13 +2698,13 @@ function apply(ctx, config) {
 			});
 			registerQoderAuthRoute(webCtx, {
 				path: runtime.variant.authPath,
-				save: async (pat) => {
+				save: async (pat, label) => {
 					if (!await validateApiKey(pat, runtime.variant.region)) return {
 						ok: false,
 						error: "qoder_invalid_pat"
 					};
-					const credential = await runtime.store.save(pat);
-					const identity = credentialIdentity(credential);
+					const entry = await runtime.store.add(pat, label);
+					const identity = credentialIdentity(entry);
 					adoptIdentity(runtime, identity);
 					await fetchCatalog(runtime, identity);
 					return {
@@ -2779,7 +2712,45 @@ function apply(ctx, config) {
 						status: await runtime.store.status()
 					};
 				},
+				activate: async (id) => {
+					const entry = await runtime.store.activate(id);
+					if (entry === void 0) return {
+						ok: false,
+						error: "qoder_unknown_pat"
+					};
+					const identity = credentialIdentity(entry);
+					adoptIdentity(runtime, identity);
+					detach(ctx, fetchCatalog(runtime, identity), `${runtime.variant.id} catalog refresh after switch`);
+					return {
+						ok: true,
+						status: await runtime.store.status()
+					};
+				},
+				remove: async (id) => {
+					const removed = await runtime.store.remove(id);
+					if (removed === void 0) return {
+						ok: false,
+						error: "qoder_unknown_pat"
+					};
+					const finished = credentialIdentity(removed);
+					runtime.probeStore.clearFor(finished);
+					runtime.savedCatalogs.delete(finished);
+					const active = await runtime.store.current().catch(() => void 0);
+					const identity = active === void 0 ? void 0 : credentialIdentity(active);
+					adoptIdentity(runtime, identity);
+					if (identity !== void 0) detach(ctx, fetchCatalog(runtime, identity), `${runtime.variant.id} catalog refresh after removal`);
+					return {
+						ok: true,
+						status: await runtime.store.status()
+					};
+				},
 				clear: async () => {
+					const saved = await runtime.store.entries().catch(() => []);
+					for (const entry of saved) {
+						const identity = credentialIdentity(entry);
+						runtime.probeStore.clearFor(identity);
+						runtime.savedCatalogs.delete(identity);
+					}
 					await runtime.store.clear();
 					adoptIdentity(runtime, void 0);
 				}
@@ -3097,4 +3068,4 @@ function apply(ctx, config) {
 	}), "variant startup");
 }
 //#endregion
-export { CHINA_VARIANT, CN_SECTION_KEYS, Config, FALLBACK_QODER_MODELS, GLOBAL_SECTION_KEYS, GLOBAL_VARIANT, KIND_STATUS, PROBE_EFFORT_CANDIDATES, QODER_AUTH_FILENAME, QODER_AUTH_PATH, QODER_DATA_DIR_ENV, QODER_DATA_DIR_NAME, QODER_GLOBAL_AUTH_PATH, QODER_GLOBAL_PROBE_PATH, QODER_GLOBAL_SETTINGS_NS, QODER_GLOBAL_STATUS_PATH, QODER_HOST_HEARTBEAT_FILENAME, QODER_PAT_ENV_CN, QODER_PAT_ENV_GLOBAL, QODER_PROBE_FILENAME, QODER_PROBE_PATH, QODER_PROVIDER, QODER_QUOTA_SETTINGS_NS, QODER_SETTINGS_NS, QODER_STATUS_PATH, QODER_STREAM_IDLE_TIMEOUT_MS, QODER_VARIANTS, QUOTA_POLL_DEFAULT_MS, QUOTA_POLL_MIN_MS, QUOTA_SECTION_KEYS, QoderCatalog, QoderCatalogStore, QoderCredentialStore, QoderProbeService, QoderProbeStore, QoderUpstreamClient, apply, classifyUpstreamError, clearHostHeartbeat, createAuthKey, createQoderAdapter, createQoderShim, fingerprintModel, inject, isHeartbeatProcessAlive, kindFromQoderFailure, modelInfoOf, name, normalizeCredits, patTail, probeModel, processStartTimeMs, qoderAuthHandler, qoderCatalogPath, qoderCredentialIdentity, qoderHostHeartbeatPath, qoderOwnAuthPath, qoderPluginDataDir, qoderProbePath, randomSentinel, readHostHeartbeat, registerQoderAuthRoute, variantFor };
+export { CHINA_VARIANT, CN_SECTION_KEYS, Config, FALLBACK_QODER_MODELS, GLOBAL_SECTION_KEYS, GLOBAL_VARIANT, KIND_STATUS, PROBE_EFFORT_CANDIDATES, QODER_AUTH_FILENAME, QODER_AUTH_PATH, QODER_DATA_DIR_ENV, QODER_DATA_DIR_NAME, QODER_GLOBAL_AUTH_PATH, QODER_GLOBAL_PROBE_PATH, QODER_GLOBAL_SETTINGS_NS, QODER_GLOBAL_STATUS_PATH, QODER_HOST_HEARTBEAT_FILENAME, QODER_PAT_ENV_CN, QODER_PAT_ENV_GLOBAL, QODER_PROBE_FILENAME, QODER_PROBE_PATH, QODER_PROVIDER, QODER_QUOTA_SETTINGS_NS, QODER_SETTINGS_NS, QODER_STATUS_PATH, QODER_STREAM_IDLE_TIMEOUT_MS, QODER_VARIANTS, QUOTA_POLL_DEFAULT_MS, QUOTA_POLL_MIN_MS, QUOTA_SECTION_KEYS, QoderCatalog, QoderCatalogStore, QoderCredentialStore, QoderProbeService, QoderProbeStore, QoderUpstreamClient, apply, classifyUpstreamError, clearHostHeartbeat, createAuthKey, createQoderAdapter, createQoderShim, fingerprintModel, inject, isHeartbeatProcessAlive, kindFromQoderFailure, modelInfoOf, name, normalizeCredits, patTail, probeModel, processStartTimeMs, qoderAuthHandler, qoderCatalogPath, qoderCredentialId, qoderCredentialIdentity, qoderHostHeartbeatPath, qoderOwnAuthPath, qoderPluginDataDir, qoderProbePath, randomSentinel, readHostHeartbeat, registerQoderAuthRoute, variantFor };