negotium 0.9.0 → 0.10.1

package/README.md

@@ -21,7 +21,7 @@ negotium -v
 ```
 
 Authenticate Claude with `claude`, Codex with `codex login`, or Maestro with
-`DEEPSEEK_API_KEY` for DeepSeek or `MOONSHOT_API_KEY` for Kimi. See the
+`DEEPSEEK_API_KEY` for DeepSeek, `MOONSHOT_API_KEY` for Kimi, or `GLM_API_KEY` for GLM. See the
 [main repository](https://github.com/maestrojeong/negotium) for configuration, security guidance,
 and architecture.
 

package/dist/agent-helpers.js

@@ -343,7 +343,7 @@ function resolveWhisperBackend() {
 function codexAuthFilePath() {
   return process.env.NEGOTIUM_CODEX_AUTH_FILE || join(process.env.CODEX_HOME || join(homedir(), ".codex"), "auth.json");
 }
-var HOME, PROJECT_ROOT, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.1.23", BROWSER_RS_MIN_SECURE_VERSION = "0.1.15", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, WHISPER_BACKEND, MLX_WHISPER_BIN, WHISPER_MODEL_MLX, _envMaxTellDepth, MAX_TELL_DEPTH;
+var HOME, PROJECT_ROOT, STATE_DIR, WORKSPACE_DIR, TOPIC_WORKSPACE_DIR, SHARED_WIKI_DIR, CRON_WORKSPACE_DIR, BROWSER_DIR, BROWSER_PROFILES_DIR, BINARIES_DIR, SECRETS_DIR, DM_WORKSPACE_DIR, SESSION_WORKSPACE_DIR, CLAUDE_EXECUTABLE_ENV, CLAUDE_EXECUTABLE, DEFAULT_OUTPUT_LANGUAGE = "English", BROWSER_RS_VERSION = "v0.2.1", BROWSER_RS_MIN_SECURE_VERSION = "0.2.1", BROWSER_RS_VERSION_PROBE_TIMEOUT_MS = 15000, SNIPPETS_API_URL, BROWSER_RS_BIN, BASH_RS_VERSION = "v0.1.7", BASH_RS_BIN, PLAYWRIGHT_MCP_BIN, TSX_BIN, TSX_LOADER, TSCONFIG_PATH, SESSION_COMM_SERVER, TASK_SERVER, DECISION_SERVER, CANONICAL_MCP_PROXY_SERVER, WIKI_SERVER, TOKEN_STATS_SERVER, COMPACTION_LOG_SERVER, SYSTEM_HEALTH_SERVER, AGENT_HEALTH_SERVER, VAULT_SERVER, BG_BASH_BASE_PORT, BG_BASH_MAX_PORT, RUNTIME_MCP_SECRET, NODE_CONTROL_TOKEN, NODE_ID, VAULT_MASTER_KEY, NEGOTIUM_PORT, hostname, DATA_DIR, LOG_DIR, UPLOADS_DIR, VAULT_DIR, SESSIONS_DB, DEBUG_FILE, USERS_LOG_DIR, RUN_DIR, PROGRESS_DIR, DM_CMD_DIR, DM_RESP_DIR, SESSION_INBOX_DIR, SESSION_ASKS_DIR, BASHRS_SPILL_ROOT, PLAYWRIGHT_BASE_PORT, PLAYWRIGHT_MAX_PORT, PLAYWRIGHT_PORTS_DIR, ACTIVE_QUERY_STALE_MS, AGENTS_PROMPTS_DIR, RESOURCES_DIR, FILE_TAG_REGEX, MODEL_SONNET = "claude-sonnet-5", MODEL_OPUS = "claude-opus-5", MODEL_FABLE = "claude-fable-5", FALLBACK_AGENT, SESSION_AGENT, GATEWAY_AGENT, FALLBACK_MODEL, SESSION_MODEL, GATEWAY_MODEL, FFMPEG_BIN, FFPROBE_BIN, PYTHON_BIN, FASTER_WHISPER_WRAPPER, WHISPER_MODEL, TESSERACT_BIN, PDFTOTEXT_BIN, WHISPER_BACKEND, MLX_WHISPER_BIN, WHISPER_MODEL_MLX, _envMaxTellDepth, MAX_TELL_DEPTH;
 var init_config = __esm(() => {
   init_config_helpers();
   init_logger();
@@ -3001,7 +3001,7 @@ var init_codex = __esm(async () => {
 });
 
 // ../../packages/core/src/version.ts
-var NEGOTIUM_VERSION = "0.9.0";
+var NEGOTIUM_VERSION = "0.10.1";
 
 // ../../packages/core/src/agents/codex-native-multi-agent.ts
 import { spawn as spawn2 } from "child_process";
@@ -3491,7 +3491,11 @@ var init_maestro_registry = __esm(() => {
     "deepseek-flash": "deepseek-v4-flash",
     kimi: "kimi-k3",
     "kimi-pro": "kimi-k3",
-    "kimi-code": "kimi-k2.7-code"
+    "kimi-code": "kimi-k2.7-code",
+    glm: "glm-5.3",
+    "glm-pro": "glm-5.3",
+    "glm-flash": "glm-5.3-flash",
+    "glm-5.2": "glm-5.2"
   };
   VALID_MODELS = new Set([...Object.keys(ALIAS_MAP2), ...Object.values(ALIAS_MAP2)]);
   VALID_EFFORTS3 = new Set(MAESTRO_EFFORT_VALUES);
@@ -6149,11 +6153,13 @@ function resolveMaestroApiKeyOverrides(userId) {
     return;
   const deepseek = vaultGetValue(userId, "DEEPSEEK_API_KEY")?.trim();
   const moonshot = vaultGetValue(userId, "MOONSHOT_API_KEY")?.trim();
-  if (!deepseek && !moonshot)
+  const glm = vaultGetValue(userId, "GLM_API_KEY")?.trim();
+  if (!deepseek && !moonshot && !glm)
     return;
   return {
     ...deepseek ? { deepseek } : {},
-    ...moonshot ? { moonshot } : {}
+    ...moonshot ? { moonshot } : {},
+    ...glm ? { glm } : {}
   };
 }
 function buildProviderOwnedToolBlockHook() {
@@ -6648,6 +6654,8 @@ function modelOwner(model) {
     return "maestro";
   if (model.startsWith("kimi-"))
     return "maestro";
+  if (model.startsWith("glm-"))
+    return "maestro";
   if (model.startsWith("gpt-"))
     return "codex";
   return MODEL_OWNER[model];
@@ -6687,7 +6695,13 @@ var init_model_catalog = __esm(() => {
     "kimi-pro": "maestro",
     "kimi-k3": "maestro",
     "kimi-code": "maestro",
-    "kimi-k2.7-code": "maestro"
+    "kimi-k2.7-code": "maestro",
+    glm: "maestro",
+    "glm-pro": "maestro",
+    "glm-flash": "maestro",
+    "glm-5.3": "maestro",
+    "glm-5.2": "maestro",
+    "glm-5.3-flash": "maestro"
   };
   SELECTABLE_MODELS = [
     {
@@ -6770,6 +6784,36 @@ var init_model_catalog = __esm(() => {
       marginalTokenCost: "Kimi API: $0.95/M cache-miss input, $0.19/M cached input, $4/M output",
       estimatedUsage: "No subscription token cap; pay per token. Always uses thinking and supports a 256K context window."
     },
+    {
+      model: "glm-5.3",
+      agent: "maestro",
+      description: "Coding-focused GLM flagship with Opus-tier benchmark performance.",
+      intelligenceTier: "opus",
+      routingSummary: "coding-focused flagship route; 1M context; competitive with Opus-tier coding benchmarks at a fraction of the cost",
+      accessCost: "Zhipu AI pay-as-you-go API; no monthly subscription required",
+      marginalTokenCost: "Approximate GLM API rate: $1.40/M input, $4.40/M output",
+      estimatedUsage: "No subscription token cap; pay per token. Always uses thinking and supports a 1M-token context window; text-only input."
+    },
+    {
+      model: "glm-5.2",
+      agent: "maestro",
+      description: "Previous-generation GLM flagship for cost-efficient everyday work.",
+      intelligenceTier: "sonnet",
+      routingSummary: "previous-gen flagship; 1M context; cost-efficient everyday work, cheaper than glm-5.3",
+      accessCost: "Zhipu AI pay-as-you-go API; no monthly subscription required",
+      marginalTokenCost: "Approximate GLM API rate: $0.95/M input, $3/M output",
+      estimatedUsage: "No subscription token cap; pay per token. Always uses thinking and supports a 1M-token context window; text-only input."
+    },
+    {
+      model: "glm-5.3-flash",
+      agent: "maestro",
+      description: "Low-cost multimodal GLM route with native image input.",
+      intelligenceTier: "sonnet",
+      routingSummary: "cheapest GLM route; 1M context; the only GLM model with native vision/multimodal support",
+      accessCost: "Zhipu AI pay-as-you-go API; no monthly subscription required",
+      marginalTokenCost: "Approximate GLM API rate: $0.15/M input, $0.50/M output",
+      estimatedUsage: "No subscription token cap; pay per token. Always uses thinking, supports a 1M-token context window, and accepts native image input."
+    },
     {
       model: "deepseek-pro",
       agent: "maestro",
@@ -6794,7 +6838,10 @@ var init_model_catalog = __esm(() => {
   SELECTABLE_MODEL_ALIASES = {
     kimi: "kimi-k3",
     "kimi-pro": "kimi-k3",
-    "kimi-code": "kimi-k2.7-code"
+    "kimi-code": "kimi-k2.7-code",
+    glm: "glm-5.3",
+    "glm-pro": "glm-5.3",
+    "glm-flash": "glm-5.3-flash"
   };
   FALLBACK_ORDER = {
     claude: [
@@ -8818,12 +8865,12 @@ function checkAgentAuth(agent, host = defaultAgentAuthHost, userId) {
       };
     }
     case "maestro": {
-      if (hasMaestroCredential(host, "DEEPSEEK_API_KEY", userId) || hasMaestroCredential(host, "MOONSHOT_API_KEY", userId)) {
+      if (hasMaestroCredential(host, "DEEPSEEK_API_KEY", userId) || hasMaestroCredential(host, "MOONSHOT_API_KEY", userId) || hasMaestroCredential(host, "GLM_API_KEY", userId)) {
         return { ok: true };
       }
       return {
         ok: false,
-        error: "maestro is not authenticated (set DEEPSEEK_API_KEY or MOONSHOT_API_KEY via /vault set, or as an env var)"
+        error: "maestro is not authenticated (set DEEPSEEK_API_KEY, MOONSHOT_API_KEY, or GLM_API_KEY via /vault set, or as an env var)"
       };
     }
   }
@@ -8843,6 +8890,12 @@ function checkAgentModelAuth(agent, model, host = defaultAgentAuthHost, userId)
       error: `maestro is not authenticated for model '${model}' (set DEEPSEEK_API_KEY via /vault set, or as an env var)`
     };
   }
+  if (model.startsWith("glm")) {
+    return hasMaestroCredential(host, "GLM_API_KEY", userId) ? { ok: true } : {
+      ok: false,
+      error: `maestro is not authenticated for model '${model}' (set GLM_API_KEY via /vault set, or as an env var)`
+    };
+  }
   return checkAgentAuth(agent, host, userId);
 }
 var defaultAgentAuthHost;
@@ -12380,6 +12433,9 @@ var init_token_stats = __esm(async () => {
     "claude:sonnet": { input: 2, cacheWrite: 2.5, cacheRead: 0.2, output: 10 },
     "maestro:kimi-k3": { input: 3, cacheRead: 0.3, output: 15 },
     "maestro:kimi-k2.7-code": { input: 0.95, cacheRead: 0.19, output: 4 },
+    "maestro:glm-5.3": { input: 1.4, cacheRead: 1.4, output: 4.4 },
+    "maestro:glm-5.2": { input: 0.95, cacheRead: 0.95, output: 3 },
+    "maestro:glm-5.3-flash": { input: 0.15, cacheRead: 0.15, output: 0.5 },
     "maestro:deepseek-pro": { input: 0.435, cacheRead: 0.003625, output: 0.87 },
     "maestro:deepseek-flash": { input: 0.14, cacheRead: 0.0028, output: 0.28 }
   };
@@ -15631,7 +15687,7 @@ function authRecoveryHint(agent) {
     case "codex":
       return "Please log in again with `codex login` (~/.codex/auth.json)";
     case "maestro":
-      return "Please check the DEEPSEEK_API_KEY or MOONSHOT_API_KEY environment variable";
+      return "Please check the DEEPSEEK_API_KEY, MOONSHOT_API_KEY, or GLM_API_KEY environment variable";
   }
 }
 function classifyAgentError(err2, agent) {
@@ -15647,7 +15703,7 @@ function classifyAgentError(err2, agent) {
     return status === 529 ? `${name} server is overloaded. Please try again in a moment. (529)` : `${name} server error occurred. Please try again in a moment. (500)`;
   }
   const s = stringifyError(err2);
-  if (/401|authentication.error|invalid.*api.key|not logged|ANTHROPIC_API_KEY|DEEPSEEK_API_KEY|MOONSHOT_API_KEY/i.test(s)) {
+  if (/401|authentication.error|invalid.*api.key|not logged|ANTHROPIC_API_KEY|DEEPSEEK_API_KEY|MOONSHOT_API_KEY|GLM_API_KEY/i.test(s)) {
     return `${name} authentication expired. ${hint}. (401)`;
   }
   if (/429|rate.limit/i.test(s))
@@ -20177,4 +20233,4 @@ export {
   DEFAULT_SELF_CONFIG_PRODUCT
 };
 
-//# debugId=ABDF0DC92B0305E864756E2164756E21
+//# debugId=6125C3400F8555BD64756E2164756E21