neko-harness 0.4.5 → 0.4.6

package/dist/gateway.js

@@ -16497,14 +16497,16 @@ var GATEWAY_USAGE = `\u7528\u6CD5: neko serve [\u9009\u9879]
   --no-socket          \u7981\u7528 Unix socket \u4F20\u8F93\uFF08\u4EC5 WebSocket\uFF09
   --server-id <id>     \u903B\u8F91\u670D\u52A1\u5668\u8EAB\u4EFD\uFF08\u9ED8\u8BA4\u8BFB\u53D6/\u751F\u6210 <\u6570\u636E\u76EE\u5F55>/gateway-server-id\uFF09
   --cwd <dir>          \u4F1A\u8BDD\u5DE5\u5177\u7684\u5DE5\u4F5C\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09
-  --model <ref>        \u6A21\u578B\uFF0C\u683C\u5F0F provider/modelId\uFF08\u9ED8\u8BA4 deepseek/deepseek-flash\uFF09
+  --model <ref>        \u6A21\u578B\uFF0C\u683C\u5F0F provider/modelId\uFF08modelId \u53EF\u542B /\uFF0C\u9ED8\u8BA4 deepseek/deepseek-flash\uFF09
   --storage <path>     SQLite \u5B58\u50A8\u6587\u4EF6\uFF08\u9ED8\u8BA4 ~/.neko/neko.sqlite\uFF09
   --credentials <path> \u7528\u6237\u51ED\u636E\u6587\u4EF6\uFF08\u9ED8\u8BA4 ~/.neko/credentials.json\uFF09
   --config <dir>       neko.config.json \u67E5\u627E\u8D77\u59CB\u76EE\u5F55\uFF08\u9ED8\u8BA4\u5F53\u524D\u76EE\u5F55\uFF09
   -h, --help           \u663E\u793A\u6B64\u5E2E\u52A9
 
-\u53EF\u901A\u8FC7\u524D\u7AEF\u8BBE\u7F6E\u6216 DEEPSEEK_API_KEY / TAVILY_API_KEY \u914D\u7F6E\u51ED\u636E\uFF1B
-\u8054\u7F51\u641C\u7D22\u670D\u52A1\u53EF\u5728\u524D\u7AEF\u8BBE\u7F6E\uFF0C\u6216\u7528\u914D\u7F6E\u6587\u4EF6 webSearch.provider\uFF08tavily / deepseek\uFF0C\u9ED8\u8BA4 tavily\uFF09\u3002`;
+\u53EF\u901A\u8FC7\u524D\u7AEF\u8BBE\u7F6E\u6216\u73AF\u5883\u53D8\u91CF\uFF08DEEPSEEK_API_KEY / OPENROUTER_API_KEY / OPENCODE_API_KEY / TAVILY_API_KEY \u7B49\uFF09\u914D\u7F6E\u51ED\u636E\uFF1B
+\u9664 DeepSeek \u5916\u7684\u6A21\u578B provider \u9700\u5148\u5728\u524D\u7AEF\u542F\u7528\uFF0C--model \u6307\u5411\u672A\u542F\u7528\u7684 provider \u65F6\u63D0\u4EA4\u4F1A\u88AB\u62D2\u7EDD\uFF1B
+\u8054\u7F51\u641C\u7D22\u670D\u52A1\u53EF\u5728\u524D\u7AEF\u8BBE\u7F6E\uFF0C\u6216\u7528\u914D\u7F6E\u6587\u4EF6 webSearch.provider\uFF08tavily / deepseek\uFF0C\u9ED8\u8BA4 tavily\uFF09\uFF1B
+\u9ED8\u8BA4\u6A21\u578B\u8FD8\u53EF\u5728 TUI /model \u6216 Web \u6A21\u578B\u9009\u62E9\u5668\u4E2D\u300C\u8BBE\u4E3A\u9ED8\u8BA4\u300D\uFF0C\u4F18\u5148\u7EA7\u4F4E\u4E8E --model\u3001\u9AD8\u4E8E\u914D\u7F6E\u6587\u4EF6 defaultModel\u3002`;
 function parseGatewayArgs(argv) {
   let port;
   const options = {};
@@ -16912,16 +16914,70 @@ import { homedir as homedir2 } from "os";
 import { dirname as dirname2, join as join2 } from "path";
 
 // packages/core/src/credential-providers.ts
+var model = (id, name, envVar, signupUrl) => ({ id, kind: "model", name, envVar, signupUrl, keyless: false });
+var MODEL_PROVIDERS = [
+  model("deepseek", "DeepSeek", "DEEPSEEK_API_KEY", "https://platform.deepseek.com/api_keys"),
+  model("openrouter", "OpenRouter", "OPENROUTER_API_KEY", "https://openrouter.ai/keys"),
+  model("opencode-go", "OpenCode Go", "OPENCODE_API_KEY", "https://opencode.ai/auth"),
+  model("opencode", "OpenCode Zen", "OPENCODE_API_KEY", "https://opencode.ai/auth"),
+  model("openai", "OpenAI", "OPENAI_API_KEY", "https://platform.openai.com/api-keys"),
+  model("google", "Google", "GEMINI_API_KEY", "https://aistudio.google.com/apikey"),
+  model("groq", "Groq", "GROQ_API_KEY", "https://console.groq.com/keys"),
+  model("mistral", "Mistral", "MISTRAL_API_KEY", "https://console.mistral.ai/api-keys"),
+  model("xai", "xAI", "XAI_API_KEY", "https://console.x.ai"),
+  model("together", "Together", "TOGETHER_API_KEY", "https://api.together.ai/settings/api-keys"),
+  model("fireworks", "Fireworks", "FIREWORKS_API_KEY", "https://fireworks.ai/account/api-keys"),
+  model("cerebras", "Cerebras", "CEREBRAS_API_KEY", "https://cloud.cerebras.ai"),
+  model("nvidia", "NVIDIA", "NVIDIA_API_KEY", "https://build.nvidia.com/settings/api-keys"),
+  model("huggingface", "Hugging Face", "HF_TOKEN", "https://huggingface.co/settings/tokens"),
+  model("vercel-ai-gateway", "Vercel AI Gateway", "AI_GATEWAY_API_KEY", "https://vercel.com/ai-gateway"),
+  model("moonshotai", "Moonshot AI", "MOONSHOT_API_KEY", "https://platform.moonshot.ai/console/api-keys"),
+  model("moonshotai-cn", "Moonshot AI CN", "MOONSHOT_API_KEY", "https://platform.moonshot.cn/console/api-keys"),
+  model("minimax", "MiniMax", "MINIMAX_API_KEY", "https://platform.minimax.io"),
+  model("minimax-cn", "MiniMax CN", "MINIMAX_CN_API_KEY", "https://platform.minimaxi.com"),
+  model("zai", "Z.AI", "ZAI_API_KEY", "https://z.ai/manage-apikey/apikey-list"),
+  model("zai-coding-cn", "Z.AI Coding CN", "ZAI_CODING_CN_API_KEY", "https://bigmodel.cn/usercenter/proj-mgmt/apikeys"),
+  model("qwen-token-plan", "Qwen Token Plan", "QWEN_TOKEN_PLAN_API_KEY", "https://modelstudio.console.alibabacloud.com"),
+  model("qwen-token-plan-cn", "Qwen Token Plan CN", "QWEN_TOKEN_PLAN_CN_API_KEY", "https://bailian.console.aliyun.com"),
+  model("qwen-token-plan-individual", "Qwen Token Plan Individual", "QWEN_TOKEN_PLAN_API_KEY", "https://modelstudio.console.alibabacloud.com"),
+  model("xiaomi", "Xiaomi MiMo", "XIAOMI_API_KEY", "https://platform.xiaomimimo.com"),
+  model("xiaomi-token-plan-cn", "Xiaomi Token Plan CN", "XIAOMI_TOKEN_PLAN_CN_API_KEY", "https://platform.xiaomimimo.com"),
+  model("xiaomi-token-plan-ams", "Xiaomi Token Plan AMS", "XIAOMI_TOKEN_PLAN_AMS_API_KEY", "https://platform.xiaomimimo.com"),
+  model("xiaomi-token-plan-sgp", "Xiaomi Token Plan SGP", "XIAOMI_TOKEN_PLAN_SGP_API_KEY", "https://platform.xiaomimimo.com"),
+  model("baseten", "Baseten", "BASETEN_API_KEY", "https://app.baseten.co/settings/api_keys"),
+  model("ant-ling", "Ant Ling", "ANT_LING_API_KEY", "https://ling.tbox.cn"),
+  model("kimi-coding", "Kimi For Coding", "KIMI_API_KEY", "https://www.kimi.com/code/console"),
+  model("meta", "Meta", "META_API_KEY", "https://llama.developer.meta.com")
+];
+var SEARCH_CREDENTIAL_PROVIDERS = [
+  {
+    id: "tavily",
+    kind: "search",
+    name: "Tavily",
+    envVar: "TAVILY_API_KEY",
+    signupUrl: "https://app.tavily.com",
+    keyless: true
+  }
+];
 var CREDENTIAL_PROVIDERS = [
-  { id: "deepseek", envVar: "DEEPSEEK_API_KEY", signupUrl: "https://platform.deepseek.com/api_keys", keyless: false },
-  { id: "tavily", envVar: "TAVILY_API_KEY", signupUrl: "https://app.tavily.com", keyless: true }
+  ...MODEL_PROVIDERS,
+  ...SEARCH_CREDENTIAL_PROVIDERS
 ];
+var DEFAULT_ENABLED_PROVIDERS = ["deepseek"];
+var LOCKED_PROVIDERS = ["deepseek"];
+function isModelProvider(id) {
+  return MODEL_PROVIDERS.some((item) => item.id === id);
+}
 function credentialProvider(id) {
   const spec = CREDENTIAL_PROVIDERS.find((item) => item.id === id);
   if (!spec)
     throw new Error(`Unknown credential provider: ${id}`);
   return spec;
 }
+function normalizeEnabledProviders(saved) {
+  const wanted = new Set([...LOCKED_PROVIDERS, ...saved ?? DEFAULT_ENABLED_PROVIDERS]);
+  return MODEL_PROVIDERS.map((item) => item.id).filter((id) => wanted.has(id));
+}
 
 // packages/core/src/credentials.ts
 import { InMemoryCredentialStore } from "@earendil-works/pi-ai";
@@ -17815,7 +17871,7 @@ var structuredOutputSchema = Type.Union([
     next: Type.Union([Type.Integer(), Type.Null()])
   }, { additionalProperties: false })
 ]);
-function createSubagentExtension(prepare, discard) {
+function createSubagentExtension(prepare, discard, guard) {
   const finish = async (tx, input, status, report) => {
     const round = (await tx.doc(DelegationsDoc, input.parentId)).items.find((r) => r.taskId === input.taskId);
     round.status = status;
@@ -17959,6 +18015,8 @@ function createSubagentExtension(prepare, discard) {
           if (!args.task.trim() || !args.title.trim() || Buffer.byteLength(args.task) > 32768)
             throw new Error("Task/title must be nonempty; task limit is 32 KiB.");
           const agent = await api.agent(context);
+          if (agent.model)
+            await guard?.(agent.model);
           const round = await api.commit(async (tx) => {
             const rounds = await refreshDelegations(tx, api.conversationId);
             const receipt = rounds.find((r) => r.taskId === api.taskId);
@@ -18868,7 +18926,7 @@ import { homedir as homedir4 } from "os";
 import { join as join5 } from "path";
 import { BACKGROUND_CONTEXT as BACKGROUND_CONTEXT3 } from "@earendil-works/chord/context";
 import { clampThinkingLevel, createModels, getSupportedThinkingLevels as getSupportedThinkingLevels2 } from "@earendil-works/pi-ai/models";
-import { deepseekProvider } from "@earendil-works/pi-ai/providers/deepseek";
+import { builtinProviders } from "@earendil-works/pi-ai/providers/all";
 import {
   AssistantEntry as AssistantEntry2,
   createRegistry,
@@ -20443,7 +20501,7 @@ function mergeUsage(base, extra) {
     }
   return result;
 }
-function namingTask() {
+function namingTask(canUse) {
   let active = 0;
   const waits = new Set;
   return defineTask3({
@@ -20480,7 +20538,7 @@ function namingTask() {
         try {
           const saved = await runtime.snapshot(SessionMetadataDoc, runtime.conversationId, context);
           const model = saved?.model && runtime.models.getModel(saved.model.provider, saved.model.modelId);
-          if (!saved || !model || saved.attempts >= 2 || !getSupportedThinkingLevels(model).includes("off")) {
+          if (!saved || !model || saved.attempts >= 2 || !getSupportedThinkingLevels(model).includes("off") || !await canUse(model.provider, model.id)) {
             await runtime.commit(async (tx) => {
               (await tx.doc(SessionMetadataDoc, runtime.conversationId)).naming = "fallback";
               return { status: "terminal", outcome: { status: "completed", result: null } };
@@ -20560,12 +20618,13 @@ class SessionMetadataManager {
   #known = new Set;
   #unsubscribe;
   #live = new Map;
-  task = namingTask();
+  task;
   harness;
   storage;
   context;
   report;
-  constructor(harness, storage, context, registry, report = console.error) {
+  constructor(harness, storage, context, registry, report = console.error, canUseModel = async () => true) {
+    this.task = namingTask(canUseModel);
     this.harness = harness;
     this.storage = storage;
     this.context = context;
@@ -21852,6 +21911,22 @@ var SearchSettingsDoc = defineDoc7({
   fork: "initial",
   initial: () => ({ provider: null })
 });
+var ProviderSettingsDoc = defineDoc7({
+  kind: "app.neko.provider-settings",
+  version: 1,
+  scope: "conversation",
+  history: "latest",
+  fork: "initial",
+  initial: () => ({ enabled: null })
+});
+var DefaultModelDoc = defineDoc7({
+  kind: "app.neko.default-model",
+  version: 1,
+  scope: "conversation",
+  history: "latest",
+  fork: "initial",
+  initial: () => ({ model: null })
+});
 var ContextSettingsDoc = defineDoc7({
   kind: "app.neko.context-settings",
   version: 1,
@@ -21872,6 +21947,7 @@ async function createNekoRuntime(options = {}) {
   const context = options.context ?? BACKGROUND_CONTEXT3;
   const defaultCwd = normalizeWorkspace(options.cwd);
   const model = options.model ?? DEFAULT_MODEL;
+  const modelOverride = options.modelOverride;
   const providers = options.providers ?? [];
   const credentials = options.credentials ?? (options.storage === "memory" && !options.credentialsPath ? new InMemoryCredentialStore : new FileCredentialStore(options.credentialsPath));
   const runtimeKeys = new Map;
@@ -21891,15 +21967,45 @@ async function createNekoRuntime(options = {}) {
     delete: (id) => credentials.delete(id)
   } : credentials;
   const models = createModels({ credentials: effectiveCredentials });
-  models.setProvider(deepseekProvider());
+  for (const provider of builtinProviders())
+    if (isModelProvider(provider.id))
+      models.setProvider(provider);
   for (const provider of providers)
     models.setProvider(provider);
+  let enabled = new Set(normalizeEnabledProviders(null));
+  const guardProvider = async (ref) => {
+    if (!ref || !isModelProvider(ref.provider))
+      return;
+    const spec = credentialProvider(ref.provider);
+    if (!enabled.has(ref.provider))
+      throw new Error(`PROVIDER_DISABLED: ${spec.name} is not enabled. Enable it in /login or Web settings, or switch model.`);
+    if (!await models.checkAuth(ref.provider))
+      throw new Error(`PROVIDER_KEY_REQUIRED: Configure a ${spec.name} API key in /login or Web settings.`);
+  };
   const resolveLevel = (ref, level) => {
     const info = models.getModel(ref.provider, ref.modelId);
     if (!info)
       throw new Error("Unknown model");
     return clampThinkingLevel(info, level);
   };
+  let modelInfoCache;
+  const allModels = () => {
+    modelInfoCache ??= models.getModels().map((model) => ({
+      provider: model.provider,
+      modelId: model.id,
+      name: model.name,
+      contextWindow: model.contextWindow,
+      input: model.input,
+      ...model.inputLimits ? { inputLimits: model.inputLimits } : {},
+      reasoning: model.reasoning,
+      supportedThinkingLevels: getSupportedThinkingLevels2(model),
+      thinkingLevelAdjustments: Object.fromEntries(["off", "minimal", "low", "medium", "high", "xhigh", "max"].map((level) => [
+        level,
+        clampThinkingLevel(model, level)
+      ]))
+    }));
+    return modelInfoCache;
+  };
   const workspaceFiles = new WorkspaceFiles;
   const storage = options.storage === "memory" ? new MemoryStorage : await openNodeSqliteStorage(options.storagePath ?? DEFAULT_STORAGE_PATH);
   const registry = createRegistry();
@@ -21926,7 +22032,7 @@ async function createNekoRuntime(options = {}) {
   registry.install(createNekoPrompt(resourceSnapshots.current));
   registry.install(createSubagentExtension(async (id, requestId, cwd) => {
     resourceSnapshots.stage(id, requestId, cwd, await loadResources(cwd));
-  }, resourceSnapshots.discard));
+  }, resourceSnapshots.discard, (ref) => guardProvider(ref)));
   const jobs = new JobManager;
   registry.install(jobs.extension);
   registry.install(createTodoExtension());
@@ -21944,7 +22050,7 @@ async function createNekoRuntime(options = {}) {
     registry,
     settings: {
       get compaction() {
-        return compactionPolicy(contextState, models.getModels().map((model) => model.contextWindow));
+        return compactionPolicy(contextState, allModels().filter((model) => !isModelProvider(model.provider) || enabled.has(model.provider)).map((model) => model.contextWindow));
       }
     },
     onReport: options.onReport,
@@ -21986,13 +22092,15 @@ async function createNekoRuntime(options = {}) {
     throw error;
   }
   await questions.reconcileAll();
+  const rootModel = modelOverride ?? model;
   const conversation = await harness.root(context, {
     agent: {
-      model,
-      thinkingLevel: resolveLevel(model, options.thinkingLevel ?? "high"),
+      model: rootModel,
+      thinkingLevel: resolveLevel(rootModel, options.thinkingLevel ?? "high"),
       cwd: defaultCwd
     }
   });
+  enabled = new Set(normalizeEnabledProviders((await harness.snapshot(ProviderSettingsDoc, conversation.id, context))?.enabled));
   const savedSearch = (await harness.snapshot(SearchSettingsDoc, conversation.id, context))?.provider;
   if (isSearchProvider(savedSearch))
     searchProvider = savedSearch;
@@ -22038,7 +22146,7 @@ async function createNekoRuntime(options = {}) {
   };
   if (existing.length === 0)
     await touchConversation(conversation.id);
-  const metadata = new SessionMetadataManager(harness, storage, context, registry, options.onReport);
+  const metadata = new SessionMetadataManager(harness, storage, context, registry, options.onReport, (provider, modelId) => guardProvider({ provider, modelId }).then(() => true, () => false));
   if (existing.length === 0)
     await metadata.initialize(conversation.id);
   for (const record of existing)
@@ -22099,9 +22207,8 @@ async function createNekoRuntime(options = {}) {
         data.skill = skill;
       });
     }
-    if (!duplicate && agent.model?.provider === "deepseek" && !await models.checkAuth("deepseek")) {
-      throw new Error("DEEPSEEK_KEY_REQUIRED: Configure a DeepSeek API key in /login or Web settings.");
-    }
+    if (!duplicate)
+      await guardProvider(agent.model);
     if (!duplicate && agent.model) {
       const resolved = models.getModel(agent.model.provider, agent.model.modelId);
       if (resolved)
@@ -22233,8 +22340,7 @@ async function createNekoRuntime(options = {}) {
     },
     async compact(instructions) {
       const agent = await target.agent(context);
-      if (agent.model?.provider === "deepseek" && !await models.checkAuth("deepseek"))
-        throw new Error("DEEPSEEK_KEY_REQUIRED: Configure DeepSeek in /login or Web settings.");
+      await guardProvider(agent.model);
       await admit(target.id, async () => {
         const live = await harness.snapshot(importLiveDoc, target.id, context);
         if (live?.compactions?.length || (await readCompaction(harness, storage, target.id, context))?.phase === "waiting-to-apply")
@@ -22460,11 +22566,13 @@ async function createNekoRuntime(options = {}) {
     },
     async createConversation(createOptions) {
       const workspace = await addWorkspace(createOptions?.cwd ?? defaultCwd);
+      const savedDefault = (await harness.snapshot(DefaultModelDoc, conversation.id, context))?.model ?? null;
+      const effective = createOptions?.model ?? modelOverride ?? savedDefault ?? model;
       const created = await harness.createConversation({
         ownership: { kind: "ownerless" },
         agent: {
-          model: createOptions?.model ?? model,
-          thinkingLevel: resolveLevel(createOptions?.model ?? model, createOptions?.thinkingLevel ?? options.thinkingLevel ?? "high"),
+          model: effective,
+          thinkingLevel: resolveLevel(effective, createOptions?.thinkingLevel ?? options.thinkingLevel ?? "high"),
           cwd: workspace.path
         }
       }, context);
@@ -22494,6 +22602,8 @@ async function createNekoRuntime(options = {}) {
         const targetModel = ref && models.getModel(ref.provider, ref.modelId);
         if (!targetModel)
           throw new Error("Unknown model");
+        if (change.model && isModelProvider(ref.provider) && !enabled.has(ref.provider))
+          throw new Error(`PROVIDER_DISABLED: ${credentialProvider(ref.provider).name} is not enabled.`);
         await session.conversation.configure({ model: ref, thinkingLevel: clampThinkingLevel(targetModel, change.thinkingLevel ?? current.thinkingLevel) }, context);
         return true;
       });
@@ -22548,20 +22658,62 @@ async function createNekoRuntime(options = {}) {
       }
     },
     listModels() {
-      return models.getModels().map((model) => ({
-        provider: model.provider,
-        modelId: model.id,
-        name: model.name,
-        contextWindow: model.contextWindow,
-        input: model.input,
-        ...model.inputLimits ? { inputLimits: model.inputLimits } : {},
-        reasoning: model.reasoning,
-        supportedThinkingLevels: getSupportedThinkingLevels2(model),
-        thinkingLevelAdjustments: Object.fromEntries(["off", "minimal", "low", "medium", "high", "xhigh", "max"].map((level) => [
-          level,
-          clampThinkingLevel(model, level)
-        ]))
-      }));
+      return allModels();
+    },
+    async listSelectableModels() {
+      const availability = new Map;
+      const result = [];
+      for (const info of allModels()) {
+        const managed = isModelProvider(info.provider);
+        if (managed && !enabled.has(info.provider))
+          continue;
+        if (!availability.has(info.provider))
+          availability.set(info.provider, !managed || Boolean(await models.checkAuth(info.provider)));
+        result.push({ ...info, available: availability.get(info.provider) ?? false });
+      }
+      return result;
+    },
+    enabledProviders() {
+      return MODEL_PROVIDERS.map((item) => item.id).filter((id) => enabled.has(id));
+    },
+    async setProviderEnabled(provider, value) {
+      if (!isModelProvider(provider))
+        throw new Error("Unknown model provider.");
+      if (typeof value !== "boolean")
+        throw new Error("Enabled must be a boolean.");
+      if (!value && LOCKED_PROVIDERS.includes(provider))
+        throw new Error("DeepSeek is always enabled.");
+      const next = new Set(enabled);
+      if (value)
+        next.add(provider);
+      else
+        next.delete(provider);
+      const list = normalizeEnabledProviders([...next]);
+      await harness.commit(async (tx) => {
+        (await tx.doc(ProviderSettingsDoc, conversation.id)).enabled = list;
+      }, context);
+      enabled = new Set(list);
+    },
+    async defaultModel() {
+      const saved = (await harness.snapshot(DefaultModelDoc, conversation.id, context))?.model ?? null;
+      if (modelOverride)
+        return { effective: modelOverride, source: "cli" };
+      if (saved)
+        return { effective: saved, source: "saved" };
+      if (options.model)
+        return { effective: model, source: "config" };
+      return { effective: model, source: "default" };
+    },
+    async setDefaultModel(ref) {
+      if (ref !== null) {
+        if (!models.getModel(ref.provider, ref.modelId))
+          throw new Error("Unknown model");
+        if (isModelProvider(ref.provider) && !enabled.has(ref.provider))
+          throw new Error(`PROVIDER_DISABLED: ${credentialProvider(ref.provider).name} is not enabled.`);
+      }
+      await harness.commit(async (tx) => {
+        (await tx.doc(DefaultModelDoc, conversation.id)).model = ref;
+      }, context);
     },
     async getAgent(id) {
       const session = await sessionFor(id);
@@ -22626,8 +22778,8 @@ var nullableString = Type7.Union([str, nil]);
 var phase = Type7.Enum(["pending", "running", "done"]);
 var level = Type7.Enum(["project", "user", "builtin"]);
 var thinking = Type7.Enum(["off", "minimal", "low", "medium", "high", "xhigh", "max"]);
-var model = Type7.Object({ provider: str, modelId: str });
-var change = Type7.Object({ model: Type7.Optional(model), thinkingLevel: Type7.Optional(thinking) }, { additionalProperties: false });
+var model2 = Type7.Object({ provider: str, modelId: str });
+var change = Type7.Object({ model: Type7.Optional(model2), thinkingLevel: Type7.Optional(thinking) }, { additionalProperties: false });
 var usage = Type7.Object({ input: num, output: num, cacheRead: num, cacheWrite: num, cost: num });
 var image = Type7.Object({
   name: str,
@@ -22865,7 +23017,7 @@ var ChatViewSchema = Type7.Object({
   subagents: Type7.Optional(Type7.Array(DelegationSchema)),
   taskUsage: Type7.Optional(usage),
   model: str,
-  agent: Type7.Object({ model: Type7.Union([model, nil]), thinkingLevel: Type7.Union([thinking, nil]) }),
+  agent: Type7.Object({ model: Type7.Union([model2, nil]), thinkingLevel: Type7.Union([thinking, nil]) }),
   cwd: str,
   busy: bool,
   status: nullableString,
@@ -22950,7 +23102,7 @@ var SessionSummarySchema = Type7.Object({
   firstPromptPreview: str,
   createdAt: num,
   lastMessageAt: Type7.Union([num, nil]),
-  model: Type7.Union([model, nil]),
+  model: Type7.Union([model2, nil]),
   status: Type7.Enum(["idle", "running", "error"]),
   awaitingAnswer: Type7.Optional(bool),
   id: str
@@ -22961,11 +23113,12 @@ var WorkspaceStateSchema = Type7.Object({ revision: integer, workspaces: Type7.A
 var credentialStatus = Type7.Object({
   savedConfigured: bool,
   environmentConfigured: bool,
-  source: Type7.Enum(["saved", "environment", "runtime", "keyless", "none"])
+  source: Type7.Enum(["saved", "environment", "runtime", "keyless", "none"]),
+  enabled: Type7.Optional(bool)
 });
 var CredentialStateSchema = Type7.Object({
   revision: integer,
-  statuses: Type7.Object({ deepseek: credentialStatus, tavily: credentialStatus })
+  statuses: Type7.Record(str, credentialStatus)
 });
 var AttachmentSchema = Type7.Object({ sessionId: str, attachmentId: str });
 var chatInput = Type7.Object({ sessionId: str, attachmentId: str }, { additionalProperties: false });
@@ -23007,6 +23160,7 @@ var modelInfo = Type7.Object({
   provider: str,
   modelId: str,
   name: str,
+  available: bool,
   contextWindow: num,
   input: Type7.Array(str),
   inputLimits: Type7.Optional(inputLimits),
@@ -23112,16 +23266,17 @@ var NekoWorkspaces = contract("neko.workspaces", {
     }
   }
 });
-var provider = Type7.Enum(["deepseek", "tavily"]);
+var provider = Type7.String({ minLength: 1, maxLength: 64 });
 var NekoCredentials = contract("neko.credentials", {
-  version: 1,
+  version: 2,
   input: Type7.Object({}, { additionalProperties: false }),
   variants: {
     ready: {
       state: { state: CredentialStateSchema },
       methods: {
         save: rpc(Type7.Object({ provider, key: Type7.String({ minLength: 1, maxLength: 8192 }) }, { additionalProperties: false }), nil),
-        remove: rpc(Type7.Object({ provider }, { additionalProperties: false }), nil)
+        remove: rpc(Type7.Object({ provider }, { additionalProperties: false }), nil),
+        setEnabled: rpc(Type7.Object({ provider, enabled: bool }, { additionalProperties: false }), nil)
       }
     }
   }
@@ -23198,6 +23353,24 @@ var NekoContextSettings = contract("neko.context-settings", {
     }
   }
 });
+var defaultModelSource = Type7.Enum(["cli", "saved", "config", "default"]);
+var DefaultModelStateSchema = Type7.Object({
+  effective: model2,
+  source: defaultModelSource
+});
+var NekoDefaultModel = contract("neko.default-model", {
+  version: 1,
+  input: Type7.Object({}, { additionalProperties: false }),
+  variants: {
+    ready: {
+      state: { state: DefaultModelStateSchema },
+      methods: {
+        set: rpc(model2, nil),
+        clear: rpc(nil, nil)
+      }
+    }
+  }
+});
 var FileCandidatesSchema = Type7.Object({
   entries: Type7.Array(Type7.Object({ name: str, path: str, kind: Type7.Enum(["file", "directory"]) }), { maxItems: 100 }),
   limited: bool,
@@ -23976,8 +24149,8 @@ function subagentClient(connect) {
 import { createHash as createHash2 } from "crypto";
 
 // packages/core/src/application-version.ts
-var RUNNING_VERSION = "0.4.5";
-var APPLICATION_PROTOCOL = 6;
+var RUNNING_VERSION = "0.4.6";
+var APPLICATION_PROTOCOL = 8;
 function stableVersion(value) {
   return typeof value === "string" && /^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)$/.test(value) && value.split(".").every((n) => Number.isSafeInteger(Number(n)));
 }
@@ -27995,8 +28168,6 @@ function serveSessions(host, runtime, context) {
           for (const id of input.images ?? [])
             uploads.value.release(id);
         } catch (error) {
-          if (error instanceof Error && error.message.startsWith("DEEPSEEK_KEY_REQUIRED:"))
-            throw new ChordError4("invalid", "DEEPSEEK_KEY_REQUIRED: Configure DeepSeek in /login or Web settings.");
           throw new ChordError4("invalid", error instanceof Error ? error.message : "Cannot submit message");
         }
         return null;
@@ -28788,9 +28959,11 @@ var ServerState = local3("neko.server-state", {
     credentials: CredentialStateSchema,
     searchSettings: SearchSettingsStateSchema,
     contextSettings: ContextSettingsStateSchema,
+    defaultModel: DefaultModelStateSchema,
     refreshCredentials: method2(Type12.Null(), Type12.Null()),
     refreshSearchSettings: method2(Type12.Null(), Type12.Null()),
-    refreshContextSettings: method2(Type12.Null(), Type12.Null())
+    refreshContextSettings: method2(Type12.Null(), Type12.Null()),
+    refreshDefaultModel: method2(Type12.Null(), Type12.Null())
   }
 });
 async function createNekoServerServices(options) {
@@ -28868,13 +29041,20 @@ async function createNekoServerServices(options) {
     status: info.status,
     awaitingAnswer: info.awaitingAnswer
   }));
-  const readStatuses = async () => Object.fromEntries(await Promise.all(CREDENTIAL_PROVIDERS.map(async (spec) => [spec.id, await runtime.credentialStatus(spec.id)])));
-  const [sessions, workspaces, statuses, search, contextSettings0] = await Promise.all([
+  const readStatuses = async () => {
+    const enabled = new Set(runtime.enabledProviders());
+    return Object.fromEntries(await Promise.all(CREDENTIAL_PROVIDERS.map(async (spec) => {
+      const status = await runtime.credentialStatus(spec.id);
+      return [spec.id, spec.kind === "model" ? { ...status, enabled: enabled.has(spec.id) } : status];
+    })));
+  };
+  const [sessions, workspaces, statuses, search, contextSettings0, defaultModel0] = await Promise.all([
     list(),
     runtime.listWorkspaces(),
     readStatuses(),
     runtime.searchSettings(),
-    runtime.contextSettings()
+    runtime.contextSettings(),
+    runtime.defaultModel()
   ]);
   let mutationTail = Promise.resolve();
   const serialize = (fn) => {
@@ -28891,6 +29071,7 @@ async function createNekoServerServices(options) {
       revision: 1,
       ...contextSettings0
     });
+    const defaultModel = self2.state("defaultModel", DefaultModelStateSchema, defaultModel0);
     const refreshContextSettings = async (_input, ctx) => {
       const next = await runtime.contextSettings();
       const { revision, ...current } = contextSettings.value;
@@ -28898,6 +29079,12 @@ async function createNekoServerServices(options) {
         contextSettings.replace(ctx, { revision: revision + 1, ...next });
       return null;
     };
+    const refreshDefaultModel = async (_input, ctx) => {
+      const next = await runtime.defaultModel();
+      if (JSON.stringify(next) !== JSON.stringify(defaultModel.value))
+        defaultModel.replace(ctx, next);
+      return null;
+    };
     const refreshSearchSettings = async (_input, ctx) => {
       const next = await runtime.searchSettings();
       const current = searchSettings.value;
@@ -28926,6 +29113,7 @@ async function createNekoServerServices(options) {
       credentials,
       searchSettings,
       contextSettings,
+      defaultModel,
       async refreshCredentials(_input, ctx) {
         credentials.replace(ctx, {
           revision: credentials.value.revision + 1,
@@ -28934,7 +29122,8 @@ async function createNekoServerServices(options) {
         return null;
       },
       refreshSearchSettings,
-      refreshContextSettings
+      refreshContextSettings,
+      refreshDefaultModel
     };
   }, { lifetime: "host" });
   const shared = (self2) => self2.get(ServerState, {});
@@ -28957,7 +29146,17 @@ async function createNekoServerServices(options) {
       remove: async (input, ctx) => {
         await runtime.removeCredential(input.provider);
         return hub.refreshCredentials(null, ctx);
-      }
+      },
+      setEnabled: (input, ctx) => serialize(async () => {
+        if (!isModelProvider(input.provider))
+          throw new ChordError5("invalid", "Unknown model provider.");
+        try {
+          await runtime.setProviderEnabled(input.provider, input.enabled);
+        } catch (error) {
+          throw new ChordError5("invalid", error instanceof Error ? error.message : "Cannot change provider.");
+        }
+        return hub.refreshCredentials(null, ctx);
+      })
     };
   });
   host.serve(NekoSearchSettings, (_input, _principal, self2) => {
@@ -28986,9 +29185,24 @@ async function createNekoServerServices(options) {
       })
     };
   });
+  host.serve(NekoDefaultModel, (_input, _principal, self2) => {
+    const hub = shared(self2);
+    return {
+      variant: "ready",
+      state: hub.defaultModel,
+      set: (input, ctx) => serialize(async () => {
+        await runtime.setDefaultModel(input);
+        return hub.refreshDefaultModel(null, ctx);
+      }),
+      clear: (_input, ctx) => serialize(async () => {
+        await runtime.setDefaultModel(null);
+        return hub.refreshDefaultModel(null, ctx);
+      })
+    };
+  });
   host.serve(NekoModels, () => ({
     variant: "ready",
-    list: async () => [...runtime.listModels()].map((value) => ({
+    list: async () => (await runtime.listSelectableModels()).map((value) => ({
       ...value,
       input: [...value.input],
       supportedThinkingLevels: [...value.supportedThinkingLevels]
@@ -29282,7 +29496,6 @@ var SERVER_ID_FILENAME = "gateway-server-id";
 async function startGateway(options = {}) {
   const context = options.context ?? BACKGROUND_CONTEXT4;
   const fileConfig = loadNekoConfig(options.configDir);
-  const model = options.model ?? fileConfig.defaultModel ?? DEFAULT_MODEL;
   const storagePath = options.storagePath ?? fileConfig.storagePath ?? DEFAULT_STORAGE_PATH;
   const host = options.host ?? fileConfig.gateway?.host ?? DEFAULT_HOST;
   const port = options.port !== undefined ? options.port : fileConfig.gateway?.port ?? (process.platform === "win32" ? 0 : DEFAULT_PORT);
@@ -29300,7 +29513,8 @@ async function startGateway(options = {}) {
     ...options.apiKey !== undefined ? { apiKey: options.apiKey } : {},
     ...searchProvider !== undefined ? { searchProvider } : {},
     ...fileConfig.context !== undefined ? { contextSettings: fileConfig.context } : {},
-    model,
+    ...fileConfig.defaultModel !== undefined ? { model: fileConfig.defaultModel } : {},
+    ...options.model !== undefined ? { modelOverride: options.model } : {},
     thinkingLevel: options.thinkingLevel ?? fileConfig.thinkingLevel ?? "high",
     ...options.cwd !== undefined ? { cwd: options.cwd } : {},
     ...options.providers !== undefined ? { providers: options.providers } : {},
@@ -29315,7 +29529,6 @@ async function startGateway(options = {}) {
       socketPath,
       serverId,
       nekoDir,
-      model,
       marketUrl,
       promptHome: options.promptHome,
       updates: options.updates,