pleumrouter 0.5.18 → 0.5.21

package/README.md

@@ -35,6 +35,8 @@ SSH/CI에서는 `pleum login --device`를 쓰세요.
 | `pleum login [--device]` | 브라우저 OAuth 로그인 → access/refresh 토큰을 `~/.pleum/config.json`에 저장(API 키 미발급). `--device`는 SSH·CI |
 | `pleum logout` | 서버 세션 revoke + 로컬 토큰 삭제(언어·기본 모델 등 나머지 설정은 유지) |
 | `pleum launch [tool] [--model id] [-- args]` | 에이전트 실행. `--` 뒤 인자는 도구로 그대로 전달. 도구 생략 시 지원 목록·설치 여부 표시 |
+| `pleum wire [claude\|codex]` | Desktop용으로 `~/.claude/settings.json`·`~/.codex/config.toml`에 전용 `plm_` 키를 병합. 생략 시 둘 다. `pleum launch`의 격리 홈과는 별개 |
+| `pleum unwire [claude\|codex] [--revoke-key]` | wire가 넣은 설정만 제거. `--revoke-key`는 서버 키도 폐기 |
 | `pleum run [model] ["프롬프트"] [--attach image]` | 채팅 — 대화형 REPL, 1회 실행, stdin 파이프. 모델 생략 시 화살표로 선택. 이미지 업로드는 명시적으로 `--attach ./shot.png`(1회 실행) 또는 REPL의 `@./shot.png`를 사용한다. `--skip-cache`(이번 요청 응답 캐시 스킵), `--tag a,b`(리포팅 태그, ≤10) |
 | `pleum models [query] [--json]` | 모델 목록(공개) — provider·컨텍스트·가격(₩/1M) 컬럼, `--json`은 스크립트용 |
 | `pleum models <id> --info` | 모델 상세 — 가격·컨텍스트·provider별 지연/처리량/업타임·주간 사용량·형제 모델 |

package/bin/pleum.mjs

@@ -2,6 +2,7 @@
 import { readFileSync } from "node:fs";
 import { login, loginDevice, logout } from "../src/login.mjs";
 import { launch, launchHelp } from "../src/launch.mjs";
+import { wire, unwire, wireHelp, unwireHelp } from "../src/wire.mjs";
 import { run } from "../src/run.mjs";
 import { listModels } from "../src/models.mjs";
 import { balance } from "../src/balance.mjs";
@@ -26,6 +27,8 @@ function buildHelp() {
     ["pleum launch [tool] [--model id]", t("Run a coding agent against PleumRouter")],
     ["", `(${Object.keys(RECIPES).join(" · ")})`],
     ["", t("omit the tool to see the supported list and install status")],
+    ["pleum wire [claude|codex]", t("persist config in ~/.claude or ~/.codex for Desktop apps")],
+    ["pleum unwire [claude|codex]", t("Removes the PleumRouter provider from Desktop config files")],
     ['pleum run [model] ["prompt"] [--attach image]', t("Terminal chat (REPL) / one-shot / pipe")],
     ["", t("omit the model for an arrow-key picker; /help lists commands")],
     ["pleum models [query] [--json]", t("Model list (price, context included)")],
@@ -43,12 +46,13 @@ function buildHelp() {
   const body = rows.map(([cmd, desc]) => `  ${cmd.padEnd(width)}${desc}`).join("\n");
 
   const examples = [
+    ["pleum wire", null],
     ["pleum launch claude --model claude-sonnet-5", null],
     ["pleum launch codex --model gpt-5.3-codex -- --full-auto", null],
     ["pleum run gpt-5.4-mini", t("interactive")],
     [`pleum run gpt-5.4-mini "${t("Summarize in one line: ...")}"`, t("one-shot")],
     [`cat error.log | pleum run gpt-5.4-mini "${t("what caused this?")}"`, t("pipe")],
-    ["pleum models deepseek/deepseek-v4-flash --info", t("model detail")],
+    ["pleum models deepseek/deepseek-v4.1-flash --info", t("model detail")],
     ["pleum usage --by day --days 7", t("last 7 days, by day")],
     ["pleum login --device", t("SSH/CI environment")],
   ];
@@ -101,6 +105,14 @@ try {
       await launch(tool, model, passthrough);
       break;
     }
+    case "wire":
+      if (rest[0] === "-h" || rest[0] === "--help") wireHelp();
+      else await wire(rest);
+      break;
+    case "unwire":
+      if (rest[0] === "-h" || rest[0] === "--help") unwireHelp();
+      else await unwire(rest);
+      break;
     case "run":
       await run(rest);
       break;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "pleumrouter",
-  "version": "0.5.18",
+  "version": "0.5.21",
   "description": "Official PleumRouter terminal CLI — launch any coding agent against PleumRouter.",
   "type": "module",
   "bin": {

package/src/balance.mjs

@@ -10,5 +10,7 @@ export async function balance() {
   const data = await res.json();
   const plm = data.balance_krw;
   const usd = data.balance_usd != null ? ` / $${data.balance_usd.toFixed(4)}` : "";
-  console.log(`잔액: ${plm.toLocaleString("ko-KR")} 크레딧${usd}`);
+  // 원장 눈금이 0.1이라 잔액은 소수 1자리 고정 표기(딱 떨어져도 ".0"을 남긴다).
+  const shown = plm.toLocaleString("ko-KR", { minimumFractionDigits: 1, maximumFractionDigits: 1 });
+  console.log(`잔액: ${shown} 크레딧${usd}`);
 }

package/src/completion.mjs

@@ -3,7 +3,7 @@
 import { t } from "./i18n.mjs";
 import { RECIPES, MANUAL } from "./recipes.mjs";
 
-const COMMANDS = "login logout lang launch run models top balance usage health version upgrade completion help";
+const COMMANDS = "login logout lang launch wire unwire run models top balance usage health version upgrade completion help";
 const TOOLS = [...Object.keys(RECIPES), ...Object.keys(MANUAL)].join(" ");
 
 function bash() {
@@ -15,6 +15,7 @@ _pleum() {
   fi
   case "$prev" in
     launch)     COMPREPLY=( $(compgen -W "${TOOLS}" -- "$cur") );;
+    wire|unwire) COMPREPLY=( $(compgen -W "claude codex" -- "$cur") );;
     run)        COMPREPLY=( $(compgen -W "$(pleum models 2>/dev/null | awk 'NR>1{print $1}')" -- "$cur") );;
     completion) COMPREPLY=( $(compgen -W "zsh bash" -- "$cur") );;
   esac
@@ -31,6 +32,7 @@ _pleum() {
   fi
   case \${words[2]} in
     launch)     compadd ${TOOLS};;
+    wire|unwire) compadd claude codex;;
     run)        compadd \${(f)"$(pleum models 2>/dev/null | awk 'NR>1{print \$1}')"};;
     completion) compadd zsh bash;;
   esac

package/src/locales/es.mjs

@@ -155,6 +155,28 @@ export const ES = {
   "Total": "Total",
   "Unknown command: /{cmd}  (/help)": "Comando desconocido: /{cmd}  (/help)",
   "Unknown command: {cmd}": "Comando desconocido: {cmd}",
+  "Usage: pleum wire [claude|codex]\n": "Uso: pleum wire [claude|codex]\n",
+  "Usage: pleum unwire [claude|codex] [--revoke-key]\n": "Uso: pleum unwire [claude|codex] [--revoke-key]\n",
+  "Example: pleum wire": "Ejemplo: pleum wire",
+  "Omit the tool name to wire both claude and codex.": "Si omites el nombre, cablea claude y codex.",
+  "persist config in ~/.claude or ~/.codex for Desktop apps": "guardar la config en ~/.claude o ~/.codex para apps Desktop",
+  "Removes the PleumRouter provider from Desktop config files": "Quita el proveedor PleumRouter de los archivos Desktop",
+  "Unsupported tool: {tool}. Use claude or codex.": "Herramienta no compatible: {tool}. Usa claude o codex.",
+  "Wrote {path}": "Escrito en {path}",
+  "Wired {tool}.": "Cableado {tool}.",
+  "Desktop key: {prefix}…": "Clave de escritorio: {prefix}…",
+  "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root} (no /v1), Bearer, paste the plm_ key.":
+    "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root} (sin /v1), Bearer, pega la clave plm_.",
+  "Codex Desktop reads ~/.codex/config.toml (user-level). Restart the app after wiring.":
+    "Codex Desktop lee ~/.codex/config.toml del usuario. Reinicia la app después de cablear.",
+  "Cursor IDE: Settings → Models → OpenAI Compatible. Base URL {v1}, same plm_ key. Cursor CLI is out of scope.":
+    "Cursor IDE: Settings → Models → OpenAI Compatible. Base URL {v1}, la misma clave plm_. Cursor CLI queda fuera de alcance.",
+  "Removed PleumRouter settings from {path}.": "Se quitó la config de PleumRouter de {path}.",
+  "No stored desktop API key.": "No hay clave API de escritorio guardada.",
+  "Revoked desktop API key {id}.": "Se revocó la clave API de escritorio {id}.",
+  "Failed to revoke the desktop API key (HTTP {status})": "No se pudo revocar la clave API de escritorio (HTTP {status})",
+  "Failed to create a desktop API key (HTTP {status})": "No se pudo crear la clave API de escritorio (HTTP {status})",
+  "kept the desktop key on this machine (logout does not delete it)": "la clave de escritorio se queda en esta máquina (logout no la borra)",
   "Unsupported language: {code}\n  Available: {list}": "Idioma no compatible: {code}\n  Disponibles: {list}",
   "Unsupported tool: {tool}": "Herramienta no compatible: {tool}",
   "Update CLI": "Actualizar la CLI",

package/src/locales/ja.mjs

@@ -52,6 +52,7 @@ export const JA = {
   "Failed to fetch model list: {error}": "モデル一覧の取得に失敗しました: {error}",
   "Failed to fetch usage ({status})": "使用状況の取得に失敗しました ({status})",
   "Failed to issue a device code (server responded {status})": "デバイスコードの発行に失敗しました (サーバー応答: {status})",
+  "Failed to revoke the desktop API key (HTTP {status})": "デスクトップ API キーの失効に失敗しました (HTTP {status})",
   "For OpenHands, prefix the model name with openai/ in its config.": "OpenHands の場合、設定でモデル名の先頭に openai/ を付けてください。",
   "Generates a temporary PleumRouter provider config for this run only — your own opencode.json is untouched.":
     "この実行時のみ使う一時的な PleumRouter プロバイダー設定を生成します — 既存の opencode.json には影響しません。",
@@ -86,6 +87,7 @@ export const JA = {
   "Legacy API key login is no longer supported. Run:\n  pleum login": "レガシー API キーログインはサポートされなくなりました。実行してください:\n  pleum login",
   "Session expired. Run:\n  pleum login": "セッションの有効期限が切れました。実行してください:\n  pleum login",
   "OAuth session": "OAuth セッション",
+  "Omit the tool name to wire both claude and codex.": "ツール名を省略すると claude と codex の両方を配線します。",
   "Log in via browser (OAuth session, no API key)": "ブラウザでログイン（OAuth セッション、API キーなし）",
   "Revoke session and clear local tokens": "セッションを取り消し、ローカル トークンを削除",
   "Logged out": "ログアウトしました",
@@ -105,6 +107,7 @@ export const JA = {
   "No matches": "一致なし",
   "No matches — showing the full list.": "一致なし — 全リストを表示します。",
   "No matching models": "一致するモデルなし",
+  "No stored desktop API key.": "保存されたデスクトップ API キーはありません。",
   "No such session: {name}": "そのセッションは存在しません: {name}",
   "No system prompt": "システムプロンプトなし",
   "No usage history": "使用履歴なし",
@@ -116,6 +119,7 @@ export const JA = {
   "setup required": "設定が必要",
   "Installed — press Enter for the {file} setup snippet": "インストール済み — Enterで{file}の設定スニペットを表示",
   "Override base_url: PLEUM_BASE_URL environment variable": "base_url を上書き: PLEUM_BASE_URL 環境変数",
+  "persist config in ~/.claude or ~/.codex for Desktop apps": "Desktop アプリ向けに ~/.claude または ~/.codex に設定を保存",
   "PleumRouter terminal CLI": "PleumRouter ターミナルCLI",
   "Press Enter to install now": "Enter を押すと今すぐインストールします",
   "Print a shell completion script": "シェル補完スクリプトを出力",
@@ -123,6 +127,8 @@ export const JA = {
   "Print the version": "バージョンを表示",
   "Provider share": "プロバイダーシェア",
   "Reinstall the latest version": "最新バージョンを再インストール",
+  "Removes the PleumRouter provider from Desktop config files": "Desktop 設定ファイルから PleumRouter プロバイダーを削除",
+  "Revoked desktop API key {id}.": "デスクトップ API キー {id} を失効しました。",
   "Reinstalling — pleum will exit when finished. Run `pleum` again afterward.": "再インストール中です — 完了するとpleumは終了します。その後もう一度pleumを実行してください。",
   "Run a coding agent against PleumRouter": "PleumRouter に対してコーディングエージェントを実行",
   "Run pleum login again to get a new key (recent keys include it by default).": "新しいキーを取得するには pleum login を再実行してください (最近のキーはデフォルトで含まれます)。",
@@ -155,8 +161,22 @@ export const JA = {
   "Total": "合計",
   "Unknown command: /{cmd}  (/help)": "不明なコマンド: /{cmd}  (/help)",
   "Unknown command: {cmd}": "不明なコマンド: {cmd}",
+  "Example: pleum wire": "例: pleum wire",
+  "Wrote {path}": "{path} に書きました",
+  "Wired {tool}.": "{tool} を配線しました。",
+  "Desktop key: {prefix}…": "デスクトップキー: {prefix}…",
+  "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root} (no /v1), Bearer, paste the plm_ key.":
+    "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root}（/v1 なし）、Bearer、plm_ キーを貼り付けます。",
+  "Codex Desktop reads ~/.codex/config.toml (user-level). Restart the app after wiring.":
+    "Codex Desktop はユーザーの ~/.codex/config.toml を読みます。配線後にアプリを再起動してください。",
+  "Cursor IDE: Settings → Models → OpenAI Compatible. Base URL {v1}, same plm_ key. Cursor CLI is out of scope.":
+    "Cursor IDE: Settings → Models → OpenAI Compatible。Base URL {v1}、同じ plm_ キー。Cursor CLI は対象外です。",
+  "Removed PleumRouter settings from {path}.": "{path} から PleumRouter 設定を削除しました。",
+  "Failed to create a desktop API key (HTTP {status})": "デスクトップ API キーの発行に失敗しました (HTTP {status})",
+  "kept the desktop key on this machine (logout does not delete it)": "このマシンのデスクトップキーは残します（logout では消しません）",
   "Unsupported language: {code}\n  Available: {list}": "サポートされていない言語です: {code}\n  利用可能: {list}",
   "Unsupported tool: {tool}": "サポートされていないツールです: {tool}",
+  "Unsupported tool: {tool}. Use claude or codex.": "サポートされていないツールです: {tool}。claude または codex を指定してください。",
   "Update CLI": "CLIを更新",
   "Usage": "使用状況",
   "Usage report": "使用状況レポート",
@@ -164,6 +184,8 @@ export const JA = {
   "Usage: pleum launch <tool> [--model id] [-- tool args]\n": "使い方: pleum launch <tool> [--model id] [-- tool args]\n",
   "Usage: pleum models <model-id> --info": "使い方: pleum models <model-id> --info",
   "Usage: pleum run <model> [\"prompt\"]\nModel list: pleum models": "使い方: pleum run <model> [\"prompt\"]\nモデル一覧: pleum models",
+  "Usage: pleum unwire [claude|codex] [--revoke-key]\n": "使い方: pleum unwire [claude|codex] [--revoke-key]\n",
+  "Usage: pleum wire [claude|codex]\n": "使い方: pleum wire [claude|codex]\n",
   "Use default (clear)": "デフォルトを使用(解除)",
   "Your spend report (model|provider|api_key|day)": "支出レポート (model|provider|api_key|day)",
   "by day": "日別",

package/src/locales/ko.mjs

@@ -266,6 +266,28 @@ export const KO = {
   "Override base_url: PLEUM_BASE_URL environment variable": "base_url 덮어쓰기: PLEUM_BASE_URL 환경변수",
   "Logged out": "로그아웃됨",
   "Unknown command: {cmd}": "알 수 없는 명령: {cmd}",
+  "Usage: pleum wire [claude|codex]\n": "사용법: pleum wire [claude|codex]\n",
+  "Usage: pleum unwire [claude|codex] [--revoke-key]\n": "사용법: pleum unwire [claude|codex] [--revoke-key]\n",
+  "Example: pleum wire": "예: pleum wire",
+  "Omit the tool name to wire both claude and codex.": "도구 이름을 생략하면 claude와 codex를 모두 배선합니다.",
+  "persist config in ~/.claude or ~/.codex for Desktop apps": "Desktop 앱용으로 ~/.claude 또는 ~/.codex에 설정을 저장",
+  "Removes the PleumRouter provider from Desktop config files": "Desktop 설정 파일에서 PleumRouter 프로바이더를 제거",
+  "Unsupported tool: {tool}. Use claude or codex.": "지원하지 않는 도구: {tool}. claude 또는 codex를 쓰세요.",
+  "Wrote {path}": "{path}에 썼습니다",
+  "Wired {tool}.": "{tool}을 배선했습니다.",
+  "Desktop key: {prefix}…": "데스크톱 키: {prefix}…",
+  "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root} (no /v1), Bearer, paste the plm_ key.":
+    "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root} (/v1 없음), Bearer, plm_ 키를 붙여넣으세요.",
+  "Codex Desktop reads ~/.codex/config.toml (user-level). Restart the app after wiring.":
+    "Codex Desktop은 사용자 ~/.codex/config.toml을 읽습니다. 배선 후 앱을 재시작하세요.",
+  "Cursor IDE: Settings → Models → OpenAI Compatible. Base URL {v1}, same plm_ key. Cursor CLI is out of scope.":
+    "Cursor IDE: 설정 → Models → OpenAI Compatible. Base URL {v1}, 같은 plm_ 키. Cursor CLI는 범위 밖입니다.",
+  "Removed PleumRouter settings from {path}.": "{path}에서 PleumRouter 설정을 제거했습니다.",
+  "No stored desktop API key.": "저장된 데스크톱 API 키가 없습니다.",
+  "Revoked desktop API key {id}.": "데스크톱 API 키 {id}를 폐기했습니다.",
+  "Failed to revoke the desktop API key (HTTP {status})": "데스크톱 API 키 폐기에 실패했습니다 (HTTP {status})",
+  "Failed to create a desktop API key (HTTP {status})": "데스크톱 API 키 발급에 실패했습니다 (HTTP {status})",
+  "kept the desktop key on this machine (logout does not delete it)": "이 기기의 데스크톱 키는 남겨 둡니다 (logout이 지우지 않음)",
 
   // settings.mjs
   "Settings": "설정",

package/src/locales/zh.mjs

@@ -155,6 +155,28 @@ export const ZH = {
   "Total": "总计",
   "Unknown command: /{cmd}  (/help)": "未知命令：/{cmd}  （/help）",
   "Unknown command: {cmd}": "未知命令：{cmd}",
+  "Usage: pleum wire [claude|codex]\n": "用法：pleum wire [claude|codex]\n",
+  "Usage: pleum unwire [claude|codex] [--revoke-key]\n": "用法：pleum unwire [claude|codex] [--revoke-key]\n",
+  "Example: pleum wire": "示例：pleum wire",
+  "Omit the tool name to wire both claude and codex.": "省略工具名会同时接线 claude 和 codex。",
+  "persist config in ~/.claude or ~/.codex for Desktop apps": "为 Desktop 应用把配置写入 ~/.claude 或 ~/.codex",
+  "Removes the PleumRouter provider from Desktop config files": "从 Desktop 配置文件中移除 PleumRouter 提供方",
+  "Unsupported tool: {tool}. Use claude or codex.": "不支持的工具：{tool}。请使用 claude 或 codex。",
+  "Wrote {path}": "已写入 {path}",
+  "Wired {tool}.": "已接线 {tool}。",
+  "Desktop key: {prefix}…": "桌面密钥：{prefix}…",
+  "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root} (no /v1), Bearer, paste the plm_ key.":
+    "Claude Code Desktop：Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference。Gateway base URL {root}（不要 /v1），Bearer，粘贴 plm_ 密钥。",
+  "Codex Desktop reads ~/.codex/config.toml (user-level). Restart the app after wiring.":
+    "Codex Desktop 读取用户级 ~/.codex/config.toml。接线后请重启应用。",
+  "Cursor IDE: Settings → Models → OpenAI Compatible. Base URL {v1}, same plm_ key. Cursor CLI is out of scope.":
+    "Cursor IDE：设置 → Models → OpenAI Compatible。Base URL {v1}，同一把 plm_ 密钥。Cursor CLI 不在范围内。",
+  "Removed PleumRouter settings from {path}.": "已从 {path} 移除 PleumRouter 设置。",
+  "No stored desktop API key.": "没有保存的桌面 API 密钥。",
+  "Revoked desktop API key {id}.": "已撤销桌面 API 密钥 {id}。",
+  "Failed to revoke the desktop API key (HTTP {status})": "撤销桌面 API 密钥失败（HTTP {status}）",
+  "Failed to create a desktop API key (HTTP {status})": "签发桌面 API 密钥失败（HTTP {status}）",
+  "kept the desktop key on this machine (logout does not delete it)": "本机桌面密钥会保留（logout 不会删除）",
   "Unsupported language: {code}\n  Available: {list}": "不支持的语言：{code}\n  可用：{list}",
   "Unsupported tool: {tool}": "不支持的工具：{tool}",
   "Update CLI": "更新 CLI",

package/src/recipes.mjs

@@ -1,6 +1,6 @@
 import { ROOT, V1 } from "./config.mjs";
 
-// 도구별 설정의 진실 원천. 출처: frontend .../docs/cookbook/agent-integration + 에이전트별 공식 문서 조사(2026-07).
+// 도구별 설정의 진실 원천. 출처: frontend .../docs/cookbook/{codex,claude-code,...} + 에이전트별 공식 문서 조사(2026-07).
 // type "env"        → 환경변수만 세팅하고 바로 실행.
 // type "codex-home" → 격리된 CODEX_HOME에 config.toml을 써서 실행(사용자 ~/.codex 보존).
 // note 필드는 t() 키(영어 원문)만 담는다 — 여기서 t()를 호출하면 모듈 로드 시점에 번역이
@@ -218,6 +218,7 @@ name = "PleumRouter"
 base_url = ${tomlBasicString(V1)}
 env_key = "PLEUM_API_KEY"
 wire_api = "responses"
+supports_websockets = false
 `;
 }
 

package/src/usage.mjs

@@ -19,7 +19,9 @@ export function parseUsageArgs(rest = []) {
   return { by, days };
 }
 
-const fmtKrw = (n) => `${Math.round(n).toLocaleString("en-US")} 크레딧`;
+// 원장 눈금 0.1 — Math.round로 자르면 소액 사용이 0으로 보인다.
+const fmtKrw = (n) =>
+  `${Number(n).toLocaleString("en-US", { minimumFractionDigits: 1, maximumFractionDigits: 1 })} 크레딧`;
 
 // report 응답 → 표시 문자열(순수 함수 — fixture 테스트 대상).
 export function renderUsage(data, styler = style) {

package/src/wire.mjs

@@ -0,0 +1,288 @@
+import { homedir } from "node:os";
+import { dirname, join } from "node:path";
+import { existsSync, mkdirSync, readFileSync, unlinkSync, writeFileSync } from "node:fs";
+import { ROOT, V1, authFetch } from "./config.mjs";
+import { tomlBasicString } from "./recipes.mjs";
+import { t } from "./i18n.mjs";
+
+export const WIRE_TOOLS = ["claude", "codex"];
+export const WIRE_KEY_NAME = "pleum-desktop";
+export const WIRE_MARKER_START = "# pleum-wire-start";
+export const WIRE_MARKER_END = "# pleum-wire-end";
+
+const CLAUDE_ENV_KEYS = ["ANTHROPIC_BASE_URL", "ANTHROPIC_AUTH_TOKEN", "ANTHROPIC_API_KEY"];
+
+export function wirePaths(home = homedir()) {
+  const claude = join(home, ".claude", "settings.json");
+  const codex = join(home, ".codex", "config.toml");
+  return {
+    home,
+    wire: join(home, ".pleum", "wire.json"),
+    claude,
+    claudeBak: `${claude}.pleum.bak`,
+    codex,
+    codexBak: `${codex}.pleum.bak`,
+  };
+}
+
+function readText(path) {
+  try {
+    return readFileSync(path, "utf8");
+  } catch {
+    return null;
+  }
+}
+
+function writeSecretFile(path, contents, mode = 0o600) {
+  mkdirSync(dirname(path), { recursive: true, mode: 0o700 });
+  writeFileSync(path, contents, { mode });
+}
+
+function backupOnce(src, bak) {
+  if (existsSync(src) && !existsSync(bak)) writeSecretFile(bak, readFileSync(src));
+}
+
+function stripWireBlock(toml) {
+  const re = new RegExp(
+    `${WIRE_MARKER_START.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}[\\s\\S]*?${WIRE_MARKER_END.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}\\n?`,
+  );
+  return toml.replace(re, "");
+}
+
+function removeTomlTable(toml, name) {
+  const header = `[${name}]`;
+  const lines = toml.split("\n");
+  const out = [];
+  let skip = false;
+  for (const line of lines) {
+    const trimmed = line.trim();
+    if (trimmed.startsWith("[") && trimmed.endsWith("]")) skip = trimmed === header;
+    if (!skip) out.push(line);
+  }
+  return out.join("\n");
+}
+
+function readPreviousProvider(toml) {
+  const marked = toml.match(/# previous_model_provider = (.*)/);
+  if (marked) return marked[1].trim();
+  const stripped = stripWireBlock(toml);
+  const top = stripped.match(/^model_provider\s*=\s*(.+)$/m);
+  return top ? top[1].trim() : "";
+}
+
+export function wireClaudeSettings(existingJson, { root, key }) {
+  let obj = {};
+  if (existingJson && existingJson.trim()) {
+    obj = JSON.parse(existingJson);
+    if (obj === null || typeof obj !== "object" || Array.isArray(obj)) obj = {};
+  }
+  obj.env = {
+    ...(obj.env && typeof obj.env === "object" && !Array.isArray(obj.env) ? obj.env : {}),
+    ANTHROPIC_BASE_URL: root,
+    ANTHROPIC_AUTH_TOKEN: key,
+    ANTHROPIC_API_KEY: key,
+  };
+  return `${JSON.stringify(obj, null, 2)}\n`;
+}
+
+export function unwireClaudeSettings(existingJson) {
+  if (!existingJson || !existingJson.trim()) return `${JSON.stringify({}, null, 2)}\n`;
+  const obj = JSON.parse(existingJson);
+  if (obj === null || typeof obj !== "object" || Array.isArray(obj)) {
+    return `${JSON.stringify({}, null, 2)}\n`;
+  }
+  if (obj.env && typeof obj.env === "object" && !Array.isArray(obj.env)) {
+    for (const envKey of CLAUDE_ENV_KEYS) delete obj.env[envKey];
+    if (Object.keys(obj.env).length === 0) delete obj.env;
+  }
+  return `${JSON.stringify(obj, null, 2)}\n`;
+}
+
+export function wireCodexToml(existingToml, { v1, key }) {
+  const src = existingToml ?? "";
+  const previous = readPreviousProvider(src);
+  let body = stripWireBlock(src);
+  body = body.replace(/^model_provider\s*=\s*.+\n?/m, "");
+  body = removeTomlTable(body, "model_providers.pleum.http_headers");
+  body = removeTomlTable(body, "model_providers.pleum");
+  const block = `${WIRE_MARKER_START}
+# previous_model_provider = ${previous}
+model_provider = "pleum"
+
+[model_providers.pleum]
+name = "PleumRouter"
+base_url = ${tomlBasicString(v1)}
+wire_api = "responses"
+supports_websockets = false
+
+[model_providers.pleum.http_headers]
+Authorization = ${tomlBasicString(`Bearer ${key}`)}
+${WIRE_MARKER_END}
+`;
+  const trimmed = body.replace(/\s+$/, "");
+  return `${trimmed ? `${trimmed}\n\n` : ""}${block}`;
+}
+
+export function unwireCodexToml(existingToml) {
+  const src = existingToml ?? "";
+  const previous = readPreviousProvider(src);
+  let body = stripWireBlock(src);
+  body = removeTomlTable(body, "model_providers.pleum.http_headers");
+  body = removeTomlTable(body, "model_providers.pleum");
+  if (previous && previous !== '""' && !/^model_provider\s*=/m.test(body)) {
+    body = `model_provider = ${previous}\n${body.replace(/^\n+/, "")}`;
+  }
+  return body.replace(/\n{3,}/g, "\n\n").replace(/^\n+/, "");
+}
+
+function parseJsonBody(res) {
+  return res.json().catch(() => ({}));
+}
+
+export async function ensureWireKey({
+  auth = authFetch,
+  paths = wirePaths(),
+} = {}) {
+  const stored = (() => {
+    try {
+      return JSON.parse(readText(paths.wire) ?? "");
+    } catch {
+      return null;
+    }
+  })();
+  if (stored?.key && stored?.id) {
+    const listed = await auth("/keys");
+    if (listed.ok) {
+      const data = await parseJsonBody(listed);
+      const items = Array.isArray(data.items) ? data.items : [];
+      const found = items.find((item) => String(item.id) === String(stored.id));
+      if (found && found.is_active !== false) return stored;
+    } else if (listed.status !== 404) {
+      return stored;
+    }
+  }
+
+  const created = await auth("/keys", {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ name: WIRE_KEY_NAME }),
+  });
+  if (!created.ok) {
+    throw new Error(t("Failed to create a desktop API key (HTTP {status})", { status: created.status }));
+  }
+  const data = await parseJsonBody(created);
+  if (!data.key || !data.id) {
+    throw new Error(t("Failed to create a desktop API key (HTTP {status})", { status: created.status }));
+  }
+  const record = { id: data.id, key: data.key, name: data.name ?? WIRE_KEY_NAME };
+  writeSecretFile(paths.wire, `${JSON.stringify(record, null, 2)}\n`);
+  return record;
+}
+
+export function parseWireArgs(args) {
+  const revoke = args.includes("--revoke-key");
+  const tools = args.filter((arg) => arg !== "--revoke-key");
+  if (tools.length === 0) return { tools: [...WIRE_TOOLS], revoke };
+  const unknown = tools.find((tool) => !WIRE_TOOLS.includes(tool));
+  if (unknown) {
+    throw new Error(t("Unsupported tool: {tool}. Use claude or codex.", { tool: unknown }));
+  }
+  return { tools: [...new Set(tools)], revoke };
+}
+
+export function wireHelp() {
+  console.log(t("Usage: pleum wire [claude|codex]\n"));
+  console.log(`  ${t("Omit the tool name to wire both claude and codex.")}`);
+  console.log(`  ${t("Example: pleum wire")}`);
+}
+
+export function unwireHelp() {
+  console.log(t("Usage: pleum unwire [claude|codex] [--revoke-key]\n"));
+}
+
+function printDesktopHints(record) {
+  const prefix = String(record.key).slice(0, 8);
+  console.log(t("Desktop key: {prefix}…", { prefix }));
+  console.log(
+    t(
+      "Claude Code Desktop: Help → Troubleshooting → Enable Developer Mode → Developer → Configure Third-Party Inference. Gateway base URL {root} (no /v1), Bearer, paste the plm_ key.",
+      { root: ROOT },
+    ),
+  );
+  console.log(t("Codex Desktop reads ~/.codex/config.toml (user-level). Restart the app after wiring."));
+  console.log(
+    t(
+      "Cursor IDE: Settings → Models → OpenAI Compatible. Base URL {v1}, same plm_ key. Cursor CLI is out of scope.",
+      { v1: V1 },
+    ),
+  );
+  console.log(t("kept the desktop key on this machine (logout does not delete it)"));
+}
+
+function applyClaude(paths, key) {
+  backupOnce(paths.claude, paths.claudeBak);
+  const next = wireClaudeSettings(readText(paths.claude), { root: ROOT, key });
+  writeSecretFile(paths.claude, next);
+  console.log(t("Wrote {path}", { path: paths.claude }));
+}
+
+function applyCodex(paths, key) {
+  backupOnce(paths.codex, paths.codexBak);
+  const next = wireCodexToml(readText(paths.codex) ?? "", { v1: V1, key });
+  writeSecretFile(paths.codex, next);
+  console.log(t("Wrote {path}", { path: paths.codex }));
+}
+
+function revertClaude(paths) {
+  if (!existsSync(paths.claude)) return;
+  writeSecretFile(paths.claude, unwireClaudeSettings(readText(paths.claude)));
+  console.log(t("Removed PleumRouter settings from {path}.", { path: paths.claude }));
+}
+
+function revertCodex(paths) {
+  if (!existsSync(paths.codex)) return;
+  writeSecretFile(paths.codex, unwireCodexToml(readText(paths.codex) ?? ""));
+  console.log(t("Removed PleumRouter settings from {path}.", { path: paths.codex }));
+}
+
+export async function wire(args, { auth = authFetch, home = homedir() } = {}) {
+  const { tools } = parseWireArgs(args);
+  const paths = wirePaths(home);
+  const record = await ensureWireKey({ auth, paths });
+  if (tools.includes("claude")) applyClaude(paths, record.key);
+  if (tools.includes("codex")) applyCodex(paths, record.key);
+  for (const tool of tools) console.log(t("Wired {tool}.", { tool }));
+  printDesktopHints(record);
+}
+
+export async function unwire(args, { auth = authFetch, home = homedir() } = {}) {
+  const { tools, revoke } = parseWireArgs(args);
+  const paths = wirePaths(home);
+  if (tools.includes("claude")) revertClaude(paths);
+  if (tools.includes("codex")) revertCodex(paths);
+  if (!revoke) return;
+
+  const stored = (() => {
+    try {
+      return JSON.parse(readText(paths.wire) ?? "");
+    } catch {
+      return null;
+    }
+  })();
+  if (!stored?.id) {
+    console.log(t("No stored desktop API key."));
+    return;
+  }
+  const res = await auth(`/keys/${stored.id}`, { method: "DELETE" });
+  if (!res.ok && res.status !== 404) {
+    throw new Error(t("Failed to revoke the desktop API key (HTTP {status})", { status: res.status }));
+  }
+  if (existsSync(paths.wire)) {
+    try {
+      unlinkSync(paths.wire);
+    } catch {
+      // already gone
+    }
+  }
+  console.log(t("Revoked desktop API key {id}.", { id: stored.id }));
+}