sidekick-shared 0.28.0 → 0.28.2

package/CHANGELOG.md

@@ -5,6 +5,18 @@ All notable changes to sidekick-shared will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.28.2] - 2026-10-30
+
+### Fixed
+
+- Add verified offline pricing and context baselines for GPT-6.1 Sol/Terra, Claude Sonnet/Haiku 5.5 (dashed and dotted), Gemini 4 Argon/3.8 Flash, DeepSeek Flash/V4 Pro (including accepted Flash aliases), and GLM-5.3/Flash/FlashX. Direct-provider IDs resolve offline too. Preserve runtime overrides and observed account limits; document standard/short-context rates, DeepSeek peak rates, and Gemini promotions. Fixes #18.
+
+## [0.28.1] - 2026-10-18
+
+### Fixed
+
+- **`installCredentialGuard()` keeps `promisify(execFile)` working.** The guard replaced `child_process.execFile` and `exec` without Node's `util.promisify.custom`, so `promisify(execFile)(...)` resolved to the bare stdout string and `const { stdout } = await promisify(execFile)(...)` read `undefined`. The guarded functions now carry a guarded `promisify.custom` that delegates to Node's own, so it resolves to `{ stdout, stderr }` again, rejects with an error carrying `stdout` / `stderr`, and keeps `.child`; a blocked binary on the promisified path is recorded and rejects.
+
 ## [0.28.0] - 2026-10-18
 
 ### Added

package/README.md

@@ -9,6 +9,7 @@ Types, parsers, providers, readers, formatters, aggregation, search, reporting,
 
 ## Recent additions
 
+- **0.28.1: credential guard keeps `promisify(execFile)`** — after `installCredentialGuard()`, `promisify(execFile)` and `promisify(exec)` resolve to `{ stdout, stderr }` again (0.28.0 dropped Node's `util.promisify.custom`, so they returned the bare stdout string), and the promisified calls are guarded too.
 - **0.28.0: ES modules, narrow entries, and new readers** — a `module` export condition gives bundlers a tree-shakable ES-module build (Node keeps CommonJS); browser-safe parsers and helpers move onto `/browser` and the provider-home helpers onto `/node`; `sidekick-shared/testing` publishes the credential guard; `providerFailureDiagnosisSchema` joins `/schemas`; prompt history reports `changed` / `progressed` / `roots` and takes `sessionRefs`; signals carry `toolCategory` and `mcpServer`; `collectUsageEvents()` takes `workspacePaths`; `createJsonlTail()` is bounded and reports resets; and Claude sessions follow `CLAUDE_CONFIG_DIR` while Codex lookups include `archived_sessions/`.
 - **0.27.6: one usable copy per login** — Claude Code and Codex rotate refresh tokens, so a second usable copy of a login invalidates the first ("Not logged in · Please run /login"). The live account now keeps no profile-home credential, only a private backup; `syncLiveAccountState()` demotes a leftover copy (installing it first when it is newer) and reports `demoted`, `repaired`, and `journal`. Live writes pass `decideLiveClaudeWrite()` or the Codex equivalent: a switch captures the outgoing login first even with `force`, holds Claude Code's refresh lock, is journaled so the next sync finishes or rolls it back, and keeps live MCP tokens. Claude Keychain writes use Claude Code's hex method and are read back (`ClaudeCredentialWriteError`), so blobs over about 4 KB are no longer truncated. New root APIs: `readClaudeCredentialStore()`, `inspectClaudeCredentialStores()` / `repairClaudeCredentialStores()`, `inspectCodexCredentialStores()` / `repairCodexCredentialStores()`, `readClaudeCredentialLedger()`, `readStoredCodexAccount()`, `syncCodexLiveStateAsync()`, `discardAccountLogin()`, `writeAccountLauncher()`, and non-persisting health inspection (`persist: false`). `writeActiveCredentials()` now requires a config directory; `writeLauncher()`, `applyActiveClaudeToLiveHome()`, and `resolveActiveClaudeHome()` are deprecated.
 - **0.27.5: whole-session prompt history** — `collectSessionPromptHistory()` (root and Node) returns every human prompt of each matching Claude Code or Codex session, grouped by session and read from the start with the `collectPromptHistory()` scanners, so text, scope, model and usage, and ordinals are identical. Select with `sessionIds`, `since` (file mtime), or `limit`; each session carries `startedAt` / `lastActivityAt`, `cwds`, `gitBranches`, `models`, and `complete` / `truncated` / `droppedPrompts` / `excludedRecords`. `include.replies` adds the agent's last text for each prompt, and `include.signals` adds `interrupt`, `toolRejected`, `toolError`, `compaction`, `apiError`, and `rollback` signals. Sessions that `maxSessions`, `maxTotalBytes`, the deadline, or an abort cut off are listed in `unread` instead of being returned partially.
@@ -163,7 +164,7 @@ const guard = installCredentialGuard();
 afterEach(() => guard.assertNoViolations());
 ```
 
-The guard points `HOME` (and `USERPROFILE`, `APPDATA`, `LOCALAPPDATA`) at a temp directory it removes on exit, unsets `CLAUDE_CONFIG_DIR`, `CLAUDE_SECURESTORAGE_CONFIG_DIR`, `CODEX_HOME`, and `SIDEKICK_CONFIG_DIR`, and patches the real `child_process` and `fs` modules. Spawning `security`, `claude`, or `codex` throws, writing under the real `~/.claude`, `~/.claude.json`, `~/.codex`, or `~/.config/sidekick` throws, and reads there are recorded. Production code often swallows errors, so `assertNoViolations()` reports what was recorded even when nothing threw. A `vi.mock('child_process')` factory replaces the module and bypasses the guard for that file.
+The guard points `HOME` (and `USERPROFILE`, `APPDATA`, `LOCALAPPDATA`) at a temp directory it removes on exit, unsets `CLAUDE_CONFIG_DIR`, `CLAUDE_SECURESTORAGE_CONFIG_DIR`, `CODEX_HOME`, and `SIDEKICK_CONFIG_DIR`, and patches the real `child_process` and `fs` modules. Spawning `security`, `claude`, or `codex` throws (a promisified `execFile` or `exec` rejects instead, and otherwise keeps Node's `{ stdout, stderr }` result), writing under the real `~/.claude`, `~/.claude.json`, `~/.codex`, or `~/.config/sidekick` throws, and reads there are recorded. Production code often swallows errors, so `assertNoViolations()` reports what was recorded even when nothing threw. A `vi.mock('child_process')` factory replaces the module and bypasses the guard for that file.
 
 ### Browser / webview runtimes
 

package/dist/esm/modelContext.js

@@ -30,6 +30,38 @@
 import { resolveModelAlias } from './modelAliases';
 /** Known model context window sizes (in tokens); current models verified 2026-09-05. */
 const MODEL_CONTEXT_SIZES = {
+    // Published API limits verified 2026-10-30; GLM's API documents 1M even
+    // though local weights may support more. Catalog/observed overrides win.
+    'gpt-6.1-sol': 1_050_000,
+    'openai/gpt-6.1-sol': 1_050_000,
+    'gpt-6.1-terra': 1_050_000,
+    'openai/gpt-6.1-terra': 1_050_000,
+    'claude-sonnet-5-5': 1_000_000,
+    'anthropic/claude-sonnet-5-5': 1_000_000,
+    'claude-sonnet-5.5': 1_000_000,
+    'anthropic/claude-sonnet-5.5': 1_000_000,
+    'claude-haiku-5-5': 1_000_000,
+    'anthropic/claude-haiku-5-5': 1_000_000,
+    'claude-haiku-5.5': 1_000_000,
+    'anthropic/claude-haiku-5.5': 1_000_000,
+    'gemini-4-argon': 1_048_576,
+    'gemini/gemini-4-argon': 1_048_576,
+    'gemini-3.8-flash': 1_048_576,
+    'gemini/gemini-3.8-flash': 1_048_576,
+    'deepseek-flash': 1_000_000,
+    'deepseek/deepseek-flash': 1_000_000,
+    'deepseek-v4-flash': 1_000_000,
+    'deepseek/deepseek-v4-flash': 1_000_000,
+    'deepseek-v4-flash-vision-exp': 1_000_000,
+    'deepseek/deepseek-v4-flash-vision-exp': 1_000_000,
+    'deepseek-v4-pro': 1_000_000,
+    'deepseek/deepseek-v4-pro': 1_000_000,
+    'glm-5.3': 1_000_000,
+    'zai/glm-5.3': 1_000_000,
+    'glm-5.3-flash': 1_000_000,
+    'zai/glm-5.3-flash': 1_000_000,
+    'glm-5.3-flashx': 1_000_000,
+    'zai/glm-5.3-flashx': 1_000_000,
     // Claude — native 1M context (Fable 5+, Opus 4.6+, Sonnet 4.6+)
     'claude-fable-5-1': 1_000_000,
     'claude-fable-5.1': 1_000_000,

package/dist/esm/modelInfo.js

@@ -37,6 +37,192 @@ export { MODEL_PROVIDER_IDS } from './providerIds';
  * prefix matching cannot bridge the two, so both are needed.
  */
 const PRICING_TABLE = {
+    // Current coding models verified 2026-10-30. Standard short-context rates;
+    // DeepSeek uses peak rates. Gemini promotions end 2026-11-30 (Argon) and
+    // 2026-12-31 (Flash). Haiku 5.5 costs more above 100K prompt tokens.
+    // Sources and estimation limits: docs/configuration/model-resolution.md.
+    // Explicit direct-provider keys support offline OpenCode model IDs without
+    // stripping arbitrary deployment prefixes or changing alias resolution.
+    'gpt-6.1-sol': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'openai/gpt-6.1-sol': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'gpt-6.1-terra': {
+        inputCostPerMillion: 1,
+        outputCostPerMillion: 5,
+        cacheWriteCostPerMillion: 1.25,
+        cacheReadCostPerMillion: 0.05,
+    },
+    'openai/gpt-6.1-terra': {
+        inputCostPerMillion: 1,
+        outputCostPerMillion: 5,
+        cacheWriteCostPerMillion: 1.25,
+        cacheReadCostPerMillion: 0.05,
+    },
+    'claude-sonnet-5-5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'anthropic/claude-sonnet-5-5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'claude-sonnet-5.5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'anthropic/claude-sonnet-5.5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'claude-haiku-5-5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'anthropic/claude-haiku-5-5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'claude-haiku-5.5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'anthropic/claude-haiku-5.5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'gemini-4-argon': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'gemini/gemini-4-argon': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'gemini-3.8-flash': {
+        inputCostPerMillion: 0.75,
+        outputCostPerMillion: 3.75,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
+    'gemini/gemini-3.8-flash': {
+        inputCostPerMillion: 0.75,
+        outputCostPerMillion: 3.75,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
+    'deepseek-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek/deepseek-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek-v4-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek/deepseek-v4-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek-v4-flash-vision-exp': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek/deepseek-v4-flash-vision-exp': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek-v4-pro': {
+        inputCostPerMillion: 1.32,
+        outputCostPerMillion: 3.96,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.044,
+    },
+    'deepseek/deepseek-v4-pro': {
+        inputCostPerMillion: 1.32,
+        outputCostPerMillion: 3.96,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.044,
+    },
+    'glm-5.3': {
+        inputCostPerMillion: 1.4,
+        outputCostPerMillion: 4.4,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.26,
+    },
+    'zai/glm-5.3': {
+        inputCostPerMillion: 1.4,
+        outputCostPerMillion: 4.4,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.26,
+    },
+    'glm-5.3-flash': {
+        inputCostPerMillion: 0.15,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.03,
+    },
+    'zai/glm-5.3-flash': {
+        inputCostPerMillion: 0.15,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.03,
+    },
+    'glm-5.3-flashx': {
+        inputCostPerMillion: 0.37,
+        outputCostPerMillion: 1.25,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
+    'zai/glm-5.3-flashx': {
+        inputCostPerMillion: 0.37,
+        outputCostPerMillion: 1.25,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
     // ── Anthropic: Claude ──
     // Fable 5.1 cache reads cost 0.025x input; Fable 5 retains its 0.1x rate.
     'claude-fable-5-1': {

package/dist/esm/testing/credentialGuard.js

@@ -70,6 +70,7 @@ export function installCredentialGuard(options = {}) {
     const realFs = builtin('node:fs');
     const fs = realFs;
     const { syncBuiltinESMExports } = builtin('node:module');
+    const { promisify } = builtin('node:util');
     const blockedBinaries = new Set((options.blockedBinaries ?? DEFAULT_BLOCKED_BINARIES).map((name) => name.toLowerCase()));
     // os.userInfo() reads the passwd entry, so it still names the real home
     // after HOME is redirected below.
@@ -145,13 +146,37 @@ export function installCredentialGuard(options = {}) {
         const original = childProcess[name];
         if (typeof original !== 'function')
             continue;
-        childProcess[name] = function guarded(...args) {
+        const check = (args) => {
             const binary = binaryName(args[0]);
             if (blockedBinaries.has(binary)) {
                 record(`child_process.${name}('${binary}') reached the real binary; mock child_process or inject a runner`);
             }
+        };
+        const guarded = function guarded(...args) {
+            check(args);
             return original.apply(this, args);
         };
+        // execFile and exec carry Node's promisify.custom, which resolves to
+        // { stdout, stderr }; without it promisify() falls back to the first
+        // callback value. Guard it too and delegate, so .child, the error's
+        // stdout/stderr, encoding, and maxBuffer stay Node's own.
+        const custom = original[promisify.custom];
+        if (typeof custom === 'function') {
+            Object.defineProperty(guarded, promisify.custom, {
+                configurable: true,
+                writable: true,
+                value: function guardedPromisified(...args) {
+                    try {
+                        check(args);
+                    }
+                    catch (error) {
+                        return Promise.reject(error);
+                    }
+                    return custom.apply(this, args);
+                },
+            });
+        }
+        childProcess[name] = guarded;
     }
     for (const name of FS_WRITE_FUNCTIONS) {
         const original = fs[name];

package/dist/modelContext.js

@@ -44,6 +44,38 @@ exports.getModelContextWindowSize = getModelContextWindowSize;
 const modelAliases_1 = require("./modelAliases");
 /** Known model context window sizes (in tokens); current models verified 2026-09-05. */
 const MODEL_CONTEXT_SIZES = {
+    // Published API limits verified 2026-10-30; GLM's API documents 1M even
+    // though local weights may support more. Catalog/observed overrides win.
+    'gpt-6.1-sol': 1_050_000,
+    'openai/gpt-6.1-sol': 1_050_000,
+    'gpt-6.1-terra': 1_050_000,
+    'openai/gpt-6.1-terra': 1_050_000,
+    'claude-sonnet-5-5': 1_000_000,
+    'anthropic/claude-sonnet-5-5': 1_000_000,
+    'claude-sonnet-5.5': 1_000_000,
+    'anthropic/claude-sonnet-5.5': 1_000_000,
+    'claude-haiku-5-5': 1_000_000,
+    'anthropic/claude-haiku-5-5': 1_000_000,
+    'claude-haiku-5.5': 1_000_000,
+    'anthropic/claude-haiku-5.5': 1_000_000,
+    'gemini-4-argon': 1_048_576,
+    'gemini/gemini-4-argon': 1_048_576,
+    'gemini-3.8-flash': 1_048_576,
+    'gemini/gemini-3.8-flash': 1_048_576,
+    'deepseek-flash': 1_000_000,
+    'deepseek/deepseek-flash': 1_000_000,
+    'deepseek-v4-flash': 1_000_000,
+    'deepseek/deepseek-v4-flash': 1_000_000,
+    'deepseek-v4-flash-vision-exp': 1_000_000,
+    'deepseek/deepseek-v4-flash-vision-exp': 1_000_000,
+    'deepseek-v4-pro': 1_000_000,
+    'deepseek/deepseek-v4-pro': 1_000_000,
+    'glm-5.3': 1_000_000,
+    'zai/glm-5.3': 1_000_000,
+    'glm-5.3-flash': 1_000_000,
+    'zai/glm-5.3-flash': 1_000_000,
+    'glm-5.3-flashx': 1_000_000,
+    'zai/glm-5.3-flashx': 1_000_000,
     // Claude — native 1M context (Fable 5+, Opus 4.6+, Sonnet 4.6+)
     'claude-fable-5-1': 1_000_000,
     'claude-fable-5.1': 1_000_000,

package/dist/modelInfo.js

@@ -60,6 +60,192 @@ Object.defineProperty(exports, "MODEL_PROVIDER_IDS", { enumerable: true, get: fu
  * prefix matching cannot bridge the two, so both are needed.
  */
 const PRICING_TABLE = {
+    // Current coding models verified 2026-10-30. Standard short-context rates;
+    // DeepSeek uses peak rates. Gemini promotions end 2026-11-30 (Argon) and
+    // 2026-12-31 (Flash). Haiku 5.5 costs more above 100K prompt tokens.
+    // Sources and estimation limits: docs/configuration/model-resolution.md.
+    // Explicit direct-provider keys support offline OpenCode model IDs without
+    // stripping arbitrary deployment prefixes or changing alias resolution.
+    'gpt-6.1-sol': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'openai/gpt-6.1-sol': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'gpt-6.1-terra': {
+        inputCostPerMillion: 1,
+        outputCostPerMillion: 5,
+        cacheWriteCostPerMillion: 1.25,
+        cacheReadCostPerMillion: 0.05,
+    },
+    'openai/gpt-6.1-terra': {
+        inputCostPerMillion: 1,
+        outputCostPerMillion: 5,
+        cacheWriteCostPerMillion: 1.25,
+        cacheReadCostPerMillion: 0.05,
+    },
+    'claude-sonnet-5-5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'anthropic/claude-sonnet-5-5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'claude-sonnet-5.5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'anthropic/claude-sonnet-5.5': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 2.5,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'claude-haiku-5-5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'anthropic/claude-haiku-5-5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'claude-haiku-5.5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'anthropic/claude-haiku-5.5': {
+        inputCostPerMillion: 0.1,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0.125,
+        cacheReadCostPerMillion: 0.01,
+    },
+    'gemini-4-argon': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'gemini/gemini-4-argon': {
+        inputCostPerMillion: 2,
+        outputCostPerMillion: 10,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.1,
+    },
+    'gemini-3.8-flash': {
+        inputCostPerMillion: 0.75,
+        outputCostPerMillion: 3.75,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
+    'gemini/gemini-3.8-flash': {
+        inputCostPerMillion: 0.75,
+        outputCostPerMillion: 3.75,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
+    'deepseek-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek/deepseek-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek-v4-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek/deepseek-v4-flash': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek-v4-flash-vision-exp': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek/deepseek-v4-flash-vision-exp': {
+        inputCostPerMillion: 0.3,
+        outputCostPerMillion: 1.2,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.006,
+    },
+    'deepseek-v4-pro': {
+        inputCostPerMillion: 1.32,
+        outputCostPerMillion: 3.96,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.044,
+    },
+    'deepseek/deepseek-v4-pro': {
+        inputCostPerMillion: 1.32,
+        outputCostPerMillion: 3.96,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.044,
+    },
+    'glm-5.3': {
+        inputCostPerMillion: 1.4,
+        outputCostPerMillion: 4.4,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.26,
+    },
+    'zai/glm-5.3': {
+        inputCostPerMillion: 1.4,
+        outputCostPerMillion: 4.4,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.26,
+    },
+    'glm-5.3-flash': {
+        inputCostPerMillion: 0.15,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.03,
+    },
+    'zai/glm-5.3-flash': {
+        inputCostPerMillion: 0.15,
+        outputCostPerMillion: 0.5,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.03,
+    },
+    'glm-5.3-flashx': {
+        inputCostPerMillion: 0.37,
+        outputCostPerMillion: 1.25,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
+    'zai/glm-5.3-flashx': {
+        inputCostPerMillion: 0.37,
+        outputCostPerMillion: 1.25,
+        cacheWriteCostPerMillion: 0,
+        cacheReadCostPerMillion: 0.075,
+    },
     // ── Anthropic: Claude ──
     // Fable 5.1 cache reads cost 0.025x input; Fable 5 retains its 0.1x rate.
     'claude-fable-5-1': {

package/dist/testing/credentialGuard.js

@@ -106,6 +106,7 @@ function installCredentialGuard(options = {}) {
     const realFs = builtin('node:fs');
     const fs = realFs;
     const { syncBuiltinESMExports } = builtin('node:module');
+    const { promisify } = builtin('node:util');
     const blockedBinaries = new Set((options.blockedBinaries ?? DEFAULT_BLOCKED_BINARIES).map((name) => name.toLowerCase()));
     // os.userInfo() reads the passwd entry, so it still names the real home
     // after HOME is redirected below.
@@ -181,13 +182,37 @@ function installCredentialGuard(options = {}) {
         const original = childProcess[name];
         if (typeof original !== 'function')
             continue;
-        childProcess[name] = function guarded(...args) {
+        const check = (args) => {
             const binary = binaryName(args[0]);
             if (blockedBinaries.has(binary)) {
                 record(`child_process.${name}('${binary}') reached the real binary; mock child_process or inject a runner`);
             }
+        };
+        const guarded = function guarded(...args) {
+            check(args);
             return original.apply(this, args);
         };
+        // execFile and exec carry Node's promisify.custom, which resolves to
+        // { stdout, stderr }; without it promisify() falls back to the first
+        // callback value. Guard it too and delegate, so .child, the error's
+        // stdout/stderr, encoding, and maxBuffer stay Node's own.
+        const custom = original[promisify.custom];
+        if (typeof custom === 'function') {
+            Object.defineProperty(guarded, promisify.custom, {
+                configurable: true,
+                writable: true,
+                value: function guardedPromisified(...args) {
+                    try {
+                        check(args);
+                    }
+                    catch (error) {
+                        return Promise.reject(error);
+                    }
+                    return custom.apply(this, args);
+                },
+            });
+        }
+        childProcess[name] = guarded;
     }
     for (const name of FS_WRITE_FUNCTIONS) {
         const original = fs[name];

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sidekick-shared",
-  "version": "0.28.0",
+  "version": "0.28.2",
   "description": "Shared data access layer for Sidekick — readers, types, providers, credentials, quota",
   "keywords": [
     "claude-code",