zelari-code 1.36.0 → 1.38.0

package/dist/cli/main.bundled.js

@@ -794,16 +794,19 @@ __export(chatgptOAuth_exports, {
   CHATGPT_DEVICE_CODE_URL: () => CHATGPT_DEVICE_CODE_URL,
   CHATGPT_DEVICE_REDIRECT_URI: () => CHATGPT_DEVICE_REDIRECT_URI,
   CHATGPT_DEVICE_TOKEN_URL: () => CHATGPT_DEVICE_TOKEN_URL,
+  CHATGPT_DEVICE_VERIFY_URL: () => CHATGPT_DEVICE_VERIFY_URL,
   CHATGPT_SCOPE: () => CHATGPT_SCOPE,
   CHATGPT_TOKEN_URL: () => CHATGPT_TOKEN_URL,
   ChatgptOAuthError: () => ChatgptOAuthError,
   DEFAULT_CHATGPT_CLIENT_ID: () => DEFAULT_CHATGPT_CLIENT_ID,
   decodeJwtClaims: () => decodeJwtClaims,
   extractChatgptAccountId: () => extractChatgptAccountId,
+  pollChatgptDeviceAuth: () => pollChatgptDeviceAuth,
   refreshChatgptToken: () => refreshChatgptToken,
   runChatgptBrowserFlow: () => runChatgptBrowserFlow,
   runChatgptDeviceFlow: () => runChatgptDeviceFlow,
-  runChatgptOAuthFlow: () => runChatgptOAuthFlow
+  runChatgptOAuthFlow: () => runChatgptOAuthFlow,
+  startChatgptDeviceAuth: () => startChatgptDeviceAuth
 });
 function decodeJwtClaims(token) {
   const parts = token.split(".");
@@ -845,6 +848,29 @@ function parseTokenPayload(obj, fallbackRefresh) {
   }
   return result;
 }
+function errorSnippet(body) {
+  const err = body.error;
+  if (typeof err === "string" && err.trim()) return err.trim().slice(0, 160);
+  if (err && typeof err === "object") {
+    const msg2 = err.message;
+    if (typeof msg2 === "string" && msg2.trim()) return msg2.trim().slice(0, 160);
+  }
+  const msg = body.message;
+  if (typeof msg === "string" && msg.trim()) return msg.trim().slice(0, 160);
+  return "";
+}
+function formatHttpError(prefix, status, body) {
+  const detail = errorSnippet(body);
+  return detail ? `${prefix} HTTP ${status}: ${detail}` : `${prefix} HTTP ${status}`;
+}
+async function readJsonBody(response) {
+  try {
+    const parsed = await response.json();
+    if (parsed && typeof parsed === "object") return parsed;
+  } catch {
+  }
+  return {};
+}
 async function postForm(url2, data, fetchImpl) {
   let response;
   try {
@@ -862,13 +888,34 @@ async function postForm(url2, data, fetchImpl) {
       "network_error"
     );
   }
-  let body = {};
+  return { status: response.status, body: await readJsonBody(response) };
+}
+async function postJson(url2, data, fetchImpl) {
+  let response;
   try {
-    const parsed = await response.json();
-    if (parsed && typeof parsed === "object") body = parsed;
-  } catch {
+    response = await fetchImpl(url2, {
+      method: "POST",
+      headers: {
+        "Content-Type": "application/json",
+        Accept: "application/json"
+      },
+      body: JSON.stringify(data)
+    });
+  } catch (err) {
+    throw new ChatgptOAuthError(
+      `ChatGPT OAuth network error: ${err instanceof Error ? err.message : String(err)}`,
+      "network_error"
+    );
   }
-  return { status: response.status, body };
+  return { status: response.status, body: await readJsonBody(response) };
+}
+function parsePollInterval(raw, fallback = 5) {
+  if (typeof raw === "number" && Number.isFinite(raw) && raw > 0) return raw;
+  if (typeof raw === "string") {
+    const n = Number.parseInt(raw, 10);
+    if (Number.isFinite(n) && n > 0) return n;
+  }
+  return fallback;
 }
 async function refreshChatgptToken(options) {
   if (!options.refreshToken.trim()) {
@@ -887,77 +934,82 @@ async function refreshChatgptToken(options) {
   );
   if (status >= 400) {
     const code = status === 400 || status === 401 ? "invalid_grant" : `http_${status}`;
-    throw new ChatgptOAuthError(
-      `ChatGPT token refresh HTTP ${status}: ${String(body.error ?? "").slice(0, 160)}`,
-      code
-    );
+    throw new ChatgptOAuthError(formatHttpError("ChatGPT token refresh", status, body), code);
   }
   return parseTokenPayload(body, options.refreshToken);
 }
-async function runChatgptDeviceFlow(options) {
+async function startChatgptDeviceAuth(options = {}) {
   const clientId2 = options.clientId || process.env.CHATGPT_OAUTH_CLIENT_ID || DEFAULT_CHATGPT_CLIENT_ID;
   const fetchImpl = options.fetchImpl ?? fetch;
-  const sleep = options.sleepImpl ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
-  const { verifier, challenge } = generatePkcePair();
-  const start = await postForm(
-    CHATGPT_DEVICE_CODE_URL,
-    {
-      client_id: clientId2,
-      scope: CHATGPT_SCOPE,
-      code_challenge: challenge,
-      code_challenge_method: "S256"
-    },
-    fetchImpl
-  );
+  const start = await postJson(CHATGPT_DEVICE_CODE_URL, { client_id: clientId2 }, fetchImpl);
   if (start.status >= 400) {
     throw new ChatgptOAuthError(
-      `ChatGPT device-code HTTP ${start.status}`,
+      formatHttpError("ChatGPT device-code", start.status, start.body),
       `device_http_${start.status}`
     );
   }
-  const deviceCode = start.body.device_code;
-  const userCode = start.body.user_code;
-  const verificationUri = typeof start.body.verification_uri === "string" && start.body.verification_uri || typeof start.body.verification_uri_complete === "string" && start.body.verification_uri_complete;
-  if (typeof deviceCode !== "string" || typeof userCode !== "string" || typeof verificationUri !== "string") {
+  const deviceAuthId = typeof start.body.device_auth_id === "string" && start.body.device_auth_id || typeof start.body.device_code === "string" && start.body.device_code || "";
+  const userCode = typeof start.body.user_code === "string" && start.body.user_code || typeof start.body.usercode === "string" && start.body.usercode || "";
+  const verificationUri = typeof start.body.verification_uri === "string" && start.body.verification_uri || typeof start.body.verification_url === "string" && start.body.verification_url || `${CHATGPT_DEVICE_VERIFY_URL}?user_code=${encodeURIComponent(userCode)}`;
+  if (!deviceAuthId || !userCode) {
     throw new ChatgptOAuthError("Device-code response missing fields", "no_device_code");
   }
-  const info = {
+  return {
+    deviceAuthId,
     userCode,
     verificationUri,
+    interval: parsePollInterval(start.body.interval, 5),
     ...typeof start.body.verification_uri_complete === "string" ? { verificationUriComplete: start.body.verification_uri_complete } : {}
   };
-  if (options.onUserCode) await options.onUserCode(info);
-  try {
-    await (options.openBrowserImpl ?? openBrowser)(
-      info.verificationUriComplete ?? info.verificationUri
-    );
-  } catch {
-  }
+}
+async function pollChatgptDeviceAuth(options) {
+  const clientId2 = options.clientId || process.env.CHATGPT_OAUTH_CLIENT_ID || DEFAULT_CHATGPT_CLIENT_ID;
+  const fetchImpl = options.fetchImpl ?? fetch;
+  const sleep = options.sleepImpl ?? ((ms) => new Promise((r) => setTimeout(r, ms)));
   const timeoutMs = options.timeoutMs ?? 3e5;
   const deadline = Date.now() + timeoutMs;
-  let interval = 5;
+  let interval = options.interval ?? 5;
   let authorizationCode;
+  let codeVerifier;
   while (Date.now() < deadline) {
-    const poll = await postForm(
+    const poll = await postJson(
       CHATGPT_DEVICE_TOKEN_URL,
-      { client_id: clientId2, device_code: deviceCode },
+      { device_auth_id: options.deviceAuthId, user_code: options.userCode },
       fetchImpl
     );
     const authCode = poll.body.authorization_code;
     if (typeof authCode === "string" && authCode.length > 0) {
       authorizationCode = authCode;
+      if (typeof poll.body.code_verifier === "string" && poll.body.code_verifier) {
+        codeVerifier = poll.body.code_verifier;
+      }
       break;
     }
+    if (poll.status === 403 || poll.status === 404) {
+      await sleep(interval * 1e3);
+      continue;
+    }
     const err = typeof poll.body.error === "string" ? poll.body.error : "";
     if (err === "slow_down") interval += 5;
     else if (err && err !== "authorization_pending") {
       throw new ChatgptOAuthError(`Device authorization failed: ${err}`, err);
+    } else if (poll.status >= 400) {
+      throw new ChatgptOAuthError(
+        formatHttpError("ChatGPT device poll", poll.status, poll.body),
+        `poll_http_${poll.status}`
+      );
     }
     await sleep(interval * 1e3);
   }
   if (!authorizationCode) {
     throw new ChatgptOAuthError("Timed out waiting for ChatGPT device authorization", "timeout");
   }
+  if (!codeVerifier) {
+    throw new ChatgptOAuthError(
+      "Device token response missing code_verifier (server-issued PKCE)",
+      "no_code_verifier"
+    );
+  }
   const token = await postForm(
     CHATGPT_TOKEN_URL,
     {
@@ -965,13 +1017,13 @@ async function runChatgptDeviceFlow(options) {
       code: authorizationCode,
       redirect_uri: CHATGPT_DEVICE_REDIRECT_URI,
       client_id: clientId2,
-      code_verifier: verifier
+      code_verifier: codeVerifier
     },
     fetchImpl
   );
   if (token.status >= 400) {
     throw new ChatgptOAuthError(
-      `ChatGPT token exchange HTTP ${token.status}`,
+      formatHttpError("ChatGPT token exchange", token.status, token.body),
       `token_http_${token.status}`
     );
   }
@@ -1024,12 +1076,47 @@ async function runChatgptBrowserFlow(options) {
   );
   if (token.status >= 400) {
     throw new ChatgptOAuthError(
-      `ChatGPT token exchange HTTP ${token.status}`,
+      formatHttpError("ChatGPT token exchange", token.status, token.body),
       `token_http_${token.status}`
     );
   }
   return parseTokenPayload(token.body);
 }
+async function runChatgptDeviceFlow(options = {}) {
+  const session = await startChatgptDeviceAuth({
+    clientId: options.clientId,
+    fetchImpl: options.fetchImpl
+  });
+  const info = {
+    userCode: session.userCode,
+    verificationUri: session.verificationUri,
+    ...session.verificationUriComplete ? { verificationUriComplete: session.verificationUriComplete } : {}
+  };
+  if (options.onUserCode) {
+    await options.onUserCode(info);
+  } else {
+    process.stderr.write(
+      `[chatgpt oauth] Open ${info.verificationUri} and enter:
+  ${info.userCode}
+`
+    );
+  }
+  try {
+    await (options.openBrowserImpl ?? openBrowser)(
+      info.verificationUriComplete ?? info.verificationUri
+    );
+  } catch {
+  }
+  return pollChatgptDeviceAuth({
+    deviceAuthId: session.deviceAuthId,
+    userCode: session.userCode,
+    clientId: options.clientId,
+    interval: session.interval,
+    fetchImpl: options.fetchImpl,
+    sleepImpl: options.sleepImpl,
+    timeoutMs: options.timeoutMs
+  });
+}
 async function runChatgptOAuthFlow(options = {}) {
   const flow = (process.env.CHATGPT_OAUTH_FLOW ?? "device").toLowerCase();
   if (flow === "browser") {
@@ -1037,7 +1124,7 @@ async function runChatgptOAuthFlow(options = {}) {
   }
   return runChatgptDeviceFlow(options);
 }
-var DEFAULT_CHATGPT_CLIENT_ID, CHATGPT_AUTHORIZE_URL, CHATGPT_TOKEN_URL, CHATGPT_DEVICE_CODE_URL, CHATGPT_DEVICE_TOKEN_URL, CHATGPT_DEVICE_REDIRECT_URI, CHATGPT_SCOPE, CHATGPT_AUTH_CLAIMS, ChatgptOAuthError;
+var DEFAULT_CHATGPT_CLIENT_ID, CHATGPT_AUTHORIZE_URL, CHATGPT_TOKEN_URL, CHATGPT_DEVICE_CODE_URL, CHATGPT_DEVICE_TOKEN_URL, CHATGPT_DEVICE_REDIRECT_URI, CHATGPT_DEVICE_VERIFY_URL, CHATGPT_SCOPE, CHATGPT_AUTH_CLAIMS, ChatgptOAuthError;
 var init_chatgptOAuth = __esm({
   "src/cli/chatgptOAuth.ts"() {
     "use strict";
@@ -1049,6 +1136,7 @@ var init_chatgptOAuth = __esm({
     CHATGPT_DEVICE_CODE_URL = "https://auth.openai.com/api/accounts/deviceauth/usercode";
     CHATGPT_DEVICE_TOKEN_URL = "https://auth.openai.com/api/accounts/deviceauth/token";
     CHATGPT_DEVICE_REDIRECT_URI = "https://auth.openai.com/deviceauth/callback";
+    CHATGPT_DEVICE_VERIFY_URL = "https://auth.openai.com/codex/device";
     CHATGPT_SCOPE = "openid profile email offline_access";
     CHATGPT_AUTH_CLAIMS = "https://api.openai.com/auth";
     ChatgptOAuthError = class extends Error {
@@ -1152,7 +1240,7 @@ async function startAnthropicOAuth(options = {}) {
   }
   return { authorizeUrl, state: state3 };
 }
-async function postJson(url2, payload, fetchImpl) {
+async function postJson2(url2, payload, fetchImpl) {
   let response;
   try {
     response = await fetchImpl(url2, {
@@ -1212,7 +1300,7 @@ async function completeAnthropicOAuth(options) {
     redirect_uri: ANTHROPIC_REDIRECT_URI,
     state: parsed.state ?? pending.state
   };
-  const { status, body } = await postJson(ANTHROPIC_TOKEN_URL, payload, fetchImpl);
+  const { status, body } = await postJson2(ANTHROPIC_TOKEN_URL, payload, fetchImpl);
   if (status >= 400) {
     const code = status === 400 || status === 401 ? "invalid_grant" : `http_${status}`;
     throw new AnthropicOAuthError(
@@ -1227,7 +1315,7 @@ async function refreshAnthropicToken(options) {
     throw new AnthropicOAuthError("Missing refreshToken", "no_refresh_token");
   }
   const fetchImpl = options.fetchImpl ?? fetch;
-  const { status, body } = await postJson(
+  const { status, body } = await postJson2(
     ANTHROPIC_TOKEN_URL,
     {
       grant_type: "refresh_token",
@@ -1532,6 +1620,112 @@ var init_keyStore = __esm({
   }
 });
 
+// src/cli/thinking.ts
+function thinkingCapabilityFor(id) {
+  return PROVIDER_THINKING_CAPABILITY[id] ?? {};
+}
+function stringifyThinkingSpec(spec) {
+  if (spec === "auto") return "auto";
+  if (spec.kind === "off") return "off";
+  if (spec.kind === "effort") return spec.effort;
+  return `budget:${spec.budgetTokens}`;
+}
+function parseThinkingSpec(raw) {
+  const s = (raw ?? "").trim().toLowerCase();
+  if (!s || s === "auto") return "auto";
+  if (s === "off") return { kind: "off" };
+  if (s === "low" || s === "medium" || s === "high") return { kind: "effort", effort: s };
+  const m = /^budget:(\d+)$/.exec(s);
+  if (m) {
+    const n = Number.parseInt(m[1], 10);
+    if (Number.isFinite(n) && n > 0) return { kind: "budget", budgetTokens: n };
+  }
+  return "auto";
+}
+function isValidThinkingInput(raw) {
+  const s = raw.trim().toLowerCase();
+  if (s === "auto" || s === "off" || s === "low" || s === "medium" || s === "high") return true;
+  return /^budget:\d+$/.test(s) && Number.parseInt(s.slice(7), 10) > 0;
+}
+function degrade(note) {
+  return { patch: {}, degraded: true, note };
+}
+function translateOpenAiCompatibleThinking(providerId, spec) {
+  if (spec === "auto") return { patch: {}, degraded: false };
+  const cap3 = thinkingCapabilityFor(providerId);
+  switch (spec.kind) {
+    case "off":
+      if (providerId === "deepseek" || providerId === "glm") {
+        return { patch: { thinking: { type: "disabled" } }, degraded: false };
+      }
+      if (cap3.effort) return { patch: { reasoning_effort: "low" }, degraded: false };
+      return degrade(`thinking 'off' is not supported for provider "${providerId}"`);
+    case "effort":
+      if (!cap3.effort) {
+        return degrade(`thinking 'effort' is not supported for provider "${providerId}"`);
+      }
+      if (providerId === "deepseek") {
+        return {
+          patch: {
+            thinking: { type: "enabled" },
+            reasoning_effort: spec.effort === "high" ? "max" : "high"
+          },
+          degraded: false
+        };
+      }
+      return { patch: { reasoning_effort: spec.effort }, degraded: false };
+    case "budget":
+      if (!cap3.budget) {
+        return degrade(`thinking 'budget' is not supported for provider "${providerId}"`);
+      }
+      return {
+        patch: { thinking: { type: "enabled", budget_tokens: spec.budgetTokens } },
+        degraded: false
+      };
+  }
+}
+function translateResponsesThinking(spec) {
+  if (spec === "auto") return { patch: {}, degraded: false };
+  switch (spec.kind) {
+    case "off":
+      return { patch: { reasoning: { effort: "minimal" } }, degraded: false };
+    case "effort":
+      return { patch: { reasoning: { effort: spec.effort } }, degraded: false };
+    case "budget":
+      return degrade('thinking "budget" is not supported for chatgpt \u2014 use low/medium/high');
+  }
+}
+function translateAnthropicThinking(spec) {
+  if (spec === "auto") return { patch: {}, degraded: false };
+  switch (spec.kind) {
+    case "off":
+      return { patch: { thinking: { type: "disabled" } }, degraded: false };
+    case "budget":
+      return {
+        patch: { thinking: { type: "enabled", budget_tokens: spec.budgetTokens } },
+        degraded: false
+      };
+    case "effort":
+      return degrade('thinking "effort" is not supported for anthropic \u2014 use budget:N');
+  }
+}
+var PROVIDER_THINKING_CAPABILITY;
+var init_thinking = __esm({
+  "src/cli/thinking.ts"() {
+    "use strict";
+    PROVIDER_THINKING_CAPABILITY = {
+      "openai-compatible": { effort: true },
+      "grok": { effort: true },
+      "chatgpt": { effort: true },
+      "anthropic": { budget: true },
+      "glm": { budget: true },
+      "deepseek": { effort: true },
+      "minimax": { effort: true },
+      "custom": { effort: true }
+    };
+  }
+});
+
 // src/cli/providerConfig.ts
 var providerConfig_exports = {};
 __export(providerConfig_exports, {
@@ -1542,10 +1736,12 @@ __export(providerConfig_exports, {
   getModelForProvider: () => getModelForProvider,
   getProviderConfig: () => getProviderConfig,
   getProviderConfigPath: () => getProviderConfigPath,
+  getThinkingForProvider: () => getThinkingForProvider,
   loadProviderConfig: () => loadProviderConfig,
   setActiveProviderId: () => setActiveProviderId,
   setCustomEndpoint: () => setCustomEndpoint,
-  setModelForProvider: () => setModelForProvider
+  setModelForProvider: () => setModelForProvider,
+  setThinkingForProvider: () => setThinkingForProvider
 });
 import { promises as fs2, existsSync as existsSync3, readFileSync as readFileSync3, writeFileSync as writeFileSync3, mkdirSync as mkdirSync3 } from "node:fs";
 import path4 from "node:path";
@@ -1566,6 +1762,7 @@ function getProviderConfig() {
         stored = {
           activeProviderId: parsed.activeProviderId,
           modelByProvider: { ...DEFAULTS.modelByProvider, ...parsed.modelByProvider },
+          thinkingByProvider: { ...DEFAULTS.thinkingByProvider, ...parsed.thinkingByProvider },
           customEndpoints: mergeCustomEndpoints(parsed.customEndpoints)
         };
       }
@@ -1575,6 +1772,7 @@ function getProviderConfig() {
   const base = stored ?? {
     ...DEFAULTS,
     modelByProvider: { ...DEFAULTS.modelByProvider },
+    thinkingByProvider: { ...DEFAULTS.thinkingByProvider },
     customEndpoints: { ...DEFAULTS.customEndpoints }
   };
   if (envActive && PROVIDERS.some((p3) => p3.id === envActive)) {
@@ -1662,6 +1860,19 @@ function getModelForProvider(id) {
   const config2 = getProviderConfig();
   return config2.modelByProvider[id] ?? DEFAULTS.modelByProvider[id] ?? "";
 }
+function getThinkingForProvider(id) {
+  const config2 = getProviderConfig();
+  return parseThinkingSpec(config2.thinkingByProvider[id]);
+}
+function setThinkingForProvider(id, spec) {
+  const found = PROVIDERS.find((p3) => p3.id === id);
+  if (!found) {
+    throw new Error(`Unknown provider id: "${id}". Available: ${PROVIDERS.map((p3) => p3.id).join(", ")}`);
+  }
+  const config2 = getProviderConfig();
+  config2.thinkingByProvider[id] = stringifyThinkingSpec(spec);
+  writeProviderConfig(config2);
+}
 function getActiveProvider() {
   const config2 = getProviderConfig();
   const spec = PROVIDERS.find((p3) => p3.id === config2.activeProviderId);
@@ -1681,6 +1892,7 @@ async function loadProviderConfig() {
       return {
         activeProviderId: parsed.activeProviderId,
         modelByProvider: { ...DEFAULTS.modelByProvider, ...parsed.modelByProvider },
+        thinkingByProvider: { ...DEFAULTS.thinkingByProvider, ...parsed.thinkingByProvider },
         customEndpoints: mergeCustomEndpoints(parsed.customEndpoints)
       };
     }
@@ -1689,6 +1901,7 @@ async function loadProviderConfig() {
   return {
     ...DEFAULTS,
     modelByProvider: { ...DEFAULTS.modelByProvider },
+    thinkingByProvider: { ...DEFAULTS.thinkingByProvider },
     customEndpoints: { ...DEFAULTS.customEndpoints }
   };
 }
@@ -1697,6 +1910,7 @@ var init_providerConfig = __esm({
   "src/cli/providerConfig.ts"() {
     "use strict";
     init_keyStore();
+    init_thinking();
     DEFAULTS = {
       activeProviderId: "openai-compatible",
       modelByProvider: {
@@ -1710,6 +1924,16 @@ var init_providerConfig = __esm({
         "anthropic": "claude-sonnet-4-5",
         "custom": ""
       },
+      thinkingByProvider: {
+        "openai-compatible": "auto",
+        "minimax": "auto",
+        "glm": "auto",
+        "grok": "auto",
+        "deepseek": "auto",
+        "chatgpt": "auto",
+        "anthropic": "auto",
+        "custom": "auto"
+      },
       customEndpoints: {}
     };
   }
@@ -28027,10 +28251,18 @@ function openaiCompatibleProvider(config2) {
       // the harness will fall back to the ~4-char/token approximation.
       stream_options: { include_usage: true }
     };
-    if (config2.providerId === "deepseek") {
+    const thinkingSpec = config2.thinking ?? "auto";
+    if (config2.providerId === "deepseek" && thinkingSpec === "auto") {
       const thinking = resolveDeepSeekThinking();
       if (thinking.thinking) body.thinking = { type: thinking.thinking };
       if (thinking.reasoningEffort) body.reasoning_effort = thinking.reasoningEffort;
+    } else if (thinkingSpec !== "auto") {
+      const t = translateOpenAiCompatibleThinking(config2.providerId, thinkingSpec);
+      if (t.degraded) {
+        console.warn(`[thinking] ${t.note ?? "unsupported"} \u2014 falling back to provider default.`);
+      } else {
+        Object.assign(body, t.patch);
+      }
     }
     if (params.tools && params.tools.length > 0) {
       const orderedTools = [...params.tools].sort(
@@ -28281,6 +28513,7 @@ async function providerFromEnv() {
     baseUrl: resolveBaseUrl(providerId),
     model: getModelForProvider(providerId),
     providerId,
+    thinking: getThinkingForProvider(providerId),
     ...extraFromStored(providerId)
   };
 }
@@ -28292,6 +28525,7 @@ async function providerConfigFor(providerId) {
     baseUrl: resolveBaseUrl(providerId),
     model: getModelForProvider(providerId),
     providerId,
+    thinking: getThinkingForProvider(providerId),
     ...extraFromStored(providerId)
   };
 }
@@ -28301,6 +28535,7 @@ var init_openai_compatible = __esm({
     "use strict";
     init_keyStore();
     init_providerConfig();
+    init_thinking();
     RETRYABLE_STATUSES = /* @__PURE__ */ new Set([429, 500, 502, 503, 504]);
     MAX_RETRIES = (() => {
       const raw = process.env.ZELARI_PROVIDER_MAX_RETRIES;
@@ -28554,6 +28789,12 @@ function anthropicMessagesProvider(config2) {
         input_schema: t.parameters
       }));
     }
+    const thinkingSpec = config2.thinking ?? "auto";
+    if (thinkingSpec !== "auto") {
+      const t = translateAnthropicThinking(thinkingSpec);
+      if (t.degraded) console.warn(`[thinking] ${t.note ?? "unsupported"} \u2014 falling back to provider default.`);
+      else Object.assign(body, t.patch);
+    }
     const base = config2.baseUrl.replace(/\/$/, "").replace(/\/v1$/, "");
     const url2 = `${base}/v1/messages`;
     let response;
@@ -28692,6 +28933,7 @@ var init_anthropic = __esm({
   "src/cli/provider/anthropic.ts"() {
     "use strict";
     init_chatStats();
+    init_thinking();
     ANTHROPIC_VERSION = "2023-06-01";
     ANTHROPIC_BETA = "oauth-2025-04-20";
     ANTHROPIC_BETA_EXTENDED_CACHE_TTL = "extended-cache-ttl-2025-04-11";
@@ -28759,6 +29001,12 @@ function chatgptResponsesProvider(config2) {
         parameters: t.parameters
       }));
     }
+    const thinkingSpec = config2.thinking ?? "auto";
+    if (thinkingSpec !== "auto") {
+      const t = translateResponsesThinking(thinkingSpec);
+      if (t.degraded) console.warn(`[thinking] ${t.note ?? "unsupported"} \u2014 falling back to provider default.`);
+      else Object.assign(body, t.patch);
+    }
     const base = config2.baseUrl.replace(/\/$/, "");
     const url2 = `${base}/responses`;
     let response;
@@ -28873,6 +29121,7 @@ function chatgptResponsesProvider(config2) {
 var init_chatgpt = __esm({
   "src/cli/provider/chatgpt.ts"() {
     "use strict";
+    init_thinking();
   }
 });
 
@@ -42545,6 +42794,8 @@ var init_oauthDesktop = __esm({
 var provider_exports = {};
 __export(provider_exports, {
   buildModelPickerItems: () => buildModelPickerItems,
+  handleEffortSet: () => handleEffortSet,
+  handleEffortShow: () => handleEffortShow,
   handleLoginKey: () => handleLoginKey,
   handleLoginOAuth: () => handleLoginOAuth,
   handleLoginOAuthGrok: () => handleLoginOAuthGrok,
@@ -42792,6 +43043,39 @@ function handleModelSet(ctx, model) {
     appendSystem(ctx.setMessages, `[model error] ${err instanceof Error ? err.message : String(err)}`);
   }
 }
+function handleEffortShow(ctx) {
+  const id = ctx.activeProviderSpec.id;
+  const cap3 = thinkingCapabilityFor(id);
+  const current = stringifyThinkingSpec(getThinkingForProvider(id));
+  const options = [
+    "auto",
+    "off",
+    ...cap3.effort ? ["low", "medium", "high"] : [],
+    ...cap3.budget ? ["budget:<tokens>"] : []
+  ];
+  appendSystem(
+    ctx.setMessages,
+    `[effort] ${ctx.activeProviderSpec.displayName}: ${current} \u2014 options: ${options.join(", ")}`
+  );
+}
+function handleEffortSet(ctx, raw) {
+  const id = ctx.activeProviderSpec.id;
+  if (!isValidThinkingInput(raw)) {
+    appendSystem(
+      ctx.setMessages,
+      `[effort] invalid spec "${raw}" \u2014 use auto | off | low | medium | high | budget:<tokens>`
+    );
+    return;
+  }
+  const spec = parseThinkingSpec(raw);
+  try {
+    setThinkingForProvider(id, spec);
+    ctx.setProviderConfig(getProviderConfig());
+    appendSystem(ctx.setMessages, `[effort] ${ctx.activeProviderSpec.displayName} \u2192 ${stringifyThinkingSpec(spec)}`);
+  } catch (err) {
+    appendSystem(ctx.setMessages, `[effort error] ${err instanceof Error ? err.message : String(err)}`);
+  }
+}
 function buildModelPickerItems(models, activeModel, defaultModel) {
   const items = models.map((m) => ({
     value: m.id,
@@ -42895,6 +43179,7 @@ var init_provider2 = __esm({
     init_refreshRegistry();
     init_keyValidator();
     init_providerConfig();
+    init_thinking();
     init_modelDiscovery();
     init_messageHelpers();
     init_duration();
@@ -43238,6 +43523,7 @@ function parseSetConfigFlags(argv) {
   let provider;
   let model;
   let endpoint;
+  let thinking;
   let endpointClear = false;
   for (let i = 0; i < argv.length; i++) {
     const arg = argv[i];
@@ -43250,14 +43536,17 @@ function parseSetConfigFlags(argv) {
     } else if (arg === "--endpoint") {
       endpoint = argv[i + 1];
       i++;
+    } else if (arg === "--thinking") {
+      thinking = argv[i + 1];
+      i++;
     } else if (arg === "--endpoint-clear") {
       endpointClear = true;
     }
   }
-  if (!provider && !model && !endpoint && !endpointClear) {
+  if (!provider && !model && !endpoint && !endpointClear && !thinking) {
     return {
       request: null,
-      error: "--set-config requires --provider, --model, --endpoint, and/or --endpoint-clear"
+      error: "--set-config requires --provider, --model, --endpoint, --thinking, and/or --endpoint-clear"
     };
   }
   if (provider !== void 0 && provider.trim().length === 0) {
@@ -43272,12 +43561,16 @@ function parseSetConfigFlags(argv) {
   if (endpoint && endpointClear) {
     return { request: null, error: "--endpoint and --endpoint-clear conflict" };
   }
+  if (thinking !== void 0 && !isValidThinkingInput(thinking)) {
+    return { request: null, error: `invalid --thinking value '${thinking}'` };
+  }
   return {
     request: {
       provider: provider?.trim(),
       model: model?.trim(),
       endpoint: endpoint?.trim(),
-      endpointClear: endpointClear || void 0
+      endpointClear: endpointClear || void 0,
+      thinking: thinking?.trim().toLowerCase()
     }
   };
 }
@@ -43352,7 +43645,9 @@ function buildDesktopConfigSnapshot() {
       authKind: !hasKey ? "none" : oauth ? "oauth" : "api_key",
       expiresAt: stored?.expiresAt ?? null,
       hasRefreshToken: Boolean(stored?.refreshToken),
-      oauthSupported: isOAuthProvider(p3.id)
+      oauthSupported: isOAuthProvider(p3.id),
+      thinking: config2.thinkingByProvider[p3.id] ?? "auto",
+      thinkingCapability: thinkingCapabilityFor(p3.id)
     };
   });
   return {
@@ -43394,6 +43689,9 @@ function applySetConfig(req) {
     if (req.model) {
       setModelForProvider(targetProvider, req.model);
     }
+    if (req.thinking) {
+      setThinkingForProvider(targetProvider, parseThinkingSpec(req.thinking));
+    }
     const after = getProviderConfig();
     const ep = getCustomEndpoint(after.activeProviderId);
     return {
@@ -43470,6 +43768,7 @@ var init_desktopConfig = __esm({
     init_providerConfig();
     init_modelDiscovery();
     init_updater();
+    init_thinking();
     DISCOVERABLE = [
       "grok",
       "glm",
@@ -50629,6 +50928,13 @@ ${formatSkillList(availableSkills)}`
       }
       return { handled: true, kind: "provider_set", provider: subcommand };
     }
+    case "effort": {
+      const spec = args[0];
+      if (!spec || spec === "show") {
+        return { handled: true, kind: "effort_show" };
+      }
+      return { handled: true, kind: "effort_set", effortSpec: spec };
+    }
     case "branch": {
       const name = args[0];
       if (!name) {
@@ -53122,6 +53428,16 @@ function useSlashDispatch(params) {
       setInput("");
       return;
     }
+    if (result.kind === "effort_set" && result.effortSpec) {
+      handleEffortSet(providerCtx, result.effortSpec);
+      setInput("");
+      return;
+    }
+    if (result.kind === "effort_show") {
+      handleEffortShow(providerCtx);
+      setInput("");
+      return;
+    }
     if (result.kind === "models_list") {
       handleModelsList(providerCtx);
       setInput("");
@@ -56186,7 +56502,7 @@ function pickRootComponent() {
   }
   if (argv.includes("--help") || argv.includes("-h")) {
     console.log(
-      "zelari-code \u2014 AI Council coding agent CLI.\n\nUsage: zelari-code [options]\n\nOptions:\n  --version, -v       Print version and exit\n  --help, -h          Print this help and exit\n  --doctor            Diagnose install health (shim, bundle, PATH, deps,\n                      node/git/bash in the agent shell)\n  --inspect [--json]  Unified project inspection (config, skills, MCP,\n                      hooks, plugins, AGENTS.md, trust status)\n  --trust [path]      Trust the cwd (or path) so project MCP + hooks load\n  --fix-path          Add the npm global prefix to the user PATH\n                      (Windows only; fixes 'command not found' after install)\n  --fix-budget        Set recommended ZELARI_MAX_TOOL_LOOP_HARD=180,\n                      ZELARI_MAX_TOOL_LOOP_ITERATIONS=60, ZELARI_CONTEXT_LIMIT=400000\n                      at User scope (prevents the agent stopping mid-task)\n  --permission-mcp <socket>  MCP stdio server for external agent permission prompts\n                      (spawned by claude --permission-prompt-tool)\n  --skip-checks       Skip the boot-time prerequisite check\n                      (alias for ZELARI_SKIP_PREFLIGHT=1)\n  --no-wizard         Skip the first-run wizard\n  --reset-config      Re-run the wizard (clears provider.json on commit)\n  --headless          Run a single task without mounting the TUI\n    --task <text>       Task prompt (required in headless mode)\n    --output json|plain Output format (default: json)\n    --mode kraken|council|zelari  Dispatch mode (default: kraken; agent=alias)\n    --council          Alias for --mode council\n    --phase plan|build  Work phase (default: build)\n    --provider <id>    Provider override (default: active)\n    --model <id>       Model override (default: provider default)\n  serve               Companion host for Android/remote clients (Tailscale)\n    --bind <ip>       Listen address (default: 127.0.0.1; use Tailscale IP)\n    --port <n>        Port (default: 7421)\n    --token <secret>  Bearer token (default: ~/.zelari-code/companion.token)\n    --project <path>  Allowlisted project root (repeatable)\n    --save-projects   Persist --project list to companion.json\n  --print-config      Print provider/model config as JSON (no secrets)\n  --plugins-status    JSON status of optional plugins (Playwright, eslint, \u2026)\n  --plugins-install <id>  Install plugin (playwright also fetches Chromium)\n    --cwd <path>       Workspace for -D installs (default: process.cwd())\n  --set-config        Persist provider/model/endpoint\n    --provider <id>    Set active provider\n    --model <id>       Set model for that provider\n    --endpoint <url>   Custom OpenAI-compatible base URL\n    --endpoint-clear   Remove custom endpoint override\n  --set-key           Store an API key (never printed back)\n    --provider <id>    Provider id (required)\n    --key <secret>     API key (required)\n  --login-oauth       Start subscription OAuth (grok, chatgpt, anthropic)\n    --provider <id>    grok | chatgpt | anthropic\n    --code <paste>    Anthropic magic-link code (CODE#STATE)\n    --no-browser      Do not open the system browser\n  --refresh-oauth     Force-refresh an OAuth access token\n    --provider <id>    grok | chatgpt | anthropic\n  --logout-oauth      Clear stored OAuth credentials\n    --provider <id>    grok | chatgpt | anthropic\n  --discover-models   Refresh model list for a provider\n    --provider <id>    Provider (default: active)\n  --print-mcp         Print MCP server config (user + project)\n    --cwd <path>      Project root for .zelari/mcp.json\n  --set-mcp           Add/update an MCP server entry\n    --name <id>       Server name (required)\n    --command <bin>   Executable (required)\n    --args <json>     JSON array of args (optional)\n    --scope user|project  Default: user\n    --enabled true|false  Default: true\n    --cwd <path>      Required when scope=project\n  --set-mcp-preset    Install a named MCP preset (e.g. cua)\n    --preset cua      Cua Driver desktop computer-use (MCP)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-mcp        Remove an MCP server entry\n    --name <id> --scope user|project [--cwd <path>]\n  --print-skills      Print skills (builtin + user + project)\n    --cwd <path>      Project root for .zelari/skills\n  --set-skill         Add/update a SKILL.md skill\n    --name <id>       Skill id (required)\n    --description <t> One-line description (required)\n    --body <text>     Markdown instructions (required)\n    --category <c>    plan|refactor|debug|review|test|docs|ops|git|db|maint\n    --tools <csv>     Comma-separated required tools (optional)\n    --cost <l>        low|medium|high (default: medium)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-skill      Remove a user/project SKILL.md\n    --name <id> --scope user|project [--cwd <path>]\n  --generate-skill-from-url  Fetch URL + draft skill via model (JSON)\n    --url <https://...>  Required\n    --provider <id>   Override active provider\n    --model <name>    Override model for the selected provider\n  --print-ssh-targets Print SSH deploy/monitor targets\n  --set-ssh-target    Upsert target (--json '{...}' or flags)\n  --remove-ssh-target --id <id>\n  --test-ssh-target   --id <id>  (BatchMode ssh true)\n  --print-ssh-pubkey  --path <private-or-.pub>  (display public key)\n\nEnvironment:\n  ZELARI_NO_WIZARD=1    Skip the first-run wizard\n  ZELARI_SKIP_PREFLIGHT=1  Skip the boot prerequisite check\n  ZELARI_NO_PLUGIN_PROMPT=1  Skip the boot plugin-install prompt\n  ANATHEMA_DEV=1        Disable background update check + preflight\n"
+      "zelari-code \u2014 AI Council coding agent CLI.\n\nUsage: zelari-code [options]\n\nOptions:\n  --version, -v       Print version and exit\n  --help, -h          Print this help and exit\n  --doctor            Diagnose install health (shim, bundle, PATH, deps,\n                      node/git/bash in the agent shell)\n  --inspect [--json]  Unified project inspection (config, skills, MCP,\n                      hooks, plugins, AGENTS.md, trust status)\n  --trust [path]      Trust the cwd (or path) so project MCP + hooks load\n  --fix-path          Add the npm global prefix to the user PATH\n                      (Windows only; fixes 'command not found' after install)\n  --fix-budget        Set recommended ZELARI_MAX_TOOL_LOOP_HARD=180,\n                      ZELARI_MAX_TOOL_LOOP_ITERATIONS=60, ZELARI_CONTEXT_LIMIT=400000\n                      at User scope (prevents the agent stopping mid-task)\n  --permission-mcp <socket>  MCP stdio server for external agent permission prompts\n                      (spawned by claude --permission-prompt-tool)\n  --skip-checks       Skip the boot-time prerequisite check\n                      (alias for ZELARI_SKIP_PREFLIGHT=1)\n  --no-wizard         Skip the first-run wizard\n  --reset-config      Re-run the wizard (clears provider.json on commit)\n  --headless          Run a single task without mounting the TUI\n    --task <text>       Task prompt (required in headless mode)\n    --output json|plain Output format (default: json)\n    --mode kraken|council|zelari  Dispatch mode (default: kraken; agent=alias)\n    --council          Alias for --mode council\n    --phase plan|build  Work phase (default: build)\n    --provider <id>    Provider override (default: active)\n    --model <id>       Model override (default: provider default)\n  serve               Companion host for Android/remote clients (Tailscale)\n    --bind <ip>       Listen address (default: 127.0.0.1; use Tailscale IP)\n    --port <n>        Port (default: 7421)\n    --token <secret>  Bearer token (default: ~/.zelari-code/companion.token)\n    --project <path>  Allowlisted project root (repeatable)\n    --save-projects   Persist --project list to companion.json\n  --print-config      Print provider/model config as JSON (no secrets)\n  --plugins-status    JSON status of optional plugins (Playwright, eslint, \u2026)\n  --plugins-install <id>  Install plugin (playwright also fetches Chromium)\n    --cwd <path>       Workspace for -D installs (default: process.cwd())\n  --set-config        Persist provider/model/endpoint\n    --provider <id>    Set active provider\n    --model <id>       Set model for that provider\n    --endpoint <url>   Custom OpenAI-compatible base URL\n    --endpoint-clear   Remove custom endpoint override\n    --thinking <spec>  Thinking effort (auto|off|low|medium|high|budget:N)\n  --set-key           Store an API key (never printed back)\n    --provider <id>    Provider id (required)\n    --key <secret>     API key (required)\n  --login-oauth       Start subscription OAuth (grok, chatgpt, anthropic)\n    --provider <id>    grok | chatgpt | anthropic\n    --code <paste>    Anthropic magic-link code (CODE#STATE)\n    --no-browser      Do not open the system browser\n  --refresh-oauth     Force-refresh an OAuth access token\n    --provider <id>    grok | chatgpt | anthropic\n  --logout-oauth      Clear stored OAuth credentials\n    --provider <id>    grok | chatgpt | anthropic\n  --discover-models   Refresh model list for a provider\n    --provider <id>    Provider (default: active)\n  --print-mcp         Print MCP server config (user + project)\n    --cwd <path>      Project root for .zelari/mcp.json\n  --set-mcp           Add/update an MCP server entry\n    --name <id>       Server name (required)\n    --command <bin>   Executable (required)\n    --args <json>     JSON array of args (optional)\n    --scope user|project  Default: user\n    --enabled true|false  Default: true\n    --cwd <path>      Required when scope=project\n  --set-mcp-preset    Install a named MCP preset (e.g. cua)\n    --preset cua      Cua Driver desktop computer-use (MCP)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-mcp        Remove an MCP server entry\n    --name <id> --scope user|project [--cwd <path>]\n  --print-skills      Print skills (builtin + user + project)\n    --cwd <path>      Project root for .zelari/skills\n  --set-skill         Add/update a SKILL.md skill\n    --name <id>       Skill id (required)\n    --description <t> One-line description (required)\n    --body <text>     Markdown instructions (required)\n    --category <c>    plan|refactor|debug|review|test|docs|ops|git|db|maint\n    --tools <csv>     Comma-separated required tools (optional)\n    --cost <l>        low|medium|high (default: medium)\n    --scope user|project  Default: user\n    --cwd <path>      Required when scope=project\n  --remove-skill      Remove a user/project SKILL.md\n    --name <id> --scope user|project [--cwd <path>]\n  --generate-skill-from-url  Fetch URL + draft skill via model (JSON)\n    --url <https://...>  Required\n    --provider <id>   Override active provider\n    --model <name>    Override model for the selected provider\n  --print-ssh-targets Print SSH deploy/monitor targets\n  --set-ssh-target    Upsert target (--json '{...}' or flags)\n  --remove-ssh-target --id <id>\n  --test-ssh-target   --id <id>  (BatchMode ssh true)\n  --print-ssh-pubkey  --path <private-or-.pub>  (display public key)\n\nEnvironment:\n  ZELARI_NO_WIZARD=1    Skip the first-run wizard\n  ZELARI_SKIP_PREFLIGHT=1  Skip the boot prerequisite check\n  ZELARI_NO_PLUGIN_PROMPT=1  Skip the boot plugin-install prompt\n  ANATHEMA_DEV=1        Disable background update check + preflight\n"
     );
     process.exit(0);
   }