chore: Updates README.md

also removed dead keys in config examples

Author: TriDefender

Android-APP/README.md

@@ -52,9 +52,11 @@ cd Android-APP
 
 - `Android-APP/` — Gradle project; everything Android-specific lives here.
 - `Android-APP/app/src/main/java/com/zcode/proxy/` — Kotlin shell.
-- `Android-APP/app/src/main/assets/server_bundle/` — committed in the repo
-  (canonical); regenerate via `bun run build:android-bundle` + copy
-  `dist/android/server.cjs` into it (see BUILD in `Android-APP/AGENTS.md`).
+- `Android-APP/app/src/main/assets/server_bundle/` — tracked sidecar assets
+  (`config.example.yaml`, `webui.txt`, `zcode_system.json`); `server.cjs` is
+  gitignored build output — regenerate via `bun run build:android-bundle` +
+  copy `dist/android/server.cjs` into it before building (Gradle's
+  `checkServerBundle` preBuild task fails with a hint if it is missing).
 - `Android-APP/app/src/main/jniLibs/arm64-v8a/` — committed Node.js binary
   (`libnode.so`) + Termux dependency `.so` files, extracted once via
   `scripts/extract-termux-deps.sh`.

Android-APP/app/src/main/assets/server_bundle/config.example.yaml

@@ -9,7 +9,8 @@ auth:
 
   # Upstream credentials come from the OAuth login flow — run this first:
   #   bun run src/index.ts auth login <zai|bigmodel>
-  # Path to the stored credentials (default shown):
+  # Parsed but currently not honored — the credential store path is fixed at
+  # ~/.zcode-proxy/credentials.json:
   # oauthCredentialsPath: "~/.zcode-proxy/credentials.json"
 
 # Which upstream provider to use: "zai" or "bigmodel"
@@ -41,6 +42,7 @@ models:
   - glm-5.1
   - glm-5.2
   - glm-5.3
+  - glm-5.3-flash
 
 # Configurable identity headers injected on every upstream request to mimic the
 # ZCode desktop client (User-Agent, X-ZCode-App-Version, X-Title,
@@ -134,9 +136,9 @@ async:
 # campaigns are quota-limited first-come-first-served; claimed plans activate
 # at the campaign's `starts_at` and land as Start-Plan quota.
 #
-# IMPORTANT: requires `auth.mode: oauth` (claim uses the JWT from login), and
-# identity.appVersion must be >= the campaign's minimum client version
-# (default 3.10.0) or the server rejects with `ineligible`.
+# IMPORTANT: requires a logged-in credential (claim uses the JWT from
+# `auth login`), and identity.appVersion must be >= the campaign's minimum
+# client version (default 3.10.0) or the server rejects with `ineligible`.
 #
 # Env overrides: ZCODE_CLAIM_ENABLED, ZCODE_CLAIM_AUTO, ZCODE_CLAIM_ORIGIN,
 # ZCODE_CLAIM_POLL_INTERVAL_MS.

README.md

@@ -10,13 +10,8 @@ bun install
 
 # Copy and edit config
 cp config.example.yaml config.yaml
-<<<<<<< Updated upstream
-
 # Log in (OAuth, browser-based)
 bun run src/index.ts auth login zai        # or: bigmodel
-=======
-# Log in first via OAuth (see Authentication below)
->>>>>>> Stashed changes
 
 # Start the proxy
 bun run src/index.ts
@@ -245,7 +240,7 @@ file (best-effort; never affects handling). Requires a TTY with at least
 |-------|---------|---------|-------------|
 | `server.port` | `ZCODE_PROXY_PORT` | `8080` | Listen port |
 | `auth.proxyApiKey` | `ZCODE_PROXY_API_KEY` | — | Client auth key |
-| `auth.oauthCredentialsPath` | — | `~/.zcode-proxy/credentials.json` | Encrypted credential store from `auth login` |
+| `auth.oauthCredentialsPath` | — | — | Parsed but currently not honored — the credential store path is fixed at `~/.zcode-proxy/credentials.json` |
 | `provider` | `ZCODE_PROVIDER` | `zai` | Upstream provider |
 | `plan` | — | `coding-plan` | Plan tier: `coding-plan` (direct upstream) or `start-plan` (zcode.z.ai gateway + JWT + captcha) |
 | `identity.appVersion` | `ZCODE_APP_VERSION` | `3.10.0` | `User-Agent: ZCode/{version}` |
@@ -268,7 +263,7 @@ Client Request
 Proxy API Key Auth (shared secret)
       │
       ▼
-Route Detection + Plan-aware Routing (both plans post Anthropic upstream, v2.4+)
+Route Detection + Plan-aware Routing (both plans post Anthropic upstream, v4.5.0+)
   /v1/chat/completions (OpenAI client format)
     ├─ coding-plan → TRANSLATE OpenAI→Anthropic → provider's anthropic endpoint
     │                (remapped to zcode.z.ai ultra endpoints via server-controlled mapping)
@@ -344,10 +339,11 @@ encrypted credential store. Log in on the host with a fixed encryption seed
 ZCODE_PROXY_CREDENTIAL_SECRET="a-long-random-secret" \
   bun run src/index.ts auth login zai
 
-# 2. Point auth.oauthCredentialsPath in config.yaml at the mounted store, then run:
+# 2. Mount the store at the path the proxy reads. The image runs as user `bun`
+#    (home /home/bun) and the store path is fixed, not configurable:
 docker run --rm -p 8080:8080 \
   -v "$(pwd)/config.yaml:/data/config.yaml:ro" \
-  -v "$(HOME)/.zcode-proxy/credentials.json:/data/credentials.json:ro" \
+  -v "$(HOME)/.zcode-proxy/credentials.json:/home/bun/.zcode-proxy/credentials.json:ro" \
   -e ZCODE_PROXY_CREDENTIAL_SECRET="a-long-random-secret" \
   ghcr.io/tridefender/zcode-proxy:latest
 ```
@@ -373,7 +369,7 @@ services:
       - "8080:8080"
     volumes:
       - ./config.yaml:/data/config.yaml:ro
-      - ./credentials.json:/data/credentials.json:ro
+      - ./credentials.json:/home/bun/.zcode-proxy/credentials.json:ro
     environment:
       ZCODE_PROVIDER: zai
       ZCODE_PROXY_API_KEY: "your-proxy-secret"

config.example.yaml

@@ -9,7 +9,8 @@ auth:
 
   # Upstream credentials come from the OAuth login flow — run this first:
   #   bun run src/index.ts auth login <zai|bigmodel>
-  # Path to the stored credentials (default shown):
+  # Parsed but currently not honored — the credential store path is fixed at
+  # ~/.zcode-proxy/credentials.json:
   # oauthCredentialsPath: "~/.zcode-proxy/credentials.json"
 
 # Which upstream provider to use: "zai" or "bigmodel"
@@ -41,6 +42,7 @@ models:
   - glm-5.1
   - glm-5.2
   - glm-5.3
+  - glm-5.3-flash
 
 # Configurable identity headers injected on every upstream request to mimic the
 # ZCode desktop client (User-Agent, X-ZCode-App-Version, X-Title,
@@ -134,9 +136,9 @@ async:
 # campaigns are quota-limited first-come-first-served; claimed plans activate
 # at the campaign's `starts_at` and land as Start-Plan quota.
 #
-# IMPORTANT: requires `auth.mode: oauth` (claim uses the JWT from login), and
-# identity.appVersion must be >= the campaign's minimum client version
-# (default 3.10.0) or the server rejects with `ineligible`.
+# IMPORTANT: requires a logged-in credential (claim uses the JWT from
+# `auth login`), and identity.appVersion must be >= the campaign's minimum
+# client version (default 3.10.0) or the server rejects with `ineligible`.
 #
 # Env overrides: ZCODE_CLAIM_ENABLED, ZCODE_CLAIM_AUTO, ZCODE_CLAIM_ORIGIN,
 # ZCODE_CLAIM_POLL_INTERVAL_MS.

src/config/template.ts

@@ -18,7 +18,8 @@ auth:
 
   # Upstream credentials come from the OAuth login flow — run this first:
   #   bun run src/index.ts auth login <zai|bigmodel>
-  # Path to the stored credentials (default shown):
+  # Parsed but currently not honored — the credential store path is fixed at
+  # ~/.zcode-proxy/credentials.json:
   # oauthCredentialsPath: "~/.zcode-proxy/credentials.json"
 
 # Which upstream provider to use: "zai" or "bigmodel"
@@ -50,6 +51,7 @@ models:
   - glm-5.1
   - glm-5.2
   - glm-5.3
+  - glm-5.3-flash
 
 # Configurable identity headers injected on every upstream request to mimic the
 # ZCode desktop client (User-Agent, X-ZCode-App-Version, X-Title,