feat(ai): provider factories, per-provider catalogs, createProvider (phase 3)

Auth helpers in src/auth/helpers.ts: envApiKeyAuth() (stored key wins,
then env vars in order, with secret-prompt login) and lazyOAuth()
(flow loads on first use through bundler-opaque dynamic imports in
utils/oauth/load.ts; the OAuthAuth flow exports land in phase 4).
There is no OAuth factory toggle: providers that support OAuth always
attach it, advertising costs nothing until login/refresh runs.

createProvider() in models.ts builds providers from parts: single API
implementation or a map dispatched on model.api (mixed-API providers
like opencode and github-copilot); unknown api yields a stream error.

generate-models.ts now emits one providers/<id>.models.ts catalog per
provider (35 files, biome-excluded like models.generated.ts) and
models.generated.ts becomes a generated aggregator, so importing one
provider factory pulls one catalog. Typed getModel globals unchanged.

One factory per built-in provider under src/providers/: envApiKeyAuth
for standard providers, OAuth for anthropic/openai-codex/github-copilot,
ambient ApiKeyAuth for amazon-bedrock (AWS env/profile/IAM) and
google-vertex (explicit key or ADC+project+location).

providers/all.ts: builtinProviders(), builtinModels(), getBuiltin*
re-exports. fauxProvider() factory returns a real Provider for tests;
legacy registerFauxProvider() unchanged.

packages/ai/src/providers/zai.models.ts

@@ -0,0 +1,97 @@
+// This file is auto-generated by scripts/generate-models.ts
+// Do not edit manually - run 'npm run generate-models' to update
+
+import type { Model } from "../types.ts";
+
+export const ZAI_MODELS = {
+	"glm-4.5-air": {
+		id: "glm-4.5-air",
+		name: "GLM-4.5-Air",
+		api: "openai-completions",
+		provider: "zai",
+		baseUrl: "https://api.z.ai/api/coding/paas/v4",
+		compat: {"supportsDeveloperRole":false,"thinkingFormat":"zai"},
+		reasoning: true,
+		input: ["text"],
+		cost: {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0,
+		},
+		contextWindow: 131072,
+		maxTokens: 98304,
+	} satisfies Model<"openai-completions">,
+	"glm-4.7": {
+		id: "glm-4.7",
+		name: "GLM-4.7",
+		api: "openai-completions",
+		provider: "zai",
+		baseUrl: "https://api.z.ai/api/coding/paas/v4",
+		compat: {"supportsDeveloperRole":false,"thinkingFormat":"zai","zaiToolStream":true},
+		reasoning: true,
+		input: ["text"],
+		cost: {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0,
+		},
+		contextWindow: 204800,
+		maxTokens: 131072,
+	} satisfies Model<"openai-completions">,
+	"glm-5-turbo": {
+		id: "glm-5-turbo",
+		name: "GLM-5-Turbo",
+		api: "openai-completions",
+		provider: "zai",
+		baseUrl: "https://api.z.ai/api/coding/paas/v4",
+		compat: {"supportsDeveloperRole":false,"thinkingFormat":"zai","zaiToolStream":true},
+		reasoning: true,
+		input: ["text"],
+		cost: {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0,
+		},
+		contextWindow: 200000,
+		maxTokens: 131072,
+	} satisfies Model<"openai-completions">,
+	"glm-5.1": {
+		id: "glm-5.1",
+		name: "GLM-5.1",
+		api: "openai-completions",
+		provider: "zai",
+		baseUrl: "https://api.z.ai/api/coding/paas/v4",
+		compat: {"supportsDeveloperRole":false,"thinkingFormat":"zai","zaiToolStream":true},
+		reasoning: true,
+		input: ["text"],
+		cost: {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0,
+		},
+		contextWindow: 200000,
+		maxTokens: 131072,
+	} satisfies Model<"openai-completions">,
+	"glm-5v-turbo": {
+		id: "glm-5v-turbo",
+		name: "GLM-5V-Turbo",
+		api: "openai-completions",
+		provider: "zai",
+		baseUrl: "https://api.z.ai/api/coding/paas/v4",
+		compat: {"supportsDeveloperRole":false,"thinkingFormat":"zai","zaiToolStream":true},
+		reasoning: true,
+		input: ["text", "image"],
+		cost: {
+			input: 0,
+			output: 0,
+			cacheRead: 0,
+			cacheWrite: 0,
+		},
+		contextWindow: 200000,
+		maxTokens: 131072,
+	} satisfies Model<"openai-completions">,
+} as const;