feat(providers): add local ZCode ACP backend (#10184)

* feat(providers): add local ZCode ACP backend

* test(snapshots): regenerate translate-path golden for zcode provider

The new local ZCode ACP backend (zcode://app-server/stdio) was added to the
provider catalog but the translate-path golden snapshot was not regenerated,
so the combined suite (provider-translate-path-golden.test.ts) failed on the
merged tip. Regenerate the snapshot to include the zcode translate-path entry.

Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>

* docs(env): document ZCODE_* vars for the local zcode provider

Registers the 11 ZCODE_* env vars read by the zcode executor (.env.example
+ docs/reference/ENVIRONMENT.md) so the env-doc-sync gate stays green.

Co-authored-by: Diego Souza <8016841+diegosouzapw@users.noreply.github.com>

* test(autoCombo): include zcode in the glm-family provider set

#10184's local zcode backend advertises the full GLM_SHARED_MODELS
line-up (registry/zcode, authType none) — same documented case as auggie
and devin-cli-agentic. Update auto/glm provider-set assertion to include
it.

Co-authored-by: Diego Souza <8016841+diegosouzapw@users.noreply.github.com>

---------

Co-authored-by: roomhacker <roomhacker@bezrabotnyi.com>
Co-authored-by: adevwithpurpose <adevwithpurpose@users.noreply.github.com>
Co-authored-by: diegosouzapw <8016841+diegosouzapw@users.noreply.github.com>

tests/unit/zcode-executor.test.ts

@@ -0,0 +1,84 @@
+import test from "node:test";
+import assert from "node:assert/strict";
+import { mkdtempSync, rmSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+
+const fixture = join(process.cwd(), "tests/fixtures/fake-zcode-app-server.mjs");
+const TEST_DATA_DIR = mkdtempSync(join(tmpdir(), "omniroute-zcode-"));
+process.env.DATA_DIR = TEST_DATA_DIR;
+
+test.after(() => rmSync(TEST_DATA_DIR, { recursive: true, force: true }));
+
+async function loadZcodeExecutor() {
+  return import("../../open-sse/executors/zcode.ts");
+}
+
+function requestBody() {
+  return {
+    messages: [
+      { role: "system", content: "You are a coding assistant." },
+      { role: "user", content: "Reply with a short status." },
+    ],
+  };
+}
+
+test("ZCode accepts GLM Coding Plan models and rejects unsafe/unknown ids", async () => {
+  const { resolveZcodeModel } = await loadZcodeExecutor();
+  assert.deepEqual(resolveZcodeModel("glm-5.2"), { ok: true, model: "glm-5.2" });
+  assert.equal(resolveZcodeModel("-unexpected").ok, false);
+  assert.equal(resolveZcodeModel("unknown-model").ok, false);
+});
+
+test("ZCode runs a local app-server turn and returns an OpenAI chat completion", async () => {
+  const { ZcodeExecutor } = await loadZcodeExecutor();
+  const executor = new ZcodeExecutor({
+    command: process.execPath,
+    args: [fixture],
+    cwd: process.cwd(),
+    requestTimeoutMs: 3000,
+    turnTimeoutMs: 3000,
+    pollIntervalMs: 1,
+  });
+
+  const result = await executor.execute({
+    model: "glm-5.2",
+    body: requestBody(),
+    stream: false,
+    credentials: {},
+  });
+  const response = "response" in result ? result.response : result;
+  assert.equal(response.status, 200);
+  assert.match(response.headers.get("content-type") || "", /application\/json/);
+  const body = await response.json();
+  assert.equal(body.object, "chat.completion");
+  assert.equal(body.model, "glm-5.2");
+  assert.equal(body.choices?.[0]?.message?.role, "assistant");
+  assert.equal(body.choices?.[0]?.message?.content, "fake zcode response");
+  assert.equal(body.choices?.[0]?.finish_reason, "stop");
+});
+
+test("ZCode buffers the completed turn into OpenAI SSE when stream=true", async () => {
+  const { ZcodeExecutor } = await loadZcodeExecutor();
+  const executor = new ZcodeExecutor({
+    command: process.execPath,
+    args: [fixture],
+    cwd: process.cwd(),
+    requestTimeoutMs: 3000,
+    turnTimeoutMs: 3000,
+    pollIntervalMs: 1,
+  });
+
+  const result = await executor.execute({
+    model: "glm-5.2-high",
+    body: requestBody(),
+    stream: true,
+    credentials: {},
+  });
+  const response = "response" in result ? result.response : result;
+  const text = await response.text();
+  assert.equal(response.status, 200);
+  assert.match(response.headers.get("content-type") || "", /text\/event-stream/);
+  assert.match(text, /fake zcode response/);
+  assert.match(text, /data: \[DONE\]/);
+});