@eddyskywalker/dsh-chatgpt-subscription 0.10.0 → 0.10.1

package/lib/types/host/minimax-code/account-pool.d.ts

@@ -0,0 +1,219 @@
+/**
+ * MiniMax Code 号池：the account pool for the MiniMax Code (编程订阅) line.
+ *
+ * This is the second line in this package that pools a credential it does not
+ * own (WorkBuddy was the first), and that one fact decides every shape below:
+ *
+ * 1. MiniMax Code's normal credential is the desktop application's own
+ *    \`~/.minimax/auth/<buildEnv>/<region>/mcode-public/auth.json\`. The plugin
+ *    reads it so a user already signed in to the app never signs in twice, which
+ *    is exactly the WorkBuddy precedent for the CodeBuddy client's \`*.info\`
+ *    files.
+ * 2. ADOPTED MEANS NEVER DESTROYED. That file belongs to an application the
+ *    user is running. The pool may read it, may adopt it into its own account
+ *    list, and may write a rotated token back through the store's atomic
+ *    replacement — but no path in this file may revoke it or delete it. A
+ *    deleted \`auth.json\` signs the user out of MiniMax Code itself, so such an
+ *    account is reported as \`removable: false\` and deletion is refused
+ *    ({@link MinimaxCodeAccountPool.deleteAccount}), mirroring WorkBuddy's
+ *    desktop accounts.
+ * 3. What the pool adds on top of the single-credential line is rotation: more
+ *    than one sign-in can serve requests, a 429 cools one account down instead
+ *    of taking the line offline, and the settings card can list, alias, promote
+ *    and switch between them.
+ *
+ * The credential format stays the store's: this file never invents a field of
+ * its own inside a token record, so a write back into the app's document keeps
+ * the exact shape the app expects.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { AccountPoolCore, type PoolAccountShape, type PoolData } from '../common/account-pool.ts';
+import type { CredentialStore } from '../token-store.ts';
+import { MinimaxCodeCredentialStore, type MinimaxCodeCredentialSource, type MinimaxCodeCredentials } from './token-store.ts';
+import type { MinimaxCodeRegion } from '../../shared/minimax-code-contracts.ts';
+import type { AccountRotationStrategy, PoolAccountSummaryDto } from '../../shared/account-pool-contracts.ts';
+/**
+ * One pooled MiniMax Code account.
+ *
+ * The credential travels whole (the pool persists it, and the store knows how to
+ * write it back to the file it came from); everything else here is a non-secret
+ * fact the settings card renders without a second round trip.
+ */
+export interface MinimaxCodePoolAccount extends PoolAccountShape<MinimaxCodeCredentials> {
+    /** Region the credential was issued in; decides every host this account uses. */
+    region: MinimaxCodeRegion;
+    /**
+     * Which store owns the credential.
+     *
+     * \`minimax-native\` is MiniMax Code's own \`auth.json\`: adopted and renewed,
+     * never deletable from here. \`file\` is the plugin's own store, written by a
+     * device-code sign-in started in this plugin.
+     */
+    source: MinimaxCodeCredentialSource;
+    /** Display facts, when the credential's token claims carry them. */
+    email?: string;
+    planName?: string;
+}
+/** The pool slice the settings card renders, mirroring {@link AccountPoolStatusDto}. */
+export interface MinimaxCodeAccountSummaryDto extends PoolAccountSummaryDto {
+    region?: MinimaxCodeRegion;
+    source?: MinimaxCodeCredentialSource;
+    /** Credential generation; diagnostics for two-sided refresh contention with the app. */
+    generation?: number;
+}
+/**
+ * Encrypted pool file this line owns.
+ *
+ * Separate from the credential file on purpose: the pool may hold several
+ * accounts, while \`~/.minimax/auth\` holds exactly one session per region and is
+ * the desktop app's to write.
+ */
+export declare function minimaxCodePoolPath(): string;
+/**
+ * Identity two credentials share when they are the same account.
+ *
+ * Neither token can be used for this: the access token is replaced on every
+ * refresh and the refresh token rotates, so keying on either would make one
+ * account look new after every rotation. A hash of the refresh token would have
+ * the same defect and no compensating benefit, so it is not done.
+ *
+ * Two different identities are available, one per provenance:
+ *
+ * - A native credential names the desktop app's own record slot through
+ *   \`recordKey\`. That key is a non-secret digest of the app's auth-home path, so
+ *   it is stable across every rotation, and the app keeps exactly one session per
+ *   slot: re-signing in there replaces the session, which for routing purposes is
+ *   the same account, so updating the row in place is the correct outcome.
+ * - A plugin-owned credential has no record slot (the app's key is a hash this
+ *   plugin cannot reproduce) and no account profile, so the sign-in that produced
+ *   it — its \`loginEpoch\`, which survives every rotation — is the identity. A
+ *   second device-code sign-in is genuinely a second session with its own refresh
+ *   token chain, so it is its own account.
+ *
+ * When neither is present there is nothing stable to key on: the function returns
+ * undefined, the core mints \`acc_<random>\`, and the row is added rather than
+ * silently merged with an unrelated credential.
+ */
+export declare function minimaxCodePoolIdentity(credentials: MinimaxCodeCredentials): string | undefined;
+/**
+ * Validate and normalize one whole pool document.
+ *
+ * The credential is re-parsed through the store's own validator, so a row can
+ * never hold a token shape the store would refuse to write back. \`source\`,
+ * \`recordKey\` and \`buildEnv\` have to be restored explicitly: the validator
+ * takes them from its fallback rather than from the payload, and a native account
+ * that lost them would be re-labelled as plugin-owned (so the card would offer a
+ * delete that must never happen, and a rotation would land in the plugin's file
+ * instead of the app's).
+ */
+export declare function parseMinimaxCodePoolData(value: unknown): PoolData<MinimaxCodePoolAccount>;
+export interface MinimaxCodeAccountPoolOptions {
+    /**
+     * Credential store the pool reads the desktop app's sign-in through and mirrors
+     * its primary account into.
+     */
+    store?: MinimaxCodeCredentialStore;
+    /** Test seam; production builds the platform backend from the pool path. */
+    backend?: CredentialStore<PoolData<MinimaxCodePoolAccount>>;
+    /** Accounts this pool accepts; defaults to the core's limit. */
+    maxAccounts?: number;
+}
+/**
+ * MiniMax Code's account pool.
+ *
+ * It owns rotation and the write-back, exactly like the sibling lines, with one
+ * asymmetry the hooks below enforce: an account whose credential lives in the
+ * desktop app's file is adopted, never owned.
+ */
+export declare class MinimaxCodeAccountPool extends AccountPoolCore<MinimaxCodeCredentials, MinimaxCodePoolAccount, MinimaxCodeAccountSummaryDto> {
+    private readonly store;
+    constructor(options?: MinimaxCodeAccountPoolOptions);
+    /**
+     * Pick the account for the next request.
+     *
+     * The returned credential carries its own region and record key, so a caller
+     * must use those rather than any process-wide default. This is the method the
+     * adapter uses; {@link getEffectiveAccount} beneath it already refreshes a
+     * credential that is about to expire and writes the rotation back.
+     */
+    getEffectiveCredential(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch): Promise<{
+        account: MinimaxCodePoolAccount;
+        credentials: MinimaxCodeCredentials;
+    }>;
+    /**
+     * The desktop app's own current copy of one native account's credential.
+     *
+     * The app rotates its token on its own schedule, so the copy the pool adopted
+     * can be older than what is on disk. Only the same record slot counts: a
+     * different record key or region is a different account, and substituting it
+     * would present one account's token as another's. A file whose token is already
+     * stale is not newer authority either — the refresh path has just written the
+     * pair back, and reading the pre-refresh file would undo it.
+     */
+    private liveNativeCredential;
+    /**
+     * Adopt the sign-in the desktop app currently holds into the pool.
+     *
+     * The pre-pool projection ({@link legacyAccount}) only surfaces when the pool is
+     * empty, so a user who already has a plugin-owned account needs an explicit way
+     * to bring the app's session in as well. Nothing is ever removed from the app;
+     * the account is added under its own record-slot identity, so adopting twice
+     * updates the same row.
+     */
+    adoptNativeAccount(alias?: string): Promise<MinimaxCodePoolAccount>;
+    /**
+     * Delete one account.
+     *
+     * An account whose credential is the desktop app's own \`auth.json\` is refused:
+     * this plugin does not own that file, and removing the account would either
+     * strand the app's session or — if the deletion were ever allowed to reach the
+     * file — sign the user out of MiniMax Code itself. Signing out there is the
+     * supported way to end it, and the card is told so by \`removable: false\`.
+     */
+    deleteAccount(accountId: string): Promise<void>;
+    /** The credential store this pool mirrors its primary account into. */
+    mirrorStore(): MinimaxCodeCredentialStore;
+}
+/** The pool slice of a status response; exactly the fields the card renders. */
+export interface MinimaxCodePoolStatus {
+    accounts: MinimaxCodeAccountSummaryDto[];
+    activeAccountId?: string;
+    rotationStrategy: AccountRotationStrategy;
+    /** Whether this process installed a pool at all. */
+    poolInstalled: boolean;
+}
+/**
+ * Read the pool slice of the status DTO.
+ *
+ * A pool that cannot be read must not fail the whole card: the connection
+ * section is still worth rendering, just with an empty account list.
+ */
+export declare function minimaxCodePoolStatus(pool: MinimaxCodeAccountPool | undefined): Promise<MinimaxCodePoolStatus>;
+export interface MinimaxCodeAccountsRouteOptions {
+    /**
+     * Status the route answers a mutation with, so the card re-renders in one round
+     * trip. Defaults to the pool slice alone.
+     */
+    readStatus?: () => Promise<unknown>;
+    /**
+     * Called after a mutation that can move which account serves a request, so the
+     * caller can drop per-account caches (quota, catalog) that belong to the account
+     * that just changed.
+     */
+    onAccountsChanged?: () => void;
+}
+/**
+ * The \`/accounts\` route for this line, as a self-contained handler.
+ *
+ * It is a handler rather than a second \`webServer.register\` call because the
+ * parent route already owns the \`/minimax-code/api\` prefix: registering a nested
+ * prefix beside it would make which handler sees \`/accounts\` depend on the
+ * server's prefix-matching order. The parent dispatches on \`path === 'accounts'\`
+ * and calls this.
+ *
+ * Every POST goes through {@link isSameOriginMutation}, exactly like the sibling
+ * lines' account routes, and no response ever carries a credential: what leaves
+ * here is the summary DTO the card renders.
+ */
+export declare function createMinimaxCodeAccountsHandler(pool: MinimaxCodeAccountPool | undefined, options?: MinimaxCodeAccountsRouteOptions): (request: IncomingMessage, response: ServerResponse) => Promise<void>;
+//# sourceMappingURL=account-pool.d.ts.map

package/lib/types/host/minimax-code/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/minimax-code/account-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EACL,eAAe,EAGf,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EACL,0BAA0B,EAG1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAA;AAOzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,wCAAwC,CAAA;AAE/C;;;;;;GAMG;AACH,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IACtF,iFAAiF;IACjF,MAAM,EAAE,iBAAiB,CAAA;IACzB;;;;;;OAMG;IACH,MAAM,EAAE,2BAA2B,CAAA;IACnC,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wFAAwF;AACxF,MAAM,WAAW,4BAA6B,SAAQ,qBAAqB;IACzE,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,MAAM,CAAC,EAAE,2BAA2B,CAAA;IACpC,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAkGD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,sBAAsB,GAAG,MAAM,GAAG,SAAS,CAQ/F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAyDzF;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,KAAK,CAAC,EAAE,0BAA0B,CAAA;IAClC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAA;IAC3D,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,eAAe,CACzD,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,CAC7B;IAGC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;gBAEtC,OAAO,GAAE,6BAAkC;IA2HvD;;;;;;;OAOG;IACG,sBAAsB,CAC1B,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,sBAAsB,CAAC;QAAC,WAAW,EAAE,sBAAsB,CAAA;KAAE,CAAC;IAapF;;;;;;;;;OASG;YACW,oBAAoB;IAalC;;;;;;;;OAQG;IACG,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQzE;;;;;;;;OAQG;IACY,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,uEAAuE;IACvE,WAAW,IAAI,0BAA0B;CAG1C;AAED,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,4BAA4B,EAAE,CAAA;IACxC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,uBAAuB,CAAA;IACzC,oDAAoD;IACpD,aAAa,EAAE,OAAO,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,sBAAsB,GAAG,SAAS,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAYhC;AA2CD,MAAM,WAAW,+BAA+B;IAC9C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACnC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAA;CAC/B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,sBAAsB,GAAG,SAAS,EACxC,OAAO,GAAE,+BAAoC,GAC5C,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAwDvE"}

package/lib/types/host/minimax-code/adapter.d.ts

@@ -0,0 +1,168 @@
+/**
+ * The DSH adapter for the MiniMax Code subscription.
+ *
+ * It follows the shape every other line in this package uses — claim the provider
+ * id, list the hardcoded directory, resolve one model, stream one request — with
+ * two differences that belong to this line alone:
+ *
+ * 1. the credential is the desktop app's own \`auth.json\`, read and renewed through
+ *    ./oauth.ts under the read-only-first discipline; and
+ * 2. there is no account pool. Pooling exists to rotate several signed-in accounts
+ *    against one subscription; here there is exactly one credential, shared with an
+ *    application the user is also running, and inventing a second one would mean
+ *    racing that application for a rotation neither of them needs.
+ */
+import { LlmAdapter, type GenerateOptions, type LlmModelInfo, type LlmProviderInfo, type LlmResolvedModelInfo, type PreparedAdapterCall, type ResolvedRetryPolicy, type StreamChunk } from '@deepseek-ai/dsh-llm';
+import { PROVIDER_ID } from './types.ts';
+import { MinimaxCodeCredentialStore, MinimaxCodeModelSettingsStore, type MinimaxCodePreferenceStore } from './token-store.ts';
+import { clampOutputToContext, maxOutputTokensFor, type AttachmentImageReader } from './mapper.ts';
+import type { MinimaxCodeAccountPool } from './account-pool.ts';
+/**
+ * Transient-failure retry policy for the minimax-code route.
+ *
+ * The subscription fronts the model providers, so a call can fail with a 502/503
+ * while the subscription and the credential stay perfectly usable. The retryable
+ * set is therefore SERVER (any 5xx), RATE_LIMIT (genuine back-pressure), TRANSPORT
+ * (a connection that produced no response) and TIMEOUT (a stalled stream, handled
+ * by the idle watchdog).
+ *
+ * Deliberately outside the set: INVALID_CREDENTIAL (a rejected token fails
+ * identically every time), PROVIDER_ERROR (a 400 or a plan refusal), and ABORTED
+ * (the caller already cancelled).
+ */
+export declare const MINIMAX_CODE_RETRY_POLICY_CONFIG: {
+    mode: 'normal';
+    maxRetries: number;
+    retryableCodes: string[];
+    backoff: {
+        initialDelayMs: number;
+        maxDelayMs: number;
+        jitterRatio: number;
+    };
+};
+/** What one failed response means for the retry policy. */
+export interface MinimaxFailureClassification {
+    /** DSH error code; decides whether the route retries. */
+    code: string;
+    /** Message shown to the user, with the service's own text appended. */
+    message: string;
+    /** True only when the failure is worth retrying. */
+    retryable: boolean;
+}
+/**
+ * Classify one non-2xx response for the retry policy.
+ *
+ * A 401 on this route is the one failure with an unambiguous remedy, and it is the
+ * one the credentials rule exists for: the service answers
+ * \`{"code":401,"message":"token is required"}\` both when no credential was sent
+ * and when the one that was sent is no longer accepted, so the message names the
+ * sign-in path instead of asking the user to guess.
+ */
+export declare function classifyMinimaxFailure(status: number, bodyText: string): MinimaxFailureClassification;
+export interface MinimaxCodeAdapterOptions {
+    fetchFn?: typeof fetch;
+    /** Attachment seam: verified bytes for one durable image. */
+    attachments?: AttachmentImageReader;
+    /**
+     * The account pool, when this process installed one.
+     *
+     * With a pool the adapter rotates between accounts and lets a 429 cool one
+     * account down instead of taking the whole line offline; without one it keeps
+     * the single-credential behaviour it had before, reading and renewing the one
+     * stored credential. Both postures are supported because the pool is optional
+     * in a composition (a headless host, a test), and a missing pool must not make
+     * the route unusable.
+     */
+    accountPool?: MinimaxCodeAccountPool;
+}
+export declare class MinimaxCodeAdapter extends LlmAdapter {
+    private readonly store;
+    /**
+     * The JSON file fallback for the model selection.
+     *
+     * Every sibling line has one, and it is not dead weight even where a settings
+     * service exists: it is what a later run on a harness that dropped the register
+     * seam reads back.
+     */
+    private readonly modelSettings;
+    /**
+     * Registered model settings, when the harness still offers the register seam.
+     *
+     * Optional because the adapter is also constructed by tooling and tests that
+     * have no settings service; {@link settings} then reads the file directly, so
+     * both shapes answer the same three questions.
+     */
+    private readonly preferences;
+    private readonly options;
+    constructor(store?: MinimaxCodeCredentialStore, options?: MinimaxCodeAdapterOptions, modelSettings?: MinimaxCodeModelSettingsStore, preferences?: MinimaxCodePreferenceStore);
+    /**
+     * The current model selection.
+     *
+     * Synchronous on the register seam (the scope reads from memory) and a single
+     * file read otherwise. The loop over models that consults it runs on every
+     * model-picker query, so this is deliberately not memoized: a cached snapshot
+     * would keep serving a model the user disabled in the card until the process
+     * restarted, which is the complaint this whole settings surface exists to fix.
+     */
+    private settings;
+    /**
+     * The credential one request should present, and the pool account behind it.
+     *
+     * With a pool, the pool picks the account (rotation, cooldown, stickiness) and
+     * owns the refresh, so this must not read the single-credential file: that file
+     * mirrors one pooled account, and presenting it would silently pin every request
+     * to whichever account was mirrored last.
+     *
+     * Without a pool the previous behaviour is kept exactly, including the
+     * read-only-first refresh policy.
+     */
+    private acquireCredential;
+    /**
+     * Renew the credential the service just refused.
+     *
+     * With a pool, the account that failed is the one renewed, so the rotation lands
+     * on that account's own record instead of the single-credential file; without a
+     * pool the store's own forced refresh is what ran before the pool existed.
+     */
+    private renewCredential;
+    providerInfo(provider: string): LlmProviderInfo;
+    providerRetryPolicy(): ResolvedRetryPolicy;
+    imageRequestPricing(): undefined;
+    /**
+     * The hardcoded directory, narrowed to what the user enabled it to serve.
+     *
+     * Nothing is fetched: the listing route is unavailable on this endpoint, so a
+     * "live catalog" would be a request that can only ever fail.
+     *
+     * The line-wide switch is honoured before the selection is even resolved, so
+     * turning the card's switch off exposes no model at all — including the ones
+     * the user left ticked, which is what "off" has to mean if it is to mean
+     * anything.
+     */
+    listModels(provider?: string): Promise<readonly LlmModelInfo[]>;
+    /**
+     * One model's resolved metadata, read through the current selection.
+     *
+     * The effective context window is the override when one is saved, and the
+     * output cap is sized against that same number — a window the card shows and a
+     * cap the request path computes from a different one is precisely the drift
+     * this single resolver exists to prevent.
+     */
+    resolveModel(provider: string, modelId: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;
+    prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;
+    /**
+     * One request, with the line's default reasoning effort materialized.
+     *
+     * A caller that states an effort is passed through untouched: DSH materializes
+     * {@link resolveModel}'s default into the options for a picker-driven turn, so
+     * a value arriving here is a deliberate choice and must not be replaced. Only
+     * an unstated one is filled in, and only when the user actually configured a
+     * global level — the shipped default is "say nothing", because the model has
+     * its own and restating it in every body is a chance to disagree with it.
+     */
+    stream(options: GenerateOptions): AsyncIterable<StreamChunk>;
+    private requestStream;
+}
+export { PROVIDER_ID, MinimaxCodeCredentialStore };
+export { maxOutputTokensFor, clampOutputToContext };
+//# sourceMappingURL=adapter.d.ts.map

package/lib/types/host/minimax-code/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/minimax-code/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,UAAU,EAIV,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAEL,WAAW,EAMZ,MAAM,YAAY,CAAA;AASnB,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAG7B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AAMzB,OAAO,EAIL,oBAAoB,EAIpB,kBAAkB,EAIlB,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAK/D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gCAAgC,EAAE;IAC7C,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAM7E,CAAA;AAOD,2DAA2D;AAC3D,MAAM,WAAW,4BAA4B;IAC3C,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAA;IACf,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAA;CACnB;AAsBD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,4BAA4B,CAuDrG;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAA;CACrC;AAiCD,qBAAa,kBAAmB,SAAQ,UAAU;IAKhD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+B;IAC7D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwC;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;gBAGjD,KAAK,GAAE,0BAA6D,EACpE,OAAO,GAAE,yBAA8B,EACvC,aAAa,GAAE,6BAAmE,EAClF,WAAW,CAAC,EAAE,0BAA0B;IAS1C;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;;;;;;;OAUG;YACW,iBAAiB;IAY/B;;;;;;OAMG;YACW,eAAe;IAgB7B,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC;;;;;;;;;;OAUG;IACG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAerE;;;;;;;OAOG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2BpG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAOtG;;;;;;;;;OASG;IACI,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;YAiBpD,aAAa;CAyJ7B;AAED,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAA;AAClD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,CAAA"}

package/lib/types/host/minimax-code/client.d.ts

@@ -0,0 +1,184 @@
+/**
+ * HTTP surface of the MiniMax Code subscription.
+ *
+ * ONE header rule governs this whole file, and it is the one the brief calls out as
+ * a hard constraint: credentials are sent as `authorization: Bearer <accessToken>`.
+ * The endpoint also speaks the Anthropic wire format, whose client normally
+ * authenticates with `x-api-key`, and that difference was measured directly — an
+ * `x-api-key` request answers 401 `{"code":401,"message":"token is required"}`
+ * while the bearer form answers 200. There is deliberately no fallback that tries
+ * `x-api-key` after a 401: the measured verdict is that it cannot succeed, and a
+ * retry would only add a request to the subscription's bill.
+ *
+ * The second rule is an absence: this file has no `/v1/models` call and must never
+ * grow one. That route is not configured for subscription traffic and answers 503
+ * `{"errorCode":50115,"errorReason":"direct_route_not_configured"}`; the model
+ * directory is hardcoded in ./model-catalog.ts instead.
+ */
+import { DEFAULT_DEVICE_INTERVAL_SECONDS, MESSAGES_PATH, agentBaseUrl, MINIMAX_CODE_BUILD_ENV, redactToken } from './types.ts';
+import { MinimaxCodeCredentialStore, type MinimaxCodeCredentials } from './token-store.ts';
+import { MinimaxCodeUnauthorizedError } from './oauth.ts';
+import type { MinimaxCodeAccount, MinimaxCodeQuota, MinimaxCodeRegion } from '../../shared/minimax-code-contracts.ts';
+/**
+ * Headers for one Messages request.
+ *
+ * `authorization: Bearer` is REQUIRED and is the only credential field sent —
+ * see this file's header comment for the measured reason an `x-api-key` variant
+ * must not exist.
+ *
+ * The token itself never appears in a log line or an error: callers that need to
+ * name a credential do so through `redactToken`.
+ */
+export declare function modelRequestHeaders(accessToken: string): Record<string, string>;
+/** Headers for a non-streaming call (the probe). */
+export declare function probeRequestHeaders(accessToken: string): Record<string, string>;
+/** One parsed Anthropic `usage` object. */
+export interface MinimaxUsage {
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens: number;
+    cacheWriteTokens: number;
+}
+/** Read the four token counters the Messages response reports. */
+export declare function parseAnthropicUsage(payload: unknown): MinimaxUsage | null;
+/** Short, single-line excerpt of one error body, safe to show a user. */
+export declare function summarizeFailureBody(raw: string): string;
+export interface MinimaxProbeResult {
+    ok: boolean;
+    /** Model the probe used, when it reached the service. */
+    model?: string;
+    /** Failure sentence, already safe to render. */
+    error?: string;
+    latencyMs: number;
+    account?: MinimaxCodeAccount | null;
+    usage?: MinimaxUsage;
+}
+/**
+ * Model the connection probe uses.
+ *
+ * M3 is the model the measured request used, so a probe against it exercises the
+ * exact shape the reconnaissance attested rather than a preview id that may not be
+ * entitled on every account.
+ */
+export declare const PROBE_MODEL = "MiniMax-M3";
+/**
+ * Prove the stored credential still authenticates.
+ *
+ * The probe is the real Messages endpoint, because that is the only surface the
+ * subscription exposes to a third-party client: there is no account-profile route
+ * and `/v1/models` is unavailable, so a 200 from `/messages` is what "signed in"
+ * means here. The request is deliberately tiny — one word, 16 output tokens — so a
+ * probe the user triggered by pressing a button costs almost nothing.
+ */
+export declare function testConnection(store: MinimaxCodeCredentialStore, options?: {
+    fetchFn?: typeof fetch;
+    signal?: AbortSignal;
+}): Promise<MinimaxProbeResult>;
+/**
+ * Non-streaming Messages call, used by callers that want the body rather than a stream.
+ *
+ * It exists so the streaming path is not the only implementation of the request
+ * shape: the probe and any future test use the same headers and URL builder, which
+ * is what keeps the Bearer rule from drifting in a second place.
+ */
+export declare function createMessage(store: MinimaxCodeCredentialStore, request: {
+    model: string;
+    maxTokens: number;
+    prompt: string;
+}, options?: {
+    fetchFn?: typeof fetch;
+    signal?: AbortSignal;
+}): Promise<{
+    ok: boolean;
+    status: number;
+    payload?: unknown;
+    error?: string;
+    latencyMs: number;
+}>;
+/**
+ * Headers for the Token Plan usage read.
+ *
+ * NOT {@link modelRequestHeaders}: that set asks for `text/event-stream` because
+ * the Messages route streams, and this route answers one JSON document. The
+ * credential is still the same bearer token.
+ */
+export declare function quotaRequestHeaders(accessToken: string, pathWithSearch: string, requestTime?: number): Record<string, string>;
+/**
+ * The host that last answered.
+ *
+ * Only a live call can settle which candidate serves this subscription, so the
+ * winner is remembered and probed first from then on.
+ */
+/**
+ * Why a usage snapshot is absent, when the reason is worth stating on the card.
+ *
+ * - `credential-not-accepted` — the endpoint answered, and refused THIS line's
+ *   credential because it needs a platform API key. Measured: every candidate
+ *   host answers HTTP 200 with `base_resp.status_code: 1004` for an
+ *   `mcode-public` (MiniMax Code) token, under every auth shape tried.
+ * - `unreachable` — no candidate host produced a usable answer at all.
+ */
+export type MinimaxCodeQuotaUnavailable = 'credential-not-accepted' | 'unreachable';
+/** Forget the cached usage snapshot (a sign-out, a sign-in, a test). */
+export declare function clearCachedQuota(): void;
+/** The last usage snapshot without touching the network. */
+export declare function getCachedQuota(): MinimaxCodeQuota | null;
+/** Why the last read produced no snapshot, or null when it produced one. */
+export declare function getQuotaUnavailable(): MinimaxCodeQuotaUnavailable | null;
+/**
+ * Resolve the ambiguous `*_usage_count` fields.
+ *
+ * TRANSCRIBED from the official CLI (`src/utils/quota.ts`), because the ambiguity
+ * is real and reading the field naively inverts the bar: older responses report
+ * it as a REMAINING count while newer ones report it as a CONSUMED count. When the
+ * server also returns an explicit remaining percentage, that percentage selects
+ * whichever reading agrees with it; when the counts agree with neither, this
+ * returns undefined and the window falls back to the percentage alone rather than
+ * inventing a number.
+ */
+export declare function resolveQuotaCounts(reportedCount: number, total: number, remainingPercent: number | undefined): {
+    used: number;
+    remaining: number;
+    total: number;
+} | undefined;
+/**
+ * Map one `/v1/token_plan/remains` document onto the card's quota shape.
+ *
+ * Returns null when nothing usable is present, which the contract defines as the
+ * card's graceful degradation.
+ */
+export declare function parseTokenPlanQuota(payload: unknown, now?: number): MinimaxCodeQuota | null;
+/**
+ * Read the Token Plan usage snapshot.
+ *
+ * The endpoint is undocumented (it was found in the official CLI, not in MiniMax's
+ * API docs), and which host serves THIS subscription has never been measured, so
+ * the candidates are tried in order and the winner is remembered. Any failure
+ * yields null: the contract makes `quota` optional precisely so a usage read can
+ * never break the connection half of the card.
+ */
+export declare function fetchTokenPlanQuota(credentials: MinimaxCodeCredentials, options?: {
+    fetchFn?: typeof fetch;
+    signal?: AbortSignal;
+    force?: boolean;
+}): Promise<MinimaxCodeQuota | null>;
+/**
+ * Every model id the hardcoded directory offers.
+ *
+ * Exposed as a function rather than re-exported directly so the status route
+ * cannot accidentally treat the catalog as live data: it is shipped, not fetched.
+ */
+export declare function listModelIds(): string[];
+/** The catalog entry count, for a status line that reports what is shipped. */
+export declare function catalogSize(): number;
+/**
+ * Whether a credential is worth reporting as signed in.
+ *
+ * A stored-but-expired credential still counts: the card's job is to show who is
+ * signed in and let the refresh path repair the token, not to hide an account whose
+ * access token happens to have aged out between two calls.
+ */
+export declare function describeCredentials(credentials: MinimaxCodeCredentials | null): MinimaxCodeAccount | null;
+export { MinimaxCodeUnauthorizedError, agentBaseUrl, MESSAGES_PATH, DEFAULT_DEVICE_INTERVAL_SECONDS, MINIMAX_CODE_BUILD_ENV, redactToken };
+export type { MinimaxCodeRegion };
+//# sourceMappingURL=client.d.ts.map

package/lib/types/host/minimax-code/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/host/minimax-code/client.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAGH,OAAO,EAEL,+BAA+B,EAC/B,aAAa,EACb,YAAY,EAMZ,sBAAsB,EAEtB,WAAW,EACZ,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,0BAA0B,EAC1B,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAA6C,4BAA4B,EAAE,MAAM,YAAY,CAAA;AAEpG,OAAO,KAAK,EACV,kBAAkB,EAClB,gBAAgB,EAEhB,iBAAiB,EAClB,MAAM,wCAAwC,CAAA;AAU/C;;;;;;;;;GASG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS/E;AAED,oDAAoD;AACpD,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAE/E;AAED,2CAA2C;AAC3C,MAAM,WAAW,YAAY;IAC3B,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;CACzB;AAYD,kEAAkE;AAClE,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,YAAY,GAAG,IAAI,CASzE;AAED,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAiBxD;AAED,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,OAAO,CAAA;IACX,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,gDAAgD;IAChD,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,kBAAkB,GAAG,IAAI,CAAA;IACnC,KAAK,CAAC,EAAE,YAAY,CAAA;CACrB;AAED;;;;;;GAMG;AACH,eAAO,MAAM,WAAW,eAAe,CAAA;AAEvC;;;;;;;;GAQG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,0BAA0B,EACjC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GAC7D,OAAO,CAAC,kBAAkB,CAAC,CAsD7B;AAED;;;;;;GAMG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,0BAA0B,EACjC,OAAO,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,EAC7D,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAA;CAAO,GAC7D,OAAO,CAAC;IAAE,EAAE,EAAE,OAAO,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAAC,KAAK,CAAC,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAAC,CAyChG;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CACjC,WAAW,EAAE,MAAM,EACnB,cAAc,EAAE,MAAM,EACtB,WAAW,GAAE,MAAmB,GAC/B,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAoBxB;AA2BD;;;;;GAKG;AACH;;;;;;;;GAQG;AACH,MAAM,MAAM,2BAA2B,GAAG,yBAAyB,GAAG,aAAa,CAAA;AAQnF,wEAAwE;AACxE,wBAAgB,gBAAgB,IAAI,IAAI,CAGvC;AAED,4DAA4D;AAC5D,wBAAgB,cAAc,IAAI,gBAAgB,GAAG,IAAI,CAExD;AAED,4EAA4E;AAC5E,wBAAgB,mBAAmB,IAAI,2BAA2B,GAAG,IAAI,CAExE;AAMD;;;;;;;;;;GAUG;AACH,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,MAAM,EACrB,KAAK,EAAE,MAAM,EACb,gBAAgB,EAAE,MAAM,GAAG,SAAS,GACnC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,SAAS,CAgBhE;AAiCD;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,EAAE,GAAG,GAAE,MAAmB,GAAG,gBAAgB,GAAG,IAAI,CAqDvG;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,WAAW,EAAE,sBAAsB,EACnC,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC9E,OAAO,CAAC,gBAAgB,GAAG,IAAI,CAAC,CAmDlC;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,IAAI,MAAM,EAAE,CAEvC;AAED,+EAA+E;AAC/E,wBAAgB,WAAW,IAAI,MAAM,CAEpC;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,sBAAsB,GAAG,IAAI,GAAG,kBAAkB,GAAG,IAAI,CAEzG;AAED,OAAO,EAAE,4BAA4B,EAAE,YAAY,EAAE,aAAa,EAAE,+BAA+B,EAAE,sBAAsB,EAAE,WAAW,EAAE,CAAA;AAC1I,YAAY,EAAE,iBAAiB,EAAE,CAAA"}