@eddyskywalker/dsh-chatgpt-subscription 0.10.0 → 0.10.5

package/lib/types/host/minimax-code/account-pool.d.ts

@@ -0,0 +1,219 @@
+/**
+ * MiniMax Code 号池：the account pool for the MiniMax Code (编程订阅) line.
+ *
+ * This is the second line in this package that pools a credential it does not
+ * own (WorkBuddy was the first), and that one fact decides every shape below:
+ *
+ * 1. MiniMax Code's normal credential is the desktop application's own
+ *    \`~/.minimax/auth/<buildEnv>/<region>/mcode-public/auth.json\`. The plugin
+ *    reads it so a user already signed in to the app never signs in twice, which
+ *    is exactly the WorkBuddy precedent for the CodeBuddy client's \`*.info\`
+ *    files.
+ * 2. ADOPTED MEANS NEVER DESTROYED. That file belongs to an application the
+ *    user is running. The pool may read it, may adopt it into its own account
+ *    list, and may write a rotated token back through the store's atomic
+ *    replacement — but no path in this file may revoke it or delete it. A
+ *    deleted \`auth.json\` signs the user out of MiniMax Code itself, so such an
+ *    account is reported as \`removable: false\` and deletion is refused
+ *    ({@link MinimaxCodeAccountPool.deleteAccount}), mirroring WorkBuddy's
+ *    desktop accounts.
+ * 3. What the pool adds on top of the single-credential line is rotation: more
+ *    than one sign-in can serve requests, a 429 cools one account down instead
+ *    of taking the line offline, and the settings card can list, alias, promote
+ *    and switch between them.
+ *
+ * The credential format stays the store's: this file never invents a field of
+ * its own inside a token record, so a write back into the app's document keeps
+ * the exact shape the app expects.
+ */
+import type { IncomingMessage, ServerResponse } from 'node:http';
+import { AccountPoolCore, type PoolAccountShape, type PoolData } from '../common/account-pool.ts';
+import type { CredentialStore } from '../token-store.ts';
+import { MinimaxCodeCredentialStore, type MinimaxCodeCredentialSource, type MinimaxCodeCredentials } from './token-store.ts';
+import type { MinimaxCodeRegion } from '../../shared/minimax-code-contracts.ts';
+import type { AccountRotationStrategy, PoolAccountSummaryDto } from '../../shared/account-pool-contracts.ts';
+/**
+ * One pooled MiniMax Code account.
+ *
+ * The credential travels whole (the pool persists it, and the store knows how to
+ * write it back to the file it came from); everything else here is a non-secret
+ * fact the settings card renders without a second round trip.
+ */
+export interface MinimaxCodePoolAccount extends PoolAccountShape<MinimaxCodeCredentials> {
+    /** Region the credential was issued in; decides every host this account uses. */
+    region: MinimaxCodeRegion;
+    /**
+     * Which store owns the credential.
+     *
+     * \`minimax-native\` is MiniMax Code's own \`auth.json\`: adopted and renewed,
+     * never deletable from here. \`file\` is the plugin's own store, written by a
+     * device-code sign-in started in this plugin.
+     */
+    source: MinimaxCodeCredentialSource;
+    /** Display facts, when the credential's token claims carry them. */
+    email?: string;
+    planName?: string;
+}
+/** The pool slice the settings card renders, mirroring {@link AccountPoolStatusDto}. */
+export interface MinimaxCodeAccountSummaryDto extends PoolAccountSummaryDto {
+    region?: MinimaxCodeRegion;
+    source?: MinimaxCodeCredentialSource;
+    /** Credential generation; diagnostics for two-sided refresh contention with the app. */
+    generation?: number;
+}
+/**
+ * Encrypted pool file this line owns.
+ *
+ * Separate from the credential file on purpose: the pool may hold several
+ * accounts, while \`~/.minimax/auth\` holds exactly one session per region and is
+ * the desktop app's to write.
+ */
+export declare function minimaxCodePoolPath(): string;
+/**
+ * Identity two credentials share when they are the same account.
+ *
+ * Neither token can be used for this: the access token is replaced on every
+ * refresh and the refresh token rotates, so keying on either would make one
+ * account look new after every rotation. A hash of the refresh token would have
+ * the same defect and no compensating benefit, so it is not done.
+ *
+ * Two different identities are available, one per provenance:
+ *
+ * - A native credential names the desktop app's own record slot through
+ *   \`recordKey\`. That key is a non-secret digest of the app's auth-home path, so
+ *   it is stable across every rotation, and the app keeps exactly one session per
+ *   slot: re-signing in there replaces the session, which for routing purposes is
+ *   the same account, so updating the row in place is the correct outcome.
+ * - A plugin-owned credential has no record slot (the app's key is a hash this
+ *   plugin cannot reproduce) and no account profile, so the sign-in that produced
+ *   it — its \`loginEpoch\`, which survives every rotation — is the identity. A
+ *   second device-code sign-in is genuinely a second session with its own refresh
+ *   token chain, so it is its own account.
+ *
+ * When neither is present there is nothing stable to key on: the function returns
+ * undefined, the core mints \`acc_<random>\`, and the row is added rather than
+ * silently merged with an unrelated credential.
+ */
+export declare function minimaxCodePoolIdentity(credentials: MinimaxCodeCredentials): string | undefined;
+/**
+ * Validate and normalize one whole pool document.
+ *
+ * The credential is re-parsed through the store's own validator, so a row can
+ * never hold a token shape the store would refuse to write back. \`source\`,
+ * \`recordKey\` and \`buildEnv\` have to be restored explicitly: the validator
+ * takes them from its fallback rather than from the payload, and a native account
+ * that lost them would be re-labelled as plugin-owned (so the card would offer a
+ * delete that must never happen, and a rotation would land in the plugin's file
+ * instead of the app's).
+ */
+export declare function parseMinimaxCodePoolData(value: unknown): PoolData<MinimaxCodePoolAccount>;
+export interface MinimaxCodeAccountPoolOptions {
+    /**
+     * Credential store the pool reads the desktop app's sign-in through and mirrors
+     * its primary account into.
+     */
+    store?: MinimaxCodeCredentialStore;
+    /** Test seam; production builds the platform backend from the pool path. */
+    backend?: CredentialStore<PoolData<MinimaxCodePoolAccount>>;
+    /** Accounts this pool accepts; defaults to the core's limit. */
+    maxAccounts?: number;
+}
+/**
+ * MiniMax Code's account pool.
+ *
+ * It owns rotation and the write-back, exactly like the sibling lines, with one
+ * asymmetry the hooks below enforce: an account whose credential lives in the
+ * desktop app's file is adopted, never owned.
+ */
+export declare class MinimaxCodeAccountPool extends AccountPoolCore<MinimaxCodeCredentials, MinimaxCodePoolAccount, MinimaxCodeAccountSummaryDto> {
+    private readonly store;
+    constructor(options?: MinimaxCodeAccountPoolOptions);
+    /**
+     * Pick the account for the next request.
+     *
+     * The returned credential carries its own region and record key, so a caller
+     * must use those rather than any process-wide default. This is the method the
+     * adapter uses; {@link getEffectiveAccount} beneath it already refreshes a
+     * credential that is about to expire and writes the rotation back.
+     */
+    getEffectiveCredential(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch): Promise<{
+        account: MinimaxCodePoolAccount;
+        credentials: MinimaxCodeCredentials;
+    }>;
+    /**
+     * The desktop app's own current copy of one native account's credential.
+     *
+     * The app rotates its token on its own schedule, so the copy the pool adopted
+     * can be older than what is on disk. Only the same record slot counts: a
+     * different record key or region is a different account, and substituting it
+     * would present one account's token as another's. A file whose token is already
+     * stale is not newer authority either — the refresh path has just written the
+     * pair back, and reading the pre-refresh file would undo it.
+     */
+    private liveNativeCredential;
+    /**
+     * Adopt the sign-in the desktop app currently holds into the pool.
+     *
+     * The pre-pool projection ({@link legacyAccount}) only surfaces when the pool is
+     * empty, so a user who already has a plugin-owned account needs an explicit way
+     * to bring the app's session in as well. Nothing is ever removed from the app;
+     * the account is added under its own record-slot identity, so adopting twice
+     * updates the same row.
+     */
+    adoptNativeAccount(alias?: string): Promise<MinimaxCodePoolAccount>;
+    /**
+     * Delete one account.
+     *
+     * An account whose credential is the desktop app's own \`auth.json\` is refused:
+     * this plugin does not own that file, and removing the account would either
+     * strand the app's session or — if the deletion were ever allowed to reach the
+     * file — sign the user out of MiniMax Code itself. Signing out there is the
+     * supported way to end it, and the card is told so by \`removable: false\`.
+     */
+    deleteAccount(accountId: string): Promise<void>;
+    /** The credential store this pool mirrors its primary account into. */
+    mirrorStore(): MinimaxCodeCredentialStore;
+}
+/** The pool slice of a status response; exactly the fields the card renders. */
+export interface MinimaxCodePoolStatus {
+    accounts: MinimaxCodeAccountSummaryDto[];
+    activeAccountId?: string;
+    rotationStrategy: AccountRotationStrategy;
+    /** Whether this process installed a pool at all. */
+    poolInstalled: boolean;
+}
+/**
+ * Read the pool slice of the status DTO.
+ *
+ * A pool that cannot be read must not fail the whole card: the connection
+ * section is still worth rendering, just with an empty account list.
+ */
+export declare function minimaxCodePoolStatus(pool: MinimaxCodeAccountPool | undefined): Promise<MinimaxCodePoolStatus>;
+export interface MinimaxCodeAccountsRouteOptions {
+    /**
+     * Status the route answers a mutation with, so the card re-renders in one round
+     * trip. Defaults to the pool slice alone.
+     */
+    readStatus?: () => Promise<unknown>;
+    /**
+     * Called after a mutation that can move which account serves a request, so the
+     * caller can drop per-account caches (quota, catalog) that belong to the account
+     * that just changed.
+     */
+    onAccountsChanged?: () => void;
+}
+/**
+ * The \`/accounts\` route for this line, as a self-contained handler.
+ *
+ * It is a handler rather than a second \`webServer.register\` call because the
+ * parent route already owns the \`/minimax-code/api\` prefix: registering a nested
+ * prefix beside it would make which handler sees \`/accounts\` depend on the
+ * server's prefix-matching order. The parent dispatches on \`path === 'accounts'\`
+ * and calls this.
+ *
+ * Every POST goes through {@link isSameOriginMutation}, exactly like the sibling
+ * lines' account routes, and no response ever carries a credential: what leaves
+ * here is the summary DTO the card renders.
+ */
+export declare function createMinimaxCodeAccountsHandler(pool: MinimaxCodeAccountPool | undefined, options?: MinimaxCodeAccountsRouteOptions): (request: IncomingMessage, response: ServerResponse) => Promise<void>;
+//# sourceMappingURL=account-pool.d.ts.map

package/lib/types/host/minimax-code/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/minimax-code/account-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;GA2BG;AAGH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAA;AAEhE,OAAO,EACL,eAAe,EAGf,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,2BAA2B,CAAA;AAElC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EACL,0BAA0B,EAG1B,KAAK,2BAA2B,EAChC,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAA;AAOzB,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAA;AAC/E,OAAO,KAAK,EACV,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,wCAAwC,CAAA;AAE/C;;;;;;GAMG;AACH,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IACtF,iFAAiF;IACjF,MAAM,EAAE,iBAAiB,CAAA;IACzB;;;;;;OAMG;IACH,MAAM,EAAE,2BAA2B,CAAA;IACnC,oEAAoE;IACpE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,wFAAwF;AACxF,MAAM,WAAW,4BAA6B,SAAQ,qBAAqB;IACzE,MAAM,CAAC,EAAE,iBAAiB,CAAA;IAC1B,MAAM,CAAC,EAAE,2BAA2B,CAAA;IACpC,wFAAwF;IACxF,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAkGD;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,sBAAsB,GAAG,MAAM,GAAG,SAAS,CAQ/F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAyDzF;AAED,MAAM,WAAW,6BAA6B;IAC5C;;;OAGG;IACH,KAAK,CAAC,EAAE,0BAA0B,CAAA;IAClC,4EAA4E;IAC5E,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAA;IAC3D,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,eAAe,CACzD,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,CAC7B;IAGC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;gBAEtC,OAAO,GAAE,6BAAkC;IA2HvD;;;;;;;OAOG;IACG,sBAAsB,CAC1B,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,sBAAsB,CAAC;QAAC,WAAW,EAAE,sBAAsB,CAAA;KAAE,CAAC;IAapF;;;;;;;;;OASG;YACW,oBAAoB;IAalC;;;;;;;;OAQG;IACG,kBAAkB,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAQzE;;;;;;;;OAQG;IACY,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9D,uEAAuE;IACvE,WAAW,IAAI,0BAA0B;CAG1C;AAED,gFAAgF;AAChF,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,4BAA4B,EAAE,CAAA;IACxC,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,uBAAuB,CAAA;IACzC,oDAAoD;IACpD,aAAa,EAAE,OAAO,CAAA;CACvB;AAED;;;;;GAKG;AACH,wBAAsB,qBAAqB,CACzC,IAAI,EAAE,sBAAsB,GAAG,SAAS,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAYhC;AA2CD,MAAM,WAAW,+BAA+B;IAC9C;;;OAGG;IACH,UAAU,CAAC,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IACnC;;;;OAIG;IACH,iBAAiB,CAAC,EAAE,MAAM,IAAI,CAAA;CAC/B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,gCAAgC,CAC9C,IAAI,EAAE,sBAAsB,GAAG,SAAS,EACxC,OAAO,GAAE,+BAAoC,GAC5C,CAAC,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,CAAC,CAwDvE"}

package/lib/types/host/minimax-code/adapter.d.ts

@@ -0,0 +1,168 @@
+/**
+ * The DSH adapter for the MiniMax Code subscription.
+ *
+ * It follows the shape every other line in this package uses — claim the provider
+ * id, list the hardcoded directory, resolve one model, stream one request — with
+ * two differences that belong to this line alone:
+ *
+ * 1. the credential is the desktop app's own \`auth.json\`, read and renewed through
+ *    ./oauth.ts under the read-only-first discipline; and
+ * 2. there is no account pool. Pooling exists to rotate several signed-in accounts
+ *    against one subscription; here there is exactly one credential, shared with an
+ *    application the user is also running, and inventing a second one would mean
+ *    racing that application for a rotation neither of them needs.
+ */
+import { LlmAdapter, type GenerateOptions, type LlmModelInfo, type LlmProviderInfo, type LlmResolvedModelInfo, type PreparedAdapterCall, type ResolvedRetryPolicy, type StreamChunk } from '@deepseek-ai/dsh-llm';
+import { PROVIDER_ID } from './types.ts';
+import { MinimaxCodeCredentialStore, MinimaxCodeModelSettingsStore, type MinimaxCodePreferenceStore } from './token-store.ts';
+import { clampOutputToContext, maxOutputTokensFor, type AttachmentImageReader } from './mapper.ts';
+import type { MinimaxCodeAccountPool } from './account-pool.ts';
+/**
+ * Transient-failure retry policy for the minimax-code route.
+ *
+ * The subscription fronts the model providers, so a call can fail with a 502/503
+ * while the subscription and the credential stay perfectly usable. The retryable
+ * set is therefore SERVER (any 5xx), RATE_LIMIT (genuine back-pressure), TRANSPORT
+ * (a connection that produced no response) and TIMEOUT (a stalled stream, handled
+ * by the idle watchdog).
+ *
+ * Deliberately outside the set: INVALID_CREDENTIAL (a rejected token fails
+ * identically every time), PROVIDER_ERROR (a 400 or a plan refusal), and ABORTED
+ * (the caller already cancelled).
+ */
+export declare const MINIMAX_CODE_RETRY_POLICY_CONFIG: {
+    mode: 'normal';
+    maxRetries: number;
+    retryableCodes: string[];
+    backoff: {
+        initialDelayMs: number;
+        maxDelayMs: number;
+        jitterRatio: number;
+    };
+};
+/** What one failed response means for the retry policy. */
+export interface MinimaxFailureClassification {
+    /** DSH error code; decides whether the route retries. */
+    code: string;
+    /** Message shown to the user, with the service's own text appended. */
+    message: string;
+    /** True only when the failure is worth retrying. */
+    retryable: boolean;
+}
+/**
+ * Classify one non-2xx response for the retry policy.
+ *
+ * A 401 on this route is the one failure with an unambiguous remedy, and it is the
+ * one the credentials rule exists for: the service answers
+ * \`{"code":401,"message":"token is required"}\` both when no credential was sent
+ * and when the one that was sent is no longer accepted, so the message names the
+ * sign-in path instead of asking the user to guess.
+ */
+export declare function classifyMinimaxFailure(status: number, bodyText: string): MinimaxFailureClassification;
+export interface MinimaxCodeAdapterOptions {
+    fetchFn?: typeof fetch;
+    /** Attachment seam: verified bytes for one durable image. */
+    attachments?: AttachmentImageReader;
+    /**
+     * The account pool, when this process installed one.
+     *
+     * With a pool the adapter rotates between accounts and lets a 429 cool one
+     * account down instead of taking the whole line offline; without one it keeps
+     * the single-credential behaviour it had before, reading and renewing the one
+     * stored credential. Both postures are supported because the pool is optional
+     * in a composition (a headless host, a test), and a missing pool must not make
+     * the route unusable.
+     */
+    accountPool?: MinimaxCodeAccountPool;
+}
+export declare class MinimaxCodeAdapter extends LlmAdapter {
+    private readonly store;
+    /**
+     * The JSON file fallback for the model selection.
+     *
+     * Every sibling line has one, and it is not dead weight even where a settings
+     * service exists: it is what a later run on a harness that dropped the register
+     * seam reads back.
+     */
+    private readonly modelSettings;
+    /**
+     * Registered model settings, when the harness still offers the register seam.
+     *
+     * Optional because the adapter is also constructed by tooling and tests that
+     * have no settings service; {@link settings} then reads the file directly, so
+     * both shapes answer the same three questions.
+     */
+    private readonly preferences;
+    private readonly options;
+    constructor(store?: MinimaxCodeCredentialStore, options?: MinimaxCodeAdapterOptions, modelSettings?: MinimaxCodeModelSettingsStore, preferences?: MinimaxCodePreferenceStore);
+    /**
+     * The current model selection.
+     *
+     * Synchronous on the register seam (the scope reads from memory) and a single
+     * file read otherwise. The loop over models that consults it runs on every
+     * model-picker query, so this is deliberately not memoized: a cached snapshot
+     * would keep serving a model the user disabled in the card until the process
+     * restarted, which is the complaint this whole settings surface exists to fix.
+     */
+    private settings;
+    /**
+     * The credential one request should present, and the pool account behind it.
+     *
+     * With a pool, the pool picks the account (rotation, cooldown, stickiness) and
+     * owns the refresh, so this must not read the single-credential file: that file
+     * mirrors one pooled account, and presenting it would silently pin every request
+     * to whichever account was mirrored last.
+     *
+     * Without a pool the previous behaviour is kept exactly, including the
+     * read-only-first refresh policy.
+     */
+    private acquireCredential;
+    /**
+     * Renew the credential the service just refused.
+     *
+     * With a pool, the account that failed is the one renewed, so the rotation lands
+     * on that account's own record instead of the single-credential file; without a
+     * pool the store's own forced refresh is what ran before the pool existed.
+     */
+    private renewCredential;
+    providerInfo(provider: string): LlmProviderInfo;
+    providerRetryPolicy(): ResolvedRetryPolicy;
+    imageRequestPricing(): undefined;
+    /**
+     * The hardcoded directory, narrowed to what the user enabled it to serve.
+     *
+     * Nothing is fetched: the listing route is unavailable on this endpoint, so a
+     * "live catalog" would be a request that can only ever fail.
+     *
+     * The line-wide switch is honoured before the selection is even resolved, so
+     * turning the card's switch off exposes no model at all — including the ones
+     * the user left ticked, which is what "off" has to mean if it is to mean
+     * anything.
+     */
+    listModels(provider?: string): Promise<readonly LlmModelInfo[]>;
+    /**
+     * One model's resolved metadata, read through the current selection.
+     *
+     * The effective context window is the override when one is saved, and the
+     * output cap is sized against that same number — a window the card shows and a
+     * cap the request path computes from a different one is precisely the drift
+     * this single resolver exists to prevent.
+     */
+    resolveModel(provider: string, modelId: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;
+    prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;
+    /**
+     * One request, with the line's default reasoning effort materialized.
+     *
+     * A caller that states an effort is passed through untouched: DSH materializes
+     * {@link resolveModel}'s default into the options for a picker-driven turn, so
+     * a value arriving here is a deliberate choice and must not be replaced. Only
+     * an unstated one is filled in, and only when the user actually configured a
+     * global level — the shipped default is "say nothing", because the model has
+     * its own and restating it in every body is a chance to disagree with it.
+     */
+    stream(options: GenerateOptions): AsyncIterable<StreamChunk>;
+    private requestStream;
+}
+export { PROVIDER_ID, MinimaxCodeCredentialStore };
+export { maxOutputTokensFor, clampOutputToContext };
+//# sourceMappingURL=adapter.d.ts.map

package/lib/types/host/minimax-code/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/minimax-code/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,EACL,UAAU,EAIV,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAEL,WAAW,EAMZ,MAAM,YAAY,CAAA;AASnB,OAAO,EACL,0BAA0B,EAC1B,6BAA6B,EAG7B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AAMzB,OAAO,EAIL,oBAAoB,EAIpB,kBAAkB,EAIlB,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAA;AACpB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAK/D;;;;;;;;;;;;GAYG;AACH,eAAO,MAAM,gCAAgC,EAAE;IAC7C,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAM7E,CAAA;AAOD,2DAA2D;AAC3D,MAAM,WAAW,4BAA4B;IAC3C,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ,uEAAuE;IACvE,OAAO,EAAE,MAAM,CAAA;IACf,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAA;CACnB;AAsBD;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,4BAA4B,CAuDrG;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,6DAA6D;IAC7D,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;;;;;;;OASG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAA;CACrC;AAiCD,qBAAa,kBAAmB,SAAQ,UAAU;IAKhD,OAAO,CAAC,QAAQ,CAAC,KAAK,CAA4B;IAClD;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,aAAa,CAA+B;IAC7D;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAwC;IACpE,OAAO,CAAC,QAAQ,CAAC,OAAO,CAA2B;gBAGjD,KAAK,GAAE,0BAA6D,EACpE,OAAO,GAAE,yBAA8B,EACvC,aAAa,GAAE,6BAAmE,EAClF,WAAW,CAAC,EAAE,0BAA0B;IAS1C;;;;;;;;OAQG;IACH,OAAO,CAAC,QAAQ;IAIhB;;;;;;;;;;OAUG;YACW,iBAAiB;IAY/B;;;;;;OAMG;YACW,eAAe;IAgB7B,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC;;;;;;;;;;OAUG;IACG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAerE;;;;;;;OAOG;IACG,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA2BpG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAOtG;;;;;;;;;OASG;IACI,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;YAiBpD,aAAa;CAoK7B;AAED,OAAO,EAAE,WAAW,EAAE,0BAA0B,EAAE,CAAA;AAClD,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,CAAA"}

package/lib/types/host/minimax-code/checkin-gateway.d.ts

@@ -0,0 +1,109 @@
+/**
+ * Wire half of the MiniMax Code daily check-in.
+ *
+ * Everything in this file is measured against, or ported from, the official
+ * client's own open source (`MiniMax-AI/minimax-code`, MIT):
+ * `packages/tui/src/checkin/http-gateway.ts` does the two check-in calls and
+ * `packages/tui/src/runtime/public-gateway.ts` builds the request. The wire
+ * shape was additionally verified live against the CN deployment with this
+ * machine's own credential (see the 0.2.0-rc.1-era probe notes in the
+ * changelog): `GET signin/status` and `POST signin/claim` answer exactly the
+ * shapes validated below, and a duplicate claim answers
+ * `claim_result: 2` (AlreadyClaimed) rather than an error.
+ *
+ * The `yy` / `x-timestamp` / `x-signature` headers are the same first-party
+ * attribution literals this package's `types.ts` product-token note discusses.
+ * The official source's own comment calls them wire-protocol constants that
+ * are "not credentials or a security boundary" — authorization is the Bearer
+ * token. Unlike the quota read (where they are optional and stay off by
+ * default), the check-in gateway refuses requests without them, so this
+ * feature cannot exist without sending them; that trade is recorded in the
+ * changelog and was made explicitly, not by default. The User-Agent stays the
+ * plugin's own honest one — it is NOT part of the signed surface.
+ */
+import type { MinimaxCodeRegion } from '../../shared/minimax-code-contracts.ts';
+/** Activity status surface; answers whether today is claimable or claimed. */
+export declare const SIGNIN_STATUS_PATH = "/minimax-cloud/api/v1/signin/status";
+/** Check-in surface; credits are granted by posting here once a day. */
+export declare const SIGNIN_CLAIM_PATH = "/minimax-cloud/api/v1/signin/claim";
+/** Account identity surface; resolves the realUserID the query string needs. */
+export declare const USER_INFO_PATH = "/v1/api/user/info";
+/** Day status values the panel reports. Mirrors the official SigninDayStatus. */
+export declare const SIGNIN_DAY_UPCOMING = 1;
+export declare const SIGNIN_DAY_CLAIMABLE = 2;
+export declare const SIGNIN_DAY_CLAIMED = 3;
+export declare const SIGNIN_DAY_DISABLED = 4;
+/** Claim outcomes the service reports. Mirrors the official SigninClaimResult. */
+export declare const SIGNIN_CLAIM_FRESH = 1;
+export declare const SIGNIN_CLAIM_ALREADY = 2;
+export declare const CHECKIN_TIMEOUT_MS = 30000;
+/** Origin the official client uses for this surface, per region. */
+export declare function checkinGatewayOrigin(region: MinimaxCodeRegion): string;
+export interface SigninDayItem {
+    day_no: number;
+    points: number;
+    bonus_points?: number;
+    status: number;
+    is_today: boolean;
+}
+export interface SigninPanel {
+    scene: number;
+    days: SigninDayItem[];
+}
+export interface ClaimSigninData {
+    claim_id: string;
+    claim_result: number;
+    day_no: number;
+    points: number;
+    expire_at_ms: number;
+    panel: SigninPanel;
+}
+/** Identity the check-in needs beyond the access token. */
+export interface MinimaxCodeAccountIdentity {
+    realUserID: string;
+    userName?: string;
+    subUserName?: string;
+    userEmail?: string;
+}
+/**
+ * Validate one panel response. Ported from the official
+ * `validateSigninPanel`: exactly seven days, day numbers 1..7 without
+ * repeats, at most one claimable and at most one "today". A panel that fails
+ * this is a wire surprise, and treating it as "nothing to do" would silently
+ * skip the day, so validation throws.
+ */
+export declare function validateSigninPanel(value: unknown): SigninPanel;
+/** Validate one claim response. Ported from the official `validateClaimSigninData`. */
+export declare function validateClaimSigninData(value: unknown): ClaimSigninData;
+/**
+ * The consecutive-claimed count ending today, from one panel.
+ *
+ * Ported from the official `getCurrentSigninStreak`: when today is claimed it
+ * counts; when today is still claimable the streak up to yesterday is what a
+ * claim would extend, so that is what the card shows.
+ */
+export declare function currentSigninStreak(days: readonly SigninDayItem[]): number;
+export interface CheckinHttpOptions {
+    fetchFn?: typeof fetch;
+    /** Clock injection for tests. */
+    nowMs?: () => number;
+    /** `desktop_version` the request reports; the plugin version in production. */
+    appVersion?: string;
+    signal?: AbortSignal;
+}
+export declare class MinimaxCodeCheckinHttpError extends Error {
+    readonly status: number | null;
+    constructor(message: string, status: number | null);
+}
+/**
+ * Resolve the account's realUserID (and display fields) through the identity
+ * surface. The check-in query string needs realUserID and the OAuth document
+ * does not carry it, so it is resolved once per scheduler pass and cached in
+ * the check-in state afterwards.
+ */
+export declare function fetchAccountIdentity(accessToken: string, region: MinimaxCodeRegion, options?: CheckinHttpOptions): Promise<MinimaxCodeAccountIdentity>;
+/** Read the seven-day panel; throws on transport, HTTP, or shape failures. */
+export declare function fetchSigninPanel(accessToken: string, realUserID: string, region: MinimaxCodeRegion, options?: CheckinHttpOptions): Promise<SigninPanel>;
+/** Claim today's credit; the response carries the fresh panel. */
+export declare function claimSignin(accessToken: string, realUserID: string, region: MinimaxCodeRegion, options?: CheckinHttpOptions): Promise<ClaimSigninData>;
+//# sourceMappingURL=checkin-gateway.d.ts.map

package/lib/types/host/minimax-code/checkin-gateway.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"checkin-gateway.d.ts","sourceRoot":"","sources":["../../../../src/host/minimax-code/checkin-gateway.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;GAsBG;AAGH,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAA;AAG/E,8EAA8E;AAC9E,eAAO,MAAM,kBAAkB,wCAAwC,CAAA;AACvE,wEAAwE;AACxE,eAAO,MAAM,iBAAiB,uCAAuC,CAAA;AACrE,gFAAgF;AAChF,eAAO,MAAM,cAAc,sBAAsB,CAAA;AAEjD,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,IAAI,CAAA;AACpC,eAAO,MAAM,oBAAoB,IAAI,CAAA;AACrC,eAAO,MAAM,kBAAkB,IAAI,CAAA;AACnC,eAAO,MAAM,mBAAmB,IAAI,CAAA;AAEpC,kFAAkF;AAClF,eAAO,MAAM,kBAAkB,IAAI,CAAA;AACnC,eAAO,MAAM,oBAAoB,IAAI,CAAA;AAErC,eAAO,MAAM,kBAAkB,QAAS,CAAA;AAexC,oEAAoE;AACpE,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,iBAAiB,GAAG,MAAM,CAEtE;AAED,MAAM,WAAW,aAAa;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,MAAM,WAAW,WAAW;IAC1B,KAAK,EAAE,MAAM,CAAA;IACb,IAAI,EAAE,aAAa,EAAE,CAAA;CACtB;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,MAAM,CAAA;IAChB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,EAAE,MAAM,CAAA;IACd,MAAM,EAAE,MAAM,CAAA;IACd,YAAY,EAAE,MAAM,CAAA;IACpB,KAAK,EAAE,WAAW,CAAA;CACnB;AAED,2DAA2D;AAC3D,MAAM,WAAW,0BAA0B;IACzC,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAMD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,GAAG,WAAW,CAyB/D;AAED,uFAAuF;AACvF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAUvE;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,SAAS,aAAa,EAAE,GAAG,MAAM,CAa1E;AAuHD,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,iCAAiC;IACjC,KAAK,CAAC,EAAE,MAAM,MAAM,CAAA;IACpB,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAED,qBAAa,2BAA4B,SAAQ,KAAK;IAGlD,QAAQ,CAAC,MAAM,EAAE,MAAM,GAAG,IAAI;gBAD9B,OAAO,EAAE,MAAM,EACN,MAAM,EAAE,MAAM,GAAG,IAAI;CAKjC;AAMD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,MAAM,EACnB,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,0BAA0B,CAAC,CAuCrC;AA0DD,8EAA8E;AAC9E,wBAAsB,gBAAgB,CACpC,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,WAAW,CAAC,CAEtB;AAED,kEAAkE;AAClE,wBAAsB,WAAW,CAC/B,WAAW,EAAE,MAAM,EACnB,UAAU,EAAE,MAAM,EAClB,MAAM,EAAE,iBAAiB,EACzB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,eAAe,CAAC,CAE1B"}

package/lib/types/host/minimax-code/checkin.d.ts

@@ -0,0 +1,150 @@
+/**
+ * Daily check-in scheduler for the MiniMax Code line.
+ *
+ * Modeled on the sibling WorkBuddy scheduler and kept semantically identical
+ * where the two services face the same problem; the wire half lives in
+ * ./checkin-gateway.ts (official-client recipe, verified live).
+ *
+ * - **Both regions.** The official client's public gateway has an origin per
+ *   region, so an account signs in against its own region's origin. There is
+ *   no CN-only carve-out like WorkBuddy's: the CLI ships the same surface
+ *   worldwide.
+ * - **Idempotent.** The panel is read first; an account whose today is already
+ *   claimed (by anyone) is only recorded. A duplicate claim answers
+ *   `claim_result: 2` (AlreadyClaimed), which is a success, never a retry.
+ * - **Patient with the day.** A today that is neither claimable nor claimed
+ *   (upcoming/disabled) is parked and re-checked on an hourly cadence rather
+ *   than abandoned: the activity flips on its own schedule, and the host
+ *   usually boots before it does.
+ * - **Bounded.** A failing account is retried at most {@link CHECKIN_ATTEMPT_CAP}
+ *   times a day, so a broken account cannot turn the ten-minute tick into a
+ *   request loop. A manual run ignores the cap and the toggle, like the
+ *   workbuddy card's "check in now", and is queued behind an in-flight run.
+ *
+ * Credentials stay host-side: the only write beyond the state file is the
+ * account pool's own refresh write-back, reused here unchanged through
+ * `getFreshCredential` / `renewCredential`.
+ */
+import type { MinimaxCodeCheckinSummary } from '../../shared/minimax-code-contracts.ts';
+import type { MinimaxCodeAccountPool } from './account-pool.ts';
+/**
+ * Scheduler cadence. The first tick at host startup is the daily run; the
+ * interval keeps a long-lived process signing in on later days without a
+ * restart. Idle ticks cost no requests — the day state short-circuits them.
+ */
+export declare const CHECKIN_TICK_MS: number;
+/** Daily retry ceiling for one account after a failed attempt. */
+export declare const CHECKIN_ATTEMPT_CAP = 3;
+/**
+ * How long a not-yet-claimable today waits before the panel is polled again.
+ * Same reasoning as the workbuddy scheduler: the activity opens on its own
+ * schedule, and the first answer of the day is frequently "not open yet".
+ */
+export declare const CHECKIN_INACTIVE_RECHECK_MS: number;
+/** State document the scheduler keeps beside the other plugin stores. */
+export declare function checkinStatePath(): string;
+/** Local calendar day an instant belongs to; state entries are keyed by it. */
+export declare function localDateString(nowMs: number): string;
+/** The slice of the account pool the scheduler uses. */
+export type MinimaxCodeCheckinPool = Pick<MinimaxCodeAccountPool, 'listAccounts' | 'getFreshCredential' | 'renewCredential'>;
+export interface MinimaxCodeCheckinServiceOptions {
+    fetchFn?: typeof fetch;
+    /** State document path; tests redirect it, production uses {@link checkinStatePath}. */
+    statePath?: string;
+    /** Live preference, re-read on every tick so the toggle applies at once. */
+    settings: () => {
+        enabled: boolean;
+    };
+    /**
+     * Resolves once the preference store has read its stored document, so the
+     * startup pass cannot act on a default the stored document is about to
+     * overwrite. Optional for callers whose settings are already in memory.
+     */
+    ready?: () => Promise<void>;
+    /** Clock injection for tests. */
+    now?: () => number;
+    /** `desktop_version` the wire request reports; the plugin version in production. */
+    appVersion?: string;
+    logger?: {
+        info(message: string): void;
+        warn(message: string): void;
+    };
+}
+/**
+ * The check-in scheduler. One instance per plugin load; the host owns the
+ * interval and clears it from the same `ctx.effect` that created it.
+ */
+export declare class MinimaxCodeCheckinService {
+    private readonly pool;
+    private readonly options;
+    private readonly fetchFn;
+    private readonly statePath;
+    private readonly now;
+    private readonly logger;
+    private readonly appVersion;
+    private state;
+    private identities;
+    private loaded;
+    /** Passes waiting to run, in order; `true` marks a manual pass. */
+    private readonly queue;
+    /** The drain loop currently working the queue, if any. */
+    private draining;
+    private lastRunAt;
+    /** Memoized preference warmup, so it is awaited once however many passes run. */
+    private readyWait;
+    constructor(pool: MinimaxCodeCheckinPool, options: MinimaxCodeCheckinServiceOptions);
+    /**
+     * One scheduler pass. Automatic passes honour the toggle and the retry cap;
+     * a manual pass (`manual: true`, the card's "check in now") ignores both
+     * but still respects an account already signed in today.
+     *
+     * A manual pass that lands while a run is already in flight is *queued*, not
+     * absorbed: joining the running pass would silently discard the one thing the
+     * button promises, that the retry cap and the toggle are bypassed now.
+     */
+    tick(manual?: boolean): Promise<void>;
+    private drain;
+    private runQueue;
+    private run;
+    /** Wait for the preference store's warmup read, once. */
+    private ready;
+    /**
+     * Resolve the account's realUserID, cached across days.
+     *
+     * The OAuth document does not carry it and the check-in query string needs
+     * it, so it is fetched from the identity surface once and kept in the state
+     * document. The region is cached alongside because the identity call's
+     * origin depends on it.
+     */
+    private identityFor;
+    /** Check one account in, recording the outcome in its today's entry. */
+    private checkinOne;
+    /**
+     * One full try for one account: identity, panel, and — when today is
+     * claimable — the claim. Settles the entry on every outcome; throws for the
+     * caller's renew-and-retry or attempt bookkeeping.
+     */
+    private attemptOnce;
+    /** The status call, against the current credential. */
+    private panel;
+    /** The claim call, against the current credential. */
+    private claim;
+    /**
+     * Fold one panel into the day's entry.
+     *
+     * Returns true when the entry is settled for the day (claimed already, or
+     * parked inactive): the caller then skips the claim. Today claimable is the
+     * one answer that returns false.
+     */
+    private recordPanelOutcome;
+    /** Record a confirmed sign-in, clearing the transient failure bookkeeping. */
+    private markSignedIn;
+    /**
+     * The aggregate the settings card renders. Reads only local state and the
+     * account list; it never spends a network request.
+     */
+    summary(): Promise<MinimaxCodeCheckinSummary>;
+    private load;
+    private save;
+}
+//# sourceMappingURL=checkin.d.ts.map