@eddyskywalker/dsh-chatgpt-subscription 0.13.2 → 0.15.0

package/lib/types/host/codex-adopt.d.ts

@@ -0,0 +1,255 @@
+/**
+ * OPT-IN adoption of a pre-existing Codex CLI sign-in.
+ *
+ * WHAT THIS IS FOR. A user who already runs the unmodified Codex CLI is already
+ * signed in to the very subscription this provider serves. Asking them to sign in
+ * a second time is pure friction, so this module offers the one thing that
+ * removes it: reading back the credential the CLI itself stored in
+ * `$CODEX_HOME/auth.json` (`~/.codex/auth.json` when the variable is unset). It
+ * is opt-in — nothing here runs until the user asks for it.
+ *
+ * ---------------------------------------------------------------------------
+ * RULE 1 — THIS MODULE NEVER WRITES. IT IS A READER, AND ONLY A READER.
+ * ---------------------------------------------------------------------------
+ * It must not create, modify, move or delete any file belonging to the Codex CLI.
+ * No file this module touches is ever opened for writing, no directory is
+ * created, nothing is renamed and nothing is unlinked. The guarantee is
+ * structural rather than a promise in prose: the module imports exactly two
+ * functions BY NAME from 'node:fs/promises' — readFile and stat — instead of the
+ * whole namespace, so introducing a write would require a visible change to the
+ * import list, which is the line a reviewer reads first. Nothing exported here
+ * writes. The tests assert the stronger, observable form of the rule: a
+ * credential file's bytes, size and mtime are identical before and after both
+ * entry points run, and its directory gains no entries.
+ *
+ * ---------------------------------------------------------------------------
+ * RULE 2 — PRESENCE AND CONTENT ARE TWO SEPARATE FUNCTIONS
+ * ---------------------------------------------------------------------------
+ * codexCliCredentialPresence() is cheap enough to call on plugin startup and
+ * answers only yes/no: it stats the candidate and never opens it for reading. It
+ * exists so the settings card can offer the import before the user has agreed to
+ * it, and so a user who never opts in never has their token read at all.
+ *
+ * readCodexCliCredentials() is the full read, and it is called only AFTER the
+ * user explicitly opts in. Keeping the two apart is the whole point: a startup
+ * path that slurped the file "just in case" would make the opt-in decorative.
+ *
+ * ---------------------------------------------------------------------------
+ * RULE 3 — AN ADOPTED CREDENTIAL IS A SNAPSHOT, AND THIS PLUGIN NEVER REFRESHES IT
+ * ---------------------------------------------------------------------------
+ * An adopted credential is used only while its own accessToken is still valid.
+ * Once it is expired the pool reports it as expired and tells the user to sign in
+ * again in the Codex CLI and re-adopt. That is deliberate, not a gap: the
+ * ChatGPT refresh token the CLI stores ROTATES, and the CLI refreshes its own
+ * file in place. Two processes refreshing the same grant therefore invalidate
+ * each other — whoever loses the race holds a token the server has already
+ * retired, and the user ends up signed OUT of the Codex CLI by this plugin's good
+ * intentions. An in-process single-flight cannot fix that, because the race is
+ * across PROCESSES: this plugin and the CLI are separate programs with separate
+ * memories, and the only shared state between them is the file — which this
+ * module must not write back into (Rule 1).
+ *
+ * So the honest contract is: borrow the access token for as long as the CLI itself
+ * vouched for it, and never touch the refresh token. Expiry is therefore part of
+ * the adoption decision rather than a detail — see
+ * {@link isAdoptedCodexCredentialExpired}.
+ *
+ * The marker the pool chunk must honour is the literal 'adopted: true' plus
+ * {@link isAdoptedCodexCredential}; an account carrying it must be treated as
+ * read-only, non-refreshable and disposable. There is deliberately no refresh
+ * function in this module to find in the first place.
+ *
+ * ---------------------------------------------------------------------------
+ * RULE 4 — AN UNRECOGNISED SHAPE YIELDS undefined, NEVER AN EXCEPTION
+ * ---------------------------------------------------------------------------
+ * The card shows 'unrecognised local sign-in format' for undefined, which is a far
+ * better outcome than a thrown error escaping into the settings route. Nothing is
+ * guessed: a document in another auth_mode, a missing or non-object tokens
+ * block, a missing access or refresh token, an access token that is not a JWT
+ * with a usable 'exp', an unreadable or unparsable file — all of them are
+ * undefined. Extra and unknown fields are ignored rather than rejected, so a
+ * future CLI that adds one does not break adoption.
+ *
+ * THE TRAP THIS PARSER EXISTS TO AVOID. A Codex auth.json is NOT a flat bag of
+ * tokens. It is a document that may carry an API key alongside the OAuth tokens,
+ * and a "find the first accessToken anywhere in the JSON" scan would pick
+ * whichever one the serializer happened to emit first — which is how an API key
+ * or an unrelated token ends up presented to the Responses API as the user's
+ * subscription credential. The read is therefore a direct, specific lookup of
+ * tokens.access_token and its siblings — never a tree walk — and the test suite
+ * holds a fixture carrying an unrelated token beside the real one and asserts
+ * which comes back.
+ *
+ * ---------------------------------------------------------------------------
+ * THE CLAIMS ARE DERIVED LOCALLY, NEVER ASKED OF ANYBODY
+ * ---------------------------------------------------------------------------
+ * expiresAt comes from the access token's own 'exp' claim, email and planType
+ * from the id token's claims. The JWT payload is decoded in process; no token is
+ * ever sent anywhere to be inspected, and no token value is logged or returned
+ * from anything but the credential object the caller asked for.
+ *
+ * WHY EXPIRY IS REFUSED RATHER THAN DEFAULTED. A snapshot whose validity cannot
+ * be established must not be used. Rather than stamping "now" or "never" and
+ * hoping, this module yields undefined: the card then says the local sign-in
+ * format is unrecognised, which is true, instead of importing a credential that
+ * would 401 on the first request.
+ */
+import type { StoredOAuthCredentials } from './token-store.ts';
+/**
+ * Environment variable that relocates the Codex CLI's home directory.
+ *
+ * Highest precedence, and honoured exactly as the CLI honours it: when it is set
+ * to a non-blank value it names the home that holds auth.json, whatever the
+ * platform's conventional location happens to be. This is also what makes the
+ * whole module testable without touching a developer's real profile.
+ */
+export declare const CODEX_HOME_ENV = "CODEX_HOME";
+/** File name of the credential document inside the Codex home. */
+export declare const CODEX_CLI_CREDENTIAL_FILE = "auth.json";
+/**
+ * Top-level key holding the OAuth tokens.
+ *
+ * Named as a constant because the specificity of this key IS the defence
+ * described in the module comment: the read addresses this key, not the first
+ * token it can find anywhere in the document.
+ */
+export declare const CODEX_CLI_TOKENS_KEY = "tokens";
+/**
+ * The one auth_mode this provider can adopt.
+ *
+ * A Codex home may also hold an API-key sign-in, which is a different kind of
+ * credential for a different billing arrangement. Adopting it as a subscription
+ * sign-in would present the wrong credential to the Responses API, so the mode is
+ * checked rather than assumed: an unrecognised mode is an unrecognised document.
+ */
+export declare const CODEX_CLI_CHATGPT_AUTH_MODE = "chatgpt";
+/** Where an adopted snapshot came from, for the card and for the pool record. */
+export declare const CODEX_CLI_CREDENTIAL_SOURCE = "codex";
+/**
+ * What the user is told when an adopted credential has aged out.
+ *
+ * Exported so the pool report and the settings card say the same sentence, and
+ * so the instruction is stated once: the re-sign-in happens in the CODEX CLI, not
+ * here, and the import has to be repeated afterwards.
+ */
+export declare const ADOPTED_CODEX_CREDENTIAL_EXPIRED_HINT: string;
+/** One adopted credential: the store's own credential shape plus its provenance. */
+export interface CodexCliAdoptedCredential {
+    /**
+     * The pool marker. Literal true on every snapshot this module returns.
+     *
+     * A discriminant rather than a description: a pool chunk that stores this record
+     * must refuse to refresh it, and a boolean it can test is harder to overlook
+     * than a comment it can read past.
+     */
+    readonly adopted: true;
+    /** Which local sign-in this was taken from. */
+    readonly source: typeof CODEX_CLI_CREDENTIAL_SOURCE;
+    /** The exact file it was read from, so the card can name it. */
+    readonly sourcePath: string;
+    /** The credential in the store's own shape, ready to be persisted by the caller. */
+    readonly credentials: StoredOAuthCredentials;
+}
+/**
+ * The Codex CLI's home directory.
+ *
+ * The environment override wins whenever it is set to a non-blank value — a blank
+ * or whitespace-only variable is treated as unset rather than as "the directory
+ * whose name is empty", which on Windows would resolve to a drive-relative path.
+ * Otherwise the conventional home/.codex directory is used, os.homedir() being
+ * the same %USERPROFILE% on Windows and ~ on POSIX that the CLI itself uses.
+ *
+ * Read at CALL time rather than captured in a module constant: a test (or an
+ * embedder) that sets the variable after import must see the change.
+ */
+export declare function codexHomeDir(): string;
+/**
+ * Every path this module will look at, most authoritative first.
+ *
+ * A single candidate, which is a judgement call stated plainly. The Claude reader
+ * in this package also falls back to the conventional home when the environment
+ * override points somewhere else; here the override IS the user's own statement of
+ * where this CLI keeps its sign-in, and honouring a stale scratch directory is
+ * more dangerous than reporting nothing: a snapshot belonging to a profile the CLI
+ * is not currently using would be adopted silently. The path actually consulted is
+ * returned and printed by the caller, so "not found" is always accompanied by the
+ * exact place that was looked at.
+ *
+ * A pure function — no filesystem access at all — so it is safe to call just to
+ * render the card, and so its precedence is testable without touching a disk.
+ */
+export declare function codexCliCredentialPaths(): readonly string[];
+/**
+ * Is there a local Codex CLI sign-in to offer?
+ *
+ * Safe on plugin startup: this NEVER opens a candidate for reading, so a user who
+ * never opts in never has the credential's contents touched — not by this
+ * function, not by the route that renders the card. Only stat runs, which reveals
+ * existence and timestamps and nothing else.
+ *
+ * Deliberately NOT reported here: whether the file is valid, expired, or even
+ * JSON. Answering that would require the read this function exists to avoid, and
+ * the card does not need it — validity is answered by the read, after opt-in, and
+ * lands on the card as either a credential or 'unrecognised local sign-in
+ * format'.
+ *
+ * A boolean, rather than the record the Claude reader returns, because the two
+ * callers want different things and neither needs the other's shape: the status
+ * route wants a flag, and reports the path it consulted beside it. paths
+ * is injectable so tests drive it against fixtures instead of a real profile;
+ * production callers take the default.
+ */
+export declare function codexCliCredentialPresence(paths?: readonly string[]): Promise<boolean>;
+/**
+ * Map one parsed credential document onto the store's credential shape.
+ *
+ * Pure and exported so the format rules can be tested without a filesystem, and
+ * so a later chunk that reads the document from somewhere else (a backup, a pasted
+ * blob) reuses the one set of rules instead of growing a second, drifting copy.
+ *
+ * Returns undefined for every shape it does not recognise, and never throws — see
+ * Rule 4 in the module comment. The gate is deliberately narrow: the document must
+ * be a JSON object in the ChatGPT auth mode, its tokens block must be an object,
+ * and it must carry BOTH a non-empty access token and a non-empty refresh token.
+ * An access token alone is not adopted because the store's record is a sign-in,
+ * not a bare token, and a record with an empty one could never be re-recognised.
+ *
+ * The unrelated-token trap is handled by construction: value.tokens is addressed
+ * directly and no other key of the document is ever traversed, so whatever else
+ * the file carries cannot reach the result.
+ */
+export declare function parseAdoptedCodexCredential(value: unknown, sourcePath: string): CodexCliAdoptedCredential | undefined;
+/**
+ * Read the local Codex CLI sign-in; the first usable candidate wins.
+ *
+ * ONLY call this after the user has explicitly opted in — see the module comment.
+ *
+ * Never throws and never rejects: an absent file, an unreadable file, a file that
+ * is not JSON, and a JSON document of an unrecognised shape all produce undefined,
+ * which the card renders as 'unrecognised local sign-in format'. A settings route
+ * must not be able to fail because a user's file was mid-write.
+ */
+export declare function readCodexCliCredentials(paths?: readonly string[]): Promise<CodexCliAdoptedCredential | undefined>;
+/**
+ * Whether a value carries the adopted marker.
+ *
+ * The predicate the pool chunk tests a stored credential with before deciding
+ * whether it may ever be refreshed. It recognises this module's snapshot and
+ * nothing else: a plain store credential has no 'adopted' field and must NOT be
+ * mistaken for one, because treating a plugin-owned account as a disposable
+ * snapshot would freeze an account the user signed in here.
+ */
+export declare function isAdoptedCodexCredential(value: unknown): value is CodexCliAdoptedCredential;
+/**
+ * Whether an adopted credential's access token is already unusable.
+ *
+ * A structural mirror of the expiry test the OAuth module applies to its own
+ * credentials (expiresAt - Date.now() > 0), asked of a pooled credential so the
+ * pool can refuse it WITHOUT ever reaching for a refresh this module deliberately
+ * does not perform. A non-finite expiresAt counts as expired, matching the
+ * refusal in the reader: no established validity, no use.
+ *
+ * now is injectable so a test can reason about a fixed clock.
+ */
+export declare function isAdoptedCodexCredentialExpired(credential: Pick<StoredOAuthCredentials, 'expiresAt'>, now?: number): boolean;
+//# sourceMappingURL=codex-adopt.d.ts.map

package/lib/types/host/codex-adopt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-adopt.d.ts","sourceRoot":"","sources":["../../../src/host/codex-adopt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+FG;AAUH,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAE9D;;;;;;;GAOG;AACH,eAAO,MAAM,cAAc,eAAe,CAAA;AAE1C,kEAAkE;AAClE,eAAO,MAAM,yBAAyB,cAAc,CAAA;AAEpD;;;;;;GAMG;AACH,eAAO,MAAM,oBAAoB,WAAW,CAAA;AAE5C;;;;;;;GAOG;AACH,eAAO,MAAM,2BAA2B,YAAY,CAAA;AAEpD,iFAAiF;AACjF,eAAO,MAAM,2BAA2B,UAAU,CAAA;AAKlD;;;;;;GAMG;AACH,eAAO,MAAM,qCAAqC,QAEM,CAAA;AAExD,oFAAoF;AACpF,MAAM,WAAW,yBAAyB;IACxC;;;;;;OAMG;IACH,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;IACtB,+CAA+C;IAC/C,QAAQ,CAAC,MAAM,EAAE,OAAO,2BAA2B,CAAA;IACnD,gEAAgE;IAChE,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,oFAAoF;IACpF,QAAQ,CAAC,WAAW,EAAE,sBAAsB,CAAA;CAC7C;AAaD;;;;;;;;;;;GAWG;AACH,wBAAgB,YAAY,IAAI,MAAM,CAIrC;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,uBAAuB,IAAI,SAAS,MAAM,EAAE,CAE3D;AAqBD;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAsB,0BAA0B,CAC9C,KAAK,GAAE,SAAS,MAAM,EAA8B,GACnD,OAAO,CAAC,OAAO,CAAC,CAKlB;AA8CD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,2BAA2B,CACzC,KAAK,EAAE,OAAO,EACd,UAAU,EAAE,MAAM,GACjB,yBAAyB,GAAG,SAAS,CA2CvC;AAED;;;;;;;;;GASG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,GAAE,SAAS,MAAM,EAA8B,GACnD,OAAO,CAAC,yBAAyB,GAAG,SAAS,CAAC,CAchD;AAED;;;;;;;;GAQG;AACH,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAK3F;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,IAAI,CAAC,sBAAsB,EAAE,WAAW,CAAC,EACrD,GAAG,GAAE,MAAmB,GACvB,OAAO,CAGT"}

package/lib/types/host/reasoning-collapse-guard/index.d.ts

@@ -12,6 +12,22 @@
  * degenerate stream scores near one. On a hit it stops yielding chunks, so the
  * in-flight request ends, and lets the turn resume on a fresh step.
  *
+ * Uniqueness alone only sees verbatim repetition. A stream can restate one
+ * conclusion over and over in fresh words, score 0.48 where the threshold is
+ * 0.85, and run to the output ceiling untouched. So a second, independent
+ * signal scores the same window for recurrence: how strongly each sentence
+ * repeats something the model already said at least `semanticLag` sentences
+ * earlier. Enumerative reasoning repeats itself too, but adjacently — each item
+ * borrows the previous item's frame — and recurrence ignores adjacency, which
+ * is what separates the two.
+ *
+ * Neither signal stops anything on its own. A break needs both over their
+ * thresholds in the same window, and then `semanticConfirmations` consecutive
+ * such windows: one signal alone, or a single anomalous window, is logged and
+ * released. That gradient is the whole design. A guard that cuts a healthy
+ * answer is worse than one that lets a runaway finish, because the user sees a
+ * turn stop mid-sentence with no explanation, and the fix costs a whole turn.
+ *
  * Seam choice: the guard wraps `llm/stream`, not `agent/assistant-stream`.
  * `agent/assistant-stream` is emit-mode — it can observe but cannot stop a
  * stream — and it does not exist before harness 0.1.5, which would make the
@@ -120,6 +136,91 @@ export interface GuardOptions {
     cooldownMs?: number;
     /** Model ids to watch; empty watches every model. */
     includeModels?: string[];
+    /**
+     * Recurrence score at or above which the semantic signal is considered to
+     * hold (default 0.35).
+     *
+     * Measured on the trailing window: the three healthy fixtures peak at 0.19,
+     * 0.17 and 0.17 across every streaming prefix, while a paraphrased loop and
+     * the verbatim loop score 0.75 and 0.99. 0.35 sits near the geometric mean
+     * of that gap, roughly 1.8x above the worst healthy prefix.
+     */
+    semanticThreshold?: number;
+    /**
+     * Sentences a claim must be separated from to count as recurrence
+     * (default 6).
+     *
+     * Zero would make healthy enumeration look degenerate: item N of a list
+     * legitimately shares most of its wording with item N-1. Requiring the
+     * earlier sentence to be at least this far back keeps the measurement on
+     * "the model said this before" rather than "the model is still on this point".
+     */
+    semanticLag?: number;
+    /**
+     * Characters required before the semantic signal is scored (default 360).
+     *
+     * Deliberately its own floor, well below `minWindowChars`: a real trace
+     * emitted 16 steps of which only one crossed 1500 characters, so the
+     * literal signal saw a single step of a whole turn. The two floors are
+     * separate knobs because they answer different questions — the literal one
+     * is about how much text a duplicate needs to be visible in, the semantic
+     * one about how much text a recurrence needs to be measurable in.
+     */
+    semanticMinChars?: number;
+    /** Sentences required before recurrence is scored (default 8). */
+    semanticMinSentences?: number;
+    /**
+     * Consecutive windows in which both signals must hold before a break
+     * (default 3).
+     *
+     * Counted independently of the per-turn break budget, which bounds how often
+     * the guard may act, not how sure it must be. A stream delivers a scoring
+     * window every few dozen characters, so three confirmations cost a few
+     * hundred wasted tokens against a runaway measured in the tens of thousands.
+     */
+    semanticConfirmations?: number;
+    /**
+     * Lowest literal score the low-literal path will act on (default 0.6).
+     *
+     * A paraphrased loop sits far below `threshold` — measured at 0.676 for a
+     * model restating twelve conclusions in fresh words, against 0.85 for
+     * verbatim repetition. So a strong semantic signal has to be allowed to
+     * carry a decision the literal signal cannot make on its own.
+     *
+     * The floor exists because a low score is not the same as a high one: 0.6 is
+     * evidence that something is repeating, 0.2 is a short trace that has not
+     * repeated long enough to say anything. Measured healthy literal peaks at
+     * 0.276, so 0.6 keeps a 2.2x margin over every healthy prefix.
+     */
+    semanticLiteralFloor?: number;
+    /**
+     * Semantic score the low-literal path demands (default 0.45).
+     *
+     * Strictly greater than `semanticThreshold`, and validated as such. The literal
+     * evidence on this path is weaker by construction, so the semantic evidence
+     * has to be stronger: 0.45 against a measured healthy peak of 0.194 is a
+     * 2.3x margin, while a paraphrase loop measures 0.77.
+     */
+    semanticStrictThreshold?: number;
+    /**
+     * Most of a window's sentences may be distinct and still be eligible for the
+     * low-literal path (default 0.47).
+     *
+     * This is the dimension that separates a model circling from a model
+     * listing. Both reuse a frame heavily and both score high on recurrence, but
+     * a list writes a sentence that has never been written before on every line
+     * — measured at 1.000 distinct, against 0.42 for a paraphrase loop and 0.075
+     * for a verbatim one. Recurrence says the wording comes back; this says
+     * whether anything at all was new.
+     */
+    semanticDistinctCeiling?: number;
+    /**
+     * Consecutive windows the low-literal path needs (default 5).
+     *
+     * Strictly greater than `semanticConfirmations`, and validated as such. The path is
+     * acting on weaker evidence, so it also waits longer before it acts.
+     */
+    semanticStrictConfirmations?: number;
     /** Injectable clock, so the cooldown is testable without a timer. */
     now?: () => number;
 }
@@ -132,6 +233,15 @@ export interface ResolvedGuardOptions {
     maxBreaksPerTurn: number;
     cooldownMs: number;
     includeModels: string[];
+    semanticThreshold: number;
+    semanticLag: number;
+    semanticMinChars: number;
+    semanticMinSentences: number;
+    semanticConfirmations: number;
+    semanticLiteralFloor: number;
+    semanticStrictThreshold: number;
+    semanticDistinctCeiling: number;
+    semanticStrictConfirmations: number;
     now: () => number;
 }
 export declare const DEFAULT_GUARD_OPTIONS: ResolvedGuardOptions;
@@ -151,6 +261,62 @@ export declare function resolveGuardOptions(options?: GuardOptions): ResolvedGua
  * @returns collapse score in [0,1]; 0 means every n-gram is unique.
  */
 export declare function collapseScore(window: string, n: number): number;
+/**
+ * Split reasoning text into sentences, for mixed CJK and Latin streams.
+ *
+ * A Chinese full stop ends a sentence whatever follows it. An ASCII `.!?` only
+ * ends one when whitespace or the end of the text follows, because the same
+ * characters carry out decimals, file names and version numbers
+ * (`selectors.test.ts:745`, `3.14`) that must not become sentence
+ * edges. Whitespace runs collapse and case folds, so a difference in spacing
+ * or capitalisation cannot read as a difference in wording.
+ *
+ * @param text - reasoning text, typically one trailing window.
+ * @returns non-empty normalized sentences, in order.
+ */
+export declare function splitSentences(text: string): string[];
+/**
+ * How strongly a window keeps returning to sentences it already stated.
+ *
+ * Each sentence is compared against every sentence at least `lag` positions earlier
+ * and keeps the best match; the score is the mean of those best matches. The
+ * comparison is normalized (Jaccard), so two sentences match on shared wording
+ * rather than on shared length, and character n-grams are used rather than words
+ * because no tokenizer is available here, and none would survive a CJK/Latin
+ * mix without segmenting Chinese first.
+ *
+ * Two properties matter more than the exact number. The score saturates — a
+ * twelve-sentence loop and a four-hundred-sentence one both approach one — so
+ * it does not drift with length the way a mean pairwise similarity does, and
+ * it does not reward a long answer merely for containing more pairs. And the
+ * lag is what makes it safe to ship: healthy enumeration reuses its framing
+ * from the sentence immediately before, which this metric cannot see.
+ *
+ * @param window - trailing reasoning characters.
+ * @param lag - sentences a claim must be separated from to count as recurrence.
+ * @returns recurrence score in [0,1]; 0 means nothing recurs, or too little text to tell.
+ */
+export declare function semanticRecurrence(window: string, lag: number): number;
+/**
+ * The share of a window's sentences that have never been said before.
+ *
+ * Recurrence cannot tell a model that is circling from a model that is
+ * listing, because a list reuses its frame as heavily as a loop does and
+ * scores just as high. The difference is that a list writes a new sentence on
+ * every line. Measured over a trailing window: 0.075 for the verbatim loop,
+ * 0.42 for a paraphrase loop, 1.000 for every healthy fixture and for every
+ * list shape tried.
+ *
+ * Equality is exact and on the normalized sentence, which is what keeps the
+ * lists out. Two rows differing only by a row number are 0.86 similar by
+ * `semanticRecurrence` and 1.000 distinct here, and that gap is the whole point: the
+ * fuzzy measure asks whether the wording came back, this one asks whether
+ * anything was new.
+ *
+ * @param window - trailing reasoning characters.
+ * @returns distinct share in (0,1]; 1 when every sentence is unique.
+ */
+export declare function distinctSentenceRatio(window: string): number;
 export declare const RESUME_HINT: string;
 /** The second resume message, used once a resume has also collapsed. */
 export declare const RESUME_HINT_STRICT: string;

package/lib/types/host/reasoning-collapse-guard/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/host/reasoning-collapse-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyCG;AAKH;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IACzC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAA;IACrB,MAAM,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACzF,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AAED,+DAA+D;AAC/D,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,MAAM,aAAa,CAAC,UAAU,CAAC,KAClC,aAAa,CAAC,UAAU,CAAC,CAAA;AAE9B,2EAA2E;AAC3E,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,KAAK,IAAI,CAAA;AAE3E,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,uBAAuB,CAAA;AAEzE,0DAA0D;AAC1D,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,CACH,KAAK,EAAE,YAAY,GAAG,eAAe,GAAG,gBAAgB,EACxD,QAAQ,EAAE,aAAa,EACvB,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAA;IACZ,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,CAAA;IACpD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;CAC5D;AAED,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,GAAG,EAAE,MAAM,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,qBAAqB,EAAE,oBASnC,CAAA;AAUD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,YAAiB,GAAG,oBAAoB,CAiCpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU/D;AACD,eAAO,MAAM,WAAW,QAGuB,CAAA;AAE/C,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,QAIG,CAAA;AA0FlC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,wBAAwB,EAC7B,OAAO,GAAE,YAAiB,GACzB,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CA4J1B"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../src/host/reasoning-collapse-guard/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AAKH;;;;;;;GAOG;AACH,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACnC,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,GAAG,SAAS,CAAA;IACzC,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;IACvC,4EAA4E;IAC5E,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACtC;AAED,mFAAmF;AACnF,MAAM,WAAW,UAAU;IACzB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,GAAG,SAAS,CAAA;CACnC;AAED,qFAAqF;AACrF,MAAM,WAAW,cAAc;IAC7B,iFAAiF;IACjF,QAAQ,CAAC,EAAE,CAAC,EAAE,OAAO,CAAA;IACrB,MAAM,CAAC,CAAC,KAAK,EAAE;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,OAAO,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,OAAO,CAAA;KAAE,GAAG,IAAI,CAAA;IACzF,KAAK,CAAC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAAA;CAC/B;AAED,+DAA+D;AAC/D,MAAM,MAAM,mBAAmB,GAAG,CAChC,OAAO,EAAE,kBAAkB,EAC3B,IAAI,EAAE,MAAM,aAAa,CAAC,UAAU,CAAC,KAClC,aAAa,CAAC,UAAU,CAAC,CAAA;AAE9B,2EAA2E;AAC3E,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,EAAE;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,KAAK,IAAI,CAAA;AAE3E,mEAAmE;AACnE,MAAM,MAAM,aAAa,GAAG,mBAAmB,GAAG,uBAAuB,CAAA;AAEzE,0DAA0D;AAC1D,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,QAAQ,CAAC,MAAM,CAAC,EAAE,OAAO,CAAA;CAC1B;AAED;;;GAGG;AACH,MAAM,WAAW,wBAAwB;IACvC,EAAE,CAAC,EAAE,CACH,KAAK,EAAE,YAAY,GAAG,eAAe,GAAG,gBAAgB,EACxD,QAAQ,EAAE,aAAa,EACvB,OAAO,CAAC,EAAE,oBAAoB,KAC3B,OAAO,CAAA;IACZ,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,SAAS,CAAA;IACpD;;;;OAIG;IACH,QAAQ,CAAC,MAAM,CAAC,EAAE;QAAE,GAAG,CAAC,EAAE,EAAE,OAAO,GAAG,OAAO,CAAA;KAAE,GAAG,SAAS,CAAA;CAC5D;AAED,+DAA+D;AAC/D,MAAM,WAAW,YAAY;IAC3B,uEAAuE;IACvE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,qEAAqE;IACrE,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,6EAA6E;IAC7E,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,4DAA4D;IAC5D,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,kEAAkE;IAClE,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,qDAAqD;IACrD,aAAa,CAAC,EAAE,MAAM,EAAE,CAAA;IACxB;;;;;;;;OAQG;IACH,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B;;;;;;;;OAQG;IACH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;;;;;OASG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,kEAAkE;IAClE,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;;OAQG;IACH,qBAAqB,CAAC,EAAE,MAAM,CAAA;IAC9B;;;;;;;;;;;;OAYG;IACH,oBAAoB,CAAC,EAAE,MAAM,CAAA;IAC7B;;;;;;;OAOG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;;;;;;OAUG;IACH,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC;;;;;OAKG;IACH,2BAA2B,CAAC,EAAE,MAAM,CAAA;IACpC,qEAAqE;IACrE,GAAG,CAAC,EAAE,MAAM,MAAM,CAAA;CACnB;AAED,0CAA0C;AAC1C,MAAM,WAAW,oBAAoB;IACnC,WAAW,EAAE,MAAM,CAAA;IACnB,cAAc,EAAE,MAAM,CAAA;IACtB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,gBAAgB,EAAE,MAAM,CAAA;IACxB,UAAU,EAAE,MAAM,CAAA;IAClB,aAAa,EAAE,MAAM,EAAE,CAAA;IACvB,iBAAiB,EAAE,MAAM,CAAA;IACzB,WAAW,EAAE,MAAM,CAAA;IACnB,gBAAgB,EAAE,MAAM,CAAA;IACxB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,oBAAoB,EAAE,MAAM,CAAA;IAC5B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,uBAAuB,EAAE,MAAM,CAAA;IAC/B,2BAA2B,EAAE,MAAM,CAAA;IACnC,GAAG,EAAE,MAAM,MAAM,CAAA;CAClB;AAED,eAAO,MAAM,qBAAqB,EAAE,oBAkBnC,CAAA;AAUD;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,GAAE,YAAiB,GAAG,oBAAoB,CAiFpF;AAED;;;;;;;;GAQG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAU/D;AACD;;;;;;;;;;;;GAYG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,EAAE,CAmBrD;AA2BD;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAEtE;AA6BD;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAE5D;AAQD,eAAO,MAAM,WAAW,QAGuB,CAAA;AAE/C,wEAAwE;AACxE,eAAO,MAAM,kBAAkB,QAIG,CAAA;AAmHlC;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,6BAA6B,CAC3C,GAAG,EAAE,wBAAwB,EAC7B,OAAO,GAAE,YAAiB,GACzB,CAAC,MAAM,IAAI,CAAC,GAAG,SAAS,CAoT1B"}

package/lib/types/host/routes.d.ts

@@ -8,5 +8,15 @@ import type { SearchProviderSwitcher } from './search-provider-switcher.ts';
 import { UsageService } from './usage-service.ts';
 /** Read-only audit provider the optional route serves. */
 export type RouteAuditReader = (sessionId: string) => Promise<SubagentRouteAuditDto>;
-export declare function registerRoutes(ctx: Context, oauth: OAuthService, usage: UsageService, preferences: SubscriptionPreferenceStore, proxyManager?: ProxyManager, searchSwitcher?: SearchProviderSwitcher, routeAudit?: RouteAuditReader, accountPool?: CodexAccountPool, fetchConfiguration?: FetchConfigurationDto): () => void;
+/**
+ * Test seam for the adopt routes: the paths the Codex reader consults.
+ *
+ * Present for the same reason the Claude line carries 'adoptPaths': the reader
+ * resolves its own path from CODEX_HOME, and a test must point it at a fixture
+ * rather than at the machine it is running on. Production callers take the default.
+ */
+export interface RouteAdoptOptions {
+    adoptPaths?: readonly string[];
+}
+export declare function registerRoutes(ctx: Context, oauth: OAuthService, usage: UsageService, preferences: SubscriptionPreferenceStore, proxyManager?: ProxyManager, searchSwitcher?: SearchProviderSwitcher, routeAudit?: RouteAuditReader, accountPool?: CodexAccountPool, fetchConfiguration?: FetchConfigurationDto, adopt?: RouteAdoptOptions): () => void;
 //# sourceMappingURL=routes.d.ts.map

package/lib/types/host/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/host/routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,KAAK,EAEV,qBAAqB,EAGrB,qBAAqB,EAEtB,MAAM,wBAAwB,CAAA;AAG/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,OAAO,EAAE,YAAY,EAAe,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAmB,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAA;AAIpE,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAEpF,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,2BAA2B,EACxC,YAAY,CAAC,EAAE,YAAY,EAC3B,cAAc,CAAC,EAAE,sBAAsB,EACvC,UAAU,CAAC,EAAE,gBAAgB,EAC7B,WAAW,CAAC,EAAE,gBAAgB,EAC9B,kBAAkB,CAAC,EAAE,qBAAqB,GACzC,MAAM,IAAI,CA0OZ"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../src/host/routes.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAGlD,OAAO,KAAK,EAEV,qBAAqB,EAIrB,qBAAqB,EAEtB,MAAM,wBAAwB,CAAA;AAG/B,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,yBAAyB,CAAA;AAE/D,OAAO,EAAE,YAAY,EAAe,MAAM,oBAAoB,CAAA;AAC9D,OAAO,EAAmB,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AACpF,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,oBAAoB,CAAA;AACtD,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,+BAA+B,CAAA;AAC3E,OAAO,EAAE,YAAY,EAAqB,MAAM,oBAAoB,CAAA;AAKpE,0DAA0D;AAC1D,MAAM,MAAM,gBAAgB,GAAG,CAAC,SAAS,EAAE,MAAM,KAAK,OAAO,CAAC,qBAAqB,CAAC,CAAA;AAEpF;;;;;;GAMG;AACH,MAAM,WAAW,iBAAiB;IAChC,UAAU,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAC/B;AAED,wBAAgB,cAAc,CAC5B,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,YAAY,EACnB,KAAK,EAAE,YAAY,EACnB,WAAW,EAAE,2BAA2B,EACxC,YAAY,CAAC,EAAE,YAAY,EAC3B,cAAc,CAAC,EAAE,sBAAsB,EACvC,UAAU,CAAC,EAAE,gBAAgB,EAC7B,WAAW,CAAC,EAAE,gBAAgB,EAC9B,kBAAkB,CAAC,EAAE,qBAAqB,EAC1C,KAAK,CAAC,EAAE,iBAAiB,GACxB,MAAM,IAAI,CAwUZ"}

package/lib/types/host/token-store.d.ts

@@ -1,5 +1,30 @@
 import type { CredentialStorageDto } from '../shared/contracts.ts';
-export interface StoredOAuthCredentials {
+/**
+ * The adoption markers, as they hang off a credential this package stores.
+ *
+ * FLATTENED onto the credential rather than nested under it, for the same reason
+ * the Claude line flattens its own: the pool's hooks (needsRefresh, refresh,
+ * authRejectedReason) receive the CREDENTIAL and never the account record, so the
+ * marker has to be reachable from there, and every other field a pooled row reads
+ * already sits at the top level.
+ *
+ * A borrowed snapshot is never refreshed (the refresh token belongs to the client
+ * that wrote the file, and two programs spending it invalidate each other), so the
+ * marker is the whole difference between a row this plugin may rotate and a row
+ * that is a snapshot until it expires. It is written on EVERY account the pool
+ * creates, including the explicit false case, because the core merges a
+ * re-authorization as { ...existing, ...created } and an omitted key would leave a
+ * stored 'adopted: true' behind.
+ */
+export interface AdoptedCredentialMarkers {
+    /** Literal true on a credential copied out of another application's sign-in. */
+    adopted?: true;
+    /** Which local sign-in it was taken from, e.g. 'codex'. */
+    source?: string;
+    /** The exact file it was read from, so a card can name it. */
+    sourcePath?: string;
+}
+export interface StoredOAuthCredentials extends AdoptedCredentialMarkers {
     accessToken: string;
     refreshToken: string;
     idToken?: string;

package/lib/types/host/token-store.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../../src/host/token-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAElE,MAAM,WAAW,sBAAsB;IACrC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,MAAM,WAAW,UAAW,SAAQ,eAAe,CAAC,sBAAsB,CAAC;IACzE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAA;CAC1D;AAED,6EAA6E;AAC7E,qBAAa,gBAAiB,YAAW,UAAU;IACjD,QAAQ,CAAC,OAAO;;;MAAgD;IAChE,OAAO,CAAC,KAAK,CAAsC;IAE7C,IAAI,IAAI,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAI9C,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAqB7E"}
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../../src/host/token-store.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,wBAAwB,CAAA;AAElE;;;;;;;;;;;;;;;;GAgBG;AACH,MAAM,WAAW,wBAAwB;IACvC,gFAAgF;IAChF,OAAO,CAAC,EAAE,IAAI,CAAA;IACd,2DAA2D;IAC3D,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,MAAM,WAAW,sBAAuB,SAAQ,wBAAwB;IACtE,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,eAAe,CAAC,CAAC;IAChC,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC,CAAA;IACzB,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;CACvB;AAED,MAAM,WAAW,UAAW,SAAQ,eAAe,CAAC,sBAAsB,CAAC;IACzE,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,oBAAoB,EAAE,WAAW,CAAC,CAAA;CAC1D;AAED,6EAA6E;AAC7E,qBAAa,gBAAiB,YAAW,UAAU;IACjD,QAAQ,CAAC,OAAO;;;MAAgD;IAChE,OAAO,CAAC,KAAK,CAAsC;IAE7C,IAAI,IAAI,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC;IAI9C,IAAI,CAAC,KAAK,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,sBAAsB,CAoC7E"}

package/lib/types/host/workbuddy/client.d.ts

@@ -2,7 +2,7 @@ import type { WorkBuddyAccount, WorkBuddyAccountQuota, WorkBuddyMeter } from '..
 import { PROVIDER_ID, PROVIDER_NAME } from './types.ts';
 import { FileCredentialStore, type WorkBuddyCredentials } from './token-store.ts';
 import type { WorkBuddyTokenIdentity } from './identity.ts';
-import type { WorkBuddyModelEntry } from './model-catalog.ts';
+import { type WorkBuddyModelEntry } from './model-catalog.ts';
 export interface WorkBuddyRequestOptions {
     fetchFn?: typeof fetch;
     signal?: AbortSignal;

package/lib/types/host/workbuddy/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACf,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EAiBL,WAAW,EACX,aAAa,EAKd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,mBAAmB,EAAsB,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACrG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAO7D,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AA6BD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,QAAQ,GAAG,KAAK,GAAG,cAAc,GAAG,SAAS,CAAC,EACtG,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAoD/B;AAED,kDAAkD;AAClD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,oBAAoB,GAAG,gBAAgB,CAiB1F;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAyBxC;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,GAAG,mBAAmB,EAAE,CAgEjH;AAkBD,wBAAgB,gBAAgB,IAAI,mBAAmB,EAAE,CAExD;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAUhC;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAAuB,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1D,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAkDhC;AAiDD,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAwC5D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQ5D;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,EAAE,CAmCtE;AA4CD;;;;;;GAMG;AACH,wBAAgB,cAAc,IAAI,qBAAqB,GAAG,SAAS,CAElE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,qBAAqB,GAAG,SAAS,CAG9F;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,sBAA4B,EACjC,OAAO,GAAE,OAAO,KAAa,EAC7B,KAAK,UAAQ,EACb,SAAS,GAAE,MAAM,GAAG,IAAW,EAC/B,gBAAgB,GAAE,SAAS,MAAM,EAAO,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAmEhC;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACf,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EAiBL,WAAW,EACX,aAAa,EAKd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,mBAAmB,EAAsB,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACrG,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,eAAe,CAAA;AAC3D,OAAO,EAAyB,KAAK,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAOpF,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AA6BD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,QAAQ,GAAG,KAAK,GAAG,cAAc,GAAG,SAAS,CAAC,EACtG,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAoD/B;AAED,kDAAkD;AAClD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,oBAAoB,GAAG,gBAAgB,CAiB1F;AAMD;;;;;;;;;;;;;;GAcG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CAyBxC;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,GAAG,mBAAmB,EAAE,CAgEjH;AAkBD,wBAAgB,gBAAgB,IAAI,mBAAmB,EAAE,CAExD;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAMzC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAchC;AAED;;;;;;;;GAQG;AACH,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAAuB,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1D,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAyDhC;AAiDD,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAwC5D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQ5D;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,EAAE,CAmCtE;AA4CD;;;;;;GAMG;AACH,wBAAgB,cAAc,IAAI,qBAAqB,GAAG,SAAS,CAElE;AAED;;;;;;GAMG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,qBAAqB,GAAG,SAAS,CAG9F;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,sBAA4B,EACjC,OAAO,GAAE,OAAO,KAAa,EAC7B,KAAK,UAAQ,EACb,SAAS,GAAE,MAAM,GAAG,IAAW,EAC/B,gBAAgB,GAAE,SAAS,MAAM,EAAO,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAmEhC;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAA"}