@eddyskywalker/dsh-chatgpt-subscription 0.24.1 → 0.24.3

package/CHANGELOG.md

@@ -2,6 +2,28 @@
 
 ## Unreleased
 
+## 0.24.3 - 2026-10-15
+- **[Linux 凭据存储] 账号池撞上 secret-tool 的 8192 字节 stdin 上限：第 3 个账号添加后凭据写入成功、池写入失败，账号在 UI 闪现后消失（issue #54）**
+  - **现象**：Linux（gnome-keyring）下添加第 3 个 WorkBuddy 账号后账号区闪现即消失——凭据条目（7934B）惊险通过，但池条目（约 8960B）≥ 8192 被 `SecretServiceCredentialStore.save` 拒绝，`status.accounts`（池）永远少一个。该上限对齐的是 libsecret `secret-tool` 的 stdin 固定缓冲（超限静默截断仍 exit 0），且对**所有线路**（antigravity / claude / command-code / glm-coding-plan / kimi-code / minimax-code / ollama / step-code / workbuddy 的池与凭据共 25 处调用点）一视同仁，账号一多都会撞。
+  - **改法（`credential-store-secret-service.ts`，一处修复全线路受益）**：载荷 ≥ 8192 字节时改为**分片存储**——UTF-8 载荷 base64 后按 7000 字符切片写入独立 shard 条目（account 属性为 `<account>#<gen>#<i>`，Secret Service 属性精确匹配所以互不串扰），主条目最后写入作为**提交点**，内容为信封 `{ __dshChunked: { gen, chunks, bytes } }`；读取时按信封重组并校验解码字节数，损坏即报 `payload is too large` 同款 invalid 错误而非静默截断。小于上限的载荷保持单条目原格式，存量数据零迁移。shard 用随机代际（gen）标签：中断的 save 不触碰旧信封与旧分片，新代际要么整体提交要么回滚清理；提交成功后清理上一代分片（含分片→单条目的收缩场景）。`clear()` 改为先 lookup 探测：既拿到待清理的分片代际，也绕开 Ubuntu libsecret-tools 0.20.4 对不存在条目 `clear` 段错误的坑。分片数上限 128（约 650 KiB）防畸形信封。
+  - **验证**：`npm run typecheck` 0 错误；全量 **225 passed | 1 skipped（226 文件）、3739 passed | 7 skipped、0 failed**。新增/更新 12 条 store 用例：分片往返（断言每片 stdin < 8192、重组后逐字节等于原载荷、载荷不出现在命令行参数）、缺失/篡改分片报 invalid、畸形信封拒绝、换代清理、收缩清理、clear 连带清分片、shard 写失败时主条目零触碰。launch 计数测试同步更新（save 多一次探测启动，这是分代清理的信息来源）。
+
+## 0.24.2 - 2026-10-14
+- **[三条登录线路] 回调端口探测窗口按「100 端口一块」的否证前提定宽，导致整段保留区把探测窗口吃穿：Windows 实测连续 277 个端口不可用，而窗口只有 128（command-code 只有 10）**
+  - **现象**：本机全量 `npx vitest run` 稳定复现 **7 failed / 3711 passed**，全部集中在 `test/antigravity-callback-port.test.ts`（5 条）与 `test/login-open-browser-seams.test.ts`（2 条），报 `No usable local port for the Antigravity sign-in callback (tried 128 ports from 51121 on localhost)`，另有一条直接 `listen EACCES: permission denied ::1:51121`。
+  - **根因（实测否证既有注释）**：`port-constants.ts` 写着「Windows 排除区最多 100 端口一块，128 覆盖任何一块」——本机实测从默认端口 51121 起**连续 277 个端口不可用**（51121-51397，`netsh` 表印证），窗口在排除区内部就耗尽，必然抛错。除静态表外还有一批**散落的单端口 EACCES**（51512/51580/51620/51840…）根本不在 `netsh` 表里，属 Hyper-V/HNS 动态保留，且会在**百毫秒尺度上出现与释放**。三个取值（`antigravity` 128、`claude` 128、`command-code` **10**）建立在同一个被否定之前提上。
+  - **失效形态三条各不相同**：`antigravity` 抛错、`claude` 返回 `null` → `beginLogin` 把用户**静默推进手动粘贴流程**（机器上明明有数百个空闲端口就在保留区后面）、`command-code` 抛错且**没有手动流程可退**，窄窗口等于登录直接死掉。
+  - **改法**：三条线路的窗口统一为 **1024**（≈实测最宽区的 3.7 倍；终点 52144 / 54716 / 6983 均远低于 65535，command-code 另有断言确保不越入 49152+ 的 OS 动态端口区）并重写被否证的注释，把 277 宽实测、失效形态与 ~0.35ms/次探测的最坏代价一并记入。`resolveCallbackPort` / `findAvailablePort` 各补一个**可选**注入式 `probe` seam（`claude` 本就已有同形参数），使「窗口契约」与「机器事实」解耦；生产默认值仍是真绑定，调用点逐字未变。`claude` 的 `probed.length <= CALLBACK_PORT_ATTEMPTS` 收紧为 `===`，`command-code` 测试里硬编码的 `5959 + 10` 改为常量推导（两侧区间断言保留，上界仍被断言）。
+  - **command-code 的 10 为什么加宽（而非保持）**：「matches the official CLI」约束的是**起点**（5959 保留且仍先试，有测试钉死字面量），不是宽度；端口经 callback URL 交给 studio，5960+ 本就是「非 CLI 端口」，加宽不引入新的端口类别；决定性是失败形态——这条线路没有手动流程可退，窗口耗尽即登录失败。
+  - **测试为什么不碰真实 socket**：曾出现「用真实 socket 拼一段连续占用区」的写法在同一棵树上**时过时不过**（40 轮 3 轮失败，且 3 次全部停在 build 期就是 EACCES 的端口上，自持有端口一次都没变）——动态保留区会在测试运行途中解禁。新用例因此**全部注入 probe**，零真实 socket、零 skip，与机器排布无关。
+  - **验证**：`npm run typecheck` 0 错误；全量 **225 passed | 1 skipped（226 文件）、3732 passed | 7 skipped、0 failed**（基线 7 failed）；承重文件连跑 20 次全绿；`login-open-browser-seams.test.ts` **未改测试**，靠生产修复自然通过且真的走到了 abort 分支。承重已双向检查：常量单独还原为 128/10 时 5 条立刻失败（`expected 128 to be greater than 277`、`expected null to be 53969`、`expected 'manual' to be 'loopback'`、`No free local port … (tried 10 ports from 5959)`）。
+- **[Kimi Code] 上游瞬时过载不再被当成账号限流：一次 `The engine is currently overloaded` 曾把唯一账号冷却 15 分钟，重试期间连一次网络请求都发不出去**
+  - **现象**：现场会话 `session-70d30e6b`（2026-10-14 20:29）一个回合以 `全部 1 个 Kimi Code 账号均处于配额限制或冷却中 (429)。最短预计在 15 分钟后解除冷却。` 失败。账号登录正常、订阅正常、额度正常，用户点一次「继续」后自行恢复。三次重试的间隔为 3.2s / 6.1s，**等于纯退避时间、零网络耗时**——请求根本没发出去。
+  - **根因（两处叠加）**：① `classifyKimiFailure` 只在正文命中 `exceeded_current_quota_error` / `insufficient balance` 等额度文案时才判为额度类，`The engine is currently overloaded, please try again later.` 一条都不匹配，于是落进 429 兜底分支得到 `RATE_LIMIT`；② adapter 的 HTTP 分支与 in-band 分支的冷却判据都是**裸状态码 `response.status === 429`**，与错误码无关，所以分类改对也拦不住冷却。过载因此被写进 `cooldownUntil`（无 `Retry-After` 时套用 `POOL_COOLDOWN_MS = 15 分钟`）并**落盘**，号池随即用 `isEligible` 把唯一账号判掉，`allUnavailableError` 拼出上面那句话。单账号号池没有第二个账号可轮转 = 一次过载直接锁死整条线路。
+  - **这与全仓约定相悖**：`glm-coding-plan/mapper-openai.ts` 早已把 `OVERLOADED` 映射为非账号级的 `SERVER`，注释写明「把过载混进 RATE_LIMIT 会让号池按限流去冷却账号，而过载根本不是某个账号的错」；`claude` 线同样按 kind 分类、不冷却过载。本线路缺这道区分是偏离，不是取舍。
+  - **改法**：新增 `UPSTREAM_OVERLOAD_PATTERNS` 按**正文**识别过载（`engine is (currently )?overloaded` / `upstream model provider is temporarily unavailable` 等，刻意保留限定语，避免吞掉将来可能出现的「本账号请求量过载」类真限流），`KimiFailureClassification` 新增 `upstreamOverload` 字段把「归属」显式带出来——`code` 只有一个、说不了「可重试」与「不属于任何账号」这两件事，`accountScoped` 只回答「能不能换号」而不回答「要不要冷却」。过载返回 `SERVER`（仍在 `retryableCodes` 内，退避重试行为不变；用 `RATE_LIMIT` 会让 UI 读出「你的账号被限流了」这个错误结论）；HTTP 分支与 in-band 分支**都**加 `!failure.upstreamOverload` 排除，两条路行为一致。
+  - **验证**：`npm run typecheck` 0 错误；`test/kimi-code-adapter.test.ts` 41 例 + `test/kimi-code-account-pool.test.ts` 22 例共 63 例全绿；全量 **3732 passed | 7 skipped、0 failed**。承重已双向检查：把 `adapter.ts` 单独还原后，3 条新用例立刻失败（`expected 'RATE_LIMIT' to be 'SERVER'` 等，含「账号留在轮转里且真的重发了请求」「in-band 与 HTTP 结论一致」两条端到端断言）。
+
 ## 0.24.1 - 2026-10-14
 - **[调度模式 & 子代理授权守卫] 插件端机制级修复模型调用 `list_subagent_models` 后仍疯狂翻找本地文件定义的问题，并全面优化预设提示词（现场会话 `session-01724ca8`）**
   - **现象**：主模型在启动阶段已调用 `list_subagent_models`，但因无参调用 `list_subagent_models({})` 只返回 provider 摘要，或看到上游工具描述写着 `"Catalog membership is advisory"` / `"Child LLM selection is optional..."`，不敢直接采信返回值，紧接着连续 9 个回合在工作区 grep `subagentModelAuthorization`、读取源码、递归扫描 `~/.dsh`（触发 120s 命令超时）并翻看 `settings.json` / `cordis.patch.yml` 以寻找「真正的允许清单定义」。

package/icon.svg

@@ -0,0 +1,28 @@
+<!--
+  本插件的插件管理器图标（package.json 的 "icon" 声明，36×36 规格，见 DSH 官方实验插件同款）。
+
+  画的是「聚合」：四条订阅线路（四枚节点）收进中心一块圆角方块（本插件那个统一的账号/订阅管理面）。
+  取色都有出处，不新造品牌色：中心 #10A37F 是本仓库 src/client/hub/brand-icons.ts 里 chatgpt 那条
+  线路的 tile 色（本插件正是以 ChatGPT 订阅起家的那条），线路节点与辐条用的 #7AC2FF → #4A65E8
+  与 DSH 官方插件图形同一支渐变。图形为装饰性，不依赖 currentColor / CSS 变量，可安全地按 data: URI
+  渲染在插件管理器的 <img> 里（PackageArtwork）。
+-->
+<svg width="36" height="36" viewBox="0 0 36 36" fill="none" xmlns="http://www.w3.org/2000/svg">
+  <g stroke="url(#a)" stroke-width="2.8" stroke-linecap="round">
+    <path d="M18 12.8V9.7" />
+    <path d="M18 23.2V26.3" />
+    <path d="M12.8 18H9.7" />
+    <path d="M23.2 18H26.3" />
+  </g>
+  <circle cx="18" cy="6.6" r="3.1" fill="url(#a)" />
+  <circle cx="18" cy="29.4" r="3.1" fill="url(#a)" />
+  <circle cx="6.6" cy="18" r="3.1" fill="url(#a)" />
+  <circle cx="29.4" cy="18" r="3.1" fill="url(#a)" />
+  <rect x="12.25" y="12.25" width="11.5" height="11.5" rx="3.6" fill="#10A37F" />
+  <defs>
+    <linearGradient id="a" x1="7" y1="6" x2="30" y2="30" gradientUnits="userSpaceOnUse">
+      <stop stop-color="#7AC2FF" />
+      <stop offset="1" stop-color="#4A65E8" />
+    </linearGradient>
+  </defs>
+</svg>

package/lib/index.js

@@ -1321,6 +1321,7 @@ function runSecurity(args) {
 //#endregion
 //#region src/host/credential-store-secret-service.ts
 const UNAVAILABLE = "Linux encrypted credential storage requires secret-tool (libsecret) and an unlocked Secret Service keyring.";
+const INVALID = "Secret Service credential payload is invalid";
 /**
 * How long one Secret Service read may stand in for the stored value.
 *
@@ -1331,6 +1332,46 @@ const UNAVAILABLE = "Linux encrypted credential storage requires secret-tool (li
 * credentials.
 */
 const KEYRING_READ_CACHE_TTL_MS = 15e3;
+/**
+* secret-tool reads the secret from stdin into a fixed 8192-byte buffer
+* (`tool/secret-tool.c` `read_password_stdin()`) and, past the limit, prints
+* `password is too long` yet still stores the truncated bytes with exit 0 —
+* a silent corruption the caller cannot detect from the exit code. Payloads
+* that do not fit are therefore split into shard entries that each stay well
+* under the limit.
+*/
+const SECRET_TOOL_STDIN_LIMIT = 8192;
+/**
+* Base64 characters per shard entry. Base64 is ASCII, so characters equal
+* bytes and any split point is safe; 7000 leaves the shard comfortably below
+* the stdin limit.
+*/
+const SHARD_PAYLOAD_SIZE = 7e3;
+/**
+* Upper bound on the shard count one value may occupy. A corrupt or hostile
+* envelope cannot ask for unbounded lookups; 128 shards still hold ~650 KiB,
+* far past any plausible credential or account pool.
+*/
+const MAX_SHARDS = 128;
+/** Property that marks a primary entry as the envelope of a chunked value. */
+const ENVELOPE_KEY = "__dshChunked";
+/**
+* Read the envelope of a stored primary entry, or null when the entry holds a
+* plain value. A malformed envelope is invalid stored data, not a plain value.
+*/
+function envelopeFrom(parsed) {
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) return null;
+	const marker = parsed[ENVELOPE_KEY];
+	if (marker === void 0) return null;
+	if (typeof marker !== "object" || marker === null) throw new Error(INVALID);
+	const { gen, chunks, bytes } = marker;
+	if (typeof gen !== "string" || gen === "" || typeof chunks !== "number" || !Number.isInteger(chunks) || chunks < 1 || chunks > MAX_SHARDS || typeof bytes !== "number" || !Number.isInteger(bytes) || bytes < 0) throw new Error(INVALID);
+	return {
+		gen,
+		chunks,
+		bytes
+	};
+}
 /** Secrets travel over stdin/stdout; command arguments contain only lookup attributes. */
 var SecretServiceCredentialStore = class {
 	service;
@@ -1350,31 +1391,142 @@ var SecretServiceCredentialStore = class {
 			this.account
 		];
 	}
+	/**
+	* Lookup attributes of one shard entry. Secret Service matching is exact on
+	* every given attribute pair, so the primary account value never matches a
+	* shard and vice versa.
+	*/
+	shardAttributes(gen, index) {
+		return [
+			"service",
+			this.service,
+			"account",
+			`${this.account}#${gen}#${index}`
+		];
+	}
 	async load() {
 		return this.cache.load(async () => {
 			const result = await runSecretTool(["lookup", ...this.attributes()]);
 			if (result.code === 1 && !result.hasStderr && result.stdout === "") return null;
 			if (result.code !== 0) throw new Error(UNAVAILABLE);
+			let parsed;
 			try {
-				return this.parse(JSON.parse(result.stdout));
+				parsed = JSON.parse(result.stdout);
+			} catch {
+				throw new Error(INVALID);
+			}
+			const envelope = envelopeFrom(parsed);
+			if (envelope === null) try {
+				return this.parse(parsed);
+			} catch {
+				throw new Error(INVALID);
+			}
+			const pieces = [];
+			for (let index = 0; index < envelope.chunks; index += 1) {
+				const shard = await runSecretTool(["lookup", ...this.shardAttributes(envelope.gen, index)]);
+				if (shard.code !== 0) throw new Error(INVALID);
+				pieces.push(shard.stdout);
+			}
+			try {
+				const decoded = Buffer.from(pieces.join(""), "base64");
+				if (decoded.length !== envelope.bytes) throw new Error("shard byte count mismatch");
+				return this.parse(JSON.parse(decoded.toString("utf8")));
 			} catch {
-				throw new Error("Secret Service credential payload is invalid");
+				throw new Error(INVALID);
 			}
 		});
 	}
 	async save(value) {
 		const payload = JSON.stringify(value);
-		if (Buffer.byteLength(payload, "utf8") >= 8192) throw new Error("Secret Service credential payload is too large");
+		const bytes = Buffer.byteLength(payload, "utf8");
+		const stale = await this.storedEnvelope();
+		if (bytes < SECRET_TOOL_STDIN_LIMIT) {
+			if ((await runSecretTool([
+				"store",
+				"--label=DSH Antigravity OAuth",
+				...this.attributes()
+			], payload)).code !== 0) throw new Error(UNAVAILABLE);
+		} else await this.saveChunked(payload, bytes);
+		if (stale !== null) await this.clearShards(stale.gen, stale.chunks);
+		this.cache.invalidate();
+	}
+	/**
+	* Store an oversized payload as shard entries plus an envelope. The shards
+	* are written under a fresh generation tag first and the primary entry last:
+	* that entry is the commit point, so an interrupted save leaves the previous
+	* envelope and its shards fully intact and the new generation is either
+	* committed whole or cleaned up.
+	*/
+	async saveChunked(payload, bytes) {
+		const encoded = Buffer.from(payload, "utf8").toString("base64");
+		const chunks = Math.ceil(encoded.length / SHARD_PAYLOAD_SIZE);
+		if (chunks > MAX_SHARDS) throw new Error("Secret Service credential payload is too large");
+		const gen = randomBytes(6).toString("hex");
+		for (let index = 0; index < chunks; index += 1) {
+			const piece = encoded.slice(index * SHARD_PAYLOAD_SIZE, (index + 1) * SHARD_PAYLOAD_SIZE);
+			if ((await runSecretTool([
+				"store",
+				"--label=DSH Antigravity OAuth",
+				...this.shardAttributes(gen, index)
+			], piece)).code !== 0) {
+				await this.clearShards(gen, index);
+				throw new Error(UNAVAILABLE);
+			}
+		}
+		const envelope = {
+			gen,
+			chunks,
+			bytes
+		};
 		if ((await runSecretTool([
 			"store",
 			"--label=DSH Antigravity OAuth",
 			...this.attributes()
-		], payload)).code !== 0) throw new Error(UNAVAILABLE);
-		this.cache.invalidate();
+		], JSON.stringify({ [ENVELOPE_KEY]: envelope }))).code !== 0) {
+			await this.clearShards(gen, chunks);
+			throw new Error(UNAVAILABLE);
+		}
+	}
+	/**
+	* Envelope of the currently stored value, or null when the entry is missing,
+	* holds a plain value, or cannot be read at all. A save that goes on to fail
+	* surfaces its own error, so a probe failure must not fail the save first.
+	*/
+	async storedEnvelope() {
+		const probe = await runSecretTool(["lookup", ...this.attributes()]);
+		if (probe.code !== 0) return null;
+		try {
+			return envelopeFrom(JSON.parse(probe.stdout));
+		} catch {
+			return null;
+		}
+	}
+	/**
+	* Remove shard entries, tolerating the ones that are already gone. A missing
+	* entry exits 1 with empty stderr — the same shape a segfaulting secret-tool
+	* takes through the close event (Ubuntu libsecret-tools 0.20.4 crashes on
+	* clearing an entry that does not exist) — so that answer is never an error.
+	*/
+	async clearShards(gen, chunks) {
+		for (let index = 0; index < chunks; index += 1) {
+			const result = await runSecretTool(["clear", ...this.shardAttributes(gen, index)]);
+			if (result.code !== 0 && !(result.code === 1 && !result.hasStderr)) return;
+		}
 	}
 	async clear() {
-		const result = await runSecretTool(["clear", ...this.attributes()]);
-		if (result.code !== 0 && !(result.code === 1 && !result.hasStderr)) throw new Error(UNAVAILABLE);
+		const probe = await runSecretTool(["lookup", ...this.attributes()]);
+		if (probe.code !== 0 && !(probe.code === 1 && !probe.hasStderr)) throw new Error(UNAVAILABLE);
+		if (probe.code === 0) {
+			let envelope = null;
+			try {
+				envelope = envelopeFrom(JSON.parse(probe.stdout));
+			} catch {
+				envelope = null;
+			}
+			if (envelope !== null) await this.clearShards(envelope.gen, envelope.chunks);
+			const result = await runSecretTool(["clear", ...this.attributes()]);
+			if (result.code !== 0 && !(result.code === 1 && !result.hasStderr)) throw new Error(UNAVAILABLE);
+		}
 		this.cache.invalidate();
 	}
 };
@@ -4955,6 +5107,27 @@ var FileModelSettingsStore$2 = class {
 */
 /** Default loopback port the Antigravity CLI's own flow uses. */
 const DEFAULT_CALLBACK_PORT$2 = 51121;
+/**
+* How many consecutive ports one probe covers, starting at the default.
+*
+* An excluded range is not a block of fixed width. Windows reserves whatever
+* span Hyper-V/WinNAT/its own services hold, it moves on every reboot, and a
+* Windows 11 host was measured handing this line's default port 277 consecutive
+* excluded ports (51121-51397). A window narrower than the run the default
+* starts inside ends *inside* that run and then reports "no usable port" on a
+* machine where hundreds of free ports sit immediately behind it — so the width
+* of this window, not the width the probe assumes, is what keeps the flow
+* working.
+*
+* 1024 is roughly 3.7x the widest run measured, which is the margin that stops
+* this depending on any single host's layout, and it still ends at 52144, far
+* below the 65535 ceiling. The window is cheap because it is walked one failed
+* bind at a time: a rejected listen measured ~0.35ms here (277 probes in 96ms),
+* so even the full 1024-probe worst case — only reached when every port in the
+* window is unusable, immediately before the actionable error — costs ~0.36s
+* once per sign-in. The ordinary case stops at the first usable port.
+*/
+const CALLBACK_PORT_ATTEMPTS$2 = 1024;
 let cachedQuota;
 let quotaFetchInFlight = null;
 /** Bumped by every cache clear so an in-flight fetch cannot publish stale state. */
@@ -5290,11 +5463,19 @@ function callbackPort() {
 * URI carries whatever port this returns, so any free loopback port works. A
 * configured `DSH_ANTIGRAVITY_CALLBACK_PORT` still wins — callers who set it
 * accept that the port must be usable.
+*
+* How wide such a reserved run is not something this function can look up — it
+* is the host's own bookkeeping — so the probe only has to be wider than the
+* widest run it can meet, and it walks a window sized for that (see
+* {@link CALLBACK_PORT_ATTEMPTS}) instead of guessing a block size. `start` and
+* `probe` are the seams that keep that claim testable: production probes from
+* the line's own default and judges each port by really binding it, and a test
+* can point the walk at a run whose width it controls.
 */
-async function resolveCallbackPort$1(attempts = 128, host = resolveCallbackHost()) {
+async function resolveCallbackPort$1(attempts = CALLBACK_PORT_ATTEMPTS$2, host = resolveCallbackHost(), start = DEFAULT_CALLBACK_PORT$2, probe = (port) => isPortUsable$1(port, host)) {
 	if (antigravityEnv("CALLBACK_PORT") !== void 0) return callbackPort();
-	for (let offset = 0; offset < attempts; offset += 1) if (await isPortUsable$1(51121 + offset, host)) return DEFAULT_CALLBACK_PORT$2 + offset;
-	throw new Error(`No usable local port for the Antigravity sign-in callback (tried ${attempts} ports from ${DEFAULT_CALLBACK_PORT$2} on ${host}). A Windows excluded-port range may cover them; set DSH_ANTIGRAVITY_CALLBACK_PORT to a free port.`);
+	for (let offset = 0; offset < attempts; offset += 1) if (await probe(start + offset)) return start + offset;
+	throw new Error(`No usable local port for the Antigravity sign-in callback (tried ${attempts} ports from ${start} on ${host}). A Windows excluded-port range may cover them; set DSH_ANTIGRAVITY_CALLBACK_PORT to a free port.`);
 }
 /**
 * Whether one port can be bound on the interface the listener will use.
@@ -5377,7 +5558,7 @@ async function getUserEmail(token, fetchFn = fetch) {
 }
 async function startCallbackServer(expectedState) {
 	const host = resolveCallbackHost();
-	const port = await resolveCallbackPort$1(128, host);
+	const port = await resolveCallbackPort$1(CALLBACK_PORT_ATTEMPTS$2, host);
 	return new Promise((resolve, reject) => {
 		let settled = false;
 		let timeout;
@@ -13395,6 +13576,28 @@ const BILLING_SUBSCRIPTIONS_PATH = "/alpha/billing/subscriptions";
 const USAGE_SUMMARY_PATH = "/alpha/usage/summary";
 /** First loopback port tried for the browser callback; matches the official CLI. */
 const DEFAULT_CALLBACK_PORT$1 = 5959;
+/**
+* Consecutive ports probed when the default is taken.
+*
+* The CLI opens its own search at 5959, which {@link DEFAULT_CALLBACK_PORT}
+* keeps, so on an ordinary machine this line still lands on the port the CLI
+* would. The WIDTH is recovery budget, not compatibility: the studio is handed
+* whatever port this returns in the callback URL, so ports past the CLI's own
+* range were already reachable here before the window was widened, and starting
+* at the CLI default is what preserves the "behaves like the CLI" property if the
+* studio ever does pin an allowlist.
+*
+* The failure shape makes the width matter more than it does for a line that has
+* a manual flow to fall back to: exhausting this window is a thrown error and a
+* dead sign-in, not a downgrade. Windows (Hyper-V/WinNAT) reserves TCP port
+* ranges of no fixed width that change on every reboot — one host was measured
+* holding 277 consecutive ports — so a ten-port window is one reboot away from
+* failing outright and a wider one is not. 1024 matches the other two sign-in
+* lines here and still ends at 6983: clear of the privileged ports, clear of the
+* OS dynamic range, and walked one failed bind at a time (~0.35ms each), so the
+* worst case costs a fraction of a second once per sign-in.
+*/
+const CALLBACK_PORT_ATTEMPTS$1 = 1024;
 const CALLBACK_PATH$1 = "/callback";
 /** Page the studio's browser tab lands on after a successful POST; CLI-compatible. */
 const CALLBACK_COMPLETE_PATH = "/callback/complete";
@@ -17169,16 +17372,19 @@ function checkPortAvailable(port) {
 	});
 }
 /**
-* First free loopback port in the CLI's probe range.
+* First free loopback port in the probe range.
 *
 * The studio receives the port in the callback URL, so any free port works;
 * starting at the CLI's own default keeps behavior identical on a machine where
-* a server-side allowlist is ever introduced.
+* a server-side allowlist is ever introduced. `probe` is the seam the tests walk
+* a reserved run through, which is what lets the width of the window be asserted
+* without binding a thousand real sockets on a machine whose own reservations
+* move underneath the test.
 */
-async function findAvailablePort(start = DEFAULT_CALLBACK_PORT$1, attempts = 10) {
+async function findAvailablePort(start = DEFAULT_CALLBACK_PORT$1, attempts = CALLBACK_PORT_ATTEMPTS$1, probe = checkPortAvailable) {
 	for (let offset = 0; offset < attempts; offset += 1) {
 		const port = start + offset;
-		if (await checkPortAvailable(port)) return port;
+		if (await probe(port)) return port;
 	}
 	throw new Error(`No free local port for the Command Code sign-in callback (tried ${attempts} ports from ${start}).`);
 }
@@ -24868,10 +25074,14 @@ function countOmitted(current, baseline, resolved) {
 *
 * The retryable set is therefore:
 *
-* - `SERVER` — any 5xx, including that upstream-unavailable 502;
-* - `RATE_LIMIT` — a 429 that is genuine back-pressure ("too many requests",
-*   "the engine is currently overloaded"), which the documentation describes as
-*   transient;
+* - `SERVER` — any 5xx, including that upstream-unavailable 502, and the
+*   overloaded 429 (`UPSTREAM_OVERLOAD_PATTERNS`). Overload shares the 429
+*   status with real back-pressure but not its meaning: it describes the state
+*   of the upstream engine, which every account behind this endpoint shares, so
+*   it is filed as the server condition it is and the pool is left alone;
+* - `RATE_LIMIT` — a 429 that is genuine back-pressure ("too many requests"),
+*   which the documentation describes as transient and which does belong to the
+*   account that hit it, so rotation on it still earns its keep;
 * - `TRANSPORT` — a connection that produced no response at all;
 * - `TIMEOUT` — a stalled stream, handled by the idle watchdog.
 *
@@ -24917,6 +25127,35 @@ const ENTITLEMENT_PATTERNS = [
 	/recognized as other/i,
 	/currently plan supports only/i
 ];
+/**
+* 正文里说明「上游引擎过载」的措辞，与上面两组按**归属**分界，而不是按严重程度。
+*
+* - `ENTITLEMENT_PATTERNS` 说的是套餐：换号、换时间都不会变，是请求/套餐的属性；
+* - `QUOTA_EXHAUSTED_PATTERNS` 说的是这个账号自己的余额/额度：别人可能还好，
+*   但这个账号在窗口重置前一定起不来；
+* - 本组说的是**上游引擎的繁忙**：这是所有账号共用的同一台引擎，谁来问都是这句
+*   话，本地没有任何动作能改变它。
+*
+* 第三组必须单独识别，因为它和真正的限流共用同一个 429 状态码，却不共享结论。
+* 服务端用 429 表达「引擎过载」时，本线路此前把它归进 RATE_LIMIT，号池随即按
+* 限流语义给**唯一那个账号**写 15 分钟冷却（`POOL_COOLDOWN_MS`），之后同一
+* 会话的每一次重试都被 `isEligible` 直接挡在门外——重试根本没发出网络请求，
+* 3 次退避（3.2s/6.1s，纯本地耗时）打在一个登录正常、额度正常的账号上，最后以
+* 「全部 1 个 Kimi Code 账号均处于配额限制或冷却中 (429)。最短预计在 15 分钟后
+* 解除冷却。」收场。真正被限流的服务端状态不该有账号级的副作用。
+*
+* 这里只按正文判定，绝不按状态码判定：同一个 429 既可能是过载也可能是真限流，
+* 唯一能区分的证据就是服务自己写下的那句话。措辞取自本线路文档与实际响应，
+* 刻意保留 "the engine is …" 的限定，避免把任何提到 "overload" 的正文一律
+* 吞掉——将来若出现「本账号请求量过载」这类真限流措辞，它不该落进这一组。
+*/
+const UPSTREAM_OVERLOAD_PATTERNS = [
+	/\bengine is (currently )?overloaded\b/i,
+	/\bservers? (?:is|are) (?:currently )?overloaded\b/i,
+	/\bservice is (?:currently )?overloaded\b/i,
+	/\bupstream model provider is temporarily unavailable\b/i,
+	/\bcurrently overloaded\b/i
+];
 /** Body text the service uses for a 429 that must NOT be retried. */
 const QUOTA_EXHAUSTED_PATTERNS$1 = [
 	/exceeded_current_quota_error/i,
@@ -24968,12 +25207,14 @@ function classifyKimiFailure(status, bodyText) {
 		code: CONTEXT_OVERFLOW_CODE,
 		retryable: false,
 		accountScoped: false,
+		upstreamOverload: false,
 		message: `${PROVIDER_NAME$5} context window exceeded: ${detail}`
 	};
 	if (status === 402) return {
 		code: "SERVER",
 		retryable: true,
 		accountScoped: false,
+		upstreamOverload: false,
 		message: `${PROVIDER_NAME$5} could not verify the subscription tier (402). Retrying; if it persists, confirm the membership is active.${detail ? ` ${detail}` : ""}`
 	};
 	if (status === 401 || status === 403) {
@@ -24981,6 +25222,7 @@ function classifyKimiFailure(status, bodyText) {
 			code: "PROVIDER_ERROR",
 			retryable: false,
 			accountScoped: false,
+			upstreamOverload: false,
 			message: `${PROVIDER_NAME$5} refused this request for the current plan: ${detail || "the requested model or context is not included"}. Switch to a model the plan includes, lower the context-window override, or upgrade the subscription.`
 		};
 		if (status === 403) {
@@ -24989,6 +25231,7 @@ function classifyKimiFailure(status, bodyText) {
 				code: "PROVIDER_ERROR",
 				retryable: false,
 				accountScoped: true,
+				upstreamOverload: false,
 				message: `${PROVIDER_NAME$5} blocked the request on an account limit (403): ${detail || (limitReached ? "the account limit was reached" : "the account refused the request")}. The quota refreshes on its own schedule — check the Kimi Code card in Settings for the reset time.`
 			};
 		}
@@ -24996,6 +25239,7 @@ function classifyKimiFailure(status, bodyText) {
 			code: "INVALID_CREDENTIAL",
 			retryable: false,
 			accountScoped: false,
+			upstreamOverload: false,
 			message: `${PROVIDER_NAME$5} rejected the stored credential (401). Sign in again from Settings > Kimi Code.${detail ? ` ${detail}` : ""}`
 		};
 	}
@@ -25004,31 +25248,43 @@ function classifyKimiFailure(status, bodyText) {
 			code: "PROVIDER_ERROR",
 			retryable: false,
 			accountScoped: true,
+			upstreamOverload: false,
 			message: `${PROVIDER_NAME$5} reports the account quota is exhausted: ${detail || "no remaining quota"}. Top up or wait for the window to reset.`
 		};
+		if (matchesAny$1(detail, UPSTREAM_OVERLOAD_PATTERNS)) return {
+			code: "SERVER",
+			retryable: true,
+			accountScoped: false,
+			upstreamOverload: true,
+			message: `${PROVIDER_NAME$5} upstream engine is overloaded (429): ${detail || "the engine is currently overloaded"}. This is a temporary upstream condition shared by every account, so no account is taken out of rotation; retrying with backoff.`
+		};
 		return {
 			code: "RATE_LIMIT",
 			retryable: true,
 			accountScoped: false,
-			message: `${PROVIDER_NAME$5} is rate limited or overloaded (429): ${detail || "too many requests"}. Retrying with backoff.`
+			upstreamOverload: false,
+			message: `${PROVIDER_NAME$5} is rate limited (429): ${detail || "too many requests"}. Retrying with backoff.`
 		};
 	}
 	if (status >= 500) return {
 		code: "SERVER",
 		retryable: true,
 		accountScoped: false,
+		upstreamOverload: matchesAny$1(detail, UPSTREAM_OVERLOAD_PATTERNS),
 		message: `${PROVIDER_NAME$5} upstream server error (${status}): ${detail || "the model provider is temporarily unavailable"}. Retrying with backoff.`
 	};
 	if (status === 400) return {
 		code: "PROVIDER_ERROR",
 		retryable: false,
 		accountScoped: false,
+		upstreamOverload: false,
 		message: `${PROVIDER_NAME$5} rejected the request (400): ${detail || "the request was not accepted"}`
 	};
 	return {
 		code: "PROVIDER_ERROR",
 		retryable: false,
 		accountScoped: false,
+		upstreamOverload: false,
 		message: `${PROVIDER_NAME$5} API error (${status}): ${detail || "No response"}`
 	};
 }
@@ -25061,7 +25317,13 @@ function accountLimitCooldownMs(bodyText, now = Date.now()) {
 	if (resetsAt !== null && Number.isFinite(resetsAt) && resetsAt > now) return Math.min(Math.max(resetsAt - now, POOL_COOLDOWN_MS$3), MAX_ACCOUNT_LIMIT_COOLDOWN_MS);
 	return BILLING_CYCLE_PATTERN.test(bodyText) ? BILLING_CYCLE_COOLDOWN_MS : ACCOUNT_LIMIT_COOLDOWN_MS;
 }
-/** Cooldown one rate-limited account takes when the provider states no delay. */
+/**
+* Cooldown one rate-limited account takes when the provider states no delay.
+*
+* 只在**真正的**限流上使用：上游引擎过载走 SERVER，既不落这条窗口，也不消耗轮转
+* 名额。它是 15 分钟而不是服务自己说的时长，正是因为拿不准——拿不准的那次猜测
+* 落在一个只有单个账号的号池上，代价是整个号池在 15 分钟里彻底不可用。
+*/
 const POOL_COOLDOWN_MS$3 = 15 * 6e4;
 /**
 * Fallback cooldown for an account whose usage window is spent.
@@ -25288,7 +25550,7 @@ var KimiCodeAdapter = class extends LlmAdapter {
 			const after = response.status === 429 ? retryAfterMs$1(response.headers) : void 0;
 			if (pool !== null && accountId !== void 0) {
 				const planScoped = response.status === 429 && matchesAny$1(detail, ENTITLEMENT_PATTERNS);
-				if (response.status === 429 && !planScoped) {
+				if (response.status === 429 && !planScoped && !failure.upstreamOverload) {
 					const cooldownMs = failure.accountScoped ? accountLimitCooldownMs(detail) : after ?? POOL_COOLDOWN_MS$3;
 					await pool.markCooldown(accountId, cooldownMs, `${PROVIDER_NAME$5} 429`).catch(() => void 0);
 					if (await pool.hasAnotherAvailableAccount(tried)) continue;
@@ -25384,7 +25646,7 @@ var KimiCodeAdapter = class extends LlmAdapter {
 			if (status === null) return reclassified;
 			const failure = classifyKimiFailure(status, bodyText);
 			const planScoped = status === 429 && matchesAny$1(bodyText, ENTITLEMENT_PATTERNS);
-			if (status === 429 && !planScoped) await this.coolInBandRateLimit(pool, accountId, failure.accountScoped, bodyText);
+			if (status === 429 && !planScoped && !failure.upstreamOverload) await this.coolInBandRateLimit(pool, accountId, failure.accountScoped, bodyText);
 			else if (failure.code === "INVALID_CREDENTIAL") await pool.markAuthFailed(accountId, failure.message).catch(() => void 0);
 			else if (failure.accountScoped) await pool.markCooldown(accountId, accountLimitCooldownMs(bodyText), `${PROVIDER_NAME$5} in-stream 403`).catch(() => void 0);
 			return reclassified;
@@ -37086,6 +37348,32 @@ const CLAUDE_CLI_VERSION = "2.1.293";
 * see {@link CALLBACK_PORT_ATTEMPTS}.
 */
 const DEFAULT_CALLBACK_PORT = 53692;
+/**
+* How many consecutive ports one probe covers, starting at the default.
+*
+* Windows (Hyper-V/WinNAT) dynamically reserves TCP port ranges that change on
+* every reboot. A fixed callback port can land inside one and `listen` fails
+* with `EACCES`, so browser authorization never completes.
+*
+* An excluded run is not a block of a width anyone can look up. One Windows 11
+* host was measured holding 277 consecutive unusable ports (51121-51397) plus
+* scattered single ones that appear in no static table, and the picture changes
+* across reboots — so a window justified as "covers any single block" is covering
+* a block size that does not exist. A window narrower than the run the default
+* starts inside ends INSIDE that run, and the consequence here is worse than an
+* error: resolveCallbackPort returns null, which beginLogin reads as "fall back
+* to manual". The user is then pushed into pasting a code with no visible cause
+* on a machine that has hundreds of free ports immediately behind the run.
+*
+* 1024 is ~3.7x the widest run measured and still ends at 54716, far below the
+* 65535 ceiling. The window is walked one failed bind at a time (~0.35ms per
+* rejected listen here), so the worst case costs a fraction of a second once per
+* sign-in and only when every port in it is unusable; the ordinary case stops at
+* the first usable port. Widening changes neither which port is tried first nor
+* the default status as the one port known to be registered for this client
+* (see {@link DEFAULT_CALLBACK_PORT}).
+*/
+const CALLBACK_PORT_ATTEMPTS = 1024;
 /** Path of the loopback callback the browser is redirected to. */
 const CALLBACK_PATH = "/callback";
 /** Idle ceiling for one streaming response before it is declared stalled. */
@@ -41950,12 +42238,16 @@ function isPortUsable(port) {
 * First usable loopback port, or null when the probe finds none.
 *
 * null rather than a throw is deliberate (see beginLogin): a failed probe is
-* NOT a hard error, it is the signal to fall back to the manual flow. Windows
-* (Hyper-V/WinNAT) reserves TCP port ranges that move on every reboot, and
-* CALLBACK_PORT_ATTEMPTS covers any single 100-port excluded block the default
-* port can start inside.
-*/
-async function resolveCallbackPort(probe = isPortUsable, attempts = 128) {
+* NOT a hard error, it is the signal to fall back to the manual flow. That is
+* exactly why the window has to be wide rather than merely generous: a run of
+* excluded ports wider than CALLBACK_PORT_ATTEMPTS ends this walk early and drops
+* the user into a paste-a-code flow for a reason nothing on screen explains,
+* while the ports immediately behind that run sit free. Windows
+* (Hyper-V/WinNAT) reserves ranges of no fixed width that move on every reboot,
+* so the width of this window, not any assumed block size, is what keeps the
+* sign-in in loopback.
+*/
+async function resolveCallbackPort(probe = isPortUsable, attempts = CALLBACK_PORT_ATTEMPTS) {
 	for (let offset = 0; offset < attempts; offset += 1) {
 		const port = DEFAULT_CALLBACK_PORT + offset;
 		if (port > 65535) return null;
@@ -42355,7 +42647,7 @@ async function beginLogin(store, options = {}) {
 		port = await resolveCallbackPort(probe);
 		if (port === null) {
 			resolvedMode = "manual";
-			fallbackReason = "No free loopback port in the 128-port range starting at 53692.";
+			fallbackReason = "No free loopback port in the 1024-port range starting at 53692.";
 		} else try {
 			server = await listen(port, LOOPBACK_HOST);
 		} catch (error) {

package/lib/types/host/antigravity/oauth.d.ts

@@ -22,8 +22,29 @@ export declare function callbackPort(): number;
  * URI carries whatever port this returns, so any free loopback port works. A
  * configured `DSH_ANTIGRAVITY_CALLBACK_PORT` still wins — callers who set it
  * accept that the port must be usable.
+ *
+ * How wide such a reserved run is not something this function can look up — it
+ * is the host's own bookkeeping — so the probe only has to be wider than the
+ * widest run it can meet, and it walks a window sized for that (see
+ * {@link CALLBACK_PORT_ATTEMPTS}) instead of guessing a block size. `start` and
+ * `probe` are the seams that keep that claim testable: production probes from
+ * the line's own default and judges each port by really binding it, and a test
+ * can point the walk at a run whose width it controls.
+ */
+export declare function resolveCallbackPort(attempts?: number, host?: string, start?: number, 
+/**
+ * How one port is judged. Defaults to the real bind on `host`, the only
+ * authority that can answer the question for the machine this will run on.
+ *
+ * Overridable because the width of the window is a contract while the width of
+ * the run it must clear is a machine fact: Windows reservations appear *and*
+ * are released while a test is running, and another process can own a port a
+ * scenario wanted free, so a run built out of real sockets measures this host
+ * as much as the probe. An injected judge gives the run a known width and
+ * leaves the assertion about the window alone. (The Claude line injects its
+ * probe the same way.)
  */
-export declare function resolveCallbackPort(attempts?: number, host?: string): Promise<number>;
+probe?: (port: number) => Promise<boolean>): Promise<number>;
 export declare function resolveCallbackHost(raw?: string | undefined): string;
 export declare function redirectUri(port?: number, host?: string): string;
 export declare function clientId(): string;

package/lib/types/host/antigravity/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/oauth.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAA;AAcrD,OAAO,EAAE,mBAAmB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,EAKL,KAAK,0BAA0B,EAChC,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAA;IACjD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AASD,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,SAAyB,EACjC,IAAI,SAAwB,GAC3B,OAAO,CAAC,MAAM,CAAC,CAUjB;AAoBD,wBAAgB,mBAAmB,CAAC,GAAG,qBAAkC,GAAG,MAAM,CAIjF;AAED,wBAAgB,WAAW,CAAC,IAAI,SAAiB,EAAE,IAAI,SAAwB,GAAG,MAAM,CAOvF;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAMD,wBAAgB,YAAY,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAItE;AAeD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAY7C;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW5G;AAED,wBAAsB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAA;CACpB,CAAC,CA+ED;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG3E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,0BAA0B,GAAG,IAAI,CAahF;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4B7B;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,sBAAsB,CAAC,CA2CjC;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAmE5B;AAED,wBAAgB,iBAAiB,IAAI,iBAAiB,CAErD;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,sBAAsB,EACnC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,sBAAsB,CAAC,CAkCjC;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBhD;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,CAAC,EAAE,WAAW,EACpB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7B,OAAO,GAAE,OAAO,KAAa,EAC7B,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI;AACpC;;;;;;;;GAQG;AACH,MAAM,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAkB,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CA+BjC"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/oauth.ts"],"names":[],"mappings":"AACA,OAAO,EAAgB,KAAK,MAAM,EAAE,MAAM,WAAW,CAAA;AAcrD,OAAO,EAAE,mBAAmB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AACnF,OAAO,EAKL,KAAK,0BAA0B,EAChC,MAAM,aAAa,CAAA;AAEpB,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAA;IACjD,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AASD,wBAAgB,YAAY,IAAI,MAAM,CAMrC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAsB,mBAAmB,CACvC,QAAQ,SAAyB,EACjC,IAAI,SAAwB,EAC5B,KAAK,SAAwB;AAC7B;;;;;;;;;;;GAWG;AACH,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAsC,GAC7E,OAAO,CAAC,MAAM,CAAC,CAUjB;AAoBD,wBAAgB,mBAAmB,CAAC,GAAG,qBAAkC,GAAG,MAAM,CAIjF;AAED,wBAAgB,WAAW,CAAC,IAAI,SAAiB,EAAE,IAAI,SAAwB,GAAG,MAAM,CAOvF;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,YAAY,IAAI,MAAM,CAErC;AAMD,wBAAgB,YAAY,IAAI;IAAE,QAAQ,EAAE,MAAM,CAAC;IAAC,SAAS,EAAE,MAAM,CAAA;CAAE,CAItE;AAeD,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAY7C;AAED,wBAAsB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,OAAO,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAW5G;AAED,wBAAsB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC;IACxE,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,MAAM,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IAC3D,gFAAgF;IAChF,WAAW,EAAE,MAAM,CAAA;CACpB,CAAC,CA+ED;AAED,wBAAgB,0BAA0B,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS,CAG3E;AAED,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,0BAA0B,GAAG,IAAI,CAahF;AAED,wBAAsB,0BAA0B,CAC9C,KAAK,EAAE,MAAM,EACb,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CA4B7B;AAED,wBAAsB,iBAAiB,CACrC,IAAI,EAAE,MAAM,EACZ,QAAQ,EAAE,MAAM,EAChB,WAAW,EAAE,MAAM,EACnB,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,GACnC,OAAO,CAAC,sBAAsB,CAAC,CA2CjC;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,EACpB,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,GACjE,OAAO,CAAC,iBAAiB,CAAC,CAmE5B;AAED,wBAAgB,iBAAiB,IAAI,iBAAiB,CAErD;AAED,wBAAsB,uBAAuB,CAC3C,WAAW,EAAE,sBAAsB,EACnC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC,sBAAsB,CAAC,CAkCjC;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,CAAC,CAkBhD;AAED,wBAAsB,YAAY,CAChC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,CAAC,EAAE,WAAW,EACpB,KAAK,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,EAC7B,OAAO,GAAE,OAAO,KAAa,EAC7B,UAAU,CAAC,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI;AACpC;;;;;;;;GAQG;AACH,MAAM,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAkB,GAC1C,OAAO,CAAC,sBAAsB,CAAC,CA+BjC"}

package/lib/types/host/antigravity/port-constants.d.ts

@@ -10,11 +10,24 @@
 /** Default loopback port the Antigravity CLI's own flow uses. */
 export declare const DEFAULT_CALLBACK_PORT = 51121;
 /**
- * How many consecutive ports one probe covers.
+ * How many consecutive ports one probe covers, starting at the default.
  *
- * Windows excluded-port ranges are reserved in blocks of up to 100 ports, so a
- * probe narrower than that can stop inside a block and still fail. 128 covers
- * any single block the default port can start in.
+ * An excluded range is not a block of fixed width. Windows reserves whatever
+ * span Hyper-V/WinNAT/its own services hold, it moves on every reboot, and a
+ * Windows 11 host was measured handing this line's default port 277 consecutive
+ * excluded ports (51121-51397). A window narrower than the run the default
+ * starts inside ends *inside* that run and then reports "no usable port" on a
+ * machine where hundreds of free ports sit immediately behind it — so the width
+ * of this window, not the width the probe assumes, is what keeps the flow
+ * working.
+ *
+ * 1024 is roughly 3.7x the widest run measured, which is the margin that stops
+ * this depending on any single host's layout, and it still ends at 52144, far
+ * below the 65535 ceiling. The window is cheap because it is walked one failed
+ * bind at a time: a rejected listen measured ~0.35ms here (277 probes in 96ms),
+ * so even the full 1024-probe worst case — only reached when every port in the
+ * window is unusable, immediately before the actionable error — costs ~0.36s
+ * once per sign-in. The ordinary case stops at the first usable port.
  */
-export declare const CALLBACK_PORT_ATTEMPTS = 128;
+export declare const CALLBACK_PORT_ATTEMPTS = 1024;
 //# sourceMappingURL=port-constants.d.ts.map

package/lib/types/host/antigravity/port-constants.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"port-constants.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/port-constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,QAAQ,CAAA;AAE1C;;;;;;GAMG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAA"}
+{"version":3,"file":"port-constants.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/port-constants.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,iEAAiE;AACjE,eAAO,MAAM,qBAAqB,QAAQ,CAAA;AAE1C;;;;;;;;;;;;;;;;;;;GAmBG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAA"}

package/lib/types/host/claude/oauth.d.ts

@@ -316,10 +316,14 @@ export declare function getLoginStatus(): LoginFlowStatus;
  * First usable loopback port, or null when the probe finds none.
  *
  * null rather than a throw is deliberate (see beginLogin): a failed probe is
- * NOT a hard error, it is the signal to fall back to the manual flow. Windows
- * (Hyper-V/WinNAT) reserves TCP port ranges that move on every reboot, and
- * CALLBACK_PORT_ATTEMPTS covers any single 100-port excluded block the default
- * port can start inside.
+ * NOT a hard error, it is the signal to fall back to the manual flow. That is
+ * exactly why the window has to be wide rather than merely generous: a run of
+ * excluded ports wider than CALLBACK_PORT_ATTEMPTS ends this walk early and drops
+ * the user into a paste-a-code flow for a reason nothing on screen explains,
+ * while the ports immediately behind that run sit free. Windows
+ * (Hyper-V/WinNAT) reserves ranges of no fixed width that move on every reboot,
+ * so the width of this window, not any assumed block size, is what keeps the
+ * sign-in in loopback.
  */
 export declare function resolveCallbackPort(probe?: (port: number) => Promise<boolean>, attempts?: number): Promise<number | null>;
 /** A value a user pasted into the manual sign-in box, or why it was rejected. */

package/lib/types/host/claude/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/claude/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6GG;AAGH,OAAa,EAAwB,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAA;AAmBxF;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAE5E,YAAY,EAAE,iBAAiB,EAAE,CAAA;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IACzC,KAAK,CAAC,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrD;AAMD,gEAAgE;AAChE,eAAO,MAAM,aAAa,cAAc,CAAA;AAgCxC,4EAA4E;AAC5E,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,iEAAiE;AACjE,qBAAa,oBAAqB,SAAQ,KAAK;IAChB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAAzC,OAAO,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,OAAO,YAAA;CAItD;AAiHD,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,IAAI,YAAY,CAKnD;AAMD,oFAAoF;AACpF,MAAM,MAAM,YAAY,GAAG,iBAAiB,CAAA;AAE5C,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,wDAAwD;IACxD,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,OAAO,EAAE,YAAY,CAAA;CACtB;AAuFD,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAyDD;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAC9E,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAS3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA2B3B;AASD,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AA0BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;AAMD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAmB7C;AAMD,kEAAkE;AAClE,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAE7C,qCAAqC;AACrC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,OAAO,CAAA;AAElF;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,cAAc;IACd,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,4DAA4D;IAC5D,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,CAAA;CAC5C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,WAAW,CAAA;IACnB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxD,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAuBD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAsDD;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAgB,EACxD,QAAQ,SAAyB,GAChC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUxB;AAiOD,iFAAiF;AACjF,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAahC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAoChE;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GACvC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB1E;AAMD,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAY3G;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,gBAAgB,EACvB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,eAAe,CAAC,CAsH1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAMlC"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/claude/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6GG;AAGH,OAAa,EAAwB,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAA;AAmBxF;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,iBAAiB,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AAE5E,YAAY,EAAE,iBAAiB,EAAE,CAAA;AAEjC;;;;;;;;GAQG;AACH,MAAM,WAAW,gBAAgB;IAC/B,IAAI,IAAI,OAAO,CAAC,iBAAiB,GAAG,IAAI,CAAC,CAAA;IACzC,KAAK,CAAC,WAAW,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;CACrD;AAMD,gEAAgE;AAChE,eAAO,MAAM,aAAa,cAAc,CAAA;AAgCxC,4EAA4E;AAC5E,qBAAa,uBAAwB,SAAQ,KAAK;gBACpC,OAAO,EAAE,MAAM;CAI5B;AAED,iEAAiE;AACjE,qBAAa,oBAAqB,SAAQ,KAAK;IAChB,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO;gBAAzC,OAAO,EAAE,MAAM,EAAW,KAAK,CAAC,EAAE,OAAO,YAAA;CAItD;AAiHD,uDAAuD;AACvD,MAAM,WAAW,YAAY;IAC3B,yDAAyD;IACzD,QAAQ,EAAE,MAAM,CAAA;IAChB,mEAAmE;IACnE,SAAS,EAAE,MAAM,CAAA;IACjB,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAA;CACd;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,oBAAoB,IAAI,YAAY,CAKnD;AAMD,oFAAoF;AACpF,MAAM,MAAM,YAAY,GAAG,iBAAiB,CAAA;AAE5C,6EAA6E;AAC7E,MAAM,WAAW,gBAAgB;IAC/B,WAAW,EAAE,MAAM,CAAA;IACnB,iEAAiE;IACjE,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,MAAM,CAAA;IACjB,wDAAwD;IACxD,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,OAAO,EAAE,YAAY,CAAA;CACtB;AAuFD,UAAU,mBAAmB;IAC3B,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AAyDD;;;;;;GAMG;AACH,wBAAsB,yBAAyB,CAC7C,MAAM,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,CAAC;IAAC,WAAW,EAAE,MAAM,CAAA;CAAE,EAC9E,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,gBAAgB,CAAC,CAS3B;AAED;;;;;;;;;;GAUG;AACH,wBAAsB,kBAAkB,CACtC,YAAY,EAAE,MAAM,EACpB,OAAO,GAAE,mBAAwB,GAChC,OAAO,CAAC,gBAAgB,CAAC,CA2B3B;AASD,MAAM,WAAW,kBAAkB;IACjC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,4DAA4D;IAC5D,KAAK,CAAC,EAAE,OAAO,CAAA;CAChB;AA0BD;;;;;;;;;;;;GAYG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,EAAE,gBAAgB,EACvB,OAAO,GAAE,kBAAuB,GAC/B,OAAO,CAAC,iBAAiB,CAAC,CAwC5B;AAMD;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAmB7C;AAMD,kEAAkE;AAClE,MAAM,MAAM,SAAS,GAAG,QAAQ,GAAG,UAAU,CAAA;AAE7C,qCAAqC;AACrC,MAAM,MAAM,WAAW,GAAG,MAAM,GAAG,SAAS,GAAG,YAAY,GAAG,UAAU,GAAG,OAAO,CAAA;AAElF;;;;;;;;GAQG;AACH,MAAM,WAAW,SAAS;IACxB,MAAM,EAAE,MAAM,CAAA;IACd,4EAA4E;IAC5E,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAA;IACxB,iFAAiF;IACjF,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAA;IAC5B,cAAc;IACd,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAA;IACzB,2EAA2E;IAC3E,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,4DAA4D;IAC5D,UAAU,EAAE,MAAM,GAAG,aAAa,GAAG,MAAM,CAAA;CAC5C;AAED;;;;;;;GAOG;AACH,MAAM,WAAW,eAAe;IAC9B,MAAM,EAAE,WAAW,CAAA;IACnB,kEAAkE;IAClE,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,gEAAgE;IAChE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,4DAA4D;IAC5D,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,iDAAiD;IACjD,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED,uFAAuF;AACvF,MAAM,WAAW,iBAAiB;IAChC,8EAA8E;IAC9E,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,6EAA6E;IAC7E,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,8EAA8E;IAC9E,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,CAAC,CAAA;IACxD,2DAA2D;IAC3D,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAC1C,4EAA4E;IAC5E,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAuBD;;;;;GAKG;AACH,wBAAgB,cAAc,IAAI,eAAe,CAEhD;AAsDD;;;;;;;;;;;;GAYG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAgB,EACxD,QAAQ,SAAyB,GAChC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAUxB;AAiOD,iFAAiF;AACjF,MAAM,MAAM,gBAAgB,GACxB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACzC;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,CAAA;AAahC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,GAAG,gBAAgB,CAoChE;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,IAAI,EAAE,MAAM,EACZ,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GACvC,OAAO,CAAC;IAAE,EAAE,EAAE,IAAI,CAAA;CAAE,GAAG;IAAE,EAAE,EAAE,KAAK,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC,CAwB1E;AAMD,uEAAuE;AACvE,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,EAAE,aAAa,GAAG,OAAO,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,MAAM,CAY3G;AAED;;;;;;;;;;;GAWG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,gBAAgB,EACvB,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,eAAe,CAAC,CAsH1B;AAED;;;;;;;;GAQG;AACH,wBAAgB,WAAW,IAAI,IAAI,CAMlC"}

package/lib/types/host/claude/types.d.ts

@@ -195,12 +195,27 @@ export declare const DEFAULT_CALLBACK_PORT = 53692;
  *
  * Windows (Hyper-V/WinNAT) dynamically reserves TCP port ranges that change on
  * every reboot. A fixed callback port can land inside one and `listen` fails
- * with `EACCES`, so browser authorization never completes. Excluded ranges are
- * reserved in blocks of up to 100 ports, which is why a probe narrower than that
- * can stop inside a block and still fail; 128 covers any single block the
- * default port can start in. Mirrors the Antigravity line's own probe.
+ * with `EACCES`, so browser authorization never completes.
+ *
+ * An excluded run is not a block of a width anyone can look up. One Windows 11
+ * host was measured holding 277 consecutive unusable ports (51121-51397) plus
+ * scattered single ones that appear in no static table, and the picture changes
+ * across reboots — so a window justified as "covers any single block" is covering
+ * a block size that does not exist. A window narrower than the run the default
+ * starts inside ends INSIDE that run, and the consequence here is worse than an
+ * error: resolveCallbackPort returns null, which beginLogin reads as "fall back
+ * to manual". The user is then pushed into pasting a code with no visible cause
+ * on a machine that has hundreds of free ports immediately behind the run.
+ *
+ * 1024 is ~3.7x the widest run measured and still ends at 54716, far below the
+ * 65535 ceiling. The window is walked one failed bind at a time (~0.35ms per
+ * rejected listen here), so the worst case costs a fraction of a second once per
+ * sign-in and only when every port in it is unusable; the ordinary case stops at
+ * the first usable port. Widening changes neither which port is tried first nor
+ * the default status as the one port known to be registered for this client
+ * (see {@link DEFAULT_CALLBACK_PORT}).
  */
-export declare const CALLBACK_PORT_ATTEMPTS = 128;
+export declare const CALLBACK_PORT_ATTEMPTS = 1024;
 /** Path of the loopback callback the browser is redirected to. */
 export declare const CALLBACK_PATH = "/callback";
 /** Idle ceiling for one streaming response before it is declared stalled. */

package/lib/types/host/claude/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/host/claude/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,uCAAuC;AACvC,eAAO,MAAM,WAAW,wBAAwB,CAAA;AAChD,kEAAkE;AAClE,eAAO,MAAM,aAAa,mCAAe,CAAA;AAEzC,kFAAkF;AAClF,eAAO,MAAM,QAAQ,8BAA8B,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,2BAA2B,CAAA;AACrD,2EAA2E;AAC3E,eAAO,MAAM,WAAW,eAAe,CAAA;AACvC,gEAAgE;AAChE,eAAO,MAAM,UAAU,qBAAqB,CAAA;AAE5C;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,sCAAsC,CAAA;AACtE,wEAAwE;AACxE,eAAO,MAAM,eAAe,+CAA+C,CAAA;AAE3E;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,oDAAoD,CAAA;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,yCAAyC,CAAA;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,+GAA+G,CAAA;AAExI;;;;;GAKG;AACH,eAAO,MAAM,UAAU,qBAAqB,CAAA;AAC5C,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,yBAAyB,CAAA;AACtD,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,oCAAoC,CAAA;AAC1E;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,kCAAkC,CAAA;AACtE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAA;AACxC,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,EAAE,cAAqB,CAAA;AACjE,2DAA2D;AAC3D,eAAO,MAAM,wBAAwB,EAAE,cAAqB,CAAA;AAE5D,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,CAE/F;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AACD;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,yCAAyC,CAAA;AAEpF,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,eAAe,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAE3C;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAAQ,CAAA;AAE1C;;;;;;;;;GASG;AACH,eAAO,MAAM,sBAAsB,MAAM,CAAA;AAEzC,kEAAkE;AAClE,eAAO,MAAM,aAAa,cAAc,CAAA;AAExC,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAC7C,uDAAuD;AACvD,eAAO,MAAM,wBAAwB,4BAA4B,CAAA;AACjE,kDAAkD;AAClD,eAAO,MAAM,oBAAoB,QAAS,CAAA;AAC1C,6DAA6D;AAC7D,eAAO,MAAM,eAAe,SAAU,CAAA;AACtC,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,SAAU,CAAA;AACzC,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,SAAU,CAAA;AAC5C,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,UAAY,CAAA;AAC7C,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,SAAU,CAAA;AAEvC,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,QAAS,CAAA;AACxC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,qFAAqF,CAAA;AAEnH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU;IACrB,qFAAqF;;IAErF,+EAA+E;;IAE/E,iFAAiF;;IAEjF,mFAAmF;;IAEnF,uEAAuE;;IAEvE,kDAAkD;;IAElD,+CAA+C;;IAE/C,mFAAmF;;CAE3E,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,gCAAgC,CAAA;AAE9E,uEAAuE;AACvE,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAA8B,CAAA;AAEvF,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAKD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAGzC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAG9D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CASzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAIhF;AAoBD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,MAA8B,GAAG,MAAM,CAEhF"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/host/claude/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,uCAAuC;AACvC,eAAO,MAAM,WAAW,wBAAwB,CAAA;AAChD,kEAAkE;AAClE,eAAO,MAAM,aAAa,mCAAe,CAAA;AAEzC,kFAAkF;AAClF,eAAO,MAAM,QAAQ,8BAA8B,CAAA;AAEnD;;;;;;GAMG;AACH,eAAO,MAAM,aAAa,2BAA2B,CAAA;AACrD,2EAA2E;AAC3E,eAAO,MAAM,WAAW,eAAe,CAAA;AACvC,gEAAgE;AAChE,eAAO,MAAM,UAAU,qBAAqB,CAAA;AAE5C;;;;;;;;GAQG;AACH,eAAO,MAAM,mBAAmB,sCAAsC,CAAA;AACtE,wEAAwE;AACxE,eAAO,MAAM,eAAe,+CAA+C,CAAA;AAE3E;;;;;;;;;GASG;AACH,eAAO,MAAM,yBAAyB,oDAAoD,CAAA;AAE1F;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,yCAAyC,CAAA;AAErE;;;;;;;GAOG;AACH,eAAO,MAAM,YAAY,+GAA+G,CAAA;AAExI;;;;;GAKG;AACH,eAAO,MAAM,UAAU,qBAAqB,CAAA;AAC5C,oFAAoF;AACpF,eAAO,MAAM,gBAAgB,yBAAyB,CAAA;AACtD,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,oCAAoC,CAAA;AAC1E;;;;;;GAMG;AACH,eAAO,MAAM,uBAAuB,kCAAkC,CAAA;AACtE;;;;;;;;;;;;;;GAcG;AACH,MAAM,MAAM,cAAc,GAAG,IAAI,GAAG,IAAI,CAAA;AACxC,2EAA2E;AAC3E,eAAO,MAAM,6BAA6B,EAAE,cAAqB,CAAA;AACjE,2DAA2D;AAC3D,eAAO,MAAM,wBAAwB,EAAE,cAAqB,CAAA;AAE5D,+EAA+E;AAC/E,wBAAgB,eAAe,CAAC,GAAG,EAAE,cAAc,GAAG;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,GAAG,EAAE,cAAc,CAAA;CAAE,CAE/F;AAED,mEAAmE;AACnE,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,cAAc,CAExE;AACD;;;;;;;;;GASG;AACH,eAAO,MAAM,8BAA8B,yCAAyC,CAAA;AAEpF,+DAA+D;AAC/D,eAAO,MAAM,iBAAiB,eAAe,CAAA;AAE7C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA0CG;AACH,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAE3C;;;;;;;GAOG;AACH,eAAO,MAAM,qBAAqB,QAAQ,CAAA;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAA;AAE1C,kEAAkE;AAClE,eAAO,MAAM,aAAa,cAAc,CAAA;AAExC,6EAA6E;AAC7E,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAC7C,uDAAuD;AACvD,eAAO,MAAM,wBAAwB,4BAA4B,CAAA;AACjE,kDAAkD;AAClD,eAAO,MAAM,oBAAoB,QAAS,CAAA;AAC1C,6DAA6D;AAC7D,eAAO,MAAM,eAAe,SAAU,CAAA;AACtC,4EAA4E;AAC5E,eAAO,MAAM,kBAAkB,SAAU,CAAA;AACzC,+EAA+E;AAC/E,eAAO,MAAM,qBAAqB,SAAU,CAAA;AAC5C,qDAAqD;AACrD,eAAO,MAAM,oBAAoB,UAAY,CAAA;AAC7C,+DAA+D;AAC/D,eAAO,MAAM,gBAAgB,SAAU,CAAA;AAEvC,wDAAwD;AACxD,eAAO,MAAM,kBAAkB,QAAS,CAAA;AACxC;;;;;;;GAOG;AACH,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,qFAAqF,CAAA;AAEnH;;;;;;;;;;GAUG;AACH,eAAO,MAAM,UAAU;IACrB,qFAAqF;;IAErF,+EAA+E;;IAE/E,iFAAiF;;IAEjF,mFAAmF;;IAEnF,uEAAuE;;IAEvE,kDAAkD;;IAElD,+CAA+C;;IAE/C,mFAAmF;;CAE3E,CAAA;AAEV,2CAA2C;AAC3C,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,UAAU,CAAC,CAAC,MAAM,OAAO,UAAU,CAAC,CAAA;AAE1E;;;;;;GAMG;AACH,eAAO,MAAM,iCAAiC,gCAAgC,CAAA;AAE9E,uEAAuE;AACvE,eAAO,MAAM,kBAAkB,EAAE,SAAS,eAAe,EAA8B,CAAA;AAEvF,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAE1E;AAKD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAGzC;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAG9D;AAED;;;;;;;;;;;;;;;;;;;GAmBG;AACH,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CASzE;AAED;;;;;;;;;GASG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAIhF;AAoBD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,IAAI,MAAM,CAG1C;AAED,yEAAyE;AACzE,wBAAgB,mBAAmB,CAAC,IAAI,GAAE,MAA8B,GAAG,MAAM,CAEhF"}

package/lib/types/host/command-code/oauth.d.ts

@@ -31,13 +31,16 @@ export declare function buildAuthUrl(input: {
 /** State token the studio must echo back; 32 random bytes, base64url. */
 export declare function generateState(): string;
 /**
- * First free loopback port in the CLI's probe range.
+ * First free loopback port in the probe range.
  *
  * The studio receives the port in the callback URL, so any free port works;
  * starting at the CLI's own default keeps behavior identical on a machine where
- * a server-side allowlist is ever introduced.
+ * a server-side allowlist is ever introduced. `probe` is the seam the tests walk
+ * a reserved run through, which is what lets the width of the window be asserted
+ * without binding a thousand real sockets on a machine whose own reservations
+ * move underneath the test.
  */
-export declare function findAvailablePort(start?: number, attempts?: number): Promise<number>;
+export declare function findAvailablePort(start?: number, attempts?: number, probe?: (port: number) => Promise<boolean>): Promise<number>;
 export interface CommandCodeAuthServerHandle {
     server: Server;
     port: number;

package/lib/types/host/command-code/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/oauth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAA;AAehG,OAAO,EAAE,mBAAmB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAEhF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAA;AAE9E,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAID,wBAAgB,iBAAiB,IAAI,yBAAyB,CAE7D;AAED,mFAAmF;AACnF,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAgB7C;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQ3E;AAED,yEAAyE;AACzE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAWD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,SAAwB,EAC7B,QAAQ,SAAyB,GAChC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAyFD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACjE,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GACxC,OAAO,CAAC,2BAA2B,CAAC,CA2LtC;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9D,GACL,OAAO,CAAC,yBAAyB,CAAC,CAqEpC;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAAO,GAC3G,OAAO,CAAC,kBAAkB,CAAC,CAkB7B;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/oauth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAA;AAehG,OAAO,EAAE,mBAAmB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAEhF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAA;AAE9E,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAID,wBAAgB,iBAAiB,IAAI,yBAAyB,CAE7D;AAED,mFAAmF;AACnF,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAgB7C;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQ3E;AAED,yEAAyE;AACzE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAWD;;;;;;;;;GASG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,SAAwB,EAC7B,QAAQ,SAAyB,EACjC,KAAK,GAAE,CAAC,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAsB,GAC7D,OAAO,CAAC,MAAM,CAAC,CAMjB;AAyFD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACjE,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GACxC,OAAO,CAAC,2BAA2B,CAAC,CA2LtC;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9D,GACL,OAAO,CAAC,yBAAyB,CAAC,CAqEpC;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAAO,GAC3G,OAAO,CAAC,kBAAkB,CAAC,CAkB7B;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/lib/types/host/command-code/types.d.ts

@@ -37,8 +37,28 @@ export declare const BILLING_SUBSCRIPTIONS_PATH = "/alpha/billing/subscriptions"
 export declare const USAGE_SUMMARY_PATH = "/alpha/usage/summary";
 /** First loopback port tried for the browser callback; matches the official CLI. */
 export declare const DEFAULT_CALLBACK_PORT = 5959;
-/** Consecutive ports probed when the default is taken; matches the official CLI. */
-export declare const CALLBACK_PORT_ATTEMPTS = 10;
+/**
+ * Consecutive ports probed when the default is taken.
+ *
+ * The CLI opens its own search at 5959, which {@link DEFAULT_CALLBACK_PORT}
+ * keeps, so on an ordinary machine this line still lands on the port the CLI
+ * would. The WIDTH is recovery budget, not compatibility: the studio is handed
+ * whatever port this returns in the callback URL, so ports past the CLI's own
+ * range were already reachable here before the window was widened, and starting
+ * at the CLI default is what preserves the "behaves like the CLI" property if the
+ * studio ever does pin an allowlist.
+ *
+ * The failure shape makes the width matter more than it does for a line that has
+ * a manual flow to fall back to: exhausting this window is a thrown error and a
+ * dead sign-in, not a downgrade. Windows (Hyper-V/WinNAT) reserves TCP port
+ * ranges of no fixed width that change on every reboot — one host was measured
+ * holding 277 consecutive ports — so a ten-port window is one reboot away from
+ * failing outright and a wider one is not. 1024 matches the other two sign-in
+ * lines here and still ends at 6983: clear of the privileged ports, clear of the
+ * OS dynamic range, and walked one failed bind at a time (~0.35ms each), so the
+ * worst case costs a fraction of a second once per sign-in.
+ */
+export declare const CALLBACK_PORT_ATTEMPTS = 1024;
 export declare const CALLBACK_PATH = "/callback";
 /** Page the studio's browser tab lands on after a successful POST; CLI-compatible. */
 export declare const CALLBACK_COMPLETE_PATH = "/callback/complete";

package/lib/types/host/command-code/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAA;AAGhG,eAAO,MAAM,WAAW,iBAAiB,CAAA;AACzC,eAAO,MAAM,aAAa,iBAAiB,CAAA;AAE3C,oFAAoF;AACpF,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAC7C,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C,sEAAsE;AACtE,eAAO,MAAM,aAAa,QAAQ,CAAA;AAElC,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAI3D,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAI9D,CAAA;AAED,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,iBAAiB,CAAA;AAEjD,0EAA0E;AAC1E,eAAO,MAAM,WAAW,kBAAkB,CAAA;AAC1C,gDAAgD;AAChD,eAAO,MAAM,oBAAoB,2BAA2B,CAAA;AAC5D,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B,iCAAiC,CAAA;AACxE,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,yBAAyB,CAAA;AAExD,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,OAAO,CAAA;AACzC,oFAAoF;AACpF,eAAO,MAAM,sBAAsB,KAAK,CAAA;AACxC,eAAO,MAAM,aAAa,cAAc,CAAA;AACxC,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,QAAS,CAAA;AAC/C,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,QAAS,CAAA;AACxC,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,gGAI3B,CAAA;AACV,eAAO,MAAM,gBAAgB,QAAgB,CAAA;AAC7C,eAAO,MAAM,oBAAoB,QAAS,CAAA;AAC1C,eAAO,MAAM,kBAAkB,QAAgB,CAAA;AAC/C,eAAO,MAAM,oBAAoB,QAAiB,CAAA;AAElD,eAAO,MAAM,kBAAkB,QAAS,CAAA;AACxC,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAC7C,eAAO,MAAM,wBAAwB,4BAA4B,CAAA;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,qFAAqF,CAAA;AAEnH,wFAAwF;AACxF,eAAO,MAAM,cAAc,qBAAqB,CAAA;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,cAAc,kBAAkB,CAAA;AAC7C,eAAO,MAAM,kBAAkB,+BAA+B,CAAA;AAC9D,eAAO,MAAM,sBAAsB,mCAAmC,CAAA;AACtE,eAAO,MAAM,mBAAmB,gCAAgC,CAAA;AAChE,eAAO,MAAM,qBAAqB,kCAAkC,CAAA;AACpE,eAAO,MAAM,iBAAiB,8BAA8B,CAAA;AAC5D,eAAO,MAAM,2BAA2B,wCAAwC,CAAA;AAChF,uEAAuE;AACvE,eAAO,MAAM,UAAU,cAAc,CAAA;AACrC,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAC1D,eAAO,MAAM,WAAW,YAAY,CAAA;AAEpC,wBAAgB,aAAa,CAAC,GAAG,qBAAmC,GAAG,iBAAiB,CAGvF;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,iBAAmC,GAAG,MAAM,CAE3E;AAED,wBAAgB,aAAa,CAAC,GAAG,GAAE,iBAAmC,GAAG,MAAM,CAE9E;AAED,wBAAgB,WAAW,CAAC,GAAG,GAAE,iBAAmC,GAAG,MAAM,CAE5E;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAE7D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAAE,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,eAAe,GAAG,SAAS,CAOlH;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAG7D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,SAAS,CAAA;AAE9C;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAKzF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUrE;AA6CD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAGQ,CAAA"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,wCAAwC,CAAA;AAGhG,eAAO,MAAM,WAAW,iBAAiB,CAAA;AACzC,eAAO,MAAM,aAAa,iBAAiB,CAAA;AAE3C,oFAAoF;AACpF,eAAO,MAAM,WAAW,qBAAqB,CAAA;AAC7C,iFAAiF;AACjF,eAAO,MAAM,qBAAqB,aAAa,CAAA;AAC/C,sEAAsE;AACtE,eAAO,MAAM,aAAa,QAAQ,CAAA;AAElC,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAI3D,CAAA;AAED,eAAO,MAAM,gBAAgB,EAAE,MAAM,CAAC,iBAAiB,EAAE,MAAM,CAI9D,CAAA;AAED,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,iBAAiB,CAAA;AAEjD,0EAA0E;AAC1E,eAAO,MAAM,WAAW,kBAAkB,CAAA;AAC1C,gDAAgD;AAChD,eAAO,MAAM,oBAAoB,2BAA2B,CAAA;AAC5D,2DAA2D;AAC3D,eAAO,MAAM,0BAA0B,iCAAiC,CAAA;AACxE,0DAA0D;AAC1D,eAAO,MAAM,kBAAkB,yBAAyB,CAAA;AAExD,oFAAoF;AACpF,eAAO,MAAM,qBAAqB,OAAO,CAAA;AACzC;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,sBAAsB,OAAO,CAAA;AAC1C,eAAO,MAAM,aAAa,cAAc,CAAA;AACxC,sFAAsF;AACtF,eAAO,MAAM,sBAAsB,uBAAuB,CAAA;AAC1D,oFAAoF;AACpF,eAAO,MAAM,yBAAyB,QAAS,CAAA;AAC/C,sDAAsD;AACtD,eAAO,MAAM,kBAAkB,QAAS,CAAA;AACxC,kFAAkF;AAClF,eAAO,MAAM,wBAAwB,gGAI3B,CAAA;AACV,eAAO,MAAM,gBAAgB,QAAgB,CAAA;AAC7C,eAAO,MAAM,oBAAoB,QAAS,CAAA;AAC1C,eAAO,MAAM,kBAAkB,QAAgB,CAAA;AAC/C,eAAO,MAAM,oBAAoB,QAAiB,CAAA;AAElD,eAAO,MAAM,kBAAkB,QAAS,CAAA;AACxC,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAC7C,eAAO,MAAM,wBAAwB,4BAA4B,CAAA;AAEjE;;;;;;GAMG;AACH,eAAO,MAAM,iBAAiB,qFAAqF,CAAA;AAEnH,wFAAwF;AACxF,eAAO,MAAM,cAAc,qBAAqB,CAAA;AAEhD,8EAA8E;AAC9E,eAAO,MAAM,cAAc,kBAAkB,CAAA;AAC7C,eAAO,MAAM,kBAAkB,+BAA+B,CAAA;AAC9D,eAAO,MAAM,sBAAsB,mCAAmC,CAAA;AACtE,eAAO,MAAM,mBAAmB,gCAAgC,CAAA;AAChE,eAAO,MAAM,qBAAqB,kCAAkC,CAAA;AACpE,eAAO,MAAM,iBAAiB,8BAA8B,CAAA;AAC5D,eAAO,MAAM,2BAA2B,wCAAwC,CAAA;AAChF,uEAAuE;AACvE,eAAO,MAAM,UAAU,cAAc,CAAA;AACrC,eAAO,MAAM,oBAAoB,yBAAyB,CAAA;AAC1D,eAAO,MAAM,WAAW,YAAY,CAAA;AAEpC,wBAAgB,aAAa,CAAC,GAAG,qBAAmC,GAAG,iBAAiB,CAGvF;AAED,wBAAgB,UAAU,CAAC,GAAG,GAAE,iBAAmC,GAAG,MAAM,CAE3E;AAED,wBAAgB,aAAa,CAAC,GAAG,GAAE,iBAAmC,GAAG,MAAM,CAE9E;AAED,wBAAgB,WAAW,CAAC,GAAG,GAAE,iBAAmC,GAAG,MAAM,CAE5E;AAED;;;;;;;;;GASG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,CAE7D;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IAAE,kBAAkB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GAAG,eAAe,GAAG,SAAS,CAOlH;AAED;;;;;;;;;;;;;;;;;;;;;GAqBG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,EAAE,CAG7D;AAED;;;;;;GAMG;AACH,eAAO,MAAM,wBAAwB,SAAS,CAAA;AAE9C;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,IAAI,GAAG,MAAM,GAAG,SAAS,CAKzF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,CAE3E;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAUrE;AA6CD;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,MAAM,CAI1D;AAED;;;;;;;;GAQG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,CAAC;IAAE,EAAE,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,aAAa,EAAE,MAAM,CAAA;CAAE,CAGQ,CAAA"}

package/lib/types/host/credential-store-secret-service.d.ts

@@ -7,8 +7,35 @@ export declare class SecretServiceCredentialStore<T> implements CredentialStore<
     private readonly cache;
     constructor(service: string, account: string, parse: (value: unknown) => T);
     private attributes;
+    /**
+     * Lookup attributes of one shard entry. Secret Service matching is exact on
+     * every given attribute pair, so the primary account value never matches a
+     * shard and vice versa.
+     */
+    private shardAttributes;
     load(): Promise<T | null>;
     save(value: T): Promise<void>;
+    /**
+     * Store an oversized payload as shard entries plus an envelope. The shards
+     * are written under a fresh generation tag first and the primary entry last:
+     * that entry is the commit point, so an interrupted save leaves the previous
+     * envelope and its shards fully intact and the new generation is either
+     * committed whole or cleaned up.
+     */
+    private saveChunked;
+    /**
+     * Envelope of the currently stored value, or null when the entry is missing,
+     * holds a plain value, or cannot be read at all. A save that goes on to fail
+     * surfaces its own error, so a probe failure must not fail the save first.
+     */
+    private storedEnvelope;
+    /**
+     * Remove shard entries, tolerating the ones that are already gone. A missing
+     * entry exits 1 with empty stderr — the same shape a segfaulting secret-tool
+     * takes through the close event (Ubuntu libsecret-tools 0.20.4 crashes on
+     * clearing an entry that does not exist) — so that answer is never an error.
+     */
+    private clearShards;
     clear(): Promise<void>;
 }
 //# sourceMappingURL=credential-store-secret-service.d.ts.map

package/lib/types/host/credential-store-secret-service.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"credential-store-secret-service.d.ts","sourceRoot":"","sources":["../../../src/host/credential-store-secret-service.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAevD,0FAA0F;AAC1F,qBAAa,4BAA4B,CAAC,CAAC,CAAE,YAAW,eAAe,CAAC,CAAC,CAAC;IAMtE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAErB;gBAGkB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;IAG/C,OAAO,CAAC,UAAU;IAIZ,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAazB,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAS7B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAK7B"}
+{"version":3,"file":"credential-store-secret-service.d.ts","sourceRoot":"","sources":["../../../src/host/credential-store-secret-service.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAA;AAyEvD,0FAA0F;AAC1F,qBAAa,4BAA4B,CAAC,CAAC,CAAE,YAAW,eAAe,CAAC,CAAC,CAAC;IAMtE,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,KAAK;IAPxB,OAAO,CAAC,QAAQ,CAAC,KAAK,CAErB;gBAGkB,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,MAAM,EACf,KAAK,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,CAAC;IAG/C,OAAO,CAAC,UAAU;IAIlB;;;;OAIG;IACH,OAAO,CAAC,eAAe;IAIjB,IAAI,IAAI,OAAO,CAAC,CAAC,GAAG,IAAI,CAAC;IAqCzB,IAAI,CAAC,KAAK,EAAE,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAgBnC;;;;;;OAMG;YACW,WAAW;IA2BzB;;;;OAIG;YACW,cAAc;IAU5B;;;;;OAKG;YACW,WAAW;IAWnB,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAmB7B"}

package/lib/types/host/kimi-code/adapter.d.ts

@@ -16,10 +16,14 @@ import { KimiCodeAccountPool } from './account-pool.ts';
  *
  * The retryable set is therefore:
  *
- * - `SERVER` — any 5xx, including that upstream-unavailable 502;
- * - `RATE_LIMIT` — a 429 that is genuine back-pressure ("too many requests",
- *   "the engine is currently overloaded"), which the documentation describes as
- *   transient;
+ * - `SERVER` — any 5xx, including that upstream-unavailable 502, and the
+ *   overloaded 429 (`UPSTREAM_OVERLOAD_PATTERNS`). Overload shares the 429
+ *   status with real back-pressure but not its meaning: it describes the state
+ *   of the upstream engine, which every account behind this endpoint shares, so
+ *   it is filed as the server condition it is and the pool is left alone;
+ * - `RATE_LIMIT` — a 429 that is genuine back-pressure ("too many requests"),
+ *   which the documentation describes as transient and which does belong to the
+ *   account that hit it, so rotation on it still earns its keep;
  * - `TRANSPORT` — a connection that produced no response at all;
  * - `TIMEOUT` — a stalled stream, handled by the idle watchdog.
  *
@@ -65,6 +69,19 @@ export interface KimiFailureClassification {
     message: string;
     /** True only when the failure is worth retrying. */
     retryable: boolean;
+    /**
+     * 本次失败是不是上游引擎过载（正文命中 `UPSTREAM_OVERLOAD_PATTERNS`）。
+     *
+     * 单列成一个字段，是因为「过载」这条信息号池需要、而 code 本身已经不够用了：
+     * 过载要可重试（harness 的退避重试正是为它准备的），所以它必须留在
+     * retryable 集合里；但过载不是任何账号的错，所以它绝不能被当成账号级限流
+     * 写进冷却。code 只有一个，说不了这两件事；`accountScoped` 也只回答「能不能
+     * 换号」，不回答「要不要冷却」——真正限流时答案是「能换号、也要冷却」，
+     * 过载时是「不必换号、更不必冷却」。两条路都可重试却必须分开处理，所以这里
+     * 把归属显式带出来，而不是让调用方拿状态码去猜：同一个 429 状态码同时承载
+     * 这两种含义，而这正是本缺陷的成因。
+     */
+    upstreamOverload: boolean;
     /**
      * True when the refusal belongs to THIS account alone, so another pooled
      * account may still serve the same request.

package/lib/types/host/kimi-code/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/kimi-code/adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EAEV,iBAAiB,EAEjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAGL,WAAW,EASX,mBAAmB,EACpB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,KAAK,oBAAoB,EAEzB,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAUnB,MAAM,aAAa,CAAA;AACpB,OAAO,EAcL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAI3B,MAAM,aAAa,CAAA;AA+EpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAKvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAgCG;AACH,eAAO,MAAM,6BAA6B,EAAE;IAC1C,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAM7E,CAAA;AAID,yFAAyF;AACzF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,iBAAiB,GAAG,SAAS,CAK/B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAA;IACf,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAA;IAClB;;;;;;;;;;;;;;OAcG;IACH,aAAa,EAAE,OAAO,CAAA;CACvB;AAiCD,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAsBxD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CA0G/F;AAWD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CAczF;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,qBAAqB,CAAA;IAC9B,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;CACpD;AAuBD,qBAAa,eAAgB,SAAQ,UAAU;IAW3C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAb1B;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;gBAGrC,KAAK,sBAA4B,EACjC,aAAa,yBAA+B,EAC5C,WAAW,CAAC,EAAE,uBAAuB,YAAA,EACrC,OAAO,GAAE,sBAA2B,EACrD,WAAW,CAAC,EAAE,mBAAmB;IAMnC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC,OAAO,CAAC,QAAQ;IAIhB;;;OAGG;YACW,OAAO;IA0BrB,OAAO,CAAC,gBAAgB;IAUlB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAmB/D,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkCpG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAO/F,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;YAgBpD,aAAa;IA4T5B;;;;;;;;;;;;;;;OAeG;YACW,mBAAmB;IAqDjC;;;;;;;;OAQG;YACW,mBAAmB;CASlC;AAQD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAA"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/kimi-code/adapter.ts"],"names":[],"mappings":"AAEA,OAAO,EACL,UAAU,EAEV,iBAAiB,EAEjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAGL,WAAW,EASX,mBAAmB,EACpB,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,KAAK,oBAAoB,EAEzB,KAAK,uBAAuB,EAC7B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,EACL,iBAAiB,EACjB,kBAAkB,EAUnB,MAAM,aAAa,CAAA;AACpB,OAAO,EAcL,KAAK,qBAAqB,EAC1B,KAAK,qBAAqB,EAI3B,MAAM,aAAa,CAAA;AA+EpB,OAAO,EAAE,mBAAmB,EAAE,MAAM,mBAAmB,CAAA;AAKvD;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AACH,eAAO,MAAM,6BAA6B,EAAE;IAC1C,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAM7E,CAAA;AAID,yFAAyF;AACzF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,iBAAiB,GAAG,SAAS,CAK/B;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,yBAAyB;IACxC,yDAAyD;IACzD,IAAI,EAAE,MAAM,CAAA;IACZ,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAA;IACf,oDAAoD;IACpD,SAAS,EAAE,OAAO,CAAA;IAClB;;;;;;;;;;;OAWG;IACH,gBAAgB,EAAE,OAAO,CAAA;IACzB;;;;;;;;;;;;;;OAcG;IACH,aAAa,EAAE,OAAO,CAAA;CACvB;AA+DD,yEAAyE;AACzE,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAsBxD;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,yBAAyB,CAyI/F;AAWD;;;;;;;;;;;;;;;GAeG;AACH,wBAAgB,sBAAsB,CAAC,QAAQ,EAAE,MAAM,EAAE,GAAG,GAAE,MAAmB,GAAG,MAAM,CAczF;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,qBAAqB,CAAA;IAC9B,wEAAwE;IACxE,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAA;CACpD;AA6BD,qBAAa,eAAgB,SAAQ,UAAU;IAW3C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAb1B;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA4B;gBAGrC,KAAK,sBAA4B,EACjC,aAAa,yBAA+B,EAC5C,WAAW,CAAC,EAAE,uBAAuB,YAAA,EACrC,OAAO,GAAE,sBAA2B,EACrD,WAAW,CAAC,EAAE,mBAAmB;IAMnC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC,OAAO,CAAC,QAAQ;IAIhB;;;OAGG;YACW,OAAO;IA0BrB,OAAO,CAAC,gBAAgB;IAUlB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAmB/D,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAkCpG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAO/F,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;YAgBpD,aAAa;IAqU5B;;;;;;;;;;;;;;;OAeG;YACW,mBAAmB;IA6DjC;;;;;;;;OAQG;YACW,mBAAmB;CASlC;AAQD,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,mBAAmB,EAAE,WAAW,EAAE,CAAA"}

package/package.json

@@ -1,7 +1,8 @@
 {
   "name": "@eddyskywalker/dsh-chatgpt-subscription",
-  "version": "0.24.1",
+  "version": "0.24.3",
   "description": "DSH provider plugin for Codex access through a ChatGPT subscription.",
+  "icon": "./icon.svg",
   "author": {
     "name": "eddyskywalker",
     "url": "https://www.npmjs.com/~eddyskywalker"
@@ -111,6 +112,7 @@
     "antigravity-login": "./bin/antigravity-login.mjs"
   },
   "files": [
+    "icon.svg",
     "lib/index.js",
     "lib/client.js",
     "lib/client.js.map",