@eddyskywalker/dsh-chatgpt-subscription 0.31.0 → 0.32.0

package/lib/types/host/cline-pass/oauth.d.ts

@@ -0,0 +1,134 @@
+/**
+ * Cline account sign-in: WorkOS device authorization followed by Cline's token
+ * registration, plus the refresh chain.
+ *
+ * The official clients implement exactly this sequence (Cline repo
+ * `sdk/packages/core/src/auth/cline.ts` + `auth/provider-auth-registry.ts`):
+ *
+ * 1. `POST https://api.workos.com/user_management/authorize/device` with the
+ *    public client id → `device_code`, `user_code`, `verification_uri_complete`;
+ * 2. the user confirms the code in a browser;
+ * 3. `POST https://api.workos.com/user_management/authenticate` polls the device
+ *    grant → WorkOS `access_token` / `refresh_token`;
+ * 4. `POST {cline}/api/v1/auth/register` exchanges those for Cline's own session
+ *    (access, rotating refresh, expiry, user info);
+ * 5. later, `POST {cline}/api/v1/auth/refresh` renews it.
+ *
+ * The chat bearer is `workos:<access>` — the prefix is part of the token the
+ * official clients send, not a display detail. See `formatClineApiKey` in the
+ * same repo.
+ *
+ * The constants below are transcribed from
+ * `sdk/packages/shared/src/runtime/cline-environment.ts` (production entry).
+ *
+ * @module dsh-chatgpt-subscription/cline-pass-oauth
+ */
+import { type ClinePassOAuthCredentials } from './token-store.ts';
+export declare const CLINE_WORKOS_CLIENT_ID = "client_01K3A541FN8TA3EPPHTD2325AR";
+export declare const CLINE_WORKOS_API_BASE = "https://api.workos.com";
+export declare const CLINE_WORKOS_DEVICE_PATH = "/user_management/authorize/device";
+export declare const CLINE_WORKOS_AUTHENTICATE_PATH = "/user_management/authenticate";
+/** One WorkOS device authorization, as the card renders it. */
+export interface ClinePassDeviceAuthorization {
+    deviceCode: string;
+    userCode: string;
+    verificationUri: string;
+    verificationUriComplete?: string;
+    expiresInSeconds: number;
+    pollIntervalSeconds: number;
+}
+/** A token/refresh failure with the HTTP facts a caller can judge. */
+export declare class ClinePassOAuthError extends Error {
+    readonly status?: number;
+    readonly code?: string;
+    constructor(message: string, options?: {
+        status?: number;
+        code?: string;
+        cause?: unknown;
+    });
+}
+/** Whether a refresh failure means the session is gone and a sign-in is needed. */
+export declare function isClinePassInvalidGrant(error: unknown): boolean;
+/** The auth root for one chat base URL. */
+export declare function clineAuthBaseURL(chatBaseURL: string): string;
+/** One auth sub-path under the chat base. */
+export declare function clineAuthURL(chatBaseURL: string, path: string): string;
+/** Step 1: ask WorkOS for a device code. */
+export declare function startClinePassDeviceAuth(fetchFn: typeof fetch, { signal, timeoutMs }?: {
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Promise<ClinePassDeviceAuthorization>;
+/** Step 4: exchange WorkOS tokens for a Cline session. */
+export declare function registerClinePassTokens(fetchFn: typeof fetch, { baseURL, accessToken, refreshToken, signal, timeoutMs, base, }: {
+    baseURL: string;
+    accessToken: string;
+    refreshToken: string;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+    base?: Partial<ClinePassOAuthCredentials>;
+}): Promise<ClinePassOAuthCredentials>;
+/** Renew one Cline session. The refresh token rotates, so persist the result. */
+export declare function refreshClinePassCredentials(fetchFn: typeof fetch, credentials: ClinePassOAuthCredentials, { baseURL, signal, timeoutMs, }: {
+    baseURL: string;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Promise<ClinePassOAuthCredentials>;
+/** Whether one session should be refreshed before its next use. */
+export declare function clinePassNeedsRefresh(credentials: ClinePassOAuthCredentials, now: number): boolean;
+/** One login flow, as the settings card renders it. */
+export type ClinePassLoginStatus = 'idle' | 'pending' | 'complete' | 'failed' | 'cancelled';
+export interface ClinePassLoginFlow {
+    id: string;
+    status: ClinePassLoginStatus;
+    userCode: string;
+    verificationUri: string;
+    expiresAt: number;
+    intervalSeconds: number;
+    error: string;
+    accountAlias: string;
+}
+export interface ClinePassLoginOptions {
+    fetchFn: typeof fetch;
+    /** The line's current chat base URL. */
+    baseURL(): string;
+    /** Persist a newly signed-in account; throws make the flow fail. */
+    onLogin(credentials: ClinePassOAuthCredentials): Promise<void>;
+    logger?: {
+        warn(message: string, ...args: unknown[]): void;
+    };
+}
+/**
+ * One device-code sign-in at a time.
+ *
+ * Polling is driven by the card (`GET /login/status`): each request makes at
+ * most one WorkOS call, and only after the advertised interval has elapsed. A
+ * host restart therefore loses the pending flow rather than keeping a poll loop
+ * alive with no reader — the same contract the Step Code line uses.
+ */
+export declare class ClinePassLoginManager {
+    private readonly options;
+    private flow;
+    private sequence;
+    constructor(options: ClinePassLoginOptions);
+    /** Start a new flow, cancelling any previous one. */
+    begin({ signal }?: {
+        signal?: AbortSignal;
+    }): Promise<ClinePassLoginFlow>;
+    /** The latest flow, or null when this process never started one. */
+    current(): ClinePassLoginFlow | null;
+    /**
+     * Advance one flow and return its state.
+     *
+     * A flow the caller does not name is not advanced: two cards (or a stale one)
+     * cannot spend each other's polls.
+     */
+    status(id: string, { signal, timeoutMs }?: {
+        signal?: AbortSignal;
+        timeoutMs?: number;
+    }): Promise<ClinePassLoginFlow>;
+    /** Abandon one flow; a late browser confirmation is then ignored. */
+    cancel(id: string): boolean;
+    /** Mark every flow cancelled for teardown. */
+    dispose(): void;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/lib/types/host/cline-pass/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/cline-pass/oauth.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,OAAO,EACL,KAAK,yBAAyB,EAE/B,MAAM,kBAAkB,CAAA;AAGzB,eAAO,MAAM,sBAAsB,sCAAsC,CAAA;AACzE,eAAO,MAAM,qBAAqB,2BAA2B,CAAA;AAC7D,eAAO,MAAM,wBAAwB,sCAAsC,CAAA;AAC3E,eAAO,MAAM,8BAA8B,kCAAkC,CAAA;AAO7E,+DAA+D;AAC/D,MAAM,WAAW,4BAA4B;IAC3C,UAAU,EAAE,MAAM,CAAA;IAClB,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAA;IACvB,uBAAuB,CAAC,EAAE,MAAM,CAAA;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED,sEAAsE;AACtE,qBAAa,mBAAoB,SAAQ,KAAK;IAC5C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;gBAEV,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAM/F;AAED,mFAAmF;AACnF,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,OAAO,CAQ/D;AAED,2CAA2C;AAC3C,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,MAAM,GAAG,MAAM,CAG5D;AAED,6CAA6C;AAC7C,wBAAgB,YAAY,CAAC,WAAW,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,MAAM,CAEtE;AAwCD,4CAA4C;AAC5C,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,OAAO,KAAK,EACrB,EAAE,MAAM,EAAE,SAAmC,EAAE,GAAE;IAAE,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACjG,OAAO,CAAC,4BAA4B,CAAC,CA6BvC;AA6GD,0DAA0D;AAC1D,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,OAAO,KAAK,EACrB,EACE,OAAO,EACP,WAAW,EACX,YAAY,EACZ,MAAM,EACN,SAAmC,EACnC,IAAS,GACV,EAAE;IACD,OAAO,EAAE,MAAM,CAAA;IACf,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,IAAI,CAAC,EAAE,OAAO,CAAC,yBAAyB,CAAC,CAAA;CAC1C,GACA,OAAO,CAAC,yBAAyB,CAAC,CAUpC;AAED,iFAAiF;AACjF,wBAAsB,2BAA2B,CAC/C,OAAO,EAAE,OAAO,KAAK,EACrB,WAAW,EAAE,yBAAyB,EACtC,EACE,OAAO,EACP,MAAM,EACN,SAAmC,GACpC,EAAE;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/D,OAAO,CAAC,yBAAyB,CAAC,CAkBpC;AAED,mEAAmE;AACnE,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,yBAAyB,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAElG;AAED,uDAAuD;AACvD,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAA;AAE3F,MAAM,WAAW,kBAAkB;IACjC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,oBAAoB,CAAA;IAC5B,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;CACrB;AAUD,MAAM,WAAW,qBAAqB;IACpC,OAAO,EAAE,OAAO,KAAK,CAAA;IACrB,wCAAwC;IACxC,OAAO,IAAI,MAAM,CAAA;IACjB,oEAAoE;IACpE,OAAO,CAAC,WAAW,EAAE,yBAAyB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC9D,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;KAAE,CAAA;CAC7D;AAED;;;;;;;GAOG;AACH,qBAAa,qBAAqB;IAIpB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,QAAQ,CAAI;gBAES,OAAO,EAAE,qBAAqB;IAE3D,qDAAqD;IAC/C,KAAK,CAAC,EAAE,MAAM,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA2BnF,oEAAoE;IACpE,OAAO,IAAI,kBAAkB,GAAG,IAAI;IAIpC;;;;;OAKG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,kBAAkB,CAAC;IA2D/H,qEAAqE;IACrE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAQ3B,8CAA8C;IAC9C,OAAO,IAAI,IAAI;CAKhB"}

package/lib/types/host/cline-pass/protocol.d.ts

@@ -0,0 +1,186 @@
+/** Which pipeline the gateway routed one request through. */
+export type ClinePipeline = 'direct' | 'planner';
+/** One candidate request, after a pin has been expanded into try order. */
+export interface PinAttempt {
+    /** The channel to pin, or null for automatic routing. */
+    upstream: string | null;
+    /** The remaining ordered candidates; used in `preferred` mode. */
+    orderRest: string[];
+    /** Channels that must never serve this request. */
+    excludeList: string[];
+    /** Strict writes `only`; preferred writes `order` as well. */
+    strict: boolean;
+    /** Normalized sort metric, or null for none. */
+    sort: string | null;
+    /** `detected` restores the old single-spelling behavior. */
+    spelling?: string;
+}
+/** One model's stored pin configuration. */
+export interface PinConfig {
+    upstreams?: readonly string[];
+    exclude?: readonly string[];
+    pinMode?: string;
+    sort?: string;
+    spelling?: string;
+}
+/** What one response says about how the gateway routed it. */
+export interface RoutingFacts {
+    content: string | null;
+    toolCalls: unknown[];
+    usage: unknown;
+    pipeline: ClinePipeline | null;
+    canonicalSlug: string | null;
+    finalProvider: string | null;
+    finalProviderName: string | null;
+    fallbacks: string[];
+    plan: string;
+}
+/** Written into the model observation store, so probe results are kept apart by pipeline. */
+export interface PinModelMeta {
+    upstreams?: string[];
+    channels?: Partial<Record<ClinePipeline, string[]>>;
+    pipeline?: ClinePipeline | null;
+}
+/** One attempt's replayed identity. */
+export interface PinAttemptOutcome {
+    attempt: PinAttempt;
+    routing: {
+        finalProvider: string | null;
+    } | null;
+}
+/** Whether a pin was honored, or could not be judged. */
+export type PinAdherence = 'adopted' | 'fallback' | 'not-adopted' | 'violated' | 'unresolved';
+/**
+ * The gateway wraps some answers in a `{ data: … }` envelope; unwrap it.
+ * @param json - raw decoded response body.
+ * @returns the OpenAI-shaped payload.
+ */
+export declare function unwrapEnvelope(json: unknown): Record<string, unknown>;
+/** Turn any error-shaped value into display text. */
+export declare function errorText(value: unknown): string;
+/** Account authentication refusals, including responses with no useful body. */
+export declare function isAuthenticationError(message: unknown, status?: number): boolean;
+/**
+ * Read the routing facts out of one completed gateway response.
+ * @param json - raw decoded response body (enveloped or not).
+ * @returns pipeline, canonical slug, chosen upstream and fallback list.
+ */
+export declare function parseRouting(json: unknown): RoutingFacts;
+/** Lowercase a display name into an upstream slug. */
+export declare function slugify(value: unknown): string;
+/** OpenRouter's names for the three sort metrics. */
+export declare const OPENROUTER_SORT: Readonly<Record<string, string>>;
+/**
+ * Channels the two routers spell differently, as `[planner, direct]` pairs.
+ *
+ * Z.AI is `zai` to the Vercel gateway and `z-ai` to OpenRouter. Writing one name
+ * into both spellings matters: a request that lands on the direct pipeline
+ * carries `provider.only` to OpenRouter, where an unknown provider is refused
+ * rather than ignored.
+ */
+export declare const CHANNEL_ALIASES: ReadonlyArray<readonly [string, string]>;
+/**
+ * Translate a channel name into the spelling one pipeline uses.
+ * @param name - the configured channel name, in either spelling.
+ * @param pipeline - `'planner'` or `'direct'`.
+ * @returns the name that pipeline expects; unknown names pass through.
+ */
+export declare function channelNameFor(name: string, pipeline: ClinePipeline): string;
+/**
+ * Normalize a configured sort into a wire value or null.
+ *
+ * Two spellings mean "no sort" and both must be dropped before the request is
+ * built: the settings schema stores an empty string, and `none` is the
+ * documented "clear it" value. Neither is a metric, and the gateway rejects them
+ * with HTTP 400.
+ */
+export declare function normalizeSort(value: unknown): string | null;
+/**
+ * Normalize a configured pin mode to the one value the router compares against.
+ * @param value - the configured pin mode, as stored.
+ * @returns `'strict'` or `'preferred'`.
+ */
+export declare function normalizePinMode(value: unknown): 'strict' | 'preferred';
+/** A request body, before and after pin injection. */
+type WireBody = Record<string, unknown>;
+/**
+ * Write one attempt's upstream preference into a request body.
+ *
+ * Excludes are compiled into an `only` allow-list because the gateway ignores
+ * the exclude/ignore fields.
+ *
+ * Both spellings are written by default. A pin is honored only by the pipeline
+ * that owns the spelling, and the pipeline a model runs on is decided by the
+ * gateway and can differ between calls, so writing just the spelling the last
+ * probe observed means the pin silently evaporates the moment that changes. Each
+ * pipeline ignores the other's field, which is what makes writing both safe.
+ * `spelling: 'detected'` restores the old single-spelling behavior.
+ *
+ * @returns a new body with the pin applied.
+ */
+export declare function injectPrefs(body: WireBody, meta: PinModelMeta | undefined, attempt: PinAttempt | undefined): WireBody;
+/**
+ * Read back whether the router honored one attempt's pin.
+ *
+ * A 200 is not evidence that the pin was applied: an unknown or unavailable
+ * `only` value is dropped by the router, which then serves the request from
+ * another channel. The only honest test is the channel the response reports.
+ */
+export declare function pinAdherence(attempt: PinAttempt, routing: {
+    finalProvider: string | null;
+} | null | undefined): PinAdherence;
+/** Whether an adherence reading means the pin was honored, or cannot be judged. */
+export declare function isAdherenceOk(adherence: PinAdherence): boolean;
+/**
+ * Name the configuration problems that make a pin impossible to honor.
+ *
+ * Both cases used to produce a request with no pin fields at all — that is,
+ * "excluded" channels still in play, silently.
+ *
+ * @returns human-readable warnings, empty when the pin is expressible.
+ */
+export declare function pinWarnings(attempt: Pick<PinAttempt, 'upstream'> & {
+    excludeList?: string[];
+}, meta: PinModelMeta | undefined): string[];
+/**
+ * Expand one model's pin configuration into the ordered failover candidates.
+ *
+ * A model with a non-empty (post-exclusion) pin list is tried upstream by
+ * upstream; a model without one is a single automatic candidate whose excludes
+ * become an allow-list.
+ */
+export declare function buildAttempts(config: PinConfig): PinAttempt[];
+/**
+ * Classify a pinned-request failure into one upstream availability verdict.
+ * @returns `ok` (the channel answered), `limited`, `bad`, `auth`, or `unknown`.
+ */
+export declare function classifyUpstreamError(message: unknown): 'ok' | 'limited' | 'bad' | 'auth' | 'unknown';
+/**
+ * Recover the gateway's own upstream list from a routing-layer error.
+ *
+ * The probe channels an impossible `only` value, so the router fails before
+ * spending a token and names every provider it could have used.
+ */
+export declare function extractAvailableProviders(message: unknown, pipeline: ClinePipeline | null): string[] | null;
+/**
+ * Read the tier-0 channel hint out of a planner's reasoning sentence.
+ * @param plan - `provider_metadata.gateway.routing.planningReasoning`.
+ */
+export declare function parseTier0(plan: unknown): string[];
+/**
+ * Merge the upstream channels discovered by several means, keeping order and
+ * dropping duplicates.
+ * @param lists - candidate lists, highest confidence first.
+ * @returns the merged, de-duplicated upstream slugs (capped at MAX_UPSTREAMS).
+ */
+export declare function mergeUpstreams(...lists: ReadonlyArray<readonly string[] | null | undefined>): string[];
+/**
+ * Normalize a model id for fuzzy OpenRouter catalog matching.
+ * @param value - either id.
+ * @returns the comparable form.
+ */
+export declare function normalizeSlug(value: unknown): string;
+/** Whether a value is a non-null object. */
+export declare function isRecord(value: unknown): value is Record<string, unknown>;
+export {};
+//# sourceMappingURL=protocol.d.ts.map

package/lib/types/host/cline-pass/protocol.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"protocol.d.ts","sourceRoot":"","sources":["../../../../src/host/cline-pass/protocol.ts"],"names":[],"mappings":"AAeA,6DAA6D;AAC7D,MAAM,MAAM,aAAa,GAAG,QAAQ,GAAG,SAAS,CAAA;AAEhD,2EAA2E;AAC3E,MAAM,WAAW,UAAU;IACzB,yDAAyD;IACzD,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;IACvB,kEAAkE;IAClE,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,mDAAmD;IACnD,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,8DAA8D;IAC9D,MAAM,EAAE,OAAO,CAAA;IACf,gDAAgD;IAChD,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;IACnB,4DAA4D;IAC5D,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,4CAA4C;AAC5C,MAAM,WAAW,SAAS;IACxB,SAAS,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC7B,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,QAAQ,CAAC,EAAE,MAAM,CAAA;CAClB;AAED,8DAA8D;AAC9D,MAAM,WAAW,YAAY;IAC3B,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;IACtB,SAAS,EAAE,OAAO,EAAE,CAAA;IACpB,KAAK,EAAE,OAAO,CAAA;IACd,QAAQ,EAAE,aAAa,GAAG,IAAI,CAAA;IAC9B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,SAAS,EAAE,MAAM,EAAE,CAAA;IACnB,IAAI,EAAE,MAAM,CAAA;CACb;AAED,6FAA6F;AAC7F,MAAM,WAAW,YAAY;IAC3B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IACnD,QAAQ,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;CAChC;AAED,uCAAuC;AACvC,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,UAAU,CAAA;IACnB,OAAO,EAAE;QAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;KAAE,GAAG,IAAI,CAAA;CACjD;AAED,yDAAyD;AACzD,MAAM,MAAM,YAAY,GAAG,SAAS,GAAG,UAAU,GAAG,aAAa,GAAG,UAAU,GAAG,YAAY,CAAA;AAE7F;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKrE;AAED,qDAAqD;AACrD,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAShD;AAED,gFAAgF;AAChF,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAGhF;AAED;;;;GAIG;AACH,wBAAgB,YAAY,CAAC,IAAI,EAAE,OAAO,GAAG,YAAY,CA0BxD;AAED,sDAAsD;AACtD,wBAAgB,OAAO,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAE9C;AAED,qDAAqD;AACrD,eAAO,MAAM,eAAe,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAwE,CAAA;AAErI;;;;;;;GAOG;AACH,eAAO,MAAM,eAAe,EAAE,aAAa,CAAC,SAAS,CAAC,MAAM,EAAE,MAAM,CAAC,CAAoC,CAAA;AAEzG;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,aAAa,GAAG,MAAM,CAO5E;AAED;;;;;;;GAOG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAI3D;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,GAAG,WAAW,CAEvE;AAcD,sDAAsD;AACtD,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;AAEvC;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,YAAY,GAAG,SAAS,EAAE,OAAO,EAAE,UAAU,GAAG,SAAS,GAAG,QAAQ,CAuDrH;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,UAAU,EAAE,OAAO,EAAE;IAAE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,GAAG,IAAI,GAAG,SAAS,GAAG,YAAY,CAe5H;AAED,mFAAmF;AACnF,wBAAgB,aAAa,CAAC,SAAS,EAAE,YAAY,GAAG,OAAO,CAE9D;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,IAAI,CAAC,UAAU,EAAE,UAAU,CAAC,GAAG;IAAE,WAAW,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,EAAE,IAAI,EAAE,YAAY,GAAG,SAAS,GAAG,MAAM,EAAE,CAcxI;AAED;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,EAAE,CAiB7D;AAED;;;GAGG;AACH,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAOrG;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,aAAa,GAAG,IAAI,GAAG,MAAM,EAAE,GAAG,IAAI,CAoB3G;AAED;;;GAGG;AACH,wBAAgB,UAAU,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,EAAE,CAIlD;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC,SAAS,MAAM,EAAE,GAAG,IAAI,GAAG,SAAS,CAAC,GAAG,MAAM,EAAE,CAStG;AAED;;;;GAIG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAEpD;AAED,4CAA4C;AAC5C,wBAAgB,QAAQ,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAEzE"}

package/lib/types/host/cline-pass/routes.d.ts

@@ -0,0 +1,71 @@
+/**
+ * The Cline Pass settings API.
+ *
+ * The surface is the same one every sibling line exposes — status, accounts,
+ * models — plus the controls this line genuinely has: per-model upstream pins,
+ * a channel probe/validate/test pair, the official quota reading and the
+ * in-process request history.
+ *
+ * Reads never trigger an upstream call; quota is refreshed by its own action.
+ *
+ * @module dsh-chatgpt-subscription/cline-pass-routes
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { ClinePassAccountPool } from './account-pool.ts';
+import type { ClinePassEngine } from './engine.ts';
+import type { ClinePassStore } from './store.ts';
+import type { ClinePassLoginManager } from './oauth.ts';
+import { type ClinePassModelSettingsStore } from './token-store.ts';
+import { openPlatformBrowser } from '../step-code/routes.ts';
+import { type ClinePassWebStatus } from '../../shared/cline-pass-contracts.ts';
+export interface ClinePassRouteOptions {
+    settings: ClinePassModelSettingsStore;
+    accountPool: ClinePassAccountPool;
+    store: ClinePassStore;
+    engine: ClinePassEngine;
+    /** Proxy-aware fetch for account verification and quota reads. */
+    fetchFn: typeof fetch;
+    /** Device-code sign-in state, when the composition installed one. */
+    login?: ClinePassLoginManager;
+    /**
+     * Browser opener for `/login/start`; defaults to a no-op because the settings
+     * card opens the verification URL itself via `window.open`.
+     */
+    openBrowser?: (url: string) => void;
+    serving(): boolean;
+    conflict(): string | null;
+}
+/** Named browser opener for deployments that want the host to launch the verification URL. */
+export declare const openClinePassBrowser: typeof openPlatformBrowser;
+/** Assemble the whole status payload the Cline Pass tab renders. */
+export declare function getClinePassWebStatus(options: ClinePassRouteOptions): Promise<ClinePassWebStatus>;
+/** The route table, exported so the client and this file can be checked against each other. */
+export declare const CLINE_PASS_ROUTES: {
+    readonly status: "GET";
+    readonly settings: "POST";
+    readonly accounts: "GET|POST";
+    readonly 'login/start': "POST";
+    readonly 'login/status': "GET";
+    readonly 'login/cancel': "POST";
+    readonly models: "GET|POST";
+    readonly 'models/pin': "POST";
+    readonly 'models/reset': "POST";
+    readonly 'models/probe': "POST";
+    readonly 'models/validate': "POST";
+    readonly 'models/test': "POST";
+    readonly 'models/visibility': "POST";
+    readonly 'models/visibility-all': "POST";
+    readonly 'models/context-window': "POST";
+    readonly 'catalog/refresh': "POST";
+    readonly usage: "GET|POST";
+    readonly history: "GET";
+};
+/**
+ * Register the Cline Pass settings API under `/cline-pass/api`.
+ *
+ * Registered unconditionally: the card is how a user adds their first key, so
+ * gating it on winning the route would leave a contested id with no way to
+ * configure it at all.
+ */
+export declare function registerClinePassRoutes(ctx: Context, options: ClinePassRouteOptions): () => void;
+//# sourceMappingURL=routes.d.ts.map

package/lib/types/host/cline-pass/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/cline-pass/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAMlD,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAC7D,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,YAAY,CAAA;AAChD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,EAA0C,KAAK,2BAA2B,EAAE,MAAM,kBAAkB,CAAA;AAE3G,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAiBL,KAAK,kBAAkB,EACxB,MAAM,sCAAsC,CAAA;AAkH7C,MAAM,WAAW,qBAAqB;IACpC,QAAQ,EAAE,2BAA2B,CAAA;IACrC,WAAW,EAAE,oBAAoB,CAAA;IACjC,KAAK,EAAE,cAAc,CAAA;IACrB,MAAM,EAAE,eAAe,CAAA;IACvB,kEAAkE;IAClE,OAAO,EAAE,OAAO,KAAK,CAAA;IACrB,qEAAqE;IACrE,KAAK,CAAC,EAAE,qBAAqB,CAAA;IAC7B;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,OAAO,IAAI,OAAO,CAAA;IAClB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,8FAA8F;AAC9F,eAAO,MAAM,oBAAoB,4BAAsB,CAAA;AAEvD,oEAAoE;AACpE,wBAAsB,qBAAqB,CAAC,OAAO,EAAE,qBAAqB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAgDvG;AAwBD,+FAA+F;AAC/F,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;;;;;;;CAAS,CAAA;AAEvC;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,MAAM,IAAI,CAqdhG"}

package/lib/types/host/cline-pass/store.d.ts

@@ -0,0 +1,97 @@
+import type { ClinePipeline } from './protocol.ts';
+import type { ClinePassHistoryRowDto, ClinePassUsageDto } from '../../shared/cline-pass-contracts.ts';
+export type ClinePassVerdictStatus = 'ok' | 'limited' | 'bad' | 'auth' | 'not-adopted' | 'unknown';
+/** One upstream availability verdict. */
+export interface ClinePassUpstreamVerdict {
+    status: ClinePassVerdictStatus;
+    note: string;
+    ms: number;
+    checkedAt: number;
+}
+/** Per-upstream endpoint detail harvested from OpenRouter's public catalog. */
+export interface ClinePassUpstreamDetail {
+    slug: string;
+    name: string;
+    endpoints: number;
+    context: number;
+    uptime: number;
+}
+/** Discovered metadata for one model. */
+export interface ClinePassModelObservation {
+    ok?: boolean;
+    pipeline?: ClinePipeline | null;
+    pinnable?: boolean;
+    canonicalSlug?: string | null;
+    openrouterSlug?: string | null;
+    upstreams?: string[];
+    channels?: Partial<Record<ClinePipeline, string[]>>;
+    upstreamStatus?: Record<string, ClinePassUpstreamVerdict>;
+    upstreamDetail?: Record<string, ClinePassUpstreamDetail>;
+    availableProviders?: string[];
+    tier0?: string[];
+    lastProvider?: string | null;
+    lastMs?: number;
+    probedAt?: number;
+    validatedAt?: number;
+    staleAt?: number;
+    lastError?: string;
+}
+/** One recorded model call. */
+export interface ClinePassHistoryEntry extends Omit<ClinePassHistoryRowDto, 'usageReported' | 'usage'> {
+    /** Null means the gateway sent no usage frame, which is not a zero-cost call. */
+    usage?: {
+        inputTokens?: number;
+        outputTokens?: number;
+        cacheReadTokens?: number;
+        reasoningTokens?: number;
+    } | null;
+    code?: string;
+}
+/** What a caller supplies when recording a call; the store stamps the time. */
+export type ClinePassHistoryInput = Pick<ClinePassHistoryEntry, 'model'> & Partial<Omit<ClinePassHistoryEntry, 'model' | 'ts'>>;
+/** The last cached catalog scan. */
+export interface ClinePassCatalogState {
+    ids: string[];
+    sources: string[];
+    models: Record<string, unknown>;
+    fetchedAt: number;
+}
+/** Create the observation store. */
+export declare function createClinePassStore({ historyLimit }?: {
+    historyLimit?: number;
+}): {
+    /** Discovered metadata for one model (never undefined). */
+    metaOf(model: string): ClinePassModelObservation;
+    /** Every model with discovered metadata. */
+    allMeta(): Array<ClinePassModelObservation & {
+        id: string;
+    }>;
+    /** Merge one discovery result into a model's metadata. */
+    learn(model: string, patch: Partial<ClinePassModelObservation>): ClinePassModelObservation;
+    /** Record a verdict; explicit validation also replaces stale results with unknown. */
+    learnUpstream(model: string, upstream: string | null | undefined, status: ClinePassVerdictStatus, note: unknown, ms: unknown, { includeUnknown }?: {
+        includeUnknown?: boolean;
+    }): void;
+    /** Append one request-history row (newest first, bounded). */
+    record(entry: ClinePassHistoryInput): void;
+    /** Adopt a changed retention budget from the settings file. */
+    setHistoryLimit(next: number): void;
+    /** Read request history, newest first. */
+    readHistory(limitParam?: number, model?: string): ClinePassHistoryEntry[];
+    /** Total rows retained, before any filter. */
+    historySize(): number;
+    /** Monotonic change counter, including replacements at the retention cap. */
+    historyRevision(): number;
+    /** The last cached official-catalog scan. */
+    catalog(): ClinePassCatalogState;
+    /** Replace the cached official-catalog scan. */
+    setCatalog(next: Omit<ClinePassCatalogState, "fetchedAt"> & {
+        fetchedAt?: number;
+    }): ClinePassCatalogState;
+    /** The last quota reading (never undefined). */
+    usage(): ClinePassUsageDto;
+    /** Replace the cached quota reading. */
+    setUsage(next: Pick<ClinePassUsageDto, "accounts">): ClinePassUsageDto;
+};
+export type ClinePassStore = ReturnType<typeof createClinePassStore>;
+//# sourceMappingURL=store.d.ts.map

package/lib/types/host/cline-pass/store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"store.d.ts","sourceRoot":"","sources":["../../../../src/host/cline-pass/store.ts"],"names":[],"mappings":"AAYA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,KAAK,EACV,sBAAsB,EACtB,iBAAiB,EAClB,MAAM,sCAAsC,CAAA;AAG7C,MAAM,MAAM,sBAAsB,GAAG,IAAI,GAAG,SAAS,GAAG,KAAK,GAAG,MAAM,GAAG,aAAa,GAAG,SAAS,CAAA;AAElG,yCAAyC;AACzC,MAAM,WAAW,wBAAwB;IACvC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,IAAI,EAAE,MAAM,CAAA;IACZ,EAAE,EAAE,MAAM,CAAA;IACV,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,+EAA+E;AAC/E,MAAM,WAAW,uBAAuB;IACtC,IAAI,EAAE,MAAM,CAAA;IACZ,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,MAAM,CAAA;CACf;AAED,yCAAyC;AACzC,MAAM,WAAW,yBAAyB;IACxC,EAAE,CAAC,EAAE,OAAO,CAAA;IACZ,QAAQ,CAAC,EAAE,aAAa,GAAG,IAAI,CAAA;IAC/B,QAAQ,CAAC,EAAE,OAAO,CAAA;IAClB,aAAa,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,cAAc,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC9B,SAAS,CAAC,EAAE,MAAM,EAAE,CAAA;IACpB,QAAQ,CAAC,EAAE,OAAO,CAAC,MAAM,CAAC,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC,CAAA;IACnD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,wBAAwB,CAAC,CAAA;IACzD,cAAc,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,uBAAuB,CAAC,CAAA;IACxD,kBAAkB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC7B,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,+BAA+B;AAC/B,MAAM,WAAW,qBAAsB,SAAQ,IAAI,CAAC,sBAAsB,EAAE,eAAe,GAAG,OAAO,CAAC;IACpG,iFAAiF;IACjF,KAAK,CAAC,EAAE;QACN,WAAW,CAAC,EAAE,MAAM,CAAA;QACpB,YAAY,CAAC,EAAE,MAAM,CAAA;QACrB,eAAe,CAAC,EAAE,MAAM,CAAA;QACxB,eAAe,CAAC,EAAE,MAAM,CAAA;KACzB,GAAG,IAAI,CAAA;IACR,IAAI,CAAC,EAAE,MAAM,CAAA;CACd;AAED,+EAA+E;AAC/E,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,qBAAqB,EAAE,OAAO,CAAC,GACpE,OAAO,CAAC,IAAI,CAAC,qBAAqB,EAAE,OAAO,GAAG,IAAI,CAAC,CAAC,CAAA;AAExD,oCAAoC;AACpC,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,EAAE,CAAA;IACb,OAAO,EAAE,MAAM,EAAE,CAAA;IACjB,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;IAC/B,SAAS,EAAE,MAAM,CAAA;CAClB;AAMD,oCAAoC;AACpC,wBAAgB,oBAAoB,CAAC,EAAE,YAAoC,EAAE,GAAE;IAAE,YAAY,CAAC,EAAE,MAAM,CAAA;CAAO;IAWzG,2DAA2D;kBAC7C,MAAM,GAAG,yBAAyB;IAGhD,4CAA4C;eACjC,KAAK,CAAC,yBAAyB,GAAG;QAAE,EAAE,EAAE,MAAM,CAAA;KAAE,CAAC;IAG5D,0DAA0D;iBAC7C,MAAM,SAAS,OAAO,CAAC,yBAAyB,CAAC,GAAG,yBAAyB;IAc1F,sFAAsF;yBAE7E,MAAM,YACH,MAAM,GAAG,IAAI,GAAG,SAAS,UAC3B,sBAAsB,QACxB,OAAO,MACT,OAAO,uBACiB;QAAE,cAAc,CAAC,EAAE,OAAO,CAAA;KAAE,GACvD,IAAI;IASP,8DAA8D;kBAChD,qBAAqB,GAAG,IAAI;IA2B1C,+DAA+D;0BACzC,MAAM,GAAG,IAAI;IAKnC,0CAA0C;sDACG,qBAAqB,EAAE;IAMpE,8CAA8C;mBAC/B,MAAM;IAGrB,6EAA6E;uBAC1D,MAAM;IAGzB,6CAA6C;eAClC,qBAAqB;IAGhC,gDAAgD;qBAC/B,IAAI,CAAC,qBAAqB,EAAE,WAAW,CAAC,GAAG;QAAE,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,qBAAqB;IAI1G,gDAAgD;aACvC,iBAAiB;IAG1B,wCAAwC;mBACzB,IAAI,CAAC,iBAAiB,EAAE,UAAU,CAAC,GAAG,iBAAiB;EAKzE;AAED,MAAM,MAAM,cAAc,GAAG,UAAU,CAAC,OAAO,oBAAoB,CAAC,CAAA"}