@eddyskywalker/dsh-chatgpt-subscription 0.32.0 → 0.34.0

package/lib/types/host/opendesign/types.d.ts

@@ -0,0 +1,180 @@
+/**
+ * Static facts about the OpenDesign subscription API.
+ *
+ * The upstream is the OpenDesign link gateway, an OpenAI-compatible endpoint
+ * fronting the models a plan's credits can spend. Authentication is a static
+ * API key in `Authorization: Bearer`, created in the OpenDesign Cloud console
+ * (workspace → API keys): there is no OAuth flow here and nothing expires.
+ *
+ * Evidence for every constant is in docs/opendesign-line-plan.md; the short
+ * version: the gateway host and its `/v1` OpenAI spelling come from the Cloud
+ * console's quick-setup bundle (it composes `{link}/v1` for OpenAI clients and
+ * recommends Chat Completions for DeepSeek Harness), and each protocol endpoint
+ * was probed unauthenticated and answered the expected 401 envelope.
+ *
+ * The model table below is transcribed from the public, unauthenticated price
+ * list — id spellings, display names where the pricing page publishes them, and
+ * USD-per-1M-token prices. It carries NO context windows: the gateway does not
+ * publish them to an API key, so a model's window is the line default until the
+ * user overrides it or a live catalog entry states one. The table is a fallback,
+ * not a ceiling: a model the live catalog discovers is adopted with what that
+ * listing published rather than hidden.
+ */
+export declare const PROVIDER_ID = "opendesign";
+export declare const PROVIDER_NAME = "OpenDesign";
+/**
+ * Default gateway base URL, OpenAI protocol spelling (the `/v1` suffix is part
+ * of it; the Anthropic spelling is the bare host and is not what this line
+ * speaks). Overridable per deployment and per account.
+ */
+export declare const DEFAULT_BASE_URL = "https://amr-link.open-design.ai/v1";
+/** Public, unauthenticated price list; the shipped table's source. */
+export declare const MODEL_PRICES_URL = "https://amr-api.open-design.ai/api/v1/public/model-prices";
+/**
+ * The AMR control-plane base: device authorization and the wallet balance live
+ * under it. The device flow's contract is probed live (2026-10-21) and pinned
+ * by test/opendesign-oauth.test.ts; the wallet read's shape comes from the
+ * open-source daemon's reader (apps/daemon/src/integrations/vela-wallet.ts,
+ * nexu-io/open-design) plus issue #8870's field report.
+ */
+export declare const AMR_API_BASE = "https://amr-api.open-design.ai/api/v1";
+/** Device-authorization endpoints under {@link AMR_API_BASE}. */
+export declare const DEVICE_AUTHORIZATIONS_PATH = "/cli/device-authorizations";
+export declare const WALLET_BALANCE_PATH = "/wallet/balance";
+/**
+ * What the create call says about this client. The service stores host /
+ * profile / cliVersion per authorization (its console lists devices by them);
+ * the profile vocabulary is 'prod' | 'test' | 'feature-test' | 'local' per the
+ * open-source daemon, and this line only ever speaks to prod.
+ */
+export declare const DEVICE_CLIENT_PROFILE = "prod";
+export declare const DEVICE_CLIENT_NAME = "dsh-chatgpt-subscription";
+/** Conservative context capacity for a model no catalog describes. */
+export declare const DEFAULT_CONTEXT_WINDOW = 128000;
+/**
+ * Per-request output budget when the caller states none.
+ *
+ * A budget, not a ceiling: the harness reserves it as completion room before it
+ * compacts, so this decides how much of the window stays available. 64k keeps
+ * the reserve far below the compaction ratio while leaving room for a
+ * tool-calling agent's longest turn.
+ */
+export declare const DEFAULT_MAX_TOKENS = 64000;
+/**
+ * Streams one account may keep open at once; `0` lifts the cap.
+ *
+ * The cheapest published plan states "10 concurrent tasks"
+ * (https://open-design.ai/pricing/, 2026-10-21), so 10 is the one entitlement
+ * every paid key definitely has; a deployment that knows its plan may raise it.
+ */
+export declare const DEFAULT_MAX_CONCURRENT_REQUESTS = 10;
+/** Idle budget for one OpenDesign stream. */
+export declare const DEFAULT_STREAM_IDLE_TIMEOUT_MS = 300000;
+/** How long a quota refusal keeps one account out of rotation. */
+export declare const POOL_COOLDOWN_MS: number;
+/**
+ * One published model entry.
+ *
+ * `contextWindow` and `maxTokens` are the VENDOR's published figures, not a
+ * promise about this gateway's clamp: no OpenDesign endpoint publishes a window
+ * to an API key (the control-plane catalog does, and the live sync prefers it).
+ * They are transcribed from this repository's already-sourced tables of the same
+ * vendor models — the command-code registry transcription
+ * (src/host/command-code/model-catalog.ts), the cline-pass table
+ * (src/host/cline-pass/types.ts), the Claude catalog
+ * (src/host/claude/model-catalog.ts) and the antigravity catalog
+ * (src/host/antigravity/types.ts) — because this line's fallback must not be a
+ * flat 128k for every model while those facts sit in the same repository.
+ * Per-model conflict resolution prefers the cline-pass table where the two
+ * disagree, since it is the OpenAI-chat gateway closest to this one. A live
+ * catalog entry and a user override both beat this table, so a clamp this
+ * transcription gets wrong costs one correction in the editor, not a permanent
+ * ceiling.
+ *
+ * `efforts` is the selectable reasoning ladder in DSH spelling (`none` is DSH's
+ * "do not think"; the command-code registry spells the same level `off` and it
+ * is translated here). An empty ladder with `reasoning: false` means no source
+ * publishes one for that model; a model with no row data at all keeps the
+ * line's default trio rather than being declared a non-reasoner.
+ */
+export interface OpenDesignModelMeta {
+    name: string;
+    /**
+     * USD per 1M tokens from the public price list. Shown, never fabricated: a
+     * model the price list does not carry simply has no figure.
+     */
+    pricing?: {
+        input: number;
+        output: number;
+    };
+    /** The vendor's published context window; absent when no source documents one. */
+    contextWindow?: number;
+    /** The vendor's published output ceiling; absent when no source documents one. */
+    maxTokens?: number;
+    /**
+     * Selectable reasoning levels, least to greatest, in DSH spelling. Absent
+     * means "use the line default"; an empty array means the model exposes none.
+     */
+    efforts?: readonly string[];
+    /**
+     * Whether the model takes an effort knob at all. Absent means yes; `false`
+     * marks the rows whose source publishes no ladder.
+     */
+    reasoning?: boolean;
+    /** Accepted input modalities, as the source table declares them. */
+    input: readonly string[];
+}
+/**
+ * The subscription's models at release time, keyed by wire id.
+ *
+ * Id spellings and prices are transcribed from MODEL_PRICES_URL (fetched
+ * 2026-10-21, 37 entries, all chat models — the plan's image models are priced
+ * per call and are not in it). Display names use the pricing page's spelling
+ * where that page lists the model (https://open-design.ai/pricing/) and are
+ * derived from the id otherwise; the live catalog's own name wins once one is
+ * read. Windows, output caps, modalities and ladders come from the sibling
+ * tables named on {@link OpenDesignModelMeta}; the live control-plane catalog
+ * (which does publish `metadata.contextWindowTokens`) overrides them when read.
+ */
+export declare const MODEL_CATALOG: Readonly<Record<string, OpenDesignModelMeta>>;
+/** Subscription models current at release time; the live catalog extends this. */
+export declare const DEFAULT_MODELS: readonly string[];
+/**
+ * The effort ladder a model with no published ladder is advertised with.
+ *
+ * The OpenAI trio every compatible gateway accepts; an input outside it is a
+ * 400 on some gateways, so the default stays deliberately small. A model whose
+ * own row publishes a ladder uses that instead.
+ */
+export declare const DEFAULT_EFFORTS: readonly string[];
+/** Published entry for one model id, if the shipped table knows it. */
+export declare function catalogEntry(model: string): OpenDesignModelMeta | undefined;
+/**
+ * One model as the live catalog describes it, after merging the shipped table,
+ * the last gateway listing and any per-model override.
+ */
+export interface OpenDesignModelInfo {
+    id: string;
+    displayName: string;
+    contextWindow: number;
+    maxTokens: number;
+    reasoning: boolean;
+    /** Selectable effort ladder; empty when the model exposes none. */
+    efforts: readonly string[];
+    input: readonly string[];
+    pricing?: {
+        input: number;
+        output: number;
+    };
+}
+/** One model's metadata as the last gateway listing published it. */
+export interface OpenDesignDiscoveredModel {
+    name?: string;
+    contextWindow?: number;
+    maxTokens?: number;
+    input?: string[];
+    reasoning?: boolean;
+    /** Selectable effort levels, when the listing publishes them. */
+    efforts?: string[];
+}
+//# sourceMappingURL=types.d.ts.map

package/lib/types/host/opendesign/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../src/host/opendesign/types.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,eAAO,MAAM,WAAW,eAAe,CAAA;AACvC,eAAO,MAAM,aAAa,eAAe,CAAA;AAEzC;;;;GAIG;AACH,eAAO,MAAM,gBAAgB,uCAAuC,CAAA;AAEpE,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,8DAA8D,CAAA;AAE3F;;;;;;GAMG;AACH,eAAO,MAAM,YAAY,0CAA0C,CAAA;AAEnE,iEAAiE;AACjE,eAAO,MAAM,0BAA0B,+BAA+B,CAAA;AACtE,eAAO,MAAM,mBAAmB,oBAAoB,CAAA;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,qBAAqB,SAAS,CAAA;AAC3C,eAAO,MAAM,kBAAkB,6BAA6B,CAAA;AAE5D,sEAAsE;AACtE,eAAO,MAAM,sBAAsB,SAAU,CAAA;AAE7C;;;;;;;GAOG;AACH,eAAO,MAAM,kBAAkB,QAAS,CAAA;AAExC;;;;;;GAMG;AACH,eAAO,MAAM,+BAA+B,KAAK,CAAA;AAEjD,6CAA6C;AAC7C,eAAO,MAAM,8BAA8B,SAAU,CAAA;AAErD,kEAAkE;AAClE,eAAO,MAAM,gBAAgB,QAAc,CAAA;AAE3C;;;;;;;;;;;;;;;;;;;;;;;;GAwBG;AACH,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAA;IACZ;;;OAGG;IACH,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;IAC3C,kFAAkF;IAClF,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,kFAAkF;IAClF,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;OAGG;IACH,OAAO,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IAC3B;;;OAGG;IACH,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,oEAAoE;IACpE,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;CACzB;AAED;;;;;;;;;;;GAWG;AACH,eAAO,MAAM,aAAa,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CA0CtE,CAAA;AAEF,kFAAkF;AAClF,eAAO,MAAM,cAAc,EAAE,SAAS,MAAM,EAA8C,CAAA;AAE1F;;;;;;GAMG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,MAAM,EAA6C,CAAA;AAE1F,uEAAuE;AACvE,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,GAAG,mBAAmB,GAAG,SAAS,CAE3E;AAED;;;GAGG;AACH,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,WAAW,EAAE,MAAM,CAAA;IACnB,aAAa,EAAE,MAAM,CAAA;IACrB,SAAS,EAAE,MAAM,CAAA;IACjB,SAAS,EAAE,OAAO,CAAA;IAClB,mEAAmE;IACnE,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IAC1B,KAAK,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,OAAO,CAAC,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAA;CAC5C;AAED,qEAAqE;AACrE,MAAM,WAAW,yBAAyB;IACxC,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;IAChB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,iEAAiE;IACjE,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;CACnB"}

package/lib/types/host/qoder/account-pool.d.ts

@@ -0,0 +1,137 @@
+/**
+ * Qoder 线路的号池：共享 \`AccountPoolCore\` 之上的薄封装。
+ *
+ * 存储、序列化、可用性、轮转、429 冷却都由 \`src/host/common/account-pool.ts\` 管；
+ * 本文件只回答「Qoder 这条线的凭据长什么样、怎么刷新、身份怎么算、卡片怎么装配」。
+ *
+ * 与 step-code 号池的三处不同，各有理由：
+ *
+ * 1. **刷新钩子是活的。** Qoder 的 token 会过期（types.ts 文件头第 2 条），所以
+ *    \`expiresAt\` / \`needsRefresh\` / \`refresh\` 三个钩子全部如实实现；
+ *    刷新失败按 401/403 → expired（这个账号要重登）、其余 → undefined（瞬时故障不判死）。
+ * 2. **两区可以同时在池里。** 区域是凭据的属性（计划 §1），去重键里必须带区域：
+ *    否则同一个 uid 在两个部署上会被合并成一行，然后那一行的凭据被拿去打另一个区的主机。
+ * 3. **adopt 快照可删。** 本插件只读 \`~/.qoder/.auth/user\`，从不写它；
+ *    删掉池里的一行只是删掉本插件自己的加密记录，用户的 qodercli 会话不动。
+ */
+import { AccountPoolCore, type PoolAccountShape, type PoolData } from '../common/account-pool.ts';
+import type { CredentialStore } from '../token-store.ts';
+import type { AccountRotationStrategy, PoolAccountQuotaDto } from '../../shared/account-pool-contracts.ts';
+import type { QoderAccountSummaryDto, QoderQuotaSnapshotDto, QoderRegion, QoderStatusDto } from '../../shared/qoder-contracts.ts';
+import { QODER_CLI_CREDENTIAL_SOURCE, type QoderCredentials, type QoderCredentialOrigin } from './token-store.ts';
+/** 一个池内账号行。凭据整个随行存放；其余是卡片渲染用的非机密事实。 */
+export interface QoderPoolAccount extends PoolAccountShape<QoderCredentials> {
+    /** 账号所属区域；由凭据自述，这里是给它做索引用。 */
+    region: QoderRegion;
+    /** 这份凭据的来源（设备流 / PAT / adopt），供卡片显示。 */
+    source: QoderCredentialOrigin;
+}
+/** 号池切片：共享摘要 + 本线路的区域与来源。 */
+export type QoderAccountSummary = QoderAccountSummaryDto;
+/** 本线路自己的加密号池文件。与凭据文件分开：池可以有多行，凭据文件只有主账号一份。 */
+export declare function qoderPoolPath(): string;
+/** keychain / Secret Service 的服务名。与其它线路各用各的，互不相干。 */
+export declare const QODER_POOL_KEYCHAIN_SERVICE = "dsh-qoder-pool";
+/**
+ * 身份：两个凭据什么时候是同一个上游账号。
+ *
+ * 组成是「区域 + uid」，两段都非机密，也都不随重新登录而变（Qoder 的 token 每次
+ * 兑换都可能换一把新的，拿 token 当键会让同一个账号每次登录都长成新账号，号池无限增长）。
+ *
+ * 没有 uid 时退回「区域 + accessToken 的 SHA-256 前 16 字节」：那是**指纹**，不是身份，
+ * 但它至少保证同一把 token 落到同一行；两段全空才返回 undefined，那时核心自己生成
+ * \`acc_<random>\`，把这一行**新增**而不是与某个无关凭据合并。
+ */
+export declare function qoderPoolIdentity(credentials: QoderCredentials): string | undefined;
+/**
+ * 校验并归一化整份号池文档。
+ *
+ * 凭据重新过一遍 \`parseQoderCredentials\`，所以一行不可能装着一份 store 会拒绝写回的形状。
+ * 一行凭据读不通就**丢弃这一行**而不是整体报错——\`read()\` 会吞掉一次加载失败并回落，
+ * 抛错等于让一行坏数据带走整个池。
+ */
+export declare function parseQoderPoolData(value: unknown): PoolData<QoderPoolAccount>;
+/**
+ * 额度快照 → 号池卡片渲染的形状。
+ *
+ * 只有 \`personal\` 桶进入账号卡的进度条：加购包与组织包是另一条性质的量
+ * （它们出现在线路级额度卡里，不在账号卡上）。桶是绝对量，卡片只认得百分比，
+ * 换算只在 \`total > 0\` 时做——total 为 0 或缺失的桶**不下发**，而不是画成 0%
+ * （「上游没报」与「一点没花」必须长得不一样）。
+ *
+ * \`windowDurationMins\` 传 null：Qoder 的额度是账号周期余额，没有一个诚实的
+ * 「窗口长度」可填，卡片按通用名渲染。\`resetsAt\` 用账号周期截止 \`expiresAt\`。
+ */
+export declare function qoderPoolQuota(snapshot: QoderQuotaSnapshotDto | null | undefined): PoolAccountQuotaDto | undefined;
+/** 本线路号池的构造选项。全部可选：生产按池文件路径构造平台后端。 */
+export interface QoderAccountPoolOptions {
+    /** 测试缝；生产按池文件路径构造平台后端（DPAPI / Keychain / SecretService）。 */
+    backend?: CredentialStore<PoolData<QoderPoolAccount>>;
+    /** 本池接受的账号数上限。 */
+    maxAccounts?: number;
+    /** 用户在设置里钉住的账号；钉住的账号冷却时自动让位给轮转（核心自己处理）。 */
+    preferAccountId?: () => string | null;
+}
+/**
+ * 刷新失败的分类。
+ *
+ * 401/403 → \`'expired'\`（上游明说这把 token 不行了，这个账号要重登）；
+ * 其余（网络故障、5xx、形状变了）→ undefined：瞬时故障不该把一个账号判死。
+ */
+export declare function qoderRefreshFailureStatus(error: unknown): 'expired' | 'invalid' | undefined;
+/** 本线路的号池。凭据类型是本线路自己的，刷新钩子全部如实实现。 */
+export declare class QoderAccountPool extends AccountPoolCore<QoderCredentials, QoderPoolAccount, QoderAccountSummary> {
+    constructor(options?: QoderAccountPoolOptions);
+    /**
+     * 把一份 adopt 快照收进号池。
+     *
+     * 快照已经跑过 \`adopt.ts\` 的解析（解密、字段、区域探测都已确认），这里只补来源标记；
+     * 账号仍以 \`qoderPoolIdentity\` 的身份落进池，重复 adopt 同一次登录只会更新同一行。
+     */
+    addAdoptedCredential(adopted: {
+        readonly credentials: QoderCredentials;
+        readonly sourcePath?: string;
+    }, alias?: string): Promise<QoderPoolAccount>;
+    /**
+     * 适配器取下一个账号用的入口。
+     *
+     * 核心在这里做轮转、冷却、可用性判断与刷新；本方法只多给适配器一件事：
+     * 一次请求内换过账号时，把试过的账号排除掉。
+     */
+    getEffectiveCredential(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch): Promise<{
+        account: QoderPoolAccount;
+        credentials: QoderCredentials;
+    }>;
+    /**
+     * 一次额度读属于哪个账号，连同读它用的凭据。
+     *
+     * 写在这里而不是路由里，是因为它是线路形状的（同 step-code 的同名方法的理由）：
+     * 快照要记在它描述的那一行名下，不会被一次轮转画到另一行名下。
+     */
+    getQuotaReadTarget(fetchFn?: typeof fetch): Promise<{
+        accountId: string;
+        region: QoderRegion;
+        credentials: QoderCredentials;
+    }>;
+}
+/** 状态应答里的号池切片。 */
+export interface QoderPoolStatus {
+    accounts: QoderAccountSummary[];
+    activeAccountId?: string;
+    rotationStrategy: AccountRotationStrategy;
+    /** 本进程是否装上了号池。 */
+    poolInstalled: boolean;
+}
+/**
+ * 读状态应答的号池切片。
+ *
+ * 读不出来的号池不能带倒整张卡：连接那一半仍然值得渲染，只是账号列表是空的。
+ */
+export declare function qoderPoolStatus(pool: QoderAccountPool | undefined): Promise<QoderPoolStatus>;
+/**
+ * 把池状态装配成 \`QoderStatusDto\` 的号池切片（**唯一**装配它的地方，
+ * 理由同 step-code 的 \`stepCodePoolStatusSlice\`）。
+ */
+export declare function qoderPoolStatusSlice(pool: QoderAccountPool | undefined): Promise<Pick<QoderStatusDto, 'accounts' | 'rotationStrategy' | 'activeAccountId'>>;
+export { QODER_CLI_CREDENTIAL_SOURCE };
+//# sourceMappingURL=account-pool.d.ts.map

package/lib/types/host/qoder/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/qoder/account-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EACL,eAAe,EAGf,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,2BAA2B,CAAA;AAGlC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,KAAK,EACV,uBAAuB,EACvB,mBAAmB,EACpB,MAAM,wCAAwC,CAAA;AAC/C,OAAO,KAAK,EACV,sBAAsB,EACtB,qBAAqB,EACrB,WAAW,EACX,cAAc,EACf,MAAM,iCAAiC,CAAA;AAIxC,OAAO,EACL,2BAA2B,EAI3B,KAAK,gBAAgB,EACrB,KAAK,qBAAqB,EAC3B,MAAM,kBAAkB,CAAA;AAMzB,uCAAuC;AACvC,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB,CAAC,gBAAgB,CAAC;IAC1E,8BAA8B;IAC9B,MAAM,EAAE,WAAW,CAAA;IACnB,wCAAwC;IACxC,MAAM,EAAE,qBAAqB,CAAA;CAC9B;AAED,6BAA6B;AAC7B,MAAM,MAAM,mBAAmB,GAAG,sBAAsB,CAAA;AAExD,+CAA+C;AAC/C,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAED,qDAAqD;AACrD,eAAO,MAAM,2BAA2B,mBAAmB,CAAA;AAE3D;;;;;;;;;GASG;AACH,wBAAgB,iBAAiB,CAAC,WAAW,EAAE,gBAAgB,GAAG,MAAM,GAAG,SAAS,CAMnF;AAkCD;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAoC7E;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,cAAc,CAC5B,QAAQ,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,GACjD,mBAAmB,GAAG,SAAS,CAWjC;AAMD,sCAAsC;AACtC,MAAM,WAAW,uBAAuB;IACtC,4DAA4D;IAC5D,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACrD,kBAAkB;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,2CAA2C;IAC3C,eAAe,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAAA;CACtC;AAED;;;;;GAKG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,SAAS,GAAG,SAAS,GAAG,SAAS,CAM3F;AAED,qCAAqC;AACrC,qBAAa,gBAAiB,SAAQ,eAAe,CACnD,gBAAgB,EAChB,gBAAgB,EAChB,mBAAmB,CACpB;gBACa,OAAO,GAAE,uBAA4B;IAuDjD;;;;;OAKG;IACG,oBAAoB,CACxB,OAAO,EAAE;QAAE,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAC;QAAC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;KAAE,EACjF,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,gBAAgB,CAAC;IAI5B;;;;;OAKG;IACG,sBAAsB,CAC1B,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,gBAAgB,CAAC;QAAC,WAAW,EAAE,gBAAgB,CAAA;KAAE,CAAC;IAIxE;;;;;OAKG;IACG,kBAAkB,CAAC,OAAO,GAAE,OAAO,KAAa,GAAG,OAAO,CAAC;QAC/D,SAAS,EAAE,MAAM,CAAA;QACjB,MAAM,EAAE,WAAW,CAAA;QACnB,WAAW,EAAE,gBAAgB,CAAA;KAC9B,CAAC;CAgBH;AAED,kBAAkB;AAClB,MAAM,WAAW,eAAe;IAC9B,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,uBAAuB,CAAA;IACzC,kBAAkB;IAClB,aAAa,EAAE,OAAO,CAAA;CACvB;AAED;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GACjC,OAAO,CAAC,eAAe,CAAC,CAY1B;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,IAAI,EAAE,gBAAgB,GAAG,SAAS,GACjC,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,UAAU,GAAG,kBAAkB,GAAG,iBAAiB,CAAC,CAAC,CAOpF;AAED,OAAO,EAAE,2BAA2B,EAAE,CAAA"}

package/lib/types/host/qoder/adapter.d.ts

@@ -0,0 +1,158 @@
+/**
+ * Qoder（订阅）线路的 DSH 适配器。
+ *
+ * 形状与 Step Code / GLM 同构（\`extends LlmAdapter\`：listModels / resolveModel /
+ * prepareCall / stream / catalog / credentialFor），但它**不碰任何协议细节**：
+ *
+ * - 请求体、流解析、用量与错误分类全部来自 \`./mapper.ts\`；
+ * - COSY 签名与 body 编码全部来自 \`./cosy.ts\`；
+ * - URL 与目录缓存全部来自 \`./client.ts\`；
+ * - 目录的归一化全部来自 \`./model-catalog.ts\`。
+ *
+ * 也就是说本文件只回答三件事：**这一行请求用哪个目录行**、**用哪把凭据**、
+ * **失败之后换不换账号**。任何一份签名、编码或 JSON 解析在这里出现第二遍，
+ * 就等于给线路造了第二条会漂移的真相。
+ *
+ * 三处刻意如此：
+ *
+ * 1. **凭据只在 \`credentialFor()\` 一处取。** 有号池时轮转（核心自己处理刷新），
+ *    没有池时读单凭据存储（无头 host 与测试的形态）。
+ * 2. **请求路径不联网。** 目录只读 \`client.ts\` 的进程内缓存，随包目录兜底；
+ *    实时目录是 \`/catalog/refresh\` 与登录/adopt 的产物。
+ * 3. **缓存用量在本进程累计。** 累计器住在本文件（流的末端是唯一知道用量帧的地方），
+ *    \`/status\` 由 \`readQoderCacheStats()\` 读它；路由不另算第二套口径。
+ */
+import { LlmAdapter, type GenerateOptions, type LlmModelInfo, type LlmProviderInfo, type LlmResolvedModelInfo, type PreparedAdapterCall, type ResolvedRetryPolicy, type StreamChunk } from '@deepseek-ai/dsh-llm';
+import type { ImageAttachmentRef } from '@deepseek-ai/dsh-attachment';
+import { type AttachmentImageReader } from '../common/request-images.ts';
+import { clearCachedQoderModelCatalog, type QoderUpstreamCredential } from './client.ts';
+import { type QoderModelEntry } from './model-catalog.ts';
+import { QoderCredentialStore, QoderModelSettingsStore, type QoderPreferenceStore } from './token-store.ts';
+import type { QoderAccountPool } from './account-pool.ts';
+import { PROVIDER_ID, PROVIDER_NAME } from './types.ts';
+import type { QoderCacheStatsDto, QoderRegion } from '../../shared/qoder-contracts.ts';
+/**
+ * 这条路由的瞬时故障重试策略，与兄弟线路逐字一致。
+ *
+ * 刻意不在集合里：AUTH（被拒的 token 每次都一样，而它只能重新授权）、
+ * PROVIDER_ERROR（400 或套餐拒绝）、ABORTED（调用方自己取消）。
+ */
+export declare const QODER_RETRY_POLICY_CONFIG: {
+    mode: 'normal';
+    maxRetries: number;
+    retryableCodes: string[];
+    backoff: {
+        initialDelayMs: number;
+        maxDelayMs: number;
+        jitterRatio: number;
+    };
+};
+/** 上游没有给 Retry-After 时，一次 429 按 5 分钟冷却。 */
+export declare const QODER_POOL_COOLDOWN_MS: number;
+/**
+ * 这个部署能调的模型：**进程内缓存优先、随包目录兜底，请求路径上绝不联网**。
+ *
+ * 实时目录由 \`/catalog/refresh\`、登录/adopt，以及 \`GET /status\` **应答背后**
+ * 的那次自动刷新产生（见 routes.ts）；本函数自己一次请求都不发——
+ * 让每一次模型解析都去打上游只会把设置页变成一条压测。
+ */
+export declare function cachedQoderModelCatalog(region: QoderRegion): readonly QoderModelEntry[];
+/**
+ * 一行的白名单该按哪一套规则收敛；**口径只有这一处**。
+ *
+ * 适配器的过滤（listModels）与状态面的勾选标记（getQoderStatus）都从这里读，
+ * 免得两边各写一份「兜底阶段要不要按白名单筛」而慢慢漂开。
+ *
+ * - 实时目录：按白名单收敛 + 过滤（上游下线一个模型后，那份残留 id 不该再占名额，
+ *   也不该让「已选 N / M」的分子大于目录条目数）；
+ * - 兜底表：**不按白名单筛**，全部返回（它是能力占位，且与白名单不是同一套 id
+ *   词汇表——见 client.ts 的 qoderCatalogIsLive）；
+ * - `[]`（用户明确全关）与 `null`（不过滤）在两种阶段下的含义都不变：全关就是全关。
+ *
+ * @param stored 用户存下来的选择（三态）。
+ * @param live   当前拿到的是实时目录（true）还是随包兜底表（false）。
+ * @param catalog 当前这一份目录（兜底阶段它只用来决定「有没有条目可给」）。
+ * @returns 收敛后的白名单；`null` = 不过滤。
+ */
+export declare function convergeQoderSelection(stored: readonly string[] | null, live: boolean, catalog: readonly QoderModelEntry[]): string[] | null;
+/**
+ * 设置卡片渲染的模型总数（hub 概览用；取两区随包表的较大者）。
+ *
+ * ⚠ 它**不带区域**，所以只适合当「这条线路大概有几个模型」的量级读数。
+ * 需要与勾选收敛对齐时用 {@link cachedQoderModelCatalog}（按区取，分子分母同源）。
+ */
+export declare function qoderCatalogSize(): number;
+/** 记下一次请求的用量（流读到终止帧之后调用）。 */
+export declare function rememberQoderCacheUsage(usage: {
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens: number;
+    cacheWriteTokens: number;
+}): void;
+/**
+ * 卡片要的那份切片；**尚无样本时返回 undefined**。
+ *
+ * 「还没有样本」与「样本全都没命中」必须能被区分：契约里 \`cacheStats\` 是可选的，
+ * 客户端把缺失渲染成占位符、把 0 渲染成真实的 0%，所以这里绝不下发一个全 0 的对象。
+ */
+export declare function readQoderCacheStats(): QoderCacheStatsDto | undefined;
+/** 一行请求要用的凭据：发请求只需要 client.ts 认得的那份切片。 */
+export interface QoderPickedCredential {
+    /** 号池里的账号 id；无池（单凭据路径）时为 null。 */
+    accountId: string | null;
+    credentials: QoderUpstreamCredential;
+}
+export interface QoderAdapterOptions {
+    fetchFn?: typeof fetch;
+    attachments?: AttachmentImageReader;
+    /** 多账号号池；缺省走单凭据路径（无头 host 与测试）。 */
+    accountPool?: QoderAccountPool;
+}
+/**
+ * Qoder（订阅）线路的 LlmAdapter 实现。
+ *
+ * 请求面只有一个：COSY 签名的 SSE 对话端点（两区同一协议面，区域由凭据决定），
+ * 所以本文件里**没有**协议面判定——URL 由 client.ts 从凭据的区域得出。
+ */
+export declare class QoderAdapter extends LlmAdapter {
+    private readonly store;
+    private readonly modelSettings;
+    private readonly preferences;
+    private readonly accountPool;
+    private readonly options;
+    constructor(store?: QoderCredentialStore, modelSettings?: QoderModelSettingsStore, preferences?: QoderPreferenceStore, options?: QoderAdapterOptions);
+    providerInfo(provider: string): LlmProviderInfo;
+    providerRetryPolicy(): ResolvedRetryPolicy;
+    imageRequestPricing(): undefined;
+    imageRequestTarget(_provider: string, _model: string, image: ImageAttachmentRef): {
+        width: number;
+        height: number;
+        maxBytes: number;
+    };
+    private settings;
+    /** 这个部署的目录行（缓存优先，请求路径不联网）。 */
+    private catalog;
+    /**
+     * 这一行请求用哪份凭据。
+     *
+     * 有池时轮转（核心自己做刷新）；没有池时读单凭据存储（无头 host 与测试的形态）。
+     */
+    private credentialFor;
+    listModels(provider?: string): Promise<readonly LlmModelInfo[]>;
+    resolveModel(provider: string, model: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;
+    prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;
+    stream(options: GenerateOptions): AsyncIterable<StreamChunk>;
+    /**
+     * 一次请求的完整往返：选账号 → 定目录行 → 编码+签名 → 发 → 解析信封流。
+     *
+     * 账号轮转的循环只有一处：一次 429 或一次 AUTH 会把那个账号移出本次请求，
+     * 由另一个账号来发**同一份**请求体。没有池时这个循环只跑一次。
+     *
+     * 编码与签名的顺序是协议事实（inference-protocol.md §3-§4）：先 JSON.stringify
+     * 一次拿到字节，codec 编码这同一份字节，签名覆盖编码后的字符串——任何中间的
+     * 一道 re-marshal 都会让签名的字节与发送的字节漂移。
+     */
+    private requestStream;
+}
+export { clearCachedQoderModelCatalog, PROVIDER_ID, PROVIDER_NAME };
+//# sourceMappingURL=adapter.d.ts.map

package/lib/types/host/qoder/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/qoder/adapter.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AAEH,OAAO,EACL,UAAU,EAIV,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAA;AAYrE,OAAO,EAAgC,KAAK,qBAAqB,EAAE,MAAM,6BAA6B,CAAA;AAEtG,OAAO,EACL,4BAA4B,EAM5B,KAAK,uBAAuB,EAC7B,MAAM,aAAa,CAAA;AAEpB,OAAO,EAOL,KAAK,eAAe,EACrB,MAAM,oBAAoB,CAAA;AAY3B,OAAO,EACL,oBAAoB,EACpB,uBAAuB,EAGvB,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAA;AACzB,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AACzD,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,YAAY,CAAA;AACvD,OAAO,KAAK,EAAE,kBAAkB,EAAE,WAAW,EAAE,MAAM,iCAAiC,CAAA;AAEtF;;;;;GAKG;AACH,eAAO,MAAM,yBAAyB,EAAE;IACtC,IAAI,EAAE,QAAQ,CAAA;IACd,UAAU,EAAE,MAAM,CAAA;IAClB,cAAc,EAAE,MAAM,EAAE,CAAA;IACxB,OAAO,EAAE;QAAE,cAAc,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,CAAA;CAM7E,CAAA;AAOD,2CAA2C;AAC3C,eAAO,MAAM,sBAAsB,QAAgB,CAAA;AAEnD;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,WAAW,GAAG,SAAS,eAAe,EAAE,CAGvF;AAED;;;;;;;;;;;;;;;;GAgBG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,MAAM,EAAE,GAAG,IAAI,EAChC,IAAI,EAAE,OAAO,EACb,OAAO,EAAE,SAAS,eAAe,EAAE,GAClC,MAAM,EAAE,GAAG,IAAI,CASjB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAIzC;AA2BD,6BAA6B;AAC7B,wBAAgB,uBAAuB,CAAC,KAAK,EAAE;IAC7C,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,gBAAgB,EAAE,MAAM,CAAA;CACzB,GAAG,IAAI,CAOP;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,IAAI,kBAAkB,GAAG,SAAS,CAQpE;AAMD,0CAA0C;AAC1C,MAAM,WAAW,qBAAqB;IACpC,kCAAkC;IAClC,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,WAAW,EAAE,uBAAuB,CAAA;CACrC;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,mCAAmC;IACnC,WAAW,CAAC,EAAE,gBAAgB,CAAA;CAC/B;AAgBD;;;;;GAKG;AACH,qBAAa,YAAa,SAAQ,UAAU;IAE1C,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAsB;IAC5C,OAAO,CAAC,QAAQ,CAAC,aAAa,CAAyB;IACvD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAkC;IAC9D,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAyB;IACrD,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqB;gBAG3C,KAAK,GAAE,oBAAiD,EACxD,aAAa,GAAE,uBAAuD,EACtE,WAAW,CAAC,EAAE,oBAAoB,EAClC,OAAO,GAAE,mBAAwB;IAUnC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,EAAE,kBAAkB;;;;;IAI/E,OAAO,CAAC,QAAQ;IAMhB,8BAA8B;IAC9B,OAAO,CAAC,OAAO;IAIf;;;;OAIG;YACW,aAAa;IAoBrB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAyC/D,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAuClG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAO/F,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;IAUnE;;;;;;;;;OASG;YACY,aAAa;CA+I7B;AAED,OAAO,EAAE,4BAA4B,EAAE,WAAW,EAAE,aAAa,EAAE,CAAA"}

package/lib/types/host/qoder/adopt.d.ts

@@ -0,0 +1,146 @@
+/**
+ * adopt：只读导入本机已登录的 qodercli 客户端登录态。
+ *
+ * 上游落盘事实全部来自 qodercli2api \`docs/oauth.md\` §4（格式由它的 frozen fixture
+ * \`credential.json\` 逐字节锁定，\`test/qoder-adopt.test.ts\` 用同一 fixture 驱动）：
+ *
+ * - 路径：\`~/.qoder/.auth/machine_id\`（36 字符 UUID）与 \`~/.qoder/.auth/user\`；
+ * - 信封：strict standard padded Base64；明文是 UserInfo 的 UTF-8 JSON；
+ * - key：\`machine_id\` 前 16 个字符的 **raw UTF-8 字节**（不是 hex/base64 解码值）；
+ * - cipher：AES-128-CBC，IV 与 key 相同，PKCS#7 严格校验；
+ * - 兼容：去除外围空白后以 \`{\` 开头的内容按明文 JSON 解析。
+ *
+ * ---------------------------------------------------------------------------
+ * 规则 1 —— 本模块永不写入。它是 reader，而且只是 reader。
+ * ---------------------------------------------------------------------------
+ * 不得创建、修改、移动或删除任何属于 qodercli 的文件。保证是**结构性**的：
+ * 本模块从 node:fs/promises **按名**只导入 readFile 与 stat 两个函数
+ * （与 step-code 的 adopt.ts 同一条规则、同一个理由）。
+ *
+ * ---------------------------------------------------------------------------
+ * 规则 2 —— 存在性与内容分成两个函数。
+ * ---------------------------------------------------------------------------
+ * \`qoderAdoptPresence()\` 便宜到可以在插件启动时调用，只 stat、从不 open；
+ * \`adoptQoderSignIn()\` 才是完整读取，且只在用户显式选择之后才被调用。
+ *
+ * ---------------------------------------------------------------------------
+ * 规则 3 —— 认不出来的形状永远给一个**值**，永远不给异常。
+ * ---------------------------------------------------------------------------
+ * 没有文件、读不了、解密失败、不是 JSON、里面没有 token、两区都不认——全部落在
+ * QoderAdoptResultDto 的 reason 枚举里。
+ *
+ * ---------------------------------------------------------------------------
+ * 规则 4 —— **区域不猜，是探出来的**。
+ * ---------------------------------------------------------------------------
+ * 区域是凭据的属性，而 qodercli 的凭据文件**不记录区域**（格式里没有这个字段）。
+ * 所以 adopt 拿解密后的 token 对两区的 userinfo 各探一次（只读 GET），哪区认
+ * 就是哪区；两区都不认（token 已失效或被撤销）归为 \`region-unresolved\`——
+ * 让用户重新登录，而不是替他决定一个必然 401 的区域（计划 §9 风险 5）。
+ *
+ * ---------------------------------------------------------------------------
+ * 规则 5 —— 快照，不是活凭据。
+ * ---------------------------------------------------------------------------
+ * adopt 进来的是一份**快照**：qodercli 那边之后的刷新不会流回来；本插件拿着
+ * 快照里的 refresh_token 走自己的刷新链，两边从此各刷各的。
+ */
+import { type QoderAdoptResultDto } from '../../shared/qoder-contracts.ts';
+import { QODER_CLI_CREDENTIAL_SOURCE, type QoderCredentials } from './token-store.ts';
+/** 显式指定 qodercli 凭据文件路径的环境变量（测试与嵌入式宿主的口子；非官方变量）。 */
+export declare const QODER_AUTH_PATH_ENV = "QODER_CLI_AUTH_PATH";
+/** 显式指定 qodercli machine_id 路径的环境变量（同上）。 */
+export declare const QODER_MACHINE_ID_PATH_ENV = "QODER_CLI_MACHINE_ID_PATH";
+/** qodercli 的家目录（HOME / USERPROFILE 再退到 os.homedir()，与兄弟线路同一口径）。 */
+export declare function qoderCliHomeDir(env?: NodeJS.ProcessEnv): string;
+/** qodercli 的凭据文件路径。 */
+export declare function qoderCliAuthPath(env?: NodeJS.ProcessEnv): string;
+/** qodercli 的 machine_id 文件路径。 */
+export declare function qoderCliMachineIdFilePath(env?: NodeJS.ProcessEnv): string;
+/** adopt 成功时带走的凭据：凭据 + 它是从哪个文件捡来的。 */
+export interface QoderAdoptedCredential {
+    /** 池里的判别式，恒为 true。 */
+    readonly adopted: true;
+    /** 来源标识，供卡片与池记录。 */
+    readonly source: typeof QODER_CLI_CREDENTIAL_SOURCE;
+    /** 读到的确切路径，卡片可以把它显示给用户。 */
+    readonly sourcePath: string;
+    /** 本线路的凭据形态。 */
+    readonly credentials: QoderCredentials;
+}
+/** adopt 失败原因，直接取自冻结契约的 QoderAdoptResultDto['reason']，不另立一套。 */
+export type QoderAdoptReason = NonNullable<QoderAdoptResultDto['reason']>;
+/**
+ * 每个失败原因对应的一句可照做的下一步。
+ *
+ * 五个取值各自的下一步不同，所以分开写而不是拼一句「导入失败」。
+ */
+export declare const ADOPT_REASON_HINTS: Readonly<Record<QoderAdoptReason, string>>;
+/** 解析一份已解密的 UserInfo 的结论：要么带凭据材料，要么带一个 reason。 */
+export type QoderAdoptParse = {
+    readonly ok: true;
+    readonly material: QoderAdoptMaterial;
+} | {
+    readonly ok: false;
+    readonly reason: QoderAdoptReason;
+};
+/**
+ * 从 UserInfo 里读出的凭据材料（区域还没定：格式里没有这个字段，见规则 4）。
+ */
+export interface QoderAdoptMaterial {
+    accessToken: string;
+    refreshToken: string | null;
+    expiresAt: number;
+    uid: string | null;
+    email: string | null;
+    accountName: string | null;
+    organizationId: string | null;
+    organizationTags: string[];
+    dataPolicyAgreed: boolean;
+}
+/**
+ * 把一份已解密的 UserInfo JSON 解析成凭据材料。
+ *
+ * 纯函数、导出：格式规则可以脱离文件系统与网络被测试。
+ *
+ * 字段逐字按 qodercli2api 的 fixture 与 pi-provider 的 UserInfo 形状读取，全部按
+ * 「可能缺失」处理（计划 §9 风险 5：这份载荷没有逐字 schema）：
+ *
+ * - \`access_token\`（fixture 明文里有）优先，\`security_oauth_token\` 兜底
+ *   （docs/oauth.md §6：OpenAPI 鉴权用 \`security_oauth_token ?? access_token\`）；
+ * - \`refresh_token\`、\`uid\`、\`name\`、\`email\`、\`organization_id\`、
+ *   \`organization_tags\`、\`data_policy_agreed\`、\`expire_time\` 都可能没有。
+ */
+export declare function parseQoderAdoptedUserInfo(value: unknown): QoderAdoptParse;
+/**
+ * 本机有没有可导入的 qodercli 登录态（凭据文件 + machine_id 都在才算）。
+ *
+ * 启动路径安全：它**从不**打开候选文件去读（同 step-code adopt 的那条规则）。
+ */
+export declare function qoderAdoptPresence(env?: NodeJS.ProcessEnv): Promise<boolean>;
+/** 一次 adopt 的结论：给卡片的切片 + （成功时）真正要落盘的凭据。 */
+export interface QoderAdoptOutcome {
+    /** 卡片渲染用；不含任何凭据。 */
+    readonly result: QoderAdoptResultDto;
+    /** 成功时才有：带来源标记的凭据，交给号池或凭据存储落盘。 */
+    readonly adopted?: QoderAdoptedCredential;
+    /** 实际读到的文件（设置卡片要把它显示出来）。 */
+    readonly sourcePath?: string;
+}
+export interface QoderAdoptOptions {
+    /** 环境变量读取处；缺省 process.env，且**调用时**读取。 */
+    env?: NodeJS.ProcessEnv;
+    /** 区域探测的请求缝（测试注入 mock fetch）。 */
+    fetchFn?: typeof fetch;
+}
+/**
+ * 只读导入本机 qodercli 登录态。
+ *
+ * **只在用户显式 opt in 之后调用**（见模块头规则 2）。永不抛出、永不拒绝。
+ *
+ * 区域探测（规则 4）：拿解密后的 token 依次对 global、cn 的 userinfo 发只读 GET，
+ * 第一个认账的区域获胜；两区都不认 → \`region-unresolved\`。探测只认「请求成功」，
+ * 任何网络/鉴权失败都记为不认账——探测的目的是定位，不是诊断。
+ */
+export declare function adoptQoderSignIn(options?: QoderAdoptOptions): Promise<QoderAdoptOutcome>;
+/** 只要那张给卡片的切片（不带走凭据）。 */
+export declare function readQoderAdoptResult(options?: QoderAdoptOptions): Promise<QoderAdoptResultDto>;
+//# sourceMappingURL=adopt.d.ts.map

package/lib/types/host/qoder/adopt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adopt.d.ts","sourceRoot":"","sources":["../../../../src/host/qoder/adopt.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4CG;AAMH,OAAO,EAEL,KAAK,mBAAmB,EAEzB,MAAM,iCAAiC,CAAA;AAQxC,OAAO,EAAsB,2BAA2B,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAMzG,oDAAoD;AACpD,eAAO,MAAM,mBAAmB,wBAAwB,CAAA;AAExD,4CAA4C;AAC5C,eAAO,MAAM,yBAAyB,8BAA8B,CAAA;AAEpE,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAG5E;AAED,wBAAwB;AACxB,wBAAgB,gBAAgB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAI7E;AAED,kCAAkC;AAClC,wBAAgB,yBAAyB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,MAAM,CAItF;AAcD,sCAAsC;AACtC,MAAM,WAAW,sBAAsB;IACrC,sBAAsB;IACtB,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAA;IACtB,oBAAoB;IACpB,QAAQ,CAAC,MAAM,EAAE,OAAO,2BAA2B,CAAA;IACnD,2BAA2B;IAC3B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAC3B,gBAAgB;IAChB,QAAQ,CAAC,WAAW,EAAE,gBAAgB,CAAA;CACvC;AAED,gEAAgE;AAChE,MAAM,MAAM,gBAAgB,GAAG,WAAW,CAAC,mBAAmB,CAAC,QAAQ,CAAC,CAAC,CAAA;AAEzE;;;;GAIG;AACH,eAAO,MAAM,kBAAkB,EAAE,QAAQ,CAAC,MAAM,CAAC,gBAAgB,EAAE,MAAM,CAAC,CAWzE,CAAA;AAED,kDAAkD;AAClD,MAAM,MAAM,eAAe,GACvB;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,CAAA;CAAE,GAC5D;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAA;CAAE,CAAA;AAE7D;;GAEG;AACH,MAAM,WAAW,kBAAkB;IACjC,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,SAAS,EAAE,MAAM,CAAA;IACjB,GAAG,EAAE,MAAM,GAAG,IAAI,CAAA;IAClB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;IACpB,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,cAAc,EAAE,MAAM,GAAG,IAAI,CAAA;IAC7B,gBAAgB,EAAE,MAAM,EAAE,CAAA;IAC1B,gBAAgB,EAAE,OAAO,CAAA;CAC1B;AAED;;;;;;;;;;;;GAYG;AACH,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAqBzE;AAeD;;;;GAIG;AACH,wBAAsB,kBAAkB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,OAAO,CAAC,OAAO,CAAC,CAE/F;AAED,2CAA2C;AAC3C,MAAM,WAAW,iBAAiB;IAChC,oBAAoB;IACpB,QAAQ,CAAC,MAAM,EAAE,mBAAmB,CAAA;IACpC,kCAAkC;IAClC,QAAQ,CAAC,OAAO,CAAC,EAAE,sBAAsB,CAAA;IACzC,4BAA4B;IAC5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED,MAAM,WAAW,iBAAiB;IAChC,yCAAyC;IACzC,GAAG,CAAC,EAAE,MAAM,CAAC,UAAU,CAAA;IACvB,iCAAiC;IACjC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CACvB;AAED;;;;;;;;GAQG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,iBAAiB,CAAC,CAuF5B;AAED,yBAAyB;AACzB,wBAAsB,oBAAoB,CACxC,OAAO,GAAE,iBAAsB,GAC9B,OAAO,CAAC,mBAAmB,CAAC,CAE9B"}