@eddyskywalker/dsh-chatgpt-subscription 0.33.0 → 0.35.0

package/lib/types/host/opendesign/mapper.d.ts

@@ -0,0 +1,128 @@
+/**
+ * OpenDesign wire mapping: the harness conversation in, an OpenAI-compatible
+ * `chat/completions` body out; decoded SSE frames in, harness stream chunks out.
+ *
+ * The request order rules matter more than they look: an assistant message
+ * carrying `tool_calls` must be followed immediately by one `tool` message per
+ * call id, or a validating gateway rejects the whole request with "insufficient
+ * tool messages following tool_calls message". Everything that would otherwise
+ * land inside that run is held back until the group closes.
+ *
+ * @module dsh-chatgpt-subscription/opendesign-mapper
+ */
+import { type StreamChunk, type TokenUsage } from '@deepseek-ai/dsh-llm';
+import type { GenerateOptions, Message } from '../common/llm-compat.ts';
+import { type ResolvedRequestImages } from '../common/request-images.ts';
+/** The sentence a no-content finish carries, shared with the sibling lines. */
+export declare const NO_ANSWER_PHRASE = "ended the turn without an answer or a tool call";
+/** One OpenAI wire message. */
+export interface OpenDesignWireMessage {
+    role: 'system' | 'user' | 'assistant' | 'tool';
+    content: string | Array<Record<string, unknown>>;
+    reasoning_content?: string;
+    tool_calls?: Array<{
+        id: string;
+        type: 'function';
+        function: {
+            name: string;
+            arguments: string;
+        };
+    }>;
+    tool_call_id?: string;
+}
+/** One request body, as sent to the gateway. */
+export interface OpenDesignWireBody {
+    model: string;
+    messages: OpenDesignWireMessage[];
+    stream: true;
+    stream_options: {
+        include_usage: true;
+    };
+    tools?: Array<{
+        type: 'function';
+        function: {
+            name: string;
+            description: string;
+            parameters: Record<string, unknown>;
+        };
+    }>;
+    temperature?: number;
+    max_tokens?: number;
+    stop?: readonly string[];
+    reasoning_effort?: string;
+}
+/**
+ * Convert the harness conversation to wire messages.
+ *
+ * Tool results become standalone `role: 'tool'` messages. A user message
+ * carrying an image switches to the OpenAI content-part array; a text-only one
+ * keeps the plain-string form. An image nested in a tool result has no OpenAI
+ * `tool` wire spelling, so it rides a following user message instead — the same
+ * shape the shipped adapters use. Deferring that message until the next non-tool
+ * message keeps a parallel group's answers contiguous.
+ *
+ * `developer` becomes `system`: the newer OpenAI spelling is not accepted by
+ * every OpenAI-compatible gateway, while `system` is.
+ */
+export declare function serializeMessages(messages: readonly Message[], images: ResolvedRequestImages): OpenDesignWireMessage[];
+/**
+ * Build the wire request for one harness call.
+ * @param options - the harness request (model, system, history, tools, sampling).
+ * @param connection - resolved connection facts (default output budget).
+ * @param images - attachmentId → prepared request version.
+ */
+export declare function buildOpenDesignBody(options: GenerateOptions, connection: {
+    maxTokens: number;
+}, images: ResolvedRequestImages): OpenDesignWireBody;
+/** Map an OpenAI `finish_reason` to the harness finish reason. */
+export declare function mapFinishReason(reason: string): StreamChunk & {
+    type: 'finish';
+};
+/**
+ * Map OpenAI usage fields to disjoint harness counts.
+ *
+ * `prompt_tokens` includes cache hits per the OpenAI convention, and the harness
+ * counts are disjoint, so cached tokens are subtracted out of `inputTokens`.
+ */
+export declare function mapUsage(usage: Record<string, unknown> | null | undefined): TokenUsage;
+/**
+ * Read one delta's reasoning text, tolerating both wire spellings.
+ *
+ * Prefers the string field, and falls back to joining the `reasoning_details`
+ * parts, which is where a gateway that omits the flat field puts the same text.
+ */
+export declare function reasoningOf(delta: Record<string, unknown>): string | undefined;
+/** The gateway's error string, whichever envelope it arrived in. */
+export declare function errorText(error: unknown): string;
+/** Whether the payload is a bare error object rather than a completion chunk. */
+export declare function isErrorPayload(payload: unknown): payload is {
+    error: unknown;
+};
+/** Whether one refusal is about the credential at all. */
+export declare function isAuthenticationError(message: string, status?: number): boolean;
+/**
+ * Map a gateway error payload to a stable harness code.
+ *
+ * OpenDesign meters in dollar-denominated credits, so the exhausted state reads
+ * as an insufficient-balance/credits refusal, not a window name: 402, or the
+ * gateway's own wording about credits/balance running out, is QUOTA. Anything
+ * merely mentioning a plan or a limit is NOT — a temporary billing-lookup
+ * failure must not stand an account down.
+ */
+export declare function streamErrorCode(message: string, status?: number): string;
+/**
+ * Parse an SSE body into decoded JSON frames.
+ * @param body - a web ReadableStream of UTF-8 bytes.
+ * @returns every `data:` payload up to `[DONE]`.
+ */
+export declare function parseServerSentEvents(body: ReadableStream<Uint8Array>): AsyncGenerator<unknown | '[DONE]'>;
+/**
+ * Translate decoded SSE payloads into harness stream chunks.
+ *
+ * Deltas stream through as they arrive; block ends, usage and the finish reason
+ * are all deferred to the `[DONE]` sentinel, so no chunk ever follows `finish`.
+ * A completion with no content at all becomes an `EMPTY_RESPONSE` error finish
+ * rather than a silent empty message.
+ */
+export declare function translate(payloads: AsyncIterable<unknown | '[DONE]'>): AsyncGenerator<StreamChunk>;
+//# sourceMappingURL=mapper.d.ts.map

package/lib/types/host/opendesign/mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapper.d.ts","sourceRoot":"","sources":["../../../../src/host/opendesign/mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AACH,OAAO,EAKL,KAAK,WAAW,EAChB,KAAK,UAAU,EAChB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAsC,eAAe,EAAE,OAAO,EAAE,MAAM,yBAAyB,CAAA;AAC3G,OAAO,EAGL,KAAK,qBAAqB,EAC3B,MAAM,6BAA6B,CAAA;AAIpC,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,oDAAoD,CAAA;AAEjF,+BAA+B;AAC/B,MAAM,WAAW,qBAAqB;IACpC,IAAI,EAAE,QAAQ,GAAG,MAAM,GAAG,WAAW,GAAG,MAAM,CAAA;IAC9C,OAAO,EAAE,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IAChD,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,UAAU,CAAC,EAAE,KAAK,CAAC;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,SAAS,EAAE,MAAM,CAAA;SAAE,CAAA;KAAE,CAAC,CAAA;IACnG,YAAY,CAAC,EAAE,MAAM,CAAA;CACtB;AAED,gDAAgD;AAChD,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,CAAA;IACb,QAAQ,EAAE,qBAAqB,EAAE,CAAA;IACjC,MAAM,EAAE,IAAI,CAAA;IACZ,cAAc,EAAE;QAAE,aAAa,EAAE,IAAI,CAAA;KAAE,CAAA;IACvC,KAAK,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,UAAU,CAAC;QAAC,QAAQ,EAAE;YAAE,IAAI,EAAE,MAAM,CAAC;YAAC,WAAW,EAAE,MAAM,CAAC;YAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;SAAE,CAAA;KAAE,CAAC,CAAA;IACzH,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;IACxB,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AA+CD;;;;;;;;;;;;GAYG;AACH,wBAAgB,iBAAiB,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,EAAE,MAAM,EAAE,qBAAqB,GAAG,qBAAqB,EAAE,CAuEtH;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CACjC,OAAO,EAAE,eAAe,EACxB,UAAU,EAAE;IAAE,SAAS,EAAE,MAAM,CAAA;CAAE,EACjC,MAAM,EAAE,qBAAqB,GAC5B,kBAAkB,CAoBpB;AAED,kEAAkE;AAClE,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,WAAW,GAAG;IAAE,IAAI,EAAE,QAAQ,CAAA;CAAE,CAchF;AAED;;;;;GAKG;AACH,wBAAgB,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,GAAG,SAAS,GAAG,UAAU,CAiBtF;AAOD;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,MAAM,GAAG,SAAS,CAW9E;AAED,oEAAoE;AACpE,wBAAgB,SAAS,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAOhD;AAED,iFAAiF;AACjF,wBAAgB,cAAc,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,IAAI;IAAE,KAAK,EAAE,OAAO,CAAA;CAAE,CAE9E;AAED,0DAA0D;AAC1D,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,OAAO,CAG/E;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,MAAM,GAAG,MAAM,CAWxE;AAED;;;;GAIG;AACH,wBAAuB,qBAAqB,CAAC,IAAI,EAAE,cAAc,CAAC,UAAU,CAAC,GAAG,cAAc,CAAC,OAAO,GAAG,QAAQ,CAAC,CA2CjH;AAcD;;;;;;;GAOG;AACH,wBAAuB,SAAS,CAAC,QAAQ,EAAE,aAAa,CAAC,OAAO,GAAG,QAAQ,CAAC,GAAG,cAAc,CAAC,WAAW,CAAC,CA+FzG"}

package/lib/types/host/opendesign/oauth.d.ts

@@ -0,0 +1,105 @@
+import type { OpenDesignOAuthCredentials } from './token-store.ts';
+/** An auth failure with the HTTP facts a caller can judge. */
+export declare class OpenDesignOAuthError extends Error {
+    readonly status?: number;
+    readonly code?: string;
+    constructor(message: string, options?: {
+        status?: number;
+        code?: string;
+        cause?: unknown;
+    });
+}
+/** One device authorization, as the create call returns it. */
+export interface OpenDesignDeviceAuthorization {
+    deviceId: string;
+    userCode: string;
+    activationUrl: string;
+    deviceSecret: string;
+    expiresAt: number;
+    pollIntervalSeconds: number;
+}
+/** Step 1: create one device authorization. */
+export declare function startOpenDesignDeviceAuth(fetchFn: typeof fetch, { apiBase, host, signal, timeoutMs, }: {
+    apiBase?: string;
+    host: string;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Promise<OpenDesignDeviceAuthorization>;
+/** One poll verdict: still waiting, or the issued credential pair. */
+export type OpenDesignDevicePoll = {
+    pending: true;
+} | {
+    pending: false;
+    credentials: OpenDesignOAuthCredentials;
+};
+/**
+ * Step 3: one poll of the device grant.
+ *
+ * Completion is read from the payload's SHAPE: `runtimeKey`/`controlKey`
+ * present means approved, whatever `status` says; a non-pending status with no
+ * keys is a refusal (denied or expired), reported with the service's own words.
+ */
+export declare function pollOpenDesignDevice(fetchFn: typeof fetch, authorization: Pick<OpenDesignDeviceAuthorization, 'deviceId' | 'deviceSecret'>, { apiBase, signal, timeoutMs, }?: {
+    apiBase?: string;
+    signal?: AbortSignal;
+    timeoutMs?: number;
+}): Promise<OpenDesignDevicePoll>;
+/** One login flow, as the settings card renders it. */
+export type OpenDesignLoginStatus = 'idle' | 'pending' | 'complete' | 'failed' | 'cancelled';
+export interface OpenDesignLoginFlow {
+    id: string;
+    status: OpenDesignLoginStatus;
+    userCode: string;
+    verificationUri: string;
+    expiresAt: number;
+    intervalSeconds: number;
+    error: string;
+    accountAlias: string;
+}
+export interface OpenDesignLoginOptions {
+    fetchFn: typeof fetch;
+    /** AMR control-plane base; a test seam and a deployment override. */
+    apiBase?: string;
+    /** This machine's name, recorded on the authorization the console lists. */
+    host(): string;
+    /** Persist a newly signed-in account; throws make the flow fail. */
+    onLogin(credentials: OpenDesignOAuthCredentials): Promise<void>;
+    logger?: {
+        warn(message: string, ...args: unknown[]): void;
+    };
+}
+/**
+ * One device-authorization sign-in at a time.
+ *
+ * Polling is driven by the card (`GET /login/status`): each request makes at
+ * most one AMR call, and only after the advertised interval has elapsed. A host
+ * restart therefore loses the pending flow rather than keeping a poll loop
+ * alive with no reader — the same contract the sibling lines use.
+ */
+export declare class OpenDesignLoginManager {
+    private readonly options;
+    private flow;
+    private sequence;
+    constructor(options: OpenDesignLoginOptions);
+    /** Start a new flow, cancelling any previous one. */
+    begin({ signal }?: {
+        signal?: AbortSignal;
+    }): Promise<OpenDesignLoginFlow>;
+    /** The latest flow, or null when this process never started one. */
+    current(): OpenDesignLoginFlow | null;
+    /**
+     * Advance one flow and return its state.
+     *
+     * A flow the caller does not name is not advanced: two cards (or a stale one)
+     * cannot spend each other's polls.
+     */
+    status(id: string, { signal, timeoutMs }?: {
+        signal?: AbortSignal;
+        timeoutMs?: number;
+    }): Promise<OpenDesignLoginFlow>;
+    /** Abandon one flow; a late browser confirmation is then ignored. */
+    cancel(id: string): boolean;
+    /** Mark every flow cancelled for teardown. */
+    dispose(): void;
+}
+//# sourceMappingURL=oauth.d.ts.map

package/lib/types/host/opendesign/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/opendesign/oauth.ts"],"names":[],"mappings":"AAgCA,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAQlE,8DAA8D;AAC9D,qBAAa,oBAAqB,SAAQ,KAAK;IAC7C,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAA;IACxB,QAAQ,CAAC,IAAI,CAAC,EAAE,MAAM,CAAA;gBAEV,OAAO,EAAE,MAAM,EAAE,OAAO,GAAE;QAAE,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,OAAO,CAAA;KAAO;CAM/F;AAED,+DAA+D;AAC/D,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,EAAE,MAAM,CAAA;IAChB,QAAQ,EAAE,MAAM,CAAA;IAChB,aAAa,EAAE,MAAM,CAAA;IACrB,YAAY,EAAE,MAAM,CAAA;IACpB,SAAS,EAAE,MAAM,CAAA;IACjB,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAuBD,+CAA+C;AAC/C,wBAAsB,yBAAyB,CAC7C,OAAO,EAAE,OAAO,KAAK,EACrB,EACE,OAAsB,EACtB,IAAI,EACJ,MAAM,EACN,SAAmC,GACpC,EAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,GAC9E,OAAO,CAAC,6BAA6B,CAAC,CAmCxC;AAED,sEAAsE;AACtE,MAAM,MAAM,oBAAoB,GAC5B;IAAE,OAAO,EAAE,IAAI,CAAA;CAAE,GACjB;IAAE,OAAO,EAAE,KAAK,CAAC;IAAC,WAAW,EAAE,0BAA0B,CAAA;CAAE,CAAA;AAE/D;;;;;;GAMG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,OAAO,KAAK,EACrB,aAAa,EAAE,IAAI,CAAC,6BAA6B,EAAE,UAAU,GAAG,cAAc,CAAC,EAC/E,EACE,OAAsB,EACtB,MAAM,EACN,SAAmC,GACpC,GAAE;IAAE,OAAO,CAAC,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GACrE,OAAO,CAAC,oBAAoB,CAAC,CA2C/B;AAED,uDAAuD;AACvD,MAAM,MAAM,qBAAqB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,QAAQ,GAAG,WAAW,CAAA;AAE5F,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,MAAM,EAAE,qBAAqB,CAAA;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,eAAe,EAAE,MAAM,CAAA;IACvB,SAAS,EAAE,MAAM,CAAA;IACjB,eAAe,EAAE,MAAM,CAAA;IACvB,KAAK,EAAE,MAAM,CAAA;IACb,YAAY,EAAE,MAAM,CAAA;CACrB;AAUD,MAAM,WAAW,sBAAsB;IACrC,OAAO,EAAE,OAAO,KAAK,CAAA;IACrB,qEAAqE;IACrE,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,4EAA4E;IAC5E,IAAI,IAAI,MAAM,CAAA;IACd,oEAAoE;IACpE,OAAO,CAAC,WAAW,EAAE,0BAA0B,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D,MAAM,CAAC,EAAE;QAAE,IAAI,CAAC,OAAO,EAAE,MAAM,EAAE,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,IAAI,CAAA;KAAE,CAAA;CAC7D;AAED;;;;;;;GAOG;AACH,qBAAa,sBAAsB;IAIrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IAHpC,OAAO,CAAC,IAAI,CAA4B;IACxC,OAAO,CAAC,QAAQ,CAAI;gBAES,OAAO,EAAE,sBAAsB;IAE5D,qDAAqD;IAC/C,KAAK,CAAC,EAAE,MAAM,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAA;KAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA+BpF,oEAAoE;IACpE,OAAO,IAAI,mBAAmB,GAAG,IAAI;IAIrC;;;;;OAKG;IACG,MAAM,CAAC,EAAE,EAAE,MAAM,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,GAAE;QAAE,MAAM,CAAC,EAAE,WAAW,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC;IA0DhI,qEAAqE;IACrE,MAAM,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO;IAQ3B,8CAA8C;IAC9C,OAAO,IAAI,IAAI;CAKhB"}

package/lib/types/host/opendesign/routes.d.ts

@@ -0,0 +1,74 @@
+/**
+ * The OpenDesign settings API.
+ *
+ * The surface is the one every sibling line exposes — status, accounts, models —
+ * plus the controls this line genuinely has: device-authorization sign-in, an
+ * explicit catalog sync, and the wallet-balance read an OAuth account's control
+ * key can make.
+ *
+ * Reads never trigger an upstream call; the catalog is synced by its own action
+ * and behind a successful sign-in, and quota is refreshed by its own action.
+ *
+ * @module dsh-chatgpt-subscription/opendesign-routes
+ */
+import type { Context } from '@deepseek-ai/cordis';
+import type { OpenDesignAccountPool } from './account-pool.ts';
+import { type OpenDesignModelSettingsStore } from './token-store.ts';
+import type { OpenDesignLoginManager } from './oauth.ts';
+import { openPlatformBrowser } from '../step-code/routes.ts';
+import { type OpenDesignUsageAccountDto, type OpenDesignWebStatus } from '../../shared/opendesign-contracts.ts';
+export interface OpenDesignRouteOptions {
+    settings: OpenDesignModelSettingsStore;
+    accountPool: OpenDesignAccountPool;
+    /** Proxy-aware fetch for account verification, quota reads and catalog syncs. */
+    fetchFn: typeof fetch;
+    /** Device-authorization sign-in state, when the composition installed one. */
+    login?: OpenDesignLoginManager;
+    /**
+     * Browser opener for `/login/start`; defaults to a no-op because the settings
+     * card opens the activation URL itself via `window.open`.
+     */
+    openBrowser?: (url: string) => void;
+    serving(): boolean;
+    conflict(): string | null;
+}
+/** Named browser opener for deployments that want the host to launch the activation URL. */
+export declare const openOpenDesignBrowser: typeof openPlatformBrowser;
+/**
+ * Latest wallet readings, in-process only.
+ *
+ * A reading is a snapshot, not a stream: a restart starts blank rather than
+ * serving a stale figure as if fresh, and a failed refresh keeps the previous
+ * one with its error attached (the card shows both).
+ */
+interface UsageStore {
+    readings: Map<string, OpenDesignUsageAccountDto>;
+    fetchedAt: number;
+}
+/** Assemble the whole status payload the OpenDesign tab renders. */
+export declare function getOpenDesignWebStatus(options: OpenDesignRouteOptions, usageStore?: UsageStore): Promise<OpenDesignWebStatus>;
+/** The route table, exported so the client and this file can be checked against each other. */
+export declare const OPENDESIGN_ROUTES: {
+    readonly status: "GET";
+    readonly settings: "POST";
+    readonly accounts: "GET|POST";
+    readonly 'login/start': "POST";
+    readonly 'login/status': "GET";
+    readonly 'login/cancel': "POST";
+    readonly models: "GET|POST";
+    readonly 'models/visibility': "POST";
+    readonly 'models/visibility-all': "POST";
+    readonly 'models/context-window': "POST";
+    readonly 'catalog/refresh': "POST";
+    readonly usage: "GET|POST";
+};
+/**
+ * Register the OpenDesign settings API under `/opendesign/api`.
+ *
+ * Registered unconditionally: the card is how a user adds their first key, so
+ * gating it on winning the route would leave a contested id with no way to
+ * configure it at all.
+ */
+export declare function registerOpenDesignRoutes(ctx: Context, options: OpenDesignRouteOptions): () => void;
+export {};
+//# sourceMappingURL=routes.d.ts.map

package/lib/types/host/opendesign/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/opendesign/routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAKlD,OAAO,KAAK,EAAE,qBAAqB,EAAE,MAAM,mBAAmB,CAAA;AAC9D,OAAO,EAKL,KAAK,4BAA4B,EAClC,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AACxD,OAAO,EAAE,mBAAmB,EAAE,MAAM,wBAAwB,CAAA;AAC5D,OAAO,EAOL,KAAK,yBAAyB,EAE9B,KAAK,mBAAmB,EACzB,MAAM,sCAAsC,CAAA;AAsG7C,MAAM,WAAW,sBAAsB;IACrC,QAAQ,EAAE,4BAA4B,CAAA;IACtC,WAAW,EAAE,qBAAqB,CAAA;IAClC,iFAAiF;IACjF,OAAO,EAAE,OAAO,KAAK,CAAA;IACrB,8EAA8E;IAC9E,KAAK,CAAC,EAAE,sBAAsB,CAAA;IAC9B;;;OAGG;IACH,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,OAAO,IAAI,OAAO,CAAA;IAClB,QAAQ,IAAI,MAAM,GAAG,IAAI,CAAA;CAC1B;AAED,4FAA4F;AAC5F,eAAO,MAAM,qBAAqB,4BAAsB,CAAA;AAExD;;;;;;GAMG;AACH,UAAU,UAAU;IAClB,QAAQ,EAAE,GAAG,CAAC,MAAM,EAAE,yBAAyB,CAAC,CAAA;IAChD,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,oEAAoE;AACpE,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,UAAU,CAAC,EAAE,UAAU,GACtB,OAAO,CAAC,mBAAmB,CAAC,CAwC9B;AAkBD,+FAA+F;AAC/F,eAAO,MAAM,iBAAiB;;;;;;;;;;;;;CAAS,CAAA;AAEvC;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,GAAG,EAAE,OAAO,EAAE,OAAO,EAAE,sBAAsB,GAAG,MAAM,IAAI,CAwYlG"}

package/lib/types/host/opendesign/token-store.d.ts

@@ -0,0 +1,154 @@
+import type { CredentialStore } from '../token-store.ts';
+/**
+ * Shared non-secret display facts of one credential.
+ */
+interface OpenDesignCredentialBase {
+    /** User-chosen label so several accounts are distinguishable. */
+    alias?: string;
+    /** Unix milliseconds the credential was added to the pool. */
+    addedAt?: number;
+    /** Per-account gateway override; empty means the line's own base URL. */
+    baseURL?: string;
+}
+/**
+ * One stored OpenDesign API key.
+ *
+ * The gateway authenticates with a static key, so there is no refresh token and
+ * nothing expires. The key is host-only and never crosses to a browser; the
+ * settings card renders the alias and the account row, never this value.
+ */
+export interface OpenDesignApiKeyCredentials extends OpenDesignCredentialBase {
+    /** Present on every record this line writes; absent records predate the marker. */
+    kind?: 'api-key';
+    /** Host-only bearer key, created in the OpenDesign Cloud console. */
+    apiKey: string;
+}
+/**
+ * One account signed in through browser device authorization.
+ *
+ * The approval issues a pair (upstream issue nexu-io/open-design#8870): a
+ * `vela_ctrl_…` control key that reads the control plane (wallet balance and
+ * friends) and an `sk-amr-…` runtime key that serves the link gateway. Neither
+ * carries a published expiry, so there is no refresh lifecycle here — a revoked
+ * key is replaced by signing in again, not refreshed.
+ */
+export interface OpenDesignOAuthCredentials extends OpenDesignCredentialBase {
+    kind: 'oauth';
+    /** Control-plane bearer (`vela_ctrl_…`): wallet reads, never chat. */
+    controlKey: string;
+    /** Link-gateway bearer (`sk-amr-…`): chat and the live catalog. */
+    runtimeKey: string;
+    /** The account's identity as the approval returned it. */
+    user?: {
+        id?: string;
+        email?: string;
+        name?: string;
+        plan?: string;
+    };
+}
+export type OpenDesignCredentials = OpenDesignApiKeyCredentials | OpenDesignOAuthCredentials;
+/** Whether one credential is a device-flow session rather than a pasted key. */
+export declare function isOpenDesignOAuthCredentials(credentials: OpenDesignCredentials): credentials is OpenDesignOAuthCredentials;
+/** The chat bearer (`Authorization` value) for one credential. */
+export declare function bearerFor(credentials: OpenDesignCredentials): string;
+/** The control-plane bearer for one credential, when it has one. */
+export declare function controlKeyFor(credentials: OpenDesignCredentials): string | undefined;
+/**
+ * Stable identity of one key.
+ *
+ * The console hands the user a bare key and the gateway answers no profile for
+ * it, so the key's own digest is the only identity available. It is never
+ * written anywhere: it exists to tell two pasted keys apart inside the pool
+ * document, and it is not a credential and cannot be used as one.
+ */
+export declare function credentialsIdentity(credentials: OpenDesignCredentials): string;
+/** The user-facing label for one credential, when it states one. */
+export declare function credentialsLabel(credentials: OpenDesignCredentials): string | undefined;
+/** One catalog entry, as the last successful gateway listing published it. */
+export interface OpenDesignCatalogModel {
+    id: string;
+    name?: string;
+    contextWindow?: number;
+    maxTokens?: number;
+    reasoning?: boolean;
+    efforts?: string[];
+    input?: string[];
+}
+/**
+ * Everything this line stores besides credentials.
+ *
+ * `enabledModelIds === null` is "no filter": every known model, including ones
+ * a later sync adds. An array is an explicit selection, and an empty one
+ * switches every model off. Modelling "all" as null rather than as an explicit
+ * all-ids list means a model the service adds later is not silently hidden by a
+ * selection made before it existed.
+ *
+ * The synced catalog lives in this same document (`catalogModels`), so a
+ * restart rehydrates it from a local read with no network in the path — the
+ * picker never has to wait on the gateway to show what was already discovered.
+ */
+export interface OpenDesignModelSettings {
+    enabled: boolean;
+    baseURL: string;
+    enabledModelIds: string[] | null;
+    catalogModels: OpenDesignCatalogModel[];
+    /** Models the route must not advertise even though it still knows them. */
+    hiddenModels: string[];
+    /** Per-model context-window override; absent uses the resolved window. */
+    contextWindowOverrides: Record<string, number>;
+    defaultContextWindow: number;
+    defaultMaxTokens: number;
+    maxConcurrentRequests: number;
+    streamIdleTimeoutMs: number;
+}
+export interface OpenDesignPreferenceStore {
+    status(): OpenDesignModelSettings;
+    read(): Promise<OpenDesignModelSettings>;
+    update(patch: Partial<OpenDesignModelSettings>): Promise<OpenDesignModelSettings>;
+}
+export declare function credentialPath(): string;
+export declare function modelSettingsPath(): string;
+/** Validate one stored credential: a device-flow session or a static API key. */
+export declare function parseOpenDesignCredentials(value: unknown): OpenDesignCredentials;
+/** Encrypted credential store for the single-key (pre-pool) configuration. */
+export declare class FileCredentialStore {
+    private readonly filePath;
+    private readonly backend;
+    constructor(filePath?: string, backend?: CredentialStore<OpenDesignCredentials>);
+    path(): string;
+    read(): Promise<OpenDesignCredentials | null>;
+    write(credentials: OpenDesignCredentials): Promise<void>;
+    clear(): Promise<void>;
+}
+/** Parse one whole settings document. */
+export declare function parseOpenDesignModelSettings(value: unknown): OpenDesignModelSettings;
+/** The document a fresh install starts from. */
+export declare function defaultOpenDesignModelSettings(): OpenDesignModelSettings;
+/**
+ * Model and connection settings, bound to a JSON file beside the encrypted
+ * credential store.
+ *
+ * The file is written atomically (temp + rename) so a crash mid-write leaves the
+ * previous document intact rather than a truncated one that reads as "reset all
+ * settings".
+ */
+export declare class OpenDesignModelSettingsStore implements OpenDesignPreferenceStore {
+    private readonly filePath;
+    private cached;
+    private loadPromise;
+    constructor(filePath?: string);
+    path(): string;
+    status(): OpenDesignModelSettings;
+    /** Read the document at activation time, synchronously. */
+    readSync(): OpenDesignModelSettings;
+    read(): Promise<OpenDesignModelSettings>;
+    private load;
+    write(settings: OpenDesignModelSettings): Promise<OpenDesignModelSettings>;
+    update(patch: Partial<OpenDesignModelSettings>): Promise<OpenDesignModelSettings>;
+    /** Record a catalog sync without touching the user's selection. */
+    storeCatalog(models: OpenDesignCatalogModel[]): Promise<OpenDesignModelSettings>;
+    /** Store or clear (null) one model's context-window override. */
+    setContextWindowOverride(model: string, contextWindow: number | null): Promise<OpenDesignModelSettings>;
+}
+export {};
+//# sourceMappingURL=token-store.d.ts.map

package/lib/types/host/opendesign/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../../../src/host/opendesign/token-store.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAcxD;;GAEG;AACH,UAAU,wBAAwB;IAChC,iEAAiE;IACjE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,8DAA8D;IAC9D,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED;;;;;;GAMG;AACH,MAAM,WAAW,2BAA4B,SAAQ,wBAAwB;IAC3E,mFAAmF;IACnF,IAAI,CAAC,EAAE,SAAS,CAAA;IAChB,qEAAqE;IACrE,MAAM,EAAE,MAAM,CAAA;CACf;AAED;;;;;;;;GAQG;AACH,MAAM,WAAW,0BAA2B,SAAQ,wBAAwB;IAC1E,IAAI,EAAE,OAAO,CAAA;IACb,sEAAsE;IACtE,UAAU,EAAE,MAAM,CAAA;IAClB,mEAAmE;IACnE,UAAU,EAAE,MAAM,CAAA;IAClB,0DAA0D;IAC1D,IAAI,CAAC,EAAE;QAAE,EAAE,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAA;CACrE;AAED,MAAM,MAAM,qBAAqB,GAAG,2BAA2B,GAAG,0BAA0B,CAAA;AAE5F,gFAAgF;AAChF,wBAAgB,4BAA4B,CAAC,WAAW,EAAE,qBAAqB,GAAG,WAAW,IAAI,0BAA0B,CAE1H;AAED,kEAAkE;AAClE,wBAAgB,SAAS,CAAC,WAAW,EAAE,qBAAqB,GAAG,MAAM,CAEpE;AAED,oEAAoE;AACpE,wBAAgB,aAAa,CAAC,WAAW,EAAE,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAEpF;AAED;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,WAAW,EAAE,qBAAqB,GAAG,MAAM,CAO9E;AAED,oEAAoE;AACpE,wBAAgB,gBAAgB,CAAC,WAAW,EAAE,qBAAqB,GAAG,MAAM,GAAG,SAAS,CAKvF;AAED,8EAA8E;AAC9E,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAA;IAClB,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CACjB;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;IACf,eAAe,EAAE,MAAM,EAAE,GAAG,IAAI,CAAA;IAChC,aAAa,EAAE,sBAAsB,EAAE,CAAA;IACvC,2EAA2E;IAC3E,YAAY,EAAE,MAAM,EAAE,CAAA;IACtB,0EAA0E;IAC1E,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9C,oBAAoB,EAAE,MAAM,CAAA;IAC5B,gBAAgB,EAAE,MAAM,CAAA;IACxB,qBAAqB,EAAE,MAAM,CAAA;IAC7B,mBAAmB,EAAE,MAAM,CAAA;CAC5B;AAED,MAAM,WAAW,yBAAyB;IACxC,MAAM,IAAI,uBAAuB,CAAA;IACjC,IAAI,IAAI,OAAO,CAAC,uBAAuB,CAAC,CAAA;IACxC,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAAA;CAClF;AAED,wBAAgB,cAAc,IAAI,MAAM,CAEvC;AAED,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAcD,iFAAiF;AACjF,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,qBAAqB,CA+ChF;AAsBD,8EAA8E;AAC9E,qBAAa,mBAAmB;IAE5B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,QAAQ,SAAmB,EAC3B,OAAO,GAAE,eAAe,CAAC,qBAAqB,CAAqC;IAGtG,IAAI,IAAI,MAAM;IAIR,IAAI,IAAI,OAAO,CAAC,qBAAqB,GAAG,IAAI,CAAC;IAI7C,KAAK,CAAC,WAAW,EAAE,qBAAqB,GAAG,OAAO,CAAC,IAAI,CAAC;IAKxD,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC;CAG7B;AAuCD,yCAAyC;AACzC,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAuBpF;AAED,gDAAgD;AAChD,wBAAgB,8BAA8B,IAAI,uBAAuB,CAExE;AAED;;;;;;;GAOG;AACH,qBAAa,4BAA6B,YAAW,yBAAyB;IAIhE,OAAO,CAAC,QAAQ,CAAC,QAAQ;IAHrC,OAAO,CAAC,MAAM,CAAuC;IACrD,OAAO,CAAC,WAAW,CAAgD;gBAEtC,QAAQ,SAAsB;IAE3D,IAAI,IAAI,MAAM;IAId,MAAM,IAAI,uBAAuB;IAIjC,2DAA2D;IAC3D,QAAQ,IAAI,uBAAuB;IAY7B,IAAI,IAAI,OAAO,CAAC,uBAAuB,CAAC;YAShC,IAAI;IAcZ,KAAK,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAS1E,MAAM,CAAC,KAAK,EAAE,OAAO,CAAC,uBAAuB,CAAC,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAevF,mEAAmE;IAC7D,YAAY,CAAC,MAAM,EAAE,sBAAsB,EAAE,GAAG,OAAO,CAAC,uBAAuB,CAAC;IAKtF,iEAAiE;IAC3D,wBAAwB,CAAC,KAAK,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,IAAI,GAAG,OAAO,CAAC,uBAAuB,CAAC;CAO9G"}