@eddyskywalker/dsh-chatgpt-subscription 0.33.0 → 0.35.0

package/lib/types/client/workbuddy/styles.d.ts

@@ -1,15 +0,0 @@
-export declare const STYLE_ID = "dsh-workbuddy-settings-style";
-/**
- * WorkBuddy-only additions to the shared settings design system.
- *
- * The base control styles (`.dsha-page`, `.dsha-group`, `.dsha-models`, the
- * account card, …) come from the stylesheet the sibling routes install, in the
- * same order the client installs them, so this file declares only what stays
- * unique to this card: the mono credential paths and the login-progress line.
- *
- * Everything this tab used to declare locally — the per-model capability line
- * and the account-region headings — is gone: the model pill is name-only like
- * every sibling tab, and the account card is the shared one.
- */
-export declare function installWorkBuddyStyles(): void;
-//# sourceMappingURL=styles.d.ts.map

package/lib/types/client/workbuddy/styles.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"styles.d.ts","sourceRoot":"","sources":["../../../../src/client/workbuddy/styles.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,QAAQ,iCAAiC,CAAA;AAEtD;;;;;;;;;;;GAWG;AACH,wBAAgB,sBAAsB,IAAI,IAAI,CAsB7C"}

package/lib/types/client/workbuddy/useWorkBuddySection.d.ts

@@ -1,149 +0,0 @@
-import type { AccountRotationStrategy } from '../../shared/account-pool-contracts.ts';
-import type { WorkBuddyAccount, WorkBuddyAccountQuota, WorkBuddyAccountSummaryDto, WorkBuddyCheckinSettings, WorkBuddyGuardrailsDto, WorkBuddyModelOption, WorkBuddyOutboundSetting, WorkBuddyReasoningEffort, WorkBuddyWebStatus } from '../../shared/workbuddy-contracts.ts';
-import { type AccountPoolLabels } from '../common/account-pool-labels.ts';
-/** The seats the settings hub hands the card; both optional, so a bare render works. */
-export interface WorkBuddySectionProps {
-    onModelChange?: () => void;
-    loadModelDirectory?: () => void;
-}
-interface ConnectionPayload {
-    connected: boolean;
-    account: WorkBuddyAccount | null;
-    latencyMs: number;
-    model: string;
-    checkedAt: number;
-}
-/** One selectable default reasoning level, with the models that declare it. */
-export interface ReasoningEffortChoice {
-    value: WorkBuddyReasoningEffort;
-    /** Model names that accept this level, in catalog order. */
-    models: string[];
-}
-/**
- * Reasoning levels the default-effort control may offer.
- *
- * The levels come from what this account's models actually declare — never from
- * the shipped enum alone. The setting is one global default applied to whichever
- * model a conversation uses, so the list is their union; each entry carries the
- * models behind it, and a level only some models accept is labelled as such.
- * Order follows {@link WORKBUDDY_REASONING_EFFORTS}, which is the escalating
- * order the upstream ladder uses.
- */
-export declare function reasoningEffortChoices(models: WorkBuddyModelOption[]): ReasoningEffortChoice[];
-/**
- * Whether a saved default is unusable for every model on this account.
- *
- * The adapter drops a level the chosen model does not accept instead of sending
- * it, so a value that no model declares silently does nothing. Reporting it is
- * what keeps that from looking like the setting was applied.
- */
-export declare function unsupportedReasoningEffort(configured: WorkBuddyReasoningEffort | null | undefined, models: WorkBuddyModelOption[]): WorkBuddyReasoningEffort | null;
-/**
- * Everything the card's view consumes, grouped by kind.
- *
- * Returned as one named shape instead of one status blob: a reader can see at a
- * glance what the hook tracks, what it computes from a status answer, and what
- * the view is allowed to ask it to do.
- */
-export interface WorkBuddySectionView {
-    /** Values that change as the card runs. */
-    state: {
-        /** Last status answer; null until the first read lands. */
-        status: WorkBuddyWebStatus | null;
-        /** True until the first status read settles, whatever its outcome. */
-        loading: boolean;
-        /** Id of the action in flight, or null; every disabled control reads it. */
-        busy: string | null;
-        /** The failure the card's error strip shows. */
-        error: string | null;
-        /** Result of the last explicit connection test. */
-        connection: ConnectionPayload | null;
-        /** Line the host reports while a regional sign-in is being polled. */
-        loginProgress: string | null;
-        /** One free-text capacity draft per model, keyed by model id. */
-        contextDrafts: Record<string, string>;
-        /** Model id whose context-window save or restore is in flight. */
-        savingModel: string | null;
-    };
-    /** Facts read straight off the current status answer. */
-    derived: {
-        /** Every account row the shared pool card lists. */
-        poolAccounts: WorkBuddyAccountSummaryDto[];
-        /** Levels this account's models declare, each with the models behind it. */
-        effortChoices: ReasoningEffortChoice[];
-        /** Every catalog model, enabled or not; the effort labels count them. */
-        allModels: WorkBuddyModelOption[];
-        /**
-         * A saved default no current model declares, when there is one.
-         *
-         * The adapter drops a level the chosen model does not accept, so reporting
-         * this is what keeps an inert setting from looking applied.
-         */
-        strayEffort: WorkBuddyReasoningEffort | null;
-        /** Models the context-window editor offers: the enabled ones only. */
-        contextModels: WorkBuddyModelOption[];
-        /** How many stored overrides exist, whether or not a row still shows them. */
-        overrideCount: number;
-        /** The displayed account's quota snapshot, when the host has one. */
-        quota: WorkBuddyAccountQuota | null | undefined;
-        /** Whether a credential is signed in; every authenticated control reads it. */
-        authenticated: boolean;
-        /**
-         * A failed status read with no answer to fall back on.
-         *
-         * A failed read leaves `status` null, which must NOT be rendered as "no
-         * credential found": that claims a credential problem when the real cause is
-         * an unreachable route.
-         */
-        unreachable: boolean;
-        /**
-         * The line's dictionary, handed to the shared pool card as one object.
-         *
-         * The hook already owns it for its own sentences, so the view takes the same
-         * object from here rather than reaching for a second import.
-         */
-        poolLabels: AccountPoolLabels;
-    };
-    /** Everything the view can trigger. */
-    actions: {
-        /** Start a regional sign-in; its flow is polled until it settles. */
-        login(region: 'cn' | 'intl'): Promise<void>;
-        /** Re-read the credentials the host can find on this machine. */
-        rescan(): Promise<void>;
-        /**
-         * One account action, whether it is a pool action (`set-primary`, `hide`,
-         * `restore`, `relogin`, `clear-cooldown`) or a credential action (`delete`).
-         * The host route dispatches on `action`.
-         */
-        accountAction(action: string, accountId: string): Promise<void>;
-        /** Delete one plugin-owned credential, after the user confirms. */
-        deleteAccount(accountId: string): Promise<void>;
-        setStrategy(strategy: AccountRotationStrategy): Promise<void>;
-        testConnection(): Promise<void>;
-        refreshQuota(): Promise<void>;
-        /** Run the daily check-in for every eligible account, now. */
-        checkinNow(): Promise<void>;
-        /** Patch the check-in preference; omitted fields keep their stored value. */
-        updateCheckin(checkin: Partial<WorkBuddyCheckinSettings>): Promise<void>;
-        toggleModel(modelId: string, enabled: boolean): Promise<void>;
-        setAllModels(enabled: boolean): Promise<void>;
-        updateEffort(effort: WorkBuddyReasoningEffort | null): Promise<void>;
-        refreshCatalog(): Promise<void>;
-        saveContextWindow(modelId: string): Promise<void>;
-        resetContextWindow(modelId: string): Promise<void>;
-        resetAllContextWindows(): Promise<void>;
-        /** Edit one capacity draft mid-typing; the editor never parses it. */
-        updateContextDraft(modelId: string, draft: string): void;
-        /** Switch which client identity chat requests present. */
-        updateOutboundIdentity(setting: WorkBuddyOutboundSetting): Promise<void>;
-        /** Arm, change or clear the local quota guardrails. */
-        updateGuardrails(guardrails: Partial<WorkBuddyGuardrailsDto>): Promise<void>;
-        /** Store the desktop client's at-rest key so sealed credentials can be read. */
-        saveAtRestKey(key: string): Promise<void>;
-        /** Forget that key; sealed accounts become unreadable again. */
-        clearAtRestKey(): Promise<void>;
-    };
-}
-export declare function useWorkBuddySection({ onModelChange, loadModelDirectory }: WorkBuddySectionProps): WorkBuddySectionView;
-export {};
-//# sourceMappingURL=useWorkBuddySection.d.ts.map

package/lib/types/client/workbuddy/useWorkBuddySection.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"useWorkBuddySection.d.ts","sourceRoot":"","sources":["../../../../src/client/workbuddy/useWorkBuddySection.ts"],"names":[],"mappings":"AAUA,OAAO,KAAK,EAAE,uBAAuB,EAAE,MAAM,wCAAwC,CAAA;AACrF,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,0BAA0B,EAC1B,wBAAwB,EACxB,sBAAsB,EACtB,oBAAoB,EACpB,wBAAwB,EACxB,wBAAwB,EACxB,kBAAkB,EACnB,MAAM,qCAAqC,CAAA;AAE5C,OAAO,EAAiB,KAAK,iBAAiB,EAAE,MAAM,kCAAkC,CAAA;AASxF,wFAAwF;AACxF,MAAM,WAAW,qBAAqB;IACpC,aAAa,CAAC,EAAE,MAAM,IAAI,CAAA;IAC1B,kBAAkB,CAAC,EAAE,MAAM,IAAI,CAAA;CAChC;AA+BD,UAAU,iBAAiB;IACzB,SAAS,EAAE,OAAO,CAAA;IAClB,OAAO,EAAE,gBAAgB,GAAG,IAAI,CAAA;IAChC,SAAS,EAAE,MAAM,CAAA;IACjB,KAAK,EAAE,MAAM,CAAA;IACb,SAAS,EAAE,MAAM,CAAA;CAClB;AAYD,+EAA+E;AAC/E,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,wBAAwB,CAAA;IAC/B,4DAA4D;IAC5D,MAAM,EAAE,MAAM,EAAE,CAAA;CACjB;AAED;;;;;;;;;GASG;AACH,wBAAgB,sBAAsB,CAAC,MAAM,EAAE,oBAAoB,EAAE,GAAG,qBAAqB,EAAE,CAY9F;AAED;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CACxC,UAAU,EAAE,wBAAwB,GAAG,IAAI,GAAG,SAAS,EACvD,MAAM,EAAE,oBAAoB,EAAE,GAC7B,wBAAwB,GAAG,IAAI,CAIjC;AAYD;;;;;;GAMG;AACH,MAAM,WAAW,oBAAoB;IACnC,2CAA2C;IAC3C,KAAK,EAAE;QACL,2DAA2D;QAC3D,MAAM,EAAE,kBAAkB,GAAG,IAAI,CAAA;QACjC,sEAAsE;QACtE,OAAO,EAAE,OAAO,CAAA;QAChB,4EAA4E;QAC5E,IAAI,EAAE,MAAM,GAAG,IAAI,CAAA;QACnB,gDAAgD;QAChD,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;QACpB,mDAAmD;QACnD,UAAU,EAAE,iBAAiB,GAAG,IAAI,CAAA;QACpC,sEAAsE;QACtE,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;QAC5B,iEAAiE;QACjE,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QACrC,kEAAkE;QAClE,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;KAC3B,CAAA;IACD,yDAAyD;IACzD,OAAO,EAAE;QACP,oDAAoD;QACpD,YAAY,EAAE,0BAA0B,EAAE,CAAA;QAC1C,4EAA4E;QAC5E,aAAa,EAAE,qBAAqB,EAAE,CAAA;QACtC,yEAAyE;QACzE,SAAS,EAAE,oBAAoB,EAAE,CAAA;QACjC;;;;;WAKG;QACH,WAAW,EAAE,wBAAwB,GAAG,IAAI,CAAA;QAC5C,sEAAsE;QACtE,aAAa,EAAE,oBAAoB,EAAE,CAAA;QACrC,8EAA8E;QAC9E,aAAa,EAAE,MAAM,CAAA;QACrB,qEAAqE;QACrE,KAAK,EAAE,qBAAqB,GAAG,IAAI,GAAG,SAAS,CAAA;QAC/C,+EAA+E;QAC/E,aAAa,EAAE,OAAO,CAAA;QACtB;;;;;;WAMG;QACH,WAAW,EAAE,OAAO,CAAA;QACpB;;;;;WAKG;QACH,UAAU,EAAE,iBAAiB,CAAA;KAC9B,CAAA;IACD,uCAAuC;IACvC,OAAO,EAAE;QACP,qEAAqE;QACrE,KAAK,CAAC,MAAM,EAAE,IAAI,GAAG,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC3C,iEAAiE;QACjE,MAAM,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QACvB;;;;WAIG;QACH,aAAa,CAAC,MAAM,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/D,mEAAmE;QACnE,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/C,WAAW,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7D,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/B,YAAY,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7B,8DAA8D;QAC9D,UAAU,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QAC3B,6EAA6E;QAC7E,aAAa,CAAC,OAAO,EAAE,OAAO,CAAC,wBAAwB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACxE,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7D,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC7C,YAAY,CAAC,MAAM,EAAE,wBAAwB,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACpE,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QAC/B,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACjD,kBAAkB,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAClD,sBAAsB,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;QACvC,sEAAsE;QACtE,kBAAkB,CAAC,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAAA;QACxD,0DAA0D;QAC1D,sBAAsB,CAAC,OAAO,EAAE,wBAAwB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACxE,uDAAuD;QACvD,gBAAgB,CAAC,UAAU,EAAE,OAAO,CAAC,sBAAsB,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QAC5E,gFAAgF;QAChF,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;QACzC,gEAAgE;QAChE,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAAA;KAChC,CAAA;CACF;AAED,wBAAgB,mBAAmB,CAAC,EAAE,aAAa,EAAE,kBAAkB,EAAE,EAAE,qBAAqB,GAAG,oBAAoB,CA8gBtH"}

package/lib/types/host/workbuddy/account-pool.d.ts

@@ -1,235 +0,0 @@
-/**
- * WorkBuddy's account pool.
- *
- * This line is the one that adopts accounts it does not own: alongside the
- * accounts a user signs in through this plugin, it reads the CodeBuddy desktop
- * client's own `*.info` credentials so an existing IDE sign-in needs no second
- * login. Both kinds take part in scheduling through the shared
- * {@link AccountPoolCore}, and the difference is enforced here:
- *
- * - **managed** accounts were signed in through this plugin. They live in the
- *   pool's encrypted storage and may be deleted.
- * - **desktop** accounts belong to the IDE. Their credential is re-read from the
- *   IDE's file on every pick, because the IDE rotates it on its own schedule and
- *   a cached copy would go stale; they are never deleted, only hidden.
- */
-import { AccountPoolCore, type PoolAccountShape, type PoolData } from '../common/account-pool.ts';
-import type { CredentialStore } from '../token-store.ts';
-import { FileCredentialStore, type WorkBuddyCredentials } from './token-store.ts';
-import type { WorkBuddyAccountQuota, WorkBuddyAccountSummaryDto, WorkBuddyRegion } from '../../shared/workbuddy-contracts.ts';
-import type { PoolAccountQuotaDto } from '../../shared/account-pool-contracts.ts';
-/** One pooled WorkBuddy account: the credential plus the facts the card renders. */
-export interface WorkBuddyPoolAccount extends PoolAccountShape<WorkBuddyCredentials> {
-    region: WorkBuddyRegion;
-    nickname?: string;
-    uin?: string;
-    /** Which store owns the credential; only managed accounts may be deleted. */
-    source: 'desktop' | 'managed';
-    /** IDE file a desktop account came from; absent for managed accounts. */
-    sourceFile?: string;
-}
-/** Encrypted pool file this line owns. */
-export declare function workBuddyPoolPath(): string;
-/**
- * Validate and normalize one whole pool document.
- *
- * A record whose credential is unusable is dropped rather than repaired: the
- * account can always be adopted again from its file or by signing in again, and
- * keeping a credential-less row would offer the user an account nothing can use.
- */
-export declare function parseWorkBuddyPoolData(value: unknown): PoolData<WorkBuddyPoolAccount>;
-/**
- * One cached snapshot as the shared account card renders it.
- *
- * Only what the DTO states is published: every meter that measured a share
- * becomes a window, and a meter that measured none is dropped rather than drawn
- * at 0 — which would claim an unspent allowance no reading supports.
- *
- * Exported for the pool's regression tests; the card only reaches it through
- * the summary hook.
- */
-export declare function workBuddyPoolQuota(snapshot: WorkBuddyAccountQuota): PoolAccountQuotaDto | undefined;
-export interface WorkBuddyAccountPoolOptions {
-    /** Credential store the desktop scan reads through; the pool owns scheduling. */
-    store?: FileCredentialStore;
-    /** Test seam; production builds the platform backend from the pool path. */
-    backend?: CredentialStore<PoolData<WorkBuddyPoolAccount>>;
-    maxAccounts?: number;
-    /**
-     * The settings selection: the account the user pinned and the ones hidden.
-     *
-     * Read on every pick rather than captured once, because both change from the
-     * settings card while the adapter is serving requests.
-     */
-    selection?: () => {
-        selectedAccountId: string | null;
-        hiddenAccountIds: readonly string[];
-    };
-}
-/**
- * WorkBuddy's account pool.
- *
- * Desktop accounts are adopted into the pool so they can be scheduled and
- * cooled down like any other, but they stay owned by the IDE: the pool refreshes
- * their credential from the IDE's own file on every pick, and deletion is
- * refused for them.
- */
-export declare class WorkBuddyAccountPool extends AccountPoolCore<WorkBuddyCredentials, WorkBuddyPoolAccount, WorkBuddyAccountSummaryDto> {
-    private readonly store;
-    private readonly options_selection;
-    /**
-     * Older settings key → the id the account has now.
-     *
-     * A pin or a hide written before the identity fix names its account by the
-     * old name-derived key. Kept in step by {@link read}, which every routing
-     * decision goes through, so the mapping is never stale when it is consulted.
-     */
-    private readonly legacyIds;
-    /**
-     * Per-model parks, in memory only: account id → model → the instant it lifts.
-     *
-     * The subscription meters an account × MODEL over a 24h window (429 `code
-     * 6004` names when it lifts), so cooling the whole ACCOUNT for one exhausted
-     * model throws away every other model that account can still serve. Process
-     * local on purpose, like the sibling gateway's model cooldowns: the window is
-     * short, and a restart re-measures it with the first request rather than
-     * trusting a stale timestamp.
-     */
-    private readonly modelCooldowns;
-    constructor(options?: WorkBuddyAccountPoolOptions);
-    /**
-     * Load the pool, refreshing the legacy-key index on the way.
-     *
-     * Every routing decision and mutation goes through this method before it
-     * consults the settings selection, so building the index here is what keeps
-     * a pin written before the identity fix resolvable when
-     * {@link resolveSelectionId} is asked for it.
-     */
-    protected loadPoolData(): Promise<PoolData<WorkBuddyPoolAccount>>;
-    /** Map a settings key from before the identity fix onto the account's real id. */
-    private resolveSelectionId;
-    /**
-     * Adopt any desktop credential the pool does not know yet.
-     *
-     * The IDE's directory is the source of truth for its own accounts, so a
-     * credential that appears there joins the pool. Nothing is ever removed: a
-     * file that disappears (the IDE signed out, a profile was moved) leaves the
-     * account in place, where the user can hide or delete the managed ones.
-     */
-    syncDesktopAccounts(): Promise<WorkBuddyAccountSummaryDto[]>;
-    /**
-     * A stale `authStatus` is cleared once the credential in force has moved on.
-     *
-     * The marker records that ONE token was refused; it does not record that the
-     * sign-in is gone. This line can still produce it from a token-endpoint
-     * refusal, and the copy that refusal was about can be replaced afterwards by
-     * whoever owns it — the IDE rotates a desktop account's token on its own
-     * schedule, and the daily check-in renews a managed one and writes it back to
-     * this plugin's store. Nothing else in the system ever revisits an
-     * `authStatus`, so without this a row stays out of rotation for good and the
-     * card keeps saying "需要重新登录" for an account that is signed in.
-     *
-     * The verdict is re-checked against what the store holds NOW: a row whose
-     * account has a DIFFERENT, unexpired token is routable again and adopts it,
-     * while a row still holding the refused token keeps its marker — that one
-     * really does need a sign-in.
-     */
-    private healStaleAuthFailures;
-    /** Account summaries, with a marker the credentials have outlived cleared. */
-    listAccounts(): Promise<WorkBuddyAccountSummaryDto[]>;
-    /**
-     * Pick an account, healing a stale marker first.
-     *
-     * The healing belongs on the request path, not only on the card: an account
-     * marked expired is excluded by the core's eligibility rule, so until the
-     * marker is gone the next request is answered with "全部 N 个账号都需要重新登录"
-     * for a credential the store has already replaced.
-     */
-    getEffectiveAccount(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch, forceRefresh?: boolean): Promise<{
-        account: WorkBuddyPoolAccount;
-        credentials: WorkBuddyCredentials;
-    }>;
-    /**
-     * Pick the account for the next request.
-     *
-     * A desktop account's credential is re-read from the IDE's file first: the IDE
-     * refreshes its own token, so the copy the pool adopted can be older than what
-     * is on disk.
-     */
-    getEffectiveCredential(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch, model?: string): Promise<{
-        account: WorkBuddyPoolAccount;
-        credentials: WorkBuddyCredentials;
-    }>;
-    /**
-     * Park ONE model on one account; every other model keeps serving.
-     *
-     * Returns the instant the park lifts, or undefined for a non-positive
-     * duration (which clears any existing park rather than extending it).
-     */
-    markModelCooldown(accountId: string, model: string, durationMs: number): number | undefined;
-    /** When this account's park on this model lifts, or undefined when it may serve. */
-    modelCooldownUntil(accountId: string, model: string, now?: number): number | undefined;
-    /**
-     * The models this account is parked on right now, with the instant each park
-     * lifts.
-     *
-     * Only LIVE parks are reported: a window that has passed is dropped here, so
-     * the card never shows a model that may already serve. The lift instant is
-     * the one the upstream named, stored verbatim by
-     * {@link markModelCooldown}; it is never recomputed from a duration that has
-     * since drifted, because a re-derived instant would drift with it.
-     */
-    private liveModelCooldowns;
-    /**
-     * Clear one account's cooldown AND the models it is parked on.
-     *
-     * The card's "reset cooldown" button promises the account is usable again. A
-     * model park is a cooldown too — the account stays eligible, but it still
-     * refuses the model the request wants — so leaving the park behind would
-     * report a reset that did not happen, and the park would outlive the only
-     * control the user has over it.
-     *
-     * The base write comes first: it is the half that can fail, and a failed
-     * write must leave the account's state as it was rather than half-cleared.
-     */
-    clearCooldown(accountId: string): Promise<void>;
-    /** Accounts currently parked on one model, with lifted entries pruned on the way. */
-    private parkedAccountIds;
-    /**
-     * Whether another account besides `triedAccountIds` can serve THIS model.
-     *
-     * The plain {@link hasAnotherAvailableAccount} answers for any model, so a
-     * rotation loop that consulted it would keep trying while every remaining
-     * account is parked on the model it is asking for — turning one exhausted
-     * window into a burst of refused requests.
-     */
-    hasAnotherAvailableAccountFor(triedAccountIds: ReadonlySet<string>, model: string): Promise<boolean>;
-    /**
-     * Whether an account may serve a request.
-     *
-     * A hidden account keeps its place, its alias and its history, but the user
-     * has taken it out of this plugin's rotation, so it is not eligible.
-     */
-    protected isEligible(account: WorkBuddyPoolAccount, now: number, triedAccountIds?: ReadonlySet<string>): boolean;
-    private selection;
-    /**
-     * Add or re-authorize one account, settling its identity first.
-     *
-     * A completed browser sign-in states the display name but not always the uid,
-     * while the IDE's own file for the same account states the uid. Passing the
-     * raw response through would key the login under the name and the file under
-     * the uid, so the pool would hold the same account twice — the duplicate this
-     * fix exists to remove. Resolving from the credential's own token before the
-     * dedupe key is computed is what makes the two paths agree.
-     */
-    addAccount(credentials: WorkBuddyCredentials, alias?: string): Promise<WorkBuddyPoolAccount>;
-    /**
-     * Remove one account inside a transaction.
-     *
-     * A desktop account is refused: the plugin does not own that credential file,
-     * so removing it from the pool would strand the IDE's session while telling
-     * the user their account was deleted. Hiding is the supported action there.
-     */
-    protected deleteAccountFromPool(data: PoolData<WorkBuddyPoolAccount>, accountId: string): void;
-}
-//# sourceMappingURL=account-pool.d.ts.map

package/lib/types/host/workbuddy/account-pool.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/account-pool.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAKH,OAAO,EACL,eAAe,EAGf,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EACL,mBAAmB,EAInB,KAAK,oBAAoB,EAC1B,MAAM,kBAAkB,CAAA;AAKzB,OAAO,KAAK,EACV,qBAAqB,EACrB,0BAA0B,EAE1B,eAAe,EAChB,MAAM,qCAAqC,CAAA;AAC5C,OAAO,KAAK,EAA+B,mBAAmB,EAAE,MAAM,wCAAwC,CAAA;AAE9G,oFAAoF;AACpF,MAAM,WAAW,oBAAqB,SAAQ,gBAAgB,CAAC,oBAAoB,CAAC;IAClF,MAAM,EAAE,eAAe,CAAA;IACvB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,6EAA6E;IAC7E,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;IAC7B,yEAAyE;IACzE,UAAU,CAAC,EAAE,MAAM,CAAA;CACpB;AAED,0CAA0C;AAC1C,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AASD;;;;;;GAMG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,oBAAoB,CAAC,CA8FrF;AAkED;;;;;;;;;GASG;AACH,wBAAgB,kBAAkB,CAAC,QAAQ,EAAE,qBAAqB,GAAG,mBAAmB,GAAG,SAAS,CAsBnG;AAgBD,MAAM,WAAW,2BAA2B;IAC1C,iFAAiF;IACjF,KAAK,CAAC,EAAE,mBAAmB,CAAA;IAC3B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC,CAAA;IACzD,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB;;;;;OAKG;IACH,SAAS,CAAC,EAAE,MAAM;QAAE,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;KAAE,CAAA;CAC5F;AAED;;;;;;;GAOG;AACH,qBAAa,oBAAqB,SAAQ,eAAe,CACvD,oBAAoB,EACpB,oBAAoB,EACpB,0BAA0B,CAC3B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;IAC3C,OAAO,CAAC,QAAQ,CAAC,iBAAiB,CAA0C;IAC5E;;;;;;OAMG;IACH,OAAO,CAAC,QAAQ,CAAC,SAAS,CAA4B;IACtD;;;;;;;;;OASG;IACH,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAyC;gBAE5D,OAAO,GAAE,2BAAgC;IAwFrD;;;;;;;OAOG;cACsB,YAAY,IAAI,OAAO,CAAC,QAAQ,CAAC,oBAAoB,CAAC,CAAC;IAWhF,kFAAkF;IAClF,OAAO,CAAC,kBAAkB;IAK1B;;;;;;;OAOG;IACG,mBAAmB,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAmClE;;;;;;;;;;;;;;;;OAgBG;YACW,qBAAqB;IA4BnC,8EAA8E;IAC/D,YAAY,IAAI,OAAO,CAAC,0BAA0B,EAAE,CAAC;IAOpE;;;;;;;OAOG;IACY,mBAAmB,CAChC,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,EAC7B,YAAY,UAAQ,GACnB,OAAO,CAAC;QAAE,OAAO,EAAE,oBAAoB,CAAC;QAAC,WAAW,EAAE,oBAAoB,CAAA;KAAE,CAAC;IAQhF;;;;;;OAMG;IACG,sBAAsB,CAC1B,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,EAC7B,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC;QAAE,OAAO,EAAE,oBAAoB,CAAC;QAAC,WAAW,EAAE,oBAAoB,CAAA;KAAE,CAAC;IAgChF;;;;;OAKG;IACH,iBAAiB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,GAAG,MAAM,GAAG,SAAS;IAY3F,oFAAoF;IACpF,kBAAkB,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,MAAM,GAAG,SAAS;IAK1F;;;;;;;;;OASG;IACH,OAAO,CAAC,kBAAkB;IAc1B;;;;;;;;;;;OAWG;IACY,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAK9D,qFAAqF;IACrF,OAAO,CAAC,gBAAgB;IAWxB;;;;;;;OAOG;IACG,6BAA6B,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAM1G;;;;;OAKG;cACgB,UAAU,CAC3B,OAAO,EAAE,oBAAoB,EAC7B,GAAG,EAAE,MAAM,EACX,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GACpC,OAAO;IAUV,OAAO,CAAC,SAAS;IAIjB;;;;;;;;;OASG;IACY,UAAU,CAAC,WAAW,EAAE,oBAAoB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAI3G;;;;;;OAMG;cACgB,qBAAqB,CAAC,IAAI,EAAE,QAAQ,CAAC,oBAAoB,CAAC,EAAE,SAAS,EAAE,MAAM,GAAG,IAAI;CAMxG"}

package/lib/types/host/workbuddy/adapter.d.ts

@@ -1,129 +0,0 @@
-import { LlmAdapter, LlmError, ReasoningEffortId, type GenerateOptions, type LlmModelInfo, type LlmProviderInfo, type LlmResolvedModelInfo, type PreparedAdapterCall, type ResolvedRetryPolicy, type StreamChunk } from '@deepseek-ai/dsh-llm';
-import { PROVIDER_ID, PROVIDER_NAME } from './types.ts';
-import { FileCredentialStore, FileModelSettingsStore, type WorkBuddyPreferenceStore } from './token-store.ts';
-import { type WorkBuddyModelEntry } from './model-catalog.ts';
-import { type AttachmentImageReader } from './mapper.ts';
-import type { WorkBuddyCredentials } from './token-store.ts';
-import type { WorkBuddyAccountPool } from './account-pool.ts';
-import { type WorkBuddyUsageLedger } from './guardrails.ts';
-/**
- * Effort this route materializes when the caller names none.
- *
- * Preference order: the user's configured level when the model accepts it,
- * otherwise the level the gateway's own catalog declares for that model (the
- * same default the official CLI applies), otherwise nothing — which leaves the
- * provider's own default in charge. A configured level the model does not
- * accept is ignored rather than sent, since the endpoint rejects an unsupported
- * level with `code 11150`.
- */
-export declare function resolveDefaultReasoningEffort(efforts: readonly string[], configuredEffort?: string | null, modelDefaultEffort?: string | null): ReasoningEffortId | undefined;
-/** Cooldown a 429 imposes when the service names no reset instant. */
-export declare const POOL_COOLDOWN_MS: number;
-export interface WorkBuddyAdapterOptions {
-    /**
-     * Per-account daily token counters behind the local guardrails.
-     *
-     * Absent means the guardrails cannot be evaluated, so a deployment without it
-     * never refuses a request for a reason nothing is counting.
-     */
-    usageLedger?: WorkBuddyUsageLedger;
-    fetchFn?: typeof fetch;
-    attachments?: AttachmentImageReader;
-    /** Live catalog loader seam; defaults to the gateway `/v3/config` call. */
-    loadCatalog?: (credentials: WorkBuddyCredentials) => Promise<WorkBuddyModelEntry[]>;
-    /**
-     * Multi-account pool this adapter rotates through.
-     *
-     * Absent leaves the line on its single-credential path, which is what the
-     * headless tests and any caller that predates the pool use.
-     */
-    accountPool?: WorkBuddyAccountPool;
-}
-export declare class WorkBuddyAdapter extends LlmAdapter {
-    private readonly store;
-    private readonly modelSettings;
-    private readonly preferences?;
-    private readonly options;
-    /** Null keeps the pre-pool single-credential path. */
-    private readonly accountPool;
-    constructor(store?: FileCredentialStore, modelSettings?: FileModelSettingsStore, preferences?: WorkBuddyPreferenceStore | undefined, options?: WorkBuddyAdapterOptions);
-    providerInfo(provider: string): LlmProviderInfo;
-    providerRetryPolicy(): ResolvedRetryPolicy;
-    imageRequestPricing(): undefined;
-    private settings;
-    private credentials;
-    /**
-     * Catalog for the picker: the live gateway listing when reachable, the
-     * shipped table otherwise.
-     *
-     * The gateway is the authority on capabilities, so its answer replaces the
-     * fallback rather than merging with it — a model whose context window changed
-     * upstream must not keep a stale local value.
-     */
-    private catalog;
-    /**
-     * Models the picker may offer.
-     *
-     * The catalog is filtered by the account's own region: asking a region for a
-     * model it does not serve answers 400 `code 11102`, so offering one would
-     * hand the user a model that cannot work.
-     */
-    listModels(provider?: string): Promise<readonly LlmModelInfo[]>;
-    resolveModel(provider: string, modelId: string, signal?: AbortSignal): Promise<LlmResolvedModelInfo>;
-    prepareCall(provider: string, model: string, signal?: AbortSignal): Promise<PreparedAdapterCall>;
-    stream(options: GenerateOptions): AsyncIterable<StreamChunk>;
-    /**
-     * Effort this request should carry, or `undefined` to send none.
-     *
-     * Order: the caller's explicit choice, then the user's configured level, then
-     * the level the gateway catalog declares for this model. The last step
-     * matters because the endpoint returns an **empty `reasoning_content`** when
-     * no `reasoning_effort` is present, even for a reasoning-only model: measured
-     * on `deepseek-v4.1-flash`, the same prompt yields 0 reasoning characters
-     * with no field and 130-215 with one. Omitting it therefore silently drops
-     * the model's thinking instead of letting the provider pick, so the catalog's
-     * own default (which is what the official CLI sends) is materialized here.
-     *
-     * A candidate the model does not accept is discarded rather than sent, since
-     * the endpoint rejects an unsupported level with `code 11150`.
-     */
-    /**
-     * Accounts the LOCAL guardrails refuse for this model right now.
-     *
-     * Reads only numbers this plugin already owns — the billing snapshot's
-     * remaining credits and this line's own token counters — so it never becomes a
-     * second, disagreeing source of truth about the upstream allowance.
-     */
-    private guardrailBlockedAccounts;
-    private effortFor;
-    private requestStream;
-}
-/**
- * Map one failed HTTP response onto a DSH failure.
- *
- * The subscription reports its own conditions inside a JSON `code` while the
- * status line stays generic, so the body is read for the specific cases the
- * status alone cannot express — notably the quota signal, whose message carries
- * the instant the allowance resets.
- */
-export declare function classifyFailure(status: number, detail: string, headers?: Headers): LlmError;
-/**
- * The reset instant a quota refusal names, as a delay from now.
- *
- * A 24h allowance that is exhausted answers 429 / `code 6004` with the wall
- * clock it lifts — but only in the MESSAGE, never in a header, and in two
- * realm-specific wordings (measured: intl "… resets at 2026-09-20 10:50:48
- * UTC+8", cn "… 将在 2026-10-09 14:44:59 UTC+8 重置"). Reading the status alone
- * therefore loses the only fact that says how long the account is out, and the
- * pool parks a 24-hour limit for five minutes before trying it again.
- *
- * Deliberately tolerant, in the same direction as their gateway: an unparseable
- * body yields `undefined` (callers keep their default cooldown) rather than an
- * error, because this runs on a failure path. An absent `UTC±h` marker means
- * UTC, which is how the sibling implementation reads it too.
- */
-export declare function readRateLimitReset(detail: string, now?: number): number | undefined;
-/** Read the subscription's own numeric error code out of a response body. */
-export declare function readErrorCode(detail: string): number | null;
-export { PROVIDER_ID, PROVIDER_NAME };
-//# sourceMappingURL=adapter.d.ts.map

package/lib/types/host/workbuddy/adapter.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/adapter.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,UAAU,EACV,QAAQ,EACR,iBAAiB,EAEjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAE7B,OAAO,EAGL,WAAW,EACX,aAAa,EAGd,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,KAAK,wBAAwB,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAQL,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAA;AAG3B,OAAO,EAQL,KAAK,qBAAqB,EAC3B,MAAM,aAAa,CAAA;AAIpB,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AAC5D,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAE7D,OAAO,EAGL,KAAK,oBAAoB,EAC1B,MAAM,iBAAiB,CAAA;AAkBxB;;;;;;;;;GASG;AACH,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,EAChC,kBAAkB,CAAC,EAAE,MAAM,GAAG,IAAI,GACjC,iBAAiB,GAAG,SAAS,CAQ/B;AAED,sEAAsE;AACtE,eAAO,MAAM,gBAAgB,QAAgB,CAAA;AAE7C,MAAM,WAAW,uBAAuB;IACtC;;;;;OAKG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAA;IAClC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,2EAA2E;IAC3E,WAAW,CAAC,EAAE,CAAC,WAAW,EAAE,oBAAoB,KAAK,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAAA;IACnF;;;;;OAKG;IACH,WAAW,CAAC,EAAE,oBAAoB,CAAA;CACnC;AAED,qBAAa,gBAAiB,SAAQ,UAAU;IAK5C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAP1B,sDAAsD;IACtD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA6B;gBAGtC,KAAK,sBAA4B,EACjC,aAAa,yBAA+B,EAC5C,WAAW,CAAC,EAAE,wBAAwB,YAAA,EACtC,OAAO,GAAE,uBAA4B;IAMxD,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC,OAAO,CAAC,QAAQ;YAIF,WAAW;IAQzB;;;;;;;OAOG;YACW,OAAO;IAOrB;;;;;;OAMG;IACG,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IA4B/D,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IAsCpG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAO/F,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;IAenE;;;;;;;;;;;;;;OAcG;IACH;;;;;;OAMG;YACW,wBAAwB;YAuBxB,SAAS;YAeR,aAAa;CAwQ7B;AAED;;;;;;;GAOG;AACH,wBAAgB,eAAe,CAC7B,MAAM,EAAE,MAAM,EACd,MAAM,EAAE,MAAM,EACd,OAAO,CAAC,EAAE,OAAO,GAChB,QAAQ,CAiHV;AAkED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,kBAAkB,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,SAAa,GAAG,MAAM,GAAG,SAAS,CA0BvF;AAED,6EAA6E;AAC7E,wBAAgB,aAAa,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAK3D;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAA"}

package/lib/types/host/workbuddy/atrest.d.ts

@@ -1,98 +0,0 @@
-/**
- * `$wbEncrypted` at-rest credential envelope.
- *
- * The CodeBuddy/WorkBuddy desktop client stopped writing plaintext tokens on
- * 2026-09-24: `auth.accessToken` / `auth.refreshToken` became
- * `{"$wbEncrypted": 1, "envelope": base64}` (the domestic build also seals
- * `nickname` / `phoneNumber`). Reading such a file the way this plugin used to
- * yields the envelope TEXT as the bearer token, so every request answers 401 —
- * the adoption path has to decrypt before it can use the credential.
- *
- * The scheme below is transcribed from the client's `packages/at-rest-crypto`
- * as reimplemented by workbuddy2api-hub (`wb_atrest.py`, MIT); the framing
- * constants are the part that must match byte for byte:
- *
- *     key      = sha256(atRestSecretKey as an ASCII string)   # the protector key
- *     keyId    = sha256(key).hex[0..16]                       # `protectorKeyId`
- *     AAD      = "WB-AAD\0" | 0x01 | LP(fileMagic) | LP("sym-v1")
- *                | u32(suite) | LP(keyId) | framingCode | 0x00 | 0x00
- *     envelope = base64(JSON{suite, keyId, nonce, authTag, ciphertext})  # AES-256-GCM
- *     framing  : the keyblob's wrapped master key is `WBEF1`/1, a sealed `.info`
- *                field is `WBEV1`/2 — the SAME protector key opens both.
- *
- * Key material never leaves the process and is never logged: the user pastes it
- * once, it is stored through the platform credential store (DPAPI / Keychain /
- * Secret Service), and every read re-validates it against the client's own
- * keyblob when that file exists.
- */
-/** Field name the client uses to mark a sealed value. */
-export declare const ENVELOPE_KEY = "$wbEncrypted";
-/** Framing kinds and the code each carries in the AAD. */
-declare const FRAMING: {
-    readonly file: {
-        readonly magic: "WBEF1";
-        readonly code: 1;
-    };
-    readonly field: {
-        readonly magic: "WBEV1";
-        readonly code: 2;
-    };
-};
-type Framing = keyof typeof FRAMING;
-/** Every failure the at-rest path can report to a user. */
-export declare class AtRestError extends Error {
-    constructor(message: string);
-}
-/** The GCM associated data, byte-identical to the client's. */
-export declare function associatedData(keyId: string, suite: number, framing: Framing): Buffer;
-/** `protectorKeyId` / `envelope.keyId`: the first 16 hex characters of sha256(key). */
-export declare function deriveKeyId(key: Buffer): string;
-/**
- * Whether a value is a sealed envelope rather than plaintext.
- *
- * Older clients sometimes stored the whole envelope as a JSON STRING in the
- * field, so that shape is recognised too.
- */
-export declare function isSealedValue(value: unknown): boolean;
-interface SealedEnvelope {
-    suite: number;
-    keyId: string;
-    nonce: Buffer;
-    authTag: Buffer;
-    ciphertext: Buffer;
-}
-/** Split one envelope into its GCM parts. */
-export declare function parseEnvelope(value: unknown): SealedEnvelope;
-/** Open one envelope with the protector key, returning the plaintext bytes. */
-export declare function openEnvelope(key: Buffer, value: unknown, framing: Framing): Buffer;
-/** Decrypt a field that may be sealed, leaving plaintext values untouched. */
-export declare function openSealedField(key: Buffer, value: unknown): string;
-/**
- * Normalise a pasted secret into the 32-byte protector key.
- *
- * Two spellings are accepted, neither requiring the user to compute anything:
- * a 64-character hex protector key (used as-is), or the 44-character base64
- * `atRestSecretKey` the client carries in its payload — that one is hashed as
- * the STRING, which is what produces the protector key.
- */
-export declare function parseKeyText(text: string): Buffer;
-/** Path of the client's keyblob, or null when the client is not installed here. */
-export declare function keyBlobPath(): string | null;
-/**
- * Validate a protector key against the client's own keyblob.
- *
- * This is the check that turns a typo into an error instead of a mystery: the
- * key must match the `static-v1` slot's `protectorKeyId` and must unwrap a
- * 32-byte master whose derived id matches the blob's own `keyId`. Returns
- * `false` when there is no keyblob to check against (the desktop client is not
- * installed on this machine) — absence of evidence, not evidence of a bad key.
- */
-export declare function verifyKeyAgainstKeyBlob(key: Buffer): Promise<boolean>;
-/** Install the protector key for this process (already persisted by the caller). */
-export declare function setActiveAtRestKey(key: Buffer | null): void;
-/** The protector key this process holds, if any. */
-export declare function activeAtRestKey(): Buffer | null;
-/** Whether sealed credentials can be opened right now. */
-export declare function hasAtRestKey(): boolean;
-export {};
-//# sourceMappingURL=atrest.d.ts.map