@eddyskywalker/dsh-chatgpt-subscription 0.4.0 → 0.5.0

package/lib/types/client/locales.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"locales.d.ts","sourceRoot":"","sources":["../../../src/client/locales.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,EAAE,EAAG,0BAAmC,CAAA;AAErD,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+HL,CAAA;AAEV,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,OAAO,EAAE,EAAE,MAAM,CA+H9C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,EAAE,CAAA;AACvC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAa,CAAA"}
+{"version":3,"file":"locales.d.ts","sourceRoot":"","sources":["../../../src/client/locales.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,EAAE,EAAG,0BAAmC,CAAA;AAIrD,eAAO,MAAM,EAAE;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAkIL,CAAA;AAEV,eAAO,MAAM,EAAE,EAAE,MAAM,CAAC,MAAM,OAAO,EAAE,EAAE,MAAM,CAgI9C,CAAA;AAED,MAAM,MAAM,SAAS,GAAG,MAAM,OAAO,EAAE,CAAA;AACvC,eAAO,MAAM,YAAY;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAAa,CAAA"}

package/lib/types/host/antigravity/account-pool.d.ts

@@ -1,6 +1,6 @@
 import type { CredentialStore } from '../token-store.ts';
 import { FileCredentialStore, type AntigravityCredentials } from './token-store.ts';
-import type { AccountRotationStrategy, AntigravityAccountSummaryDto } from '../../shared/antigravity-contracts.ts';
+import type { AntigravityAccountSummaryDto, AccountRotationStrategy } from '../../shared/antigravity-contracts.ts';
 export interface AntigravityPoolAccount {
     id: string;
     alias: string;
@@ -22,14 +22,20 @@ export interface AntigravityPoolData {
 }
 export declare function poolPath(): string;
 export declare function parseAntigravityPoolData(value: unknown): AntigravityPoolData;
+/**
+ * Antigravity's account pool.
+ *
+ * The storage, eligibility, rotation and cooldown rules live in the shared
+ * {@link AccountPoolCore}; this facade keeps the provider-shaped API the routes
+ * and the adapter were written against, including the credential projection
+ * (`token` / `projectId`) that predates the shared core.
+ */
 export declare class AccountPoolStore {
-    private readonly filePath;
-    private readonly backend;
+    private readonly core;
     private readonly legacyStore;
     constructor(filePath?: string, backend?: CredentialStore<AntigravityPoolData>, legacyStore?: FileCredentialStore);
+    /** Human description of where this pool's credentials live. */
     path(): string;
-    private serialize;
-    private saveVerified;
     read(): Promise<AntigravityPoolData>;
     write(data: AntigravityPoolData): Promise<void>;
     listAccounts(): Promise<AntigravityAccountSummaryDto[]>;
@@ -41,6 +47,10 @@ export declare class AccountPoolStore {
     markCooldown(accountId: string, durationMs: number, reason: string): Promise<void>;
     clearCooldown(accountId: string): Promise<void>;
     hasAnotherAvailableAccount(triedAccountIds: ReadonlySet<string>): Promise<boolean>;
+    /**
+     * Pick the account for the next request, with the credential projection the
+     * Antigravity adapter consumes.
+     */
     getEffectiveAccount(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch): Promise<{
         account: AntigravityPoolAccount;
         token: string;

package/lib/types/host/antigravity/account-pool.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/account-pool.ts"],"names":[],"mappings":"AAMA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAIxD,OAAO,EACL,mBAAmB,EAInB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EACV,uBAAuB,EACvB,4BAA4B,EAC7B,MAAM,uCAAuC,CAAA;AAE9C,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,sBAAsB,CAAA;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAA;IACV,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,uBAAuB,CAAA;IACzC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAyC5E;AAqBD,qBAAa,gBAAgB;IAEzB,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,WAAW;gBAFX,QAAQ,SAAa,EACrB,OAAO,GAAE,eAAe,CAAC,mBAAmB,CAAyC,EACrF,WAAW,sBAA4B;IAG1D,IAAI,IAAI,MAAM;IAMd,OAAO,CAAC,SAAS;YAWH,YAAY;IAS1B,IAAI,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAiDpC,KAAK,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzC,YAAY,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAoBvD,UAAU,CAAC,WAAW,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAuChG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAa5C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB/C,WAAW,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAM7D,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAU/C,0BAA0B,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAQlF,mBAAmB,CACvB,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,sBAAsB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CA8DnF"}
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/account-pool.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAMxD,OAAO,EACL,mBAAmB,EAEnB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAA;AAEzB,OAAO,KAAK,EACV,4BAA4B,EAC5B,uBAAuB,EACxB,MAAM,uCAAuC,CAAA;AAE9C,MAAM,WAAW,sBAAsB;IACrC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,EAAE,sBAAsB,CAAA;IACnC,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,SAAS,CAAC,EAAE,OAAO,CAAA;CACpB;AAED,MAAM,WAAW,mBAAmB;IAClC,OAAO,EAAE,CAAC,CAAA;IACV,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,uBAAuB,CAAA;IACzC,QAAQ,EAAE,sBAAsB,EAAE,CAAA;CACnC;AAED,wBAAgB,QAAQ,IAAI,MAAM,CAEjC;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,mBAAmB,CAwC5E;AAmBD;;;;;;;GAOG;AACH,qBAAa,gBAAgB;IAC3B,OAAO,CAAC,QAAQ,CAAC,IAAI,CAIpB;IACD,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAqB;gBAG/C,QAAQ,SAAa,EACrB,OAAO,GAAE,eAAe,CAAC,mBAAmB,CAAyC,EACrF,WAAW,sBAA4B;IA2EzC,+DAA+D;IAC/D,IAAI,IAAI,MAAM;IAId,IAAI,IAAI,OAAO,CAAC,mBAAmB,CAAC;IAIpC,KAAK,CAAC,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,YAAY,IAAI,OAAO,CAAC,4BAA4B,EAAE,CAAC;IAIvD,UAAU,CAAC,WAAW,EAAE,sBAAsB,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAIhG,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI5C,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIzD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,WAAW,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAI7D,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAIlF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAI/C,0BAA0B,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAIlF;;;OAGG;IACG,mBAAmB,CACvB,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,sBAAsB,CAAC;QAAC,KAAK,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAOnF"}

package/lib/types/host/antigravity/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,KAAK,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAIpD,OAAO,KAAK,EAA0B,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AA+BzG,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,WAAW,mBAAoD,GAC9D,OAAO,CAAC,oBAAoB,CAAC,CAoC/B;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,OAAO,KAAa,EAC7B,WAAW,mBAAoD,GAC9D,MAAM,IAAI,CA+HZ"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/antigravity/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAE,mBAAmB,EAAE,sBAAsB,EAAE,KAAK,0BAA0B,EAAE,MAAM,kBAAkB,CAAA;AAC/G,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAA;AAIpD,OAAO,KAAK,EAA0B,oBAAoB,EAAE,MAAM,uCAAuC,CAAA;AA+BzG,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,WAAW,mBAAoD,GAC9D,OAAO,CAAC,oBAAoB,CAAC,CAoC/B;AAED,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,OAAO,KAAa,EAC7B,WAAW,mBAAoD,GAC9D,MAAM,IAAI,CAmIZ"}

package/lib/types/host/codex-account-pool.d.ts

@@ -0,0 +1,64 @@
+import { AccountPoolCore, type PoolAccountShape, type PoolData } from './common/account-pool.ts';
+import { type CredentialStore, type StoredOAuthCredentials, type TokenStore } from './token-store.ts';
+import type { AccountRotationStrategy, PoolAccountSummaryDto } from '../shared/account-pool-contracts.ts';
+/** One pooled ChatGPT account: the credential plus the facts the card renders. */
+export interface CodexPoolAccount extends PoolAccountShape<StoredOAuthCredentials> {
+    email?: string;
+    planType?: string;
+    accountId?: string;
+}
+/** Encrypted pool file the ChatGPT line owns; the single-credential store stays the mirror. */
+export declare function codexPoolPath(): string;
+/** Validate and normalize one whole pool document. */
+export declare function parseCodexPoolData(value: unknown): PoolData<CodexPoolAccount>;
+/** Token refresh the OAuth service lends the pool; refresh tokens rotate, so this must be the only writer. */
+export interface CodexTokenRefresher {
+    /** Refresh one account with the service's own token-endpoint fetch. */
+    refreshAccount(credentials: StoredOAuthCredentials): Promise<StoredOAuthCredentials>;
+}
+export interface CodexAccountPoolOptions {
+    /** Single-credential store the pool mirrors its primary account into. */
+    store?: TokenStore;
+    /** Test seam; production builds the platform backend from the pool path. */
+    backend?: CredentialStore<PoolData<CodexPoolAccount>>;
+    /** Accounts this pool accepts; defaults to the core's limit. */
+    maxAccounts?: number;
+}
+/**
+ * ChatGPT's account pool.
+ *
+ * Thin wrapper over {@link AccountPoolCore}: it only supplies the credential
+ * shape, the identity a duplicate sign-in collapses onto, and the two provider
+ * hooks the core cannot know — how to refresh one account's tokens and which
+ * accounts a cached quota window already rules out.
+ */
+export declare class CodexAccountPool extends AccountPoolCore<StoredOAuthCredentials, CodexPoolAccount, PoolAccountSummaryDto> {
+    private readonly refresherRef;
+    private readonly store;
+    private quotaBlockedUntil?;
+    constructor(options?: CodexAccountPoolOptions);
+    /** Hand the pool the OAuth service's per-account refresh implementation. */
+    setRefresher(refresher: CodexTokenRefresher): void;
+    /**
+     * Wire in a cached-quota verdict.
+     *
+     * The return value is the time the account's Codex window reopens; a lookup
+     * returning undefined (or a past time) leaves the account routable. This is
+     * how an exhausted window is skipped before a request is even attempted,
+     * instead of discovering it from a 429.
+     */
+    setQuotaBlockedUntil(lookup: (account: CodexPoolAccount, now: number) => number | undefined): void;
+    protected isEligible(account: CodexPoolAccount, now: number, triedAccountIds?: ReadonlySet<string>): boolean;
+    /**
+     * Force one account's token refresh and persist the rotated pair.
+     *
+     * Used after a 401: the core refreshes proactively when a token is close to
+     * expiry, but a server-side revocation is only discovered by the request.
+     */
+    refreshAccountNow(accountId: string): Promise<StoredOAuthCredentials>;
+    /** The single-credential store this pool mirrors its primary account into. */
+    mirrorStore(): TokenStore;
+    /** Rotation strategy currently configured. */
+    strategy(): Promise<AccountRotationStrategy>;
+}
+//# sourceMappingURL=codex-account-pool.d.ts.map

package/lib/types/host/codex-account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"codex-account-pool.d.ts","sourceRoot":"","sources":["../../../src/host/codex-account-pool.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,eAAe,EAGf,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,0BAA0B,CAAA;AACjC,OAAO,EAEL,KAAK,eAAe,EACpB,KAAK,sBAAsB,EAC3B,KAAK,UAAU,EAChB,MAAM,kBAAkB,CAAA;AAGzB,OAAO,KAAK,EAAE,uBAAuB,EAAE,qBAAqB,EAAE,MAAM,qCAAqC,CAAA;AAEzG,kFAAkF;AAClF,MAAM,WAAW,gBAAiB,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IAChF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,+FAA+F;AAC/F,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AASD,sDAAsD;AACtD,wBAAgB,kBAAkB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,gBAAgB,CAAC,CAsC7E;AAED,8GAA8G;AAC9G,MAAM,WAAW,mBAAmB;IAClC,uEAAuE;IACvE,cAAc,CAAC,WAAW,EAAE,sBAAsB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;CACrF;AAED,MAAM,WAAW,uBAAuB;IACtC,yEAAyE;IACzE,KAAK,CAAC,EAAE,UAAU,CAAA;IAClB,4EAA4E;IAC5E,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC,CAAA;IACrD,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;;GAOG;AACH,qBAAa,gBAAiB,SAAQ,eAAe,CAAC,sBAAsB,EAAE,gBAAgB,EAAE,qBAAqB,CAAC;IACpH,OAAO,CAAC,QAAQ,CAAC,YAAY,CAAmC;IAChE,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAY;IAClC,OAAO,CAAC,iBAAiB,CAAC,CAAgE;gBAE9E,OAAO,GAAE,uBAA4B;IAyEjD,4EAA4E;IAC5E,YAAY,CAAC,SAAS,EAAE,mBAAmB,GAAG,IAAI;IAIlD;;;;;;;OAOG;IACH,oBAAoB,CAAC,MAAM,EAAE,CAAC,OAAO,EAAE,gBAAgB,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,GAAG,IAAI;cAI/E,UAAU,CAC3B,OAAO,EAAE,gBAAgB,EACzB,GAAG,EAAE,MAAM,EACX,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GACpC,OAAO;IAMV;;;;;OAKG;IACG,iBAAiB,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,sBAAsB,CAAC;IAW3E,8EAA8E;IAC9E,WAAW,IAAI,UAAU;IAIzB,8CAA8C;IACxC,QAAQ,IAAI,OAAO,CAAC,uBAAuB,CAAC;CAGnD"}

package/lib/types/host/command-code/account-pool.d.ts

@@ -0,0 +1,60 @@
+import { AccountPoolCore, type PoolAccountShape, type PoolData } from '../common/account-pool.ts';
+import type { CredentialStore } from '../token-store.ts';
+import { FileCredentialStore, type CommandCodeCredentials } from './token-store.ts';
+import type { CommandCodeAccountSummaryDto, CommandCodeApiEnv } from '../../shared/command-code-contracts.ts';
+/** One pooled Command Code key: the bearer key plus the account facts the card renders. */
+export interface CommandCodePoolAccount extends PoolAccountShape<CommandCodeCredentials> {
+    email?: string;
+    userName?: string;
+    keyName?: string;
+    organizationName?: string;
+    planLabel?: string;
+    planId?: string;
+    userId?: string;
+}
+export type { CommandCodeAccountSummaryDto };
+/** Encrypted pool file this line owns; the pre-pool credential file stays the mirror. */
+export declare function commandCodePoolPath(): string;
+/**
+ * Stable identity of one key.
+ *
+ * A user id plus the key name is what Command Code Studio itself shows, so two
+ * keys minted from the same account stay distinguishable; without a user id the
+ * key's digest is the identity. The digest is never written anywhere.
+ */
+export declare function commandCodeAccountKey(credentials: CommandCodeCredentials): string;
+/** Validate and normalize one whole pool document. */
+export declare function parseCommandCodePoolData(value: unknown): PoolData<CommandCodePoolAccount>;
+export interface CommandCodeAccountPoolOptions {
+    /** Pre-pool credential file the pool mirrors its primary account into. */
+    store?: FileCredentialStore;
+    /** Test seam; production builds the platform backend from the pool path. */
+    backend?: CredentialStore<PoolData<CommandCodePoolAccount>>;
+    /** Accounts this pool accepts; defaults to the core's limit. */
+    maxAccounts?: number;
+}
+/**
+ * Command Code's account pool.
+ *
+ * A Command Code credential is a long-lived bearer key with nothing to refresh,
+ * so this wrapper only supplies identity, display facts and the mirror of the
+ * single-credential file the plugin used before the pool existed.
+ */
+export declare class CommandCodeAccountPool extends AccountPoolCore<CommandCodeCredentials, CommandCodePoolAccount, CommandCodeAccountSummaryDto> {
+    private readonly store;
+    constructor(options?: CommandCodeAccountPoolOptions);
+    /**
+     * Pick the key for the next request, with the API environment it belongs to.
+     *
+     * A key issued for one deployment must not be sent to another, so the
+     * environment travels with the credential rather than with the process.
+     */
+    getEffectiveCredential(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch): Promise<{
+        account: CommandCodePoolAccount;
+        credentials: CommandCodeCredentials;
+        apiEnv: CommandCodeApiEnv;
+    }>;
+    /** The pre-pool credential file this pool mirrors its primary account into. */
+    mirrorStore(): FileCredentialStore;
+}
+//# sourceMappingURL=account-pool.d.ts.map

package/lib/types/host/command-code/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/account-pool.ts"],"names":[],"mappings":"AAGA,OAAO,EACL,eAAe,EAGf,KAAK,gBAAgB,EACrB,KAAK,QAAQ,EACd,MAAM,2BAA2B,CAAA;AAClC,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AACxD,OAAO,EACL,mBAAmB,EAEnB,KAAK,sBAAsB,EAC5B,MAAM,kBAAkB,CAAA;AAGzB,OAAO,KAAK,EAAE,4BAA4B,EAAE,iBAAiB,EAAE,MAAM,wCAAwC,CAAA;AAE7G,2FAA2F;AAC3F,MAAM,WAAW,sBAAuB,SAAQ,gBAAgB,CAAC,sBAAsB,CAAC;IACtF,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,MAAM,CAAC,EAAE,MAAM,CAAA;IACf,MAAM,CAAC,EAAE,MAAM,CAAA;CAChB;AAED,YAAY,EAAE,4BAA4B,EAAE,CAAA;AAE5C,yFAAyF;AACzF,wBAAgB,mBAAmB,IAAI,MAAM,CAE5C;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,WAAW,EAAE,sBAAsB,GAAG,MAAM,CAKjF;AASD,sDAAsD;AACtD,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,sBAAsB,CAAC,CAsCzF;AAED,MAAM,WAAW,6BAA6B;IAC5C,0EAA0E;IAC1E,KAAK,CAAC,EAAE,mBAAmB,CAAA;IAC3B,4EAA4E;IAC5E,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,sBAAsB,CAAC,CAAC,CAAA;IAC3D,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAA;CACrB;AAED;;;;;;GAMG;AACH,qBAAa,sBAAuB,SAAQ,eAAe,CACzD,sBAAsB,EACtB,sBAAsB,EACtB,4BAA4B,CAC7B;IACC,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAqB;gBAE/B,OAAO,GAAE,6BAAkC;IAkFvD;;;;;OAKG;IACG,sBAAsB,CAC1B,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,sBAAsB,CAAC;QAAC,WAAW,EAAE,sBAAsB,CAAC;QAAC,MAAM,EAAE,iBAAiB,CAAA;KAAE,CAAC;IAK/G,+EAA+E;IAC/E,WAAW,IAAI,mBAAmB;CAGnC"}

package/lib/types/host/command-code/adapter.d.ts

@@ -1,5 +1,6 @@
 import { LlmAdapter, ReasoningEffortId, type GenerateOptions, type LlmModelInfo, type LlmProviderInfo, type LlmResolvedModelInfo, type PreparedAdapterCall, type ResolvedRetryPolicy, type StreamChunk } from '@deepseek-ai/dsh-llm';
 import { FileCredentialStore, FileModelSettingsStore, type CommandCodeCatalogModel, type CommandCodePreferenceStore } from './token-store.ts';
+import { CommandCodeAccountPool } from './account-pool.ts';
 import { type AttachmentImageReader } from './mapper.ts';
 /** Configured effort when the model supports it, else the adapter's preference order. */
 export declare function resolveDefaultReasoningEffort(efforts: readonly string[], configuredEffort?: string | null): ReasoningEffortId | undefined;
@@ -14,7 +15,16 @@ export declare class CommandCodeAdapter extends LlmAdapter {
     private readonly modelSettings;
     private readonly preferences?;
     private readonly options;
-    constructor(store?: FileCredentialStore, modelSettings?: FileModelSettingsStore, preferences?: CommandCodePreferenceStore | undefined, options?: CommandCodeAdapterOptions);
+    /**
+     * Rotation pool, or null for the single stored key.
+     *
+     * The pool is only ever installed by the plugin entry, which owns its storage.
+     * An adapter built without one must keep reading the one credential file and
+     * must not create pool state on its own: that state outlives the process and
+     * would leak cooldowns between unrelated runs.
+     */
+    private readonly accountPool;
+    constructor(store?: FileCredentialStore, modelSettings?: FileModelSettingsStore, preferences?: CommandCodePreferenceStore | undefined, options?: CommandCodeAdapterOptions, accountPool?: CommandCodeAccountPool);
     providerInfo(provider: string): LlmProviderInfo;
     providerRetryPolicy(): ResolvedRetryPolicy;
     imageRequestPricing(): undefined;

package/lib/types/host/command-code/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAEV,iBAAiB,EAEjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAiB7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AAEzB,OAAO,EASL,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAA;AAwBpB,yFAAyF;AACzF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,iBAAiB,GAAG,SAAS,CAK/B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;CACvD;AAED,qBAAa,kBAAmB,SAAQ,UAAU;IAE9C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO;gBAHP,KAAK,sBAA4B,EACjC,aAAa,yBAA+B,EAC5C,WAAW,CAAC,EAAE,0BAA0B,YAAA,EACxC,OAAO,GAAE,yBAA8B;IAK1D,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC,OAAO,CAAC,QAAQ;IAIhB;;;OAGG;YACW,OAAO;IAYrB,OAAO,CAAC,gBAAgB;IAUlB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAgB/D,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0BpG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAO/F,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;YAgBpD,aAAa;CAwH7B"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/adapter.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,UAAU,EAEV,iBAAiB,EAEjB,KAAK,eAAe,EACpB,KAAK,YAAY,EACjB,KAAK,eAAe,EACpB,KAAK,oBAAoB,EACzB,KAAK,mBAAmB,EACxB,KAAK,mBAAmB,EACxB,KAAK,WAAW,EACjB,MAAM,sBAAsB,CAAA;AAkB7B,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,uBAAuB,EAC5B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAE1D,OAAO,EASL,KAAK,qBAAqB,EAE3B,MAAM,aAAa,CAAA;AAwBpB,yFAAyF;AACzF,wBAAgB,6BAA6B,CAC3C,OAAO,EAAE,SAAS,MAAM,EAAE,EAC1B,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,GAC/B,iBAAiB,GAAG,SAAS,CAK/B;AAED,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,qBAAqB,CAAA;IACnC,mFAAmF;IACnF,WAAW,CAAC,EAAE,MAAM,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAAA;CACvD;AAKD,qBAAa,kBAAmB,SAAQ,UAAU;IAY9C,OAAO,CAAC,QAAQ,CAAC,KAAK;IACtB,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;IAC7B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAd1B;;;;;;;OAOG;IACH,OAAO,CAAC,QAAQ,CAAC,WAAW,CAA+B;gBAGxC,KAAK,sBAA4B,EACjC,aAAa,yBAA+B,EAC5C,WAAW,CAAC,EAAE,0BAA0B,YAAA,EACxC,OAAO,GAAE,yBAA8B,EACxD,WAAW,CAAC,EAAE,sBAAsB;IAMtC,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,eAAe;IAI/C,mBAAmB,IAAI,mBAAmB;IAI1C,mBAAmB,IAAI,SAAS;IAIhC,OAAO,CAAC,QAAQ;IAIhB;;;OAGG;YACW,OAAO;IAYrB,OAAO,CAAC,gBAAgB;IAUlB,UAAU,CAAC,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,SAAS,YAAY,EAAE,CAAC;IAgB/D,YAAY,CAAC,QAAQ,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,oBAAoB,CAAC;IA0BpG,WAAW,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC;IAO/F,MAAM,CAAC,OAAO,EAAE,eAAe,GAAG,aAAa,CAAC,WAAW,CAAC;YAgBpD,aAAa;CA0K7B"}

package/lib/types/host/command-code/client.d.ts

@@ -75,15 +75,31 @@ export declare function whoami(apiKey: string, options?: CommandCodeRequestOptio
  * is never stored.
  */
 export declare function verifyApiKey(apiKey: string, options?: CommandCodeRequestOptions): Promise<CommandCodeAccount>;
+/**
+ * Returns the quota snapshot for the most recently requested account.
+ * Kept with a no-argument signature for backward compatibility.
+ */
 export declare function getCachedQuota(): CommandCodeAccountQuota | undefined;
+/**
+ * The cached snapshot only when it belongs to this account.
+ *
+ * Passing no account keeps the pre-pool behavior of returning whatever was
+ * fetched last.
+ */
+export declare function getCachedQuotaFor(accountId?: string | null): CommandCodeAccountQuota | undefined;
 export declare function clearCachedQuota(): void;
+export interface FetchAccountQuotaOptions {
+    fetchFn?: typeof fetch;
+    force?: boolean;
+    accountId?: string;
+}
 /**
  * Read credits, subscriptions, and usage, tolerating a service that answers
  * only some of the three. Every failure is captured as a missing source rather
  * than failing the whole snapshot, because a working credit balance is still
  * worth showing when the usage route is down.
  */
-export declare function fetchAccountQuota(store?: FileCredentialStore, fetchFn?: typeof fetch, force?: boolean): Promise<CommandCodeAccountQuota>;
+export declare function fetchAccountQuota(store?: Pick<FileCredentialStore, 'read'>, fetchFnOrOptions?: typeof fetch | FetchAccountQuotaOptions, force?: boolean, accountId?: string): Promise<CommandCodeAccountQuota>;
 /** Catalog entry list with the exact defaults the settings card renders. */
 export declare function buildModelOptions(catalog: readonly CommandCodeCatalogModel[], enabledModelIds: readonly string[], overrides: Record<string, number>): Array<{
     id: string;

package/lib/types/host/command-code/client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAYL,WAAW,EAWZ,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAA+B,MAAM,kBAAkB,CAAA;AAEjH,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,wCAAwC,CAAA;AAI/C,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAcxB;AAqGD,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAAG,kBAAkB,CA8B5G;AA8HD,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIvE;AAED,+DAA+D;AAC/D,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAI1E;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAKhE;AA+GD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAW5D;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,sBAAsB,EAAE,CAqB5E;AAED;;;;;;;;GAQG;AACH,8EAA8E;AAC9E,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAE5E;AAgCD,sDAAsD;AACtD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,uBAAuB,EAAE,CAgB/E;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAWpC;AAED,+EAA+E;AAC/E,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,yBAAyB,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5D,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAiBpC;AAED,wBAAgB,gBAAgB,IAAI,uBAAuB,EAAE,CAE5D;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAKR;AA0BD,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhG;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAMD,wBAAgB,cAAc,IAAI,uBAAuB,GAAG,SAAS,CAEpE;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAIvC;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,sBAA4B,EACjC,OAAO,GAAE,OAAO,KAAa,EAC7B,KAAK,UAAQ,GACZ,OAAO,CAAC,uBAAuB,CAAC,CAkFlC;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAA;IAChB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAA;CAC7B,CAAC,CAgBD;AAED,OAAO,EAAE,WAAW,EAAE,CAAA"}
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/client.ts"],"names":[],"mappings":"AAAA,OAAO,EAYL,WAAW,EAWZ,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,mBAAmB,EAAE,KAAK,uBAAuB,EAA+B,MAAM,kBAAkB,CAAA;AAEjH,OAAO,KAAK,EACV,kBAAkB,EAClB,uBAAuB,EACvB,iBAAiB,EACjB,gBAAgB,EAChB,sBAAsB,EACvB,MAAM,wCAAwC,CAAA;AAI/C,MAAM,WAAW,yBAAyB;IACxC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;IACpB,MAAM,CAAC,EAAE,iBAAiB,CAAA;CAC3B;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,MAAM,EAAE,MAAM,EACd,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAcxB;AAqGD,qFAAqF;AACrF,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,GAAE,OAAO,CAAC,kBAAkB,CAAM,GAAG,kBAAkB,CA8B5G;AA8HD,yFAAyF;AACzF,wBAAgB,WAAW,CAAC,QAAQ,EAAE,SAAS,OAAO,EAAE,GAAG,MAAM,GAAG,IAAI,CAOvE;AAED;;;;;;GAMG;AACH,wBAAgB,uBAAuB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAIvE;AAED,+DAA+D;AAC/D,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAI1E;AAED;;;;;;GAMG;AACH,wBAAgB,WAAW,CAAC,OAAO,EAAE,OAAO,GAAG,gBAAgB,EAAE,CAKhE;AA+GD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAW5D;AAED,kEAAkE;AAClE,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,GAAG,sBAAsB,EAAE,CAqB5E;AAED;;;;;;;;GAQG;AACH,8EAA8E;AAC9E,wBAAgB,4BAA4B,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAE5E;AAgCD,sDAAsD;AACtD,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,OAAO,GAAG,uBAAuB,EAAE,CAgB/E;AAED;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAWpC;AAED,+EAA+E;AAC/E,wBAAsB,kBAAkB,CACtC,OAAO,GAAE,yBAAyB,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC5D,OAAO,CAAC,uBAAuB,EAAE,CAAC,CAiBpC;AAED,wBAAgB,gBAAgB,IAAI,uBAAuB,EAAE,CAE5D;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC;AAED,8EAA8E;AAC9E,wBAAgB,sBAAsB,CACpC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,MAAM,CAKR;AA0BD,wBAAgB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,OAAO,GAAE,yBAA8B,GAAG,OAAO,CAAC,OAAO,CAAC,CAEhG;AAED;;;;;;GAMG;AACH,wBAAsB,YAAY,CAChC,MAAM,EAAE,MAAM,EACd,OAAO,GAAE,yBAA8B,GACtC,OAAO,CAAC,kBAAkB,CAAC,CAG7B;AAiBD;;;GAGG;AACH,wBAAgB,cAAc,IAAI,uBAAuB,GAAG,SAAS,CAEpE;AAED;;;;;GAKG;AACH,wBAAgB,iBAAiB,CAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,uBAAuB,GAAG,SAAS,CAGhG;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,KAAK,CAAC,EAAE,OAAO,CAAA;IACf,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,GAAE,IAAI,CAAC,mBAAmB,EAAE,MAAM,CAA6B,EACpE,gBAAgB,GAAE,OAAO,KAAK,GAAG,wBAAgC,EACjE,KAAK,UAAQ,EACb,SAAS,CAAC,EAAE,MAAM,GACjB,OAAO,CAAC,uBAAuB,CAAC,CAkGlC;AAED,4EAA4E;AAC5E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,KAAK,CAAC;IACP,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,OAAO,EAAE,OAAO,CAAA;IAChB,oBAAoB,EAAE,MAAM,CAAA;IAC5B,aAAa,EAAE,MAAM,CAAA;IACrB,gBAAgB,EAAE,MAAM,CAAA;IACxB,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;IAC3B,IAAI,EAAE,QAAQ,GAAG,WAAW,CAAA;CAC7B,CAAC,CAgBD;AAED,OAAO,EAAE,WAAW,EAAE,CAAA"}

package/lib/types/host/command-code/oauth.d.ts

@@ -1,5 +1,5 @@
 import { type Server } from 'node:http';
-import { FileCredentialStore } from './token-store.ts';
+import { FileCredentialStore, type CommandCodeCredentials } from './token-store.ts';
 import type { CommandCodeAccount } from '../../shared/command-code-contracts.ts';
 export type CommandCodeLoginStatus = 'idle' | 'pending' | 'complete' | 'error';
 export interface CommandCodeLoginFlowState {
@@ -74,6 +74,8 @@ export declare function beginWebLogin(store: FileCredentialStore, options?: {
     fetchFn?: typeof fetch;
     openBrowser?: (url: string) => void;
     timeoutMs?: number;
+    /** Called with the validated credential so a pool can keep every sign-in. */
+    onSave?: (credentials: CommandCodeCredentials) => Promise<unknown>;
 }): Promise<CommandCodeLoginFlowState>;
 /**
  * Persist a manually entered API key after proving it authenticates.
@@ -83,6 +85,7 @@ export declare function beginWebLogin(store: FileCredentialStore, options?: {
  */
 export declare function saveApiKey(store: FileCredentialStore, apiKey: string, options?: {
     fetchFn?: typeof fetch;
+    onSave?: (credentials: CommandCodeCredentials) => Promise<unknown>;
 }): Promise<CommandCodeAccount>;
 /** Stable per-attempt id the settings card can correlate; kept for symmetry with other routes. */
 export declare function newLoginAttemptId(): string;

package/lib/types/host/command-code/oauth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/oauth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAA;AAehG,OAAO,EAAE,mBAAmB,EAA+B,MAAM,kBAAkB,CAAA;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAEhF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAA;AAE9E,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAID,wBAAgB,iBAAiB,IAAI,yBAAyB,CAE7D;AAED,mFAAmF;AACnF,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAgB7C;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQ3E;AAED,yEAAyE;AACzE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAWD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,SAAwB,EAC7B,QAAQ,SAAyB,GAChC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAyFD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACjE,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GACxC,OAAO,CAAC,2BAA2B,CAAC,CA2LtC;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,SAAS,CAAC,EAAE,MAAM,CAAA;CAAO,GAChG,OAAO,CAAC,yBAAyB,CAAC,CAoEpC;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;CAAO,GACvC,OAAO,CAAC,kBAAkB,CAAC,CAgB7B;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/oauth.ts"],"names":[],"mappings":"AAEA,OAAO,EAAsC,KAAK,MAAM,EAAuB,MAAM,WAAW,CAAA;AAehG,OAAO,EAAE,mBAAmB,EAAE,KAAK,sBAAsB,EAAE,MAAM,kBAAkB,CAAA;AAEnF,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,wCAAwC,CAAA;AAEhF,MAAM,MAAM,sBAAsB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAA;AAE9E,MAAM,WAAW,yBAAyB;IACxC,MAAM,EAAE,sBAAsB,CAAA;IAC9B,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,OAAO,CAAC,EAAE,kBAAkB,CAAA;IAC5B,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAED,sEAAsE;AACtE,MAAM,WAAW,8BAA8B;IAC7C,MAAM,EAAE,MAAM,CAAA;IACd,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;IACd,QAAQ,EAAE,MAAM,CAAA;IAChB,OAAO,EAAE,MAAM,CAAA;CAChB;AAID,wBAAgB,iBAAiB,IAAI,yBAAyB,CAE7D;AAED,mFAAmF;AACnF,wBAAgB,aAAa,IAAI,IAAI,CAEpC;AAED,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAgB7C;AAED,kEAAkE;AAClE,wBAAgB,YAAY,CAAC,KAAK,EAAE;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,MAAM,CAQ3E;AAED,yEAAyE;AACzE,wBAAgB,aAAa,IAAI,MAAM,CAEtC;AAWD;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,SAAwB,EAC7B,QAAQ,SAAyB,GAChC,OAAO,CAAC,MAAM,CAAC,CAMjB;AAyFD,MAAM,WAAW,2BAA2B;IAC1C,MAAM,EAAE,MAAM,CAAA;IACd,IAAI,EAAE,MAAM,CAAA;IACZ,+EAA+E;IAC/E,kBAAkB,EAAE,MAAM,OAAO,CAAC,8BAA8B,CAAC,CAAA;IACjE,KAAK,EAAE,MAAM,IAAI,CAAA;CAClB;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,EAAE,MAAM,EACZ,aAAa,EAAE,MAAM,EACrB,OAAO,GAAE;IAAE,cAAc,CAAC,EAAE,MAAM,CAAA;CAAO,GACxC,OAAO,CAAC,2BAA2B,CAAC,CA2LtC;AAED;;;;;;;GAOG;AACH,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE;IACP,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,WAAW,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAA;IACnC,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,6EAA6E;IAC7E,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAC9D,GACL,OAAO,CAAC,yBAAyB,CAAC,CAqEpC;AAED;;;;;GAKG;AACH,wBAAsB,UAAU,CAC9B,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,MAAM,EACd,OAAO,GAAE;IAAE,OAAO,CAAC,EAAE,OAAO,KAAK,CAAC;IAAC,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,sBAAsB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CAAO,GAC3G,OAAO,CAAC,kBAAkB,CAAC,CAkB7B;AAED,kGAAkG;AAClG,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C"}

package/lib/types/host/command-code/routes.d.ts

@@ -1,6 +1,7 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { PROVIDER_ID, PROVIDER_NAME } from './types.ts';
 import { FileCredentialStore, FileModelSettingsStore, type CommandCodeCatalogModel, type CommandCodePreferenceStore } from './token-store.ts';
+import { CommandCodeAccountPool } from './account-pool.ts';
 import { getCachedCatalog } from './client.ts';
 import type { CommandCodeApiEnv, CommandCodeWebStatus } from '../../shared/command-code-contracts.ts';
 /**
@@ -18,10 +19,18 @@ export interface CommandCodeStatusOptions {
     serving?: boolean | (() => boolean);
     /** Diagnostic when another plugin owns the provider route; re-read on every status. */
     conflict?: string | null | (() => string | null);
+    /**
+     * Account pool instance used for multi-account management.
+     *
+     * Only the plugin entry installs one, because it owns the pool's storage. A
+     * caller that passes none keeps the single-key behavior, and no code path
+     * invents pool state that would outlive the process.
+     */
+    accountPool?: CommandCodeAccountPool;
 }
 /** Everything the settings card renders: account, quota, and the model catalog. */
-export declare function getCommandCodeWebStatus(store: FileCredentialStore, modelSettings: FileModelSettingsStore, preferences?: CommandCodePreferenceStore, options?: CommandCodeStatusOptions): Promise<CommandCodeWebStatus>;
+export declare function getCommandCodeWebStatus(store: FileCredentialStore, modelSettings: FileModelSettingsStore, preferences?: CommandCodePreferenceStore, options?: CommandCodeStatusOptions, accountPool?: CommandCodeAccountPool | undefined): Promise<CommandCodeWebStatus>;
 /** Register the Command Code settings routes under `/command-code/api`. */
-export declare function registerCommandCodeRoutes(ctx: Context, store: FileCredentialStore, modelSettings: FileModelSettingsStore, preferences?: CommandCodePreferenceStore, options?: CommandCodeStatusOptions): () => void;
+export declare function registerCommandCodeRoutes(ctx: Context, store: FileCredentialStore, modelSettings: FileModelSettingsStore, preferences?: CommandCodePreferenceStore, options?: CommandCodeStatusOptions, accountPool?: CommandCodeAccountPool | undefined): () => void;
 export { PROVIDER_ID, PROVIDER_NAME, type CommandCodeApiEnv, getCachedCatalog };
 //# sourceMappingURL=routes.d.ts.map

package/lib/types/host/command-code/routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAmB,WAAW,EAAE,aAAa,EAAqC,MAAM,YAAY,CAAA;AAC3G,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,uBAAuB,EAE5B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAKL,gBAAgB,EAMjB,MAAM,aAAa,CAAA;AAGpB,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAkErG;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,OAAO,UAAO,GACb,MAAM,EAAE,CAUV;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,sFAAsF;IACtF,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;IACnC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAA;CACjD;AAMD,mFAAmF;AACnF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,oBAAoB,CAAC,CAuC/B;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,GACrC,MAAM,IAAI,CA0IZ;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/command-code/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAAmB,WAAW,EAAE,aAAa,EAAqC,MAAM,YAAY,CAAA;AAC3G,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EACtB,KAAK,uBAAuB,EAE5B,KAAK,0BAA0B,EAChC,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAAE,sBAAsB,EAAE,MAAM,mBAAmB,CAAA;AAC1D,OAAO,EAKL,gBAAgB,EAMjB,MAAM,aAAa,CAAA;AAGpB,OAAO,KAAK,EAAE,iBAAiB,EAAE,oBAAoB,EAAE,MAAM,wCAAwC,CAAA;AAkErG;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,OAAO,EAAE,SAAS,uBAAuB,EAAE,EAC3C,OAAO,UAAO,GACb,MAAM,EAAE,CAUV;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,sFAAsF;IACtF,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;IACnC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAA;IAChD;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,sBAAsB,CAAA;CACrC;AAMD,mFAAmF;AACnF,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,EACtC,WAAW,GAAE,sBAAsB,GAAG,SAA+B,GACpE,OAAO,CAAC,oBAAoB,CAAC,CA0E/B;AAED,2EAA2E;AAC3E,wBAAgB,yBAAyB,CACvC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,0BAA0B,EACxC,OAAO,GAAE,wBAA6B,EACtC,WAAW,GAAE,sBAAsB,GAAG,SAA+B,GACpE,MAAM,IAAI,CAgOZ;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,KAAK,iBAAiB,EAAE,gBAAgB,EAAE,CAAA"}

package/lib/types/host/common/account-pool.d.ts

@@ -0,0 +1,179 @@
+import type { CredentialStore } from '../token-store.ts';
+import type { AccountAuthStatus, AccountRotationStrategy, PoolAccountSummaryDto } from '../../shared/account-pool-contracts.ts';
+/** Refresh an access token this many milliseconds before it expires. */
+export declare const POOL_REFRESH_MARGIN_MS = 60000;
+/** Accounts a single pool may hold before `addAccount` refuses another one. */
+export declare const DEFAULT_MAX_POOL_ACCOUNTS = 20;
+/**
+ * The parts of a pooled account every provider line agrees on.
+ *
+ * A provider's own account type extends this with whatever non-secret display
+ * facts its card renders (project id, key name, region, plan …).
+ */
+export interface PoolAccountShape<TCredentials> {
+    id: string;
+    alias: string;
+    credentials: TCredentials;
+    addedAt: number;
+    lastUsedAt?: number;
+    isPrimary?: boolean;
+    cooldownUntil?: number;
+    cooldownReason?: string;
+    authStatus?: AccountAuthStatus;
+    authFailedReason?: string;
+}
+/** One provider's whole pool document, as it lives in encrypted storage. */
+export interface PoolData<TAccount> {
+    version: 1;
+    activeAccountId?: string;
+    rotationStrategy: AccountRotationStrategy;
+    accounts: TAccount[];
+}
+/** Everything the core hands a provider hook that mints an account record. */
+export interface PoolAccountInput<TCredentials, TAccount> {
+    id: string;
+    alias: string;
+    credentials: TCredentials;
+    addedAt: number;
+    isPrimary: boolean;
+    /** The account this one replaces, when the dedupe key already exists. */
+    existing?: TAccount;
+}
+/**
+ * Provider-specific behaviour of one account pool.
+ *
+ * The storage, serialization, eligibility, rotation and cooldown rules live in
+ * {@link AccountPoolCore}; only these hooks differ per provider line.
+ */
+export interface AccountPoolHooks<TCredentials, TAccount extends PoolAccountShape<TCredentials>, TSummary extends PoolAccountSummaryDto> {
+    /** Provider id used in storage descriptions and diagnostics. */
+    providerId: string;
+    /** Human label used in the messages the core raises. */
+    displayName: string;
+    /** Plaintext path of the pool file; the encrypted variants derive from it. */
+    poolFile: string;
+    /** Keychain / Secret Service service name on macOS and Linux. */
+    keychainService: string;
+    /** Validate and normalize one whole pool document. */
+    parsePoolData(value: unknown): PoolData<TAccount>;
+    /** Mint an account record; the core only decides id, alias and primary flag. */
+    createAccount(input: PoolAccountInput<TCredentials, TAccount>): TAccount;
+    /** Identity two credentials share when they are the same upstream account. */
+    dedupeKey?(credentials: TCredentials): string | undefined;
+    /** Alias for an account whose credentials name nothing the user would recognize. */
+    defaultAlias(credentials: TCredentials, position: number): string;
+    /** Unix milliseconds the access token expires; absent for a non-expiring key. */
+    expiresAt?(credentials: TCredentials): number | undefined;
+    /** Whether the credential must be refreshed before the next request. */
+    needsRefresh?(credentials: TCredentials, now: number): boolean;
+    /** Refresh one credential, returning the value to persist back into the pool. */
+    refresh?(credentials: TCredentials, fetchFn: typeof fetch): Promise<TCredentials>;
+    /**
+     * Classify a failed refresh.
+     *
+     * Returning a status takes that account out of rotation (it is kept, so a new
+     * sign-in restores it) and lets the next eligible account serve the request.
+     * Returning undefined lets the refresh error surface: a transient failure
+     * must not cost an account its place in the pool.
+     */
+    refreshFailureStatus?(error: unknown): AccountAuthStatus | undefined;
+    /**
+     * Reason the stored credential is already known to be unusable (a rejected
+     * refresh token, for instance). Reported purely: nothing is written here.
+     */
+    authRejectedReason?(credentials: TCredentials): string | undefined;
+    /** Pre-pool single credential, projected as the primary account on read. */
+    legacyAccount?(): Promise<TAccount | null>;
+    /** Mirror the primary account into the single-credential store; `null` clears it. */
+    mirrorPrimary?(credentials: TCredentials | null): Promise<void>;
+    /**
+     * Add the provider's own display facts (project id, key name, region …) to
+     * the shared summary the core already filled in.
+     */
+    extendSummary?(account: TAccount, base: PoolAccountSummaryDto, now: number): TSummary;
+    /** Message raised when the pool holds no account at all. */
+    emptyMessage?: string;
+    /** Message raised when every account is cooling down or unusable. */
+    allUnavailableMessage?(count: number, waitMinutes: number): string;
+    /** Accounts this pool accepts; defaults to {@link DEFAULT_MAX_POOL_ACCOUNTS}. */
+    maxAccounts?: number;
+    /** Test seam; production builds the platform backend from the paths above. */
+    backend?: CredentialStore<PoolData<TAccount>>;
+}
+/** Stable keychain account name for one pool file, isolated per `DSH_HOME`. */
+/** Accept a stored rotation strategy, or fall back to sequential. */
+export declare function normalizeRotationStrategy(value: unknown): AccountRotationStrategy;
+export declare function poolCredentialAccount(filePath: string): string;
+/**
+ * The shared multi-account pool: encrypted storage, eligibility filtering,
+ * rotation strategy, 429 cooldowns and per-account auth failures.
+ *
+ * @typeParam TCredentials - the provider's stored credential shape.
+ * @typeParam TAccount - the provider's pooled account record.
+ * @typeParam TSummary - the public DTO the settings card renders.
+ */
+export declare class AccountPoolCore<TCredentials, TAccount extends PoolAccountShape<TCredentials>, TSummary extends PoolAccountSummaryDto> {
+    protected readonly hooks: AccountPoolHooks<TCredentials, TAccount, TSummary>;
+    private readonly filePath;
+    private readonly backend;
+    constructor(hooks: AccountPoolHooks<TCredentials, TAccount, TSummary>);
+    /** Human description of where this pool's credentials live. */
+    path(): string;
+    private serialize;
+    private saveVerified;
+    /**
+     * Read the pool.
+     *
+     * A pool that holds no account yet projects the pre-pool single credential as
+     * the primary account. That projection stays side-effect free on purpose:
+     * every caller that changes the pool writes it back immediately afterwards,
+     * so persisting it here only bought an extra encrypted round trip and made a
+     * getter write to disk.
+     */
+    read(): Promise<PoolData<TAccount>>;
+    write(data: PoolData<TAccount>): Promise<void>;
+    /** Public summaries, with cooldowns that already expired reported as absent. */
+    listAccounts(): Promise<TSummary[]>;
+    protected summarize(account: TAccount, now: number): TSummary;
+    /** Add or re-authorize one account; an existing dedupe key updates in place. */
+    addAccount(credentials: TCredentials, alias?: string): Promise<TAccount>;
+    setPrimary(accountId: string): Promise<void>;
+    /**
+     * Persist a refreshed credential for one account.
+     *
+     * Used by a forced refresh (a 401 mid-request) rather than by the rotating
+     * getEffectiveAccount path, which already writes back what it refreshed.
+     */
+    updateAccountCredentials(accountId: string, credentials: TCredentials): Promise<TAccount | undefined>;
+    setAlias(accountId: string, alias: string): Promise<void>;
+    deleteAccount(accountId: string): Promise<void>;
+    setStrategy(strategy: AccountRotationStrategy): Promise<void>;
+    /** Cool one account down after an upstream 429. */
+    markCooldown(accountId: string, durationMs: number, reason: string): Promise<void>;
+    clearCooldown(accountId: string): Promise<void>;
+    /**
+     * Record that an account can no longer authenticate.
+     *
+     * The account stays in the pool: signing in again is what restores it, and a
+     * deleted account would take the user's alias and ordering with it.
+     */
+    markAuthFailed(accountId: string, reason: string, status?: AccountAuthStatus): Promise<void>;
+    clearAuthFailed(accountId: string): Promise<void>;
+    /** Whether an account may serve a request right now. */
+    protected isEligible(account: TAccount, now: number, triedAccountIds?: ReadonlySet<string>): boolean;
+    hasAnotherAvailableAccount(triedAccountIds: ReadonlySet<string>): Promise<boolean>;
+    /**
+     * Pick the account for the next request, refreshing its credential when it is
+     * about to expire.
+     *
+     * @param excludeIds - accounts already tried for this request, so a retry
+     *   lands on a different account.
+     * @param fetchFn - fetch used by the provider's token refresh.
+     * @throws LlmError with `RATE_LIMIT` when every account is cooling down.
+     */
+    getEffectiveAccount(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch): Promise<{
+        account: TAccount;
+        credentials: TCredentials;
+    }>;
+}
+//# sourceMappingURL=account-pool.d.ts.map

package/lib/types/host/common/account-pool.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"account-pool.d.ts","sourceRoot":"","sources":["../../../../src/host/common/account-pool.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAIxD,OAAO,KAAK,EACV,iBAAiB,EACjB,uBAAuB,EACvB,qBAAqB,EACtB,MAAM,wCAAwC,CAAA;AAE/C,wEAAwE;AACxE,eAAO,MAAM,sBAAsB,QAAS,CAAA;AAK5C,+EAA+E;AAC/E,eAAO,MAAM,yBAAyB,KAAK,CAAA;AAE3C;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB,CAAC,YAAY;IAC5C,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,SAAS,CAAC,EAAE,OAAO,CAAA;IACnB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,cAAc,CAAC,EAAE,MAAM,CAAA;IACvB,UAAU,CAAC,EAAE,iBAAiB,CAAA;IAC9B,gBAAgB,CAAC,EAAE,MAAM,CAAA;CAC1B;AAED,4EAA4E;AAC5E,MAAM,WAAW,QAAQ,CAAC,QAAQ;IAChC,OAAO,EAAE,CAAC,CAAA;IACV,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,gBAAgB,EAAE,uBAAuB,CAAA;IACzC,QAAQ,EAAE,QAAQ,EAAE,CAAA;CACrB;AAED,8EAA8E;AAC9E,MAAM,WAAW,gBAAgB,CAAC,YAAY,EAAE,QAAQ;IACtD,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,WAAW,EAAE,YAAY,CAAA;IACzB,OAAO,EAAE,MAAM,CAAA;IACf,SAAS,EAAE,OAAO,CAAA;IAClB,yEAAyE;IACzE,QAAQ,CAAC,EAAE,QAAQ,CAAA;CACpB;AAED;;;;;GAKG;AACH,MAAM,WAAW,gBAAgB,CAC/B,YAAY,EACZ,QAAQ,SAAS,gBAAgB,CAAC,YAAY,CAAC,EAC/C,QAAQ,SAAS,qBAAqB;IAEtC,gEAAgE;IAChE,UAAU,EAAE,MAAM,CAAA;IAClB,wDAAwD;IACxD,WAAW,EAAE,MAAM,CAAA;IACnB,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAA;IAChB,iEAAiE;IACjE,eAAe,EAAE,MAAM,CAAA;IACvB,sDAAsD;IACtD,aAAa,CAAC,KAAK,EAAE,OAAO,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAA;IACjD,gFAAgF;IAChF,aAAa,CAAC,KAAK,EAAE,gBAAgB,CAAC,YAAY,EAAE,QAAQ,CAAC,GAAG,QAAQ,CAAA;IACxE,8EAA8E;IAC9E,SAAS,CAAC,CAAC,WAAW,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAAA;IACzD,oFAAoF;IACpF,YAAY,CAAC,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAA;IACjE,iFAAiF;IACjF,SAAS,CAAC,CAAC,WAAW,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAAA;IACzD,wEAAwE;IACxE,YAAY,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;IAC9D,iFAAiF;IACjF,OAAO,CAAC,CAAC,WAAW,EAAE,YAAY,EAAE,OAAO,EAAE,OAAO,KAAK,GAAG,OAAO,CAAC,YAAY,CAAC,CAAA;IACjF;;;;;;;OAOG;IACH,oBAAoB,CAAC,CAAC,KAAK,EAAE,OAAO,GAAG,iBAAiB,GAAG,SAAS,CAAA;IACpE;;;OAGG;IACH,kBAAkB,CAAC,CAAC,WAAW,EAAE,YAAY,GAAG,MAAM,GAAG,SAAS,CAAA;IAClE,4EAA4E;IAC5E,aAAa,CAAC,IAAI,OAAO,CAAC,QAAQ,GAAG,IAAI,CAAC,CAAA;IAC1C,qFAAqF;IACrF,aAAa,CAAC,CAAC,WAAW,EAAE,YAAY,GAAG,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAA;IAC/D;;;OAGG;IACH,aAAa,CAAC,CAAC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ,CAAA;IACrF,4DAA4D;IAC5D,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,qEAAqE;IACrE,qBAAqB,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,GAAG,MAAM,CAAA;IAClE,iFAAiF;IACjF,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,8EAA8E;IAC9E,OAAO,CAAC,EAAE,eAAe,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAA;CAC9C;AAED,+EAA+E;AAC/E,qEAAqE;AACrE,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAEjF;AAED,wBAAgB,qBAAqB,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAE9D;AAMD;;;;;;;GAOG;AACH,qBAAa,eAAe,CAC1B,YAAY,EACZ,QAAQ,SAAS,gBAAgB,CAAC,YAAY,CAAC,EAC/C,QAAQ,SAAS,qBAAqB;IAEtC,SAAS,CAAC,QAAQ,CAAC,KAAK,EAAE,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC,CAAA;IAC5E,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAQ;IACjC,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAqC;gBAEjD,KAAK,EAAE,gBAAgB,CAAC,YAAY,EAAE,QAAQ,EAAE,QAAQ,CAAC;IAMrE,+DAA+D;IAC/D,IAAI,IAAI,MAAM;IAMd,OAAO,CAAC,SAAS;YAWH,YAAY;IAS1B;;;;;;;;OAQG;IACH,IAAI,IAAI,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAmCnC,KAAK,CAAC,IAAI,EAAE,QAAQ,CAAC,QAAQ,CAAC,GAAG,OAAO,CAAC,IAAI,CAAC;IAI9C,gFAAgF;IAC1E,YAAY,IAAI,OAAO,CAAC,QAAQ,EAAE,CAAC;IASzC,SAAS,CAAC,SAAS,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,GAAG,QAAQ;IAoB7D,gFAAgF;IAC1E,UAAU,CAAC,WAAW,EAAE,YAAY,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC;IAyCxE,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAalD;;;;;OAKG;IACG,wBAAwB,CAAC,SAAS,EAAE,MAAM,EAAE,WAAW,EAAE,YAAY,GAAG,OAAO,CAAC,QAAQ,GAAG,SAAS,CAAC;IAYrG,QAAQ,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IASzD,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAgB/C,WAAW,CAAC,QAAQ,EAAE,uBAAuB,GAAG,OAAO,CAAC,IAAI,CAAC;IAMnE,mDAAmD;IAC7C,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUlF,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUrD;;;;;OAKG;IACG,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAE,iBAA6B,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvG,eAAe,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAUvD,wDAAwD;IACxD,SAAS,CAAC,UAAU,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,MAAM,EAAE,eAAe,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO;IAQ9F,0BAA0B,CAAC,eAAe,EAAE,WAAW,CAAC,MAAM,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC;IAMxF;;;;;;;;OAQG;IACG,mBAAmB,CACvB,UAAU,CAAC,EAAE,WAAW,CAAC,MAAM,CAAC,EAChC,OAAO,GAAE,OAAO,KAAa,GAC5B,OAAO,CAAC;QAAE,OAAO,EAAE,QAAQ,CAAC;QAAC,WAAW,EAAE,YAAY,CAAA;KAAE,CAAC;CAoF7D"}

package/lib/types/host/common/home.d.ts

@@ -0,0 +1,8 @@
+/**
+ * The harness home directory every plugin store lives under.
+ *
+ * Shared by every provider line and by the pool core, so a single env override
+ * (`DSH_HOME`) redirects all of them at once.
+ */
+export declare function dshHomeDir(): string;
+//# sourceMappingURL=home.d.ts.map

package/lib/types/host/common/home.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"home.d.ts","sourceRoot":"","sources":["../../../../src/host/common/home.ts"],"names":[],"mappings":"AAGA;;;;;GAKG;AACH,wBAAgB,UAAU,IAAI,MAAM,CAEnC"}

package/lib/types/host/kimi-code/account-pool.d.ts

@@ -0,0 +1,48 @@
+import { AccountPoolCore, type PoolAccountShape, type PoolData } from '../common/account-pool.ts';
+import type { CredentialStore } from '../token-store.ts';
+import { FileCredentialStore, type KimiCodeCredentials } from './token-store.ts';
+import type { KimiCodeAccountSummaryDto, KimiCodeRegion } from '../../shared/kimi-code-contracts.ts';
+/** One pooled Kimi Code account: the token pair plus the facts the card renders. */
+export interface KimiCodePoolAccount extends PoolAccountShape<KimiCodeCredentials> {
+    email?: string;
+    nickname?: string;
+    userId?: string;
+    planName?: string;
+    region?: KimiCodeRegion;
+}
+/** Encrypted pool file this line owns; the pre-pool credential file stays the mirror. */
+export declare function kimiCodePoolPath(): string;
+/** Validate and normalize one whole pool document. */
+export declare function parseKimiCodePoolData(value: unknown): PoolData<KimiCodePoolAccount>;
+export interface KimiCodeAccountPoolOptions {
+    /** Pre-pool credential file the pool mirrors its primary account into. */
+    store?: FileCredentialStore;
+    /** Test seam; production builds the platform backend from the pool path. */
+    backend?: CredentialStore<PoolData<KimiCodePoolAccount>>;
+    /** Accounts this pool accepts; defaults to the core's limit. */
+    maxAccounts?: number;
+}
+/**
+ * Kimi Code's account pool.
+ *
+ * The credential is an OAuth pair whose refresh token rotates, so the pool owns
+ * both the refresh and the write-back: two accounts must never be refreshed
+ * through the same single-credential file.
+ */
+export declare class KimiCodeAccountPool extends AccountPoolCore<KimiCodeCredentials, KimiCodePoolAccount, KimiCodeAccountSummaryDto> {
+    private readonly store;
+    constructor(options?: KimiCodeAccountPoolOptions);
+    /**
+     * Pick the account for the next request.
+     *
+     * The returned credential carries its own region, OAuth host and base URL, so
+     * the caller must use those rather than the process-wide defaults.
+     */
+    getEffectiveCredential(excludeIds?: ReadonlySet<string>, fetchFn?: typeof fetch): Promise<{
+        account: KimiCodePoolAccount;
+        credentials: KimiCodeCredentials;
+    }>;
+    /** The pre-pool credential file this pool mirrors its primary account into. */
+    mirrorStore(): FileCredentialStore;
+}
+//# sourceMappingURL=account-pool.d.ts.map