@eddyskywalker/dsh-chatgpt-subscription 0.4.0 → 0.6.0

package/lib/types/host/workbuddy/client.d.ts

@@ -0,0 +1,90 @@
+import type { WorkBuddyAccount, WorkBuddyAccountQuota, WorkBuddyMeter } from '../../shared/workbuddy-contracts.ts';
+import { PROVIDER_ID, PROVIDER_NAME } from './types.ts';
+import { FileCredentialStore, type WorkBuddyCredentials } from './token-store.ts';
+import type { WorkBuddyModelEntry } from './model-catalog.ts';
+export interface WorkBuddyRequestOptions {
+    fetchFn?: typeof fetch;
+    signal?: AbortSignal;
+}
+/**
+ * Attribution and identity headers for one backend request.
+ *
+ * The gateway gates on this header set: the international deployment answers
+ * 401 without the CLI user agent and matching `Origin`/`Referer`, and both
+ * deployments read the account identity headers rather than deriving it from
+ * the bearer token alone.
+ */
+export declare function workBuddyHeaders(credentials: Pick<WorkBuddyCredentials, 'accessToken' | 'domain' | 'uid' | 'enterpriseId' | 'backend'>, extra?: Record<string, string>): Record<string, string>;
+/**
+ * Refresh an access token against the endpoint the official IDE uses.
+ *
+ * The response carries a whole new `auth` block rather than just a token, so it
+ * is merged over the current one: fields the endpoint omits (the domain, the
+ * refresh lifetime) must survive, or the next refresh would lose its target.
+ */
+export declare function refreshCredentials(credentials: WorkBuddyCredentials, options?: WorkBuddyRequestOptions): Promise<WorkBuddyCredentials>;
+/** Public account facts for the settings card. */
+export declare function accountFromCredentials(credentials: WorkBuddyCredentials): WorkBuddyAccount;
+/**
+ * Parse one `/v3/config` payload's model list.
+ *
+ * Each entry carries the facts this route needs directly, so nothing is
+ * inferred from the model's name. Image-generation tools (`tags` naming
+ * `text-to-image`/`image-to-image`) are skipped: they are not chat models and
+ * carry no context window.
+ */
+export declare function parseConfigModels(payload: unknown, region: WorkBuddyCredentials['region']): WorkBuddyModelEntry[];
+export declare function getCachedCatalog(): WorkBuddyModelEntry[];
+export declare function clearCachedCatalog(): void;
+/**
+ * Fetch the live catalog for one account.
+ *
+ * The gateway is the authority on capabilities, so a successful read replaces
+ * the shipped table entirely; a failure returns an empty list and the caller
+ * falls back, which keeps a first run usable before sign-in.
+ */
+export declare function fetchConfigCatalog(credentials: WorkBuddyCredentials, options?: WorkBuddyRequestOptions): Promise<WorkBuddyModelEntry[]>;
+/** Cached catalog with a TTL; a failed refresh keeps the previous snapshot. */
+export declare function loadConfigCatalog(credentials: WorkBuddyCredentials, options?: WorkBuddyRequestOptions & {
+    force?: boolean;
+}): Promise<WorkBuddyModelEntry[]>;
+/** Parse one `Capacity*` account record into the public quota shape. */
+export interface ParsedBilling {
+    packageName: string | null;
+    totalCredits: number | null;
+    remainingCredits: number | null;
+    cycleUsedCredits: number | null;
+    cycleCredits: number | null;
+    cycleStartsAt: number | null;
+    cycleEndsAt: number | null;
+}
+/**
+ * Parse the billing payload's account list.
+ *
+ * The response nests as `data.Response.Data.Accounts[]`; each entry describes
+ * one purchased package with its own capacity counters. The first entry is the
+ * active subscription, and the totals are summed across all of them because a
+ * user can hold several packages at once.
+ */
+export declare function parseBilling(payload: unknown): ParsedBilling;
+/**
+ * Parse a cycle boundary.
+ *
+ * The service sends these as local-time strings without a zone
+ * (`2026-09-01 00:00:00`), which `Date.parse` reads as local time — the same
+ * reading the IDE's own panel uses, so the card agrees with it.
+ */
+export declare function parseCycleTime(value: unknown): number | null;
+/** Turn a parsed billing snapshot into the meters the card renders. */
+export declare function billingMeters(billing: ParsedBilling): WorkBuddyMeter[];
+export declare function getCachedQuota(): WorkBuddyAccountQuota | undefined;
+export declare function clearCachedQuota(): void;
+/**
+ * Read the account's credit allowance.
+ *
+ * Only one billing route exists here, so a failure is a real failure rather
+ * than a partially-answered snapshot: the caller decides whether to surface it.
+ */
+export declare function fetchAccountQuota(store?: FileCredentialStore, fetchFn?: typeof fetch, force?: boolean, accountId?: string | null, hiddenAccountIds?: readonly string[]): Promise<WorkBuddyAccountQuota>;
+export { PROVIDER_ID, PROVIDER_NAME };
+//# sourceMappingURL=client.d.ts.map

package/lib/types/host/workbuddy/client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/client.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EACV,gBAAgB,EAChB,qBAAqB,EACrB,cAAc,EACf,MAAM,qCAAqC,CAAA;AAC5C,OAAO,EAgBL,WAAW,EACX,aAAa,EAKd,MAAM,YAAY,CAAA;AACnB,OAAO,EAAE,mBAAmB,EAAsB,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACrG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAA;AAM7D,MAAM,WAAW,uBAAuB;IACtC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,MAAM,CAAC,EAAE,WAAW,CAAA;CACrB;AA6BD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAC9B,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,aAAa,GAAG,QAAQ,GAAG,KAAK,GAAG,cAAc,GAAG,SAAS,CAAC,EACtG,KAAK,GAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAM,GACjC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAmBxB;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,oBAAoB,CAAC,CAoD/B;AAED,kDAAkD;AAClD,wBAAgB,sBAAsB,CAAC,WAAW,EAAE,oBAAoB,GAAG,gBAAgB,CAiB1F;AAMD;;;;;;;GAOG;AACH,wBAAgB,iBAAiB,CAAC,OAAO,EAAE,OAAO,EAAE,MAAM,EAAE,oBAAoB,CAAC,QAAQ,CAAC,GAAG,mBAAmB,EAAE,CAgEjH;AAOD,wBAAgB,gBAAgB,IAAI,mBAAmB,EAAE,CAExD;AAED,wBAAgB,kBAAkB,IAAI,IAAI,CAIzC;AAED;;;;;;GAMG;AACH,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAA4B,GACpC,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAUhC;AAED,+EAA+E;AAC/E,wBAAsB,iBAAiB,CACrC,WAAW,EAAE,oBAAoB,EACjC,OAAO,GAAE,uBAAuB,GAAG;IAAE,KAAK,CAAC,EAAE,OAAO,CAAA;CAAO,GAC1D,OAAO,CAAC,mBAAmB,EAAE,CAAC,CAiChC;AAeD,wEAAwE;AACxE,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;IAC1B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAA;IAC/B,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,aAAa,EAAE,MAAM,GAAG,IAAI,CAAA;IAC5B,WAAW,EAAE,MAAM,GAAG,IAAI,CAAA;CAC3B;AAED;;;;;;;GAOG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,OAAO,GAAG,aAAa,CAwC5D;AAED;;;;;;GAMG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,GAAG,IAAI,CAQ5D;AAED,uEAAuE;AACvE,wBAAgB,aAAa,CAAC,OAAO,EAAE,aAAa,GAAG,cAAc,EAAE,CAmCtE;AAOD,wBAAgB,cAAc,IAAI,qBAAqB,GAAG,SAAS,CAElE;AAED,wBAAgB,gBAAgB,IAAI,IAAI,CAKvC;AAED;;;;;GAKG;AACH,wBAAsB,iBAAiB,CACrC,KAAK,sBAA4B,EACjC,OAAO,GAAE,OAAO,KAAa,EAC7B,KAAK,UAAQ,EACb,SAAS,GAAE,MAAM,GAAG,IAAW,EAC/B,gBAAgB,GAAE,SAAS,MAAM,EAAO,GACvC,OAAO,CAAC,qBAAqB,CAAC,CAmEhC;AAED,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,CAAA"}

package/lib/types/host/workbuddy/mapper.d.ts

@@ -0,0 +1,114 @@
+/**
+ * Wire mapping for the WorkBuddy / CodeBuddy subscription chat endpoint.
+ *
+ * The endpoint is OpenAI Chat Completions shaped, but with three measured
+ * deviations from the OpenAI default that this module exists to absorb:
+ *
+ * 1. **Stream only.** `stream: false` answers 400 `code 11101`. The request
+ *    builder therefore always sends `stream: true`, and there is no
+ *    non-streaming code path to keep in sync.
+ * 2. **A leading system message is mandatory on the international backend.**
+ *    A request whose first message is a user turn answers 400 `code 11128`
+ *    ("first message is not system prompt"). {@link buildChatRequest} injects
+ *    one when the caller supplied none, so a hand-built one-shot request cannot
+ *    trip this.
+ * 3. **Reasoning rides `delta.reasoning_content`,** not OpenAI's
+ *    `reasoning_summary`, and is emitted as its own DSH reasoning block.
+ */
+import { type ContentBlock, type GenerateOptions, type StreamChunk } from '@deepseek-ai/dsh-llm';
+import type { AttachmentStore } from '@deepseek-ai/dsh-attachment';
+/**
+ * The system prompt every request must open with.
+ *
+ * The international backend rejects a request whose first message is not a
+ * system turn, so this stands in when the caller supplies no prompt at all. It
+ * is deliberately neutral: it must not change model behaviour beyond satisfying
+ * the shape check.
+ */
+declare const IMPLICIT_SYSTEM_PROMPT = "You are a helpful assistant.";
+/** Attachment seam this route needs: verified bytes for one durable image. */
+export type AttachmentImageReader = Pick<AttachmentStore, 'readImage'>;
+/** One durable user image resolved for an in-flight request, or proven unreadable. */
+export type ResolvedRequestImage = {
+    readonly kind: 'inline';
+    readonly mediaType: string;
+    readonly data: string;
+} | {
+    readonly kind: 'unavailable';
+};
+/** Resolved images keyed by durable attachment id; consumed by one request build. */
+export type ResolvedRequestImages = ReadonlyMap<string, ResolvedRequestImage>;
+/**
+ * Base64 image payload one request may carry.
+ *
+ * The subscription proxies to several upstream vendors, so the bound has to
+ * hold for the strictest of them. 12 MB matches what this plugin's other
+ * routes allow and keeps the conversation text and tool schemas in the same
+ * body.
+ */
+export declare const MAX_REQUEST_IMAGE_BYTES: number;
+/**
+ * Replace the oldest inline images with a text placeholder once one request
+ * would carry more than {@link MAX_REQUEST_IMAGE_BYTES} of base64 image data.
+ * Durable history is untouched; only the request about to be sent changes.
+ */
+export declare function offloadOldestRequestImages(options: GenerateOptions): GenerateOptions;
+/**
+ * Read every durable `{ type: 'image', attachment }` block one request carries.
+ * An unreadable image resolves to `unavailable` rather than disappearing, so
+ * the model is told the picture is missing instead of answering about a blank.
+ */
+export declare function resolveRequestImages(options: GenerateOptions, attachments: AttachmentImageReader | undefined, signal?: AbortSignal): Promise<ResolvedRequestImages>;
+/** Drop the JSON-Schema keywords provider gateways reject or ignore. */
+export declare function stripMetaSchema(schema: unknown): Record<string, unknown>;
+/**
+ * Build one `/v2/chat/completions` body.
+ *
+ * Always `stream: true`: the endpoint rejects a non-streaming request outright
+ * (400 `code 11101`), so there is no second shape to produce.
+ */
+export declare function buildChatRequest(options: GenerateOptions, images?: ResolvedRequestImages): Record<string, unknown>;
+interface PendingToolCall {
+    blockIndex: number;
+    id: string;
+    name: string;
+    arguments: string;
+    started: boolean;
+}
+export interface WorkBuddyStreamState {
+    blocks: ContentBlock[];
+    current: {
+        index: number;
+        type: 'text' | 'reasoning';
+        text: string;
+    } | null;
+    /** wire tool index -> accumulating call. */
+    toolCalls: Map<number, PendingToolCall>;
+    hasContent: boolean;
+    hasToolCall: boolean;
+    finishReason: string | null;
+    /** The `[DONE]` sentinel arrived. */
+    done: boolean;
+    /** Terminal chunks were already emitted. */
+    finished: boolean;
+    inputTokens: number;
+    outputTokens: number;
+    cacheReadTokens: number;
+    reasoningTokens: number;
+    sawUsage: boolean;
+}
+export declare function createStreamState(): WorkBuddyStreamState;
+/** Feed one SSE line from `/v2/chat/completions`. */
+export declare function processStreamLine(line: string, state: WorkBuddyStreamState): StreamChunk[];
+/** Flush every open block, then emit usage and the terminal finish. */
+export declare function closeStream(state: WorkBuddyStreamState): StreamChunk[];
+/**
+ * A stream that ends without a terminal event is truncated, not complete.
+ *
+ * The endpoint always terminates with either `finish_reason` or `[DONE]`, so
+ * their absence means the connection dropped mid-answer and the partial text
+ * must not be presented as a finished reply.
+ */
+export declare function assertStreamComplete(state: WorkBuddyStreamState): void;
+export { IMPLICIT_SYSTEM_PROMPT };
+//# sourceMappingURL=mapper.d.ts.map

package/lib/types/host/workbuddy/mapper.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mapper.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/mapper.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,EAEL,KAAK,YAAY,EAEjB,KAAK,eAAe,EAEpB,KAAK,WAAW,EAEjB,MAAM,sBAAsB,CAAA;AAC7B,OAAO,KAAK,EAAE,eAAe,EAAsB,MAAM,6BAA6B,CAAA;AAwBtF;;;;;;;GAOG;AACH,QAAA,MAAM,sBAAsB,iCAAiC,CAAA;AAM7D,8EAA8E;AAC9E,MAAM,MAAM,qBAAqB,GAAG,IAAI,CAAC,eAAe,EAAE,WAAW,CAAC,CAAA;AAEtE,sFAAsF;AACtF,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CAAE,GAC9E;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAA;CAAE,CAAA;AAEpC,qFAAqF;AACrF,MAAM,MAAM,qBAAqB,GAAG,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAA;AAI7E;;;;;;;GAOG;AACH,eAAO,MAAM,uBAAuB,QAAmB,CAAA;AAuDvD;;;;GAIG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,eAAe,GAAG,eAAe,CA4BpF;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,eAAe,EACxB,WAAW,EAAE,qBAAqB,GAAG,SAAS,EAC9C,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,qBAAqB,CAAC,CAwBhC;AAyHD,wEAAwE;AACxE,wBAAgB,eAAe,CAAC,MAAM,EAAE,OAAO,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAKxE;AAoDD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,OAAO,EAAE,eAAe,EACxB,MAAM,GAAE,qBAA0C,GACjD,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CA4DzB;AAMD,UAAU,eAAe;IACvB,UAAU,EAAE,MAAM,CAAA;IAClB,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ,SAAS,EAAE,MAAM,CAAA;IACjB,OAAO,EAAE,OAAO,CAAA;CACjB;AAED,MAAM,WAAW,oBAAoB;IACnC,MAAM,EAAE,YAAY,EAAE,CAAA;IACtB,OAAO,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC3E,4CAA4C;IAC5C,SAAS,EAAE,GAAG,CAAC,MAAM,EAAE,eAAe,CAAC,CAAA;IACvC,UAAU,EAAE,OAAO,CAAA;IACnB,WAAW,EAAE,OAAO,CAAA;IACpB,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;IAC3B,qCAAqC;IACrC,IAAI,EAAE,OAAO,CAAA;IACb,4CAA4C;IAC5C,QAAQ,EAAE,OAAO,CAAA;IACjB,WAAW,EAAE,MAAM,CAAA;IACnB,YAAY,EAAE,MAAM,CAAA;IACpB,eAAe,EAAE,MAAM,CAAA;IACvB,eAAe,EAAE,MAAM,CAAA;IACvB,QAAQ,EAAE,OAAO,CAAA;CAClB;AAED,wBAAgB,iBAAiB,IAAI,oBAAoB,CAgBxD;AAwCD,qDAAqD;AACrD,wBAAgB,iBAAiB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,oBAAoB,GAAG,WAAW,EAAE,CA8E1F;AAsED,uEAAuE;AACvE,wBAAgB,WAAW,CAAC,KAAK,EAAE,oBAAoB,GAAG,WAAW,EAAE,CAOtE;AAED;;;;;;GAMG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,oBAAoB,GAAG,IAAI,CAItE;AAED,OAAO,EAAE,sBAAsB,EAAE,CAAA"}

package/lib/types/host/workbuddy/model-catalog.d.ts

@@ -0,0 +1,108 @@
+/**
+ * Model catalog for the WorkBuddy / CodeBuddy subscription.
+ *
+ * The subscription exposes no `/v1/models`-style listing on the chat host
+ * (that path answers 404), but the gateway does publish an **authoritative
+ * catalog** at `GET /v3/config`, which the official CLI reads at startup. That
+ * payload carries each model's real context window, output cap, image support,
+ * and the exact reasoning ladder it accepts — so this route prefers the live
+ * catalog and keeps the table below only as an offline fallback.
+ *
+ * The fallback is a verbatim transcription of a live `/v3/config` read, not
+ * hand-written guesses: an earlier revision of this file guessed context
+ * windows from vendor marketing and was wrong in both directions (`glm-5.3`
+ * and `kimi-k3` are 1M, not 200K/256K). Where the two regions disagree, the
+ * larger maximum is kept while the served default comes from whichever region
+ * reported one.
+ *
+ * `regions` is a routing fact, not a preference: asking a region for a model it
+ * does not serve answers 400 `code 11102`.
+ *
+ * A second `code 11102` source was measured and is deliberately NOT filtered
+ * out here: the gateway lists models the *current account* is not entitled to
+ * call (on a free plan, `glm-5.0`, `glm-4.7`, `glm-4.6`, `glm-4.6v`,
+ * `kimi-k2-thinking`, `hy4-preview-x` and `minimax-m2.5` all advertise a context
+ * window and then answer 11102). Those entries are kept because the gating is
+ * per-account, not per-model — a paid plan may serve them — and because the
+ * shipped default selection excludes them anyway. The adapter's failure message
+ * names this case so a user knows to pick another model rather than to retry.
+ *
+ * `reasoningEfforts` carries the ladder a model accepts, transcribed from the
+ * gateway's own declaration. `/v3/config` uses two shapes and they were once
+ * conflated, in opposite directions: a lone `{ effort: 'high' }` (no
+ * `supportedEfforts`) first became a one-entry ladder, which rejected a
+ * caller's explicit `low`; widening it to every level this route can name then
+ * advertised `minimal`/`xhigh` on a model that has three. Such a model accepts
+ * exactly `low`/`high`/`max` (measured on `deepseek-v4.1-flash`), the same
+ * three the gateway declares explicitly for `glm-5.3-flash` and
+ * `kimi-k2.8-preview`, and routes any other value into the nearest of them.
+ */
+import type { WorkBuddyRegion } from '../../shared/workbuddy-contracts.ts';
+export interface WorkBuddyModelEntry {
+    id: string;
+    name: string;
+    /**
+     * Context length the gateway serves **by default** for this model.
+     *
+     * This route sends no explicit context-length parameter, so this is the
+     * figure DSH's compaction and overflow decisions must use. It is not always
+     * the model's maximum: the gateway reports both (for example
+     * `deepseek-v4.1-flash` serves 300000 by default and allows 1000000).
+     */
+    contextWindow: number;
+    /** Largest context length the model accepts when one is requested. */
+    maxContextWindow: number;
+    /** Output cap requested when the caller omits one. */
+    maxTokens: number;
+    /** Regions whose backend serves this id. */
+    regions: readonly WorkBuddyRegion[];
+    /** Whether the model accepts image input. */
+    supportsImage: boolean;
+    /** Reasoning ladder the model accepts; empty for a non-reasoning model. */
+    reasoningEfforts: readonly string[];
+    /** Level this route selects when the caller names none. */
+    defaultReasoningEffort: string | null;
+    /** Whether the model can be asked to skip thinking entirely. */
+    canDisableThinking: boolean;
+    /** One-line note shown beside the model in the settings card. */
+    description: string;
+}
+/**
+ * Offline fallback catalog, transcribed from a live `/v3/config` read.
+ *
+ * Used when the gateway cannot be reached (first run before sign-in, or a
+ * network failure); a reachable gateway always wins.
+ */
+export declare const FALLBACK_MODELS: readonly WorkBuddyModelEntry[];
+/**
+ * Models the picker offers on a fresh install.
+ *
+ * Deliberately short: the catalog holds every id the subscription serves, and
+ * the picker is far more usable with the handful of general-purpose models. The
+ * card lets a user add the rest, and a first-run default expands to everything
+ * the account's region can actually call.
+ */
+export declare const DEFAULT_VISIBLE_MODEL_IDS: readonly string[];
+/** Every id the fallback knows, in declaration order. */
+export declare const WORKBUDDY_MODEL_IDS: readonly string[];
+/**
+ * Resolve one entry from a catalog.
+ *
+ * An unknown id resolves to a synthetic text-only entry rather than the first
+ * catalog row: reporting a real model's capabilities for an id it does not
+ * describe would mis-declare image support and route a request to a 400.
+ */
+export declare function resolveWorkBuddyModel(id: string, catalog?: readonly WorkBuddyModelEntry[]): WorkBuddyModelEntry;
+/** Whether one catalog knows this exact id. */
+export declare function isWorkBuddyModelId(id: unknown, catalog?: readonly WorkBuddyModelEntry[]): id is string;
+/** Models an account in `region` can actually call, in catalog order. */
+export declare function modelsForRegion(region: WorkBuddyRegion, catalog?: readonly WorkBuddyModelEntry[]): WorkBuddyModelEntry[];
+/** Whether one model accepts image input. */
+export declare function workBuddyModelSupportsImage(id: string, catalog?: readonly WorkBuddyModelEntry[]): boolean;
+/** Reasoning ladder one model accepts. */
+export declare function workBuddyReasoningEfforts(id: string, catalog?: readonly WorkBuddyModelEntry[]): readonly string[];
+/** Output cap requested when the caller omits one. */
+export declare function maxOutputTokensFor(id: string, catalog?: readonly WorkBuddyModelEntry[]): number;
+/** Context window assumed when no override is saved. */
+export declare function defaultContextWindowFor(id: string, catalog?: readonly WorkBuddyModelEntry[]): number;
+//# sourceMappingURL=model-catalog.d.ts.map

package/lib/types/host/workbuddy/model-catalog.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"model-catalog.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/model-catalog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAsCG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAI1E,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,IAAI,EAAE,MAAM,CAAA;IACZ;;;;;;;OAOG;IACH,aAAa,EAAE,MAAM,CAAA;IACrB,sEAAsE;IACtE,gBAAgB,EAAE,MAAM,CAAA;IACxB,sDAAsD;IACtD,SAAS,EAAE,MAAM,CAAA;IACjB,4CAA4C;IAC5C,OAAO,EAAE,SAAS,eAAe,EAAE,CAAA;IACnC,6CAA6C;IAC7C,aAAa,EAAE,OAAO,CAAA;IACtB,2EAA2E;IAC3E,gBAAgB,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,2DAA2D;IAC3D,sBAAsB,EAAE,MAAM,GAAG,IAAI,CAAA;IACrC,gEAAgE;IAChE,kBAAkB,EAAE,OAAO,CAAA;IAC3B,iEAAiE;IACjE,WAAW,EAAE,MAAM,CAAA;CACpB;AAED;;;;;GAKG;AACH,eAAO,MAAM,eAAe,EAAE,SAAS,mBAAmB,EAgjBzD,CAAA;AAED;;;;;;;GAOG;AACH,eAAO,MAAM,yBAAyB,EAAE,SAAS,MAAM,EAKtD,CAAA;AAED,yDAAyD;AACzD,eAAO,MAAM,mBAAmB,EAAE,SAAS,MAAM,EAA6C,CAAA;AAE9F;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CACnC,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,SAAS,mBAAmB,EAAoB,GACxD,mBAAmB,CA0BrB;AAED,+CAA+C;AAC/C,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,OAAO,EACX,OAAO,GAAE,SAAS,mBAAmB,EAAoB,GACxD,EAAE,IAAI,MAAM,CAEd;AAED,yEAAyE;AACzE,wBAAgB,eAAe,CAC7B,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,SAAS,mBAAmB,EAAoB,GACxD,mBAAmB,EAAE,CAEvB;AAED,6CAA6C;AAC7C,wBAAgB,2BAA2B,CACzC,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,SAAS,mBAAmB,EAAoB,GACxD,OAAO,CAET;AAED,0CAA0C;AAC1C,wBAAgB,yBAAyB,CACvC,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,SAAS,mBAAmB,EAAoB,GACxD,SAAS,MAAM,EAAE,CAEnB;AAED,sDAAsD;AACtD,wBAAgB,kBAAkB,CAChC,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,SAAS,mBAAmB,EAAoB,GACxD,MAAM,CAER;AAED,wDAAwD;AACxD,wBAAgB,uBAAuB,CACrC,EAAE,EAAE,MAAM,EACV,OAAO,GAAE,SAAS,mBAAmB,EAAoB,GACxD,MAAM,CAER"}

package/lib/types/host/workbuddy/oauth.d.ts

@@ -0,0 +1,38 @@
+import { FileCredentialStore, type WorkBuddyCredentials } from './token-store.ts';
+import type { WorkBuddyRegion } from '../../shared/workbuddy-contracts.ts';
+export type WorkBuddyLoginStatus = 'idle' | 'pending' | 'complete' | 'error';
+export interface WorkBuddyLoginFlowState {
+    status: WorkBuddyLoginStatus;
+    region?: WorkBuddyRegion;
+    authUrl?: string;
+    progress?: string;
+    accountId?: string;
+    startedAt?: number;
+    completedAt?: number;
+    error?: string;
+}
+export declare function getWebLoginStatus(): WorkBuddyLoginFlowState;
+export declare function resetWebLogin(): void;
+export interface WorkBuddyLoginAttempt {
+    state: string;
+    authUrl: string;
+    region: WorkBuddyRegion;
+    domain: string;
+}
+export declare function requestLoginState(region: WorkBuddyRegion, fetchFn?: typeof fetch, signal?: AbortSignal): Promise<WorkBuddyLoginAttempt>;
+/** Parse the successful token-poll shape while accepting the two observed wrappers. */
+export declare function parseLoginCredential(payload: unknown, attempt: WorkBuddyLoginAttempt): WorkBuddyCredentials | null;
+export declare function pollLogin(attempt: WorkBuddyLoginAttempt, fetchFn?: typeof fetch, signal?: AbortSignal): Promise<WorkBuddyCredentials | null>;
+/** Where a completed sign-in is written; the default is this line's own store. */
+export interface WorkBuddyLoginOptions {
+    /**
+     * Persist the completed credential.
+     *
+     * The account pool owns routing, so it is what a completed sign-in must reach;
+     * the default writes to the credential store alone, which is what a caller
+     * running without a pool needs.
+     */
+    onSave?: (credentials: WorkBuddyCredentials) => Promise<unknown>;
+}
+export declare function beginWebLogin(store: FileCredentialStore, region: WorkBuddyRegion, fetchFn?: typeof fetch, options?: WorkBuddyLoginOptions): Promise<WorkBuddyLoginFlowState>;
+//# sourceMappingURL=oauth.d.ts.map

package/lib/types/host/workbuddy/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/oauth.ts"],"names":[],"mappings":"AAiBA,OAAO,EAAE,mBAAmB,EAAE,KAAK,oBAAoB,EAAE,MAAM,kBAAkB,CAAA;AACjF,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAE1E,MAAM,MAAM,oBAAoB,GAAG,MAAM,GAAG,SAAS,GAAG,UAAU,GAAG,OAAO,CAAA;AAE5E,MAAM,WAAW,uBAAuB;IACtC,MAAM,EAAE,oBAAoB,CAAA;IAC5B,MAAM,CAAC,EAAE,eAAe,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,KAAK,CAAC,EAAE,MAAM,CAAA;CACf;AAKD,wBAAgB,iBAAiB,IAAI,uBAAuB,CAE3D;AAED,wBAAgB,aAAa,IAAI,IAAI,CAIpC;AA0CD,MAAM,WAAW,qBAAqB;IACpC,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,MAAM,CAAA;IACf,MAAM,EAAE,eAAe,CAAA;IACvB,MAAM,EAAE,MAAM,CAAA;CACf;AAED,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,qBAAqB,CAAC,CAwBhC;AAED,uFAAuF;AACvF,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,EAAE,OAAO,EAAE,qBAAqB,GAAG,oBAAoB,GAAG,IAAI,CAoClH;AAED,wBAAsB,SAAS,CAC7B,OAAO,EAAE,qBAAqB,EAC9B,OAAO,GAAE,OAAO,KAAa,EAC7B,MAAM,CAAC,EAAE,WAAW,GACnB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CActC;AAED,kFAAkF;AAClF,MAAM,WAAW,qBAAqB;IACpC;;;;;;OAMG;IACH,MAAM,CAAC,EAAE,CAAC,WAAW,EAAE,oBAAoB,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;CACjE;AAED,wBAAsB,aAAa,CACjC,KAAK,EAAE,mBAAmB,EAC1B,MAAM,EAAE,eAAe,EACvB,OAAO,GAAE,OAAO,KAAa,EAC7B,OAAO,GAAE,qBAA0B,GAClC,OAAO,CAAC,uBAAuB,CAAC,CAmClC"}

package/lib/types/host/workbuddy/routes.d.ts

@@ -0,0 +1,33 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { DEFAULT_CONTEXT_WINDOW, PROVIDER_ID, PROVIDER_NAME } from './types.ts';
+import { FileCredentialStore, FileModelSettingsStore, type WorkBuddyPreferenceStore } from './token-store.ts';
+import { getCachedQuota } from './client.ts';
+import { type WorkBuddyModelEntry } from './model-catalog.ts';
+import type { WorkBuddyModelOption, WorkBuddyWebStatus } from '../../shared/workbuddy-contracts.ts';
+import type { WorkBuddyAccountPool } from './account-pool.ts';
+/**
+ * The selection the card should show.
+ *
+ * A stored list that still equals the shipped default has never been edited, so
+ * it cannot know about models the catalog has since added; treating it as
+ * "everything this account can call" keeps a first run from hiding models
+ * behind an unedited default. Any explicit edit is honoured exactly.
+ */
+export declare function resolveEnabledModelIds(stored: readonly string[], available: readonly string[], enabled?: boolean): string[];
+/** Build the model options the settings card renders, in catalog order. */
+export declare function buildModelOptions(catalog: readonly WorkBuddyModelEntry[], available: readonly string[], enabledModelIds: readonly string[], overrides: Record<string, number>): WorkBuddyModelOption[];
+export interface WorkBuddyStatusOptions {
+    fetchFn?: typeof fetch;
+    /** Whether this plugin currently owns the provider route; re-read on every status. */
+    serving?: boolean | (() => boolean);
+    /** Diagnostic when another plugin owns the provider route; re-read on every status. */
+    conflict?: string | null | (() => string | null);
+    /** Multi-account pool this line schedules through; absent keeps the single-account card. */
+    accountPool?: WorkBuddyAccountPool;
+}
+/** Everything the settings card renders: account, quota, and the model catalog. */
+export declare function getWorkBuddyWebStatus(store: FileCredentialStore, modelSettings: FileModelSettingsStore, preferences?: WorkBuddyPreferenceStore, options?: WorkBuddyStatusOptions): Promise<WorkBuddyWebStatus>;
+/** Register the WorkBuddy settings routes under `/workbuddy/api`. */
+export declare function registerWorkBuddyRoutes(ctx: Context, store: FileCredentialStore, modelSettings: FileModelSettingsStore, preferences?: WorkBuddyPreferenceStore, options?: WorkBuddyStatusOptions): () => void;
+export { PROVIDER_ID, PROVIDER_NAME, DEFAULT_CONTEXT_WINDOW, getCachedQuota, type WorkBuddyModelOption, type WorkBuddyWebStatus, };
+//# sourceMappingURL=routes.d.ts.map

package/lib/types/host/workbuddy/routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"routes.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/routes.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAA;AAElD,OAAO,EAGL,sBAAsB,EACtB,WAAW,EACX,aAAa,EAEd,MAAM,YAAY,CAAA;AACnB,OAAO,EACL,mBAAmB,EACnB,sBAAsB,EAEtB,KAAK,wBAAwB,EAC9B,MAAM,kBAAkB,CAAA;AACzB,OAAO,EAKL,cAAc,EAIf,MAAM,aAAa,CAAA;AACpB,OAAO,EASL,KAAK,mBAAmB,EACzB,MAAM,oBAAoB,CAAA;AAC3B,OAAO,KAAK,EAEV,oBAAoB,EACpB,kBAAkB,EACnB,MAAM,qCAAqC,CAAA;AAG5C,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,mBAAmB,CAAA;AAyD7D;;;;;;;GAOG;AACH,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,SAAS,MAAM,EAAE,EACzB,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,OAAO,UAAO,GACb,MAAM,EAAE,CASV;AAED,2EAA2E;AAC3E,wBAAgB,iBAAiB,CAC/B,OAAO,EAAE,SAAS,mBAAmB,EAAE,EACvC,SAAS,EAAE,SAAS,MAAM,EAAE,EAC5B,eAAe,EAAE,SAAS,MAAM,EAAE,EAClC,SAAS,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAChC,oBAAoB,EAAE,CAqBxB;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,KAAK,CAAA;IACtB,sFAAsF;IACtF,OAAO,CAAC,EAAE,OAAO,GAAG,CAAC,MAAM,OAAO,CAAC,CAAA;IACnC,uFAAuF;IACvF,QAAQ,CAAC,EAAE,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAA;IAChD,4FAA4F;IAC5F,WAAW,CAAC,EAAE,oBAAoB,CAAA;CACnC;AAMD,mFAAmF;AACnF,wBAAsB,qBAAqB,CACzC,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,wBAAwB,EACtC,OAAO,GAAE,sBAA2B,GACnC,OAAO,CAAC,kBAAkB,CAAC,CAqD7B;AAED,qEAAqE;AACrE,wBAAgB,uBAAuB,CACrC,GAAG,EAAE,OAAO,EACZ,KAAK,EAAE,mBAAmB,EAC1B,aAAa,EAAE,sBAAsB,EACrC,WAAW,CAAC,EAAE,wBAAwB,EACtC,OAAO,GAAE,sBAA2B,GACnC,MAAM,IAAI,CAiVZ;AAED,OAAO,EACL,WAAW,EACX,aAAa,EACb,sBAAsB,EACtB,cAAc,EACd,KAAK,oBAAoB,EACzB,KAAK,kBAAkB,GACxB,CAAA"}

package/lib/types/host/workbuddy/token-store.d.ts

@@ -0,0 +1,216 @@
+import type { SettingsProvider } from '@deepseek-ai/dsh-settings';
+import type { WorkBuddyReasoningEffort, WorkBuddyRegion } from '../../shared/workbuddy-contracts.ts';
+import type { CredentialStore } from '../token-store.ts';
+import { isIntlDomain } from './types.ts';
+export declare const WORKBUDDY_PREFERENCES_NAMESPACE = "dsh-workbuddy";
+export type { WorkBuddyReasoningEffort };
+/**
+ * One WorkBuddy credential, parsed from a CodeBuddy desktop `*.info` file.
+ *
+ * These files are the IDE's own credential store, not this plugin's: the plugin
+ * reads them so a user who is already signed in to the IDE needs no second
+ * login. A refreshed token is written back so both clients stay valid instead of
+ * racing each other with a rotating refresh token.
+ */
+export interface WorkBuddyCredentials {
+    /** Bearer token for the chat and billing APIs. Host-only. */
+    accessToken: string;
+    /** Rotating refresh token. Host-only. */
+    refreshToken: string;
+    /** Unix milliseconds the access token stops being valid. */
+    expiresAt: number;
+    /** Region the account belongs to; decides which backend serves it. */
+    region: WorkBuddyRegion;
+    /** Auth domain recorded in the file, e.g. `copilot.tencent.com`. */
+    domain: string;
+    /** Backend base URL derived from {@link domain}. */
+    backend: string;
+    uid?: string;
+    nickname?: string;
+    uin?: string;
+    accountType?: string;
+    enterpriseId?: string;
+    /** Absolute path of the `*.info` file this credential came from. */
+    sourceFile: string;
+    /** File modification time when it was read, so a stale cache is detectable. */
+    sourceMtimeMs: number;
+    /** Which store owns the secret; only managed credentials may be deleted. */
+    source: 'desktop' | 'managed';
+}
+export interface WorkBuddyModelSettings {
+    enabled?: boolean;
+    enabledModelIds: string[];
+    contextWindowOverrides: Record<string, number>;
+    defaultReasoningEffort: WorkBuddyReasoningEffort | null;
+    /** Stable account key selected by the user; null keeps automatic selection. */
+    selectedAccountId: string | null;
+    /** Desktop accounts hidden from this plugin without deleting CodeBuddy files. */
+    hiddenAccountIds: string[];
+}
+export interface WorkBuddyPreferenceStore {
+    status(): WorkBuddyModelSettings;
+    update(patch: {
+        enabled?: boolean;
+        enabledModelIds?: string[];
+        contextWindowOverrides?: Record<string, number>;
+        defaultReasoningEffort?: WorkBuddyReasoningEffort | null;
+        selectedAccountId?: string | null;
+        hiddenAccountIds?: string[];
+    }): Promise<WorkBuddyModelSettings>;
+}
+/**
+ * Bind the model selection to the DSH settings document, which is what the
+ * settings service persists durably; the JSON file beside it remains the store
+ * used when the plugin runs without a settings provider (headless tests).
+ */
+export declare function registerWorkBuddyPreferenceStore(settings?: SettingsProvider, fallbackStore?: FileModelSettingsStore): WorkBuddyPreferenceStore;
+/**
+ * Credential directory the CodeBuddy desktop client writes to.
+ *
+ * `CODEBUDDY_AUTH_DIR` overrides it, matching the environment variable the
+ * official tooling honours, which is also what makes the scan testable without
+ * touching a real profile.
+ */
+export declare function codeBuddyAuthDir(): string;
+/** Plugin settings file, used when no settings service is present. */
+export declare function modelSettingsPath(): string;
+/** Encrypted account pool for credentials added through this plugin. */
+export declare function managedCredentialsPath(): string;
+/**
+ * Parse one CodeBuddy `*.info` payload.
+ *
+ * Only the fields this plugin needs are read; the file also carries the IDE's
+ * own account bookkeeping, which is deliberately left untouched. A file without
+ * a usable access token is rejected rather than half-accepted, so the scanner
+ * can move on to the next candidate.
+ */
+export declare function parseCredentialFile(value: unknown, sourceFile: string, sourceMtimeMs?: number): WorkBuddyCredentials;
+/** Whether a credential is at or near expiry; refreshed a minute early. */
+export declare function isExpired(credentials: WorkBuddyCredentials, now?: number): boolean;
+/**
+ * Stable public key for selecting an account without exposing a token or tying
+ * the preference to a timestamped snapshot filename.
+ */
+export declare function workBuddyAccountId(credentials: Pick<WorkBuddyCredentials, 'region' | 'uid' | 'uin' | 'nickname' | 'domain'>): string;
+/** Strict parser for credentials owned by the plugin's encrypted pool. */
+export declare function parseManagedCredentials(value: unknown): WorkBuddyCredentials[];
+/**
+ * Scan the CodeBuddy auth directory for usable credentials.
+ *
+ * Every `*.info` file is considered; unreadable or malformed ones are skipped
+ * rather than failing the whole scan, because the directory routinely holds
+ * expired snapshots next to the live credential.
+ */
+export declare function scanCredentials(dir?: string): Promise<WorkBuddyCredentials[]>;
+/** Encrypted credentials added through the WorkBuddy settings page. */
+export declare class ManagedCredentialStore {
+    private readonly filePath;
+    private readonly backend;
+    constructor(filePath?: string, backend?: CredentialStore<{
+        version: 1;
+        accounts: WorkBuddyCredentials[];
+    }>);
+    path(): string;
+    private serialize;
+    list(): Promise<WorkBuddyCredentials[]>;
+    add(credentials: WorkBuddyCredentials): Promise<void>;
+    update(credentials: WorkBuddyCredentials): Promise<void>;
+    delete(accountId: string): Promise<boolean>;
+}
+/**
+ * Credential store backed by the CodeBuddy desktop client's own auth files.
+ *
+ * The plugin does not own these files, so there is nothing to encrypt here: the
+ * secret is the IDE's, already on disk, and the only write this store performs
+ * is an atomic write-back of a refreshed token so the IDE does not lose its
+ * session. Tokens are never sent to a browser.
+ */
+export declare class FileCredentialStore {
+    private readonly dir;
+    /** How long a scan result is reused before the directory is re-read. */
+    private readonly cacheTtlMs;
+    private readonly managed;
+    private cached;
+    private scannedAt;
+    /** Serializes refresh/write-back per account; different accounts never share a token. */
+    private readonly refreshInFlight;
+    constructor(dir?: string, 
+    /** How long a scan result is reused before the directory is re-read. */
+    cacheTtlMs?: number, managed?: ManagedCredentialStore);
+    /** Directory this store scans. */
+    directory(): string;
+    /** Human-readable storage description for the settings card. */
+    path(): string;
+    managedPath(): string;
+    /** Read the selected credential, or the best visible candidate in automatic mode. */
+    read(options?: {
+        force?: boolean;
+        accountId?: string | null;
+        hiddenAccountIds?: readonly string[];
+    }): Promise<WorkBuddyCredentials | null>;
+    /** Whether a cached credential's source file is unchanged on disk. */
+    private isStillCurrent;
+    /**
+     * All distinct usable accounts, best credential first.
+     *
+     * The desktop directory keeps historical snapshots. They are credentials for
+     * the same account, not additional account choices, so only the first (best)
+     * candidate for each stable account id is exposed.
+     */
+    list(): Promise<WorkBuddyCredentials[]>;
+    /**
+     * Desktop credentials only, best first.
+     *
+     * The account pool adopts these so the IDE's own sign-ins take part in
+     * scheduling. Unlike {@link list} this never mixes in managed accounts:
+     * only the desktop set is re-adopted when the IDE changes its directory.
+     */
+    discoverDesktopCredentials(): Promise<WorkBuddyCredentials[]>;
+    /**
+     * Re-read one desktop credential file.
+     *
+     * A pooled desktop account must serve the IDE's current token rather than
+     * the copy taken when it was adopted, because the IDE rotates that token on
+     * its own schedule. Returns null when the file is gone or unreadable.
+     */
+    readDesktopFile(filePath: string): Promise<WorkBuddyCredentials | null>;
+    addManaged(credentials: WorkBuddyCredentials): Promise<void>;
+    deleteManaged(accountId: string): Promise<boolean>;
+    /** Forget the cached scan; the next read re-reads the directory. */
+    invalidate(): void;
+    /**
+     * Return a credential whose access token is valid, refreshing it first when
+     * it is at or near expiry.
+     *
+     * Concurrent callers share one refresh: the refresh token rotates, so two
+     * simultaneous refreshes would invalidate each other.
+     */
+    ensureFresh(credentials: WorkBuddyCredentials, refresh: (current: WorkBuddyCredentials) => Promise<WorkBuddyCredentials>): Promise<WorkBuddyCredentials>;
+    /**
+     * Persist a refreshed token back into the IDE's own credential file.
+     *
+     * Only the `auth` block is rewritten, and the write is atomic so a crash
+     * cannot leave the IDE with a half-written file. A failure here is not fatal
+     * to the in-flight request: the refreshed token still works for this process,
+     * and the next scan simply finds the older token on disk.
+     */
+    writeBack(credentials: WorkBuddyCredentials): Promise<void>;
+}
+/** Plain-JSON model settings used when the settings service is unavailable. */
+export declare class FileModelSettingsStore {
+    private readonly filePath;
+    constructor(filePath?: string);
+    path(): string;
+    read(): Promise<WorkBuddyModelSettings>;
+    write(settings: WorkBuddyModelSettings): Promise<void>;
+    updateSettings(patch: {
+        enabled?: boolean;
+        enabledModelIds?: string[];
+        contextWindowOverrides?: Record<string, number>;
+        defaultReasoningEffort?: WorkBuddyReasoningEffort | null;
+        selectedAccountId?: string | null;
+        hiddenAccountIds?: string[];
+    }): Promise<WorkBuddyModelSettings>;
+}
+export { isIntlDomain };
+//# sourceMappingURL=token-store.d.ts.map

package/lib/types/host/workbuddy/token-store.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-store.d.ts","sourceRoot":"","sources":["../../../../src/host/workbuddy/token-store.ts"],"names":[],"mappings":"AAKA,OAAO,KAAK,EAAE,gBAAgB,EAAiB,MAAM,2BAA2B,CAAA;AAGhF,OAAO,KAAK,EAAE,wBAAwB,EAAE,eAAe,EAAE,MAAM,qCAAqC,CAAA;AAIpG,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,mBAAmB,CAAA;AAIxD,OAAO,EAGL,YAAY,EAEb,MAAM,YAAY,CAAA;AAEnB,eAAO,MAAM,+BAA+B,kBAAkB,CAAA;AAE9D,YAAY,EAAE,wBAAwB,EAAE,CAAA;AAOxC;;;;;;;GAOG;AACH,MAAM,WAAW,oBAAoB;IACnC,6DAA6D;IAC7D,WAAW,EAAE,MAAM,CAAA;IACnB,yCAAyC;IACzC,YAAY,EAAE,MAAM,CAAA;IACpB,4DAA4D;IAC5D,SAAS,EAAE,MAAM,CAAA;IACjB,sEAAsE;IACtE,MAAM,EAAE,eAAe,CAAA;IACvB,oEAAoE;IACpE,MAAM,EAAE,MAAM,CAAA;IACd,oDAAoD;IACpD,OAAO,EAAE,MAAM,CAAA;IACf,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,YAAY,CAAC,EAAE,MAAM,CAAA;IACrB,oEAAoE;IACpE,UAAU,EAAE,MAAM,CAAA;IAClB,+EAA+E;IAC/E,aAAa,EAAE,MAAM,CAAA;IACrB,4EAA4E;IAC5E,MAAM,EAAE,SAAS,GAAG,SAAS,CAAA;CAC9B;AAED,MAAM,WAAW,sBAAsB;IACrC,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,eAAe,EAAE,MAAM,EAAE,CAAA;IACzB,sBAAsB,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;IAC9C,sBAAsB,EAAE,wBAAwB,GAAG,IAAI,CAAA;IACvD,+EAA+E;IAC/E,iBAAiB,EAAE,MAAM,GAAG,IAAI,CAAA;IAChC,iFAAiF;IACjF,gBAAgB,EAAE,MAAM,EAAE,CAAA;CAC3B;AAED,MAAM,WAAW,wBAAwB;IACvC,MAAM,IAAI,sBAAsB,CAAA;IAChC,MAAM,CAAC,KAAK,EAAE;QACZ,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;QAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/C,sBAAsB,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAA;QACxD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACjC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;KAC5B,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAAA;CACpC;AAID;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,CAAC,EAAE,gBAAgB,EAC3B,aAAa,yBAA+B,GAC3C,wBAAwB,CAyE1B;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,IAAI,MAAM,CAazC;AAED,sEAAsE;AACtE,wBAAgB,iBAAiB,IAAI,MAAM,CAE1C;AAED,wEAAwE;AACxE,wBAAgB,sBAAsB,IAAI,MAAM,CAE/C;AAaD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,aAAa,SAAI,GAAG,oBAAoB,CA6B/G;AAED,2EAA2E;AAC3E,wBAAgB,SAAS,CAAC,WAAW,EAAE,oBAAoB,EAAE,GAAG,SAAa,GAAG,OAAO,CAGtF;AAED;;;GAGG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,IAAI,CAAC,oBAAoB,EAAE,QAAQ,GAAG,KAAK,GAAG,KAAK,GAAG,UAAU,GAAG,QAAQ,CAAC,GAAG,MAAM,CAGpI;AAED,0EAA0E;AAC1E,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,oBAAoB,EAAE,CA2B9E;AAgBD;;;;;;GAMG;AACH,wBAAsB,eAAe,CAAC,GAAG,SAAqB,GAAG,OAAO,CAAC,oBAAoB,EAAE,CAAC,CA+B/F;AAgBD,uEAAuE;AACvE,qBAAa,sBAAsB;IAE/B,OAAO,CAAC,QAAQ,CAAC,QAAQ;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO;gBADP,QAAQ,SAA2B,EACnC,OAAO,GAAE,eAAe,CAAC;QAAE,OAAO,EAAE,CAAC,CAAC;QAAC,QAAQ,EAAE,oBAAoB,EAAE,CAAA;KAAE,CAA4C;IAGxI,IAAI,IAAI,MAAM;IAMd,OAAO,CAAC,SAAS;IAWX,IAAI,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAIvC,GAAG,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAarD,MAAM,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAIxD,MAAM,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAUlD;AAED;;;;;;;GAOG;AACH,qBAAa,mBAAmB;IAO5B,OAAO,CAAC,QAAQ,CAAC,GAAG;IACpB,wEAAwE;IACxE,OAAO,CAAC,QAAQ,CAAC,UAAU;IAC3B,OAAO,CAAC,QAAQ,CAAC,OAAO;IAT1B,OAAO,CAAC,MAAM,CAAoC;IAClD,OAAO,CAAC,SAAS,CAAI;IACrB,yFAAyF;IACzF,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAmD;gBAGhE,GAAG,SAAqB;IACzC,wEAAwE;IACvD,UAAU,SAAS,EACnB,OAAO,yBAA+B;IAGzD,kCAAkC;IAClC,SAAS,IAAI,MAAM;IAInB,gEAAgE;IAChE,IAAI,IAAI,MAAM;IAId,WAAW,IAAI,MAAM;IAIrB,qFAAqF;IAC/E,IAAI,CAAC,OAAO,GAAE;QAAE,KAAK,CAAC,EAAE,OAAO,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;QAAC,gBAAgB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAA;KAAO,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAoBpJ,sEAAsE;YACxD,cAAc;IAY5B;;;;;;OAMG;IACG,IAAI,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAc7C;;;;;;OAMG;IACG,0BAA0B,IAAI,OAAO,CAAC,oBAAoB,EAAE,CAAC;IAInE;;;;;;OAMG;IACG,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC;IAWvE,UAAU,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;IAK5D,aAAa,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAMxD,oEAAoE;IACpE,UAAU,IAAI,IAAI;IAKlB;;;;;;OAMG;IACG,WAAW,CACf,WAAW,EAAE,oBAAoB,EACjC,OAAO,EAAE,CAAC,OAAO,EAAE,oBAAoB,KAAK,OAAO,CAAC,oBAAoB,CAAC,GACxE,OAAO,CAAC,oBAAoB,CAAC;IAuBhC;;;;;;;OAOG;IACG,SAAS,CAAC,WAAW,EAAE,oBAAoB,GAAG,OAAO,CAAC,IAAI,CAAC;CAmClE;AAED,+EAA+E;AAC/E,qBAAa,sBAAsB;IACrB,OAAO,CAAC,QAAQ,CAAC,QAAQ;gBAAR,QAAQ,SAAsB;IAE3D,IAAI,IAAI,MAAM;IAIR,IAAI,IAAI,OAAO,CAAC,sBAAsB,CAAC;IA4CvC,KAAK,CAAC,QAAQ,EAAE,sBAAsB,GAAG,OAAO,CAAC,IAAI,CAAC;IAOtD,cAAc,CAAC,KAAK,EAAE;QAC1B,OAAO,CAAC,EAAE,OAAO,CAAA;QACjB,eAAe,CAAC,EAAE,MAAM,EAAE,CAAA;QAC1B,sBAAsB,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAA;QAC/C,sBAAsB,CAAC,EAAE,wBAAwB,GAAG,IAAI,CAAA;QACxD,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;QACjC,gBAAgB,CAAC,EAAE,MAAM,EAAE,CAAA;KAC5B,GAAG,OAAO,CAAC,sBAAsB,CAAC;CAsBpC;AAED,OAAO,EAAE,YAAY,EAAE,CAAA"}