@kenkaiiii/gg-core 5.93.0 → 5.94.0

package/dist/index.d.cts

@@ -1,7 +1,6 @@
 import { ModelInfo } from './model-registry.cjs';
 export { ContextWindowOptions, DEFAULT_MAX_VIDEO_BYTES, HIDDEN_PROVIDERS, MODELS, ModelBilling, clearRuntimeModels, getAllModels, getAuthStorageKey, getAuthStorageKeys, getContextWindow, getDefaultModel, getDefaultThinkingLevel, getListedModels, getMaxThinkingLevel, getModel, getModelsForProvider, getProviderCatalog, getSummaryModel, getToolResultCharLimit, getVideoByteLimit, isHiddenProvider, isPaidModel, registerRuntimeModels, setProviderCatalog, usesOpenAICodexTransport, withoutPaidTier } from './model-registry.cjs';
 import { ThinkingLevel, Provider } from '@kenkaiiii/gg-ai';
-export { getClaudeCliUserAgent, getClaudeCodeVersion, pendingClaudeCodeVersionRefresh } from '@kenkaiiii/gg-ai';
 export { AppPaths, getAppPaths } from './paths.cjs';
 
 /** gg-ai's OPENROUTER_BASE_URL — where the openrouter transport goes with no override. */
@@ -225,6 +224,99 @@ interface OAuthLoginCallbacks {
     onStatus: (message: string) => void;
 }
 
+interface ClaudeCodePlatformAsset {
+    url: string;
+    /** npm `dist.integrity`: "sha512-<base64>". */
+    integrity: string;
+    bin: string;
+}
+interface ClaudeCodeManifest {
+    sdkVersion: string;
+    claudeCodeVersion: string;
+    platforms: Record<string, ClaudeCodePlatformAsset>;
+}
+declare const CLAUDE_CODE_MANIFEST: ClaudeCodeManifest;
+/** auth.json key for "signed in with Claude through Claude Code". Holds only the marker. */
+declare const CLAUDE_CODE_AUTH_KEY = "anthropic-claude-code";
+declare const CLAUDE_CODE_AUTH_MARKER: {
+    readonly via: "claude-code";
+};
+declare function isClaudeCodeAuthMarker(value: unknown): boolean;
+/** An old GG Claude sign-in token (`sk-ant-oat…`). It no longer works; the user must sign in again. */
+declare function isLegacyClaudeOAuth(value: unknown): boolean;
+type ClaudeCodeInstallProgress = {
+    phase: "download";
+    receivedBytes: number;
+    totalBytes?: number;
+} | {
+    phase: "verify";
+} | {
+    phase: "extract";
+};
+interface ClaudeCodeRuntimeOptions {
+    /** Defaults to `~/.gg/claude-code`. */
+    home?: string;
+    manifest?: ClaudeCodeManifest;
+    /** Platform key in the manifest; detected from the running process by default. */
+    platformKey?: string;
+}
+interface EnsureClaudeCodeOptions extends ClaudeCodeRuntimeOptions {
+    onProgress?: (progress: ClaudeCodeInstallProgress) => void;
+    signal?: AbortSignal;
+    fetch?: typeof fetch;
+}
+interface ClaudeCodeRunOptions extends ClaudeCodeRuntimeOptions {
+    /** Executable to run instead of the installed binary (tests). */
+    binary?: string;
+    /** Arguments placed before the `auth …` arguments (tests run a script via node). */
+    binaryArgs?: string[];
+    signal?: AbortSignal;
+    /** How long sign-in waits for the browser URL before falling back to the paste-code page. */
+    browserWaitMs?: number;
+}
+interface ClaudeCodeAuthStatus {
+    loggedIn: boolean;
+    /** "claude.ai" for a Claude subscription. */
+    authMethod?: string;
+    email?: string;
+    subscriptionType?: string;
+}
+interface PlatformInfo {
+    platform: NodeJS.Platform;
+    arch: string;
+    musl: boolean;
+}
+/** Manifest key for a platform, or null where Claude Code has no build. */
+declare function claudeCodePlatformKey(info?: PlatformInfo): string | null;
+declare function claudeCodeHome(opts?: ClaudeCodeRuntimeOptions): string;
+declare function claudeCodeConfigDir(opts?: ClaudeCodeRuntimeOptions): string;
+/** Where the pinned binary lives once installed (it may not exist yet). */
+declare function claudeCodeBinaryPath(opts?: ClaudeCodeRuntimeOptions): string;
+/** The installed binary for the pinned version, or null when it still needs downloading. */
+declare function resolveClaudeCodeBinary(opts?: ClaudeCodeRuntimeOptions): string | null;
+/**
+ * Download, verify and unpack the pinned Claude Code binary if it isn't
+ * installed yet. Concurrent callers in this process share one download;
+ * other processes race safely because each unpacks into its own staging dir
+ * and only one rename wins.
+ */
+declare function ensureClaudeCodeBinary(opts?: EnsureClaudeCodeOptions): Promise<string>;
+/** Plain-language status line for an install progress event. */
+declare function formatClaudeCodeInstallProgress(progress: ClaudeCodeInstallProgress): string;
+/** Environment for every Claude Code process GG Coder starts: our own login, no stray keys. */
+declare function claudeCodeEnv(opts?: ClaudeCodeRuntimeOptions, base?: NodeJS.ProcessEnv): Record<string, string>;
+/** `claude auth status` for GG Coder's own login. Logged out when the binary is missing. */
+declare function claudeCodeAuthStatus(opts?: ClaudeCodeRunOptions): Promise<ClaudeCodeAuthStatus>;
+declare function logoutClaudeCode(opts?: ClaudeCodeRunOptions): Promise<void>;
+/** The browser sign-in URL with Claude Code's localhost callback instead of the paste-code page. */
+declare function claudeCodeCallbackUrl(manualUrl: string, captured: string): string | null;
+/**
+ * Run `claude auth login` for GG Coder's own Claude login. The browser URL goes
+ * to `onOpenUrl`; Claude Code's localhost callback finishes sign-in, and a
+ * pasted code (from the fallback page) is accepted too.
+ */
+declare function loginClaudeCode(callbacks: OAuthLoginCallbacks, opts?: ClaudeCodeRunOptions): Promise<void>;
+
 /**
  * Storage key for Kimi Code OAuth credentials. Kept distinct from the
  * `moonshot` API-key entry so a user can configure BOTH and we always
@@ -347,6 +439,16 @@ declare class AuthStorage {
      * satisfies it.
      */
     hasProviderAuth(provider: string): Promise<boolean>;
+    /** True when the user signed in with Claude through Claude Code (marker only, no token). */
+    hasClaudeCodeLogin(): Promise<boolean>;
+    /** Record a Claude Code sign-in. Claude Code keeps the token; auth.json gets only the marker. */
+    setClaudeCodeLogin(): Promise<void>;
+    /**
+     * Remove an old GG Claude sign-in token (`sk-ant-oat…`), if any. True when one
+     * was removed, so the caller can tell the user once to sign in with Claude again.
+     */
+    takeLegacyClaudeSignIn(): Promise<boolean>;
+    clearClaudeCodeLogin(): Promise<void>;
     /** Endpoint ids that currently have a `local:<id>` credential stored. */
     listLocalEndpointIds(): Promise<string[]>;
     /**
@@ -466,6 +568,82 @@ declare class NotLoggedInError extends Error {
     constructor(provider: string);
 }
 
+type ClaudeCodeSignInOptions = EnsureClaudeCodeOptions & ClaudeCodeRunOptions;
+/**
+ * "Sign in with Claude": download Claude Code if it is missing, run its browser
+ * sign-in, confirm it with `claude auth status`, then record the marker.
+ */
+declare function signInWithClaudeCode(auth: Pick<AuthStorage, "setClaudeCodeLogin">, callbacks: OAuthLoginCallbacks, opts?: ClaudeCodeSignInOptions): Promise<ClaudeCodeAuthStatus>;
+/** Sign out of Claude Code and drop the marker. The marker goes even if `claude auth logout` fails. */
+declare function signOutOfClaudeCode(auth: Pick<AuthStorage, "clearClaudeCodeLogin">, opts?: ClaudeCodeRunOptions): Promise<void>;
+
+type SubscriptionUsageProvider = "anthropic" | "openai" | "moonshot";
+/** Providers whose usage endpoint we call with a token. Claude reports its own (claude-code/usage.ts). */
+type FetchedSubscriptionUsageProvider = Exclude<SubscriptionUsageProvider, "anthropic">;
+interface SubscriptionUsageWindow {
+    kind: "current" | "weekly";
+    label: string;
+    usedPercent: number;
+    /** Unix epoch milliseconds. */
+    resetsAt?: number;
+}
+interface SubscriptionUsageSnapshot {
+    provider: SubscriptionUsageProvider;
+    displayName: string;
+    windows: SubscriptionUsageWindow[];
+    fetchedAt: number;
+}
+declare class SubscriptionUsageError extends Error {
+    readonly status?: number | undefined;
+    readonly retryAfterMs?: number | undefined;
+    constructor(message: string, status?: number | undefined, retryAfterMs?: number | undefined);
+}
+type FetchFn = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+interface FetchSubscriptionUsageOptions {
+    fetchFn?: FetchFn;
+    timeoutMs?: number;
+    now?: () => number;
+}
+/**
+ * Fetch subscription quota windows with an already-resolved OAuth credential.
+ * Tokens stay server-side: callers expose only the normalized percentages and
+ * reset timestamps to their UI.
+ */
+declare function fetchSubscriptionUsage(provider: FetchedSubscriptionUsageProvider, credentials: Pick<OAuthCredentials, "accessToken" | "accountId">, options?: FetchSubscriptionUsageOptions): Promise<SubscriptionUsageSnapshot>;
+
+/** The parts of the SDK's `rate_limit_event.rate_limit_info` the usage meter reads. */
+interface ClaudeCodeRateLimitInfo {
+    rateLimitType?: string;
+    /** Fraction of the window used, 0–1. */
+    utilization?: number;
+    /** Unix epoch seconds. */
+    resetsAt?: number;
+    /** Not in the SDK types yet; carries every window the response reported. */
+    unifiedWindows?: Record<string, {
+        utilization?: number;
+        resetsAt?: number;
+    } | undefined>;
+}
+/**
+ * Fold one SDK rate-limit report into the last snapshot. A report can carry a
+ * single window, so windows it doesn't mention keep their previous values.
+ */
+declare function mergeClaudeCodeRateLimit(info: ClaudeCodeRateLimitInfo, previous: SubscriptionUsageSnapshot | null, now?: number): SubscriptionUsageSnapshot;
+/**
+ * The latest Claude subscription usage Claude Code reported, from any GG
+ * process on this machine. Windows whose reset time has passed are dropped:
+ * their old percentage no longer holds and the new one isn't known yet.
+ */
+declare function readClaudeCodeUsage(opts?: ClaudeCodeRuntimeOptions & {
+    now?: number;
+}): Promise<SubscriptionUsageSnapshot | null>;
+/** Save an SDK rate-limit report so the usage meter (app or CLI) can show it. */
+declare function recordClaudeCodeRateLimit(info: ClaudeCodeRateLimitInfo, opts?: ClaudeCodeRuntimeOptions & {
+    now?: number;
+}): Promise<void>;
+/** Forget saved usage, e.g. on sign-out, so another account never inherits it. */
+declare function clearClaudeCodeUsage(opts?: ClaudeCodeRuntimeOptions): Promise<void>;
+
 /**
  * MiniMax runs two separate platforms, and a key only works on the one that
  * issued it: Global (platform.minimax.io) or Mainland China
@@ -577,46 +755,11 @@ declare function describeAuthMethods(provider: string): AuthMethodMeta[];
  */
 declare function authPriorityNote(provider: string): string | undefined;
 
-type SubscriptionUsageProvider = "anthropic" | "openai" | "moonshot";
-interface SubscriptionUsageWindow {
-    kind: "current" | "weekly";
-    label: string;
-    usedPercent: number;
-    /** Unix epoch milliseconds. */
-    resetsAt?: number;
-}
-interface SubscriptionUsageSnapshot {
-    provider: SubscriptionUsageProvider;
-    displayName: string;
-    windows: SubscriptionUsageWindow[];
-    fetchedAt: number;
-}
-declare class SubscriptionUsageError extends Error {
-    readonly status?: number | undefined;
-    readonly retryAfterMs?: number | undefined;
-    constructor(message: string, status?: number | undefined, retryAfterMs?: number | undefined);
-}
-type FetchFn = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-interface FetchSubscriptionUsageOptions {
-    fetchFn?: FetchFn;
-    timeoutMs?: number;
-    now?: () => number;
-}
-/**
- * Fetch subscription quota windows with an already-resolved OAuth credential.
- * Tokens stay server-side: callers expose only the normalized percentages and
- * reset timestamps to their UI.
- */
-declare function fetchSubscriptionUsage(provider: SubscriptionUsageProvider, credentials: Pick<OAuthCredentials, "accessToken" | "accountId">, options?: FetchSubscriptionUsageOptions): Promise<SubscriptionUsageSnapshot>;
-
 declare function generatePKCE(): Promise<{
     verifier: string;
     challenge: string;
 }>;
 
-declare function loginAnthropic(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
-declare function refreshAnthropicToken(refreshToken: string): Promise<OAuthCredentials>;
-
 declare function loginOpenAI(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
 declare function refreshOpenAIToken(refreshToken: string): Promise<OAuthCredentials>;
 
@@ -907,4 +1050,4 @@ interface AutoUpdater {
 }
 declare function createAutoUpdater(config: AutoUpdateConfig): AutoUpdater;
 
-export { AUTH_PROVIDERS, type ApiKeyVariant, type AuthMethod, type AuthMethodMeta, type AuthProviderMeta, AuthStorage, type AutoUpdateConfig, type AutoUpdater, DEFAULT_LOCAL_ENDPOINTS, type DiscoverOptions, type DiscoveryResult, type DualAuthProvider, FALLBACK_CONTEXT_WINDOW, GEMINI_API_KEY, GEMINI_API_KEY_BASE_URL, type InlineButton, LOCAL_API_KEY_PLACEHOLDER, LOCAL_AUTH_KEY_PREFIX, type LocalEndpoint, type LocalEndpointKind, type LocalEndpointProbe, type LocalModel, type LogLevel, MINIMAX_CN_BASE_URL, MINIMAX_GLOBAL_BASE_URL, MOONSHOT_OAUTH_KEY, ModelInfo, NotLoggedInError, type OAuthCredentials, type OAuthLoginCallbacks, OPENROUTER_DEFAULT_BASE_URL, PLAN_MODE_THINKING_CAP, type ParsedOpenRouterCatalog, type ProbeOptions, type ProgressCallback, SubscriptionUsageError, type SubscriptionUsageProvider, type SubscriptionUsageSnapshot, type SubscriptionUsageWindow, TelegramBot, type TelegramConfig, type TelegramMessage, type TelegramUpdate, type TelegramVoiceMessage, XAI_OAUTH_KEY, XIAOMI_CREDITS_KEY, XIAOMI_TOKEN_PLAN_BASE_URLS, authPriorityNote, clampThinkingForPlanMode, clearLocalDiscoveryCache, closeLogger, createAutoUpdater, decodeOggOpus, describeAuthMethods, detectMiniMaxBaseUrl, detectXiaomiTokenPlanBaseUrl, discoverLocalModels, downmixToMono, dualAuthProvider, dualAuthProviderByOAuthKey, endpointRoot, fetchSubscriptionUsage, findProbedModel, formatLocalModelId, generatePKCE, getAuthProvider, getLowestThinkingLevel, getNextThinkingLevel, getSessionId, getSupportedThinkingLevels, grokCliBaseUrl, grokCliHeaders, isGrokCliEndpoint, isKimiCodingEndpoint, isLocalModelId, isLoggerOpen, isModelLoaded, isThinkingLevelSupported, kimiCodeBaseUrl, kimiCodingHeaders, localAuthStorageKey, localModelShortName, log, loginAnthropic, loginGemini, loginKimi, loginOpenAI, loginXai, oauthStorageKey, ollamaServedContext, openLog, parseLocalModelId, parseOpenRouterCatalog, probeEndpoint, providerStorageKeys, readStoredBaseUrlSync, refreshAnthropicToken, refreshGeminiToken, refreshKimiToken, refreshOpenAIToken, refreshXaiToken, registerLogCleanup, resample, setProgressCallback, toModelInfo, transcribeVoice, withFileLock };
+export { AUTH_PROVIDERS, type ApiKeyVariant, type AuthMethod, type AuthMethodMeta, type AuthProviderMeta, AuthStorage, type AutoUpdateConfig, type AutoUpdater, CLAUDE_CODE_AUTH_KEY, CLAUDE_CODE_AUTH_MARKER, CLAUDE_CODE_MANIFEST, type ClaudeCodeAuthStatus, type ClaudeCodeInstallProgress, type ClaudeCodeManifest, type ClaudeCodePlatformAsset, type ClaudeCodeRateLimitInfo, type ClaudeCodeRunOptions, type ClaudeCodeRuntimeOptions, type ClaudeCodeSignInOptions, DEFAULT_LOCAL_ENDPOINTS, type DiscoverOptions, type DiscoveryResult, type DualAuthProvider, type EnsureClaudeCodeOptions, FALLBACK_CONTEXT_WINDOW, type FetchedSubscriptionUsageProvider, GEMINI_API_KEY, GEMINI_API_KEY_BASE_URL, type InlineButton, LOCAL_API_KEY_PLACEHOLDER, LOCAL_AUTH_KEY_PREFIX, type LocalEndpoint, type LocalEndpointKind, type LocalEndpointProbe, type LocalModel, type LogLevel, MINIMAX_CN_BASE_URL, MINIMAX_GLOBAL_BASE_URL, MOONSHOT_OAUTH_KEY, ModelInfo, NotLoggedInError, type OAuthCredentials, type OAuthLoginCallbacks, OPENROUTER_DEFAULT_BASE_URL, PLAN_MODE_THINKING_CAP, type ParsedOpenRouterCatalog, type ProbeOptions, type ProgressCallback, SubscriptionUsageError, type SubscriptionUsageProvider, type SubscriptionUsageSnapshot, type SubscriptionUsageWindow, TelegramBot, type TelegramConfig, type TelegramMessage, type TelegramUpdate, type TelegramVoiceMessage, XAI_OAUTH_KEY, XIAOMI_CREDITS_KEY, XIAOMI_TOKEN_PLAN_BASE_URLS, authPriorityNote, clampThinkingForPlanMode, claudeCodeAuthStatus, claudeCodeBinaryPath, claudeCodeCallbackUrl, claudeCodeConfigDir, claudeCodeEnv, claudeCodeHome, claudeCodePlatformKey, clearClaudeCodeUsage, clearLocalDiscoveryCache, closeLogger, createAutoUpdater, decodeOggOpus, describeAuthMethods, detectMiniMaxBaseUrl, detectXiaomiTokenPlanBaseUrl, discoverLocalModels, downmixToMono, dualAuthProvider, dualAuthProviderByOAuthKey, endpointRoot, ensureClaudeCodeBinary, fetchSubscriptionUsage, findProbedModel, formatClaudeCodeInstallProgress, formatLocalModelId, generatePKCE, getAuthProvider, getLowestThinkingLevel, getNextThinkingLevel, getSessionId, getSupportedThinkingLevels, grokCliBaseUrl, grokCliHeaders, isClaudeCodeAuthMarker, isGrokCliEndpoint, isKimiCodingEndpoint, isLegacyClaudeOAuth, isLocalModelId, isLoggerOpen, isModelLoaded, isThinkingLevelSupported, kimiCodeBaseUrl, kimiCodingHeaders, localAuthStorageKey, localModelShortName, log, loginClaudeCode, loginGemini, loginKimi, loginOpenAI, loginXai, logoutClaudeCode, mergeClaudeCodeRateLimit, oauthStorageKey, ollamaServedContext, openLog, parseLocalModelId, parseOpenRouterCatalog, probeEndpoint, providerStorageKeys, readClaudeCodeUsage, readStoredBaseUrlSync, recordClaudeCodeRateLimit, refreshGeminiToken, refreshKimiToken, refreshOpenAIToken, refreshXaiToken, registerLogCleanup, resample, resolveClaudeCodeBinary, setProgressCallback, signInWithClaudeCode, signOutOfClaudeCode, toModelInfo, transcribeVoice, withFileLock };

package/dist/index.d.ts

@@ -1,7 +1,6 @@
 import { ModelInfo } from './model-registry.js';
 export { ContextWindowOptions, DEFAULT_MAX_VIDEO_BYTES, HIDDEN_PROVIDERS, MODELS, ModelBilling, clearRuntimeModels, getAllModels, getAuthStorageKey, getAuthStorageKeys, getContextWindow, getDefaultModel, getDefaultThinkingLevel, getListedModels, getMaxThinkingLevel, getModel, getModelsForProvider, getProviderCatalog, getSummaryModel, getToolResultCharLimit, getVideoByteLimit, isHiddenProvider, isPaidModel, registerRuntimeModels, setProviderCatalog, usesOpenAICodexTransport, withoutPaidTier } from './model-registry.js';
 import { ThinkingLevel, Provider } from '@kenkaiiii/gg-ai';
-export { getClaudeCliUserAgent, getClaudeCodeVersion, pendingClaudeCodeVersionRefresh } from '@kenkaiiii/gg-ai';
 export { AppPaths, getAppPaths } from './paths.js';
 
 /** gg-ai's OPENROUTER_BASE_URL — where the openrouter transport goes with no override. */
@@ -225,6 +224,99 @@ interface OAuthLoginCallbacks {
     onStatus: (message: string) => void;
 }
 
+interface ClaudeCodePlatformAsset {
+    url: string;
+    /** npm `dist.integrity`: "sha512-<base64>". */
+    integrity: string;
+    bin: string;
+}
+interface ClaudeCodeManifest {
+    sdkVersion: string;
+    claudeCodeVersion: string;
+    platforms: Record<string, ClaudeCodePlatformAsset>;
+}
+declare const CLAUDE_CODE_MANIFEST: ClaudeCodeManifest;
+/** auth.json key for "signed in with Claude through Claude Code". Holds only the marker. */
+declare const CLAUDE_CODE_AUTH_KEY = "anthropic-claude-code";
+declare const CLAUDE_CODE_AUTH_MARKER: {
+    readonly via: "claude-code";
+};
+declare function isClaudeCodeAuthMarker(value: unknown): boolean;
+/** An old GG Claude sign-in token (`sk-ant-oat…`). It no longer works; the user must sign in again. */
+declare function isLegacyClaudeOAuth(value: unknown): boolean;
+type ClaudeCodeInstallProgress = {
+    phase: "download";
+    receivedBytes: number;
+    totalBytes?: number;
+} | {
+    phase: "verify";
+} | {
+    phase: "extract";
+};
+interface ClaudeCodeRuntimeOptions {
+    /** Defaults to `~/.gg/claude-code`. */
+    home?: string;
+    manifest?: ClaudeCodeManifest;
+    /** Platform key in the manifest; detected from the running process by default. */
+    platformKey?: string;
+}
+interface EnsureClaudeCodeOptions extends ClaudeCodeRuntimeOptions {
+    onProgress?: (progress: ClaudeCodeInstallProgress) => void;
+    signal?: AbortSignal;
+    fetch?: typeof fetch;
+}
+interface ClaudeCodeRunOptions extends ClaudeCodeRuntimeOptions {
+    /** Executable to run instead of the installed binary (tests). */
+    binary?: string;
+    /** Arguments placed before the `auth …` arguments (tests run a script via node). */
+    binaryArgs?: string[];
+    signal?: AbortSignal;
+    /** How long sign-in waits for the browser URL before falling back to the paste-code page. */
+    browserWaitMs?: number;
+}
+interface ClaudeCodeAuthStatus {
+    loggedIn: boolean;
+    /** "claude.ai" for a Claude subscription. */
+    authMethod?: string;
+    email?: string;
+    subscriptionType?: string;
+}
+interface PlatformInfo {
+    platform: NodeJS.Platform;
+    arch: string;
+    musl: boolean;
+}
+/** Manifest key for a platform, or null where Claude Code has no build. */
+declare function claudeCodePlatformKey(info?: PlatformInfo): string | null;
+declare function claudeCodeHome(opts?: ClaudeCodeRuntimeOptions): string;
+declare function claudeCodeConfigDir(opts?: ClaudeCodeRuntimeOptions): string;
+/** Where the pinned binary lives once installed (it may not exist yet). */
+declare function claudeCodeBinaryPath(opts?: ClaudeCodeRuntimeOptions): string;
+/** The installed binary for the pinned version, or null when it still needs downloading. */
+declare function resolveClaudeCodeBinary(opts?: ClaudeCodeRuntimeOptions): string | null;
+/**
+ * Download, verify and unpack the pinned Claude Code binary if it isn't
+ * installed yet. Concurrent callers in this process share one download;
+ * other processes race safely because each unpacks into its own staging dir
+ * and only one rename wins.
+ */
+declare function ensureClaudeCodeBinary(opts?: EnsureClaudeCodeOptions): Promise<string>;
+/** Plain-language status line for an install progress event. */
+declare function formatClaudeCodeInstallProgress(progress: ClaudeCodeInstallProgress): string;
+/** Environment for every Claude Code process GG Coder starts: our own login, no stray keys. */
+declare function claudeCodeEnv(opts?: ClaudeCodeRuntimeOptions, base?: NodeJS.ProcessEnv): Record<string, string>;
+/** `claude auth status` for GG Coder's own login. Logged out when the binary is missing. */
+declare function claudeCodeAuthStatus(opts?: ClaudeCodeRunOptions): Promise<ClaudeCodeAuthStatus>;
+declare function logoutClaudeCode(opts?: ClaudeCodeRunOptions): Promise<void>;
+/** The browser sign-in URL with Claude Code's localhost callback instead of the paste-code page. */
+declare function claudeCodeCallbackUrl(manualUrl: string, captured: string): string | null;
+/**
+ * Run `claude auth login` for GG Coder's own Claude login. The browser URL goes
+ * to `onOpenUrl`; Claude Code's localhost callback finishes sign-in, and a
+ * pasted code (from the fallback page) is accepted too.
+ */
+declare function loginClaudeCode(callbacks: OAuthLoginCallbacks, opts?: ClaudeCodeRunOptions): Promise<void>;
+
 /**
  * Storage key for Kimi Code OAuth credentials. Kept distinct from the
  * `moonshot` API-key entry so a user can configure BOTH and we always
@@ -347,6 +439,16 @@ declare class AuthStorage {
      * satisfies it.
      */
     hasProviderAuth(provider: string): Promise<boolean>;
+    /** True when the user signed in with Claude through Claude Code (marker only, no token). */
+    hasClaudeCodeLogin(): Promise<boolean>;
+    /** Record a Claude Code sign-in. Claude Code keeps the token; auth.json gets only the marker. */
+    setClaudeCodeLogin(): Promise<void>;
+    /**
+     * Remove an old GG Claude sign-in token (`sk-ant-oat…`), if any. True when one
+     * was removed, so the caller can tell the user once to sign in with Claude again.
+     */
+    takeLegacyClaudeSignIn(): Promise<boolean>;
+    clearClaudeCodeLogin(): Promise<void>;
     /** Endpoint ids that currently have a `local:<id>` credential stored. */
     listLocalEndpointIds(): Promise<string[]>;
     /**
@@ -466,6 +568,82 @@ declare class NotLoggedInError extends Error {
     constructor(provider: string);
 }
 
+type ClaudeCodeSignInOptions = EnsureClaudeCodeOptions & ClaudeCodeRunOptions;
+/**
+ * "Sign in with Claude": download Claude Code if it is missing, run its browser
+ * sign-in, confirm it with `claude auth status`, then record the marker.
+ */
+declare function signInWithClaudeCode(auth: Pick<AuthStorage, "setClaudeCodeLogin">, callbacks: OAuthLoginCallbacks, opts?: ClaudeCodeSignInOptions): Promise<ClaudeCodeAuthStatus>;
+/** Sign out of Claude Code and drop the marker. The marker goes even if `claude auth logout` fails. */
+declare function signOutOfClaudeCode(auth: Pick<AuthStorage, "clearClaudeCodeLogin">, opts?: ClaudeCodeRunOptions): Promise<void>;
+
+type SubscriptionUsageProvider = "anthropic" | "openai" | "moonshot";
+/** Providers whose usage endpoint we call with a token. Claude reports its own (claude-code/usage.ts). */
+type FetchedSubscriptionUsageProvider = Exclude<SubscriptionUsageProvider, "anthropic">;
+interface SubscriptionUsageWindow {
+    kind: "current" | "weekly";
+    label: string;
+    usedPercent: number;
+    /** Unix epoch milliseconds. */
+    resetsAt?: number;
+}
+interface SubscriptionUsageSnapshot {
+    provider: SubscriptionUsageProvider;
+    displayName: string;
+    windows: SubscriptionUsageWindow[];
+    fetchedAt: number;
+}
+declare class SubscriptionUsageError extends Error {
+    readonly status?: number | undefined;
+    readonly retryAfterMs?: number | undefined;
+    constructor(message: string, status?: number | undefined, retryAfterMs?: number | undefined);
+}
+type FetchFn = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
+interface FetchSubscriptionUsageOptions {
+    fetchFn?: FetchFn;
+    timeoutMs?: number;
+    now?: () => number;
+}
+/**
+ * Fetch subscription quota windows with an already-resolved OAuth credential.
+ * Tokens stay server-side: callers expose only the normalized percentages and
+ * reset timestamps to their UI.
+ */
+declare function fetchSubscriptionUsage(provider: FetchedSubscriptionUsageProvider, credentials: Pick<OAuthCredentials, "accessToken" | "accountId">, options?: FetchSubscriptionUsageOptions): Promise<SubscriptionUsageSnapshot>;
+
+/** The parts of the SDK's `rate_limit_event.rate_limit_info` the usage meter reads. */
+interface ClaudeCodeRateLimitInfo {
+    rateLimitType?: string;
+    /** Fraction of the window used, 0–1. */
+    utilization?: number;
+    /** Unix epoch seconds. */
+    resetsAt?: number;
+    /** Not in the SDK types yet; carries every window the response reported. */
+    unifiedWindows?: Record<string, {
+        utilization?: number;
+        resetsAt?: number;
+    } | undefined>;
+}
+/**
+ * Fold one SDK rate-limit report into the last snapshot. A report can carry a
+ * single window, so windows it doesn't mention keep their previous values.
+ */
+declare function mergeClaudeCodeRateLimit(info: ClaudeCodeRateLimitInfo, previous: SubscriptionUsageSnapshot | null, now?: number): SubscriptionUsageSnapshot;
+/**
+ * The latest Claude subscription usage Claude Code reported, from any GG
+ * process on this machine. Windows whose reset time has passed are dropped:
+ * their old percentage no longer holds and the new one isn't known yet.
+ */
+declare function readClaudeCodeUsage(opts?: ClaudeCodeRuntimeOptions & {
+    now?: number;
+}): Promise<SubscriptionUsageSnapshot | null>;
+/** Save an SDK rate-limit report so the usage meter (app or CLI) can show it. */
+declare function recordClaudeCodeRateLimit(info: ClaudeCodeRateLimitInfo, opts?: ClaudeCodeRuntimeOptions & {
+    now?: number;
+}): Promise<void>;
+/** Forget saved usage, e.g. on sign-out, so another account never inherits it. */
+declare function clearClaudeCodeUsage(opts?: ClaudeCodeRuntimeOptions): Promise<void>;
+
 /**
  * MiniMax runs two separate platforms, and a key only works on the one that
  * issued it: Global (platform.minimax.io) or Mainland China
@@ -577,46 +755,11 @@ declare function describeAuthMethods(provider: string): AuthMethodMeta[];
  */
 declare function authPriorityNote(provider: string): string | undefined;
 
-type SubscriptionUsageProvider = "anthropic" | "openai" | "moonshot";
-interface SubscriptionUsageWindow {
-    kind: "current" | "weekly";
-    label: string;
-    usedPercent: number;
-    /** Unix epoch milliseconds. */
-    resetsAt?: number;
-}
-interface SubscriptionUsageSnapshot {
-    provider: SubscriptionUsageProvider;
-    displayName: string;
-    windows: SubscriptionUsageWindow[];
-    fetchedAt: number;
-}
-declare class SubscriptionUsageError extends Error {
-    readonly status?: number | undefined;
-    readonly retryAfterMs?: number | undefined;
-    constructor(message: string, status?: number | undefined, retryAfterMs?: number | undefined);
-}
-type FetchFn = (input: string | URL | Request, init?: RequestInit) => Promise<Response>;
-interface FetchSubscriptionUsageOptions {
-    fetchFn?: FetchFn;
-    timeoutMs?: number;
-    now?: () => number;
-}
-/**
- * Fetch subscription quota windows with an already-resolved OAuth credential.
- * Tokens stay server-side: callers expose only the normalized percentages and
- * reset timestamps to their UI.
- */
-declare function fetchSubscriptionUsage(provider: SubscriptionUsageProvider, credentials: Pick<OAuthCredentials, "accessToken" | "accountId">, options?: FetchSubscriptionUsageOptions): Promise<SubscriptionUsageSnapshot>;
-
 declare function generatePKCE(): Promise<{
     verifier: string;
     challenge: string;
 }>;
 
-declare function loginAnthropic(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
-declare function refreshAnthropicToken(refreshToken: string): Promise<OAuthCredentials>;
-
 declare function loginOpenAI(callbacks: OAuthLoginCallbacks): Promise<OAuthCredentials>;
 declare function refreshOpenAIToken(refreshToken: string): Promise<OAuthCredentials>;
 
@@ -907,4 +1050,4 @@ interface AutoUpdater {
 }
 declare function createAutoUpdater(config: AutoUpdateConfig): AutoUpdater;
 
-export { AUTH_PROVIDERS, type ApiKeyVariant, type AuthMethod, type AuthMethodMeta, type AuthProviderMeta, AuthStorage, type AutoUpdateConfig, type AutoUpdater, DEFAULT_LOCAL_ENDPOINTS, type DiscoverOptions, type DiscoveryResult, type DualAuthProvider, FALLBACK_CONTEXT_WINDOW, GEMINI_API_KEY, GEMINI_API_KEY_BASE_URL, type InlineButton, LOCAL_API_KEY_PLACEHOLDER, LOCAL_AUTH_KEY_PREFIX, type LocalEndpoint, type LocalEndpointKind, type LocalEndpointProbe, type LocalModel, type LogLevel, MINIMAX_CN_BASE_URL, MINIMAX_GLOBAL_BASE_URL, MOONSHOT_OAUTH_KEY, ModelInfo, NotLoggedInError, type OAuthCredentials, type OAuthLoginCallbacks, OPENROUTER_DEFAULT_BASE_URL, PLAN_MODE_THINKING_CAP, type ParsedOpenRouterCatalog, type ProbeOptions, type ProgressCallback, SubscriptionUsageError, type SubscriptionUsageProvider, type SubscriptionUsageSnapshot, type SubscriptionUsageWindow, TelegramBot, type TelegramConfig, type TelegramMessage, type TelegramUpdate, type TelegramVoiceMessage, XAI_OAUTH_KEY, XIAOMI_CREDITS_KEY, XIAOMI_TOKEN_PLAN_BASE_URLS, authPriorityNote, clampThinkingForPlanMode, clearLocalDiscoveryCache, closeLogger, createAutoUpdater, decodeOggOpus, describeAuthMethods, detectMiniMaxBaseUrl, detectXiaomiTokenPlanBaseUrl, discoverLocalModels, downmixToMono, dualAuthProvider, dualAuthProviderByOAuthKey, endpointRoot, fetchSubscriptionUsage, findProbedModel, formatLocalModelId, generatePKCE, getAuthProvider, getLowestThinkingLevel, getNextThinkingLevel, getSessionId, getSupportedThinkingLevels, grokCliBaseUrl, grokCliHeaders, isGrokCliEndpoint, isKimiCodingEndpoint, isLocalModelId, isLoggerOpen, isModelLoaded, isThinkingLevelSupported, kimiCodeBaseUrl, kimiCodingHeaders, localAuthStorageKey, localModelShortName, log, loginAnthropic, loginGemini, loginKimi, loginOpenAI, loginXai, oauthStorageKey, ollamaServedContext, openLog, parseLocalModelId, parseOpenRouterCatalog, probeEndpoint, providerStorageKeys, readStoredBaseUrlSync, refreshAnthropicToken, refreshGeminiToken, refreshKimiToken, refreshOpenAIToken, refreshXaiToken, registerLogCleanup, resample, setProgressCallback, toModelInfo, transcribeVoice, withFileLock };
+export { AUTH_PROVIDERS, type ApiKeyVariant, type AuthMethod, type AuthMethodMeta, type AuthProviderMeta, AuthStorage, type AutoUpdateConfig, type AutoUpdater, CLAUDE_CODE_AUTH_KEY, CLAUDE_CODE_AUTH_MARKER, CLAUDE_CODE_MANIFEST, type ClaudeCodeAuthStatus, type ClaudeCodeInstallProgress, type ClaudeCodeManifest, type ClaudeCodePlatformAsset, type ClaudeCodeRateLimitInfo, type ClaudeCodeRunOptions, type ClaudeCodeRuntimeOptions, type ClaudeCodeSignInOptions, DEFAULT_LOCAL_ENDPOINTS, type DiscoverOptions, type DiscoveryResult, type DualAuthProvider, type EnsureClaudeCodeOptions, FALLBACK_CONTEXT_WINDOW, type FetchedSubscriptionUsageProvider, GEMINI_API_KEY, GEMINI_API_KEY_BASE_URL, type InlineButton, LOCAL_API_KEY_PLACEHOLDER, LOCAL_AUTH_KEY_PREFIX, type LocalEndpoint, type LocalEndpointKind, type LocalEndpointProbe, type LocalModel, type LogLevel, MINIMAX_CN_BASE_URL, MINIMAX_GLOBAL_BASE_URL, MOONSHOT_OAUTH_KEY, ModelInfo, NotLoggedInError, type OAuthCredentials, type OAuthLoginCallbacks, OPENROUTER_DEFAULT_BASE_URL, PLAN_MODE_THINKING_CAP, type ParsedOpenRouterCatalog, type ProbeOptions, type ProgressCallback, SubscriptionUsageError, type SubscriptionUsageProvider, type SubscriptionUsageSnapshot, type SubscriptionUsageWindow, TelegramBot, type TelegramConfig, type TelegramMessage, type TelegramUpdate, type TelegramVoiceMessage, XAI_OAUTH_KEY, XIAOMI_CREDITS_KEY, XIAOMI_TOKEN_PLAN_BASE_URLS, authPriorityNote, clampThinkingForPlanMode, claudeCodeAuthStatus, claudeCodeBinaryPath, claudeCodeCallbackUrl, claudeCodeConfigDir, claudeCodeEnv, claudeCodeHome, claudeCodePlatformKey, clearClaudeCodeUsage, clearLocalDiscoveryCache, closeLogger, createAutoUpdater, decodeOggOpus, describeAuthMethods, detectMiniMaxBaseUrl, detectXiaomiTokenPlanBaseUrl, discoverLocalModels, downmixToMono, dualAuthProvider, dualAuthProviderByOAuthKey, endpointRoot, ensureClaudeCodeBinary, fetchSubscriptionUsage, findProbedModel, formatClaudeCodeInstallProgress, formatLocalModelId, generatePKCE, getAuthProvider, getLowestThinkingLevel, getNextThinkingLevel, getSessionId, getSupportedThinkingLevels, grokCliBaseUrl, grokCliHeaders, isClaudeCodeAuthMarker, isGrokCliEndpoint, isKimiCodingEndpoint, isLegacyClaudeOAuth, isLocalModelId, isLoggerOpen, isModelLoaded, isThinkingLevelSupported, kimiCodeBaseUrl, kimiCodingHeaders, localAuthStorageKey, localModelShortName, log, loginClaudeCode, loginGemini, loginKimi, loginOpenAI, loginXai, logoutClaudeCode, mergeClaudeCodeRateLimit, oauthStorageKey, ollamaServedContext, openLog, parseLocalModelId, parseOpenRouterCatalog, probeEndpoint, providerStorageKeys, readClaudeCodeUsage, readStoredBaseUrlSync, recordClaudeCodeRateLimit, refreshGeminiToken, refreshKimiToken, refreshOpenAIToken, refreshXaiToken, registerLogCleanup, resample, resolveClaudeCodeBinary, setProgressCallback, signInWithClaudeCode, signOutOfClaudeCode, toModelInfo, transcribeVoice, withFileLock };