@maudecode/talaria-web 1.14.0 → 1.16.1

package/dist/api/settings-router.d.ts

@@ -54,6 +54,8 @@ export declare const settingsRouter: {
             tts_voice: import("zod").ZodOptional<import("zod").ZodString>;
             dictation_append: import("zod").ZodOptional<import("zod").ZodBoolean>;
             persisted_speech_keys: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            confirm_external_links: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            trusted_link_hosts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         save: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>, import("zod").ZodObject<{
             bot_name: import("zod").ZodOptional<import("zod").ZodString>;
@@ -103,7 +105,15 @@ export declare const settingsRouter: {
             tts_voice: import("zod").ZodOptional<import("zod").ZodString>;
             dictation_append: import("zod").ZodOptional<import("zod").ZodBoolean>;
             persisted_speech_keys: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
+            confirm_external_links: import("zod").ZodOptional<import("zod").ZodBoolean>;
+            trusted_link_hosts: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodString>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        linkCheck: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            url: import("zod").ZodString;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            opens_directly: import("zod").ZodBoolean;
+            host: import("zod").ZodNullable<import("zod").ZodString>;
+        }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     };
     profiles: {
         list: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
@@ -194,6 +204,9 @@ export declare const settingsRouter: {
         }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
             active_provider: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
             default_model: import("zod").ZodOptional<import("zod").ZodString>;
+            default_provider_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+            default_bare_id: import("zod").ZodOptional<import("zod").ZodString>;
+            default_option_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
             groups: import("zod").ZodArray<import("zod").ZodObject<{
                 provider: import("zod").ZodString;
                 provider_id: import("zod").ZodOptional<import("zod").ZodString>;
@@ -201,12 +214,16 @@ export declare const settingsRouter: {
                     id: import("zod").ZodString;
                     label: import("zod").ZodOptional<import("zod").ZodString>;
                     provider: import("zod").ZodOptional<import("zod").ZodString>;
+                    provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                    bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                     supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 }, import("zod/v4/core").$loose>>;
                 extra_models: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                     id: import("zod").ZodString;
                     label: import("zod").ZodOptional<import("zod").ZodString>;
                     provider: import("zod").ZodOptional<import("zod").ZodString>;
+                    provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                    bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                     supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 }, import("zod/v4/core").$loose>>>;
             }, import("zod/v4/core").$loose>>;
@@ -224,6 +241,9 @@ export declare const settingsRouter: {
             models: import("zod").ZodObject<{
                 active_provider: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 default_model: import("zod").ZodOptional<import("zod").ZodString>;
+                default_provider_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                default_bare_id: import("zod").ZodOptional<import("zod").ZodString>;
+                default_option_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 groups: import("zod").ZodArray<import("zod").ZodObject<{
                     provider: import("zod").ZodString;
                     provider_id: import("zod").ZodOptional<import("zod").ZodString>;
@@ -231,12 +251,16 @@ export declare const settingsRouter: {
                         id: import("zod").ZodString;
                         label: import("zod").ZodOptional<import("zod").ZodString>;
                         provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                        bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                         supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                     }, import("zod/v4/core").$loose>>;
                     extra_models: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                         id: import("zod").ZodString;
                         label: import("zod").ZodOptional<import("zod").ZodString>;
                         provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                        bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                         supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                     }, import("zod/v4/core").$loose>>>;
                 }, import("zod/v4/core").$loose>>;
@@ -245,21 +269,26 @@ export declare const settingsRouter: {
             }, import("zod/v4/core").$loose>;
         }, import("zod/v4/core").$strip>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         auxiliary: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("@orpc/server").Schema<unknown, unknown>, import("zod").ZodObject<{
-            main: import("zod").ZodOptional<import("zod").ZodObject<{
+            main: import("zod").ZodObject<{
                 model: import("zod").ZodOptional<import("zod").ZodString>;
                 provider: import("zod").ZodOptional<import("zod").ZodString>;
                 base_url: import("zod").ZodOptional<import("zod").ZodString>;
                 api_key_set: import("zod").ZodOptional<import("zod").ZodBoolean>;
-            }, import("zod/v4/core").$loose>>;
-            tasks: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
+            }, import("zod/v4/core").$loose>;
+            tasks: import("zod").ZodArray<import("zod").ZodObject<{
                 task: import("zod").ZodString;
-                label: import("zod").ZodOptional<import("zod").ZodString>;
-                description: import("zod").ZodOptional<import("zod").ZodString>;
-                model: import("zod").ZodOptional<import("zod").ZodString>;
-                provider: import("zod").ZodOptional<import("zod").ZodString>;
+                label: import("zod").ZodString;
+                description: import("zod").ZodString;
+                provider: import("zod").ZodString;
+                model: import("zod").ZodString;
                 base_url: import("zod").ZodOptional<import("zod").ZodString>;
                 api_key_set: import("zod").ZodOptional<import("zod").ZodBoolean>;
-            }, import("zod/v4/core").$loose>>>;
+                is_auto: import("zod").ZodBoolean;
+                value_label: import("zod").ZodNullable<import("zod").ZodString>;
+                provider_label: import("zod").ZodNullable<import("zod").ZodString>;
+                selected_option_id: import("zod").ZodNullable<import("zod").ZodString>;
+                in_catalog: import("zod").ZodBoolean;
+            }, import("zod/v4/core").$loose>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         set: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             advanced: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
@@ -274,6 +303,28 @@ export declare const settingsRouter: {
             ok: import("zod").ZodOptional<import("zod").ZodBoolean>;
             session: import("zod").ZodOptional<import("zod").ZodUnknown>;
             error: import("zod").ZodOptional<import("zod").ZodString>;
+            auxiliary: import("zod").ZodOptional<import("zod").ZodObject<{
+                main: import("zod").ZodObject<{
+                    model: import("zod").ZodOptional<import("zod").ZodString>;
+                    provider: import("zod").ZodOptional<import("zod").ZodString>;
+                    base_url: import("zod").ZodOptional<import("zod").ZodString>;
+                    api_key_set: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                }, import("zod/v4/core").$loose>;
+                tasks: import("zod").ZodArray<import("zod").ZodObject<{
+                    task: import("zod").ZodString;
+                    label: import("zod").ZodString;
+                    description: import("zod").ZodString;
+                    provider: import("zod").ZodString;
+                    model: import("zod").ZodString;
+                    base_url: import("zod").ZodOptional<import("zod").ZodString>;
+                    api_key_set: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                    is_auto: import("zod").ZodBoolean;
+                    value_label: import("zod").ZodNullable<import("zod").ZodString>;
+                    provider_label: import("zod").ZodNullable<import("zod").ZodString>;
+                    selected_option_id: import("zod").ZodNullable<import("zod").ZodString>;
+                    in_catalog: import("zod").ZodBoolean;
+                }, import("zod/v4/core").$loose>>;
+            }, import("zod/v4/core").$loose>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         setDefault: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             advanced: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>>>;
@@ -304,6 +355,8 @@ export declare const settingsRouter: {
                     id: import("zod").ZodString;
                     label: import("zod").ZodOptional<import("zod").ZodString>;
                     provider: import("zod").ZodOptional<import("zod").ZodString>;
+                    provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                    bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                     supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 }, import("zod/v4/core").$loose>>>;
                 models_total: import("zod").ZodOptional<import("zod").ZodNumber>;
@@ -331,12 +384,64 @@ export declare const settingsRouter: {
         quota: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             provider: import("zod").ZodOptional<import("zod").ZodString>;
             refresh: import("zod").ZodOptional<import("zod").ZodString>;
-        }, import("zod/v4/core").$strip>, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
+        }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
+            computed_at: import("zod").ZodString;
+            ok: import("zod").ZodBoolean;
+            provider: import("zod").ZodNullable<import("zod").ZodString>;
+            display_name: import("zod").ZodNullable<import("zod").ZodString>;
+            supported: import("zod").ZodBoolean;
+            status: import("zod").ZodString;
+            label: import("zod").ZodOptional<import("zod").ZodString>;
+            message: import("zod").ZodString;
+            quota: import("zod").ZodUnknown;
+            account_limits: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodObject<{
+                available: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                stale: import("zod").ZodOptional<import("zod").ZodBoolean>;
+                title: import("zod").ZodOptional<import("zod").ZodString>;
+                plan: import("zod").ZodOptional<import("zod").ZodUnknown>;
+                unavailable_reason: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                windows: import("zod").ZodArray<import("zod").ZodObject<{
+                    label: import("zod").ZodString;
+                    used_percent: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    remaining_percent: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    reset_at: import("zod").ZodNullable<import("zod").ZodString>;
+                    detail: import("zod").ZodNullable<import("zod").ZodString>;
+                    window_seconds: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    pace: import("zod").ZodNullable<import("zod").ZodObject<{
+                        expected_remaining_percent: import("zod").ZodNumber;
+                        pace_delta_percent: import("zod").ZodNumber;
+                        burn_rate: import("zod").ZodNumber;
+                        minutes_to_reset: import("zod").ZodNumber;
+                        projected_minutes_to_empty: import("zod").ZodNullable<import("zod").ZodNumber>;
+                        elapsed_minutes: import("zod").ZodNumber;
+                        valid_until: import("zod").ZodString;
+                    }, import("zod/v4/core").$loose>>;
+                    forecast: import("zod").ZodNullable<import("zod").ZodObject<{
+                        outcome: import("zod").ZodEnum<{
+                            warning: "warning";
+                            safe: "safe";
+                        }>;
+                        budget_unit: import("zod").ZodEnum<{
+                            hour: "hour";
+                            day: "day";
+                        }>;
+                        budget_percent: import("zod").ZodNullable<import("zod").ZodNumber>;
+                        depletion_margin_minutes: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    }, import("zod/v4/core").$loose>>;
+                }, import("zod/v4/core").$loose>>;
+                details: import("zod").ZodOptional<import("zod").ZodUnknown>;
+                fetched_at: import("zod").ZodNullable<import("zod").ZodString>;
+                pace_window_index: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+                session_window_index: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+                weekly_window_index: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+            }, import("zod/v4/core").$loose>>>;
+        }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         quotas: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             source: import("zod").ZodOptional<import("zod").ZodString>;
             refresh: import("zod").ZodOptional<import("zod").ZodString>;
         }, import("zod/v4/core").$strip>, import("zod").ZodObject<{
             version: import("zod").ZodNumber;
+            computed_at: import("zod").ZodString;
             scope_id: import("zod").ZodString;
             profile_id: import("zod").ZodString;
             active_provider: import("zod").ZodNullable<import("zod").ZodString>;
@@ -352,13 +457,44 @@ export declare const settingsRouter: {
                 message: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 is_active_provider: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 quota: import("zod").ZodOptional<import("zod").ZodUnknown>;
-                windows: import("zod").ZodOptional<import("zod").ZodUnknown>;
+                windows: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
+                    label: import("zod").ZodString;
+                    used_percent: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    remaining_percent: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    reset_at: import("zod").ZodNullable<import("zod").ZodString>;
+                    detail: import("zod").ZodNullable<import("zod").ZodString>;
+                    window_seconds: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    pace: import("zod").ZodNullable<import("zod").ZodObject<{
+                        expected_remaining_percent: import("zod").ZodNumber;
+                        pace_delta_percent: import("zod").ZodNumber;
+                        burn_rate: import("zod").ZodNumber;
+                        minutes_to_reset: import("zod").ZodNumber;
+                        projected_minutes_to_empty: import("zod").ZodNullable<import("zod").ZodNumber>;
+                        elapsed_minutes: import("zod").ZodNumber;
+                        valid_until: import("zod").ZodString;
+                    }, import("zod/v4/core").$loose>>;
+                    forecast: import("zod").ZodNullable<import("zod").ZodObject<{
+                        outcome: import("zod").ZodEnum<{
+                            warning: "warning";
+                            safe: "safe";
+                        }>;
+                        budget_unit: import("zod").ZodEnum<{
+                            hour: "hour";
+                            day: "day";
+                        }>;
+                        budget_percent: import("zod").ZodNullable<import("zod").ZodNumber>;
+                        depletion_margin_minutes: import("zod").ZodNullable<import("zod").ZodNumber>;
+                    }, import("zod/v4/core").$loose>>;
+                }, import("zod/v4/core").$loose>>>;
                 balances: import("zod").ZodOptional<import("zod").ZodUnknown>;
                 plan: import("zod").ZodOptional<import("zod").ZodUnknown>;
                 details: import("zod").ZodOptional<import("zod").ZodUnknown>;
                 unavailable_reason: import("zod").ZodOptional<import("zod").ZodUnknown>;
                 retry_after: import("zod").ZodOptional<import("zod").ZodUnknown>;
                 fetched_at: import("zod").ZodOptional<import("zod").ZodUnknown>;
+                pace_window_index: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+                session_window_index: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
+                weekly_window_index: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodNumber>>;
             }, import("zod/v4/core").$loose>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         costHistory: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
@@ -431,6 +567,10 @@ export declare const settingsRouter: {
                     base_url: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     models: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodUnknown>>;
                     category: import("zod").ZodOptional<import("zod").ZodString>;
+                    default_model: import("zod").ZodOptional<import("zod").ZodString>;
+                    oauth_flow: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodLiteral<"device_code">>>;
+                    oauth_label: import("zod").ZodOptional<import("zod").ZodString>;
+                    signed_in: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 }, import("zod/v4/core").$loose>>>;
                 categories: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodUnknown>>;
                 current: import("zod").ZodOptional<import("zod").ZodObject<{
@@ -457,7 +597,7 @@ export declare const settingsRouter: {
             }, import("zod/v4/core").$loose>>;
             workspaces: import("zod").ZodOptional<import("zod").ZodObject<{
                 items: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
-                    name: import("zod").ZodOptional<import("zod").ZodString>;
+                    name: import("zod").ZodString;
                     path: import("zod").ZodString;
                 }, import("zod/v4/core").$loose>>>;
                 last: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
@@ -465,6 +605,9 @@ export declare const settingsRouter: {
             models: import("zod").ZodOptional<import("zod").ZodObject<{
                 active_provider: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 default_model: import("zod").ZodOptional<import("zod").ZodString>;
+                default_provider_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                default_bare_id: import("zod").ZodOptional<import("zod").ZodString>;
+                default_option_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 groups: import("zod").ZodArray<import("zod").ZodObject<{
                     provider: import("zod").ZodString;
                     provider_id: import("zod").ZodOptional<import("zod").ZodString>;
@@ -472,12 +615,16 @@ export declare const settingsRouter: {
                         id: import("zod").ZodString;
                         label: import("zod").ZodOptional<import("zod").ZodString>;
                         provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                        bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                         supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                     }, import("zod/v4/core").$loose>>;
                     extra_models: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                         id: import("zod").ZodString;
                         label: import("zod").ZodOptional<import("zod").ZodString>;
                         provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                        bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                         supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                     }, import("zod/v4/core").$loose>>>;
                 }, import("zod/v4/core").$loose>>;
@@ -509,6 +656,10 @@ export declare const settingsRouter: {
                     base_url: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                     models: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodUnknown>>;
                     category: import("zod").ZodOptional<import("zod").ZodString>;
+                    default_model: import("zod").ZodOptional<import("zod").ZodString>;
+                    oauth_flow: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodLiteral<"device_code">>>;
+                    oauth_label: import("zod").ZodOptional<import("zod").ZodString>;
+                    signed_in: import("zod").ZodOptional<import("zod").ZodBoolean>;
                 }, import("zod/v4/core").$loose>>>;
                 categories: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodUnknown>>;
                 current: import("zod").ZodOptional<import("zod").ZodObject<{
@@ -535,7 +686,7 @@ export declare const settingsRouter: {
             }, import("zod/v4/core").$loose>>;
             workspaces: import("zod").ZodOptional<import("zod").ZodObject<{
                 items: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
-                    name: import("zod").ZodOptional<import("zod").ZodString>;
+                    name: import("zod").ZodString;
                     path: import("zod").ZodString;
                 }, import("zod/v4/core").$loose>>>;
                 last: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
@@ -543,6 +694,9 @@ export declare const settingsRouter: {
             models: import("zod").ZodOptional<import("zod").ZodObject<{
                 active_provider: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 default_model: import("zod").ZodOptional<import("zod").ZodString>;
+                default_provider_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
+                default_bare_id: import("zod").ZodOptional<import("zod").ZodString>;
+                default_option_id: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
                 groups: import("zod").ZodArray<import("zod").ZodObject<{
                     provider: import("zod").ZodString;
                     provider_id: import("zod").ZodOptional<import("zod").ZodString>;
@@ -550,12 +704,16 @@ export declare const settingsRouter: {
                         id: import("zod").ZodString;
                         label: import("zod").ZodOptional<import("zod").ZodString>;
                         provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                        bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                         supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                     }, import("zod/v4/core").$loose>>;
                     extra_models: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodObject<{
                         id: import("zod").ZodString;
                         label: import("zod").ZodOptional<import("zod").ZodString>;
                         provider: import("zod").ZodOptional<import("zod").ZodString>;
+                        provider_id: import("zod").ZodOptional<import("zod").ZodString>;
+                        bare_id: import("zod").ZodOptional<import("zod").ZodString>;
                         supports_fast_tier: import("zod").ZodOptional<import("zod").ZodBoolean>;
                     }, import("zod/v4/core").$loose>>>;
                 }, import("zod/v4/core").$loose>>;
@@ -574,25 +732,35 @@ export declare const settingsRouter: {
             message: import("zod").ZodOptional<import("zod").ZodString>;
             models: import("zod").ZodOptional<import("zod").ZodArray<import("zod").ZodUnknown>>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
-        oauthStart: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>, import("zod").ZodObject<{
+        oauthStart: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            provider: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$loose>, import("zod").ZodObject<{
             ok: import("zod").ZodOptional<import("zod").ZodBoolean>;
             status: import("zod").ZodOptional<import("zod").ZodString>;
             url: import("zod").ZodOptional<import("zod").ZodString>;
             verification_url: import("zod").ZodOptional<import("zod").ZodString>;
             user_code: import("zod").ZodOptional<import("zod").ZodString>;
             message: import("zod").ZodOptional<import("zod").ZodString>;
-            error: import("zod").ZodOptional<import("zod").ZodString>;
+            error: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
             flow_id: import("zod").ZodOptional<import("zod").ZodString>;
+            provider: import("zod").ZodOptional<import("zod").ZodString>;
+            expires_in: import("zod").ZodOptional<import("zod").ZodNumber>;
+            interval: import("zod").ZodOptional<import("zod").ZodNumber>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
-        oauthCancel: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodRecord<import("zod").ZodString, import("zod").ZodUnknown>, import("zod").ZodObject<{
+        oauthCancel: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
+            flow_id: import("zod").ZodOptional<import("zod").ZodString>;
+        }, import("zod/v4/core").$loose>, import("zod").ZodObject<{
             ok: import("zod").ZodOptional<import("zod").ZodBoolean>;
             status: import("zod").ZodOptional<import("zod").ZodString>;
             url: import("zod").ZodOptional<import("zod").ZodString>;
             verification_url: import("zod").ZodOptional<import("zod").ZodString>;
             user_code: import("zod").ZodOptional<import("zod").ZodString>;
             message: import("zod").ZodOptional<import("zod").ZodString>;
-            error: import("zod").ZodOptional<import("zod").ZodString>;
+            error: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
             flow_id: import("zod").ZodOptional<import("zod").ZodString>;
+            provider: import("zod").ZodOptional<import("zod").ZodString>;
+            expires_in: import("zod").ZodOptional<import("zod").ZodNumber>;
+            interval: import("zod").ZodOptional<import("zod").ZodNumber>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
         oauthPoll: import("@orpc/server").Procedure<import("@orpc/server").MergedInitialContext<import("@orpc/server").MergedInitialContext<ApiContext & Record<never, never>, ApiContext & Record<never, never>, ApiContext>, ApiContext & Record<never, never> & Omit<ApiContext & Record<never, never>, "ctx">, import("@orpc/server").MergedCurrentContext<ApiContext, Record<never, never>>>, Omit<ApiContext, never> & Record<never, never>, import("zod").ZodObject<{
             flow_id: import("zod").ZodOptional<import("zod").ZodString>;
@@ -603,8 +771,11 @@ export declare const settingsRouter: {
             verification_url: import("zod").ZodOptional<import("zod").ZodString>;
             user_code: import("zod").ZodOptional<import("zod").ZodString>;
             message: import("zod").ZodOptional<import("zod").ZodString>;
-            error: import("zod").ZodOptional<import("zod").ZodString>;
+            error: import("zod").ZodOptional<import("zod").ZodNullable<import("zod").ZodString>>;
             flow_id: import("zod").ZodOptional<import("zod").ZodString>;
+            provider: import("zod").ZodOptional<import("zod").ZodString>;
+            expires_in: import("zod").ZodOptional<import("zod").ZodNumber>;
+            interval: import("zod").ZodOptional<import("zod").ZodNumber>;
         }, import("zod/v4/core").$loose>, import("@orpc/server").MergedErrorMap<Record<never, never>, Record<never, never>>, Record<never, never>>;
     };
 };

package/dist/api/settings-router.js

@@ -7,18 +7,19 @@ import { HttpError } from './router.js';
 import { requestSessionIdGuard } from './session-visibility.js';
 import { activeProfileName, buildProfileCookie, ensureTrustedAuthSession, sessionCanManageServer } from '../auth/gate.js';
 import { forwardedClientIp, isLoopback, rawPeerIsTrustedProxy } from '../http/origin.js';
-import { isNonGlobalAddress } from '../http/addresses.js';
-import { isIP } from 'node:net';
+import { isPrivateLan } from '../http/addresses.js';
 import { HttpFailure } from '../sessions/service.js';
+import { SidecarError } from '../sidecar/client.js';
 import { SessionNotFound } from '../sessions/store.js';
-import { canonicaliseProviderId, ConfigUnavailable, maxTokensStatus, personalityPrompt, personalityRows, reasoningStatus, setAuxiliaryModel, setDefaultModel, setMaxTokens, validReasoningEffort } from '../config/agent-config.js';
+import { auxiliaryModels, canonicaliseProviderId, ConfigUnavailable, maxTokensStatus, personalityPrompt, personalityRows, reasoningStatus, setAuxiliaryModel, setDefaultModel, setMaxTokens, validReasoningEffort } from '../config/agent-config.js';
 import { ProfileError, validateProfileName } from '../profiles/profiles.js';
 import { OnboardingError } from '../onboarding.js';
 import { writeEnvFile } from '../providers/env-file.js';
-import { displayName, providerEnvVar } from '../providers/catalog.js';
-import { OAUTH_PROVIDERS } from '../providers/tables.js';
-import { SETTINGS_SPEECH_KEYS, pyBool } from '../settings.js';
+import { displayName, providerEnvVar, stampAuxiliarySelections } from '../providers/catalog.js';
+import { OAUTH_PROVIDERS, SUPPORTED_PROVIDER_SETUPS } from '../providers/tables.js';
+import { displayBotName, SETTINGS_SPEECH_KEYS, pyBool } from '../settings.js';
 import { str } from '../util.js';
+import { checkExternalLink, linkPreferences } from '../links.js';
 const os = implement(settingsContract).$context().use(requestSessionIdGuard);
 function failure(error) {
     if (error instanceof HttpError)
@@ -43,14 +44,11 @@ async function run(fn) {
     }
 }
 const home = (ctx) => ctx.deps.profileHome(activeProfileName(ctx));
+/** The active profile's auxiliary slots, stamped against the same catalog `/api/models` answers. */
+const auxiliaryState = async (ctx) => stampAuxiliarySelections(auxiliaryModels(await ctx.deps.agentConfig.read(home(ctx))), await ctx.deps.catalog.models(home(ctx)));
 const truthy = (v) => ['1', 'true', 'yes', 'on'].includes((v ?? '').trim().toLowerCase());
-/** Python `addr.is_loopback or addr.is_private` (`ipaddress` treats every non-global range as private). */
-function ipIsLoopbackOrPrivate(addr) {
-    const ip = addr.trim();
-    if (!isIP(ip))
-        return false;
-    return isLoopback(ip) || isNonGlobalAddress(ip);
-}
+/** Python `addr.is_loopback or addr.is_private`: CGNAT/Tailscale `100.64.0.0/10` peers are remote. */
+const ipIsLoopbackOrPrivate = (addr) => isLoopback(addr.trim()) || isPrivateLan(addr);
 /** Python `_onboarding_request_is_local`: forwarded headers count only behind a trusted proxy with the opt-in. */
 export function onboardingRequestIsLocal(ctx) {
     const env = ctx.deps.config.env;
@@ -120,8 +118,11 @@ async function saveSettings(ctx, input) {
     const body = { ...input };
     if (['auto_apply_updates', 'update_channel', 'agent_update_channel', 'check_for_updates'].some((key) => key in body) && !(await canManageServer(ctx)))
         throw new HttpError(403, 'An owner session is required to manage updates');
+    // Link safety applies to every user of this server, so only an owner may relax it.
+    if (['confirm_external_links', 'trusted_link_hosts'].some((key) => key in body) && !(await canManageServer(ctx)))
+        throw new HttpError(403, 'An owner session is required to manage link safety');
     if ('bot_name' in body)
-        body.bot_name = str(body.bot_name).trim() || 'Hermes';
+        body.bot_name = displayBotName(body.bot_name);
     const authEnabledBefore = await auth.isAuthEnabled();
     const passwordAuthBefore = authEnabledBefore && (await auth.getPasswordHash()) !== null;
     const cookie = ctx.authCookie();
@@ -203,11 +204,37 @@ const effortsResolver = (ctx) => async (model, provider) => {
         return [];
     }
 };
-const OAUTH_UNAVAILABLE = 'Browser OAuth onboarding is not available in this release. Run `hermes auth` in a terminal, then reload.';
+const OAUTH_GATE_DENIED = 'Onboarding OAuth is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.';
+/** TAL-398: a device-code sign-in runs in the Agent sidecar, which writes the credential to the profile's own auth store. Callers check the onboarding gate first. */
+async function oauthCall(ctx, method, params) {
+    const sidecar = ctx.deps.sidecar();
+    if (!sidecar)
+        throw new HttpError(503, 'Provider sign-in needs the Agent sidecar, which is not running.', { condition: 'sidecar_unavailable' });
+    try {
+        return await sidecar.call(method, params);
+    }
+    catch (error) {
+        if (!(error instanceof SidecarError))
+            throw error;
+        const status = { sidecar_unavailable: 503, oauth_flow_not_found: 404, oauth_unsupported: 409, oauth_superseded: 409, invalid_params: 400 }[error.condition] ?? (error.code === -32602 ? 400 : 502);
+        throw new HttpError(status, error.message, { condition: error.condition });
+    }
+}
+/** One flow's state as the onboarding view renders it: `ok` is false for every ending without a credential. */
+function oauthView(flow) {
+    return { ok: flow.status === 'pending' || flow.status === 'approved', flow_id: flow.flow_id, provider: flow.provider, status: flow.status, error: flow.error };
+}
+function oauthFlowId(raw) {
+    const flowId = str(raw).trim();
+    if (!flowId)
+        throw new HttpError(400, 'flow_id is required');
+    return flowId;
+}
 export const settingsRouter = os.router({
     settings: {
         get: os.settings.get.handler(({ context: { ctx } }) => run(() => settingsPayload(ctx))),
         save: os.settings.save.handler(({ input, context: { ctx } }) => run(() => saveSettings(ctx, input))),
+        linkCheck: os.settings.linkCheck.handler(({ input, context: { ctx } }) => checkExternalLink(input.url, linkPreferences(ctx.deps.settings.load()))),
     },
     profiles: {
         list: os.profiles.list.handler(({ context: { ctx } }) => run(async () => ({ profiles: await ctx.deps.profiles.list(activeProfileName(ctx)), active: activeProfileName(ctx), single_profile_mode: ctx.deps.isolatedProfileMode() }))),
@@ -284,17 +311,19 @@ export const settingsRouter = os.router({
             ctx.deps.agentConfig.invalidate(home(ctx));
             return { ok: true, provider, models: await ctx.deps.catalog.models(home(ctx)) };
         })),
-        auxiliary: os.models.auxiliary.handler(({ context: { ctx } }) => run(async () => {
-            const { auxiliaryModels } = await import('../config/agent-config.js');
-            return auxiliaryModels(await ctx.deps.agentConfig.read(home(ctx)));
-        })),
+        auxiliary: os.models.auxiliary.handler(({ context: { ctx } }) => run(() => auxiliaryState(ctx))),
         set: os.models.set.handler(({ input, context: { ctx } }) => run(async () => {
             const scope = str(input.scope).trim();
             const provider = str(input.provider).trim() || 'auto';
             const model = str(input.model).trim();
             try {
-                if (scope === 'auxiliary')
-                    return await setAuxiliaryModel(ctx.deps.agentConfig, home(ctx), str(input.task).trim(), provider, model, input.advanced);
+                if (scope === 'auxiliary') {
+                    const saved = await setAuxiliaryModel(ctx.deps.agentConfig, home(ctx), str(input.task).trim(), provider, model, input.advanced);
+                    ctx.deps.catalog.invalidate();
+                    // The write is saved; a catalog failure only drops the refreshed state, and clients then reread it.
+                    const auxiliary = await auxiliaryState(ctx).catch(() => undefined);
+                    return { ...saved, ...(auxiliary ? { auxiliary: auxiliary } : {}) };
+                }
                 if (scope === 'main')
                     return await setDefaultModel(ctx.deps.agentConfig, home(ctx), model, provider === 'auto' ? null : provider, input.advanced);
             }
@@ -442,13 +471,33 @@ export const settingsRouter = os.router({
                 throw new HttpError(500, `probe failed: ${str(error.message)}`);
             }
         })),
-        oauthStart: os.onboarding.oauthStart.handler(({ context: { ctx } }) => run(async () => {
+        oauthStart: os.onboarding.oauthStart.handler(({ input, context: { ctx } }) => run(async () => {
             if (!(await onboardingGateAllows(ctx)))
-                throw new HttpError(403, 'Onboarding OAuth is only available from local networks when auth is not enabled. To bypass this on a remote server, set HERMES_WEBUI_ONBOARDING_OPEN=1.');
-            throw new HttpError(501, OAUTH_UNAVAILABLE);
+                throw new HttpError(403, OAUTH_GATE_DENIED);
+            const provider = str(input.provider).trim().toLowerCase();
+            if (!provider)
+                throw new HttpError(400, 'provider is required');
+            if (SUPPORTED_PROVIDER_SETUPS[provider]?.oauth_flow !== 'device_code')
+                throw new HttpError(400, `'${displayName(provider)}' does not sign in with a device code here. Run \`hermes auth\` in a terminal for it.`);
+            const flow = await oauthCall(ctx, 'oauth.start', { profile_home: home(ctx), provider });
+            return { ok: true, flow_id: flow.flow_id, provider: flow.provider, status: flow.status, user_code: flow.user_code, verification_url: flow.verification_url, url: flow.verification_url, expires_in: flow.expires_in, interval: flow.interval };
+        })),
+        oauthCancel: os.onboarding.oauthCancel.handler(({ input, context: { ctx } }) => run(async () => {
+            if (!(await onboardingGateAllows(ctx)))
+                throw new HttpError(403, OAUTH_GATE_DENIED);
+            const flow = await oauthCall(ctx, 'oauth.cancel', { profile_home: home(ctx), flow_id: oauthFlowId(input.flow_id) });
+            // The cancel answer is about the request: a flow that had already ended keeps its own ending.
+            return { ...oauthView(flow), ok: flow.status === 'cancelled' };
+        })),
+        oauthPoll: os.onboarding.oauthPoll.handler(({ input, context: { ctx } }) => run(async () => {
+            if (!(await onboardingGateAllows(ctx)))
+                throw new HttpError(403, OAUTH_GATE_DENIED);
+            const flow = await oauthCall(ctx, 'oauth.poll', { profile_home: home(ctx), flow_id: oauthFlowId(input.flow_id) });
+            // A new credential changes which providers and models the catalog lists.
+            if (flow.status === 'approved')
+                ctx.deps.catalog.invalidate();
+            return oauthView(flow);
         })),
-        oauthCancel: os.onboarding.oauthCancel.handler(() => run(() => { throw new HttpError(501, OAUTH_UNAVAILABLE); })),
-        oauthPoll: os.onboarding.oauthPoll.handler(() => run(() => { throw new HttpError(501, OAUTH_UNAVAILABLE); })),
     },
 });
 /** Python `set_provider_key`: `.env` write; `null` removes the key. */