@organizaone/o1-code 0.5.1 → 0.6.0

package/locales/ca.js

@@ -3035,7 +3035,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Un altre servidor local',
   'Sign in with your account': 'Inicieu la sessió amb el vostre compte',
-  'aipp device code': 'Codi de dispositiu aipp',
+  'o1-gateway device code': 'Codi de dispositiu o1-gateway',
   'Claude · key from console.anthropic.com':
     'Claude · clau de console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · clau de platform.openai.com',
@@ -3045,7 +3045,8 @@ export default {
     'Connecteu-vos a OrganizaOne amb la vostra clau',
   'Sign in to OrganizaOne in the browser':
     'Inicieu la sessió a OrganizaOne al navegador',
-  'Paste an aipp connection code': 'Enganxeu un codi de connexió aipp',
+  'Paste an o1-gateway connection code':
+    'Enganxeu un codi de connexió o1-gateway',
   'Models from Ollama on this machine': "Models d'Ollama en aquesta màquina",
   'Models from LM Studio on this machine':
     'Models de LM Studio en aquesta màquina',

package/locales/de.js

@@ -2911,7 +2911,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Anderer lokaler Server',
   'Sign in with your account': 'Mit Ihrem Konto anmelden',
-  'aipp device code': 'aipp-Gerätecode',
+  'o1-gateway device code': 'o1-gateway-Gerätecode',
   'Claude · key from console.anthropic.com':
     'Claude · Schlüssel von console.anthropic.com',
   'GPT · key from platform.openai.com':
@@ -2922,7 +2922,8 @@ export default {
     'Mit Ihrem Schlüssel mit OrganizaOne verbinden',
   'Sign in to OrganizaOne in the browser':
     'Im Browser bei OrganizaOne anmelden',
-  'Paste an aipp connection code': 'Einen aipp-Verbindungscode einfügen',
+  'Paste an o1-gateway connection code':
+    'Einen o1-gateway-Verbindungscode einfügen',
   'Models from Ollama on this machine': 'Modelle von Ollama auf diesem Rechner',
   'Models from LM Studio on this machine':
     'Modelle von LM Studio auf diesem Rechner',

package/locales/en.js

@@ -2054,7 +2054,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Other local server',
   'Sign in with your account': 'Sign in with your account',
-  'aipp device code': 'aipp device code',
+  'o1-gateway device code': 'o1-gateway device code',
   'Claude · key from console.anthropic.com':
     'Claude · key from console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · key from platform.openai.com',
@@ -2064,7 +2064,7 @@ export default {
     'Connect to OrganizaOne with your key',
   'Sign in to OrganizaOne in the browser':
     'Sign in to OrganizaOne in the browser',
-  'Paste an aipp connection code': 'Paste an aipp connection code',
+  'Paste an o1-gateway connection code': 'Paste an o1-gateway connection code',
   'Models from Ollama on this machine': 'Models from Ollama on this machine',
   'Models from LM Studio on this machine':
     'Models from LM Studio on this machine',
@@ -2098,6 +2098,31 @@ export default {
   Port: 'Port',
   'Port of the server on this machine, or its full URL.':
     'Port of the server on this machine, or its full URL.',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    'Approve this device in your browser; the models come from OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…':
+    'Asking OrganizaOne for a sign-in code…',
+  'Your code': 'Your code',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    'The sign-in page is opening in your browser. Elsewhere, open:',
+  'Open this address on any device, sign in and enter the code:':
+    'Open this address on any device, sign in and enter the code:',
+  'Waiting for your approval…': 'Waiting for your approval…',
+  'esc cancel': 'esc cancel',
+  'Approved. Listing your models…': 'Approved. Listing your models…',
+  'enter try again · esc back': 'enter try again · esc back',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:',
+  'enter continue · esc back': 'enter continue · esc back',
+  Device: 'Device',
+  at: 'at',
+  'Proxy key {{n}}': 'Proxy key {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:',
+  'Saved. Opening the tunnel and listing your models…':
+    'Saved. Opening the tunnel and listing your models…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    'Nothing was saved: the fingerprints were not confirmed.',
   'checking the key…': 'checking the key…',
   'key valid': 'key valid',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':

package/locales/fr.js

@@ -2908,7 +2908,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Autre serveur local',
   'Sign in with your account': 'Se connecter avec votre compte',
-  'aipp device code': "Code d'appareil aipp",
+  'o1-gateway device code': "Code d'appareil o1-gateway",
   'Claude · key from console.anthropic.com':
     'Claude · clé depuis console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · clé depuis platform.openai.com',
@@ -2918,7 +2918,8 @@ export default {
     'Se connecter à OrganizaOne avec votre clé',
   'Sign in to OrganizaOne in the browser':
     'Se connecter à OrganizaOne dans le navigateur',
-  'Paste an aipp connection code': 'Coller un code de connexion aipp',
+  'Paste an o1-gateway connection code':
+    'Coller un code de connexion o1-gateway',
   'Models from Ollama on this machine': 'Modèles Ollama sur cette machine',
   'Models from LM Studio on this machine':
     'Modèles LM Studio sur cette machine',

package/locales/ja.js

@@ -2665,7 +2665,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'その他のローカルサーバー',
   'Sign in with your account': 'アカウントでサインイン',
-  'aipp device code': 'aipp デバイスコード',
+  'o1-gateway device code': 'o1-gateway デバイスコード',
   'Claude · key from console.anthropic.com':
     'Claude · console.anthropic.com で取得したキー',
   'GPT · key from platform.openai.com':
@@ -2675,7 +2675,7 @@ export default {
   'Connect to OrganizaOne with your key': 'キーで OrganizaOne に接続',
   'Sign in to OrganizaOne in the browser':
     'ブラウザーで OrganizaOne にサインイン',
-  'Paste an aipp connection code': 'aipp 接続コードを貼り付け',
+  'Paste an o1-gateway connection code': 'o1-gateway 接続コードを貼り付け',
   'Models from Ollama on this machine': 'このマシン上の Ollama のモデル',
   'Models from LM Studio on this machine': 'このマシン上の LM Studio のモデル',
   'Any OpenAI-compatible server on this machine':

package/locales/pt.js

@@ -542,7 +542,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Outro servidor local',
   'Sign in with your account': 'Entrar com sua conta',
-  'aipp device code': 'Código de dispositivo aipp',
+  'o1-gateway device code': 'Código de dispositivo o1-gateway',
   'Claude · key from console.anthropic.com':
     'Claude · chave em console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · chave em platform.openai.com',
@@ -552,7 +552,7 @@ export default {
     'Conecte-se à OrganizaOne com sua chave',
   'Sign in to OrganizaOne in the browser':
     'Entre na OrganizaOne pelo navegador',
-  'Paste an aipp connection code': 'Cole um código de conexão aipp',
+  'Paste an o1-gateway connection code': 'Cole um código de conexão o1-gateway',
   'Models from Ollama on this machine': 'Modelos do Ollama nesta máquina',
   'Models from LM Studio on this machine': 'Modelos do LM Studio nesta máquina',
   'Any OpenAI-compatible server on this machine':
@@ -585,6 +585,31 @@ export default {
   Port: 'Porta',
   'Port of the server on this machine, or its full URL.':
     'Porta do servidor nesta máquina, ou a URL completa.',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    'Aprove este dispositivo no navegador; os modelos vêm da OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…':
+    'Pedindo um código de acesso à OrganizaOne…',
+  'Your code': 'Seu código',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    'A página de acesso está abrindo no navegador. Em outro aparelho, abra:',
+  'Open this address on any device, sign in and enter the code:':
+    'Abra este endereço em qualquer aparelho, entre e digite o código:',
+  'Waiting for your approval…': 'Aguardando sua aprovação…',
+  'esc cancel': 'esc cancelar',
+  'Approved. Listing your models…': 'Aprovado. Listando seus modelos…',
+  'enter try again · esc back': 'enter tentar de novo · esc voltar',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    'Cole o código de conexão do console da OrganizaOne, ou o caminho do o1-connect.code de um kit:',
+  'enter continue · esc back': 'enter continuar · esc voltar',
+  Device: 'Dispositivo',
+  at: 'em',
+  'Proxy key {{n}}': 'Chave do proxy {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    'Compare cada impressão digital com a lista do console, lida em um aparelho fora desta rede. Digite yes para salvar:',
+  'Saved. Opening the tunnel and listing your models…':
+    'Salvo. Abrindo o túnel e listando seus modelos…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    'Nada foi salvo: as impressões digitais não foram confirmadas.',
   'checking the key…': 'verificando a chave…',
   'key valid': 'chave válida',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':

package/locales/ru.js

@@ -2878,7 +2878,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Другой локальный сервер',
   'Sign in with your account': 'Войти с учётной записью',
-  'aipp device code': 'Код устройства aipp',
+  'o1-gateway device code': 'Код устройства o1-gateway',
   'Claude · key from console.anthropic.com':
     'Claude · ключ на console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · ключ на platform.openai.com',
@@ -2886,7 +2886,7 @@ export default {
     'Gemini · ключ на aistudio.google.com',
   'Connect to OrganizaOne with your key': 'Подключиться к OrganizaOne по ключу',
   'Sign in to OrganizaOne in the browser': 'Войти в OrganizaOne в браузере',
-  'Paste an aipp connection code': 'Вставить код подключения aipp',
+  'Paste an o1-gateway connection code': 'Вставить код подключения o1-gateway',
   'Models from Ollama on this machine': 'Модели Ollama на этом компьютере',
   'Models from LM Studio on this machine':
     'Модели LM Studio на этом компьютере',

package/locales/zh-TW.js

@@ -2569,7 +2569,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': '其他本機伺服器',
   'Sign in with your account': '使用帳號登入',
-  'aipp device code': 'aipp 裝置碼',
+  'o1-gateway device code': 'o1-gateway 裝置碼',
   'Claude · key from console.anthropic.com':
     'Claude · 在 console.anthropic.com 取得金鑰',
   'GPT · key from platform.openai.com': 'GPT · 在 platform.openai.com 取得金鑰',
@@ -2577,7 +2577,7 @@ export default {
     'Gemini · 在 aistudio.google.com 取得金鑰',
   'Connect to OrganizaOne with your key': '使用金鑰連接 OrganizaOne',
   'Sign in to OrganizaOne in the browser': '在瀏覽器中登入 OrganizaOne',
-  'Paste an aipp connection code': '貼上 aipp 連線碼',
+  'Paste an o1-gateway connection code': '貼上 o1-gateway 連線碼',
   'Models from Ollama on this machine': '本機上的 Ollama 模型',
   'Models from LM Studio on this machine': '本機上的 LM Studio 模型',
   'Any OpenAI-compatible server on this machine':
@@ -2609,6 +2609,30 @@ export default {
   Port: '連接埠',
   'Port of the server on this machine, or its full URL.':
     '本機伺服器的連接埠，或完整 URL。',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    '在瀏覽器中核准此裝置；模型來自 OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…': '正在向 OrganizaOne 索取登入碼…',
+  'Your code': '你的驗證碼',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    '登入頁面正在瀏覽器中開啟。如在其他裝置，請開啟：',
+  'Open this address on any device, sign in and enter the code:':
+    '在任意裝置開啟此網址，登入並輸入驗證碼：',
+  'Waiting for your approval…': '等待你的核准…',
+  'esc cancel': 'esc 取消',
+  'Approved. Listing your models…': '已核准。正在列出你的模型…',
+  'enter try again · esc back': 'enter 重試 · esc 返回',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    '貼上 OrganizaOne 主控台的連線碼，或套件中 o1-connect.code 的路徑：',
+  'enter continue · esc back': 'enter 繼續 · esc 返回',
+  Device: '裝置',
+  at: '位於',
+  'Proxy key {{n}}': '代理金鑰 {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    '請在本網路之外的裝置上查看主控台清單，逐一核對每個指紋。輸入 yes 儲存：',
+  'Saved. Opening the tunnel and listing your models…':
+    '已儲存。正在開啟通道並列出你的模型…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    '未儲存任何內容：指紋未經確認。',
   'checking the key…': '正在檢查金鑰…',
   'key valid': '金鑰有效',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':

package/locales/zh.js

@@ -2771,7 +2771,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': '其他本地服务器',
   'Sign in with your account': '使用账号登录',
-  'aipp device code': 'aipp 设备码',
+  'o1-gateway device code': 'o1-gateway 设备码',
   'Claude · key from console.anthropic.com':
     'Claude · 在 console.anthropic.com 获取密钥',
   'GPT · key from platform.openai.com': 'GPT · 在 platform.openai.com 获取密钥',
@@ -2779,7 +2779,7 @@ export default {
     'Gemini · 在 aistudio.google.com 获取密钥',
   'Connect to OrganizaOne with your key': '使用密钥连接 OrganizaOne',
   'Sign in to OrganizaOne in the browser': '在浏览器中登录 OrganizaOne',
-  'Paste an aipp connection code': '粘贴 aipp 连接码',
+  'Paste an o1-gateway connection code': '粘贴 o1-gateway 连接码',
   'Models from Ollama on this machine': '本机上的 Ollama 模型',
   'Models from LM Studio on this machine': '本机上的 LM Studio 模型',
   'Any OpenAI-compatible server on this machine':
@@ -2811,6 +2811,30 @@ export default {
   Port: '端口',
   'Port of the server on this machine, or its full URL.':
     '本机服务器的端口，或完整 URL。',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    '在浏览器中批准此设备；模型来自 OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…': '正在向 OrganizaOne 请求登录码…',
+  'Your code': '你的验证码',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    '登录页面正在浏览器中打开。如在其他设备，请打开：',
+  'Open this address on any device, sign in and enter the code:':
+    '在任意设备上打开此地址，登录并输入验证码：',
+  'Waiting for your approval…': '等待你的批准…',
+  'esc cancel': 'esc 取消',
+  'Approved. Listing your models…': '已批准。正在列出你的模型…',
+  'enter try again · esc back': 'enter 重试 · esc 返回',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    '粘贴 OrganizaOne 控制台中的连接码，或套件中 o1-connect.code 的路径：',
+  'enter continue · esc back': 'enter 继续 · esc 返回',
+  Device: '设备',
+  at: '位于',
+  'Proxy key {{n}}': '代理密钥 {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    '请在本网络之外的设备上查看控制台列表，逐一核对每个指纹。输入 yes 保存：',
+  'Saved. Opening the tunnel and listing your models…':
+    '已保存。正在打开隧道并列出你的模型…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    '未保存任何内容：指纹未经确认。',
   'checking the key…': '正在检查密钥…',
   'key valid': '密钥有效',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':

package/package.json

@@ -1,15 +1,15 @@
 {
   "name": "@organizaone/o1-code",
-  "version": "0.5.1",
+  "version": "0.6.0",
   "description": "O1-Code - AI-powered coding assistant",
   "license": "Apache-2.0",
   "repository": {
     "type": "git",
-    "url": "git+https://github.com/silvioricardo87/o1-code.git"
+    "url": "git+https://github.com/organizaone/o1-code.git"
   },
-  "homepage": "https://github.com/silvioricardo87/o1-code#readme",
+  "homepage": "https://github.com/organizaone/o1-code#readme",
   "bugs": {
-    "url": "https://github.com/silvioricardo87/o1-code/issues"
+    "url": "https://github.com/organizaone/o1-code/issues"
   },
   "publishConfig": {
     "access": "public"
@@ -42,7 +42,7 @@
     "release-notes.json"
   ],
   "config": {
-    "sandboxImageUri": "ghcr.io/organizaone/o1-code:0.5.1"
+    "sandboxImageUri": "ghcr.io/organizaone/o1-code:0.6.0"
   },
   "dependencies": {},
   "optionalDependencies": {

package/release-notes.json

@@ -1,4 +1,18 @@
 {
+  "0.6.0": {
+    "highlights": [
+      "Sign in with your account under OrganizaOne in /auth",
+      "o1-gateway device code under OrganizaOne in /auth, for a network that intercepts TLS",
+      "The OrganizaOne proxy is now o1-gateway (OrganizaOne AI Gateway), version 9.0.0, which renamed everything it…",
+      "The frame around the conversation is visible again on dark terminals whose background is close to the theme's…"
+    ]
+  },
+  "0.5.2": {
+    "highlights": [
+      "Scrolling the conversation responds in the same frame",
+      "The repository now lives at github.com/organizaone/o1-code."
+    ]
+  },
   "0.5.1": {
     "highlights": [
       "The terminal interface redraws only the lines that changed between frames instead of erasing and rewriting th…"

package/vendor/o1-connect/README.md

@@ -0,0 +1,23 @@
+# o1-connect library (vendored)
+
+The client library of o1-gateway (OrganizaOne AI Gateway), used by the "o1-gateway device code"
+provider: the pinned tunnel of `o1-connect run` started inside o1-code, with a loopback endpoint
+that speaks the proxy's API and swaps the device token in.
+
+- `lib.mjs`: the library, one dependency-free ES module (`node:` modules only).
+- `lib.d.mts`: its types.
+
+Both are copied, never loaded at run time: the library is what protects the session on a network
+that intercepts TLS, so it must not come over one. Update them on purpose, like any vendored
+dependency, and update `VENDOR.json` with the new version and hashes; the test
+`packages/core/src/providers/o1-connect/vendor.test.ts` refuses a copy that does not match.
+
+|                                              |                                                                    |
+| -------------------------------------------- | ------------------------------------------------------------------ |
+| Version                                      | 9.0.0 (`// o1-connect-lib 9.0.0`)                                  |
+| Source                                       | `github.com/organizaone/o1-gateway`, commit `a1f0347`              |
+| `lib.mjs` SHA-256                            | `861acb656291d43c5179a9b9af485a37d052722a308c3164a70a5dcd35d2ff8b` |
+| `lib.d.mts` SHA-256                          | `3da12d175e67dc432bc1bd661f2a9015406213f13baf1782af5d3d6b9ebaae38` |
+| Checked against `GET /client/lib.mjs.sha256` | 2026-10-04, from a trusted network                                 |
+
+License: MIT (the banner of each file).

package/vendor/o1-connect/VENDOR.json

@@ -0,0 +1,10 @@
+{
+  "name": "o1-connect-lib",
+  "version": "9.0.0",
+  "source": "https://github.com/organizaone/o1-gateway",
+  "commit": "a1f0347",
+  "files": {
+    "lib.mjs": "861acb656291d43c5179a9b9af485a37d052722a308c3164a70a5dcd35d2ff8b",
+    "lib.d.mts": "3da12d175e67dc432bc1bd661f2a9015406213f13baf1782af5d3d6b9ebaae38"
+  }
+}

package/vendor/o1-connect/lib.d.mts

@@ -0,0 +1,147 @@
+// o1-connect-lib 9.0.0 - https://github.com/organizaone/o1-gateway (MIT)
+/**
+ * o1-connect as a library (docs/O1-CODE-LOGIN.md §3): the pinned tunnel
+ * of `o1-connect run`, started inside the host app instead of as a
+ * separate process. Bundled by scripts/build-client.mjs into
+ * dist/client/lib.mjs (dependency-free, node: modules only) with its types
+ * in lib.d.ts / lib.d.mts, and served by the proxy under /client/.
+ *
+ * - setup(code, { store, onFingerprint }) reads an `o1gw1.` connection code,
+ *   shows every proxy key's fingerprint to the app (which asks its user to
+ *   compare them with the console, off this network), and only on a yes
+ *   saves the configuration through the app's store.
+ * - open({ store }) starts the tunnel and a loopback endpoint that speaks the
+ *   proxy's API with the device token swapped in, and returns its base URL, a
+ *   per-session key for it, and close().
+ * - forget({ store }) deletes the saved configuration.
+ *
+ * Secrets (the device token) live only in the app's SecretStore and in this
+ * process's memory: the library writes no file, sets no environment
+ * variable and logs nothing of its own. It reads HTTPS_PROXY / NO_PROXY for
+ * the tunnel's outer connection, as the CLI does. Every public type is
+ * declared in this file, so the emitted lib.d.ts stands alone.
+ */
+/** This library's version (the proxy's version it was built with; "dev" unbundled). */
+export declare const version: string;
+/**
+ * Where the library keeps its configuration (the proxy's URL, the device's
+ * name, the pinned keys and the device token), implemented by the host app:
+ * the OS keychain, DPAPI, a passphrase-sealed file of its own. One entry, a
+ * JSON string, under `name` (default "aipp-connect"). The library calls
+ * nothing else to keep a secret.
+ */
+export interface SecretStore {
+    /** The value saved under `name`, or null / undefined when there is none. */
+    get(name: string): Promise<string | null | undefined>;
+    set(name: string, value: string): Promise<void>;
+    /** Deletes the entry; deleting one that does not exist is not an error. */
+    delete(name: string): Promise<void>;
+}
+/** How the tunnel is reached: `auto` tries the WebSocket, then POST. */
+export type Transport = "auto" | "websocket" | "post";
+export type O1ConnectErrorCode = 
+/** The connection code is not an `o1gw1.` code, or is damaged. */
+"invalid_code"
+/** onFingerprint answered no: nothing was saved. */
+ | "fingerprint_rejected"
+/** The store holds no configuration under this name: run setup. */
+ | "not_set_up"
+/** The store's entry is not a configuration this library saved. */
+ | "invalid_config"
+/** The app's store threw; its error is the `cause`. */
+ | "store_failed"
+/** The proxy presented a key that is not pinned: possible interception. Nothing was sent. */
+ | "identity_mismatch"
+/** The tunnel could not be opened or did not answer (network, proxy, device not allowed to tunnel). */
+ | "tunnel_unavailable"
+/** The local port asked for is taken. */
+ | "port_in_use"
+/** The loopback endpoint could not listen for another reason (EACCES, EADDRNOTAVAIL: a port the OS reserves or forbids); the message names it. */
+ | "port_unavailable";
+export declare class O1ConnectError extends Error {
+    readonly code: O1ConnectErrorCode;
+    constructor(code: O1ConnectErrorCode, message: string, options?: {
+        cause?: unknown;
+    });
+}
+export interface SetupInfo {
+    /** The device the code is for. */
+    device: string;
+    /** The proxy's base URL. */
+    url: string;
+}
+export interface SetupOptions {
+    store: SecretStore;
+    /**
+     * Shows the fingerprint of every key the code pins (16 groups of 4 hex
+     * digits each) and answers whether the user confirmed that each one
+     * matches the console's list, read on a device off this network. Every
+     * pin is trusted, so every one must be shown. False (or a throw) saves
+     * nothing.
+     */
+    onFingerprint(fingerprints: string[], info: SetupInfo): boolean | Promise<boolean>;
+    /** Default `auto`. */
+    transport?: Transport;
+    /** The store entry's name; default "aipp-connect". */
+    name?: string;
+}
+export interface SetupResult extends SetupInfo {
+    fingerprints: string[];
+}
+export interface OpenOptions {
+    store: SecretStore;
+    /** The store entry's name; default "aipp-connect". */
+    name?: string;
+    /** The loopback port; default 0 (a free one, picked by the OS). */
+    port?: number;
+    /**
+     * Default true: open() asks the proxy for its keys through the tunnel before
+     * it resolves, so a network that swaps the key, or a proxy that refuses the
+     * device, fails open() instead of the app's first request. False: nothing
+     * is contacted until the first request.
+     */
+    check?: boolean;
+    /** Lines without secrets (routes, statuses, timings, tunnel events); default: none. */
+    log?(line: string): void;
+    /** A tunnel met a key that is not pinned (possible interception); the tunnel waits before trying again. */
+    onMismatch?(receivedPin: string): void;
+}
+export interface Connection {
+    /** `http://127.0.0.1:<port>`: the Anthropic protocol's base URL. */
+    baseUrl: string;
+    /** `http://127.0.0.1:<port>/v1`: the OpenAI protocol's base URL. */
+    openaiBaseUrl: string;
+    /**
+     * The key the endpoint asks for (Authorization: Bearer, or x-api-key),
+     * made for this session and never saved: other local processes cannot use
+     * the endpoint without it. Not the device token.
+     */
+    apiKey: string;
+    port: number;
+    device: string;
+    /** Stops the tunnel and the endpoint; resolves once the port is free. Safe to call twice. */
+    close(): Promise<void>;
+}
+/**
+ * Reads the code, has the app confirm every key's fingerprint, then saves the
+ * configuration under `name` in the store (replacing any there). Nothing is
+ * saved unless onFingerprint answers true. No network access.
+ */
+export declare function setup(code: string, opts: SetupOptions): Promise<SetupResult>;
+/** Starts the tunnel and the loopback endpoint from the configuration in the store. */
+export declare function open(opts: OpenOptions): Promise<Connection>;
+/** Deletes the configuration from the store. The device's token still works until it is removed or replaced in the console. */
+export declare function forget(opts: {
+    store: SecretStore;
+    name?: string;
+}): Promise<void>;
+/**
+ * A SecretStore in memory, for tests and for apps that set up and open in
+ * one run: nothing survives the process.
+ */
+export declare class MemorySecretStore implements SecretStore {
+    #private;
+    get(name: string): Promise<string | null>;
+    set(name: string, value: string): Promise<void>;
+    delete(name: string): Promise<void>;
+}