@organizaone/o1-code 0.5.2 → 0.8.0

package/locales/ca.js

@@ -3035,7 +3035,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Un altre servidor local',
   'Sign in with your account': 'Inicieu la sessió amb el vostre compte',
-  'aipp device code': 'Codi de dispositiu aipp',
+  'o1-gateway device code': 'Codi de dispositiu o1-gateway',
   'Claude · key from console.anthropic.com':
     'Claude · clau de console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · clau de platform.openai.com',
@@ -3045,7 +3045,8 @@ export default {
     'Connecteu-vos a OrganizaOne amb la vostra clau',
   'Sign in to OrganizaOne in the browser':
     'Inicieu la sessió a OrganizaOne al navegador',
-  'Paste an aipp connection code': 'Enganxeu un codi de connexió aipp',
+  'Paste an o1-gateway connection code':
+    'Enganxeu un codi de connexió o1-gateway',
   'Models from Ollama on this machine': "Models d'Ollama en aquesta màquina",
   'Models from LM Studio on this machine':
     'Models de LM Studio en aquesta màquina',

package/locales/de.js

@@ -2911,7 +2911,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Anderer lokaler Server',
   'Sign in with your account': 'Mit Ihrem Konto anmelden',
-  'aipp device code': 'aipp-Gerätecode',
+  'o1-gateway device code': 'o1-gateway-Gerätecode',
   'Claude · key from console.anthropic.com':
     'Claude · Schlüssel von console.anthropic.com',
   'GPT · key from platform.openai.com':
@@ -2922,7 +2922,8 @@ export default {
     'Mit Ihrem Schlüssel mit OrganizaOne verbinden',
   'Sign in to OrganizaOne in the browser':
     'Im Browser bei OrganizaOne anmelden',
-  'Paste an aipp connection code': 'Einen aipp-Verbindungscode einfügen',
+  'Paste an o1-gateway connection code':
+    'Einen o1-gateway-Verbindungscode einfügen',
   'Models from Ollama on this machine': 'Modelle von Ollama auf diesem Rechner',
   'Models from LM Studio on this machine':
     'Modelle von LM Studio auf diesem Rechner',

package/locales/en.js

@@ -8,6 +8,14 @@
 // The key serves as both the translation key and the default English text
 
 export default {
+  'Show Session Summary': 'Show Session Summary',
+  'Show session statistics when quitting and wait for a key before exiting.':
+    'Show session statistics when quitting and wait for a key before exiting.',
+  'Do not show again': 'Do not show again',
+  'Press Space to toggle; any other key to exit.':
+    'Press Space to toggle; any other key to exit.',
+  'Could not save your preference. Press any key to exit without saving.':
+    'Could not save your preference. Press any key to exit without saving.',
   'O1-Code was updated': 'O1-Code was updated',
   'The update failed': 'The update failed',
   Update: 'Update',
@@ -281,6 +289,7 @@ export default {
   '← → select, Delete to remove, ↓ to exit':
     '← → select, Delete to remove, ↓ to exit',
   'Attachments: ': 'Attachments: ',
+  'screenshot {{time}}': 'screenshot {{time}}',
   'Basics:': 'Basics:',
   'Add context': 'Add context',
   'Use {{symbol}} to specify files for context (e.g., {{example}}) to target specific files or folders.':
@@ -2054,7 +2063,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Other local server',
   'Sign in with your account': 'Sign in with your account',
-  'aipp device code': 'aipp device code',
+  'o1-gateway device code': 'o1-gateway device code',
   'Claude · key from console.anthropic.com':
     'Claude · key from console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · key from platform.openai.com',
@@ -2064,7 +2073,7 @@ export default {
     'Connect to OrganizaOne with your key',
   'Sign in to OrganizaOne in the browser':
     'Sign in to OrganizaOne in the browser',
-  'Paste an aipp connection code': 'Paste an aipp connection code',
+  'Paste an o1-gateway connection code': 'Paste an o1-gateway connection code',
   'Models from Ollama on this machine': 'Models from Ollama on this machine',
   'Models from LM Studio on this machine':
     'Models from LM Studio on this machine',
@@ -2098,6 +2107,31 @@ export default {
   Port: 'Port',
   'Port of the server on this machine, or its full URL.':
     'Port of the server on this machine, or its full URL.',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    'Approve this device in your browser; the models come from OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…':
+    'Asking OrganizaOne for a sign-in code…',
+  'Your code': 'Your code',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    'The sign-in page is opening in your browser. Elsewhere, open:',
+  'Open this address on any device, sign in and enter the code:':
+    'Open this address on any device, sign in and enter the code:',
+  'Waiting for your approval…': 'Waiting for your approval…',
+  'esc cancel': 'esc cancel',
+  'Approved. Listing your models…': 'Approved. Listing your models…',
+  'enter try again · esc back': 'enter try again · esc back',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:',
+  'enter continue · esc back': 'enter continue · esc back',
+  Device: 'Device',
+  at: 'at',
+  'Proxy key {{n}}': 'Proxy key {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:',
+  'Saved. Opening the tunnel and listing your models…':
+    'Saved. Opening the tunnel and listing your models…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    'Nothing was saved: the fingerprints were not confirmed.',
   'checking the key…': 'checking the key…',
   'key valid': 'key valid',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':
@@ -3101,5 +3135,6 @@ export default {
   'Review messages held from other O1-Code sessions (accept | deny), and manage trusted controllers (controllers | revoke)':
     'Review messages held from other O1-Code sessions (accept | deny), and manage trusted controllers (controllers | revoke)',
   'Cycle prompt history': 'Cycle prompt history',
+  'history {{position}}/{{total}}': 'history {{position}}/{{total}}',
   'Scroll when the input is empty': 'Scroll when the input is empty',
 };

package/locales/fr.js

@@ -2908,7 +2908,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Autre serveur local',
   'Sign in with your account': 'Se connecter avec votre compte',
-  'aipp device code': "Code d'appareil aipp",
+  'o1-gateway device code': "Code d'appareil o1-gateway",
   'Claude · key from console.anthropic.com':
     'Claude · clé depuis console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · clé depuis platform.openai.com',
@@ -2918,7 +2918,8 @@ export default {
     'Se connecter à OrganizaOne avec votre clé',
   'Sign in to OrganizaOne in the browser':
     'Se connecter à OrganizaOne dans le navigateur',
-  'Paste an aipp connection code': 'Coller un code de connexion aipp',
+  'Paste an o1-gateway connection code':
+    'Coller un code de connexion o1-gateway',
   'Models from Ollama on this machine': 'Modèles Ollama sur cette machine',
   'Models from LM Studio on this machine':
     'Modèles LM Studio sur cette machine',

package/locales/ja.js

@@ -2665,7 +2665,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'その他のローカルサーバー',
   'Sign in with your account': 'アカウントでサインイン',
-  'aipp device code': 'aipp デバイスコード',
+  'o1-gateway device code': 'o1-gateway デバイスコード',
   'Claude · key from console.anthropic.com':
     'Claude · console.anthropic.com で取得したキー',
   'GPT · key from platform.openai.com':
@@ -2675,7 +2675,7 @@ export default {
   'Connect to OrganizaOne with your key': 'キーで OrganizaOne に接続',
   'Sign in to OrganizaOne in the browser':
     'ブラウザーで OrganizaOne にサインイン',
-  'Paste an aipp connection code': 'aipp 接続コードを貼り付け',
+  'Paste an o1-gateway connection code': 'o1-gateway 接続コードを貼り付け',
   'Models from Ollama on this machine': 'このマシン上の Ollama のモデル',
   'Models from LM Studio on this machine': 'このマシン上の LM Studio のモデル',
   'Any OpenAI-compatible server on this machine':

package/locales/pt.js

@@ -7,6 +7,14 @@
 // Portuguese translations for O1-Code CLI (pt-BR)
 
 export default {
+  'Show Session Summary': 'Mostrar resumo da sessão',
+  'Show session statistics when quitting and wait for a key before exiting.':
+    'Mostrar as estatísticas da sessão ao encerrar e aguardar uma tecla para sair.',
+  'Do not show again': 'Não mostrar novamente',
+  'Press Space to toggle; any other key to exit.':
+    'Espaço para marcar ou desmarcar; qualquer outra tecla para sair.',
+  'Could not save your preference. Press any key to exit without saving.':
+    'Não foi possível salvar sua preferência. Pressione qualquer tecla para sair sem salvar.',
   'O1-Code was updated': 'O1-Code atualizado',
   'The update failed': 'A atualização falhou',
   Update: 'Atualização',
@@ -542,7 +550,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Outro servidor local',
   'Sign in with your account': 'Entrar com sua conta',
-  'aipp device code': 'Código de dispositivo aipp',
+  'o1-gateway device code': 'Código de dispositivo o1-gateway',
   'Claude · key from console.anthropic.com':
     'Claude · chave em console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · chave em platform.openai.com',
@@ -552,7 +560,7 @@ export default {
     'Conecte-se à OrganizaOne com sua chave',
   'Sign in to OrganizaOne in the browser':
     'Entre na OrganizaOne pelo navegador',
-  'Paste an aipp connection code': 'Cole um código de conexão aipp',
+  'Paste an o1-gateway connection code': 'Cole um código de conexão o1-gateway',
   'Models from Ollama on this machine': 'Modelos do Ollama nesta máquina',
   'Models from LM Studio on this machine': 'Modelos do LM Studio nesta máquina',
   'Any OpenAI-compatible server on this machine':
@@ -585,6 +593,31 @@ export default {
   Port: 'Porta',
   'Port of the server on this machine, or its full URL.':
     'Porta do servidor nesta máquina, ou a URL completa.',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    'Aprove este dispositivo no navegador; os modelos vêm da OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…':
+    'Pedindo um código de acesso à OrganizaOne…',
+  'Your code': 'Seu código',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    'A página de acesso está abrindo no navegador. Em outro aparelho, abra:',
+  'Open this address on any device, sign in and enter the code:':
+    'Abra este endereço em qualquer aparelho, entre e digite o código:',
+  'Waiting for your approval…': 'Aguardando sua aprovação…',
+  'esc cancel': 'esc cancelar',
+  'Approved. Listing your models…': 'Aprovado. Listando seus modelos…',
+  'enter try again · esc back': 'enter tentar de novo · esc voltar',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    'Cole o código de conexão do console da OrganizaOne, ou o caminho do o1-connect.code de um kit:',
+  'enter continue · esc back': 'enter continuar · esc voltar',
+  Device: 'Dispositivo',
+  at: 'em',
+  'Proxy key {{n}}': 'Chave do proxy {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    'Compare cada impressão digital com a lista do console, lida em um aparelho fora desta rede. Digite yes para salvar:',
+  'Saved. Opening the tunnel and listing your models…':
+    'Salvo. Abrindo o túnel e listando seus modelos…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    'Nada foi salvo: as impressões digitais não foram confirmadas.',
   'checking the key…': 'verificando a chave…',
   'key valid': 'chave válida',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':
@@ -2280,6 +2313,7 @@ export default {
   '← → select, Delete to remove, ↓ to exit':
     '← → selecionar, Delete para remover, ↓ para sair',
   'Attachments: ': 'Anexos: ',
+  'screenshot {{time}}': 'captura {{time}}',
   '(tab to cycle)': '(Tab para alternar)',
   'Updating...': 'Atualizando...',
   Unknown: 'Desconhecido',
@@ -3141,5 +3175,6 @@ export default {
   'Review messages held from other O1-Code sessions (accept | deny), and manage trusted controllers (controllers | revoke)':
     'Revisar mensagens retidas de outras sessões do O1-Code (accept | deny) e gerenciar controladores confiáveis (controllers | revoke)',
   'Cycle prompt history': 'Percorrer o histórico de prompts',
+  'history {{position}}/{{total}}': 'histórico {{position}}/{{total}}',
   'Scroll when the input is empty': 'Rolar com o campo vazio',
 };

package/locales/ru.js

@@ -2878,7 +2878,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': 'Другой локальный сервер',
   'Sign in with your account': 'Войти с учётной записью',
-  'aipp device code': 'Код устройства aipp',
+  'o1-gateway device code': 'Код устройства o1-gateway',
   'Claude · key from console.anthropic.com':
     'Claude · ключ на console.anthropic.com',
   'GPT · key from platform.openai.com': 'GPT · ключ на platform.openai.com',
@@ -2886,7 +2886,7 @@ export default {
     'Gemini · ключ на aistudio.google.com',
   'Connect to OrganizaOne with your key': 'Подключиться к OrganizaOne по ключу',
   'Sign in to OrganizaOne in the browser': 'Войти в OrganizaOne в браузере',
-  'Paste an aipp connection code': 'Вставить код подключения aipp',
+  'Paste an o1-gateway connection code': 'Вставить код подключения o1-gateway',
   'Models from Ollama on this machine': 'Модели Ollama на этом компьютере',
   'Models from LM Studio on this machine':
     'Модели LM Studio на этом компьютере',

package/locales/zh-TW.js

@@ -2569,7 +2569,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': '其他本機伺服器',
   'Sign in with your account': '使用帳號登入',
-  'aipp device code': 'aipp 裝置碼',
+  'o1-gateway device code': 'o1-gateway 裝置碼',
   'Claude · key from console.anthropic.com':
     'Claude · 在 console.anthropic.com 取得金鑰',
   'GPT · key from platform.openai.com': 'GPT · 在 platform.openai.com 取得金鑰',
@@ -2577,7 +2577,7 @@ export default {
     'Gemini · 在 aistudio.google.com 取得金鑰',
   'Connect to OrganizaOne with your key': '使用金鑰連接 OrganizaOne',
   'Sign in to OrganizaOne in the browser': '在瀏覽器中登入 OrganizaOne',
-  'Paste an aipp connection code': '貼上 aipp 連線碼',
+  'Paste an o1-gateway connection code': '貼上 o1-gateway 連線碼',
   'Models from Ollama on this machine': '本機上的 Ollama 模型',
   'Models from LM Studio on this machine': '本機上的 LM Studio 模型',
   'Any OpenAI-compatible server on this machine':
@@ -2609,6 +2609,30 @@ export default {
   Port: '連接埠',
   'Port of the server on this machine, or its full URL.':
     '本機伺服器的連接埠，或完整 URL。',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    '在瀏覽器中核准此裝置；模型來自 OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…': '正在向 OrganizaOne 索取登入碼…',
+  'Your code': '你的驗證碼',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    '登入頁面正在瀏覽器中開啟。如在其他裝置，請開啟：',
+  'Open this address on any device, sign in and enter the code:':
+    '在任意裝置開啟此網址，登入並輸入驗證碼：',
+  'Waiting for your approval…': '等待你的核准…',
+  'esc cancel': 'esc 取消',
+  'Approved. Listing your models…': '已核准。正在列出你的模型…',
+  'enter try again · esc back': 'enter 重試 · esc 返回',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    '貼上 OrganizaOne 主控台的連線碼，或套件中 o1-connect.code 的路徑：',
+  'enter continue · esc back': 'enter 繼續 · esc 返回',
+  Device: '裝置',
+  at: '位於',
+  'Proxy key {{n}}': '代理金鑰 {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    '請在本網路之外的裝置上查看主控台清單，逐一核對每個指紋。輸入 yes 儲存：',
+  'Saved. Opening the tunnel and listing your models…':
+    '已儲存。正在開啟通道並列出你的模型…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    '未儲存任何內容：指紋未經確認。',
   'checking the key…': '正在檢查金鑰…',
   'key valid': '金鑰有效',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':

package/locales/zh.js

@@ -2771,7 +2771,7 @@ export default {
   'Z.AI': 'Z.AI',
   'Other local server': '其他本地服务器',
   'Sign in with your account': '使用账号登录',
-  'aipp device code': 'aipp 设备码',
+  'o1-gateway device code': 'o1-gateway 设备码',
   'Claude · key from console.anthropic.com':
     'Claude · 在 console.anthropic.com 获取密钥',
   'GPT · key from platform.openai.com': 'GPT · 在 platform.openai.com 获取密钥',
@@ -2779,7 +2779,7 @@ export default {
     'Gemini · 在 aistudio.google.com 获取密钥',
   'Connect to OrganizaOne with your key': '使用密钥连接 OrganizaOne',
   'Sign in to OrganizaOne in the browser': '在浏览器中登录 OrganizaOne',
-  'Paste an aipp connection code': '粘贴 aipp 连接码',
+  'Paste an o1-gateway connection code': '粘贴 o1-gateway 连接码',
   'Models from Ollama on this machine': '本机上的 Ollama 模型',
   'Models from LM Studio on this machine': '本机上的 LM Studio 模型',
   'Any OpenAI-compatible server on this machine':
@@ -2811,6 +2811,30 @@ export default {
   Port: '端口',
   'Port of the server on this machine, or its full URL.':
     '本机服务器的端口，或完整 URL。',
+  'Approve this device in your browser; the models come from OrganizaOne':
+    '在浏览器中批准此设备；模型来自 OrganizaOne',
+  'Asking OrganizaOne for a sign-in code…': '正在向 OrganizaOne 请求登录码…',
+  'Your code': '你的验证码',
+  'The sign-in page is opening in your browser. Elsewhere, open:':
+    '登录页面正在浏览器中打开。如在其他设备，请打开：',
+  'Open this address on any device, sign in and enter the code:':
+    '在任意设备上打开此地址，登录并输入验证码：',
+  'Waiting for your approval…': '等待你的批准…',
+  'esc cancel': 'esc 取消',
+  'Approved. Listing your models…': '已批准。正在列出你的模型…',
+  'enter try again · esc back': 'enter 重试 · esc 返回',
+  'Paste the connection code from the OrganizaOne console, or the path to a kit’s o1-connect.code:':
+    '粘贴 OrganizaOne 控制台中的连接码，或套件中 o1-connect.code 的路径：',
+  'enter continue · esc back': 'enter 继续 · esc 返回',
+  Device: '设备',
+  at: '位于',
+  'Proxy key {{n}}': '代理密钥 {{n}}',
+  'Compare every fingerprint with the console’s list, read on a device off this network. Type yes to save:':
+    '请在本网络之外的设备上查看控制台列表，逐一核对每个指纹。输入 yes 保存：',
+  'Saved. Opening the tunnel and listing your models…':
+    '已保存。正在打开隧道并列出你的模型…',
+  'Nothing was saved: the fingerprints were not confirmed.':
+    '未保存任何内容：指纹未经确认。',
   'checking the key…': '正在检查密钥…',
   'key valid': '密钥有效',
   'The provider refused this key ({{status}}). Check it, or press enter again to use it anyway.':

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@organizaone/o1-code",
-  "version": "0.5.2",
+  "version": "0.8.0",
   "description": "O1-Code - AI-powered coding assistant",
   "license": "Apache-2.0",
   "repository": {
@@ -42,7 +42,7 @@
     "release-notes.json"
   ],
   "config": {
-    "sandboxImageUri": "ghcr.io/organizaone/o1-code:0.5.2"
+    "sandboxImageUri": "ghcr.io/organizaone/o1-code:0.8.0"
   },
   "dependencies": {},
   "optionalDependencies": {

package/release-notes.json

@@ -1,4 +1,24 @@
 {
+  "0.8.0": {
+    "highlights": [
+      "The session exit summary remains visible until a key is pressed.",
+      "The activity chips sit directly above the input box, with a single blank row separating them from the convers…",
+      "Attachments above the input show one per row, aligned under the label.",
+      "The working status is separated from the conversation by a blank row and an arrow.",
+      "The vendored o1-connect library supports ordered host failover from gateway connection codes, retaining the l…",
+      "Up and Down recall prompts at the first and last visual input rows instead of scrolling the conversation, and…",
+      "Conversation borders remain visible during streaming and scrolling at narrow terminal widths.",
+      "The prompt's text wraps at the input box's inner edge — the whole terminal width minus border, padding and pr…"
+    ]
+  },
+  "0.6.0": {
+    "highlights": [
+      "Sign in with your account under OrganizaOne in /auth",
+      "o1-gateway device code under OrganizaOne in /auth, for a network that intercepts TLS",
+      "The OrganizaOne proxy is now o1-gateway (OrganizaOne AI Gateway), version 9.0.0, which renamed everything it…",
+      "The frame around the conversation is visible again on dark terminals whose background is close to the theme's…"
+    ]
+  },
   "0.5.2": {
     "highlights": [
       "Scrolling the conversation responds in the same frame",

package/vendor/o1-connect/.lintstagedrc.mjs

@@ -0,0 +1,7 @@
+// Copyright 2026 o1-code contributors
+// SPDX-License-Identifier: Apache-2.0
+
+export default {
+  'lib.mjs': 'node --check',
+  '*.{json,md}': 'prettier --write',
+};

package/vendor/o1-connect/README.md

@@ -0,0 +1,26 @@
+# o1-connect library (vendored)
+
+The client library of o1-gateway (OrganizaOne AI Gateway), used by the "o1-gateway device code"
+provider: the pinned tunnel of `o1-connect run` started inside o1-code, with a loopback endpoint
+that speaks the proxy's API and swaps the device token in.
+
+- `lib.mjs`: the library, one dependency-free ES module (`node:` modules only).
+- `lib.d.mts`: its types.
+
+Both are copied, never loaded at run time: the library is what protects the session on a network
+that intercepts TLS, so it must not come over one. Update them on purpose, like any vendored
+dependency, and update `VENDOR.json` with the new version and hashes; the test
+`packages/core/src/providers/o1-connect/vendor.test.ts` refuses a copy that does not match.
+
+The local lint-staged configuration checks the library's syntax without formatting it, so
+pre-commit checks preserve the upstream bytes and their recorded hash.
+
+|                                     |                                                                                        |
+| ----------------------------------- | -------------------------------------------------------------------------------------- |
+| Version                             | 9.2.0 (`// o1-connect-lib 9.2.0`)                                                      |
+| Source                              | `github.com/organizaone/o1-gateway`, commit `cfa2fc9cb3cbce7c1d2cdee7c9d2886d1cd3f058` |
+| `lib.mjs` SHA-256                   | `51f2f61ebb4531b044f9697475f3c2a9c44571edeb0f526b4d9f7b12d9757fc0`                     |
+| `lib.d.mts` SHA-256                 | `cbccced28dfa777cbbe683859349a30afd54a617a69c31b02989125b9d33b829`                     |
+| Checked against local gateway build | 2026-10-06, source and copy compared with `Get-FileHash`                               |
+
+License: MIT (the banner of each file).

package/vendor/o1-connect/VENDOR.json

@@ -0,0 +1,10 @@
+{
+  "name": "o1-connect-lib",
+  "version": "9.2.0",
+  "source": "https://github.com/organizaone/o1-gateway",
+  "commit": "cfa2fc9cb3cbce7c1d2cdee7c9d2886d1cd3f058",
+  "files": {
+    "lib.mjs": "51f2f61ebb4531b044f9697475f3c2a9c44571edeb0f526b4d9f7b12d9757fc0",
+    "lib.d.mts": "cbccced28dfa777cbbe683859349a30afd54a617a69c31b02989125b9d33b829"
+  }
+}

package/vendor/o1-connect/lib.d.mts

@@ -0,0 +1,149 @@
+// o1-connect-lib 9.2.0 - https://github.com/organizaone/o1-gateway (MIT)
+/**
+ * o1-connect as a library (docs/O1-CODE-LOGIN.md §3): the pinned tunnel
+ * of `o1-connect run`, started inside the host app instead of as a
+ * separate process. Bundled by scripts/build-client.mjs into
+ * dist/client/lib.mjs (dependency-free, node: modules only) with its types
+ * in lib.d.ts / lib.d.mts, and served by the proxy under /client/.
+ *
+ * - setup(code, { store, onFingerprint }) reads an `o1gw1.` connection code,
+ *   shows every proxy key's fingerprint to the app (which asks its user to
+ *   compare them with the console, off this network), and only on a yes
+ *   saves the configuration through the app's store.
+ * - open({ store }) starts the tunnel and a loopback endpoint that speaks the
+ *   proxy's API with the device token swapped in, and returns its base URL, a
+ *   per-session key for it, and close().
+ * - forget({ store }) deletes the saved configuration.
+ *
+ * Secrets (the device token) live only in the app's SecretStore and in this
+ * process's memory: the library writes no file, sets no environment
+ * variable and logs nothing of its own. It reads HTTPS_PROXY / NO_PROXY for
+ * the tunnel's outer connection, as the CLI does. Every public type is
+ * declared in this file, so the emitted lib.d.ts stands alone.
+ */
+/** This library's version (the proxy's version it was built with; "dev" unbundled). */
+export declare const version: string;
+/**
+ * Where the library keeps its configuration (the proxy's URL, the device's
+ * name, the pinned keys and the device token), implemented by the host app:
+ * the OS keychain, DPAPI, a passphrase-sealed file of its own. One entry, a
+ * JSON string, under `name` (default "aipp-connect"). The library calls
+ * nothing else to keep a secret.
+ */
+export interface SecretStore {
+    /** The value saved under `name`, or null / undefined when there is none. */
+    get(name: string): Promise<string | null | undefined>;
+    set(name: string, value: string): Promise<void>;
+    /** Deletes the entry; deleting one that does not exist is not an error. */
+    delete(name: string): Promise<void>;
+}
+/** How the tunnel is reached: `auto` tries the WebSocket, then POST. */
+export type Transport = "auto" | "websocket" | "post";
+export type O1ConnectErrorCode = 
+/** The connection code is not an `o1gw1.` code, or is damaged. */
+"invalid_code"
+/** onFingerprint answered no: nothing was saved. */
+ | "fingerprint_rejected"
+/** The store holds no configuration under this name: run setup. */
+ | "not_set_up"
+/** The store's entry is not a configuration this library saved. */
+ | "invalid_config"
+/** The app's store threw; its error is the `cause`. */
+ | "store_failed"
+/** The proxy presented a key that is not pinned: possible interception. Nothing was sent. */
+ | "identity_mismatch"
+/** The tunnel could not be opened or did not answer (network, proxy, device not allowed to tunnel). */
+ | "tunnel_unavailable"
+/** The local port asked for is taken. */
+ | "port_in_use"
+/** The loopback endpoint could not listen for another reason (EACCES, EADDRNOTAVAIL: a port the OS reserves or forbids); the message names it. */
+ | "port_unavailable";
+export declare class O1ConnectError extends Error {
+    readonly code: O1ConnectErrorCode;
+    constructor(code: O1ConnectErrorCode, message: string, options?: {
+        cause?: unknown;
+    });
+}
+export interface SetupInfo {
+    /** The device the code is for. */
+    device: string;
+    /** The proxy's base URL. */
+    url: string;
+    /** The failover hosts after `url` (a multihost code): the session tries them in order while one cannot be reached. */
+    urls?: string[];
+}
+export interface SetupOptions {
+    store: SecretStore;
+    /**
+     * Shows the fingerprint of every key the code pins (16 groups of 4 hex
+     * digits each) and answers whether the user confirmed that each one
+     * matches the console's list, read on a device off this network. Every
+     * pin is trusted, so every one must be shown. False (or a throw) saves
+     * nothing.
+     */
+    onFingerprint(fingerprints: string[], info: SetupInfo): boolean | Promise<boolean>;
+    /** Default `auto`. */
+    transport?: Transport;
+    /** The store entry's name; default "aipp-connect". */
+    name?: string;
+}
+export interface SetupResult extends SetupInfo {
+    fingerprints: string[];
+}
+export interface OpenOptions {
+    store: SecretStore;
+    /** The store entry's name; default "aipp-connect". */
+    name?: string;
+    /** The loopback port; default 0 (a free one, picked by the OS). */
+    port?: number;
+    /**
+     * Default true: open() asks the proxy for its keys through the tunnel before
+     * it resolves, so a network that swaps the key, or a proxy that refuses the
+     * device, fails open() instead of the app's first request. False: nothing
+     * is contacted until the first request.
+     */
+    check?: boolean;
+    /** Lines without secrets (routes, statuses, timings, tunnel events); default: none. */
+    log?(line: string): void;
+    /** A tunnel met a key that is not pinned (possible interception); the tunnel waits before trying again. */
+    onMismatch?(receivedPin: string): void;
+}
+export interface Connection {
+    /** `http://127.0.0.1:<port>`: the Anthropic protocol's base URL. */
+    baseUrl: string;
+    /** `http://127.0.0.1:<port>/v1`: the OpenAI protocol's base URL. */
+    openaiBaseUrl: string;
+    /**
+     * The key the endpoint asks for (Authorization: Bearer, or x-api-key),
+     * made for this session and never saved: other local processes cannot use
+     * the endpoint without it. Not the device token.
+     */
+    apiKey: string;
+    port: number;
+    device: string;
+    /** Stops the tunnel and the endpoint; resolves once the port is free. Safe to call twice. */
+    close(): Promise<void>;
+}
+/**
+ * Reads the code, has the app confirm every key's fingerprint, then saves the
+ * configuration under `name` in the store (replacing any there). Nothing is
+ * saved unless onFingerprint answers true. No network access.
+ */
+export declare function setup(code: string, opts: SetupOptions): Promise<SetupResult>;
+/** Starts the tunnel and the loopback endpoint from the configuration in the store. */
+export declare function open(opts: OpenOptions): Promise<Connection>;
+/** Deletes the configuration from the store. The device's token still works until it is removed or replaced in the console. */
+export declare function forget(opts: {
+    store: SecretStore;
+    name?: string;
+}): Promise<void>;
+/**
+ * A SecretStore in memory, for tests and for apps that set up and open in
+ * one run: nothing survives the process.
+ */
+export declare class MemorySecretStore implements SecretStore {
+    #private;
+    get(name: string): Promise<string | null>;
+    set(name: string, value: string): Promise<void>;
+    delete(name: string): Promise<void>;
+}