@tnnevol/dsh-zcode 0.0.0-stage → 6.0.6

package/LICENSE

@@ -0,0 +1,202 @@
+
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to Licensor for inclusion in the Work by the copyright owner
+      or by an individual or Legal Entity authorized to submit on behalf of
+      the copyright owner. For the purposes of this definition, "submitted"
+      means any form of electronic, verbal, or written communication sent
+      to the Licensor or its representatives, including but not limited to
+      communication on electronic mailing lists, source code control systems,
+      and issue tracking systems that are managed by, or on behalf of, the
+      Licensor for the purpose of discussing and improving the Work, but
+      excluding communication that is conspicuously marked or otherwise
+      designated in writing by the copyright owner as "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright [yyyy] [name of copyright owner]
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

package/compatibility.json

@@ -0,0 +1,29 @@
+{
+  "schemaVersion": 1,
+  "engines": {
+    "node": "^22.19.0 || >=24.0.0"
+  },
+  "dshPluginApi": {
+    "version": "0.2.1-rc.3",
+    "packages": [
+      "@deepseek-ai/dsh-atomic-write",
+      "@deepseek-ai/dsh-attachment",
+      "@deepseek-ai/dsh-client-locale",
+      "@deepseek-ai/dsh-client-ui-plugin-manager",
+      "@deepseek-ai/dsh-client-ui-primitives",
+      "@deepseek-ai/dsh-client-ui-renderer",
+      "@deepseek-ai/dsh-client-ui-session",
+      "@deepseek-ai/dsh-client-ui-settings",
+      "@deepseek-ai/dsh-client-ui-settings-plugins",
+      "@deepseek-ai/dsh-client-ui-slots",
+      "@deepseek-ai/dsh-home-paths",
+      "@deepseek-ai/dsh-host-webserver",
+      "@deepseek-ai/dsh-llm",
+      "@deepseek-ai/dsh-llm-pi-ai"
+    ]
+  },
+  "piAi": {
+    "package": "@earendil-works/pi-ai",
+    "version": "1.1.0"
+  }
+}

package/cordis.patch.yml

@@ -0,0 +1,12 @@
+# @tnnevol/dsh-zcode 组合包 patch。
+#
+# 本插件不接管既有接缝：它自己向 `ctx.llm` 注册一个 provider 路由
+# （`dsh-zcode`），模型目录由 ZCode 账号权益实时拉取，因此**不在**这里声明
+# `llm-pi-ai.providers`——静态声明会把目录固定在安装时的快照上，正是本插件
+# 要解决的问题。
+#
+# 账号登录、模型目录和 Start Plan 额度都由宿主侧注册到 DSH Web 服务，浏览器
+# 半侧在插件详情页渲染配置区块；两者都随本行激活。
+- insert:
+    - id: dsh-zcode
+      name: '@tnnevol/dsh-zcode'

package/lib/auth-B99K5y4S.d.ts

@@ -0,0 +1,150 @@
+import { D as ZCodeFamily, o as ZCodeConsoleClient } from "./console-client-54wUcPDA.js";
+import { Context } from "@deepseek-ai/cordis";
+//#region src/contracts/auth.d.ts
+/** 授权页信息，交给浏览器打开。 */
+interface ZCodeLoginChallenge {
+  /** 本次授权的家族。 */
+  readonly family: ZCodeFamily;
+  /** 需要在浏览器打开的授权地址。 */
+  readonly authorizeUrl: string;
+  /** 授权链接有效期（秒）。 */
+  readonly expiresInSeconds: number;
+}
+/** 账号信息；全部来自 ZCode，缺字段时保持缺省。 */
+interface ZCodeAccountInfo {
+  readonly userId?: string;
+  readonly email?: string;
+  readonly name?: string;
+  /** 头像地址（若上游返回）。 */
+  readonly avatar?: string;
+  /** 本次登录使用的家族。 */
+  readonly family?: ZCodeFamily;
+}
+/** 浏览器可见的登录状态。 */
+type ZCodeAuthStatus = {
+  status: 'signed-out';
+} | {
+  status: 'signing-in';
+  challenge?: ZCodeLoginChallenge;
+} | ({
+  status: 'signed-in';
+} & ZCodeAccountInfo) | {
+  status: 'error';
+  message: string;
+};
+/**
+ * 落盘的凭据文档。
+ *
+ * 三份材料各有用途，缺一不可：
+ * - `zcodeJwt`：ZCode 域凭证，额度/权益/客户端配置都用它；
+ * - `accessToken`：家族侧的 MaaS 凭证，换取项目令牌时使用；
+ * - `refreshToken`：可选，上游给了就保存，便于后续刷新。
+ */
+interface ZCodeCredentialRecord {
+  readonly version: 1;
+  /** 登录使用的家族。 */
+  readonly family: ZCodeFamily;
+  /** ZCode 域 JWT（额度与权益的鉴权材料）。 */
+  readonly zcodeJwt: string;
+  /** 家族侧 MaaS access token。 */
+  readonly accessToken?: string;
+  /** 家族侧 refresh token。 */
+  readonly refreshToken?: string;
+  /** JWT 过期时间（epoch ms）；上游未给出时缺省。 */
+  readonly expiresAt?: number;
+  readonly userId?: string;
+  readonly email?: string;
+  readonly name?: string;
+  readonly avatar?: string;
+}
+//#endregion
+//#region src/host/credentials.d.ts
+/** 凭据文件名（位于 DSH home 下）。 */
+declare const ZCODE_AUTH_FILENAME = ".dsh-zcode-auth.json";
+/** 凭据文件路径。 */
+declare function zcodeAuthPath(dshHome?: string): string;
+/** 文件落盘的账号凭据存储。 */
+declare class ZCodeCredentialStore {
+  readonly filename: string;
+  constructor(filename?: string);
+  /** 读取当前凭据；不存在时返回 undefined。 */
+  read(): Promise<ZCodeCredentialRecord | undefined>;
+  /** 覆盖写入凭据（原子写 + 文件锁）。 */
+  write(credential: ZCodeCredentialRecord): Promise<ZCodeCredentialRecord>;
+  /** 删除凭据；不存在时静默成功。 */
+  delete(): Promise<void>;
+}
+//#endregion
+//#region src/host/auth.d.ts
+/** 授权服务依赖。 */
+interface ZCodeAuthServiceOptions {
+  readonly store: ZCodeCredentialStore;
+  readonly client: ZCodeConsoleClient;
+  /** 凭据变化回调：登录成功或退出时触发目录/额度刷新。 */
+  readonly onCredentialChange?: () => void;
+  readonly logger?: Pick<Context['logger'], 'warn' | 'info'>;
+  /** 便于测试注入稳定时钟。 */
+  readonly now?: () => number;
+  /**
+   * 桌面授权码流程的回调地址。
+   *
+   * 桌面端用 `zcode://oauth/callback` 自定义协议接收授权码；插件在浏览器里无法
+   * 注册该协议，因此改为由本插件自己的同源路由接收 code 并完成换取。
+   */
+  readonly callbackBaseUrl?: () => string | undefined;
+}
+/** 登录服务。 */
+declare class ZCodeAuthService {
+  private readonly options;
+  private cached;
+  private loaded;
+  private flow;
+  private lastError;
+  private readonly listeners;
+  constructor(options: ZCodeAuthServiceOptions);
+  private get now();
+  /** 订阅凭据变化；返回退订函数。 */
+  subscribe(listener: () => void): () => void;
+  private emit;
+  /** 读取凭据（首次读磁盘，之后走内存缓存）。 */
+  credential(): Promise<ZCodeCredentialRecord | undefined>;
+  /** 当前可用于请求的 ZCode JWT；未登录或已过期时返回 undefined。 */
+  zcodeJwt(): Promise<string | undefined>;
+  /**
+   * 家族侧 MaaS 令牌；`ultra` 端点用这一份凭据。
+   *
+   * 与 {@link zcodeJwt} 分开取，因为两个端点接受的凭据类型不同：`start-plan`
+   * 认 ZCode 域 JWT，`ultra` 认家族 MaaS 令牌。登录时上游是否返回家族令牌
+   * 取决于授权流程，缺失时返回 undefined，由上层给出可读提示。
+   */
+  accessToken(): Promise<string | undefined>;
+  /** 浏览器可见的登录状态（不含任何 token）。 */
+  status(): Promise<ZCodeAuthStatus>;
+  private challengeOf;
+  /**
+   * 发起桌面授权码登录。
+   *
+   * 授权码由上游回跳到插件自己的同源路由。state 由本服务生成并在回调时比对，
+   * 防止别人把授权码塞进来。
+   */
+  loginDesktop(family: ZCodeFamily, origin?: string): Promise<ZCodeLoginChallenge>;
+  /**
+   * 处理桌面授权回调。
+   *
+   * `code` 只能兑换一次；兑换成功后立刻落盘并清理进行中的 flow。
+   */
+  completeDesktopLogin(input: {
+    readonly code: string;
+    readonly state: string;
+    readonly family: ZCodeFamily;
+  }): Promise<void>;
+  private clearFlow;
+  /** 取消进行中的授权；已保存的凭据不受影响。 */
+  cancel(): void;
+  /** 退出登录：停止轮询并删除凭据。 */
+  logout(): Promise<void>;
+  /** 释放定时器（插件卸载时调用）。 */
+  dispose(): void;
+}
+//#endregion
+export { zcodeAuthPath as a, ZCodeCredentialRecord as c, ZCodeCredentialStore as i, ZCodeLoginChallenge as l, ZCodeAuthServiceOptions as n, ZCodeAccountInfo as o, ZCODE_AUTH_FILENAME as r, ZCodeAuthStatus as s, ZCodeAuthService as t };

package/lib/auth-BrDmmPY2.js

@@ -0,0 +1,206 @@
+import { f as ZCODE_FAMILY_LABELS } from "./identity-DE3rOYuE.js";
+import { randomBytes } from "node:crypto";
+//#region src/contracts/auth.ts
+/**
+* 判断凭据是否已过期。
+*
+* ZCode 的账号 JWT 目前不带 `exp`，因此只有上游明确给出时间时才判定；
+* 留 30 秒提前量，避免在临界点发出必然失败的请求。
+*/
+function isCredentialExpired(record, now = Date.now()) {
+	if (record.expiresAt === void 0) return false;
+	return record.expiresAt - 3e4 <= now;
+}
+//#endregion
+//#region src/host/auth.ts
+/**
+* ZCode 账号登录与凭据生命周期。
+*
+* 采用授权码流程：插件生成 state → 浏览器打开上游授权页 → 上游回跳到插件自己的
+* 同源回调路由 → 用 code 换取令牌。state 与 redirect_uri 都必须在换取时原样带回，
+* 前者防别人把授权码塞进来，后者是上游的校验要求。
+*
+* 不支持 API Key 登录：Start Plan 的模型请求只认账号身份。
+*
+* @module dsh-zcode/auth
+*/
+/** 单次授权流程的有效期上限（毫秒）。 */
+const AUTH_FLOW_TTL_MS = 9e5;
+/** 登录服务。 */
+var ZCodeAuthService = class {
+	options;
+	cached;
+	loaded = false;
+	flow;
+	lastError;
+	listeners = /* @__PURE__ */ new Set();
+	constructor(options) {
+		this.options = options;
+	}
+	get now() {
+		return this.options.now?.() ?? Date.now();
+	}
+	/** 订阅凭据变化；返回退订函数。 */
+	subscribe(listener) {
+		this.listeners.add(listener);
+		return () => this.listeners.delete(listener);
+	}
+	emit() {
+		for (const listener of this.listeners) try {
+			listener();
+		} catch (error) {
+			this.options.logger?.warn("dsh-zcode: 凭据监听器失败", error);
+		}
+	}
+	/** 读取凭据（首次读磁盘，之后走内存缓存）。 */
+	async credential() {
+		if (this.loaded) return this.cached;
+		this.cached = await this.options.store.read();
+		this.loaded = true;
+		return this.cached;
+	}
+	/** 当前可用于请求的 ZCode JWT；未登录或已过期时返回 undefined。 */
+	async zcodeJwt() {
+		const record = await this.credential();
+		if (record === void 0) return void 0;
+		if (isCredentialExpired(record, this.now)) {
+			this.options.logger?.warn("dsh-zcode: 账号凭据已过期，请重新登录");
+			return;
+		}
+		return record.zcodeJwt;
+	}
+	/**
+	* 家族侧 MaaS 令牌；`ultra` 端点用这一份凭据。
+	*
+	* 与 {@link zcodeJwt} 分开取，因为两个端点接受的凭据类型不同：`start-plan`
+	* 认 ZCode 域 JWT，`ultra` 认家族 MaaS 令牌。登录时上游是否返回家族令牌
+	* 取决于授权流程，缺失时返回 undefined，由上层给出可读提示。
+	*/
+	async accessToken() {
+		const record = await this.credential();
+		if (record === void 0) return void 0;
+		if (isCredentialExpired(record, this.now)) return void 0;
+		const token = record.accessToken;
+		return typeof token === "string" && token.length > 0 ? token : void 0;
+	}
+	/** 浏览器可见的登录状态（不含任何 token）。 */
+	async status() {
+		if (this.flow !== void 0) return {
+			status: "signing-in",
+			challenge: this.challengeOf(this.flow)
+		};
+		if (this.lastError !== void 0) return {
+			status: "error",
+			message: this.lastError
+		};
+		const record = await this.credential();
+		if (record === void 0) return { status: "signed-out" };
+		return {
+			status: "signed-in",
+			family: record.family,
+			...record.userId === void 0 ? {} : { userId: record.userId },
+			...record.email === void 0 ? {} : { email: record.email },
+			...record.name === void 0 ? {} : { name: record.name },
+			...record.avatar === void 0 ? {} : { avatar: record.avatar }
+		};
+	}
+	challengeOf(flow) {
+		return {
+			family: flow.family,
+			authorizeUrl: flow.authorizeUrl,
+			expiresInSeconds: Math.max(0, Math.round((flow.expiresAt - this.now) / 1e3))
+		};
+	}
+	/**
+	* 发起桌面授权码登录。
+	*
+	* 授权码由上游回跳到插件自己的同源路由。state 由本服务生成并在回调时比对，
+	* 防止别人把授权码塞进来。
+	*/
+	async loginDesktop(family, origin) {
+		const base = (origin === void 0 ? void 0 : `${origin}/plugins/dsh-zcode/auth/callback`) ?? this.options.callbackBaseUrl?.();
+		if (base === void 0 || base === "") throw new Error("zcode: 未配置桌面登录回调地址，无法发起授权码登录");
+		if (this.flow !== void 0) this.clearFlow();
+		this.lastError = void 0;
+		const state = randomBytes(16).toString("hex");
+		const callbackUrl = new URL(base);
+		callbackUrl.searchParams.set("family", family);
+		const flow = {
+			family,
+			authorizeUrl: `https://bigmodel.cn/login?${new URLSearchParams({
+				appId: "zcode",
+				redirect: callbackUrl.toString(),
+				state
+			}).toString()}`,
+			expiresAt: this.now + AUTH_FLOW_TTL_MS,
+			state,
+			redirectUri: callbackUrl.toString()
+		};
+		this.flow = flow;
+		this.emit();
+		return this.challengeOf(flow);
+	}
+	/**
+	* 处理桌面授权回调。
+	*
+	* `code` 只能兑换一次；兑换成功后立刻落盘并清理进行中的 flow。
+	*/
+	async completeDesktopLogin(input) {
+		const flow = this.flow;
+		if (flow === void 0) throw new Error("zcode: 没有进行中的桌面授权，请重新发起登录");
+		if (flow.state !== input.state) throw new Error("zcode: 授权回调 state 不匹配，请重新发起登录");
+		if (flow.expiresAt <= this.now) {
+			this.clearFlow();
+			throw new Error("zcode: 授权已超时，请重新发起登录");
+		}
+		const redirectUri = flow.redirectUri;
+		if (redirectUri === void 0) throw new Error("zcode: 缺少回调地址，请重新发起登录");
+		const result = await this.options.client.exchangeDesktopCode(input.family, input.code, redirectUri, input.state);
+		if (result.status !== "ready") throw new Error("zcode: 授权码换取未返回凭据");
+		if (result.zcodeJwt.trim().length === 0) throw new Error("zcode: 授权码换取返回空凭据");
+		const credential = {
+			version: 1,
+			family: input.family,
+			zcodeJwt: result.zcodeJwt,
+			...result.accessToken === void 0 ? {} : { accessToken: result.accessToken },
+			...result.refreshToken === void 0 ? {} : { refreshToken: result.refreshToken },
+			...result.expiresAt === void 0 ? {} : { expiresAt: result.expiresAt },
+			...result.user?.userId === void 0 ? {} : { userId: result.user.userId },
+			...result.user?.email === void 0 ? {} : { email: result.user.email },
+			...result.user?.name === void 0 ? {} : { name: result.user.name },
+			...result.user?.avatar === void 0 ? {} : { avatar: result.user.avatar }
+		};
+		this.cached = await this.options.store.write(credential);
+		this.loaded = true;
+		this.clearFlow();
+		this.options.logger?.info(`dsh-zcode: ${ZCODE_FAMILY_LABELS[input.family]} 桌面授权登录成功`);
+		this.emit();
+		this.options.onCredentialChange?.();
+	}
+	clearFlow() {
+		this.flow = void 0;
+	}
+	/** 取消进行中的授权；已保存的凭据不受影响。 */
+	cancel() {
+		this.clearFlow();
+		this.lastError = void 0;
+		this.emit();
+	}
+	/** 退出登录：停止轮询并删除凭据。 */
+	async logout() {
+		this.clearFlow();
+		this.lastError = void 0;
+		this.cached = void 0;
+		this.loaded = true;
+		await this.options.store.delete();
+		this.emit();
+		this.options.onCredentialChange?.();
+	}
+	/** 释放定时器（插件卸载时调用）。 */
+	dispose() {
+		this.clearFlow();
+		this.listeners.clear();
+	}
+};
+//#endregion
+export { ZCodeAuthService as t };

package/lib/auth-routes.d.ts

@@ -0,0 +1,2 @@
+import { a as trustedRequest, i as registerZCodeRoutes, n as ZCODE_ORIGIN_NOT_TRUSTED, r as ZCodeRoutesOptions, t as ZCODE_CATALOG_UNAVAILABLE } from "./routes-DhHLL5UC.js";
+export { ZCODE_CATALOG_UNAVAILABLE, ZCODE_ORIGIN_NOT_TRUSTED, ZCodeRoutesOptions, registerZCodeRoutes, trustedRequest };

package/lib/auth-routes.js

@@ -0,0 +1,2 @@
+import { i as trustedRequest, n as ZCODE_ORIGIN_NOT_TRUSTED, r as registerZCodeRoutes, t as ZCODE_CATALOG_UNAVAILABLE } from "./routes-vzWlp-oN.js";
+export { ZCODE_CATALOG_UNAVAILABLE, ZCODE_ORIGIN_NOT_TRUSTED, registerZCodeRoutes, trustedRequest };

package/lib/auth.d.ts

@@ -0,0 +1,2 @@
+import { n as ZCodeAuthServiceOptions, t as ZCodeAuthService } from "./auth-B99K5y4S.js";
+export { ZCodeAuthService, ZCodeAuthServiceOptions };

package/lib/auth.js

@@ -0,0 +1,2 @@
+import { t as ZCodeAuthService } from "./auth-BrDmmPY2.js";
+export { ZCodeAuthService };