@vibedev-si/dsh-vibedev 0.2.7 → 0.3.1

package/lib/auth/login.d.ts

@@ -12,8 +12,12 @@
  * - `POST /api/v1/vibedev/app-token/revoke` (bearer or `{refresh_token}`): always 204
  * @module dsh-vibedev/auth/login
  */
+import type { SignInAttempt } from './sign-in-state.js';
+export type { SignInAttempt } from './sign-in-state.js';
 /** A stored plugin session. */
 export interface PluginGrant {
+    /** Origin that issued this stored app grant; legacy unmarked grants belong to the domestic gateway only. */
+    readonly gatewayOrigin?: string;
     readonly accessToken: string;
     readonly refreshToken: string;
     /** Epoch ms. */
@@ -57,7 +61,7 @@ export interface PluginLoginOptions {
     readonly now?: () => number;
     /** Open a URL in the system browser; resolves whether that was attempted successfully. */
     readonly openBrowser?: (url: string) => Promise<boolean>;
-    /** How long a started sign-in waits for the browser. Defaults to 5 minutes. */
+    /** Sign-in deadline through credential exchange, before the atomic write starts. Defaults to 5 minutes. */
     readonly signInTimeoutMs?: number;
     /** The client name the gateway records for the sign-in (it picks the key the usage is billed to). Defaults to `vibedev-plugin`. */
     readonly client?: string;
@@ -93,6 +97,7 @@ export declare class PluginLogin {
     private readFailureReported;
     private refreshing;
     private pending;
+    private attempt;
     private readonly listeners;
     private readonly now;
     private readonly origin;
@@ -106,6 +111,11 @@ export declare class PluginLogin {
     restore(): Promise<void>;
     /** Take a grant as current and tell listeners when it changed. */
     private adopt;
+    private notify;
+    /** A copied safe snapshot, retained after completion until the next sign-in. */
+    signInAttempt(): SignInAttempt | undefined;
+    private logAttempt;
+    private transition;
     private save;
     /**
      * Hear about sign-in and sign-out.
@@ -151,7 +161,7 @@ export declare class PluginLogin {
     }): Promise<PendingSignIn & {
         opened: boolean;
     }>;
-    private redeem;
+    private beginSignIn;
     /** Sign out: revoke the session at the gateway (best effort) and forget it. */
     signOut(): Promise<void>;
     /** Stop a waiting sign-in. */

package/lib/auth/sign-in-state.d.ts

@@ -0,0 +1,21 @@
+/** Safe host diagnostics: deliberately separate from authorization URLs and grants. */
+export interface SignInAttempt {
+    readonly id: string;
+    readonly phase: 'preparing' | 'waiting-browser' | 'exchanging' | 'committing' | 'succeeded' | 'failed' | 'cancelled' | 'expired';
+    readonly expiresAt: number;
+    readonly gatewayOrigin: string;
+    readonly stage?: 'listen' | 'device' | 'redeem' | 'persist';
+    readonly errorCode?: 'network' | 'timeout' | 'gateway-refused' | 'gateway-unavailable' | 'protocol' | 'storage' | 'callback';
+    readonly httpStatus?: number;
+    readonly networkCode?: string;
+}
+export declare const REDEEM_PATH = "/api/v1/vibedev/link/redeem";
+export type SignInFailure = Pick<SignInAttempt, 'errorCode' | 'httpStatus' | 'networkCode'>;
+/** Read only fixed transport codes, never error text, stack, body or arbitrary fields. */
+export declare function transportFailure(error: unknown): SignInFailure;
+/** A fixed bilingual explanation suitable for exposed rejection messages. */
+export declare function failureMessage(attempt: Pick<SignInAttempt, 'errorCode' | 'stage' | 'httpStatus'>): string;
+/** Only our fixed explanation and escaped safe enum/status fields reach the browser. */
+export declare function failurePage(attempt: SignInAttempt): string;
+/** Explicit log allowlist; adding fields to the public attempt never expands log output. */
+export declare function attemptLog(event: 'request' | 'phase' | 'response' | 'terminal', attempt: SignInAttempt): string;

package/lib/gateway/assets.d.ts

@@ -25,8 +25,8 @@ export interface UploadedAsset {
     readonly sha256: string;
     readonly bytes: number;
 }
-/** Purposes the plugin uploads under. */
-export type AssetPurpose = 'video_reference';
+/** Purposes the plugin uploads under: references of a video request, and the reference audio of a speech request. */
+export type AssetPurpose = 'video_reference' | 'audio_reference' | (string & {});
 /**
  * Read an asset answer from `uploads`, `complete` or `refresh`.
  * @param body - the parsed answer.

package/lib/gateway/catalog.d.ts

@@ -8,6 +8,12 @@
  * the versioned per-mode declarations (`modes_schema_version: 1`). A mode the
  * model does not list is unsupported; an unknown schema version makes the model
  * unusable rather than guessed at.
+ *
+ * Audio capabilities follow the `audio` block: `generation_kind` (music,
+ * podcast, speech or transcription), `prompt_field`, `request_fields`,
+ * `billing_unit` and the declared limits (references, output formats and their
+ * sample rates). An audio model that declares no kind is listed but cannot be
+ * chosen for generation: neither its name nor its id decides what it makes.
  * @module dsh-vibedev/gateway/catalog
  */
 /** What a media model produces. */
@@ -81,10 +87,16 @@ export interface VideoCapabilities {
     /** References must be relayed through the gateway media library. */
     readonly gatewayRelayRequired?: boolean;
 }
+/**
+ * What a price is charged per: one generation, one second of output, one
+ * second of ORIGINAL audio (speech is billed on the provider's original length,
+ * not on what plays back after processing), or one minute of input audio.
+ */
+export type PriceUnit = 'generation' | 'second' | 'original_second' | 'minute';
 /** One price tier: video tiers are resolutions (`720p`), image tiers size buckets (`1K`). */
 export interface MediaPriceTier {
     readonly tier: string;
-    readonly unit: 'generation' | 'second';
+    readonly unit: PriceUnit;
     readonly amount: number;
 }
 /** A model's selling price, account multiplier included. */
@@ -92,23 +104,76 @@ export interface MediaPricing {
     readonly currency: string;
     readonly tiers: readonly MediaPriceTier[];
     readonly default?: {
-        readonly unit: 'generation' | 'second';
+        readonly unit: PriceUnit;
         readonly amount: number;
     };
 }
+/** What an audio model does, as the catalog declares it (`audio.generation_kind`). */
+export declare const AUDIO_GENERATION_KINDS: readonly ["music", "podcast", "speech", "transcription"];
+export type AudioGenerationKind = typeof AUDIO_GENERATION_KINDS[number];
+/** How an audio model is billed (`audio.billing_unit`). */
+export type AudioBillingUnit = 'generation' | 'original_second' | 'minute';
+/** The reference audio a speech model takes (a voice to imitate), as the catalog declares it. */
+export interface AudioReferenceLimits {
+    readonly min: number;
+    readonly max: number;
+    readonly maxBytes?: number;
+    readonly minSeconds?: number;
+    readonly maxSeconds?: number;
+    readonly maxTotalSeconds?: number;
+    /** Accepted MIME types; absent states no restriction. */
+    readonly mimes?: readonly string[];
+    /** Request fields that may not be sent together with references. */
+    readonly exclusiveWith?: readonly string[];
+    /** The media-library purpose references are uploaded under, when the catalog names one. */
+    readonly purpose?: string;
+}
+/** One output format a speech model can write, with the sample rates it takes in that format. */
+export interface AudioOutputFormat {
+    readonly format: string;
+    readonly sampleRates: readonly number[];
+    readonly defaultSampleRate?: number;
+}
+/**
+ * An audio model's declared capabilities. Nothing here is assumed: a field the
+ * catalog does not declare is absent, and a model without `generationKind`
+ * cannot be chosen for any kind of generation.
+ */
+export interface AudioCapabilities {
+    readonly generationKind?: AudioGenerationKind;
+    /** The request field the main text goes in (`prompt`, `text_prompt`, …). */
+    readonly promptField?: string;
+    /** The request fields the model accepts, under their wire names. */
+    readonly requestFields: readonly string[];
+    readonly billingUnit?: AudioBillingUnit;
+    readonly references?: AudioReferenceLimits;
+    readonly outputFormats?: readonly AudioOutputFormat[];
+    readonly defaultFormat?: string;
+    /** Declared choices for enumerated fields (`gender`, `genre`, …), under their wire names. */
+    readonly choices?: Readonly<Record<string, readonly string[]>>;
+    readonly maxPromptChars?: number;
+    /** Transcription input limits. */
+    readonly maxInputBytes?: number;
+    readonly maxInputSeconds?: number;
+    readonly inputMimes?: readonly string[];
+    readonly languages?: readonly string[];
+}
 /** One media model of the catalog. */
 export interface MediaModel {
     readonly id: string;
     readonly name: string;
     readonly description?: string;
     readonly kind: MediaKind;
-    /** For audio models: what they produce. */
-    readonly audioKind?: 'music' | 'podcast';
+    /** Other ids the gateway answers to for this model. */
+    readonly aliases?: readonly string[];
+    /** For audio models: what they produce, from `audio.generation_kind` only; absent when undeclared. */
+    readonly audioKind?: Exclude<AudioGenerationKind, 'transcription'>;
     /** Endpoints the catalog lists for the model. */
     readonly endpoints: readonly string[];
     readonly inputModalities: readonly string[];
     readonly pricing?: MediaPricing;
     readonly video?: VideoCapabilities;
+    readonly audio?: AudioCapabilities;
 }
 type Json = Record<string, unknown>;
 /**
@@ -124,6 +189,12 @@ export declare function parseVideoCapabilities(raw: Json): VideoCapabilities;
  * @returns the usable modes and their constraints.
  */
 export declare function effectiveVideoModes(video: VideoCapabilities): Partial<Record<VideoMode, VideoModeConstraint>>;
+/**
+ * Parse an audio capability block.
+ * @param raw - the block.
+ * @returns the declared capabilities; `generationKind` is absent unless declared.
+ */
+export declare function parseAudioCapabilities(raw: Json): AudioCapabilities;
 /**
  * Parse a `/v1/models` body into its media models.
  * @param body - `{data:[...]}` or a bare array.

package/lib/gateway/http.d.ts

@@ -21,7 +21,7 @@ export interface GatewayCredential {
 }
 /** Construction options; `fetch` and `sleep` are test seams. */
 export interface GatewayHttpOptions {
-    /** Gateway origin, such as `https://vibedev.jzsaas.com`. */
+    /** Gateway origin, such as `https://api.vibedev.studio`. */
     readonly origin: string;
     /** The credential for the next request; undefined while nobody is signed in. */
     readonly resolveCredential: () => Promise<GatewayCredential | undefined>;

package/lib/gateway/origin.d.ts

@@ -0,0 +1,10 @@
+/** Production API origin. Storage URLs are returned by the server, not derived from this address. */
+export declare const DEFAULT_GATEWAY_ORIGIN = "https://api.vibedev.studio";
+/** Validate a bare HTTP(S) origin and canonicalize default ports, casing and trailing slash. */
+export declare function normalizeGatewayOrigin(value: string): string;
+/** Stable, filesystem-safe identity; ports and schemes remain separate boundaries. */
+export declare function gatewayId(origin: string): string;
+/** Every gateway uses its own namespace; never read the unmarked historical root. */
+export declare function gatewayStateDirectory(root: string, origin: string): string;
+/** Ignore the old shared key variable; development requires an explicitly named, gateway-specific variable. */
+export declare function developmentKey(origin: string, name: string, env?: Readonly<Record<string, string | undefined>>): string | undefined;

package/lib/index.d.ts

@@ -24,11 +24,13 @@ import type { Context, Volatile } from '@deepseek-ai/cordis';
 import Schema from '@deepseek-ai/schemastery';
 export { MediaError } from './gateway/errors.js';
 export { MediaHostService } from './service.js';
-export type { HostTarget, MediaTaskView } from './service.js';
+export type { HostTarget, MediaOutputView, MediaTaskView } from './service.js';
+export type { AudioForm, AudioFormField, AudioMakeKind, AudioRequest } from './audio/request.js';
+export type { AudioQuote } from './pricing.js';
 export type { ImageRequest } from './tools/image.js';
 export type { VideoRequest } from './tools/video.js';
 export { parseMediaCatalog } from './gateway/catalog.js';
-export type { MediaModel, VideoCapabilities, VideoMode } from './gateway/catalog.js';
+export type { AudioCapabilities, AudioGenerationKind, MediaModel, PriceUnit, VideoCapabilities, VideoMode } from './gateway/catalog.js';
 export { ACCOUNT_ROUTE_PREFIX, AccountService } from './account/index.js';
 export type { AccountSource, AccountView } from './account/index.js';
 export { GATEWAY_SEARCH_PROVIDER_ID as SEARCH_PROVIDER_ID } from './search/provider.js';
@@ -55,6 +57,7 @@ export interface Config {
     videoModel: Volatile<string>;
     musicModel: Volatile<string>;
     podcastModel: Volatile<string>;
+    speechModel: Volatile<string>;
     transcriptionModel: Volatile<string>;
     /** Gateway origin. */
     gatewayOrigin: string;
@@ -78,6 +81,7 @@ export declare const Config: Schema<Schemastery.ObjectS<NoInfer<{
     videoModel: Schema<string, string, "volatile-defined">;
     musicModel: Schema<string, string, "volatile-defined">;
     podcastModel: Schema<string, string, "volatile-defined">;
+    speechModel: Schema<string, string, "volatile-defined">;
     transcriptionModel: Schema<string, string, "volatile-defined">;
     gatewayOrigin: Schema<string, string, "defined">;
     client: Schema<string, string, "defined">;
@@ -95,6 +99,7 @@ export declare const Config: Schema<Schemastery.ObjectS<NoInfer<{
     videoModel: Schema<string, string, "volatile-defined">;
     musicModel: Schema<string, string, "volatile-defined">;
     podcastModel: Schema<string, string, "volatile-defined">;
+    speechModel: Schema<string, string, "volatile-defined">;
     transcriptionModel: Schema<string, string, "volatile-defined">;
     gatewayOrigin: Schema<string, string, "defined">;
     client: Schema<string, string, "defined">;