dsh-coding-subscription-oauth 0.5.8 → 0.6.2

package/lib/compatibility.d.ts

@@ -0,0 +1,46 @@
+/** Stable compatibility contracts for standalone and future co-installation. */
+import type { DshHostCapability, OwnerAccessMode } from "dsh-coding-oauth-core";
+export interface DshCompatibilityDiagnostic {
+    readonly id: string;
+    readonly component: "host" | "client" | "owner-request" | "runtime";
+    readonly level: "info" | "warning" | "error";
+    readonly message: string;
+    readonly expected?: string;
+    readonly actual?: string;
+}
+export interface CodingOAuthParticipantDiagnosticSource {
+    readonly participantId: "coding-subscription-oauth";
+    diagnostics(): readonly DshCompatibilityDiagnostic[];
+}
+export interface DshCompatibility {
+    readonly coreAbi: string;
+    readonly dshVersion: string | null;
+    readonly status: "healthy" | "degraded" | "incompatible";
+    readonly uiOwner: "hub" | "standalone" | null;
+    readonly accessMode: OwnerAccessMode;
+    readonly capabilities: Readonly<Record<string, DshHostCapability>>;
+    readonly diagnostics: readonly string[];
+}
+export declare const DSH_EXACT_BOM: Readonly<{
+    readonly "@deepseek-ai/cordis": "4.0.1";
+    readonly "@deepseek-ai/dsh-atomic-write": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-attachment": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-client-locale": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-client-runtime": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-client-ui-settings": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-client-ui-slots": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-client-web": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-credentials": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-home-paths": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-host-webserver": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-invariants": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-llm": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-llm-pi-ai": "0.1.1-rc.2";
+    readonly "@deepseek-ai/dsh-tools": "0.1.1-rc.2";
+    readonly "@deepseek-ai/schemastery": "3.18.1";
+    readonly "@earendil-works/pi-ai": "0.84.2";
+    readonly react: "18.3.1";
+    readonly "react-dom": "18.3.1";
+}>;
+export declare function incompatibleDiagnostics(diagnostics: readonly DshCompatibilityDiagnostic[]): DshCompatibilityDiagnostic[];
+//# sourceMappingURL=compatibility.d.ts.map

package/lib/compatibility.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compatibility.d.ts","sourceRoot":"","sources":["../../src/compatibility.ts"],"names":[],"mappings":"AAAA,gFAAgF;AAEhF,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AAEhF,MAAM,WAAW,0BAA0B;IAC1C,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IACpB,QAAQ,CAAC,SAAS,EAAE,MAAM,GAAG,QAAQ,GAAG,eAAe,GAAG,SAAS,CAAC;IACpE,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;CACzB;AAED,MAAM,WAAW,sCAAsC;IACtD,QAAQ,CAAC,aAAa,EAAE,2BAA2B,CAAC;IACpD,WAAW,IAAI,SAAS,0BAA0B,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,gBAAgB;IAChC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAAC;IACnC,QAAQ,CAAC,MAAM,EAAE,SAAS,GAAG,UAAU,GAAG,cAAc,CAAC;IACzD,QAAQ,CAAC,OAAO,EAAE,KAAK,GAAG,YAAY,GAAG,IAAI,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,eAAe,CAAC;IACrC,QAAQ,CAAC,YAAY,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,iBAAiB,CAAC,CAAC,CAAC;IACnE,QAAQ,CAAC,WAAW,EAAE,SAAS,MAAM,EAAE,CAAC;CACxC;AAED,eAAO,MAAM,aAAa;;;;;;;;;;;;;;;;;;;;EAoBf,CAAC;AAEZ,wBAAgB,uBAAuB,CACtC,WAAW,EAAE,SAAS,0BAA0B,EAAE,GAChD,0BAA0B,EAAE,CAE9B"}

package/lib/dsh-host-adapter.d.ts

@@ -0,0 +1,18 @@
+/** Narrow adapter around the DSH host API used by the standalone participant. */
+import type { Context } from "@deepseek-ai/cordis";
+import { type OwnerAccessMode } from "dsh-coding-oauth-core";
+import type { CodingOAuthParticipantDiagnosticSource, DshCompatibility, DshCompatibilityDiagnostic } from "./compatibility.js";
+import type { OwnerRequestPolicy } from "./web-origin.js";
+export interface DshHostAdapter extends CodingOAuthParticipantDiagnosticSource {
+    readonly context: Context;
+    scope(): object;
+    ownerRequestPolicy(): OwnerRequestPolicy | undefined;
+    compatibility(options?: {
+        readonly accessMode?: OwnerAccessMode;
+        readonly uiOwner?: "hub" | "standalone" | null;
+        readonly diagnostics?: readonly DshCompatibilityDiagnostic[];
+    }): DshCompatibility;
+    assertCompatible(): void;
+}
+export declare function createDshHostAdapter(context: Context): DshHostAdapter;
+//# sourceMappingURL=dsh-host-adapter.d.ts.map

package/lib/dsh-host-adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dsh-host-adapter.d.ts","sourceRoot":"","sources":["../../src/dsh-host-adapter.ts"],"names":[],"mappings":"AAAA,iFAAiF;AAGjF,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AACnD,OAAO,EAGN,KAAK,eAAe,EAEpB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,KAAK,EACX,sCAAsC,EACtC,gBAAgB,EAChB,0BAA0B,EAC1B,MAAM,oBAAoB,CAAC;AAE5B,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAI1D,MAAM,WAAW,cAAe,SAAQ,sCAAsC;IAC7E,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,KAAK,IAAI,MAAM,CAAC;IAChB,kBAAkB,IAAI,kBAAkB,GAAG,SAAS,CAAC;IACrD,aAAa,CAAC,OAAO,CAAC,EAAE;QACvB,QAAQ,CAAC,UAAU,CAAC,EAAE,eAAe,CAAC;QACtC,QAAQ,CAAC,OAAO,CAAC,EAAE,KAAK,GAAG,YAAY,GAAG,IAAI,CAAC;QAC/C,QAAQ,CAAC,WAAW,CAAC,EAAE,SAAS,0BAA0B,EAAE,CAAC;KAC7D,GAAG,gBAAgB,CAAC;IACrB,gBAAgB,IAAI,IAAI,CAAC;CACzB;AAqDD,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,OAAO,GAAG,cAAc,CAyFrE"}

package/lib/gateway-auth.d.ts

@@ -2,7 +2,7 @@
  * Owner-only gateway API key file.
  * @module dsh-coding-subscription-oauth/gateway-auth
  */
-export declare const GATEWAY_KEY_FILENAME = ".coding-oauth-gateway.json";
+export { GATEWAY_KEY_FILENAME } from "./ids.js";
 declare const KEY_FORMAT_VERSION = 1;
 export interface GatewayKeyDocument {
     version: typeof KEY_FORMAT_VERSION;
@@ -18,5 +18,4 @@ export declare function loadGatewayKeyDocument(path: string): Promise<GatewayKey
 export declare function loadOrCreateGatewayApiKey(path: string, configured?: string): Promise<string>;
 export declare function persistGatewayApiKey(path: string, apiKey: string): Promise<void>;
 export declare function persistGatewayKeyDocument(path: string, document: GatewayKeyDocument): Promise<void>;
-export {};
 //# sourceMappingURL=gateway-auth.d.ts.map

package/lib/gateway-auth.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-auth.d.ts","sourceRoot":"","sources":["../../src/gateway-auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AASH,eAAO,MAAM,oBAAoB,+BAA+B,CAAC;AACjE,QAAA,MAAM,kBAAkB,IAAI,CAAC;AAE7B,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,OAAO,kBAAkB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIrE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxD;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CA0BlG;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAelG;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQtF;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzG"}
+{"version":3,"file":"gateway-auth.d.ts","sourceRoot":"","sources":["../../src/gateway-auth.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAUH,OAAO,EAAE,oBAAoB,EAAE,MAAM,UAAU,CAAC;AAEhD,QAAA,MAAM,kBAAkB,IAAI,CAAC;AAE7B,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,OAAO,kBAAkB,CAAC;IACnC,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;CACd;AAED,wBAAgB,cAAc,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,MAAM,CAEvD;AAED,wBAAgB,qBAAqB,IAAI,MAAM,CAE9C;AAED,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAIrE;AAED,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAGxD;AAED,wBAAsB,sBAAsB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,kBAAkB,GAAG,SAAS,CAAC,CA0BlG;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,UAAU,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAelG;AAED,wBAAsB,oBAAoB,CAAC,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQtF;AAED,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,MAAM,EAAE,QAAQ,EAAE,kBAAkB,GAAG,OAAO,CAAC,IAAI,CAAC,CAGzG"}

package/lib/gateway-routes.d.ts

@@ -4,9 +4,8 @@
  */
 import type { IncomingMessage, ServerResponse } from "node:http";
 import type { CodingOAuthGatewayController } from "./gateway.js";
-export declare const GATEWAY_SETTINGS_PATH = "/plugins/dsh-grok-build/gateway";
-export declare const GATEWAY_REVEAL_PATH = "/plugins/dsh-grok-build/gateway/reveal";
-export declare const GATEWAY_ROTATE_PATH = "/plugins/dsh-grok-build/gateway/rotate";
+import { type OwnerRequestPolicy } from "./web-origin.js";
+export { GATEWAY_REVEAL_PATH, GATEWAY_ROTATE_PATH, GATEWAY_SETTINGS_PATH } from "./ids.js";
 export interface GatewayRouteContext {
     readonly webServer: {
         register(route: {
@@ -17,5 +16,5 @@ export interface GatewayRouteContext {
     };
     effect(callback: () => () => void | Promise<void>, label?: string): unknown;
 }
-export declare function registerGatewayRoutes(ctx: GatewayRouteContext, controller: CodingOAuthGatewayController): () => void;
+export declare function registerGatewayRoutes(ctx: GatewayRouteContext, controller: CodingOAuthGatewayController, ownerRequestPolicy?: OwnerRequestPolicy): () => void;
 //# sourceMappingURL=gateway-routes.d.ts.map

package/lib/gateway-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway-routes.d.ts","sourceRoot":"","sources":["../../src/gateway-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAOjE,eAAO,MAAM,qBAAqB,oCAAoC,CAAC;AACvE,eAAO,MAAM,mBAAmB,2CAA2C,CAAC;AAC5E,eAAO,MAAM,mBAAmB,2CAA2C,CAAC;AAE5E,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE;QACnB,QAAQ,CAAC,KAAK,EAAE;YACf,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SAC7E,GAAG,MAAM,IAAI,CAAC;KACf,CAAC;IACF,MAAM,CAAC,QAAQ,EAAE,MAAM,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5E;AAED,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,UAAU,EAAE,4BAA4B,GAAG,MAAM,IAAI,CAuBpH"}
+{"version":3,"file":"gateway-routes.d.ts","sourceRoot":"","sources":["../../src/gateway-routes.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,4BAA4B,EAAE,MAAM,cAAc,CAAC;AAKjE,OAAO,EAAiC,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAGzF,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,qBAAqB,EAAE,MAAM,UAAU,CAAC;AAE3F,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE;QACnB,QAAQ,CAAC,KAAK,EAAE;YACf,IAAI,EAAE,OAAO,GAAG,QAAQ,CAAC;YACzB,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SAC7E,GAAG,MAAM,IAAI,CAAC;KACf,CAAC;IACF,MAAM,CAAC,QAAQ,EAAE,MAAM,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC5E;AAED,wBAAgB,qBAAqB,CACpC,GAAG,EAAE,mBAAmB,EACxB,UAAU,EAAE,4BAA4B,EACxC,kBAAkB,GAAE,kBAAkD,GACpE,MAAM,IAAI,CAuBZ"}

package/lib/gateway.d.ts

@@ -25,7 +25,11 @@ export interface GatewayPublicStatus {
     running: boolean;
     bind: string;
     port: number;
+    model: string | null;
+    keyConfigured: boolean;
+    keyAvailable: boolean;
     keyHint: string;
+    models: string[];
     warning: string;
 }
 export interface CodingOAuthGatewayController {

package/lib/gateway.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/gateway.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,EAA+B,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAqB,KAAK,aAAa,EAAwB,MAAM,qBAAqB,CAAC;AAElG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,eAAO,MAAM,mBAAmB,0HACwF,CAAC;AAEzH,MAAM,WAAW,mBAAmB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,aAAa,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC5C,MAAM,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvC,cAAc,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtD,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpD,SAAS,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,SAAS,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAG/G;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,mBAAmB,GAAG,4BAA4B,CAmL7G"}
+{"version":3,"file":"gateway.d.ts","sourceRoot":"","sources":["../../src/gateway.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAWH,OAAO,EAA+B,KAAK,cAAc,EAAE,MAAM,sBAAsB,CAAC;AACxF,OAAO,EAAqB,KAAK,aAAa,EAAwB,MAAM,qBAAqB,CAAC;AAElG,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAC/D,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAErD,eAAO,MAAM,mBAAmB,0HACwF,CAAC;AAEzH,MAAM,WAAW,mBAAmB;IACnC,MAAM,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IAChC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE,cAAc,CAAC;IACzB,IAAI,CAAC,EAAE,gBAAgB,CAAC;IACxB,aAAa,CAAC,EAAE,SAAS,oBAAoB,EAAE,CAAC;IAChD,OAAO,CAAC,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,CAAC;CACnC;AAED,MAAM,WAAW,cAAc;IAC9B,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,mBAAmB;IACnC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,OAAO,CAAC;IACvB,YAAY,EAAE,OAAO,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,OAAO,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,4BAA4B;IAC5C,MAAM,IAAI,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACvC,cAAc,IAAI,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAAC;IACtD,UAAU,CAAC,OAAO,EAAE,OAAO,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IAC3D,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAC;IACpD,SAAS,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,SAAS,IAAI,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAC1D,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACtB;AAED,wBAAsB,uBAAuB,CAAC,OAAO,EAAE,mBAAmB,GAAG,OAAO,CAAC,cAAc,GAAG,SAAS,CAAC,CAG/G;AAED,wBAAgB,kCAAkC,CAAC,OAAO,EAAE,mBAAmB,GAAG,4BAA4B,CA+L7G"}

package/lib/ids.d.ts

@@ -1,33 +1,4 @@
-/** pi-ai provider ids used by login, refresh, and credential storage. */
-export declare const XAI_PI_PROVIDER = "xai";
-export declare const CODEX_PI_PROVIDER = "openai-codex";
-export declare const KIMI_PI_PROVIDER = "kimi-coding";
-export declare const CLAUDE_PI_PROVIDER = "anthropic";
-/** Harness LLM routes. OAuth aliases avoid the user's API-key route ids. */
-export declare const GROK_BUILD_ROUTE = "grok-build";
-export declare const CODEX_OAUTH_ROUTE = "codex-oauth";
-export declare const CODEX_OAUTH_FAST_ROUTE = "codex-oauth-fast";
-export declare const KIMI_CODE_OAUTH_ROUTE = "kimi-code-oauth";
-export declare const CLAUDE_CODE_OAUTH_ROUTE = "claude-code-oauth";
-export declare const ANTIGRAVITY_ROUTE = "agy";
-export declare const CODING_OAUTH_ROUTES: readonly ["grok-build", "codex-oauth", "kimi-code-oauth", "claude-code-oauth"];
-/** Opt-in routes the adapter can expose; not registered by the default plugin apply(). */
-export declare const CODING_OAUTH_OPTIONAL_ROUTES: readonly ["codex-oauth-fast"];
-export type CodingOAuthRoute = (typeof CODING_OAUTH_ROUTES)[number];
-export type CodingOAuthOptionalRoute = (typeof CODING_OAUTH_OPTIONAL_ROUTES)[number];
-export type CodingOAuthProviderSlug = "grok" | "codex" | "kimi" | "claude";
-/** Basenames of private OAuth documents inside the Harness home. */
-export declare const GROK_BUILD_AUTH_FILENAME = ".grok-build-auth.json";
-export declare const CODEX_OAUTH_AUTH_FILENAME = ".codex-oauth-auth.json";
-export declare const KIMI_CODE_OAUTH_AUTH_FILENAME = ".kimi-code-oauth-auth.json";
-export declare const CLAUDE_CODE_OAUTH_AUTH_FILENAME = ".claude-code-oauth-auth.json";
-/** Basenames of model selection/catalog caches inside the Harness home. */
-export declare const GROK_BUILD_MODELS_CACHE_FILENAME = ".grok-build-models.json";
-export declare const CODEX_OAUTH_MODELS_CACHE_FILENAME = ".codex-oauth-models.json";
-export declare const KIMI_CODE_OAUTH_MODELS_CACHE_FILENAME = ".kimi-code-oauth-models.json";
-export declare const CLAUDE_CODE_OAUTH_MODELS_CACHE_FILENAME = ".claude-code-oauth-models.json";
-/** Fallback model when no live Grok catalog listing is available. */
-export declare const DEFAULT_GROK_BUILD_MODEL = "grok-4.6";
-/** Provider idle ceiling used by every composite route. */
-export declare const GROK_BUILD_STREAM_IDLE_TIMEOUT_MS = 300000;
+/** Compatibility facade for stable identifiers owned by dsh-coding-oauth-core. */
+export type { CodingOAuthOptionalRoute, CodingOAuthProviderSlug, CodingOAuthRoute, } from "dsh-coding-oauth-core";
+export { ANTIGRAVITY_ROUTE, CAPABILITY_SETTINGS_NAMESPACE, CAPABILITY_SETTINGS_PATH, CLAUDE_CODE_OAUTH_AUTH_FILENAME, CLAUDE_CODE_OAUTH_MODELS_CACHE_FILENAME, CLAUDE_CODE_OAUTH_ROUTE, CLAUDE_PI_PROVIDER, CODEX_OAUTH_AUTH_FILENAME, CODEX_OAUTH_FAST_ROUTE, CODEX_OAUTH_MODELS_CACHE_FILENAME, CODEX_OAUTH_ROUTE, CODEX_PI_PROVIDER, CODEX_USAGE_PATH, CODING_OAUTH_LOGIN_CANCEL_PATH, CODING_OAUTH_LOGIN_CODE_PATH, CODING_OAUTH_LOGIN_PATH, CODING_OAUTH_LOGOUT_PATH, CODING_OAUTH_MANAGEMENT_PATHS, CODING_OAUTH_MODELS_PATH, CODING_OAUTH_OPTIONAL_ROUTES, CODING_OAUTH_ROUTES, CODING_OAUTH_STATE_SCHEMA_VERSION, CODING_OAUTH_STATUS_PATH, DEFAULT_GROK_BUILD_MODEL, GATEWAY_KEY_FILENAME, GATEWAY_REVEAL_PATH, GATEWAY_ROTATE_PATH, GATEWAY_SETTINGS_PATH, GROK_BUILD_AUTH_FILENAME, GROK_BUILD_AUTH_IMPORT_PATH, GROK_BUILD_AUTH_LOGIN_CANCEL_PATH, GROK_BUILD_AUTH_LOGIN_CODE_PATH, GROK_BUILD_AUTH_LOGIN_PATH, GROK_BUILD_AUTH_LOGOUT_PATH, GROK_BUILD_AUTH_MODELS_PATH, GROK_BUILD_AUTH_STATUS_PATH, GROK_BUILD_MODELS_CACHE_FILENAME, GROK_BUILD_ROUTE, GROK_BUILD_STREAM_IDLE_TIMEOUT_MS, IMAGINE_CREDENTIAL_STATUS_PATH, IMAGINE_MEDIA_STORE_DIRNAME, KIMI_CODE_OAUTH_AUTH_FILENAME, KIMI_CODE_OAUTH_MODELS_CACHE_FILENAME, KIMI_CODE_OAUTH_ROUTE, KIMI_PI_PROVIDER, OAUTH_IMPORT_CANCEL_PATH, OAUTH_IMPORT_COMMIT_PATH, OAUTH_IMPORT_PREVIEW_PATH, OAUTH_IMPORT_SOURCES_PATH, XAI_PI_PROVIDER, } from "dsh-coding-oauth-core";
 //# sourceMappingURL=ids.d.ts.map

package/lib/ids.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../src/ids.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,eAAO,MAAM,eAAe,QAAQ,CAAC;AACrC,eAAO,MAAM,iBAAiB,iBAAiB,CAAC;AAChD,eAAO,MAAM,gBAAgB,gBAAgB,CAAC;AAC9C,eAAO,MAAM,kBAAkB,cAAc,CAAC;AAE9C,4EAA4E;AAC5E,eAAO,MAAM,gBAAgB,eAAe,CAAC;AAC7C,eAAO,MAAM,iBAAiB,gBAAgB,CAAC;AAC/C,eAAO,MAAM,sBAAsB,qBAAqB,CAAC;AACzD,eAAO,MAAM,qBAAqB,oBAAoB,CAAC;AACvD,eAAO,MAAM,uBAAuB,sBAAsB,CAAC;AAC3D,eAAO,MAAM,iBAAiB,QAAQ,CAAC;AAEvC,eAAO,MAAM,mBAAmB,gFAKtB,CAAC;AAEX,0FAA0F;AAC1F,eAAO,MAAM,4BAA4B,+BAAoC,CAAC;AAE9E,MAAM,MAAM,gBAAgB,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,CAAC,CAAC;AACpE,MAAM,MAAM,wBAAwB,GAAG,CAAC,OAAO,4BAA4B,CAAC,CAAC,MAAM,CAAC,CAAC;AACrF,MAAM,MAAM,uBAAuB,GAAG,MAAM,GAAG,OAAO,GAAG,MAAM,GAAG,QAAQ,CAAC;AAE3E,oEAAoE;AACpE,eAAO,MAAM,wBAAwB,0BAA0B,CAAC;AAChE,eAAO,MAAM,yBAAyB,2BAA2B,CAAC;AAClE,eAAO,MAAM,6BAA6B,+BAA+B,CAAC;AAC1E,eAAO,MAAM,+BAA+B,iCAAiC,CAAC;AAE9E,2EAA2E;AAC3E,eAAO,MAAM,gCAAgC,4BAA4B,CAAC;AAC1E,eAAO,MAAM,iCAAiC,6BAA6B,CAAC;AAC5E,eAAO,MAAM,qCAAqC,iCAAiC,CAAC;AACpF,eAAO,MAAM,uCAAuC,mCAAmC,CAAC;AAExF,qEAAqE;AACrE,eAAO,MAAM,wBAAwB,aAAa,CAAC;AAEnD,2DAA2D;AAC3D,eAAO,MAAM,iCAAiC,SAAU,CAAC"}
+{"version":3,"file":"ids.d.ts","sourceRoot":"","sources":["../../src/ids.ts"],"names":[],"mappings":"AAAA,kFAAkF;AAElF,YAAY,EACX,wBAAwB,EACxB,uBAAuB,EACvB,gBAAgB,GAChB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,iBAAiB,EACjB,6BAA6B,EAC7B,wBAAwB,EACxB,+BAA+B,EAC/B,uCAAuC,EACvC,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,sBAAsB,EACtB,iCAAiC,EACjC,iBAAiB,EACjB,iBAAiB,EACjB,gBAAgB,EAChB,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,6BAA6B,EAC7B,wBAAwB,EACxB,4BAA4B,EAC5B,mBAAmB,EACnB,iCAAiC,EACjC,wBAAwB,EACxB,wBAAwB,EACxB,oBAAoB,EACpB,mBAAmB,EACnB,mBAAmB,EACnB,qBAAqB,EACrB,wBAAwB,EACxB,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,gCAAgC,EAChC,gBAAgB,EAChB,iCAAiC,EACjC,8BAA8B,EAC9B,2BAA2B,EAC3B,6BAA6B,EAC7B,qCAAqC,EACrC,qBAAqB,EACrB,gBAAgB,EAChB,wBAAwB,EACxB,wBAAwB,EACxB,yBAAyB,EACzB,yBAAyB,EACzB,eAAe,GACf,MAAM,uBAAuB,CAAC"}

package/lib/imagine-routes.d.ts

@@ -9,6 +9,7 @@ import type { IncomingMessage, ServerResponse } from "node:http";
 import type { ImageAttachmentRef } from "@deepseek-ai/dsh-attachment";
 import { type ImagineImageAttachmentRef } from "./grok-imagine.js";
 import { type MediaArtifactMeta, type MediaDownloadView, type TrustedImagineAuthz } from "./media-store.js";
+import { type OwnerRequestPolicy } from "./web-origin.js";
 /** Hard ceiling for live exact download routes. Callers cannot raise this. */
 export declare const IMAGINE_ROUTE_MAX_ENTRIES = 64;
 /** Hard ceiling for remembered image routes. Callers cannot raise this. */
@@ -46,6 +47,7 @@ export interface ImagineRouteOptions {
     readonly maxEntries?: number;
     /** Capped at {@link IMAGINE_IMAGE_ROUTE_TTL_MS}. */
     readonly imageTtlMs?: number;
+    readonly ownerRequestPolicy?: OwnerRequestPolicy;
 }
 export interface ImagineRouteRegistry {
     rememberImages(refs: readonly ImageAttachmentRef[] | readonly ImagineImageAttachmentRef[]): void;

package/lib/imagine-routes.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"imagine-routes.d.ts","sourceRoot":"","sources":["../../src/imagine-routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAEN,KAAK,yBAAyB,EAM9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAKN,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAKtB,KAAK,mBAAmB,EACxB,MAAM,kBAAkB,CAAC;AAG1B,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,2EAA2E;AAC3E,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAKzD,wFAAwF;AACxF,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE;QACnB,QAAQ,CAAC,KAAK,EAAE;YACf,IAAI,EAAE,OAAO,CAAC;YACd,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SAC7E,GAAG,MAAM,IAAI,CAAC;KACf,CAAC;IACF,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1E;AAED,mFAAmF;AACnF,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,SAAS,CACR,GAAG,EAAE,yBAAyB,EAC9B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC;QAAE,GAAG,EAAE,yBAAyB,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACjE;AAED,mFAAmF;AACnF,MAAM,WAAW,yBAAyB;IACzC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,oBAAoB;IACpC,cAAc,CAAC,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,yBAAyB,EAAE,GAAG,IAAI,CAAC;IACjG,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAChD,YAAY,IAAI,IAAI,CAAC;IACrB,eAAe,IAAI,IAAI,CAAC;IACxB,OAAO,IAAI,IAAI,CAAC;CAChB;AA0BD,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,GAAG,oBAAoB,CAuMlH"}
+{"version":3,"file":"imagine-routes.d.ts","sourceRoot":"","sources":["../../src/imagine-routes.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,eAAe,EAAE,cAAc,EAAE,MAAM,WAAW,CAAC;AACjE,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,6BAA6B,CAAC;AACtE,OAAO,EAEN,KAAK,yBAAyB,EAM9B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAKN,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAKtB,KAAK,mBAAmB,EACxB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EAAiC,KAAK,kBAAkB,EAAE,MAAM,iBAAiB,CAAC;AAEzF,8EAA8E;AAC9E,eAAO,MAAM,yBAAyB,KAAK,CAAC;AAE5C,2EAA2E;AAC3E,eAAO,MAAM,0BAA0B,QAAiB,CAAC;AAKzD,wFAAwF;AACxF,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,SAAS,EAAE;QACnB,QAAQ,CAAC,KAAK,EAAE;YACf,IAAI,EAAE,OAAO,CAAC;YACd,IAAI,EAAE,MAAM,CAAC;YACb,OAAO,EAAE,CAAC,GAAG,EAAE,eAAe,EAAE,GAAG,EAAE,cAAc,KAAK,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;SAC7E,GAAG,MAAM,IAAI,CAAC;KACf,CAAC;IACF,MAAM,CAAC,CAAC,KAAK,EAAE,MAAM,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC;CAC1E;AAED,mFAAmF;AACnF,MAAM,WAAW,2BAA2B;IAC3C,QAAQ,CAAC,WAAW,CAAC,EAAE;QAAE,QAAQ,CAAC,aAAa,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC3D,SAAS,CACR,GAAG,EAAE,yBAAyB,EAC9B,MAAM,CAAC,EAAE,WAAW,GAClB,OAAO,CAAC;QAAE,GAAG,EAAE,yBAAyB,CAAC;QAAC,IAAI,EAAE,UAAU,CAAA;KAAE,CAAC,CAAC;CACjE;AAED,mFAAmF;AACnF,MAAM,WAAW,yBAAyB;IACzC,eAAe,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,mBAAmB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;CAC5F;AAED,MAAM,WAAW,mBAAmB;IACnC,QAAQ,CAAC,WAAW,EAAE,2BAA2B,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,yBAAyB,CAAC;IAC1C,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B,mDAAmD;IACnD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,oDAAoD;IACpD,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,kBAAkB,CAAC,EAAE,kBAAkB,CAAC;CACjD;AAED,MAAM,WAAW,oBAAoB;IACpC,cAAc,CAAC,IAAI,EAAE,SAAS,kBAAkB,EAAE,GAAG,SAAS,yBAAyB,EAAE,GAAG,IAAI,CAAC;IACjG,gBAAgB,CAAC,IAAI,EAAE,iBAAiB,GAAG,IAAI,CAAC;IAChD,YAAY,IAAI,IAAI,CAAC;IACrB,eAAe,IAAI,IAAI,CAAC;IACxB,OAAO,IAAI,IAAI,CAAC;CAChB;AA0BD,iEAAiE;AACjE,wBAAgB,qBAAqB,CAAC,GAAG,EAAE,mBAAmB,EAAE,OAAO,EAAE,mBAAmB,GAAG,oBAAoB,CAwMlH"}

package/lib/index.d.ts

@@ -8,6 +8,8 @@ import { type RetryPolicyConfig } from "@deepseek-ai/dsh-llm";
 import z from "@deepseek-ai/schemastery";
 import { type CapabilitySettingsPatch } from "./capability-settings.js";
 import { type GatewayConfig } from "./gateway-config.js";
+export type { CodingOAuthParticipant, CodingOAuthRuntime, DshHostCapabilities, OwnerRequestPolicy as CoreOwnerRequestPolicy, } from "dsh-coding-oauth-core";
+export { acquireCodingOAuthRuntime, CODING_OAUTH_CORE_ABI, } from "dsh-coding-oauth-core";
 export { createCodingOAuthAdapter, createGrokBuildAdapter, preferredGrokBuildModel } from "./adapter.js";
 export type { AliasLlmRoutePolicy } from "./alias-adapter.js";
 export { AliasLlmAdapter } from "./alias-adapter.js";
@@ -17,6 +19,7 @@ export type { CodingOAuthWebStatus, GrokBuildLoginMethod, GrokBuildWebAuthStatus
 export { CODING_OAUTH_LOGIN_CANCEL_PATH, CODING_OAUTH_LOGIN_CODE_PATH, CODING_OAUTH_LOGIN_PATH, CODING_OAUTH_LOGOUT_PATH, CODING_OAUTH_MODELS_PATH, CODING_OAUTH_STATUS_PATH, GROK_BUILD_AUTH_IMPORT_PATH, GROK_BUILD_AUTH_LOGIN_CANCEL_PATH, GROK_BUILD_AUTH_LOGIN_CODE_PATH, GROK_BUILD_AUTH_LOGIN_PATH, GROK_BUILD_AUTH_LOGOUT_PATH, GROK_BUILD_AUTH_MODELS_PATH, GROK_BUILD_AUTH_STATUS_PATH, GrokBuildWebAuth, registerCodingOAuthRoutes, registerGrokBuildAuthRoutes, SubscriptionWebAuth, } from "./auth-routes.js";
 export type { CatalogSource, LiveModelDescriptor } from "./catalog.js";
 export { extractLiveModels, extractModelIds, fetchLiveModelIds, fetchLiveModels, materializeLiveModel, mergeLiveCatalog, preferredGrokBuildModelFrom, thinkingLevelMapFromLiveEfforts, } from "./catalog.js";
+export { createDshHostAdapter } from "./dsh-host-adapter.js";
 export type { GrokImportProbe } from "./grok-import.js";
 export { grokAuthPath, importGrokAuth, parseGrokAuthDocument, probeGrokAuth } from "./grok-import.js";
 export type { CodingOAuthProviderSlug, CodingOAuthRoute } from "./ids.js";
@@ -33,14 +36,16 @@ export { codingOAuthProxyInEffect, codingOAuthProxyUnreachableHint, ensureCoding
 export { redactProxyUrl, safeMessage } from "./redact.js";
 export { GrokBuildSession } from "./session.js";
 export { GrokBuildCredentialStore, grokBuildAuthPath, OAuthCredentialFileStore, oauthCredentialPath, } from "./store.js";
+export type { OwnerRequestPolicy, OwnerRequestPolicyConfig } from "./web-origin.js";
+export { createOwnerRequestPolicy, LOOPBACK_OWNER_REQUEST_POLICY, OWNER_CSRF_HEADER, OWNER_PROOF_HEADER, } from "./web-origin.js";
 /** Stable Cordis plugin name. */
 export declare const name = "llm-grok-build-oauth";
 /** Separate API-key credential used only by official xAI Imagine REST calls. */
 export declare const XAI_API_KEY_CREDENTIAL = "XAI_API_KEY";
 /** Owner-private artifact directory below the resolved DSH home. */
-export declare const IMAGINE_MEDIA_STORE_DIRNAME = ".dsh-coding-subscription-oauth-media";
-/** LLM registry required before the subscription route can register. */
-export declare const inject: string[];
+export { IMAGINE_MEDIA_STORE_DIRNAME } from "./ids.js";
+/** Optional host services are acquired inside the elected child fiber. */
+export declare const inject: readonly ["webServer"];
 /** Plugin configuration; every field is optional. */
 export interface Config {
     /** HTTP(S) proxy URL for the audited coding-subscription host allowlist. */
@@ -59,11 +64,21 @@ export interface Config {
     capabilities?: CapabilitySettingsPatch;
     /** Opt-in isolated local OpenAI-compatible gateway. Default off. */
     gateway?: Partial<GatewayConfig>;
+    /** Owner-only request authorization for loopback, SSH tunnels, and trusted HTTPS proxies. */
+    ownerRequest?: {
+        loopbackAccessMode?: "loopback" | "ssh-tunnel";
+        trustedProxy?: {
+            peers?: string[];
+            origins?: string[];
+            ownerProof?: string;
+            csrfToken?: string;
+        };
+    };
 }
 export declare const Config: z<Config>;
 /**
  * Register the `grok-build` LLM route with a provider-native OAuth store.
  * @param ctx - plugin context carrying the LLM registry plus optional web server.
  */
-export declare function apply(ctx: Context, config: Config): void;
+export declare function apply(ctx: Context, config?: Config): void;
 //# sourceMappingURL=index.d.ts.map

package/lib/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,qBAAqB,CAAC;AAInD,OAAO,EAAsB,KAAK,iBAAiB,EAAqB,MAAM,sBAAsB,CAAC;AACrG,OAAO,CAAC,MAAM,0BAA0B,CAAC;AAazC,OAAO,EACN,KAAK,uBAAuB,EAK5B,MAAM,0BAA0B,CAAC;AAalC,OAAO,EAAE,KAAK,aAAa,EAAuB,MAAM,qBAAqB,CAAC;AA+B9E,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACzG,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EACN,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,eAAe,GACf,MAAM,WAAW,CAAC;AACnB,YAAY,EACX,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,0BAA0B,EAC1B,yBAAyB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,gBAAgB,EAChB,yBAAyB,EACzB,2BAA2B,EAC3B,mBAAmB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACN,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,2BAA2B,EAC3B,+BAA+B,GAC/B,MAAM,cAAc,CAAC;AACtB,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtG,YAAY,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EACN,iBAAiB,EACjB,+BAA+B,EAC/B,uCAAuC,EACvC,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,iCAAiC,EACjC,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,gCAAgC,EAChC,gBAAgB,EAChB,iCAAiC,EACjC,6BAA6B,EAC7B,qCAAqC,EACrC,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,GACf,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACpG,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACvH,OAAO,EACN,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EACN,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EACN,wBAAwB,EACxB,+BAA+B,EAC/B,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACN,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,GACnB,MAAM,YAAY,CAAC;AAEpB,iCAAiC;AACjC,eAAO,MAAM,IAAI,yBAAyB,CAAC;AAE3C,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,gBAAgB,CAAC;AAWpD,oEAAoE;AACpE,eAAO,MAAM,2BAA2B,yCAAyC,CAAC;AAElF,wEAAwE;AACxE,eAAO,MAAM,MAAM,UAAU,CAAC;AAE9B,qDAAqD;AACrD,MAAM,WAAW,MAAM;IACtB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,sEAAsE;IACtE,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,oEAAoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;CACjC;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAM3B,CAAC;AAiGH;;;GAGG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,IAAI,CAwPxD"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/index.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AAGH,OAAO,KAAK,EAAE,OAAO,EAAS,MAAM,qBAAqB,CAAC;AAI1D,OAAO,EAAsB,KAAK,iBAAiB,EAAqB,MAAM,sBAAsB,CAAC;AACrG,OAAO,CAAC,MAAM,0BAA0B,CAAC;AAczC,OAAO,EACN,KAAK,uBAAuB,EAK5B,MAAM,0BAA0B,CAAC;AAclC,OAAO,EAAE,KAAK,aAAa,EAAuB,MAAM,qBAAqB,CAAC;AAiC9E,YAAY,EACX,sBAAsB,EACtB,kBAAkB,EAClB,mBAAmB,EACnB,kBAAkB,IAAI,sBAAsB,GAC5C,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EACN,yBAAyB,EACzB,qBAAqB,GACrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,wBAAwB,EAAE,sBAAsB,EAAE,uBAAuB,EAAE,MAAM,cAAc,CAAC;AACzG,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AACrD,YAAY,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAC;AACrD,OAAO,EACN,mBAAmB,EACnB,uBAAuB,EACvB,sBAAsB,EACtB,cAAc,EACd,qBAAqB,EACrB,eAAe,GACf,MAAM,WAAW,CAAC;AACnB,YAAY,EACX,oBAAoB,EACpB,oBAAoB,EACpB,sBAAsB,EACtB,cAAc,EACd,0BAA0B,EAC1B,yBAAyB,GACzB,MAAM,kBAAkB,CAAC;AAC1B,OAAO,EACN,8BAA8B,EAC9B,4BAA4B,EAC5B,uBAAuB,EACvB,wBAAwB,EACxB,wBAAwB,EACxB,wBAAwB,EACxB,2BAA2B,EAC3B,iCAAiC,EACjC,+BAA+B,EAC/B,0BAA0B,EAC1B,2BAA2B,EAC3B,2BAA2B,EAC3B,2BAA2B,EAC3B,gBAAgB,EAChB,yBAAyB,EACzB,2BAA2B,EAC3B,mBAAmB,GACnB,MAAM,kBAAkB,CAAC;AAC1B,YAAY,EAAE,aAAa,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AACvE,OAAO,EACN,iBAAiB,EACjB,eAAe,EACf,iBAAiB,EACjB,eAAe,EACf,oBAAoB,EACpB,gBAAgB,EAChB,2BAA2B,EAC3B,+BAA+B,GAC/B,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAC7D,YAAY,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AACxD,OAAO,EAAE,YAAY,EAAE,cAAc,EAAE,qBAAqB,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAC;AACtG,YAAY,EAAE,uBAAuB,EAAE,gBAAgB,EAAE,MAAM,UAAU,CAAC;AAC1E,OAAO,EACN,iBAAiB,EACjB,+BAA+B,EAC/B,uCAAuC,EACvC,uBAAuB,EACvB,kBAAkB,EAClB,yBAAyB,EACzB,iCAAiC,EACjC,iBAAiB,EACjB,iBAAiB,EACjB,mBAAmB,EACnB,wBAAwB,EACxB,wBAAwB,EACxB,gCAAgC,EAChC,gBAAgB,EAChB,iCAAiC,EACjC,6BAA6B,EAC7B,qCAAqC,EACrC,qBAAqB,EACrB,gBAAgB,EAChB,eAAe,GACf,MAAM,UAAU,CAAC;AAClB,YAAY,EAAE,uBAAuB,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,YAAY,CAAC;AACpG,OAAO,EACN,iBAAiB,EACjB,sBAAsB,EACtB,WAAW,EACX,0BAA0B,EAC1B,6BAA6B,EAC7B,uBAAuB,EACvB,sBAAsB,EACtB,mBAAmB,EACnB,YAAY,EACZ,kBAAkB,EAClB,qBAAqB,EACrB,kBAAkB,GAClB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,uBAAuB,EAAE,uBAAuB,EAAE,wBAAwB,EAAE,MAAM,sBAAsB,CAAC;AACvH,OAAO,EACN,0BAA0B,EAC1B,oBAAoB,EACpB,wBAAwB,EACxB,0BAA0B,EAC1B,uBAAuB,GACvB,MAAM,sBAAsB,CAAC;AAC9B,YAAY,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,oBAAoB,EAAE,oBAAoB,EAAE,MAAM,oBAAoB,CAAC;AAChF,OAAO,EACN,mBAAmB,EACnB,qBAAqB,EACrB,mBAAmB,EACnB,uBAAuB,EACvB,2BAA2B,EAC3B,iBAAiB,EACjB,qBAAqB,GACrB,MAAM,eAAe,CAAC;AACvB,YAAY,EAAE,uBAAuB,EAAE,MAAM,YAAY,CAAC;AAC1D,OAAO,EACN,wBAAwB,EACxB,+BAA+B,EAC/B,sBAAsB,EACtB,oBAAoB,EACpB,sBAAsB,GACtB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,cAAc,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1D,OAAO,EAAE,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAChD,OAAO,EACN,wBAAwB,EACxB,iBAAiB,EACjB,wBAAwB,EACxB,mBAAmB,GACnB,MAAM,YAAY,CAAC;AACpB,YAAY,EAAE,kBAAkB,EAAE,wBAAwB,EAAE,MAAM,iBAAiB,CAAC;AACpF,OAAO,EACN,wBAAwB,EACxB,6BAA6B,EAC7B,iBAAiB,EACjB,kBAAkB,GAClB,MAAM,iBAAiB,CAAC;AAEzB,iCAAiC;AACjC,eAAO,MAAM,IAAI,yBAAyB,CAAC;AAE3C,gFAAgF;AAChF,eAAO,MAAM,sBAAsB,gBAAgB,CAAC;AAWpD,oEAAoE;AACpE,OAAO,EAAE,2BAA2B,EAAE,MAAM,UAAU,CAAC;AAEvD,0EAA0E;AAC1E,eAAO,MAAM,MAAM,wBAAyB,CAAC;AAE7C,qDAAqD;AACrD,MAAM,WAAW,MAAM;IACtB,4EAA4E;IAC5E,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,8EAA8E;IAC9E,SAAS,CAAC,EAAE,OAAO,CAAC;IACpB;;;;;;OAMG;IACH,WAAW,CAAC,EAAE,iBAAiB,CAAC;IAChC,sEAAsE;IACtE,YAAY,CAAC,EAAE,uBAAuB,CAAC;IACvC,oEAAoE;IACpE,OAAO,CAAC,EAAE,OAAO,CAAC,aAAa,CAAC,CAAC;IACjC,6FAA6F;IAC7F,YAAY,CAAC,EAAE;QACd,kBAAkB,CAAC,EAAE,UAAU,GAAG,YAAY,CAAC;QAC/C,YAAY,CAAC,EAAE;YACd,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;YACjB,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;YACnB,UAAU,CAAC,EAAE,MAAM,CAAC;YACpB,SAAS,CAAC,EAAE,MAAM,CAAC;SACnB,CAAC;KACF,CAAC;CACF;AAED,eAAO,MAAM,MAAM,EAAE,CAAC,CAAC,MAAM,CAe3B,CAAC;AAiGH;;;GAGG;AACH,wBAAgB,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,GAAE,MAAW,GAAG,IAAI,CAmC7D"}