dsh-keys-manager 0.2.1 → 0.2.3

package/lib/domain.d.ts

@@ -94,6 +94,13 @@ export interface ProviderRecord {
     brokerRef: string;
     /** The profile's reference before adoption, restored on release. */
     originalApiKeyEnv: string | null;
+    /**
+     * Adoption found a foreign projection serving the route, so it could not
+     * complete its one-time takeover of `originalApiKeyEnv` (PR review round 40).
+     * The debt survives a restart and is settled by the next projection-change
+     * sync; it never authorises an ordinary repair.
+     */
+    takeoverPending?: boolean;
     /** True when the profile itself was created by adding an extra provider. */
     createdProfile: boolean;
     /** True when a profile existed before adoption. */
@@ -163,6 +170,8 @@ export interface ProviderView {
      * is account-adoptable while carrying no key-pool credential.
      */
     accountSupported?: boolean;
+    /** True when another plugin serves this route on its own credential (not the pi-ai key pool). */
+    transport?: boolean;
     reason?: string;
     settingsNs: string;
     settingsPath: string[];
@@ -185,6 +194,36 @@ export interface ProviderView {
     status: ProviderStatus;
     keys: KeyView[];
     warning?: string;
+    /**
+     * Requests this route served before its ownership read decided which
+     * account serves it (`I-000120`, D8). Process-local and additive: an older
+     * snapshot without the field still renders, and zero keeps it absent.
+     */
+    unattributedRequests?: number;
+}
+/** Health state a transport account row renders. */
+export type TransportAccountStatus = 'active' | 'expired' | 'needs-reauth' | 'signed-out';
+/**
+ * One `llm-omp-transports/<route>` account held beside the pi-ai pool.
+ *
+ * A transport route keeps exactly one grant record, so a row is either that
+ * record's secret-free view or the route's signed-out placeholder. It never
+ * carries the grant payload itself, and it is never part of a pi-ai
+ * projection: the transports package's own adapter resolves the record.
+ */
+export interface TransportAccountView {
+    /** Provider route the grant serves, e.g. 'cursor'. */
+    id: string;
+    /** The credential record holding the grant, e.g. 'llm-omp-transports/cursor'. */
+    scope: string;
+    displayName: string;
+    email?: string;
+    accountId?: string;
+    /** Epoch ms when the access token expires. */
+    expiresAt?: number;
+    status: TransportAccountStatus;
+    /** Derived from {@link status}: true only while it is `'active'`. */
+    active: boolean;
 }
 /** Complete manager snapshot the UI renders. */
 export interface StateView {
@@ -199,6 +238,22 @@ export interface StateView {
     pausedKeyCount: number;
     bindingsCount: number;
     warnings: string[];
+    /**
+     * Transport accounts managed beside the pi-ai pool. Additive and optional,
+     * so a snapshot from a build without transport support still renders.
+     */
+    transportAccounts?: TransportAccountView[];
+}
+/**
+ * Outcome of one per-row connection test: one minimal request through the
+ * provider route, with no health or selection side effects.
+ */
+export interface KeyTestResult {
+    ok: boolean;
+    /** Wall-clock time of the request that was actually sent. */
+    latencyMs: number;
+    /** Provider failure message, timeout, or the reason no request was sent. */
+    error?: string;
 }
 /** One curated extra built-in provider. */
 export interface ExtraProvider {
@@ -207,6 +262,14 @@ export interface ExtraProvider {
     api: string;
     baseURL: string;
     env: string[];
+    /**
+     * Static request headers this route needs. Maps header name → environment
+     * variable name; each value is resolved from the environment at add time.
+     * Only non-secret metadata headers are supported: values are persisted as
+     * plain profile settings, so a credential-bearing name (`authorization`,
+     * `proxy-authorization`, `cookie`, `x-api-key`, `*-api-key`) is refused.
+     */
+    headerEnv?: Record<string, string>;
     models: ModelRecord[];
 }
 /** Serializable notice captured on an interactive sign-in attempt. */

package/lib/host-types.d.ts

@@ -46,6 +46,18 @@ export interface LlmRuntimeLike {
         name: string;
     }>;
     discoverModels(settingsNs: string, request: DiscoveryRequest, signal: AbortSignal): Promise<DiscoveredModel[]>;
+    /**
+     * One model request through the provider route. The host runs the
+     * `llm/stream` waterfall, so the manager's own stream listener — and the
+     * broker credential wrapper — observe it exactly like a chat request.
+     */
+    stream(options: {
+        provider: string;
+        model: string;
+        messages: readonly unknown[];
+        maxTokens?: number;
+        signal?: AbortSignal;
+    }): AsyncIterable<StreamChunkLike>;
 }
 /** Credential value/source facts returned by the credential seam. */
 export interface CredentialHit {
@@ -126,6 +138,23 @@ export interface CredentialRecordsLike {
     modifyRecord(key: string, mutate: (current: CredentialRecordLike | undefined) => Promise<CredentialRecordLike | undefined>): Promise<CredentialRecordLike | undefined>;
     deleteRecord(key: string): Promise<void>;
 }
+/**
+ * The grant payload the llm-omp transports package writes at
+ * `llm-omp-transports/<route>`. Keys Manager only reads it (list/status) and
+ * deletes the whole record; the payload stays owned by its writer, so this is
+ * a structural shape (the package exports no runtime type for it without
+ * pulling its transport code in).
+ */
+export interface TransportGrantLike {
+    /** Bearer token the route's adapter sends. */
+    access: string;
+    /** Refresh token; absent on a grant that cannot be renewed. */
+    refresh?: string;
+    /** Epoch ms when the access token expires. */
+    expires: number;
+    email?: string;
+    accountId?: string;
+}
 /** One path-addressed settings edit. */
 export type SettingsPathOp = {
     op: 'set';