dsh-opencode-go 0.1.19 → 0.1.21

package/lib/types/adapter.d.ts

@@ -25,7 +25,9 @@ import { LlmAdapter } from '@deepseek-ai/dsh-llm';
 import type { GenerateOptions, ImageAttachmentAccess, LlmModelInfo, LlmResolvedModelInfo, StreamChunk } from '@deepseek-ai/dsh-llm';
 import type { AttachmentStore, ImageAttachmentRef } from '@deepseek-ai/dsh-attachment';
 import { OpencodeGoCatalog } from './catalog.ts';
+import { ProxyTransport } from './proxy.ts';
 import type { OpencodeGoConfig } from './config.ts';
+import { type GoAccountSwitch } from './accounts.ts';
 /**
  * The attachment-service bridges one image request reads. Construction-time
  * (context-dependent); the config-dependent policy numbers are merged per
@@ -39,6 +41,8 @@ export interface OpencodeGoImageAccess {
 }
 /** Constructor inputs for {@link OpencodeGoAdapter}. */
 export interface OpencodeGoAdapterOptions {
+    /** Shared with Host usage reads for this plugin mount. */
+    transport?: ProxyTransport;
     /**
      * The current configuration, re-read at every operation: a settings write
      * reaches the next request without a restart, and one operation never mixes
@@ -64,6 +68,7 @@ export interface OpencodeGoAdapterOptions {
     onReplayDegrade?: (reason: string) => void;
     /** Re-read picker models after a background catalog refresh commits. */
     onCatalogRefresh?: () => void;
+    onAccountSwitch?: (notice: GoAccountSwitch | undefined, config: OpencodeGoConfig) => void;
 }
 /**
  * The single route's adapter. The catalog snapshot freezes at each operation,
@@ -79,7 +84,11 @@ export declare class OpencodeGoAdapter extends LlmAdapter {
      * for the whole refresh interval.
      */
     private catalogCache;
+    private readonly transport;
+    /** Per-reference rejection deadlines, isolated by the gateway that rejected it. */
+    private readonly rejectedKeys;
     constructor(options: OpencodeGoAdapterOptions);
+    dispose(): Promise<void>;
     /**
      * The catalog resolver for one configuration, rebuilding on the facts it
      * owns. Public for the plugin's discovery registration, which resolves the
@@ -107,4 +116,9 @@ export declare class OpencodeGoAdapter extends LlmAdapter {
     private resolveReasoningLevel;
     stream(options: GenerateOptions): AsyncIterable<StreamChunk>;
     private streamWithSnapshot;
+    private rememberRejectedKey;
+    /** A stored change to a reference outranks the gateway's last rejection of it. */
+    forgetRejectedKey(ref: string): void;
+    /** One account, one SDK attempt; host recovery still owns failures after output. */
+    private streamAttempt;
 }

package/lib/types/catalog.d.ts

@@ -30,6 +30,7 @@ export declare class OpencodeGoCatalog {
     /** Kept for API compatibility; now reports unconfigured ids rather than hiding them. */
     private readonly onOmitted;
     private readonly onRefresh;
+    private readonly fetcher?;
     private served;
     private pending;
     /** A cold runtime read can use disk metadata while the shared online refresh runs. */
@@ -48,7 +49,7 @@ export declare class OpencodeGoCatalog {
         kept: number;
     }) => void, 
     /** Kept for API compatibility; now reports unconfigured ids rather than hiding them. */
-    onOmitted: (ids: readonly string[]) => void, onRefresh?: () => void);
+    onOmitted: (ids: readonly string[]) => void, onRefresh?: () => void, fetcher?: typeof globalThis.fetch | undefined);
     snapshot(force?: boolean, signal?: AbortSignal): Promise<CatalogSnapshot>;
     private restoreMetadata;
     private readSnapshot;

package/lib/types/client/AccountsCard.d.ts

@@ -0,0 +1,19 @@
+import type { GoAccountsActions, GoAccountsState } from './accounts-controller.ts';
+import type { en } from './locales.ts';
+type Translate = (key: keyof typeof en, params?: Record<string, unknown>) => string;
+/**
+ * The account card: a folded header that summarizes the set, and one row per
+ * account inside. Rows keep the identity, key state, rolling quota and its reset
+ * countdown; everything else opens under the row. The handle is the drag source —
+ * dragging it, or the arrow keys on it, reorders the list, and the first row is
+ * the preferred account. Every row is read in the same pass, so the one refresh
+ * stamp belongs to the card and sits in its header.
+ */
+export declare function AccountsCard({ state, actions, writable, t, locale }: {
+    state: GoAccountsState;
+    actions: GoAccountsActions;
+    writable: boolean;
+    t: Translate;
+    locale?: string;
+}): import("react").JSX.Element;
+export {};

package/lib/types/client/Section.d.ts

@@ -1,10 +1,7 @@
 /**
- * The OpenCode Go settings page. Three cards carry the page's whole order — the
- * connection (the switch that routes the provider plus the API key it
- * authenticates with), the models the gateway currently serves and their
- * capacities, and the adapter tuning fields behind a collapsed disclosure at the
- * foot. The credential reference, the endpoint, and the tuning knobs all live in
- * the `llm-opencode-go` namespace, so every card writes the same document.
+ * The OpenCode Go settings page: provider activation, accounts and credentials,
+ * available models and capacities, then advanced tuning. Account operations
+ * apply immediately; tuning fields use the page's save/discard actions.
  */
 import type { InjectFace } from '@deepseek-ai/dsh-client-ui-slots';
 import type { OpencodeGoSectionFace } from './section-controller.ts';

package/lib/types/client/UsagePill.d.ts

@@ -1,6 +1,6 @@
 import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
 import type { ModelDirectoryState } from '@deepseek-ai/dsh-client-ui-model-selection/client';
-import type { GoUsage } from '../usage-contract.ts';
+import { type GoUsage } from '../usage-contract.ts';
 import type { SettingsScope } from './settings.ts';
 import type { OpencodeGoSettings } from './section-controller.ts';
 export interface UsagePillProps {
@@ -9,6 +9,8 @@ export interface UsagePillProps {
     readUsage: () => Promise<GoUsage>;
     t: (key: string) => string;
     getLocale?: () => string;
+    credentialChanges?: SnapshotStore<number>;
+    selectAccount?: (ref: string) => Promise<boolean>;
 }
 /** Only a visible, enabled pill mounts the usage poller. */
-export declare function UsagePill({ directory, settings, ...props }: UsagePillProps): import("react").JSX.Element | null;
+export declare function UsagePill({ directory, settings, credentialChanges, ...props }: UsagePillProps): import("react").JSX.Element | null;

package/lib/types/client/accounts-controller.d.ts

@@ -0,0 +1,80 @@
+import type { Context } from '@deepseek-ai/cordis';
+import { type AccountSettings, type GoAccount } from '../accounts.ts';
+import type { GoUsage } from '../usage-contract.ts';
+import type { SettingsScope } from './settings.ts';
+export interface GoAccountView extends GoAccount {
+    configured?: boolean;
+    writable?: boolean;
+    usage?: GoUsage;
+    updatedAt?: number;
+    stale?: boolean;
+    loading?: boolean;
+    failed?: boolean;
+    /** Why the last quota read failed, safe to show: it carries no credential value. */
+    problem?: string;
+}
+export interface GoAccountsState {
+    entries: readonly GoAccountView[];
+    activeRef: string;
+    autoSwitch: boolean;
+    busy: boolean;
+    blocked: boolean;
+    refreshing: boolean;
+    failure?: 'write' | 'cleanup' | 'remove' | 'read';
+}
+export interface GoAccountsActions {
+    loadAccounts: () => void;
+    addAccount: (name: string, key: string) => Promise<boolean>;
+    renameAccount: (ref: string, name: string) => Promise<boolean>;
+    removeAccount: (ref: string) => Promise<boolean>;
+    selectAccount: (ref: string) => Promise<boolean>;
+    setAutoSwitch: (next: boolean) => Promise<boolean>;
+    replaceAccountKey: (ref: string, key: string) => Promise<boolean>;
+    /** Move one account to a new position; the first row becomes the preferred account. */
+    moveAccount: (ref: string, toIndex: number) => Promise<boolean>;
+}
+/** Immediate account operations, separate from the page's staged tuning form. */
+export declare class GoAccountsController {
+    private readonly scope;
+    private readonly ctx;
+    private readonly readUsage;
+    private readonly publish;
+    private readonly blocked;
+    private rows;
+    private busy;
+    private refreshing;
+    private failure;
+    private epoch;
+    private identity;
+    private loaded;
+    private disposed;
+    constructor(scope: SettingsScope<AccountSettings & {
+        baseURL?: string;
+        proxyURL?: string;
+    }>, ctx: Context, readUsage: (ref: string) => Promise<GoUsage>, publish: () => void, blocked: () => boolean);
+    snapshot(): GoAccountsState;
+    sync(): void;
+    dispose(): void;
+    invalidate(ref: string): void;
+    refresh(): Promise<void>;
+    /** Mark every account row as unreadable with the Host's own diagnostic. */
+    private markUnreadable;
+    actions(): GoAccountsActions;
+    /**
+     * Reorder the visible accounts and keep the preferred reference on the first row.
+     * The adapter tries the preferred reference first and the rest in array order, so
+     * one write is what makes top-to-bottom the real call order. A placeholder row the
+     * settings never stored is materialized here, which its `legacy:` id admits.
+     */
+    private move;
+    private account;
+    private mutate;
+    private add;
+    /** Loaded rows answer from cache; anything they do not know is described on
+     * the spot, so a placeholder decision never races the page's first describe. */
+    private configuredOf;
+    private rename;
+    private select;
+    private remove;
+    private run;
+}

package/lib/types/client/locales.d.ts

@@ -1,8 +1,49 @@
 /** Copy dictionaries for the OpenCode Go settings page. English is the key-set source of truth. */
 export declare const en: {
+    accountsTitle: string;
+    accountsRefresh: string;
+    accountsBlocked: string;
+    accountsEmpty: string;
+    accountsWriteFailed: string;
+    accountsReadFailed: string;
+    accountsCleanupFailed: string;
+    accountsRemoveKeyFailed: string;
+    accountsStatusUnknown: string;
+    accountDefault: string;
+    accountAdd: string;
+    accountRename: string;
+    accountReplaceKey: string;
+    accountRemove: string;
+    accountRemoveHint: string;
+    accountName: string;
+    accountKeyHint: string;
+    accountConfirm: string;
+    accountCancel: string;
+    accountAutoSwitch: string;
+    accountAutoSwitchHint: string;
+    accountPreferredTag: string;
+    accountSwitchAction: string;
+    accountSwitchTitle: string;
+    accountSwitchBack: string;
+    accountSwitchHint: string;
+    accountSwitchFailed: string;
+    accountFallbackQuota: string;
+    accountFallbackCredential: string;
+    accountsSummary: string;
+    accountsSummaryEmpty: string;
+    accountsAvailability: string;
+    accountsAvailabilityFailed: string;
+    accountsDetails: string;
+    accountsDetailsHide: string;
+    accountDragHandle: string;
+    accountConfigureHint: string;
+    usageResetMinutes: string;
+    usageResetHours: string;
+    usageResetDays: string;
+    usageResetDue: string;
+    usageResetUnknown: string;
     usageTitle: string;
     usageRollingShort: string;
-    usageHint: string;
     usageWeekShort: string;
     usage_rolling: string;
     usage_weekly: string;
@@ -12,6 +53,7 @@ export declare const en: {
     usageLoading: string;
     usageUnavailable: string;
     usageStaleShort: string;
+    usageFallbackShort: string;
     usageStaleHint: string;
     usageRefreshFailed: string;
     usageLastUpdated: string;
@@ -101,6 +143,9 @@ export declare const en: {
     apiKeyEnvHint: string;
     baseURLLabel: string;
     baseURLHint: string;
+    proxyURLLabel: string;
+    proxyURLHint: string;
+    proxyURLInvalid: string;
     refreshMinutesLabel: string;
     refreshMinutesHint: string;
     streamIdleTimeoutMsLabel: string;

package/lib/types/client/section-controller.d.ts

@@ -14,6 +14,8 @@ import type { GoModel, GoModelCatalog } from '../models-contract.ts';
 import { type UsageDisplayMode } from '../usage-display.ts';
 import type { SnapshotStore } from '@deepseek-ai/dsh-client-store';
 import type { SettingsScope } from './settings.ts';
+import type { GoAccount } from '../accounts.ts';
+import { type GoAccountsState, type GoAccountsActions } from './accounts-controller.ts';
 import { type FieldState, type FormActions, type FormShell } from './staged-form.ts';
 /** Namespace of the OpenCode Go adapter. Spelled here rather than imported: a client package must not depend on a Host package. */
 export declare const OPENCODE_GO_NS = "llm-opencode-go";
@@ -27,8 +29,12 @@ export interface OpencodeGoSettings {
     modelVisibility?: Record<string, boolean>;
     /** Credential reference naming the environment key. */
     apiKeyEnv?: string;
+    accounts?: GoAccount[] | null;
+    autoSwitch?: boolean;
     /** The gateway endpoint; also the live listing base. */
     baseURL?: string;
+    /** Optional network proxy used by the Host. */
+    proxyURL?: string;
     /** Live catalog re-resolution interval, in minutes. */
     refreshMinutes?: number;
     /** Largest idle gap between stream events, in milliseconds. */
@@ -82,6 +88,7 @@ export type OpencodeGoModels =
 };
 /** What the settings page renders. */
 export interface OpencodeGoSectionState extends FormShell {
+    accounts?: GoAccountsState;
     /**
      * Whether the adapter currently serves its route. Resolved from the section
      * rather than staged: the switch writes on the click that flips it, because
@@ -96,6 +103,7 @@ export interface OpencodeGoSectionState extends FormShell {
     apiKeyEnv: FieldState;
     /** The gateway endpoint. */
     baseURL: FieldState;
+    proxyURL: FieldState;
     /** Live catalog re-resolution interval, in minutes. */
     refreshMinutes: FieldState;
     /** Largest idle gap between stream events, in milliseconds. */
@@ -122,7 +130,7 @@ export interface OpencodeGoSectionState extends FormShell {
     modelLimitDraft: OpencodeGoModelLimits;
 }
 /** The registration-side face the page's slot entry injects. */
-export interface OpencodeGoSectionFace extends FormActions {
+export interface OpencodeGoSectionFace extends FormActions, GoAccountsActions {
     hooks: {
         /** Page snapshot bound by the UI renderer as useOpencodeGo. */
         opencodeGo: SnapshotStore<OpencodeGoSectionState>;
@@ -150,12 +158,15 @@ export declare class OpencodeGoSectionController {
     private pickerFailed;
     private face;
     private readonly unsubscribe;
+    private accounts;
+    private credentialRequest;
+    private keyDraftRef;
     /**
      * @param scope - the bound settings scope for the `llm-opencode-go` namespace.
      * @param ctx - the page plugin's context, whose `remote.credentials` namespace
      *   answers for the credential the section references.
      */
-    constructor(scope: SettingsScope<OpencodeGoSettings>, ctx: ClientContext, readModels?: () => Promise<RemoteResult<GoModelCatalog>>);
+    constructor(scope: SettingsScope<OpencodeGoSettings>, ctx: ClientContext, readModels?: () => Promise<RemoteResult<GoModelCatalog>>, readUsage?: (ref: string) => Promise<import('../usage-contract.ts').GoUsage>);
     /** Release subscriptions without disposing the host's shared form. */
     dispose(): void;
     private projection;

package/lib/types/client/staged-form.d.ts

@@ -191,5 +191,13 @@ export declare class StagedForm {
     private baseValue;
     private userLayer;
     private stored;
+    /**
+     * Whether a draft already equals the field's effective value, so a save would
+     * write nothing. The save plan and the override badge both answer for it.
+     * @param field - field name inside the namespace section.
+     * @param staged - the staged edit to test.
+     * @returns true when the draft is a no-op; a clear is never one.
+     */
+    private unchangedDraft;
     private publish;
 }

package/lib/types/config.d.ts

@@ -10,6 +10,7 @@
  */
 import z from '@deepseek-ai/schemastery';
 import { type UsageDisplayMode } from './usage-display.ts';
+import { type GoAccount } from './accounts.ts';
 /** Environment variable resolving the OpenCode API key. */
 export declare const DEFAULT_API_KEY_ENV = "OPENCODE_API_KEY";
 /** Successful refresh lifetime; failed refreshes retry sooner and explicit discovery revalidates immediately. */
@@ -45,8 +46,13 @@ export interface OpencodeGoConfig {
     modelVisibility?: Record<string, boolean>;
     /** Credential reference: the environment variable the key resolves from. */
     apiKeyEnv: string;
+    accounts?: GoAccount[] | null;
+    /** Try other saved accounts on quota/credential rejection before any content is emitted. */
+    autoSwitch?: boolean;
     /** The gateway endpoint; also the base of the live model listing. */
     baseURL: string;
+    /** Optional HTTP(S) or SOCKS5 proxy; blank uses the default network transport. */
+    proxyURL: string;
     /** Request/picker cache lifetime in minutes; explicit discovery bypasses it. */
     refreshMinutes: number;
     /** Largest idle gap between stream events before the request fails. */

package/lib/types/index.d.ts

@@ -41,6 +41,7 @@ export { OpencodeGoAdapter } from './adapter.ts';
 export type { OpencodeGoAdapterOptions, OpencodeGoImageAccess } from './adapter.ts';
 export { DEFAULT_BASE_URL, DISPLAY_NAME, PROVIDER_ID, OpencodeGoCatalog, discoverCatalogModels, readLiveModelIds, } from './catalog.ts';
 export { Config, PlainConfig, assertBaseURL } from './config.ts';
+export { assertProxyURL } from './proxy-url.ts';
 export type { OpencodeGoConfig } from './config.ts';
 export declare const name = "llm-opencode-go";
 export declare const inject: string[];

package/lib/types/json-response.d.ts

@@ -3,7 +3,7 @@ export declare function transportFailure(error: unknown): string;
 /** Keep the endpoint useful in diagnostics without user information or query secrets. */
 export declare function diagnosticURL(raw: string): string;
 /** The caller's signal covers both attempts, the retry delay, and all response reads. */
-export declare function fetchJsonResponse(url: string, init: RequestInit, maxBytes: number, encoding?: 'identity' | 'gzip'): Promise<{
+export declare function fetchJsonResponse(url: string, init: RequestInit, maxBytes: number, encoding?: 'identity' | 'gzip', fetcher?: typeof globalThis.fetch): Promise<{
     response: Response;
     body: unknown;
 }>;

package/lib/types/proxy-url.d.ts

@@ -0,0 +1,2 @@
+/** Shared by Host validation and the browser form; never echo proxy credentials. */
+export declare function assertProxyURL(raw: string | undefined): string;

package/lib/types/proxy.d.ts

@@ -0,0 +1,11 @@
+/** Per-mount transport. Fetch closures retain their address across settings changes. */
+export declare class ProxyTransport {
+    private current;
+    private readonly retired;
+    private disposed;
+    forProxy(raw?: string): typeof globalThis.fetch | undefined;
+    /** Close replaced pools after their in-flight response bodies have finished. */
+    private retire;
+    /** Unloading the mount cancels remaining requests and releases every pool. */
+    dispose(): Promise<void>;
+}

package/lib/types/usage-contract.d.ts

@@ -1,4 +1,5 @@
 import type { RemoteResult, TypertRemoteContribution } from '@deepseek-ai/dsh-typert-protocol';
+import type { GoAccountSwitch } from './accounts.ts';
 export interface UsageWindow {
     status: 'ok' | 'rate-limited';
     percent: number;
@@ -7,10 +8,12 @@ export interface UsageWindow {
 export interface GoUsage {
     /** Opaque Host identity for this endpoint/account; never a credential or its hash. */
     source?: string;
+    lastSwitch?: GoAccountSwitch;
     rolling: UsageWindow;
     weekly: UsageWindow;
     monthly: UsageWindow;
 }
+export declare function parseAccountSwitch(value: unknown): GoAccountSwitch;
 /** Reject missing statistics rather than turning unavailable data into zero. */
 export declare function parseGoUsage(value: unknown): GoUsage;
 declare module '@deepseek-ai/dsh-typert-protocol' {
@@ -19,11 +22,13 @@ declare module '@deepseek-ai/dsh-typert-protocol' {
             readonly retryable: boolean;
             readonly retainPrevious: boolean;
             readonly source?: string;
+            readonly lastSwitch?: GoAccountSwitch;
         };
     }
     interface TypertRemoteNamespaceMap {
         opencodeGoUsage: {
             read(): Promise<RemoteResult<GoUsage>>;
+            readAccount(ref: string): Promise<RemoteResult<GoUsage>>;
         };
     }
 }

package/lib/types/usage.d.ts

@@ -1,15 +1,27 @@
 import type { Context } from '@deepseek-ai/cordis';
 import { TypertRemoteService } from '@deepseek-ai/dsh-typert-protocol';
 import { type GoUsage } from './usage-contract.ts';
+import type { GoAccountSwitch } from './accounts.ts';
+import { ProxyTransport } from './proxy.ts';
 interface UsageOptions {
     baseURL: () => string;
-    resolveApiKey: () => Promise<string | undefined>;
+    proxyURL?: () => string;
+    transport?: ProxyTransport;
+    resolveApiKey: (ref?: string) => Promise<string | undefined>;
+    activeRef?: () => string;
+    accountRefs?: () => readonly string[];
+    lastSwitch?: () => GoAccountSwitch | undefined;
 }
 /** Account statistics are fetched on the Host; credentials never enter the browser. */
 export declare class GoUsageService extends TypertRemoteService {
     private readonly options;
-    private identity?;
+    private readonly identities;
+    private readonly pending;
+    private readonly transport;
     constructor(ctx: Context, options: UsageOptions);
     read(): Promise<GoUsage>;
+    readAccount(ref: string): Promise<GoUsage>;
+    private readRef;
+    private fetchUsage;
 }
 export {};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-opencode-go",
-  "version": "0.1.19",
+  "version": "0.1.21",
   "description": "OpenCode Go model provider and settings UI for DeepSeek Harness",
   "type": "module",
   "license": "MIT",
@@ -34,6 +34,7 @@
     "cordis.patch.yml",
     "THIRD_PARTY_NOTICES.md",
     "docs",
+    "!docs/multi-account-review-plan.md",
     "examples"
   ],
   "dsh": {
@@ -89,7 +90,8 @@
   "dependencies": {
     "@deepseek-ai/dsh-brand": "0.1.6-alpha.1",
     "@deepseek-ai/schemastery": "3.18.3",
-    "opencode-go-pi-ai": "npm:@earendil-works/pi-ai@0.87.1"
+    "opencode-go-pi-ai": "npm:@earendil-works/pi-ai@0.87.1",
+    "undici": "7.30.0"
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.2",