dsh-opendesign-corouter 0.1.4 → 0.1.6

package/lib/generated/typert.remote-client.js

@@ -8,22 +8,29 @@ function record(value) {
 }
 
 // src/device-auth.ts
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url = new URL(value);
     if (url.origin !== "https://open-design.ai" || url.pathname !== "/cloud/cli/activate" || url.username || url.password || url.hash) return null;
     const entries = [...url.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url.searchParams.get("deviceId");
+      const code = url.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url.href;
   } catch {
     return null;
   }
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }
@@ -89,6 +96,7 @@ var MAX_API_KEY = 16384;
 var HTTP_ASCII = /^[\x21-\x7e]+$/u;
 var ENV_REF = /^[A-Za-z_][A-Za-z0-9_]*$/u;
 var MODEL_ID = /^[A-Za-z0-9._:/-]{1,128}$/u;
+var ACTIVATION_OPEN_CODES = ["opened", "no-link", "invalid-url", "unavailable", "failed"];
 var LOGIN_PHASES = ["idle", "launching", "waiting", "verifying", "success", "cancelled", "error"];
 var QUOTA_STATES = ["ok", "partial", "need-login", "error"];
 var SESSION_SOURCES = ["desktop", "login", "environment"];
@@ -264,6 +272,10 @@ function parseSaveApiKeyRequest(value) {
   if (key.length > MAX_API_KEY) throw new Error(`API Key \u4E0D\u80FD\u8D85\u8FC7 ${MAX_API_KEY} \u5B57\u7B26`);
   return { value: key, expectedRevision: text(value.expectedRevision, "\u914D\u7F6E\u7248\u672C", MAX_REVISION) };
 }
+function parseActivationOpenState(value) {
+  if (!record(value)) throw new Error("\u6388\u6743\u9875\u6253\u5F00\u7ED3\u679C\u5FC5\u987B\u662F\u5BF9\u8C61");
+  return { code: member(value.code, ACTIVATION_OPEN_CODES, "\u6388\u6743\u9875\u6253\u5F00\u7ED3\u679C"), opened: flag(value.opened, "\u6388\u6743\u9875\u662F\u5426\u5DF2\u6253\u5F00") };
+}
 
 // src/generated/typert.remote-client.ts
 var StatusCodec = { mode: "strict", typeSymbol: "dsh-opendesign-corouter#Status", create: () => z.unknown().transform((value) => parseStatus(value)) };
@@ -271,6 +283,7 @@ var QuotaSnapshotCodec = { mode: "strict", typeSymbol: "dsh-opendesign-corouter#
 var LoginStateCodec = { mode: "strict", typeSymbol: "dsh-opendesign-corouter#LoginState", create: () => z.unknown().transform((value) => parseLoginState(value)) };
 var StartLoginRequestCodec = { mode: "strict", typeSymbol: "dsh-opendesign-corouter#StartLoginRequest", create: () => z.unknown().transform((value) => parseStartLoginRequest(value)) };
 var CancelLoginRequestCodec = { mode: "strict", typeSymbol: "dsh-opendesign-corouter#CancelLoginRequest", create: () => z.unknown().transform((value) => parseCancelLoginRequest(value)) };
+var ActivationOpenStateCodec = { mode: "strict", typeSymbol: "dsh-opendesign-corouter#ActivationOpenState", create: () => z.unknown().transform((value) => parseActivationOpenState(value)) };
 var SaveApiKeyRequestCodec = { mode: "strict", typeSymbol: "dsh-opendesign-corouter#SaveApiKeyRequest", create: () => z.unknown().transform((value) => parseSaveApiKeyRequest(value)) };
 var TYPERT_REMOTE = createTypertRemoteInfo({ package: "dsh-opendesign-corouter", methods: {
   "openDesignCoRouter/status": { service: "openDesignCoRouter", invocation: { kind: "direct" }, parameters: [], result: StatusCodec },
@@ -280,6 +293,7 @@ var TYPERT_REMOTE = createTypertRemoteInfo({ package: "dsh-opendesign-corouter",
   "openDesignCoRouter/startLogin": { service: "openDesignCoRouter", invocation: { kind: "direct" }, parameters: [{ name: "input", source: "json", codec: StartLoginRequestCodec, strictCodec: StartLoginRequestCodec }], result: LoginStateCodec },
   "openDesignCoRouter/loginStatus": { service: "openDesignCoRouter", invocation: { kind: "direct" }, parameters: [], result: LoginStateCodec },
   "openDesignCoRouter/cancelLogin": { service: "openDesignCoRouter", invocation: { kind: "direct" }, parameters: [{ name: "input", source: "json", codec: CancelLoginRequestCodec, strictCodec: CancelLoginRequestCodec }], result: LoginStateCodec },
+  "openDesignCoRouter/openActivationPage": { service: "openDesignCoRouter", invocation: { kind: "direct" }, parameters: [], result: ActivationOpenStateCodec },
   "openDesignCoRouter/saveApiKey": { service: "openDesignCoRouter", invocation: { kind: "direct" }, parameters: [{ name: "input", source: "json", codec: SaveApiKeyRequestCodec, strictCodec: SaveApiKeyRequestCodec }], result: StatusCodec }
 } }, z);
 var typert_remote_client_default = TYPERT_REMOTE;

package/lib/index.d.ts

@@ -5,9 +5,10 @@ import type { CatalogModel } from './catalog.js';
 import { readConfig, type LiveConfig } from './config.js';
 import { resolveSession } from './auth.js';
 import { type LoginOptions } from './login.js';
+import { type ActivationLauncherOptions } from './browser-open.js';
 import { readQuota, type QuotaSnapshot } from './quota.js';
 import { readDesktopQuota } from './desktop-quota.js';
-import { type Status, type LoginState, type StartLoginRequest, type CancelLoginRequest, type SaveApiKeyRequest } from './remote.js';
+import { type Status, type LoginState, type StartLoginRequest, type CancelLoginRequest, type SaveApiKeyRequest, type ActivationOpenState } from './remote.js';
 export { Config } from './config.js';
 export { CoRouterAdapter } from './adapter.js';
 export { MODELS } from './catalog.js';
@@ -20,11 +21,13 @@ export interface HostDependencies {
     fetchModels?: typeof fetchModelCatalog;
     modelsChanged?: () => void;
     loginOptions?: LoginOptions;
+    activationOptions?: ActivationLauncherOptions;
 }
 export declare class OpenDesignCoRouterService extends TypertRemoteService {
     readonly dependencies: HostDependencies;
     private readonly _config;
     private readonly _login;
+    private readonly _activation;
     private readonly _lifetime;
     private _revision;
     private _fingerprint;
@@ -62,6 +65,7 @@ export declare class OpenDesignCoRouterService extends TypertRemoteService {
     startLogin(input: StartLoginRequest): Promise<LoginState>;
     loginStatus(): LoginState;
     cancelLogin(input: CancelLoginRequest): LoginState;
+    openActivationPage(): Promise<ActivationOpenState>;
     saveApiKey(input: SaveApiKeyRequest): Promise<Status>;
 }
 declare module '@deepseek-ai/cordis' {

package/lib/index.js

@@ -159,7 +159,7 @@ var MODELS = [
     reasoningEfforts: EFFORTS_LOW_HIGH
   },
   { id: "glm-5.2", name: "GLM-5.2", group: "paid" },
-  // ── Moonshot（2） ───────────────────────────────────────────
+  // ── Moonshot（3） ───────────────────────────────────────────
   {
     id: "kimi-k2.7-code",
     name: "Kimi K2.7 Code",
@@ -170,7 +170,9 @@ var MODELS = [
     reasoningEfforts: EFFORTS_STD
   },
   { id: "kimi-k3", name: "Kimi K3", group: "paid" },
-  // ── Google（2） ─────────────────────────────────────────────
+  { id: "kimi-k3.1-pro", name: "Kimi K3.1 Pro", group: "paid" },
+  // ── Google（3） ─────────────────────────────────────────────
+  { id: "gemini-4-argon", name: "Gemini 4 Argon", group: "paid" },
   { id: "gemini-3.8-flash", name: "Gemini 3.8 Flash", group: "paid" },
   { id: "gemini-3.7-flash", name: "Gemini 3.7 Flash", group: "paid" },
   // ── xAI（3） ────────────────────────────────────────────────
@@ -207,7 +209,11 @@ var MODELS = [
     reasoningEfforts: EFFORTS_STD
   },
   // ── Alibaba（1） ────────────────────────────────────────────
-  { id: "qwen3.7-max", name: "Qwen3.7 Max", group: "paid" }
+  { id: "qwen3.7-max", name: "Qwen3.7 Max", group: "paid" },
+  // Official API additions; display labels for undocumented entries are local formatting.
+  { id: "minimax-m3.1-flash", name: "MiniMax M3.1 Flash", group: "plan" },
+  { id: "muse-spark-1.3", name: "Muse Spark 1.3", group: "paid" },
+  { id: "muse-wonder", name: "Muse Wonder", group: "paid" }
 ];
 var BY_ID = new Map(MODELS.map((model) => [model.id, model]));
 function findModel(id) {
@@ -2194,7 +2200,7 @@ import { randomUUID } from "node:crypto";
 
 // src/device-auth.ts
 var DEVICE_AUTH_ENDPOINT = "https://amr-api.open-design.ai/api/v1/cli/device-authorizations";
-var DEVICE_AUTH_PLUGIN_VERSION = "0.1.4";
+var DEVICE_AUTH_PLUGIN_VERSION = "0.1.6";
 var DEVICE_REQUEST_TIMEOUT_MS = 2e4;
 var DEVICE_RESPONSE_MAX_BYTES = 65536;
 var DEVICE_POLL_MIN_MS = 1e3;
@@ -2206,17 +2212,21 @@ var DeviceAuthError = class extends Error {
   }
   code;
 };
-function validateActivationUrl(value, userCode) {
+function validateActivationUrl(value, userCode, deviceId) {
   if (typeof value !== "string" || value.length > 512 || !/^https:\/\/open-design\.ai\/cloud\/cli\/activate(?:\?[^#]*)?$/u.test(value) || /[\s\\]/u.test(value)) return null;
   try {
     const url = new URL(value);
     if (url.origin !== "https://open-design.ai" || url.pathname !== "/cloud/cli/activate" || url.username || url.password || url.hash) return null;
     const entries = [...url.searchParams];
-    if (entries.length > 1) return null;
-    if (entries.length) {
+    if (entries.length === 2) {
+      if (entries.some(([key]) => key !== "deviceId" && key !== "userCode")) return null;
+      const id = url.searchParams.get("deviceId");
+      const code = url.searchParams.get("userCode");
+      if (!validDeviceId(id) || !validUserCode(code) || deviceId !== void 0 && id !== deviceId || userCode !== void 0 && code !== userCode) return null;
+    } else if (entries.length === 1) {
       const entry = entries[0];
       if (!["code", "user_code"].includes(entry[0]) || !validUserCode(entry[1]) || userCode !== void 0 && entry[1] !== userCode) return null;
-    }
+    } else if (entries.length > 2) return null;
     return url.href;
   } catch {
     return null;
@@ -2225,6 +2235,9 @@ function validateActivationUrl(value, userCode) {
 function object(value) {
   return value !== null && typeof value === "object" && !Array.isArray(value);
 }
+function validDeviceId(value) {
+  return typeof value === "string" && /^[a-z0-9_-]{1,200}$/iu.test(value);
+}
 function validUserCode(value) {
   return typeof value === "string" && /^[a-z0-9][a-z0-9-]{3,31}$/iu.test(value);
 }
@@ -2232,8 +2245,8 @@ function secret(value) {
   return typeof value === "string" && value.length > 0 && value.length <= 8192 && /^[\x21-\x7e]+$/u.test(value);
 }
 function parseDeviceAuthorization(value) {
-  if (!object(value) || typeof value.deviceId !== "string" || !/^[a-z0-9_-]{1,200}$/iu.test(value.deviceId) || !secret(value.deviceSecret) || !validUserCode(value.userCode)) throw new DeviceAuthError("opendesign/login-response");
-  const activationUrl = validateActivationUrl(value.activationUrl, value.userCode);
+  if (!object(value) || !validDeviceId(value.deviceId) || !secret(value.deviceSecret) || !validUserCode(value.userCode)) throw new DeviceAuthError("opendesign/login-response");
+  const activationUrl = validateActivationUrl(value.activationUrl, value.userCode, value.deviceId);
   if (!activationUrl || value.userCode.toLowerCase().includes(value.deviceSecret.toLowerCase()) || decodeURIComponent(activationUrl).toLowerCase().includes(value.deviceSecret.toLowerCase())) throw new DeviceAuthError("opendesign/login-response");
   const expiresAt = typeof value.expiresAt === "string" && /^\d{4}-\d\d-\d\dT\d\d:\d\d:\d\d(?:\.\d{1,3})?(?:Z|[+-]\d\d:\d\d)$/u.test(value.expiresAt) ? Date.parse(value.expiresAt) : NaN;
   if (!Number.isFinite(expiresAt) || typeof value.pollIntervalSeconds !== "number" || !Number.isFinite(value.pollIntervalSeconds) || value.pollIntervalSeconds <= 0) throw new DeviceAuthError("opendesign/login-response");
@@ -2252,6 +2265,7 @@ function parseDevicePoll(value) {
   if (["expired", "cancelled", "canceled", "denied", "rejected", "failed", "error"].includes(state)) throw new DeviceAuthError(state === "expired" ? "opendesign/login-expired" : "opendesign/login-denied");
   if (value.error !== void 0 && value.error !== null && value.error !== "") throw new DeviceAuthError("opendesign/login-response");
   const user = object(value.user) ? value.user : {};
+  if ((state === "pending" || state === "authorization_pending") && [value.controlKey, value.runtimeKey, user.controlKey, user.runtimeKey].every((key) => key === void 0 || key === null)) return { state: "pending" };
   const topPresent = value.controlKey !== void 0 || value.runtimeKey !== void 0;
   const source = topPresent ? value : user;
   if (source.controlKey !== void 0 || source.runtimeKey !== void 0) {
@@ -2406,6 +2420,11 @@ var ConsoleLogin = class {
       } : {}
     };
   }
+  /** Host-only: the live approval link, so the Host can open it in a bounded window. */
+  activationLink() {
+    const status = this.status();
+    return status.state === "waiting" ? status.activationUrl : void 0;
+  }
   /** Synchronous/non-blocking and idempotent while capture/network/commit is pending. */
   start(request) {
     if (this.disposed) throw new LoginError("opendesign/login-disposed");
@@ -2421,7 +2440,8 @@ var ConsoleLogin = class {
       status: { jobId: null, state: "launching", startedAt: new Date(started).toISOString(), message: "\u6B63\u5728\u7533\u8BF7\u5B98\u65B9\u8BBE\u5907\u6388\u6743\u7801" },
       captured: void 0,
       committing: false,
-      cancelRequested: false
+      cancelRequested: false,
+      settled: false
     };
     job.status.jobId = job.id;
     this.job = job;
@@ -2446,7 +2466,11 @@ var ConsoleLogin = class {
   }
   dispose() {
     this.disposed = true;
-    if (this.job) this.requestCancellation(this.job, "\u670D\u52A1\u5DF2\u5378\u8F7D\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88");
+    const job = this.job;
+    if (job) {
+      this.requestCancellation(job, "\u670D\u52A1\u5DF2\u5378\u8F7D\uFF0C\u767B\u5F55\u5DF2\u53D6\u6D88");
+      this.settle(job);
+    }
   }
   alive(job) {
     return this.job === job && !this.disposed && !job.controller.signal.aborted && ACTIVE.has(job.status.state);
@@ -2495,6 +2519,16 @@ var ConsoleLogin = class {
     this.clearCode(job);
     this.stopTimer(job);
     job.controller.abort();
+    this.settle(job);
+  }
+  /** Report one terminal transition per job, exactly once. */
+  settle(job) {
+    if (job.settled) return;
+    job.settled = true;
+    try {
+      this.options.onSettled?.();
+    } catch {
+    }
   }
   async run(job) {
     const signal = job.controller.signal;
@@ -2514,7 +2548,7 @@ var ConsoleLogin = class {
     }
     this.armExpiry(job);
     job.status.state = "waiting";
-    job.status.message = "\u8BF7\u5728\u5E38\u7528\u6D4F\u89C8\u5668\u6253\u5F00\u5B98\u65B9\u6388\u6743\u9875\uFF0C\u4F7F\u7528\u5DF2\u4FDD\u5B58\u7684\u5BC6\u7801\u767B\u5F55\u5E76\u786E\u8BA4\u8BBE\u5907\u7801";
+    job.status.message = "\u8BF7\u5728\u6388\u6743\u7A97\u53E3\u6216\u5E38\u7528\u6D4F\u89C8\u5668\u6253\u5F00\u5B98\u65B9\u6388\u6743\u9875\uFF0C\u767B\u5F55\u5E76\u786E\u8BA4\u8BBE\u5907\u7801";
     job.status.activationUrl = device.activationUrl;
     job.status.userCode = device.userCode;
     job.status.expiresAt = new Date(job.deadline).toISOString();
@@ -2572,6 +2606,258 @@ function failureMessage(error) {
   return "\u8BBE\u5907\u6388\u6743\u8BF7\u6C42\u5931\u8D25\uFF0C\u8BF7\u91CD\u65B0\u5F00\u59CB";
 }
 
+// src/browser-open.ts
+var ACTIVATION_NAVIGATE_TIMEOUT_MS = 15e3;
+var ACTIVATION_OPEN_BUDGET_MS = 2e4;
+var ACTIVATION_CLOSE_TIMEOUT_MS = 5e3;
+function chromeLaunchOptions() {
+  return {
+    channel: "chrome",
+    headless: false,
+    chromiumSandbox: true,
+    ignoreDefaultArgs: ["--enable-automation"],
+    args: ["--disable-blink-features=AutomationControlled"]
+  };
+}
+var ActivationLauncher = class {
+  browser;
+  page;
+  pending;
+  disposal;
+  /** In-flight window closure, shared so disposal can join it. */
+  closing;
+  /** Closures of handles that were never adopted; disposal joins them too. */
+  tracked = [];
+  /** Chrome starts in flight, so disposal waits for the handle they will produce. */
+  starting = [];
+  disposed = false;
+  /** Bumped by `close()`: an attempt from an older session must not resurrect a window. */
+  session = 0;
+  options;
+  constructor(options = {}) {
+    this.options = options;
+  }
+  /**
+   * Show `url` in the temporary window, reusing one already open. Concurrent calls share
+   * a single attempt: the caller's button stays honest about what actually happened.
+   */
+  async open(url) {
+    if (validateActivationUrl(url) === null) return { code: "invalid-url", opened: false };
+    if (this.disposed) return { code: "failed", opened: false };
+    if (this.pending) return this.pending;
+    const attempt = this.attempt(url);
+    this.pending = attempt;
+    try {
+      return await attempt;
+    } finally {
+      if (this.pending === attempt) this.pending = void 0;
+    }
+  }
+  /**
+   * Close the temporary window and stay usable: a cancelled or expired job takes its
+   * window away, while the next login may open a new one.
+   */
+  async close() {
+    this.session++;
+    await this.closeCurrent();
+  }
+  /**
+   * Retire the launcher for good. Cleanup is best-effort and bounded: it joins in-flight
+   * starts and closures, but a browser that ignores `close()` may outlive the 5 s wait.
+   */
+  async dispose() {
+    this.disposed = true;
+    this.session++;
+    if (this.disposal) return this.disposal;
+    this.disposal = (async () => {
+      await this.bounded(Date.now() + ACTIVATION_CLOSE_TIMEOUT_MS, async () => {
+        await Promise.allSettled(this.starting);
+      });
+      await this.closing;
+      await this.closeCurrent();
+      await this.bounded(Date.now() + ACTIVATION_CLOSE_TIMEOUT_MS, async () => {
+        await Promise.all(this.tracked);
+      });
+    })();
+    return this.disposal;
+  }
+  /**
+   * Close the window this launcher owns right now. Ownership is taken before the async
+   * close, so a job that adopts a new window afterwards is not affected by this closure.
+   * The closure promise is shared so a later `dispose()` joins it.
+   */
+  async closeCurrent() {
+    if (this.closing === void 0) {
+      const browser = this.browser;
+      this.browser = void 0;
+      this.page = void 0;
+      if (browser === void 0) return;
+      this.closing = closeBounded(browser);
+    }
+    const closing = this.closing;
+    try {
+      await closing;
+    } finally {
+      if (this.closing === closing) this.closing = void 0;
+    }
+  }
+  async attempt(url) {
+    const session = this.session;
+    const budget = this.options.timeoutMs ?? ACTIVATION_OPEN_BUDGET_MS;
+    const deadline = Date.now() + budget;
+    try {
+      if (this.options.available?.() === false) return { code: "unavailable", opened: false };
+      const browser = await this.ensureBrowser(session, deadline);
+      if (browser === void 0) return { code: this.stale(session) ? "failed" : "unavailable", opened: false };
+      if (this.stale(session)) {
+        await this.bounded(deadline, () => this.closeCurrent());
+        return { code: "failed", opened: false };
+      }
+      const page = await this.ensurePage(browser, session, deadline);
+      if (page === void 0) {
+        await this.bounded(deadline, () => this.closeCurrent());
+        return { code: "failed", opened: false };
+      }
+      const remaining = Math.max(1, Math.min(ACTIVATION_NAVIGATE_TIMEOUT_MS, deadline - Date.now()));
+      await page.goto(url, { waitUntil: "domcontentloaded", timeout: remaining });
+      if (this.stale(session)) {
+        await this.bounded(deadline, () => this.closeCurrent());
+        return { code: "failed", opened: false };
+      }
+      return { code: "opened", opened: true };
+    } catch {
+      await this.bounded(deadline, () => this.closeCurrent());
+      return { code: "failed", opened: false };
+    }
+  }
+  /** The job that started this attempt ended, or the launcher retired. */
+  stale(session) {
+    return this.disposed || session !== this.session;
+  }
+  async ensureBrowser(session, deadline) {
+    const open = this.browser;
+    if (open !== void 0) {
+      try {
+        if (open.isConnected()) return open;
+      } catch {
+      }
+      await this.bounded(deadline, () => this.closeCurrent());
+    }
+    for (let round = 0; round < 2; round++) {
+      await this.bounded(deadline, async () => {
+        await Promise.allSettled([this.closing, ...this.tracked, ...this.starting]);
+      });
+      if (this.stale(session) || Date.now() >= deadline) return void 0;
+      if (this.closing === void 0 && this.tracked.length === 0 && this.starting.length === 0) break;
+    }
+    if (this.stale(session) || Date.now() >= deadline) return void 0;
+    const launch = this.options.launch ?? defaultLaunch;
+    const starting = launch();
+    this.starting.push(starting);
+    const browser = await this.bounded(deadline, () => starting);
+    void starting.then((handle) => {
+      if (handle !== browser) void this.trackClose(handle);
+    }).catch(() => void 0).finally(() => {
+      this.starting = this.starting.filter((item) => item !== starting);
+    });
+    if (browser === void 0) return void 0;
+    if (this.stale(session)) {
+      void this.trackClose(browser);
+      return void 0;
+    }
+    this.adopt(browser);
+    return browser;
+  }
+  async ensurePage(browser, session, deadline) {
+    if (this.page !== void 0) return this.page;
+    const page = await this.bounded(deadline, () => browser.newPage(), (late) => {
+      void this.trackPageClose(late);
+    });
+    if (page === void 0) return void 0;
+    if (this.stale(session) || this.browser !== browser) {
+      await this.bounded(deadline, () => this.closeCurrent());
+      return void 0;
+    }
+    this.page = page;
+    return page;
+  }
+  /** A handle that arrived too late is closed, and still counts as work disposal joins. */
+  trackClose(browser) {
+    const closing = closeBounded(browser);
+    this.tracked.push(closing);
+    void closing.finally(() => {
+      this.tracked = this.tracked.filter((item) => item !== closing);
+    });
+    return closing;
+  }
+  trackPageClose(page) {
+    try {
+      return Promise.resolve(page.close?.()).catch(() => void 0);
+    } catch {
+      return Promise.resolve();
+    }
+  }
+  adopt(browser) {
+    this.browser = browser;
+    browser.on?.("disconnected", () => {
+      if (this.browser === browser) {
+        this.browser = void 0;
+        this.page = void 0;
+      }
+    });
+  }
+  /**
+   * Bound one launch step by the attempt's shared deadline. A step that settles only
+   * after that deadline still hands its handle back: dropping it would leak a Chrome
+   * process nobody can close.
+   */
+  async bounded(deadline, start, discardOnLate) {
+    let timer;
+    let expired = false;
+    const work = (async () => {
+      try {
+        return await start();
+      } catch {
+        return void 0;
+      }
+    })().then((value) => {
+      if (expired && value !== void 0) discardOnLate?.(value);
+      return value;
+    });
+    const timeout = new Promise((resolve) => {
+      timer = setTimeout(() => {
+        expired = true;
+        resolve(void 0);
+      }, Math.max(1, deadline - Date.now()));
+    });
+    try {
+      return await Promise.race([work, timeout]);
+    } finally {
+      if (timer !== void 0) clearTimeout(timer);
+    }
+  }
+};
+function closeBounded(browser) {
+  let timer;
+  return Promise.race([
+    (async () => {
+      try {
+        await browser.close();
+      } catch {
+      }
+    })(),
+    new Promise((resolve) => {
+      timer = setTimeout(resolve, ACTIVATION_CLOSE_TIMEOUT_MS);
+    })
+  ]).finally(() => {
+    if (timer !== void 0) clearTimeout(timer);
+  });
+}
+async function defaultLaunch() {
+  const playwright = await import("playwright-core");
+  return playwright.chromium.launch(chromeLaunchOptions());
+}
+
 // src/quota.ts
 import { attributionHeaders as attributionHeaders3 } from "@deepseek-ai/dsh-llm";
 var API_BASE = "https://amr-api.open-design.ai/api/v1";
@@ -2859,6 +3145,7 @@ var MAX_API_KEY = 16384;
 var HTTP_ASCII = /^[\x21-\x7e]+$/u;
 var ENV_REF = /^[A-Za-z_][A-Za-z0-9_]*$/u;
 var MODEL_ID2 = /^[A-Za-z0-9._:/-]{1,128}$/u;
+var ACTIVATION_OPEN_CODES = ["opened", "no-link", "invalid-url", "unavailable", "failed"];
 var LOGIN_PHASES = ["idle", "launching", "waiting", "verifying", "success", "cancelled", "error"];
 var QUOTA_STATES = ["ok", "partial", "need-login", "error"];
 var SESSION_SOURCES = ["desktop", "login", "environment"];
@@ -3034,6 +3321,10 @@ function parseSaveApiKeyRequest(value) {
   if (key.length > MAX_API_KEY) throw new Error(`API Key \u4E0D\u80FD\u8D85\u8FC7 ${MAX_API_KEY} \u5B57\u7B26`);
   return { value: key, expectedRevision: text(value.expectedRevision, "\u914D\u7F6E\u7248\u672C", MAX_REVISION) };
 }
+function parseActivationOpenState(value) {
+  if (!record(value)) throw new Error("\u6388\u6743\u9875\u6253\u5F00\u7ED3\u679C\u5FC5\u987B\u662F\u5BF9\u8C61");
+  return { code: member(value.code, ACTIVATION_OPEN_CODES, "\u6388\u6743\u9875\u6253\u5F00\u7ED3\u679C"), opened: flag(value.opened, "\u6388\u6743\u9875\u662F\u5426\u5DF2\u6253\u5F00") };
+}
 
 // src/index.ts
 var name = "llm-opendesign-corouter";
@@ -3048,14 +3339,15 @@ function grantOf(value) {
   if (typeof value.payload.cookie !== "string") return;
   return { cookie: value.payload.cookie, ...typeof value.payload.expiresAt === "number" ? { expiresAt: value.payload.expiresAt } : {} };
 }
-var _saveApiKey_dec, _cancelLogin_dec, _loginStatus_dec, _startLogin_dec, _refreshQuotaNow_dec, _refreshQuota_dec, _refreshModels_dec, _status_dec, _a, _init;
-var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status_dec = [Remote("status")], _refreshModels_dec = [Remote("refreshModels")], _refreshQuota_dec = [Remote("refreshQuota")], _refreshQuotaNow_dec = [Remote("refreshQuotaNow")], _startLogin_dec = [Remote("startLogin")], _loginStatus_dec = [Remote("loginStatus")], _cancelLogin_dec = [Remote("cancelLogin")], _saveApiKey_dec = [Remote("saveApiKey")], _a) {
+var _saveApiKey_dec, _openActivationPage_dec, _cancelLogin_dec, _loginStatus_dec, _startLogin_dec, _refreshQuotaNow_dec, _refreshQuota_dec, _refreshModels_dec, _status_dec, _a, _init;
+var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status_dec = [Remote("status")], _refreshModels_dec = [Remote("refreshModels")], _refreshQuota_dec = [Remote("refreshQuota")], _refreshQuotaNow_dec = [Remote("refreshQuotaNow")], _startLogin_dec = [Remote("startLogin")], _loginStatus_dec = [Remote("loginStatus")], _cancelLogin_dec = [Remote("cancelLogin")], _openActivationPage_dec = [Remote("openActivationPage")], _saveApiKey_dec = [Remote("saveApiKey")], _a) {
   constructor(ctx, config, dependencies = { resolveSession, readQuota, readDesktopQuota }) {
     super(ctx, "openDesignCoRouter");
     this.dependencies = dependencies;
     __runInitializers(_init, 5, this);
     __publicField(this, "_config");
     __publicField(this, "_login");
+    __publicField(this, "_activation");
     __publicField(this, "_lifetime", new AbortController());
     __publicField(this, "_revision", randomUUID2());
     __publicField(this, "_fingerprint", "");
@@ -3098,10 +3390,19 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
         this._modelsFingerprint = "";
         this._invalidateModels();
       }
-    }, dependencies.loginOptions);
+    }, {
+      ...dependencies.loginOptions,
+      // The Host owns the temporary window, so it closes it on every terminal transition —
+      // including expiry, which happens on a timer even when no UI is polling.
+      onSettled: () => {
+        void this._activation.close();
+      }
+    });
+    this._activation = new ActivationLauncher(dependencies.activationOptions);
     ctx.effect(() => () => {
       this._lifetime.abort();
       this._login.dispose();
+      return this._activation.dispose();
     });
   }
   dependencies;
@@ -3353,6 +3654,12 @@ var OpenDesignCoRouterService = class extends (_a = TypertRemoteService, _status
   cancelLogin(input) {
     return parseLoginState(this._login.cancel(parseCancelLoginRequest(input)));
   }
+  async openActivationPage() {
+    const url = this._login.activationLink();
+    if (url === void 0) return { code: "no-link", opened: false };
+    const result = await this._activation.open(url);
+    return parseActivationOpenState({ code: result.code, opened: result.opened });
+  }
   async saveApiKey(input) {
     const request = parseSaveApiKeyRequest(input), state = await this._state();
     this._expect(request.expectedRevision);
@@ -3372,6 +3679,7 @@ __decorateElement(_init, 1, "refreshQuotaNow", _refreshQuotaNow_dec, OpenDesignC
 __decorateElement(_init, 1, "startLogin", _startLogin_dec, OpenDesignCoRouterService);
 __decorateElement(_init, 1, "loginStatus", _loginStatus_dec, OpenDesignCoRouterService);
 __decorateElement(_init, 1, "cancelLogin", _cancelLogin_dec, OpenDesignCoRouterService);
+__decorateElement(_init, 1, "openActivationPage", _openActivationPage_dec, OpenDesignCoRouterService);
 __decorateElement(_init, 1, "saveApiKey", _saveApiKey_dec, OpenDesignCoRouterService);
 __decoratorMetadata(_init, OpenDesignCoRouterService);
 function apply(ctx, config) {