dsh-plugin-subscription-oauth 0.0.0-stage → 0.2.0

package/lib/client/index.d.ts

@@ -0,0 +1,36 @@
+/**
+ * Subscriptions settings page, browser half.
+ *
+ * Registers one `settings.section` entry titled 订阅 / Subscriptions. Every
+ * connection fact arrives through the node half's `subscription-oauth` RPC
+ * endpoints, so this half holds no credential state of its own, and the copy
+ * rides the client locale service under the `settings.subscriptions` namespace.
+ *
+ * @module dsh-plugin-subscription-oauth/client
+ */
+import type { Context as ClientContext } from '@deepseek-ai/cordis';
+import type { SubscriptionsKey } from './locales.js';
+export type { SubscriptionsSectionInjected, SubscriptionsSectionProps } from './SubscriptionsSection.js';
+export type { SubscriptionsKey } from './locales.js';
+export { createSubscriptionsCall, SubscriptionsRpcError } from './subscriptions-rpc.js';
+export type { SubscriptionsCall } from './subscriptions-rpc.js';
+declare module '@deepseek-ai/dsh-client-ui-slots' {
+    interface LocaleNamespaceMap {
+        /** The Subscriptions settings page copy. */
+        'settings.subscriptions': SubscriptionsKey;
+    }
+}
+/**
+ * Required services: `slots` carries the registration seat, `connection` the
+ * RPC caller, and `locale` the copy dictionaries.
+ */
+export declare const inject: string[];
+/**
+ * Register the Subscriptions settings section.
+ *
+ * Registration goes through `slots.inject`, so the shell's own apply order
+ * relative to this one is unconstrained.
+ *
+ * @param ctx - client root context.
+ */
+export declare function apply(ctx: ClientContext): void;

package/lib/client/index.js

@@ -0,0 +1,47 @@
+/**
+ * Subscriptions settings page, browser half.
+ *
+ * Registers one `settings.section` entry titled 订阅 / Subscriptions. Every
+ * connection fact arrives through the node half's `subscription-oauth` RPC
+ * endpoints, so this half holds no credential state of its own, and the copy
+ * rides the client locale service under the `settings.subscriptions` namespace.
+ *
+ * @module dsh-plugin-subscription-oauth/client
+ */
+import { SubscriptionsSection } from './SubscriptionsSection.js';
+import { createSubscriptionsCall } from './subscriptions-rpc.js';
+import { en, zh } from './locales.js';
+export { createSubscriptionsCall, SubscriptionsRpcError } from './subscriptions-rpc.js';
+/** Dictionary namespace owned by this plugin. */
+const NS = 'settings.subscriptions';
+/** Settings nav position: after the shipped sections, before plugin tooling. */
+const SECTION_ORDER = 92;
+/**
+ * Required services: `slots` carries the registration seat, `connection` the
+ * RPC caller, and `locale` the copy dictionaries.
+ */
+export const inject = ['slots', 'connection', 'locale'];
+/**
+ * Register the Subscriptions settings section.
+ *
+ * Registration goes through `slots.inject`, so the shell's own apply order
+ * relative to this one is unconstrained.
+ *
+ * @param ctx - client root context.
+ */
+export function apply(ctx) {
+    ctx.effect(() => ctx.locale.register(NS, { zh, en }), 'dsh-plugin-subscription-oauth: copy dictionaries');
+    // The shell's Context merge types `connection` as the host handle; in the
+    // browser the same key holds the full client ConnectionHandle.
+    const connection = ctx.get('connection');
+    const t = ctx.locale.bind(NS);
+    const call = createSubscriptionsCall(connection.rpc);
+    ctx.slots.inject('settings.section', () => ctx.slots.register({
+        name: 'settings.section',
+        id: 'subscriptions',
+        order: SECTION_ORDER,
+        // A thunk re-evaluated per read, so the nav label follows the active locale.
+        label: () => t('nav'),
+        inject: () => ({ call, t }),
+    }, SubscriptionsSection));
+}

package/lib/client/locales.d.ts

@@ -0,0 +1,187 @@
+/**
+ * Copy dictionaries for the Subscriptions settings page.
+ *
+ * English is the key-set source of truth; the Chinese dictionary is typed
+ * against it, so a key added to one and forgotten in the other is a compile
+ * error rather than a silent fallback.
+ */
+/** English strings. */
+export declare const en: {
+    readonly nav: "Subscriptions";
+    readonly intro: "Sign in with a subscription account — Kimi Code, Grok (X Premium) or Google Antigravity. DeepSeek Harness keeps the tokens on this machine and streams every request through the provider's own API.";
+    readonly loading: "Checking subscriptions…";
+    readonly unavailable: "The subscriptions page needs the web connection service, which this composition does not provide.";
+    readonly statusConnected: "Connected · {count} account(s)";
+    readonly statusSignedOut: "Not signed in";
+    readonly statusBusy: "Waiting for browser approval";
+    readonly statusSignIn: "Sign in to add this provider's models to the model picker.";
+    readonly statusAuto: "Follows {count} enabled model(s) from every provider";
+    readonly connect: "Connect";
+    readonly edit: "Edit";
+    readonly collapse: "Collapse";
+    readonly addAccount: "Add account";
+    readonly manage: "Manage";
+    readonly cancel: "Cancel";
+    readonly close: "Close";
+    readonly logout: "Sign out";
+    readonly makeDefault: "Use by default";
+    readonly defaultBadge: "Default";
+    readonly accountNeedsLogin: "Sign in again";
+    readonly accountNeedsLoginHint: "The provider refused this account's grant, so its token cannot be renewed";
+    readonly accountExpired: "token expired";
+    readonly accountExpires: "expires {time}";
+    readonly deviceTitle: "Approve this device";
+    readonly devicePrompt: "Open the verification page and confirm the code below. This page updates by itself once the provider approves.";
+    readonly deviceOpen: "Open verification page";
+    readonly deviceCopy: "Copy code";
+    readonly deviceCopied: "Copied";
+    readonly deviceExpires: "The code expires at {time}.";
+    readonly openLogin: "Open sign-in page";
+    readonly openLoginHint: "Finish signing in in the browser tab that opened. This page updates by itself once the provider redirects back.";
+    readonly modelsTitle: "Models";
+    readonly modelsCount: "{count} available";
+    readonly modelsLive: "live";
+    readonly modelsBuiltIn: "built-in";
+    readonly modelsShow: "Show in picker";
+    readonly modelsHiddenCount: "· {count} hidden";
+    readonly modelsHidden: "Hidden from the model picker";
+    readonly modelsEmpty: "No models reported yet.";
+    readonly modelsAdd: "Add model";
+    readonly modelsAddHint: "Publish a model id this build does not know yet";
+    readonly modelsAddPlaceholder: "model id, e.g. k3-next";
+    readonly modelsAddConfirm: "Add";
+    readonly modelsRemove: "Remove this hand-added model";
+    readonly modelsContext: "{tokens} context";
+    readonly modelsAuto: "Auto";
+    readonly modelsAutoHint: "Pinned first: moves to the next model when one is unavailable";
+    readonly modelsAutoOff: "Off — the picker offers the models directly instead";
+    readonly modelsAutoChain: "Auto tries these, in this order — drag to re-order";
+    readonly modelsDrag: "Drag to re-order (or press ↑ / ↓ here)";
+    readonly modelsAutoChainOff: "Take out of Auto";
+    readonly modelsAutoChainEmpty: "No model is enabled, so Auto has nothing to try.";
+    readonly modelsPinned: "pinned";
+    readonly usageTitle: "Plan and usage";
+    readonly usagePlan: "Plan: {plan}";
+    readonly usageRenews: "renews {time}";
+    readonly usageReset: "resets {time}";
+    readonly usageRefresh: "Refresh usage";
+    readonly usageFetched: "read {time}";
+    readonly usageNone: "This provider reports no plan quota.";
+    readonly usageError: "Could not read usage: {message}";
+    readonly usage_5h: "5-hour window";
+    readonly usage_weekly: "Weekly window";
+    readonly usage_credits: "Included credit";
+    readonly usage_gemini: "Gemini allowance (rolling)";
+    readonly usage_gemini_weekly: "Gemini allowance (weekly)";
+    readonly usage_claude: "Claude allowance (rolling)";
+    readonly usage_claude_weekly: "Claude allowance (weekly)";
+    readonly usage_other: "Allowance";
+    readonly refresh: "Refresh";
+    readonly refreshing: "Refreshing…";
+    readonly modelsRefreshed: "Model list refreshed.";
+    readonly refreshToken: "Refresh token";
+    readonly tokenRefreshed: "Token refreshed; valid until {time}.";
+    readonly hint: "Authorization follows the account the browser is signed in with. To add a different account, switch accounts there first, or use a private window.";
+    readonly manageTitle: "Manage {provider}";
+    readonly manageAccounts: "Accounts";
+    readonly reload: "Reload credentials";
+    readonly reloadHint: "Use this after signing in from another DeepSeek Harness window.";
+    readonly detail_oauthHost: "Authorization server";
+    readonly detail_apiBase: "API base";
+    readonly detail_credentialFile: "Credential file";
+    readonly detail_project: "Cloud project";
+    readonly lastError: "Last login attempt failed: {message}";
+    readonly loginFailed: "Could not start the sign-in: {message}";
+    readonly actionFailed: "Action failed: {message}";
+};
+/** The Subscriptions namespace key union. */
+export type SubscriptionsKey = keyof typeof en;
+/** Chinese strings. */
+export declare const zh: {
+    nav: string;
+    intro: string;
+    loading: string;
+    unavailable: string;
+    statusConnected: string;
+    statusSignedOut: string;
+    statusBusy: string;
+    statusSignIn: string;
+    statusAuto: string;
+    connect: string;
+    edit: string;
+    collapse: string;
+    addAccount: string;
+    manage: string;
+    cancel: string;
+    close: string;
+    logout: string;
+    makeDefault: string;
+    defaultBadge: string;
+    accountNeedsLogin: string;
+    accountNeedsLoginHint: string;
+    accountExpired: string;
+    accountExpires: string;
+    deviceTitle: string;
+    devicePrompt: string;
+    deviceOpen: string;
+    deviceCopy: string;
+    deviceCopied: string;
+    deviceExpires: string;
+    openLogin: string;
+    openLoginHint: string;
+    modelsTitle: string;
+    modelsCount: string;
+    modelsLive: string;
+    modelsBuiltIn: string;
+    modelsShow: string;
+    modelsHiddenCount: string;
+    modelsHidden: string;
+    modelsEmpty: string;
+    modelsAdd: string;
+    modelsAddHint: string;
+    modelsAddPlaceholder: string;
+    modelsAddConfirm: string;
+    modelsRemove: string;
+    modelsContext: string;
+    modelsAuto: string;
+    modelsAutoHint: string;
+    modelsAutoOff: string;
+    modelsAutoChain: string;
+    modelsDrag: string;
+    modelsAutoChainOff: string;
+    modelsAutoChainEmpty: string;
+    modelsPinned: string;
+    usageTitle: string;
+    usagePlan: string;
+    usageRenews: string;
+    usageReset: string;
+    usageRefresh: string;
+    usageFetched: string;
+    usageNone: string;
+    usageError: string;
+    usage_5h: string;
+    usage_weekly: string;
+    usage_credits: string;
+    usage_gemini: string;
+    usage_gemini_weekly: string;
+    usage_claude: string;
+    usage_claude_weekly: string;
+    usage_other: string;
+    refresh: string;
+    refreshing: string;
+    modelsRefreshed: string;
+    refreshToken: string;
+    tokenRefreshed: string;
+    hint: string;
+    manageTitle: string;
+    manageAccounts: string;
+    reload: string;
+    reloadHint: string;
+    detail_oauthHost: string;
+    detail_apiBase: string;
+    detail_credentialFile: string;
+    detail_project: string;
+    lastError: string;
+    loginFailed: string;
+    actionFailed: string;
+};

package/lib/client/locales.js

@@ -0,0 +1,185 @@
+/**
+ * Copy dictionaries for the Subscriptions settings page.
+ *
+ * English is the key-set source of truth; the Chinese dictionary is typed
+ * against it, so a key added to one and forgotten in the other is a compile
+ * error rather than a silent fallback.
+ */
+/** English strings. */
+export const en = {
+    nav: 'Subscriptions',
+    intro: 'Sign in with a subscription account — Kimi Code, Grok (X Premium) or Google Antigravity. DeepSeek Harness keeps the tokens on this machine and streams every request through the provider\'s own API.',
+    loading: 'Checking subscriptions…',
+    unavailable: 'The subscriptions page needs the web connection service, which this composition does not provide.',
+    statusConnected: 'Connected · {count} account(s)',
+    statusSignedOut: 'Not signed in',
+    statusBusy: 'Waiting for browser approval',
+    statusSignIn: 'Sign in to add this provider\'s models to the model picker.',
+    statusAuto: 'Follows {count} enabled model(s) from every provider',
+    connect: 'Connect',
+    edit: 'Edit',
+    collapse: 'Collapse',
+    addAccount: 'Add account',
+    manage: 'Manage',
+    cancel: 'Cancel',
+    close: 'Close',
+    logout: 'Sign out',
+    makeDefault: 'Use by default',
+    defaultBadge: 'Default',
+    accountNeedsLogin: 'Sign in again',
+    accountNeedsLoginHint: 'The provider refused this account\'s grant, so its token cannot be renewed',
+    accountExpired: 'token expired',
+    accountExpires: 'expires {time}',
+    deviceTitle: 'Approve this device',
+    devicePrompt: 'Open the verification page and confirm the code below. This page updates by itself once the provider approves.',
+    deviceOpen: 'Open verification page',
+    deviceCopy: 'Copy code',
+    deviceCopied: 'Copied',
+    deviceExpires: 'The code expires at {time}.',
+    openLogin: 'Open sign-in page',
+    openLoginHint: 'Finish signing in in the browser tab that opened. This page updates by itself once the provider redirects back.',
+    modelsTitle: 'Models',
+    modelsCount: '{count} available',
+    modelsLive: 'live',
+    modelsBuiltIn: 'built-in',
+    modelsShow: 'Show in picker',
+    modelsHiddenCount: '· {count} hidden',
+    modelsHidden: 'Hidden from the model picker',
+    modelsEmpty: 'No models reported yet.',
+    modelsAdd: 'Add model',
+    modelsAddHint: 'Publish a model id this build does not know yet',
+    modelsAddPlaceholder: 'model id, e.g. k3-next',
+    modelsAddConfirm: 'Add',
+    modelsRemove: 'Remove this hand-added model',
+    modelsContext: '{tokens} context',
+    modelsAuto: 'Auto',
+    modelsAutoHint: 'Pinned first: moves to the next model when one is unavailable',
+    modelsAutoOff: 'Off — the picker offers the models directly instead',
+    modelsAutoChain: 'Auto tries these, in this order — drag to re-order',
+    modelsDrag: 'Drag to re-order (or press ↑ / ↓ here)',
+    modelsAutoChainOff: 'Take out of Auto',
+    modelsAutoChainEmpty: 'No model is enabled, so Auto has nothing to try.',
+    modelsPinned: 'pinned',
+    usageTitle: 'Plan and usage',
+    usagePlan: 'Plan: {plan}',
+    usageRenews: 'renews {time}',
+    usageReset: 'resets {time}',
+    usageRefresh: 'Refresh usage',
+    usageFetched: 'read {time}',
+    usageNone: 'This provider reports no plan quota.',
+    usageError: 'Could not read usage: {message}',
+    usage_5h: '5-hour window',
+    usage_weekly: 'Weekly window',
+    usage_credits: 'Included credit',
+    usage_gemini: 'Gemini allowance (rolling)',
+    usage_gemini_weekly: 'Gemini allowance (weekly)',
+    usage_claude: 'Claude allowance (rolling)',
+    usage_claude_weekly: 'Claude allowance (weekly)',
+    usage_other: 'Allowance',
+    refresh: 'Refresh',
+    refreshing: 'Refreshing…',
+    modelsRefreshed: 'Model list refreshed.',
+    refreshToken: 'Refresh token',
+    tokenRefreshed: 'Token refreshed; valid until {time}.',
+    hint: 'Authorization follows the account the browser is signed in with. To add a different account, switch accounts there first, or use a private window.',
+    manageTitle: 'Manage {provider}',
+    manageAccounts: 'Accounts',
+    reload: 'Reload credentials',
+    reloadHint: 'Use this after signing in from another DeepSeek Harness window.',
+    detail_oauthHost: 'Authorization server',
+    detail_apiBase: 'API base',
+    detail_credentialFile: 'Credential file',
+    detail_project: 'Cloud project',
+    lastError: 'Last login attempt failed: {message}',
+    loginFailed: 'Could not start the sign-in: {message}',
+    actionFailed: 'Action failed: {message}',
+};
+/** Chinese strings. */
+export const zh = {
+    nav: '订阅',
+    intro: '使用订阅账号登录 —— Kimi Code、Grok (X Premium) 或 Google Antigravity。DeepSeek Harness 将令牌保存在本机，并通过各服务自己的 API 发起请求。',
+    loading: '正在检查订阅…',
+    unavailable: '订阅页面需要 Web 连接服务，当前组合未提供该服务。',
+    statusConnected: '已连接 {count} 个账号',
+    statusSignedOut: '未登录',
+    statusBusy: '等待浏览器确认',
+    statusSignIn: '登录后即可在模型选择器中使用该服务的模型。',
+    statusAuto: '依次使用来自各服务的 {count} 个已启用模型',
+    connect: '连接',
+    edit: '编辑',
+    collapse: '收起',
+    addAccount: '添加账号',
+    manage: '管理',
+    cancel: '取消',
+    close: '关闭',
+    logout: '退出登录',
+    makeDefault: '设为默认',
+    defaultBadge: '默认',
+    accountNeedsLogin: '需重新登录',
+    accountNeedsLoginHint: '服务方已拒绝该账号的授权，令牌无法自动续期',
+    accountExpired: '令牌已过期',
+    accountExpires: '过期时间 {time}',
+    deviceTitle: '确认此设备',
+    devicePrompt: '打开验证页面并确认下方代码，服务确认后本页面会自动更新。',
+    deviceOpen: '打开验证页面',
+    deviceCopy: '复制代码',
+    deviceCopied: '已复制',
+    deviceExpires: '代码将于 {time} 过期。',
+    openLogin: '打开登录页面',
+    openLoginHint: '请在打开的浏览器标签页中完成登录；服务回调后本页面会自动更新。',
+    modelsTitle: '模型',
+    modelsCount: '共 {count} 个',
+    modelsLive: '实时',
+    modelsBuiltIn: '内置',
+    modelsShow: '在选择器中显示',
+    modelsHiddenCount: '· 已隐藏 {count} 个',
+    modelsHidden: '已从模型选择器隐藏',
+    modelsEmpty: '暂未获取到模型。',
+    modelsAdd: '添加模型',
+    modelsAddHint: '手动添加一个本版本还不认识的模型 ID',
+    modelsAddPlaceholder: '模型 ID，例如 k3-next',
+    modelsAddConfirm: '添加',
+    modelsRemove: '移除这个手动添加的模型',
+    modelsContext: '{tokens} 上下文',
+    modelsAuto: '自动',
+    modelsAutoHint: '固定在首位：某个模型不可用时自动改用下一个',
+    modelsAutoOff: '已关闭 —— 选择器将直接列出各个模型',
+    modelsAutoChain: '自动会按这个顺序依次尝试（拖动可调整）',
+    modelsDrag: '拖动调整顺序（也可在此按 ↑ / ↓）',
+    modelsAutoChainOff: '从自动中移除',
+    modelsAutoChainEmpty: '没有启用任何模型，自动没有可尝试的模型。',
+    modelsPinned: '固定',
+    usageTitle: '套餐与额度',
+    usagePlan: '套餐：{plan}',
+    usageRenews: '续费时间 {time}',
+    usageReset: '重置时间 {time}',
+    usageRefresh: '刷新额度',
+    usageFetched: '读取于 {time}',
+    usageNone: '该服务未提供套餐额度信息。',
+    usageError: '额度读取失败：{message}',
+    usage_5h: '5 小时窗口',
+    usage_weekly: '每周窗口',
+    usage_credits: '包含额度',
+    usage_gemini: 'Gemini 模型额度（滚动）',
+    usage_gemini_weekly: 'Gemini 模型额度（每周）',
+    usage_claude: 'Claude 模型额度（滚动）',
+    usage_claude_weekly: 'Claude 模型额度（每周）',
+    usage_other: '额度',
+    refresh: '刷新',
+    refreshing: '正在刷新…',
+    modelsRefreshed: '模型列表已刷新。',
+    refreshToken: '刷新令牌',
+    tokenRefreshed: '令牌已刷新，有效至 {time}。',
+    hint: '授权以浏览器当前登录的账号为准；要添加不同账号，请先在浏览器里切换账号，或使用无痕窗口。',
+    manageTitle: '管理 {provider}',
+    manageAccounts: '账号',
+    reload: '重新读取凭据',
+    reloadHint: '在另一个 DeepSeek Harness 窗口中登录后，请使用此操作。',
+    detail_oauthHost: '授权服务器',
+    detail_apiBase: 'API 地址',
+    detail_credentialFile: '凭据文件',
+    detail_project: '云项目',
+    lastError: '上次登录失败：{message}',
+    loginFailed: '无法开始登录：{message}',
+    actionFailed: '操作失败：{message}',
+};

package/lib/client/styles.d.ts

@@ -0,0 +1,18 @@
+/**
+ * Scoped stylesheet for the Subscriptions page and its manage dialog.
+ *
+ * The host loads plugin markup without its own control classes, and a bare
+ * `<button>` therefore renders with the browser's default raised chrome — which
+ * reads as a stray highlight in a dark theme. Rather than invent a look, this
+ * follows the control vocabulary of the sibling `dsh-plugin-subscriptions`
+ * plugin (same author-facing design as the shell's settings forms): a 6 px
+ * radius small control, a transparent fill, a hairline border from the theme's
+ * alias tokens, and the theme's hover/active/focus tokens for state.
+ *
+ * The tokens all carry fallbacks, so the page still renders correctly on a host
+ * build that does not define them.
+ *
+ * @module dsh-plugin-subscription-oauth/client/styles
+ */
+/** The page's and dialog's stylesheet. */
+export declare const subscriptionsCss = "\n.dsh-subscriptions-settings,\n.dsh-subscription-manager {\n  font-family: inherit;\n  font-size: 13px;\n  line-height: 1.5;\n  /* Native controls (checkbox, dialog) follow the host theme, not the OS. */\n  color-scheme: light;\n}\nbody[data-ds-dark-theme] :is(.dsh-subscriptions-settings, .dsh-subscription-manager) {\n  color-scheme: dark;\n}\n.dsh-subscription-manager {\n  box-sizing: border-box;\n  padding: 0;\n  border: 0;\n  border-radius: var(--dsw-radius-panel, 16px);\n  background: var(--dsw-alias-bg-layer-2, var(--dsw-alias-bg-layer-1));\n  color: var(--dsw-alias-label-primary);\n  box-shadow: var(--dsw-elevation-prominent, 0 20px 70px #0004);\n}\n.dsh-subscription-manager::backdrop {\n  background: var(--dsw-alias-bg-mask-1, #0006);\n  backdrop-filter: var(--dsw-mask-blur, none);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) h2 {\n  margin: 0;\n  font-size: 16px;\n  line-height: 24px;\n  font-weight: 500;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) strong,\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-label {\n  font-size: 13px;\n  line-height: 1.5;\n  font-weight: 500;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) small,\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-hint,\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) [role=\"status\"] {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-label-tertiary);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-error {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-state-error-primary, #b42318);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-success {\n  margin: 0;\n  font-size: 12px;\n  line-height: 1.5;\n  color: var(--dsw-alias-state-success-primary, #067647);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) label:has(> input[type=\"checkbox\"]) {\n  cursor: pointer;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input[type=\"checkbox\"] {\n  accent-color: var(--dsw-alias-brand-primary);\n}\n/*\n * A model's on/off control is a switch, not a checkbox: it takes effect\n * immediately and its state is what matters, not a tick. Drawn from the theme\n * tokens with appearance: none, so it follows the host palette in both themes\n * instead of the platform's checkbox chrome.\n */\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input[type=\"checkbox\"].dsh-subscription-switch {\n  appearance: none;\n  -webkit-appearance: none;\n  position: relative;\n  box-sizing: border-box;\n  flex-shrink: 0;\n  width: 34px;\n  height: 20px;\n  margin: 0;\n  border: 0.5px solid var(--dsw-alias-border-l3, var(--dsw-alias-border-l2));\n  border-radius: 999px;\n  background: var(--dsw-alias-bg-layer-3, var(--dsw-alias-bg-layer-2));\n  cursor: pointer;\n  transition: background 120ms ease, border-color 120ms ease;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input[type=\"checkbox\"].dsh-subscription-switch::after {\n  content: '';\n  position: absolute;\n  top: 2px;\n  left: 2px;\n  width: 14px;\n  height: 14px;\n  border-radius: 50%;\n  background: var(--dsw-alias-label-primary-foreground, #fff);\n  box-shadow: 0 1px 2px #0003;\n  transition: transform 120ms ease;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input[type=\"checkbox\"].dsh-subscription-switch:checked {\n  border-color: transparent;\n  background: var(--dsw-alias-state-success-primary, var(--dsw-alias-brand-primary, #067647));\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input[type=\"checkbox\"].dsh-subscription-switch:checked::after {\n  transform: translateX(14px);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input[type=\"checkbox\"].dsh-subscription-switch:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button {\n  box-sizing: border-box;\n  display: inline-flex;\n  align-items: center;\n  justify-content: center;\n  flex-shrink: 0;\n  min-height: 28px;\n  padding: 0 10px;\n  border: 0.5px solid var(--dsw-alias-border-l3, var(--dsw-alias-border-l2));\n  border-radius: var(--dsw-radius-sm, 6px);\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  line-height: 18px;\n  cursor: pointer;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button:hover:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-hover, var(--dsw-alias-bg-layer-3));\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button:active:not(:disabled) {\n  background: var(--dsw-alias-interactive-bg-active, var(--dsw-alias-bg-layer-3));\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button:disabled {\n  opacity: 0.4;\n  cursor: default;\n}\n/* A control that is present but should not read as a bordered button. */\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button.dsh-subscription-quiet {\n  min-height: 22px;\n  padding: 0 4px;\n  border-color: transparent;\n  color: var(--dsw-alias-label-secondary, var(--dsw-alias-label-primary));\n}\n/* The free-text field for a hand-added model id. */\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input.dsh-subscription-input {\n  box-sizing: border-box;\n  flex: 1 1 auto;\n  min-width: 0;\n  min-height: 28px;\n  padding: 0 10px;\n  border: 0.5px solid var(--dsw-alias-border-l3, var(--dsw-alias-border-l2));\n  border-radius: var(--dsw-radius-sm, 6px);\n  background: var(--dsw-alias-bg-layer-1);\n  color: var(--dsw-alias-label-primary);\n  font: inherit;\n  font-size: 12px;\n  line-height: 18px;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input.dsh-subscription-input::placeholder {\n  color: var(--dsw-alias-label-tertiary);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input.dsh-subscription-input:focus-visible {\n  outline: var(--dsw-focus-ring-width, 2px) solid var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary));\n  outline-offset: 2px;\n}\n/* A drag handle: no border or fill, so it reads as a grip rather than a button. */\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button.dsh-subscription-handle {\n  min-height: 18px;\n  height: 18px;\n  padding: 0 2px;\n  border-color: transparent;\n  border-radius: var(--dsw-radius-sm, 6px);\n  background: transparent;\n  color: var(--dsw-alias-label-tertiary, var(--dsw-alias-label-secondary));\n  font-size: 12px;\n  line-height: 18px;\n  cursor: grab;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button.dsh-subscription-handle:hover:not(:disabled) {\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button.dsh-subscription-handle:active:not(:disabled) { cursor: grabbing; }\n/* Controls inside the manage dialog are one step larger, like a form footer. */\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-dialog-actions button {\n  min-height: 34px;\n  padding: 0 14px;\n  border-radius: var(--dsw-radius-md, 8px);\n  font-size: 13px;\n  line-height: 1.5;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button.dsh-subscription-primary {\n  border-color: transparent;\n  background: var(--dsw-alias-button-primary-fill, var(--dsw-alias-label-primary));\n  color: var(--dsw-alias-label-primary-foreground, var(--dsw-alias-bg-layer-1));\n  font-weight: 500;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button.dsh-subscription-primary:hover:not(:disabled) {\n  background: var(--dsw-alias-button-primary-hover, var(--dsw-alias-label-secondary));\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) button:focus-visible,\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) input[type=\"checkbox\"]:focus-visible,\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-disclosure:focus-visible {\n  outline: var(--dsw-focus-ring-width, 2px) solid var(--dsw-focus-ring-color, var(--dsw-alias-state-business-primary));\n  outline-offset: 2px;\n}\n/* The catalog heading is a summary-style disclosure, not a bordered button. */\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-disclosure {\n  border-color: transparent;\n  border-radius: var(--dsw-radius-sm, 6px);\n  background: transparent;\n  padding: 0 4px;\n  font-size: 12px;\n  line-height: 18px;\n  font-weight: 500;\n  color: var(--dsw-alias-label-secondary, var(--dsw-alias-label-primary));\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-disclosure:hover:not(:disabled) {\n  background: transparent;\n  color: var(--dsw-alias-label-primary);\n}\n/* A usage meter: the track, with the fill sized by the caller. */\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-meter {\n  height: 6px;\n  border-radius: 999px;\n  background: var(--dsw-alias-bg-layer-3, var(--dsw-alias-bg-layer-2));\n  overflow: hidden;\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-meter > span {\n  display: block;\n  height: 100%;\n  background: var(--dsw-alias-state-success-primary, #067647);\n}\n:is(.dsh-subscriptions-settings, .dsh-subscription-manager) .dsh-subscription-meter > span[data-exhausted=\"true\"] {\n  background: var(--dsw-alias-state-error-primary, #b42318);\n}\n";