dsh-qoder-connect 0.2.6 → 0.2.8

package/README.en.md

@@ -13,14 +13,16 @@ Configure only what you use: a variant with no saved PAT shows no model group an
 
 ## Features
 
-- **PAT: save it and it works** — paste a PAT into the card and press *Save*; the token is validated live against that variant's region before anything is written, and the model group appears immediately — no DSH restart. Once signed in, *Replace PAT* (the new token overwrites only after it validates, so a mistyped paste can never strand a working credential) and *Clear PAT* are one click away.
+- **Multiple PATs, switched by hand** — each variant keeps a list of saved PATs and the card offers a select to choose the active one. Switching only changes the signing token: model toggles, context-window preferences, check-in and sidebar-quota settings are one shared configuration per variant and never follow the account. *Add PAT*, *Remove current* and *Clear all* manage the list; saving validates first, and removing or switching never touches another account's saved catalog or probe records.
+- **PAT: save it and it works** — paste a PAT into the card and press *Save*; the token is validated live against that variant's region before anything is written, and the model group appears immediately — no DSH restart. A mistyped paste can never strand a working credential.
 - **Two independent variants** — `qoder` (china) and `qoder-global` (global) keep separate credential files, routes and saved catalogs: a token minted on qoder.com does not work against the China deployment and vice versa.
-- **Three-tier model catalog (live → saved → fallback)** — the card states where the list on screen came from: *“Model list updated …”* (fetched now), *“Showing the saved model list from …”* (this account's last successful fetch, restored after a restart or a failed fetch), or *“Showing the built-in model list (not yet updated from Qoder)”* (the roster compiled into the plugin). The reason of the most recent failed fetch is shown too, and a *Refresh model list* button sits right there.
+- **Three-tier model catalog (live → saved → fallback)** — the card states where the list on screen came from: *“Model list updated …”* (fetched now), *“Showing the saved model list from …”* (this account's last successful fetch, restored after a restart or a failed fetch), or *“Showing the built-in model list (not yet updated from Qoder)”* (the roster compiled into the plugin). The reason of the most recent failed fetch is shown too, and the card's *Refresh* action re-reads the status and re-fetches the model list.
 - **One-toggle context window** — each variant card's *Context window* tab lists every model's capacity (the default and the largest declared window) and carries its own *“Use the largest declared context window”* preference (on by default): on, requests declare the maximum (e.g. Qwen3.8-Max at 1M); off, the default (200K). The two variants keep independent toggle state.
 - **Model visibility toggles & batch controls** — each variant card provides a dedicated *Model Toggles* tab (between *Context window* and *Credit details*) to freely enable or hide individual models; disabled models are hidden from the DSH model picker, keeping it tidy; includes instant search by name/ID and one-click *Enable all* / *Disable all* batch operations.
 - **Daily auto check-in & logs** — claims the daily 100 Credits automatically, **at a time you can set per variant on the card** (10:00 UTC+8 by default, the upstream's reset moment), with independent toggles and startup catch-up protection. The card features a dedicated *Check-in log* panel with audit trails, *Check in now*, *Refresh*, and *Clear logs* quick actions.
 - **Sidebar quota card + credit details** — the *“Qoder sidebar display”* card toggles a per-variant sidebar quota widget (off by default; each toggle needs its variant's PAT saved) with one shared refresh interval (default 5 min, minimum 1 min). Clicking the sidebar widget opens the *Qoder quota* panel: one row per credit package — *“Remaining / Total + bar | Expires”* — where a campaign grant (the international edition’s *SOTA Exclusive Credits*, for one) keeps its own upstream-given title and **its own expiry**. When the account reports no overall deadline (the upstream’s year-9999 sentinel), the panel states when the PAT was authorized rather than a fabricated date. Click the same widget again to close; click the other to switch variants.
 - **Rate display `x<priceFactor>`** — each model name is suffixed with the upstream-reported price multiplier (e.g. `Some Model · x0.79`, free is `x0`), spelled `x<n>` from the catalog's `price_factor`. Display only — it never changes the request; models whose rate the upstream did not report simply show no suffix.
+- **Upstream queue hints are honored** — when Qoder answers a queued or throttled request (401/403/429 body) with `retryAfterSeconds`, the plugin turns it into a local `Retry-After` header and hands it to DSH as `failure.providerRetryAfterMs`; the host retry engine can then wait until the moment the upstream asked for, instead of hammering the same still-closed window with its local backoff.
 
 ## Screenshots
 
@@ -80,7 +82,7 @@ Enable daily automatic check-in in the settings card and set each variant's own
 
 Prerequisites:
 
-- DSH core `0.1.7-rc.1` or newer (this plugin peers on the `@deepseek-ai/*` `>=0.1.7-rc.1` line);
+- DSH core `0.2.1-rc.1` or newer (this plugin peers on the `@deepseek-ai/*` `>=0.2.1-rc.1` line);
 - Node.js `^22.19.0 || >=24.0.0` (per `package.json` engines);
 - your own Qoder account and at least one Personal Access Token.
 
@@ -93,6 +95,15 @@ dsh plugin --profile web add dsh-qoder-connect
 
 Swap the `--profile` value for the profile you use (`web` / `desktop` / `tui`, e.g. `dsh plugin --profile desktop add dsh-qoder-connect`) — data stays inside that profile, so web / desktop / tui never collide. On a terminal-only profile (TUI) there is no browser card: manage the PAT and check status through the bundled CLI instead; the settings card and sidebar widgets require Web or Desktop.
 
+> **DSH older than `0.2.1-rc.1`?** Use **[v0.2.5](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.2.5)** instead — the last release on the 0.1.7 line (DSH ≥ `0.1.7-rc.1`):
+>
+> ```sh
+> # From GitHub (recommended, pin the tag)
+> dsh plugin --profile web add github:masknull/dsh-qoder-connect#v0.2.5
+> # Or from npm
+> dsh plugin --profile web add dsh-qoder-connect@0.2.5
+> ```
+>
 > **DSH older than `0.1.7-rc.1`?** Use **[v0.2.0](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.2.0)** instead — the last release supporting the 0.1.5 line (DSH ≥ `0.1.5-rc.2`):
 >
 > ```sh
@@ -102,7 +113,7 @@ Swap the `--profile` value for the profile you use (`web` / `desktop` / `tui`, e
 > dsh plugin --profile web add dsh-qoder-connect@0.2.0
 > ```
 >
-> Upgrading from 0.1.5? This release removed the automatic migration of the old host's `settings.yaml`. To carry your old configuration over, migrate through **[v0.1.9](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.1.9)** (the first release with the data migration) first, then upgrade to this release.
+> Upgrading from 0.1.5? Newer releases removed the automatic migration of the old host's `settings.yaml`. To carry your old configuration over, migrate through **[v0.1.9](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.1.9)** (the first release with the data migration) first, then upgrade.
 
 ## Configuration
 
@@ -113,9 +124,23 @@ Swap the `--profile` value for the profile you use (`web` / `desktop` / `tui`, e
 
 (The card repeats the same guidance: *“Generate a PAT in your qoder.com account settings (Account → Personal Access Token), then paste it here.”*)
 
-### Save it on the card
+### Save and switch on the card
 
-DSH → Settings → Plugin Settings (插件设置) → the Qoder card: paste the PAT into the password field and press *Save* (*“Validating and saving…”* while it runs). The token is validated against that variant's region first — a refusal saves nothing and the card says *“That PAT was rejected — generate a new one in your account settings and try again.”*. Do this on both cards to run both groups side by side.
+DSH → Settings → Plugin Settings (插件设置) → the Qoder card: paste the PAT into the password field and press *Save* (*“Validating and saving…”* while it runs). The token is validated against that variant's region first — a refusal saves nothing and the card says *“That PAT was rejected — generate a new one in your account settings and try again.”*
+
+Each variant can hold several PATs: once a second one is saved, the account row shows a select — choosing an entry switches to it. *Add PAT* appends another (with an optional local-only label), *Remove current* deletes only the active one, and *Clear all* empties the list. **Configuration is shared**: model toggles, context-window preferences, check-in time and sidebar-quota settings belong to the variant, not to the account, and switching never changes them. Quota and check-in act on the active account. Check-in history is kept per variant, so switching does not retroactively check the new account in for today — use *Check in now* when needed. Do this on both cards to run both groups side by side.
+
+### Command line (optional)
+
+On a terminal-only profile the CLI manages the same list (`--provider` defaults to `qoder`):
+
+```bash
+dsh-qoder-connect pat set <token> --provider qoder   # validate, save, and activate
+dsh-qoder-connect pat list --provider qoder          # list saved tokens (* = active)
+dsh-qoder-connect pat use <id> --provider qoder      # switch
+dsh-qoder-connect pat rm <id> --provider qoder       # remove
+dsh-qoder-connect pat clear --provider qoder         # remove all (logout is an alias)
+```
 
 ### Environment-variable fallback
 
@@ -136,8 +161,8 @@ Everything the plugin owns lives in one data directory: `<profile>/.dsh-qoder-co
 
 ```text
 <profile>/.dsh-qoder-connect/
-├── .qoder-auth.json              # China PAT ({version:2, pat, region, savedAt})
-├── .qoder-global-auth.json       # Global PAT
+├── .qoder-auth.json              # China PAT list ({version:3, activeId, credentials:[{id,pat,region,savedAt,label?}]})
+├── .qoder-global-auth.json       # Global PAT list
 ├── checkin-status.json           # check-in status and history logs
 └── state/
     ├── .qoder-catalog.json       # China per-account saved catalog

package/README.md

@@ -13,14 +13,16 @@
 
 ## 功能
 
-- **PAT 即存即用**：在卡片上粘贴 PAT 点「保存」，插件先对该变体的区域实时校验，通过才落盘，模型分组立即出现，无需重启 DSH。已登录后可「更换 PAT」（新令牌校验通过才覆盖，粘贴打错不会把可用凭据弄丢）与「清除 PAT」。
+- **多 PAT 保存与手动切换**：每个变体可保存多枚 PAT，卡片上用下拉框切换当前账号（切换只换签名令牌，模型开关、上下文窗口、签到与侧栏额度等配置全部共享，不随账号变化）；可「添加 PAT」「删除当前」「清除全部」。保存时先实时校验，通过才落盘；删除或切换不会误删其他账号的已保存模型目录与探测记录。
+- **PAT 即存即用**：保存时先校验，通过才落盘，模型分组立即出现，无需重启 DSH；粘贴打错不会把可用凭据弄丢。
 - **双变体独立配置**：`qoder`（china）与 `qoder-global`（global）各有自己的凭证文件、路由与已保存目录——qoder.com 生成的令牌对中国区无效，反之亦然，两套永不互串。
-- **模型目录三级降级（live → saved → fallback）**：卡片明示当前列表来自哪里——「模型列表更新于 …」（实时拉取）、「当前显示已保存的模型列表，更新于 …」（本账号上次成功目录，重启或断网后顶上来）、「当前显示内置模型列表（尚未从 Qoder 更新）」（编译进插件的兜底名单）；最近一次拉取失败时附带原因，并可在卡片上手动「刷新模型列表」。
+- **模型目录三级降级（live → saved → fallback）**：卡片明示当前列表来自哪里——「模型列表更新于 …」（实时拉取）、「当前显示已保存的模型列表，更新于 …」（本账号上次成功目录，重启或断网后顶上来）、「当前显示内置模型列表（尚未从 Qoder 更新）」（编译进插件的兜底名单）；最近一次拉取失败时附带原因，并可在卡片上手动「刷新」（同时刷新状态与模型列表）。
 - **上下文窗口一键切换**：两张变体卡片的「上下文窗口」页列出每个模型的容量（默认值与上游声明的最大值），并各自提供「使用上游声明的最大上下文窗口」开关（默认勾选）：勾选按最大窗口（如 Qwen3.8-Max 的 1M）发请求，不勾选按默认窗口（200K），两版开关状态独立保存、互不影响。
 - **模型自由开关与批量管理**：两张变体卡片均提供「模型开关」页（位于上下文窗口与额度明细之间），可自由开启或关闭指定模型；关闭的模型将自动从 DeepSeek Harness 的模型选择器中隐藏，避免误选与列表冗长；顶部提供按名称/ID的即时搜索框，并支持全选与一键「批量开启」/「批量关闭」。
 - **每日自动签到与日志明细**：支持每天自动签到领取 100 Credits 算力额度，**签到时刻可在卡片上自定义**（默认 10:00，即上游刷新时间，按 UTC+8），配备双端开关与开机防漏补签机制；卡片常驻「签到日志」面板，提供执行流水记录与「立即签到」、「刷新」、「清空日志」快捷操作。
 - **侧栏额度展示 + 额度明细**：「Qoder 侧栏展示」卡片可分别为两版开启侧栏底部的额度小卡（默认关，开启前需为该变体保存 PAT），共享一个刷新间隔（默认 5 分钟，最小 1 分钟）。点侧栏小卡在中间面板打开「Qoder 额度」明细：按资源包逐行给出「剩余 / 总量 + 进度条｜到期时间」，活动赠送包（如国际版「SOTA 专属积分」）按上游给定的名称与**各自的到期日**单独成行；账号整体无到期（上游回 9999 占位值）时展示 PAT 的授权时间而非假日期；再点同一张卡关闭，点另一张切换到对应版本。
 - **倍率显示 `x<priceFactor>`**：模型名后直接拼上游报价的价格倍率（如 `某模型 · x0.79`，免费为 `x0`），来自目录接口的 `price_factor` 字段，仅作展示、不影响请求；上游未报倍率的模型不显示后缀，不会凭空补一个数。
+- **尊重上游的排队建议**：Qoder 在排队/限流答复里给出 `retryAfterSeconds` 时（401/403/429 的 body），插件把它转成本机 `Retry-After` 响应头，并作为 `failure.providerRetryAfterMs` 交给 DSH 的重试策略；宿主重试引擎因此会等到上游要求的时刻再发起下一次请求，而不是用本地退避提前撞回同一个未打开的窗口。
 
 ## 界面一览
 
@@ -80,7 +82,7 @@
 
 前置条件：
 
-- DSH 核心 `0.1.7-rc.1` 及以上（本插件 peer 依赖 `@deepseek-ai/*` `>=0.1.7-rc.1` 线）；
+- DSH 核心 `0.2.1-rc.1` 及以上（本插件 peer 依赖 `@deepseek-ai/*` `>=0.2.1-rc.1` 线）；
 - Node.js `^22.19.0 || >=24.0.0`（`package.json` engines）；
 - 你自己的 Qoder 账号，以及至少一枚个人访问令牌。
 
@@ -93,6 +95,15 @@ dsh plugin --profile web add dsh-qoder-connect
 
 按你使用的 profile 换 `--profile` 的值（`web` / `desktop` / `tui`，如 `dsh plugin --profile desktop add dsh-qoder-connect`）。装到哪个 profile，数据就落在哪个 profile 目录里，web / desktop / tui 各自独立。没有浏览器卡片的终端环境（TUI）下依旧可用 CLI 保存 PAT 并驱动模型；设置卡片与侧栏额度卡需要 Web/Desktop 界面。
 
+> **DSH 低于 `0.2.1-rc.1`？** 请改用最后一个支持 0.1.7 线的版本 **[v0.2.5](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.2.5)**（要求 DSH ≥ `0.1.7-rc.1`）：
+>
+> ```sh
+> # GitHub（推荐，指定 tag）
+> dsh plugin --profile web add github:masknull/dsh-qoder-connect#v0.2.5
+> # 或从 npm 安装
+> dsh plugin --profile web add dsh-qoder-connect@0.2.5
+> ```
+>
 > **DSH 低于 `0.1.7-rc.1`？** 请改用最后一个支持 0.1.5 线的版本 **[v0.2.0](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.2.0)**（要求 DSH ≥ `0.1.5-rc.2`）：
 >
 > ```sh
@@ -102,7 +113,7 @@ dsh plugin --profile web add dsh-qoder-connect
 > dsh plugin --profile web add dsh-qoder-connect@0.2.0
 > ```
 >
-> 从 0.1.5 升级上来的老用户：本版本已移除旧宿主 `settings.yaml` 的自动迁移；如需保留旧配置，请先经 **[v0.1.9](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.1.9)**（首个带数据迁移的版本）完成迁移后，再升级本版本。
+> 从 0.1.5 升级上来的老用户：新版本已移除旧宿主 `settings.yaml` 的自动迁移；如需保留旧配置，请先经 **[v0.1.9](https://github.com/masknull/dsh-qoder-connect/releases/tag/v0.1.9)**（首个带数据迁移的版本）完成迁移后，再升级。
 
 ## 配置与使用
 
@@ -113,9 +124,23 @@ dsh plugin --profile web add dsh-qoder-connect
 
 （卡片内也有同样指引：「请先在 qoder.com.cn 的账号设置（账号 → 个人访问令牌）中生成 PAT，再粘贴到下方输入框。」）
 
-### 在卡片上保存
+### 在卡片上保存与切换
 
-DSH → 设置 → 插件设置 → Qoder 卡片，展开后把 PAT 粘贴进密码输入框，点「保存」（期间显示「校验并保存中…」）。保存动作会先经 Qoder 校验令牌对该变体的区域有效，失败则不落盘并提示「PAT 无效或已过期 — 请到账号设置重新生成后再试。」两版各填各的卡片即可两组并存。
+DSH → 设置 → 插件设置 → Qoder 卡片，展开后把 PAT 粘贴进密码输入框，点「保存」（期间显示「校验并保存中…」）。保存动作会先经 Qoder 校验令牌对该变体的区域有效，失败则不落盘并提示「PAT 无效或已过期 — 请到账号设置重新生成后再试。」
+
+每个变体可以保存多枚 PAT：保存第二枚后，账号行出现下拉框，选中即切换；「添加 PAT」继续追加（可填一个仅本机显示的备注名），「删除当前」只删当前这一枚，「清除全部」一次清空。**配置永远共享**：模型开关、上下文窗口、签到时刻与侧栏额度设置都属于该变体的全局配置，切换账号不会改变；额度与签到作用于当前激活的账号。签到记录按变体保存，切换后不会自动为新账号补签当天，需要时可点「立即签到」。两版各填各的卡片即可两组并存。
+
+### 命令行（可选）
+
+终端环境可用 CLI 管理同一份多 PAT 列表（`--provider` 缺省为 `qoder`）：
+
+```bash
+dsh-qoder-connect pat set <token> --provider qoder   # 校验、保存并设为当前
+dsh-qoder-connect pat list --provider qoder          # 列出已保存（* = 当前）
+dsh-qoder-connect pat use <id> --provider qoder      # 切换
+dsh-qoder-connect pat rm <id> --provider qoder       # 删除
+dsh-qoder-connect pat clear --provider qoder         # 清除全部（logout 同义）
+```
 
 ### 环境变量兜底
 
@@ -136,8 +161,8 @@ DSH → 设置 → 插件设置 → Qoder 卡片，展开后把 PAT 粘贴进密
 
 ```text
 <profile>/.dsh-qoder-connect/
-├── .qoder-auth.json              # 国内版 PAT（{version:2, pat, region, savedAt}）
-├── .qoder-global-auth.json       # 国际版 PAT
+├── .qoder-auth.json              # 国内版 PAT 列表（{version:3, activeId, credentials:[{id,pat,region,savedAt,label?}]}）
+├── .qoder-global-auth.json       # 国际版 PAT 列表
 ├── checkin-status.json           # 签到状态与历史日志记录
 └── state/
     ├── .qoder-catalog.json       # 国内版按账号保存的模型目录

package/lib/bin.js

@@ -1,5 +1,5 @@
 #!/usr/bin/env node
-import { D as QoderCatalogStore, O as qoderCatalogPath, U as qoderCredentialIdentity, V as QoderCredentialStore, b as createQoderTransport, f as QODER_CONNECT_VERSION, i as variantFor, k as FALLBACK_QODER_MODELS, l as qoderHostHeartbeatPath, m as QoderUpstreamClient, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, y as validateApiKey } from "./variants-COxX6r1j.js";
+import { K as QoderCredentialStore, M as QoderCatalogStore, N as qoderCatalogPath, P as FALLBACK_QODER_MODELS, T as createQoderTransport, Y as qoderCredentialIdentity, _ as qoderProbePath, f as QODER_CONNECT_VERSION, i as variantFor, l as qoderHostHeartbeatPath, m as QoderProbeStore, r as QODER_VARIANTS, s as isHeartbeatProcessAlive, t as CHINA_VARIANT, u as readHostHeartbeat, w as validateApiKey, y as QoderUpstreamClient } from "./variants-Dl1AbWre.js";
 import { readFile } from "node:fs/promises";
 import { realpathSync } from "node:fs";
 import { fileURLToPath } from "node:url";
@@ -16,8 +16,11 @@ function printHelp() {
 		"",
 		"  doctor         secret-free environment diagnostics",
 		"  status         credential state and remaining Qoder credit",
-		"  pat set        validate and store a Personal Access Token (arg, --file, or stdin)",
-		"  pat clear      remove the stored credential",
+		"  pat set        validate, store, and activate a Personal Access Token (arg, --file, or stdin)",
+		"  pat list       list saved tokens and mark the active one",
+		"  pat use <id>   switch to a saved token",
+		"  pat rm <id>    remove a saved token",
+		"  pat clear      remove every saved token",
 		"  logout         alias for `pat clear`",
 		"  catalog refresh   re-fetch the model list and save it for this account",
 		"",
@@ -147,8 +150,7 @@ async function status(jsonOutput, variant) {
 	}
 }
 /** Read a token from the positional arg, --file, or standard input. */
-async function readPat(source, rest) {
-	const inline = rest.find((argument) => !argument.startsWith("--"));
+async function readPat(source, inline) {
 	const pat = (source === void 0 ? inline ?? await readStdin() : source === "-" ? await readStdin() : await readFile(source, "utf8"))?.trim() ?? "";
 	if (pat === "") throw new Error("no token given: pass it as an argument, via --file <path>, or on standard input");
 	return pat;
@@ -158,9 +160,25 @@ async function readStdin() {
 	for await (const chunk of process.stdin) chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
 	return Buffer.concat(chunks).toString("utf8");
 }
-async function patSet(variant, file, rest) {
+/**
+* Drop the saved catalog and probe records that belong to one token.
+*
+* The host does this when a saved token is removed from the card; the CLI
+* writes the same files, so it has to leave the same state behind. Leaving them
+* would orphan another account's only copy — or resurrect data for a token the
+* user just deleted.
+*/
+function forgetAccount(variant, credential) {
+	const identity = qoderCredentialIdentity(credential);
+	new QoderCatalogStore({ path: qoderCatalogPath(variant.catalogFilename) }).delete(identity);
+	new QoderProbeStore({
+		pluginVersion: QODER_CONNECT_VERSION,
+		path: qoderProbePath(variant.probeFilename)
+	}).clearFor(identity);
+}
+async function patSet(variant, file, inline) {
 	const store = makeStore(variant);
-	const pat = await readPat(file, rest);
+	const pat = await readPat(file, inline);
 	process.stdout.write(`Validating a token against ${variant.displayName} (${variant.region})…\n`);
 	if (!await validateApiKey(pat, variant.region)) {
 		process.stderr.write(`dsh-qoder-connect: the token was refused by ${variant.displayName} (${variant.region}). Nothing was saved.\n`);
@@ -170,17 +188,79 @@ async function patSet(variant, file, rest) {
 	await store.save(pat, "cli");
 	const status = await store.status();
 	process.stdout.write([
-		`Saved to ${store.ownAuthPath()}${status.pat?.patTail === void 0 ? "" : ` (tail …${status.pat.patTail})`}`,
+		`Saved and activated in ${store.ownAuthPath()}${status.pat?.patTail === void 0 ? "" : ` (tail …${status.pat.patTail})`}`,
+		`${status.profiles?.length ?? 1} saved token(s); switch with \`dsh-qoder-connect pat use <id>\`.`,
 		"The running plugin picks the token up on its next sweep; no restart needed.",
 		""
 	].join("\n"));
 	return 0;
 }
+/** List the saved tokens, marking the active one; never prints a token. */
+async function patList(jsonOutput, variant) {
+	const status = await makeStore(variant).status();
+	const profiles = status.profiles ?? [];
+	if (jsonOutput) {
+		printJson({
+			schemaVersion: JSON_SCHEMA_VERSION,
+			provider: variant.id,
+			activeId: status.activeId ?? null,
+			profiles,
+			...status.pat?.source === "env" ? { source: "env" } : {}
+		});
+		return 0;
+	}
+	if (profiles.length === 0) {
+		process.stdout.write(status.pat?.source === "env" ? `${variant.displayName}: no saved token; the environment token is in use${status.pat.patTail === void 0 ? "" : ` (tail …${status.pat.patTail})`}.\n` : `${variant.displayName}: no saved tokens.\n`);
+		return 0;
+	}
+	const lines = profiles.map((profile) => [
+		profile.id === status.activeId ? "*" : " ",
+		profile.id,
+		profile.label ?? "(no label)",
+		profile.patTail === void 0 ? "" : `tail …${profile.patTail}`
+	].filter((part) => part !== "").join("  "));
+	process.stdout.write([
+		`${variant.displayName} saved tokens (* = active):`,
+		...lines,
+		""
+	].join("\n"));
+	return 0;
+}
+/** Make one saved token active. */
+async function patUse(variant, id) {
+	const entry = await makeStore(variant).activate(id);
+	if (entry === void 0) {
+		process.stderr.write(`dsh-qoder-connect: no saved token with id ${JSON.stringify(id)}; run \`pat list\` to see the ids.\n`);
+		return 1;
+	}
+	const tail = entry.pat.slice(-4);
+	process.stdout.write(`${variant.displayName}: active token is now ${entry.id}${tail.length === 4 ? ` (tail …${tail})` : ""}.\n`);
+	return 0;
+}
+/** Remove one saved token and the account-scoped data that belonged to it. */
+async function patRemove(variant, id) {
+	const store = makeStore(variant);
+	const removed = await store.remove(id);
+	if (removed === void 0) {
+		process.stderr.write(`dsh-qoder-connect: no saved token with id ${JSON.stringify(id)}; run \`pat list\` to see the ids.\n`);
+		return 1;
+	}
+	forgetAccount(variant, removed);
+	const status = await store.status();
+	process.stdout.write([
+		`${variant.displayName}: removed ${removed.id}.`,
+		status.activeId === void 0 ? "No saved token remains; the plugin is signed out of this variant." : `Active token is now ${status.activeId}.`,
+		""
+	].join("\n"));
+	return 0;
+}
 async function patClear(variant) {
 	const store = makeStore(variant);
+	const saved = await store.entries();
+	for (const entry of saved) forgetAccount(variant, entry);
 	await store.clear();
 	const status = await store.status();
-	process.stdout.write(status.state === "configured" ? `${variant.displayName} Connect: removed the stored file, but a token is still active from the environment (${status.pat?.source ?? "env"}).\n` : `${variant.displayName} Connect: signed out; removed ${store.ownAuthPath()}\n`);
+	process.stdout.write(status.state === "configured" ? `${variant.displayName} Connect: removed ${saved.length} saved token(s), but a token is still active from the environment (${status.pat?.source ?? "env"}).\n` : `${variant.displayName} Connect: signed out; removed ${store.ownAuthPath()}\n`);
 	return 0;
 }
 async function catalogRefresh(variant) {
@@ -249,11 +329,18 @@ async function run(argv) {
 	}
 	let patCommand;
 	let catalogCommand;
+	/** The positional a subcommand takes: the token (`set`) or the entry id. */
+	let commandArg;
 	if (action === "pat") {
 		const sub = rest.shift();
-		patCommand = sub === "set" || sub === "clear" ? sub : void 0;
+		patCommand = sub === "set" || sub === "list" || sub === "use" || sub === "rm" || sub === "clear" ? sub : void 0;
 		if (patCommand === void 0) {
-			process.stderr.write(`dsh-qoder-connect: pat needs set or clear; got ${JSON.stringify(sub ?? "")}\n`);
+			process.stderr.write(`dsh-qoder-connect: pat needs set, list, use, rm, or clear; got ${JSON.stringify(sub ?? "")}\n`);
+			return 1;
+		}
+		if (patCommand !== "list" && patCommand !== "clear") commandArg = rest.shift();
+		if ((patCommand === "use" || patCommand === "rm") && (commandArg === void 0 || commandArg.startsWith("--"))) {
+			process.stderr.write(`dsh-qoder-connect: pat ${patCommand} needs an entry id; run \`pat list\` to see them\n`);
 			return 1;
 		}
 	}
@@ -265,7 +352,8 @@ async function run(argv) {
 			return 1;
 		}
 	}
-	if (rest.filter((flag) => flag !== "--json" && !flag.startsWith("--")).length > 0 || jsonOutput && action !== "doctor" && action !== "status") {
+	const patListJson = action === "pat" && patCommand === "list";
+	if (rest.filter((flag) => flag !== "--json" && !flag.startsWith("--")).length > 0 || jsonOutput && action !== "doctor" && action !== "status" && !patListJson) {
 		process.stderr.write(`dsh-qoder-connect: invalid options for ${action}: ${flags.join(" ")}\n`);
 		return 1;
 	}
@@ -277,7 +365,15 @@ async function run(argv) {
 		switch (action) {
 			case "doctor": return await doctor(jsonOutput, variant);
 			case "status": return await status(jsonOutput, variant);
-			case "pat": return patCommand === "set" ? await patSet(variant, file, rest) : await patClear(variant);
+			case "pat":
+				switch (patCommand) {
+					case "set": return await patSet(variant, file, commandArg);
+					case "list": return await patList(jsonOutput, variant);
+					case "use": return await patUse(variant, commandArg);
+					case "rm": return await patRemove(variant, commandArg);
+					case "clear": return await patClear(variant);
+				}
+				return 1;
 			case "logout": return await patClear(variant);
 			case "catalog": return await catalogRefresh(variant);
 		}