dsh-subscriptions 0.2.2 → 0.3.0

package/lib/provider-settings.d.ts

@@ -8,6 +8,7 @@ export declare const PROVIDER_TOOLS: {
     readonly antigravity: readonly [];
 };
 export type SubscriptionTool = 'image_generate' | 'video_generate' | 'x_search' | 'web_search';
+export type SubagentSpeedTier = 'standard' | 'fast';
 export interface AccountPreferences {
     alias?: string;
     /** Absent means included. */
@@ -22,6 +23,8 @@ export interface ProviderPreferences {
     /** Absent follows discovery; an explicit selection hides newly discovered models. */
     visibleModels?: string[];
     contextWindows?: Record<string, number>;
+    /** Codex only: per-model defaults for subagents, independent of main-session speed. */
+    subagentSpeeds?: Record<string, SubagentSpeedTier>;
     tools?: Partial<Record<SubscriptionTool, boolean>>;
     /**
      * Claude only: overrides the `claudePromptCacheTtl` plugin config for this
@@ -40,6 +43,8 @@ export declare class ProviderSettingsStore {
     visible(provider: ProviderId, model: string): boolean;
     /** The user's local context-window override for one model; absent follows the provider. */
     contextWindow(model: string, provider?: ProviderId): number | undefined;
+    /** Read on every request so saved changes apply to the next subagent request. */
+    subagentSpeed(model: string): SubagentSpeedTier;
     /**
      * The Claude route's prompt-cache TTL override, read live so a saved change
      * takes effect from the next request without a restart. Absent means follow

package/lib/provider-settings.js

@@ -85,6 +85,22 @@ export function validatePreferences(provider, input) {
         }
         result.promptCacheTtl = raw.promptCacheTtl;
     }
+    if (raw.subagentSpeeds !== undefined) {
+        if (provider !== 'codex')
+            throw new Error('subagent speeds are currently supported only for Codex');
+        if (!raw.subagentSpeeds ||
+            typeof raw.subagentSpeeds !== 'object' ||
+            Array.isArray(raw.subagentSpeeds)) {
+            throw new Error('subagent speeds must be a model-to-speed map');
+        }
+        result.subagentSpeeds = Object.create(null);
+        for (const [model, tier] of Object.entries(raw.subagentSpeeds)) {
+            if (!model.trim() || (tier !== 'standard' && tier !== 'fast')) {
+                throw new Error('subagent speeds require a model id and either "standard" or "fast"');
+            }
+            result.subagentSpeeds[model] = tier;
+        }
+    }
     if (raw.tools !== undefined) {
         if (!raw.tools || typeof raw.tools !== 'object' || Array.isArray(raw.tools))
             throw new Error('tools must be an object');
@@ -144,6 +160,11 @@ export class ProviderSettingsStore {
         const windows = this.current.providers[provider]?.contextWindows;
         return windows && Object.hasOwn(windows, model) ? windows[model] : undefined;
     }
+    /** Read on every request so saved changes apply to the next subagent request. */
+    subagentSpeed(model) {
+        const speeds = this.current.providers.codex?.subagentSpeeds;
+        return speeds && Object.hasOwn(speeds, model) ? speeds[model] : 'standard';
+    }
     /**
      * The Claude route's prompt-cache TTL override, read live so a saved change
      * takes effect from the next request without a restart. Absent means follow

package/lib/providers/ollama-settings.d.ts

@@ -59,7 +59,7 @@ export interface OllamaSettings {
 export declare function validateOllamaBaseURL(value: unknown): string;
 /**
  * Validate one settings document, dropping unknown keys and duplicate model
- * ids (first wins, matching the Cursor store's visible-model handling).
+ * ids (first wins).
  * @param input - the parsed store document or an RPC payload.
  * @throws when a known field has the wrong type or an unusable value.
  */

package/lib/providers/ollama-settings.js

@@ -106,7 +106,7 @@ function readModel(entry, index) {
 }
 /**
  * Validate one settings document, dropping unknown keys and duplicate model
- * ids (first wins, matching the Cursor store's visible-model handling).
+ * ids (first wins).
  * @param input - the parsed store document or an RPC payload.
  * @throws when a known field has the wrong type or an unusable value.
  */

package/lib/translate/antigravity.js

@@ -88,9 +88,17 @@ export function toAntigravityTools(tools, model = 'gemini') {
     ];
 }
 const SKIP_THOUGHT_SIGNATURE_VALIDATOR = 'skip_thought_signature_validator';
-/** Gemini 3 validates the first function call in every model tool-call step. */
+/**
+ * Whether this model validates thought signatures on replayed function calls.
+ *
+ * Gemini 3 and 4 require a signature on the first function call of each step;
+ * foreign history uses the documented placeholder when no signature can be reused.
+ * https://ai.google.dev/gemini-api/docs/generate-content/thought-signatures
+ * Keep this scoped to these model families; future versions and unversioned aliases
+ * need verification before enabling the same fallback.
+ */
 function requiresThoughtSignatures(model) {
-    return model !== undefined && /^gemini-3(?:[.-]|$)/i.test(model);
+    return model !== undefined && /^gemini-[34](?:[.-]|$)/i.test(model.trim());
 }
 /**
  * Convert resolved harness messages into Gemini contents. Function response

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-subscriptions",
-  "version": "0.2.2",
+  "version": "0.3.0",
   "description": "Unified subscription providers and usage dashboard for DeepSeek Harness",
   "icon": "./icon.svg",
   "license": "MIT",
@@ -24,7 +24,6 @@
     "grok",
     "github-copilot",
     "google-antigravity",
-    "cursor",
     "opencode-go",
     "kimi-code"
   ],
@@ -40,16 +39,11 @@
       "types": "./lib/client/index.d.ts",
       "default": "./lib/client.js"
     },
-    "./cursor-transport": {
-      "types": "./vendor/cursor/index.d.ts",
-      "default": "./vendor/cursor/index.js"
-    },
     "./package.json": "./package.json",
     "./locale/*.json": "./locale/*.json"
   },
   "files": [
     "lib",
-    "vendor/cursor",
     "cordis.patch.yml",
     "locale/*.json",
     "icon.svg"
@@ -90,6 +84,7 @@
   },
   "devDependencies": {
     "@deepseek-ai/cordis": "4.0.4",
+    "@deepseek-ai/dsh-agent": "0.1.7-rc.2",
     "@deepseek-ai/dsh-api-remotes": "0.1.7-rc.2",
     "@deepseek-ai/dsh-attachment": "0.1.7-rc.2",
     "@deepseek-ai/dsh-client-connection": "0.1.7-rc.2",

package/lib/client/CursorCard.d.ts

@@ -1,9 +0,0 @@
-import type { ConnectionHandle } from '@deepseek-ai/dsh-api-remotes/client';
-import type { SubscriptionsSectionInjected } from './SubscriptionsSection.js';
-type Translate = SubscriptionsSectionInjected['t'];
-/** Cursor's single connected account, rendered with the same card and Manage dialog as the other providers. */
-export declare function CursorCard({ rpc, t, }: {
-    rpc: ConnectionHandle['rpc'];
-    t: Translate;
-}): import("react").JSX.Element;
-export {};

package/lib/client/CursorCard.js

@@ -1,151 +0,0 @@
-import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
-import { useCallback, useEffect, useRef, useState } from 'react';
-import { callSubscriptionsAuth } from './subscriptions-rpc.js';
-import { ProviderAccountManager } from './ProviderAccountManager.js';
-import { USAGE_BADGE_REFRESH_EVENT } from './usage-badge-preferences.js';
-import { subscriptionCardStyles as styles } from './subscription-card-styles.js';
-import { UsageMeter } from './UsageMeter.js';
-import { displayUsedPercent } from './usage-pace.js';
-function message(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-/** Cursor's single connected account, rendered with the same card and Manage dialog as the other providers. */
-export function CursorCard({ rpc, t, }) {
-    const [status, setStatus] = useState();
-    const [usage, setUsage] = useState();
-    const [observedAt, setObservedAt] = useState();
-    const [usageStale, setUsageStale] = useState(false);
-    const [authorizeUrl, setAuthorizeUrl] = useState();
-    const [error, setError] = useState();
-    const [loading, setLoading] = useState(false);
-    const [manage, setManage] = useState(false);
-    const authenticated = useRef();
-    const refreshStatus = useCallback(async () => {
-        try {
-            const value = await callSubscriptionsAuth(rpc, 'cursorStatus', {});
-            setStatus(value);
-            if (authenticated.current !== value.authenticated) {
-                authenticated.current = value.authenticated;
-                window.dispatchEvent(new Event(USAGE_BADGE_REFRESH_EVENT));
-            }
-            if (value.authenticated)
-                setAuthorizeUrl(undefined);
-            if (value.error)
-                setError(value.error);
-        }
-        catch (failure) {
-            setError(message(failure));
-        }
-    }, [rpc]);
-    const refreshUsage = useCallback(async () => {
-        setLoading(true);
-        try {
-            const value = await callSubscriptionsAuth(rpc, 'cursorUsage', {});
-            setUsage(value);
-            // Prefer the server's observation time; a cached reading must not look fresh.
-            setObservedAt(value.observedAt ?? Date.now());
-            setUsageStale(value.stale === true);
-            setError(undefined);
-            window.dispatchEvent(new Event(USAGE_BADGE_REFRESH_EVENT));
-        }
-        catch (failure) {
-            setError(message(failure));
-            setUsageStale(true);
-        }
-        finally {
-            setLoading(false);
-        }
-    }, [rpc]);
-    useEffect(() => {
-        void refreshStatus();
-    }, [refreshStatus]);
-    useEffect(() => {
-        if (status?.busy !== true)
-            return;
-        const timer = setInterval(() => {
-            void refreshStatus();
-        }, 2000);
-        return () => clearInterval(timer);
-    }, [status?.busy, refreshStatus]);
-    useEffect(() => {
-        if (status?.authenticated === true)
-            void refreshUsage();
-    }, [status?.authenticated, refreshUsage]);
-    const login = async () => {
-        setError(undefined);
-        try {
-            const value = await callSubscriptionsAuth(rpc, 'cursorLogin', {});
-            setAuthorizeUrl(value.authorizeUrl);
-            window.open(value.authorizeUrl, '_blank', 'noopener');
-            await refreshStatus();
-        }
-        catch (failure) {
-            setError(message(failure));
-        }
-    };
-    const cancel = async () => {
-        try {
-            await callSubscriptionsAuth(rpc, 'cursorCancel', {});
-            setAuthorizeUrl(undefined);
-            await refreshStatus();
-        }
-        catch (failure) {
-            setError(message(failure));
-        }
-    };
-    const logout = async () => {
-        if (!window.confirm(t('logoutAccountConfirm', { account: 'Cursor', provider: 'Cursor' })))
-            return;
-        try {
-            await callSubscriptionsAuth(rpc, 'cursorLogout', {});
-            setUsage(undefined);
-            setObservedAt(undefined);
-            setUsageStale(false);
-            await refreshStatus();
-        }
-        catch (failure) {
-            setError(message(failure));
-        }
-    };
-    const connected = status?.authenticated === true;
-    return (_jsxs("div", { style: styles.card, children: [_jsxs("div", { style: styles.header, children: [_jsx("span", { style: {
-                            ...styles.dot,
-                            background: status?.busy
-                                ? 'var(--dsw-alias-state-warn-label)'
-                                : connected
-                                    ? 'var(--dsw-alias-state-success-primary)'
-                                    : 'var(--dsw-alias-label-dimmed)',
-                        } }), _jsx("span", { style: styles.name, children: t('cursorTitle') })] }), _jsx("p", { style: styles.status, children: status === undefined
-                    ? t('checking')
-                    : status.busy
-                        ? t('loginInProgress')
-                        : connected
-                            ? t('loggedInCount', { count: 1 })
-                            : t('notLoggedIn') }), error !== undefined && _jsx("p", { style: styles.error, children: error }), connected && (_jsxs("div", { style: styles.account, children: [_jsxs("div", { style: styles.accountHeader, children: [_jsx("span", { style: styles.defaultStar, title: t('defaultBadge'), children: "\u2605" }), _jsx("span", { style: styles.accountName, children: "Cursor" }), status.expiresAt !== undefined && (_jsx("span", { style: styles.status, children: t('accountExpires', {
-                                    date: new Date(status.expiresAt).toLocaleString(),
-                                }) })), _jsx("button", { type: "button", style: { ...styles.button, marginLeft: 'auto', flexShrink: 0 }, onClick: () => {
-                                    void logout();
-                                }, children: t('logout') })] }), _jsxs("div", { style: styles.usage, children: [_jsxs("div", { style: styles.usageHeader, children: [_jsx("span", { style: styles.usageTitle, children: t('usageTitle') }), usage?.plan !== undefined && (_jsx("span", { style: styles.status, children: t('usagePlan', { plan: usage.plan }) })), _jsx("button", { type: "button", style: styles.usageRefresh, disabled: loading, onClick: () => {
-                                            void refreshUsage();
-                                        }, children: t('usageRefresh') })] }), loading && usage === undefined && (_jsx("p", { style: styles.status, children: t('usageLoading') })), usage?.windows?.length === 0 && (_jsx("p", { style: styles.status, children: t('usageEmpty') })), usage?.windows?.map((window, index) => {
-                                const percent = displayUsedPercent(window.usedPercent);
-                                const label = window.scope === 'Included'
-                                    ? t('cursorIncluded')
-                                    : window.scope === 'Cursor Models'
-                                        ? t('cursorModels')
-                                        : window.scope === 'Other Models'
-                                            ? t('cursorOtherModels')
-                                            : window.scope === 'Included requests'
-                                                ? t('cursorIncludedRequests')
-                                                : (window.scope ?? t('usageWindow'));
-                                return (_jsxs("div", { style: styles.usageRow, children: [_jsxs("div", { style: styles.usageMeta, children: [_jsx("span", { children: label }), _jsxs("span", { children: [percent === undefined
-                                                            ? t('usageMeterInvalid')
-                                                            : `${percent}%`, window.resetsAt === undefined
-                                                            ? ''
-                                                            : ` · ${t('usageResets', { date: new Date(window.resetsAt).toLocaleString() })}`] })] }), _jsx(UsageMeter, { window: window, t: t, observedAt: observedAt, stale: usageStale })] }, index));
-                            })] })] })), _jsxs("div", { style: styles.actions, children: [status?.authenticated === false && !status.busy && (_jsx("button", { type: "button", style: styles.button, onClick: () => {
-                            void login();
-                        }, children: t('login') })), _jsx("button", { type: "button", style: styles.button, "aria-haspopup": "dialog", onClick: () => setManage(true), children: t('accountsManage') }), status?.busy === true && (_jsx("button", { type: "button", style: styles.button, onClick: () => {
-                            void cancel();
-                        }, children: t('cancel') }))] }), status?.busy === true && authorizeUrl !== undefined && (_jsx("a", { href: authorizeUrl, target: "_blank", rel: "noopener noreferrer", children: t('cursorOpenLogin') })), manage && (_jsx(ProviderAccountManager, { provider: "cursor-subscription", name: "Cursor", rpc: rpc, t: t, onClose: () => setManage(false) }))] }));
-}

package/lib/providers/cursor-adapter.d.ts

@@ -1,50 +0,0 @@
-import type { GenerateOptions, StreamChunk } from '@deepseek-ai/dsh-llm';
-import { CursorAdapter } from 'dsh-subscriptions/cursor-transport';
-/**
- * The imported Cursor transport still reads tool results as user-role content
- * blocks. DSH 0.1.7 carries them as first-class role=tool messages instead.
- */
-export declare function projectCursorMessages(messages: GenerateOptions['messages']): unknown[];
-/**
- * Cursor adapter for the DSH host.
- *
- * Failure text contract: `finish/error` messages that originate from the
- * vendor stream and can quote provider-controlled text (the response content
- * type, trailers, end-stream errors, a frame-reader or other error whose message
- * is not one of the literals below, and a transport-coded failure that is not a
- * socket-layer error) are replaced by `<code> [provider response text omitted]`. Failures that are
- * wholly local keep their own message and code:
- *
- * - anything the auth service threw (not signed in, sign-in expired, token
- *   refresh status), and a host attachment read failure;
- * - the vendor's own request validation, by code (`UNSUPPORTED_OPTION`,
- *   `UNSUPPORTED_CONTENT`, `TOOL_LIMIT`);
- * - the vendor's fixed-literal plain errors, by exact message: the HTTP status
- *   (`Cursor agent returned HTTP 429`), the response, idle and progress
- *   timeouts, a closed bridge or stream, an unreadable compressed frame, and
- *   an invalid Cursor setting;
- * - a network error raised by the operating system (`ECONNREFUSED`,
- *   `ENOTFOUND`, ...), recognised from the thrown error's own code, not from
- *   the vendor's classification.
- *
- * Not a provider-origin class: a network error such as `ECONNREFUSED` is a
- * local failure (no network, daemon down, DNS), and is kept. What is still
- * replaced although it is probably local is a transport failure with no
- * socket-layer errno: a TLS or certificate failure and an HTTP/2 protocol
- * error. The vendor's `TRANSPORT` code cannot decide those, because
- * `classifyCursorError` derives it from message text (`network`, `connection`,
- * `socket`, `fetch`, `ECONN`, `http2`) and a provider's end-stream message or
- * `grpc-message` can contain any of them; so the code is never trusted alone.
- * Telling these apart would need a check on the thrown error object, as the
- * errno check above does, extended to the TLS and HTTP/2 error codes. That is
- * not done here and is not verified.
- */
-export declare class CursorCompatAdapter extends CursorAdapter {
-    private readonly visibleModels;
-    private readonly localFailures;
-    constructor(options: ConstructorParameters<typeof CursorAdapter>[0] & {
-        visibleModels?: () => readonly string[] | undefined;
-    });
-    listModels(provider: string): Promise<import("@deepseek-ai/dsh-llm").LlmModelInfo[]>;
-    stream(options: GenerateOptions): AsyncIterable<StreamChunk>;
-}

package/lib/providers/cursor-adapter.js

@@ -1,304 +0,0 @@
-import { CursorAdapter } from 'dsh-subscriptions/cursor-transport';
-/**
- * The imported Cursor transport still reads tool results as user-role content
- * blocks. DSH 0.1.7 carries them as first-class role=tool messages instead.
- */
-export function projectCursorMessages(messages) {
-    return messages.map((message) => message.role === 'tool'
-        ? {
-            ...message,
-            role: 'user',
-            content: [
-                {
-                    type: 'tool-result',
-                    toolCallId: message.toolCallId,
-                    isError: message.isError,
-                    content: message.content,
-                },
-            ],
-        }
-        : message);
-}
-/**
- * Vendor `LlmError` codes whose whole message is a local literal (no response
- * header, trailer, body or end-stream text). Provider-derived failures can only
- * carry a `classifyCursorError` code or `CURSOR_PROTOCOL`, never these, so the
- * code is a sound discriminator for them.
- */
-const LOCAL_VENDOR_CODES = new Set([
-    'UNSUPPORTED_OPTION',
-    'UNSUPPORTED_CONTENT',
-    'TOOL_LIMIT',
-]);
-/**
- * Plain-error messages the vendor throws as fixed literals (`vendor/cursor/
- * index.js`: `waitForResponse`, the request write, the tool-continuation write,
- * the stream `close` handler, the frame reader, the stall watchdog and the
- * settings validation). None
- * interpolates response text, so they are matched by exact message, the same way
- * the auth messages are. A provider that echoed one of these sentences would
- * only make the user read a local literal.
- */
-const LOCAL_VENDOR_MESSAGES = new Set([
-    'Cursor HTTP response timeout',
-    'Cursor HTTP stream closed before response',
-    'Cursor agent bridge closed before accepting the request',
-    'Cursor tool continuation bridge closed before accepting the result',
-    'Cursor sent an unreadable compressed frame',
-    'Cursor stream idle timeout',
-    // `resolveCursorSettings`, run at the top of every stream.
-    'cursor-subscription: maxToolRounds must be an integer between 1 and 1000',
-    'cursor-subscription: retryCount must be an integer between 0 and 10',
-    'cursor-subscription: retryIntervalMs must be an integer between 0 and 300000',
-    'cursor-subscription: retryHttpStatusCodes must contain only HTTP status integers from 400 to 599',
-    'cursor-subscription: retryHttpStatusCodes must not contain duplicates',
-    'cursor-subscription: replayHistoryEachStep must be a boolean',
-]);
-/**
- * The same, for the two literals that embed a number the vendor computes: the
- * response status (`Number(headers[':status'])`, so digits or `NaN`) and the
- * configured progress timeout.
- */
-const LOCAL_VENDOR_PATTERNS = [
-    /^Cursor agent returned HTTP \d{3}$/,
-    /^Cursor stream progress timeout: no content for \d+ms$/,
-];
-/**
- * Operating-system network error codes. An `Error` carrying one of these on
- * itself, or on its `cause` (Node wraps a refused connection in
- * `ERR_HTTP2_STREAM_CANCEL`), was produced by the local socket layer, so its
- * message is local: `connect ECONNREFUSED 127.0.0.1:443`, `getaddrinfo ENOTFOUND
- * host`. This is a property of the thrown object, which a provider cannot
- * forge. It is deliberately not a test on the vendor's `TRANSPORT` code: the
- * vendor derives that code from message text, so a provider's end-stream
- * message or `grpc-message` containing "connection" or "socket" gets it too.
- * Transport failures with no such code (TLS and certificate errors, HTTP/2
- * protocol errors) are not recognised and stay replaced.
- */
-const LOCAL_SYSTEM_ERRNO = new Set([
-    'ECONNREFUSED',
-    'ECONNRESET',
-    'ECONNABORTED',
-    'ENOTFOUND',
-    'EAI_AGAIN',
-    'ETIMEDOUT',
-    'ENETUNREACH',
-    'ENETDOWN',
-    'EHOSTUNREACH',
-    'EHOSTDOWN',
-    'EPIPE',
-]);
-function errorCode(value) {
-    return typeof value === 'object' && value !== null
-        ? value.code
-        : undefined;
-}
-function isLocalSystemError(error) {
-    if (!(error instanceof Error))
-        return false;
-    const own = errorCode(error);
-    const cause = errorCode(error.cause);
-    return ((typeof own === 'string' && LOCAL_SYSTEM_ERRNO.has(own)) ||
-        (typeof cause === 'string' && LOCAL_SYSTEM_ERRNO.has(cause)));
-}
-function messageOf(error) {
-    return error instanceof Error ? error.message : String(error);
-}
-/** Bound on remembered local failure messages; they are short and few. */
-const MAX_LOCAL_MESSAGES = 64;
-/**
- * Remembers the messages of failures raised by this machine rather than read
- * from the provider: whatever the auth service threw, whatever the host
- * attachment store threw while reading an image, and a socket-layer network
- * error seen on the run. The vendor stream turns each of these into
- * `finish/error` carrying exactly `error.message`, so a failure whose message
- * equals a remembered one originated locally and may keep its text. The match
- * is by exact text: a provider that echoed a remembered message would only
- * display a local literal.
- */
-class LocalFailureMessages {
-    messages = new Set();
-    /** Wrap `auth` so its failures are remembered and rethrown unchanged. */
-    wrap(auth) {
-        return {
-            accessToken: async (options) => {
-                try {
-                    return await auth.accessToken(options);
-                }
-                catch (error) {
-                    this.remember(messageOf(error));
-                    throw error;
-                }
-            },
-        };
-    }
-    /**
-     * Wrap the host attachment store the vendor reads images through, so a read
-     * failure keeps its own message. The store is a local service; its errors
-     * carry no provider text. Anything that is not a store passes through.
-     */
-    wrapAttachments(resolve) {
-        return () => {
-            const store = resolve();
-            const readImage = store
-                ?.readImage;
-            if (typeof readImage !== 'function')
-                return store;
-            return Object.create(store, {
-                readImage: {
-                    value: async (...args) => {
-                        try {
-                            return await readImage.apply(store, args);
-                        }
-                        catch (error) {
-                            this.remember(messageOf(error));
-                            throw error;
-                        }
-                    },
-                },
-            });
-        };
-    }
-    /**
-     * Observe a vendor run's two failure channels, the response promise and the
-     * frame reader, and remember the message of an error the socket layer raised.
-     * The run's behavior is unchanged: the same error is rethrown.
-     */
-    observeRun(run) {
-        if (typeof run !== 'object' || run === null)
-            return run;
-        const target = run;
-        const observe = (error) => {
-            if (isLocalSystemError(error))
-                this.remember(messageOf(error));
-            throw error;
-        };
-        const wait = target.waitForResponse;
-        if (typeof wait === 'function') {
-            target.waitForResponse = (...args) => Promise.resolve(wait.apply(target, args)).catch(observe);
-        }
-        const frames = target.frames;
-        const next = frames?.next;
-        if (frames !== undefined && typeof next === 'function') {
-            frames.next = (...args) => Promise.resolve(next.apply(frames, args)).catch(observe);
-        }
-        return run;
-    }
-    has(message) {
-        return this.messages.has(message);
-    }
-    remember(message) {
-        // An empty message displays nothing; remembering it would exempt every
-        // empty failure from the boundary for no benefit.
-        if (message === '')
-            return;
-        this.messages.delete(message);
-        this.messages.add(message);
-        if (this.messages.size > MAX_LOCAL_MESSAGES) {
-            const oldest = this.messages.values().next().value;
-            if (oldest !== undefined)
-                this.messages.delete(oldest);
-        }
-    }
-}
-function isVendorLocalMessage(message) {
-    return (LOCAL_VENDOR_MESSAGES.has(message) ||
-        LOCAL_VENDOR_PATTERNS.some((pattern) => pattern.test(message)));
-}
-/**
- * Cursor adapter for the DSH host.
- *
- * Failure text contract: `finish/error` messages that originate from the
- * vendor stream and can quote provider-controlled text (the response content
- * type, trailers, end-stream errors, a frame-reader or other error whose message
- * is not one of the literals below, and a transport-coded failure that is not a
- * socket-layer error) are replaced by `<code> [provider response text omitted]`. Failures that are
- * wholly local keep their own message and code:
- *
- * - anything the auth service threw (not signed in, sign-in expired, token
- *   refresh status), and a host attachment read failure;
- * - the vendor's own request validation, by code (`UNSUPPORTED_OPTION`,
- *   `UNSUPPORTED_CONTENT`, `TOOL_LIMIT`);
- * - the vendor's fixed-literal plain errors, by exact message: the HTTP status
- *   (`Cursor agent returned HTTP 429`), the response, idle and progress
- *   timeouts, a closed bridge or stream, an unreadable compressed frame, and
- *   an invalid Cursor setting;
- * - a network error raised by the operating system (`ECONNREFUSED`,
- *   `ENOTFOUND`, ...), recognised from the thrown error's own code, not from
- *   the vendor's classification.
- *
- * Not a provider-origin class: a network error such as `ECONNREFUSED` is a
- * local failure (no network, daemon down, DNS), and is kept. What is still
- * replaced although it is probably local is a transport failure with no
- * socket-layer errno: a TLS or certificate failure and an HTTP/2 protocol
- * error. The vendor's `TRANSPORT` code cannot decide those, because
- * `classifyCursorError` derives it from message text (`network`, `connection`,
- * `socket`, `fetch`, `ECONN`, `http2`) and a provider's end-stream message or
- * `grpc-message` can contain any of them; so the code is never trusted alone.
- * Telling these apart would need a check on the thrown error object, as the
- * errno check above does, extended to the TLS and HTTP/2 error codes. That is
- * not done here and is not verified.
- */
-export class CursorCompatAdapter extends CursorAdapter {
-    visibleModels;
-    localFailures;
-    constructor(options) {
-        const localFailures = new LocalFailureMessages();
-        super({
-            ...options,
-            auth: localFailures.wrap(options.auth),
-            ...(options.resolveAttachments === undefined
-                ? {}
-                : {
-                    resolveAttachments: localFailures.wrapAttachments(options.resolveAttachments),
-                }),
-        });
-        this.localFailures = localFailures;
-        this.visibleModels = options.visibleModels;
-        // The vendor assigns `createAgentRun` (the injected one, or its own
-        // `AgentRun` factory) in its constructor but does not type it as a member.
-        const vendor = this;
-        const createRun = vendor.createAgentRun;
-        vendor.createAgentRun = (access) => localFailures.observeRun(createRun(access));
-    }
-    async listModels(provider) {
-        const models = await super.listModels(provider);
-        const visible = this.visibleModels?.();
-        return visible === undefined
-            ? models
-            : models.filter((model) => visible.includes(model.id));
-    }
-    async *stream(options) {
-        for await (const chunk of super.stream({
-            ...options,
-            // Existing DSH sessions may still hold this retired selection.
-            model: options.model === 'composer-2' ? 'composer-2.5' : options.model,
-            messages: projectCursorMessages(options.messages),
-        })) {
-            if (chunk.type === 'finish' &&
-                chunk.reason.kind === 'error' &&
-                !LOCAL_VENDOR_CODES.has(chunk.reason.failure.code) &&
-                !isVendorLocalMessage(chunk.reason.failure.message) &&
-                !this.localFailures.has(chunk.reason.failure.message)) {
-                // The vendor uses raw headers, trailers and end-stream errors for protocol
-                // checks and classification before this boundary. Keep its code and retry
-                // decisions; do not reclassify the replacement text. "Safe" here means no
-                // provider-controlled free text is displayed in failures, not that no
-                // secret can exist anywhere internally.
-                yield {
-                    ...chunk,
-                    reason: {
-                        ...chunk.reason,
-                        failure: {
-                            ...chunk.reason.failure,
-                            message: `${chunk.reason.failure.code} [provider response text omitted]`,
-                        },
-                    },
-                };
-            }
-            else {
-                yield chunk;
-            }
-        }
-    }
-}