zcode-acp-server 0.1.0 → 0.3.0

package/dist/quota/parse.js

@@ -0,0 +1,200 @@
+/**
+ * Quota response parsing — turns the raw GLM `limits[]` array into a flat list
+ * of normalised {@link QuotaItem}s.
+ *
+ * Design goals (vs. the reference project):
+ *   - **No hardcoded type whitelist.** Unknown `type` values still render,
+ *     labelled by their raw type string, so future windows surface
+ *     automatically.
+ *   - **Percentage fallback chain** that tolerates inconsistent field sets
+ *     across limit kinds (some carry absolute counters, some only a legacy
+ *     `percentage`).
+ *   - **Labels derived from `type` + `number`**, without magic-number coupling.
+ */
+/** Coerce an unknown value to a finite number, or `null`. */
+function asFiniteNumber(value) {
+    const n = typeof value === "number" ? value : Number(value);
+    return Number.isFinite(n) ? n : null;
+}
+/** Clamp a percentage to the valid [0, 100] range, or `null` if not finite. */
+function clampPercent(value) {
+    const n = asFiniteNumber(value);
+    if (n === null)
+        return null;
+    return Math.max(0, Math.min(100, Math.round(n)));
+}
+/**
+ * Compute `{ leftPercent, usedPercent }` from a single raw limit, tolerating
+ * several field combinations (preferred → fallback):
+ *   1. `remaining` + `currentValue` (absolute counters) — most precise;
+ *   2. `currentValue` / `usage`                         — used over total;
+ *   3. `percentage` (legacy, treated as *used* percent) — last resort.
+ * Returns `null` when no percentage can be derived.
+ */
+function computePercentages(limit) {
+    const usage = asFiniteNumber(limit.usage);
+    const remaining = asFiniteNumber(limit.remaining);
+    const currentValue = asFiniteNumber(limit.currentValue);
+    // Path 1: absolute remaining/used counters → derive total from parts.
+    const totalFromParts = remaining !== null && currentValue !== null ? remaining + currentValue : null;
+    const total = totalFromParts !== null && totalFromParts > 0 ? totalFromParts : usage;
+    if (total !== null && total > 0) {
+        if (remaining !== null && remaining >= 0 && remaining <= total) {
+            const leftPercent = clampPercent((remaining / total) * 100);
+            if (leftPercent !== null) {
+                return { leftPercent, usedPercent: 100 - leftPercent };
+            }
+        }
+        if (currentValue !== null && currentValue >= 0 && currentValue <= total) {
+            const usedPercent = clampPercent((currentValue / total) * 100);
+            if (usedPercent !== null) {
+                return { leftPercent: 100 - usedPercent, usedPercent };
+            }
+        }
+    }
+    // Path 3: legacy `percentage` (treated as used percent — GLM convention).
+    const usedPercent = clampPercent(limit.percentage);
+    if (usedPercent === null)
+        return null;
+    return { leftPercent: 100 - usedPercent, usedPercent };
+}
+/** Map a `type` to a coarse category used for label/key derivation. */
+function categoryOf(type) {
+    switch (type) {
+        case "TOKENS_LIMIT":
+            return "token";
+        case "MCP_LIMIT":
+        case "TIME_LIMIT":
+            return "mcp";
+        default:
+            return "other";
+    }
+}
+/**
+ * Derive a stable key and human-readable label for a limit.
+ *
+ * Known windows get friendly labels; anything else falls back to the raw
+ * `type` (or `"Quota"`) so it still renders.
+ */
+function deriveLabel(limit, category) {
+    const number = limit.number;
+    if (category === "token") {
+        // GLM convention: number===5 → 5-hour window; number===7 → weekly.
+        if (number === 5)
+            return { key: "token_5h", label: "5h" };
+        if (number === 7)
+            return { key: "token_week", label: "Week" };
+        if (number !== undefined)
+            return { key: `token_${number}`, label: `${number}` };
+        return { key: "token", label: "Token" };
+    }
+    if (category === "mcp") {
+        return { key: "mcp", label: "MCP" };
+    }
+    // Unknown type — surface it verbatim rather than hide it.
+    const fallback = limit.type || "Quota";
+    return { key: fallback.toLowerCase(), label: fallback };
+}
+/**
+ * Parse one raw limit into a {@link QuotaItem}, or `null` if no percentage
+ * can be computed (the limit is then dropped from display).
+ */
+export function parseLimit(limit) {
+    const percent = computePercentages(limit);
+    if (!percent)
+        return null;
+    const category = categoryOf(limit.type);
+    const { key, label } = deriveLabel(limit, category);
+    const item = {
+        key,
+        label,
+        usedPercent: percent.usedPercent,
+        leftPercent: percent.leftPercent,
+    };
+    // Absolute counters — only some limit kinds carry them (MCP/TIME_LIMIT do,
+    // legacy TOKENS_LIMIT often does not). Surface them when present so the
+    // formatter can show "(used / total)".
+    const usedCount = asFiniteNumber(limit.currentValue);
+    if (usedCount !== null)
+        item.usedCount = usedCount;
+    const totalCount = asFiniteNumber(limit.usage);
+    if (totalCount !== null)
+        item.totalCount = totalCount;
+    const nextResetTime = asFiniteNumber(limit.nextResetTime);
+    if (nextResetTime !== null)
+        item.nextResetTime = nextResetTime;
+    if (Array.isArray(limit.usageDetails) && limit.usageDetails.length > 0) {
+        item.detail = limit.usageDetails;
+    }
+    return item;
+}
+/** Auth-failure detection from the business-layer `msg` (zh/en keywords). */
+function isAuthFailureMessage(msg) {
+    return typeof msg === "string" && /authorization|auth|token|鉴权|授权|未登录/i.test(msg);
+}
+/** Rate-limit detection from the business-layer `msg` (zh/en keywords). */
+function isRateLimitedMessage(msg) {
+    return (typeof msg === "string" &&
+        /rate\s*limit|too many requests|too frequent|frequency|限流|频率|过于频繁|稍后再试/i.test(msg));
+}
+/**
+ * Parse the full API response (already classified by the fetch layer as a
+ * `response` with a status + body) into a {@link QuotaResult}.
+ *
+ * State machine: 429/rate-limit text → `rate_limited`; auth codes/text →
+ * `auth_error`; success with zero parseable items → `unavailable`; otherwise
+ * the items are returned in original order.
+ */
+export function parseQuotaEnvelope(envelope) {
+    // HTTP-level rate limit.
+    if (envelope.status === 429 || isRateLimitedMessage(envelope.text)) {
+        return { kind: "rate_limited" };
+    }
+    const payload = envelope.json;
+    if (!payload || typeof payload !== "object") {
+        return { kind: "unavailable" };
+    }
+    if (payload.success !== true) {
+        if (payload.code === 1001 || payload.code === 401 || isAuthFailureMessage(payload.msg)) {
+            return { kind: "auth_error" };
+        }
+        if (isRateLimitedMessage(payload.msg)) {
+            return { kind: "rate_limited" };
+        }
+        return { kind: "unavailable" };
+    }
+    const limits = Array.isArray(payload.data?.limits) ? payload.data.limits : [];
+    const items = limits
+        .map(parseLimit)
+        .filter((x) => x !== null)
+        .sort(byDisplayOrder);
+    if (items.length === 0) {
+        return { kind: "unavailable" };
+    }
+    return {
+        kind: "success",
+        level: typeof payload.data?.level === "string" ? payload.data.level : "",
+        items,
+    };
+}
+/**
+ * Display ordering: token windows first (5h before Week before other token
+ * windows), then MCP, then anything else — by stable key. Keeps the card
+ * layout predictable regardless of the API's array order.
+ */
+function byDisplayOrder(a, b) {
+    return rankOf(a.key) - rankOf(b.key) || a.key.localeCompare(b.key);
+}
+/** Stable rank for a quota key — lower renders first. */
+function rankOf(key) {
+    if (key === "token_5h")
+        return 0;
+    if (key === "token_week")
+        return 1;
+    if (key.startsWith("token_"))
+        return 2; // other token windows
+    if (key === "mcp")
+        return 3;
+    return 4; // unknown types last
+}
+//# sourceMappingURL=parse.js.map

package/dist/quota/parse.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"parse.js","sourceRoot":"","sources":["../../src/quota/parse.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAIH,6DAA6D;AAC7D,SAAS,cAAc,CAAC,KAAc;IACpC,MAAM,CAAC,GAAG,OAAO,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAC5D,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAED,+EAA+E;AAC/E,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,CAAC,GAAG,cAAc,CAAC,KAAK,CAAC,CAAC;IAChC,IAAI,CAAC,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IAC5B,OAAO,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;AACnD,CAAC;AAED;;;;;;;GAOG;AACH,SAAS,kBAAkB,CAAC,KAAe;IAIzC,MAAM,KAAK,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC1C,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,YAAY,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IAExD,sEAAsE;IACtE,MAAM,cAAc,GAClB,SAAS,KAAK,IAAI,IAAI,YAAY,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,GAAG,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC;IAChF,MAAM,KAAK,GAAG,cAAc,KAAK,IAAI,IAAI,cAAc,GAAG,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,KAAK,CAAC;IAErF,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,GAAG,CAAC,EAAE,CAAC;QAChC,IAAI,SAAS,KAAK,IAAI,IAAI,SAAS,IAAI,CAAC,IAAI,SAAS,IAAI,KAAK,EAAE,CAAC;YAC/D,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,SAAS,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;YAC5D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,GAAG,GAAG,WAAW,EAAE,CAAC;YACzD,CAAC;QACH,CAAC;QACD,IAAI,YAAY,KAAK,IAAI,IAAI,YAAY,IAAI,CAAC,IAAI,YAAY,IAAI,KAAK,EAAE,CAAC;YACxE,MAAM,WAAW,GAAG,YAAY,CAAC,CAAC,YAAY,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;YAC/D,IAAI,WAAW,KAAK,IAAI,EAAE,CAAC;gBACzB,OAAO,EAAE,WAAW,EAAE,GAAG,GAAG,WAAW,EAAE,WAAW,EAAE,CAAC;YACzD,CAAC;QACH,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,MAAM,WAAW,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IACnD,IAAI,WAAW,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC;IACtC,OAAO,EAAE,WAAW,EAAE,GAAG,GAAG,WAAW,EAAE,WAAW,EAAE,CAAC;AACzD,CAAC;AAED,uEAAuE;AACvE,SAAS,UAAU,CAAC,IAAY;IAC9B,QAAQ,IAAI,EAAE,CAAC;QACb,KAAK,cAAc;YACjB,OAAO,OAAO,CAAC;QACjB,KAAK,WAAW,CAAC;QACjB,KAAK,YAAY;YACf,OAAO,KAAK,CAAC;QACf;YACE,OAAO,OAAO,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;;;GAKG;AACH,SAAS,WAAW,CAClB,KAAe,EACf,QAAmC;IAKnC,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC;IAC5B,IAAI,QAAQ,KAAK,OAAO,EAAE,CAAC;QACzB,mEAAmE;QACnE,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,UAAU,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAC1D,IAAI,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,GAAG,EAAE,YAAY,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC9D,IAAI,MAAM,KAAK,SAAS;YAAE,OAAO,EAAE,GAAG,EAAE,SAAS,MAAM,EAAE,EAAE,KAAK,EAAE,GAAG,MAAM,EAAE,EAAE,CAAC;QAChF,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,CAAC;IAC1C,CAAC;IACD,IAAI,QAAQ,KAAK,KAAK,EAAE,CAAC;QACvB,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IACtC,CAAC;IACD,0DAA0D;IAC1D,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,IAAI,OAAO,CAAC;IACvC,OAAO,EAAE,GAAG,EAAE,QAAQ,CAAC,WAAW,EAAE,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC;AAC1D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,UAAU,CAAC,KAAe;IACxC,MAAM,OAAO,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;IAC1C,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IAE1B,MAAM,QAAQ,GAAG,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACxC,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,WAAW,CAAC,KAAK,EAAE,QAAQ,CAAC,CAAC;IAEpD,MAAM,IAAI,GAAc;QACtB,GAAG;QACH,KAAK;QACL,WAAW,EAAE,OAAO,CAAC,WAAW;QAChC,WAAW,EAAE,OAAO,CAAC,WAAW;KACjC,CAAC;IAEF,2EAA2E;IAC3E,wEAAwE;IACxE,uCAAuC;IACvC,MAAM,SAAS,GAAG,cAAc,CAAC,KAAK,CAAC,YAAY,CAAC,CAAC;IACrD,IAAI,SAAS,KAAK,IAAI;QAAE,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;IACnD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IAC/C,IAAI,UAAU,KAAK,IAAI;QAAE,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAEtD,MAAM,aAAa,GAAG,cAAc,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;IAC1D,IAAI,aAAa,KAAK,IAAI;QAAE,IAAI,CAAC,aAAa,GAAG,aAAa,CAAC;IAE/D,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,YAAY,CAAC,IAAI,KAAK,CAAC,YAAY,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACvE,IAAI,CAAC,MAAM,GAAG,KAAK,CAAC,YAAY,CAAC;IACnC,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED,6EAA6E;AAC7E,SAAS,oBAAoB,CAAC,GAAY;IACxC,OAAO,OAAO,GAAG,KAAK,QAAQ,IAAI,qCAAqC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;AACpF,CAAC;AAED,2EAA2E;AAC3E,SAAS,oBAAoB,CAAC,GAAY;IACxC,OAAO,CACL,OAAO,GAAG,KAAK,QAAQ;QACvB,wEAAwE,CAAC,IAAI,CAAC,GAAG,CAAC,CACnF,CAAC;AACJ,CAAC;AAUD;;;;;;;GAOG;AACH,MAAM,UAAU,kBAAkB,CAAC,QAIlC;IACC,yBAAyB;IACzB,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,oBAAoB,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC;QACnE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;IAClC,CAAC;IAED,MAAM,OAAO,GAAG,QAAQ,CAAC,IAA4B,CAAC;IACtD,IAAI,CAAC,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;QAC5C,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IAED,IAAI,OAAO,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;QAC7B,IAAI,OAAO,CAAC,IAAI,KAAK,IAAI,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,IAAI,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACvF,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC;QAChC,CAAC;QACD,IAAI,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;YACtC,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QAClC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IAED,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,IAAK,CAAC,MAAO,CAAC,CAAC,CAAC,EAAE,CAAC;IAChF,MAAM,KAAK,GAAG,MAAM;SACjB,GAAG,CAAC,UAAU,CAAC;SACf,MAAM,CAAC,CAAC,CAAC,EAAkB,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC;SACzC,IAAI,CAAC,cAAc,CAAC,CAAC;IACxB,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IACjC,CAAC;IAED,OAAO;QACL,IAAI,EAAE,SAAS;QACf,KAAK,EAAE,OAAO,OAAO,CAAC,IAAI,EAAE,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;QACxE,KAAK;KACN,CAAC;AACJ,CAAC;AAED;;;;GAIG;AACH,SAAS,cAAc,CAAC,CAAY,EAAE,CAAY;IAChD,OAAO,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;AACrE,CAAC;AAED,yDAAyD;AACzD,SAAS,MAAM,CAAC,GAAW;IACzB,IAAI,GAAG,KAAK,UAAU;QAAE,OAAO,CAAC,CAAC;IACjC,IAAI,GAAG,KAAK,YAAY;QAAE,OAAO,CAAC,CAAC;IACnC,IAAI,GAAG,CAAC,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,CAAC,CAAC,CAAC,sBAAsB;IAC9D,IAAI,GAAG,KAAK,KAAK;QAAE,OAAO,CAAC,CAAC;IAC5B,OAAO,CAAC,CAAC,CAAC,qBAAqB;AACjC,CAAC"}

package/dist/quota/types.d.ts

@@ -0,0 +1,72 @@
+/**
+ * Type definitions for the GLM Coding Plan quota feature.
+ *
+ * The `/quota` slash command queries `bigmodel.cn` / `api.z.ai` for the
+ * current account's usage limits and renders them as a multi-line card.
+ * These types model the raw API response and the normalised shape consumed
+ * by the formatter.
+ */
+/** A single raw limit entry from the GLM quota API (`data.limits[]`). */
+export interface RawLimit {
+    /** Limit family — "TOKENS_LIMIT" | "TIME_LIMIT" | "MCP_LIMIT" | <unknown>. */
+    type: string;
+    /** Window-count sub-identifier; meaning varies by backend (unused for classification). */
+    unit?: number;
+    /** Window span; GLM uses 5 for the 5-hour window, 7 for the weekly window. */
+    number?: number;
+    /** Total allowance for the window (absolute counter). */
+    usage?: number;
+    /** Absolute remaining counter (preferred for percentage). */
+    remaining?: number;
+    /** Absolute used counter (preferred for percentage alongside `usage`). */
+    currentValue?: number;
+    /** Legacy percentage field — historically represents *used* percent. */
+    percentage?: number;
+    /** Reset timestamp in epoch milliseconds. */
+    nextResetTime?: number;
+    /** Per-model usage breakdown (present on MCP/TIME limits). */
+    usageDetails?: {
+        modelCode: string;
+        usage: number;
+    }[];
+}
+/**
+ * Normalised quota item — one rendered line.
+ *
+ * Every raw limit that yields a valid percentage becomes a `QuotaItem`;
+ * limits with no computable percentage are silently dropped.
+ */
+export interface QuotaItem {
+    /** Stable key derived from type+number, e.g. "token_5h" / "mcp". */
+    key: string;
+    /** Human-readable label for the line, e.g. "5h" / "MCP" / "Week". */
+    label: string;
+    /** Used percentage, clamped to [0, 100]. */
+    usedPercent: number;
+    /** Remaining percentage = 100 - usedPercent. */
+    leftPercent: number;
+    /** Absolute used count (only some limits carry this, e.g. MCP/TIME). */
+    usedCount?: number;
+    /** Absolute total allowance (only some limits carry this). */
+    totalCount?: number;
+    /** Reset timestamp in epoch milliseconds, if present. */
+    nextResetTime?: number;
+    /** Per-model usage breakdown, if present (rendered as indented sub-lines). */
+    detail?: {
+        modelCode: string;
+        usage: number;
+    }[];
+}
+/** Top-level parsed result — a 4-state sum type. */
+export type QuotaResult = {
+    kind: "success";
+    level: string;
+    items: QuotaItem[];
+} | {
+    kind: "auth_error";
+} | {
+    kind: "rate_limited";
+} | {
+    kind: "unavailable";
+};
+//# sourceMappingURL=types.d.ts.map

package/dist/quota/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../src/quota/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,yEAAyE;AACzE,MAAM,WAAW,QAAQ;IACvB,8EAA8E;IAC9E,IAAI,EAAE,MAAM,CAAC;IACb,0FAA0F;IAC1F,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,yDAAyD;IACzD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,6DAA6D;IAC7D,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0EAA0E;IAC1E,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB,wEAAwE;IACxE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,6CAA6C;IAC7C,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8DAA8D;IAC9D,YAAY,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACvD;AAED;;;;;GAKG;AACH,MAAM,WAAW,SAAS;IACxB,oEAAoE;IACpE,GAAG,EAAE,MAAM,CAAC;IACZ,qEAAqE;IACrE,KAAK,EAAE,MAAM,CAAC;IACd,4CAA4C;IAC5C,WAAW,EAAE,MAAM,CAAC;IACpB,gDAAgD;IAChD,WAAW,EAAE,MAAM,CAAC;IACpB,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,8DAA8D;IAC9D,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,yDAAyD;IACzD,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,8EAA8E;IAC9E,MAAM,CAAC,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,KAAK,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACjD;AAED,oDAAoD;AACpD,MAAM,MAAM,WAAW,GACnB;IAAE,IAAI,EAAE,SAAS,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,SAAS,EAAE,CAAA;CAAE,GACtD;IAAE,IAAI,EAAE,YAAY,CAAA;CAAE,GACtB;IAAE,IAAI,EAAE,cAAc,CAAA;CAAE,GACxB;IAAE,IAAI,EAAE,aAAa,CAAA;CAAE,CAAC"}

package/dist/quota/types.js

@@ -0,0 +1,10 @@
+/**
+ * Type definitions for the GLM Coding Plan quota feature.
+ *
+ * The `/quota` slash command queries `bigmodel.cn` / `api.z.ai` for the
+ * current account's usage limits and renders them as a multi-line card.
+ * These types model the raw API response and the normalised shape consumed
+ * by the formatter.
+ */
+export {};
+//# sourceMappingURL=types.js.map

package/dist/quota/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../src/quota/types.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG"}

package/dist/remote/broadcast.d.ts

@@ -0,0 +1,47 @@
+/**
+ * Multi-client broadcast layer for remote access.
+ *
+ * The bridge historically served ONE ACP client (the editor over stdio). With
+ * remote access enabled, additional clients attach over WebSocket; every
+ * agent-originated message must reach all of them. This module owns the client
+ * registry and a stable proxy that quacks like an `AgentContext`:
+ *
+ * - `notify` fans out to every client; a single dead/slow client is warned
+ *   about and never fails the others.
+ * - `request` (permission / elicitation) is sent to every client and the FIRST
+ *   response wins. Losers are aborted via `cancellationSignal`, which makes
+ *   the SDK emit `$/cancel_request` so the losing editor dismisses its dialog
+ *   (verified against Zed's ACP client).
+ *
+ * Loser promises settle late (the peer answers the cancellation eventually) —
+ * every raced promise carries a no-op catch so late settlements can't surface
+ * as unhandledRejection (Node ≥15 crashes on those by default).
+ */
+import type * as acp from "@agentclientprotocol/sdk";
+/** The AgentContext surface the bridge actually calls. */
+export interface ClientLike {
+    notify(method: string, params?: unknown): Promise<void>;
+    request(method: string, params?: unknown, options?: acp.SendRequestOptions): Promise<unknown>;
+}
+/**
+ * Track every connection opened on the app (stdio editor + remote WebSocket)
+ * in the registry, removing each on close. Wired once by the entry point
+ * BEFORE `connect()` so the stdio connection is captured too.
+ */
+export declare function trackConnections(app: acp.AgentApp, clients: ClientRegistry): void;
+/**
+ * Registry of connected ACP clients (stdio editor + remote WebSocket clients).
+ * Membership is managed by the entry point via the SDK's per-connection
+ * lifecycle; the broadcast proxy reads membership live on every call.
+ */
+export declare class ClientRegistry {
+    private readonly clients;
+    private proxy;
+    add(cx: ClientLike): void;
+    remove(cx: ClientLike): void;
+    get size(): number;
+    /** Stable broadcast proxy satisfying the `AgentContext` call surface. */
+    broadcast(): acp.AgentContext;
+    snapshot(): ClientLike[];
+}
+//# sourceMappingURL=broadcast.d.ts.map

package/dist/remote/broadcast.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcast.d.ts","sourceRoot":"","sources":["../../src/remote/broadcast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,KAAK,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAIrD,0DAA0D;AAC1D,MAAM,WAAW,UAAU;IACzB,MAAM,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,EAAE,GAAG,CAAC,kBAAkB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC/F;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE,OAAO,EAAE,cAAc,GAAG,IAAI,CAKjF;AAQD;;;;GAIG;AACH,qBAAa,cAAc;IACzB,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAyB;IACjD,OAAO,CAAC,KAAK,CAAiC;IAE9C,GAAG,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAIzB,MAAM,CAAC,EAAE,EAAE,UAAU,GAAG,IAAI;IAI5B,IAAI,IAAI,IAAI,MAAM,CAEjB;IAED,yEAAyE;IACzE,SAAS,IAAI,GAAG,CAAC,YAAY;IAK7B,QAAQ,IAAI,UAAU,EAAE;CAGzB"}

package/dist/remote/broadcast.js

@@ -0,0 +1,121 @@
+/**
+ * Multi-client broadcast layer for remote access.
+ *
+ * The bridge historically served ONE ACP client (the editor over stdio). With
+ * remote access enabled, additional clients attach over WebSocket; every
+ * agent-originated message must reach all of them. This module owns the client
+ * registry and a stable proxy that quacks like an `AgentContext`:
+ *
+ * - `notify` fans out to every client; a single dead/slow client is warned
+ *   about and never fails the others.
+ * - `request` (permission / elicitation) is sent to every client and the FIRST
+ *   response wins. Losers are aborted via `cancellationSignal`, which makes
+ *   the SDK emit `$/cancel_request` so the losing editor dismisses its dialog
+ *   (verified against Zed's ACP client).
+ *
+ * Loser promises settle late (the peer answers the cancellation eventually) —
+ * every raced promise carries a no-op catch so late settlements can't surface
+ * as unhandledRejection (Node ≥15 crashes on those by default).
+ */
+import { warn } from "../utils.js";
+/**
+ * Track every connection opened on the app (stdio editor + remote WebSocket)
+ * in the registry, removing each on close. Wired once by the entry point
+ * BEFORE `connect()` so the stdio connection is captured too.
+ */
+export function trackConnections(app, clients) {
+    app.onConnect((conn) => {
+        clients.add(conn.client);
+        void conn.closed.then(() => clients.remove(conn.client));
+    });
+}
+/**
+ * Registry of connected ACP clients (stdio editor + remote WebSocket clients).
+ * Membership is managed by the entry point via the SDK's per-connection
+ * lifecycle; the broadcast proxy reads membership live on every call.
+ */
+export class ClientRegistry {
+    clients = new Set();
+    proxy = null;
+    add(cx) {
+        this.clients.add(cx);
+    }
+    remove(cx) {
+        this.clients.delete(cx);
+    }
+    get size() {
+        return this.clients.size;
+    }
+    /** Stable broadcast proxy satisfying the `AgentContext` call surface. */
+    broadcast() {
+        if (!this.proxy)
+            this.proxy = createBroadcastProxy(this);
+        return this.proxy;
+    }
+    snapshot() {
+        return Array.from(this.clients);
+    }
+}
+/** Build the stable proxy once per registry (module factory: no `this` alias). */
+function createBroadcastProxy(registry) {
+    const proxy = Object.create(null);
+    proxy.notify = (method, params) => notifyAll(registry, method, params);
+    proxy.request = (method, params, options) => requestAny(registry, method, params, options);
+    return proxy;
+}
+async function notifyAll(registry, method, params) {
+    const results = await Promise.allSettled(registry.snapshot().map((cx) => cx.notify(method, params)));
+    for (const r of results) {
+        if (r.status === "rejected") {
+            warn(`broadcast: notify ${method} failed on one client: ` +
+                `${r.reason instanceof Error ? r.reason.message : String(r.reason)}`);
+        }
+    }
+}
+async function requestAny(registry, method, params, options) {
+    const clients = registry.snapshot();
+    if (clients.length === 0) {
+        throw new Error(`broadcast: no connected clients (${method})`);
+    }
+    const controllers = clients.map(() => new AbortController());
+    // Link a caller-provided signal: aborting it cancels EVERY inner request.
+    const outerSignal = options?.cancellationSignal;
+    const onOuterAbort = () => {
+        for (const c of controllers)
+            c.abort();
+    };
+    if (outerSignal) {
+        if (outerSignal.aborted)
+            onOuterAbort();
+        else
+            outerSignal.addEventListener("abort", onOuterAbort, { once: true });
+    }
+    const attempts = clients.map((cx, i) => {
+        const promise = cx.request(method, params, {
+            ...options,
+            cancellationSignal: controllers[i].signal,
+        });
+        // Mark handled: losing promises settle AFTER Promise.any is done.
+        promise.catch(() => undefined);
+        return promise.then((value) => ({ value, index: i }));
+    });
+    try {
+        const winner = await Promise.any(attempts);
+        for (let i = 0; i < controllers.length; i++) {
+            if (i !== winner.index)
+                controllers[i].abort();
+        }
+        return winner.value;
+    }
+    catch (e) {
+        // All clients failed — surface the first error like a single client would.
+        if (e instanceof AggregateError)
+            throw e.errors[0] ?? e;
+        throw e;
+    }
+    finally {
+        if (outerSignal)
+            outerSignal.removeEventListener("abort", onOuterAbort);
+    }
+}
+//# sourceMappingURL=broadcast.js.map

package/dist/remote/broadcast.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"broadcast.js","sourceRoot":"","sources":["../../src/remote/broadcast.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAIH,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AAQnC;;;;GAIG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAiB,EAAE,OAAuB;IACzE,GAAG,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,EAAE;QACrB,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QACzB,KAAK,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC;IAC3D,CAAC,CAAC,CAAC;AACL,CAAC;AAQD;;;;GAIG;AACH,MAAM,OAAO,cAAc;IACR,OAAO,GAAG,IAAI,GAAG,EAAc,CAAC;IACzC,KAAK,GAA4B,IAAI,CAAC;IAE9C,GAAG,CAAC,EAAc;QAChB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACvB,CAAC;IAED,MAAM,CAAC,EAAc;QACnB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC;IAC3B,CAAC;IAED,yEAAyE;IACzE,SAAS;QACP,IAAI,CAAC,IAAI,CAAC,KAAK;YAAE,IAAI,CAAC,KAAK,GAAG,oBAAoB,CAAC,IAAI,CAAC,CAAC;QACzD,OAAO,IAAI,CAAC,KAAK,CAAC;IACpB,CAAC;IAED,QAAQ;QACN,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;IAClC,CAAC;CACF;AAED,kFAAkF;AAClF,SAAS,oBAAoB,CAAC,QAAwB;IACpD,MAAM,KAAK,GAA4B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC3D,KAAK,CAAC,MAAM,GAAG,CAAC,MAAc,EAAE,MAAgB,EAAiB,EAAE,CACjE,SAAS,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC,KAAK,CAAC,OAAO,GAAG,CACd,MAAc,EACd,MAAgB,EAChB,OAAgC,EACd,EAAE,CAAC,UAAU,CAAC,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,CAAC,CAAC;IACrE,OAAO,KAAoC,CAAC;AAC9C,CAAC;AAED,KAAK,UAAU,SAAS,CACtB,QAAwB,EACxB,MAAc,EACd,MAAgB;IAEhB,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,UAAU,CACtC,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAC3D,CAAC;IACF,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;QACxB,IAAI,CAAC,CAAC,MAAM,KAAK,UAAU,EAAE,CAAC;YAC5B,IAAI,CACF,qBAAqB,MAAM,yBAAyB;gBAClD,GAAG,CAAC,CAAC,MAAM,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CACvE,CAAC;QACJ,CAAC;IACH,CAAC;AACH,CAAC;AAED,KAAK,UAAU,UAAU,CACvB,QAAwB,EACxB,MAAc,EACd,MAAgB,EAChB,OAAgC;IAEhC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAC;IACpC,IAAI,OAAO,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACzB,MAAM,IAAI,KAAK,CAAC,oCAAoC,MAAM,GAAG,CAAC,CAAC;IACjE,CAAC;IACD,MAAM,WAAW,GAAG,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,IAAI,eAAe,EAAE,CAAC,CAAC;IAC7D,0EAA0E;IAC1E,MAAM,WAAW,GAAG,OAAO,EAAE,kBAAkB,CAAC;IAChD,MAAM,YAAY,GAAG,GAAG,EAAE;QACxB,KAAK,MAAM,CAAC,IAAI,WAAW;YAAE,CAAC,CAAC,KAAK,EAAE,CAAC;IACzC,CAAC,CAAC;IACF,IAAI,WAAW,EAAE,CAAC;QAChB,IAAI,WAAW,CAAC,OAAO;YAAE,YAAY,EAAE,CAAC;;YACnC,WAAW,CAAC,gBAAgB,CAAC,OAAO,EAAE,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3E,CAAC;IACD,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,EAAE;QACrC,MAAM,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,EAAE,MAAM,EAAE;YACzC,GAAG,OAAO;YACV,kBAAkB,EAAE,WAAW,CAAC,CAAC,CAAE,CAAC,MAAM;SAC3C,CAAC,CAAC;QACH,kEAAkE;QAClE,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;QAC/B,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,KAAK,EAAc,EAAE,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IACH,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC3C,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,WAAW,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAC5C,IAAI,CAAC,KAAK,MAAM,CAAC,KAAK;gBAAE,WAAW,CAAC,CAAC,CAAE,CAAC,KAAK,EAAE,CAAC;QAClD,CAAC;QACD,OAAO,MAAM,CAAC,KAAK,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,2EAA2E;QAC3E,IAAI,CAAC,YAAY,cAAc;YAAE,MAAM,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC;IACV,CAAC;YAAS,CAAC;QACT,IAAI,WAAW;YAAE,WAAW,CAAC,mBAAmB,CAAC,OAAO,EAAE,YAAY,CAAC,CAAC;IAC1E,CAAC;AACH,CAAC"}

package/dist/remote/config.d.ts

@@ -0,0 +1,32 @@
+/**
+ * Remote access configuration from environment variables.
+ *
+ * Remote access is opt-in via ZCODE_ACP_REMOTE=1 and REQUIRES a token — the
+ * endpoint is expected to sit behind a public tunnel (Cloudflare Tunnel, frp),
+ * so "loopback-only" is never a safe assumption here. A missing token disables
+ * the feature with a warning instead of failing the bridge: the stdio link to
+ * the editor must keep working no matter what.
+ *
+ * Variables:
+ *   ZCODE_ACP_REMOTE=1            enable the remote endpoint (gate)
+ *   ZCODE_ACP_REMOTE_TOKEN=<s>    auth token (mandatory when enabled)
+ *   ZCODE_ACP_HUB_PORT=8377       hub's fixed port (the one a tunnel maps)
+ *   ZCODE_ACP_HUB_HOST=127.0.0.1  hub bind address (e.g. 0.0.0.0 for a
+ *                                 containerized tunnel agent)
+ *   ZCODE_ACP_REMOTE_PORT=8378    bridge endpoint start port (auto-increment
+ *                                 when taken; loopback only)
+ */
+export interface RemoteConfig {
+    token: string;
+    hubPort: number;
+    hubHost: string;
+    bridgePort: number;
+}
+export declare const DEFAULT_HUB_PORT = 8377;
+export declare const DEFAULT_BRIDGE_PORT = 8378;
+export declare const DEFAULT_HUB_HOST = "127.0.0.1";
+/** Parse remote config; null = disabled (or misconfigured → warned). */
+export declare function parseRemoteConfig(env?: NodeJS.ProcessEnv): RemoteConfig | null;
+/** Parse hub-side config for the standalone `zcode-acp-hub` bin. */
+export declare function parseHubConfig(env?: NodeJS.ProcessEnv): RemoteConfig | null;
+//# sourceMappingURL=config.d.ts.map

package/dist/remote/config.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/remote/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAIH,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;CACpB;AAED,eAAO,MAAM,gBAAgB,OAAO,CAAC;AACrC,eAAO,MAAM,mBAAmB,OAAO,CAAC;AACxC,eAAO,MAAM,gBAAgB,cAAc,CAAC;AAY5C,wEAAwE;AACxE,wBAAgB,iBAAiB,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,GAAG,IAAI,CAiB3F;AAED,oEAAoE;AACpE,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,YAAY,GAAG,IAAI,CAYxF"}

package/dist/remote/config.js

@@ -0,0 +1,65 @@
+/**
+ * Remote access configuration from environment variables.
+ *
+ * Remote access is opt-in via ZCODE_ACP_REMOTE=1 and REQUIRES a token — the
+ * endpoint is expected to sit behind a public tunnel (Cloudflare Tunnel, frp),
+ * so "loopback-only" is never a safe assumption here. A missing token disables
+ * the feature with a warning instead of failing the bridge: the stdio link to
+ * the editor must keep working no matter what.
+ *
+ * Variables:
+ *   ZCODE_ACP_REMOTE=1            enable the remote endpoint (gate)
+ *   ZCODE_ACP_REMOTE_TOKEN=<s>    auth token (mandatory when enabled)
+ *   ZCODE_ACP_HUB_PORT=8377       hub's fixed port (the one a tunnel maps)
+ *   ZCODE_ACP_HUB_HOST=127.0.0.1  hub bind address (e.g. 0.0.0.0 for a
+ *                                 containerized tunnel agent)
+ *   ZCODE_ACP_REMOTE_PORT=8378    bridge endpoint start port (auto-increment
+ *                                 when taken; loopback only)
+ */
+import { warn } from "../utils.js";
+export const DEFAULT_HUB_PORT = 8377;
+export const DEFAULT_BRIDGE_PORT = 8378;
+export const DEFAULT_HUB_HOST = "127.0.0.1";
+function parsePort(raw, fallback, envName) {
+    if (!raw)
+        return fallback;
+    const port = Number.parseInt(raw, 10);
+    if (!Number.isInteger(port) || port < 1 || port > 65535) {
+        warn(`remote: invalid ${envName}="${raw}", falling back to ${fallback}`);
+        return fallback;
+    }
+    return port;
+}
+/** Parse remote config; null = disabled (or misconfigured → warned). */
+export function parseRemoteConfig(env = process.env) {
+    const gate = (env.ZCODE_ACP_REMOTE ?? "").trim().toLowerCase();
+    if (!["1", "true", "yes", "on"].includes(gate))
+        return null;
+    const token = (env.ZCODE_ACP_REMOTE_TOKEN ?? "").trim();
+    if (!token) {
+        warn("remote: ZCODE_ACP_REMOTE is enabled but ZCODE_ACP_REMOTE_TOKEN is missing — " +
+            "remote access disabled (stdio unaffected)");
+        return null;
+    }
+    return {
+        token,
+        hubPort: parsePort(env.ZCODE_ACP_HUB_PORT, DEFAULT_HUB_PORT, "ZCODE_ACP_HUB_PORT"),
+        hubHost: (env.ZCODE_ACP_HUB_HOST ?? "").trim() || DEFAULT_HUB_HOST,
+        bridgePort: parsePort(env.ZCODE_ACP_REMOTE_PORT, DEFAULT_BRIDGE_PORT, "ZCODE_ACP_REMOTE_PORT"),
+    };
+}
+/** Parse hub-side config for the standalone `zcode-acp-hub` bin. */
+export function parseHubConfig(env = process.env) {
+    const token = (env.ZCODE_ACP_REMOTE_TOKEN ?? "").trim();
+    if (!token) {
+        warn("hub: ZCODE_ACP_REMOTE_TOKEN is required — refusing to start without auth");
+        return null;
+    }
+    return {
+        token,
+        hubPort: parsePort(env.ZCODE_ACP_HUB_PORT, DEFAULT_HUB_PORT, "ZCODE_ACP_HUB_PORT"),
+        hubHost: (env.ZCODE_ACP_HUB_HOST ?? "").trim() || DEFAULT_HUB_HOST,
+        bridgePort: parsePort(env.ZCODE_ACP_REMOTE_PORT, DEFAULT_BRIDGE_PORT, "ZCODE_ACP_REMOTE_PORT"),
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/remote/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/remote/config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,IAAI,EAAE,MAAM,aAAa,CAAC;AASnC,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC,MAAM,CAAC,MAAM,mBAAmB,GAAG,IAAI,CAAC;AACxC,MAAM,CAAC,MAAM,gBAAgB,GAAG,WAAW,CAAC;AAE5C,SAAS,SAAS,CAAC,GAAuB,EAAE,QAAgB,EAAE,OAAe;IAC3E,IAAI,CAAC,GAAG;QAAE,OAAO,QAAQ,CAAC;IAC1B,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,KAAK,EAAE,CAAC;QACxD,IAAI,CAAC,mBAAmB,OAAO,KAAK,GAAG,sBAAsB,QAAQ,EAAE,CAAC,CAAC;QACzE,OAAO,QAAQ,CAAC;IAClB,CAAC;IACD,OAAO,IAAI,CAAC;AACd,CAAC;AAED,wEAAwE;AACxE,MAAM,UAAU,iBAAiB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACpE,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,gBAAgB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC;IAC/D,IAAI,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;QAAE,OAAO,IAAI,CAAC;IAC5D,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CACF,8EAA8E;YAC5E,2CAA2C,CAC9C,CAAC;QACF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,oBAAoB,CAAC;QAClF,OAAO,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB;QAClE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,qBAAqB,EAAE,mBAAmB,EAAE,uBAAuB,CAAC;KAC/F,CAAC;AACJ,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,sBAAsB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACxD,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,IAAI,CAAC,0EAA0E,CAAC,CAAC;QACjF,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO;QACL,KAAK;QACL,OAAO,EAAE,SAAS,CAAC,GAAG,CAAC,kBAAkB,EAAE,gBAAgB,EAAE,oBAAoB,CAAC;QAClF,OAAO,EAAE,CAAC,GAAG,CAAC,kBAAkB,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,gBAAgB;QAClE,UAAU,EAAE,SAAS,CAAC,GAAG,CAAC,qBAAqB,EAAE,mBAAmB,EAAE,uBAAuB,CAAC;KAC/F,CAAC;AACJ,CAAC"}

package/dist/remote/endpoint.d.ts

@@ -0,0 +1,30 @@
+/**
+ * Loopback ACP endpoint + hub registration for remote access.
+ *
+ * When ZCODE_ACP_REMOTE is enabled, the bridge serves the SAME AgentApp that
+ * handles the stdio editor connection on a loopback HTTP/WebSocket endpoint
+ * (SDK AcpServer transport). Each remote connection gets its own JSON-RPC id
+ * space; fan-out to all clients is handled by the broadcast registry, not
+ * here. This endpoint is intentionally NOT exposed to the network — the hub
+ * (`zcode-acp-hub`) is the single public entry and proxies into it.
+ *
+ * The bridge also registers itself with the hub (spawning one if none is
+ * listening) and re-registers every 10s as a heartbeat carrying fresh session
+ * summaries. Everything here is best-effort: any failure warns and disables
+ * the remote side without touching the stdio link.
+ */
+import type * as acp from "@agentclientprotocol/sdk";
+import type { ZcodeAcpServer } from "../server.js";
+import type { RemoteConfig } from "./config.js";
+export interface RemoteEndpointHandle {
+    /** Actual loopback port the endpoint bound (may differ from config). */
+    port: number;
+    /** Stop the endpoint and unregister from the hub (best-effort). */
+    stop(): Promise<void>;
+}
+/**
+ * Start the loopback endpoint and hub registration. Never throws — failures
+ * warn and leave the bridge running stdio-only.
+ */
+export declare function startRemoteEndpoint(server: ZcodeAcpServer, app: acp.AgentApp, config: RemoteConfig): Promise<RemoteEndpointHandle | null>;
+//# sourceMappingURL=endpoint.d.ts.map

package/dist/remote/endpoint.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"endpoint.d.ts","sourceRoot":"","sources":["../../src/remote/endpoint.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AAMH,OAAO,KAAK,KAAK,GAAG,MAAM,0BAA0B,CAAC;AAQrD,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,cAAc,CAAC;AAEnD,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAShD,MAAM,WAAW,oBAAoB;IACnC,wEAAwE;IACxE,IAAI,EAAE,MAAM,CAAC;IACb,mEAAmE;IACnE,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC;CACvB;AA8BD;;;GAGG;AACH,wBAAsB,mBAAmB,CACvC,MAAM,EAAE,cAAc,EACtB,GAAG,EAAE,GAAG,CAAC,QAAQ,EACjB,MAAM,EAAE,YAAY,GACnB,OAAO,CAAC,oBAAoB,GAAG,IAAI,CAAC,CAiKtC"}