@almadar/workspace 0.4.1 → 0.6.0

package/dist/open-workspace.d.ts

@@ -8,4 +8,7 @@
  * @packageDocumentation
  */
 import type { OpenWorkspaceOptions, WorkspaceService } from './types.js';
+export declare function openWorkspace(opts: OpenWorkspaceOptions & {
+    create: false;
+}): Promise<WorkspaceService | null>;
 export declare function openWorkspace(opts: OpenWorkspaceOptions): Promise<WorkspaceService>;

package/dist/types.d.ts

@@ -178,6 +178,16 @@ export interface OpenWorkspaceOptions {
     github?: GitHubConfig;
     /** Fallback fetcher used when the local cache misses. */
     restore?: RestoreBackend;
+    /**
+     * When `false`, open is a pure read: resolve an EXISTING workspace (local
+     * resume, or restore that actually yields files) but NEVER mint a fresh one.
+     * Returns `null` when the appId exists in neither the local cache nor the
+     * restore backend — so callers can 404 instead of silently creating (and
+     * listing) a phantom workspace. Defaults to `true` (mint on miss, the
+     * historical behaviour). A `github`-clone-on-miss still requires
+     * `create !== false` (remote existence can't be verified without cloning).
+     */
+    create?: boolean;
     /** Storage selector. `'memory'` is for tests; `'local'` is default. */
     backend?: 'local' | 'memory';
     /** Optional project name baked into the mint-time schema template. */
@@ -316,6 +326,18 @@ export interface AccountConfig {
 export interface ProviderCredential {
     apiKey: string;
 }
+/**
+ * Hosted-builder auth token, persisted to `~/.almadar/auth.json` (chmod 600).
+ * The Firebase ID token the local server / sync sends to the hosted builder for
+ * the signed-in ("studio") account. Distinct from {@link ProviderCredential}
+ * (BYO LLM key) and {@link AccountIdentity} (non-secret uid/email overlay).
+ */
+export interface AuthToken {
+    token: string;
+    refreshToken?: string;
+    /** ISO expiry of the ID token (~1h from issue). */
+    expiresAt?: string;
+}
 /** Studio-synced identity overlay, persisted to `~/.almadar/account.json`. Empty until login. */
 export interface AccountIdentity {
     uid: string;
@@ -345,13 +367,23 @@ export interface AccountService {
     listCredentialedProviders(): Promise<string[]>;
     readAccount(): Promise<AccountIdentity | null>;
     writeAccount(identity: AccountIdentity): Promise<void>;
+    /** Read the stored hosted-builder auth token, or null when signed out. */
+    getAuthToken(): Promise<AuthToken | null>;
+    /** Persist the hosted-builder auth token (chmod 600). */
+    setAuthToken(token: AuthToken): Promise<void>;
+    /** Remove the stored auth token (sign out). Idempotent. */
+    clearAuthToken(): Promise<void>;
     /**
      * Resolve the explicit {@link ProviderConfig} for `provider` (stored apiKey +
      * config baseUrl/model overrides), ready to pass into `@almadar/llm` / rabit.
      * Returns null when no credential is stored for `provider`.
      */
     resolveProviderConfig(provider: string): Promise<ProviderConfig | null>;
-    /** True once setup completed AND at least one provider has a stored credential. */
+    /**
+     * True once setup completed AND the account can actually run AI — either a
+     * stored provider credential (BYO-key) or a hosted-builder auth token
+     * (signed-in studio account).
+     */
     isConfigured(): Promise<boolean>;
     dispose(): Promise<void>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/workspace",
-  "version": "0.4.1",
+  "version": "0.6.0",
   "description": "Storage-agnostic workspace primitives shared by Almadar consumers. One service, six exports, hidden paths, single observer. See docs/Almadar_Workspace.md.",
   "type": "module",
   "main": "./dist/index.js",