@almadar/workspace 0.5.0 → 0.7.0

package/dist/types.d.ts

@@ -326,6 +326,18 @@ export interface AccountConfig {
 export interface ProviderCredential {
     apiKey: string;
 }
+/**
+ * Hosted-builder auth token, persisted to `~/.almadar/auth.json` (chmod 600).
+ * The Firebase ID token the local server / sync sends to the hosted builder for
+ * the signed-in ("studio") account. Distinct from {@link ProviderCredential}
+ * (BYO LLM key) and {@link AccountIdentity} (non-secret uid/email overlay).
+ */
+export interface AuthToken {
+    token: string;
+    refreshToken?: string;
+    /** ISO expiry of the ID token (~1h from issue). */
+    expiresAt?: string;
+}
 /** Studio-synced identity overlay, persisted to `~/.almadar/account.json`. Empty until login. */
 export interface AccountIdentity {
     uid: string;
@@ -353,15 +365,27 @@ export interface AccountService {
     getCredential(provider: string): Promise<ProviderCredential | null>;
     setCredential(provider: string, cred: ProviderCredential): Promise<void>;
     listCredentialedProviders(): Promise<string[]>;
+    /** Remove a stored provider credential. Idempotent (no-op if absent). */
+    clearCredential(provider: string): Promise<void>;
     readAccount(): Promise<AccountIdentity | null>;
     writeAccount(identity: AccountIdentity): Promise<void>;
+    /** Read the stored hosted-builder auth token, or null when signed out. */
+    getAuthToken(): Promise<AuthToken | null>;
+    /** Persist the hosted-builder auth token (chmod 600). */
+    setAuthToken(token: AuthToken): Promise<void>;
+    /** Remove the stored auth token (sign out). Idempotent. */
+    clearAuthToken(): Promise<void>;
     /**
      * Resolve the explicit {@link ProviderConfig} for `provider` (stored apiKey +
      * config baseUrl/model overrides), ready to pass into `@almadar/llm` / rabit.
      * Returns null when no credential is stored for `provider`.
      */
     resolveProviderConfig(provider: string): Promise<ProviderConfig | null>;
-    /** True once setup completed AND at least one provider has a stored credential. */
+    /**
+     * True once setup completed AND the account can actually run AI — either a
+     * stored provider credential (BYO-key) or a hosted-builder auth token
+     * (signed-in studio account).
+     */
     isConfigured(): Promise<boolean>;
     dispose(): Promise<void>;
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@almadar/workspace",
-  "version": "0.5.0",
+  "version": "0.7.0",
   "description": "Storage-agnostic workspace primitives shared by Almadar consumers. One service, six exports, hidden paths, single observer. See docs/Almadar_Workspace.md.",
   "type": "module",
   "main": "./dist/index.js",