@andorra-labs/code 0.0.0-stage → 0.1.4

package/dist/vendor/engine/runtime/coding-agent/cli/args.js

@@ -0,0 +1,439 @@
+/**
+ * CLI argument parsing and help display
+ */
+import chalk from "chalk";
+import { APP_NAME, CONFIG_DIR_NAME, ENV_AGENT_DIR, ENV_SESSION_DIR } from "../config.js";
+const VALID_THINKING_LEVELS = ["off", "minimal", "low", "medium", "high", "xhigh", "max"];
+export function andorraIsValidThinkingLevel(level) {
+    return VALID_THINKING_LEVELS.includes(level);
+}
+export function andorraNormalizeSessionName(value) {
+    const name = value.trim();
+    return name.length > 0 ? name : undefined;
+}
+export function andorraParseArgs(args) {
+    const result = {
+        messages: [],
+        fileArgs: [],
+        unknownFlags: new Map(),
+        diagnostics: [],
+    };
+    for (let i = 0; i < args.length; i++) {
+        const arg = args[i];
+        if (arg === "--") {
+            for (const positionalArg of args.slice(i + 1)) {
+                if (positionalArg.startsWith("@")) {
+                    result.fileArgs.push(positionalArg.slice(1));
+                }
+                else {
+                    result.messages.push(positionalArg);
+                }
+            }
+            break;
+        }
+        else if (arg === "--help" || arg === "-h") {
+            result.help = true;
+        }
+        else if (arg === "--version" || arg === "-v") {
+            result.version = true;
+        }
+        else if (arg === "--mode" && i + 1 < args.length) {
+            const mode = args[++i];
+            if (mode === "text" || mode === "json" || mode === "rpc") {
+                result.mode = mode;
+            }
+        }
+        else if (arg === "--continue" || arg === "-c") {
+            result.continue = true;
+        }
+        else if (arg === "--resume" || arg === "-r") {
+            result.resume = true;
+        }
+        else if (arg === "--provider" && i + 1 < args.length) {
+            result.provider = args[++i];
+        }
+        else if (arg === "--model" && i + 1 < args.length) {
+            result.model = args[++i];
+        }
+        else if (arg === "--api-key" && i + 1 < args.length) {
+            result.apiKey = args[++i];
+        }
+        else if (arg === "--system-prompt" && i + 1 < args.length) {
+            result.systemPrompt = args[++i];
+        }
+        else if (arg === "--append-system-prompt" && i + 1 < args.length) {
+            result.appendSystemPrompt = result.appendSystemPrompt ?? [];
+            result.appendSystemPrompt.push(args[++i]);
+        }
+        else if (arg === "--name" || arg === "-n") {
+            if (i + 1 < args.length) {
+                result.name = args[++i];
+            }
+            else {
+                result.diagnostics.push({ type: "error", message: "--name requires a value" });
+            }
+        }
+        else if (arg === "--no-session") {
+            result.noSession = true;
+        }
+        else if (arg === "--session" && i + 1 < args.length) {
+            result.session = args[++i];
+        }
+        else if (arg === "--session-id" && i + 1 < args.length) {
+            result.sessionId = args[++i];
+        }
+        else if (arg === "--fork" && i + 1 < args.length) {
+            result.fork = args[++i];
+        }
+        else if (arg === "--session-dir" && i + 1 < args.length) {
+            result.sessionDir = args[++i];
+        }
+        else if (arg === "--models" && i + 1 < args.length) {
+            result.models = args[++i].split(",").map((s) => s.trim());
+        }
+        else if (arg === "--no-tools" || arg === "-nt") {
+            result.noTools = true;
+        }
+        else if (arg === "--no-builtin-tools" || arg === "-nbt") {
+            result.noBuiltinTools = true;
+        }
+        else if ((arg === "--tools" || arg === "-t") && i + 1 < args.length) {
+            result.tools = args[++i]
+                .split(",")
+                .map((s) => s.trim())
+                .filter((name) => name.length > 0);
+        }
+        else if ((arg === "--exclude-tools" || arg === "-xt") && i + 1 < args.length) {
+            result.excludeTools = args[++i]
+                .split(",")
+                .map((s) => s.trim())
+                .filter((name) => name.length > 0);
+        }
+        else if (arg === "--thinking" && i + 1 < args.length) {
+            const level = args[++i];
+            if (andorraIsValidThinkingLevel(level)) {
+                result.thinking = level;
+            }
+            else {
+                result.diagnostics.push({
+                    type: "warning",
+                    message: `Invalid thinking level "${level}". Valid values: ${VALID_THINKING_LEVELS.join(", ")}`,
+                });
+            }
+        }
+        else if (arg === "--print" || arg === "-p") {
+            result.print = true;
+            const next = args[i + 1];
+            if (next !== undefined && !next.startsWith("@") && (!next.startsWith("-") || next.startsWith("---"))) {
+                result.messages.push(next);
+                i++;
+            }
+        }
+        else if (arg === "--export" && i + 1 < args.length) {
+            result.export = args[++i];
+        }
+        else if ((arg === "--extension" || arg === "-e") && i + 1 < args.length) {
+            result.extensions = result.extensions ?? [];
+            result.extensions.push(args[++i]);
+        }
+        else if (arg === "--no-extensions" || arg === "-ne") {
+            result.noExtensions = true;
+        }
+        else if (arg === "--skill" && i + 1 < args.length) {
+            result.skills = result.skills ?? [];
+            result.skills.push(args[++i]);
+        }
+        else if (arg === "--prompt-template" && i + 1 < args.length) {
+            result.promptTemplates = result.promptTemplates ?? [];
+            result.promptTemplates.push(args[++i]);
+        }
+        else if (arg === "--theme" && i + 1 < args.length) {
+            result.themes = result.themes ?? [];
+            result.themes.push(args[++i]);
+        }
+        else if (arg === "--use-theme") {
+            const themeName = args[i + 1];
+            if (themeName === undefined || themeName.startsWith("-")) {
+                result.diagnostics.push({ type: "error", message: "--use-theme requires a theme name" });
+            }
+            else {
+                result.useTheme = themeName;
+                i++;
+            }
+        }
+        else if (arg === "--no-skills" || arg === "-ns") {
+            result.noSkills = true;
+        }
+        else if (arg === "--no-prompt-templates" || arg === "-np") {
+            result.noPromptTemplates = true;
+        }
+        else if (arg === "--no-themes") {
+            result.noThemes = true;
+        }
+        else if (arg === "--no-context-files" || arg === "-nc") {
+            result.noContextFiles = true;
+        }
+        else if (arg === "--list-models") {
+            // Check if next arg is a search pattern (not a flag or file arg)
+            if (i + 1 < args.length && !args[i + 1].startsWith("-") && !args[i + 1].startsWith("@")) {
+                result.listModels = args[++i];
+            }
+            else {
+                result.listModels = true;
+            }
+        }
+        else if (arg === "--tui-mode") {
+            const mode = args[i + 1];
+            if (mode === "regular" || mode === "fullscreen") {
+                result.tuiMode = mode;
+                i++;
+            }
+            else if (mode === undefined || mode.startsWith("-")) {
+                result.diagnostics.push({ type: "error", message: "--tui-mode requires regular or fullscreen" });
+            }
+            else {
+                i++;
+                result.diagnostics.push({
+                    type: "error",
+                    message: `Invalid TUI mode "${mode}". Valid values: regular, fullscreen`,
+                });
+            }
+        }
+        else if (arg === "--verbose") {
+            result.verbose = true;
+        }
+        else if (arg === "--approve" || arg === "-a") {
+            result.projectTrustOverride = true;
+        }
+        else if (arg === "--no-approve" || arg === "-na") {
+            result.projectTrustOverride = false;
+        }
+        else if (arg === "--offline") {
+            result.offline = true;
+        }
+        else if (arg.startsWith("@")) {
+            result.fileArgs.push(arg.slice(1)); // Remove @ prefix
+        }
+        else if (arg.startsWith("--")) {
+            const eqIndex = arg.indexOf("=");
+            if (eqIndex !== -1) {
+                result.unknownFlags.set(arg.slice(2, eqIndex), arg.slice(eqIndex + 1));
+            }
+            else {
+                const flagName = arg.slice(2);
+                const next = args[i + 1];
+                if (next !== undefined && !next.startsWith("-") && !next.startsWith("@")) {
+                    result.unknownFlags.set(flagName, next);
+                    i++;
+                }
+                else {
+                    result.unknownFlags.set(flagName, true);
+                }
+            }
+        }
+        else if (arg.startsWith("-") && !arg.startsWith("--")) {
+            result.diagnostics.push({ type: "error", message: `Unknown option: ${arg}` });
+        }
+        else if (!arg.startsWith("-")) {
+            result.messages.push(arg);
+        }
+    }
+    return result;
+}
+export function andorraPrintHelp(extensionFlags) {
+    const extensionFlagsText = extensionFlags && extensionFlags.length > 0
+        ? `\n${chalk.bold("Extension CLI Flags:")}\n${extensionFlags
+            .map((flag) => {
+            const value = flag.type === "string" ? " <value>" : "";
+            const description = flag.description ?? `Registered by ${flag.extensionPath}`;
+            return `  --${flag.name}${value}`.padEnd(30) + description;
+        })
+            .join("\n")}\n`
+        : "";
+    console.log(`${chalk.bold(APP_NAME)} - AI coding assistant with read, bash, edit, write tools
+
+${chalk.bold("Usage:")}
+  ${APP_NAME} [options] [--] [@files...] [messages...]
+
+${chalk.bold("Commands:")}
+  ${APP_NAME} install <source> [-l]     Install extension source and add to settings
+  ${APP_NAME} remove <source> [-l]      Remove extension source from settings
+  ${APP_NAME} uninstall <source> [-l]   Alias for remove
+  ${APP_NAME} update [source|self|pi]   Update pi, extensions, or model catalogs
+  ${APP_NAME} list                      List installed extensions from settings
+  ${APP_NAME} config [-l]               Open TUI to enable/disable package resources (Tab switches scope)
+  ${APP_NAME} auth <command>            Print credentials or check provider readiness
+  ${APP_NAME} <command> --help          Show help for install/remove/uninstall/update/list/config/auth
+
+${chalk.bold("Options:")}
+  --provider <name>              Provider name (default: google)
+  --model <pattern>              Model pattern or ID (supports "provider/id" and optional ":<thinking>")
+  --api-key <key>                API key (defaults to env vars)
+  --system-prompt <text>         System prompt (default: coding assistant prompt)
+  --append-system-prompt <text>  Append text or file contents to the system prompt (can be used multiple times)
+  --mode <mode>                  Output mode: text (default), json, or rpc
+  --print, -p                    Non-interactive mode: process prompt and exit
+  --continue, -c                 Continue previous session
+  --resume, -r                   Select a session to resume
+  --session <path|id>            Use specific session file or partial UUID
+  --session-id <id>              Use exact project session ID, creating it if missing
+  --fork <path|id>               Fork specific session file or partial UUID into a new session
+  --session-dir <dir>            Directory for session storage and lookup
+  --no-session                   Don't save session (ephemeral)
+  --name, -n <name>              Set session display name
+  --models <patterns>            Comma-separated model patterns for Ctrl+P cycling
+                                 Supports globs (anthropic/*, *sonnet*) and fuzzy matching
+  --no-tools, -nt                Disable all tools by default (built-in and extension)
+  --no-builtin-tools, -nbt       Disable built-in tools by default but keep extension/custom tools enabled
+  --tools, -t <tools>            Comma-separated allowlist of tool names to enable
+                                 Applies to built-in, extension, and custom tools
+  --exclude-tools, -xt <tools>   Comma-separated denylist of tool names to disable
+                                 Applies to built-in, extension, and custom tools
+  --thinking <level>             Set thinking level: off, minimal, low, medium, high, xhigh, max
+  --extension, -e <path>         Load an extension file (can be used multiple times)
+  --no-extensions, -ne           Disable extension discovery (explicit -e paths still work)
+  --skill <path>                 Load a skill file or directory (can be used multiple times)
+  --no-skills, -ns               Disable skills discovery and loading
+  --prompt-template <path>       Load a prompt template file or directory (can be used multiple times)
+  --no-prompt-templates, -np     Disable prompt template discovery and loading
+  --theme <path>                 Load a theme file or directory (can be used multiple times)
+  --use-theme <name[/name]>      Set the initial interactive theme for this run
+  --no-themes                    Disable theme discovery and loading
+  --no-context-files, -nc        Disable AGENTS.md and CLAUDE.md discovery and loading
+  --export <file>                Export session file to HTML and exit
+  --list-models [search]         List available models (with optional fuzzy search)
+  --verbose                      Force verbose startup (overrides quietStartup setting)
+  --tui-mode <mode>              TUI mode: regular (default) or fullscreen
+  --approve, -a                  Trust project-local files for this run
+  --no-approve, -na              Ignore project-local files for this run
+  --offline                      Disable startup network operations (same as ANDORRA_ENGINE_OFFLINE=1)
+  --                             End option parsing; treat remaining arguments as messages/files
+  --help, -h                     Show this help
+  --version, -v                  Show version number
+
+Extensions can register additional flags (e.g., --plan from plan-mode extension).${extensionFlagsText}
+
+${chalk.bold("Examples:")}
+  # Print a provider API key for an external client
+  ${APP_NAME} auth print-api-key --provider openai
+
+  # Print an OAuth bearer token for an external client (refreshes if expired)
+  ${APP_NAME} auth print-bearer-token --provider openai-codex
+
+  # Interactive mode
+  ${APP_NAME}
+
+  # Interactive mode with initial prompt
+  ${APP_NAME} "List all .ts files in src/"
+
+  # Include files in initial message
+  ${APP_NAME} @prompt.md @image.png "What color is the sky?"
+
+  # Non-interactive mode (process and exit)
+  ${APP_NAME} -p "List all .ts files in src/"
+
+  # Prompt beginning with a dash
+  ${APP_NAME} -p -- "- Summarize these points"
+
+  # Multiple messages (interactive)
+  ${APP_NAME} "Read package.json" "What dependencies do we have?"
+
+  # Continue previous session
+  ${APP_NAME} --continue "What did we discuss?"
+
+  # Start a named session
+  ${APP_NAME} --name "Refactor auth module"
+
+  # Use different model
+  ${APP_NAME} --provider openai --model gpt-4o-mini "Help me refactor this code"
+
+  # Use model with provider prefix (no --provider needed)
+  ${APP_NAME} --model openai/gpt-4o "Help me refactor this code"
+
+  # Use model with thinking level shorthand
+  ${APP_NAME} --model sonnet:high "Solve this complex problem"
+
+  # Limit model cycling to specific models
+  ${APP_NAME} --models claude-sonnet,claude-haiku,gpt-4o
+
+  # Limit to a specific provider with glob pattern
+  ${APP_NAME} --models "github-copilot/*"
+
+  # Cycle models with fixed thinking levels
+  ${APP_NAME} --models sonnet:high,haiku:low
+
+  # Start with a specific thinking level
+  ${APP_NAME} --thinking high "Solve this complex problem"
+
+  # Read-only mode (no file modifications possible)
+  ${APP_NAME} --tools read,grep,find,ls -p "Review the code in src/"
+
+  # Disable one tool while keeping the rest available
+  ${APP_NAME} --exclude-tools ask_question
+
+  # Export a session file to HTML
+  ${APP_NAME} --export ~/${CONFIG_DIR_NAME}/agent/sessions/--path--/session.jsonl
+  ${APP_NAME} --export session.jsonl output.html
+
+${chalk.bold("Environment Variables:")}
+  ANTHROPIC_AUTH_TOKEN             - Anthropic bearer auth token
+  ANTHROPIC_API_KEY                - Anthropic Claude API key
+  ANTHROPIC_OAUTH_TOKEN            - Anthropic OAuth token (alternative to API key)
+  ANT_LING_API_KEY                 - Ant Ling API key
+  OPENAI_API_KEY                   - OpenAI GPT API key
+  AZURE_OPENAI_API_KEY             - Azure OpenAI API key
+  AZURE_OPENAI_BASE_URL            - Azure OpenAI/Cognitive Services base URL (e.g. https://{resource}.openai.azure.com)
+  AZURE_OPENAI_RESOURCE_NAME       - Azure OpenAI resource name (alternative to base URL)
+  AZURE_OPENAI_API_VERSION         - Azure OpenAI API version (default: v1)
+  AZURE_OPENAI_DEPLOYMENT_NAME_MAP - Azure OpenAI model=deployment map (comma-separated)
+  DEEPSEEK_API_KEY                 - DeepSeek API key
+  NVIDIA_API_KEY                   - NVIDIA NIM API key
+  GEMINI_API_KEY                   - Google Gemini API key
+  GROQ_API_KEY                     - Groq API key
+  CEREBRAS_API_KEY                 - Cerebras API key
+  XAI_API_KEY                      - xAI Grok API key
+  FIREWORKS_API_KEY                - Fireworks API key
+  TOGETHER_API_KEY                 - Together AI API key
+  BASETEN_API_KEY                  - Baseten API key
+  OPENROUTER_API_KEY               - OpenRouter API key
+  AI_GATEWAY_API_KEY               - Vercel AI Gateway API key
+  ZAI_API_KEY                      - ZAI Coding Plan API key (Global)
+  ZAI_CODING_CN_API_KEY            - ZAI Coding Plan API key (China)
+  MISTRAL_API_KEY                  - Mistral API key
+  MINIMAX_API_KEY                  - MiniMax API key
+  MOONSHOT_API_KEY                 - Moonshot AI API key
+  OPENCODE_API_KEY                 - OpenCode Zen/OpenCode Go API key
+  KIMI_API_KEY                     - Kimi For Coding API key
+  META_API_KEY                     - Meta Model API key
+  CLOUDFLARE_API_KEY               - Cloudflare API token (Workers AI and AI Gateway)
+  CLOUDFLARE_ACCOUNT_ID            - Cloudflare account id (required for both)
+  CLOUDFLARE_GATEWAY_ID            - Cloudflare AI Gateway slug (required for AI Gateway)
+  QWEN_TOKEN_PLAN_API_KEY          - Qwen Token Plan API key (international region)
+  QWEN_TOKEN_PLAN_CN_API_KEY       - Qwen Token Plan API key (China region)
+  XIAOMI_API_KEY                   - Xiaomi MiMo API key (api.xiaomimimo.com billing)
+  XIAOMI_TOKEN_PLAN_CN_API_KEY     - Xiaomi MiMo Token Plan API key (China region)
+  XIAOMI_TOKEN_PLAN_AMS_API_KEY    - Xiaomi MiMo Token Plan API key (Amsterdam region)
+  XIAOMI_TOKEN_PLAN_SGP_API_KEY    - Xiaomi MiMo Token Plan API key (Singapore region)
+  AWS_PROFILE                      - AWS profile for Amazon Bedrock
+  AWS_ACCESS_KEY_ID                - AWS access key for Amazon Bedrock
+  AWS_SECRET_ACCESS_KEY            - AWS secret key for Amazon Bedrock
+  AWS_BEARER_TOKEN_BEDROCK         - Bedrock API key (bearer token)
+  AWS_REGION                       - AWS region for Amazon Bedrock (e.g., us-east-1)
+  ${ENV_AGENT_DIR.padEnd(32)} - Config directory (default: ~/${CONFIG_DIR_NAME}/agent)
+  ${ENV_SESSION_DIR.padEnd(32)} - Session storage directory (overridden by --session-dir)
+  ANDORRA_ENGINE_PACKAGE_DIR                   - Override package directory (for Nix/Guix store paths)
+  ANDORRA_ENGINE_OFFLINE                       - Disable startup network operations when set to 1/true/yes
+  ANDORRA_ENGINE_TELEMETRY                     - Override install telemetry when set to 1/true/yes or 0/false/no
+  ANDORRA_ENGINE_SHARE_VIEWER_URL              - Base URL for /share command (default: https://pi.dev/session/)
+
+${chalk.bold("Built-in Tool Names:")}
+  read       - Read file contents
+  bash       - Execute bash commands
+  powershell - Execute PowerShell commands on Windows
+  edit       - Edit files with find/replace
+  write      - Write files (creates/overwrites)
+  grep       - Search file contents (read-only, off by default)
+  find       - Find files by glob pattern (read-only, off by default)
+  ls         - List directory contents (read-only, off by default)
+`);
+}

package/dist/vendor/engine/runtime/coding-agent/cli/auth-check.d.ts

@@ -0,0 +1,18 @@
+import type { CredentialStore } from "../../ai/index.js";
+import { AndorraModelRuntime } from "../core/model-runtime.js";
+import type { Args } from "./args.js";
+export type AuthCheckStatus = "ready" | "not_ready" | "invalid";
+export type AuthCheckReason = "provider_not_found" | "credentials_not_configured" | "credential_not_available" | "invalid_state";
+export interface AuthCheckResult {
+    status: AuthCheckStatus;
+    provider: string;
+    reason?: AuthCheckReason;
+    authType?: "api_key" | "oauth";
+}
+export declare function andorraCheckProviderAuth(args: Args, modelRuntime: AndorraModelRuntime, options?: {
+    refresh: boolean;
+}): Promise<AuthCheckResult>;
+export declare function andorraGetProviderCredential(providerId: string, modelRuntime: AndorraModelRuntime, credentials: CredentialStore, options: {
+    refresh: boolean;
+}): Promise<string | undefined>;
+export declare function andorraCreateAuthCheckModelRuntime(credentials: CredentialStore): Promise<AndorraModelRuntime>;

package/dist/vendor/engine/runtime/coding-agent/cli/auth-check.js

@@ -0,0 +1,49 @@
+import { andorraResolveCliModel } from "../core/model-resolver.js";
+import { AndorraModelRuntime } from "../core/model-runtime.js";
+import { AndorraInMemoryCodingAgentModelsStore } from "../core/models-store.js";
+import { AndorraAuthCommandError, andorraGetAuthCredential, andorraValidateAuthCommandArgs } from "./auth-command.js";
+export async function andorraCheckProviderAuth(args, modelRuntime, options = { refresh: false }) {
+    const { provider: cliProvider, model: cliModel } = andorraValidateAuthCommandArgs(args, "check");
+    let provider = cliProvider;
+    if (cliModel) {
+        const resolved = andorraResolveCliModel({ cliProvider, cliModel, modelRuntime });
+        if (resolved.error || !resolved.model) {
+            throw new AndorraAuthCommandError(resolved.error ?? `Unable to resolve model "${cliModel}"`);
+        }
+        provider = resolved.model.provider;
+    }
+    if (!provider)
+        throw new AndorraAuthCommandError("Unable to resolve an auth provider");
+    if (modelRuntime.getError()) {
+        return { status: "invalid", provider, reason: "invalid_state" };
+    }
+    if (!modelRuntime.getProvider(provider)) {
+        return { status: "not_ready", provider, reason: "provider_not_found" };
+    }
+    try {
+        const auth = await modelRuntime.checkAuth(provider);
+        if (!auth)
+            return { status: "not_ready", provider, reason: "credentials_not_configured" };
+        if (options.refresh && !(await modelRuntime.getAuth(provider))) {
+            return { status: "not_ready", provider, reason: "credentials_not_configured" };
+        }
+        return { status: "ready", provider, authType: auth.type };
+    }
+    catch {
+        return { status: "invalid", provider, reason: "invalid_state" };
+    }
+}
+export async function andorraGetProviderCredential(providerId, modelRuntime, credentials, options) {
+    const credential = await credentials.read(providerId);
+    if (!options.refresh && credential?.type === "oauth")
+        return credential.access;
+    return andorraGetAuthCredential(await modelRuntime.getAuth(providerId));
+}
+export async function andorraCreateAuthCheckModelRuntime(credentials) {
+    return AndorraModelRuntime.create({
+        credentials,
+        modelsStore: new AndorraInMemoryCodingAgentModelsStore(),
+        allowModelNetwork: false,
+        refreshOnCreate: false,
+    });
+}

package/dist/vendor/engine/runtime/coding-agent/cli/auth-command.d.ts

@@ -0,0 +1,23 @@
+import type { AuthResult } from "../../ai/index.js";
+import type { Args } from "./args.js";
+export type AuthCommandKind = "check" | "api_key" | "bearer_token";
+export interface AuthCommand {
+    kind: AuthCommandKind;
+    args: string[];
+    json: boolean;
+    credentials: boolean;
+    noRefresh: boolean;
+    minExpiryMs?: number;
+}
+export declare class AndorraAuthCommandError extends Error {
+}
+export declare function andorraGetAuthCommandName(kind: AuthCommandKind): string;
+export declare function andorraGetAuthCommandUsage(kind: AuthCommandKind): string;
+export declare function andorraIsAuthCommandHelp(args: string[]): boolean;
+export declare function andorraPrintAuthCommandHelp(): void;
+export declare function andorraParseAuthCommand(args: string[]): AuthCommand | undefined;
+export declare function andorraValidateAuthCommandArgs(args: Args, kind: AuthCommandKind): {
+    provider?: string;
+    model?: string;
+};
+export declare function andorraGetAuthCredential(auth: AuthResult | undefined): string | undefined;

package/dist/vendor/engine/runtime/coding-agent/cli/auth-command.js

@@ -0,0 +1,102 @@
+import { APP_NAME } from "../config.js";
+export class AndorraAuthCommandError extends Error {
+}
+const AUTH_COMMAND_USAGE = {
+    check: `${APP_NAME} auth check --provider <provider> [--json] [--credentials] [--no-refresh]`,
+    api_key: `${APP_NAME} auth print-api-key --provider <provider> [--model <model>]`,
+    bearer_token: `${APP_NAME} auth print-bearer-token --provider <provider> [--model <model>] [--min-expiry <duration>]`,
+};
+export function andorraGetAuthCommandName(kind) {
+    return kind === "check" ? "auth check" : kind === "api_key" ? "auth print-api-key" : "auth print-bearer-token";
+}
+export function andorraGetAuthCommandUsage(kind) {
+    return AUTH_COMMAND_USAGE[kind];
+}
+export function andorraIsAuthCommandHelp(args) {
+    return (args[0] === "auth" &&
+        (args[1] === undefined || args[1] === "help" || args.includes("--help") || args.includes("-h")));
+}
+export function andorraPrintAuthCommandHelp() {
+    console.log(`Usage:
+  pi auth print-api-key [--provider <provider>] [--model <model>]
+  pi auth print-bearer-token [--provider <provider>] [--model <model>] [--min-expiry <duration>]
+  pi auth check [--provider <provider>] [--model <model>] [--json] [--credentials] [--no-refresh]
+
+Auth commands require at least one of --provider or --model. Checks refresh expired OAuth credentials by default; --no-refresh prevents this. --credentials emits the credential, or includes it in JSON output.`);
+}
+export function andorraParseAuthCommand(args) {
+    if (args[0] !== "auth")
+        return undefined;
+    const kind = args[1] === "check"
+        ? "check"
+        : args[1] === "print-api-key"
+            ? "api_key"
+            : args[1] === "print-bearer-token"
+                ? "bearer_token"
+                : undefined;
+    if (!kind) {
+        throw new AndorraAuthCommandError(`Unknown auth command "${args[1] ?? ""}". Use "${APP_NAME} auth print-api-key", "${APP_NAME} auth print-bearer-token", or "${APP_NAME} auth check".`);
+    }
+    const commandArgs = [];
+    let json = false;
+    let credentials = false;
+    let noRefresh = false;
+    let minExpiryMs;
+    for (let index = 2; index < args.length; index++) {
+        const arg = args[index];
+        if (arg === "--min-expiry") {
+            if (kind !== "bearer_token")
+                throw new AndorraAuthCommandError("--min-expiry is only supported by print-bearer-token");
+            const value = args[++index];
+            const match = value ? /^(\d+)(ms|s|m|h)$/iu.exec(value) : undefined;
+            if (!match)
+                throw new AndorraAuthCommandError("--min-expiry must use a duration such as 30m or 1h");
+            const amount = Number(match[1]);
+            const unit = match[2];
+            minExpiryMs = amount * (unit === "ms" ? 1 : unit === "s" ? 1_000 : unit === "m" ? 60_000 : 3_600_000);
+            continue;
+        }
+        if (arg === "--json" || arg === "--credentials" || arg === "--no-refresh") {
+            if (kind !== "check")
+                throw new AndorraAuthCommandError(`${arg} is only supported by auth check`);
+            if (arg === "--json")
+                json = true;
+            else if (arg === "--credentials")
+                credentials = true;
+            else
+                noRefresh = true;
+            continue;
+        }
+        commandArgs.push(arg);
+    }
+    return minExpiryMs === undefined
+        ? { kind, args: commandArgs, json, credentials, noRefresh }
+        : { kind, args: commandArgs, json, credentials, noRefresh, minExpiryMs };
+}
+export function andorraValidateAuthCommandArgs(args, kind) {
+    const provider = args.provider?.trim() || undefined;
+    const model = args.model?.trim() || undefined;
+    if (args.unknownFlags.size > 0) {
+        const option = args.unknownFlags.keys().next().value;
+        throw new AndorraAuthCommandError(`Unknown option --${option} for "${andorraGetAuthCommandName(kind)}".`);
+    }
+    if (args.apiKey !== undefined || args.messages.length > 0 || args.fileArgs.length > 0) {
+        throw new AndorraAuthCommandError("Auth commands only accept --provider and --model");
+    }
+    if (kind === "check") {
+        if (!provider && !model) {
+            throw new AndorraAuthCommandError("Auth checks require --provider <provider> or --model <model>");
+        }
+        return { provider, model };
+    }
+    if (!provider && !model) {
+        throw new AndorraAuthCommandError("Credential printing requires --provider <provider> or --model <model>");
+    }
+    return { provider, model };
+}
+export function andorraGetAuthCredential(auth) {
+    if (auth?.auth.apiKey)
+        return auth.auth.apiKey;
+    const authorization = Object.entries(auth?.auth.headers ?? {}).find(([name]) => name.toLowerCase() === "authorization")?.[1];
+    return typeof authorization === "string" ? /^Bearer\s+(.+)$/iu.exec(authorization)?.[1] : undefined;
+}

package/dist/vendor/engine/runtime/coding-agent/cli/config-selector.d.ts

@@ -0,0 +1,15 @@
+/**
+ * TUI config selector for `pi config` command
+ */
+import type { AndorraSettingsManager } from "../core/settings-manager.js";
+import { type ScopedResolvedPaths } from "../modes/interactive/components/config-selector.js";
+export interface ConfigSelectorOptions {
+    resolvedPaths: ScopedResolvedPaths;
+    settingsManager: AndorraSettingsManager;
+    cwd: string;
+    agentDir: string;
+    writeScope: "global" | "project";
+    projectModeAvailable: boolean;
+}
+/** Show TUI config selector and return when closed */
+export declare function andorraSelectConfig(options: ConfigSelectorOptions): Promise<void>;