@av-pi-studio/protocol 0.0.92 → 0.0.94

package/dist/messages.js

@@ -778,6 +778,251 @@ export const extensionPacksSetResponseSchema = z
 })
     .passthrough();
 // ===========================================================================
+// Provider auth (sprint-055, features/provider-auth-rpc.md) — remote-driven Pi login flows.
+// Five request/response pairs get real schemas + union membership (durable, multi-client RPC
+// surface). The per-session progress push, `provider_auth_flow_event`, is deliberately NOT a
+// union member — like `checkout_status_update`/`file_changed`, it rides
+// `sessionMessageBaseSchema`'s passthrough fallback. Do not "fix" that by adding a schema for it.
+//
+// Every response requires `ok`; a domain failure is `{ ok: false, error: "<reason>" }` in the
+// payload, never a chosen `rpc_error` code (`ws/router.ts` only emits `unknown_message_type` /
+// `handler_error`, both reserved for transport-level failures).
+// ===========================================================================
+export const providerAuthTypeSchema = z.enum(["api_key", "oauth"]);
+/** One provider's auth capability + current state (`configured: "unknown"` = a bounded
+ *  `checkAuth()` timed out — see sprint-054's `checkAuthBounded` precedent). */
+export const providerAuthInfoSchema = z
+    .object({
+    id: z.string(),
+    name: z.string(),
+    authTypes: z.array(providerAuthTypeSchema),
+    oauthLoginLabel: z.string().optional(),
+    oauthIsSubscription: z.boolean().optional(),
+    configured: z.union([z.boolean(), z.literal("unknown")]),
+    configuredType: providerAuthTypeSchema.optional(),
+    configuredSource: z.string().optional(),
+})
+    .passthrough();
+export const providerAuthListRequestSchema = z
+    .object({
+    type: z.literal("provider_auth_list_request"),
+    requestId: z.string(),
+})
+    .passthrough();
+export const providerAuthListResponseSchema = z
+    .object({
+    type: z.literal("provider_auth_list_response"),
+    requestId: z.string(),
+    payload: z
+        .object({
+        ok: z.boolean(),
+        providers: z.array(providerAuthInfoSchema).default([]),
+        error: z.string().optional(),
+    })
+        .passthrough(),
+})
+    .passthrough();
+export const providerAuthLoginRequestSchema = z
+    .object({
+    type: z.literal("provider_auth_login_request"),
+    requestId: z.string(),
+    provider: z.string(),
+    authType: providerAuthTypeSchema,
+})
+    .passthrough();
+export const providerAuthLoginResponseSchema = z
+    .object({
+    type: z.literal("provider_auth_login_response"),
+    requestId: z.string(),
+    payload: z
+        .object({
+        ok: z.boolean(),
+        flowId: z.string().optional(),
+        error: z.string().optional(),
+    })
+        .passthrough(),
+})
+    .passthrough();
+export const providerAuthRespondRequestSchema = z
+    .object({
+    type: z.literal("provider_auth_respond_request"),
+    requestId: z.string(),
+    flowId: z.string(),
+    promptId: z.string(),
+    value: z.string(),
+})
+    .passthrough();
+export const providerAuthRespondResponseSchema = z
+    .object({
+    type: z.literal("provider_auth_respond_response"),
+    requestId: z.string(),
+    payload: z
+        .object({
+        ok: z.boolean(),
+        error: z.string().optional(),
+    })
+        .passthrough(),
+})
+    .passthrough();
+export const providerAuthCancelRequestSchema = z
+    .object({
+    type: z.literal("provider_auth_cancel_request"),
+    requestId: z.string(),
+    flowId: z.string(),
+})
+    .passthrough();
+/** Idempotent — `ok: true` even when the named flow was already gone. */
+export const providerAuthCancelResponseSchema = z
+    .object({
+    type: z.literal("provider_auth_cancel_response"),
+    requestId: z.string(),
+    payload: z.object({ ok: z.boolean() }).passthrough(),
+})
+    .passthrough();
+export const providerAuthLogoutRequestSchema = z
+    .object({
+    type: z.literal("provider_auth_logout_request"),
+    requestId: z.string(),
+    provider: z.string(),
+})
+    .passthrough();
+/** `stillConfigured` flags an ambient credential (e.g. an env var) surviving the logout. */
+export const providerAuthLogoutResponseSchema = z
+    .object({
+    type: z.literal("provider_auth_logout_response"),
+    requestId: z.string(),
+    payload: z
+        .object({
+        ok: z.boolean(),
+        stillConfigured: z.boolean().optional(),
+        error: z.string().optional(),
+    })
+        .passthrough(),
+})
+    .passthrough();
+// ===========================================================================
+// Extension UI (features/extension-ui-rpc.md) — additive, new in sprint-066
+// ===========================================================================
+/**
+ * A pending extension-UI dialog awaiting a client answer (list/reconnect-catch-up shape). Method
+ * semantics (which fields `payload` carries, how to render it) are entirely Pi's business — the
+ * daemon never interprets `payload`, only correlates and forwards it.
+ */
+export const agentUiPendingRequestSchema = z
+    .object({
+    requestId: z.string(),
+    agentId: z.string(),
+    method: z.string(),
+    expectsResponse: z.boolean(),
+    payload: z.record(z.unknown()),
+    surfaceKey: z.string().optional(),
+    timeoutMs: z.number().optional(),
+    createdAt: wireTimestampSchema,
+})
+    .passthrough();
+/**
+ * A retained, last-value-wins extension-UI surface (status line, widget, title). Deleted (not
+ * listed) once its owning method sends a clearing update — see `agent_ui_request.removed`.
+ */
+export const agentUiSurfaceSchema = z
+    .object({
+    agentId: z.string(),
+    method: z.string(),
+    surfaceKey: z.string(),
+    payload: z.record(z.unknown()),
+    updatedAt: wireTimestampSchema,
+})
+    .passthrough();
+/**
+ * Agent-scoped broadcast to every client — one per provider UI event, exactly like
+ * `agentPermissionRequestSchema`, not the `sessionMessageBaseSchema` passthrough family (this is a
+ * per-agent broadcast, not a per-session subscription push). `requestId` is daemon-minted, never the
+ * provider's own id. `removed: true` marks a surface-clearing update (no `payload` fields to render).
+ */
+export const agentUiRequestSchema = z
+    .object({
+    type: z.literal("agent_ui_request"),
+    requestId: z.string(),
+    agentId: z.string(),
+    method: z.string(),
+    expectsResponse: z.boolean(),
+    payload: z.record(z.unknown()),
+    surfaceKey: z.string().optional(),
+    removed: z.boolean().optional(),
+    timeoutMs: z.number().optional(),
+    createdAt: wireTimestampSchema,
+})
+    .passthrough();
+/**
+ * Broadcast that lets every client dismiss a dialog once it is no longer answerable. `reason` is
+ * deliberately an open string (`answered` | `cancelled` | `timeout` | `aborted` documented, not
+ * enumerated) so the daemon can extend its taxonomy without narrowing the wire for older clients.
+ */
+export const agentUiResolvedSchema = z
+    .object({
+    type: z.literal("agent_ui_resolved"),
+    requestId: z.string(),
+    agentId: z.string(),
+    reason: z.string(),
+})
+    .passthrough();
+/**
+ * The answer body forwarded to the provider. Deliberately permissive (every field optional,
+ * `.passthrough()`): method → response-shape validation is Pi's business, and a strict union keyed
+ * on `method` would reject a shape a future Pi UI method introduces, blocking that extension forever
+ * on a response the daemon refused to forward.
+ */
+export const agentUiResponseSchema = z
+    .object({
+    value: z.string().optional(),
+    confirmed: z.boolean().optional(),
+    cancelled: z.boolean().optional(),
+})
+    .passthrough();
+export const agentUiRespondRequestSchema = z
+    .object({
+    type: z.literal("agent_ui_respond_request"),
+    requestId: z.string(),
+    uiRequestId: z.string(),
+    response: agentUiResponseSchema,
+})
+    .passthrough();
+/** `error` is an open string (`not_found` | `unsupported` documented, not enumerated). */
+export const agentUiRespondResponseSchema = z
+    .object({
+    type: z.literal("agent_ui_respond_response"),
+    requestId: z.string(),
+    payload: z
+        .object({
+        ok: z.boolean(),
+        error: z.string().optional(),
+    })
+        .passthrough(),
+})
+    .passthrough();
+/** Reconnect catch-up: list current pending dialogs + retained surfaces, all agents or one. */
+export const agentUiListRequestSchema = z
+    .object({
+    type: z.literal("agent_ui_list_request"),
+    requestId: z.string(),
+    agentId: z.string().optional(),
+})
+    .passthrough();
+export const agentUiListResponseSchema = z
+    .object({
+    type: z.literal("agent_ui_list_response"),
+    requestId: z.string(),
+    payload: z
+        .object({
+        ok: z.boolean(),
+        pending: z.array(agentUiPendingRequestSchema),
+        surfaces: z.array(agentUiSurfaceSchema),
+        error: z.string().optional(),
+    })
+        .passthrough(),
+})
+    .passthrough();
+// ===========================================================================
 // RPC error
 // ===========================================================================
 export const rpcErrorSchema = z.object({
@@ -846,6 +1091,22 @@ export const sessionMessageSchema = z.discriminatedUnion("type", [
     extensionPacksListResponseSchema,
     extensionPacksSetRequestSchema,
     extensionPacksSetResponseSchema,
+    providerAuthListRequestSchema,
+    providerAuthListResponseSchema,
+    providerAuthLoginRequestSchema,
+    providerAuthLoginResponseSchema,
+    providerAuthRespondRequestSchema,
+    providerAuthRespondResponseSchema,
+    providerAuthCancelRequestSchema,
+    providerAuthCancelResponseSchema,
+    providerAuthLogoutRequestSchema,
+    providerAuthLogoutResponseSchema,
+    agentUiRequestSchema,
+    agentUiResolvedSchema,
+    agentUiRespondRequestSchema,
+    agentUiRespondResponseSchema,
+    agentUiListRequestSchema,
+    agentUiListResponseSchema,
     rpcErrorSchema,
 ]);
 /**

package/dist/provider-manifest.d.ts

@@ -23,6 +23,7 @@ export declare const agentCapabilityFlagsSchema: z.ZodObject<{
     supportsRewindFiles: z.ZodOptional<z.ZodBoolean>;
     supportsRewindBoth: z.ZodOptional<z.ZodBoolean>;
     supportsSteering: z.ZodOptional<z.ZodBoolean>;
+    supportsExtensionUi: z.ZodOptional<z.ZodBoolean>;
 }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
     supportsStreaming: z.ZodBoolean;
     supportsSessionPersistence: z.ZodBoolean;
@@ -34,6 +35,7 @@ export declare const agentCapabilityFlagsSchema: z.ZodObject<{
     supportsRewindFiles: z.ZodOptional<z.ZodBoolean>;
     supportsRewindBoth: z.ZodOptional<z.ZodBoolean>;
     supportsSteering: z.ZodOptional<z.ZodBoolean>;
+    supportsExtensionUi: z.ZodOptional<z.ZodBoolean>;
 }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
     supportsStreaming: z.ZodBoolean;
     supportsSessionPersistence: z.ZodBoolean;
@@ -45,6 +47,7 @@ export declare const agentCapabilityFlagsSchema: z.ZodObject<{
     supportsRewindFiles: z.ZodOptional<z.ZodBoolean>;
     supportsRewindBoth: z.ZodOptional<z.ZodBoolean>;
     supportsSteering: z.ZodOptional<z.ZodBoolean>;
+    supportsExtensionUi: z.ZodOptional<z.ZodBoolean>;
 }, z.ZodTypeAny, "passthrough">>;
 export type AgentCapabilityFlags = z.infer<typeof agentCapabilityFlagsSchema>;
 /** UI metadata for a provider mode (plan/default/full-access/...). */
@@ -104,6 +107,7 @@ export declare const providerDefinitionSchema: z.ZodObject<{
         supportsRewindFiles: z.ZodOptional<z.ZodBoolean>;
         supportsRewindBoth: z.ZodOptional<z.ZodBoolean>;
         supportsSteering: z.ZodOptional<z.ZodBoolean>;
+        supportsExtensionUi: z.ZodOptional<z.ZodBoolean>;
     }, "passthrough", z.ZodTypeAny, z.objectOutputType<{
         supportsStreaming: z.ZodBoolean;
         supportsSessionPersistence: z.ZodBoolean;
@@ -115,6 +119,7 @@ export declare const providerDefinitionSchema: z.ZodObject<{
         supportsRewindFiles: z.ZodOptional<z.ZodBoolean>;
         supportsRewindBoth: z.ZodOptional<z.ZodBoolean>;
         supportsSteering: z.ZodOptional<z.ZodBoolean>;
+        supportsExtensionUi: z.ZodOptional<z.ZodBoolean>;
     }, z.ZodTypeAny, "passthrough">, z.objectInputType<{
         supportsStreaming: z.ZodBoolean;
         supportsSessionPersistence: z.ZodBoolean;
@@ -126,6 +131,7 @@ export declare const providerDefinitionSchema: z.ZodObject<{
         supportsRewindFiles: z.ZodOptional<z.ZodBoolean>;
         supportsRewindBoth: z.ZodOptional<z.ZodBoolean>;
         supportsSteering: z.ZodOptional<z.ZodBoolean>;
+        supportsExtensionUi: z.ZodOptional<z.ZodBoolean>;
     }, z.ZodTypeAny, "passthrough">>;
 }, "strip", z.ZodTypeAny, {
     id: string;
@@ -150,6 +156,7 @@ export declare const providerDefinitionSchema: z.ZodObject<{
         supportsRewindFiles?: boolean | undefined;
         supportsRewindBoth?: boolean | undefined;
         supportsSteering?: boolean | undefined;
+        supportsExtensionUi?: boolean | undefined;
     } & {
         [k: string]: unknown;
     };
@@ -176,6 +183,7 @@ export declare const providerDefinitionSchema: z.ZodObject<{
         supportsRewindFiles?: boolean | undefined;
         supportsRewindBoth?: boolean | undefined;
         supportsSteering?: boolean | undefined;
+        supportsExtensionUi?: boolean | undefined;
     } & {
         [k: string]: unknown;
     };

package/dist/provider-manifest.js

@@ -11,7 +11,8 @@ export const providerIdSchema = z.string().regex(/^[a-z][a-z0-9-]*$/, "invalid p
 /** Mode danger/intent tier driving UI color. */
 export const colorTierSchema = z.enum(["safe", "moderate", "dangerous", "planning"]);
 /** Per-provider capability flags. */
-export const agentCapabilityFlagsSchema = z.object({
+export const agentCapabilityFlagsSchema = z
+    .object({
     supportsStreaming: z.boolean(),
     supportsSessionPersistence: z.boolean(),
     supportsDynamicModes: z.boolean(),
@@ -25,7 +26,12 @@ export const agentCapabilityFlagsSchema = z.object({
     // Steering capability (features/agent-sessions.md § Steering) — additive, optional. When true,
     // the provider accepts `steer`/`follow_up` messages injected into a live turn.
     supportsSteering: z.boolean().optional(),
-}).passthrough();
+    // Extension UI capability (features/extension-ui-rpc.md) — additive, optional. When true, the
+    // provider's `AgentSession` implements `onUiRequest`/`respondToUi` and dialogs/fire-and-forget
+    // extension UI methods are forwarded to clients instead of being auto-cancelled/dropped.
+    supportsExtensionUi: z.boolean().optional(),
+})
+    .passthrough();
 /** UI metadata for a provider mode (plan/default/full-access/...). */
 export const providerModeSchema = z.object({
     id: z.string(),

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@av-pi-studio/protocol",
-  "version": "0.0.92",
+  "version": "0.0.94",
   "files": [
     "dist",
     "!dist/**/*.map",